From c35773d33780f6f19fdbca01efdfc018339bed29 Mon Sep 17 00:00:00 2001
From: SowinskiBraeden <braeden@sowinski.dev>
Date: Sun, 15 Mar 2026 14:23:17 -0700
Subject: [PATCH 01/83] initial commit

---
 .env.example                   |   3 +
 .gitignore                     |   4 +
 README.md                      |  86 +++++
 app.py                         | 207 +++++++++++
 requirements.txt               |   1 +
 static/css/style.css           | 609 +++++++++++++++++++++++++++++++++
 stats.py                       | 285 +++++++++++++++
 storage.py                     | 102 ++++++
 templates/admin_dashboard.html | 120 +++++++
 templates/admin_login.html     |  23 ++
 templates/base.html            |  49 +++
 templates/leaderboard.html     | 335 ++++++++++++++++++
 templates/player_detail.html   | 141 ++++++++
 templates/session_detail.html  |  82 +++++
 templates/sessions.html        |  48 +++
 15 files changed, 2095 insertions(+)
 create mode 100644 .env.example
 create mode 100644 .gitignore
 create mode 100644 README.md
 create mode 100644 app.py
 create mode 100644 requirements.txt
 create mode 100644 static/css/style.css
 create mode 100644 stats.py
 create mode 100644 storage.py
 create mode 100644 templates/admin_dashboard.html
 create mode 100644 templates/admin_login.html
 create mode 100644 templates/base.html
 create mode 100644 templates/leaderboard.html
 create mode 100644 templates/player_detail.html
 create mode 100644 templates/session_detail.html
 create mode 100644 templates/sessions.html

diff --git a/.env.example b/.env.example
new file mode 100644
index 0000000..d072de1
--- /dev/null
+++ b/.env.example
@@ -0,0 +1,3 @@
+SECRET_KEY=replace-this-with-a-long-random-string
+ADMIN_USERNAME=admin
+ADMIN_PASSWORD=replace-this-password
diff --git a/.gitignore b/.gitignore
new file mode 100644
index 0000000..dc0553c
--- /dev/null
+++ b/.gitignore
@@ -0,0 +1,4 @@
+.env
+/__pycache__/*
+/.venv/*
+/data/*
diff --git a/README.md b/README.md
new file mode 100644
index 0000000..a8b29e4
--- /dev/null
+++ b/README.md
@@ -0,0 +1,86 @@
+# Poker Portal
+
+A small server-rendered poker ledger app for low-stakes no-limit hold'em nights.
+
+## Stack
+
+- Python
+- Flask
+- Jinja templates
+- Chart.js
+- Custom CSS
+- Append-only CSV event ledger
+
+## What this MVP does
+
+- Public all-time leaderboard
+- Public session archive
+- Public per-player stat pages
+- Admin-only login for adding ledger events
+- Append-only `entries.csv` audit trail
+- Buy-ins, cash-outs, note-only events, and correction events using negative amounts
+- Cumulative profit chart and player charts
+
+## Ledger model
+
+The app treats the CSV as an append-only audit trail.
+
+Each row is one event:
+
+- `buyin`
+- `cashout`
+- `note`
+
+This means you do not edit old rows when something changes. Instead, you append:
+
+- another buy-in row for a rebuy
+- another cash-out row if they cash more later
+- a negative amount to correct a mistaken buy-in or cash-out
+- a `note` row for bookkeeping context
+
+## CSV format
+
+`data/entries.csv`
+
+```csv
+id,created_at,session_date,player_name,event_type,amount_cents,note,actor
+```
+
+## Run locally
+
+```bash
+python -m venv .venv
+source .venv/bin/activate
+pip install -r requirements.txt
+cp .env.example .env
+export $(grep -v '^#' .env | xargs)
+python app.py
+```
+
+Open:
+
+- public site: `http://127.0.0.1:5000/leaderboard`
+- admin login: `http://127.0.0.1:5000/admin/login`
+
+## Default environment values
+
+The app reads these environment variables:
+
+- `SECRET_KEY`
+- `ADMIN_USERNAME`
+- `ADMIN_PASSWORD`
+
+If you do not set them, the app falls back to insecure defaults for local development only.
+
+## Suggested next steps
+
+- Add session filters like last 5, 10, 20, all
+- Add player color editing
+- Add export/import tools
+- Add session status like open and closed
+- Replace CSV storage with SQLite later without changing the page layer
+- Add reverse proxy deployment with Caddy or Nginx
+
+## Deploy notes
+
+For a private home-hosted deployment, I would run this behind Caddy or Nginx and set real environment variables instead of using defaults.
diff --git a/app.py b/app.py
new file mode 100644
index 0000000..e0adcc4
--- /dev/null
+++ b/app.py
@@ -0,0 +1,207 @@
+from __future__ import annotations
+
+import os
+from pathlib import Path
+
+from flask import Flask, flash, redirect, render_template, request, session, url_for
+
+from stats import (
+    build_leaderboard,
+    build_session_summaries,
+    cents_to_dollars,
+    cumulative_profit_series,
+    player_session_series,
+    safe_date_label,
+    session_events,
+    unique_player_names,
+)
+from storage import append_event, ensure_data_file, load_events
+
+BASE_DIR = Path(__file__).resolve().parent
+DATA_PATH = BASE_DIR / "data" / "entries.csv"
+ENV_PATH = BASE_DIR / ".env"
+
+
+def load_local_env(env_path: Path) -> None:
+    if not env_path.exists():
+        return
+
+    for raw_line in env_path.read_text(encoding="utf-8").splitlines():
+        line = raw_line.strip()
+        if not line or line.startswith("#") or "=" not in line:
+            continue
+
+        key, value = line.split("=", 1)
+        key = key.strip()
+        value = value.strip().strip('"').strip("'")
+        os.environ.setdefault(key, value)
+
+
+load_local_env(ENV_PATH)
+
+app = Flask(__name__)
+app.config["SECRET_KEY"] = os.getenv("SECRET_KEY", "change-this-before-deploying")
+app.config["ADMIN_USERNAME"] = os.getenv("ADMIN_USERNAME", "admin")
+app.config["ADMIN_PASSWORD"] = os.getenv("ADMIN_PASSWORD", "change-me")
+app.config["SESSION_COOKIE_HTTPONLY"] = True
+app.config["SESSION_COOKIE_SAMESITE"] = "Lax"
+app.config["SESSION_COOKIE_NAME"] = "poker_portal_session"
+
+ensure_data_file(DATA_PATH)
+app.jinja_env.filters["money"] = cents_to_dollars
+app.jinja_env.filters["pretty_date"] = safe_date_label
+
+
+def is_admin() -> bool:
+    return bool(session.get("is_admin"))
+
+
+@app.context_processor
+def inject_globals() -> dict[str, object]:
+    return {"is_admin": is_admin()}
+
+
+@app.get("/")
+def home() -> str:
+    return redirect(url_for("leaderboard"))
+
+
+@app.get("/leaderboard")
+def leaderboard() -> str:
+    events = load_events(DATA_PATH)
+    sessions = build_session_summaries(events)
+    board = build_leaderboard(sessions)
+    chart_data = cumulative_profit_series(sessions)
+    return render_template(
+        "leaderboard.html",
+        leaderboard=board,
+        session_count=len(sessions),
+        chart_data=chart_data,
+    )
+
+
+@app.get("/sessions")
+def sessions() -> str:
+    events = load_events(DATA_PATH)
+    session_summaries = build_session_summaries(events)
+    return render_template("sessions.html", sessions=session_summaries)
+
+
+@app.get("/sessions/<session_date>")
+def session_detail(session_date: str) -> str:
+    events = load_events(DATA_PATH)
+    sessions = build_session_summaries(events)
+    target_session = next(
+        (
+            session_summary
+            for session_summary in sessions
+            if session_summary.session_date == session_date
+        ),
+        None,
+    )
+    if target_session is None:
+        flash("That session was not found.", "error")
+        return redirect(url_for("sessions"))
+
+    return render_template(
+        "session_detail.html",
+        session=target_session,
+        raw_events=session_events(events, session_date),
+    )
+
+
+@app.get("/players/<player_name>")
+def player_detail(player_name: str) -> str:
+    events = load_events(DATA_PATH)
+    sessions = build_session_summaries(events)
+    board = build_leaderboard(sessions)
+    player_stats = next(
+        (player for player in board if player.player_name == player_name), None
+    )
+    if player_stats is None:
+        flash("That player was not found.", "error")
+        return redirect(url_for("leaderboard"))
+
+    chart_data = player_session_series(sessions, player_name)
+    return render_template(
+        "player_detail.html",
+        player=player_stats,
+        chart_data=chart_data,
+    )
+
+
+@app.route("/admin/login", methods=["GET", "POST"])
+def admin_login() -> str:
+    if request.method == "POST":
+        username = request.form.get("username", "").strip()
+        password = request.form.get("password", "")
+
+        if (
+            username == app.config["ADMIN_USERNAME"]
+            and password == app.config["ADMIN_PASSWORD"]
+        ):
+            session["is_admin"] = True
+            flash("Admin login successful.", "success")
+            return redirect(url_for("admin_dashboard"))
+
+        flash("Invalid admin credentials.", "error")
+
+    return render_template("admin_login.html")
+
+
+@app.post("/admin/logout")
+def admin_logout() -> str:
+    session.clear()
+    flash("Logged out.", "success")
+    return redirect(url_for("leaderboard"))
+
+
+@app.route("/admin", methods=["GET", "POST"])
+def admin_dashboard() -> str:
+    if not is_admin():
+        flash("Admin login required.", "error")
+        return redirect(url_for("admin_login"))
+
+    if request.method == "POST":
+        session_date = request.form.get("session_date", "").strip()
+        player_name = request.form.get("player_name", "").strip()
+        event_type = request.form.get("event_type", "").strip()
+        amount_raw = request.form.get("amount", "0").strip()
+        note = request.form.get("note", "").strip()
+
+        if not session_date or not player_name or not event_type:
+            flash("Session date, player name, and event type are required.", "error")
+            return redirect(url_for("admin_dashboard"))
+
+        try:
+            amount_cents = 0 if event_type == "note" else round(float(amount_raw) * 100)
+        except ValueError:
+            flash("Amount must be a valid number.", "error")
+            return redirect(url_for("admin_dashboard"))
+
+        append_event(
+            DATA_PATH,
+            session_date=session_date,
+            player_name=player_name,
+            event_type=event_type,
+            amount_cents=amount_cents,
+            note=note,
+            actor=app.config["ADMIN_USERNAME"],
+        )
+        flash("Event added to the ledger.", "success")
+        return redirect(url_for("admin_dashboard"))
+
+    events = load_events(DATA_PATH)
+    sessions = build_session_summaries(events)
+    recent_sessions = sessions[:6]
+    recent_events = list(reversed(events[-20:]))
+    return render_template(
+        "admin_dashboard.html",
+        recent_sessions=recent_sessions,
+        recent_events=recent_events,
+        player_names=unique_player_names(events),
+    )
+
+
+if __name__ == "__main__":
+    app.run(debug=True)
diff --git a/requirements.txt b/requirements.txt
new file mode 100644
index 0000000..22ac75b
--- /dev/null
+++ b/requirements.txt
@@ -0,0 +1 @@
+Flask==3.1.0
diff --git a/static/css/style.css b/static/css/style.css
new file mode 100644
index 0000000..8455a19
--- /dev/null
+++ b/static/css/style.css
@@ -0,0 +1,609 @@
+:root {
+    --bg: #07111f;
+    --bg-accent: #0b1830;
+    --panel: rgba(11, 24, 48, 0.82);
+    --panel-strong: rgba(13, 28, 55, 0.95);
+    --line: rgba(157, 176, 199, 0.14);
+    --text: #e5eefb;
+    --text-muted: #9db0c7;
+    --green: #22c55e;
+    --red: #ef4444;
+    --amber: #f59e0b;
+    --gold: #f5c76a;
+    --shadow: 0 22px 60px rgba(0, 0, 0, 0.35);
+    --radius: 24px;
+}
+
+* {
+    box-sizing: border-box;
+}
+
+body {
+    margin: 0;
+    font-family: "Inter", sans-serif;
+    color: var(--text);
+    background:
+        radial-gradient(circle at top left, rgba(124, 156, 255, 0.16), transparent 22%),
+        radial-gradient(circle at top right, rgba(94, 234, 212, 0.11), transparent 18%),
+        linear-gradient(180deg, #06101d 0%, #091426 100%);
+    min-height: 100vh;
+}
+
+body::before {
+    content: "";
+    position: fixed;
+    inset: 0;
+    background-image: linear-gradient(rgba(255,255,255,0.018) 1px, transparent 1px), linear-gradient(90deg, rgba(255,255,255,0.018) 1px, transparent 1px);
+    background-size: 34px 34px;
+    pointer-events: none;
+    opacity: 0.4;
+}
+
+ a {
+    color: var(--text);
+    text-decoration: none;
+}
+
+.site-shell {
+    width: min(1260px, calc(100% - 32px));
+    margin: 0 auto;
+    padding: 28px 0 52px;
+}
+
+.topbar {
+    display: flex;
+    justify-content: space-between;
+    align-items: center;
+    gap: 24px;
+    margin-bottom: 28px;
+    padding: 18px 22px;
+    border: 1px solid var(--line);
+    border-radius: 999px;
+    background: rgba(6, 16, 29, 0.74);
+    backdrop-filter: blur(16px);
+    box-shadow: var(--shadow);
+}
+
+.brand {
+    font-size: 1.3rem;
+    font-weight: 800;
+    letter-spacing: -0.03em;
+}
+
+.brand-subtitle {
+    margin: 4px 0 0;
+    color: var(--text-muted);
+    font-size: 0.93rem;
+}
+
+.nav-links {
+    display: flex;
+    align-items: center;
+    gap: 16px;
+    flex-wrap: wrap;
+}
+
+.nav-links a,
+.ghost-button {
+    color: var(--text);
+    background: transparent;
+    border: none;
+    font: inherit;
+    cursor: pointer;
+    padding: 10px 14px;
+    border-radius: 999px;
+}
+
+.nav-links a:hover,
+.ghost-button:hover {
+    background: rgba(124, 156, 255, 0.12);
+}
+
+.flash-stack {
+    display: grid;
+    gap: 10px;
+    margin-bottom: 20px;
+}
+
+.flash {
+    border-radius: 18px;
+    padding: 14px 16px;
+    border: 1px solid var(--line);
+    backdrop-filter: blur(14px);
+}
+
+.flash.success {
+    background: rgba(34, 197, 94, 0.12);
+}
+
+.flash.error {
+    background: rgba(244, 63, 94, 0.12);
+}
+
+.page-content {
+    display: grid;
+    gap: 24px;
+}
+
+.hero-card,
+.panel {
+    border-radius: var(--radius);
+    border: 1px solid var(--line);
+    background: var(--panel);
+    box-shadow: var(--shadow);
+    backdrop-filter: blur(18px);
+}
+
+.hero-card {
+    padding: 28px;
+    background:
+        linear-gradient(135deg, rgba(124, 156, 255, 0.13), transparent 40%),
+        linear-gradient(180deg, rgba(11, 24, 48, 0.96), rgba(9, 20, 38, 0.92));
+}
+
+.hero-card.compact {
+    padding: 24px 28px;
+}
+
+.panel {
+    padding: 24px;
+}
+
+.panel-header {
+    display: flex;
+    justify-content: space-between;
+    align-items: flex-start;
+    gap: 12px;
+    margin-bottom: 18px;
+}
+
+.eyebrow {
+    margin: 0 0 6px;
+    text-transform: uppercase;
+    letter-spacing: 0.14em;
+    font-size: 0.74rem;
+    color: var(--gold);
+    font-weight: 700;
+}
+
+h1,
+h2 {
+    margin: 0;
+    letter-spacing: -0.04em;
+}
+
+h1 {
+    font-size: clamp(2rem, 4vw, 3.2rem);
+}
+
+h2 {
+    font-size: 1.38rem;
+}
+
+.muted-text {
+    color: var(--text-muted);
+    line-height: 1.6;
+}
+
+.muted-text.small,
+.tiny-text {
+    font-size: 0.88rem;
+}
+
+.tiny-text {
+    color: #8092ab;
+}
+
+.grid {
+    display: grid;
+    gap: 24px;
+}
+
+.two-col {
+    grid-template-columns: 1.7fr 1fr;
+}
+
+.three-col {
+    grid-template-columns: repeat(3, 1fr);
+}
+
+.chart-panel {
+    min-height: 420px;
+}
+
+.chart-panel-large {
+    min-height: 500px;
+}
+
+.chart-frame {
+    position: relative;
+    min-height: 360px;
+}
+
+.chart-panel-large .chart-frame {
+    min-height: 430px;
+}
+
+.chart-frame-interactive {
+    cursor: zoom-in;
+}
+
+.chart-frame-interactive:focus-visible {
+    outline: 2px solid rgba(245, 199, 106, 0.7);
+    outline-offset: 6px;
+}
+
+.chart-panel canvas,
+.chart-frame canvas,
+.chart-modal-frame canvas {
+    width: 100% !important;
+    height: 100% !important;
+}
+
+.stat-panel,
+.stat-card {
+    display: grid;
+    align-content: start;
+}
+
+.stat-list {
+    display: grid;
+    gap: 14px;
+}
+
+.stat-row {
+    display: flex;
+    justify-content: space-between;
+    gap: 14px;
+    padding: 12px 0;
+    border-bottom: 1px solid var(--line);
+}
+
+.stat-card {
+    gap: 8px;
+}
+
+.stat-card span {
+    color: var(--text-muted);
+}
+
+.stat-card strong {
+    font-size: 1.75rem;
+    letter-spacing: -0.04em;
+}
+
+.table-wrap {
+    overflow-x: auto;
+}
+
+table {
+    width: 100%;
+    border-collapse: collapse;
+}
+
+th,
+td {
+    text-align: left;
+    padding: 14px 14px;
+    border-bottom: 1px solid var(--line);
+    white-space: nowrap;
+}
+
+th {
+    color: var(--text-muted);
+    font-size: 0.83rem;
+    text-transform: uppercase;
+    letter-spacing: 0.08em;
+}
+
+tbody tr:hover {
+    background: rgba(124, 156, 255, 0.06);
+}
+
+.positive {
+    color: var(--green);
+    font-weight: 700;
+}
+
+.negative {
+    color: var(--red);
+    font-weight: 700;
+}
+
+.neutral {
+    color: var(--amber);
+    font-weight: 700;
+}
+
+.form-shell {
+    display: flex;
+    justify-content: center;
+}
+
+.form-shell.narrow {
+    min-height: 55vh;
+    align-items: center;
+}
+
+.form-card {
+    display: grid;
+    gap: 16px;
+}
+
+.form-card label {
+    display: grid;
+    gap: 8px;
+}
+
+.form-card span {
+    font-size: 0.94rem;
+    color: var(--text-muted);
+}
+
+input,
+select,
+textarea,
+button {
+    font: inherit;
+}
+
+input,
+select,
+textarea {
+    width: 100%;
+    padding: 13px 14px;
+    border-radius: 16px;
+    border: 1px solid rgba(157, 176, 199, 0.18);
+    background: rgba(7, 17, 31, 0.78);
+    color: var(--text);
+    outline: none;
+}
+
+input:focus,
+select:focus,
+textarea:focus {
+    border-color: rgba(124, 156, 255, 0.7);
+    box-shadow: 0 0 0 4px rgba(124, 156, 255, 0.14);
+}
+
+.primary-button {
+    padding: 14px 18px;
+    border: none;
+    border-radius: 16px;
+    background: linear-gradient(135deg, #f4a261 0%, #2a9d8f 100%);
+    color: #07111f;
+    font-weight: 800;
+    cursor: pointer;
+}
+
+.secondary-button {
+    padding: 11px 14px;
+    border: 1px solid var(--line);
+    border-radius: 14px;
+    background: rgba(255, 255, 255, 0.04);
+    color: var(--text);
+    font-weight: 600;
+    cursor: pointer;
+}
+
+.secondary-button:hover {
+    background: rgba(255, 255, 255, 0.08);
+}
+
+.helper-box {
+    display: flex;
+    gap: 10px;
+    align-items: flex-start;
+    border-radius: 18px;
+    border: 1px solid var(--line);
+    padding: 14px 16px;
+    color: var(--text-muted);
+    background: rgba(244, 162, 97, 0.06);
+}
+
+.note-list {
+    margin: 0;
+    padding-left: 18px;
+    color: var(--text-muted);
+    white-space: normal;
+}
+
+.event-feed {
+    display: grid;
+    gap: 12px;
+    max-height: 580px;
+    overflow-y: auto;
+    padding-right: 2px;
+}
+
+.event-feed.condensed {
+    max-height: 420px;
+}
+
+.event-card {
+    padding: 16px;
+    border-radius: 20px;
+    border: 1px solid var(--line);
+    background: rgba(7, 17, 31, 0.72);
+}
+
+.event-card-top {
+    display: flex;
+    justify-content: space-between;
+    gap: 12px;
+    align-items: center;
+}
+
+.event-amount {
+    margin: 10px 0 6px;
+    font-size: 1.2rem;
+    font-weight: 700;
+    letter-spacing: -0.04em;
+}
+
+.pill {
+    border-radius: 999px;
+    padding: 6px 10px;
+    background: rgba(244, 162, 97, 0.12);
+    color: #ffd3ab;
+    font-size: 0.77rem;
+    text-transform: uppercase;
+    letter-spacing: 0.08em;
+}
+
+.stack-gap {
+    display: grid;
+    gap: 24px;
+}
+
+.narrow {
+    max-width: 520px;
+    width: 100%;
+}
+
+.small-table table th,
+.small-table table td {
+    padding: 12px;
+}
+
+@media (max-width: 980px) {
+    .two-col,
+    .three-col,
+    .session-layout,
+    .admin-layout {
+        grid-template-columns: 1fr;
+    }
+
+    .topbar {
+        border-radius: 28px;
+        padding: 20px;
+        align-items: flex-start;
+        flex-direction: column;
+    }
+}
+
+@media (max-width: 640px) {
+    .site-shell {
+        width: min(100% - 18px, 100%);
+        padding-top: 18px;
+    }
+
+    .panel,
+    .hero-card {
+        padding: 18px;
+        border-radius: 22px;
+    }
+
+    h1 {
+        font-size: 2rem;
+    }
+
+    .nav-links {
+        width: 100%;
+    }
+}
+
+
+.panel-header-with-actions {
+    align-items: center;
+}
+
+.panel-actions {
+    display: flex;
+    gap: 10px;
+    align-items: center;
+    flex-wrap: wrap;
+}
+
+.sortable-table th {
+    padding-top: 10px;
+    padding-bottom: 10px;
+}
+
+.sort-button {
+    display: inline-flex;
+    align-items: center;
+    gap: 8px;
+    width: 100%;
+    padding: 0;
+    border: none;
+    background: transparent;
+    color: inherit;
+    text-transform: inherit;
+    letter-spacing: inherit;
+    font: inherit;
+    cursor: pointer;
+}
+
+.sort-button:hover,
+.sort-button.is-active {
+    color: var(--text);
+}
+
+.sort-indicator {
+    color: var(--text-soft, #8092ab);
+    font-size: 0.9em;
+}
+
+.chart-modal {
+    position: fixed;
+    inset: 0;
+    display: none;
+    align-items: stretch;
+    justify-content: center;
+    padding: 24px;
+    z-index: 200;
+}
+
+.chart-modal.is-open {
+    display: flex;
+}
+
+.chart-modal-backdrop {
+    position: absolute;
+    inset: 0;
+    background: rgba(3, 6, 12, 0.76);
+    backdrop-filter: blur(10px);
+}
+
+.chart-modal-card {
+    position: relative;
+    z-index: 1;
+    width: min(1280px, 100%);
+    min-height: calc(100vh - 48px);
+    border-radius: 28px;
+    border: 1px solid var(--line);
+    background: rgba(11, 17, 24, 0.96);
+    box-shadow: var(--shadow);
+    padding: 24px;
+    display: grid;
+    grid-template-rows: auto 1fr;
+    gap: 18px;
+}
+
+.chart-modal-frame {
+    min-height: 70vh;
+}
+
+body.modal-open {
+    overflow: hidden;
+}
+
+@media (max-width: 980px) {
+    .leaderboard-layout {
+        grid-template-columns: 1fr;
+    }
+
+    .chart-modal {
+        padding: 12px;
+    }
+
+    .chart-modal-card {
+        min-height: calc(100vh - 24px);
+        padding: 18px;
+    }
+
+    .chart-modal-frame {
+        min-height: 62vh;
+    }
+}
diff --git a/stats.py b/stats.py
new file mode 100644
index 0000000..8235c04
--- /dev/null
+++ b/stats.py
@@ -0,0 +1,285 @@
+from __future__ import annotations
+
+from collections import defaultdict
+from dataclasses import dataclass, field
+from datetime import datetime
+from typing import Any
+
+from storage import EventRow
+
+PLAYER_PALETTE = [
+    "#f4a261",
+    "#2a9d8f",
+    "#8d99ae",
+    "#e76f51",
+    "#7c6cf2",
+    "#84cc16",
+    "#f59e0b",
+    "#10b981",
+    "#ef4444",
+    "#06b6d4",
+    "#a855f7",
+    "#eab308",
+]
+
+
+@dataclass
+class SessionEntry:
+    session_date: str
+    player_name: str
+    buy_in_cents: int = 0
+    cash_out_cents: int = 0
+    notes: list[str] = field(default_factory=list)
+
+    @property
+    def net_cents(self) -> int:
+        return self.cash_out_cents - self.buy_in_cents
+
+
+@dataclass
+class SessionSummary:
+    session_date: str
+    entries: list[SessionEntry]
+
+    @property
+    def total_buy_in_cents(self) -> int:
+        return sum(entry.buy_in_cents for entry in self.entries)
+
+    @property
+    def total_cash_out_cents(self) -> int:
+        return sum(entry.cash_out_cents for entry in self.entries)
+
+    @property
+    def total_net_cents(self) -> int:
+        return sum(entry.net_cents for entry in self.entries)
+
+
+@dataclass
+class PlayerStats:
+    player_name: str
+    sessions_played: int
+    winning_sessions: int
+    losing_sessions: int
+    break_even_sessions: int
+    win_pct: float
+    avg_win_cents: int
+    avg_loss_cents: int
+    biggest_win_cents: int
+    biggest_loss_cents: int
+    total_buy_in_cents: int
+    total_cash_out_cents: int
+    total_net_cents: int
+    roi_pct: float
+
+
+
+def cents_to_dollars(cents: int) -> str:
+    value = cents / 100
+    return f"${value:,.2f}"
+
+
+
+def safe_date_label(session_date: str) -> str:
+    try:
+        return datetime.strptime(session_date, "%Y-%m-%d").strftime("%b %d, %Y")
+    except ValueError:
+        return session_date
+
+
+
+def color_for_name(name: str, names: list[str]) -> str:
+    try:
+        index = sorted(names, key=str.casefold).index(name)
+    except ValueError:
+        index = abs(hash(name))
+    return PLAYER_PALETTE[index % len(PLAYER_PALETTE)]
+
+
+
+def net_tone(value_cents: int) -> str:
+    if value_cents > 0:
+        return "#22c55e"
+    if value_cents < 0:
+        return "#ef4444"
+    return "#f59e0b"
+
+
+
+def build_session_summaries(events: list[EventRow]) -> list[SessionSummary]:
+    grouped: dict[tuple[str, str], SessionEntry] = {}
+
+    for event in events:
+        key = (event["session_date"], event["player_name"])
+        if key not in grouped:
+            grouped[key] = SessionEntry(
+                session_date=event["session_date"],
+                player_name=event["player_name"],
+            )
+
+        entry = grouped[key]
+        if event["event_type"] == "buyin":
+            entry.buy_in_cents += event["amount_cents"]
+        elif event["event_type"] == "cashout":
+            entry.cash_out_cents += event["amount_cents"]
+
+        if event["note"]:
+            entry.notes.append(event["note"])
+
+    by_session: dict[str, list[SessionEntry]] = defaultdict(list)
+    for entry in grouped.values():
+        by_session[entry.session_date].append(entry)
+
+    sessions = [
+        SessionSummary(
+            session_date=session_date,
+            entries=sorted(entries, key=lambda entry: entry.player_name.casefold()),
+        )
+        for session_date, entries in by_session.items()
+    ]
+    sessions.sort(key=lambda session: session.session_date, reverse=True)
+    return sessions
+
+
+
+def build_leaderboard(sessions: list[SessionSummary]) -> list[PlayerStats]:
+    player_entries: dict[str, list[SessionEntry]] = defaultdict(list)
+    for session in sessions:
+        for entry in session.entries:
+            player_entries[entry.player_name].append(entry)
+
+    leaderboard: list[PlayerStats] = []
+    for player_name, entries in player_entries.items():
+        nets = [entry.net_cents for entry in entries]
+        wins = [value for value in nets if value > 0]
+        losses = [value for value in nets if value < 0]
+        total_buy_in = sum(entry.buy_in_cents for entry in entries)
+        total_cash_out = sum(entry.cash_out_cents for entry in entries)
+        total_net = total_cash_out - total_buy_in
+        sessions_played = len(entries)
+        winning_sessions = len(wins)
+        losing_sessions = len(losses)
+        break_even_sessions = sessions_played - winning_sessions - losing_sessions
+        win_pct = (winning_sessions / sessions_played * 100) if sessions_played else 0.0
+        avg_win = round(sum(wins) / len(wins)) if wins else 0
+        avg_loss = round(sum(abs(value) for value in losses) / len(losses)) if losses else 0
+        biggest_win = max(wins) if wins else 0
+        biggest_loss = min(losses) if losses else 0
+        roi_pct = (total_net / total_buy_in * 100) if total_buy_in else 0.0
+
+        leaderboard.append(
+            PlayerStats(
+                player_name=player_name,
+                sessions_played=sessions_played,
+                winning_sessions=winning_sessions,
+                losing_sessions=losing_sessions,
+                break_even_sessions=break_even_sessions,
+                win_pct=win_pct,
+                avg_win_cents=avg_win,
+                avg_loss_cents=avg_loss,
+                biggest_win_cents=biggest_win,
+                biggest_loss_cents=biggest_loss,
+                total_buy_in_cents=total_buy_in,
+                total_cash_out_cents=total_cash_out,
+                total_net_cents=total_net,
+                roi_pct=roi_pct,
+            )
+        )
+
+    leaderboard.sort(
+        key=lambda player: (player.total_net_cents, player.total_cash_out_cents),
+        reverse=True,
+    )
+    return leaderboard
+
+
+
+def cumulative_profit_series(sessions: list[SessionSummary]) -> dict[str, Any]:
+    ordered_sessions = sorted(sessions, key=lambda session: session.session_date)
+    player_names = sorted(
+        {entry.player_name for session in ordered_sessions for entry in session.entries},
+        key=str.casefold,
+    )
+
+    labels = [safe_date_label(session.session_date) for session in ordered_sessions]
+    datasets = []
+
+    for player_name in player_names:
+        series: list[float | None] = []
+        running_total = 0
+        has_started = False
+
+        for session in ordered_sessions:
+            matching_entry = next(
+                (entry for entry in session.entries if entry.player_name == player_name),
+                None,
+            )
+            if matching_entry is not None:
+                has_started = True
+                running_total += matching_entry.net_cents
+                series.append(round(running_total / 100, 2))
+            elif has_started:
+                series.append(round(running_total / 100, 2))
+            else:
+                series.append(None)
+
+        datasets.append(
+            {
+                "label": player_name,
+                "data": series,
+                "borderColor": color_for_name(player_name, player_names),
+                "backgroundColor": color_for_name(player_name, player_names),
+                "pointRadius": 3,
+                "pointHoverRadius": 5,
+                "pointHitRadius": 10,
+                "borderWidth": 2.5,
+                "tension": 0.22,
+                "spanGaps": False,
+            }
+        )
+
+    return {"labels": labels, "datasets": datasets}
+
+
+
+def player_session_series(sessions: list[SessionSummary], player_name: str) -> dict[str, Any]:
+    ordered_sessions = sorted(sessions, key=lambda session: session.session_date)
+    labels: list[str] = []
+    net_values: list[float] = []
+    cumulative_values: list[float] = []
+    running_total = 0
+
+    all_player_names = sorted(
+        {entry.player_name for session in ordered_sessions for entry in session.entries},
+        key=str.casefold,
+    )
+
+    for session in ordered_sessions:
+        matching_entry = next(
+            (entry for entry in session.entries if entry.player_name == player_name),
+            None,
+        )
+        if matching_entry is None:
+            continue
+
+        labels.append(safe_date_label(session.session_date))
+        net_values.append(round(matching_entry.net_cents / 100, 2))
+        running_total += matching_entry.net_cents
+        cumulative_values.append(round(running_total / 100, 2))
+
+    return {
+        "labels": labels,
+        "color": color_for_name(player_name, all_player_names),
+        "net_values": net_values,
+        "net_colors": [net_tone(round(value * 100)) for value in net_values],
+        "cumulative_values": cumulative_values,
+    }
+
+
+
+def session_events(events: list[EventRow], session_date: str) -> list[EventRow]:
+    return [event for event in events if event["session_date"] == session_date]
+
+
+
+def unique_player_names(events: list[EventRow]) -> list[str]:
+    return sorted({event["player_name"] for event in events}, key=str.casefold)
diff --git a/storage.py b/storage.py
new file mode 100644
index 0000000..478fe21
--- /dev/null
+++ b/storage.py
@@ -0,0 +1,102 @@
+from __future__ import annotations
+
+import csv
+import uuid
+from datetime import datetime, timezone
+from pathlib import Path
+from typing import TypedDict
+
+CSV_HEADERS = [
+    "id",
+    "created_at",
+    "session_date",
+    "player_name",
+    "event_type",
+    "amount_cents",
+    "note",
+    "actor",
+]
+
+
+class EventRow(TypedDict):
+    id: str
+    created_at: str
+    session_date: str
+    player_name: str
+    event_type: str
+    amount_cents: int
+    note: str
+    actor: str
+
+
+VALID_EVENT_TYPES = {"buyin", "cashout", "note"}
+
+
+def ensure_data_file(csv_path: Path) -> None:
+    csv_path.parent.mkdir(parents=True, exist_ok=True)
+    if csv_path.exists():
+        return
+
+    with csv_path.open("w", newline="", encoding="utf-8") as file:
+        writer = csv.DictWriter(file, fieldnames=CSV_HEADERS)
+        writer.writeheader()
+
+
+def load_events(csv_path: Path) -> list[EventRow]:
+    ensure_data_file(csv_path)
+
+    events: list[EventRow] = []
+    with csv_path.open("r", newline="", encoding="utf-8") as file:
+        reader = csv.DictReader(file)
+        for row in reader:
+            events.append(
+                EventRow(
+                    id=row["id"],
+                    created_at=row["created_at"],
+                    session_date=row["session_date"],
+                    player_name=row["player_name"],
+                    event_type=row["event_type"],
+                    amount_cents=int(row["amount_cents"] or 0),
+                    note=row.get("note", ""),
+                    actor=row.get("actor", ""),
+                )
+            )
+
+    events.sort(key=lambda event: (event["session_date"], event["created_at"], event["id"]))
+    return events
+
+
+def append_event(
+    csv_path: Path,
+    session_date: str,
+    player_name: str,
+    event_type: str,
+    amount_cents: int,
+    note: str,
+    actor: str,
+) -> EventRow:
+    ensure_data_file(csv_path)
+
+    normalized_type = event_type.strip().lower()
+    if normalized_type not in VALID_EVENT_TYPES:
+        raise ValueError(f"Unsupported event type: {event_type}")
+
+    if normalized_type == "note":
+        amount_cents = 0
+
+    event = EventRow(
+        id=str(uuid.uuid4()),
+        created_at=datetime.now(timezone.utc).isoformat(),
+        session_date=session_date.strip(),
+        player_name=player_name.strip(),
+        event_type=normalized_type,
+        amount_cents=amount_cents,
+        note=note.strip(),
+        actor=actor.strip(),
+    )
+
+    with csv_path.open("a", newline="", encoding="utf-8") as file:
+        writer = csv.DictWriter(file, fieldnames=CSV_HEADERS)
+        writer.writerow(event)
+
+    return event
diff --git a/templates/admin_dashboard.html b/templates/admin_dashboard.html
new file mode 100644
index 0000000..dc3fda4
--- /dev/null
+++ b/templates/admin_dashboard.html
@@ -0,0 +1,120 @@
+{% extends "base.html" %}
+{% block title %}Admin · Poker Portal{% endblock %}
+{% block content %}
+<section class="hero-card compact">
+    <div>
+        <p class="eyebrow">Admin</p>
+        <h1>Ledger controls</h1>
+        <p class="muted-text">Append new buy-ins, cash-outs, corrections, and note-only events to the audit trail.</p>
+    </div>
+</section>
+
+<section class="grid two-col admin-layout">
+    <form class="panel form-card" method="post">
+        <p class="eyebrow">New event</p>
+        <h2>Add to the ledger</h2>
+
+        <label>
+            <span>Session date</span>
+            <input type="date" name="session_date" required>
+        </label>
+
+        <label>
+            <span>Player name</span>
+            <input list="player_names" type="text" name="player_name" placeholder="Braeden" required>
+            <datalist id="player_names">
+                {% for player_name in player_names %}
+                    <option value="{{ player_name }}"></option>
+                {% endfor %}
+            </datalist>
+        </label>
+
+        <label>
+            <span>Event type</span>
+            <select name="event_type" required>
+                <option value="buyin">Buy-in</option>
+                <option value="cashout">Cash-out</option>
+                <option value="note">Note only</option>
+            </select>
+        </label>
+
+        <label>
+            <span>Amount</span>
+            <input type="number" step="0.01" name="amount" placeholder="50.00">
+        </label>
+
+        <label>
+            <span>Note</span>
+            <textarea name="note" rows="4" placeholder="Rebuy, correction, settled chips later, etc."></textarea>
+        </label>
+
+        <div class="helper-box">
+            <strong>Tip:</strong>
+            <span>Use positive amounts for normal buy-ins and cash-outs. Use negative amounts to correct a previous entry without editing history.</span>
+        </div>
+
+        <button class="primary-button" type="submit">Add event</button>
+    </form>
+
+    <div class="stack-gap">
+        <section class="panel">
+            <div class="panel-header">
+                <div>
+                    <p class="eyebrow">Recent sessions</p>
+                    <h2>Current totals</h2>
+                </div>
+            </div>
+            <div class="table-wrap small-table">
+                <table>
+                    <thead>
+                        <tr>
+                            <th>Date</th>
+                            <th>Players</th>
+                            <th>Buy-ins</th>
+                            <th>Cash-outs</th>
+                        </tr>
+                    </thead>
+                    <tbody>
+                        {% for session in recent_sessions %}
+                        <tr>
+                            <td><a href="{{ url_for('session_detail', session_date=session.session_date) }}">{{ session.session_date | pretty_date }}</a></td>
+                            <td>{{ session.entries|length }}</td>
+                            <td>{{ session.total_buy_in_cents | money }}</td>
+                            <td>{{ session.total_cash_out_cents | money }}</td>
+                        </tr>
+                        {% else %}
+                        <tr>
+                            <td colspan="4">No sessions yet.</td>
+                        </tr>
+                        {% endfor %}
+                    </tbody>
+                </table>
+            </div>
+        </section>
+
+        <section class="panel">
+            <div class="panel-header">
+                <div>
+                    <p class="eyebrow">Recent raw events</p>
+                    <h2>Ledger feed</h2>
+                </div>
+            </div>
+            <div class="event-feed condensed">
+                {% for event in recent_events %}
+                <article class="event-card">
+                    <div class="event-card-top">
+                        <strong>{{ event.player_name }}</strong>
+                        <span class="pill">{{ event.event_type }}</span>
+                    </div>
+                    <p class="event-amount">{{ event.amount_cents | money }}</p>
+                    <p class="muted-text small">{{ event.session_date | pretty_date }}</p>
+                    {% if event.note %}<p class="muted-text small">{{ event.note }}</p>{% endif %}
+                </article>
+                {% else %}
+                <p class="muted-text">No recent events.</p>
+                {% endfor %}
+            </div>
+        </section>
+    </div>
+</section>
+{% endblock %}
diff --git a/templates/admin_login.html b/templates/admin_login.html
new file mode 100644
index 0000000..4479d22
--- /dev/null
+++ b/templates/admin_login.html
@@ -0,0 +1,23 @@
+{% extends "base.html" %}
+{% block title %}Admin Login · Poker Portal{% endblock %}
+{% block content %}
+<section class="form-shell narrow">
+    <form class="panel form-card" method="post">
+        <p class="eyebrow">Restricted access</p>
+        <h1>Admin login</h1>
+        <p class="muted-text">Only the ledger manager needs credentials. All stats pages stay public.</p>
+
+        <label>
+            <span>Username</span>
+            <input type="text" name="username" required>
+        </label>
+
+        <label>
+            <span>Password</span>
+            <input type="password" name="password" required>
+        </label>
+
+        <button class="primary-button" type="submit">Login</button>
+    </form>
+</section>
+{% endblock %}
diff --git a/templates/base.html b/templates/base.html
new file mode 100644
index 0000000..fc38395
--- /dev/null
+++ b/templates/base.html
@@ -0,0 +1,49 @@
+<!doctype html>
+<html lang="en">
+<head>
+    <meta charset="utf-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1">
+    <title>{% block title %}Poker Portal{% endblock %}</title>
+    <link rel="preconnect" href="https://fonts.googleapis.com">
+    <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
+    <link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700;800&display=swap" rel="stylesheet">
+    <link rel="stylesheet" href="{{ url_for('static', filename='css/style.css') }}">
+    <script src="https://cdn.jsdelivr.net/npm/chart.js"></script>
+</head>
+<body>
+    <div class="site-shell">
+        <header class="topbar">
+            <div>
+                <a class="brand" href="{{ url_for('leaderboard') }}">Poker Portal</a>
+                <p class="brand-subtitle">Low-stakes hold'em ledger and session tracker</p>
+            </div>
+            <nav class="nav-links">
+                <a href="{{ url_for('leaderboard') }}">Leaderboard</a>
+                <a href="{{ url_for('sessions') }}">Sessions</a>
+                {% if is_admin %}
+                    <a href="{{ url_for('admin_dashboard') }}">Admin</a>
+                    <form method="post" action="{{ url_for('admin_logout') }}">
+                        <button class="ghost-button" type="submit">Logout</button>
+                    </form>
+                {% else %}
+                    <a href="{{ url_for('admin_login') }}">Admin Login</a>
+                {% endif %}
+            </nav>
+        </header>
+
+        {% with messages = get_flashed_messages(with_categories=true) %}
+            {% if messages %}
+                <section class="flash-stack">
+                    {% for category, message in messages %}
+                        <div class="flash {{ category }}">{{ message }}</div>
+                    {% endfor %}
+                </section>
+            {% endif %}
+        {% endwith %}
+
+        <main class="page-content">
+            {% block content %}{% endblock %}
+        </main>
+    </div>
+</body>
+</html>
diff --git a/templates/leaderboard.html b/templates/leaderboard.html
new file mode 100644
index 0000000..85b9980
--- /dev/null
+++ b/templates/leaderboard.html
@@ -0,0 +1,335 @@
+{% extends "base.html" %}
+{% block title %}Leaderboard · Poker Portal{% endblock %}
+{% block content %}
+<section class="hero-card">
+    <div>
+        <p class="eyebrow">All-time results</p>
+        <h1>Leaderboard</h1>
+        <p class="muted-text">Track who is up, who is chasing, and how everyone has moved across {{ session_count }} recorded sessions.</p>
+    </div>
+</section>
+
+<section class="grid two-col leaderboard-layout">
+    <div class="panel chart-panel chart-panel-large">
+        <div class="panel-header panel-header-with-actions">
+            <div>
+                <p class="eyebrow">Trend</p>
+                <h2>Cumulative profit over time</h2>
+            </div>
+            <div class="panel-actions">
+                <button class="secondary-button" type="button" id="expandLeaderboardChart">Expand chart</button>
+            </div>
+        </div>
+        <div class="chart-frame chart-frame-interactive" id="leaderboardChartFrame" role="button" tabindex="0" aria-label="Expand cumulative profit chart">
+            <canvas id="leaderboardChart"></canvas>
+        </div>
+    </div>
+
+    <div class="panel stat-panel">
+        <p class="eyebrow">Quick read</p>
+        <h2>Table snapshot</h2>
+        <div class="stat-list">
+            <div class="stat-row"><span>Players tracked</span><strong>{{ leaderboard|length }}</strong></div>
+            <div class="stat-row"><span>Sessions tracked</span><strong>{{ session_count }}</strong></div>
+            <div class="stat-row"><span>Best player</span><strong>{% if leaderboard %}{{ leaderboard[0].player_name }}{% else %}—{% endif %}</strong></div>
+            <div class="stat-row"><span>Worst player</span><strong>{% if leaderboard %}{{ leaderboard[-1].player_name }}{% else %}—{% endif %}</strong></div>
+        </div>
+    </div>
+</section>
+
+<section class="panel">
+    <div class="panel-header">
+        <div>
+            <p class="eyebrow">Standings</p>
+            <h2>All-time leaderboard</h2>
+        </div>
+        <p class="muted-text small">Click any column to sort.</p>
+    </div>
+
+    <div class="table-wrap">
+        <table id="leaderboardTable" class="sortable-table" data-sort-key="net" data-sort-direction="desc">
+            <thead>
+                <tr>
+                    <th><button type="button" class="sort-button" data-sort-key="rank" data-sort-type="number" data-initial-direction="asc">Rank <span class="sort-indicator">↕</span></button></th>
+                    <th><button type="button" class="sort-button" data-sort-key="player" data-sort-type="string" data-initial-direction="asc">Player <span class="sort-indicator">↕</span></button></th>
+                    <th><button type="button" class="sort-button" data-sort-key="buyins" data-sort-type="number" data-initial-direction="desc">Buy-ins <span class="sort-indicator">↕</span></button></th>
+                    <th><button type="button" class="sort-button" data-sort-key="cashouts" data-sort-type="number" data-initial-direction="desc">Cash-outs <span class="sort-indicator">↕</span></button></th>
+                    <th><button type="button" class="sort-button is-active" data-sort-key="net" data-sort-type="number" data-initial-direction="desc">Net <span class="sort-indicator">↓</span></button></th>
+                    <th><button type="button" class="sort-button" data-sort-key="winpct" data-sort-type="number" data-initial-direction="desc">Win % <span class="sort-indicator">↕</span></button></th>
+                    <th><button type="button" class="sort-button" data-sort-key="roi" data-sort-type="number" data-initial-direction="desc">ROI <span class="sort-indicator">↕</span></button></th>
+                    <th><button type="button" class="sort-button" data-sort-key="avgwin" data-sort-type="number" data-initial-direction="desc">Avg Win <span class="sort-indicator">↕</span></button></th>
+                    <th><button type="button" class="sort-button" data-sort-key="avgloss" data-sort-type="number" data-initial-direction="desc">Avg Loss <span class="sort-indicator">↕</span></button></th>
+                    <th><button type="button" class="sort-button" data-sort-key="sessions" data-sort-type="number" data-initial-direction="desc">Sessions <span class="sort-indicator">↕</span></button></th>
+                </tr>
+            </thead>
+            <tbody>
+                {% for player in leaderboard %}
+                <tr data-player-row="true" data-original-rank="{{ loop.index }}">
+                    <td data-sort-value="{{ loop.index }}" data-rank-cell>#{{ loop.index }}</td>
+                    <td data-sort-value="{{ player.player_name|lower }}"><a href="{{ url_for('player_detail', player_name=player.player_name) }}">{{ player.player_name }}</a></td>
+                    <td data-sort-value="{{ player.total_buy_in_cents }}">{{ player.total_buy_in_cents | money }}</td>
+                    <td data-sort-value="{{ player.total_cash_out_cents }}">{{ player.total_cash_out_cents | money }}</td>
+                    <td data-sort-value="{{ player.total_net_cents }}" class="{{ 'positive' if player.total_net_cents > 0 else 'negative' if player.total_net_cents < 0 else 'neutral' }}">{{ player.total_net_cents | money }}</td>
+                    <td data-sort-value="{{ '%.4f'|format(player.win_pct) }}">{{ "%.1f"|format(player.win_pct) }}%</td>
+                    <td data-sort-value="{{ '%.4f'|format(player.roi_pct) }}">{{ "%.1f"|format(player.roi_pct) }}%</td>
+                    <td data-sort-value="{{ player.avg_win_cents }}">{{ player.avg_win_cents | money }}</td>
+                    <td data-sort-value="{{ player.avg_loss_cents }}">{{ player.avg_loss_cents | money }}</td>
+                    <td data-sort-value="{{ player.sessions_played }}">{{ player.sessions_played }}</td>
+                </tr>
+                {% else %}
+                <tr>
+                    <td colspan="10">No data yet. Add the first event from the admin page.</td>
+                </tr>
+                {% endfor %}
+            </tbody>
+        </table>
+    </div>
+</section>
+
+<div class="chart-modal" id="chartModal" aria-hidden="true">
+    <div class="chart-modal-backdrop" data-close-chart-modal></div>
+    <div class="chart-modal-card">
+        <div class="panel-header panel-header-with-actions">
+            <div>
+                <p class="eyebrow">Expanded view</p>
+                <h2>Cumulative profit over time</h2>
+            </div>
+            <div class="panel-actions">
+                <button class="secondary-button" type="button" id="fullscreenLeaderboardChart">Fullscreen</button>
+                <button class="ghost-button" type="button" data-close-chart-modal>Close</button>
+            </div>
+        </div>
+        <div class="chart-modal-frame" id="chartModalFrame">
+            <canvas id="leaderboardChartExpanded"></canvas>
+        </div>
+    </div>
+</div>
+
+<script>
+    const leaderboardChartData = {{ chart_data | tojson }};
+    const rootStyles = getComputedStyle(document.documentElement);
+    const textMuted = rootStyles.getPropertyValue('--text-muted').trim();
+    const lineColor = rootStyles.getPropertyValue('--line').trim();
+
+    function buildLeaderboardChartConfig(chartData) {
+        return {
+            type: 'line',
+            data: chartData,
+            options: {
+                responsive: true,
+                maintainAspectRatio: false,
+                interaction: { mode: 'nearest', intersect: false },
+                plugins: {
+                    legend: {
+                        position: 'bottom',
+                        labels: {
+                            color: textMuted,
+                            usePointStyle: true,
+                            boxWidth: 10,
+                            boxHeight: 10,
+                            padding: 18,
+                        },
+                    },
+                    tooltip: {
+                        callbacks: {
+                            label(context) {
+                                const value = context.parsed.y;
+                                if (value === null || value === undefined) {
+                                    return `${context.dataset.label}: —`;
+                                }
+                                return `${context.dataset.label}: $${Number(value).toFixed(2)}`;
+                            },
+                        },
+                    },
+                },
+                scales: {
+                    x: {
+                        ticks: { color: textMuted, maxRotation: 0 },
+                        grid: { color: lineColor },
+                    },
+                    y: {
+                        ticks: {
+                            color: textMuted,
+                            callback(value) {
+                                return `$${value}`;
+                            },
+                        },
+                        grid: { color: lineColor },
+                    },
+                },
+            },
+        };
+    }
+
+    const leaderboardCtx = document.getElementById('leaderboardChart');
+    let leaderboardChart = null;
+    if (leaderboardCtx && leaderboardChartData.labels.length > 0) {
+        leaderboardChart = new Chart(leaderboardCtx, buildLeaderboardChartConfig(leaderboardChartData));
+    }
+
+    const chartModal = document.getElementById('chartModal');
+    const expandButton = document.getElementById('expandLeaderboardChart');
+    const chartFrame = document.getElementById('leaderboardChartFrame');
+    const fullscreenButton = document.getElementById('fullscreenLeaderboardChart');
+    const modalFrame = document.getElementById('chartModalFrame');
+    const expandedCtx = document.getElementById('leaderboardChartExpanded');
+    let expandedChart = null;
+
+    function openChartModal() {
+        if (!chartModal || !expandedCtx || leaderboardChartData.labels.length === 0) {
+            return;
+        }
+
+        chartModal.classList.add('is-open');
+        chartModal.setAttribute('aria-hidden', 'false');
+        document.body.classList.add('modal-open');
+
+        if (expandedChart) {
+            expandedChart.destroy();
+        }
+        expandedChart = new Chart(expandedCtx, buildLeaderboardChartConfig(leaderboardChartData));
+    }
+
+    function closeChartModal() {
+        if (!chartModal) {
+            return;
+        }
+        chartModal.classList.remove('is-open');
+        chartModal.setAttribute('aria-hidden', 'true');
+        document.body.classList.remove('modal-open');
+        if (expandedChart) {
+            expandedChart.destroy();
+            expandedChart = null;
+        }
+    }
+
+    expandButton?.addEventListener('click', openChartModal);
+    chartFrame?.addEventListener('click', openChartModal);
+    chartFrame?.addEventListener('keydown', (event) => {
+        if (event.key === 'Enter' || event.key === ' ') {
+            event.preventDefault();
+            openChartModal();
+        }
+    });
+
+    chartModal?.querySelectorAll('[data-close-chart-modal]').forEach((element) => {
+        element.addEventListener('click', closeChartModal);
+    });
+
+    document.addEventListener('keydown', (event) => {
+        if (event.key === 'Escape' && chartModal?.classList.contains('is-open')) {
+            closeChartModal();
+        }
+    });
+
+    fullscreenButton?.addEventListener('click', async () => {
+        if (!modalFrame) {
+            return;
+        }
+        if (document.fullscreenElement) {
+            await document.exitFullscreen();
+            return;
+        }
+        if (modalFrame.requestFullscreen) {
+            await modalFrame.requestFullscreen();
+        }
+    });
+
+    const leaderboardTable = document.getElementById('leaderboardTable');
+    const sortButtons = Array.from(document.querySelectorAll('.sort-button'));
+    const columnIndexMap = {
+        rank: 0,
+        player: 1,
+        buyins: 2,
+        cashouts: 3,
+        net: 4,
+        winpct: 5,
+        roi: 6,
+        avgwin: 7,
+        avgloss: 8,
+        sessions: 9,
+    };
+
+    function updateRankCells() {
+        if (!leaderboardTable) {
+            return;
+        }
+        Array.from(leaderboardTable.tBodies[0].querySelectorAll('tr[data-player-row="true"]')).forEach((row, index) => {
+            const rankCell = row.querySelector('[data-rank-cell]');
+            if (rankCell) {
+                rankCell.textContent = `#${index + 1}`;
+            }
+        });
+    }
+
+    function setActiveSortButton(sortKey, direction) {
+        sortButtons.forEach((button) => {
+            const isActive = button.dataset.sortKey === sortKey;
+            button.classList.toggle('is-active', isActive);
+            const indicator = button.querySelector('.sort-indicator');
+            if (indicator) {
+                indicator.textContent = isActive ? (direction === 'asc' ? '↑' : '↓') : '↕';
+            }
+        });
+    }
+
+    function sortLeaderboard(sortKey, sortType, forcedDirection) {
+        if (!leaderboardTable) {
+            return;
+        }
+
+        const tbody = leaderboardTable.tBodies[0];
+        const rows = Array.from(tbody.querySelectorAll('tr[data-player-row="true"]'));
+        const currentKey = leaderboardTable.dataset.sortKey;
+        const currentDirection = leaderboardTable.dataset.sortDirection || 'desc';
+        let direction = forcedDirection;
+
+        if (!direction) {
+            if (currentKey === sortKey) {
+                direction = currentDirection === 'desc' ? 'asc' : 'desc';
+            } else {
+                const trigger = sortButtons.find((button) => button.dataset.sortKey === sortKey);
+                direction = trigger?.dataset.initialDirection || 'desc';
+            }
+        }
+
+        const multiplier = direction === 'asc' ? 1 : -1;
+        const columnIndex = columnIndexMap[sortKey] ?? 0;
+
+        rows.sort((leftRow, rightRow) => {
+            const leftCell = leftRow.children[columnIndex];
+            const rightCell = rightRow.children[columnIndex];
+            const leftValue = leftCell?.dataset.sortValue ?? '';
+            const rightValue = rightCell?.dataset.sortValue ?? '';
+
+            if (sortType === 'number') {
+                const numericResult = (Number(leftValue) - Number(rightValue)) * multiplier;
+                if (numericResult !== 0) {
+                    return numericResult;
+                }
+            } else {
+                const stringResult = leftValue.localeCompare(rightValue) * multiplier;
+                if (stringResult !== 0) {
+                    return stringResult;
+                }
+            }
+
+            return Number(leftRow.dataset.originalRank) - Number(rightRow.dataset.originalRank);
+        });
+
+        rows.forEach((row) => tbody.appendChild(row));
+        leaderboardTable.dataset.sortKey = sortKey;
+        leaderboardTable.dataset.sortDirection = direction;
+        updateRankCells();
+        setActiveSortButton(sortKey, direction);
+    }
+
+    sortButtons.forEach((button) => {
+        button.addEventListener('click', () => {
+            sortLeaderboard(button.dataset.sortKey, button.dataset.sortType);
+        });
+    });
+
+    setActiveSortButton('net', 'desc');
+</script>
+{% endblock %}
diff --git a/templates/player_detail.html b/templates/player_detail.html
new file mode 100644
index 0000000..2dc144e
--- /dev/null
+++ b/templates/player_detail.html
@@ -0,0 +1,141 @@
+{% extends "base.html" %}
+{% block title %}{{ player.player_name }} · Poker Portal{% endblock %}
+{% block content %}
+<section class="hero-card compact">
+    <div>
+        <p class="eyebrow">Player profile</p>
+        <h1>{{ player.player_name }}</h1>
+        <p class="muted-text">A quick read on lifetime performance, hit rate, and session-by-session movement.</p>
+    </div>
+</section>
+
+<section class="grid three-col">
+    <article class="panel stat-card"><span>Total Net</span><strong class="{{ 'positive' if player.total_net_cents > 0 else 'negative' if player.total_net_cents < 0 else 'neutral' }}">{{ player.total_net_cents | money }}</strong></article>
+    <article class="panel stat-card"><span>Win %</span><strong>{{ "%.1f"|format(player.win_pct) }}%</strong></article>
+    <article class="panel stat-card"><span>ROI</span><strong>{{ "%.1f"|format(player.roi_pct) }}%</strong></article>
+    <article class="panel stat-card"><span>Buy-ins</span><strong>{{ player.total_buy_in_cents | money }}</strong></article>
+    <article class="panel stat-card"><span>Cash-outs</span><strong>{{ player.total_cash_out_cents | money }}</strong></article>
+    <article class="panel stat-card"><span>Sessions</span><strong>{{ player.sessions_played }}</strong></article>
+</section>
+
+<section class="grid two-col">
+    <div class="panel chart-panel">
+        <div class="panel-header">
+            <div>
+                <p class="eyebrow">Trend</p>
+                <h2>Cumulative profit</h2>
+            </div>
+        </div>
+        <div class="chart-frame">
+            <canvas id="playerCumulativeChart"></canvas>
+        </div>
+    </div>
+    <div class="panel chart-panel">
+        <div class="panel-header">
+            <div>
+                <p class="eyebrow">Volatility</p>
+                <h2>Session results</h2>
+            </div>
+        </div>
+        <div class="chart-frame">
+            <canvas id="playerSessionChart"></canvas>
+        </div>
+    </div>
+</section>
+
+<section class="panel">
+    <div class="panel-header">
+        <div>
+            <p class="eyebrow">Breakdown</p>
+            <h2>Detailed stats</h2>
+        </div>
+    </div>
+    <div class="table-wrap">
+        <table>
+            <tbody>
+                <tr><th>Winning Sessions</th><td>{{ player.winning_sessions }}</td></tr>
+                <tr><th>Losing Sessions</th><td>{{ player.losing_sessions }}</td></tr>
+                <tr><th>Break-even Sessions</th><td>{{ player.break_even_sessions }}</td></tr>
+                <tr><th>Average Win</th><td>{{ player.avg_win_cents | money }}</td></tr>
+                <tr><th>Average Loss</th><td>{{ player.avg_loss_cents | money }}</td></tr>
+                <tr><th>Biggest Win</th><td>{{ player.biggest_win_cents | money }}</td></tr>
+                <tr><th>Biggest Loss</th><td>{{ player.biggest_loss_cents | money }}</td></tr>
+            </tbody>
+        </table>
+    </div>
+</section>
+
+<script>
+    const playerChartData = {{ chart_data | tojson }};
+    const rootStyles = getComputedStyle(document.documentElement);
+    const textMuted = rootStyles.getPropertyValue('--text-muted').trim();
+    const lineColor = rootStyles.getPropertyValue('--line').trim();
+
+    const sharedScaleOptions = {
+        responsive: true,
+        maintainAspectRatio: false,
+        plugins: {
+            legend: {
+                position: 'bottom',
+                labels: {
+                    color: textMuted,
+                    usePointStyle: true,
+                    boxWidth: 10,
+                    boxHeight: 10,
+                    padding: 18,
+                },
+            },
+        },
+        scales: {
+            x: {
+                ticks: { color: textMuted, maxRotation: 0 },
+                grid: { color: lineColor },
+            },
+            y: {
+                ticks: { color: textMuted },
+                grid: { color: lineColor },
+            },
+        },
+    };
+
+    const cumulativeCtx = document.getElementById('playerCumulativeChart');
+    if (cumulativeCtx) {
+        new Chart(cumulativeCtx, {
+            type: 'line',
+            data: {
+                labels: playerChartData.labels,
+                datasets: [{
+                    label: 'Cumulative Profit',
+                    data: playerChartData.cumulative_values,
+                    borderColor: playerChartData.color,
+                    backgroundColor: playerChartData.color,
+                    borderWidth: 2.5,
+                    pointRadius: 3,
+                    pointHoverRadius: 5,
+                    tension: 0.22,
+                }]
+            },
+            options: sharedScaleOptions,
+        });
+    }
+
+    const sessionCtx = document.getElementById('playerSessionChart');
+    if (sessionCtx) {
+        new Chart(sessionCtx, {
+            type: 'bar',
+            data: {
+                labels: playerChartData.labels,
+                datasets: [{
+                    label: 'Session Net',
+                    data: playerChartData.net_values,
+                    backgroundColor: playerChartData.net_colors,
+                    borderColor: playerChartData.net_colors,
+                    borderRadius: 8,
+                    borderSkipped: false,
+                }]
+            },
+            options: sharedScaleOptions,
+        });
+    }
+</script>
+{% endblock %}
diff --git a/templates/session_detail.html b/templates/session_detail.html
new file mode 100644
index 0000000..a8fbb32
--- /dev/null
+++ b/templates/session_detail.html
@@ -0,0 +1,82 @@
+{% extends "base.html" %}
+{% block title %}{{ session.session_date }} · Poker Portal{% endblock %}
+{% block content %}
+<section class="hero-card compact">
+    <div>
+        <p class="eyebrow">Session detail</p>
+        <h1>{{ session.session_date | pretty_date }}</h1>
+        <p class="muted-text">Current totals are derived from the append-only event log for this date.</p>
+    </div>
+</section>
+
+<section class="grid two-col session-layout">
+    <div class="panel">
+        <div class="panel-header">
+            <div>
+                <p class="eyebrow">Results</p>
+                <h2>Player totals</h2>
+            </div>
+        </div>
+        <div class="table-wrap">
+            <table>
+                <thead>
+                    <tr>
+                        <th>Player</th>
+                        <th>Buy-in</th>
+                        <th>Cash-out</th>
+                        <th>Net</th>
+                        <th>Notes</th>
+                    </tr>
+                </thead>
+                <tbody>
+                    {% for entry in session.entries %}
+                    <tr>
+                        <td><a href="{{ url_for('player_detail', player_name=entry.player_name) }}">{{ entry.player_name }}</a></td>
+                        <td>{{ entry.buy_in_cents | money }}</td>
+                        <td>{{ entry.cash_out_cents | money }}</td>
+                        <td class="{{ 'positive' if entry.net_cents > 0 else 'negative' if entry.net_cents < 0 else '' }}">{{ entry.net_cents | money }}</td>
+                        <td>
+                            {% if entry.notes %}
+                                <ul class="note-list">
+                                    {% for note in entry.notes %}
+                                        <li>{{ note }}</li>
+                                    {% endfor %}
+                                </ul>
+                            {% else %}
+                                —
+                            {% endif %}
+                        </td>
+                    </tr>
+                    {% endfor %}
+                </tbody>
+            </table>
+        </div>
+    </div>
+
+    <div class="panel">
+        <div class="panel-header">
+            <div>
+                <p class="eyebrow">Audit trail</p>
+                <h2>Raw ledger events</h2>
+            </div>
+        </div>
+        <div class="event-feed">
+            {% for event in raw_events | reverse %}
+            <article class="event-card">
+                <div class="event-card-top">
+                    <strong>{{ event.player_name }}</strong>
+                    <span class="pill">{{ event.event_type }}</span>
+                </div>
+                <p class="event-amount">{{ event.amount_cents | money }}</p>
+                {% if event.note %}
+                    <p class="muted-text small">{{ event.note }}</p>
+                {% endif %}
+                <p class="tiny-text">{{ event.created_at }} · by {{ event.actor }}</p>
+            </article>
+            {% else %}
+            <p class="muted-text">No raw events recorded.</p>
+            {% endfor %}
+        </div>
+    </div>
+</section>
+{% endblock %}
diff --git a/templates/sessions.html b/templates/sessions.html
new file mode 100644
index 0000000..e4437bb
--- /dev/null
+++ b/templates/sessions.html
@@ -0,0 +1,48 @@
+{% extends "base.html" %}
+{% block title %}Sessions · Poker Portal{% endblock %}
+{% block content %}
+<section class="hero-card compact">
+    <div>
+        <p class="eyebrow">Session history</p>
+        <h1>Sessions</h1>
+        <p class="muted-text">Browse every recorded game night, inspect the table totals, and drill into each player result.</p>
+    </div>
+</section>
+
+<section class="panel">
+    <div class="panel-header">
+        <div>
+            <p class="eyebrow">Archive</p>
+            <h2>All sessions by date</h2>
+        </div>
+    </div>
+    <div class="table-wrap">
+        <table>
+            <thead>
+                <tr>
+                    <th>Date</th>
+                    <th>Players</th>
+                    <th>Total Buy-ins</th>
+                    <th>Total Cash-outs</th>
+                    <th>Table Net</th>
+                </tr>
+            </thead>
+            <tbody>
+                {% for session in sessions %}
+                <tr>
+                    <td><a href="{{ url_for('session_detail', session_date=session.session_date) }}">{{ session.session_date | pretty_date }}</a></td>
+                    <td>{{ session.entries|length }}</td>
+                    <td>{{ session.total_buy_in_cents | money }}</td>
+                    <td>{{ session.total_cash_out_cents | money }}</td>
+                    <td class="{{ 'positive' if session.total_net_cents > 0 else 'negative' if session.total_net_cents < 0 else '' }}">{{ session.total_net_cents | money }}</td>
+                </tr>
+                {% else %}
+                <tr>
+                    <td colspan="5">No sessions yet.</td>
+                </tr>
+                {% endfor %}
+            </tbody>
+        </table>
+    </div>
+</section>
+{% endblock %}

From f596b7ee193f852ceecca1f3277a79feee477f09 Mon Sep 17 00:00:00 2001
From: SowinskiBraeden <braeden@sowinski.dev>
Date: Sun, 15 Mar 2026 14:28:16 -0700
Subject: [PATCH 02/83] tidy messages and stuff

---
 README.md                      | 33 ++++++---------------------------
 templates/admin_dashboard.html | 11 +++--------
 templates/session_detail.html  |  2 +-
 3 files changed, 10 insertions(+), 36 deletions(-)

diff --git a/README.md b/README.md
index a8b29e4..28bb573 100644
--- a/README.md
+++ b/README.md
@@ -8,16 +8,15 @@ A small server-rendered poker ledger app for low-stakes no-limit hold'em nights.
 - Flask
 - Jinja templates
 - Chart.js
-- Custom CSS
 - Append-only CSV event ledger
 
-## What this MVP does
+## Stuff is does
 
-- Public all-time leaderboard
-- Public session archive
-- Public per-player stat pages
-- Admin-only login for adding ledger events
-- Append-only `entries.csv` audit trail
+- All-time leaderboard
+- Session archive
+- Per player stat pages
+- Admin only login for adding ledger events
+- Append only `entries.csv` audit trail
 - Buy-ins, cash-outs, note-only events, and correction events using negative amounts
 - Cumulative profit chart and player charts
 
@@ -57,11 +56,6 @@ export $(grep -v '^#' .env | xargs)
 python app.py
 ```
 
-Open:
-
-- public site: `http://127.0.0.1:5000/leaderboard`
-- admin login: `http://127.0.0.1:5000/admin/login`
-
 ## Default environment values
 
 The app reads these environment variables:
@@ -69,18 +63,3 @@ The app reads these environment variables:
 - `SECRET_KEY`
 - `ADMIN_USERNAME`
 - `ADMIN_PASSWORD`
-
-If you do not set them, the app falls back to insecure defaults for local development only.
-
-## Suggested next steps
-
-- Add session filters like last 5, 10, 20, all
-- Add player color editing
-- Add export/import tools
-- Add session status like open and closed
-- Replace CSV storage with SQLite later without changing the page layer
-- Add reverse proxy deployment with Caddy or Nginx
-
-## Deploy notes
-
-For a private home-hosted deployment, I would run this behind Caddy or Nginx and set real environment variables instead of using defaults.
diff --git a/templates/admin_dashboard.html b/templates/admin_dashboard.html
index dc3fda4..52c2715 100644
--- a/templates/admin_dashboard.html
+++ b/templates/admin_dashboard.html
@@ -1,5 +1,5 @@
 {% extends "base.html" %}
-{% block title %}Admin · Poker Portal{% endblock %}
+{% block title %}Admin - Poker Portal{% endblock %}
 {% block content %}
 <section class="hero-card compact">
     <div>
@@ -21,7 +21,7 @@
 
         <label>
             <span>Player name</span>
-            <input list="player_names" type="text" name="player_name" placeholder="Braeden" required>
+            <input list="player_names" type="text" name="player_name" placeholder="Peter Venkman" required>
             <datalist id="player_names">
                 {% for player_name in player_names %}
                     <option value="{{ player_name }}"></option>
@@ -40,7 +40,7 @@
 
         <label>
             <span>Amount</span>
-            <input type="number" step="0.01" name="amount" placeholder="50.00">
+            <input type="number" step="0.01" name="amount" placeholder="5.00">
         </label>
 
         <label>
@@ -48,11 +48,6 @@
             <textarea name="note" rows="4" placeholder="Rebuy, correction, settled chips later, etc."></textarea>
         </label>
 
-        <div class="helper-box">
-            <strong>Tip:</strong>
-            <span>Use positive amounts for normal buy-ins and cash-outs. Use negative amounts to correct a previous entry without editing history.</span>
-        </div>
-
         <button class="primary-button" type="submit">Add event</button>
     </form>
 
diff --git a/templates/session_detail.html b/templates/session_detail.html
index a8fbb32..398ad95 100644
--- a/templates/session_detail.html
+++ b/templates/session_detail.html
@@ -5,7 +5,7 @@
     <div>
         <p class="eyebrow">Session detail</p>
         <h1>{{ session.session_date | pretty_date }}</h1>
-        <p class="muted-text">Current totals are derived from the append-only event log for this date.</p>
+        <p class="muted-text">Current totals are derived from the event log for this date.</p>
     </div>
 </section>
 

From 3a6bbe6eae129ceaaee4e6a6222be54b26478cba Mon Sep 17 00:00:00 2001
From: SowinskiBraeden <braeden@sowinski.dev>
Date: Sun, 15 Mar 2026 15:30:55 -0700
Subject: [PATCH 03/83] get rid of that damn blue

---
 static/css/style.css | 708 ++++++++++++++++++++++---------------------
 1 file changed, 368 insertions(+), 340 deletions(-)

diff --git a/static/css/style.css b/static/css/style.css
index 8455a19..8aacde9 100644
--- a/static/css/style.css
+++ b/static/css/style.css
@@ -1,123 +1,234 @@
 :root {
-    --bg: #07111f;
-    --bg-accent: #0b1830;
-    --panel: rgba(11, 24, 48, 0.82);
-    --panel-strong: rgba(13, 28, 55, 0.95);
-    --line: rgba(157, 176, 199, 0.14);
-    --text: #e5eefb;
-    --text-muted: #9db0c7;
-    --green: #22c55e;
-    --red: #ef4444;
-    --amber: #f59e0b;
-    --gold: #f5c76a;
-    --shadow: 0 22px 60px rgba(0, 0, 0, 0.35);
-    --radius: 24px;
+    --bg: #0f1113;
+    --bg-elevated: #14171b;
+    --bg-panel: rgba(20, 23, 27, 0.92);
+    --bg-panel-strong: rgba(24, 28, 33, 0.98);
+    --bg-soft: rgba(255, 255, 255, 0.028);
+    --line: rgba(255, 255, 255, 0.08);
+    --line-strong: rgba(255, 255, 255, 0.12);
+    --text: #f3f4f6;
+    --text-muted: #a8adb7;
+    --text-soft: #8b919c;
+    --accent: #f08a38;
+    --accent-2: #ffb36a;
+    --accent-soft: rgba(240, 138, 56, 0.14);
+    --positive: #59d98e;
+    --negative: #f06c72;
+    --neutral: #e4bf65;
+    --shadow: 0 20px 60px rgba(0, 0, 0, 0.32);
+    --shadow-soft: 0 10px 30px rgba(0, 0, 0, 0.18);
+    --radius-sm: 10px;
+    --radius: 14px;
+    --radius-lg: 18px;
 }
 
 * {
     box-sizing: border-box;
 }
 
+html {
+    color-scheme: dark;
+}
+
 body {
     margin: 0;
+    min-height: 100vh;
     font-family: "Inter", sans-serif;
     color: var(--text);
     background:
-        radial-gradient(circle at top left, rgba(124, 156, 255, 0.16), transparent 22%),
-        radial-gradient(circle at top right, rgba(94, 234, 212, 0.11), transparent 18%),
-        linear-gradient(180deg, #06101d 0%, #091426 100%);
-    min-height: 100vh;
+        radial-gradient(
+            circle at top left,
+            rgba(240, 138, 56, 0.1),
+            transparent 22%
+        ),
+        radial-gradient(
+            circle at top right,
+            rgba(255, 179, 106, 0.06),
+            transparent 18%
+        ),
+        linear-gradient(180deg, #0d0f11 0%, #121519 100%);
 }
 
 body::before {
     content: "";
     position: fixed;
     inset: 0;
-    background-image: linear-gradient(rgba(255,255,255,0.018) 1px, transparent 1px), linear-gradient(90deg, rgba(255,255,255,0.018) 1px, transparent 1px);
-    background-size: 34px 34px;
+    background-image:
+        linear-gradient(rgba(255, 255, 255, 0.016) 1px, transparent 1px),
+        linear-gradient(90deg, rgba(255, 255, 255, 0.016) 1px, transparent 1px);
+    background-size: 38px 38px;
+    opacity: 0.28;
     pointer-events: none;
-    opacity: 0.4;
 }
 
- a {
-    color: var(--text);
+body.modal-open {
+    overflow: hidden;
+}
+
+img,
+canvas {
+    display: block;
+    max-width: 100%;
+}
+
+a {
+    color: inherit;
     text-decoration: none;
 }
 
+button,
+input,
+select,
+textarea {
+    font: inherit;
+}
+
+button {
+    color: inherit;
+}
+
 .site-shell {
-    width: min(1260px, calc(100% - 32px));
+    width: min(1280px, calc(100% - 40px));
     margin: 0 auto;
-    padding: 28px 0 52px;
+    padding: 26px 0 44px;
 }
 
 .topbar {
     display: flex;
     justify-content: space-between;
     align-items: center;
-    gap: 24px;
-    margin-bottom: 28px;
-    padding: 18px 22px;
+    gap: 20px;
+    padding: 18px 20px;
+    margin-bottom: 26px;
     border: 1px solid var(--line);
+    border-radius: var(--radius-lg);
+    background: rgba(16, 18, 22, 0.82);
+    backdrop-filter: blur(10px);
+    box-shadow: var(--shadow-soft);
+}
+
+.brand-lockup {
+    min-width: 0;
+}
+
+.brand-row {
+    display: flex;
+    align-items: center;
+    gap: 10px;
+}
+
+.brand-badge {
+    display: inline-flex;
+    align-items: center;
+    justify-content: center;
+    height: 24px;
+    padding: 0 9px;
     border-radius: 999px;
-    background: rgba(6, 16, 29, 0.74);
-    backdrop-filter: blur(16px);
-    box-shadow: var(--shadow);
+    background: var(--accent-soft);
+    border: 1px solid rgba(240, 138, 56, 0.24);
+    color: var(--accent-2);
+    font-family: "IBM Plex Mono", monospace;
+    font-size: 0.72rem;
+    font-weight: 600;
+    letter-spacing: 0.08em;
+    text-transform: uppercase;
 }
 
 .brand {
-    font-size: 1.3rem;
+    font-size: 1.25rem;
     font-weight: 800;
-    letter-spacing: -0.03em;
+    letter-spacing: -0.04em;
 }
 
 .brand-subtitle {
-    margin: 4px 0 0;
+    margin: 6px 0 0;
     color: var(--text-muted);
-    font-size: 0.93rem;
+    font-size: 0.94rem;
 }
 
 .nav-links {
     display: flex;
     align-items: center;
-    gap: 16px;
+    gap: 10px;
     flex-wrap: wrap;
 }
 
 .nav-links a,
-.ghost-button {
-    color: var(--text);
+.ghost-button,
+.secondary-button,
+.sort-button {
+    transition:
+        background-color 140ms ease,
+        border-color 140ms ease,
+        color 140ms ease,
+        transform 140ms ease;
+}
+
+.nav-links a,
+.ghost-button,
+.secondary-button {
+    display: inline-flex;
+    align-items: center;
+    justify-content: center;
+    min-height: 42px;
+    padding: 0 14px;
+    border-radius: 12px;
+    border: 1px solid transparent;
     background: transparent;
-    border: none;
-    font: inherit;
+    color: var(--text);
     cursor: pointer;
-    padding: 10px 14px;
-    border-radius: 999px;
 }
 
 .nav-links a:hover,
-.ghost-button:hover {
-    background: rgba(124, 156, 255, 0.12);
+.ghost-button:hover,
+.secondary-button:hover {
+    background: rgba(255, 255, 255, 0.04);
+    border-color: var(--line);
+}
+
+.nav-accent,
+.secondary-button {
+    background: rgba(255, 255, 255, 0.03);
+    border-color: var(--line);
+}
+
+.nav-accent:hover,
+.secondary-button:hover {
+    border-color: rgba(240, 138, 56, 0.26);
+    box-shadow: inset 0 0 0 1px rgba(240, 138, 56, 0.12);
 }
 
 .flash-stack {
     display: grid;
     gap: 10px;
-    margin-bottom: 20px;
+    margin-bottom: 18px;
 }
 
 .flash {
-    border-radius: 18px;
     padding: 14px 16px;
     border: 1px solid var(--line);
-    backdrop-filter: blur(14px);
+    border-radius: var(--radius);
+    background: var(--bg-panel);
+    color: var(--text);
+    box-shadow: var(--shadow-soft);
 }
 
 .flash.success {
-    background: rgba(34, 197, 94, 0.12);
+    border-color: rgba(89, 217, 142, 0.18);
+    background: linear-gradient(
+        180deg,
+        rgba(89, 217, 142, 0.1),
+        rgba(20, 23, 27, 0.94)
+    );
 }
 
 .flash.error {
-    background: rgba(244, 63, 94, 0.12);
+    border-color: rgba(240, 108, 114, 0.18);
+    background: linear-gradient(
+        180deg,
+        rgba(240, 108, 114, 0.1),
+        rgba(20, 23, 27, 0.94)
+    );
 }
 
 .page-content {
@@ -127,18 +238,29 @@ body::before {
 
 .hero-card,
 .panel {
-    border-radius: var(--radius);
+    position: relative;
+    overflow: hidden;
     border: 1px solid var(--line);
-    background: var(--panel);
-    box-shadow: var(--shadow);
-    backdrop-filter: blur(18px);
+    border-radius: var(--radius-lg);
+    background: var(--bg-panel);
+    box-shadow: var(--shadow-soft);
+}
+
+.hero-card::before,
+.panel::before {
+    content: "";
+    position: absolute;
+    inset: 0;
+    background: linear-gradient(
+        180deg,
+        rgba(255, 255, 255, 0.018),
+        transparent 34%
+    );
+    pointer-events: none;
 }
 
 .hero-card {
-    padding: 28px;
-    background:
-        linear-gradient(135deg, rgba(124, 156, 255, 0.13), transparent 40%),
-        linear-gradient(180deg, rgba(11, 24, 48, 0.96), rgba(9, 20, 38, 0.92));
+    padding: 30px;
 }
 
 .hero-card.compact {
@@ -146,52 +268,48 @@ body::before {
 }
 
 .panel {
-    padding: 24px;
-}
-
-.panel-header {
-    display: flex;
-    justify-content: space-between;
-    align-items: flex-start;
-    gap: 12px;
-    margin-bottom: 18px;
+    padding: 22px;
 }
 
 .eyebrow {
-    margin: 0 0 6px;
-    text-transform: uppercase;
-    letter-spacing: 0.14em;
+    margin: 0 0 8px;
+    color: var(--accent-2);
+    font-family: "IBM Plex Mono", monospace;
     font-size: 0.74rem;
-    color: var(--gold);
-    font-weight: 700;
+    font-weight: 600;
+    letter-spacing: 0.12em;
+    text-transform: uppercase;
 }
 
 h1,
 h2 {
     margin: 0;
-    letter-spacing: -0.04em;
+    letter-spacing: -0.045em;
 }
 
 h1 {
-    font-size: clamp(2rem, 4vw, 3.2rem);
+    font-size: clamp(2.2rem, 4.2vw, 3.7rem);
+    line-height: 0.98;
 }
 
 h2 {
-    font-size: 1.38rem;
+    font-size: 1.32rem;
+    line-height: 1.15;
 }
 
 .muted-text {
+    margin: 0;
     color: var(--text-muted);
-    line-height: 1.6;
+    line-height: 1.65;
 }
 
 .muted-text.small,
 .tiny-text {
-    font-size: 0.88rem;
+    font-size: 0.9rem;
 }
 
 .tiny-text {
-    color: #8092ab;
+    color: var(--text-soft);
 }
 
 .grid {
@@ -200,11 +318,31 @@ h2 {
 }
 
 .two-col {
-    grid-template-columns: 1.7fr 1fr;
+    grid-template-columns: minmax(0, 1.6fr) minmax(300px, 0.9fr);
 }
 
 .three-col {
-    grid-template-columns: repeat(3, 1fr);
+    grid-template-columns: repeat(3, minmax(0, 1fr));
+}
+
+.panel-header {
+    position: relative;
+    z-index: 1;
+    display: flex;
+    justify-content: space-between;
+    align-items: flex-start;
+    gap: 14px;
+    margin-bottom: 18px;
+}
+
+.panel-header-with-actions {
+    align-items: center;
+}
+
+.panel-actions {
+    display: flex;
+    align-items: center;
+    gap: 10px;
 }
 
 .chart-panel {
@@ -212,12 +350,13 @@ h2 {
 }
 
 .chart-panel-large {
-    min-height: 500px;
+    min-height: 520px;
 }
 
-.chart-frame {
+.chart-frame,
+.chart-modal-frame {
     position: relative;
-    min-height: 360px;
+    min-height: 340px;
 }
 
 .chart-panel-large .chart-frame {
@@ -229,8 +368,8 @@ h2 {
 }
 
 .chart-frame-interactive:focus-visible {
-    outline: 2px solid rgba(245, 199, 106, 0.7);
-    outline-offset: 6px;
+    outline: 2px solid rgba(240, 138, 56, 0.55);
+    outline-offset: 5px;
 }
 
 .chart-panel canvas,
@@ -248,32 +387,54 @@ h2 {
 
 .stat-list {
     display: grid;
-    gap: 14px;
+    gap: 8px;
+    position: relative;
+    z-index: 1;
 }
 
 .stat-row {
     display: flex;
     justify-content: space-between;
+    align-items: center;
     gap: 14px;
-    padding: 12px 0;
+    padding: 14px 0;
     border-bottom: 1px solid var(--line);
 }
 
-.stat-card {
-    gap: 8px;
+.stat-row:last-child {
+    border-bottom: none;
 }
 
-.stat-card span {
+.stat-row span {
     color: var(--text-muted);
 }
 
+.stat-card {
+    gap: 10px;
+    min-height: 128px;
+}
+
+.stat-card span {
+    color: var(--text-soft);
+    font-size: 0.78rem;
+    font-weight: 700;
+    letter-spacing: 0.12em;
+    text-transform: uppercase;
+}
+
 .stat-card strong {
-    font-size: 1.75rem;
-    letter-spacing: -0.04em;
+    font-size: clamp(1.8rem, 3vw, 2.35rem);
+    line-height: 1;
+    letter-spacing: -0.06em;
 }
 
 .table-wrap {
+    position: relative;
+    z-index: 1;
     overflow-x: auto;
+    border-radius: 12px;
+    border: 1px solid var(--line);
+    background: rgba(255, 255, 255, 0.018);
 }
 
 table {
@@ -283,327 +444,194 @@ table {
 
 th,
 td {
-    text-align: left;
     padding: 14px 14px;
     border-bottom: 1px solid var(--line);
+    text-align: left;
     white-space: nowrap;
 }
 
 th {
-    color: var(--text-muted);
-    font-size: 0.83rem;
+    color: var(--text-soft);
+    font-size: 0.76rem;
+    font-weight: 700;
+    letter-spacing: 0.12em;
     text-transform: uppercase;
-    letter-spacing: 0.08em;
+}
+
+tbody tr {
+    transition: background-color 140ms ease;
 }
 
 tbody tr:hover {
-    background: rgba(124, 156, 255, 0.06);
+    background: rgba(255, 255, 255, 0.026);
 }
 
-.positive {
-    color: var(--green);
-    font-weight: 700;
+tbody tr:last-child td,
+tbody tr:last-child th {
+    border-bottom: none;
 }
 
-.negative {
-    color: var(--red);
-    font-weight: 700;
-}
-
-.neutral {
-    color: var(--amber);
-    font-weight: 700;
-}
-
-.form-shell {
-    display: flex;
-    justify-content: center;
-}
-
-.form-shell.narrow {
-    min-height: 55vh;
-    align-items: center;
-}
-
-.form-card {
-    display: grid;
-    gap: 16px;
-}
-
-.form-card label {
-    display: grid;
-    gap: 8px;
-}
-
-.form-card span {
-    font-size: 0.94rem;
-    color: var(--text-muted);
-}
-
-input,
-select,
-textarea,
-button {
-    font: inherit;
-}
-
-input,
-select,
-textarea {
-    width: 100%;
-    padding: 13px 14px;
-    border-radius: 16px;
-    border: 1px solid rgba(157, 176, 199, 0.18);
-    background: rgba(7, 17, 31, 0.78);
-    color: var(--text);
-    outline: none;
-}
-
-input:focus,
-select:focus,
-textarea:focus {
-    border-color: rgba(124, 156, 255, 0.7);
-    box-shadow: 0 0 0 4px rgba(124, 156, 255, 0.14);
-}
-
-.primary-button {
-    padding: 14px 18px;
-    border: none;
-    border-radius: 16px;
-    background: linear-gradient(135deg, #f4a261 0%, #2a9d8f 100%);
-    color: #07111f;
-    font-weight: 800;
-    cursor: pointer;
-}
-
-.secondary-button {
-    padding: 11px 14px;
-    border: 1px solid var(--line);
-    border-radius: 14px;
-    background: rgba(255, 255, 255, 0.04);
-    color: var(--text);
+td a {
     font-weight: 600;
-    cursor: pointer;
 }
 
-.secondary-button:hover {
-    background: rgba(255, 255, 255, 0.08);
-}
-
-.helper-box {
-    display: flex;
-    gap: 10px;
-    align-items: flex-start;
-    border-radius: 18px;
-    border: 1px solid var(--line);
-    padding: 14px 16px;
-    color: var(--text-muted);
-    background: rgba(244, 162, 97, 0.06);
-}
-
-.note-list {
-    margin: 0;
-    padding-left: 18px;
-    color: var(--text-muted);
-    white-space: normal;
-}
-
-.event-feed {
-    display: grid;
-    gap: 12px;
-    max-height: 580px;
-    overflow-y: auto;
-    padding-right: 2px;
-}
-
-.event-feed.condensed {
-    max-height: 420px;
-}
-
-.event-card {
-    padding: 16px;
-    border-radius: 20px;
-    border: 1px solid var(--line);
-    background: rgba(7, 17, 31, 0.72);
-}
-
-.event-card-top {
-    display: flex;
-    justify-content: space-between;
-    gap: 12px;
-    align-items: center;
-}
-
-.event-amount {
-    margin: 10px 0 6px;
-    font-size: 1.2rem;
-    font-weight: 700;
-    letter-spacing: -0.04em;
-}
-
-.pill {
-    border-radius: 999px;
-    padding: 6px 10px;
-    background: rgba(244, 162, 97, 0.12);
-    color: #ffd3ab;
-    font-size: 0.77rem;
-    text-transform: uppercase;
-    letter-spacing: 0.08em;
-}
-
-.stack-gap {
-    display: grid;
-    gap: 24px;
-}
-
-.narrow {
-    max-width: 520px;
-    width: 100%;
-}
-
-.small-table table th,
-.small-table table td {
-    padding: 12px;
-}
-
-@media (max-width: 980px) {
-    .two-col,
-    .three-col,
-    .session-layout,
-    .admin-layout {
-        grid-template-columns: 1fr;
-    }
-
-    .topbar {
-        border-radius: 28px;
-        padding: 20px;
-        align-items: flex-start;
-        flex-direction: column;
-    }
-}
-
-@media (max-width: 640px) {
-    .site-shell {
-        width: min(100% - 18px, 100%);
-        padding-top: 18px;
-    }
-
-    .panel,
-    .hero-card {
-        padding: 18px;
-        border-radius: 22px;
-    }
-
-    h1 {
-        font-size: 2rem;
-    }
-
-    .nav-links {
-        width: 100%;
-    }
-}
-
-
-.panel-header-with-actions {
-    align-items: center;
-}
-
-.panel-actions {
-    display: flex;
-    gap: 10px;
-    align-items: center;
-    flex-wrap: wrap;
-}
-
-.sortable-table th {
-    padding-top: 10px;
-    padding-bottom: 10px;
+td a:hover {
+    color: var(--accent-2);
 }
 
 .sort-button {
     display: inline-flex;
     align-items: center;
-    gap: 8px;
+    gap: 6px;
     width: 100%;
     padding: 0;
-    border: none;
+    border: 0;
     background: transparent;
     color: inherit;
-    text-transform: inherit;
-    letter-spacing: inherit;
-    font: inherit;
+    text-align: left;
     cursor: pointer;
 }
 
-.sort-button:hover,
-.sort-button.is-active {
+.sort-button:hover {
     color: var(--text);
 }
 
+.sort-button.is-active {
+    color: var(--accent-2);
+}
+
 .sort-indicator {
-    color: var(--text-soft, #8092ab);
+    color: var(--text-soft);
     font-size: 0.9em;
 }
 
+.sort-button.is-active .sort-indicator {
+    color: var(--accent-2);
+}
+
+.positive,
+.negative,
+.neutral {
+    font-weight: 700;
+}
+
+.positive {
+    color: var(--positive);
+}
+
+.negative {
+    color: var(--negative);
+}
+
+.neutral {
+    color: var(--neutral);
+}
+
 .chart-modal {
     position: fixed;
     inset: 0;
+    z-index: 80;
     display: none;
-    align-items: stretch;
-    justify-content: center;
-    padding: 24px;
-    z-index: 200;
 }
 
 .chart-modal.is-open {
-    display: flex;
+    display: block;
 }
 
 .chart-modal-backdrop {
     position: absolute;
     inset: 0;
-    background: rgba(3, 6, 12, 0.76);
-    backdrop-filter: blur(10px);
+    background: rgba(8, 10, 12, 0.76);
+    backdrop-filter: blur(6px);
 }
 
 .chart-modal-card {
     position: relative;
     z-index: 1;
-    width: min(1280px, 100%);
-    min-height: calc(100vh - 48px);
-    border-radius: 28px;
-    border: 1px solid var(--line);
-    background: rgba(11, 17, 24, 0.96);
+    width: min(1320px, calc(100vw - 48px));
+    max-height: calc(100vh - 48px);
+    margin: 24px auto;
+    padding: 22px;
+    border: 1px solid var(--line-strong);
+    border-radius: 20px;
+    background: var(--bg-panel-strong);
     box-shadow: var(--shadow);
-    padding: 24px;
-    display: grid;
-    grid-template-rows: auto 1fr;
-    gap: 18px;
 }
 
 .chart-modal-frame {
-    min-height: 70vh;
+    height: min(74vh, 820px);
 }
 
-body.modal-open {
-    overflow: hidden;
+.leaderboard-layout {
+    align-items: stretch;
 }
 
 @media (max-width: 980px) {
+    .site-shell {
+        width: min(100% - 24px, 100%);
+    }
+
+    .topbar {
+        align-items: flex-start;
+        flex-direction: column;
+        border-radius: 16px;
+    }
+
+    .two-col,
+    .three-col,
     .leaderboard-layout {
         grid-template-columns: 1fr;
     }
 
-    .chart-modal {
-        padding: 12px;
+    .chart-panel-large .chart-frame {
+        min-height: 360px;
+    }
+}
+
+@media (max-width: 640px) {
+    .site-shell {
+        padding-top: 16px;
+    }
+
+    .topbar,
+    .hero-card,
+    .panel {
+        border-radius: 14px;
+    }
+
+    .topbar,
+    .hero-card,
+    .panel,
+    .chart-modal-card {
+        padding-left: 16px;
+        padding-right: 16px;
+    }
+
+    h1 {
+        font-size: 1.95rem;
+    }
+
+    .nav-links {
+        width: 100%;
+    }
+
+    .nav-links a,
+    .ghost-button,
+    .secondary-button {
+        min-height: 40px;
+    }
+
+    th,
+    td {
+        padding: 12px 12px;
     }
 
     .chart-modal-card {
-        min-height: calc(100vh - 24px);
-        padding: 18px;
+        width: min(100vw - 20px, 100%);
+        margin: 10px auto;
     }
 
     .chart-modal-frame {
-        min-height: 62vh;
+        height: min(68vh, 620px);
     }
 }

From 686d1e9b2dfa63d71118292b2eb4c8acb8528f05 Mon Sep 17 00:00:00 2001
From: SowinskiBraeden <braeden@sowinski.dev>
Date: Sun, 15 Mar 2026 15:48:21 -0700
Subject: [PATCH 04/83] fix admin panel styles

---
 static/css/style.css | 331 ++++++++++++++++++++++++++++++-------------
 1 file changed, 233 insertions(+), 98 deletions(-)

diff --git a/static/css/style.css b/static/css/style.css
index 8aacde9..95d39f4 100644
--- a/static/css/style.css
+++ b/static/css/style.css
@@ -1,25 +1,24 @@
 :root {
-    --bg: #0f1113;
-    --bg-elevated: #14171b;
-    --bg-panel: rgba(20, 23, 27, 0.92);
-    --bg-panel-strong: rgba(24, 28, 33, 0.98);
-    --bg-soft: rgba(255, 255, 255, 0.028);
+    --bg: #0f1012;
+    --bg-panel: rgba(20, 22, 26, 0.92);
+    --bg-panel-strong: rgba(24, 27, 31, 0.98);
+    --bg-soft: rgba(255, 255, 255, 0.026);
     --line: rgba(255, 255, 255, 0.08);
-    --line-strong: rgba(255, 255, 255, 0.12);
-    --text: #f3f4f6;
-    --text-muted: #a8adb7;
-    --text-soft: #8b919c;
-    --accent: #f08a38;
-    --accent-2: #ffb36a;
-    --accent-soft: rgba(240, 138, 56, 0.14);
-    --positive: #59d98e;
-    --negative: #f06c72;
-    --neutral: #e4bf65;
-    --shadow: 0 20px 60px rgba(0, 0, 0, 0.32);
-    --shadow-soft: 0 10px 30px rgba(0, 0, 0, 0.18);
-    --radius-sm: 10px;
-    --radius: 14px;
-    --radius-lg: 18px;
+    --line-strong: rgba(255, 255, 255, 0.13);
+    --text: #f5f3ef;
+    --text-muted: #a9adb6;
+    --text-soft: #868b94;
+    --accent: #e58b3a;
+    --accent-2: #ffb66d;
+    --accent-soft: rgba(229, 139, 58, 0.14);
+    --positive: #58d38f;
+    --negative: #ef6a72;
+    --neutral: #ddb662;
+    --shadow: 0 24px 64px rgba(0, 0, 0, 0.34);
+    --shadow-soft: 0 12px 34px rgba(0, 0, 0, 0.22);
+    --radius-sm: 8px;
+    --radius: 12px;
+    --radius-lg: 16px;
 }
 
 * {
@@ -38,15 +37,15 @@ body {
     background:
         radial-gradient(
             circle at top left,
-            rgba(240, 138, 56, 0.1),
+            rgba(229, 139, 58, 0.11),
             transparent 22%
         ),
         radial-gradient(
             circle at top right,
-            rgba(255, 179, 106, 0.06),
+            rgba(255, 182, 109, 0.05),
             transparent 18%
         ),
-        linear-gradient(180deg, #0d0f11 0%, #121519 100%);
+        linear-gradient(180deg, #0c0d0f 0%, #111418 100%);
 }
 
 body::before {
@@ -54,10 +53,10 @@ body::before {
     position: fixed;
     inset: 0;
     background-image:
-        linear-gradient(rgba(255, 255, 255, 0.016) 1px, transparent 1px),
-        linear-gradient(90deg, rgba(255, 255, 255, 0.016) 1px, transparent 1px);
-    background-size: 38px 38px;
-    opacity: 0.28;
+        linear-gradient(rgba(255, 255, 255, 0.012) 1px, transparent 1px),
+        linear-gradient(90deg, rgba(255, 255, 255, 0.012) 1px, transparent 1px);
+    background-size: 40px 40px;
+    opacity: 0.22;
     pointer-events: none;
 }
 
@@ -90,60 +89,34 @@ button {
 .site-shell {
     width: min(1280px, calc(100% - 40px));
     margin: 0 auto;
-    padding: 26px 0 44px;
+    padding: 24px 0 44px;
 }
 
 .topbar {
     display: flex;
     justify-content: space-between;
     align-items: center;
-    gap: 20px;
-    padding: 18px 20px;
-    margin-bottom: 26px;
+    gap: 18px;
+    padding: 18px 22px;
+    margin-bottom: 24px;
     border: 1px solid var(--line);
     border-radius: var(--radius-lg);
-    background: rgba(16, 18, 22, 0.82);
+    background: rgba(16, 18, 22, 0.84);
     backdrop-filter: blur(10px);
     box-shadow: var(--shadow-soft);
 }
 
-.brand-lockup {
-    min-width: 0;
-}
-
-.brand-row {
-    display: flex;
-    align-items: center;
-    gap: 10px;
-}
-
-.brand-badge {
-    display: inline-flex;
-    align-items: center;
-    justify-content: center;
-    height: 24px;
-    padding: 0 9px;
-    border-radius: 999px;
-    background: var(--accent-soft);
-    border: 1px solid rgba(240, 138, 56, 0.24);
-    color: var(--accent-2);
-    font-family: "IBM Plex Mono", monospace;
-    font-size: 0.72rem;
-    font-weight: 600;
-    letter-spacing: 0.08em;
-    text-transform: uppercase;
-}
-
 .brand {
-    font-size: 1.25rem;
+    display: inline-block;
+    font-size: 1.3rem;
     font-weight: 800;
-    letter-spacing: -0.04em;
+    letter-spacing: -0.045em;
 }
 
 .brand-subtitle {
     margin: 6px 0 0;
     color: var(--text-muted);
-    font-size: 0.94rem;
+    font-size: 0.95rem;
 }
 
 .nav-links {
@@ -153,26 +126,33 @@ button {
     flex-wrap: wrap;
 }
 
+.nav-links form {
+    margin: 0;
+}
+
 .nav-links a,
 .ghost-button,
 .secondary-button,
+.primary-button,
 .sort-button {
     transition:
         background-color 140ms ease,
         border-color 140ms ease,
         color 140ms ease,
-        transform 140ms ease;
+        transform 140ms ease,
+        box-shadow 140ms ease;
 }
 
 .nav-links a,
 .ghost-button,
-.secondary-button {
+.secondary-button,
+.primary-button {
     display: inline-flex;
     align-items: center;
     justify-content: center;
     min-height: 42px;
     padding: 0 14px;
-    border-radius: 12px;
+    border-radius: 10px;
     border: 1px solid transparent;
     background: transparent;
     color: var(--text);
@@ -182,20 +162,39 @@ button {
 .nav-links a:hover,
 .ghost-button:hover,
 .secondary-button:hover {
-    background: rgba(255, 255, 255, 0.04);
+    background: rgba(255, 255, 255, 0.038);
     border-color: var(--line);
 }
 
-.nav-accent,
 .secondary-button {
-    background: rgba(255, 255, 255, 0.03);
     border-color: var(--line);
+    background: rgba(255, 255, 255, 0.025);
 }
 
-.nav-accent:hover,
 .secondary-button:hover {
-    border-color: rgba(240, 138, 56, 0.26);
-    box-shadow: inset 0 0 0 1px rgba(240, 138, 56, 0.12);
+    border-color: rgba(229, 139, 58, 0.3);
+    box-shadow: inset 0 0 0 1px rgba(229, 139, 58, 0.1);
+}
+
+.primary-button {
+    padding: 0 16px;
+    border-color: rgba(229, 139, 58, 0.3);
+    background: linear-gradient(
+        180deg,
+        rgba(229, 139, 58, 0.2),
+        rgba(229, 139, 58, 0.12)
+    );
+    color: #fff3e5;
+    box-shadow: inset 0 1px 0 rgba(255, 255, 255, 0.06);
+}
+
+.primary-button:hover {
+    border-color: rgba(255, 182, 109, 0.42);
+    background: linear-gradient(
+        180deg,
+        rgba(229, 139, 58, 0.25),
+        rgba(229, 139, 58, 0.14)
+    );
 }
 
 .flash-stack {
@@ -209,25 +208,24 @@ button {
     border: 1px solid var(--line);
     border-radius: var(--radius);
     background: var(--bg-panel);
-    color: var(--text);
     box-shadow: var(--shadow-soft);
 }
 
 .flash.success {
-    border-color: rgba(89, 217, 142, 0.18);
+    border-color: rgba(88, 211, 143, 0.2);
     background: linear-gradient(
         180deg,
-        rgba(89, 217, 142, 0.1),
-        rgba(20, 23, 27, 0.94)
+        rgba(88, 211, 143, 0.08),
+        rgba(20, 22, 26, 0.94)
     );
 }
 
 .flash.error {
-    border-color: rgba(240, 108, 114, 0.18);
+    border-color: rgba(239, 106, 114, 0.2);
     background: linear-gradient(
         180deg,
-        rgba(240, 108, 114, 0.1),
-        rgba(20, 23, 27, 0.94)
+        rgba(239, 106, 114, 0.08),
+        rgba(20, 22, 26, 0.94)
     );
 }
 
@@ -274,9 +272,8 @@ button {
 .eyebrow {
     margin: 0 0 8px;
     color: var(--accent-2);
-    font-family: "IBM Plex Mono", monospace;
     font-size: 0.74rem;
-    font-weight: 600;
+    font-weight: 700;
     letter-spacing: 0.12em;
     text-transform: uppercase;
 }
@@ -284,16 +281,16 @@ button {
 h1,
 h2 {
     margin: 0;
-    letter-spacing: -0.045em;
+    letter-spacing: -0.05em;
 }
 
 h1 {
-    font-size: clamp(2.2rem, 4.2vw, 3.7rem);
+    font-size: clamp(2.15rem, 4.2vw, 3.7rem);
     line-height: 0.98;
 }
 
 h2 {
-    font-size: 1.32rem;
+    font-size: 1.34rem;
     line-height: 1.15;
 }
 
@@ -318,13 +315,77 @@ h2 {
 }
 
 .two-col {
-    grid-template-columns: minmax(0, 1.6fr) minmax(300px, 0.9fr);
+    grid-template-columns: minmax(0, 1.65fr) minmax(320px, 0.95fr);
 }
 
 .three-col {
     grid-template-columns: repeat(3, minmax(0, 1fr));
 }
 
+.stack-gap {
+    display: grid;
+    gap: 18px;
+}
+
+.form-shell {
+    display: grid;
+    justify-content: center;
+}
+
+.form-shell.narrow {
+    grid-template-columns: minmax(320px, 540px);
+}
+
+.form-card {
+    display: grid;
+    gap: 16px;
+    align-content: start;
+}
+
+.form-card label {
+    display: grid;
+    gap: 8px;
+    position: relative;
+    z-index: 1;
+}
+
+.form-card label > span {
+    color: var(--text-soft);
+    font-size: 0.84rem;
+    font-weight: 700;
+    letter-spacing: 0.08em;
+    text-transform: uppercase;
+}
+
+.form-card input,
+.form-card select,
+.form-card textarea {
+    width: 100%;
+    border: 1px solid var(--line);
+    border-radius: 10px;
+    background: rgba(255, 255, 255, 0.028);
+    color: var(--text);
+    padding: 12px 13px;
+    outline: none;
+    appearance: none;
+}
+
+.form-card textarea {
+    resize: vertical;
+    min-height: 112px;
+}
+
+.form-card input:focus,
+.form-card select:focus,
+.form-card textarea:focus {
+    border-color: rgba(229, 139, 58, 0.42);
+    box-shadow: 0 0 0 4px rgba(229, 139, 58, 0.1);
+}
+
+.admin-layout .form-card {
+    align-self: start;
+}
+
 .panel-header {
     position: relative;
     z-index: 1;
@@ -350,7 +411,7 @@ h2 {
 }
 
 .chart-panel-large {
-    min-height: 520px;
+    min-height: 540px;
 }
 
 .chart-frame,
@@ -360,7 +421,7 @@ h2 {
 }
 
 .chart-panel-large .chart-frame {
-    min-height: 430px;
+    min-height: 450px;
 }
 
 .chart-frame-interactive {
@@ -368,7 +429,7 @@ h2 {
 }
 
 .chart-frame-interactive:focus-visible {
-    outline: 2px solid rgba(240, 138, 56, 0.55);
+    outline: 2px solid rgba(229, 139, 58, 0.55);
     outline-offset: 5px;
 }
 
@@ -432,11 +493,16 @@ h2 {
     position: relative;
     z-index: 1;
     overflow-x: auto;
-    border-radius: 12px;
+    border-radius: 10px;
     border: 1px solid var(--line);
     background: rgba(255, 255, 255, 0.018);
 }
 
+.small-table th,
+.small-table td {
+    padding: 12px 14px;
+}
+
 table {
     width: 100%;
     border-collapse: collapse;
@@ -444,10 +510,11 @@ table {
 
 th,
 td {
-    padding: 14px 14px;
+    padding: 14px;
     border-bottom: 1px solid var(--line);
     text-align: left;
     white-space: nowrap;
+    vertical-align: top;
 }
 
 th {
@@ -527,6 +594,67 @@ td a:hover {
     color: var(--neutral);
 }
 
+.event-feed {
+    display: grid;
+    gap: 12px;
+    position: relative;
+    z-index: 1;
+}
+
+.event-feed.condensed {
+    gap: 10px;
+}
+
+.event-card {
+    display: grid;
+    gap: 8px;
+    padding: 14px;
+    border: 1px solid var(--line);
+    border-radius: 10px;
+    background: rgba(255, 255, 255, 0.022);
+}
+
+.event-card-top {
+    display: flex;
+    align-items: center;
+    justify-content: space-between;
+    gap: 12px;
+}
+
+.event-amount {
+    margin: 0;
+    font-size: 1.1rem;
+    font-weight: 700;
+    letter-spacing: -0.03em;
+}
+
+.pill {
+    display: inline-flex;
+    align-items: center;
+    justify-content: center;
+    min-height: 26px;
+    padding: 0 10px;
+    border: 1px solid rgba(229, 139, 58, 0.25);
+    border-radius: 999px;
+    background: var(--accent-soft);
+    color: var(--accent-2);
+    font-size: 0.72rem;
+    font-weight: 700;
+    letter-spacing: 0.08em;
+    text-transform: uppercase;
+}
+
+.note-list {
+    margin: 0;
+    padding-left: 18px;
+    color: var(--text-muted);
+    white-space: normal;
+}
+
+.note-list li + li {
+    margin-top: 6px;
+}
+
 .chart-modal {
     position: fixed;
     inset: 0;
@@ -541,7 +669,7 @@ td a:hover {
 .chart-modal-backdrop {
     position: absolute;
     inset: 0;
-    background: rgba(8, 10, 12, 0.76);
+    background: rgba(8, 10, 12, 0.78);
     backdrop-filter: blur(6px);
 }
 
@@ -553,7 +681,7 @@ td a:hover {
     margin: 24px auto;
     padding: 22px;
     border: 1px solid var(--line-strong);
-    border-radius: 20px;
+    border-radius: 18px;
     background: var(--bg-panel-strong);
     box-shadow: var(--shadow);
 }
@@ -562,7 +690,9 @@ td a:hover {
     height: min(74vh, 820px);
 }
 
-.leaderboard-layout {
+.leaderboard-layout,
+.session-layout,
+.admin-layout {
     align-items: stretch;
 }
 
@@ -574,12 +704,14 @@ td a:hover {
     .topbar {
         align-items: flex-start;
         flex-direction: column;
-        border-radius: 16px;
+        border-radius: 14px;
     }
 
     .two-col,
     .three-col,
-    .leaderboard-layout {
+    .leaderboard-layout,
+    .session-layout,
+    .admin-layout {
         grid-template-columns: 1fr;
     }
 
@@ -595,7 +727,8 @@ td a:hover {
 
     .topbar,
     .hero-card,
-    .panel {
+    .panel,
+    .chart-modal-card {
         border-radius: 14px;
     }
 
@@ -617,21 +750,23 @@ td a:hover {
 
     .nav-links a,
     .ghost-button,
-    .secondary-button {
+    .secondary-button,
+    .primary-button {
         min-height: 40px;
     }
 
     th,
     td {
-        padding: 12px 12px;
+        padding: 12px;
     }
 
     .chart-modal-card {
         width: min(100vw - 20px, 100%);
         margin: 10px auto;
+        max-height: calc(100vh - 20px);
     }
 
     .chart-modal-frame {
-        height: min(68vh, 620px);
+        height: min(66vh, 680px);
     }
 }

From ea20529b6e226a8fbc048117c816c29af4835f82 Mon Sep 17 00:00:00 2001
From: SowinskiBraeden <braeden@sowinski.dev>
Date: Sun, 15 Mar 2026 16:18:29 -0700
Subject: [PATCH 05/83] filter leaderboard by session

---
 app.py                     | 30 ++++++++++++++++++---
 static/css/style.css       | 55 ++++++++++++++++++++++++++++++++++++++
 templates/leaderboard.html | 23 +++++++++++++---
 3 files changed, 100 insertions(+), 8 deletions(-)

diff --git a/app.py b/app.py
index e0adcc4..166f7d6 100644
--- a/app.py
+++ b/app.py
@@ -69,14 +69,36 @@ def home() -> str:
 @app.get("/leaderboard")
 def leaderboard() -> str:
     events = load_events(DATA_PATH)
-    sessions = build_session_summaries(events)
-    board = build_leaderboard(sessions)
-    chart_data = cumulative_profit_series(sessions)
+    all_sessions = build_session_summaries(events)
+    selected_session_date = request.args.get("through_session", "").strip()
+    valid_session_dates = {session.session_date for session in all_sessions}
+
+    if selected_session_date not in valid_session_dates:
+        selected_session_date = ""
+
+    filtered_sessions = all_sessions
+    if selected_session_date:
+        filtered_sessions = [
+            session
+            for session in all_sessions
+            if session.session_date <= selected_session_date
+        ]
+
+    board = build_leaderboard(filtered_sessions)
+    chart_data = cumulative_profit_series(filtered_sessions)
     return render_template(
         "leaderboard.html",
         leaderboard=board,
-        session_count=len(sessions),
+        session_count=len(filtered_sessions),
+        total_session_count=len(all_sessions),
         chart_data=chart_data,
+        available_sessions=all_sessions,
+        selected_session_date=selected_session_date,
+        selected_session_label=(
+            safe_date_label(selected_session_date)
+            if selected_session_date
+            else "Latest session"
+        ),
     )
 
 
diff --git a/static/css/style.css b/static/css/style.css
index 95d39f4..96ec9c5 100644
--- a/static/css/style.css
+++ b/static/css/style.css
@@ -576,6 +576,45 @@ td a:hover {
     color: var(--accent-2);
 }
 
+.leaderboard-controls {
+    display: grid;
+    gap: 8px;
+    justify-items: end;
+}
+
+.session-filter-form {
+    display: flex;
+    align-items: center;
+    gap: 10px;
+    flex-wrap: wrap;
+}
+
+.session-filter-label {
+    color: var(--text-muted);
+    font-size: 0.9rem;
+    font-weight: 600;
+}
+
+.session-filter-select {
+    min-width: 220px;
+    min-height: 42px;
+    padding: 0 14px;
+    border: 1px solid var(--line-strong);
+    border-radius: 12px;
+    background: rgba(255, 255, 255, 0.035);
+    color: var(--text);
+    outline: none;
+}
+
+.session-filter-select:focus {
+    border-color: rgba(240, 138, 56, 0.42);
+    box-shadow: 0 0 0 4px rgba(240, 138, 56, 0.12);
+}
+
+.compact-button {
+    min-height: 42px;
+}
+
 .positive,
 .negative,
 .neutral {
@@ -770,3 +809,19 @@ td a:hover {
         height: min(66vh, 680px);
     }
 }
+
+@media (max-width: 860px) {
+    .leaderboard-header,
+    .leaderboard-controls {
+        align-items: start;
+        justify-items: start;
+    }
+
+    .session-filter-form {
+        width: 100%;
+    }
+
+    .session-filter-select {
+        width: 100%;
+    }
+}
diff --git a/templates/leaderboard.html b/templates/leaderboard.html
index 85b9980..13a66ec 100644
--- a/templates/leaderboard.html
+++ b/templates/leaderboard.html
@@ -5,7 +5,7 @@
     <div>
         <p class="eyebrow">All-time results</p>
         <h1>Leaderboard</h1>
-        <p class="muted-text">Track who is up, who is chasing, and how everyone has moved across {{ session_count }} recorded sessions.</p>
+        <p class="muted-text">Track who is up, who is chasing, and how everyone has moved across {{ session_count }} recorded sessions{% if selected_session_date %} through {{ selected_session_label }}{% endif %}.</p>
     </div>
 </section>
 
@@ -30,7 +30,8 @@
         <h2>Table snapshot</h2>
         <div class="stat-list">
             <div class="stat-row"><span>Players tracked</span><strong>{{ leaderboard|length }}</strong></div>
-            <div class="stat-row"><span>Sessions tracked</span><strong>{{ session_count }}</strong></div>
+            <div class="stat-row"><span>Sessions tracked</span><strong>{{ session_count }}{% if total_session_count != session_count %} / {{ total_session_count }}{% endif %}</strong></div>
+            <div class="stat-row"><span>Through session</span><strong>{{ selected_session_label }}</strong></div>
             <div class="stat-row"><span>Best player</span><strong>{% if leaderboard %}{{ leaderboard[0].player_name }}{% else %}—{% endif %}</strong></div>
             <div class="stat-row"><span>Worst player</span><strong>{% if leaderboard %}{{ leaderboard[-1].player_name }}{% else %}—{% endif %}</strong></div>
         </div>
@@ -38,12 +39,26 @@
 </section>
 
 <section class="panel">
-    <div class="panel-header">
+    <div class="panel-header leaderboard-header">
         <div>
             <p class="eyebrow">Standings</p>
             <h2>All-time leaderboard</h2>
         </div>
-        <p class="muted-text small">Click any column to sort.</p>
+        <div class="leaderboard-controls">
+            <form method="get" class="session-filter-form">
+                <label for="through_session" class="session-filter-label">Through session</label>
+                <select id="through_session" name="through_session" class="session-filter-select" onchange="this.form.submit()">
+                    <option value="" {% if not selected_session_date %}selected{% endif %}>Latest session</option>
+                    {% for session in available_sessions %}
+                    <option value="{{ session.session_date }}" {% if selected_session_date == session.session_date %}selected{% endif %}>{{ session.session_date | pretty_date }}</option>
+                    {% endfor %}
+                </select>
+                {% if selected_session_date %}
+                <a class="ghost-button compact-button" href="{{ url_for('leaderboard') }}">Reset</a>
+                {% endif %}
+            </form>
+            <p class="muted-text small">Click any column to sort.</p>
+        </div>
     </div>
 
     <div class="table-wrap">

From 403924ad3727ae8eea3fc2720897cddf37541ad6 Mon Sep 17 00:00:00 2001
From: SowinskiBraeden <braeden@sowinski.dev>
Date: Mon, 16 Mar 2026 12:10:51 -0700
Subject: [PATCH 06/83] nearly forgot me shebang lines

---
 app.py     | 1 +
 stats.py   | 1 +
 storage.py | 1 +
 3 files changed, 3 insertions(+)

diff --git a/app.py b/app.py
index 166f7d6..ab26887 100644
--- a/app.py
+++ b/app.py
@@ -1,3 +1,4 @@
+#!/usr/bin/env python3
 from __future__ import annotations
 
 import os
diff --git a/stats.py b/stats.py
index 8235c04..db88e80 100644
--- a/stats.py
+++ b/stats.py
@@ -1,3 +1,4 @@
+#!/usr/bin/env python3
 from __future__ import annotations
 
 from collections import defaultdict
diff --git a/storage.py b/storage.py
index 478fe21..b696604 100644
--- a/storage.py
+++ b/storage.py
@@ -1,3 +1,4 @@
+#!/usr/bin/env python3
 from __future__ import annotations
 
 import csv

From b21a5dc002bee6605e59d9ec30d70dfb4d67490f Mon Sep 17 00:00:00 2001
From: SowinskiBraeden <braeden@sowinski.dev>
Date: Mon, 16 Mar 2026 16:03:47 -0700
Subject: [PATCH 07/83] add next/prev session links + shorten admin recent feed

---
 app.py                        | 18 +++++++++++++++++-
 templates/session_detail.html | 19 +++++++++++++++----
 2 files changed, 32 insertions(+), 5 deletions(-)

diff --git a/app.py b/app.py
index ab26887..7d31d0d 100644
--- a/app.py
+++ b/app.py
@@ -126,9 +126,25 @@ def session_detail(session_date: str) -> str:
         flash("That session was not found.", "error")
         return redirect(url_for("sessions"))
 
+    # sessions are in reverse order
+    idx = sessions.index(target_session)
+    next_session_idx = idx - 1
+    prev_session_idx = idx + 1
+
+    next_session = None
+    prev_session = None
+
+    if next_session_idx >= 0:
+        next_session = sessions[next_session_idx]
+
+    if prev_session_idx < len(sessions):
+        prev_session = sessions[prev_session_idx]
+
     return render_template(
         "session_detail.html",
         session=target_session,
+        next_session=next_session,
+        prev_session=prev_session,
         raw_events=session_events(events, session_date),
     )
 
@@ -217,7 +233,7 @@ def admin_dashboard() -> str:
     events = load_events(DATA_PATH)
     sessions = build_session_summaries(events)
     recent_sessions = sessions[:6]
-    recent_events = list(reversed(events[-20:]))
+    recent_events = list(reversed(events[-10:]))
     return render_template(
         "admin_dashboard.html",
         recent_sessions=recent_sessions,
diff --git a/templates/session_detail.html b/templates/session_detail.html
index 398ad95..be66edb 100644
--- a/templates/session_detail.html
+++ b/templates/session_detail.html
@@ -2,10 +2,21 @@
 {% block title %}{{ session.session_date }} · Poker Portal{% endblock %}
 {% block content %}
 <section class="hero-card compact">
-    <div>
-        <p class="eyebrow">Session detail</p>
-        <h1>{{ session.session_date | pretty_date }}</h1>
-        <p class="muted-text">Current totals are derived from the event log for this date.</p>
+    <div style="display: flex; justify-content: space-between;">
+        <div>
+            <p class="eyebrow">Session detail</p>
+            <h1>{{ session.session_date | pretty_date }}</h1>
+            <p class="muted-text">Current totals are derived from the event log for this date.</p>
+        </div>
+
+        <div style="align-content: center;">
+            {% if prev_session %}
+                <a class="secondary-button" href="{{ url_for('session_detail', session_date=prev_session.session_date) }}">Previous Session</a>
+            {% endif %}
+            {% if next_session %}
+                <a class="secondary-button" href="{{ url_for('session_detail', session_date=next_session.session_date) }}">Next Session</a>
+            {% endif %}
+        </div>
     </div>
 </section>
 

From 7648bf6e6a04cf97bdb6c77bbfdf203b5ec6468b Mon Sep 17 00:00:00 2001
From: SowinskiBraeden <braeden@sowinski.dev>
Date: Fri, 20 Mar 2026 23:28:22 -0700
Subject: [PATCH 08/83] add rank delta to leaderboard

---
 app.py                     | 29 ++++++++++++++--------
 static/css/style.css       | 25 +++++++++++++++++++
 stats.py                   | 51 +++++++++++++++++++++++++++-----------
 templates/leaderboard.html | 31 +++++++++++++++--------
 4 files changed, 102 insertions(+), 34 deletions(-)

diff --git a/app.py b/app.py
index 7d31d0d..72159bc 100644
--- a/app.py
+++ b/app.py
@@ -7,6 +7,7 @@ from pathlib import Path
 from flask import Flask, flash, redirect, render_template, request, session, url_for
 
 from stats import (
+    apply_rank_changes,
     build_leaderboard,
     build_session_summaries,
     cents_to_dollars,
@@ -71,22 +72,30 @@ def home() -> str:
 def leaderboard() -> str:
     events = load_events(DATA_PATH)
     all_sessions = build_session_summaries(events)
+    ordered_sessions = sorted(all_sessions, key=lambda s: s.session_date)
+
+    session_dates = [session.session_date for session in ordered_sessions]
     selected_session_date = request.args.get("through_session", "").strip()
-    valid_session_dates = {session.session_date for session in all_sessions}
 
-    if selected_session_date not in valid_session_dates:
-        selected_session_date = ""
+    if session_dates:
+        if selected_session_date in session_dates:
+            cutoff_index = session_dates.index(selected_session_date)
+        else:
+            cutoff_index = len(session_dates) - 1
+            selected_session = session_dates[cutoff_index]
 
-    filtered_sessions = all_sessions
-    if selected_session_date:
-        filtered_sessions = [
-            session
-            for session in all_sessions
-            if session.session_date <= selected_session_date
-        ]
+        filtered_sessions = ordered_sessions[: cutoff_index + 1]
+        previous_sessions = ordered_sessions[:cutoff_index]
+    else:
+        filtered_sessions = []
+        previous_sessions = []
 
     board = build_leaderboard(filtered_sessions)
+    previous_board = build_leaderboard(previous_sessions)
+    board = apply_rank_changes(board, previous_board)
+
     chart_data = cumulative_profit_series(filtered_sessions)
+
     return render_template(
         "leaderboard.html",
         leaderboard=board,
diff --git a/static/css/style.css b/static/css/style.css
index 96ec9c5..b679fa4 100644
--- a/static/css/style.css
+++ b/static/css/style.css
@@ -489,6 +489,31 @@ h2 {
     letter-spacing: -0.06em;
 }
 
+.rank-move {
+    display: inline-flex;
+    align-items: center;
+    justify-content: center;
+    min-width: 2.5rem;
+    font-weight: 650;
+    letter-spacing: 0.01em;
+}
+
+.rank-up {
+    color: #22c55e;
+}
+
+.rank-down {
+    color: #ef4444;
+}
+
+.rank-flat {
+    color: var(--text-muted);
+}
+
+.inline-filter-form select {
+    min-width: 12rem;
+}
+
 .table-wrap {
     position: relative;
     z-index: 1;
diff --git a/stats.py b/stats.py
index db88e80..107daf9 100644
--- a/stats.py
+++ b/stats.py
@@ -71,15 +71,30 @@ class PlayerStats:
     total_cash_out_cents: int
     total_net_cents: int
     roi_pct: float
+    rank_change: int = 0
 
 
+def apply_rank_changes(
+    current_board: list[PlayerStats], prev_board: list[PlayerStats]
+) -> list[PlayerStats]:
+    prev_ranks = {p.player_name: i for i, p in enumerate(prev_board, start=1)}
+
+    for i, p in enumerate(current_board, start=1):
+        prev_rank = prev_ranks.get(p.player_name)
+
+        if prev_rank is None:
+            p.rank_change = 0
+        else:
+            p.rank_change = prev_rank - i
+
+    return current_board
+
 
 def cents_to_dollars(cents: int) -> str:
     value = cents / 100
     return f"${value:,.2f}"
 
 
-
 def safe_date_label(session_date: str) -> str:
     try:
         return datetime.strptime(session_date, "%Y-%m-%d").strftime("%b %d, %Y")
@@ -87,7 +102,6 @@ def safe_date_label(session_date: str) -> str:
         return session_date
 
 
-
 def color_for_name(name: str, names: list[str]) -> str:
     try:
         index = sorted(names, key=str.casefold).index(name)
@@ -96,7 +110,6 @@ def color_for_name(name: str, names: list[str]) -> str:
     return PLAYER_PALETTE[index % len(PLAYER_PALETTE)]
 
 
-
 def net_tone(value_cents: int) -> str:
     if value_cents > 0:
         return "#22c55e"
@@ -105,7 +118,6 @@ def net_tone(value_cents: int) -> str:
     return "#f59e0b"
 
 
-
 def build_session_summaries(events: list[EventRow]) -> list[SessionSummary]:
     grouped: dict[tuple[str, str], SessionEntry] = {}
 
@@ -141,7 +153,6 @@ def build_session_summaries(events: list[EventRow]) -> list[SessionSummary]:
     return sessions
 
 
-
 def build_leaderboard(sessions: list[SessionSummary]) -> list[PlayerStats]:
     player_entries: dict[str, list[SessionEntry]] = defaultdict(list)
     for session in sessions:
@@ -162,7 +173,9 @@ def build_leaderboard(sessions: list[SessionSummary]) -> list[PlayerStats]:
         break_even_sessions = sessions_played - winning_sessions - losing_sessions
         win_pct = (winning_sessions / sessions_played * 100) if sessions_played else 0.0
         avg_win = round(sum(wins) / len(wins)) if wins else 0
-        avg_loss = round(sum(abs(value) for value in losses) / len(losses)) if losses else 0
+        avg_loss = (
+            round(sum(abs(value) for value in losses) / len(losses)) if losses else 0
+        )
         biggest_win = max(wins) if wins else 0
         biggest_loss = min(losses) if losses else 0
         roi_pct = (total_net / total_buy_in * 100) if total_buy_in else 0.0
@@ -193,11 +206,14 @@ def build_leaderboard(sessions: list[SessionSummary]) -> list[PlayerStats]:
     return leaderboard
 
 
-
 def cumulative_profit_series(sessions: list[SessionSummary]) -> dict[str, Any]:
     ordered_sessions = sorted(sessions, key=lambda session: session.session_date)
     player_names = sorted(
-        {entry.player_name for session in ordered_sessions for entry in session.entries},
+        {
+            entry.player_name
+            for session in ordered_sessions
+            for entry in session.entries
+        },
         key=str.casefold,
     )
 
@@ -211,7 +227,11 @@ def cumulative_profit_series(sessions: list[SessionSummary]) -> dict[str, Any]:
 
         for session in ordered_sessions:
             matching_entry = next(
-                (entry for entry in session.entries if entry.player_name == player_name),
+                (
+                    entry
+                    for entry in session.entries
+                    if entry.player_name == player_name
+                ),
                 None,
             )
             if matching_entry is not None:
@@ -241,8 +261,9 @@ def cumulative_profit_series(sessions: list[SessionSummary]) -> dict[str, Any]:
     return {"labels": labels, "datasets": datasets}
 
 
-
-def player_session_series(sessions: list[SessionSummary], player_name: str) -> dict[str, Any]:
+def player_session_series(
+    sessions: list[SessionSummary], player_name: str
+) -> dict[str, Any]:
     ordered_sessions = sorted(sessions, key=lambda session: session.session_date)
     labels: list[str] = []
     net_values: list[float] = []
@@ -250,7 +271,11 @@ def player_session_series(sessions: list[SessionSummary], player_name: str) -> d
     running_total = 0
 
     all_player_names = sorted(
-        {entry.player_name for session in ordered_sessions for entry in session.entries},
+        {
+            entry.player_name
+            for session in ordered_sessions
+            for entry in session.entries
+        },
         key=str.casefold,
     )
 
@@ -276,11 +301,9 @@ def player_session_series(sessions: list[SessionSummary], player_name: str) -> d
     }
 
 
-
 def session_events(events: list[EventRow], session_date: str) -> list[EventRow]:
     return [event for event in events if event["session_date"] == session_date]
 
 
-
 def unique_player_names(events: list[EventRow]) -> list[str]:
     return sorted({event["player_name"] for event in events}, key=str.casefold)
diff --git a/templates/leaderboard.html b/templates/leaderboard.html
index 13a66ec..4c15c24 100644
--- a/templates/leaderboard.html
+++ b/templates/leaderboard.html
@@ -66,6 +66,7 @@
             <thead>
                 <tr>
                     <th><button type="button" class="sort-button" data-sort-key="rank" data-sort-type="number" data-initial-direction="asc">Rank <span class="sort-indicator">↕</span></button></th>
+                    <th><button type="button" class="sort-button" data-sort-key="rankdelta" data-sort-type="number" data-initial-direction="desc">Rank Δ <span class="sort-indicator">↕</span></button></th>
                     <th><button type="button" class="sort-button" data-sort-key="player" data-sort-type="string" data-initial-direction="asc">Player <span class="sort-indicator">↕</span></button></th>
                     <th><button type="button" class="sort-button" data-sort-key="buyins" data-sort-type="number" data-initial-direction="desc">Buy-ins <span class="sort-indicator">↕</span></button></th>
                     <th><button type="button" class="sort-button" data-sort-key="cashouts" data-sort-type="number" data-initial-direction="desc">Cash-outs <span class="sort-indicator">↕</span></button></th>
@@ -81,6 +82,15 @@
                 {% for player in leaderboard %}
                 <tr data-player-row="true" data-original-rank="{{ loop.index }}">
                     <td data-sort-value="{{ loop.index }}" data-rank-cell>#{{ loop.index }}</td>
+                    <td data-sort-value="{{ player.rank_change }}">
+                        {% if player.rank_change > 0 %}
+                            <span class="rank-move rank-up">↑ {{ player.rank_change }}</span>
+                        {% elif player.rank_change < 0 %}
+                            <span class="rank-move rank-down">↓ {{ player.rank_change | abs }}</span>
+                        {% else %}
+                            <span class="rank-move rank-neutral">-</span>
+                        {% endif %}
+                    </td>
                     <td data-sort-value="{{ player.player_name|lower }}"><a href="{{ url_for('player_detail', player_name=player.player_name) }}">{{ player.player_name }}</a></td>
                     <td data-sort-value="{{ player.total_buy_in_cents }}">{{ player.total_buy_in_cents | money }}</td>
                     <td data-sort-value="{{ player.total_cash_out_cents }}">{{ player.total_cash_out_cents | money }}</td>
@@ -93,7 +103,7 @@
                 </tr>
                 {% else %}
                 <tr>
-                    <td colspan="10">No data yet. Add the first event from the admin page.</td>
+                    <td colspan="11">No data yet. Add the first event from the admin page.</td>
                 </tr>
                 {% endfor %}
             </tbody>
@@ -254,15 +264,16 @@
     const sortButtons = Array.from(document.querySelectorAll('.sort-button'));
     const columnIndexMap = {
         rank: 0,
-        player: 1,
-        buyins: 2,
-        cashouts: 3,
-        net: 4,
-        winpct: 5,
-        roi: 6,
-        avgwin: 7,
-        avgloss: 8,
-        sessions: 9,
+        rankdelta: 1,
+        player: 2,
+        buyins: 3,
+        cashouts: 4,
+        net: 5,
+        winpct: 6,
+        roi: 7,
+        avgwin: 8,
+        avgloss: 9,
+        sessions: 10,
     };
 
     function updateRankCells() {

From 5d10136ee4c0717360de279d35d42464a94df06f Mon Sep 17 00:00:00 2001
From: SowinskiBraeden <braeden@sowinski.dev>
Date: Sat, 21 Mar 2026 00:10:52 -0700
Subject: [PATCH 09/83] add session open/closed state to prevent modifications

---
 app.py                         | 46 ++++++++++++++++++++++-
 static/css/style.css           | 68 ++++++++++++++++++++++++++++++++++
 stats.py                       | 65 +++++++++++++++++++++++++-------
 storage.py                     |  6 ++-
 templates/admin_dashboard.html | 38 ++++++++++++++++++-
 templates/sessions.html        |  4 ++
 6 files changed, 210 insertions(+), 17 deletions(-)

diff --git a/app.py b/app.py
index 72159bc..0efde3b 100644
--- a/app.py
+++ b/app.py
@@ -204,6 +204,36 @@ def admin_logout() -> str:
     return redirect(url_for("leaderboard"))
 
 
+@app.post("/admin/session-state")
+def admin_session_state() -> str:
+    if not is_admin():
+        flash("Admin login required.", "error")
+        return redirect(url_for("admin_login"))
+
+    session_date = request.form.get("session_date", "").strip()
+    state = request.form.get("state", "").strip()
+
+    if not session_date:
+        flash("Session date is required.", "error")
+        return redirect(url_for("admin_dashboard"))
+
+    if state not in {"open", "closed"}:
+        flash("Invalid session state.", "error")
+        return redirect(url_for("admin_dashboard"))
+
+    append_event(
+        DATA_PATH,
+        session_date=session_date,
+        player_name="",
+        event_type="session_open" if state == "open" else "session_close",
+        amount_cents=0,
+        note=f"Session marked {state}.",
+        actor=app.config["ADMIN_USERNAME"],
+    )
+    flash(f"Session marked {state}.", "success")
+    return redirect(url_for("admin_dashboard"))
+
+
 @app.route("/admin", methods=["GET", "POST"])
 def admin_dashboard() -> str:
     if not is_admin():
@@ -227,6 +257,17 @@ def admin_dashboard() -> str:
             flash("Amount must be a valid number.", "error")
             return redirect(url_for("admin_dashboard"))
 
+        events = load_events(DATA_PATH)
+        sessions = build_session_summaries(events)
+        status_by_date = {session.session_date: session.status for session in sessions}
+
+        if status_by_date.get(session_date, "closed") != "open":
+            flash(
+                "That session is closed. Open it first before adding player events.",
+                "error",
+            )
+            return redirect(url_for("admin_dashboard"))
+
         append_event(
             DATA_PATH,
             session_date=session_date,
@@ -242,10 +283,13 @@ def admin_dashboard() -> str:
     events = load_events(DATA_PATH)
     sessions = build_session_summaries(events)
     recent_sessions = sessions[:6]
-    recent_events = list(reversed(events[-10:]))
+    open_sessions = [session for session in sessions if session.status == "open"]
+    recent_events = list(reversed(events[-20:]))
+
     return render_template(
         "admin_dashboard.html",
         recent_sessions=recent_sessions,
+        open_sessions=open_sessions,
         recent_events=recent_events,
         player_names=unique_player_names(events),
     )
diff --git a/static/css/style.css b/static/css/style.css
index b679fa4..1d4d563 100644
--- a/static/css/style.css
+++ b/static/css/style.css
@@ -760,6 +760,74 @@ td a:hover {
     align-items: stretch;
 }
 
+.button-row {
+    display: flex;
+    gap: 0.75rem;
+    flex-wrap: wrap;
+}
+
+.secondary-button {
+    appearance: none;
+    border: 1px solid rgba(255, 255, 255, 0.12);
+    background: rgba(255, 255, 255, 0.04);
+    color: var(--text-strong);
+    border-radius: 12px;
+    padding: 0.8rem 1rem;
+    font: inherit;
+    font-weight: 600;
+    cursor: pointer;
+}
+
+.secondary-button:hover {
+    background: rgba(255, 255, 255, 0.07);
+}
+
+.status-badge {
+    display: inline-flex;
+    align-items: center;
+    justify-content: center;
+    min-width: 5.5rem;
+    padding: 0.35rem 0.65rem;
+    border-radius: 999px;
+    font-size: 0.78rem;
+    font-weight: 700;
+    letter-spacing: 0.06em;
+    text-transform: uppercase;
+}
+
+.status-open {
+    color: #f59e0b;
+    background: rgba(245, 158, 11, 0.12);
+    border: 1px solid rgba(245, 158, 11, 0.24);
+}
+
+.status-closed {
+    color: #94a3b8;
+    background: rgba(148, 163, 184, 0.1);
+    border: 1px solid rgba(148, 163, 184, 0.2);
+}
+
+.inline-action-form {
+    margin: 0;
+}
+
+.table-action-button {
+    appearance: none;
+    border: 1px solid rgba(255, 255, 255, 0.1);
+    background: rgba(255, 255, 255, 0.04);
+    color: var(--text-strong);
+    border-radius: 10px;
+    padding: 0.45rem 0.7rem;
+    font: inherit;
+    font-size: 0.88rem;
+    font-weight: 600;
+    cursor: pointer;
+}
+
+.table-action-button:hover {
+    background: rgba(255, 255, 255, 0.07);
+}
+
 @media (max-width: 980px) {
     .site-shell {
         width: min(100% - 24px, 100%);
diff --git a/stats.py b/stats.py
index 107daf9..5d18234 100644
--- a/stats.py
+++ b/stats.py
@@ -41,6 +41,11 @@ class SessionEntry:
 class SessionSummary:
     session_date: str
     entries: list[SessionEntry]
+    status: str = "closed"
+
+    @property
+    def is_open(self) -> bool:
+        return self.status == "open"
 
     @property
     def total_buy_in_cents(self) -> int:
@@ -120,35 +125,66 @@ def net_tone(value_cents: int) -> str:
 
 def build_session_summaries(events: list[EventRow]) -> list[SessionSummary]:
     grouped: dict[tuple[str, str], SessionEntry] = {}
+    by_session: dict[str, list[SessionEntry]] = defaultdict(list)
+    session_status: dict[str, str] = {}
+    session_dates_seen: set[str] = set()
 
     for event in events:
-        key = (event["session_date"], event["player_name"])
+        session_date = event["session_date"]
+        event_type = event["event_type"]
+
+        if not session_date:
+            continue
+
+        session_dates_seen.add(session_date)
+
+        if event_type == "session_open":
+            session_status[session_date] = "open"
+            continue
+
+        if event_type == "session_close":
+            session_status[session_date] = "closed"
+            continue
+
+        player_name = event["player_name"].strip()
+        if not player_name:
+            continue
+
+        key = (session_date, player_name)
         if key not in grouped:
             grouped[key] = SessionEntry(
-                session_date=event["session_date"],
-                player_name=event["player_name"],
+                session_date=session_date,
+                player_name=player_name,
             )
 
         entry = grouped[key]
-        if event["event_type"] == "buyin":
+
+        if event_type == "buyin":
             entry.buy_in_cents += event["amount_cents"]
-        elif event["event_type"] == "cashout":
+        elif event_type == "cashout":
             entry.cash_out_cents += event["amount_cents"]
 
         if event["note"]:
             entry.notes.append(event["note"])
 
-    by_session: dict[str, list[SessionEntry]] = defaultdict(list)
     for entry in grouped.values():
         by_session[entry.session_date].append(entry)
 
-    sessions = [
-        SessionSummary(
-            session_date=session_date,
-            entries=sorted(entries, key=lambda entry: entry.player_name.casefold()),
+    sessions: list[SessionSummary] = []
+    for session_date in session_dates_seen:
+        entries = sorted(
+            by_session.get(session_date, []),
+            key=lambda entry: entry.player_name.casefold(),
         )
-        for session_date, entries in by_session.items()
-    ]
+
+        sessions.append(
+            SessionSummary(
+                session_date=session_date,
+                entries=entries,
+                status=session_status.get(session_date, "closed"),
+            )
+        )
+
     sessions.sort(key=lambda session: session.session_date, reverse=True)
     return sessions
 
@@ -306,4 +342,7 @@ def session_events(events: list[EventRow], session_date: str) -> list[EventRow]:
 
 
 def unique_player_names(events: list[EventRow]) -> list[str]:
-    return sorted({event["player_name"] for event in events}, key=str.casefold)
+    return sorted(
+        {event["player_name"] for event in events if event["player_name"].strip()},
+        key=str.casefold,
+    )
diff --git a/storage.py b/storage.py
index b696604..d2d1ee4 100644
--- a/storage.py
+++ b/storage.py
@@ -30,7 +30,7 @@ class EventRow(TypedDict):
     actor: str
 
 
-VALID_EVENT_TYPES = {"buyin", "cashout", "note"}
+VALID_EVENT_TYPES = {"buyin", "cashout", "note", "session_open", "session_close"}
 
 
 def ensure_data_file(csv_path: Path) -> None:
@@ -63,7 +63,9 @@ def load_events(csv_path: Path) -> list[EventRow]:
                 )
             )
 
-    events.sort(key=lambda event: (event["session_date"], event["created_at"], event["id"]))
+    events.sort(
+        key=lambda event: (event["session_date"], event["created_at"], event["id"])
+    )
     return events
 
 
diff --git a/templates/admin_dashboard.html b/templates/admin_dashboard.html
index 52c2715..6ee5f48 100644
--- a/templates/admin_dashboard.html
+++ b/templates/admin_dashboard.html
@@ -51,6 +51,21 @@
         <button class="primary-button" type="submit">Add event</button>
     </form>
 
+    <form class="panel form-card" method="post" action="{{ url_for('admin_session_state') }}">
+        <p class="eyebrow">Session state</p>
+        <h2>Open or close a session</h2>
+
+        <label>
+            <span>Session date</span>
+            <input type="date" name="session_date" required>
+        </label>
+
+        <div class="button-row">
+            <button class="primary-button" type="submit" name="state" value="open">Open session</button>
+            <button class="secondary-button" type="submit" name="state" value="closed">Close session</button>
+        </div>
+    </form>
+
     <div class="stack-gap">
         <section class="panel">
             <div class="panel-header">
@@ -67,15 +82,36 @@
                             <th>Players</th>
                             <th>Buy-ins</th>
                             <th>Cash-outs</th>
+                            <th>Status</th>
+                            <th>Action</th>
                         </tr>
                     </thead>
                     <tbody>
                         {% for session in recent_sessions %}
                         <tr>
-                            <td><a href="{{ url_for('session_detail', session_date=session.session_date) }}">{{ session.session_date | pretty_date }}</a></td>
+                            <td>
+                                <a href="{{ url_for('session_detail', session_date=session.session_date) }}">
+                                    {{ session.session_date | pretty_date }}
+                                </a>
+                            </td>
                             <td>{{ session.entries|length }}</td>
                             <td>{{ session.total_buy_in_cents | money }}</td>
                             <td>{{ session.total_cash_out_cents | money }}</td>
+                            <td>
+                                <span class="status-badge status-{{ session.status }}">
+                                    {{ session.status }}
+                                </span>
+                            </td>
+                            <td>
+                                <form method="post" action="{{ url_for('admin_session_state') }}" class="inline-action-form">
+                                    <input type="hidden" name="session_date" value="{{ session.session_date }}">
+                                    {% if session.status == "open" %}
+                                        <button class="table-action-button" type="submit" name="state" value="closed">Close</button>
+                                    {% else %}
+                                        <button class="table-action-button" type="submit" name="state" value="open">Reopen</button>
+                                    {% endif %}
+                                </form>
+                            </td>
                         </tr>
                         {% else %}
                         <tr>
diff --git a/templates/sessions.html b/templates/sessions.html
index e4437bb..61a51f8 100644
--- a/templates/sessions.html
+++ b/templates/sessions.html
@@ -21,6 +21,7 @@
             <thead>
                 <tr>
                     <th>Date</th>
+                    <th>Status</th>
                     <th>Players</th>
                     <th>Total Buy-ins</th>
                     <th>Total Cash-outs</th>
@@ -31,6 +32,9 @@
                 {% for session in sessions %}
                 <tr>
                     <td><a href="{{ url_for('session_detail', session_date=session.session_date) }}">{{ session.session_date | pretty_date }}</a></td>
+                    <td><span class="status-badge status-{{ session.status }}">
+                        {{ session.status }}
+                    </span></td>
                     <td>{{ session.entries|length }}</td>
                     <td>{{ session.total_buy_in_cents | money }}</td>
                     <td>{{ session.total_cash_out_cents | money }}</td>

From faa90f385a42f887b9596b367dcd27619fe6686a Mon Sep 17 00:00:00 2001
From: SowinskiBraeden <braeden@sowinski.dev>
Date: Sat, 21 Mar 2026 00:34:32 -0700
Subject: [PATCH 10/83] player win/loss streaks

---
 static/css/style.css         |  4 ++
 stats.py                     | 79 ++++++++++++++++++++++++++++++
 templates/player_detail.html | 94 +++++++++++++++++++++++++++++++++++-
 3 files changed, 176 insertions(+), 1 deletion(-)

diff --git a/static/css/style.css b/static/css/style.css
index 1d4d563..1a9470b 100644
--- a/static/css/style.css
+++ b/static/css/style.css
@@ -828,6 +828,10 @@ td a:hover {
     background: rgba(255, 255, 255, 0.07);
 }
 
+.chart-frame-small {
+    min-height: 260px;
+}
+
 @media (max-width: 980px) {
     .site-shell {
         width: min(100% - 24px, 100%);
diff --git a/stats.py b/stats.py
index 5d18234..9092688 100644
--- a/stats.py
+++ b/stats.py
@@ -76,6 +76,14 @@ class PlayerStats:
     total_cash_out_cents: int
     total_net_cents: int
     roi_pct: float
+    current_win_streak: int
+    current_loss_streak: int
+    longest_win_streak: int
+    longest_loss_streak: int
+    best_session_date: str | None
+    best_session_net_cents: int
+    worst_session_date: str | None
+    worst_session_net_cents: int
     rank_change: int = 0
 
 
@@ -189,6 +197,68 @@ def build_session_summaries(events: list[EventRow]) -> list[SessionSummary]:
     return sessions
 
 
+def summarize_player_runs(entries: list[SessionEntry]) -> dict[str, int | str | None]:
+    ordered_entries = sorted(entries, key=lambda entry: entry.session_date)
+
+    longest_win_streak = 0
+    longest_loss_streak = 0
+    current_run_wins = 0
+    current_run_losses = 0
+
+    best_entry: SessionEntry | None = None
+    worst_entry: SessionEntry | None = None
+
+    for entry in ordered_entries:
+        net = entry.net_cents
+
+        if best_entry is None or net > best_entry.net_cents:
+            best_entry = entry
+
+        if worst_entry is None or net < worst_entry.net_cents:
+            worst_entry = entry
+
+        if net > 0:
+            current_run_wins += 1
+            current_run_losses = 0
+        elif net < 0:
+            current_run_losses += 1
+            current_run_wins = 0
+        else:
+            current_run_wins = 0
+            current_run_losses = 0
+
+        longest_win_streak = max(longest_win_streak, current_run_wins)
+        longest_loss_streak = max(longest_loss_streak, current_run_losses)
+
+    current_win_streak = 0
+    current_loss_streak = 0
+
+    for entry in reversed(ordered_entries):
+        net = entry.net_cents
+
+        if net > 0:
+            if current_loss_streak > 0:
+                break
+            current_win_streak += 1
+        elif net < 0:
+            if current_win_streak > 0:
+                break
+            current_loss_streak += 1
+        else:
+            break
+
+    return {
+        "current_win_streak": current_win_streak,
+        "current_loss_streak": current_loss_streak,
+        "longest_win_streak": longest_win_streak,
+        "longest_loss_streak": longest_loss_streak,
+        "best_session_date": best_entry.session_date if best_entry else None,
+        "best_session_net_cents": best_entry.net_cents if best_entry else 0,
+        "worst_session_date": worst_entry.session_date if worst_entry else None,
+        "worst_session_net_cents": worst_entry.net_cents if worst_entry else 0,
+    }
+
+
 def build_leaderboard(sessions: list[SessionSummary]) -> list[PlayerStats]:
     player_entries: dict[str, list[SessionEntry]] = defaultdict(list)
     for session in sessions:
@@ -198,6 +268,7 @@ def build_leaderboard(sessions: list[SessionSummary]) -> list[PlayerStats]:
     leaderboard: list[PlayerStats] = []
     for player_name, entries in player_entries.items():
         nets = [entry.net_cents for entry in entries]
+        run_summary = summarize_player_runs(entries)
         wins = [value for value in nets if value > 0]
         losses = [value for value in nets if value < 0]
         total_buy_in = sum(entry.buy_in_cents for entry in entries)
@@ -232,6 +303,14 @@ def build_leaderboard(sessions: list[SessionSummary]) -> list[PlayerStats]:
                 total_cash_out_cents=total_cash_out,
                 total_net_cents=total_net,
                 roi_pct=roi_pct,
+                current_win_streak=run_summary["current_win_streak"],
+                current_loss_streak=run_summary["current_loss_streak"],
+                longest_win_streak=run_summary["longest_win_streak"],
+                longest_loss_streak=run_summary["longest_loss_streak"],
+                best_session_date=run_summary["best_session_date"],
+                best_session_net_cents=run_summary["best_session_net_cents"],
+                worst_session_date=run_summary["worst_session_date"],
+                worst_session_net_cents=run_summary["worst_session_net_cents"],
             )
         )
 
diff --git a/templates/player_detail.html b/templates/player_detail.html
index 2dc144e..18fad5c 100644
--- a/templates/player_detail.html
+++ b/templates/player_detail.html
@@ -16,9 +16,24 @@
     <article class="panel stat-card"><span>Buy-ins</span><strong>{{ player.total_buy_in_cents | money }}</strong></article>
     <article class="panel stat-card"><span>Cash-outs</span><strong>{{ player.total_cash_out_cents | money }}</strong></article>
     <article class="panel stat-card"><span>Sessions</span><strong>{{ player.sessions_played }}</strong></article>
+    <article class="panel stat-card">
+        <span>Current Streak</span>
+        <strong>
+            {% if player.current_win_streak > 0 %}
+                W{{ player.current_win_streak }}
+            {% elif player.current_loss_streak > 0 %}
+                L{{ player.current_loss_streak }}
+            {% else %}
+                -
+            {% endif %}
+        </strong>
+    </article>
+
+    <article class="panel stat-card"><span>Longest win streak</span><strong>{{ player.longest_win_streak }}</strong></article>
+    <article class="panel stat-card"><span>Longest loss streak</span><strong>{{ player.longest_loss_streak }}</strong></article>
 </section>
 
-<section class="grid two-col">
+<section class="grid one-col">
     <div class="panel chart-panel">
         <div class="panel-header">
             <div>
@@ -30,6 +45,9 @@
             <canvas id="playerCumulativeChart"></canvas>
         </div>
     </div>
+</section>
+
+<section class="grid two-col">
     <div class="panel chart-panel">
         <div class="panel-header">
             <div>
@@ -41,6 +59,17 @@
             <canvas id="playerSessionChart"></canvas>
         </div>
     </div>
+    <div class="panel chart-panel">
+        <div class="panel-header">
+            <div>
+                <p class="eyebrow">Breakdown</p>
+                <h2>Result mix</h2>
+            </div>
+        </div>
+        <div class="chart-frame chart-frame-small">
+            <canvas id="playerBreakdownChart"></canvas>
+        </div>
+    </div>
 </section>
 
 <section class="panel">
@@ -60,6 +89,28 @@
                 <tr><th>Average Loss</th><td>{{ player.avg_loss_cents | money }}</td></tr>
                 <tr><th>Biggest Win</th><td>{{ player.biggest_win_cents | money }}</td></tr>
                 <tr><th>Biggest Loss</th><td>{{ player.biggest_loss_cents | money }}</td></tr>
+                <tr><th>Current Win Streak</th><td>{{ player.current_win_streak }}</td></tr>
+                <tr><th>Current Loss Streak</th><td>{{ player.current_loss_streak }}</td></tr>
+                <tr><th>Longest Win Streak</th><td>{{ player.longest_win_streak }}</td></tr>
+                <tr><th>Longest Loss Streak</th><td>{{ player.longest_loss_streak }}</td></tr>
+                <tr>
+                    <th>Best Session</th>
+                    <td>
+                        {{ player.best_session_net_cents | money }}
+                        {% if player.best_session_date %}
+                            <span class="muted-text small">on {{ player.best_session_date | pretty_date }}</span>
+                        {% endif %}
+                    </td>
+                </tr>
+                <tr>
+                    <th>Worst Session</th>
+                    <td>
+                        {{ player.worst_session_net_cents | money }}
+                        {% if player.worst_session_date %}
+                            <span class="muted-text small">on {{ player.worst_session_date | pretty_date }}</span>
+                        {% endif %}
+                    </td>
+                </tr>
             </tbody>
         </table>
     </div>
@@ -138,4 +189,45 @@
         });
     }
 </script>
+
+<script>
+    const breakdownCtx = document.getElementById('playerBreakdownChart');
+    if (breakdownCtx) {
+        new Chart(breakdownCtx, {
+            type: 'doughnut',
+            data: {
+                labels: ['Wins', 'Losses', 'Break-even'],
+                datasets: [{
+                    data: [
+                        {{ player.winning_sessions }},
+                        {{ player.losing_sessions }},
+                        {{ player.break_even_sessions }}
+                    ],
+                    backgroundColor: [
+                        '#59d98e',
+                        '#f06c72',
+                        '#e4bf65'
+                    ],
+                    borderWidth: 0,
+                }]
+            },
+            options: {
+                responsive: true,
+                maintainAspectRatio: false,
+                plugins: {
+                    legend: {
+                        position: 'bottom',
+                        labels: {
+                            color: textMuted,
+                            usePointStyle: true,
+                            boxWidth: 10,
+                            boxHeight: 10,
+                            padding: 18,
+                        },
+                    },
+                },
+            },
+        });
+    }
+</script>
 {% endblock %}

From 6a655002d499db35154405c7a84ffdc8cee7a14c Mon Sep 17 00:00:00 2001
From: SowinskiBraeden <braeden@sowinski.dev>
Date: Sat, 21 Mar 2026 00:45:02 -0700
Subject: [PATCH 11/83] paid status

---
 static/css/style.css           | 48 ++++++++++++++++++++++++++++++++++
 stats.py                       | 21 +++++++++++++++
 storage.py                     |  9 ++++++-
 templates/admin_dashboard.html |  5 ++--
 templates/session_detail.html  | 18 +++++++++++--
 5 files changed, 96 insertions(+), 5 deletions(-)

diff --git a/static/css/style.css b/static/css/style.css
index 1a9470b..727b1be 100644
--- a/static/css/style.css
+++ b/static/css/style.css
@@ -832,6 +832,54 @@ td a:hover {
     min-height: 260px;
 }
 
+.status-none {
+    color: #94a3b8;
+    background: rgba(148, 163, 184, 0.1);
+    border: 1px solid rgba(148, 163, 184, 0.2);
+}
+
+.status-unpaid {
+    color: #f59e0b;
+    background: rgba(245, 158, 11, 0.12);
+    border: 1px solid rgba(245, 158, 11, 0.24);
+}
+
+.status-partial {
+    color: #fb923c;
+    background: rgba(251, 146, 60, 0.12);
+    border: 1px solid rgba(251, 146, 60, 0.24);
+}
+
+.status-paid {
+    color: #22c55e;
+    background: rgba(34, 197, 94, 0.12);
+    border: 1px solid rgba(34, 197, 94, 0.24);
+}
+
+.pill-paid {
+    color: #22c55e;
+    background: rgba(34, 197, 94, 0.12);
+    border: 1px solid rgba(34, 197, 94, 0.22);
+}
+
+.pill-cashout {
+    color: #f59e0b;
+    background: rgba(245, 158, 11, 0.12);
+    border: 1px solid rgba(245, 158, 11, 0.22);
+}
+
+.pill-buyin {
+    color: #60a5fa;
+    background: rgba(96, 165, 250, 0.12);
+    border: 1px solid rgba(96, 165, 250, 0.22);
+}
+
+.pill-note {
+    color: #cbd5e1;
+    background: rgba(203, 213, 225, 0.08);
+    border: 1px solid rgba(203, 213, 225, 0.14);
+}
+
 @media (max-width: 980px) {
     .site-shell {
         width: min(100% - 24px, 100%);
diff --git a/stats.py b/stats.py
index 9092688..f742373 100644
--- a/stats.py
+++ b/stats.py
@@ -30,12 +30,31 @@ class SessionEntry:
     player_name: str
     buy_in_cents: int = 0
     cash_out_cents: int = 0
+    paid_cents: int = 0
     notes: list[str] = field(default_factory=list)
 
     @property
     def net_cents(self) -> int:
         return self.cash_out_cents - self.buy_in_cents
 
+    @property
+    def payout_due_cents(self) -> int:
+        return max(self.cash_out_cents, 0)
+
+    @property
+    def payout_remaining_cents(self) -> int:
+        return max(self.payout_due_cents - self.paid_cents, 0)
+
+    @property
+    def payout_status(self) -> str:
+        if self.payout_due_cents <= 0:
+            return "none"
+        if self.paid_cents <= 0:
+            return "unpaid"
+        if self.payout_remaining_cents <= 0:
+            return "paid"
+        return "partial"
+
 
 @dataclass
 class SessionSummary:
@@ -171,6 +190,8 @@ def build_session_summaries(events: list[EventRow]) -> list[SessionSummary]:
             entry.buy_in_cents += event["amount_cents"]
         elif event_type == "cashout":
             entry.cash_out_cents += event["amount_cents"]
+        elif event_type == "paid":
+            entry.paid_cents += event["amount_cents"]
 
         if event["note"]:
             entry.notes.append(event["note"])
diff --git a/storage.py b/storage.py
index d2d1ee4..985445f 100644
--- a/storage.py
+++ b/storage.py
@@ -30,7 +30,14 @@ class EventRow(TypedDict):
     actor: str
 
 
-VALID_EVENT_TYPES = {"buyin", "cashout", "note", "session_open", "session_close"}
+VALID_EVENT_TYPES = {
+    "buyin",
+    "cashout",
+    "paid",
+    "note",
+    "session_open",
+    "session_close",
+}
 
 
 def ensure_data_file(csv_path: Path) -> None:
diff --git a/templates/admin_dashboard.html b/templates/admin_dashboard.html
index 6ee5f48..029e231 100644
--- a/templates/admin_dashboard.html
+++ b/templates/admin_dashboard.html
@@ -34,6 +34,7 @@
             <select name="event_type" required>
                 <option value="buyin">Buy-in</option>
                 <option value="cashout">Cash-out</option>
+                <option value="paid">Paid out</option>
                 <option value="note">Note only</option>
             </select>
         </label>
@@ -45,7 +46,7 @@
 
         <label>
             <span>Note</span>
-            <textarea name="note" rows="4" placeholder="Rebuy, correction, settled chips later, etc."></textarea>
+            <textarea name="note" rows="4" placeholder="Rebuy, correction, partial payout, e-transfer sent, cash paid, etc."></textarea>
         </label>
 
         <button class="primary-button" type="submit">Add event</button>
@@ -135,7 +136,7 @@
                 <article class="event-card">
                     <div class="event-card-top">
                         <strong>{{ event.player_name }}</strong>
-                        <span class="pill">{{ event.event_type }}</span>
+                        <span class="pill pill-{{ event.event_type }}">{{ event.event_type }}</span>
                     </div>
                     <p class="event-amount">{{ event.amount_cents | money }}</p>
                     <p class="muted-text small">{{ event.session_date | pretty_date }}</p>
diff --git a/templates/session_detail.html b/templates/session_detail.html
index be66edb..7a74b90 100644
--- a/templates/session_detail.html
+++ b/templates/session_detail.html
@@ -35,6 +35,9 @@
                         <th>Player</th>
                         <th>Buy-in</th>
                         <th>Cash-out</th>
+                        <th>Paid</th>
+                        <th>Remaining</th>
+                        <th>Status</th>
                         <th>Net</th>
                         <th>Notes</th>
                     </tr>
@@ -45,7 +48,18 @@
                         <td><a href="{{ url_for('player_detail', player_name=entry.player_name) }}">{{ entry.player_name }}</a></td>
                         <td>{{ entry.buy_in_cents | money }}</td>
                         <td>{{ entry.cash_out_cents | money }}</td>
-                        <td class="{{ 'positive' if entry.net_cents > 0 else 'negative' if entry.net_cents < 0 else '' }}">{{ entry.net_cents | money }}</td>
+                        <td>{{ entry.paid_cents | money }}</td>
+                        <td class="{{ 'positive' if entry.payout_remaining_cents == 0 else 'negative' if entry.payout_remaining_cents > 0 else '' }}">
+                            {{ entry.payout_remaining_cents | money }}
+                        </td>
+                        <td>
+                            <span class="status-badge status-{{ entry.payout_status }}">
+                                {{ entry.payout_status }}
+                            </span>
+                        </td>
+                        <td class="{{ 'positive' if entry.net_cents > 0 else 'negative' if entry.net_cents < 0 else '' }}">
+                            {{ entry.net_cents | money }}
+                        </td>
                         <td>
                             {% if entry.notes %}
                                 <ul class="note-list">
@@ -76,7 +90,7 @@
             <article class="event-card">
                 <div class="event-card-top">
                     <strong>{{ event.player_name }}</strong>
-                    <span class="pill">{{ event.event_type }}</span>
+                    <span class="pill pill-{{ event.event_type }}">{{ event.event_type }}</span>
                 </div>
                 <p class="event-amount">{{ event.amount_cents | money }}</p>
                 {% if event.note %}

From 666b859a34a28141bce2f8c9d5f1e40fbd91f63a Mon Sep 17 00:00:00 2001
From: SowinskiBraeden <braeden@sowinski.dev>
Date: Sat, 21 Mar 2026 01:06:31 -0700
Subject: [PATCH 12/83] imrpoved session details page

---
 app.py                        |   2 +
 static/css/style.css          | 106 +++++++++++++++++++++++++++-
 stats.py                      |  26 +++++++
 templates/session_detail.html | 128 ++++++++++++++++++++++++++++------
 4 files changed, 238 insertions(+), 24 deletions(-)

diff --git a/app.py b/app.py
index 0efde3b..a7fbbb2 100644
--- a/app.py
+++ b/app.py
@@ -14,6 +14,7 @@ from stats import (
     cumulative_profit_series,
     player_session_series,
     safe_date_label,
+    session_breakdown_series,
     session_events,
     unique_player_names,
 )
@@ -155,6 +156,7 @@ def session_detail(session_date: str) -> str:
         next_session=next_session,
         prev_session=prev_session,
         raw_events=session_events(events, session_date),
+        chart_data=session_breakdown_series(target_session),
     )
 
 
diff --git a/static/css/style.css b/static/css/style.css
index 727b1be..f973944 100644
--- a/static/css/style.css
+++ b/static/css/style.css
@@ -755,11 +755,102 @@ td a:hover {
 }
 
 .leaderboard-layout,
-.session-layout,
 .admin-layout {
     align-items: stretch;
 }
 
+.session-layout {
+    align-items: stretch;
+    grid-template-columns: minmax(0, 1.45fr) minmax(320px, 0.85fr);
+}
+
+.results-panel,
+.chart-panel {
+    display: flex;
+    flex-direction: column;
+    height: 430px;
+    min-height: 430px;
+    max-height: 430px;
+}
+
+.results-panel .table-scroll {
+    flex: 1;
+    min-height: 0;
+    overflow-x: auto;
+    overflow-y: auto;
+    padding-right: 0.25rem;
+
+    scrollbar-gutter: stable;
+    scrollbar-width: auto;
+    scrollbar-color: rgba(255, 160, 64, 0.88) rgba(255, 255, 255, 0.08);
+}
+
+.results-panel .table-scroll::-webkit-scrollbar {
+    width: 14px;
+    height: 12px;
+}
+
+.results-panel .table-scroll::-webkit-scrollbar-track {
+    background: rgba(255, 255, 255, 0.06);
+    border-radius: 999px;
+}
+
+.results-panel .table-scroll::-webkit-scrollbar-thumb {
+    background: linear-gradient(
+        180deg,
+        rgba(255, 186, 110, 0.95),
+        rgba(255, 136, 48, 0.95)
+    );
+    border-radius: 999px;
+    border: 2px solid rgba(10, 12, 18, 0.9);
+    box-shadow:
+        0 0 0 1px rgba(255, 170, 90, 0.18),
+        0 0 12px rgba(255, 140, 60, 0.18);
+}
+
+.results-panel .table-scroll::-webkit-scrollbar-thumb:hover {
+    background: linear-gradient(
+        180deg,
+        rgba(255, 200, 130, 1),
+        rgba(255, 150, 60, 1)
+    );
+}
+
+.results-panel .table-scroll::-webkit-scrollbar-corner {
+    background: rgba(255, 255, 255, 0.04);
+}
+
+.chart-panel .chart-frame {
+    flex: 1;
+    min-height: 0;
+    height: auto;
+}
+
+.session-results-table {
+    min-width: 980px;
+}
+
+.session-results-table th,
+.session-results-table td {
+    vertical-align: top;
+    white-space: nowrap;
+}
+
+.session-results-table th:last-child,
+.session-results-table td:last-child {
+    min-width: 15rem;
+    width: 18rem;
+    white-space: normal;
+}
+
+.session-results-table thead th {
+    position: sticky;
+    top: 0;
+    z-index: 2;
+    background: rgba(16, 20, 28, 0.96);
+    backdrop-filter: blur(6px);
+}
+
 .button-row {
     display: flex;
     gap: 0.75rem;
@@ -880,6 +971,19 @@ td a:hover {
     border: 1px solid rgba(203, 213, 225, 0.14);
 }
 
+.status-badge {
+    display: inline-flex;
+    align-items: center;
+    justify-content: center;
+    min-width: 5.5rem;
+    padding: 0.35rem 0.65rem;
+    border-radius: 999px;
+    font-size: 0.78rem;
+    font-weight: 700;
+    letter-spacing: 0.06em;
+    text-transform: uppercase;
+}
+
 @media (max-width: 980px) {
     .site-shell {
         width: min(100% - 24px, 100%);
diff --git a/stats.py b/stats.py
index f742373..9ebe6c1 100644
--- a/stats.py
+++ b/stats.py
@@ -78,6 +78,18 @@ class SessionSummary:
     def total_net_cents(self) -> int:
         return sum(entry.net_cents for entry in self.entries)
 
+    @property
+    def total_payout_due_cents(self) -> int:
+        return sum(entry.payout_due_cents for entry in self.entries)
+
+    @property
+    def total_paid_cents(self) -> int:
+        return sum(entry.paid_cents for entry in self.entries)
+
+    @property
+    def total_remaining_cents(self) -> int:
+        return sum(entry.payout_remaining_cents for entry in self.entries)
+
 
 @dataclass
 class PlayerStats:
@@ -437,6 +449,20 @@ def player_session_series(
     }
 
 
+def session_breakdown_series(session: SessionSummary) -> dict[str, Any]:
+    ordered_entries = sorted(
+        session.entries,
+        key=lambda entry: (entry.net_cents, entry.player_name.casefold()),
+        reverse=True,
+    )
+
+    return {
+        "labels": [entry.player_name for entry in ordered_entries],
+        "net_values": [round(entry.net_cents / 100, 2) for entry in ordered_entries],
+        "net_colors": [net_tone(entry.net_cents) for entry in ordered_entries],
+    }
+
+
 def session_events(events: list[EventRow], session_date: str) -> list[EventRow]:
     return [event for event in events if event["session_date"] == session_date]
 
diff --git a/templates/session_detail.html b/templates/session_detail.html
index 7a74b90..5fae13f 100644
--- a/templates/session_detail.html
+++ b/templates/session_detail.html
@@ -20,16 +20,35 @@
     </div>
 </section>
 
+<section class="grid three-col">
+    <article class="panel stat-card">
+        <span>Total cash-out due</span>
+        <strong>{{ session.total_payout_due_cents | money }}</strong>
+    </article>
+
+    <article class="panel stat-card">
+        <span>Total paid</span>
+        <strong class="positive">{{ session.total_paid_cents | money }}</strong>
+    </article>
+
+    <article class="panel stat-card">
+        <span>Total remaining</span>
+        <strong class="{{ 'negative' if session.total_remaining_cents > 0 else 'positive' }}">
+            {{ session.total_remaining_cents | money }}
+        </strong>
+    </article>
+</section>
+
 <section class="grid two-col session-layout">
-    <div class="panel">
+    <div class="panel results-panel">
         <div class="panel-header">
             <div>
                 <p class="eyebrow">Results</p>
                 <h2>Player totals</h2>
             </div>
         </div>
-        <div class="table-wrap">
-            <table>
+        <div class="table-wrap table-scroll">
+            <table class="data-table session-results-table">
                 <thead>
                     <tr>
                         <th>Player</th>
@@ -49,7 +68,7 @@
                         <td>{{ entry.buy_in_cents | money }}</td>
                         <td>{{ entry.cash_out_cents | money }}</td>
                         <td>{{ entry.paid_cents | money }}</td>
-                        <td class="{{ 'positive' if entry.payout_remaining_cents == 0 else 'negative' if entry.payout_remaining_cents > 0 else '' }}">
+                        <td class="{{ 'negative' if entry.payout_remaining_cents > 0 else 'positive' }}">
                             {{ entry.payout_remaining_cents | money }}
                         </td>
                         <td>
@@ -78,30 +97,93 @@
         </div>
     </div>
 
-    <div class="panel">
+    <div class="panel chart-panel">
         <div class="panel-header">
             <div>
-                <p class="eyebrow">Audit trail</p>
-                <h2>Raw ledger events</h2>
+                <p class="eyebrow">Breakdown</p>
+                <h2>Net by player</h2>
             </div>
         </div>
-        <div class="event-feed">
-            {% for event in raw_events | reverse %}
-            <article class="event-card">
-                <div class="event-card-top">
-                    <strong>{{ event.player_name }}</strong>
-                    <span class="pill pill-{{ event.event_type }}">{{ event.event_type }}</span>
-                </div>
-                <p class="event-amount">{{ event.amount_cents | money }}</p>
-                {% if event.note %}
-                    <p class="muted-text small">{{ event.note }}</p>
-                {% endif %}
-                <p class="tiny-text">{{ event.created_at }} · by {{ event.actor }}</p>
-            </article>
-            {% else %}
-            <p class="muted-text">No raw events recorded.</p>
-            {% endfor %}
+        <div class="chart-frame">
+            <canvas id="sessionBreakdownChart"></canvas>
         </div>
     </div>
 </section>
+
+<section class="panel">
+    <div class="panel-header">
+        <div>
+            <p class="eyebrow">Audit trail</p>
+            <h2>Raw ledger events</h2>
+        </div>
+    </div>
+    <div class="event-feed">
+        {% for event in raw_events | reverse %}
+        <article class="event-card">
+            <div class="event-card-top">
+                <strong>{{ event.player_name or "Session" }}</strong>
+                <span class="pill pill-{{ event.event_type }}">{{ event.event_type }}</span>
+            </div>
+            <p class="event-amount">{{ event.amount_cents | money }}</p>
+            {% if event.note %}
+                <p class="muted-text small">{{ event.note }}</p>
+            {% endif %}
+            <p class="tiny-text">{{ event.created_at }} · by {{ event.actor }}</p>
+        </article>
+        {% else %}
+        <p class="muted-text">No raw events recorded.</p>
+        {% endfor %}
+    </div>
+</section>
+
+<script>
+    const sessionChartData = {{ chart_data | tojson }};
+    const rootStyles = getComputedStyle(document.documentElement);
+    const textMuted = rootStyles.getPropertyValue('--text-muted').trim();
+    const lineColor = rootStyles.getPropertyValue('--line').trim();
+
+    const sessionBreakdownCtx = document.getElementById('sessionBreakdownChart');
+    if (sessionBreakdownCtx) {
+        new Chart(sessionBreakdownCtx, {
+            type: 'bar',
+            data: {
+                labels: sessionChartData.labels,
+                datasets: [{
+                    label: 'Session Net',
+                    data: sessionChartData.net_values,
+                    backgroundColor: sessionChartData.net_colors,
+                    borderColor: sessionChartData.net_colors,
+                    borderRadius: 8,
+                    borderSkipped: false,
+                }]
+            },
+            options: {
+                responsive: true,
+                maintainAspectRatio: false,
+                plugins: {
+                    legend: {
+                        position: 'bottom',
+                        labels: {
+                            color: textMuted,
+                            usePointStyle: true,
+                            boxWidth: 10,
+                            boxHeight: 10,
+                            padding: 18,
+                        },
+                    },
+                },
+                scales: {
+                    x: {
+                        ticks: { color: textMuted, maxRotation: 0 },
+                        grid: { color: lineColor },
+                    },
+                    y: {
+                        ticks: { color: textMuted },
+                        grid: { color: lineColor },
+                    },
+                },
+            },
+        });
+    }
+</script>
 {% endblock %}

From 055b9f4409a1bf51c314cc786776e8c4a0d75961 Mon Sep 17 00:00:00 2001
From: SowinskiBraeden <braeden@sowinski.dev>
Date: Sat, 21 Mar 2026 01:18:26 -0700
Subject: [PATCH 13/83] session summary layout upgrade

---
 static/css/style.css          |  97 +++++++-----------
 templates/session_detail.html | 184 +++++++++++++++++++++++-----------
 2 files changed, 165 insertions(+), 116 deletions(-)

diff --git a/static/css/style.css b/static/css/style.css
index f973944..b4b6f3c 100644
--- a/static/css/style.css
+++ b/static/css/style.css
@@ -755,74 +755,35 @@ td a:hover {
 }
 
 .leaderboard-layout,
+.session-layout,
 .admin-layout {
     align-items: stretch;
 }
 
-.session-layout {
-    align-items: stretch;
-    grid-template-columns: minmax(0, 1.45fr) minmax(320px, 0.85fr);
+.results-panel-full {
+    display: block;
 }
 
-.results-panel,
-.chart-panel {
+.table-scroll-open {
+    overflow-x: auto;
+    overflow-y: visible;
+    max-height: none;
+    padding-right: 0;
+}
+
+.chart-row {
+    align-items: stretch;
+}
+
+.chart-panel-compact,
+.session-insights-panel {
     display: flex;
     flex-direction: column;
-    height: 430px;
-    min-height: 430px;
-    max-height: 430px;
 }
 
-.results-panel .table-scroll {
+.chart-panel-compact .chart-frame-compact {
     flex: 1;
-    min-height: 0;
-    overflow-x: auto;
-    overflow-y: auto;
-    padding-right: 0.25rem;
-
-    scrollbar-gutter: stable;
-    scrollbar-width: auto;
-    scrollbar-color: rgba(255, 160, 64, 0.88) rgba(255, 255, 255, 0.08);
-}
-
-.results-panel .table-scroll::-webkit-scrollbar {
-    width: 14px;
-    height: 12px;
-}
-
-.results-panel .table-scroll::-webkit-scrollbar-track {
-    background: rgba(255, 255, 255, 0.06);
-    border-radius: 999px;
-}
-
-.results-panel .table-scroll::-webkit-scrollbar-thumb {
-    background: linear-gradient(
-        180deg,
-        rgba(255, 186, 110, 0.95),
-        rgba(255, 136, 48, 0.95)
-    );
-    border-radius: 999px;
-    border: 2px solid rgba(10, 12, 18, 0.9);
-    box-shadow:
-        0 0 0 1px rgba(255, 170, 90, 0.18),
-        0 0 12px rgba(255, 140, 60, 0.18);
-}
-
-.results-panel .table-scroll::-webkit-scrollbar-thumb:hover {
-    background: linear-gradient(
-        180deg,
-        rgba(255, 200, 130, 1),
-        rgba(255, 150, 60, 1)
-    );
-}
-
-.results-panel .table-scroll::-webkit-scrollbar-corner {
-    background: rgba(255, 255, 255, 0.04);
-}
-
-.chart-panel .chart-frame {
-    flex: 1;
-    min-height: 0;
+    min-height: 220px;
     height: auto;
 }
 
@@ -838,8 +799,8 @@ td a:hover {
 
 .session-results-table th:last-child,
 .session-results-table td:last-child {
-    min-width: 15rem;
-    width: 18rem;
+    min-width: 18rem;
+    width: 22rem;
     white-space: normal;
 }
 
@@ -851,6 +812,24 @@ td a:hover {
     backdrop-filter: blur(6px);
 }
 
+.detail-grid {
+    display: grid;
+    gap: 0.9rem;
+}
+
+.detail-row {
+    display: flex;
+    align-items: center;
+    justify-content: space-between;
+    gap: 1rem;
+    padding: 0.8rem 0;
+    border-bottom: 1px solid var(--line);
+}
+
+.detail-row:last-child {
+    border-bottom: 0;
+}
+
 .button-row {
     display: flex;
     gap: 0.75rem;
diff --git a/templates/session_detail.html b/templates/session_detail.html
index 5fae13f..a87ca70 100644
--- a/templates/session_detail.html
+++ b/templates/session_detail.html
@@ -39,75 +39,145 @@
     </article>
 </section>
 
-<section class="grid two-col session-layout">
-    <div class="panel results-panel">
-        <div class="panel-header">
-            <div>
-                <p class="eyebrow">Results</p>
-                <h2>Player totals</h2>
-            </div>
-        </div>
-        <div class="table-wrap table-scroll">
-            <table class="data-table session-results-table">
-                <thead>
-                    <tr>
-                        <th>Player</th>
-                        <th>Buy-in</th>
-                        <th>Cash-out</th>
-                        <th>Paid</th>
-                        <th>Remaining</th>
-                        <th>Status</th>
-                        <th>Net</th>
-                        <th>Notes</th>
-                    </tr>
-                </thead>
-                <tbody>
-                    {% for entry in session.entries %}
-                    <tr>
-                        <td><a href="{{ url_for('player_detail', player_name=entry.player_name) }}">{{ entry.player_name }}</a></td>
-                        <td>{{ entry.buy_in_cents | money }}</td>
-                        <td>{{ entry.cash_out_cents | money }}</td>
-                        <td>{{ entry.paid_cents | money }}</td>
-                        <td class="{{ 'negative' if entry.payout_remaining_cents > 0 else 'positive' }}">
-                            {{ entry.payout_remaining_cents | money }}
-                        </td>
-                        <td>
-                            <span class="status-badge status-{{ entry.payout_status }}">
-                                {{ entry.payout_status }}
-                            </span>
-                        </td>
-                        <td class="{{ 'positive' if entry.net_cents > 0 else 'negative' if entry.net_cents < 0 else '' }}">
-                            {{ entry.net_cents | money }}
-                        </td>
-                        <td>
-                            {% if entry.notes %}
-                                <ul class="note-list">
-                                    {% for note in entry.notes %}
-                                        <li>{{ note }}</li>
-                                    {% endfor %}
-                                </ul>
-                            {% else %}
-                                —
-                            {% endif %}
-                        </td>
-                    </tr>
-                    {% endfor %}
-                </tbody>
-            </table>
+<section class="panel results-panel results-panel-full">
+    <div class="panel-header">
+        <div>
+            <p class="eyebrow">Results</p>
+            <h2>Player totals</h2>
         </div>
     </div>
 
-    <div class="panel chart-panel">
+    <div class="table-scroll table-scroll-open">
+        <table class="data-table session-results-table">
+            <thead>
+                <tr>
+                    <th>Player</th>
+                    <th>Buy-in</th>
+                    <th>Cash-out</th>
+                    <th>Paid</th>
+                    <th>Remaining</th>
+                    <th>Status</th>
+                    <th>Net</th>
+                    <th>Notes</th>
+                </tr>
+            </thead>
+            <tbody>
+                {% for entry in session.entries %}
+                <tr>
+                    <td>
+                        <a href="{{ url_for('player_detail', player_name=entry.player_name) }}">
+                            {{ entry.player_name }}
+                        </a>
+                    </td>
+                    <td>{{ entry.buy_in_cents | money }}</td>
+                    <td>{{ entry.cash_out_cents | money }}</td>
+                    <td>{{ entry.paid_cents | money }}</td>
+                    <td class="{{ 'negative' if entry.payout_remaining_cents > 0 else 'positive' }}">
+                        {{ entry.payout_remaining_cents | money }}
+                    </td>
+                    <td>
+                        <span class="status-badge status-{{ entry.payout_status }}">
+                            {{ entry.payout_status }}
+                        </span>
+                    </td>
+                    <td class="{{ 'positive' if entry.net_cents > 0 else 'negative' if entry.net_cents < 0 else '' }}">
+                        {{ entry.net_cents | money }}
+                    </td>
+                    <td>
+                        {% if entry.notes %}
+                            <ul class="note-list">
+                                {% for note in entry.notes %}
+                                    <li>{{ note }}</li>
+                                {% endfor %}
+                            </ul>
+                        {% else %}
+                            —
+                        {% endif %}
+                    </td>
+                </tr>
+                {% endfor %}
+            </tbody>
+        </table>
+    </div>
+</section>
+
+<section class="grid two-col chart-row">
+    <div class="panel chart-panel chart-panel-compact">
         <div class="panel-header">
             <div>
                 <p class="eyebrow">Breakdown</p>
                 <h2>Net by player</h2>
             </div>
         </div>
-        <div class="chart-frame">
+        <div class="chart-frame chart-frame-compact">
             <canvas id="sessionBreakdownChart"></canvas>
         </div>
     </div>
+
+    <div class="panel session-insights-panel">
+        <div class="panel-header">
+            <div>
+                <p class="eyebrow">Quick read</p>
+                <h2>Session snapshot</h2>
+            </div>
+        </div>
+
+        {% set winners = session.entries | selectattr('net_cents', 'gt', 0) | list %}
+        {% set losers = session.entries | selectattr('net_cents', 'lt', 0) | list %}
+
+        <div class="detail-grid">
+            <div class="detail-row">
+                <span>Players</span>
+                <strong>{{ session.entries|length }}</strong>
+            </div>
+            <div class="detail-row">
+                <span>Biggest winner</span>
+                <strong>
+                    {% if winners %}
+                        {{ winners | sort(attribute='net_cents', reverse=True) | first | attr('player_name') }}
+                    {% else %}
+                        —
+                    {% endif %}
+                </strong>
+            </div>
+            <div class="detail-row">
+                <span>Best result</span>
+                <strong class="positive">
+                    {% if winners %}
+                        {{ (winners | sort(attribute='net_cents', reverse=True) | first).net_cents | money }}
+                    {% else %}
+                        $0.00
+                    {% endif %}
+                </strong>
+            </div>
+            <div class="detail-row">
+                <span>Biggest loser</span>
+                <strong>
+                    {% if losers %}
+                        {{ losers | sort(attribute='net_cents') | first | attr('player_name') }}
+                    {% else %}
+                        —
+                    {% endif %}
+                </strong>
+            </div>
+            <div class="detail-row">
+                <span>Worst result</span>
+                <strong class="negative">
+                    {% if losers %}
+                        {{ (losers | sort(attribute='net_cents') | first).net_cents | money }}
+                    {% else %}
+                        $0.00
+                    {% endif %}
+                </strong>
+            </div>
+            <div class="detail-row">
+                <span>Unpaid total</span>
+                <strong class="{{ 'negative' if session.total_remaining_cents > 0 else 'positive' }}">
+                    {{ session.total_remaining_cents | money }}
+                </strong>
+            </div>
+        </div>
+    </div>
 </section>
 
 <section class="panel">

From 8f82ee9958817b326b8357cefbfdec8fb3615e25 Mon Sep 17 00:00:00 2001
From: SowinskiBraeden <braeden@sowinski.dev>
Date: Sat, 21 Mar 2026 01:22:44 -0700
Subject: [PATCH 14/83] update reopen css

---
 static/css/style.css | 37 +++++++++++++++++++++++++++++++++++++
 1 file changed, 37 insertions(+)

diff --git a/static/css/style.css b/static/css/style.css
index b4b6f3c..890d74b 100644
--- a/static/css/style.css
+++ b/static/css/style.css
@@ -963,6 +963,43 @@ td a:hover {
     text-transform: uppercase;
 }
 
+.inline-action-form {
+    margin: 0;
+}
+
+.table-action-button {
+    appearance: none;
+    border: 1px solid rgba(255, 255, 255, 0.12);
+    background: rgba(255, 255, 255, 0.05);
+    color: var(--text-strong);
+    border-radius: 10px;
+    padding: 0.45rem 0.72rem;
+    font: inherit;
+    font-size: 0.88rem;
+    font-weight: 600;
+    line-height: 1;
+    cursor: pointer;
+    transition:
+        background 140ms ease,
+        border-color 140ms ease,
+        transform 140ms ease;
+}
+
+.table-action-button:hover {
+    background: rgba(255, 166, 77, 0.12);
+    border-color: rgba(255, 166, 77, 0.28);
+}
+
+.table-action-button:active {
+    transform: translateY(1px);
+}
+
+.table-action-button:focus-visible {
+    outline: none;
+    box-shadow: 0 0 0 3px rgba(255, 166, 77, 0.18);
+    border-color: rgba(255, 166, 77, 0.35);
+}
+
 @media (max-width: 980px) {
     .site-shell {
         width: min(100% - 24px, 100%);

From 500625a4988be85febbcc6330c523bddf56818f7 Mon Sep 17 00:00:00 2001
From: SowinskiBraeden <braeden@sowinski.dev>
Date: Sat, 21 Mar 2026 01:30:42 -0700
Subject: [PATCH 15/83] update admin layout

---
 app.py                         |  97 +++++++++++++++-
 static/css/style.css           |  32 ++++++
 templates/admin_dashboard.html | 204 +++++++++++++++++++--------------
 3 files changed, 247 insertions(+), 86 deletions(-)

diff --git a/app.py b/app.py
index a7fbbb2..d8fd051 100644
--- a/app.py
+++ b/app.py
@@ -1,10 +1,22 @@
 #!/usr/bin/env python3
 from __future__ import annotations
 
+import csv
 import os
+import shutil
+from datetime import datetime, timezone
 from pathlib import Path
 
-from flask import Flask, flash, redirect, render_template, request, session, url_for
+from flask import (
+    Flask,
+    flash,
+    redirect,
+    render_template,
+    request,
+    send_file,
+    session,
+    url_for,
+)
 
 from stats import (
     apply_rank_changes,
@@ -236,6 +248,87 @@ def admin_session_state() -> str:
     return redirect(url_for("admin_dashboard"))
 
 
+@app.get("/admin/export")
+def admin_export_csv():
+    if not is_admin():
+        flash("Admin login required.", "error")
+        return redirect(url_for("admin_login"))
+
+    export_name = (
+        f"entries_export_{datetime.now(timezone.utc).strftime('%Y%m%d_%H%M%S')}.csv"
+    )
+
+    return send_file(
+        DATA_PATH,
+        as_attachment=True,
+        download_name=export_name,
+        mimetype="text/csv",
+    )
+
+
+@app.post("/admin/import")
+def admin_import_csv():
+    if not is_admin():
+        flash("Admin login required.", "error")
+        return redirect(url_for("admin_login"))
+
+    uploaded_file = request.files.get("csv_file")
+    if uploaded_file is None or uploaded_file.filename == "":
+        flash("Choose a CSV file to import.", "error")
+        return redirect(url_for("admin_dashboard"))
+
+    if not uploaded_file.filename.lower().endswith(".csv"):
+        flash("Only CSV files are allowed.", "error")
+        return redirect(url_for("admin_dashboard"))
+
+    try:
+        uploaded_text = uploaded_file.stream.read().decode("utf-8-sig")
+    except UnicodeDecodeError:
+        flash("CSV file must be valid UTF-8 text.", "error")
+        return redirect(url_for("admin_dashboard"))
+
+    uploaded_lines = uploaded_text.splitlines()
+    if not uploaded_lines:
+        flash("CSV file is empty.", "error")
+        return redirect(url_for("admin_dashboard"))
+
+    try:
+        current_header = next(
+            csv.reader(open(DATA_PATH, "r", encoding="utf-8", newline=""))
+        )
+    except Exception:
+        flash("Could not read the current audit CSV header.", "error")
+        return redirect(url_for("admin_dashboard"))
+
+    try:
+        uploaded_header = next(csv.reader(uploaded_lines))
+    except Exception:
+        flash("Could not read the uploaded CSV header.", "error")
+        return redirect(url_for("admin_dashboard"))
+
+    if uploaded_header != current_header:
+        flash("CSV header does not match the current audit format.", "error")
+        return redirect(url_for("admin_dashboard"))
+
+    data_dir = os.path.dirname(DATA_PATH)
+    backup_name = (
+        f"entries_backup_{datetime.now(timezone.utc).strftime('%Y%m%d_%H%M%S')}.csv"
+    )
+    backup_path = os.path.join(data_dir, backup_name)
+
+    try:
+        shutil.copy2(DATA_PATH, backup_path)
+
+        with open(DATA_PATH, "w", encoding="utf-8", newline="") as handle:
+            handle.write(uploaded_text)
+
+        flash(f"CSV imported successfully. Backup created: {backup_name}", "success")
+    except Exception:
+        flash("Import failed. Existing CSV was not updated.", "error")
+
+    return redirect(url_for("admin_dashboard"))
+
+
 @app.route("/admin", methods=["GET", "POST"])
 def admin_dashboard() -> str:
     if not is_admin():
@@ -286,7 +379,7 @@ def admin_dashboard() -> str:
     sessions = build_session_summaries(events)
     recent_sessions = sessions[:6]
     open_sessions = [session for session in sessions if session.status == "open"]
-    recent_events = list(reversed(events[-20:]))
+    recent_events = list(reversed(events[-8:]))
 
     return render_template(
         "admin_dashboard.html",
diff --git a/static/css/style.css b/static/css/style.css
index 890d74b..ce7fbef 100644
--- a/static/css/style.css
+++ b/static/css/style.css
@@ -1000,6 +1000,38 @@ td a:hover {
     border-color: rgba(255, 166, 77, 0.35);
 }
 
+.admin-tools-grid {
+    display: grid;
+    gap: 1rem;
+    grid-template-columns: repeat(auto-fit, minmax(260px, 1fr));
+}
+
+.import-form input[type="file"] {
+    width: 100%;
+    margin-top: 0.5rem;
+    margin-bottom: 1rem;
+    color: var(--text-muted);
+}
+
+.import-form input[type="file"]::file-selector-button {
+    appearance: none;
+    border: 1px solid rgba(255, 255, 255, 0.12);
+    background: rgba(255, 255, 255, 0.05);
+    color: var(--text-strong);
+    border-radius: 10px;
+    padding: 0.55rem 0.8rem;
+    font: inherit;
+    font-size: 0.9rem;
+    font-weight: 600;
+    margin-right: 0.75rem;
+    cursor: pointer;
+}
+
+.import-form input[type="file"]::file-selector-button:hover {
+    background: rgba(255, 166, 77, 0.12);
+    border-color: rgba(255, 166, 77, 0.28);
+}
+
 @media (max-width: 980px) {
     .site-shell {
         width: min(100% - 24px, 100%);
diff --git a/templates/admin_dashboard.html b/templates/admin_dashboard.html
index 029e231..5255252 100644
--- a/templates/admin_dashboard.html
+++ b/templates/admin_dashboard.html
@@ -52,101 +52,137 @@
         <button class="primary-button" type="submit">Add event</button>
     </form>
 
-    <form class="panel form-card" method="post" action="{{ url_for('admin_session_state') }}">
-        <p class="eyebrow">Session state</p>
-        <h2>Open or close a session</h2>
+    <section class="grid">
+        <form class="panel form-card" method="post" action="{{ url_for('admin_session_state') }}">
+            <p class="eyebrow">Session state</p>
+            <h2>Open or close a session</h2>
 
-        <label>
-            <span>Session date</span>
-            <input type="date" name="session_date" required>
-        </label>
+            <label>
+                <span>Session date</span>
+                <input type="date" name="session_date" required>
+            </label>
 
-        <div class="button-row">
-            <button class="primary-button" type="submit" name="state" value="open">Open session</button>
-            <button class="secondary-button" type="submit" name="state" value="closed">Close session</button>
-        </div>
-    </form>
+            <div class="button-row">
+                <button class="primary-button" type="submit" name="state" value="open">Open session</button>
+                <button class="secondary-button" type="submit" name="state" value="closed">Close session</button>
+            </div>
+        </form>
 
-    <div class="stack-gap">
-        <section class="panel">
+        <section class="panel form-card">
             <div class="panel-header">
                 <div>
-                    <p class="eyebrow">Recent sessions</p>
-                    <h2>Current totals</h2>
+                    <p class="eyebrow">Tools</p>
+                    <h2>Audit CSV</h2>
                 </div>
             </div>
-            <div class="table-wrap small-table">
-                <table>
-                    <thead>
-                        <tr>
-                            <th>Date</th>
-                            <th>Players</th>
-                            <th>Buy-ins</th>
-                            <th>Cash-outs</th>
-                            <th>Status</th>
-                            <th>Action</th>
-                        </tr>
-                    </thead>
-                    <tbody>
-                        {% for session in recent_sessions %}
-                        <tr>
-                            <td>
-                                <a href="{{ url_for('session_detail', session_date=session.session_date) }}">
-                                    {{ session.session_date | pretty_date }}
-                                </a>
-                            </td>
-                            <td>{{ session.entries|length }}</td>
-                            <td>{{ session.total_buy_in_cents | money }}</td>
-                            <td>{{ session.total_cash_out_cents | money }}</td>
-                            <td>
-                                <span class="status-badge status-{{ session.status }}">
-                                    {{ session.status }}
-                                </span>
-                            </td>
-                            <td>
-                                <form method="post" action="{{ url_for('admin_session_state') }}" class="inline-action-form">
-                                    <input type="hidden" name="session_date" value="{{ session.session_date }}">
-                                    {% if session.status == "open" %}
-                                        <button class="table-action-button" type="submit" name="state" value="closed">Close</button>
-                                    {% else %}
-                                        <button class="table-action-button" type="submit" name="state" value="open">Reopen</button>
-                                    {% endif %}
-                                </form>
-                            </td>
-                        </tr>
-                        {% else %}
-                        <tr>
-                            <td colspan="4">No sessions yet.</td>
-                        </tr>
-                        {% endfor %}
-                    </tbody>
-                </table>
-            </div>
-        </section>
 
-        <section class="panel">
-            <div class="panel-header">
-                <div>
-                    <p class="eyebrow">Recent raw events</p>
-                    <h2>Ledger feed</h2>
-                </div>
-            </div>
-            <div class="event-feed condensed">
-                {% for event in recent_events %}
-                <article class="event-card">
-                    <div class="event-card-top">
-                        <strong>{{ event.player_name }}</strong>
-                        <span class="pill pill-{{ event.event_type }}">{{ event.event_type }}</span>
+            <div class="admin-tools-grid">
+                <div class="helper-box">
+                    <p class="muted-text">
+                        Export the current audit trail or import a replacement CSV. Import creates a timestamped backup first.
+                    </p>
+                    <div class="button-row">
+                        <a class="primary-button" href="{{ url_for('admin_export_csv') }}">Export CSV</a>
                     </div>
-                    <p class="event-amount">{{ event.amount_cents | money }}</p>
-                    <p class="muted-text small">{{ event.session_date | pretty_date }}</p>
-                    {% if event.note %}<p class="muted-text small">{{ event.note }}</p>{% endif %}
-                </article>
-                {% else %}
-                <p class="muted-text">No recent events.</p>
-                {% endfor %}
+                </div>
+
+                <form method="post" action="{{ url_for('admin_import_csv') }}" enctype="multipart/form-data" class="helper-box import-form">
+                    <label for="csv_file">
+                        <span>Import replacement CSV</span>
+                    </label>
+                    <input id="csv_file" name="csv_file" type="file" accept=".csv,text/csv" required>
+                    <div class="button-row">
+                        <button
+                            class="secondary-button"
+                            type="submit"
+                            onclick="return confirm('Replace the current audit CSV? A backup will be created first.');"
+                        >
+                            Import CSV
+                        </button>
+                    </div>
+                </form>
             </div>
         </section>
+    </section>
+</section>
+
+<section class="panel">
+    <div class="panel-header">
+        <div>
+            <p class="eyebrow">Recent sessions</p>
+            <h2>Current totals</h2>
+        </div>
+    </div>
+    <div class="table-wrap small-table">
+        <table>
+            <thead>
+                <tr>
+                    <th>Date</th>
+                    <th>Players</th>
+                    <th>Buy-ins</th>
+                    <th>Cash-outs</th>
+                    <th>Status</th>
+                    <th>Action</th>
+                </tr>
+            </thead>
+            <tbody>
+                {% for session in recent_sessions %}
+                <tr>
+                    <td>
+                        <a href="{{ url_for('session_detail', session_date=session.session_date) }}">
+                            {{ session.session_date | pretty_date }}
+                        </a>
+                    </td>
+                    <td>{{ session.entries|length }}</td>
+                    <td>{{ session.total_buy_in_cents | money }}</td>
+                    <td>{{ session.total_cash_out_cents | money }}</td>
+                    <td>
+                        <span class="status-badge status-{{ session.status }}">
+                            {{ session.status }}
+                        </span>
+                    </td>
+                    <td>
+                        <form method="post" action="{{ url_for('admin_session_state') }}" class="inline-action-form">
+                            <input type="hidden" name="session_date" value="{{ session.session_date }}">
+                            {% if session.status == "open" %}
+                                <button class="table-action-button" type="submit" name="state" value="closed">Close</button>
+                            {% else %}
+                                <button class="table-action-button" type="submit" name="state" value="open">Reopen</button>
+                            {% endif %}
+                        </form>
+                    </td>
+                </tr>
+                {% else %}
+                <tr>
+                    <td colspan="4">No sessions yet.</td>
+                </tr>
+                {% endfor %}
+            </tbody>
+        </table>
+    </div>
+</section>
+
+<section class="panel">
+    <div class="panel-header">
+        <div>
+            <p class="eyebrow">Recent raw events</p>
+            <h2>Ledger feed</h2>
+        </div>
+    </div>
+    <div class="event-feed condensed">
+        {% for event in recent_events %}
+        <article class="event-card">
+            <div class="event-card-top">
+                <strong>{{ event.player_name }}</strong>
+                <span class="pill pill-{{ event.event_type }}">{{ event.event_type }}</span>
+            </div>
+            <p class="event-amount">{{ event.amount_cents | money }}</p>
+            <p class="muted-text small">{{ event.session_date | pretty_date }}</p>
+            {% if event.note %}<p class="muted-text small">{{ event.note }}</p>{% endif %}
+        </article>
+        {% else %}
+        <p class="muted-text">No recent events.</p>
+        {% endfor %}
     </div>
 </section>
 {% endblock %}

From 2800525e93a2a3c470a5b38908b334c4fda4d4fc Mon Sep 17 00:00:00 2001
From: SowinskiBraeden <braeden@sowinski.dev>
Date: Sat, 21 Mar 2026 12:52:16 -0700
Subject: [PATCH 16/83] update order/colors in session details

---
 templates/session_detail.html | 16 ++++++++--------
 1 file changed, 8 insertions(+), 8 deletions(-)

diff --git a/templates/session_detail.html b/templates/session_detail.html
index a87ca70..df4b296 100644
--- a/templates/session_detail.html
+++ b/templates/session_detail.html
@@ -33,7 +33,7 @@
 
     <article class="panel stat-card">
         <span>Total remaining</span>
-        <strong class="{{ 'negative' if session.total_remaining_cents > 0 else 'positive' }}">
+        <strong class="{{ 'negative' if session.total_remaining_cents > 0 else '' }}">
             {{ session.total_remaining_cents | money }}
         </strong>
     </article>
@@ -54,10 +54,10 @@
                     <th>Player</th>
                     <th>Buy-in</th>
                     <th>Cash-out</th>
+                    <th>Net</th>
+                    <th>Status</th>
                     <th>Paid</th>
                     <th>Remaining</th>
-                    <th>Status</th>
-                    <th>Net</th>
                     <th>Notes</th>
                 </tr>
             </thead>
@@ -71,17 +71,17 @@
                     </td>
                     <td>{{ entry.buy_in_cents | money }}</td>
                     <td>{{ entry.cash_out_cents | money }}</td>
-                    <td>{{ entry.paid_cents | money }}</td>
-                    <td class="{{ 'negative' if entry.payout_remaining_cents > 0 else 'positive' }}">
-                        {{ entry.payout_remaining_cents | money }}
+                    <td class="{{ 'positive' if entry.net_cents > 0 else 'negative' if entry.net_cents < 0 else '' }}">
+                        {{ entry.net_cents | money }}
                     </td>
                     <td>
                         <span class="status-badge status-{{ entry.payout_status }}">
                             {{ entry.payout_status }}
                         </span>
                     </td>
-                    <td class="{{ 'positive' if entry.net_cents > 0 else 'negative' if entry.net_cents < 0 else '' }}">
-                        {{ entry.net_cents | money }}
+                    <td class="{{ 'positive' if entry.paid_cents > 0 else '' }}">{{ entry.paid_cents | money }}</td>
+                    <td class="{{ 'negative' if entry.payout_remaining_cents > 0 else '' }}">
+                        {{ entry.payout_remaining_cents | money }}
                     </td>
                     <td>
                         {% if entry.notes %}

From ce795d68cd4b8bcd4caa7fd375227afc6fbd64d2 Mon Sep 17 00:00:00 2001
From: SowinskiBraeden <braeden@sowinski.dev>
Date: Sat, 21 Mar 2026 13:23:15 -0700
Subject: [PATCH 17/83] update README

---
 README.md | 89 +++++++++++++++++++++++++++++++++++++++++--------------
 1 file changed, 66 insertions(+), 23 deletions(-)

diff --git a/README.md b/README.md
index 28bb573..88868e0 100644
--- a/README.md
+++ b/README.md
@@ -1,65 +1,108 @@
 # Poker Portal
 
-A small server-rendered poker ledger app for low-stakes no-limit hold'em nights.
+A small Flask app I put together for tracking our low-stakes hold'em nights without having to keep a spreadsheet open all the time.
+
+The idea is pretty simple: public pages for stats and session history, plus a small admin area for recording buy-ins, cash-outs, paid amounts, and notes. The data sits in a CSV audit log, so everything is append-only and easy to follow later.
+
+## What it does
+
+- all-time leaderboard
+- per-session pages
+- per-player stat pages
+- admin login for recording events
+- open / closed session tracking
+- payout tracking with `paid` events
+- session and player charts
+- CSV import / export from the admin page
+- append-only `entries.csv` ledger instead of overwriting old rows
 
 ## Stack
 
+Built with a pretty lightweight setup:
+
 - Python
 - Flask
 - Jinja templates
 - Chart.js
-- Append-only CSV event ledger
-
-## Stuff is does
-
-- All-time leaderboard
-- Session archive
-- Per player stat pages
-- Admin only login for adding ledger events
-- Append only `entries.csv` audit trail
-- Buy-ins, cash-outs, note-only events, and correction events using negative amounts
-- Cumulative profit chart and player charts
+- plain CSS
+- CSV event log for storage
 
 ## Ledger model
 
-The app treats the CSV as an append-only audit trail.
+The app treats `data/entries.csv` as the source of truth.
 
-Each row is one event:
+Each row is an event, not a final snapshot. Instead of editing an old row, I append another one. That keeps rebuys, corrections, payouts, and session state changes visible in the log instead of hiding them behind edits.
+
+Current event types:
 
 - `buyin`
 - `cashout`
+- `paid`
 - `note`
+- `session_open`
+- `session_close`
 
-This means you do not edit old rows when something changes. Instead, you append:
+A few examples:
 
-- another buy-in row for a rebuy
-- another cash-out row if they cash more later
-- a negative amount to correct a mistaken buy-in or cash-out
-- a `note` row for bookkeeping context
+- another `buyin` for a rebuy
+- another `cashout` if chip counts are corrected later
+- a `paid` event when someone is actually settled up
+- a `note` event for bookkeeping context
+- `session_open` / `session_close` to mark whether a game night is still live
+
+It is still just a small side project, but I wanted the event model to stay clean enough that the numbers are easy to trust and the history is easy to read back through.
 
 ## CSV format
 
+Main file:
+
 `data/entries.csv`
 
+Header:
+
 ```csv
 id,created_at,session_date,player_name,event_type,amount_cents,note,actor
 ```
 
-## Run locally
+Amounts are stored in cents to avoid floating-point issues.
+
+## Running it locally
 
 ```bash
 python -m venv .venv
 source .venv/bin/activate
 pip install -r requirements.txt
 cp .env.example .env
-export $(grep -v '^#' .env | xargs)
 python app.py
 ```
 
-## Default environment values
+Then open:
 
-The app reads these environment variables:
+`http://127.0.0.1:8000`
+
+## Environment values
+
+The app reads these from `.env`:
 
 - `SECRET_KEY`
 - `ADMIN_USERNAME`
 - `ADMIN_PASSWORD`
+
+Example:
+
+```env
+SECRET_KEY=change-this
+ADMIN_USERNAME=admin
+ADMIN_PASSWORD=change-me
+```
+
+## Notes
+
+A few choices here were deliberate:
+
+- no database for now
+- no user accounts, just one admin login
+- public-facing stats pages, admin-only controls
+- CSV backup before importing a replacement ledger
+
+If I ever decide to take it further, the first real upgrade would probably be moving the storage layer to SQLite while keeping the rest of the app roughly the same.

From f0f6ac8e697d5cca6619b234d7618a95936e782a Mon Sep 17 00:00:00 2001
From: SowinskiBraeden <braeden@sowinski.dev>
Date: Sat, 21 Mar 2026 14:53:47 -0700
Subject: [PATCH 18/83] front chips logic

---
 static/css/style.css           | 34 +++++++++++++++++++
 stats.py                       | 61 ++++++++++++++++++++++++++--------
 storage.py                     |  3 +-
 templates/admin_dashboard.html |  3 +-
 templates/session_detail.html  | 20 +++++++++--
 5 files changed, 102 insertions(+), 19 deletions(-)

diff --git a/static/css/style.css b/static/css/style.css
index ce7fbef..89126f9 100644
--- a/static/css/style.css
+++ b/static/css/style.css
@@ -322,6 +322,10 @@ h2 {
     grid-template-columns: repeat(3, minmax(0, 1fr));
 }
 
+.four-col {
+    grid-template-columns: repeat(4, minmax(0, 1fr));
+}
+
 .stack-gap {
     display: grid;
     gap: 18px;
@@ -944,6 +948,12 @@ td a:hover {
     border: 1px solid rgba(96, 165, 250, 0.22);
 }
 
+.pill-front {
+    color: #fb923c;
+    background: rgba(251, 146, 60, 0.12);
+    border: 1px solid rgba(251, 146, 60, 0.22);
+}
+
 .pill-note {
     color: #cbd5e1;
     background: rgba(203, 213, 225, 0.08);
@@ -963,6 +973,12 @@ td a:hover {
     text-transform: uppercase;
 }
 
+.status-owes {
+    color: #ef4444;
+    background: rgba(239, 68, 68, 0.12);
+    border: 1px solid rgba(239, 68, 68, 0.24);
+}
+
 .inline-action-form {
     margin: 0;
 }
@@ -1032,6 +1048,24 @@ td a:hover {
     border-color: rgba(255, 166, 77, 0.28);
 }
 
+.payout-summary-grid {
+    display: grid;
+    gap: 1rem;
+    grid-template-columns: repeat(3, minmax(0, 1fr));
+}
+
+@media (max-width: 1100px) {
+    .payout-summary-grid {
+        grid-template-columns: repeat(2, minmax(0, 1fr));
+    }
+}
+
+@media (max-width: 640px) {
+    .payout-summary-grid {
+        grid-template-columns: 1fr;
+    }
+}
+
 @media (max-width: 980px) {
     .site-shell {
         width: min(100% - 24px, 100%);
diff --git a/stats.py b/stats.py
index 9ebe6c1..4f7ce14 100644
--- a/stats.py
+++ b/stats.py
@@ -29,17 +29,26 @@ class SessionEntry:
     session_date: str
     player_name: str
     buy_in_cents: int = 0
+    front_cents: int = 0
     cash_out_cents: int = 0
     paid_cents: int = 0
     notes: list[str] = field(default_factory=list)
 
+    @property
+    def invested_cents(self) -> int:
+        return self.buy_in_cents + self.front_cents
+
     @property
     def net_cents(self) -> int:
-        return self.cash_out_cents - self.buy_in_cents
+        return self.cash_out_cents - self.invested_cents
 
     @property
     def payout_due_cents(self) -> int:
-        return max(self.cash_out_cents, 0)
+        return max(self.cash_out_cents - self.front_cents, 0)
+
+    @property
+    def player_owes_cents(self) -> int:
+        return max(self.front_cents - self.cash_out_cents, 0)
 
     @property
     def payout_remaining_cents(self) -> int:
@@ -47,6 +56,8 @@ class SessionEntry:
 
     @property
     def payout_status(self) -> str:
+        if self.player_owes_cents > 0:
+            return "owes"
         if self.payout_due_cents <= 0:
             return "none"
         if self.paid_cents <= 0:
@@ -70,26 +81,38 @@ class SessionSummary:
     def total_buy_in_cents(self) -> int:
         return sum(entry.buy_in_cents for entry in self.entries)
 
+    @property
+    def total_front_cents(self) -> int:
+        return sum(entry.front_cents for entry in self.entries)
+
+    @property
+    def total_invested_cents(self) -> int:
+        return sum(entry.invested_cents for entry in self.entries)
+
     @property
     def total_cash_out_cents(self) -> int:
         return sum(entry.cash_out_cents for entry in self.entries)
 
-    @property
-    def total_net_cents(self) -> int:
-        return sum(entry.net_cents for entry in self.entries)
-
-    @property
-    def total_payout_due_cents(self) -> int:
-        return sum(entry.payout_due_cents for entry in self.entries)
-
     @property
     def total_paid_cents(self) -> int:
         return sum(entry.paid_cents for entry in self.entries)
 
+    @property
+    def total_payout_due_cents(self) -> int:
+        return sum(entry.payout_due_cents for entry in self.entries)
+
+    @property
+    def total_player_owes_cents(self) -> int:
+        return sum(entry.player_owes_cents for entry in self.entries)
+
     @property
     def total_remaining_cents(self) -> int:
         return sum(entry.payout_remaining_cents for entry in self.entries)
 
+    @property
+    def total_net_cents(self) -> int:
+        return sum(entry.net_cents for entry in self.entries)
+
 
 @dataclass
 class PlayerStats:
@@ -104,6 +127,8 @@ class PlayerStats:
     biggest_win_cents: int
     biggest_loss_cents: int
     total_buy_in_cents: int
+    total_front_cents: int
+    total_invested_cents: int
     total_cash_out_cents: int
     total_net_cents: int
     roi_pct: float
@@ -200,6 +225,8 @@ def build_session_summaries(events: list[EventRow]) -> list[SessionSummary]:
 
         if event_type == "buyin":
             entry.buy_in_cents += event["amount_cents"]
+        elif event_type == "front":
+            entry.front_cents += event["amount_cents"]
         elif event_type == "cashout":
             entry.cash_out_cents += event["amount_cents"]
         elif event_type == "paid":
@@ -304,9 +331,7 @@ def build_leaderboard(sessions: list[SessionSummary]) -> list[PlayerStats]:
         run_summary = summarize_player_runs(entries)
         wins = [value for value in nets if value > 0]
         losses = [value for value in nets if value < 0]
-        total_buy_in = sum(entry.buy_in_cents for entry in entries)
-        total_cash_out = sum(entry.cash_out_cents for entry in entries)
-        total_net = total_cash_out - total_buy_in
+
         sessions_played = len(entries)
         winning_sessions = len(wins)
         losing_sessions = len(losses)
@@ -318,7 +343,13 @@ def build_leaderboard(sessions: list[SessionSummary]) -> list[PlayerStats]:
         )
         biggest_win = max(wins) if wins else 0
         biggest_loss = min(losses) if losses else 0
-        roi_pct = (total_net / total_buy_in * 100) if total_buy_in else 0.0
+
+        total_buy_in = sum(entry.buy_in_cents for entry in entries)
+        total_front = sum(entry.front_cents for entry in entries)
+        total_invested = sum(entry.invested_cents for entry in entries)
+        total_cash_out = sum(entry.cash_out_cents for entry in entries)
+        total_net = sum(entry.net_cents for entry in entries)
+        roi_pct = (total_net / total_invested * 100) if total_invested else 0.0
 
         leaderboard.append(
             PlayerStats(
@@ -333,6 +364,8 @@ def build_leaderboard(sessions: list[SessionSummary]) -> list[PlayerStats]:
                 biggest_win_cents=biggest_win,
                 biggest_loss_cents=biggest_loss,
                 total_buy_in_cents=total_buy_in,
+                total_front_cents=total_front,
+                total_invested_cents=total_invested,
                 total_cash_out_cents=total_cash_out,
                 total_net_cents=total_net,
                 roi_pct=roi_pct,
diff --git a/storage.py b/storage.py
index 985445f..b825ab8 100644
--- a/storage.py
+++ b/storage.py
@@ -33,6 +33,7 @@ class EventRow(TypedDict):
 VALID_EVENT_TYPES = {
     "buyin",
     "cashout",
+    "front",
     "paid",
     "note",
     "session_open",
@@ -91,7 +92,7 @@ def append_event(
     if normalized_type not in VALID_EVENT_TYPES:
         raise ValueError(f"Unsupported event type: {event_type}")
 
-    if normalized_type == "note":
+    if normalized_type == {"note", "session_open", "session_close"}:
         amount_cents = 0
 
     event = EventRow(
diff --git a/templates/admin_dashboard.html b/templates/admin_dashboard.html
index 5255252..5d5f19e 100644
--- a/templates/admin_dashboard.html
+++ b/templates/admin_dashboard.html
@@ -33,6 +33,7 @@
             <span>Event type</span>
             <select name="event_type" required>
                 <option value="buyin">Buy-in</option>
+                <option value="front">Front</option>
                 <option value="cashout">Cash-out</option>
                 <option value="paid">Paid out</option>
                 <option value="note">Note only</option>
@@ -46,7 +47,7 @@
 
         <label>
             <span>Note</span>
-            <textarea name="note" rows="4" placeholder="Rebuy, correction, partial payout, e-transfer sent, cash paid, etc."></textarea>
+            <textarea name="note" rows="4" placeholder="Rebuy, fronted chips, correction, partial payout, e-transfer sent, cash paid, etc."></textarea>
         </label>
 
         <button class="primary-button" type="submit">Add event</button>
diff --git a/templates/session_detail.html b/templates/session_detail.html
index df4b296..ed15c8b 100644
--- a/templates/session_detail.html
+++ b/templates/session_detail.html
@@ -20,9 +20,9 @@
     </div>
 </section>
 
-<section class="grid three-col">
+<section class="grid payout-summary-grid">
     <article class="panel stat-card">
-        <span>Total cash-out due</span>
+        <span>Total payout due</span>
         <strong>{{ session.total_payout_due_cents | money }}</strong>
     </article>
 
@@ -33,10 +33,22 @@
 
     <article class="panel stat-card">
         <span>Total remaining</span>
-        <strong class="{{ 'negative' if session.total_remaining_cents > 0 else '' }}">
+        <strong class="{{ 'negative' if session.total_remaining_cents > 0 else 'positive' }}">
             {{ session.total_remaining_cents | money }}
         </strong>
     </article>
+
+    <article class="panel stat-card">
+        <span>Total fronted</span>
+        <strong>{{ session.total_front_cents | money }}</strong>
+    </article>
+
+    <article class="panel stat-card">
+        <span>Players still owe</span>
+        <strong class="{{ 'negative' if session.total_player_owes_cents > 0 else '' }}">
+            {{ session.total_player_owes_cents | money }}
+        </strong>
+    </article>
 </section>
 
 <section class="panel results-panel results-panel-full">
@@ -53,6 +65,7 @@
                 <tr>
                     <th>Player</th>
                     <th>Buy-in</th>
+                    <th>Fronted</th>
                     <th>Cash-out</th>
                     <th>Net</th>
                     <th>Status</th>
@@ -70,6 +83,7 @@
                         </a>
                     </td>
                     <td>{{ entry.buy_in_cents | money }}</td>
+                    <td>{{ entry.front_cents | money }}</td>
                     <td>{{ entry.cash_out_cents | money }}</td>
                     <td class="{{ 'positive' if entry.net_cents > 0 else 'negative' if entry.net_cents < 0 else '' }}">
                         {{ entry.net_cents | money }}

From 73eb69b7eaaf0c30562d30af2043d8aa0cc8f279 Mon Sep 17 00:00:00 2001
From: SowinskiBraeden <braeden@sowinski.dev>
Date: Sat, 21 Mar 2026 15:12:12 -0700
Subject: [PATCH 19/83] update player details to accurately display fronts

---
 templates/player_detail.html | 8 +++++---
 1 file changed, 5 insertions(+), 3 deletions(-)

diff --git a/templates/player_detail.html b/templates/player_detail.html
index 18fad5c..b2c1926 100644
--- a/templates/player_detail.html
+++ b/templates/player_detail.html
@@ -13,7 +13,9 @@
     <article class="panel stat-card"><span>Total Net</span><strong class="{{ 'positive' if player.total_net_cents > 0 else 'negative' if player.total_net_cents < 0 else 'neutral' }}">{{ player.total_net_cents | money }}</strong></article>
     <article class="panel stat-card"><span>Win %</span><strong>{{ "%.1f"|format(player.win_pct) }}%</strong></article>
     <article class="panel stat-card"><span>ROI</span><strong>{{ "%.1f"|format(player.roi_pct) }}%</strong></article>
-    <article class="panel stat-card"><span>Buy-ins</span><strong>{{ player.total_buy_in_cents | money }}</strong></article>
+    <article class="panel stat-card"><span>Total invested</span><strong>{{ player.total_invested_cents | money }}</strong></article>
+    <article class="panel stat-card"><span>Paid Buy-ins</span><strong>{{ player.total_buy_in_cents | money }}</strong></article>
+    <article class="panel stat-card"><span>Fronted</span><strong>{{ player.total_front_cents | money }}</strong></article>
     <article class="panel stat-card"><span>Cash-outs</span><strong>{{ player.total_cash_out_cents | money }}</strong></article>
     <article class="panel stat-card"><span>Sessions</span><strong>{{ player.sessions_played }}</strong></article>
     <article class="panel stat-card">
@@ -29,8 +31,8 @@
         </strong>
     </article>
 
-    <article class="panel stat-card"><span>Longest win streak</span><strong>{{ player.longest_win_streak }}</strong></article>
-    <article class="panel stat-card"><span>Longest loss streak</span><strong>{{ player.longest_loss_streak }}</strong></article>
+    <!--<article class="panel stat-card"><span>Longest win streak</span><strong>{{ player.longest_win_streak }}</strong></article>
+    <article class="panel stat-card"><span>Longest loss streak</span><strong>{{ player.longest_loss_streak }}</strong></article>-->
 </section>
 
 <section class="grid one-col">

From 3248731f511aaa28cb684996fc4e21adcedaab46 Mon Sep 17 00:00:00 2001
From: SowinskiBraeden <braeden@sowinski.dev>
Date: Sat, 21 Mar 2026 15:14:55 -0700
Subject: [PATCH 20/83] show all invested on leaderboard so net is correct

---
 templates/leaderboard.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/templates/leaderboard.html b/templates/leaderboard.html
index 4c15c24..ab1b241 100644
--- a/templates/leaderboard.html
+++ b/templates/leaderboard.html
@@ -92,7 +92,7 @@
                         {% endif %}
                     </td>
                     <td data-sort-value="{{ player.player_name|lower }}"><a href="{{ url_for('player_detail', player_name=player.player_name) }}">{{ player.player_name }}</a></td>
-                    <td data-sort-value="{{ player.total_buy_in_cents }}">{{ player.total_buy_in_cents | money }}</td>
+                    <td data-sort-value="{{ player.total_invested_cents }}">{{ player.total_invested_cents | money }}</td>
                     <td data-sort-value="{{ player.total_cash_out_cents }}">{{ player.total_cash_out_cents | money }}</td>
                     <td data-sort-value="{{ player.total_net_cents }}" class="{{ 'positive' if player.total_net_cents > 0 else 'negative' if player.total_net_cents < 0 else 'neutral' }}">{{ player.total_net_cents | money }}</td>
                     <td data-sort-value="{{ '%.4f'|format(player.win_pct) }}">{{ "%.1f"|format(player.win_pct) }}%</td>

From c24f7d581048c5a4319f8dc5749a48fc32105f4d Mon Sep 17 00:00:00 2001
From: SowinskiBraeden <braeden@sowinski.dev>
Date: Sun, 22 Mar 2026 13:52:59 -0700
Subject: [PATCH 21/83] implement rollover tracking + simple view session
 summary

---
 app.py                         | 150 ++++++++++++++++++++++++---------
 static/css/style.css           |  15 ++++
 stats.py                       | 139 ++++++++++++++++++++++--------
 storage.py                     |   9 +-
 templates/admin_dashboard.html |  26 ++++--
 templates/player_detail.html   |   8 +-
 templates/session_detail.html  | 112 ++++++++++++++++++------
 templates/sessions.html        |   2 +-
 8 files changed, 348 insertions(+), 113 deletions(-)

diff --git a/app.py b/app.py
index d8fd051..70ae2af 100644
--- a/app.py
+++ b/app.py
@@ -28,6 +28,7 @@ from stats import (
     safe_date_label,
     session_breakdown_series,
     session_events,
+    session_label,
     unique_player_names,
 )
 from storage import append_event, ensure_data_file, load_events
@@ -52,6 +53,22 @@ def load_local_env(env_path: Path) -> None:
         os.environ.setdefault(key, value)
 
 
+def next_session_id(sessions, session_date: str) -> str:
+    matching = [session for session in sessions if session.session_date == session_date]
+
+    highest = 0
+    for s in matching:
+        if s.session_id == session_date:
+            highest = max(highest, 1)
+            continue
+
+        suffix = s.session_id.replace(f"{session_date}-", "")
+        if suffix.isdigit():
+            highest = max(highest, int(suffix))
+
+    return f"{session_date}-{highest + 1:02d}"
+
+
 load_local_env(ENV_PATH)
 
 app = Flask(__name__)
@@ -126,21 +143,26 @@ def leaderboard() -> str:
 
 
 @app.get("/sessions")
-def sessions() -> str:
+def sessions():
     events = load_events(DATA_PATH)
-    session_summaries = build_session_summaries(events)
-    return render_template("sessions.html", sessions=session_summaries)
+    sessions = build_session_summaries(events)
+
+    return render_template(
+        "sessions.html",
+        sessions=sessions,
+        session_label=session_label,
+    )
 
 
-@app.get("/sessions/<session_date>")
-def session_detail(session_date: str) -> str:
+@app.get("/sessions/<session_id>")
+def session_detail(session_id: str) -> str:
     events = load_events(DATA_PATH)
     sessions = build_session_summaries(events)
     target_session = next(
         (
             session_summary
             for session_summary in sessions
-            if session_summary.session_date == session_date
+            if session_summary.session_id == session_id
         ),
         None,
     )
@@ -148,27 +170,33 @@ def session_detail(session_date: str) -> str:
         flash("That session was not found.", "error")
         return redirect(url_for("sessions"))
 
-    # sessions are in reverse order
-    idx = sessions.index(target_session)
-    next_session_idx = idx - 1
-    prev_session_idx = idx + 1
+    target_index = next(
+        (
+            index
+            for index, session in enumerate(sessions)
+            if session.session_id == session_id
+        ),
+        None,
+    )
 
-    next_session = None
-    prev_session = None
+    if target_index is None:
+        flash("That session was not found.", "error")
+        return redirect(url_for("sessions"))
 
-    if next_session_idx >= 0:
-        next_session = sessions[next_session_idx]
-
-    if prev_session_idx < len(sessions):
-        prev_session = sessions[prev_session_idx]
+    target_session = sessions[target_index]
+    prev_session = (
+        sessions[target_index + 1] if target_index < len(sessions) - 1 else None
+    )
+    next_session = sessions[target_index - 1] if target_index > 0 else None
 
     return render_template(
         "session_detail.html",
         session=target_session,
         next_session=next_session,
         prev_session=prev_session,
-        raw_events=session_events(events, session_date),
+        raw_events=session_events(events, session_id),
         chart_data=session_breakdown_series(target_session),
+        session_label=session_label,
     )
 
 
@@ -224,11 +252,16 @@ def admin_session_state() -> str:
         flash("Admin login required.", "error")
         return redirect(url_for("admin_login"))
 
-    session_date = request.form.get("session_date", "").strip()
+    session_id = request.form.get("session_id", "").strip()
     state = request.form.get("state", "").strip()
 
-    if not session_date:
-        flash("Session date is required.", "error")
+    events = load_events(DATA_PATH)
+    sessions = build_session_summaries(events)
+    by_id = {session.session_id: session for session in sessions}
+    target = by_id.get(session_id)
+
+    if target is None:
+        flash("Session not found.", "error")
         return redirect(url_for("admin_dashboard"))
 
     if state not in {"open", "closed"}:
@@ -237,13 +270,15 @@ def admin_session_state() -> str:
 
     append_event(
         DATA_PATH,
-        session_date=session_date,
+        session_id=target.session_id,
+        session_date=target.session_date,
+        amount_cents=0,
         player_name="",
         event_type="session_open" if state == "open" else "session_close",
-        amount_cents=0,
         note=f"Session marked {state}.",
         actor=app.config["ADMIN_USERNAME"],
     )
+
     flash(f"Session marked {state}.", "success")
     return redirect(url_for("admin_dashboard"))
 
@@ -329,64 +364,97 @@ def admin_import_csv():
     return redirect(url_for("admin_dashboard"))
 
 
-@app.route("/admin", methods=["GET", "POST"])
-def admin_dashboard() -> str:
+@app.post("/admin/open-session")
+def admin_open_session() -> str:
     if not is_admin():
         flash("Admin login required.", "error")
         return redirect(url_for("admin_login"))
 
+    session_date = request.form.get("session_date", "").strip()
+    if not session_date:
+        flash("Session date is required.", "error")
+        return redirect(url_for("admin_dashboard"))
+
+    events = load_events(DATA_PATH)
+    sessions = build_session_summaries(events)
+    session_id = next_session_id(sessions, session_date)
+
+    append_event(
+        DATA_PATH,
+        session_id=session_id,
+        session_date=session_date,
+        amount_cents=0,
+        player_name="",
+        event_type="session_open",
+        note="Session opened.",
+        actor=app.config["ADMIN_USERNAME"],
+    )
+
+    flash(f"Opened session {session_id}.", "success")
+    return redirect(url_for("admin_dashboard"))
+
+
+@app.route("/admin", methods=["GET", "POST"])
+def admin_dashboard():
+    if not is_admin():
+        return redirect(url_for("admin_login"))
+
     if request.method == "POST":
-        session_date = request.form.get("session_date", "").strip()
+        session_id = request.form.get("session_id", "").strip()
         player_name = request.form.get("player_name", "").strip()
         event_type = request.form.get("event_type", "").strip()
-        amount_raw = request.form.get("amount", "0").strip()
         note = request.form.get("note", "").strip()
 
-        if not session_date or not player_name or not event_type:
-            flash("Session date, player name, and event type are required.", "error")
-            return redirect(url_for("admin_dashboard"))
-
+        amount_raw = request.form.get("amount", "0").strip()
         try:
-            amount_cents = 0 if event_type == "note" else round(float(amount_raw) * 100)
+            amount_cents = int(round(float(amount_raw) * 100))
         except ValueError:
-            flash("Amount must be a valid number.", "error")
+            flash("Amount must be a number.", "error")
             return redirect(url_for("admin_dashboard"))
 
         events = load_events(DATA_PATH)
         sessions = build_session_summaries(events)
-        status_by_date = {session.session_date: session.status for session in sessions}
+        by_id = {session.session_id: session for session in sessions}
+        target = by_id.get(session_id)
 
-        if status_by_date.get(session_date, "closed") != "open":
+        if target is None:
+            flash("Select a valid open session.", "error")
+            return redirect(url_for("admin_dashboard"))
+
+        if target.status != "open":
             flash(
-                "That session is closed. Open it first before adding player events.",
+                "That session is closed. Reopen it first if you need to add events.",
                 "error",
             )
             return redirect(url_for("admin_dashboard"))
 
         append_event(
             DATA_PATH,
-            session_date=session_date,
+            session_id=target.session_id,
+            session_date=target.session_date,
             player_name=player_name,
             event_type=event_type,
             amount_cents=amount_cents,
             note=note,
             actor=app.config["ADMIN_USERNAME"],
         )
-        flash("Event added to the ledger.", "success")
+
+        flash("Event added.", "success")
         return redirect(url_for("admin_dashboard"))
 
     events = load_events(DATA_PATH)
     sessions = build_session_summaries(events)
-    recent_sessions = sessions[:6]
     open_sessions = [session for session in sessions if session.status == "open"]
-    recent_events = list(reversed(events[-8:]))
+    recent_sessions = sessions[:8]
+    recent_events = list(reversed(events[-20:]))
 
     return render_template(
         "admin_dashboard.html",
-        recent_sessions=recent_sessions,
         open_sessions=open_sessions,
+        recent_sessions=recent_sessions,
         recent_events=recent_events,
         player_names=unique_player_names(events),
+        session_label=session_label,
     )
 
 
diff --git a/static/css/style.css b/static/css/style.css
index 89126f9..412cd27 100644
--- a/static/css/style.css
+++ b/static/css/style.css
@@ -1054,6 +1054,21 @@ td a:hover {
     grid-template-columns: repeat(3, minmax(0, 1fr));
 }
 
+.table-toolbar {
+    display: flex;
+    gap: 0.65rem;
+    margin-bottom: 1rem;
+}
+
+.table-view-toggle.is-active {
+    background: rgba(255, 166, 77, 0.12);
+    border-color: rgba(255, 166, 77, 0.28);
+}
+
+.session-results-table.compact .detail-col {
+    display: none;
+}
+
 @media (max-width: 1100px) {
     .payout-summary-grid {
         grid-template-columns: repeat(2, minmax(0, 1fr));
diff --git a/stats.py b/stats.py
index 4f7ce14..0fc8c3d 100644
--- a/stats.py
+++ b/stats.py
@@ -26,17 +26,20 @@ PLAYER_PALETTE = [
 
 @dataclass
 class SessionEntry:
+    session_id: str
     session_date: str
     player_name: str
     buy_in_cents: int = 0
     front_cents: int = 0
     cash_out_cents: int = 0
     paid_cents: int = 0
+    rollover_in_cents: int = 0
+    rollover_out_cents: int = 0
     notes: list[str] = field(default_factory=list)
 
     @property
     def invested_cents(self) -> int:
-        return self.buy_in_cents + self.front_cents
+        return self.buy_in_cents + self.front_cents + self.rollover_in_cents
 
     @property
     def net_cents(self) -> int:
@@ -47,31 +50,45 @@ class SessionEntry:
         return max(self.cash_out_cents - self.front_cents, 0)
 
     @property
-    def player_owes_cents(self) -> int:
-        return max(self.front_cents - self.cash_out_cents, 0)
+    def payout_remaining_cents(self) -> int:
+        return max(self.payout_due_cents - self.paid_cents - self.rollover_out_cents, 0)
 
     @property
-    def payout_remaining_cents(self) -> int:
-        return max(self.payout_due_cents - self.paid_cents, 0)
+    def gross_payout_cents(self) -> int:
+        return max(self.cash_out_cents - self.front_cents, 0)
+
+    @property
+    def settled_cents(self) -> int:
+        return self.paid_cents + self.rollover_out_cents
+
+    @property
+    def current_due_cents(self) -> int:
+        return max(self.gross_payout_cents - self.settled_cents, 0)
+
+    @property
+    def player_owes_cents(self) -> int:
+        return max(self.front_cents - self.cash_out_cents, 0)
 
     @property
     def payout_status(self) -> str:
         if self.player_owes_cents > 0:
             return "owes"
-        if self.payout_due_cents <= 0:
+        if self.gross_payout_cents <= 0:
             return "none"
-        if self.paid_cents <= 0:
-            return "unpaid"
-        if self.payout_remaining_cents <= 0:
+        if self.current_due_cents <= 0:
             return "paid"
+        if self.settled_cents <= 0:
+            return "unpaid"
         return "partial"
 
 
 @dataclass
 class SessionSummary:
+    session_id: str
     session_date: str
     entries: list[SessionEntry]
     status: str = "closed"
+    opened_at: str = ""
 
     @property
     def is_open(self) -> bool:
@@ -85,6 +102,10 @@ class SessionSummary:
     def total_front_cents(self) -> int:
         return sum(entry.front_cents for entry in self.entries)
 
+    @property
+    def total_rollover_in_cents(self) -> int:
+        return sum(entry.rollover_in_cents for entry in self.entries)
+
     @property
     def total_invested_cents(self) -> int:
         return sum(entry.invested_cents for entry in self.entries)
@@ -93,18 +114,10 @@ class SessionSummary:
     def total_cash_out_cents(self) -> int:
         return sum(entry.cash_out_cents for entry in self.entries)
 
-    @property
-    def total_paid_cents(self) -> int:
-        return sum(entry.paid_cents for entry in self.entries)
-
     @property
     def total_payout_due_cents(self) -> int:
         return sum(entry.payout_due_cents for entry in self.entries)
 
-    @property
-    def total_player_owes_cents(self) -> int:
-        return sum(entry.player_owes_cents for entry in self.entries)
-
     @property
     def total_remaining_cents(self) -> int:
         return sum(entry.payout_remaining_cents for entry in self.entries)
@@ -113,6 +126,26 @@ class SessionSummary:
     def total_net_cents(self) -> int:
         return sum(entry.net_cents for entry in self.entries)
 
+    @property
+    def total_gross_payout_cents(self) -> int:
+        return sum(entry.gross_payout_cents for entry in self.entries)
+
+    @property
+    def total_paid_cents(self) -> int:
+        return sum(entry.paid_cents for entry in self.entries)
+
+    @property
+    def total_rollover_out_cents(self) -> int:
+        return sum(entry.rollover_out_cents for entry in self.entries)
+
+    @property
+    def total_current_due_cents(self) -> int:
+        return sum(entry.current_due_cents for entry in self.entries)
+
+    @property
+    def total_player_owes_cents(self) -> int:
+        return sum(entry.player_owes_cents for entry in self.entries)
+
 
 @dataclass
 class PlayerStats:
@@ -128,8 +161,11 @@ class PlayerStats:
     biggest_loss_cents: int
     total_buy_in_cents: int
     total_front_cents: int
+    total_rollover_in_cents: int
     total_invested_cents: int
     total_cash_out_cents: int
+    total_paid_cents: int
+    total_rollover_out_cents: int
     total_net_cents: int
     roi_pct: float
     current_win_streak: int
@@ -164,11 +200,21 @@ def cents_to_dollars(cents: int) -> str:
     return f"${value:,.2f}"
 
 
-def safe_date_label(session_date: str) -> str:
+def safe_date_label(raw_date: str) -> str:
     try:
-        return datetime.strptime(session_date, "%Y-%m-%d").strftime("%b %d, %Y")
+        return datetime.strptime(raw_date, "%Y-%m-%d").strftime("%b %d, %Y")
     except ValueError:
-        return session_date
+        return raw_date
+
+
+def session_label(session: SessionSummary) -> str:
+    if session.session_id == session.session_date:
+        return safe_date_label(session.session_date)
+
+    suffix = session.session_id.replace(f"{session.session_date}-", "")
+    if suffix.isdigit():
+        return f"{safe_date_label(session.session_date)} · S{int(suffix)}"
+    return f"{safe_date_label(session.session_date)} · {suffix}"
 
 
 def color_for_name(name: str, names: list[str]) -> str:
@@ -191,32 +237,36 @@ def build_session_summaries(events: list[EventRow]) -> list[SessionSummary]:
     grouped: dict[tuple[str, str], SessionEntry] = {}
     by_session: dict[str, list[SessionEntry]] = defaultdict(list)
     session_status: dict[str, str] = {}
-    session_dates_seen: set[str] = set()
+    session_dates: dict[str, str] = {}
+    session_opened_at: dict[str, str] = {}
 
     for event in events:
-        session_date = event["session_date"]
-        event_type = event["event_type"]
+        session_id = event["session_id"].strip() or event["session_date"].strip()
+        session_date = event["session_date"].strip()
+        event_type = event["event_type"].strip()
 
-        if not session_date:
+        if not session_id or not session_date:
             continue
 
-        session_dates_seen.add(session_date)
+        session_dates[session_id] = session_date
+        session_opened_at.setdefault(session_id, event["created_at"])
 
         if event_type == "session_open":
-            session_status[session_date] = "open"
+            session_status[session_id] = "open"
             continue
 
         if event_type == "session_close":
-            session_status[session_date] = "closed"
+            session_status[session_id] = "closed"
             continue
 
         player_name = event["player_name"].strip()
         if not player_name:
             continue
 
-        key = (session_date, player_name)
+        key = (session_id, player_name)
         if key not in grouped:
             grouped[key] = SessionEntry(
+                session_id=session_id,
                 session_date=session_date,
                 player_name=player_name,
             )
@@ -227,33 +277,46 @@ def build_session_summaries(events: list[EventRow]) -> list[SessionSummary]:
             entry.buy_in_cents += event["amount_cents"]
         elif event_type == "front":
             entry.front_cents += event["amount_cents"]
+        elif event_type == "rollover_in":
+            entry.rollover_in_cents += event["amount_cents"]
         elif event_type == "cashout":
             entry.cash_out_cents += event["amount_cents"]
         elif event_type == "paid":
             entry.paid_cents += event["amount_cents"]
+        elif event_type == "rollover_out":
+            entry.rollover_out_cents += event["amount_cents"]
 
         if event["note"]:
             entry.notes.append(event["note"])
 
     for entry in grouped.values():
-        by_session[entry.session_date].append(entry)
+        by_session[entry.session_id].append(entry)
 
     sessions: list[SessionSummary] = []
-    for session_date in session_dates_seen:
+    for session_id, session_date in session_dates.items():
         entries = sorted(
-            by_session.get(session_date, []),
+            by_session.get(session_id, []),
             key=lambda entry: entry.player_name.casefold(),
         )
 
         sessions.append(
             SessionSummary(
+                session_id=session_id,
                 session_date=session_date,
                 entries=entries,
-                status=session_status.get(session_date, "closed"),
+                status=session_status.get(session_id, "closed"),
+                opened_at=session_opened_at.get(session_id, ""),
             )
         )
 
-    sessions.sort(key=lambda session: session.session_date, reverse=True)
+    sessions.sort(
+        key=lambda session: (
+            session.session_date,
+            session.opened_at,
+            session.session_id,
+        ),
+        reverse=True,
+    )
     return sessions
 
 
@@ -346,8 +409,11 @@ def build_leaderboard(sessions: list[SessionSummary]) -> list[PlayerStats]:
 
         total_buy_in = sum(entry.buy_in_cents for entry in entries)
         total_front = sum(entry.front_cents for entry in entries)
+        total_rollover_in = sum(entry.rollover_in_cents for entry in entries)
         total_invested = sum(entry.invested_cents for entry in entries)
         total_cash_out = sum(entry.cash_out_cents for entry in entries)
+        total_paid = sum(entry.paid_cents for entry in entries)
+        total_rollover_out = sum(entry.rollover_out_cents for entry in entries)
         total_net = sum(entry.net_cents for entry in entries)
         roi_pct = (total_net / total_invested * 100) if total_invested else 0.0
 
@@ -365,8 +431,11 @@ def build_leaderboard(sessions: list[SessionSummary]) -> list[PlayerStats]:
                 biggest_loss_cents=biggest_loss,
                 total_buy_in_cents=total_buy_in,
                 total_front_cents=total_front,
+                total_rollover_in_cents=total_rollover_in,
                 total_invested_cents=total_invested,
                 total_cash_out_cents=total_cash_out,
+                total_paid_cents=total_paid,
+                total_rollover_out_cents=total_rollover_out,
                 total_net_cents=total_net,
                 roi_pct=roi_pct,
                 current_win_streak=run_summary["current_win_streak"],
@@ -496,8 +565,8 @@ def session_breakdown_series(session: SessionSummary) -> dict[str, Any]:
     }
 
 
-def session_events(events: list[EventRow], session_date: str) -> list[EventRow]:
-    return [event for event in events if event["session_date"] == session_date]
+def session_events(events: list[EventRow], session_id: str) -> list[EventRow]:
+    return [event for event in events if event["session_id"] == session_id]
 
 
 def unique_player_names(events: list[EventRow]) -> list[str]:
diff --git a/storage.py b/storage.py
index b825ab8..f9c6662 100644
--- a/storage.py
+++ b/storage.py
@@ -10,6 +10,7 @@ from typing import TypedDict
 CSV_HEADERS = [
     "id",
     "created_at",
+    "session_id",
     "session_date",
     "player_name",
     "event_type",
@@ -22,6 +23,7 @@ CSV_HEADERS = [
 class EventRow(TypedDict):
     id: str
     created_at: str
+    session_id: str
     session_date: str
     player_name: str
     event_type: str
@@ -32,9 +34,11 @@ class EventRow(TypedDict):
 
 VALID_EVENT_TYPES = {
     "buyin",
-    "cashout",
     "front",
+    "cashout",
     "paid",
+    "rollover_in",
+    "rollover_out",
     "note",
     "session_open",
     "session_close",
@@ -62,6 +66,7 @@ def load_events(csv_path: Path) -> list[EventRow]:
                 EventRow(
                     id=row["id"],
                     created_at=row["created_at"],
+                    session_id=row["session_id"],
                     session_date=row["session_date"],
                     player_name=row["player_name"],
                     event_type=row["event_type"],
@@ -79,6 +84,7 @@ def load_events(csv_path: Path) -> list[EventRow]:
 
 def append_event(
     csv_path: Path,
+    session_id: str,
     session_date: str,
     player_name: str,
     event_type: str,
@@ -98,6 +104,7 @@ def append_event(
     event = EventRow(
         id=str(uuid.uuid4()),
         created_at=datetime.now(timezone.utc).isoformat(),
+        session_id=session_id.strip(),
         session_date=session_date.strip(),
         player_name=player_name.strip(),
         event_type=normalized_type,
diff --git a/templates/admin_dashboard.html b/templates/admin_dashboard.html
index 5d5f19e..a5042d3 100644
--- a/templates/admin_dashboard.html
+++ b/templates/admin_dashboard.html
@@ -15,8 +15,15 @@
         <h2>Add to the ledger</h2>
 
         <label>
-            <span>Session date</span>
-            <input type="date" name="session_date" required>
+            <span>Open session</span>
+            <select name="session_id" required>
+                <option value="">Select session</option>
+                {% for session in open_sessions %}
+                <option value="{{ session.session_id }}">
+                    {{ session_label(session) }}
+                </option>
+                {% endfor %}
+            </select>
         </label>
 
         <label>
@@ -34,8 +41,10 @@
             <select name="event_type" required>
                 <option value="buyin">Buy-in</option>
                 <option value="front">Front</option>
+                <option value="rollover_in">Rollover in</option>
                 <option value="cashout">Cash-out</option>
                 <option value="paid">Paid out</option>
+                <option value="rollover_out">Rollover out</option>
                 <option value="note">Note only</option>
             </select>
         </label>
@@ -54,9 +63,9 @@
     </form>
 
     <section class="grid">
-        <form class="panel form-card" method="post" action="{{ url_for('admin_session_state') }}">
+        <form class="panel form-card" method="post" action="{{ url_for('admin_open_session') }}">
             <p class="eyebrow">Session state</p>
-            <h2>Open or close a session</h2>
+            <h2>Open a new session</h2>
 
             <label>
                 <span>Session date</span>
@@ -64,8 +73,7 @@
             </label>
 
             <div class="button-row">
-                <button class="primary-button" type="submit" name="state" value="open">Open session</button>
-                <button class="secondary-button" type="submit" name="state" value="closed">Close session</button>
+                <button class="primary-button" type="submit">Open session</button>
             </div>
         </form>
 
@@ -130,8 +138,8 @@
                 {% for session in recent_sessions %}
                 <tr>
                     <td>
-                        <a href="{{ url_for('session_detail', session_date=session.session_date) }}">
-                            {{ session.session_date | pretty_date }}
+                        <a href="{{ url_for('session_detail', session_id=session.session_id) }}">
+                            {{ session_label(session) }}
                         </a>
                     </td>
                     <td>{{ session.entries|length }}</td>
@@ -144,7 +152,7 @@
                     </td>
                     <td>
                         <form method="post" action="{{ url_for('admin_session_state') }}" class="inline-action-form">
-                            <input type="hidden" name="session_date" value="{{ session.session_date }}">
+                            <input type="hidden" name="session_id" value="{{ session.session_id }}">
                             {% if session.status == "open" %}
                                 <button class="table-action-button" type="submit" name="state" value="closed">Close</button>
                             {% else %}
diff --git a/templates/player_detail.html b/templates/player_detail.html
index b2c1926..9f23b3e 100644
--- a/templates/player_detail.html
+++ b/templates/player_detail.html
@@ -14,8 +14,9 @@
     <article class="panel stat-card"><span>Win %</span><strong>{{ "%.1f"|format(player.win_pct) }}%</strong></article>
     <article class="panel stat-card"><span>ROI</span><strong>{{ "%.1f"|format(player.roi_pct) }}%</strong></article>
     <article class="panel stat-card"><span>Total invested</span><strong>{{ player.total_invested_cents | money }}</strong></article>
-    <article class="panel stat-card"><span>Paid Buy-ins</span><strong>{{ player.total_buy_in_cents | money }}</strong></article>
+    <article class="panel stat-card"><span>Paid Buy-in</span><strong>{{ player.total_buy_in_cents | money }}</strong></article>
     <article class="panel stat-card"><span>Fronted</span><strong>{{ player.total_front_cents | money }}</strong></article>
+    <!--<article class="panel stat-card"><span>Rolled in</span><strong>{{ player.total_rollover_in_cents | money }}</strong></article>-->
     <article class="panel stat-card"><span>Cash-outs</span><strong>{{ player.total_cash_out_cents | money }}</strong></article>
     <article class="panel stat-card"><span>Sessions</span><strong>{{ player.sessions_played }}</strong></article>
     <article class="panel stat-card">
@@ -84,6 +85,11 @@
     <div class="table-wrap">
         <table>
             <tbody>
+                <tr><th>Paid Buy-ins</th><td>{{ player.total_buy_in_cents | money }}</td></tr>
+                <tr><th>Fronted</th><td>{{ player.total_front_cents | money }}</td></tr>
+                <tr><th>Rolled In</th><td>{{ player.total_rollover_in_cents | money }}</td></tr>
+                <tr><th>Total Invested</th><td>{{ player.total_invested_cents | money }}</td></tr>
+                <tr><th>Rolled Out</th><td>{{ player.total_rollover_out_cents | money }}</td></tr>
                 <tr><th>Winning Sessions</th><td>{{ player.winning_sessions }}</td></tr>
                 <tr><th>Losing Sessions</th><td>{{ player.losing_sessions }}</td></tr>
                 <tr><th>Break-even Sessions</th><td>{{ player.break_even_sessions }}</td></tr>
diff --git a/templates/session_detail.html b/templates/session_detail.html
index ed15c8b..c23d52b 100644
--- a/templates/session_detail.html
+++ b/templates/session_detail.html
@@ -5,16 +5,21 @@
     <div style="display: flex; justify-content: space-between;">
         <div>
             <p class="eyebrow">Session detail</p>
-            <h1>{{ session.session_date | pretty_date }}</h1>
+            <h1>{{ session_label(session) }}</h1>
             <p class="muted-text">Current totals are derived from the event log for this date.</p>
         </div>
 
-        <div style="align-content: center;">
+        <div style="align-self: center;">
             {% if prev_session %}
-                <a class="secondary-button" href="{{ url_for('session_detail', session_date=prev_session.session_date) }}">Previous Session</a>
+                <a class="secondary-button" href="{{ url_for('session_detail', session_id=prev_session.session_id) }}">
+                    Previous Session
+                </a>
             {% endif %}
+
             {% if next_session %}
-                <a class="secondary-button" href="{{ url_for('session_detail', session_date=next_session.session_date) }}">Next Session</a>
+                <a class="secondary-button" href="{{ url_for('session_detail', session_id=next_session.session_id) }}">
+                    Next Session
+                </a>
             {% endif %}
         </div>
     </div>
@@ -22,8 +27,13 @@
 
 <section class="grid payout-summary-grid">
     <article class="panel stat-card">
-        <span>Total payout due</span>
-        <strong>{{ session.total_payout_due_cents | money }}</strong>
+        <span>Gross payout</span>
+        <strong>{{ session.total_gross_payout_cents | money }}</strong>
+    </article>
+
+    <article class="panel stat-card">
+        <span>Total rolled out</span>
+        <strong>{{ session.total_rollover_out_cents | money }}</strong>
     </article>
 
     <article class="panel stat-card">
@@ -32,17 +42,12 @@
     </article>
 
     <article class="panel stat-card">
-        <span>Total remaining</span>
-        <strong class="{{ 'negative' if session.total_remaining_cents > 0 else 'positive' }}">
-            {{ session.total_remaining_cents | money }}
+        <span>Still owed</span>
+        <strong class="{{ 'negative' if session.total_current_due_cents > 0 else 'positive' }}">
+            {{ session.total_current_due_cents | money }}
         </strong>
     </article>
 
-    <article class="panel stat-card">
-        <span>Total fronted</span>
-        <strong>{{ session.total_front_cents | money }}</strong>
-    </article>
-
     <article class="panel stat-card">
         <span>Players still owe</span>
         <strong class="{{ 'negative' if session.total_player_owes_cents > 0 else '' }}">
@@ -51,12 +56,22 @@
     </article>
 </section>
 
+
 <section class="panel results-panel results-panel-full">
     <div class="panel-header">
         <div>
             <p class="eyebrow">Results</p>
             <h2>Player totals</h2>
         </div>
+
+        <div class="table-toolbar">
+            <button type="button" class="secondary-button table-view-toggle is-active" data-view="compact">
+                Compact
+            </button>
+            <button type="button" class="secondary-button table-view-toggle" data-view="full">
+                Full details
+            </button>
+        </div>
     </div>
 
     <div class="table-scroll table-scroll-open">
@@ -64,13 +79,16 @@
             <thead>
                 <tr>
                     <th>Player</th>
-                    <th>Buy-in</th>
-                    <th>Fronted</th>
-                    <th>Cash-out</th>
+                    <th>In</th>
+                    <th class="detail-col">Fronted</th>
+                    <th class="detail-col">Rolled in</th>
+                    <th>Out</th>
                     <th>Net</th>
+                    <th class="detail-col">Gross due</th>
+                    <th class="detail-col">Paid</th>
+                    <th class="detail-col">Rolled out</th>
+                    <th>Still owed</th>
                     <th>Status</th>
-                    <th>Paid</th>
-                    <th>Remaining</th>
                     <th>Notes</th>
                 </tr>
             </thead>
@@ -82,21 +100,41 @@
                             {{ entry.player_name }}
                         </a>
                     </td>
-                    <td>{{ entry.buy_in_cents | money }}</td>
-                    <td>{{ entry.front_cents | money }}</td>
+
+                    <td>{{ entry.invested_cents | money }}</td>
+                    <td class="detail-col">{{ entry.front_cents | money }}</td>
+                    <td class="detail-col">{{ entry.rollover_in_cents | money }}</td>
                     <td>{{ entry.cash_out_cents | money }}</td>
+
                     <td class="{{ 'positive' if entry.net_cents > 0 else 'negative' if entry.net_cents < 0 else '' }}">
                         {{ entry.net_cents | money }}
                     </td>
+
+                    <td class="detail-col">
+                        {% if entry.player_owes_cents > 0 %}
+                            —
+                        {% else %}
+                            {{ entry.gross_payout_cents | money }}
+                        {% endif %}
+                    </td>
+
+                    <td class="detail-col">{{ entry.paid_cents | money }}</td>
+                    <td class="detail-col">{{ entry.rollover_out_cents | money }}</td>
+
+                    <td class="{% if entry.player_owes_cents > 0 %}negative{% elif entry.current_due_cents > 0 %}negative{% else %}positive{% endif %}">
+                        {% if entry.player_owes_cents > 0 %}
+                            Owes {{ entry.player_owes_cents | money }}
+                        {% else %}
+                            {{ entry.current_due_cents | money }}
+                        {% endif %}
+                    </td>
+
                     <td>
                         <span class="status-badge status-{{ entry.payout_status }}">
                             {{ entry.payout_status }}
                         </span>
                     </td>
-                    <td class="{{ 'positive' if entry.paid_cents > 0 else '' }}">{{ entry.paid_cents | money }}</td>
-                    <td class="{{ 'negative' if entry.payout_remaining_cents > 0 else '' }}">
-                        {{ entry.payout_remaining_cents | money }}
-                    </td>
+
                     <td>
                         {% if entry.notes %}
                             <ul class="note-list">
@@ -270,4 +308,28 @@
         });
     }
 </script>
+
+<script>
+    const sessionTable = document.querySelector('.session-results-table');
+    const viewButtons = document.querySelectorAll('.table-view-toggle');
+
+    if (sessionTable && viewButtons.length) {
+        sessionTable.classList.add('compact');
+
+        viewButtons.forEach((button) => {
+            button.addEventListener('click', () => {
+                const view = button.dataset.view;
+
+                viewButtons.forEach((btn) => btn.classList.remove('is-active'));
+                button.classList.add('is-active');
+
+                if (view === 'full') {
+                    sessionTable.classList.remove('compact');
+                } else {
+                    sessionTable.classList.add('compact');
+                }
+            });
+        });
+    }
+</script>
 {% endblock %}
diff --git a/templates/sessions.html b/templates/sessions.html
index 61a51f8..9587dda 100644
--- a/templates/sessions.html
+++ b/templates/sessions.html
@@ -31,7 +31,7 @@
             <tbody>
                 {% for session in sessions %}
                 <tr>
-                    <td><a href="{{ url_for('session_detail', session_date=session.session_date) }}">{{ session.session_date | pretty_date }}</a></td>
+                    <td><a href="{{ url_for('session_detail', session_id=session.session_id) }}">{{ session_label(session) }}</a></td>
                     <td><span class="status-badge status-{{ session.status }}">
                         {{ session.status }}
                     </span></td>

From 7cdd89ef2c5115bcca864feaa4371e985fbb10ba Mon Sep 17 00:00:00 2001
From: SowinskiBraeden <braeden@sowinski.dev>
Date: Sun, 22 Mar 2026 14:24:30 -0700
Subject: [PATCH 22/83] update admin summary

---
 app.py                         | 15 ++++++++++
 static/css/style.css           | 25 ++++++++++++++++
 stats.py                       | 12 ++++++++
 templates/admin_dashboard.html | 55 ++++++++++++++++++++++++++++++----
 4 files changed, 102 insertions(+), 5 deletions(-)

diff --git a/app.py b/app.py
index 70ae2af..b1f30e6 100644
--- a/app.py
+++ b/app.py
@@ -448,6 +448,20 @@ def admin_dashboard():
     recent_sessions = sessions[:8]
     recent_events = list(reversed(events[-20:]))
 
+    admin_totals = {
+        "cash_in_cents": sum(session.total_cash_in_cents for session in sessions),
+        "paid_out_cents": sum(session.total_paid_out_cents for session in sessions),
+        "still_owed_cents": sum(
+            session.total_current_due_cents for session in sessions
+        ),
+        "players_owe_cents": sum(
+            session.total_player_owes_cents for session in sessions
+        ),
+        "open_balance_cents": sum(
+            session.total_open_balance_cents for session in sessions
+        ),
+    }
+
     return render_template(
         "admin_dashboard.html",
         open_sessions=open_sessions,
@@ -455,6 +469,7 @@ def admin_dashboard():
         recent_events=recent_events,
         player_names=unique_player_names(events),
         session_label=session_label,
+        admin_totals=admin_totals,
     )
 
 
diff --git a/static/css/style.css b/static/css/style.css
index 412cd27..f77f9b9 100644
--- a/static/css/style.css
+++ b/static/css/style.css
@@ -1069,6 +1069,31 @@ td a:hover {
     display: none;
 }
 
+.admin-cash-grid {
+    display: grid;
+    gap: 1rem;
+    grid-template-columns: repeat(5, minmax(0, 1fr));
+    margin-bottom: 1rem;
+}
+
+@media (max-width: 1200px) {
+    .admin-cash-grid {
+        grid-template-columns: repeat(3, minmax(0, 1fr));
+    }
+}
+
+@media (max-width: 760px) {
+    .admin-cash-grid {
+        grid-template-columns: repeat(2, minmax(0, 1fr));
+    }
+}
+
+@media (max-width: 520px) {
+    .admin-cash-grid {
+        grid-template-columns: 1fr;
+    }
+}
+
 @media (max-width: 1100px) {
     .payout-summary-grid {
         grid-template-columns: repeat(2, minmax(0, 1fr));
diff --git a/stats.py b/stats.py
index 0fc8c3d..c1d5af7 100644
--- a/stats.py
+++ b/stats.py
@@ -146,6 +146,18 @@ class SessionSummary:
     def total_player_owes_cents(self) -> int:
         return sum(entry.player_owes_cents for entry in self.entries)
 
+    @property
+    def total_cash_in_cents(self) -> int:
+        return sum(entry.buy_in_cents for entry in self.entries)
+
+    @property
+    def total_paid_out_cents(self) -> int:
+        return sum(entry.paid_cents for entry in self.entries)
+
+    @property
+    def total_open_balance_cents(self) -> int:
+        return self.total_current_due_cents - self.total_player_owes_cents
+
 
 @dataclass
 class PlayerStats:
diff --git a/templates/admin_dashboard.html b/templates/admin_dashboard.html
index a5042d3..41d9b29 100644
--- a/templates/admin_dashboard.html
+++ b/templates/admin_dashboard.html
@@ -115,6 +115,39 @@
     </section>
 </section>
 
+<section class="grid admin-cash-grid">
+    <article class="panel stat-card">
+        <span>Cash in</span>
+        <strong>{{ admin_totals.cash_in_cents | money }}</strong>
+    </article>
+
+    <article class="panel stat-card">
+        <span>Paid out</span>
+        <strong>{{ admin_totals.paid_out_cents | money }}</strong>
+    </article>
+
+    <article class="panel stat-card">
+        <span>Still owed</span>
+        <strong class="{{ 'negative' if admin_totals.still_owed_cents > 0 else 'positive' }}">
+            {{ admin_totals.still_owed_cents | money }}
+        </strong>
+    </article>
+
+    <article class="panel stat-card">
+        <span>Players owe</span>
+        <strong class="{{ 'negative' if admin_totals.players_owe_cents > 0 else '' }}">
+            {{ admin_totals.players_owe_cents | money }}
+        </strong>
+    </article>
+
+    <article class="panel stat-card">
+        <span>Open balance</span>
+        <strong class="{% if admin_totals.open_balance_cents > 0 %}negative{% elif admin_totals.open_balance_cents < 0 %}positive{% endif %}">
+            {{ admin_totals.open_balance_cents | money }}
+        </strong>
+    </article>
+</section>
+
 <section class="panel">
     <div class="panel-header">
         <div>
@@ -126,10 +159,13 @@
         <table>
             <thead>
                 <tr>
-                    <th>Date</th>
+                    <th>Session</th>
                     <th>Players</th>
-                    <th>Buy-ins</th>
-                    <th>Cash-outs</th>
+                    <th>Cash in</th>
+                    <th>Paid out</th>
+                    <th>Still owed</th>
+                    <th>Players owe</th>
+                    <th>Open balance</th>
                     <th>Status</th>
                     <th>Action</th>
                 </tr>
@@ -143,8 +179,17 @@
                         </a>
                     </td>
                     <td>{{ session.entries|length }}</td>
-                    <td>{{ session.total_buy_in_cents | money }}</td>
-                    <td>{{ session.total_cash_out_cents | money }}</td>
+                    <td>{{ session.total_cash_in_cents | money }}</td>
+                    <td>{{ session.total_paid_out_cents | money }}</td>
+                    <td class="{{ 'negative' if session.total_current_due_cents > 0 else 'positive' }}">
+                        {{ session.total_current_due_cents | money }}
+                    </td>
+                    <td class="{{ 'negative' if session.total_player_owes_cents > 0 else '' }}">
+                        {{ session.total_player_owes_cents | money }}
+                    </td>
+                    <td class="{% if session.total_open_balance_cents > 0 %}negative{% elif session.total_open_balance_cents < 0 %}positive{% endif %}">
+                        {{ session.total_open_balance_cents | money }}
+                    </td>
                     <td>
                         <span class="status-badge status-{{ session.status }}">
                             {{ session.status }}

From 51686de47399cd02671df2cc623df4ee62801bef Mon Sep 17 00:00:00 2001
From: SowinskiBraeden <braeden@sowinski.dev>
Date: Sun, 22 Mar 2026 14:28:53 -0700
Subject: [PATCH 23/83] leaderboard through session label update

---
 app.py                     | 1 +
 templates/leaderboard.html | 2 +-
 2 files changed, 2 insertions(+), 1 deletion(-)

diff --git a/app.py b/app.py
index b1f30e6..0ad3590 100644
--- a/app.py
+++ b/app.py
@@ -139,6 +139,7 @@ def leaderboard() -> str:
             if selected_session_date
             else "Latest session"
         ),
+        session_label=session_label,
     )
 
 
diff --git a/templates/leaderboard.html b/templates/leaderboard.html
index ab1b241..99abd14 100644
--- a/templates/leaderboard.html
+++ b/templates/leaderboard.html
@@ -50,7 +50,7 @@
                 <select id="through_session" name="through_session" class="session-filter-select" onchange="this.form.submit()">
                     <option value="" {% if not selected_session_date %}selected{% endif %}>Latest session</option>
                     {% for session in available_sessions %}
-                    <option value="{{ session.session_date }}" {% if selected_session_date == session.session_date %}selected{% endif %}>{{ session.session_date | pretty_date }}</option>
+                    <option value="{{ session.session_date }}" {% if selected_session_date == session.session_date %}selected{% endif %}>{{ session_label(session) }}</option>
                     {% endfor %}
                 </select>
                 {% if selected_session_date %}

From 4635286a09cc978f96edbd2efc5a3a7071eb073c Mon Sep 17 00:00:00 2001
From: SowinskiBraeden <braeden@sowinski.dev>
Date: Sun, 22 Mar 2026 14:40:24 -0700
Subject: [PATCH 24/83] update leaderboard stats

---
 templates/leaderboard.html | 13 +++++++------
 1 file changed, 7 insertions(+), 6 deletions(-)

diff --git a/templates/leaderboard.html b/templates/leaderboard.html
index 99abd14..37a37bd 100644
--- a/templates/leaderboard.html
+++ b/templates/leaderboard.html
@@ -43,6 +43,7 @@
         <div>
             <p class="eyebrow">Standings</p>
             <h2>All-time leaderboard</h2>
+            <p class="muted-text small">Cash in / paid out reflect real money movement. Net / ROI reflect poker results.</p>
         </div>
         <div class="leaderboard-controls">
             <form method="get" class="session-filter-form">
@@ -68,8 +69,8 @@
                     <th><button type="button" class="sort-button" data-sort-key="rank" data-sort-type="number" data-initial-direction="asc">Rank <span class="sort-indicator">↕</span></button></th>
                     <th><button type="button" class="sort-button" data-sort-key="rankdelta" data-sort-type="number" data-initial-direction="desc">Rank Δ <span class="sort-indicator">↕</span></button></th>
                     <th><button type="button" class="sort-button" data-sort-key="player" data-sort-type="string" data-initial-direction="asc">Player <span class="sort-indicator">↕</span></button></th>
-                    <th><button type="button" class="sort-button" data-sort-key="buyins" data-sort-type="number" data-initial-direction="desc">Buy-ins <span class="sort-indicator">↕</span></button></th>
-                    <th><button type="button" class="sort-button" data-sort-key="cashouts" data-sort-type="number" data-initial-direction="desc">Cash-outs <span class="sort-indicator">↕</span></button></th>
+                    <th><button type="button" class="sort-button" data-sort-key="cashin" data-sort-type="number" data-initial-direction="desc">Cash in <span class="sort-indicator">↕</span></button></th>
+                    <th><button type="button" class="sort-button" data-sort-key="paidout" data-sort-type="number" data-initial-direction="desc">Paid out <span class="sort-indicator">↕</span></button></th>
                     <th><button type="button" class="sort-button is-active" data-sort-key="net" data-sort-type="number" data-initial-direction="desc">Net <span class="sort-indicator">↓</span></button></th>
                     <th><button type="button" class="sort-button" data-sort-key="winpct" data-sort-type="number" data-initial-direction="desc">Win % <span class="sort-indicator">↕</span></button></th>
                     <th><button type="button" class="sort-button" data-sort-key="roi" data-sort-type="number" data-initial-direction="desc">ROI <span class="sort-indicator">↕</span></button></th>
@@ -92,8 +93,8 @@
                         {% endif %}
                     </td>
                     <td data-sort-value="{{ player.player_name|lower }}"><a href="{{ url_for('player_detail', player_name=player.player_name) }}">{{ player.player_name }}</a></td>
-                    <td data-sort-value="{{ player.total_invested_cents }}">{{ player.total_invested_cents | money }}</td>
-                    <td data-sort-value="{{ player.total_cash_out_cents }}">{{ player.total_cash_out_cents | money }}</td>
+                    <td data-sort-value="{{ player.total_buy_in_cents }}">{{ player.total_buy_in_cents | money }}</td>
+                    <td data-sort-value="{{ player.total_paid_cents }}">{{ player.total_paid_cents | money }}</td>
                     <td data-sort-value="{{ player.total_net_cents }}" class="{{ 'positive' if player.total_net_cents > 0 else 'negative' if player.total_net_cents < 0 else 'neutral' }}">{{ player.total_net_cents | money }}</td>
                     <td data-sort-value="{{ '%.4f'|format(player.win_pct) }}">{{ "%.1f"|format(player.win_pct) }}%</td>
                     <td data-sort-value="{{ '%.4f'|format(player.roi_pct) }}">{{ "%.1f"|format(player.roi_pct) }}%</td>
@@ -266,8 +267,8 @@
         rank: 0,
         rankdelta: 1,
         player: 2,
-        buyins: 3,
-        cashouts: 4,
+        cashin: 3,
+        paidout: 4,
         net: 5,
         winpct: 6,
         roi: 7,

From a17b194659665834dcf8542ae25a6037f4ef1c20 Mon Sep 17 00:00:00 2001
From: SowinskiBraeden <braeden@sowinski.dev>
Date: Sun, 22 Mar 2026 15:00:15 -0700
Subject: [PATCH 25/83] fix graph order for same date sessions

---
 stats.py | 82 +++++++++++++++++++++++++++++++++++++-------------------
 1 file changed, 55 insertions(+), 27 deletions(-)

diff --git a/stats.py b/stats.py
index c1d5af7..7d8d75a 100644
--- a/stats.py
+++ b/stats.py
@@ -212,6 +212,38 @@ def cents_to_dollars(cents: int) -> str:
     return f"${value:,.2f}"
 
 
+def session_sort_key(session: SessionSummary) -> tuple[str, int, str]:
+    session_id = session.session_id.strip()
+
+    if session_id == session.session_date:
+        return (session.session_date, 1, session_id)
+
+    suffix = session_id.replace(f"{session.session_date}-", "")
+    if suffix.isdigit():
+        return (session.session_date, int(suffix), session_id)
+
+    if suffix.lower().startswith("s") and suffix[1:].isdigit():
+        return (session.session_date, int(suffix[1:]), session_id)
+
+    return (session.session_date, 9999, session_id)
+
+
+def session_chart_label(session: SessionSummary) -> str:
+    session_id = session.session_id.strip()
+
+    if session_id == session.session_date:
+        return safe_date_label(session.session_date)
+
+    suffix = session_id.replace(f"{session.session_date}-", "")
+    if suffix.isdigit():
+        return f"{safe_date_label(session.session_date)} · S{int(suffix)}"
+
+    if suffix.lower().startswith("s") and suffix[1:].isdigit():
+        return f"{safe_date_label(session.session_date)} · S{int(suffix[1:])}"
+
+    return f"{safe_date_label(session.session_date)} · {suffix}"
+
+
 def safe_date_label(raw_date: str) -> str:
     try:
         return datetime.strptime(raw_date, "%Y-%m-%d").strftime("%b %d, %Y")
@@ -468,9 +500,10 @@ def build_leaderboard(sessions: list[SessionSummary]) -> list[PlayerStats]:
     return leaderboard
 
 
-def cumulative_profit_series(sessions: list[SessionSummary]) -> dict[str, Any]:
-    ordered_sessions = sorted(sessions, key=lambda session: session.session_date)
-    player_names = sorted(
+def cumulative_profit_series(sessions: list[SessionSummary]) -> dict[str, object]:
+    ordered_sessions = sorted(sessions, key=session_sort_key)
+
+    all_players = sorted(
         {
             entry.player_name
             for session in ordered_sessions
@@ -479,13 +512,13 @@ def cumulative_profit_series(sessions: list[SessionSummary]) -> dict[str, Any]:
         key=str.casefold,
     )
 
-    labels = [safe_date_label(session.session_date) for session in ordered_sessions]
+    labels = [session_chart_label(session) for session in ordered_sessions]
     datasets = []
 
-    for player_name in player_names:
-        series: list[float | None] = []
+    for player_name in all_players:
         running_total = 0
-        has_started = False
+        seen_player = False
+        data: list[float | None] = []
 
         for session in ordered_sessions:
             matching_entry = next(
@@ -496,37 +529,32 @@ def cumulative_profit_series(sessions: list[SessionSummary]) -> dict[str, Any]:
                 ),
                 None,
             )
-            if matching_entry is not None:
-                has_started = True
-                running_total += matching_entry.net_cents
-                series.append(round(running_total / 100, 2))
-            elif has_started:
-                series.append(round(running_total / 100, 2))
-            else:
-                series.append(None)
+
+            if matching_entry is None:
+                data.append(running_total / 100 if seen_player else None)
+                continue
+
+            seen_player = True
+            running_total += matching_entry.net_cents
+            data.append(round(running_total / 100, 2))
 
         datasets.append(
             {
                 "label": player_name,
-                "data": series,
-                "borderColor": color_for_name(player_name, player_names),
-                "backgroundColor": color_for_name(player_name, player_names),
-                "pointRadius": 3,
-                "pointHoverRadius": 5,
-                "pointHitRadius": 10,
-                "borderWidth": 2.5,
-                "tension": 0.22,
-                "spanGaps": False,
+                "data": data,
             }
         )
 
-    return {"labels": labels, "datasets": datasets}
+    return {
+        "labels": labels,
+        "datasets": datasets,
+    }
 
 
 def player_session_series(
     sessions: list[SessionSummary], player_name: str
 ) -> dict[str, Any]:
-    ordered_sessions = sorted(sessions, key=lambda session: session.session_date)
+    ordered_sessions = sorted(sessions, key=session_sort_key)
     labels: list[str] = []
     net_values: list[float] = []
     cumulative_values: list[float] = []
@@ -549,7 +577,7 @@ def player_session_series(
         if matching_entry is None:
             continue
 
-        labels.append(safe_date_label(session.session_date))
+        labels.append(session_chart_label(session))
         net_values.append(round(matching_entry.net_cents / 100, 2))
         running_total += matching_entry.net_cents
         cumulative_values.append(round(running_total / 100, 2))

From 6ed0f6905081cb63ec668a14dde31a6f4b0c69cf Mon Sep 17 00:00:00 2001
From: SowinskiBraeden <braeden@sowinski.dev>
Date: Sat, 28 Mar 2026 11:16:22 -0700
Subject: [PATCH 26/83] fix leaderboard through id not date

---
 app.py                     | 20 ++++++++++----------
 templates/leaderboard.html |  2 +-
 2 files changed, 11 insertions(+), 11 deletions(-)

diff --git a/app.py b/app.py
index 0ad3590..a5921af 100644
--- a/app.py
+++ b/app.py
@@ -104,15 +104,15 @@ def leaderboard() -> str:
     all_sessions = build_session_summaries(events)
     ordered_sessions = sorted(all_sessions, key=lambda s: s.session_date)
 
-    session_dates = [session.session_date for session in ordered_sessions]
-    selected_session_date = request.args.get("through_session", "").strip()
+    session_ids = [session.session_id for session in ordered_sessions]
+    selected_session_id = request.args.get("through_session", "").strip()
 
-    if session_dates:
-        if selected_session_date in session_dates:
-            cutoff_index = session_dates.index(selected_session_date)
+    if session_ids:
+        if selected_session_id in session_ids:
+            cutoff_index = session_ids.index(selected_session_id)
         else:
-            cutoff_index = len(session_dates) - 1
-            selected_session = session_dates[cutoff_index]
+            cutoff_index = len(session_ids) - 1
+            selected_session = session_ids[cutoff_index]
 
         filtered_sessions = ordered_sessions[: cutoff_index + 1]
         previous_sessions = ordered_sessions[:cutoff_index]
@@ -133,10 +133,10 @@ def leaderboard() -> str:
         total_session_count=len(all_sessions),
         chart_data=chart_data,
         available_sessions=all_sessions,
-        selected_session_date=selected_session_date,
+        selected_session_date=selected_session_id,
         selected_session_label=(
-            safe_date_label(selected_session_date)
-            if selected_session_date
+            safe_date_label(selected_session_id)
+            if selected_session_id
             else "Latest session"
         ),
         session_label=session_label,
diff --git a/templates/leaderboard.html b/templates/leaderboard.html
index 37a37bd..be48faa 100644
--- a/templates/leaderboard.html
+++ b/templates/leaderboard.html
@@ -51,7 +51,7 @@
                 <select id="through_session" name="through_session" class="session-filter-select" onchange="this.form.submit()">
                     <option value="" {% if not selected_session_date %}selected{% endif %}>Latest session</option>
                     {% for session in available_sessions %}
-                    <option value="{{ session.session_date }}" {% if selected_session_date == session.session_date %}selected{% endif %}>{{ session_label(session) }}</option>
+                    <option value="{{ session.session_id }}" {% if selected_session_id == session.session_id %}selected{% endif %}>{{ session_label(session) }}</option>
                     {% endfor %}
                 </select>
                 {% if selected_session_date %}

From 8b74f277b2c163500a8397f7354ebca28d01a7bd Mon Sep 17 00:00:00 2001
From: SowinskiBraeden <braeden@sowinski.dev>
Date: Sat, 28 Mar 2026 11:26:35 -0700
Subject: [PATCH 27/83] fix leaderboard through id not date

---
 app.py                     | 12 +++++-------
 templates/leaderboard.html |  2 +-
 2 files changed, 6 insertions(+), 8 deletions(-)

diff --git a/app.py b/app.py
index a5921af..35a7d66 100644
--- a/app.py
+++ b/app.py
@@ -106,13 +106,15 @@ def leaderboard() -> str:
 
     session_ids = [session.session_id for session in ordered_sessions]
     selected_session_id = request.args.get("through_session", "").strip()
+    label = ""
 
     if session_ids:
         if selected_session_id in session_ids:
             cutoff_index = session_ids.index(selected_session_id)
         else:
             cutoff_index = len(session_ids) - 1
-            selected_session = session_ids[cutoff_index]
+            selected_session = ordered_sessions[cutoff_index]
+            label = session_label(selected_session)
 
         filtered_sessions = ordered_sessions[: cutoff_index + 1]
         previous_sessions = ordered_sessions[:cutoff_index]
@@ -133,12 +135,8 @@ def leaderboard() -> str:
         total_session_count=len(all_sessions),
         chart_data=chart_data,
         available_sessions=all_sessions,
-        selected_session_date=selected_session_id,
-        selected_session_label=(
-            safe_date_label(selected_session_id)
-            if selected_session_id
-            else "Latest session"
-        ),
+        selected_session_id=selected_session_id,
+        selected_session_label=(label if selected_session_id else "Latest session"),
         session_label=session_label,
     )
 
diff --git a/templates/leaderboard.html b/templates/leaderboard.html
index be48faa..8228f9c 100644
--- a/templates/leaderboard.html
+++ b/templates/leaderboard.html
@@ -49,7 +49,7 @@
             <form method="get" class="session-filter-form">
                 <label for="through_session" class="session-filter-label">Through session</label>
                 <select id="through_session" name="through_session" class="session-filter-select" onchange="this.form.submit()">
-                    <option value="" {% if not selected_session_date %}selected{% endif %}>Latest session</option>
+                    <option value="" {% if not selected_session_id %}selected{% endif %}>Latest session</option>
                     {% for session in available_sessions %}
                     <option value="{{ session.session_id }}" {% if selected_session_id == session.session_id %}selected{% endif %}>{{ session_label(session) }}</option>
                     {% endfor %}

From 2939415f76ca6c2edf1d4ee8815cfe671fa957e7 Mon Sep 17 00:00:00 2001
From: SowinskiBraeden <braeden@sowinski.dev>
Date: Tue, 28 Apr 2026 13:15:59 -0700
Subject: [PATCH 28/83] improve leaderboard chart

---
 app.py                     |   9 +-
 static/css/style.css       |   8 +-
 stats.py                   |  18 ++-
 templates/leaderboard.html | 260 +++++++++++++++++++++++++++++++++++--
 4 files changed, 272 insertions(+), 23 deletions(-)

diff --git a/app.py b/app.py
index 35a7d66..48ae2f9 100644
--- a/app.py
+++ b/app.py
@@ -29,6 +29,7 @@ from stats import (
     session_breakdown_series,
     session_events,
     session_label,
+    session_sort_key,
     unique_player_names,
 )
 from storage import append_event, ensure_data_file, load_events
@@ -102,7 +103,7 @@ def home() -> str:
 def leaderboard() -> str:
     events = load_events(DATA_PATH)
     all_sessions = build_session_summaries(events)
-    ordered_sessions = sorted(all_sessions, key=lambda s: s.session_date)
+    ordered_sessions = sorted(all_sessions, key=session_sort_key)
 
     session_ids = [session.session_id for session in ordered_sessions]
     selected_session_id = request.args.get("through_session", "").strip()
@@ -111,6 +112,7 @@ def leaderboard() -> str:
     if session_ids:
         if selected_session_id in session_ids:
             cutoff_index = session_ids.index(selected_session_id)
+            label = session_label(ordered_sessions[cutoff_index])
         else:
             cutoff_index = len(session_ids) - 1
             selected_session = ordered_sessions[cutoff_index]
@@ -137,6 +139,11 @@ def leaderboard() -> str:
         available_sessions=all_sessions,
         selected_session_id=selected_session_id,
         selected_session_label=(label if selected_session_id else "Latest session"),
+        selected_session_date=(
+            ordered_sessions[cutoff_index].session_date
+            if selected_session_id and session_ids
+            else ""
+        ),
         session_label=session_label,
     )
 
diff --git a/static/css/style.css b/static/css/style.css
index f77f9b9..1655265 100644
--- a/static/css/style.css
+++ b/static/css/style.css
@@ -318,6 +318,10 @@ h2 {
     grid-template-columns: minmax(0, 1.65fr) minmax(320px, 0.95fr);
 }
 
+.leaderboard-layout {
+    grid-template-columns: minmax(0, 2.3fr) minmax(280px, 0.7fr);
+}
+
 .three-col {
     grid-template-columns: repeat(3, minmax(0, 1fr));
 }
@@ -415,7 +419,7 @@ h2 {
 }
 
 .chart-panel-large {
-    min-height: 540px;
+    min-height: 600px;
 }
 
 .chart-frame,
@@ -425,7 +429,7 @@ h2 {
 }
 
 .chart-panel-large .chart-frame {
-    min-height: 450px;
+    min-height: 510px;
 }
 
 .chart-frame-interactive {
diff --git a/stats.py b/stats.py
index 7d8d75a..59fe04e 100644
--- a/stats.py
+++ b/stats.py
@@ -212,20 +212,21 @@ def cents_to_dollars(cents: int) -> str:
     return f"${value:,.2f}"
 
 
-def session_sort_key(session: SessionSummary) -> tuple[str, int, str]:
+def session_sort_key(session: SessionSummary) -> tuple[str, int, str, str]:
     session_id = session.session_id.strip()
+    session_date = session.session_date.strip()
 
-    if session_id == session.session_date:
-        return (session.session_date, 1, session_id)
+    if session_id == session_date:
+        return (session_date, 1, session.opened_at, session_id)
 
-    suffix = session_id.replace(f"{session.session_date}-", "")
+    suffix = session_id.replace(f"{session_date}-", "")
     if suffix.isdigit():
-        return (session.session_date, int(suffix), session_id)
+        return (session_date, int(suffix), session.opened_at, session_id)
 
     if suffix.lower().startswith("s") and suffix[1:].isdigit():
-        return (session.session_date, int(suffix[1:]), session_id)
+        return (session_date, int(suffix[1:]), session.opened_at, session_id)
 
-    return (session.session_date, 9999, session_id)
+    return (session_date, 9999, session.opened_at, session_id)
 
 
 def session_chart_label(session: SessionSummary) -> str:
@@ -518,6 +519,7 @@ def cumulative_profit_series(sessions: list[SessionSummary]) -> dict[str, object
     for player_name in all_players:
         running_total = 0
         seen_player = False
+        sessions_played = 0
         data: list[float | None] = []
 
         for session in ordered_sessions:
@@ -535,6 +537,7 @@ def cumulative_profit_series(sessions: list[SessionSummary]) -> dict[str, object
                 continue
 
             seen_player = True
+            sessions_played += 1
             running_total += matching_entry.net_cents
             data.append(round(running_total / 100, 2))
 
@@ -542,6 +545,7 @@ def cumulative_profit_series(sessions: list[SessionSummary]) -> dict[str, object
             {
                 "label": player_name,
                 "data": data,
+                "sessions_played": sessions_played,
             }
         )
 
diff --git a/templates/leaderboard.html b/templates/leaderboard.html
index 8228f9c..1bf7cc9 100644
--- a/templates/leaderboard.html
+++ b/templates/leaderboard.html
@@ -17,6 +17,7 @@
                 <h2>Cumulative profit over time</h2>
             </div>
             <div class="panel-actions">
+                <button class="ghost-button compact-button" type="button" id="resetLeaderboardZoom" hidden>Reset zoom</button>
                 <button class="secondary-button" type="button" id="expandLeaderboardChart">Expand chart</button>
             </div>
         </div>
@@ -137,7 +138,70 @@
     const textMuted = rootStyles.getPropertyValue('--text-muted').trim();
     const lineColor = rootStyles.getPropertyValue('--line').trim();
 
-    function buildLeaderboardChartConfig(chartData) {
+    function mainLeaderboardChartData(chartData) {
+        const repeatedPlayerDatasets = chartData.datasets.filter((dataset) => {
+            return Number(dataset.sessions_played || 0) > 1;
+        });
+        const visibleDatasets = repeatedPlayerDatasets.length > 0
+            ? repeatedPlayerDatasets
+            : chartData.datasets;
+
+        return {
+            labels: [...chartData.labels],
+            datasets: visibleDatasets.map((dataset) => ({
+                ...dataset,
+                data: [...dataset.data],
+                pointRadius: 0,
+                pointHoverRadius: 5,
+                borderWidth: 2.5,
+                tension: 0.28,
+            })),
+        };
+    }
+
+    function moneyTickLabel(value) {
+        const numericValue = Number(value);
+        const absoluteValue = Math.abs(numericValue);
+        const formattedValue = Number.isInteger(absoluteValue)
+            ? absoluteValue.toFixed(0)
+            : absoluteValue.toFixed(2);
+
+        return `${numericValue < 0 ? '-' : ''}$${formattedValue}`;
+    }
+
+    function chartYScaleOptions(chartData, compact) {
+        const values = chartData.datasets
+            .flatMap((dataset) => dataset.data)
+            .filter((value) => value !== null && value !== undefined)
+            .map(Number);
+
+        if (values.length === 0) {
+            return {};
+        }
+
+        const minValue = Math.min(...values);
+        const maxValue = Math.max(...values);
+        const maxAbsValue = Math.max(Math.abs(minValue), Math.abs(maxValue));
+        const stepSize = maxAbsValue <= 75 ? 25 : undefined;
+
+        return {
+            suggestedMin: minValue < 0 ? minValue * 1.12 : 0,
+            suggestedMax: maxValue > 0 ? maxValue * 1.12 : 0,
+            ticks: {
+                color: textMuted,
+                maxTicksLimit: compact ? 8 : 10,
+                stepSize,
+                callback(value) {
+                    return moneyTickLabel(value);
+                },
+            },
+            grid: { color: lineColor },
+        };
+    }
+
+    function buildLeaderboardChartConfig(chartData, options = {}) {
+        const compact = options.compact === true;
+
         return {
             type: 'line',
             data: chartData,
@@ -145,15 +209,26 @@
                 responsive: true,
                 maintainAspectRatio: false,
                 interaction: { mode: 'nearest', intersect: false },
+                elements: {
+                    point: {
+                        radius: compact ? 0 : 2,
+                        hoverRadius: 5,
+                    },
+                    line: {
+                        borderWidth: compact ? 2.5 : 2,
+                        tension: 0.28,
+                    },
+                },
                 plugins: {
                     legend: {
+                        display: true,
                         position: 'bottom',
                         labels: {
                             color: textMuted,
                             usePointStyle: true,
-                            boxWidth: 10,
-                            boxHeight: 10,
-                            padding: 18,
+                            boxWidth: compact ? 8 : 10,
+                            boxHeight: compact ? 8 : 10,
+                            padding: compact ? 12 : 18,
                         },
                     },
                     tooltip: {
@@ -170,27 +245,186 @@
                 },
                 scales: {
                     x: {
-                        ticks: { color: textMuted, maxRotation: 0 },
-                        grid: { color: lineColor },
-                    },
-                    y: {
                         ticks: {
                             color: textMuted,
-                            callback(value) {
-                                return `$${value}`;
-                            },
+                            maxRotation: 0,
+                            autoSkip: true,
+                            maxTicksLimit: compact ? 6 : 10,
+                        },
+                        grid: {
+                            color: lineColor,
+                            display: !compact,
                         },
-                        grid: { color: lineColor },
                     },
+                    y: chartYScaleOptions(chartData, compact),
                 },
             },
         };
     }
 
+    const zoomSelectionPlugin = {
+        id: 'zoomSelection',
+        beforeDraw(chart) {
+            const drag = chart.$zoomDrag;
+            if (!drag || !drag.active || drag.startX === drag.endX) {
+                return;
+            }
+
+            const { ctx, chartArea } = chart;
+            const left = Math.max(chartArea.left, Math.min(drag.startX, drag.endX));
+            const right = Math.min(chartArea.right, Math.max(drag.startX, drag.endX));
+
+            ctx.save();
+            ctx.fillStyle = 'rgba(229, 139, 58, 0.14)';
+            ctx.strokeStyle = 'rgba(229, 139, 58, 0.74)';
+            ctx.lineWidth = 1;
+            ctx.fillRect(left, chartArea.top, right - left, chartArea.bottom - chartArea.top);
+            ctx.strokeRect(left, chartArea.top, right - left, chartArea.bottom - chartArea.top);
+            ctx.restore();
+        },
+    };
+
+    Chart.register(zoomSelectionPlugin);
+
+    function clamp(value, min, max) {
+        return Math.max(min, Math.min(max, value));
+    }
+
+    function enableDragZoom(chart, resetButton) {
+        if (!chart || !chart.canvas || !resetButton) {
+            return;
+        }
+
+        const canvas = chart.canvas;
+        const minDragDistance = 14;
+        let draggedToZoom = false;
+
+        function pointerX(event) {
+            const rect = canvas.getBoundingClientRect();
+            return event.clientX - rect.left;
+        }
+
+        function eventInChartArea(event) {
+            const x = pointerX(event);
+            const y = event.clientY - canvas.getBoundingClientRect().top;
+            const area = chart.chartArea;
+            return x >= area.left && x <= area.right && y >= area.top && y <= area.bottom;
+        }
+
+        canvas.addEventListener('pointerdown', (event) => {
+            if (!eventInChartArea(event)) {
+                return;
+            }
+
+            canvas.setPointerCapture(event.pointerId);
+            const x = pointerX(event);
+            chart.$zoomDrag = { active: true, startX: x, endX: x };
+            chart.update('none');
+        });
+
+        canvas.addEventListener('pointermove', (event) => {
+            if (!chart.$zoomDrag?.active) {
+                return;
+            }
+
+            chart.$zoomDrag.endX = pointerX(event);
+            chart.draw();
+        });
+
+        canvas.addEventListener('pointerup', (event) => {
+            const drag = chart.$zoomDrag;
+            if (!drag?.active) {
+                return;
+            }
+
+            drag.active = false;
+            const distance = Math.abs(drag.endX - drag.startX);
+            if (distance < minDragDistance) {
+                chart.draw();
+                return;
+            }
+
+            draggedToZoom = true;
+            const area = chart.chartArea;
+            const startPixel = clamp(Math.min(drag.startX, drag.endX), area.left, area.right);
+            const endPixel = clamp(Math.max(drag.startX, drag.endX), area.left, area.right);
+            const xScale = chart.scales.x;
+            const minIndex = clamp(Math.floor(xScale.getValueForPixel(startPixel)), 0, chart.data.labels.length - 1);
+            const maxIndex = clamp(Math.ceil(xScale.getValueForPixel(endPixel)), 0, chart.data.labels.length - 1);
+
+            if (maxIndex <= minIndex) {
+                chart.draw();
+                return;
+            }
+
+            xScale.options.min = minIndex;
+            xScale.options.max = maxIndex;
+            resetButton.hidden = false;
+            chart.update();
+        });
+
+        canvas.addEventListener('click', (event) => {
+            if (!draggedToZoom) {
+                return;
+            }
+
+            event.stopPropagation();
+            event.preventDefault();
+            draggedToZoom = false;
+        });
+
+        canvas.addEventListener('pointercancel', () => {
+            if (chart.$zoomDrag) {
+                chart.$zoomDrag.active = false;
+                chart.draw();
+            }
+        });
+
+        resetButton.addEventListener('click', () => {
+            delete chart.options.scales.x.min;
+            delete chart.options.scales.x.max;
+            resetButton.hidden = true;
+            chart.update();
+        });
+    }
+
+    function suppressLegendClickExpansion(chart) {
+        if (!chart?.canvas) {
+            return;
+        }
+
+        chart.canvas.addEventListener('click', (event) => {
+            const legend = chart.legend;
+            if (!legend || !legend.legendHitBoxes) {
+                return;
+            }
+
+            const rect = chart.canvas.getBoundingClientRect();
+            const x = event.clientX - rect.left;
+            const y = event.clientY - rect.top;
+            const clickedLegendItem = legend.legendHitBoxes.some((box) => {
+                return x >= box.left
+                    && x <= box.left + box.width
+                    && y >= box.top
+                    && y <= box.top + box.height;
+            });
+
+            if (clickedLegendItem) {
+                event.stopPropagation();
+            }
+        });
+    }
+
     const leaderboardCtx = document.getElementById('leaderboardChart');
+    const resetZoomButton = document.getElementById('resetLeaderboardZoom');
     let leaderboardChart = null;
     if (leaderboardCtx && leaderboardChartData.labels.length > 0) {
-        leaderboardChart = new Chart(leaderboardCtx, buildLeaderboardChartConfig(leaderboardChartData));
+        leaderboardChart = new Chart(
+            leaderboardCtx,
+            buildLeaderboardChartConfig(mainLeaderboardChartData(leaderboardChartData), { compact: true })
+        );
+        enableDragZoom(leaderboardChart, resetZoomButton);
+        suppressLegendClickExpansion(leaderboardChart);
     }
 
     const chartModal = document.getElementById('chartModal');

From 7ec95ee24ab520acf8503cd8623c491559c2ccca Mon Sep 17 00:00:00 2001
From: SowinskiBraeden <braeden@sowinski.dev>
Date: Thu, 11 Jun 2026 13:11:04 -0700
Subject: [PATCH 29/83] count overpay as debts when fronted + add debt writeoff

---
 README.md                      |  8 +++-
 app.py                         | 78 ++++++++++++++++++++++++++++++++++
 static/css/style.css           | 12 ++++++
 stats.py                       | 33 ++++++++++++++
 storage.py                     |  3 +-
 templates/admin_dashboard.html | 46 +++++++++++++++++++-
 templates/player_detail.html   |  4 ++
 templates/session_detail.html  | 15 ++++++-
 8 files changed, 194 insertions(+), 5 deletions(-)

diff --git a/README.md b/README.md
index 88868e0..d09f1f4 100644
--- a/README.md
+++ b/README.md
@@ -12,6 +12,7 @@ The idea is pretty simple: public pages for stats and session history, plus a sm
 - admin login for recording events
 - open / closed session tracking
 - payout tracking with `paid` events
+- front debt write-offs with `front_writeoff` events
 - session and player charts
 - CSV import / export from the admin page
 - append-only `entries.csv` ledger instead of overwriting old rows
@@ -36,8 +37,12 @@ Each row is an event, not a final snapshot. Instead of editing an old row, I app
 Current event types:
 
 - `buyin`
+- `front`
+- `front_writeoff`
 - `cashout`
 - `paid`
+- `rollover_in`
+- `rollover_out`
 - `note`
 - `session_open`
 - `session_close`
@@ -47,6 +52,7 @@ A few examples:
 - another `buyin` for a rebuy
 - another `cashout` if chip counts are corrected later
 - a `paid` event when someone is actually settled up
+- a `front_writeoff` event when a front will not be collected
 - a `note` event for bookkeeping context
 - `session_open` / `session_close` to mark whether a game night is still live
 
@@ -61,7 +67,7 @@ Main file:
 Header:
 
 ```csv
-id,created_at,session_date,player_name,event_type,amount_cents,note,actor
+id,created_at,session_id,session_date,player_name,event_type,amount_cents,note,actor
 ```
 
 Amounts are stored in cents to avoid floating-point issues.
diff --git a/app.py b/app.py
index 48ae2f9..b429f71 100644
--- a/app.py
+++ b/app.py
@@ -370,6 +370,74 @@ def admin_import_csv():
     return redirect(url_for("admin_dashboard"))
 
 
+@app.post("/admin/write-off-front")
+def admin_write_off_front() -> str:
+    if not is_admin():
+        flash("Admin login required.", "error")
+        return redirect(url_for("admin_login"))
+
+    debt_key = request.form.get("debt_key", "").strip()
+    note = request.form.get("note", "").strip()
+    amount_raw = request.form.get("amount", "0").strip()
+
+    try:
+        amount_cents = int(round(float(amount_raw) * 100))
+    except ValueError:
+        flash("Amount must be a number.", "error")
+        return redirect(url_for("admin_dashboard"))
+
+    if amount_cents <= 0:
+        flash("Write-off amount must be greater than zero.", "error")
+        return redirect(url_for("admin_dashboard"))
+
+    try:
+        session_id, player_name = debt_key.split("||", 1)
+    except ValueError:
+        flash("Select a valid player debt.", "error")
+        return redirect(url_for("admin_dashboard"))
+
+    events = load_events(DATA_PATH)
+    sessions = build_session_summaries(events)
+    target = next(
+        (session for session in sessions if session.session_id == session_id),
+        None,
+    )
+
+    if target is None:
+        flash("Session not found.", "error")
+        return redirect(url_for("admin_dashboard"))
+
+    entry = next(
+        (entry for entry in target.entries if entry.player_name == player_name),
+        None,
+    )
+
+    if entry is None or entry.player_owes_cents <= 0:
+        flash("That player does not have an outstanding front debt.", "error")
+        return redirect(url_for("admin_dashboard"))
+
+    if amount_cents > entry.player_owes_cents:
+        flash(
+            f"Write-off cannot exceed {cents_to_dollars(entry.player_owes_cents)}.",
+            "error",
+        )
+        return redirect(url_for("admin_dashboard"))
+
+    append_event(
+        DATA_PATH,
+        session_id=target.session_id,
+        session_date=target.session_date,
+        player_name=entry.player_name,
+        event_type="front_writeoff",
+        amount_cents=amount_cents,
+        note=note or "Front debt written off.",
+        actor=app.config["ADMIN_USERNAME"],
+    )
+
+    flash("Front debt written off.", "success")
+    return redirect(url_for("admin_dashboard"))
+
+
 @app.post("/admin/open-session")
 def admin_open_session() -> str:
     if not is_admin():
@@ -453,6 +521,12 @@ def admin_dashboard():
     open_sessions = [session for session in sessions if session.status == "open"]
     recent_sessions = sessions[:8]
     recent_events = list(reversed(events[-20:]))
+    debt_entries = [
+        {"session": session, "entry": entry}
+        for session in sessions
+        for entry in session.entries
+        if entry.player_owes_cents > 0
+    ]
 
     admin_totals = {
         "cash_in_cents": sum(session.total_cash_in_cents for session in sessions),
@@ -463,6 +537,9 @@ def admin_dashboard():
         "players_owe_cents": sum(
             session.total_player_owes_cents for session in sessions
         ),
+        "written_off_cents": sum(
+            session.total_front_writeoff_cents for session in sessions
+        ),
         "open_balance_cents": sum(
             session.total_open_balance_cents for session in sessions
         ),
@@ -473,6 +550,7 @@ def admin_dashboard():
         open_sessions=open_sessions,
         recent_sessions=recent_sessions,
         recent_events=recent_events,
+        debt_entries=debt_entries,
         player_names=unique_player_names(events),
         session_label=session_label,
         admin_totals=admin_totals,
diff --git a/static/css/style.css b/static/css/style.css
index 1655265..3873a15 100644
--- a/static/css/style.css
+++ b/static/css/style.css
@@ -958,6 +958,12 @@ td a:hover {
     border: 1px solid rgba(251, 146, 60, 0.22);
 }
 
+.pill-front_writeoff {
+    color: #f87171;
+    background: rgba(248, 113, 113, 0.12);
+    border: 1px solid rgba(248, 113, 113, 0.22);
+}
+
 .pill-note {
     color: #cbd5e1;
     background: rgba(203, 213, 225, 0.08);
@@ -983,6 +989,12 @@ td a:hover {
     border: 1px solid rgba(239, 68, 68, 0.24);
 }
 
+.status-written_off {
+    color: #f87171;
+    background: rgba(248, 113, 113, 0.12);
+    border: 1px solid rgba(248, 113, 113, 0.24);
+}
+
 .inline-action-form {
     margin: 0;
 }
diff --git a/stats.py b/stats.py
index 59fe04e..29082a4 100644
--- a/stats.py
+++ b/stats.py
@@ -31,6 +31,7 @@ class SessionEntry:
     player_name: str
     buy_in_cents: int = 0
     front_cents: int = 0
+    front_writeoff_cents: int = 0
     cash_out_cents: int = 0
     paid_cents: int = 0
     rollover_in_cents: int = 0
@@ -67,12 +68,30 @@ class SessionEntry:
 
     @property
     def player_owes_cents(self) -> int:
+        return max(self.raw_player_owes_cents - self.front_writeoff_applied_cents, 0)
+
+    @property
+    def raw_player_owes_cents(self) -> int:
+        return self.front_shortfall_cents + self.overpaid_front_cents
+
+    @property
+    def front_shortfall_cents(self) -> int:
         return max(self.front_cents - self.cash_out_cents, 0)
 
+    @property
+    def overpaid_front_cents(self) -> int:
+        return max(self.settled_cents - self.gross_payout_cents, 0)
+
+    @property
+    def front_writeoff_applied_cents(self) -> int:
+        return min(self.front_writeoff_cents, self.raw_player_owes_cents)
+
     @property
     def payout_status(self) -> str:
         if self.player_owes_cents > 0:
             return "owes"
+        if self.front_writeoff_applied_cents > 0:
+            return "written_off"
         if self.gross_payout_cents <= 0:
             return "none"
         if self.current_due_cents <= 0:
@@ -146,6 +165,10 @@ class SessionSummary:
     def total_player_owes_cents(self) -> int:
         return sum(entry.player_owes_cents for entry in self.entries)
 
+    @property
+    def total_front_writeoff_cents(self) -> int:
+        return sum(entry.front_writeoff_applied_cents for entry in self.entries)
+
     @property
     def total_cash_in_cents(self) -> int:
         return sum(entry.buy_in_cents for entry in self.entries)
@@ -173,6 +196,8 @@ class PlayerStats:
     biggest_loss_cents: int
     total_buy_in_cents: int
     total_front_cents: int
+    total_front_writeoff_cents: int
+    current_player_owes_cents: int
     total_rollover_in_cents: int
     total_invested_cents: int
     total_cash_out_cents: int
@@ -322,6 +347,8 @@ def build_session_summaries(events: list[EventRow]) -> list[SessionSummary]:
             entry.buy_in_cents += event["amount_cents"]
         elif event_type == "front":
             entry.front_cents += event["amount_cents"]
+        elif event_type == "front_writeoff":
+            entry.front_writeoff_cents += event["amount_cents"]
         elif event_type == "rollover_in":
             entry.rollover_in_cents += event["amount_cents"]
         elif event_type == "cashout":
@@ -454,6 +481,10 @@ def build_leaderboard(sessions: list[SessionSummary]) -> list[PlayerStats]:
 
         total_buy_in = sum(entry.buy_in_cents for entry in entries)
         total_front = sum(entry.front_cents for entry in entries)
+        total_front_writeoff = sum(
+            entry.front_writeoff_applied_cents for entry in entries
+        )
+        current_player_owes = sum(entry.player_owes_cents for entry in entries)
         total_rollover_in = sum(entry.rollover_in_cents for entry in entries)
         total_invested = sum(entry.invested_cents for entry in entries)
         total_cash_out = sum(entry.cash_out_cents for entry in entries)
@@ -476,6 +507,8 @@ def build_leaderboard(sessions: list[SessionSummary]) -> list[PlayerStats]:
                 biggest_loss_cents=biggest_loss,
                 total_buy_in_cents=total_buy_in,
                 total_front_cents=total_front,
+                total_front_writeoff_cents=total_front_writeoff,
+                current_player_owes_cents=current_player_owes,
                 total_rollover_in_cents=total_rollover_in,
                 total_invested_cents=total_invested,
                 total_cash_out_cents=total_cash_out,
diff --git a/storage.py b/storage.py
index f9c6662..e250670 100644
--- a/storage.py
+++ b/storage.py
@@ -35,6 +35,7 @@ class EventRow(TypedDict):
 VALID_EVENT_TYPES = {
     "buyin",
     "front",
+    "front_writeoff",
     "cashout",
     "paid",
     "rollover_in",
@@ -98,7 +99,7 @@ def append_event(
     if normalized_type not in VALID_EVENT_TYPES:
         raise ValueError(f"Unsupported event type: {event_type}")
 
-    if normalized_type == {"note", "session_open", "session_close"}:
+    if normalized_type in {"note", "session_open", "session_close"}:
         amount_cents = 0
 
     event = EventRow(
diff --git a/templates/admin_dashboard.html b/templates/admin_dashboard.html
index 41d9b29..fca5e65 100644
--- a/templates/admin_dashboard.html
+++ b/templates/admin_dashboard.html
@@ -112,6 +112,39 @@
                 </form>
             </div>
         </section>
+
+        <form class="panel form-card" method="post" action="{{ url_for('admin_write_off_front') }}">
+            <p class="eyebrow">Front debt</p>
+            <h2>Write off debt</h2>
+
+            <label>
+                <span>Outstanding debt</span>
+                <select name="debt_key" required>
+                    <option value="">Select debt</option>
+                    {% for item in debt_entries %}
+                        {% set session = item.session %}
+                        {% set entry = item.entry %}
+                        <option value="{{ session.session_id }}||{{ entry.player_name }}">
+                            {{ entry.player_name }} · {{ session_label(session) }} · owes {{ entry.player_owes_cents | money }}
+                        </option>
+                    {% endfor %}
+                </select>
+            </label>
+
+            <label>
+                <span>Amount to write off</span>
+                <input type="number" step="0.01" name="amount" placeholder="5.00" required>
+            </label>
+
+            <label>
+                <span>Note</span>
+                <textarea name="note" rows="3" placeholder="Won't be collected."></textarea>
+            </label>
+
+            <div class="button-row">
+                <button class="secondary-button" type="submit">Write off front</button>
+            </div>
+        </form>
     </section>
 </section>
 
@@ -140,6 +173,13 @@
         </strong>
     </article>
 
+    <article class="panel stat-card">
+        <span>Written off</span>
+        <strong class="{{ 'negative' if admin_totals.written_off_cents > 0 else '' }}">
+            {{ admin_totals.written_off_cents | money }}
+        </strong>
+    </article>
+
     <article class="panel stat-card">
         <span>Open balance</span>
         <strong class="{% if admin_totals.open_balance_cents > 0 %}negative{% elif admin_totals.open_balance_cents < 0 %}positive{% endif %}">
@@ -165,6 +205,7 @@
                     <th>Paid out</th>
                     <th>Still owed</th>
                     <th>Players owe</th>
+                    <th>Written off</th>
                     <th>Open balance</th>
                     <th>Status</th>
                     <th>Action</th>
@@ -187,6 +228,9 @@
                     <td class="{{ 'negative' if session.total_player_owes_cents > 0 else '' }}">
                         {{ session.total_player_owes_cents | money }}
                     </td>
+                    <td class="{{ 'negative' if session.total_front_writeoff_cents > 0 else '' }}">
+                        {{ session.total_front_writeoff_cents | money }}
+                    </td>
                     <td class="{% if session.total_open_balance_cents > 0 %}negative{% elif session.total_open_balance_cents < 0 %}positive{% endif %}">
                         {{ session.total_open_balance_cents | money }}
                     </td>
@@ -208,7 +252,7 @@
                 </tr>
                 {% else %}
                 <tr>
-                    <td colspan="4">No sessions yet.</td>
+                    <td colspan="10">No sessions yet.</td>
                 </tr>
                 {% endfor %}
             </tbody>
diff --git a/templates/player_detail.html b/templates/player_detail.html
index 9f23b3e..329bee5 100644
--- a/templates/player_detail.html
+++ b/templates/player_detail.html
@@ -16,6 +16,8 @@
     <article class="panel stat-card"><span>Total invested</span><strong>{{ player.total_invested_cents | money }}</strong></article>
     <article class="panel stat-card"><span>Paid Buy-in</span><strong>{{ player.total_buy_in_cents | money }}</strong></article>
     <article class="panel stat-card"><span>Fronted</span><strong>{{ player.total_front_cents | money }}</strong></article>
+    <article class="panel stat-card"><span>Current debt</span><strong class="{{ 'negative' if player.current_player_owes_cents > 0 else '' }}">{{ player.current_player_owes_cents | money }}</strong></article>
+    <article class="panel stat-card"><span>Written off</span><strong class="{{ 'negative' if player.total_front_writeoff_cents > 0 else '' }}">{{ player.total_front_writeoff_cents | money }}</strong></article>
     <!--<article class="panel stat-card"><span>Rolled in</span><strong>{{ player.total_rollover_in_cents | money }}</strong></article>-->
     <article class="panel stat-card"><span>Cash-outs</span><strong>{{ player.total_cash_out_cents | money }}</strong></article>
     <article class="panel stat-card"><span>Sessions</span><strong>{{ player.sessions_played }}</strong></article>
@@ -87,6 +89,8 @@
             <tbody>
                 <tr><th>Paid Buy-ins</th><td>{{ player.total_buy_in_cents | money }}</td></tr>
                 <tr><th>Fronted</th><td>{{ player.total_front_cents | money }}</td></tr>
+                <tr><th>Current Debt</th><td>{{ player.current_player_owes_cents | money }}</td></tr>
+                <tr><th>Written Off</th><td>{{ player.total_front_writeoff_cents | money }}</td></tr>
                 <tr><th>Rolled In</th><td>{{ player.total_rollover_in_cents | money }}</td></tr>
                 <tr><th>Total Invested</th><td>{{ player.total_invested_cents | money }}</td></tr>
                 <tr><th>Rolled Out</th><td>{{ player.total_rollover_out_cents | money }}</td></tr>
diff --git a/templates/session_detail.html b/templates/session_detail.html
index c23d52b..39267f8 100644
--- a/templates/session_detail.html
+++ b/templates/session_detail.html
@@ -54,6 +54,13 @@
             {{ session.total_player_owes_cents | money }}
         </strong>
     </article>
+
+    <article class="panel stat-card">
+        <span>Written off</span>
+        <strong class="{{ 'negative' if session.total_front_writeoff_cents > 0 else '' }}">
+            {{ session.total_front_writeoff_cents | money }}
+        </strong>
+    </article>
 </section>
 
 
@@ -87,6 +94,7 @@
                     <th class="detail-col">Gross due</th>
                     <th class="detail-col">Paid</th>
                     <th class="detail-col">Rolled out</th>
+                    <th class="detail-col">Written off</th>
                     <th>Still owed</th>
                     <th>Status</th>
                     <th>Notes</th>
@@ -111,7 +119,7 @@
                     </td>
 
                     <td class="detail-col">
-                        {% if entry.player_owes_cents > 0 %}
+                        {% if entry.raw_player_owes_cents > 0 %}
                             —
                         {% else %}
                             {{ entry.gross_payout_cents | money }}
@@ -120,10 +128,13 @@
 
                     <td class="detail-col">{{ entry.paid_cents | money }}</td>
                     <td class="detail-col">{{ entry.rollover_out_cents | money }}</td>
+                    <td class="detail-col">{{ entry.front_writeoff_applied_cents | money }}</td>
 
-                    <td class="{% if entry.player_owes_cents > 0 %}negative{% elif entry.current_due_cents > 0 %}negative{% else %}positive{% endif %}">
+                    <td class="{% if entry.player_owes_cents > 0 %}negative{% elif entry.front_writeoff_applied_cents > 0 %}negative{% elif entry.current_due_cents > 0 %}negative{% else %}positive{% endif %}">
                         {% if entry.player_owes_cents > 0 %}
                             Owes {{ entry.player_owes_cents | money }}
+                        {% elif entry.front_writeoff_applied_cents > 0 %}
+                            Written off {{ entry.front_writeoff_applied_cents | money }}
                         {% else %}
                             {{ entry.current_due_cents | money }}
                         {% endif %}

From 7e7b3a701128067415a66dd0da2b629bf7976bad Mon Sep 17 00:00:00 2001
From: SowinskiBraeden <braeden@sowinski.dev>
Date: Thu, 11 Jun 2026 13:27:00 -0700
Subject: [PATCH 30/83] fix layout + collect/writeoff debts

---
 README.md                      |  4 +-
 app.py                         | 71 ++++++++++++++++++++++++++
 static/css/style.css           | 91 ++++++++++++++++++++++++++++++++--
 stats.py                       | 29 ++++++++++-
 storage.py                     |  1 +
 templates/admin_dashboard.html | 64 ++++++++++++++++++++++--
 templates/player_detail.html   | 32 ++++--------
 templates/session_detail.html  |  6 ++-
 8 files changed, 263 insertions(+), 35 deletions(-)

diff --git a/README.md b/README.md
index d09f1f4..f2638ed 100644
--- a/README.md
+++ b/README.md
@@ -12,7 +12,7 @@ The idea is pretty simple: public pages for stats and session history, plus a sm
 - admin login for recording events
 - open / closed session tracking
 - payout tracking with `paid` events
-- front debt write-offs with `front_writeoff` events
+- front debt collections and write-offs with `front_collected` / `front_writeoff` events
 - session and player charts
 - CSV import / export from the admin page
 - append-only `entries.csv` ledger instead of overwriting old rows
@@ -38,6 +38,7 @@ Current event types:
 
 - `buyin`
 - `front`
+- `front_collected`
 - `front_writeoff`
 - `cashout`
 - `paid`
@@ -52,6 +53,7 @@ A few examples:
 - another `buyin` for a rebuy
 - another `cashout` if chip counts are corrected later
 - a `paid` event when someone is actually settled up
+- a `front_collected` event when a front is repaid outside poker
 - a `front_writeoff` event when a front will not be collected
 - a `note` event for bookkeeping context
 - `session_open` / `session_close` to mark whether a game night is still live
diff --git a/app.py b/app.py
index b429f71..f77d83d 100644
--- a/app.py
+++ b/app.py
@@ -438,6 +438,74 @@ def admin_write_off_front() -> str:
     return redirect(url_for("admin_dashboard"))
 
 
+@app.post("/admin/collect-front")
+def admin_collect_front() -> str:
+    if not is_admin():
+        flash("Admin login required.", "error")
+        return redirect(url_for("admin_login"))
+
+    debt_key = request.form.get("debt_key", "").strip()
+    note = request.form.get("note", "").strip()
+    amount_raw = request.form.get("amount", "0").strip()
+
+    try:
+        amount_cents = int(round(float(amount_raw) * 100))
+    except ValueError:
+        flash("Amount must be a number.", "error")
+        return redirect(url_for("admin_dashboard"))
+
+    if amount_cents <= 0:
+        flash("Collected amount must be greater than zero.", "error")
+        return redirect(url_for("admin_dashboard"))
+
+    try:
+        session_id, player_name = debt_key.split("||", 1)
+    except ValueError:
+        flash("Select a valid player debt.", "error")
+        return redirect(url_for("admin_dashboard"))
+
+    events = load_events(DATA_PATH)
+    sessions = build_session_summaries(events)
+    target = next(
+        (session for session in sessions if session.session_id == session_id),
+        None,
+    )
+
+    if target is None:
+        flash("Session not found.", "error")
+        return redirect(url_for("admin_dashboard"))
+
+    entry = next(
+        (entry for entry in target.entries if entry.player_name == player_name),
+        None,
+    )
+
+    if entry is None or entry.player_owes_cents <= 0:
+        flash("That player does not have an outstanding front debt.", "error")
+        return redirect(url_for("admin_dashboard"))
+
+    if amount_cents > entry.player_owes_cents:
+        flash(
+            f"Collection cannot exceed {cents_to_dollars(entry.player_owes_cents)}.",
+            "error",
+        )
+        return redirect(url_for("admin_dashboard"))
+
+    append_event(
+        DATA_PATH,
+        session_id=target.session_id,
+        session_date=target.session_date,
+        player_name=entry.player_name,
+        event_type="front_collected",
+        amount_cents=amount_cents,
+        note=note or "Front debt collected.",
+        actor=app.config["ADMIN_USERNAME"],
+    )
+
+    flash("Front debt collected.", "success")
+    return redirect(url_for("admin_dashboard"))
+
+
 @app.post("/admin/open-session")
 def admin_open_session() -> str:
     if not is_admin():
@@ -537,6 +605,9 @@ def admin_dashboard():
         "players_owe_cents": sum(
             session.total_player_owes_cents for session in sessions
         ),
+        "collected_cents": sum(
+            session.total_front_collected_cents for session in sessions
+        ),
         "written_off_cents": sum(
             session.total_front_writeoff_cents for session in sessions
         ),
diff --git a/static/css/style.css b/static/css/style.css
index 3873a15..3890f2e 100644
--- a/static/css/style.css
+++ b/static/css/style.css
@@ -294,6 +294,14 @@ h2 {
     line-height: 1.15;
 }
 
+h3 {
+    position: relative;
+    z-index: 1;
+    margin: 0;
+    font-size: 1.05rem;
+    line-height: 1.2;
+}
+
 .muted-text {
     margin: 0;
     color: var(--text-muted);
@@ -383,6 +391,10 @@ h2 {
     min-height: 112px;
 }
 
+.compact-form textarea {
+    min-height: 92px;
+}
+
 .form-card input:focus,
 .form-card select:focus,
 .form-card textarea:focus {
@@ -394,6 +406,14 @@ h2 {
     align-self: start;
 }
 
+.admin-layout {
+    grid-template-columns: minmax(420px, 1.15fr) minmax(360px, 0.85fr);
+}
+
+.admin-layout > .grid {
+    gap: 18px;
+}
+
 .panel-header {
     position: relative;
     z-index: 1;
@@ -763,11 +783,14 @@ td a:hover {
 }
 
 .leaderboard-layout,
-.session-layout,
-.admin-layout {
+.session-layout {
     align-items: stretch;
 }
 
+.admin-layout {
+    align-items: start;
+}
+
 .results-panel-full {
     display: block;
 }
@@ -958,6 +981,12 @@ td a:hover {
     border: 1px solid rgba(251, 146, 60, 0.22);
 }
 
+.pill-front_collected {
+    color: #22c55e;
+    background: rgba(34, 197, 94, 0.12);
+    border: 1px solid rgba(34, 197, 94, 0.22);
+}
+
 .pill-front_writeoff {
     color: #f87171;
     background: rgba(248, 113, 113, 0.12);
@@ -995,6 +1024,12 @@ td a:hover {
     border: 1px solid rgba(248, 113, 113, 0.24);
 }
 
+.status-collected {
+    color: #22c55e;
+    background: rgba(34, 197, 94, 0.12);
+    border: 1px solid rgba(34, 197, 94, 0.24);
+}
+
 .inline-action-form {
     margin: 0;
 }
@@ -1038,6 +1073,39 @@ td a:hover {
     grid-template-columns: repeat(auto-fit, minmax(260px, 1fr));
 }
 
+.debt-panel {
+    display: grid;
+    gap: 18px;
+}
+
+.debt-summary {
+    display: flex;
+    align-items: center;
+    justify-content: flex-end;
+    gap: 10px;
+    flex-wrap: wrap;
+}
+
+.debt-summary span {
+    display: inline-flex;
+    min-height: 34px;
+    align-items: center;
+    border: 1px solid var(--line);
+    border-radius: 999px;
+    padding: 0 12px;
+    color: var(--text-muted);
+    font-size: 0.86rem;
+    font-weight: 700;
+}
+
+.debt-action-grid {
+    position: relative;
+    z-index: 1;
+    display: grid;
+    gap: 18px;
+    grid-template-columns: repeat(2, minmax(0, 1fr));
+}
+
 .import-form input[type="file"] {
     width: 100%;
     margin-top: 0.5rem;
@@ -1088,20 +1156,34 @@ td a:hover {
 .admin-cash-grid {
     display: grid;
     gap: 1rem;
-    grid-template-columns: repeat(5, minmax(0, 1fr));
+    grid-template-columns: repeat(6, minmax(150px, 1fr));
     margin-bottom: 1rem;
 }
 
-@media (max-width: 1200px) {
+@media (max-width: 1180px) {
     .admin-cash-grid {
         grid-template-columns: repeat(3, minmax(0, 1fr));
     }
 }
 
+@media (max-width: 1180px) {
+    .profile-summary-grid {
+        grid-template-columns: repeat(2, minmax(0, 1fr));
+    }
+}
+
 @media (max-width: 760px) {
     .admin-cash-grid {
         grid-template-columns: repeat(2, minmax(0, 1fr));
     }
+
+    .debt-action-grid {
+        grid-template-columns: 1fr;
+    }
+
+    .debt-summary {
+        justify-content: flex-start;
+    }
 }
 
 @media (max-width: 520px) {
@@ -1135,6 +1217,7 @@ td a:hover {
 
     .two-col,
     .three-col,
+    .four-col,
     .leaderboard-layout,
     .session-layout,
     .admin-layout {
diff --git a/stats.py b/stats.py
index 29082a4..8ae8c63 100644
--- a/stats.py
+++ b/stats.py
@@ -31,6 +31,7 @@ class SessionEntry:
     player_name: str
     buy_in_cents: int = 0
     front_cents: int = 0
+    front_collected_cents: int = 0
     front_writeoff_cents: int = 0
     cash_out_cents: int = 0
     paid_cents: int = 0
@@ -68,7 +69,7 @@ class SessionEntry:
 
     @property
     def player_owes_cents(self) -> int:
-        return max(self.raw_player_owes_cents - self.front_writeoff_applied_cents, 0)
+        return max(self.raw_player_owes_cents - self.front_resolved_cents, 0)
 
     @property
     def raw_player_owes_cents(self) -> int:
@@ -84,7 +85,18 @@ class SessionEntry:
 
     @property
     def front_writeoff_applied_cents(self) -> int:
-        return min(self.front_writeoff_cents, self.raw_player_owes_cents)
+        return min(
+            self.front_writeoff_cents,
+            max(self.raw_player_owes_cents - self.front_collected_applied_cents, 0),
+        )
+
+    @property
+    def front_collected_applied_cents(self) -> int:
+        return min(self.front_collected_cents, self.raw_player_owes_cents)
+
+    @property
+    def front_resolved_cents(self) -> int:
+        return self.front_collected_applied_cents + self.front_writeoff_applied_cents
 
     @property
     def payout_status(self) -> str:
@@ -92,6 +104,8 @@ class SessionEntry:
             return "owes"
         if self.front_writeoff_applied_cents > 0:
             return "written_off"
+        if self.front_collected_applied_cents > 0:
+            return "collected"
         if self.gross_payout_cents <= 0:
             return "none"
         if self.current_due_cents <= 0:
@@ -169,6 +183,10 @@ class SessionSummary:
     def total_front_writeoff_cents(self) -> int:
         return sum(entry.front_writeoff_applied_cents for entry in self.entries)
 
+    @property
+    def total_front_collected_cents(self) -> int:
+        return sum(entry.front_collected_applied_cents for entry in self.entries)
+
     @property
     def total_cash_in_cents(self) -> int:
         return sum(entry.buy_in_cents for entry in self.entries)
@@ -196,6 +214,7 @@ class PlayerStats:
     biggest_loss_cents: int
     total_buy_in_cents: int
     total_front_cents: int
+    total_front_collected_cents: int
     total_front_writeoff_cents: int
     current_player_owes_cents: int
     total_rollover_in_cents: int
@@ -347,6 +366,8 @@ def build_session_summaries(events: list[EventRow]) -> list[SessionSummary]:
             entry.buy_in_cents += event["amount_cents"]
         elif event_type == "front":
             entry.front_cents += event["amount_cents"]
+        elif event_type == "front_collected":
+            entry.front_collected_cents += event["amount_cents"]
         elif event_type == "front_writeoff":
             entry.front_writeoff_cents += event["amount_cents"]
         elif event_type == "rollover_in":
@@ -481,6 +502,9 @@ def build_leaderboard(sessions: list[SessionSummary]) -> list[PlayerStats]:
 
         total_buy_in = sum(entry.buy_in_cents for entry in entries)
         total_front = sum(entry.front_cents for entry in entries)
+        total_front_collected = sum(
+            entry.front_collected_applied_cents for entry in entries
+        )
         total_front_writeoff = sum(
             entry.front_writeoff_applied_cents for entry in entries
         )
@@ -507,6 +531,7 @@ def build_leaderboard(sessions: list[SessionSummary]) -> list[PlayerStats]:
                 biggest_loss_cents=biggest_loss,
                 total_buy_in_cents=total_buy_in,
                 total_front_cents=total_front,
+                total_front_collected_cents=total_front_collected,
                 total_front_writeoff_cents=total_front_writeoff,
                 current_player_owes_cents=current_player_owes,
                 total_rollover_in_cents=total_rollover_in,
diff --git a/storage.py b/storage.py
index e250670..e891c27 100644
--- a/storage.py
+++ b/storage.py
@@ -35,6 +35,7 @@ class EventRow(TypedDict):
 VALID_EVENT_TYPES = {
     "buyin",
     "front",
+    "front_collected",
     "front_writeoff",
     "cashout",
     "paid",
diff --git a/templates/admin_dashboard.html b/templates/admin_dashboard.html
index fca5e65..f4decf8 100644
--- a/templates/admin_dashboard.html
+++ b/templates/admin_dashboard.html
@@ -113,9 +113,58 @@
             </div>
         </section>
 
-        <form class="panel form-card" method="post" action="{{ url_for('admin_write_off_front') }}">
+    </section>
+</section>
+
+<section class="panel debt-panel">
+    <div class="panel-header">
+        <div>
             <p class="eyebrow">Front debt</p>
-            <h2>Write off debt</h2>
+            <h2>Debt resolution</h2>
+        </div>
+        <div class="debt-summary">
+            <span>Open {{ admin_totals.players_owe_cents | money }}</span>
+            <span>Collected {{ admin_totals.collected_cents | money }}</span>
+            <span>Written off {{ admin_totals.written_off_cents | money }}</span>
+        </div>
+    </div>
+
+    {% if debt_entries %}
+    <div class="debt-action-grid">
+        <form class="form-card compact-form" method="post" action="{{ url_for('admin_collect_front') }}">
+            <h3>Collect debt</h3>
+
+            <label>
+                <span>Outstanding debt</span>
+                <select name="debt_key" required>
+                    <option value="">Select debt</option>
+                    {% for item in debt_entries %}
+                        {% set session = item.session %}
+                        {% set entry = item.entry %}
+                        <option value="{{ session.session_id }}||{{ entry.player_name }}">
+                            {{ entry.player_name }} · {{ session_label(session) }} · owes {{ entry.player_owes_cents | money }}
+                        </option>
+                    {% endfor %}
+                </select>
+            </label>
+
+            <label>
+                <span>Amount collected</span>
+                <input type="number" step="0.01" name="amount" placeholder="5.00" required>
+            </label>
+
+            <label>
+                <span>Note</span>
+                <textarea name="note" rows="3" placeholder="E-transfer received, cash collected, etc."></textarea>
+            </label>
+
+            <div class="button-row">
+                <button class="primary-button" type="submit">Mark collected</button>
+            </div>
+        </form>
+
+        <form class="form-card compact-form" method="post" action="{{ url_for('admin_write_off_front') }}">
+            <h3>Write off debt</h3>
 
             <label>
                 <span>Outstanding debt</span>
@@ -145,7 +194,10 @@
                 <button class="secondary-button" type="submit">Write off front</button>
             </div>
         </form>
-    </section>
+    </div>
+    {% else %}
+    <p class="muted-text">No outstanding front debt.</p>
+    {% endif %}
 </section>
 
 <section class="grid admin-cash-grid">
@@ -205,6 +257,7 @@
                     <th>Paid out</th>
                     <th>Still owed</th>
                     <th>Players owe</th>
+                    <th>Collected</th>
                     <th>Written off</th>
                     <th>Open balance</th>
                     <th>Status</th>
@@ -228,6 +281,9 @@
                     <td class="{{ 'negative' if session.total_player_owes_cents > 0 else '' }}">
                         {{ session.total_player_owes_cents | money }}
                     </td>
+                    <td class="{{ 'positive' if session.total_front_collected_cents > 0 else '' }}">
+                        {{ session.total_front_collected_cents | money }}
+                    </td>
                     <td class="{{ 'negative' if session.total_front_writeoff_cents > 0 else '' }}">
                         {{ session.total_front_writeoff_cents | money }}
                     </td>
@@ -252,7 +308,7 @@
                 </tr>
                 {% else %}
                 <tr>
-                    <td colspan="10">No sessions yet.</td>
+                    <td colspan="11">No sessions yet.</td>
                 </tr>
                 {% endfor %}
             </tbody>
diff --git a/templates/player_detail.html b/templates/player_detail.html
index 329bee5..2646bce 100644
--- a/templates/player_detail.html
+++ b/templates/player_detail.html
@@ -9,33 +9,13 @@
     </div>
 </section>
 
-<section class="grid three-col">
+<section class="grid three-col profile-summary-grid">
     <article class="panel stat-card"><span>Total Net</span><strong class="{{ 'positive' if player.total_net_cents > 0 else 'negative' if player.total_net_cents < 0 else 'neutral' }}">{{ player.total_net_cents | money }}</strong></article>
-    <article class="panel stat-card"><span>Win %</span><strong>{{ "%.1f"|format(player.win_pct) }}%</strong></article>
-    <article class="panel stat-card"><span>ROI</span><strong>{{ "%.1f"|format(player.roi_pct) }}%</strong></article>
     <article class="panel stat-card"><span>Total invested</span><strong>{{ player.total_invested_cents | money }}</strong></article>
-    <article class="panel stat-card"><span>Paid Buy-in</span><strong>{{ player.total_buy_in_cents | money }}</strong></article>
-    <article class="panel stat-card"><span>Fronted</span><strong>{{ player.total_front_cents | money }}</strong></article>
-    <article class="panel stat-card"><span>Current debt</span><strong class="{{ 'negative' if player.current_player_owes_cents > 0 else '' }}">{{ player.current_player_owes_cents | money }}</strong></article>
-    <article class="panel stat-card"><span>Written off</span><strong class="{{ 'negative' if player.total_front_writeoff_cents > 0 else '' }}">{{ player.total_front_writeoff_cents | money }}</strong></article>
-    <!--<article class="panel stat-card"><span>Rolled in</span><strong>{{ player.total_rollover_in_cents | money }}</strong></article>-->
     <article class="panel stat-card"><span>Cash-outs</span><strong>{{ player.total_cash_out_cents | money }}</strong></article>
+    <article class="panel stat-card"><span>Current debt</span><strong class="{{ 'negative' if player.current_player_owes_cents > 0 else '' }}">{{ player.current_player_owes_cents | money }}</strong></article>
+    <article class="panel stat-card"><span>Win %</span><strong>{{ "%.1f"|format(player.win_pct) }}%</strong></article>
     <article class="panel stat-card"><span>Sessions</span><strong>{{ player.sessions_played }}</strong></article>
-    <article class="panel stat-card">
-        <span>Current Streak</span>
-        <strong>
-            {% if player.current_win_streak > 0 %}
-                W{{ player.current_win_streak }}
-            {% elif player.current_loss_streak > 0 %}
-                L{{ player.current_loss_streak }}
-            {% else %}
-                -
-            {% endif %}
-        </strong>
-    </article>
-
-    <!--<article class="panel stat-card"><span>Longest win streak</span><strong>{{ player.longest_win_streak }}</strong></article>
-    <article class="panel stat-card"><span>Longest loss streak</span><strong>{{ player.longest_loss_streak }}</strong></article>-->
 </section>
 
 <section class="grid one-col">
@@ -87,12 +67,18 @@
     <div class="table-wrap">
         <table>
             <tbody>
+                <tr><th>Total Net</th><td>{{ player.total_net_cents | money }}</td></tr>
+                <tr><th>Win %</th><td>{{ "%.1f"|format(player.win_pct) }}%</td></tr>
+                <tr><th>ROI</th><td>{{ "%.1f"|format(player.roi_pct) }}%</td></tr>
+                <tr><th>Sessions</th><td>{{ player.sessions_played }}</td></tr>
                 <tr><th>Paid Buy-ins</th><td>{{ player.total_buy_in_cents | money }}</td></tr>
                 <tr><th>Fronted</th><td>{{ player.total_front_cents | money }}</td></tr>
+                <tr><th>Debt Collected</th><td>{{ player.total_front_collected_cents | money }}</td></tr>
                 <tr><th>Current Debt</th><td>{{ player.current_player_owes_cents | money }}</td></tr>
                 <tr><th>Written Off</th><td>{{ player.total_front_writeoff_cents | money }}</td></tr>
                 <tr><th>Rolled In</th><td>{{ player.total_rollover_in_cents | money }}</td></tr>
                 <tr><th>Total Invested</th><td>{{ player.total_invested_cents | money }}</td></tr>
+                <tr><th>Cash-outs</th><td>{{ player.total_cash_out_cents | money }}</td></tr>
                 <tr><th>Rolled Out</th><td>{{ player.total_rollover_out_cents | money }}</td></tr>
                 <tr><th>Winning Sessions</th><td>{{ player.winning_sessions }}</td></tr>
                 <tr><th>Losing Sessions</th><td>{{ player.losing_sessions }}</td></tr>
diff --git a/templates/session_detail.html b/templates/session_detail.html
index 39267f8..900b493 100644
--- a/templates/session_detail.html
+++ b/templates/session_detail.html
@@ -94,6 +94,7 @@
                     <th class="detail-col">Gross due</th>
                     <th class="detail-col">Paid</th>
                     <th class="detail-col">Rolled out</th>
+                    <th class="detail-col">Collected</th>
                     <th class="detail-col">Written off</th>
                     <th>Still owed</th>
                     <th>Status</th>
@@ -128,13 +129,16 @@
 
                     <td class="detail-col">{{ entry.paid_cents | money }}</td>
                     <td class="detail-col">{{ entry.rollover_out_cents | money }}</td>
+                    <td class="detail-col">{{ entry.front_collected_applied_cents | money }}</td>
                     <td class="detail-col">{{ entry.front_writeoff_applied_cents | money }}</td>
 
-                    <td class="{% if entry.player_owes_cents > 0 %}negative{% elif entry.front_writeoff_applied_cents > 0 %}negative{% elif entry.current_due_cents > 0 %}negative{% else %}positive{% endif %}">
+                    <td class="{% if entry.player_owes_cents > 0 %}negative{% elif entry.front_writeoff_applied_cents > 0 %}negative{% elif entry.front_collected_applied_cents > 0 %}positive{% elif entry.current_due_cents > 0 %}negative{% else %}positive{% endif %}">
                         {% if entry.player_owes_cents > 0 %}
                             Owes {{ entry.player_owes_cents | money }}
                         {% elif entry.front_writeoff_applied_cents > 0 %}
                             Written off {{ entry.front_writeoff_applied_cents | money }}
+                        {% elif entry.front_collected_applied_cents > 0 %}
+                            Collected {{ entry.front_collected_applied_cents | money }}
                         {% else %}
                             {{ entry.current_due_cents | money }}
                         {% endif %}

From 77198e5b472a143b76442c9022fc130a84aa6f5f Mon Sep 17 00:00:00 2001
From: SowinskiBraeden <braeden@sowinski.dev>
Date: Mon, 22 Jun 2026 00:25:57 -0700
Subject: [PATCH 31/83] overhaul

---
 README.md                                     |   10 +
 app.py                                        |  173 +-
 memory/MEMORY.md                              |    3 +
 memory/project_overview.md                    |   26 +
 static/css/style.css                          | 2396 +++++++++--------
 static/css/tokens.css                         |   84 +
 stats.py                                      |  227 +-
 templates/admin_dashboard.html                |  556 ++--
 templates/admin_login.html                    |   23 +-
 templates/base.html                           |   53 +-
 templates/leaderboard.html                    |  870 +++---
 templates/player_detail.html                  |  477 ++--
 templates/session_detail.html                 |  497 ++--
 templates/sessions.html                       |   62 +-
 tests/__init__.py                             |    1 +
 tests/__pycache__/__init__.cpython-313.pyc    |  Bin 0 -> 141 bytes
 .../test_accounting.cpython-313.pyc           |  Bin 0 -> 8233 bytes
 .../test_accounting.cpython-314.pyc           |  Bin 0 -> 8549 bytes
 tests/test_accounting.py                      |  118 +
 19 files changed, 2920 insertions(+), 2656 deletions(-)
 create mode 100644 memory/MEMORY.md
 create mode 100644 memory/project_overview.md
 create mode 100644 static/css/tokens.css
 create mode 100644 tests/__init__.py
 create mode 100644 tests/__pycache__/__init__.cpython-313.pyc
 create mode 100644 tests/__pycache__/test_accounting.cpython-313.pyc
 create mode 100644 tests/__pycache__/test_accounting.cpython-314.pyc
 create mode 100644 tests/test_accounting.py

diff --git a/README.md b/README.md
index f2638ed..2178134 100644
--- a/README.md
+++ b/README.md
@@ -58,6 +58,16 @@ A few examples:
 - a `note` event for bookkeeping context
 - `session_open` / `session_close` to mark whether a game night is still live
 
+Accounting in the app keeps poker results separate from banker cashflow:
+
+- poker investment is `buyin + front + rollover_in`
+- poker net is `cashout - poker investment`
+- real cash in is `buyin + front_collected`
+- real cash out is `paid`
+- `rollover_out` settles the source session without counting as cash out
+- `rollover_in` enters play in the destination session without counting as cash in
+- `front_writeoff` resolves a receivable without counting as cash in
+
 It is still just a small side project, but I wanted the event model to stay clean enough that the numbers are easy to trust and the history is easy to read back through.
 
 ## CSV format
diff --git a/app.py b/app.py
index f77d83d..e7ef56c 100644
--- a/app.py
+++ b/app.py
@@ -3,7 +3,6 @@ from __future__ import annotations
 
 import csv
 import os
-import shutil
 from datetime import datetime, timezone
 from pathlib import Path
 
@@ -32,12 +31,23 @@ from stats import (
     session_sort_key,
     unique_player_names,
 )
-from storage import append_event, ensure_data_file, load_events
+from storage import CSV_HEADERS, append_event, ensure_data_file, load_events
 
 BASE_DIR = Path(__file__).resolve().parent
 DATA_PATH = BASE_DIR / "data" / "entries.csv"
 ENV_PATH = BASE_DIR / ".env"
 
+ELIGIBLE_MIN_SESSIONS = 3
+ADMIN_EVENT_TYPES = [
+    ("buyin", "Buy-in", "var(--accent)"),
+    ("front", "Fronted", "var(--warn)"),
+    ("rollover_in", "Rollover-in", "var(--rolled)"),
+    ("cashout", "Cash-out", "var(--rank-2)"),
+    ("paid", "Paid-out", "var(--pos)"),
+    ("rollover_out", "Rollover-out", "var(--rolled)"),
+    ("note", "Note", "var(--muted)"),
+]
+
 
 def load_local_env(env_path: Path) -> None:
     if not env_path.exists():
@@ -105,18 +115,20 @@ def leaderboard() -> str:
     all_sessions = build_session_summaries(events)
     ordered_sessions = sorted(all_sessions, key=session_sort_key)
 
-    session_ids = [session.session_id for session in ordered_sessions]
+    session_ids = [s.session_id for s in ordered_sessions]
     selected_session_id = request.args.get("through_session", "").strip()
+    mode = request.args.get("mode", "eligible").strip()
+    if mode not in ("eligible", "all", "recent"):
+        mode = "eligible"
     label = ""
+    cutoff_index = len(session_ids) - 1
 
     if session_ids:
         if selected_session_id in session_ids:
             cutoff_index = session_ids.index(selected_session_id)
             label = session_label(ordered_sessions[cutoff_index])
         else:
-            cutoff_index = len(session_ids) - 1
-            selected_session = ordered_sessions[cutoff_index]
-            label = session_label(selected_session)
+            label = session_label(ordered_sessions[cutoff_index])
 
         filtered_sessions = ordered_sessions[: cutoff_index + 1]
         previous_sessions = ordered_sessions[:cutoff_index]
@@ -124,17 +136,48 @@ def leaderboard() -> str:
         filtered_sessions = []
         previous_sessions = []
 
+    # Build full board (all filtered sessions) for rank changes and counts
     board = build_leaderboard(filtered_sessions)
     previous_board = build_leaderboard(previous_sessions)
     board = apply_rank_changes(board, previous_board)
 
+    # Segmented-control counts
+    eligible_count = sum(1 for p in board if p.sessions_played >= ELIGIBLE_MIN_SESSIONS)
+    all_count = len(board)
+    recent_sessions_slice = filtered_sessions[-5:]
+    recent_count = len({
+        entry.player_name
+        for s in recent_sessions_slice
+        for entry in s.entries
+    })
+
+    # Mode-specific boards
+    if mode == "recent":
+        mode_board = build_leaderboard(recent_sessions_slice)
+        main_board = mode_board
+        provisional_board = []
+    elif mode == "eligible":
+        main_board = [p for p in board if p.sessions_played >= ELIGIBLE_MIN_SESSIONS]
+        provisional_board = [p for p in board if p.sessions_played < ELIGIBLE_MIN_SESSIONS]
+    else:
+        main_board = board
+        provisional_board = []
+
     chart_data = cumulative_profit_series(filtered_sessions)
+    cash_paid_out_cents = sum(session.total_paid_out_cents for session in all_sessions)
 
     return render_template(
         "leaderboard.html",
-        leaderboard=board,
+        main_board=main_board,
+        provisional_board=provisional_board,
+        mode=mode,
+        eligible_count=eligible_count,
+        all_count=all_count,
+        recent_count=recent_count,
+        eligible_min_sessions=ELIGIBLE_MIN_SESSIONS,
         session_count=len(filtered_sessions),
         total_session_count=len(all_sessions),
+        cash_paid_out_cents=cash_paid_out_cents,
         chart_data=chart_data,
         available_sessions=all_sessions,
         selected_session_id=selected_session_id,
@@ -190,6 +233,15 @@ def session_detail(session_id: str) -> str:
         return redirect(url_for("sessions"))
 
     target_session = sessions[target_index]
+    chronological_sessions = sorted(sessions, key=session_sort_key)
+    session_number = next(
+        (
+            index
+            for index, session in enumerate(chronological_sessions, start=1)
+            if session.session_id == session_id
+        ),
+        1,
+    )
     prev_session = (
         sessions[target_index + 1] if target_index < len(sessions) - 1 else None
     )
@@ -200,6 +252,7 @@ def session_detail(session_id: str) -> str:
         session=target_session,
         next_session=next_session,
         prev_session=prev_session,
+        session_number=session_number,
         raw_events=session_events(events, session_id),
         chart_data=session_breakdown_series(target_session),
         session_label=session_label,
@@ -218,10 +271,19 @@ def player_detail(player_name: str) -> str:
         flash("That player was not found.", "error")
         return redirect(url_for("leaderboard"))
 
+    player_rank = next(
+        (
+            index
+            for index, ranked_player in enumerate(board, start=1)
+            if ranked_player.player_name == player_name
+        ),
+        None,
+    )
     chart_data = player_session_series(sessions, player_name)
     return render_template(
         "player_detail.html",
         player=player_stats,
+        player_rank=player_rank,
         chart_data=chart_data,
     )
 
@@ -290,6 +352,7 @@ def admin_session_state() -> str:
 
 
 @app.get("/admin/export")
+@app.get("/admin/export.csv")
 def admin_export_csv():
     if not is_admin():
         flash("Admin login required.", "error")
@@ -333,37 +396,39 @@ def admin_import_csv():
         flash("CSV file is empty.", "error")
         return redirect(url_for("admin_dashboard"))
 
-    try:
-        current_header = next(
-            csv.reader(open(DATA_PATH, "r", encoding="utf-8", newline=""))
-        )
-    except Exception:
-        flash("Could not read the current audit CSV header.", "error")
-        return redirect(url_for("admin_dashboard"))
-
     try:
         uploaded_header = next(csv.reader(uploaded_lines))
     except Exception:
         flash("Could not read the uploaded CSV header.", "error")
         return redirect(url_for("admin_dashboard"))
 
-    if uploaded_header != current_header:
+    if uploaded_header != CSV_HEADERS:
         flash("CSV header does not match the current audit format.", "error")
         return redirect(url_for("admin_dashboard"))
 
-    data_dir = os.path.dirname(DATA_PATH)
-    backup_name = (
-        f"entries_backup_{datetime.now(timezone.utc).strftime('%Y%m%d_%H%M%S')}.csv"
-    )
-    backup_path = os.path.join(data_dir, backup_name)
-
     try:
-        shutil.copy2(DATA_PATH, backup_path)
+        existing_ids = {event["id"] for event in load_events(DATA_PATH)}
+        reader = csv.DictReader(uploaded_lines)
+        new_rows = []
+        skipped_count = 0
+        for row in reader:
+            event_id = row.get("id", "")
+            if not event_id or event_id in existing_ids:
+                skipped_count += 1
+                continue
 
-        with open(DATA_PATH, "w", encoding="utf-8", newline="") as handle:
-            handle.write(uploaded_text)
+            new_rows.append({header: row.get(header, "") for header in CSV_HEADERS})
+            existing_ids.add(event_id)
 
-        flash(f"CSV imported successfully. Backup created: {backup_name}", "success")
+        if new_rows:
+            with open(DATA_PATH, "a", encoding="utf-8", newline="") as handle:
+                writer = csv.DictWriter(handle, fieldnames=CSV_HEADERS)
+                writer.writerows(new_rows)
+
+        flash(
+            f"Imported {len(new_rows)} new events, skipped {skipped_count} duplicates.",
+            "success",
+        )
     except Exception:
         flash("Import failed. Existing CSV was not updated.", "error")
 
@@ -582,13 +647,41 @@ def admin_dashboard():
         )
 
         flash("Event added.", "success")
-        return redirect(url_for("admin_dashboard"))
+        return redirect(
+            url_for(
+                "admin_dashboard",
+                session_id=session_id,
+                player_name=player_name,
+                event_type=event_type,
+            )
+        )
 
     events = load_events(DATA_PATH)
     sessions = build_session_summaries(events)
     open_sessions = [session for session in sessions if session.status == "open"]
+    live_session = open_sessions[0] if open_sessions else None
+    live_session_no = ""
+    live_unresolved_count = 0
+    if live_session is not None:
+        live_session_no = f"#{len(sessions):03d}"
+        live_unresolved_count = sum(
+            1
+            for entry in live_session.entries
+            if entry.current_due_cents > 0 or entry.player_owes_cents > 0
+        )
+
     recent_sessions = sessions[:8]
     recent_events = list(reversed(events[-20:]))
+    event_type_colors = {value: color for value, _label, color in ADMIN_EVENT_TYPES}
+    event_type_labels = {value: label for value, label, _color in ADMIN_EVENT_TYPES}
+    selected_event_type = request.args.get("event_type", "buyin").strip()
+    if selected_event_type not in event_type_colors:
+        selected_event_type = "buyin"
+    append_form = {
+        "session_id": request.args.get("session_id", "").strip(),
+        "player_name": request.args.get("player_name", "").strip(),
+        "event_type": selected_event_type,
+    }
     debt_entries = [
         {"session": session, "entry": entry}
         for session in sessions
@@ -598,12 +691,12 @@ def admin_dashboard():
 
     admin_totals = {
         "cash_in_cents": sum(session.total_cash_in_cents for session in sessions),
-        "paid_out_cents": sum(session.total_paid_out_cents for session in sessions),
-        "still_owed_cents": sum(
-            session.total_current_due_cents for session in sessions
+        "cash_out_cents": sum(session.total_paid_out_cents for session in sessions),
+        "house_owes_players_cents": sum(
+            session.total_current_due_to_player_cents for session in sessions
         ),
-        "players_owe_cents": sum(
-            session.total_player_owes_cents for session in sessions
+        "players_owe_house_cents": sum(
+            session.total_current_due_to_house_cents for session in sessions
         ),
         "collected_cents": sum(
             session.total_front_collected_cents for session in sessions
@@ -611,10 +704,14 @@ def admin_dashboard():
         "written_off_cents": sum(
             session.total_front_writeoff_cents for session in sessions
         ),
-        "open_balance_cents": sum(
-            session.total_open_balance_cents for session in sessions
+        "net_book_position_cents": sum(
+            session.total_net_book_position_cents for session in sessions
         ),
     }
+    admin_totals["paid_out_cents"] = admin_totals["cash_out_cents"]
+    admin_totals["still_owed_cents"] = admin_totals["house_owes_players_cents"]
+    admin_totals["players_owe_cents"] = admin_totals["players_owe_house_cents"]
+    admin_totals["open_balance_cents"] = admin_totals["net_book_position_cents"]
 
     return render_template(
         "admin_dashboard.html",
@@ -622,7 +719,15 @@ def admin_dashboard():
         recent_sessions=recent_sessions,
         recent_events=recent_events,
         debt_entries=debt_entries,
+        live_session=live_session,
+        live_session_no=live_session_no,
+        live_unresolved_count=live_unresolved_count,
         player_names=unique_player_names(events),
+        append_form=append_form,
+        event_types=ADMIN_EVENT_TYPES,
+        event_type_colors=event_type_colors,
+        event_type_labels=event_type_labels,
+        admin_today=datetime.now().date().isoformat(),
         session_label=session_label,
         admin_totals=admin_totals,
     )
diff --git a/memory/MEMORY.md b/memory/MEMORY.md
new file mode 100644
index 0000000..98e9838
--- /dev/null
+++ b/memory/MEMORY.md
@@ -0,0 +1,3 @@
+# Memory Index
+
+- [Project overview](project_overview.md) — Flask poker ledger app, Graphite+Violet design system, append-only CSV event model
diff --git a/memory/project_overview.md b/memory/project_overview.md
new file mode 100644
index 0000000..3eef37a
--- /dev/null
+++ b/memory/project_overview.md
@@ -0,0 +1,26 @@
+---
+name: project-overview
+description: Flask poker ledger app — design system, tech stack, key files
+metadata:
+  type: project
+---
+
+Flask/Jinja app: poker session tracker and leaderboard. Append-only CSV event ledger (`data/entries.csv`).
+
+**Design system (Graphite + Violet):** Implemented June 2026.
+- `static/css/tokens.css` — all CSS custom properties (--accent: #9b8cf0 violet, not orange)
+- `static/css/style.css` — component classes: .panel, .stat, .tbl, .badge, .segmented, .btn, .feed, etc.
+- Fonts: Spectral (display), Hanken Grotesk (UI), IBM Plex Mono (numbers/labels)
+
+**Pages:** leaderboard, sessions, session_detail, player_detail, admin_dashboard, admin_login.
+
+**Key patterns:**
+- Leaderboard has Eligible/All/Recent segmented control; `ELIGIBLE_MIN_SESSIONS = 3` in app.py
+- Session detail has Compact/Full toggle for the table (`col-acct` class, `.is-full` on table)
+- Chart.js colors: leaderboard uses CHART_PALETTE from template JS; bars use `net_tone()` from stats.py
+- `--text-muted` and `--line` CSS vars kept as backward compat for Chart.js JS reads
+- `.venv/bin/python` is the Python runtime
+
+**Data model:** EventRow CSV → SessionEntry → SessionSummary, PlayerStats (via stats.py). No DB.
+
+**Why:** Design ported from "Poker Ledger.dc.html" prototype spec per handoff document.
diff --git a/static/css/style.css b/static/css/style.css
index 3890f2e..104ef36 100644
--- a/static/css/style.css
+++ b/static/css/style.css
@@ -1,1297 +1,1373 @@
-:root {
-    --bg: #0f1012;
-    --bg-panel: rgba(20, 22, 26, 0.92);
-    --bg-panel-strong: rgba(24, 27, 31, 0.98);
-    --bg-soft: rgba(255, 255, 255, 0.026);
-    --line: rgba(255, 255, 255, 0.08);
-    --line-strong: rgba(255, 255, 255, 0.13);
-    --text: #f5f3ef;
-    --text-muted: #a9adb6;
-    --text-soft: #868b94;
-    --accent: #e58b3a;
-    --accent-2: #ffb66d;
-    --accent-soft: rgba(229, 139, 58, 0.14);
-    --positive: #58d38f;
-    --negative: #ef6a72;
-    --neutral: #ddb662;
-    --shadow: 0 24px 64px rgba(0, 0, 0, 0.34);
-    --shadow-soft: 0 12px 34px rgba(0, 0, 0, 0.22);
-    --radius-sm: 8px;
-    --radius: 12px;
-    --radius-lg: 16px;
-}
-
-* {
-    box-sizing: border-box;
-}
-
-html {
-    color-scheme: dark;
-}
-
+/* ================================================================
+   RESET + BASE
+   ================================================================ */
+*, *::before, *::after { box-sizing: border-box; }
+html { color-scheme: dark; scroll-behavior: smooth; }
 body {
-    margin: 0;
-    min-height: 100vh;
-    font-family: "Inter", sans-serif;
-    color: var(--text);
-    background:
-        radial-gradient(
-            circle at top left,
-            rgba(229, 139, 58, 0.11),
-            transparent 22%
-        ),
-        radial-gradient(
-            circle at top right,
-            rgba(255, 182, 109, 0.05),
-            transparent 18%
-        ),
-        linear-gradient(180deg, #0c0d0f 0%, #111418 100%);
+  margin: 0;
+  min-height: 100vh;
+  font-family: var(--font-ui);
+  font-size: 15px;
+  line-height: 1.5;
+  color: var(--text-body);
+  background: var(--bg);
+  -webkit-font-smoothing: antialiased;
 }
+img, canvas, svg { display: block; max-width: 100%; }
+a { color: inherit; text-decoration: none; }
+button, input, select, textarea { font: inherit; }
+button { color: inherit; cursor: pointer; }
+h1, h2, h3, h4 { margin: 0; }
+::-webkit-scrollbar { width: 7px; height: 7px; }
+::-webkit-scrollbar-track { background: var(--surface); }
+::-webkit-scrollbar-thumb { background: var(--border-strong); border-radius: 4px; }
 
-body::before {
-    content: "";
-    position: fixed;
-    inset: 0;
-    background-image:
-        linear-gradient(rgba(255, 255, 255, 0.012) 1px, transparent 1px),
-        linear-gradient(90deg, rgba(255, 255, 255, 0.012) 1px, transparent 1px);
-    background-size: 40px 40px;
-    opacity: 0.22;
-    pointer-events: none;
-}
-
-body.modal-open {
-    overflow: hidden;
-}
-
-img,
-canvas {
-    display: block;
-    max-width: 100%;
-}
-
-a {
-    color: inherit;
-    text-decoration: none;
-}
-
-button,
-input,
-select,
-textarea {
-    font: inherit;
-}
-
-button {
-    color: inherit;
-}
-
-.site-shell {
-    width: min(1280px, calc(100% - 40px));
-    margin: 0 auto;
-    padding: 24px 0 44px;
+/* ================================================================
+   FONTS
+   ================================================================ */
+:root {
+  --font-ui:      Aptos, Inter, ui-sans-serif, system-ui, -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif;
+  --font-display: var(--font-ui);
+  --font-mono:    ui-monospace, "SFMono-Regular", "Cascadia Mono", "Roboto Mono", "Liberation Mono", monospace;
+  --font-money:   var(--font-ui);
 }
 
+/* ================================================================
+   APP SHELL
+   ================================================================ */
 .topbar {
-    display: flex;
-    justify-content: space-between;
-    align-items: center;
-    gap: 18px;
-    padding: 18px 22px;
-    margin-bottom: 24px;
-    border: 1px solid var(--line);
-    border-radius: var(--radius-lg);
-    background: rgba(16, 18, 22, 0.84);
-    backdrop-filter: blur(10px);
-    box-shadow: var(--shadow-soft);
+  position: sticky; top: 0; z-index: 50;
+  background: rgba(15,15,18,.86);
+  backdrop-filter: blur(8px);
+  border-bottom: 1px solid var(--border);
+}
+.topbar__inner {
+  max-width: var(--w-admin);
+  margin: 0 auto;
+  padding: 0 var(--gutter);
+  height: 62px;
+  display: flex;
+  align-items: center;
+  gap: 28px;
 }
-
 .brand {
-    display: inline-block;
-    font-size: 1.3rem;
-    font-weight: 800;
-    letter-spacing: -0.045em;
+  display: flex;
+  align-items: center;
+  gap: 11px;
+  flex: none;
 }
-
-.brand-subtitle {
-    margin: 6px 0 0;
-    color: var(--text-muted);
-    font-size: 0.95rem;
+.brand__mark {
+  width: 26px; height: 26px;
+  border-radius: 5px;
+  background: var(--accent);
+  box-shadow: 0 0 0 1px var(--accent-a30), 0 4px 14px var(--accent-a22);
+  position: relative;
+  flex: none;
 }
-
-.nav-links {
-    display: flex;
-    align-items: center;
-    gap: 10px;
-    flex-wrap: wrap;
+.brand__mark::after {
+  content: "";
+  position: absolute;
+  inset: 0; margin: auto;
+  width: 11px; height: 11px;
+  border-radius: 2px;
+  background: var(--bg);
+  transform: rotate(45deg);
 }
-
-.nav-links form {
-    margin: 0;
+.brand__name {
+  font-family: var(--font-display);
+  font-size: 19px;
+  font-weight: 600;
+  letter-spacing: 0;
+  color: var(--text);
+  white-space: nowrap;
 }
-
-.nav-links a,
-.ghost-button,
-.secondary-button,
-.primary-button,
-.sort-button {
-    transition:
-        background-color 140ms ease,
-        border-color 140ms ease,
-        color 140ms ease,
-        transform 140ms ease,
-        box-shadow 140ms ease;
+.mainnav { display: flex; gap: 4px; }
+.navlink {
+  font-size: 13.5px;
+  font-weight: 600;
+  padding: 7px 12px;
+  border-radius: var(--r-pill);
+  color: var(--muted);
+  transition: color 140ms, background 140ms;
 }
-
-.nav-links a,
-.ghost-button,
-.secondary-button,
-.primary-button {
-    display: inline-flex;
-    align-items: center;
-    justify-content: center;
-    min-height: 42px;
-    padding: 0 14px;
-    border-radius: 10px;
-    border: 1px solid transparent;
-    background: transparent;
-    color: var(--text);
-    cursor: pointer;
+.navlink:hover { color: var(--text-strong); }
+.navlink.is-active { color: var(--text-strong); background: var(--field-alt); }
+.topbar__spacer { flex: 1; }
+.topbar__season {
+  font-family: var(--font-mono);
+  font-size: 11px;
+  letter-spacing: .12em;
+  text-transform: uppercase;
+  color: var(--faintest);
 }
+.topbar__admin-actions { display: flex; align-items: center; gap: 8px; }
 
-.nav-links a:hover,
-.ghost-button:hover,
-.secondary-button:hover {
-    background: rgba(255, 255, 255, 0.038);
-    border-color: var(--line);
-}
-
-.secondary-button {
-    border-color: var(--line);
-    background: rgba(255, 255, 255, 0.025);
-}
-
-.secondary-button:hover {
-    border-color: rgba(229, 139, 58, 0.3);
-    box-shadow: inset 0 0 0 1px rgba(229, 139, 58, 0.1);
-}
-
-.primary-button {
-    padding: 0 16px;
-    border-color: rgba(229, 139, 58, 0.3);
-    background: linear-gradient(
-        180deg,
-        rgba(229, 139, 58, 0.2),
-        rgba(229, 139, 58, 0.12)
-    );
-    color: #fff3e5;
-    box-shadow: inset 0 1px 0 rgba(255, 255, 255, 0.06);
-}
-
-.primary-button:hover {
-    border-color: rgba(255, 182, 109, 0.42);
-    background: linear-gradient(
-        180deg,
-        rgba(229, 139, 58, 0.25),
-        rgba(229, 139, 58, 0.14)
-    );
-}
-
-.flash-stack {
-    display: grid;
-    gap: 10px;
-    margin-bottom: 18px;
+.page {
+  margin: 0 auto;
+  padding: clamp(22px,3.4vw,46px) var(--gutter) 96px;
 }
+.page--public  { max-width: var(--w-public);  }
+.page--session { max-width: var(--w-session); }
+.page--admin   { max-width: var(--w-admin);   }
 
+/* ================================================================
+   FLASH MESSAGES
+   ================================================================ */
+.flash-stack { display: grid; gap: 10px; margin-bottom: 24px; }
 .flash {
-    padding: 14px 16px;
-    border: 1px solid var(--line);
-    border-radius: var(--radius);
-    background: var(--bg-panel);
-    box-shadow: var(--shadow-soft);
+  padding: 11px 16px;
+  border-radius: var(--r-sm);
+  font-size: 14px;
+  border: 1px solid var(--border);
+  background: var(--surface);
 }
-
 .flash.success {
-    border-color: rgba(88, 211, 143, 0.2);
-    background: linear-gradient(
-        180deg,
-        rgba(88, 211, 143, 0.08),
-        rgba(20, 22, 26, 0.94)
-    );
+  color: var(--pos);
+  border-color: var(--pos-tint-bd);
+  background: var(--pos-tint);
 }
-
 .flash.error {
-    border-color: rgba(239, 106, 114, 0.2);
-    background: linear-gradient(
-        180deg,
-        rgba(239, 106, 114, 0.08),
-        rgba(20, 22, 26, 0.94)
-    );
+  color: var(--neg);
+  border-color: var(--neg-tint-bd);
+  background: var(--neg-tint);
 }
 
-.page-content {
-    display: grid;
-    gap: 24px;
+/* ================================================================
+   TYPOGRAPHY
+   ================================================================ */
+.kicker {
+  font-family: var(--font-mono);
+  font-size: 10.5px;
+  letter-spacing: .14em;
+  text-transform: uppercase;
+  color: var(--faintest);
+  margin: 0 0 6px;
+  display: block;
 }
-
-.hero-card,
-.panel {
-    position: relative;
-    overflow: hidden;
-    border: 1px solid var(--line);
-    border-radius: var(--radius-lg);
-    background: var(--bg-panel);
-    box-shadow: var(--shadow-soft);
+.kicker--dot {
+  display: inline-flex;
+  align-items: center;
+  gap: 7px;
 }
-
-.hero-card::before,
-.panel::before {
-    content: "";
-    position: absolute;
-    inset: 0;
-    background: linear-gradient(
-        180deg,
-        rgba(255, 255, 255, 0.018),
-        transparent 34%
-    );
-    pointer-events: none;
+.kicker--dot::before {
+  content: "";
+  width: 7px;
+  height: 7px;
+  border-radius: 50%;
+  flex: none;
 }
-
-.hero-card {
-    padding: 30px;
-}
-
-.hero-card.compact {
-    padding: 24px 28px;
-}
-
-.panel {
-    padding: 22px;
-}
-
+.kicker--dot-accent::before { background: var(--accent); }
+.kicker--dot-warn::before { background: var(--warn); }
 .eyebrow {
-    margin: 0 0 8px;
-    color: var(--accent-2);
-    font-size: 0.74rem;
-    font-weight: 700;
-    letter-spacing: 0.12em;
-    text-transform: uppercase;
+  font-family: var(--font-mono);
+  font-size: 10.5px;
+  letter-spacing: .14em;
+  text-transform: uppercase;
+  color: var(--accent);
+  margin: 0 0 8px;
 }
-
-h1,
-h2 {
-    margin: 0;
-    letter-spacing: -0.05em;
-}
-
 h1 {
-    font-size: clamp(2.15rem, 4.2vw, 3.7rem);
-    line-height: 0.98;
+  font-family: var(--font-display);
+  font-size: clamp(30px,4.4vw,46px);
+  font-weight: 600;
+  letter-spacing: 0;
+  color: var(--text);
+  line-height: 1.05;
 }
-
 h2 {
-    font-size: 1.34rem;
-    line-height: 1.15;
+  font-family: var(--font-display);
+  font-size: 18px;
+  font-weight: 600;
+  color: var(--text-strong);
 }
-
 h3 {
-    position: relative;
-    z-index: 1;
-    margin: 0;
-    font-size: 1.05rem;
-    line-height: 1.2;
+  font-size: 15px;
+  font-weight: 600;
+  color: var(--text-strong);
 }
 
-.muted-text {
-    margin: 0;
-    color: var(--text-muted);
-    line-height: 1.65;
+/* page intro */
+.hero { padding: 28px 0 22px; }
+.hero__kicker {
+  font-family: var(--font-mono);
+  font-size: 10.5px;
+  letter-spacing: .14em;
+  text-transform: uppercase;
+  color: var(--accent);
+  margin: 0 0 10px;
+}
+.session-number {
+  color: var(--accent);
+  margin-bottom: 8px;
+}
+.hero__title {
+  font-family: var(--font-display);
+  font-size: clamp(30px,4.4vw,46px);
+  font-weight: 600;
+  letter-spacing: 0;
+  color: var(--text);
+  line-height: 1.05;
+  margin: 0 0 10px;
 }
 
-.muted-text.small,
-.tiny-text {
-    font-size: 0.9rem;
+.currency-symbol {
+  font-family: var(--font-money);
+  font-variant-numeric: normal;
+}
+.hero__sub {
+  color: var(--muted);
+  font-size: 14.5px;
+  margin: 0;
+  max-width: 54ch;
 }
 
-.tiny-text {
-    color: var(--text-soft);
+/* ================================================================
+   PANEL / CARD
+   ================================================================ */
+.panel {
+  background: var(--surface);
+  border: 1px solid var(--border);
+  border-radius: var(--r-lg);
+  overflow: hidden;
 }
-
-.grid {
-    display: grid;
-    gap: 24px;
+.panel__head {
+  padding: 16px 22px;
+  border-bottom: 1px solid var(--field-alt);
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  gap: 12px;
+  background: var(--surface-head);
 }
-
-.two-col {
-    grid-template-columns: minmax(0, 1.65fr) minmax(320px, 0.95fr);
-}
-
-.leaderboard-layout {
-    grid-template-columns: minmax(0, 2.3fr) minmax(280px, 0.7fr);
-}
-
-.three-col {
-    grid-template-columns: repeat(3, minmax(0, 1fr));
-}
-
-.four-col {
-    grid-template-columns: repeat(4, minmax(0, 1fr));
-}
-
-.stack-gap {
-    display: grid;
-    gap: 18px;
-}
-
-.form-shell {
-    display: grid;
-    justify-content: center;
-}
-
-.form-shell.narrow {
-    grid-template-columns: minmax(320px, 540px);
-}
-
-.form-card {
-    display: grid;
-    gap: 16px;
-    align-content: start;
-}
-
-.form-card label {
-    display: grid;
-    gap: 8px;
-    position: relative;
-    z-index: 1;
-}
-
-.form-card label > span {
-    color: var(--text-soft);
-    font-size: 0.84rem;
-    font-weight: 700;
-    letter-spacing: 0.08em;
-    text-transform: uppercase;
-}
-
-.form-card input,
-.form-card select,
-.form-card textarea {
-    width: 100%;
-    border: 1px solid var(--line);
-    border-radius: 10px;
-    background: rgba(255, 255, 255, 0.028);
-    color: var(--text);
-    padding: 12px 13px;
-    outline: none;
-    appearance: none;
-}
-
-.form-card textarea {
-    resize: vertical;
-    min-height: 112px;
-}
-
-.compact-form textarea {
-    min-height: 92px;
-}
-
-.form-card input:focus,
-.form-card select:focus,
-.form-card textarea:focus {
-    border-color: rgba(229, 139, 58, 0.42);
-    box-shadow: 0 0 0 4px rgba(229, 139, 58, 0.1);
-}
-
-.admin-layout .form-card {
-    align-self: start;
-}
-
-.admin-layout {
-    grid-template-columns: minmax(420px, 1.15fr) minmax(360px, 0.85fr);
-}
-
-.admin-layout > .grid {
-    gap: 18px;
+.panel__title {
+  font-family: var(--font-display);
+  font-weight: 600;
+  font-size: 18px;
+  margin: 0;
+  color: var(--text-strong);
 }
+.panel__tag { font-family: var(--font-mono); font-size: 11px; color: var(--faintest); }
+.panel__body { padding: 20px; }
 
+/* panel-header — old utility kept for admin forms */
 .panel-header {
-    position: relative;
-    z-index: 1;
-    display: flex;
-    justify-content: space-between;
-    align-items: flex-start;
-    gap: 14px;
-    margin-bottom: 18px;
+  display: flex;
+  justify-content: space-between;
+  align-items: flex-start;
+  gap: 14px;
+  padding: 20px 20px 0;
+}
+.panel-header--center { align-items: center; }
+.panel-actions { display: flex; align-items: center; gap: 10px; }
+
+/* ================================================================
+   STAT / METRIC TILE
+   ================================================================ */
+.stat {
+  padding: 15px 16px;
+  background: var(--surface);
+  border: 1px solid var(--border);
+  border-radius: var(--r-md);
+}
+.stat__val {
+  font-family: var(--font-display);
+  font-size: 26px;
+  font-weight: 600;
+  line-height: 1;
+  margin: 4px 0 0;
+}
+.stat__sub {
+  font-family: var(--font-mono);
+  font-size: 11.5px;
+  color: var(--muted);
+  margin-top: 8px;
+}
+.stat--hero .stat__val { font-size: 34px; }
+.player-rank {
+  margin: 0 0 4px;
+  color: var(--accent);
+  font-family: var(--font-mono);
+  font-size: 11px;
+  letter-spacing: .12em;
+  text-transform: uppercase;
+}
+.player-stat-grid {
+  display: grid;
+  grid-template-columns: repeat(8, minmax(0, 1fr));
+  gap: var(--s3);
+}
+.player-stat-grid .stat {
+  min-width: 0;
+}
+.player-stat-grid .stat__val {
+  font-size: clamp(19px, 1.7vw, 24px);
+  word-break: keep-all;
+}
+.stat-pair {
+  display: flex;
+  flex-wrap: wrap;
+  align-items: baseline;
+  gap: 4px 10px;
+  margin-top: 4px;
+}
+.stat-pair__val {
+  font-family: var(--font-display);
+  font-size: clamp(17px, 1.55vw, 22px);
+  font-weight: 600;
+  line-height: 1;
+  white-space: nowrap;
+}
+.stat--rail { position: relative; padding-left: 20px; }
+.stat--rail::before {
+  content: "";
+  position: absolute;
+  left: 0; top: 0; bottom: 0;
+  width: 3px;
+  background: var(--rail, var(--accent));
 }
 
-.panel-header-with-actions {
-    align-items: center;
+/* hero stat row (small inline tiles) */
+.stat-row-inline {
+  display: flex;
+  flex-wrap: wrap;
+  gap: 12px;
 }
 
-.panel-actions {
-    display: flex;
-    align-items: center;
-    gap: 10px;
+/* ================================================================
+   TOOLBAR
+   ================================================================ */
+.toolbar {
+  display: flex;
+  flex-wrap: wrap;
+  align-items: center;
+  justify-content: space-between;
+  gap: 14px;
+  margin: 24px 0 12px;
 }
-
-.chart-panel {
-    min-height: 420px;
+.toolbar__left  { display: flex; align-items: center; gap: 12px; flex-wrap: wrap; }
+.toolbar__right { display: flex; align-items: center; gap: 10px; flex-wrap: wrap; }
+.toolbar__hint {
+  font-size: 12.5px;
+  color: var(--muted);
+  max-width: 42ch;
+  line-height: 1.4;
+  margin: 0;
 }
+.sortnote { font-family: var(--font-mono); font-size: 11.5px; color: var(--faintest); }
+.sortnote b { color: var(--text-2); font-weight: 500; }
 
-.chart-panel-large {
-    min-height: 600px;
+/* ================================================================
+   SEGMENTED CONTROL
+   ================================================================ */
+.segmented {
+  display: inline-flex;
+  padding: 3px;
+  gap: 2px;
+  background: var(--surface-raised);
+  border: 1px solid var(--border);
+  border-radius: var(--r-sm);
 }
-
-.chart-frame,
-.chart-modal-frame {
-    position: relative;
-    min-height: 340px;
+.seg {
+  display: flex;
+  align-items: center;
+  gap: 7px;
+  padding: 7px 13px;
+  border: 0;
+  border-radius: var(--r-pill);
+  background: transparent;
+  color: var(--muted);
+  font: 600 13px var(--font-ui);
+  cursor: pointer;
+  white-space: nowrap;
+  transition: background 120ms, color 120ms;
 }
-
-.chart-panel-large .chart-frame {
-    min-height: 510px;
+.seg:hover { color: var(--text-2); }
+.seg.is-on {
+  background: var(--accent-chip);
+  color: var(--text-strong);
+  box-shadow: inset 0 0 0 1px var(--accent-chip-bd);
 }
+.seg__count { font-family: var(--font-mono); font-size: 11px; font-weight: 500; color: var(--faintest); }
+.seg.is-on .seg__count { color: var(--accent); }
 
-.chart-frame-interactive {
-    cursor: zoom-in;
+/* ================================================================
+   INPUTS / SELECTS
+   ================================================================ */
+.fieldlabel {
+  display: block;
+  font-family: var(--font-mono);
+  font-size: 10px;
+  letter-spacing: .10em;
+  text-transform: uppercase;
+  color: var(--faintest);
+  margin-bottom: 7px;
 }
-
-.chart-frame-interactive:focus-visible {
-    outline: 2px solid rgba(229, 139, 58, 0.55);
-    outline-offset: 5px;
+.field-input, .field-select {
+  width: 100%;
+  padding: 10px 12px;
+  background: var(--field);
+  border: 1px solid var(--border-strong);
+  border-radius: var(--r-sm);
+  color: var(--text-strong);
+  font: 14px var(--font-ui);
+  outline: none;
+  appearance: none;
 }
-
-.chart-panel canvas,
-.chart-frame canvas,
-.chart-modal-frame canvas {
-    width: 100% !important;
-    height: 100% !important;
+.field-input:focus, .field-select:focus {
+  border-color: var(--accent-chip-bd);
+  box-shadow: 0 0 0 3px var(--accent-a22);
 }
+.field-input::placeholder { color: var(--faintest-2); }
 
-.stat-panel,
-.stat-card {
-    display: grid;
-    align-content: start;
+/* form-card (admin forms) */
+.form-card { display: grid; gap: 16px; align-content: start; padding: 22px; }
+.form-card label { display: grid; gap: 6px; }
+.form-card label > span {
+  font-family: var(--font-mono);
+  font-size: 10px;
+  letter-spacing: .10em;
+  text-transform: uppercase;
+  color: var(--faintest);
 }
-
-.stat-list {
-    display: grid;
-    gap: 8px;
-    position: relative;
-    z-index: 1;
+.form-card input, .form-card select, .form-card textarea {
+  width: 100%;
+  padding: 10px 12px;
+  background: var(--field);
+  border: 1px solid var(--border-strong);
+  border-radius: var(--r-sm);
+  color: var(--text-strong);
+  font: 14px var(--font-ui);
+  outline: none;
+  appearance: none;
 }
-
-.stat-row {
-    display: flex;
-    justify-content: space-between;
-    align-items: center;
-    gap: 14px;
-    padding: 14px 0;
-    border-bottom: 1px solid var(--line);
-}
-
-.stat-row:last-child {
-    border-bottom: none;
-}
-
-.stat-row span {
-    color: var(--text-muted);
-}
-
-.stat-card {
-    gap: 10px;
-    min-height: 128px;
-}
-
-.stat-card span {
-    color: var(--text-soft);
-    font-size: 0.78rem;
-    font-weight: 700;
-    letter-spacing: 0.12em;
-    text-transform: uppercase;
-}
-
-.stat-card strong {
-    font-size: clamp(1.8rem, 3vw, 2.35rem);
-    line-height: 1;
-    letter-spacing: -0.06em;
-}
-
-.rank-move {
-    display: inline-flex;
-    align-items: center;
-    justify-content: center;
-    min-width: 2.5rem;
-    font-weight: 650;
-    letter-spacing: 0.01em;
-}
-
-.rank-up {
-    color: #22c55e;
-}
-
-.rank-down {
-    color: #ef4444;
-}
-
-.rank-flat {
-    color: var(--text-muted);
-}
-
-.inline-filter-form select {
-    min-width: 12rem;
-}
-
-.table-wrap {
-    position: relative;
-    z-index: 1;
-    overflow-x: auto;
-    border-radius: 10px;
-    border: 1px solid var(--line);
-    background: rgba(255, 255, 255, 0.018);
-}
-
-.small-table th,
-.small-table td {
-    padding: 12px 14px;
-}
-
-table {
-    width: 100%;
-    border-collapse: collapse;
-}
-
-th,
-td {
-    padding: 14px;
-    border-bottom: 1px solid var(--line);
-    text-align: left;
-    white-space: nowrap;
-    vertical-align: top;
-}
-
-th {
-    color: var(--text-soft);
-    font-size: 0.76rem;
-    font-weight: 700;
-    letter-spacing: 0.12em;
-    text-transform: uppercase;
-}
-
-tbody tr {
-    transition: background-color 140ms ease;
-}
-
-tbody tr:hover {
-    background: rgba(255, 255, 255, 0.026);
-}
-
-tbody tr:last-child td,
-tbody tr:last-child th {
-    border-bottom: none;
-}
-
-td a {
-    font-weight: 600;
-}
-
-td a:hover {
-    color: var(--accent-2);
-}
-
-.sort-button {
-    display: inline-flex;
-    align-items: center;
-    gap: 6px;
-    width: 100%;
-    padding: 0;
-    border: 0;
-    background: transparent;
-    color: inherit;
-    text-align: left;
-    cursor: pointer;
-}
-
-.sort-button:hover {
-    color: var(--text);
-}
-
-.sort-button.is-active {
-    color: var(--accent-2);
-}
-
-.sort-indicator {
-    color: var(--text-soft);
-    font-size: 0.9em;
-}
-
-.sort-button.is-active .sort-indicator {
-    color: var(--accent-2);
-}
-
-.leaderboard-controls {
-    display: grid;
-    gap: 8px;
-    justify-items: end;
-}
-
-.session-filter-form {
-    display: flex;
-    align-items: center;
-    gap: 10px;
-    flex-wrap: wrap;
-}
-
-.session-filter-label {
-    color: var(--text-muted);
-    font-size: 0.9rem;
-    font-weight: 600;
+.form-card input:focus, .form-card select:focus, .form-card textarea:focus {
+  border-color: var(--accent-chip-bd);
+  box-shadow: 0 0 0 3px var(--accent-a22);
 }
+.form-card textarea { resize: vertical; min-height: 92px; }
+.form-card input::placeholder, .form-card textarea::placeholder { color: var(--faintest-2); }
 
+.session-filter-form { display: flex; align-items: center; gap: 10px; flex-wrap: wrap; }
 .session-filter-select {
-    min-width: 220px;
-    min-height: 42px;
-    padding: 0 14px;
-    border: 1px solid var(--line-strong);
-    border-radius: 12px;
-    background: rgba(255, 255, 255, 0.035);
-    color: var(--text);
-    outline: none;
+  min-width: 200px;
+  padding: 8px 12px;
+  background: var(--field);
+  border: 1px solid var(--border-strong);
+  border-radius: var(--r-sm);
+  color: var(--text-strong);
+  font: 13.5px var(--font-ui);
+  outline: none;
+  appearance: none;
 }
-
 .session-filter-select:focus {
-    border-color: rgba(240, 138, 56, 0.42);
-    box-shadow: 0 0 0 4px rgba(240, 138, 56, 0.12);
+  border-color: var(--accent-chip-bd);
+  box-shadow: 0 0 0 3px var(--accent-a22);
 }
 
-.compact-button {
-    min-height: 42px;
+/* ================================================================
+   TABLE
+   ================================================================ */
+.tbl-scroll {
+  overflow-x: auto;
+  -webkit-overflow-scrolling: touch;
+}
+.tbl {
+  width: 100%;
+  border-collapse: collapse;
+  font-size: 14px;
+  min-width: 700px;
+}
+.tbl thead tr { background: var(--surface-head); }
+.tbl th {
+  font-family: var(--font-mono);
+  font-size: 10.5px;
+  letter-spacing: .10em;
+  text-transform: uppercase;
+  color: var(--muted);
+  font-weight: 500;
+  padding: 13px 14px;
+  text-align: right;
+  white-space: nowrap;
+  border-bottom: 1px solid var(--border);
+}
+.tbl th.col-player, .tbl th.col-left { text-align: left; }
+.tbl td {
+  padding: 12px 14px;
+  text-align: right;
+  border-top: 1px solid var(--divider);
+  font-family: var(--font-mono);
+  font-variant-numeric: tabular-nums;
+  color: var(--num);
+  white-space: nowrap;
+}
+.tbl td.col-player, .tbl td.col-left {
+  text-align: left;
+  font-family: var(--font-ui);
+  color: var(--text-body);
+}
+.tbl tbody tr { cursor: pointer; transition: background 80ms; }
+.tbl tbody tr:hover { background: #1e1e25; }
+.tbl .num-net { font-weight: 600; font-size: 15px; }
+.tbl .num-pos { color: var(--pos); }
+.tbl .num-neg { color: var(--neg); }
+.tbl .num-neutral { color: var(--muted-2); }
+.tbl .num-muted { color: var(--muted-2); }
+.tbl .rank-num { font-family: var(--font-display); font-size: 15px; font-weight: 600; color: var(--num); }
+.tbl .rank-1 { color: var(--rank-1); }
+.tbl .rank-2 { color: var(--rank-2); }
+.tbl .rank-3 { color: var(--rank-3); }
+
+/* accounting columns (hidden until .is-full) */
+.tbl .col-acct { display: none; }
+.tbl.is-full .col-acct { display: table-cell; }
+.tbl--session {
+  min-width: 920px;
+}
+.tbl--session.is-full {
+  min-width: 1240px;
+}
+.tbl--session th:nth-child(7),
+.tbl--session td:nth-child(7) {
+  width: 1%;
+}
+.tbl--session .badge {
+  padding-inline: 7px;
+  font-size: 10px;
 }
 
-.positive,
-.negative,
-.neutral {
-    font-weight: 700;
-}
+/* sticky rank+player on horizontal scroll */
+.tbl .col-rank   { position: sticky; left: 0;   background: var(--surface); z-index: 1; }
+.tbl .col-player { position: sticky; left: 52px; background: var(--surface); z-index: 1; }
+.tbl thead .col-rank   { background: var(--surface-head); z-index: 2; }
+.tbl thead .col-player { background: var(--surface-head); z-index: 2; }
+.tbl--session .col-player { left: 0; min-width: 148px; }
 
-.positive {
-    color: var(--positive);
+/* sort button inside th */
+.sort-btn {
+  display: inline-flex;
+  align-items: center;
+  gap: 4px;
+  background: transparent;
+  border: 0;
+  color: inherit;
+  font: inherit;
+  cursor: pointer;
+  padding: 0;
 }
+.sort-btn.is-active { color: var(--text-2); }
+.sort-arrow { color: var(--accent); font-size: 10px; }
 
-.negative {
-    color: var(--negative);
+/* rank delta cell */
+.tbl .col-rank-delta { text-align: center; }
+.rank-delta {
+  display: inline-flex;
+  align-items: center;
+  justify-content: center;
+  min-width: 34px;
+  height: 22px;
+  padding: 0 8px;
+  border-radius: var(--r-pill);
+  font-family: var(--font-mono);
+  font-size: 11px;
+  font-weight: 700;
 }
+.rank-delta--up   { color: var(--pos); background: var(--pos-tint); box-shadow: inset 0 0 0 1px var(--pos-tint-bd); }
+.rank-delta--down { color: var(--neg); background: var(--neg-tint); box-shadow: inset 0 0 0 1px var(--neg-tint-bd); }
+.rank-delta--flat { color: var(--faintest-2); background: var(--surface-sunk); box-shadow: inset 0 0 0 1px var(--border); }
 
-.neutral {
-    color: var(--neutral);
+/* old positive/negative/neutral utility (kept for compatibility) */
+.positive { color: var(--pos) !important; font-weight: 600; }
+.negative { color: var(--neg) !important; font-weight: 600; }
+.neutral  { color: var(--muted-2) !important; font-weight: 600; }
+
+/* old table-wrap (admin uses plain table still) */
+.table-wrap { overflow-x: auto; -webkit-overflow-scrolling: touch; }
+table { width: 100%; border-collapse: collapse; }
+th, td { padding: 11px 14px; text-align: left; white-space: nowrap; vertical-align: middle; }
+th {
+  font-family: var(--font-mono);
+  font-size: 10.5px;
+  letter-spacing: .10em;
+  text-transform: uppercase;
+  color: var(--muted);
+  font-weight: 500;
+  background: var(--surface-head);
+  border-bottom: 1px solid var(--border);
 }
+tbody tr { transition: background 80ms; }
+tbody tr:hover { background: #1e1e25; }
+tbody tr:not(:last-child) td { border-bottom: 1px solid var(--divider); }
+td { font-size: 13.5px; color: var(--text-body); }
+td a { font-weight: 600; color: var(--text-strong); }
+td a:hover { color: var(--accent); }
 
-.event-feed {
-    display: grid;
-    gap: 12px;
-    position: relative;
-    z-index: 1;
+/* ================================================================
+   BADGES / STATUS PILLS
+   ================================================================ */
+.badge {
+  display: inline-block;
+  padding: 3px 9px;
+  border-radius: 5px;
+  font-family: var(--font-mono);
+  font-size: 10.5px;
+  letter-spacing: .05em;
+  text-transform: uppercase;
+  font-weight: 500;
+  white-space: nowrap;
 }
+.badge--paid     { color: var(--pos);  background: var(--pos-tint);  box-shadow: inset 0 0 0 1px var(--pos-tint-bd); }
+.badge--partial  { color: var(--warn); background: var(--warn-tint); box-shadow: inset 0 0 0 1px var(--warn-tint-bd); }
+.badge--unpaid   { color: var(--neg);  background: var(--neg-tint);  box-shadow: inset 0 0 0 1px var(--neg-tint-bd); }
+.badge--owes     { color: var(--owes); background: var(--owes-tint); box-shadow: inset 0 0 0 1px var(--owes-tint-bd); }
+.badge--none     { color: var(--faintest-2); }
+.badge--open     { color: var(--warn); background: var(--warn-tint); box-shadow: inset 0 0 0 1px var(--warn-tint-bd); }
+.badge--closed   { color: var(--muted-2); background: var(--surface-raised); box-shadow: inset 0 0 0 1px var(--border); }
+.badge--written_off { color: var(--neg); background: var(--neg-tint); box-shadow: inset 0 0 0 1px var(--neg-tint-bd); }
+.badge--collected   { color: var(--pos); background: var(--pos-tint); box-shadow: inset 0 0 0 1px var(--pos-tint-bd); }
 
-.event-feed.condensed {
-    gap: 10px;
-}
-
-.event-card {
-    display: grid;
-    gap: 8px;
-    padding: 14px;
-    border: 1px solid var(--line);
-    border-radius: 10px;
-    background: rgba(255, 255, 255, 0.022);
-}
-
-.event-card-top {
-    display: flex;
-    align-items: center;
-    justify-content: space-between;
-    gap: 12px;
-}
-
-.event-amount {
-    margin: 0;
-    font-size: 1.1rem;
-    font-weight: 700;
-    letter-spacing: -0.03em;
+/* old status-badge pattern (kept for templates) */
+.status-badge {
+  display: inline-flex;
+  align-items: center;
+  padding: 3px 9px;
+  border-radius: 5px;
+  font-family: var(--font-mono);
+  font-size: 10.5px;
+  letter-spacing: .05em;
+  text-transform: uppercase;
+  font-weight: 500;
+  white-space: nowrap;
 }
+.status-open       { color: var(--warn); background: var(--warn-tint); box-shadow: inset 0 0 0 1px var(--warn-tint-bd); }
+.status-closed     { color: var(--muted-2); background: var(--surface-raised); box-shadow: inset 0 0 0 1px var(--border); }
+.status-paid       { color: var(--pos);  background: var(--pos-tint);  box-shadow: inset 0 0 0 1px var(--pos-tint-bd); }
+.status-partial    { color: var(--warn); background: var(--warn-tint); box-shadow: inset 0 0 0 1px var(--warn-tint-bd); }
+.status-unpaid     { color: var(--neg);  background: var(--neg-tint);  box-shadow: inset 0 0 0 1px var(--neg-tint-bd); }
+.status-owes       { color: var(--owes); background: var(--owes-tint); box-shadow: inset 0 0 0 1px var(--owes-tint-bd); }
+.status-none       { color: var(--faintest-2); }
+.status-written_off { color: var(--neg); background: var(--neg-tint); box-shadow: inset 0 0 0 1px var(--neg-tint-bd); }
+.status-collected   { color: var(--pos); background: var(--pos-tint); box-shadow: inset 0 0 0 1px var(--pos-tint-bd); }
 
+/* event-type pills */
 .pill {
-    display: inline-flex;
-    align-items: center;
-    justify-content: center;
-    min-height: 26px;
-    padding: 0 10px;
-    border: 1px solid rgba(229, 139, 58, 0.25);
-    border-radius: 999px;
-    background: var(--accent-soft);
-    color: var(--accent-2);
-    font-size: 0.72rem;
-    font-weight: 700;
-    letter-spacing: 0.08em;
-    text-transform: uppercase;
+  display: inline-flex;
+  align-items: center;
+  padding: 3px 9px;
+  border-radius: 5px;
+  font-family: var(--font-mono);
+  font-size: 10.5px;
+  letter-spacing: .05em;
+  text-transform: uppercase;
+  font-weight: 500;
+}
+.pill-buyin          { color: var(--accent); background: var(--accent-tint); box-shadow: inset 0 0 0 1px var(--accent-chip-bd); }
+.pill-front          { color: var(--warn);   background: var(--warn-tint);   box-shadow: inset 0 0 0 1px var(--warn-tint-bd); }
+.pill-cashout        { color: var(--rank-2); background: var(--surface-raised); box-shadow: inset 0 0 0 1px var(--border); }
+.pill-paid           { color: var(--pos);    background: var(--pos-tint);    box-shadow: inset 0 0 0 1px var(--pos-tint-bd); }
+.pill-rollover_in    { color: var(--rolled); background: var(--surface-raised); box-shadow: inset 0 0 0 1px var(--border); }
+.pill-rollover_out   { color: var(--rolled); background: var(--surface-raised); box-shadow: inset 0 0 0 1px var(--border); }
+.pill-front_collected { color: var(--pos);   background: var(--pos-tint);    box-shadow: inset 0 0 0 1px var(--pos-tint-bd); }
+.pill-front_writeoff  { color: var(--neg);   background: var(--neg-tint);    box-shadow: inset 0 0 0 1px var(--neg-tint-bd); }
+.pill-note           { color: var(--muted-2); background: var(--surface-raised); box-shadow: inset 0 0 0 1px var(--border); }
+.pill-session_open   { color: var(--warn);  background: var(--warn-tint);   box-shadow: inset 0 0 0 1px var(--warn-tint-bd); }
+.pill-session_close  { color: var(--muted-2); background: var(--surface-raised); box-shadow: inset 0 0 0 1px var(--border); }
+
+/* ================================================================
+   CHARTS
+   ================================================================ */
+.chart-wrap { padding: 0 20px 20px; position: relative; }
+.chart-frame {
+  position: relative;
+  height: clamp(220px, 30vw, 300px);
+}
+.chart-frame--tall { height: clamp(260px, 36vw, 340px); }
+.chart-frame canvas { width: 100% !important; height: 100% !important; }
+
+.session-net-bars {
+  display: grid;
+  gap: 11px;
+  min-height: clamp(220px, 30vw, 300px);
+  align-content: center;
+  padding-top: 4px;
+}
+.session-net-bars__row {
+  display: grid;
+  grid-template-columns: minmax(92px, 150px) minmax(160px, 1fr) minmax(86px, max-content);
+  gap: 12px;
+  align-items: center;
+}
+.session-net-bars__name {
+  min-width: 0;
+  overflow: hidden;
+  text-overflow: ellipsis;
+  white-space: nowrap;
+  color: var(--text-2);
+  font-size: 13px;
+  font-weight: 600;
+}
+.session-net-bars__track {
+  position: relative;
+  height: 18px;
+  border-radius: 5px;
+  background: var(--surface-sunk);
+  overflow: hidden;
+}
+.session-net-bars__track::before {
+  content: "";
+  position: absolute;
+  top: 0;
+  bottom: 0;
+  left: 50%;
+  width: 1px;
+  background: var(--border-hi);
+  z-index: 1;
+}
+.session-net-bars__bar {
+  position: absolute;
+  top: 4px;
+  height: 10px;
+  min-width: 2px;
+  border-radius: 5px;
+}
+.session-net-bars__bar--pos { left: 50%; }
+.session-net-bars__bar--neg { right: 50%; }
+.session-net-bars__amount {
+  font-family: var(--font-mono);
+  font-size: 12.5px;
+  color: var(--num);
+  text-align: right;
+  white-space: nowrap;
 }
 
-.note-list {
-    margin: 0;
-    padding-left: 18px;
-    color: var(--text-muted);
-    white-space: normal;
+.result-mix {
+  min-height: clamp(220px, 30vw, 300px);
+  display: grid;
+  align-content: center;
+  gap: 18px;
+}
+.result-mix__bar {
+  display: flex;
+  height: 24px;
+  overflow: hidden;
+  border-radius: 6px;
+  background: var(--surface-sunk);
+  box-shadow: inset 0 0 0 1px var(--border);
+}
+.result-mix__seg {
+  min-width: 0;
+  flex-basis: 0;
+}
+.result-mix__seg--win { background: var(--pos); }
+.result-mix__seg--even { background: var(--muted-2); }
+.result-mix__seg--loss { background: var(--neg); }
+.result-mix__legend {
+  display: grid;
+  gap: 10px;
+  color: var(--muted);
+  font-family: var(--font-mono);
+  font-size: 11.5px;
+}
+.result-mix__legend-row {
+  display: grid;
+  grid-template-columns: minmax(0, 1fr) auto;
+  gap: 16px;
+  align-items: center;
+}
+.result-mix__legend-row span {
+  display: inline-flex;
+  align-items: center;
+  gap: 6px;
+}
+.result-mix__legend-row strong {
+  color: var(--text-2);
+  font-weight: 600;
+  text-align: right;
+  white-space: nowrap;
+}
+.result-mix__key {
+  width: 8px;
+  height: 8px;
+  border-radius: 50%;
+  flex: none;
+}
+.result-mix__key--win { background: var(--pos); }
+.result-mix__key--even { background: var(--muted-2); }
+.result-mix__key--loss { background: var(--neg); }
+.result-mix__note {
+  color: var(--faintest);
+  font-family: var(--font-mono);
+  font-size: 11px;
 }
 
-.note-list li + li {
-    margin-top: 6px;
+/* ================================================================
+   RECON CARDS (session cash flow / open items)
+   ================================================================ */
+.recon-grid { display: grid; gap: var(--s3); grid-template-columns: repeat(auto-fit, minmax(260px, 1fr)); }
+.recon-card-head { padding: 14px 20px 0; }
+.recon-metric-grid {
+  display: grid;
+  grid-template-columns: 1fr 1fr;
+  gap: 1px;
+  background: var(--border);
+  border-top: 1px solid var(--border);
+  margin-top: 12px;
+}
+.recon-cell { background: var(--surface); padding: 14px 20px; }
+.recon-val {
+  font-family: var(--font-display);
+  font-size: 22px;
+  font-weight: 600;
+  color: var(--text-strong);
+  line-height: 1;
+  margin: 4px 0 0;
+}
+.recon-val--pos { color: var(--pos); }
+.recon-val--neg { color: var(--neg); }
+.recon-val--warn { color: var(--warn); }
+.recon-val--num { color: var(--num); }
+
+/* ================================================================
+   QUICK SNAPSHOT (2×2 grid inside a panel)
+   ================================================================ */
+.snapshot-grid {
+  display: grid;
+  grid-template-columns: 1fr 1fr;
+  gap: 1px;
+  background: var(--border);
+  border-top: 1px solid var(--border);
+}
+.snapshot-cell { background: var(--surface); padding: 16px 20px; }
+.snapshot-val {
+  font-family: var(--font-display);
+  font-size: 22px;
+  font-weight: 600;
+  color: var(--text-strong);
+  line-height: 1;
+  margin: 4px 0 0;
 }
 
-.chart-modal {
-    position: fixed;
-    inset: 0;
-    z-index: 80;
-    display: none;
+/* ================================================================
+   AUDIT / RAW-EVENTS FEED
+   ================================================================ */
+.feed { max-height: 360px; overflow-y: auto; }
+.feed__row {
+  display: flex;
+  align-items: center;
+  gap: 11px;
+  padding: 9px 20px;
+  border-top: 1px solid var(--divider);
 }
+.feed__row:first-child { border-top: none; }
+.feed__name { flex: 1; font-size: 13px; color: var(--text-2); min-width: 0; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
+.feed__amt  { font-family: var(--font-mono); font-size: 12.5px; color: var(--num); white-space: nowrap; }
+.feed__time { font-family: var(--font-mono); font-size: 10.5px; color: var(--faintest-2); white-space: nowrap; }
+.feed__tag  { font-family: var(--font-mono); font-size: 9.5px; letter-spacing: .06em; font-weight: 500; text-transform: uppercase; white-space: nowrap; }
 
-.chart-modal.is-open {
-    display: block;
+/* old event-card (used in session detail and admin) */
+.event-feed { display: grid; gap: 0; }
+.event-card {
+  display: flex;
+  align-items: center;
+  gap: 12px;
+  padding: 10px 20px;
+  border-top: 1px solid var(--divider);
 }
-
-.chart-modal-backdrop {
-    position: absolute;
-    inset: 0;
-    background: rgba(8, 10, 12, 0.78);
-    backdrop-filter: blur(6px);
+.event-card:first-child { border-top: none; }
+.event-card-top {
+  display: flex;
+  align-items: center;
+  gap: 10px;
+  flex: 1;
+  min-width: 0;
 }
-
-.chart-modal-card {
-    position: relative;
-    z-index: 1;
-    width: min(1320px, calc(100vw - 48px));
-    max-height: calc(100vh - 48px);
-    margin: 24px auto;
-    padding: 22px;
-    border: 1px solid var(--line-strong);
-    border-radius: 18px;
-    background: var(--bg-panel-strong);
-    box-shadow: var(--shadow);
+.event-card-top strong {
+  font-size: 13px;
+  color: var(--text-strong);
+  white-space: nowrap;
 }
-
-.chart-modal-frame {
-    height: min(74vh, 820px);
+.event-card--inline {
+  display: grid;
+  grid-template-columns: minmax(0, 1fr) auto auto;
+  gap: 10px;
+  padding: 9px 16px;
 }
-
-.leaderboard-layout,
-.session-layout {
-    align-items: stretch;
+.event-card--inline .event-card-top {
+  gap: 8px;
 }
-
-.admin-layout {
-    align-items: start;
+.event-card--inline .pill {
+  padding: 2px 7px;
+  font-size: 9.5px;
 }
-
-.results-panel-full {
-    display: block;
+.event-note {
+  min-width: 0;
+  overflow: hidden;
+  text-overflow: ellipsis;
+  white-space: nowrap;
+  color: var(--muted);
+  font-size: 12.5px;
 }
+.event-amount { font-family: var(--font-mono); font-size: 13px; font-weight: 600; color: var(--num); margin: 0; white-space: nowrap; }
+.muted-text { color: var(--muted); font-size: 13.5px; margin: 0; }
+.muted-text.small, .tiny-text { font-size: 12px; }
+.tiny-text { color: var(--faintest); }
+.note-list { margin: 0; padding-left: 16px; color: var(--muted); font-size: 13px; }
+.note-list li + li { margin-top: 4px; }
 
-.table-scroll-open {
-    overflow-x: auto;
-    overflow-y: visible;
-    max-height: none;
-    padding-right: 0;
+/* ================================================================
+   BUTTONS
+   ================================================================ */
+.btn {
+  display: inline-flex;
+  align-items: center;
+  gap: 8px;
+  padding: 10px 20px;
+  border: 0;
+  border-radius: var(--r-sm);
+  font: 700 14px var(--font-ui);
+  cursor: pointer;
+  white-space: nowrap;
+  transition: opacity 120ms, box-shadow 120ms;
 }
+.btn--primary { background: var(--accent); color: var(--accent-ink); box-shadow: 0 4px 16px var(--accent-a30); }
+.btn--primary:hover { opacity: .88; }
+.btn--ghost { background: var(--field); color: var(--text-2); border: 1px solid var(--border-strong); font-weight: 600; }
+.btn--ghost:hover { border-color: var(--border-hi); color: var(--text-strong); }
+.btn--outline { background: var(--accent-tint); color: var(--accent); border: 1px solid var(--accent-chip-bd); }
+.btn--outline:hover { background: var(--accent-chip); }
+.btn--sm { padding: 7px 13px; font-size: 13px; }
 
-.chart-row {
-    align-items: stretch;
+/* legacy button classes mapped to new */
+.primary-button {
+  display: inline-flex;
+  align-items: center;
+  gap: 8px;
+  padding: 10px 20px;
+  border: 0;
+  border-radius: var(--r-sm);
+  font: 700 14px var(--font-ui);
+  cursor: pointer;
+  background: var(--accent);
+  color: var(--accent-ink);
+  box-shadow: 0 4px 16px var(--accent-a30);
+  text-decoration: none;
+  transition: opacity 120ms;
 }
-
-.chart-panel-compact,
-.session-insights-panel {
-    display: flex;
-    flex-direction: column;
+.primary-button:hover { opacity: .88; }
+.secondary-button, .ghost-button {
+  display: inline-flex;
+  align-items: center;
+  gap: 8px;
+  padding: 8px 14px;
+  border-radius: var(--r-sm);
+  font: 600 13.5px var(--font-ui);
+  cursor: pointer;
+  background: var(--field);
+  color: var(--text-2);
+  border: 1px solid var(--border-strong);
+  text-decoration: none;
+  transition: border-color 120ms, color 120ms;
 }
-
-.chart-panel-compact .chart-frame-compact {
-    flex: 1;
-    min-height: 220px;
-    height: auto;
+.secondary-button:hover, .ghost-button:hover {
+  border-color: var(--border-hi);
+  color: var(--text-strong);
 }
-
-.session-results-table {
-    min-width: 980px;
-}
-
-.session-results-table th,
-.session-results-table td {
-    vertical-align: top;
-    white-space: nowrap;
-}
-
-.session-results-table th:last-child,
-.session-results-table td:last-child {
-    min-width: 18rem;
-    width: 22rem;
-    white-space: normal;
-}
-
-.session-results-table thead th {
-    position: sticky;
-    top: 0;
-    z-index: 2;
-    background: rgba(16, 20, 28, 0.96);
-    backdrop-filter: blur(6px);
-}
-
-.detail-grid {
-    display: grid;
-    gap: 0.9rem;
-}
-
-.detail-row {
-    display: flex;
-    align-items: center;
-    justify-content: space-between;
-    gap: 1rem;
-    padding: 0.8rem 0;
-    border-bottom: 1px solid var(--line);
-}
-
-.detail-row:last-child {
-    border-bottom: 0;
-}
-
-.button-row {
-    display: flex;
-    gap: 0.75rem;
-    flex-wrap: wrap;
-}
-
-.secondary-button {
-    appearance: none;
-    border: 1px solid rgba(255, 255, 255, 0.12);
-    background: rgba(255, 255, 255, 0.04);
-    color: var(--text-strong);
-    border-radius: 12px;
-    padding: 0.8rem 1rem;
-    font: inherit;
-    font-weight: 600;
-    cursor: pointer;
-}
-
-.secondary-button:hover {
-    background: rgba(255, 255, 255, 0.07);
-}
-
-.status-badge {
-    display: inline-flex;
-    align-items: center;
-    justify-content: center;
-    min-width: 5.5rem;
-    padding: 0.35rem 0.65rem;
-    border-radius: 999px;
-    font-size: 0.78rem;
-    font-weight: 700;
-    letter-spacing: 0.06em;
-    text-transform: uppercase;
-}
-
-.status-open {
-    color: #f59e0b;
-    background: rgba(245, 158, 11, 0.12);
-    border: 1px solid rgba(245, 158, 11, 0.24);
-}
-
-.status-closed {
-    color: #94a3b8;
-    background: rgba(148, 163, 184, 0.1);
-    border: 1px solid rgba(148, 163, 184, 0.2);
-}
-
-.inline-action-form {
-    margin: 0;
-}
-
 .table-action-button {
-    appearance: none;
-    border: 1px solid rgba(255, 255, 255, 0.1);
-    background: rgba(255, 255, 255, 0.04);
-    color: var(--text-strong);
-    border-radius: 10px;
-    padding: 0.45rem 0.7rem;
-    font: inherit;
-    font-size: 0.88rem;
-    font-weight: 600;
-    cursor: pointer;
+  display: inline-flex;
+  align-items: center;
+  padding: 5px 11px;
+  border-radius: var(--r-pill);
+  font: 600 12px var(--font-ui);
+  cursor: pointer;
+  background: var(--field);
+  color: var(--text-2);
+  border: 1px solid var(--border-strong);
+  transition: border-color 120ms, color 120ms;
+}
+.table-action-button:hover { border-color: var(--accent-chip-bd); color: var(--accent); }
+
+/* ================================================================
+   LAYOUT UTILITIES
+   ================================================================ */
+.cards   { display: grid; gap: var(--s3); grid-template-columns: repeat(auto-fit, minmax(150px, 1fr)); }
+.cards-2 { display: grid; gap: var(--s4); grid-template-columns: repeat(auto-fit, minmax(260px, 1fr)); }
+.leaderboard-hero-stats {
+  display: flex;
+  gap: 12px;
+  flex-wrap: wrap;
+  align-self: center;
+  justify-content: flex-end;
+}
+.leaderboard-hero-stats .stat {
+  min-width: 132px;
+}
+.leaderboard-hero-stats .stat:last-child {
+  min-width: 168px;
+}
+.split   { display: flex; flex-wrap: wrap; gap: var(--s4); align-items: flex-start; }
+.split > .col-main { flex: 2; min-width: 360px; }
+.split > .col-side { flex: 1; min-width: 300px; }
+.stack   { display: grid; gap: 20px; }
+.inline-action-form { margin: 0; }
+.button-row { display: flex; gap: 8px; flex-wrap: wrap; align-items: center; }
+
+/* Breadcrumb */
+.breadcrumb {
+  display: flex;
+  align-items: center;
+  gap: 6px;
+  font-family: var(--font-mono);
+  font-size: 11.5px;
+  color: var(--faintest);
+  margin-bottom: 20px;
+  flex-wrap: wrap;
+}
+.breadcrumb a { color: var(--text-2); }
+.breadcrumb a:hover { color: var(--accent); }
+.breadcrumb__sep { color: var(--slash); }
+
+/* Admin workspace */
+.admin-workspace {
+  display: grid;
+  grid-template-columns: minmax(0, 2fr) minmax(300px, 1fr);
+  gap: var(--s4);
+  align-items: flex-start;
+}
+.admin-workspace__main { flex: 2; min-width: 360px; }
+.admin-workspace__side { flex: 1; min-width: 300px; }
+.admin-workspace .col-main,
+.admin-workspace .col-side {
+  display: flex;
+  flex-direction: column;
+  gap: var(--s4);
+  min-width: 0;
+}
+.admin-bottom-grid {
+  display: grid;
+  grid-template-columns: minmax(0, 2fr) minmax(300px, 1fr);
+  gap: var(--s4);
+  align-items: stretch;
+  margin-top: var(--s4);
+}
+.admin-bottom-grid > .panel {
+  min-width: 0;
+}
+.admin-bottom-grid > .panel:last-child {
+  display: flex;
+  flex-direction: column;
+  min-height: 0;
+}
+.admin-bottom-grid > .panel:last-child .event-feed {
+  flex: 1;
+  align-content: start;
+  max-height: none;
+  overflow-y: auto;
 }
 
-.table-action-button:hover {
-    background: rgba(255, 255, 255, 0.07);
+/* Cash position strip */
+.cash-strip {
+  display: grid;
+  gap: var(--s3);
+  grid-template-columns: repeat(auto-fit, minmax(160px, 1fr));
+  margin-bottom: 28px;
 }
 
-.chart-frame-small {
-    min-height: 260px;
+/* Live indicator dot */
+.live-badge {
+  display: inline-flex;
+  align-items: center;
+  gap: 6px;
+  font-family: var(--font-mono);
+  font-size: 10.5px;
+  letter-spacing: .08em;
+  text-transform: uppercase;
+  color: var(--pos);
+  font-weight: 500;
+}
+.live-badge::before {
+  content: "";
+  width: 7px; height: 7px;
+  border-radius: 50%;
+  background: var(--pos);
+  animation: livepulse 2.2s ease-in-out infinite;
+}
+@keyframes livepulse {
+  0%, 100% { opacity: 1; transform: scale(1); }
+  50%       { opacity: .5; transform: scale(.78); }
 }
 
-.status-none {
-    color: #94a3b8;
-    background: rgba(148, 163, 184, 0.1);
-    border: 1px solid rgba(148, 163, 184, 0.2);
+/* Provisional (sub-threshold players) */
+.provisional-grid {
+  display: grid;
+  gap: var(--s3);
+  grid-template-columns: repeat(auto-fit, minmax(190px, 1fr));
+}
+.provisional-card {
+  padding: 14px 16px;
+  background: var(--surface-sunk);
+  border: 1px dashed var(--border-hi);
+  border-radius: var(--r-md);
+  transition: border-color 120ms;
+}
+.provisional-card:hover { border-color: var(--accent-chip-bd); }
+.provisional-card__name {
+  font-weight: 600;
+  font-size: 14px;
+  color: var(--text-2);
+  margin: 0 0 6px;
+}
+.provisional-card__meta {
+  display: flex;
+  gap: 12px;
+  font-family: var(--font-mono);
+  font-size: 11px;
+  color: var(--faintest);
 }
 
-.status-unpaid {
-    color: #f59e0b;
-    background: rgba(245, 158, 11, 0.12);
-    border: 1px solid rgba(245, 158, 11, 0.24);
+/* Perf / Cash section separator dot */
+.section-marker {
+  display: inline-flex;
+  align-items: center;
+  gap: 6px;
+  font-family: var(--font-mono);
+  font-size: 10px;
+  letter-spacing: .12em;
+  text-transform: uppercase;
+  color: var(--faintest);
+  margin-bottom: 16px;
 }
-
-.status-partial {
-    color: #fb923c;
-    background: rgba(251, 146, 60, 0.12);
-    border: 1px solid rgba(251, 146, 60, 0.24);
-}
-
-.status-paid {
-    color: #22c55e;
-    background: rgba(34, 197, 94, 0.12);
-    border: 1px solid rgba(34, 197, 94, 0.24);
-}
-
-.pill-paid {
-    color: #22c55e;
-    background: rgba(34, 197, 94, 0.12);
-    border: 1px solid rgba(34, 197, 94, 0.22);
-}
-
-.pill-cashout {
-    color: #f59e0b;
-    background: rgba(245, 158, 11, 0.12);
-    border: 1px solid rgba(245, 158, 11, 0.22);
-}
-
-.pill-buyin {
-    color: #60a5fa;
-    background: rgba(96, 165, 250, 0.12);
-    border: 1px solid rgba(96, 165, 250, 0.22);
-}
-
-.pill-front {
-    color: #fb923c;
-    background: rgba(251, 146, 60, 0.12);
-    border: 1px solid rgba(251, 146, 60, 0.22);
-}
-
-.pill-front_collected {
-    color: #22c55e;
-    background: rgba(34, 197, 94, 0.12);
-    border: 1px solid rgba(34, 197, 94, 0.22);
-}
-
-.pill-front_writeoff {
-    color: #f87171;
-    background: rgba(248, 113, 113, 0.12);
-    border: 1px solid rgba(248, 113, 113, 0.22);
-}
-
-.pill-note {
-    color: #cbd5e1;
-    background: rgba(203, 213, 225, 0.08);
-    border: 1px solid rgba(203, 213, 225, 0.14);
-}
-
-.status-badge {
-    display: inline-flex;
-    align-items: center;
-    justify-content: center;
-    min-width: 5.5rem;
-    padding: 0.35rem 0.65rem;
-    border-radius: 999px;
-    font-size: 0.78rem;
-    font-weight: 700;
-    letter-spacing: 0.06em;
-    text-transform: uppercase;
-}
-
-.status-owes {
-    color: #ef4444;
-    background: rgba(239, 68, 68, 0.12);
-    border: 1px solid rgba(239, 68, 68, 0.24);
-}
-
-.status-written_off {
-    color: #f87171;
-    background: rgba(248, 113, 113, 0.12);
-    border: 1px solid rgba(248, 113, 113, 0.24);
-}
-
-.status-collected {
-    color: #22c55e;
-    background: rgba(34, 197, 94, 0.12);
-    border: 1px solid rgba(34, 197, 94, 0.24);
-}
-
-.inline-action-form {
-    margin: 0;
-}
-
-.table-action-button {
-    appearance: none;
-    border: 1px solid rgba(255, 255, 255, 0.12);
-    background: rgba(255, 255, 255, 0.05);
-    color: var(--text-strong);
-    border-radius: 10px;
-    padding: 0.45rem 0.72rem;
-    font: inherit;
-    font-size: 0.88rem;
-    font-weight: 600;
-    line-height: 1;
-    cursor: pointer;
-    transition:
-        background 140ms ease,
-        border-color 140ms ease,
-        transform 140ms ease;
-}
-
-.table-action-button:hover {
-    background: rgba(255, 166, 77, 0.12);
-    border-color: rgba(255, 166, 77, 0.28);
-}
-
-.table-action-button:active {
-    transform: translateY(1px);
-}
-
-.table-action-button:focus-visible {
-    outline: none;
-    box-shadow: 0 0 0 3px rgba(255, 166, 77, 0.18);
-    border-color: rgba(255, 166, 77, 0.35);
-}
-
-.admin-tools-grid {
-    display: grid;
-    gap: 1rem;
-    grid-template-columns: repeat(auto-fit, minmax(260px, 1fr));
-}
-
-.debt-panel {
-    display: grid;
-    gap: 18px;
-}
-
-.debt-summary {
-    display: flex;
-    align-items: center;
-    justify-content: flex-end;
-    gap: 10px;
-    flex-wrap: wrap;
-}
-
-.debt-summary span {
-    display: inline-flex;
-    min-height: 34px;
-    align-items: center;
-    border: 1px solid var(--line);
-    border-radius: 999px;
-    padding: 0 12px;
-    color: var(--text-muted);
-    font-size: 0.86rem;
-    font-weight: 700;
-}
-
-.debt-action-grid {
-    position: relative;
-    z-index: 1;
-    display: grid;
-    gap: 18px;
-    grid-template-columns: repeat(2, minmax(0, 1fr));
-}
-
-.import-form input[type="file"] {
-    width: 100%;
-    margin-top: 0.5rem;
-    margin-bottom: 1rem;
-    color: var(--text-muted);
+.section-marker__dot {
+  width: 8px; height: 8px;
+  border-radius: 50%;
+  flex: none;
 }
+.section-marker__dot--accent { background: var(--accent); }
+.section-marker__dot--rolled { background: var(--rolled); }
 
+/* Debt / admin tools */
+.debt-panel  { display: grid; gap: 18px; }
+.debt-summary { display: flex; align-items: center; gap: 8px; flex-wrap: wrap; }
+.debt-action-grid { display: grid; gap: 18px; grid-template-columns: repeat(auto-fit, minmax(280px, 1fr)); }
+.import-form input[type="file"] { width: 100%; margin: 4px 0 8px; color: var(--muted); }
 .import-form input[type="file"]::file-selector-button {
-    appearance: none;
-    border: 1px solid rgba(255, 255, 255, 0.12);
-    background: rgba(255, 255, 255, 0.05);
-    color: var(--text-strong);
-    border-radius: 10px;
-    padding: 0.55rem 0.8rem;
-    font: inherit;
-    font-size: 0.9rem;
-    font-weight: 600;
-    margin-right: 0.75rem;
-    cursor: pointer;
+  appearance: none;
+  border: 1px solid var(--border-strong);
+  background: var(--field);
+  color: var(--text-2);
+  border-radius: var(--r-pill);
+  padding: 5px 11px;
+  font: 600 13px var(--font-ui);
+  margin-right: 8px;
+  cursor: pointer;
 }
-
 .import-form input[type="file"]::file-selector-button:hover {
-    background: rgba(255, 166, 77, 0.12);
-    border-color: rgba(255, 166, 77, 0.28);
+  border-color: var(--accent-chip-bd);
+  color: var(--accent);
 }
 
-.payout-summary-grid {
-    display: grid;
-    gap: 1rem;
-    grid-template-columns: repeat(3, minmax(0, 1fr));
+/* Admin: append ledger event */
+.append__body { padding: 20px 22px; }
+.append__grid {
+  display: grid;
+  grid-template-columns: repeat(auto-fit, minmax(150px, 1fr));
+  gap: 14px;
+  margin-bottom: 16px;
+}
+.field { display: block; }
+.field__label {
+  display: block;
+  font-family: var(--font-mono);
+  font-size: 10px;
+  letter-spacing: .10em;
+  text-transform: uppercase;
+  color: var(--faintest);
+  margin-bottom: 7px;
+}
+.field__opt { text-transform: none; letter-spacing: 0; }
+.control {
+  width: 100%;
+  padding: 10px 12px;
+  background: var(--field);
+  border: 1px solid var(--border-strong);
+  border-radius: 8px;
+  color: var(--text-strong);
+  font: 14px var(--font-ui);
+  outline: none;
+}
+select.control { cursor: pointer; }
+.control--money {
+  display: flex;
+  align-items: center;
+  gap: 0;
+  padding: 0 12px;
+}
+.control__prefix { color: var(--faint); font-family: var(--font-mono); }
+.control--money input {
+  width: 100%;
+  padding: 10px 6px;
+  background: transparent;
+  border: 0;
+  outline: none;
+  color: var(--text-strong);
+  font-family: var(--font-mono);
+  font-size: 14px;
+}
+.control:focus,
+.control--money:focus-within {
+  border-color: var(--accent-chip-bd);
+  box-shadow: 0 0 0 3px var(--accent-a22);
+}
+.append__note { margin-bottom: 18px; }
+.append__footer { display: flex; align-items: center; gap: 14px; flex-wrap: wrap; }
+.append__preview { display: inline-flex; align-items: center; gap: 8px; font-size: 12.5px; color: var(--faint); }
+.evtag-pill {
+  font-family: var(--font-mono);
+  font-size: 10.5px;
+  letter-spacing: .05em;
+  font-weight: 500;
+  padding: 3px 8px;
+  border-radius: 5px;
+  background: rgba(255,255,255,.03);
+  box-shadow: inset 0 0 0 1px var(--border-strong);
 }
 
-.table-toolbar {
-    display: flex;
-    gap: 0.65rem;
-    margin-bottom: 1rem;
+/* Admin: session controls */
+.panel--pad { padding: 20px 22px; }
+.panel__title--mb { margin: 0 0 16px; }
+.livecard {
+  padding: 15px 16px;
+  background: var(--surface-sunk);
+  border: 1px solid var(--border-strong);
+  border-radius: 11px;
+  margin-bottom: 14px;
 }
-
-.table-view-toggle.is-active {
-    background: rgba(255, 166, 77, 0.12);
-    border-color: rgba(255, 166, 77, 0.28);
+.livecard__head { display: flex; align-items: center; gap: 8px; margin-bottom: 12px; }
+.dot { width: 7px; height: 7px; border-radius: 50%; }
+.dot--live { background: var(--pos); animation: livepulse 1.6s ease-in-out infinite; }
+.livecard__name { font-weight: 600; color: var(--text-strong); font-size: 14px; }
+.livecard__no { font-family: var(--font-mono); font-size: 10.5px; color: var(--faintest); }
+.livecard__metrics { display: flex; gap: 18px; margin-bottom: 14px; }
+.micro {
+  font-family: var(--font-mono);
+  font-size: 10px;
+  letter-spacing: .10em;
+  text-transform: uppercase;
+  color: var(--faintest);
+  margin-bottom: 4px;
 }
-
-.session-results-table.compact .detail-col {
-    display: none;
+.mono16 { font-family: var(--font-mono); font-size: 16px; color: var(--text-strong); }
+.mono16--warn { color: var(--warn); }
+.btn-close {
+  display: block;
+  width: 100%;
+  text-align: center;
+  padding: 9px;
+  border-radius: 8px;
+  background: var(--accent-tint);
+  border: 1px solid var(--accent-chip-bd);
+  color: var(--accent);
+  font: 600 13px var(--font-ui);
+  cursor: pointer;
 }
-
-.admin-cash-grid {
-    display: grid;
-    gap: 1rem;
-    grid-template-columns: repeat(6, minmax(150px, 1fr));
-    margin-bottom: 1rem;
+.btn-close:hover { background: var(--accent-chip); }
+.btn-newsession {
+  display: flex;
+  width: 100%;
+  align-items: center;
+  justify-content: center;
+  gap: 8px;
+  padding: 12px;
+  border-radius: 9px;
+  background: transparent;
+  border: 1px dashed var(--border-hi);
+  color: var(--text-2);
+  font: 600 14px var(--font-ui);
+  cursor: pointer;
 }
-
-@media (max-width: 1180px) {
-    .admin-cash-grid {
-        grid-template-columns: repeat(3, minmax(0, 1fr));
-    }
+.btn-newsession:hover { border-color: var(--accent); color: var(--accent); }
+.btn-newsession--primary {
+  background: var(--accent);
+  border-style: solid;
+  border-color: var(--accent);
+  color: var(--accent-ink);
+  box-shadow: 0 4px 16px var(--accent-a30);
 }
+.btn-newsession--primary:hover { color: var(--accent-ink); opacity: .88; }
 
-@media (max-width: 1180px) {
-    .profile-summary-grid {
-        grid-template-columns: repeat(2, minmax(0, 1fr));
-    }
+/* Admin: CSV tools */
+.csv__desc { margin: 0 0 16px; font-size: 12.5px; color: var(--faint); }
+.csv__btns { display: flex; gap: 10px; margin-bottom: 12px; }
+.csv-btn-ghost {
+  flex: 1;
+  text-align: center;
+  padding: 10px;
+  border-radius: 8px;
+  background: var(--field);
+  border: 1px solid var(--border-strong);
+  color: var(--text-2);
+  font: 600 13px var(--font-ui);
+  text-decoration: none;
+  cursor: pointer;
 }
-
-@media (max-width: 760px) {
-    .admin-cash-grid {
-        grid-template-columns: repeat(2, minmax(0, 1fr));
-    }
-
-    .debt-action-grid {
-        grid-template-columns: 1fr;
-    }
-
-    .debt-summary {
-        justify-content: flex-start;
-    }
+.csv-btn-ghost:hover { border-color: var(--border-hi); }
+.csv__drop {
+  display: block;
+  padding: 18px;
+  border: 1px dashed var(--border-strong);
+  border-radius: 9px;
+  text-align: center;
+  font-family: var(--font-mono);
+  font-size: 11.5px;
+  color: var(--faintest);
+  cursor: pointer;
 }
+.csv__drop.is-drag { border-color: var(--accent); color: var(--accent); }
 
-@media (max-width: 520px) {
-    .admin-cash-grid {
-        grid-template-columns: 1fr;
-    }
-}
-
-@media (max-width: 1100px) {
-    .payout-summary-grid {
-        grid-template-columns: repeat(2, minmax(0, 1fr));
-    }
-}
-
-@media (max-width: 640px) {
-    .payout-summary-grid {
-        grid-template-columns: 1fr;
-    }
-}
-
-@media (max-width: 980px) {
-    .site-shell {
-        width: min(100% - 24px, 100%);
-    }
-
-    .topbar {
-        align-items: flex-start;
-        flex-direction: column;
-        border-radius: 14px;
-    }
-
-    .two-col,
-    .three-col,
-    .four-col,
-    .leaderboard-layout,
-    .session-layout,
-    .admin-layout {
-        grid-template-columns: 1fr;
-    }
-
-    .chart-panel-large .chart-frame {
-        min-height: 360px;
-    }
-}
-
-@media (max-width: 640px) {
-    .site-shell {
-        padding-top: 16px;
-    }
-
-    .topbar,
-    .hero-card,
-    .panel,
-    .chart-modal-card {
-        border-radius: 14px;
-    }
-
-    .topbar,
-    .hero-card,
-    .panel,
-    .chart-modal-card {
-        padding-left: 16px;
-        padding-right: 16px;
-    }
-
-    h1 {
-        font-size: 1.95rem;
-    }
-
-    .nav-links {
-        width: 100%;
-    }
-
-    .nav-links a,
-    .ghost-button,
-    .secondary-button,
-    .primary-button {
-        min-height: 40px;
-    }
-
-    th,
-    td {
-        padding: 12px;
-    }
-
-    .chart-modal-card {
-        width: min(100vw - 20px, 100%);
-        margin: 10px auto;
-        max-height: calc(100vh - 20px);
-    }
-
-    .chart-modal-frame {
-        height: min(66vh, 680px);
-    }
-}
+/* Form shell (admin login) */
+.form-shell { display: grid; justify-content: center; padding-top: 40px; }
+.form-shell.narrow { grid-template-columns: minmax(320px, 480px); }
 
+/* ================================================================
+   RESPONSIVE
+   ================================================================ */
 @media (max-width: 860px) {
-    .leaderboard-header,
-    .leaderboard-controls {
-        align-items: start;
-        justify-items: start;
-    }
+  .split > .col-main, .split > .col-side { min-width: 100%; }
+  .admin-workspace__main, .admin-workspace__side { min-width: 100%; }
+  .admin-workspace { grid-template-columns: 1fr; }
+  .admin-workspace .col-main, .admin-workspace .col-side { min-width: 0; }
+  .admin-bottom-grid { grid-template-columns: 1fr; }
+}
 
-    .session-filter-form {
-        width: 100%;
-    }
+@media (max-width: 1180px) {
+  .player-stat-grid { grid-template-columns: repeat(4, minmax(0, 1fr)); }
+}
 
-    .session-filter-select {
-        width: 100%;
-    }
+@media (max-width: 640px) {
+  h1 { font-size: 28px; }
+  .hero { padding: 18px 0 14px; }
+  .topbar__season { display: none; }
+  .cash-strip { grid-template-columns: 1fr 1fr; }
+  .debt-action-grid { grid-template-columns: 1fr; }
+  .snapshot-grid { grid-template-columns: 1fr; }
+  .recon-metric-grid { grid-template-columns: 1fr; }
+  .player-stat-grid { grid-template-columns: repeat(2, minmax(0, 1fr)); }
+  .event-card--inline {
+    grid-template-columns: minmax(0, 1fr) auto;
+  }
+  .event-card--inline .tiny-text {
+    grid-column: 1 / -1;
+    justify-self: end;
+  }
+  .leaderboard-hero-stats {
+    display: grid;
+    grid-template-columns: repeat(2, minmax(0, 1fr));
+    width: 100%;
+  }
+  .leaderboard-hero-stats .stat,
+  .leaderboard-hero-stats .stat:last-child {
+    min-width: 0;
+  }
+}
+
+@media (max-width: 440px) {
+  .cash-strip { grid-template-columns: 1fr; }
 }
diff --git a/static/css/tokens.css b/static/css/tokens.css
new file mode 100644
index 0000000..00e4681
--- /dev/null
+++ b/static/css/tokens.css
@@ -0,0 +1,84 @@
+:root {
+  /* ---- surfaces (darkest → lightest) ---- */
+  --bg:            #0f0f12;
+  --surface:       #16161c;
+  --surface-raised:#1a1a20;
+  --surface-head:  #1c1c24;
+  --surface-sunk:  #131318;
+  --field:         #1f1f27;
+  --field-alt:     #20202a;
+
+  /* ---- borders / dividers ---- */
+  --border:        #26262f;
+  --border-strong: #2e2e38;
+  --border-hi:     #34343f;
+  --divider:       #1d1d25;
+  --slash:         #3a3a45;
+
+  /* ---- text ---- */
+  --text:          #f3f1f8;
+  --text-strong:   #ecebf1;
+  --text-body:     #e7e5ec;
+  --text-2:        #bcbac6;
+  --num:           #b0aeba;
+  --muted:         #8f8d99;
+  --muted-2:       #84828e;
+  --faint:         #7d7b87;
+  --faint-2:       #757380;
+  --faintest:      #66646f;
+  --faintest-2:    #57555f;
+
+  /* ---- accent (violet) ---- */
+  --accent:        #9b8cf0;
+  --accent-ink:    #12101e;
+  --accent-tint:   #1f1d2e;
+  --accent-chip:   #242137;
+  --accent-chip-bd:#383152;
+  --accent-a22:    rgba(155,140,240,0.22);
+  --accent-a30:    rgba(155,140,240,0.30);
+
+  /* ---- semantic: poker value scale ---- */
+  --pos:           #6fc093;
+  --pos-bar:       #41815a;
+  --pos-tint:      rgba(111,192,147,0.12);
+  --pos-tint-bd:   rgba(111,192,147,0.30);
+  --neg:           #e0758a;
+  --neg-bar:       #9e445a;
+  --neg-tint:      rgba(224,117,138,0.13);
+  --neg-tint-bd:   rgba(224,117,138,0.32);
+  --owes:          #e8829a;
+  --owes-tint:     rgba(232,130,154,0.15);
+  --owes-tint-bd:  rgba(232,130,154,0.40);
+
+  /* ---- semantic: cash-movement hues ---- */
+  --warn:          #e0b15c;
+  --warn-tint:     rgba(224,177,92,0.13);
+  --warn-tint-bd:  rgba(224,177,92,0.32);
+  --rolled:        #8f93c2;
+
+  /* ---- medals ---- */
+  --rank-1: var(--accent);
+  --rank-2: #c2bcd0;
+  --rank-3: #a78bb0;
+
+  /* ---- chart line palette (top-N order) ---- */
+  --line-1: #9b8cf0; --line-2: #6fc093; --line-3: #e0b15c;
+  --line-4: #cf6f86; --line-5: #8f93c2;
+
+  /* ---- spacing scale (4pt) ---- */
+  --s1:4px; --s2:8px; --s3:12px; --s4:16px; --s5:20px;
+  --s6:24px; --s8:32px; --s10:40px; --s12:48px;
+
+  /* ---- radii ---- */
+  --r-pill:6px; --r-sm:9px; --r-md:11px; --r-lg:14px;
+
+  /* ---- containers ---- */
+  --w-public:1320px;
+  --w-session:1440px;
+  --w-admin:1580px;
+  --gutter: clamp(16px, 4vw, 40px);
+
+  /* ---- Chart.js backward compat (read as raw strings by JS) ---- */
+  --text-muted: #bcbac6;
+  --line: #26262f;
+}
diff --git a/stats.py b/stats.py
index 8ae8c63..8514c0f 100644
--- a/stats.py
+++ b/stats.py
@@ -6,23 +6,27 @@ from dataclasses import dataclass, field
 from datetime import datetime
 from typing import Any
 
+from markupsafe import Markup
+
 from storage import EventRow
 
 PLAYER_PALETTE = [
+    "#9b8cf0",  # --line-1 violet
+    "#6fc093",  # --line-2 green
+    "#e0b15c",  # --line-3 gold
+    "#cf6f86",  # --line-4 pink
+    "#8f93c2",  # --line-5 lavender
+    "#7cb9e0",
     "#f4a261",
-    "#2a9d8f",
-    "#8d99ae",
-    "#e76f51",
-    "#7c6cf2",
+    "#a78bb0",
+    "#5cb8a0",
+    "#e58f3a",
     "#84cc16",
-    "#f59e0b",
-    "#10b981",
-    "#ef4444",
     "#06b6d4",
-    "#a855f7",
-    "#eab308",
 ]
 
+BREAK_EVEN_TOLERANCE_CENTS = 100
+
 
 @dataclass
 class SessionEntry:
@@ -41,76 +45,113 @@ class SessionEntry:
 
     @property
     def invested_cents(self) -> int:
+        # Poker performance: everything that entered play, including house fronts
+        # and prior unpaid winnings rolled into this session.
         return self.buy_in_cents + self.front_cents + self.rollover_in_cents
 
     @property
     def net_cents(self) -> int:
         return self.cash_out_cents - self.invested_cents
 
-    @property
-    def payout_due_cents(self) -> int:
-        return max(self.cash_out_cents - self.front_cents, 0)
-
-    @property
-    def payout_remaining_cents(self) -> int:
-        return max(self.payout_due_cents - self.paid_cents - self.rollover_out_cents, 0)
-
     @property
     def gross_payout_cents(self) -> int:
+        # Settlement: cashout is a gross chip count/result, not proof that cash
+        # was paid. Fronts are recovered from the cashout before the player has
+        # a claim against the house.
         return max(self.cash_out_cents - self.front_cents, 0)
 
     @property
-    def settled_cents(self) -> int:
-        return self.paid_cents + self.rollover_out_cents
-
-    @property
-    def current_due_cents(self) -> int:
-        return max(self.gross_payout_cents - self.settled_cents, 0)
-
-    @property
-    def player_owes_cents(self) -> int:
-        return max(self.raw_player_owes_cents - self.front_resolved_cents, 0)
-
-    @property
-    def raw_player_owes_cents(self) -> int:
-        return self.front_shortfall_cents + self.overpaid_front_cents
-
-    @property
-    def front_shortfall_cents(self) -> int:
+    def player_owes_gross_cents(self) -> int:
         return max(self.front_cents - self.cash_out_cents, 0)
 
+    @property
+    def settled_to_player_cents(self) -> int:
+        # Rollover-out resolves the source session's payable even though it is
+        # not real cash out. The destination session records it as rollover-in.
+        return self.paid_cents + self.rollover_out_cents
+
+    @property
+    def current_due_to_player_cents(self) -> int:
+        return max(self.gross_payout_cents - self.settled_to_player_cents, 0)
+
+    @property
+    def settled_to_house_cents(self) -> int:
+        # Front collections are real cash in. Writeoffs are not cash, but they
+        # do resolve the receivable.
+        return self.front_collected_cents + self.front_writeoff_cents
+
+    @property
+    def current_due_to_house_cents(self) -> int:
+        return max(self.player_owes_gross_cents - self.settled_to_house_cents, 0)
+
+    @property
+    def real_cash_in_cents(self) -> int:
+        return self.buy_in_cents + self.front_collected_cents
+
+    @property
+    def real_cash_out_cents(self) -> int:
+        return self.paid_cents
+
+    @property
+    def payout_due_cents(self) -> int:
+        return self.gross_payout_cents
+
+    @property
+    def payout_remaining_cents(self) -> int:
+        return self.current_due_to_player_cents
+
+    @property
+    def settled_cents(self) -> int:
+        return self.settled_to_player_cents
+
+    @property
+    def current_due_cents(self) -> int:
+        return self.current_due_to_player_cents
+
+    @property
+    def player_owes_cents(self) -> int:
+        return self.current_due_to_house_cents
+
+    @property
+    def raw_player_owes_cents(self) -> int:
+        return self.player_owes_gross_cents
+
+    @property
+    def front_shortfall_cents(self) -> int:
+        return self.player_owes_gross_cents
+
     @property
     def overpaid_front_cents(self) -> int:
-        return max(self.settled_cents - self.gross_payout_cents, 0)
+        return 0
 
     @property
     def front_writeoff_applied_cents(self) -> int:
         return min(
             self.front_writeoff_cents,
-            max(self.raw_player_owes_cents - self.front_collected_applied_cents, 0),
+            max(self.player_owes_gross_cents - self.front_collected_applied_cents, 0),
         )
 
     @property
     def front_collected_applied_cents(self) -> int:
-        return min(self.front_collected_cents, self.raw_player_owes_cents)
+        return min(self.front_collected_cents, self.player_owes_gross_cents)
 
     @property
     def front_resolved_cents(self) -> int:
-        return self.front_collected_applied_cents + self.front_writeoff_applied_cents
+        return min(self.settled_to_house_cents, self.player_owes_gross_cents)
 
     @property
     def payout_status(self) -> str:
-        if self.player_owes_cents > 0:
+        if self.current_due_to_house_cents > 0:
             return "owes"
-        if self.front_writeoff_applied_cents > 0:
+        if self.front_writeoff_cents > 0:
             return "written_off"
-        if self.front_collected_applied_cents > 0:
+        if self.front_collected_cents > 0:
             return "collected"
         if self.gross_payout_cents <= 0:
             return "none"
-        if self.current_due_cents <= 0:
+        if self.current_due_to_player_cents <= 0:
             return "paid"
-        if self.settled_cents <= 0:
+        if self.settled_to_player_cents <= 0:
             return "unpaid"
         return "partial"
 
@@ -149,11 +190,11 @@ class SessionSummary:
 
     @property
     def total_payout_due_cents(self) -> int:
-        return sum(entry.payout_due_cents for entry in self.entries)
+        return self.total_gross_payout_cents
 
     @property
     def total_remaining_cents(self) -> int:
-        return sum(entry.payout_remaining_cents for entry in self.entries)
+        return self.total_current_due_to_player_cents
 
     @property
     def total_net_cents(self) -> int:
@@ -172,32 +213,63 @@ class SessionSummary:
         return sum(entry.rollover_out_cents for entry in self.entries)
 
     @property
-    def total_current_due_cents(self) -> int:
-        return sum(entry.current_due_cents for entry in self.entries)
+    def total_settled_to_player_cents(self) -> int:
+        return sum(entry.settled_to_player_cents for entry in self.entries)
 
     @property
-    def total_player_owes_cents(self) -> int:
-        return sum(entry.player_owes_cents for entry in self.entries)
+    def total_current_due_to_player_cents(self) -> int:
+        return sum(entry.current_due_to_player_cents for entry in self.entries)
+
+    @property
+    def total_player_owes_gross_cents(self) -> int:
+        return sum(entry.player_owes_gross_cents for entry in self.entries)
+
+    @property
+    def total_settled_to_house_cents(self) -> int:
+        return sum(entry.settled_to_house_cents for entry in self.entries)
+
+    @property
+    def total_current_due_to_house_cents(self) -> int:
+        return sum(entry.current_due_to_house_cents for entry in self.entries)
 
     @property
     def total_front_writeoff_cents(self) -> int:
-        return sum(entry.front_writeoff_applied_cents for entry in self.entries)
+        return sum(entry.front_writeoff_cents for entry in self.entries)
 
     @property
     def total_front_collected_cents(self) -> int:
-        return sum(entry.front_collected_applied_cents for entry in self.entries)
+        return sum(entry.front_collected_cents for entry in self.entries)
 
     @property
     def total_cash_in_cents(self) -> int:
-        return sum(entry.buy_in_cents for entry in self.entries)
+        return sum(entry.real_cash_in_cents for entry in self.entries)
 
     @property
     def total_paid_out_cents(self) -> int:
-        return sum(entry.paid_cents for entry in self.entries)
+        return sum(entry.real_cash_out_cents for entry in self.entries)
+
+    @property
+    def total_current_due_cents(self) -> int:
+        return self.total_current_due_to_player_cents
+
+    @property
+    def total_player_owes_cents(self) -> int:
+        return self.total_current_due_to_house_cents
 
     @property
     def total_open_balance_cents(self) -> int:
-        return self.total_current_due_cents - self.total_player_owes_cents
+        return self.total_current_due_to_player_cents - self.total_current_due_to_house_cents
+
+    @property
+    def total_net_book_position_cents(self) -> int:
+        # Banker view: cash currently held, plus collectible receivables, minus
+        # unpaid player claims. Rollover-outs reduce payables but are not cash.
+        return (
+            self.total_cash_in_cents
+            - self.total_paid_out_cents
+            + self.total_current_due_to_house_cents
+            - self.total_current_due_to_player_cents
+        )
 
 
 @dataclass
@@ -251,9 +323,9 @@ def apply_rank_changes(
     return current_board
 
 
-def cents_to_dollars(cents: int) -> str:
+def cents_to_dollars(cents: int) -> Markup:
     value = cents / 100
-    return f"${value:,.2f}"
+    return Markup(f'<span class="currency-symbol">$</span>{value:,.2f}')
 
 
 def session_sort_key(session: SessionSummary) -> tuple[str, int, str, str]:
@@ -314,12 +386,22 @@ def color_for_name(name: str, names: list[str]) -> str:
     return PLAYER_PALETTE[index % len(PLAYER_PALETTE)]
 
 
+def net_result_bucket(value_cents: int) -> str:
+    if value_cents > BREAK_EVEN_TOLERANCE_CENTS:
+        return "win"
+    if value_cents < -BREAK_EVEN_TOLERANCE_CENTS:
+        return "loss"
+    return "even"
+
+
 def net_tone(value_cents: int) -> str:
-    if value_cents > 0:
-        return "#22c55e"
-    if value_cents < 0:
-        return "#ef4444"
-    return "#f59e0b"
+    bucket = net_result_bucket(value_cents)
+
+    if bucket == "win":
+        return "#6fc093"  # --pos
+    if bucket == "loss":
+        return "#e0758a"  # --neg
+    return "#84828e"      # --muted-2
 
 
 def build_session_summaries(events: list[EventRow]) -> list[SessionSummary]:
@@ -426,6 +508,7 @@ def summarize_player_runs(entries: list[SessionEntry]) -> dict[str, int | str |
 
     for entry in ordered_entries:
         net = entry.net_cents
+        bucket = net_result_bucket(net)
 
         if best_entry is None or net > best_entry.net_cents:
             best_entry = entry
@@ -433,10 +516,10 @@ def summarize_player_runs(entries: list[SessionEntry]) -> dict[str, int | str |
         if worst_entry is None or net < worst_entry.net_cents:
             worst_entry = entry
 
-        if net > 0:
+        if bucket == "win":
             current_run_wins += 1
             current_run_losses = 0
-        elif net < 0:
+        elif bucket == "loss":
             current_run_losses += 1
             current_run_wins = 0
         else:
@@ -450,13 +533,13 @@ def summarize_player_runs(entries: list[SessionEntry]) -> dict[str, int | str |
     current_loss_streak = 0
 
     for entry in reversed(ordered_entries):
-        net = entry.net_cents
+        bucket = net_result_bucket(entry.net_cents)
 
-        if net > 0:
+        if bucket == "win":
             if current_loss_streak > 0:
                 break
             current_win_streak += 1
-        elif net < 0:
+        elif bucket == "loss":
             if current_win_streak > 0:
                 break
             current_loss_streak += 1
@@ -485,8 +568,8 @@ def build_leaderboard(sessions: list[SessionSummary]) -> list[PlayerStats]:
     for player_name, entries in player_entries.items():
         nets = [entry.net_cents for entry in entries]
         run_summary = summarize_player_runs(entries)
-        wins = [value for value in nets if value > 0]
-        losses = [value for value in nets if value < 0]
+        wins = [value for value in nets if net_result_bucket(value) == "win"]
+        losses = [value for value in nets if net_result_bucket(value) == "loss"]
 
         sessions_played = len(entries)
         winning_sessions = len(wins)
@@ -502,12 +585,8 @@ def build_leaderboard(sessions: list[SessionSummary]) -> list[PlayerStats]:
 
         total_buy_in = sum(entry.buy_in_cents for entry in entries)
         total_front = sum(entry.front_cents for entry in entries)
-        total_front_collected = sum(
-            entry.front_collected_applied_cents for entry in entries
-        )
-        total_front_writeoff = sum(
-            entry.front_writeoff_applied_cents for entry in entries
-        )
+        total_front_collected = sum(entry.front_collected_cents for entry in entries)
+        total_front_writeoff = sum(entry.front_writeoff_cents for entry in entries)
         current_player_owes = sum(entry.player_owes_cents for entry in entries)
         total_rollover_in = sum(entry.rollover_in_cents for entry in entries)
         total_invested = sum(entry.invested_cents for entry in entries)
diff --git a/templates/admin_dashboard.html b/templates/admin_dashboard.html
index f4decf8..f88db58 100644
--- a/templates/admin_dashboard.html
+++ b/templates/admin_dashboard.html
@@ -1,342 +1,328 @@
 {% extends "base.html" %}
-{% block title %}Admin - Poker Portal{% endblock %}
+{% block title %}Admin · boker.club{% endblock %}
+{% block page_class %}page--admin{% endblock %}
 {% block content %}
-<section class="hero-card compact">
-    <div>
-        <p class="eyebrow">Admin</p>
-        <h1>Ledger controls</h1>
-        <p class="muted-text">Append new buy-ins, cash-outs, corrections, and note-only events to the audit trail.</p>
+
+<div class="hero" style="padding-bottom:12px;">
+    <div style="display:flex;align-items:center;gap:14px;flex-wrap:wrap;">
+        <p class="hero__kicker" style="margin:0;">Admin</p>
+        {% if open_sessions %}
+        <span class="live-badge">{{ open_sessions|length }} session{{ 's' if open_sessions|length != 1 else '' }} live</span>
+        {% endif %}
     </div>
-</section>
+    <h1 class="hero__title">Ledger controls</h1>
+    <p class="hero__sub">Append events to the audit trail. All history is permanent.</p>
+</div>
 
-<section class="grid two-col admin-layout">
-    <form class="panel form-card" method="post">
-        <p class="eyebrow">New event</p>
-        <h2>Add to the ledger</h2>
+<!-- Banker cash/book position. Cash tiles are real money only; rollovers only
+     affect receivables/payables through the session settlement formulas. -->
+<div class="cash-strip">
+    <div class="stat stat--rail" style="--rail:var(--accent);">
+        <span class="kicker">Cash in</span>
+        <div class="stat__val" style="color:var(--num)">{{ admin_totals.cash_in_cents | money }}</div>
+    </div>
+    <div class="stat stat--rail" style="--rail:var(--pos);">
+        <span class="kicker">Cash out</span>
+        <div class="stat__val" style="color:var(--pos)">{{ admin_totals.cash_out_cents | money }}</div>
+    </div>
+    <div class="stat stat--rail" style="--rail:var(--neg);">
+        <span class="kicker">House owes players</span>
+        <div class="stat__val {{ 'num-neg' if admin_totals.house_owes_players_cents > 0 else '' }}">{{ admin_totals.house_owes_players_cents | money }}</div>
+    </div>
+    <div class="stat stat--rail" style="--rail:var(--owes);">
+        <span class="kicker">Players owe house</span>
+        <div class="stat__val {{ 'num-neg' if admin_totals.players_owe_house_cents > 0 else '' }}">{{ admin_totals.players_owe_house_cents | money }}</div>
+    </div>
+    <div class="stat stat--rail" style="--rail:{{ 'var(--pos)' if admin_totals.net_book_position_cents == 0 else 'var(--warn)' }};">
+        <span class="kicker">Net book position</span>
+        <div class="stat__val {% if admin_totals.net_book_position_cents == 0 %}num-muted{% elif admin_totals.net_book_position_cents > 0 %}num-pos{% else %}num-neg{% endif %}">
+            {{ admin_totals.net_book_position_cents | money }}
+        </div>
+        <div class="stat__sub">cash in - cash out + receivables - payables</div>
+    </div>
+</div>
 
-        <label>
-            <span>Open session</span>
-            <select name="session_id" required>
-                <option value="">Select session</option>
-                {% for session in open_sessions %}
-                <option value="{{ session.session_id }}">
-                    {{ session_label(session) }}
-                </option>
-                {% endfor %}
-            </select>
-        </label>
+<!-- Two-column workspace -->
+<div class="admin-workspace">
 
-        <label>
-            <span>Player name</span>
-            <input list="player_names" type="text" name="player_name" placeholder="Peter Venkman" required>
-            <datalist id="player_names">
-                {% for player_name in player_names %}
-                    <option value="{{ player_name }}"></option>
-                {% endfor %}
-            </datalist>
-        </label>
+    <!-- LEFT: append form + recent sessions -->
+    <div class="col-main">
 
-        <label>
-            <span>Event type</span>
-            <select name="event_type" required>
-                <option value="buyin">Buy-in</option>
-                <option value="front">Front</option>
-                <option value="rollover_in">Rollover in</option>
-                <option value="cashout">Cash-out</option>
-                <option value="paid">Paid out</option>
-                <option value="rollover_out">Rollover out</option>
-                <option value="note">Note only</option>
-            </select>
-        </label>
-
-        <label>
-            <span>Amount</span>
-            <input type="number" step="0.01" name="amount" placeholder="5.00">
-        </label>
-
-        <label>
-            <span>Note</span>
-            <textarea name="note" rows="4" placeholder="Rebuy, fronted chips, correction, partial payout, e-transfer sent, cash paid, etc."></textarea>
-        </label>
-
-        <button class="primary-button" type="submit">Add event</button>
-    </form>
-
-    <section class="grid">
-        <form class="panel form-card" method="post" action="{{ url_for('admin_open_session') }}">
-            <p class="eyebrow">Session state</p>
-            <h2>Open a new session</h2>
-
-            <label>
-                <span>Session date</span>
-                <input type="date" name="session_date" required>
-            </label>
-
-            <div class="button-row">
-                <button class="primary-button" type="submit">Open session</button>
+        <form class="panel append" method="post" action="{{ url_for('admin_dashboard') }}">
+            <div class="panel__head">
+                <h2 class="panel__title">Append ledger event</h2>
+                <span class="panel__tag">fast entry</span>
+            </div>
+            <div class="append__body">
+                <div class="append__grid">
+                    <label class="field">
+                        <span class="field__label">Session</span>
+                        <select class="control" name="session_id" required>
+                            <option value="">Select session</option>
+                            {% for s in open_sessions %}
+                            <option value="{{ s.session_id }}" {{ 'selected' if append_form.session_id == s.session_id else '' }}>
+                                {{ session_label(s) }}{{ ' (live)' if s.status == 'open' else '' }}
+                            </option>
+                            {% endfor %}
+                        </select>
+                    </label>
+                    <label class="field">
+                        <span class="field__label">Player</span>
+                        <input class="control" list="player_names_list" type="text" name="player_name" placeholder="Player name" value="{{ append_form.player_name }}" required>
+                        <datalist id="player_names_list">
+                            {% for name in player_names %}<option value="{{ name }}"></option>{% endfor %}
+                        </datalist>
+                    </label>
+                    <label class="field">
+                        <span class="field__label">Event type</span>
+                        <select class="control" name="event_type" required id="eventTypeSelect">
+                            {% for value, label, color in event_types %}
+                            <option value="{{ value }}" data-color="{{ color }}" data-label="{{ label }}" {{ 'selected' if append_form.event_type == value else '' }}>{{ label }}</option>
+                            {% endfor %}
+                        </select>
+                    </label>
+                    <label class="field">
+                        <span class="field__label">Amount</span>
+                        <span class="control control--money">
+                            <span class="control__prefix">$</span>
+                            <input name="amount" inputmode="decimal" placeholder="0" autofocus>
+                        </span>
+                    </label>
+                </div>
+                <label class="field append__note">
+                    <span class="field__label">Note <span class="field__opt">(optional)</span></span>
+                    <input class="control" name="note" placeholder="e.g. fronted buy-in, settle next week">
+                </label>
+                <div class="append__footer">
+                    <button type="submit" class="btn btn--primary">Append event</button>
+                    <span class="append__preview">Will record as
+                        <span class="evtag-pill" id="eventTypePreview" style="color:{{ event_type_colors[append_form.event_type] }}">{{ event_type_labels[append_form.event_type] | upper }}</span>
+                    </span>
+                </div>
             </div>
         </form>
 
-        <section class="panel form-card">
-            <div class="panel-header">
-                <div>
-                    <p class="eyebrow">Tools</p>
-                    <h2>Audit CSV</h2>
-                </div>
-            </div>
+    </div><!-- /.col-main -->
 
-            <div class="admin-tools-grid">
-                <div class="helper-box">
-                    <p class="muted-text">
-                        Export the current audit trail or import a replacement CSV. Import creates a timestamped backup first.
-                    </p>
-                    <div class="button-row">
-                        <a class="primary-button" href="{{ url_for('admin_export_csv') }}">Export CSV</a>
-                    </div>
-                </div>
+    <!-- RIGHT: session controls + CSV + raw events feed -->
+    <div class="col-side">
 
-                <form method="post" action="{{ url_for('admin_import_csv') }}" enctype="multipart/form-data" class="helper-box import-form">
-                    <label for="csv_file">
-                        <span>Import replacement CSV</span>
-                    </label>
-                    <input id="csv_file" name="csv_file" type="file" accept=".csv,text/csv" required>
-                    <div class="button-row">
-                        <button
-                            class="secondary-button"
-                            type="submit"
-                            onclick="return confirm('Replace the current audit CSV? A backup will be created first.');"
-                        >
-                            Import CSV
-                        </button>
-                    </div>
+        <div class="panel panel--pad">
+            <h2 class="panel__title panel__title--mb">Session controls</h2>
+
+            {% if live_session %}
+            <div class="livecard">
+                <div class="livecard__head">
+                    <span class="dot dot--live"></span>
+                    <span class="livecard__name">{{ session_label(live_session) }}</span>
+                    <span class="livecard__no">{{ live_session_no }}</span>
+                </div>
+                <div class="livecard__metrics">
+                    <div><div class="micro">In play</div><div class="mono16">{{ live_session.total_invested_cents | money }}</div></div>
+                    <div><div class="micro">Seated</div><div class="mono16">{{ live_session.entries|length }}</div></div>
+                    <div><div class="micro">Open</div><div class="mono16 mono16--warn">{{ live_unresolved_count }}</div></div>
+                </div>
+                <form method="post" action="{{ url_for('admin_session_state') }}">
+                    <input type="hidden" name="session_id" value="{{ live_session.session_id }}">
+                    <button class="btn-close" type="submit" name="state" value="closed">Close &amp; settle session</button>
                 </form>
             </div>
-        </section>
+            {% endif %}
 
-    </section>
-</section>
+            <form method="post" action="{{ url_for('admin_open_session') }}">
+                <input type="hidden" name="session_date" value="{{ admin_today }}">
+                <button class="btn-newsession {{ 'btn-newsession--primary' if not live_session else '' }}" type="submit">+ Open new session</button>
+            </form>
+        </div>
 
-<section class="panel debt-panel">
-    <div class="panel-header">
+        <div class="panel panel--pad">
+            <h2 class="panel__title" style="margin:0 0 4px">Import / export</h2>
+            <p class="csv__desc">Back up or migrate the raw event ledger.</p>
+            <form method="post" action="{{ url_for('admin_import_csv') }}" enctype="multipart/form-data" class="import-form">
+                <div class="csv__btns">
+                    <a class="csv-btn-ghost" href="{{ url_for('admin_export_csv') }}">&darr; Export CSV</a>
+                    <label class="csv-btn-ghost" for="csvTopImport">&uarr; Import CSV</label>
+                </div>
+                <input id="csvTopImport" type="file" accept=".csv,text/csv" name="csv_file" hidden onchange="this.form.submit()">
+                <label class="csv__drop" id="csvDrop" for="csvTopImport">Drop ledger.csv to import</label>
+            </form>
+        </div>
+
+    </div><!-- /.col-side -->
+
+</div><!-- /.admin-workspace -->
+
+<div class="admin-bottom-grid">
+    <div class="panel">
+        <div class="panel__head">
+            <div>
+                <span class="kicker" style="margin:0;">Recent sessions</span>
+                <h2 class="panel__title">Current totals</h2>
+            </div>
+        </div>
+        <div class="table-wrap">
+            <table>
+                <thead>
+                    <tr>
+                        <th>Session</th>
+                        <th>Players</th>
+                        <th>Cash in</th>
+                        <th>Cash out</th>
+                        <th>House owes</th>
+                        <th>Players owe house</th>
+                        <th>Book position</th>
+                        <th>Status</th>
+                        <th>Action</th>
+                    </tr>
+                </thead>
+                <tbody>
+                    {% for s in recent_sessions %}
+                    <tr>
+                        <td><a href="{{ url_for('session_detail', session_id=s.session_id) }}">{{ session_label(s) }}</a></td>
+                        <td style="font-family:var(--font-mono);color:var(--num)">{{ s.entries|length }}</td>
+                        <td style="font-family:var(--font-mono);color:var(--num)">{{ s.total_cash_in_cents | money }}</td>
+                        <td style="font-family:var(--font-mono);color:var(--pos)">{{ s.total_paid_out_cents | money }}</td>
+                        <td class="{{ 'negative' if s.total_current_due_to_player_cents > 0 else '' }}" style="font-family:var(--font-mono)">{{ s.total_current_due_to_player_cents | money }}</td>
+                        <td class="{{ 'negative' if s.total_current_due_to_house_cents > 0 else '' }}" style="font-family:var(--font-mono)">{{ s.total_current_due_to_house_cents | money }}</td>
+                        <td class="{% if s.total_net_book_position_cents > 0 %}positive{% elif s.total_net_book_position_cents < 0 %}negative{% endif %}" style="font-family:var(--font-mono)">{{ s.total_net_book_position_cents | money }}</td>
+                        <td><span class="status-badge status-{{ s.status }}">{{ s.status }}</span></td>
+                        <td>
+                            <form method="post" action="{{ url_for('admin_session_state') }}" class="inline-action-form">
+                                <input type="hidden" name="session_id" value="{{ s.session_id }}">
+                                {% if s.status == "open" %}
+                                <button class="table-action-button" type="submit" name="state" value="closed">Close</button>
+                                {% else %}
+                                <button class="table-action-button" type="submit" name="state" value="open">Reopen</button>
+                                {% endif %}
+                            </form>
+                        </td>
+                    </tr>
+                    {% else %}
+                    <tr><td colspan="9">No sessions yet.</td></tr>
+                    {% endfor %}
+                </tbody>
+            </table>
+        </div>
+    </div>
+
+    <div class="panel">
+        <div class="panel__head">
+            <div>
+                <span class="kicker" style="margin:0;">Recent events</span>
+                <h2 class="panel__title">Ledger feed</h2>
+            </div>
+            <span class="badge badge--closed" style="font-size:9.5px;">append-only</span>
+        </div>
+        <div class="event-feed feed feed--inline">
+            {% for event in recent_events %}
+            <div class="event-card event-card--inline">
+                <div class="event-card-top">
+                    <strong>{{ event.player_name or "Session" }}</strong>
+                    <span class="pill pill-{{ event.event_type }}">{{ event.event_type | replace('_', ' ') }}</span>
+                    {% if event.note %}<span class="event-note">{{ event.note }}</span>{% endif %}
+                </div>
+                <p class="event-amount">{{ event.amount_cents | money }}</p>
+                <p class="tiny-text">{{ event.session_date | pretty_date }}</p>
+            </div>
+            {% else %}
+            <p class="muted-text" style="padding:20px;">No recent events.</p>
+            {% endfor %}
+        </div>
+    </div>
+</div>
+
+<script>
+const eventTypeSelect = document.getElementById('eventTypeSelect');
+const eventTypePreview = document.getElementById('eventTypePreview');
+eventTypeSelect?.addEventListener('change', () => {
+    const option = eventTypeSelect.selectedOptions[0];
+    if (!option || !eventTypePreview) return;
+    eventTypePreview.style.color = option.dataset.color || 'var(--muted)';
+    eventTypePreview.textContent = (option.dataset.label || option.value).toUpperCase();
+});
+
+const csvDrop = document.getElementById('csvDrop');
+const csvInput = document.getElementById('csvTopImport');
+csvDrop?.addEventListener('dragover', (event) => {
+    event.preventDefault();
+    csvDrop.classList.add('is-drag');
+});
+csvDrop?.addEventListener('dragleave', () => csvDrop.classList.remove('is-drag'));
+csvDrop?.addEventListener('drop', (event) => {
+    event.preventDefault();
+    csvDrop.classList.remove('is-drag');
+    if (!csvInput || !event.dataTransfer?.files?.length) return;
+    csvInput.files = event.dataTransfer.files;
+    csvInput.form?.submit();
+});
+</script>
+
+<!-- Front debt resolution -->
+{% if debt_entries %}
+<div class="panel debt-panel" style="margin-top:20px;">
+    <div class="panel__head">
         <div>
-            <p class="eyebrow">Front debt</p>
-            <h2>Debt resolution</h2>
+            <span class="kicker" style="margin:0;">Front receivables</span>
+            <h2 class="panel__title">Debt resolution</h2>
         </div>
         <div class="debt-summary">
-            <span>Open {{ admin_totals.players_owe_cents | money }}</span>
-            <span>Collected {{ admin_totals.collected_cents | money }}</span>
-            <span>Written off {{ admin_totals.written_off_cents | money }}</span>
+            <span class="badge badge--owes">Open {{ admin_totals.players_owe_house_cents | money }}</span>
+            <span class="badge badge--paid">Repaid {{ admin_totals.collected_cents | money }}</span>
+            <span class="badge badge--written_off">Written off {{ admin_totals.written_off_cents | money }}</span>
         </div>
     </div>
-
-    {% if debt_entries %}
-    <div class="debt-action-grid">
-        <form class="form-card compact-form" method="post" action="{{ url_for('admin_collect_front') }}">
+    <div class="debt-action-grid" style="padding:20px;">
+        <form class="form-card" style="padding:0;background:transparent;" method="post" action="{{ url_for('admin_collect_front') }}">
             <h3>Collect debt</h3>
-
             <label>
                 <span>Outstanding debt</span>
                 <select name="debt_key" required>
                     <option value="">Select debt</option>
                     {% for item in debt_entries %}
-                        {% set session = item.session %}
-                        {% set entry = item.entry %}
-                        <option value="{{ session.session_id }}||{{ entry.player_name }}">
-                            {{ entry.player_name }} · {{ session_label(session) }} · owes {{ entry.player_owes_cents | money }}
-                        </option>
+                    {% set s = item.session %}{% set e = item.entry %}
+                    <option value="{{ s.session_id }}||{{ e.player_name }}">
+                        {{ e.player_name }} · {{ session_label(s) }} · owes {{ e.player_owes_cents | money }}
+                    </option>
                     {% endfor %}
                 </select>
             </label>
-
             <label>
                 <span>Amount collected</span>
-                <input type="number" step="0.01" name="amount" placeholder="5.00" required>
+                <input type="number" step="0.01" name="amount" placeholder="0.00" required>
             </label>
-
             <label>
                 <span>Note</span>
-                <textarea name="note" rows="3" placeholder="E-transfer received, cash collected, etc."></textarea>
+                <textarea name="note" rows="2" placeholder="E-transfer received, cash, etc."></textarea>
             </label>
-
-            <div class="button-row">
-                <button class="primary-button" type="submit">Mark collected</button>
-            </div>
+            <button class="primary-button" type="submit">Mark collected</button>
         </form>
 
-        <form class="form-card compact-form" method="post" action="{{ url_for('admin_write_off_front') }}">
+        <form class="form-card" style="padding:0;background:transparent;" method="post" action="{{ url_for('admin_write_off_front') }}">
             <h3>Write off debt</h3>
-
             <label>
                 <span>Outstanding debt</span>
                 <select name="debt_key" required>
                     <option value="">Select debt</option>
                     {% for item in debt_entries %}
-                        {% set session = item.session %}
-                        {% set entry = item.entry %}
-                        <option value="{{ session.session_id }}||{{ entry.player_name }}">
-                            {{ entry.player_name }} · {{ session_label(session) }} · owes {{ entry.player_owes_cents | money }}
-                        </option>
+                    {% set s = item.session %}{% set e = item.entry %}
+                    <option value="{{ s.session_id }}||{{ e.player_name }}">
+                        {{ e.player_name }} · {{ session_label(s) }} · owes {{ e.player_owes_cents | money }}
+                    </option>
                     {% endfor %}
                 </select>
             </label>
-
             <label>
                 <span>Amount to write off</span>
-                <input type="number" step="0.01" name="amount" placeholder="5.00" required>
+                <input type="number" step="0.01" name="amount" placeholder="0.00" required>
             </label>
-
             <label>
                 <span>Note</span>
-                <textarea name="note" rows="3" placeholder="Won't be collected."></textarea>
+                <textarea name="note" rows="2" placeholder="Won't be collected."></textarea>
             </label>
-
-            <div class="button-row">
-                <button class="secondary-button" type="submit">Write off front</button>
-            </div>
+            <button class="secondary-button" type="submit">Write off front</button>
         </form>
     </div>
-    {% else %}
-    <p class="muted-text">No outstanding front debt.</p>
-    {% endif %}
-</section>
+</div>
+{% endif %}
 
-<section class="grid admin-cash-grid">
-    <article class="panel stat-card">
-        <span>Cash in</span>
-        <strong>{{ admin_totals.cash_in_cents | money }}</strong>
-    </article>
-
-    <article class="panel stat-card">
-        <span>Paid out</span>
-        <strong>{{ admin_totals.paid_out_cents | money }}</strong>
-    </article>
-
-    <article class="panel stat-card">
-        <span>Still owed</span>
-        <strong class="{{ 'negative' if admin_totals.still_owed_cents > 0 else 'positive' }}">
-            {{ admin_totals.still_owed_cents | money }}
-        </strong>
-    </article>
-
-    <article class="panel stat-card">
-        <span>Players owe</span>
-        <strong class="{{ 'negative' if admin_totals.players_owe_cents > 0 else '' }}">
-            {{ admin_totals.players_owe_cents | money }}
-        </strong>
-    </article>
-
-    <article class="panel stat-card">
-        <span>Written off</span>
-        <strong class="{{ 'negative' if admin_totals.written_off_cents > 0 else '' }}">
-            {{ admin_totals.written_off_cents | money }}
-        </strong>
-    </article>
-
-    <article class="panel stat-card">
-        <span>Open balance</span>
-        <strong class="{% if admin_totals.open_balance_cents > 0 %}negative{% elif admin_totals.open_balance_cents < 0 %}positive{% endif %}">
-            {{ admin_totals.open_balance_cents | money }}
-        </strong>
-    </article>
-</section>
-
-<section class="panel">
-    <div class="panel-header">
-        <div>
-            <p class="eyebrow">Recent sessions</p>
-            <h2>Current totals</h2>
-        </div>
-    </div>
-    <div class="table-wrap small-table">
-        <table>
-            <thead>
-                <tr>
-                    <th>Session</th>
-                    <th>Players</th>
-                    <th>Cash in</th>
-                    <th>Paid out</th>
-                    <th>Still owed</th>
-                    <th>Players owe</th>
-                    <th>Collected</th>
-                    <th>Written off</th>
-                    <th>Open balance</th>
-                    <th>Status</th>
-                    <th>Action</th>
-                </tr>
-            </thead>
-            <tbody>
-                {% for session in recent_sessions %}
-                <tr>
-                    <td>
-                        <a href="{{ url_for('session_detail', session_id=session.session_id) }}">
-                            {{ session_label(session) }}
-                        </a>
-                    </td>
-                    <td>{{ session.entries|length }}</td>
-                    <td>{{ session.total_cash_in_cents | money }}</td>
-                    <td>{{ session.total_paid_out_cents | money }}</td>
-                    <td class="{{ 'negative' if session.total_current_due_cents > 0 else 'positive' }}">
-                        {{ session.total_current_due_cents | money }}
-                    </td>
-                    <td class="{{ 'negative' if session.total_player_owes_cents > 0 else '' }}">
-                        {{ session.total_player_owes_cents | money }}
-                    </td>
-                    <td class="{{ 'positive' if session.total_front_collected_cents > 0 else '' }}">
-                        {{ session.total_front_collected_cents | money }}
-                    </td>
-                    <td class="{{ 'negative' if session.total_front_writeoff_cents > 0 else '' }}">
-                        {{ session.total_front_writeoff_cents | money }}
-                    </td>
-                    <td class="{% if session.total_open_balance_cents > 0 %}negative{% elif session.total_open_balance_cents < 0 %}positive{% endif %}">
-                        {{ session.total_open_balance_cents | money }}
-                    </td>
-                    <td>
-                        <span class="status-badge status-{{ session.status }}">
-                            {{ session.status }}
-                        </span>
-                    </td>
-                    <td>
-                        <form method="post" action="{{ url_for('admin_session_state') }}" class="inline-action-form">
-                            <input type="hidden" name="session_id" value="{{ session.session_id }}">
-                            {% if session.status == "open" %}
-                                <button class="table-action-button" type="submit" name="state" value="closed">Close</button>
-                            {% else %}
-                                <button class="table-action-button" type="submit" name="state" value="open">Reopen</button>
-                            {% endif %}
-                        </form>
-                    </td>
-                </tr>
-                {% else %}
-                <tr>
-                    <td colspan="11">No sessions yet.</td>
-                </tr>
-                {% endfor %}
-            </tbody>
-        </table>
-    </div>
-</section>
-
-<section class="panel">
-    <div class="panel-header">
-        <div>
-            <p class="eyebrow">Recent raw events</p>
-            <h2>Ledger feed</h2>
-        </div>
-    </div>
-    <div class="event-feed condensed">
-        {% for event in recent_events %}
-        <article class="event-card">
-            <div class="event-card-top">
-                <strong>{{ event.player_name }}</strong>
-                <span class="pill pill-{{ event.event_type }}">{{ event.event_type }}</span>
-            </div>
-            <p class="event-amount">{{ event.amount_cents | money }}</p>
-            <p class="muted-text small">{{ event.session_date | pretty_date }}</p>
-            {% if event.note %}<p class="muted-text small">{{ event.note }}</p>{% endif %}
-        </article>
-        {% else %}
-        <p class="muted-text">No recent events.</p>
-        {% endfor %}
-    </div>
-</section>
 {% endblock %}
diff --git a/templates/admin_login.html b/templates/admin_login.html
index 4479d22..59ba01f 100644
--- a/templates/admin_login.html
+++ b/templates/admin_login.html
@@ -1,23 +1,24 @@
 {% extends "base.html" %}
-{% block title %}Admin Login · Poker Portal{% endblock %}
+{% block title %}Admin Login · boker.club{% endblock %}
 {% block content %}
-<section class="form-shell narrow">
-    <form class="panel form-card" method="post">
-        <p class="eyebrow">Restricted access</p>
-        <h1>Admin login</h1>
-        <p class="muted-text">Only the ledger manager needs credentials. All stats pages stay public.</p>
 
+<div class="form-shell narrow">
+    <form class="panel form-card" method="post">
+        <div>
+            <p class="eyebrow">Restricted access</p>
+            <h1 style="font-size:28px;margin-bottom:8px;">Admin login</h1>
+            <p class="muted-text" style="margin-bottom:8px;">Only boker.club manager needs credentials. All stats pages stay public.</p>
+        </div>
         <label>
             <span>Username</span>
-            <input type="text" name="username" required>
+            <input type="text" name="username" autocomplete="username" required>
         </label>
-
         <label>
             <span>Password</span>
-            <input type="password" name="password" required>
+            <input type="password" name="password" autocomplete="current-password" required>
         </label>
-
         <button class="primary-button" type="submit">Login</button>
     </form>
-</section>
+</div>
+
 {% endblock %}
diff --git a/templates/base.html b/templates/base.html
index fc38395..dbe08e0 100644
--- a/templates/base.html
+++ b/templates/base.html
@@ -3,47 +3,50 @@
 <head>
     <meta charset="utf-8">
     <meta name="viewport" content="width=device-width, initial-scale=1">
-    <title>{% block title %}Poker Portal{% endblock %}</title>
-    <link rel="preconnect" href="https://fonts.googleapis.com">
-    <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
-    <link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700;800&display=swap" rel="stylesheet">
+    <title>{% block title %}boker.club{% endblock %}</title>
+    <link rel="stylesheet" href="{{ url_for('static', filename='css/tokens.css') }}">
     <link rel="stylesheet" href="{{ url_for('static', filename='css/style.css') }}">
     <script src="https://cdn.jsdelivr.net/npm/chart.js"></script>
 </head>
 <body>
-    <div class="site-shell">
-        <header class="topbar">
-            <div>
-                <a class="brand" href="{{ url_for('leaderboard') }}">Poker Portal</a>
-                <p class="brand-subtitle">Low-stakes hold'em ledger and session tracker</p>
-            </div>
-            <nav class="nav-links">
-                <a href="{{ url_for('leaderboard') }}">Leaderboard</a>
-                <a href="{{ url_for('sessions') }}">Sessions</a>
+    <header class="topbar">
+        <div class="topbar__inner">
+            <a class="brand" href="{{ url_for('leaderboard') }}">
+                <span class="brand__mark"></span>
+                <span class="brand__name">boker.club</span>
+            </a>
+            <nav class="mainnav">
+                <a class="navlink {{ 'is-active' if request.endpoint == 'leaderboard' }}" href="{{ url_for('leaderboard') }}">Leaderboard</a>
+                <a class="navlink {{ 'is-active' if request.endpoint in ('sessions', 'session_detail') }}" href="{{ url_for('sessions') }}">Sessions</a>
                 {% if is_admin %}
-                    <a href="{{ url_for('admin_dashboard') }}">Admin</a>
-                    <form method="post" action="{{ url_for('admin_logout') }}">
-                        <button class="ghost-button" type="submit">Logout</button>
-                    </form>
+                    <a class="navlink {{ 'is-active' if request.endpoint == 'admin_dashboard' }}" href="{{ url_for('admin_dashboard') }}">Admin</a>
                 {% else %}
-                    <a href="{{ url_for('admin_login') }}">Admin Login</a>
+                    <a class="navlink {{ 'is-active' if request.endpoint == 'admin_login' }}" href="{{ url_for('admin_login') }}">Admin</a>
                 {% endif %}
             </nav>
-        </header>
+            <span class="topbar__spacer"></span>
+            {% if is_admin %}
+                <div class="topbar__admin-actions">
+                    <form method="post" action="{{ url_for('admin_logout') }}" style="margin:0">
+                        <button class="btn btn--ghost btn--sm" type="submit">Logout</button>
+                    </form>
+                </div>
+            {% endif %}
+        </div>
+    </header>
 
+    <main class="page {% block page_class %}page--public{% endblock %}">
         {% with messages = get_flashed_messages(with_categories=true) %}
             {% if messages %}
-                <section class="flash-stack">
+                <div class="flash-stack">
                     {% for category, message in messages %}
                         <div class="flash {{ category }}">{{ message }}</div>
                     {% endfor %}
-                </section>
+                </div>
             {% endif %}
         {% endwith %}
 
-        <main class="page-content">
-            {% block content %}{% endblock %}
-        </main>
-    </div>
+        {% block content %}{% endblock %}
+    </main>
 </body>
 </html>
diff --git a/templates/leaderboard.html b/templates/leaderboard.html
index 1bf7cc9..d7951b2 100644
--- a/templates/leaderboard.html
+++ b/templates/leaderboard.html
@@ -1,596 +1,348 @@
 {% extends "base.html" %}
-{% block title %}Leaderboard · Poker Portal{% endblock %}
+{% block title %}Leaderboard · boker.club{% endblock %}
 {% block content %}
-<section class="hero-card">
-    <div>
-        <p class="eyebrow">All-time results</p>
-        <h1>Leaderboard</h1>
-        <p class="muted-text">Track who is up, who is chasing, and how everyone has moved across {{ session_count }} recorded sessions{% if selected_session_date %} through {{ selected_session_label }}{% endif %}.</p>
-    </div>
-</section>
 
-<section class="grid two-col leaderboard-layout">
-    <div class="panel chart-panel chart-panel-large">
-        <div class="panel-header panel-header-with-actions">
-            <div>
-                <p class="eyebrow">Trend</p>
-                <h2>Cumulative profit over time</h2>
-            </div>
-            <div class="panel-actions">
-                <button class="ghost-button compact-button" type="button" id="resetLeaderboardZoom" hidden>Reset zoom</button>
-                <button class="secondary-button" type="button" id="expandLeaderboardChart">Expand chart</button>
-            </div>
+<div class="hero" style="display:flex;flex-wrap:wrap;gap:var(--s6);align-items:flex-start;justify-content:space-between;">
+    <div>
+        <p class="hero__kicker">All-time results</p>
+        <h1 class="hero__title">Leaderboard</h1>
+        <p class="hero__sub">{{ session_count }} session{{ 's' if session_count != 1 else '' }}{% if selected_session_date %} through {{ selected_session_label }}{% endif %}</p>
+    </div>
+    <div class="leaderboard-hero-stats">
+        <div class="stat">
+            <span class="kicker">Cash paid out</span>
+            <div class="stat__val" style="color:var(--accent)">{{ cash_paid_out_cents | money }}</div>
         </div>
-        <div class="chart-frame chart-frame-interactive" id="leaderboardChartFrame" role="button" tabindex="0" aria-label="Expand cumulative profit chart">
+        <div class="stat">
+            <span class="kicker">Sessions</span>
+            <div class="stat__val" style="color:var(--text-strong)">{{ session_count }}{% if total_session_count != session_count %}<span style="color:var(--faintest);font-size:16px"> / {{ total_session_count }}</span>{% endif %}</div>
+        </div>
+        <div class="stat">
+            <span class="kicker">Players</span>
+            <div class="stat__val" style="color:var(--text-strong)">{{ all_count }}</div>
+        </div>
+    </div>
+</div>
+
+<div class="panel stack" style="gap:0;margin-bottom:20px;">
+    <div class="panel__head">
+        <div>
+            <span class="kicker">Trend</span>
+            <h2 class="panel__title">Cumulative profit</h2>
+        </div>
+        <button class="btn btn--ghost btn--sm" type="button" id="expandLeaderboardChart">Expand</button>
+    </div>
+    <div class="chart-wrap">
+        <div class="chart-frame chart-frame--tall">
             <canvas id="leaderboardChart"></canvas>
         </div>
     </div>
+</div>
 
-    <div class="panel stat-panel">
-        <p class="eyebrow">Quick read</p>
-        <h2>Table snapshot</h2>
-        <div class="stat-list">
-            <div class="stat-row"><span>Players tracked</span><strong>{{ leaderboard|length }}</strong></div>
-            <div class="stat-row"><span>Sessions tracked</span><strong>{{ session_count }}{% if total_session_count != session_count %} / {{ total_session_count }}{% endif %}</strong></div>
-            <div class="stat-row"><span>Through session</span><strong>{{ selected_session_label }}</strong></div>
-            <div class="stat-row"><span>Best player</span><strong>{% if leaderboard %}{{ leaderboard[0].player_name }}{% else %}—{% endif %}</strong></div>
-            <div class="stat-row"><span>Worst player</span><strong>{% if leaderboard %}{{ leaderboard[-1].player_name }}{% else %}—{% endif %}</strong></div>
+<div class="toolbar">
+    <div class="toolbar__left">
+        <div class="segmented">
+            <button class="seg {{ 'is-on' if mode=='eligible' }}" data-mode="eligible">
+                Eligible <span class="seg__count">{{ eligible_count }}</span>
+            </button>
+            <button class="seg {{ 'is-on' if mode=='all' }}" data-mode="all">
+                All players <span class="seg__count">{{ all_count }}</span>
+            </button>
+            <button class="seg {{ 'is-on' if mode=='recent' }}" data-mode="recent">
+                Recent <span class="seg__count">5 sess</span>
+            </button>
         </div>
+        <p class="toolbar__hint">
+            {% if mode == 'eligible' %}
+                {{ eligible_min_sessions }}+ sessions required. Keeps one-off guests from skewing standings.
+            {% elif mode == 'all' %}
+                Everyone who's sat down — rankings can swing on tiny samples.
+            {% else %}
+                Form guide — aggregated over the last 5 sessions only.
+            {% endif %}
+        </p>
     </div>
-</section>
-
-<section class="panel">
-    <div class="panel-header leaderboard-header">
-        <div>
-            <p class="eyebrow">Standings</p>
-            <h2>All-time leaderboard</h2>
-            <p class="muted-text small">Cash in / paid out reflect real money movement. Net / ROI reflect poker results.</p>
-        </div>
-        <div class="leaderboard-controls">
-            <form method="get" class="session-filter-form">
-                <label for="through_session" class="session-filter-label">Through session</label>
-                <select id="through_session" name="through_session" class="session-filter-select" onchange="this.form.submit()">
-                    <option value="" {% if not selected_session_id %}selected{% endif %}>Latest session</option>
-                    {% for session in available_sessions %}
-                    <option value="{{ session.session_id }}" {% if selected_session_id == session.session_id %}selected{% endif %}>{{ session_label(session) }}</option>
-                    {% endfor %}
-                </select>
-                {% if selected_session_date %}
-                <a class="ghost-button compact-button" href="{{ url_for('leaderboard') }}">Reset</a>
-                {% endif %}
-            </form>
-            <p class="muted-text small">Click any column to sort.</p>
-        </div>
-    </div>
-
-    <div class="table-wrap">
-        <table id="leaderboardTable" class="sortable-table" data-sort-key="net" data-sort-direction="desc">
-            <thead>
-                <tr>
-                    <th><button type="button" class="sort-button" data-sort-key="rank" data-sort-type="number" data-initial-direction="asc">Rank <span class="sort-indicator">↕</span></button></th>
-                    <th><button type="button" class="sort-button" data-sort-key="rankdelta" data-sort-type="number" data-initial-direction="desc">Rank Δ <span class="sort-indicator">↕</span></button></th>
-                    <th><button type="button" class="sort-button" data-sort-key="player" data-sort-type="string" data-initial-direction="asc">Player <span class="sort-indicator">↕</span></button></th>
-                    <th><button type="button" class="sort-button" data-sort-key="cashin" data-sort-type="number" data-initial-direction="desc">Cash in <span class="sort-indicator">↕</span></button></th>
-                    <th><button type="button" class="sort-button" data-sort-key="paidout" data-sort-type="number" data-initial-direction="desc">Paid out <span class="sort-indicator">↕</span></button></th>
-                    <th><button type="button" class="sort-button is-active" data-sort-key="net" data-sort-type="number" data-initial-direction="desc">Net <span class="sort-indicator">↓</span></button></th>
-                    <th><button type="button" class="sort-button" data-sort-key="winpct" data-sort-type="number" data-initial-direction="desc">Win % <span class="sort-indicator">↕</span></button></th>
-                    <th><button type="button" class="sort-button" data-sort-key="roi" data-sort-type="number" data-initial-direction="desc">ROI <span class="sort-indicator">↕</span></button></th>
-                    <th><button type="button" class="sort-button" data-sort-key="avgwin" data-sort-type="number" data-initial-direction="desc">Avg Win <span class="sort-indicator">↕</span></button></th>
-                    <th><button type="button" class="sort-button" data-sort-key="avgloss" data-sort-type="number" data-initial-direction="desc">Avg Loss <span class="sort-indicator">↕</span></button></th>
-                    <th><button type="button" class="sort-button" data-sort-key="sessions" data-sort-type="number" data-initial-direction="desc">Sessions <span class="sort-indicator">↕</span></button></th>
-                </tr>
-            </thead>
-            <tbody>
-                {% for player in leaderboard %}
-                <tr data-player-row="true" data-original-rank="{{ loop.index }}">
-                    <td data-sort-value="{{ loop.index }}" data-rank-cell>#{{ loop.index }}</td>
-                    <td data-sort-value="{{ player.rank_change }}">
-                        {% if player.rank_change > 0 %}
-                            <span class="rank-move rank-up">↑ {{ player.rank_change }}</span>
-                        {% elif player.rank_change < 0 %}
-                            <span class="rank-move rank-down">↓ {{ player.rank_change | abs }}</span>
-                        {% else %}
-                            <span class="rank-move rank-neutral">-</span>
-                        {% endif %}
-                    </td>
-                    <td data-sort-value="{{ player.player_name|lower }}"><a href="{{ url_for('player_detail', player_name=player.player_name) }}">{{ player.player_name }}</a></td>
-                    <td data-sort-value="{{ player.total_buy_in_cents }}">{{ player.total_buy_in_cents | money }}</td>
-                    <td data-sort-value="{{ player.total_paid_cents }}">{{ player.total_paid_cents | money }}</td>
-                    <td data-sort-value="{{ player.total_net_cents }}" class="{{ 'positive' if player.total_net_cents > 0 else 'negative' if player.total_net_cents < 0 else 'neutral' }}">{{ player.total_net_cents | money }}</td>
-                    <td data-sort-value="{{ '%.4f'|format(player.win_pct) }}">{{ "%.1f"|format(player.win_pct) }}%</td>
-                    <td data-sort-value="{{ '%.4f'|format(player.roi_pct) }}">{{ "%.1f"|format(player.roi_pct) }}%</td>
-                    <td data-sort-value="{{ player.avg_win_cents }}">{{ player.avg_win_cents | money }}</td>
-                    <td data-sort-value="{{ player.avg_loss_cents }}">{{ player.avg_loss_cents | money }}</td>
-                    <td data-sort-value="{{ player.sessions_played }}">{{ player.sessions_played }}</td>
-                </tr>
-                {% else %}
-                <tr>
-                    <td colspan="11">No data yet. Add the first event from the admin page.</td>
-                </tr>
+    <div class="toolbar__right">
+        <form class="session-filter-form" method="get">
+            <input type="hidden" name="mode" value="{{ mode }}">
+            <select class="session-filter-select" name="through_session" onchange="this.form.submit()">
+                <option value="">Latest session</option>
+                {% for s in available_sessions %}
+                <option value="{{ s.session_id }}" {{ 'selected' if selected_session_id == s.session_id else '' }}>{{ session_label(s) }}</option>
                 {% endfor %}
-            </tbody>
-        </table>
+            </select>
+            {% if selected_session_id %}
+            <a class="btn btn--ghost btn--sm" href="{{ url_for('leaderboard', mode=mode) }}">Reset</a>
+            {% endif %}
+        </form>
     </div>
-</section>
+</div>
 
-<div class="chart-modal" id="chartModal" aria-hidden="true">
-    <div class="chart-modal-backdrop" data-close-chart-modal></div>
-    <div class="chart-modal-card">
-        <div class="panel-header panel-header-with-actions">
-            <div>
-                <p class="eyebrow">Expanded view</p>
-                <h2>Cumulative profit over time</h2>
-            </div>
-            <div class="panel-actions">
-                <button class="secondary-button" type="button" id="fullscreenLeaderboardChart">Fullscreen</button>
-                <button class="ghost-button" type="button" data-close-chart-modal>Close</button>
+<div class="panel tbl-scroll" style="margin-bottom:20px;">
+    <table class="tbl" id="leaderboardTable" data-sort-key="net" data-sort-direction="desc">
+        <thead>
+            <tr>
+                <th class="col-rank" style="width:52px;">
+                    <span style="font-family:var(--font-mono);font-size:10.5px;letter-spacing:.10em;text-transform:uppercase;color:var(--muted);">#</span>
+                </th>
+                <th class="col-player">
+                    <button type="button" class="sort-btn" data-sort-key="player" data-sort-type="string" data-initial-direction="asc">Player <span class="sort-arrow">↕</span></button>
+                </th>
+                <th class="col-rank-delta"><button type="button" class="sort-btn" data-sort-key="rankdelta" data-sort-type="number" data-initial-direction="desc">Δ Rank <span class="sort-arrow">↕</span></button></th>
+                <th><button type="button" class="sort-btn" data-sort-key="net" data-sort-type="number" data-initial-direction="desc">Net <span class="sort-arrow">↓</span></button></th>
+                <th><button type="button" class="sort-btn" data-sort-key="winpct" data-sort-type="number" data-initial-direction="desc">Win% <span class="sort-arrow">↕</span></button></th>
+                <th><button type="button" class="sort-btn" data-sort-key="roi" data-sort-type="number" data-initial-direction="desc">ROI <span class="sort-arrow">↕</span></button></th>
+                <th><button type="button" class="sort-btn" data-sort-key="avgwin" data-sort-type="number" data-initial-direction="desc">Avg Win <span class="sort-arrow">↕</span></button></th>
+                <th><button type="button" class="sort-btn" data-sort-key="avgloss" data-sort-type="number" data-initial-direction="desc">Avg Loss <span class="sort-arrow">↕</span></button></th>
+                <th><button type="button" class="sort-btn" data-sort-key="sessions" data-sort-type="number" data-initial-direction="desc">Sessions <span class="sort-arrow">↕</span></button></th>
+            </tr>
+        </thead>
+        <tbody>
+            {% for player in main_board %}
+            {% set idx = loop.index %}
+            <tr data-player-row="true" data-original-rank="{{ idx }}"
+                onclick="window.location='{{ url_for('player_detail', player_name=player.player_name) }}'">
+                <td class="col-rank" data-sort-value="{{ idx }}">
+                    <span class="rank-num {{ 'rank-1' if idx==1 else 'rank-2' if idx==2 else 'rank-3' if idx==3 else '' }}" data-rank-cell>#{{ idx }}</span>
+                </td>
+                <td class="col-player" data-sort-value="{{ player.player_name|lower }}">
+                    <a href="{{ url_for('player_detail', player_name=player.player_name) }}">{{ player.player_name }}</a>
+                </td>
+                <td class="col-rank-delta" data-sort-value="{{ player.rank_change }}">
+                    {% if player.rank_change > 0 %}
+                        <span class="rank-delta rank-delta--up">▲{{ player.rank_change }}</span>
+                    {% elif player.rank_change < 0 %}
+                        <span class="rank-delta rank-delta--down">▼{{ player.rank_change | abs }}</span>
+                    {% else %}
+                        <span class="rank-delta rank-delta--flat">—</span>
+                    {% endif %}
+                </td>
+                <td class="num-net {{ 'num-pos' if player.total_net_cents > 0 else 'num-neg' if player.total_net_cents < 0 else 'num-muted' }}"
+                    data-sort-value="{{ player.total_net_cents }}">
+                    {{ '+' if player.total_net_cents > 0 else '' }}{{ player.total_net_cents | money }}
+                </td>
+                <td data-sort-value="{{ '%.4f'|format(player.win_pct) }}">{{ "%.1f"|format(player.win_pct) }}%</td>
+                <td class="{{ 'num-pos' if player.roi_pct > 0 else 'num-neg' if player.roi_pct < 0 else '' }}"
+                    data-sort-value="{{ '%.4f'|format(player.roi_pct) }}">{{ "%.1f"|format(player.roi_pct) }}%</td>
+                <td class="num-pos" data-sort-value="{{ player.avg_win_cents }}">{{ player.avg_win_cents | money }}</td>
+                <td class="num-neg" data-sort-value="{{ player.avg_loss_cents }}">{{ player.avg_loss_cents | money }}</td>
+                <td data-sort-value="{{ player.sessions_played }}">{{ player.sessions_played }}</td>
+            </tr>
+            {% else %}
+            <tr>
+                <td colspan="9" style="text-align:left;padding:28px;color:var(--muted);">
+                    No players yet — add the first event from the admin page.
+                </td>
+            </tr>
+            {% endfor %}
+        </tbody>
+    </table>
+</div>
+
+{% if mode == 'eligible' and provisional_board %}
+<div style="margin-bottom:20px;">
+    <div class="toolbar" style="margin-top:0;margin-bottom:12px;">
+        <span class="kicker" style="margin:0;">Provisional · fewer than {{ eligible_min_sessions }} sessions</span>
+    </div>
+    <div class="provisional-grid">
+        {% for player in provisional_board %}
+        <a class="provisional-card" href="{{ url_for('player_detail', player_name=player.player_name) }}"
+           style="display:block;text-decoration:none;">
+            <p class="provisional-card__name">{{ player.player_name }}</p>
+            <div class="provisional-card__meta">
+                <span>{{ player.sessions_played }} sess</span>
+                <span class="{{ 'num-pos' if player.total_net_cents > 0 else 'num-neg' if player.total_net_cents < 0 else '' }}"
+                      style="font-family:var(--font-mono);font-size:11px;font-weight:600;">{{ player.total_net_cents | money }}</span>
             </div>
+        </a>
+        {% endfor %}
+    </div>
+</div>
+{% endif %}
+
+<!-- Expand modal -->
+<div id="chartModal" style="display:none;position:fixed;inset:0;z-index:80;align-items:center;justify-content:center;">
+    <div style="position:absolute;inset:0;background:rgba(8,10,12,.82);backdrop-filter:blur(6px);" data-close-modal></div>
+    <div style="position:relative;z-index:1;width:min(1280px,calc(100vw - 48px));margin:24px auto;padding:22px;background:var(--surface);border:1px solid var(--border-strong);border-radius:var(--r-lg);box-shadow:0 24px 64px rgba(0,0,0,.4);">
+        <div style="display:flex;align-items:center;justify-content:space-between;gap:12px;margin-bottom:18px;">
+            <h2 style="margin:0;">Cumulative profit</h2>
+            <button class="btn btn--ghost btn--sm" data-close-modal>Close</button>
         </div>
-        <div class="chart-modal-frame" id="chartModalFrame">
+        <div style="height:min(70vh,780px);position:relative;">
             <canvas id="leaderboardChartExpanded"></canvas>
         </div>
     </div>
 </div>
 
 <script>
-    const leaderboardChartData = {{ chart_data | tojson }};
-    const rootStyles = getComputedStyle(document.documentElement);
-    const textMuted = rootStyles.getPropertyValue('--text-muted').trim();
-    const lineColor = rootStyles.getPropertyValue('--line').trim();
+const CHART_PALETTE = ['#9b8cf0','#6fc093','#e0b15c','#cf6f86','#8f93c2','#7cb9e0','#f4a261','#a78bb0','#5cb8a0','#e58f3a'];
+const leaderboardChartData = {{ chart_data | tojson }};
+const rootStyles = getComputedStyle(document.documentElement);
+const textMuted = rootStyles.getPropertyValue('--text-muted').trim();
+const lineColor = rootStyles.getPropertyValue('--line').trim();
 
-    function mainLeaderboardChartData(chartData) {
-        const repeatedPlayerDatasets = chartData.datasets.filter((dataset) => {
-            return Number(dataset.sessions_played || 0) > 1;
-        });
-        const visibleDatasets = repeatedPlayerDatasets.length > 0
-            ? repeatedPlayerDatasets
-            : chartData.datasets;
+leaderboardChartData.datasets.forEach((ds, i) => {
+    ds.borderColor = CHART_PALETTE[i % CHART_PALETTE.length];
+    ds.backgroundColor = CHART_PALETTE[i % CHART_PALETTE.length];
+});
 
-        return {
-            labels: [...chartData.labels],
-            datasets: visibleDatasets.map((dataset) => ({
-                ...dataset,
-                data: [...dataset.data],
-                pointRadius: 0,
+function buildChartConfig(data, compact) {
+    return {
+        type: 'line',
+        data: {
+            labels: data.labels,
+            datasets: data.datasets.map(ds => ({
+                ...ds,
+                pointRadius: compact ? 0 : 2,
                 pointHoverRadius: 5,
-                borderWidth: 2.5,
+                borderWidth: compact ? 2 : 2.5,
                 tension: 0.28,
+                fill: false,
             })),
-        };
-    }
-
-    function moneyTickLabel(value) {
-        const numericValue = Number(value);
-        const absoluteValue = Math.abs(numericValue);
-        const formattedValue = Number.isInteger(absoluteValue)
-            ? absoluteValue.toFixed(0)
-            : absoluteValue.toFixed(2);
-
-        return `${numericValue < 0 ? '-' : ''}$${formattedValue}`;
-    }
-
-    function chartYScaleOptions(chartData, compact) {
-        const values = chartData.datasets
-            .flatMap((dataset) => dataset.data)
-            .filter((value) => value !== null && value !== undefined)
-            .map(Number);
-
-        if (values.length === 0) {
-            return {};
-        }
-
-        const minValue = Math.min(...values);
-        const maxValue = Math.max(...values);
-        const maxAbsValue = Math.max(Math.abs(minValue), Math.abs(maxValue));
-        const stepSize = maxAbsValue <= 75 ? 25 : undefined;
-
-        return {
-            suggestedMin: minValue < 0 ? minValue * 1.12 : 0,
-            suggestedMax: maxValue > 0 ? maxValue * 1.12 : 0,
-            ticks: {
-                color: textMuted,
-                maxTicksLimit: compact ? 8 : 10,
-                stepSize,
-                callback(value) {
-                    return moneyTickLabel(value);
-                },
-            },
-            grid: { color: lineColor },
-        };
-    }
-
-    function buildLeaderboardChartConfig(chartData, options = {}) {
-        const compact = options.compact === true;
-
-        return {
-            type: 'line',
-            data: chartData,
-            options: {
-                responsive: true,
-                maintainAspectRatio: false,
-                interaction: { mode: 'nearest', intersect: false },
-                elements: {
-                    point: {
-                        radius: compact ? 0 : 2,
-                        hoverRadius: 5,
-                    },
-                    line: {
-                        borderWidth: compact ? 2.5 : 2,
-                        tension: 0.28,
-                    },
-                },
-                plugins: {
-                    legend: {
-                        display: true,
-                        position: 'bottom',
-                        labels: {
-                            color: textMuted,
-                            usePointStyle: true,
-                            boxWidth: compact ? 8 : 10,
-                            boxHeight: compact ? 8 : 10,
-                            padding: compact ? 12 : 18,
-                        },
-                    },
-                    tooltip: {
-                        callbacks: {
-                            label(context) {
-                                const value = context.parsed.y;
-                                if (value === null || value === undefined) {
-                                    return `${context.dataset.label}: —`;
-                                }
-                                return `${context.dataset.label}: $${Number(value).toFixed(2)}`;
-                            },
-                        },
-                    },
-                },
-                scales: {
-                    x: {
-                        ticks: {
-                            color: textMuted,
-                            maxRotation: 0,
-                            autoSkip: true,
-                            maxTicksLimit: compact ? 6 : 10,
-                        },
-                        grid: {
-                            color: lineColor,
-                            display: !compact,
-                        },
-                    },
-                    y: chartYScaleOptions(chartData, compact),
-                },
-            },
-        };
-    }
-
-    const zoomSelectionPlugin = {
-        id: 'zoomSelection',
-        beforeDraw(chart) {
-            const drag = chart.$zoomDrag;
-            if (!drag || !drag.active || drag.startX === drag.endX) {
-                return;
-            }
-
-            const { ctx, chartArea } = chart;
-            const left = Math.max(chartArea.left, Math.min(drag.startX, drag.endX));
-            const right = Math.min(chartArea.right, Math.max(drag.startX, drag.endX));
-
-            ctx.save();
-            ctx.fillStyle = 'rgba(229, 139, 58, 0.14)';
-            ctx.strokeStyle = 'rgba(229, 139, 58, 0.74)';
-            ctx.lineWidth = 1;
-            ctx.fillRect(left, chartArea.top, right - left, chartArea.bottom - chartArea.top);
-            ctx.strokeRect(left, chartArea.top, right - left, chartArea.bottom - chartArea.top);
-            ctx.restore();
         },
-    };
-
-    Chart.register(zoomSelectionPlugin);
-
-    function clamp(value, min, max) {
-        return Math.max(min, Math.min(max, value));
-    }
-
-    function enableDragZoom(chart, resetButton) {
-        if (!chart || !chart.canvas || !resetButton) {
-            return;
-        }
-
-        const canvas = chart.canvas;
-        const minDragDistance = 14;
-        let draggedToZoom = false;
-
-        function pointerX(event) {
-            const rect = canvas.getBoundingClientRect();
-            return event.clientX - rect.left;
-        }
-
-        function eventInChartArea(event) {
-            const x = pointerX(event);
-            const y = event.clientY - canvas.getBoundingClientRect().top;
-            const area = chart.chartArea;
-            return x >= area.left && x <= area.right && y >= area.top && y <= area.bottom;
-        }
-
-        canvas.addEventListener('pointerdown', (event) => {
-            if (!eventInChartArea(event)) {
-                return;
-            }
-
-            canvas.setPointerCapture(event.pointerId);
-            const x = pointerX(event);
-            chart.$zoomDrag = { active: true, startX: x, endX: x };
-            chart.update('none');
-        });
-
-        canvas.addEventListener('pointermove', (event) => {
-            if (!chart.$zoomDrag?.active) {
-                return;
-            }
-
-            chart.$zoomDrag.endX = pointerX(event);
-            chart.draw();
-        });
-
-        canvas.addEventListener('pointerup', (event) => {
-            const drag = chart.$zoomDrag;
-            if (!drag?.active) {
-                return;
-            }
-
-            drag.active = false;
-            const distance = Math.abs(drag.endX - drag.startX);
-            if (distance < minDragDistance) {
-                chart.draw();
-                return;
-            }
-
-            draggedToZoom = true;
-            const area = chart.chartArea;
-            const startPixel = clamp(Math.min(drag.startX, drag.endX), area.left, area.right);
-            const endPixel = clamp(Math.max(drag.startX, drag.endX), area.left, area.right);
-            const xScale = chart.scales.x;
-            const minIndex = clamp(Math.floor(xScale.getValueForPixel(startPixel)), 0, chart.data.labels.length - 1);
-            const maxIndex = clamp(Math.ceil(xScale.getValueForPixel(endPixel)), 0, chart.data.labels.length - 1);
-
-            if (maxIndex <= minIndex) {
-                chart.draw();
-                return;
-            }
-
-            xScale.options.min = minIndex;
-            xScale.options.max = maxIndex;
-            resetButton.hidden = false;
-            chart.update();
-        });
-
-        canvas.addEventListener('click', (event) => {
-            if (!draggedToZoom) {
-                return;
-            }
-
-            event.stopPropagation();
-            event.preventDefault();
-            draggedToZoom = false;
-        });
-
-        canvas.addEventListener('pointercancel', () => {
-            if (chart.$zoomDrag) {
-                chart.$zoomDrag.active = false;
-                chart.draw();
-            }
-        });
-
-        resetButton.addEventListener('click', () => {
-            delete chart.options.scales.x.min;
-            delete chart.options.scales.x.max;
-            resetButton.hidden = true;
-            chart.update();
-        });
-    }
-
-    function suppressLegendClickExpansion(chart) {
-        if (!chart?.canvas) {
-            return;
-        }
-
-        chart.canvas.addEventListener('click', (event) => {
-            const legend = chart.legend;
-            if (!legend || !legend.legendHitBoxes) {
-                return;
-            }
-
-            const rect = chart.canvas.getBoundingClientRect();
-            const x = event.clientX - rect.left;
-            const y = event.clientY - rect.top;
-            const clickedLegendItem = legend.legendHitBoxes.some((box) => {
-                return x >= box.left
-                    && x <= box.left + box.width
-                    && y >= box.top
-                    && y <= box.top + box.height;
-            });
-
-            if (clickedLegendItem) {
-                event.stopPropagation();
-            }
-        });
-    }
-
-    const leaderboardCtx = document.getElementById('leaderboardChart');
-    const resetZoomButton = document.getElementById('resetLeaderboardZoom');
-    let leaderboardChart = null;
-    if (leaderboardCtx && leaderboardChartData.labels.length > 0) {
-        leaderboardChart = new Chart(
-            leaderboardCtx,
-            buildLeaderboardChartConfig(mainLeaderboardChartData(leaderboardChartData), { compact: true })
-        );
-        enableDragZoom(leaderboardChart, resetZoomButton);
-        suppressLegendClickExpansion(leaderboardChart);
-    }
-
-    const chartModal = document.getElementById('chartModal');
-    const expandButton = document.getElementById('expandLeaderboardChart');
-    const chartFrame = document.getElementById('leaderboardChartFrame');
-    const fullscreenButton = document.getElementById('fullscreenLeaderboardChart');
-    const modalFrame = document.getElementById('chartModalFrame');
-    const expandedCtx = document.getElementById('leaderboardChartExpanded');
-    let expandedChart = null;
-
-    function openChartModal() {
-        if (!chartModal || !expandedCtx || leaderboardChartData.labels.length === 0) {
-            return;
-        }
-
-        chartModal.classList.add('is-open');
-        chartModal.setAttribute('aria-hidden', 'false');
-        document.body.classList.add('modal-open');
-
-        if (expandedChart) {
-            expandedChart.destroy();
-        }
-        expandedChart = new Chart(expandedCtx, buildLeaderboardChartConfig(leaderboardChartData));
-    }
-
-    function closeChartModal() {
-        if (!chartModal) {
-            return;
-        }
-        chartModal.classList.remove('is-open');
-        chartModal.setAttribute('aria-hidden', 'true');
-        document.body.classList.remove('modal-open');
-        if (expandedChart) {
-            expandedChart.destroy();
-            expandedChart = null;
-        }
-    }
-
-    expandButton?.addEventListener('click', openChartModal);
-    chartFrame?.addEventListener('click', openChartModal);
-    chartFrame?.addEventListener('keydown', (event) => {
-        if (event.key === 'Enter' || event.key === ' ') {
-            event.preventDefault();
-            openChartModal();
-        }
-    });
-
-    chartModal?.querySelectorAll('[data-close-chart-modal]').forEach((element) => {
-        element.addEventListener('click', closeChartModal);
-    });
-
-    document.addEventListener('keydown', (event) => {
-        if (event.key === 'Escape' && chartModal?.classList.contains('is-open')) {
-            closeChartModal();
-        }
-    });
-
-    fullscreenButton?.addEventListener('click', async () => {
-        if (!modalFrame) {
-            return;
-        }
-        if (document.fullscreenElement) {
-            await document.exitFullscreen();
-            return;
-        }
-        if (modalFrame.requestFullscreen) {
-            await modalFrame.requestFullscreen();
-        }
-    });
-
-    const leaderboardTable = document.getElementById('leaderboardTable');
-    const sortButtons = Array.from(document.querySelectorAll('.sort-button'));
-    const columnIndexMap = {
-        rank: 0,
-        rankdelta: 1,
-        player: 2,
-        cashin: 3,
-        paidout: 4,
-        net: 5,
-        winpct: 6,
-        roi: 7,
-        avgwin: 8,
-        avgloss: 9,
-        sessions: 10,
-    };
-
-    function updateRankCells() {
-        if (!leaderboardTable) {
-            return;
-        }
-        Array.from(leaderboardTable.tBodies[0].querySelectorAll('tr[data-player-row="true"]')).forEach((row, index) => {
-            const rankCell = row.querySelector('[data-rank-cell]');
-            if (rankCell) {
-                rankCell.textContent = `#${index + 1}`;
-            }
-        });
-    }
-
-    function setActiveSortButton(sortKey, direction) {
-        sortButtons.forEach((button) => {
-            const isActive = button.dataset.sortKey === sortKey;
-            button.classList.toggle('is-active', isActive);
-            const indicator = button.querySelector('.sort-indicator');
-            if (indicator) {
-                indicator.textContent = isActive ? (direction === 'asc' ? '↑' : '↓') : '↕';
-            }
-        });
-    }
-
-    function sortLeaderboard(sortKey, sortType, forcedDirection) {
-        if (!leaderboardTable) {
-            return;
-        }
-
-        const tbody = leaderboardTable.tBodies[0];
-        const rows = Array.from(tbody.querySelectorAll('tr[data-player-row="true"]'));
-        const currentKey = leaderboardTable.dataset.sortKey;
-        const currentDirection = leaderboardTable.dataset.sortDirection || 'desc';
-        let direction = forcedDirection;
-
-        if (!direction) {
-            if (currentKey === sortKey) {
-                direction = currentDirection === 'desc' ? 'asc' : 'desc';
-            } else {
-                const trigger = sortButtons.find((button) => button.dataset.sortKey === sortKey);
-                direction = trigger?.dataset.initialDirection || 'desc';
-            }
-        }
-
-        const multiplier = direction === 'asc' ? 1 : -1;
-        const columnIndex = columnIndexMap[sortKey] ?? 0;
-
-        rows.sort((leftRow, rightRow) => {
-            const leftCell = leftRow.children[columnIndex];
-            const rightCell = rightRow.children[columnIndex];
-            const leftValue = leftCell?.dataset.sortValue ?? '';
-            const rightValue = rightCell?.dataset.sortValue ?? '';
-
-            if (sortType === 'number') {
-                const numericResult = (Number(leftValue) - Number(rightValue)) * multiplier;
-                if (numericResult !== 0) {
-                    return numericResult;
+        options: {
+            responsive: true,
+            maintainAspectRatio: false,
+            interaction: { mode: 'nearest', intersect: false },
+            plugins: {
+                legend: {
+                    display: true,
+                    position: 'bottom',
+                    labels: { color: textMuted, usePointStyle: true, boxWidth: 8, boxHeight: 8, padding: 14 },
+                },
+                tooltip: {
+                    callbacks: {
+                        label(ctx) {
+                            const v = ctx.parsed.y;
+                            return v == null ? `${ctx.dataset.label}: —` : `${ctx.dataset.label}: $${Number(v).toFixed(2)}`;
+                        }
+                    }
                 }
-            } else {
-                const stringResult = leftValue.localeCompare(rightValue) * multiplier;
-                if (stringResult !== 0) {
-                    return stringResult;
+            },
+            scales: {
+                x: {
+                    ticks: { color: textMuted, maxRotation: 0, autoSkip: true, maxTicksLimit: compact ? 6 : 10 },
+                    grid: { color: lineColor, display: !compact },
+                },
+                y: {
+                    ticks: {
+                        color: textMuted,
+                        maxTicksLimit: compact ? 8 : 10,
+                        callback(v) { return (v < 0 ? '-' : '') + '$' + Math.abs(Number(v)).toFixed(0); }
+                    },
+                    grid: { color: lineColor },
                 }
             }
+        }
+    };
+}
 
-            return Number(leftRow.dataset.originalRank) - Number(rightRow.dataset.originalRank);
-        });
+const ctx = document.getElementById('leaderboardChart');
+let mainChart = null;
+if (ctx && leaderboardChartData.labels.length > 0) {
+    const filtered = leaderboardChartData.datasets.filter(ds => (ds.sessions_played || 0) > 1);
+    const chartData = {
+        labels: leaderboardChartData.labels,
+        datasets: filtered.length ? filtered : leaderboardChartData.datasets,
+    };
+    mainChart = new Chart(ctx, buildChartConfig(chartData, true));
+}
 
-        rows.forEach((row) => tbody.appendChild(row));
-        leaderboardTable.dataset.sortKey = sortKey;
-        leaderboardTable.dataset.sortDirection = direction;
-        updateRankCells();
-        setActiveSortButton(sortKey, direction);
-    }
+const modal = document.getElementById('chartModal');
+const expandBtn = document.getElementById('expandLeaderboardChart');
+let expandedChart = null;
 
-    sortButtons.forEach((button) => {
-        button.addEventListener('click', () => {
-            sortLeaderboard(button.dataset.sortKey, button.dataset.sortType);
-        });
+expandBtn?.addEventListener('click', () => {
+    if (!leaderboardChartData.labels.length) return;
+    modal.style.display = 'flex';
+    document.body.style.overflow = 'hidden';
+    if (expandedChart) expandedChart.destroy();
+    expandedChart = new Chart(
+        document.getElementById('leaderboardChartExpanded'),
+        buildChartConfig(leaderboardChartData, false)
+    );
+});
+
+document.querySelectorAll('[data-close-modal]').forEach(el => {
+    el.addEventListener('click', () => {
+        modal.style.display = 'none';
+        document.body.style.overflow = '';
+        if (expandedChart) { expandedChart.destroy(); expandedChart = null; }
     });
+});
 
-    setActiveSortButton('net', 'desc');
+document.addEventListener('keydown', e => {
+    if (e.key === 'Escape' && modal.style.display === 'flex') {
+        modal.style.display = 'none';
+        document.body.style.overflow = '';
+        if (expandedChart) { expandedChart.destroy(); expandedChart = null; }
+    }
+});
+
+// Segmented mode switcher
+document.querySelectorAll('[data-mode]').forEach(btn => {
+    btn.addEventListener('click', () => {
+        const url = new URL(window.location.href);
+        url.searchParams.set('mode', btn.dataset.mode);
+        window.location.href = url.toString();
+    });
+});
+
+// Table sort
+const tbl = document.getElementById('leaderboardTable');
+const sortBtns = tbl ? Array.from(tbl.querySelectorAll('.sort-btn[data-sort-key]')) : [];
+const colMap = { rank: 0, player: 1, rankdelta: 2, net: 3, winpct: 4, roi: 5, avgwin: 6, avgloss: 7, sessions: 8 };
+
+function setActiveSort(key, dir) {
+    sortBtns.forEach(b => {
+        const active = b.dataset.sortKey === key;
+        b.classList.toggle('is-active', active);
+        const arrow = b.querySelector('.sort-arrow');
+        if (arrow) arrow.textContent = active ? (dir === 'asc' ? '↑' : '↓') : '↕';
+    });
+}
+
+function sortTable(key, sortType, forcedDir) {
+    if (!tbl) return;
+    const tbody = tbl.tBodies[0];
+    const rows = Array.from(tbody.querySelectorAll('tr[data-player-row]'));
+    const curKey = tbl.dataset.sortKey;
+    const curDir = tbl.dataset.sortDirection || 'desc';
+    let dir = forcedDir;
+    if (!dir) {
+        if (curKey === key) dir = curDir === 'desc' ? 'asc' : 'desc';
+        else {
+            const btn = sortBtns.find(b => b.dataset.sortKey === key);
+            dir = btn?.dataset.initialDirection || 'desc';
+        }
+    }
+    const mult = dir === 'asc' ? 1 : -1;
+    const ci = colMap[key] ?? 0;
+    rows.sort((a, b) => {
+        const av = a.children[ci]?.dataset.sortValue ?? '';
+        const bv = b.children[ci]?.dataset.sortValue ?? '';
+        if (sortType === 'number') {
+            const n = (Number(av) - Number(bv)) * mult;
+            if (n !== 0) return n;
+        } else {
+            const s = av.localeCompare(bv) * mult;
+            if (s !== 0) return s;
+        }
+        return Number(a.dataset.originalRank) - Number(b.dataset.originalRank);
+    });
+    rows.forEach(r => tbody.appendChild(r));
+    tbl.dataset.sortKey = key;
+    tbl.dataset.sortDirection = dir;
+    rows.forEach((row, i) => {
+        const rc = row.querySelector('[data-rank-cell]');
+        if (rc) rc.textContent = `#${i + 1}`;
+    });
+    setActiveSort(key, dir);
+}
+
+sortBtns.forEach(b => {
+    b.addEventListener('click', () => sortTable(b.dataset.sortKey, b.dataset.sortType));
+});
+setActiveSort('net', 'desc');
 </script>
 {% endblock %}
diff --git a/templates/player_detail.html b/templates/player_detail.html
index 2646bce..68649d3 100644
--- a/templates/player_detail.html
+++ b/templates/player_detail.html
@@ -1,231 +1,318 @@
 {% extends "base.html" %}
-{% block title %}{{ player.player_name }} · Poker Portal{% endblock %}
+{% block title %}{{ player.player_name }} · boker.club{% endblock %}
 {% block content %}
-<section class="hero-card compact">
+
+<div class="hero">
     <div>
-        <p class="eyebrow">Player profile</p>
-        <h1>{{ player.player_name }}</h1>
-        <p class="muted-text">A quick read on lifetime performance, hit rate, and session-by-session movement.</p>
+        {% if player_rank %}
+        <p class="player-rank">Rank #{{ player_rank }}</p>
+        {% endif %}
+        <h1 class="hero__title">{{ player.player_name }}</h1>
+        <p class="hero__sub">{{ player.sessions_played }} session{{ 's' if player.sessions_played != 1 else '' }} · {{ "%.1f"|format(player.win_pct) }}% win rate</p>
     </div>
-</section>
+</div>
 
-<section class="grid three-col profile-summary-grid">
-    <article class="panel stat-card"><span>Total Net</span><strong class="{{ 'positive' if player.total_net_cents > 0 else 'negative' if player.total_net_cents < 0 else 'neutral' }}">{{ player.total_net_cents | money }}</strong></article>
-    <article class="panel stat-card"><span>Total invested</span><strong>{{ player.total_invested_cents | money }}</strong></article>
-    <article class="panel stat-card"><span>Cash-outs</span><strong>{{ player.total_cash_out_cents | money }}</strong></article>
-    <article class="panel stat-card"><span>Current debt</span><strong class="{{ 'negative' if player.current_player_owes_cents > 0 else '' }}">{{ player.current_player_owes_cents | money }}</strong></article>
-    <article class="panel stat-card"><span>Win %</span><strong>{{ "%.1f"|format(player.win_pct) }}%</strong></article>
-    <article class="panel stat-card"><span>Sessions</span><strong>{{ player.sessions_played }}</strong></article>
-</section>
-
-<section class="grid one-col">
-    <div class="panel chart-panel">
-        <div class="panel-header">
-            <div>
-                <p class="eyebrow">Trend</p>
-                <h2>Cumulative profit</h2>
-            </div>
+<div class="player-stat-grid" style="margin-bottom:20px;">
+    <div class="stat">
+        <span class="kicker">Total net</span>
+        <div class="stat__val {{ 'num-pos' if player.total_net_cents > 0 else 'num-neg' if player.total_net_cents < 0 else 'num-muted' }}">
+            {{ '+' if player.total_net_cents > 0 else '' }}{{ player.total_net_cents | money }}
         </div>
-        <div class="chart-frame">
+    </div>
+    <div class="stat">
+        <span class="kicker">Win rate</span>
+        <div class="stat__val" style="color:var(--text-strong)">{{ "%.1f"|format(player.win_pct) }}%</div>
+        <div class="stat__sub">{{ player.winning_sessions }}W · {{ player.losing_sessions }}L · {{ player.break_even_sessions }}E</div>
+    </div>
+    <div class="stat">
+        <span class="kicker">ROI</span>
+        <div class="stat__val {{ 'num-pos' if player.roi_pct > 0 else 'num-neg' if player.roi_pct < 0 else 'num-muted' }}">{{ "%.1f"|format(player.roi_pct) }}%</div>
+    </div>
+    <div class="stat">
+        <span class="kicker">Sessions</span>
+        <div class="stat__val" style="color:var(--text-strong)">{{ player.sessions_played }}</div>
+    </div>
+    <div class="stat">
+        <span class="kicker">Current W/L</span>
+        <div class="stat-pair">
+            <span class="stat-pair__val" style="color:var(--pos)">{{ player.current_win_streak }}W</span>
+            <span class="stat-pair__val" style="color:var(--neg)">{{ player.current_loss_streak }}L</span>
+        </div>
+        <div class="stat__sub">Longest {{ player.longest_win_streak }}W · {{ player.longest_loss_streak }}L</div>
+    </div>
+    <div class="stat">
+        <span class="kicker">Best / worst</span>
+        <div class="stat-pair">
+            <span class="stat-pair__val" style="color:var(--pos)">{{ player.biggest_win_cents | money }}</span>
+            <span class="stat-pair__val" style="color:var(--neg)">{{ player.biggest_loss_cents | money }}</span>
+        </div>
+    </div>
+    <div class="stat">
+        <span class="kicker">Total invested</span>
+        <div class="stat__val" style="color:var(--num)">{{ player.total_invested_cents | money }}</div>
+    </div>
+    <div class="stat">
+        <span class="kicker">Cash-outs</span>
+        <div class="stat__val" style="color:var(--num)">{{ player.total_cash_out_cents | money }}</div>
+    </div>
+</div>
+
+<!-- Cumulative profit chart -->
+<div class="panel" style="margin-bottom:20px;">
+    <div class="panel__head">
+        <span class="kicker" style="margin:0;">Trend</span>
+        <h2 class="panel__title">Cumulative profit</h2>
+    </div>
+    <div class="chart-wrap">
+        <div class="chart-frame chart-frame--tall">
             <canvas id="playerCumulativeChart"></canvas>
         </div>
     </div>
-</section>
+</div>
 
-<section class="grid two-col">
-    <div class="panel chart-panel">
-        <div class="panel-header">
-            <div>
-                <p class="eyebrow">Volatility</p>
-                <h2>Session results</h2>
+<!-- Charts row: session results + result mix -->
+<div class="split" style="margin-bottom:20px;">
+    <div class="panel col-main">
+        <div class="panel__head">
+            <span class="kicker" style="margin:0;">Session by session</span>
+            <h2 class="panel__title">Results</h2>
+        </div>
+        <div class="chart-wrap">
+            <div class="chart-frame">
+                <canvas id="playerSessionChart"></canvas>
             </div>
         </div>
-        <div class="chart-frame">
-            <canvas id="playerSessionChart"></canvas>
-        </div>
     </div>
-    <div class="panel chart-panel">
-        <div class="panel-header">
-            <div>
-                <p class="eyebrow">Breakdown</p>
-                <h2>Result mix</h2>
+    <div class="panel col-side">
+        <div class="panel__head">
+            <span class="kicker" style="margin:0;">Breakdown</span>
+            <h2 class="panel__title">Result mix</h2>
+        </div>
+        <div class="chart-wrap">
+            <div class="result-mix" aria-label="Player result mix">
+                {% set result_total = player.winning_sessions + player.losing_sessions + player.break_even_sessions %}
+                <div class="result-mix__bar">
+                    {% if player.winning_sessions > 0 %}
+                    <span class="result-mix__seg result-mix__seg--win" style="flex-grow:{{ player.winning_sessions }}"></span>
+                    {% endif %}
+                    {% if player.break_even_sessions > 0 %}
+                    <span class="result-mix__seg result-mix__seg--even" style="flex-grow:{{ player.break_even_sessions }}"></span>
+                    {% endif %}
+                    {% if player.losing_sessions > 0 %}
+                    <span class="result-mix__seg result-mix__seg--loss" style="flex-grow:{{ player.losing_sessions }}"></span>
+                    {% endif %}
+                </div>
+                <div class="result-mix__legend">
+                    <div class="result-mix__legend-row">
+                        <span><i class="result-mix__key result-mix__key--win"></i>Wins</span>
+                        <strong>{{ player.winning_sessions }} · {{ "%.1f"|format((player.winning_sessions / result_total * 100) if result_total else 0) }}%</strong>
+                    </div>
+                    <div class="result-mix__legend-row">
+                        <span><i class="result-mix__key result-mix__key--even"></i>Even</span>
+                        <strong>{{ player.break_even_sessions }} · {{ "%.1f"|format((player.break_even_sessions / result_total * 100) if result_total else 0) }}%</strong>
+                    </div>
+                    <div class="result-mix__legend-row">
+                        <span><i class="result-mix__key result-mix__key--loss"></i>Losses</span>
+                        <strong>{{ player.losing_sessions }} · {{ "%.1f"|format((player.losing_sessions / result_total * 100) if result_total else 0) }}%</strong>
+                    </div>
+                </div>
+                {% if result_total > 0 %}
+                <div class="result-mix__note">±$1.00 counts as even</div>
+                {% endif %}
             </div>
         </div>
-        <div class="chart-frame chart-frame-small">
-            <canvas id="playerBreakdownChart"></canvas>
-        </div>
     </div>
-</section>
+</div>
 
-<section class="panel">
-    <div class="panel-header">
-        <div>
-            <p class="eyebrow">Breakdown</p>
-            <h2>Detailed stats</h2>
+<!-- Perf vs Cash two-panel split -->
+<div class="split" style="margin-bottom:20px;">
+
+    <!-- Poker performance -->
+    <div class="panel col-main">
+        <div class="panel__head">
+            <div>
+                <div class="section-marker">
+                    <span class="section-marker__dot section-marker__dot--accent"></span>
+                    Poker performance
+                </div>
+                <h2 class="panel__title">Game results</h2>
+            </div>
         </div>
-    </div>
-    <div class="table-wrap">
-        <table>
+        <table style="width:100%;border-collapse:collapse;">
             <tbody>
-                <tr><th>Total Net</th><td>{{ player.total_net_cents | money }}</td></tr>
-                <tr><th>Win %</th><td>{{ "%.1f"|format(player.win_pct) }}%</td></tr>
-                <tr><th>ROI</th><td>{{ "%.1f"|format(player.roi_pct) }}%</td></tr>
-                <tr><th>Sessions</th><td>{{ player.sessions_played }}</td></tr>
-                <tr><th>Paid Buy-ins</th><td>{{ player.total_buy_in_cents | money }}</td></tr>
-                <tr><th>Fronted</th><td>{{ player.total_front_cents | money }}</td></tr>
-                <tr><th>Debt Collected</th><td>{{ player.total_front_collected_cents | money }}</td></tr>
-                <tr><th>Current Debt</th><td>{{ player.current_player_owes_cents | money }}</td></tr>
-                <tr><th>Written Off</th><td>{{ player.total_front_writeoff_cents | money }}</td></tr>
-                <tr><th>Rolled In</th><td>{{ player.total_rollover_in_cents | money }}</td></tr>
-                <tr><th>Total Invested</th><td>{{ player.total_invested_cents | money }}</td></tr>
-                <tr><th>Cash-outs</th><td>{{ player.total_cash_out_cents | money }}</td></tr>
-                <tr><th>Rolled Out</th><td>{{ player.total_rollover_out_cents | money }}</td></tr>
-                <tr><th>Winning Sessions</th><td>{{ player.winning_sessions }}</td></tr>
-                <tr><th>Losing Sessions</th><td>{{ player.losing_sessions }}</td></tr>
-                <tr><th>Break-even Sessions</th><td>{{ player.break_even_sessions }}</td></tr>
-                <tr><th>Average Win</th><td>{{ player.avg_win_cents | money }}</td></tr>
-                <tr><th>Average Loss</th><td>{{ player.avg_loss_cents | money }}</td></tr>
-                <tr><th>Biggest Win</th><td>{{ player.biggest_win_cents | money }}</td></tr>
-                <tr><th>Biggest Loss</th><td>{{ player.biggest_loss_cents | money }}</td></tr>
-                <tr><th>Current Win Streak</th><td>{{ player.current_win_streak }}</td></tr>
-                <tr><th>Current Loss Streak</th><td>{{ player.current_loss_streak }}</td></tr>
-                <tr><th>Longest Win Streak</th><td>{{ player.longest_win_streak }}</td></tr>
-                <tr><th>Longest Loss Streak</th><td>{{ player.longest_loss_streak }}</td></tr>
                 <tr>
-                    <th>Best Session</th>
-                    <td>
-                        {{ player.best_session_net_cents | money }}
-                        {% if player.best_session_date %}
-                            <span class="muted-text small">on {{ player.best_session_date | pretty_date }}</span>
-                        {% endif %}
+                    <td style="padding:11px 20px;color:var(--muted);font-size:13.5px;border-top:1px solid var(--divider);">Total Net</td>
+                    <td style="padding:11px 20px;text-align:right;font-family:var(--font-mono);font-variant-numeric:tabular-nums;border-top:1px solid var(--divider);"
+                        class="{{ 'num-pos' if player.total_net_cents > 0 else 'num-neg' if player.total_net_cents < 0 else '' }}">
+                        {{ '+' if player.total_net_cents > 0 else '' }}{{ player.total_net_cents | money }}
                     </td>
                 </tr>
                 <tr>
-                    <th>Worst Session</th>
-                    <td>
-                        {{ player.worst_session_net_cents | money }}
-                        {% if player.worst_session_date %}
-                            <span class="muted-text small">on {{ player.worst_session_date | pretty_date }}</span>
-                        {% endif %}
+                    <td style="padding:11px 20px;color:var(--muted);font-size:13.5px;border-top:1px solid var(--divider);">Win %</td>
+                    <td style="padding:11px 20px;text-align:right;font-family:var(--font-mono);border-top:1px solid var(--divider);color:var(--num);">{{ "%.1f"|format(player.win_pct) }}%</td>
+                </tr>
+                <tr>
+                    <td style="padding:11px 20px;color:var(--muted);font-size:13.5px;border-top:1px solid var(--divider);">ROI</td>
+                    <td style="padding:11px 20px;text-align:right;font-family:var(--font-mono);border-top:1px solid var(--divider);"
+                        class="{{ 'num-pos' if player.roi_pct > 0 else 'num-neg' if player.roi_pct < 0 else '' }}">{{ "%.1f"|format(player.roi_pct) }}%</td>
+                </tr>
+                <tr>
+                    <td style="padding:11px 20px;color:var(--muted);font-size:13.5px;border-top:1px solid var(--divider);">Average Win</td>
+                    <td style="padding:11px 20px;text-align:right;font-family:var(--font-mono);border-top:1px solid var(--divider);color:var(--pos);">{{ player.avg_win_cents | money }}</td>
+                </tr>
+                <tr>
+                    <td style="padding:11px 20px;color:var(--muted);font-size:13.5px;border-top:1px solid var(--divider);">Average Loss</td>
+                    <td style="padding:11px 20px;text-align:right;font-family:var(--font-mono);border-top:1px solid var(--divider);color:var(--neg);">{{ player.avg_loss_cents | money }}</td>
+                </tr>
+                <tr>
+                    <td style="padding:11px 20px;color:var(--muted);font-size:13.5px;border-top:1px solid var(--divider);">Best / Worst</td>
+                    <td style="padding:11px 20px;text-align:right;font-family:var(--font-mono);border-top:1px solid var(--divider);color:var(--num);">
+                        <span style="color:var(--pos)">{{ player.biggest_win_cents | money }}</span>
+                        <span style="color:var(--faintest);margin:0 4px;">/</span>
+                        <span style="color:var(--neg)">{{ player.biggest_loss_cents | money }}</span>
+                    </td>
+                </tr>
+                <tr>
+                    <td style="padding:11px 20px;color:var(--muted);font-size:13.5px;border-top:1px solid var(--divider);">Win / Loss Streak</td>
+                    <td style="padding:11px 20px;text-align:right;font-family:var(--font-mono);border-top:1px solid var(--divider);color:var(--num);">
+                        <span style="color:var(--pos)">{{ player.current_win_streak }}W</span>
+                        <span style="color:var(--faintest);margin:0 4px;">·</span>
+                        <span style="color:var(--neg)">{{ player.current_loss_streak }}L</span>
+                    </td>
+                </tr>
+                <tr>
+                    <td style="padding:11px 20px;color:var(--muted);font-size:13.5px;border-top:1px solid var(--divider);">Longest Win / Loss</td>
+                    <td style="padding:11px 20px;text-align:right;font-family:var(--font-mono);border-top:1px solid var(--divider);color:var(--num);">
+                        {{ player.longest_win_streak }}W · {{ player.longest_loss_streak }}L
                     </td>
                 </tr>
             </tbody>
         </table>
     </div>
-</section>
+
+    <!-- Poker inputs and settlement. Fronts/rollovers are part of poker basis,
+         while paid/collected rows are real cash movement. -->
+    <div class="panel col-side">
+        <div class="panel__head">
+            <div>
+                <div class="section-marker">
+                    <span class="section-marker__dot section-marker__dot--rolled"></span>
+                    Poker basis
+                </div>
+                <h2 class="panel__title">Investment and settlement</h2>
+            </div>
+        </div>
+        <table style="width:100%;border-collapse:collapse;">
+            <tbody>
+                <tr>
+                    <td style="padding:11px 20px;color:var(--muted);font-size:13.5px;border-top:1px solid var(--divider);">Buy-ins paid</td>
+                    <td style="padding:11px 20px;text-align:right;font-family:var(--font-mono);border-top:1px solid var(--divider);color:var(--num);">{{ player.total_buy_in_cents | money }}</td>
+                </tr>
+                <tr>
+                    <td style="padding:11px 20px;color:var(--muted);font-size:13.5px;border-top:1px solid var(--divider);">Fronted</td>
+                    <td style="padding:11px 20px;text-align:right;font-family:var(--font-mono);border-top:1px solid var(--divider);color:var(--warn);">{{ player.total_front_cents | money }}</td>
+                </tr>
+                <tr>
+                    <td style="padding:11px 20px;color:var(--muted);font-size:13.5px;border-top:1px solid var(--divider);">Rolled in</td>
+                    <td style="padding:11px 20px;text-align:right;font-family:var(--font-mono);border-top:1px solid var(--divider);color:var(--rolled);">{{ player.total_rollover_in_cents | money }}</td>
+                </tr>
+                <tr>
+                    <td style="padding:11px 20px;color:var(--muted);font-size:13.5px;border-top:1px solid var(--divider);">Total invested</td>
+                    <td style="padding:11px 20px;text-align:right;font-family:var(--font-mono);border-top:1px solid var(--divider);color:var(--num);">{{ player.total_invested_cents | money }}</td>
+                </tr>
+                <tr>
+                    <td style="padding:11px 20px;color:var(--muted);font-size:13.5px;border-top:1px solid var(--divider);">Cash-outs</td>
+                    <td style="padding:11px 20px;text-align:right;font-family:var(--font-mono);border-top:1px solid var(--divider);color:var(--num);">{{ player.total_cash_out_cents | money }}</td>
+                </tr>
+                <tr>
+                    <td style="padding:11px 20px;color:var(--muted);font-size:13.5px;border-top:1px solid var(--divider);">Rolled out</td>
+                    <td style="padding:11px 20px;text-align:right;font-family:var(--font-mono);border-top:1px solid var(--divider);color:var(--rolled);">{{ player.total_rollover_out_cents | money }}</td>
+                </tr>
+                <tr>
+                    <td style="padding:11px 20px;color:var(--muted);font-size:13.5px;border-top:1px solid var(--divider);">Paid out</td>
+                    <td style="padding:11px 20px;text-align:right;font-family:var(--font-mono);border-top:1px solid var(--divider);color:var(--pos);">{{ player.total_paid_cents | money }}</td>
+                </tr>
+                {% if player.total_front_collected_cents > 0 %}
+                <tr>
+                    <td style="padding:11px 20px;color:var(--muted);font-size:13.5px;border-top:1px solid var(--divider);">Debt repaid</td>
+                    <td style="padding:11px 20px;text-align:right;font-family:var(--font-mono);border-top:1px solid var(--divider);color:var(--pos);">{{ player.total_front_collected_cents | money }}</td>
+                </tr>
+                {% endif %}
+                {% if player.current_player_owes_cents > 0 %}
+                <tr>
+                    <td style="padding:11px 20px;color:var(--muted);font-size:13.5px;border-top:1px solid var(--divider);">Still owes</td>
+                    <td style="padding:11px 20px;text-align:right;font-family:var(--font-mono);border-top:1px solid var(--divider);color:var(--owes);">{{ player.current_player_owes_cents | money }}</td>
+                </tr>
+                {% endif %}
+                {% if player.total_front_writeoff_cents > 0 %}
+                <tr>
+                    <td style="padding:11px 20px;color:var(--muted);font-size:13.5px;border-top:1px solid var(--divider);">Written off</td>
+                    <td style="padding:11px 20px;text-align:right;font-family:var(--font-mono);border-top:1px solid var(--divider);color:var(--neg);">{{ player.total_front_writeoff_cents | money }}</td>
+                </tr>
+                {% endif %}
+            </tbody>
+        </table>
+    </div>
+</div>
 
 <script>
-    const playerChartData = {{ chart_data | tojson }};
-    const rootStyles = getComputedStyle(document.documentElement);
-    const textMuted = rootStyles.getPropertyValue('--text-muted').trim();
-    const lineColor = rootStyles.getPropertyValue('--line').trim();
+const playerChartData = {{ chart_data | tojson }};
+const rootStyles = getComputedStyle(document.documentElement);
+const textMuted = rootStyles.getPropertyValue('--text-muted').trim();
+const lineColor = rootStyles.getPropertyValue('--line').trim();
 
-    const sharedScaleOptions = {
-        responsive: true,
-        maintainAspectRatio: false,
-        plugins: {
-            legend: {
-                position: 'bottom',
-                labels: {
-                    color: textMuted,
-                    usePointStyle: true,
-                    boxWidth: 10,
-                    boxHeight: 10,
-                    padding: 18,
-                },
-            },
+const sharedOpts = {
+    responsive: true,
+    maintainAspectRatio: false,
+    plugins: {
+        legend: { position: 'bottom', labels: { color: textMuted, usePointStyle: true, boxWidth: 9, boxHeight: 9, padding: 16 } },
+    },
+    scales: {
+        x: { ticks: { color: textMuted, maxRotation: 0 }, grid: { color: lineColor } },
+        y: { ticks: { color: textMuted }, grid: { color: lineColor } },
+    },
+};
+
+const cumulativeCtx = document.getElementById('playerCumulativeChart');
+if (cumulativeCtx) {
+    new Chart(cumulativeCtx, {
+        type: 'line',
+        data: {
+            labels: playerChartData.labels,
+            datasets: [{
+                label: 'Cumulative Profit',
+                data: playerChartData.cumulative_values,
+                borderColor: playerChartData.color,
+                backgroundColor: playerChartData.color + '38',
+                borderWidth: 2.5,
+                pointRadius: 3,
+                pointHoverRadius: 5,
+                tension: 0.22,
+                fill: true,
+            }]
         },
-        scales: {
-            x: {
-                ticks: { color: textMuted, maxRotation: 0 },
-                grid: { color: lineColor },
-            },
-            y: {
-                ticks: { color: textMuted },
-                grid: { color: lineColor },
-            },
+        options: sharedOpts,
+    });
+}
+
+const sessionCtx = document.getElementById('playerSessionChart');
+if (sessionCtx) {
+    new Chart(sessionCtx, {
+        type: 'bar',
+        data: {
+            labels: playerChartData.labels,
+            datasets: [{
+                label: 'Session Net',
+                data: playerChartData.net_values,
+                backgroundColor: playerChartData.net_colors,
+                borderColor: playerChartData.net_colors,
+                borderRadius: 6,
+                borderSkipped: false,
+            }]
         },
-    };
+        options: sharedOpts,
+    });
+}
 
-    const cumulativeCtx = document.getElementById('playerCumulativeChart');
-    if (cumulativeCtx) {
-        new Chart(cumulativeCtx, {
-            type: 'line',
-            data: {
-                labels: playerChartData.labels,
-                datasets: [{
-                    label: 'Cumulative Profit',
-                    data: playerChartData.cumulative_values,
-                    borderColor: playerChartData.color,
-                    backgroundColor: playerChartData.color,
-                    borderWidth: 2.5,
-                    pointRadius: 3,
-                    pointHoverRadius: 5,
-                    tension: 0.22,
-                }]
-            },
-            options: sharedScaleOptions,
-        });
-    }
-
-    const sessionCtx = document.getElementById('playerSessionChart');
-    if (sessionCtx) {
-        new Chart(sessionCtx, {
-            type: 'bar',
-            data: {
-                labels: playerChartData.labels,
-                datasets: [{
-                    label: 'Session Net',
-                    data: playerChartData.net_values,
-                    backgroundColor: playerChartData.net_colors,
-                    borderColor: playerChartData.net_colors,
-                    borderRadius: 8,
-                    borderSkipped: false,
-                }]
-            },
-            options: sharedScaleOptions,
-        });
-    }
-</script>
-
-<script>
-    const breakdownCtx = document.getElementById('playerBreakdownChart');
-    if (breakdownCtx) {
-        new Chart(breakdownCtx, {
-            type: 'doughnut',
-            data: {
-                labels: ['Wins', 'Losses', 'Break-even'],
-                datasets: [{
-                    data: [
-                        {{ player.winning_sessions }},
-                        {{ player.losing_sessions }},
-                        {{ player.break_even_sessions }}
-                    ],
-                    backgroundColor: [
-                        '#59d98e',
-                        '#f06c72',
-                        '#e4bf65'
-                    ],
-                    borderWidth: 0,
-                }]
-            },
-            options: {
-                responsive: true,
-                maintainAspectRatio: false,
-                plugins: {
-                    legend: {
-                        position: 'bottom',
-                        labels: {
-                            color: textMuted,
-                            usePointStyle: true,
-                            boxWidth: 10,
-                            boxHeight: 10,
-                            padding: 18,
-                        },
-                    },
-                },
-            },
-        });
-    }
 </script>
 {% endblock %}
diff --git a/templates/session_detail.html b/templates/session_detail.html
index 900b493..0d305a1 100644
--- a/templates/session_detail.html
+++ b/templates/session_detail.html
@@ -1,164 +1,146 @@
 {% extends "base.html" %}
-{% block title %}{{ session.session_date }} · Poker Portal{% endblock %}
+{% block title %}{{ session_label(session) }} · boker.club{% endblock %}
+{% block page_class %}page--session{% endblock %}
 {% block content %}
-<section class="hero-card compact">
-    <div style="display: flex; justify-content: space-between;">
-        <div>
-            <p class="eyebrow">Session detail</p>
-            <h1>{{ session_label(session) }}</h1>
-            <p class="muted-text">Current totals are derived from the event log for this date.</p>
+
+<div class="breadcrumb">
+    <a href="{{ url_for('sessions') }}">Sessions</a>
+    <span class="breadcrumb__sep">/</span>
+    <span>{{ session_label(session) }}</span>
+    <span style="flex:1"></span>
+    {% if prev_session %}
+    <a class="btn btn--ghost btn--sm" href="{{ url_for('session_detail', session_id=prev_session.session_id) }}">← Prev</a>
+    {% endif %}
+    {% if next_session %}
+    <a class="btn btn--ghost btn--sm" href="{{ url_for('session_detail', session_id=next_session.session_id) }}">Next →</a>
+    {% endif %}
+</div>
+
+<div class="hero" style="padding-top:0;">
+    <p class="hero__kicker session-number">
+        Session #{{ "%03d"|format(session_number) }}
+    </p>
+    <h1 class="hero__title">{{ session_label(session) }}</h1>
+    <p class="hero__sub">{{ session.entries|length }} player{{ 's' if session.entries|length != 1 else '' }} · <span class="status-badge status-{{ session.status }}">{{ session.status }}</span></p>
+</div>
+
+<!-- Recon cards -->
+<div class="recon-grid" style="margin-bottom:20px;">
+    <div class="panel">
+        <div class="recon-card-head">
+            <span class="kicker kicker--dot kicker--dot-accent">Cash flow</span>
         </div>
-
-        <div style="align-self: center;">
-            {% if prev_session %}
-                <a class="secondary-button" href="{{ url_for('session_detail', session_id=prev_session.session_id) }}">
-                    Previous Session
-                </a>
-            {% endif %}
-
-            {% if next_session %}
-                <a class="secondary-button" href="{{ url_for('session_detail', session_id=next_session.session_id) }}">
-                    Next Session
-                </a>
-            {% endif %}
+        <div class="recon-metric-grid">
+            <div class="recon-cell">
+                <span class="kicker" style="font-size:10px;">Cash in</span>
+                <div class="recon-val recon-val--num">{{ session.total_cash_in_cents | money }}</div>
+            </div>
+            <div class="recon-cell">
+                <span class="kicker" style="font-size:10px;">Gross payout</span>
+                <div class="recon-val recon-val--num">{{ session.total_gross_payout_cents | money }}</div>
+            </div>
+            <div class="recon-cell">
+                <span class="kicker" style="font-size:10px;">Cash paid out</span>
+                <div class="recon-val recon-val--pos">{{ session.total_paid_cents | money }}</div>
+            </div>
+            <div class="recon-cell">
+                <span class="kicker" style="font-size:10px;">Rolled out</span>
+                <div class="recon-val" style="color:var(--rolled)">{{ session.total_rollover_out_cents | money }}</div>
+            </div>
         </div>
     </div>
-</section>
-
-<section class="grid payout-summary-grid">
-    <article class="panel stat-card">
-        <span>Gross payout</span>
-        <strong>{{ session.total_gross_payout_cents | money }}</strong>
-    </article>
-
-    <article class="panel stat-card">
-        <span>Total rolled out</span>
-        <strong>{{ session.total_rollover_out_cents | money }}</strong>
-    </article>
-
-    <article class="panel stat-card">
-        <span>Total paid</span>
-        <strong class="positive">{{ session.total_paid_cents | money }}</strong>
-    </article>
-
-    <article class="panel stat-card">
-        <span>Still owed</span>
-        <strong class="{{ 'negative' if session.total_current_due_cents > 0 else 'positive' }}">
-            {{ session.total_current_due_cents | money }}
-        </strong>
-    </article>
-
-    <article class="panel stat-card">
-        <span>Players still owe</span>
-        <strong class="{{ 'negative' if session.total_player_owes_cents > 0 else '' }}">
-            {{ session.total_player_owes_cents | money }}
-        </strong>
-    </article>
-
-    <article class="panel stat-card">
-        <span>Written off</span>
-        <strong class="{{ 'negative' if session.total_front_writeoff_cents > 0 else '' }}">
-            {{ session.total_front_writeoff_cents | money }}
-        </strong>
-    </article>
-</section>
-
-
-<section class="panel results-panel results-panel-full">
-    <div class="panel-header">
-        <div>
-            <p class="eyebrow">Results</p>
-            <h2>Player totals</h2>
+    <div class="panel">
+        <div class="recon-card-head">
+            <span class="kicker kicker--dot kicker--dot-warn">Open items</span>
         </div>
-
-        <div class="table-toolbar">
-            <button type="button" class="secondary-button table-view-toggle is-active" data-view="compact">
-                Compact
-            </button>
-            <button type="button" class="secondary-button table-view-toggle" data-view="full">
-                Full details
-            </button>
+        <div class="recon-metric-grid">
+            <div class="recon-cell">
+                <span class="kicker" style="font-size:10px;">House owes</span>
+                <div class="recon-val {{ 'recon-val--neg' if session.total_current_due_to_player_cents > 0 else 'recon-val--pos' }}">
+                    {{ session.total_current_due_to_player_cents | money }}
+                </div>
+            </div>
+            <div class="recon-cell">
+                <span class="kicker" style="font-size:10px;">Players owe house</span>
+                <div class="recon-val {{ 'recon-val--warn' if session.total_current_due_to_house_cents > 0 else '' }}">
+                    {{ session.total_current_due_to_house_cents | money }}
+                </div>
+            </div>
+            <div class="recon-cell">
+                <span class="kicker" style="font-size:10px;">Debt repaid</span>
+                <div class="recon-val" style="color:var(--pos)">{{ session.total_front_collected_cents | money }}</div>
+            </div>
+            <div class="recon-cell">
+                <span class="kicker" style="font-size:10px;">Written off</span>
+                <div class="recon-val" style="color:var(--neg)">{{ session.total_front_writeoff_cents | money }}</div>
+            </div>
         </div>
     </div>
+</div>
 
-    <div class="table-scroll table-scroll-open">
-        <table class="data-table session-results-table">
+<!-- Player totals table -->
+<div class="panel" style="margin-bottom:20px;">
+    <div class="panel__head">
+        <div>
+            <span class="kicker" style="margin:0;">Results</span>
+            <h2 class="panel__title">Player totals</h2>
+        </div>
+        <div class="segmented" id="viewToggle">
+            <button class="seg is-on" data-view="compact">Compact</button>
+            <button class="seg" data-view="full">Full ledger</button>
+        </div>
+    </div>
+    <div class="tbl-scroll">
+        <table class="tbl tbl--session" id="sessionTable">
             <thead>
                 <tr>
-                    <th>Player</th>
-                    <th>In</th>
-                    <th class="detail-col">Fronted</th>
-                    <th class="detail-col">Rolled in</th>
-                    <th>Out</th>
+                    <th class="col-player">Player</th>
+                    <th>Invested</th>
+                    <th>Cash-out</th>
                     <th>Net</th>
-                    <th class="detail-col">Gross due</th>
-                    <th class="detail-col">Paid</th>
-                    <th class="detail-col">Rolled out</th>
-                    <th class="detail-col">Collected</th>
-                    <th class="detail-col">Written off</th>
-                    <th>Still owed</th>
+                    <th>Cash paid</th>
+                    <th>Settlement</th>
                     <th>Status</th>
-                    <th>Notes</th>
+                    <th class="col-acct">Fronted</th>
+                    <th class="col-acct">Rolled in</th>
+                    <th class="col-acct">Gross payout</th>
+                    <th class="col-acct">Rolled out</th>
+                    <th class="col-acct">Notes</th>
                 </tr>
             </thead>
             <tbody>
                 {% for entry in session.entries %}
-                <tr>
-                    <td>
-                        <a href="{{ url_for('player_detail', player_name=entry.player_name) }}">
-                            {{ entry.player_name }}
-                        </a>
+                <tr onclick="window.location='{{ url_for('player_detail', player_name=entry.player_name) }}'">
+                    <td class="col-player">
+                        <a href="{{ url_for('player_detail', player_name=entry.player_name) }}">{{ entry.player_name }}</a>
                     </td>
-
                     <td>{{ entry.invested_cents | money }}</td>
-                    <td class="detail-col">{{ entry.front_cents | money }}</td>
-                    <td class="detail-col">{{ entry.rollover_in_cents | money }}</td>
                     <td>{{ entry.cash_out_cents | money }}</td>
-
-                    <td class="{{ 'positive' if entry.net_cents > 0 else 'negative' if entry.net_cents < 0 else '' }}">
-                        {{ entry.net_cents | money }}
+                    <td class="num-net {{ 'num-pos' if entry.net_cents > 0 else 'num-neg' if entry.net_cents < 0 else 'num-muted' }}">
+                        {{ '+' if entry.net_cents > 0 else '' }}{{ entry.net_cents | money }}
                     </td>
-
-                    <td class="detail-col">
-                        {% if entry.raw_player_owes_cents > 0 %}
-                            —
+                    <td style="color:var(--pos)">{{ entry.paid_cents | money }}</td>
+                    <td class="{{ 'num-neg' if entry.current_due_to_player_cents > 0 else '' }}">
+                        {% if entry.current_due_to_house_cents > 0 %}
+                            <span style="color:var(--owes)">owes {{ entry.current_due_to_house_cents | money }}</span>
                         {% else %}
-                            {{ entry.gross_payout_cents | money }}
+                            {{ entry.current_due_to_player_cents | money }}
                         {% endif %}
                     </td>
-
-                    <td class="detail-col">{{ entry.paid_cents | money }}</td>
-                    <td class="detail-col">{{ entry.rollover_out_cents | money }}</td>
-                    <td class="detail-col">{{ entry.front_collected_applied_cents | money }}</td>
-                    <td class="detail-col">{{ entry.front_writeoff_applied_cents | money }}</td>
-
-                    <td class="{% if entry.player_owes_cents > 0 %}negative{% elif entry.front_writeoff_applied_cents > 0 %}negative{% elif entry.front_collected_applied_cents > 0 %}positive{% elif entry.current_due_cents > 0 %}negative{% else %}positive{% endif %}">
-                        {% if entry.player_owes_cents > 0 %}
-                            Owes {{ entry.player_owes_cents | money }}
-                        {% elif entry.front_writeoff_applied_cents > 0 %}
-                            Written off {{ entry.front_writeoff_applied_cents | money }}
-                        {% elif entry.front_collected_applied_cents > 0 %}
-                            Collected {{ entry.front_collected_applied_cents | money }}
-                        {% else %}
-                            {{ entry.current_due_cents | money }}
-                        {% endif %}
-                    </td>
-
                     <td>
-                        <span class="status-badge status-{{ entry.payout_status }}">
-                            {{ entry.payout_status }}
-                        </span>
+                        <span class="badge badge--{{ entry.payout_status }}">{{ entry.payout_status }}</span>
                     </td>
-
-                    <td>
+                    <td class="col-acct" style="color:var(--warn)">{{ entry.front_cents | money }}</td>
+                    <td class="col-acct" style="color:var(--rolled)">{{ entry.rollover_in_cents | money }}</td>
+                    <td class="col-acct">
+                        {% if entry.player_owes_gross_cents > 0 %}—{% else %}{{ entry.gross_payout_cents | money }}{% endif %}
+                    </td>
+                    <td class="col-acct" style="color:var(--rolled)">{{ entry.rollover_out_cents | money }}</td>
+                    <td class="col-acct" style="text-align:left;font-family:var(--font-ui);">
                         {% if entry.notes %}
-                            <ul class="note-list">
-                                {% for note in entry.notes %}
-                                    <li>{{ note }}</li>
-                                {% endfor %}
-                            </ul>
+                            <ul class="note-list">{% for n in entry.notes %}<li>{{ n }}</li>{% endfor %}</ul>
                         {% else %}
-                            —
+                            <span style="color:var(--faintest-2)">—</span>
                         {% endif %}
                     </td>
                 </tr>
@@ -166,185 +148,134 @@
             </tbody>
         </table>
     </div>
-</section>
+</div>
 
-<section class="grid two-col chart-row">
-    <div class="panel chart-panel chart-panel-compact">
-        <div class="panel-header">
-            <div>
-                <p class="eyebrow">Breakdown</p>
-                <h2>Net by player</h2>
+<!-- Bottom row: net bars + snapshot + audit feed -->
+<div class="split" style="align-items:stretch;">
+    <div class="panel col-main">
+        <div class="panel__head">
+            <span class="kicker" style="margin:0;">Breakdown</span>
+            <h2 class="panel__title">Net by player</h2>
+        </div>
+        <div class="chart-wrap">
+            <div class="session-net-bars" id="sessionBreakdownChart" aria-label="Net by player"></div>
             </div>
-        </div>
-        <div class="chart-frame chart-frame-compact">
-            <canvas id="sessionBreakdownChart"></canvas>
-        </div>
     </div>
 
-    <div class="panel session-insights-panel">
-        <div class="panel-header">
-            <div>
-                <p class="eyebrow">Quick read</p>
-                <h2>Session snapshot</h2>
-            </div>
+    <div class="panel col-side" style="display:flex;flex-direction:column;">
+        <div class="panel__head">
+            <span class="kicker" style="margin:0;">Quick read</span>
+            <h2 class="panel__title">Session snapshot</h2>
         </div>
-
         {% set winners = session.entries | selectattr('net_cents', 'gt', 0) | list %}
-        {% set losers = session.entries | selectattr('net_cents', 'lt', 0) | list %}
-
-        <div class="detail-grid">
-            <div class="detail-row">
-                <span>Players</span>
-                <strong>{{ session.entries|length }}</strong>
+        {% set losers  = session.entries | selectattr('net_cents', 'lt', 0) | list %}
+        <div class="snapshot-grid" style="flex:1;">
+            <div class="snapshot-cell">
+                <span class="kicker" style="font-size:10px;">Biggest winner</span>
+                <div class="snapshot-val" style="color:var(--pos)">
+                    {% if winners %}{{ (winners | sort(attribute='net_cents', reverse=True) | first).net_cents | money }}{% else %}—{% endif %}
+                </div>
+                {% if winners %}<div style="font-size:12px;color:var(--muted);margin-top:4px;">{{ winners | sort(attribute='net_cents', reverse=True) | first | attr('player_name') }}</div>{% endif %}
             </div>
-            <div class="detail-row">
-                <span>Biggest winner</span>
-                <strong>
-                    {% if winners %}
-                        {{ winners | sort(attribute='net_cents', reverse=True) | first | attr('player_name') }}
-                    {% else %}
-                        —
-                    {% endif %}
-                </strong>
+            <div class="snapshot-cell">
+                <span class="kicker" style="font-size:10px;">Biggest loser</span>
+                <div class="snapshot-val" style="color:var(--neg)">
+                    {% if losers %}{{ (losers | sort(attribute='net_cents') | first).net_cents | money }}{% else %}—{% endif %}
+                </div>
+                {% if losers %}<div style="font-size:12px;color:var(--muted);margin-top:4px;">{{ losers | sort(attribute='net_cents') | first | attr('player_name') }}</div>{% endif %}
             </div>
-            <div class="detail-row">
-                <span>Best result</span>
-                <strong class="positive">
-                    {% if winners %}
-                        {{ (winners | sort(attribute='net_cents', reverse=True) | first).net_cents | money }}
-                    {% else %}
-                        $0.00
-                    {% endif %}
-                </strong>
+            <div class="snapshot-cell">
+                <span class="kicker" style="font-size:10px;">Total cash-out</span>
+                <div class="snapshot-val">{{ session.total_cash_out_cents | money }}</div>
             </div>
-            <div class="detail-row">
-                <span>Biggest loser</span>
-                <strong>
-                    {% if losers %}
-                        {{ losers | sort(attribute='net_cents') | first | attr('player_name') }}
-                    {% else %}
-                        —
-                    {% endif %}
-                </strong>
-            </div>
-            <div class="detail-row">
-                <span>Worst result</span>
-                <strong class="negative">
-                    {% if losers %}
-                        {{ (losers | sort(attribute='net_cents') | first).net_cents | money }}
-                    {% else %}
-                        $0.00
-                    {% endif %}
-                </strong>
-            </div>
-            <div class="detail-row">
-                <span>Unpaid total</span>
-                <strong class="{{ 'negative' if session.total_remaining_cents > 0 else 'positive' }}">
-                    {{ session.total_remaining_cents | money }}
-                </strong>
+            <div class="snapshot-cell">
+                <span class="kicker" style="font-size:10px;">Open items</span>
+                <div class="snapshot-val {{ 'recon-val--neg' if (session.total_current_due_to_player_cents + session.total_current_due_to_house_cents) > 0 else '' }}">
+                    {{ (session.total_current_due_to_player_cents + session.total_current_due_to_house_cents) | money }}
+                </div>
             </div>
         </div>
     </div>
-</section>
+</div>
 
-<section class="panel">
-    <div class="panel-header">
+<!-- Audit feed -->
+<div class="panel" style="margin-top:20px;">
+    <div class="panel__head">
         <div>
-            <p class="eyebrow">Audit trail</p>
-            <h2>Raw ledger events</h2>
+            <span class="kicker" style="margin:0;">Audit trail</span>
+            <h2 class="panel__title">Raw ledger events</h2>
         </div>
+        <span class="badge badge--closed" style="font-size:9.5px;letter-spacing:.08em;">append-only</span>
     </div>
-    <div class="event-feed">
+    <div class="event-feed feed feed--inline" style="max-height:none;">
         {% for event in raw_events | reverse %}
-        <article class="event-card">
+        <div class="event-card event-card--inline">
             <div class="event-card-top">
                 <strong>{{ event.player_name or "Session" }}</strong>
-                <span class="pill pill-{{ event.event_type }}">{{ event.event_type }}</span>
+                <span class="pill pill-{{ event.event_type }}">{{ event.event_type | replace('_', ' ') }}</span>
+                {% if event.note %}<span class="event-note">{{ event.note }}</span>{% endif %}
             </div>
             <p class="event-amount">{{ event.amount_cents | money }}</p>
-            {% if event.note %}
-                <p class="muted-text small">{{ event.note }}</p>
-            {% endif %}
-            <p class="tiny-text">{{ event.created_at }} · by {{ event.actor }}</p>
-        </article>
+            <p class="tiny-text" style="white-space:nowrap;">{{ event.created_at }}</p>
+        </div>
         {% else %}
-        <p class="muted-text">No raw events recorded.</p>
+        <p class="muted-text" style="padding:20px;">No events recorded.</p>
         {% endfor %}
     </div>
-</section>
+</div>
 
 <script>
-    const sessionChartData = {{ chart_data | tojson }};
-    const rootStyles = getComputedStyle(document.documentElement);
-    const textMuted = rootStyles.getPropertyValue('--text-muted').trim();
-    const lineColor = rootStyles.getPropertyValue('--line').trim();
+const sessionChartData = {{ chart_data | tojson }};
 
-    const sessionBreakdownCtx = document.getElementById('sessionBreakdownChart');
-    if (sessionBreakdownCtx) {
-        new Chart(sessionBreakdownCtx, {
-            type: 'bar',
-            data: {
-                labels: sessionChartData.labels,
-                datasets: [{
-                    label: 'Session Net',
-                    data: sessionChartData.net_values,
-                    backgroundColor: sessionChartData.net_colors,
-                    borderColor: sessionChartData.net_colors,
-                    borderRadius: 8,
-                    borderSkipped: false,
-                }]
-            },
-            options: {
-                responsive: true,
-                maintainAspectRatio: false,
-                plugins: {
-                    legend: {
-                        position: 'bottom',
-                        labels: {
-                            color: textMuted,
-                            usePointStyle: true,
-                            boxWidth: 10,
-                            boxHeight: 10,
-                            padding: 18,
-                        },
-                    },
-                },
-                scales: {
-                    x: {
-                        ticks: { color: textMuted, maxRotation: 0 },
-                        grid: { color: lineColor },
-                    },
-                    y: {
-                        ticks: { color: textMuted },
-                        grid: { color: lineColor },
-                    },
-                },
-            },
-        });
-    }
-</script>
+const breakdownCtx = document.getElementById('sessionBreakdownChart');
+if (breakdownCtx) {
+    const values = sessionChartData.net_values || [];
+    const labels = sessionChartData.labels || [];
+    const colors = sessionChartData.net_colors || [];
+    const maxAbs = Math.max(...values.map(value => Math.abs(value)), 1);
+    const moneyFormatter = new Intl.NumberFormat('en-US', {
+        style: 'currency',
+        currency: 'USD',
+    });
+    const escapeHtml = value => String(value).replace(/[&<>"']/g, char => ({
+        '&': '&amp;',
+        '<': '&lt;',
+        '>': '&gt;',
+        '"': '&quot;',
+        "'": '&#39;',
+    }[char]));
 
-<script>
-    const sessionTable = document.querySelector('.session-results-table');
-    const viewButtons = document.querySelectorAll('.table-view-toggle');
+    breakdownCtx.innerHTML = labels.map((label, index) => {
+        const value = Number(values[index] || 0);
+        const width = Math.min(Math.abs(value) / maxAbs * 50, 50);
+        const sideClass = value < 0 ? 'session-net-bars__bar--neg' : 'session-net-bars__bar--pos';
+        const amount = `${value > 0 ? '+' : ''}${moneyFormatter.format(value)}`;
+        const color = colors[index] || (value < 0 ? '#e0758a' : value > 0 ? '#6fc093' : '#84828e');
 
-    if (sessionTable && viewButtons.length) {
-        sessionTable.classList.add('compact');
+        return `
+            <div class="session-net-bars__row">
+                <div class="session-net-bars__name">${escapeHtml(label)}</div>
+                <div class="session-net-bars__track">
+                    <span class="session-net-bars__bar ${sideClass}" style="width:${width}%;background:${color};"></span>
+                </div>
+                <div class="session-net-bars__amount">${amount}</div>
+            </div>
+        `;
+    }).join('');
+}
 
-        viewButtons.forEach((button) => {
-            button.addEventListener('click', () => {
-                const view = button.dataset.view;
-
-                viewButtons.forEach((btn) => btn.classList.remove('is-active'));
-                button.classList.add('is-active');
-
-                if (view === 'full') {
-                    sessionTable.classList.remove('compact');
-                } else {
-                    sessionTable.classList.add('compact');
-                }
-            });
-        });
-    }
+// Compact / Full toggle
+const sessionTable = document.getElementById('sessionTable');
+document.querySelectorAll('#viewToggle .seg').forEach(btn => {
+    btn.addEventListener('click', () => {
+        document.querySelectorAll('#viewToggle .seg').forEach(b => b.classList.remove('is-on'));
+        btn.classList.add('is-on');
+        if (btn.dataset.view === 'full') {
+            sessionTable.classList.add('is-full');
+        } else {
+            sessionTable.classList.remove('is-full');
+        }
+    });
+});
 </script>
 {% endblock %}
diff --git a/templates/sessions.html b/templates/sessions.html
index 9587dda..1e06957 100644
--- a/templates/sessions.html
+++ b/templates/sessions.html
@@ -1,52 +1,54 @@
 {% extends "base.html" %}
-{% block title %}Sessions · Poker Portal{% endblock %}
+{% block title %}Sessions · boker.club{% endblock %}
 {% block content %}
-<section class="hero-card compact">
-    <div>
-        <p class="eyebrow">Session history</p>
-        <h1>Sessions</h1>
-        <p class="muted-text">Browse every recorded game night, inspect the table totals, and drill into each player result.</p>
-    </div>
-</section>
 
-<section class="panel">
-    <div class="panel-header">
+<div class="hero">
+    <p class="hero__kicker">Session history</p>
+    <h1 class="hero__title">Sessions</h1>
+    <p class="hero__sub">Browse every recorded game night and inspect table totals.</p>
+</div>
+
+<div class="panel">
+    <div class="panel__head">
         <div>
-            <p class="eyebrow">Archive</p>
-            <h2>All sessions by date</h2>
+            <span class="kicker" style="margin:0;">Archive</span>
+            <h2 class="panel__title">All sessions</h2>
         </div>
     </div>
-    <div class="table-wrap">
-        <table>
+    <div class="tbl-scroll">
+        <table class="tbl" style="min-width:600px;">
             <thead>
                 <tr>
-                    <th>Date</th>
+                    <th class="col-left">Date</th>
                     <th>Status</th>
                     <th>Players</th>
-                    <th>Total Buy-ins</th>
-                    <th>Total Cash-outs</th>
-                    <th>Table Net</th>
+                    <th>Invested</th>
+                    <th>Cash out</th>
+                    <th>Table net</th>
                 </tr>
             </thead>
             <tbody>
-                {% for session in sessions %}
-                <tr>
-                    <td><a href="{{ url_for('session_detail', session_id=session.session_id) }}">{{ session_label(session) }}</a></td>
-                    <td><span class="status-badge status-{{ session.status }}">
-                        {{ session.status }}
-                    </span></td>
-                    <td>{{ session.entries|length }}</td>
-                    <td>{{ session.total_buy_in_cents | money }}</td>
-                    <td>{{ session.total_cash_out_cents | money }}</td>
-                    <td class="{{ 'positive' if session.total_net_cents > 0 else 'negative' if session.total_net_cents < 0 else '' }}">{{ session.total_net_cents | money }}</td>
+                {% for s in sessions %}
+                <tr onclick="window.location='{{ url_for('session_detail', session_id=s.session_id) }}'">
+                    <td class="col-left">
+                        <a href="{{ url_for('session_detail', session_id=s.session_id) }}">{{ session_label(s) }}</a>
+                    </td>
+                    <td><span class="badge badge--{{ s.status }}">{{ s.status }}</span></td>
+                    <td>{{ s.entries|length }}</td>
+                    <td>{{ s.total_invested_cents | money }}</td>
+                    <td>{{ s.total_cash_out_cents | money }}</td>
+                    <td class="{{ 'num-pos' if s.total_net_cents > 0 else 'num-neg' if s.total_net_cents < 0 else '' }}">
+                        {{ s.total_net_cents | money }}
+                    </td>
                 </tr>
                 {% else %}
                 <tr>
-                    <td colspan="5">No sessions yet.</td>
+                    <td colspan="6" style="text-align:left;padding:28px;color:var(--muted);">No sessions yet.</td>
                 </tr>
                 {% endfor %}
             </tbody>
         </table>
     </div>
-</section>
+</div>
+
 {% endblock %}
diff --git a/tests/__init__.py b/tests/__init__.py
new file mode 100644
index 0000000..8b13789
--- /dev/null
+++ b/tests/__init__.py
@@ -0,0 +1 @@
+
diff --git a/tests/__pycache__/__init__.cpython-313.pyc b/tests/__pycache__/__init__.cpython-313.pyc
new file mode 100644
index 0000000000000000000000000000000000000000..0fca85c57eb5bdc9bce3105496c5aa11e7532a99
GIT binary patch
literal 141
zcmey&%ge<81YaLoWHAEi#~=<2fCNC`GYgQI%8<^W$>_I|p@<121QNfcqo0wVo2s9d
zlbD;SA5fH^m6}{qte=#hom!+{l3EO8$H!;pWtPOp>lIYq;;_lhPbtkwwJTx;Y6clz
P3}Sp_W@Kb6Vg|ARfZ!n4

literal 0
HcmV?d00001

diff --git a/tests/__pycache__/test_accounting.cpython-313.pyc b/tests/__pycache__/test_accounting.cpython-313.pyc
new file mode 100644
index 0000000000000000000000000000000000000000..5c020f2ea8c6948b2abf9a0c386547d86630bbb6
GIT binary patch
literal 8233
zcmd5>U2NOd6~2^6iIQbW{*C1(sbVK<)HIIm*lB(o$8zTUG>a3PQCBQpSw*5<6^ayJ
zN{Jm{L(pNHSL`8v2;yV|+U8-4kpgv*0Mpt6GtdI-qXjv$!R4XFIt+f(;tW{!v~x&G
zlpNY~+M?@)ba;91<+=AB-t(OwE>~7M36wv5vG<LIDnkB-H-+NTE6cxw$~7VofjL1a
zUM(k>mn_ucCxUgzDzHOr2P<%m<PDZ`f^Enq*x}E^-vNId;e-(`p+X&DZy-%Xa5WO4
za)=Ci3zHewPODa@jv=Su-v0_A;c7x)Y`rn2P-`Ncdeu)xm=Px6S;G7N0HbU;myX4w
zqAbaBESV7H^!f8)8k1zj7CxU$CsK-yN~ttWM3@3IxZ2>4(=WFIxkk<w`_Af%A|wQ2
z*vS#nsrMDGTS>suzZ8Y%0v5#@g9$ha^F#v-WuZ~V;eMqdCCMpy7g8}CiQqzFiIJ8I
z;|dp%5-FKhz%X2ejJv%;9#pu0oxb|=RAh1}=V{7SG|#ck%g{p<XJKctsNyQrqv4dK
zR9uLM$0aHz!sjK$DP07<Vru+?q;RoBR2qvQ`$ECDuWq;pD%W6hZrEOkbCcax!4l#G
ztA_~eZfl5yn2;r8H3Sl33mX^UoeTCB2MB=gSD2lbtJ+)J_v~zKgWs9f*8T8PtgY?Q
z%eEcrokA2A_aAU57FfG8LM2#rR1BwRB`kuvk$8~c;ZR)K>k?J*C~P7LJLJNVRFZ;Z
zQCb0;*>kGUDI94c<9_{Wp}1XzQ$<2ILLKkr!$7W(d^M@wc-1u(oRX$~IOpEB*bunA
zZN_^0nVBPV^#>N~{fiA-7dJFP<w3)yso~#LE_$mMt2X?z#_6)<iIcNY)RzeSi^ZbX
zmb;*G4URBn1VSwWLqR133#bE}4Z+$-Ky6r{HdG>N7i>Uz!4A|R@YFft2vjJZVDYq^
z!6UTvEbxrr$to1AtFQ7csJv=<)mnOfLrmdyCD@X)Z0TSG2G+rc*qWj$6-RO<BdstJ
zSImdF!O~gv*-f6dz4CI01rCL^zf8q&iM!#y{1T9ErkVKFb5}!-H4u`l8q^t<Ud~t$
z1)?C%leM6L%tdmI^OKW}gjB%OBjiQvFf+~cPc!O42v`+MORK`j>Ya@9`TbY4SMTT=
zkrL9_1=_8=utK0MpeA%&98S`fu6QyMj?3LG#nDZ`M8*U2?<I1D%+(*iwS8*f{rGe|
z^G3Gi*!9uL(OcUeFY_?qXEn{tO-D2HZS0xivOo(^SprtN6)p-Rskdd@rr(1e`W%pE
z_?PUX_Vg{!RNEg8esFO1M0WS7>jRSmw>*#Ob{GZxP;#Jf(pXBdqi_H`19pX#rTDPI
z(&Qyg!0L1guOpDG*!3Ey846Uk0~f#lwbwua^><JdwBlR!9r)oXc^{C+fPpp7-|ooO
zv`+93s_W<LkH5P;SARTLeSE_Hz*{?Cd-@&w?>)CXx!Th?@97C{(NjP1(>Z>Vrj9yD
z10zCEKXFgX8{s4&)(w{S;s_|lkr&{=3t-(4-#T^7e4^Jb@PcF2UMKWc6nb}A3yPJ7
z`7cz%{9r~_mXKwz6rc6(vyQ?zfh%z71TI+oxD#_u2yZLOSK`DB7JPvcZeNiT!uyI+
z!ij&1-I@3ff@>X80dHbuDSd8)1S<O#i`@1fr(wtxCa7@d(&Mqj5(;$*PmW@bgyq+h
z>C_US5?R96p|BUivFH+>GK%*BCvC?%LWfcjmSu^i`bN{?xZ;i_E&`5&-81aI;z&p-
z-O$yflBsZ9#2Lg`LT{|q8gUL0=G9xDiKHn7r4plQNlYb0-TZ3?vvEZytXGz_2dAxc
zCoT?s9ohy&2Mt|Mx2sNyx@UD6IAJ&u71i0pR1%{x8Jw3$O4++ojo14m;*$IYkSk=-
zx9RQ8H#UFit-BhX`oZny+m|wyOfcu|eo$-~&opJiId6~Aa&d-c+H&55c{^L_UbfmA
zoxgHV*z;cEs9fM1vV6l--GXmt*0=M$^vvL$@p*pVBJV2ny#4HrXW!d4W4RNU=R1t{
z4GX@Gtgqvql<B=2o9BDVdOEYd&U@+1;9cMqG<sl`{aN4sOmLp>E^FPF_3g{F-RBQ}
zH_)i!JB&sZPoep1qtVlFGC`wKELa6u8MC-$UC)_dPYL>&tXxGSict>TgXBdZ3O7uX
ziPRE;KHZPx0FWhgKj=Xu-AE20SqVb42U~+k(08W2K$Pkcnv`Ww?C~O~&_3)vjO6=B
zjshu%hdrv2s|yihGGLSrXXgMWz)3G67e+XMW65}2iU8axM@+%usrjHVR)-Eog#`mB
z#xq+o13B*@qvhhvXl6^!+qE9(7`QVw&+jc!Y#ln7JKN{^-6ib{zP7Bd?Otc5>h9io
zzN@Uq1R!*%nF*J1hgKbC2JVjC=X=(Gj+<bHz9mP7`^KTe^%M%fwj=X2PQ%*JvHmqN
zgJ#fCX}BMtxbFTHic9yRE}>g%sO>-C4h-P#9#wS}7X?j8UWD)+bWzn|Z2)QR(Uh4t
zJPJ*jQH3>S?#G&{xU1-FP}SMe8AK{Y(-BD)<z$*hq++@RupoRcE{T_7DfDnOZH9_6
zV5+`fhvgAiwfq6fV0})&w%Mwj_pqVKKh4lta02?)&}3a-**iPt`8{P?sq1Uq-L5iI
zuN(A_`)0R(bYh-AW;~;7=gjDRe&3UtiI}Q}7@GljOXF|TU;>>;wdlR&!Nkg5Cj=tJ
zV8Tem2ri)#!W1|3dWxY2n_!Gkr6l&ZoGk_lg13=`EGBWgwPZ}yDr49XYZj&m)yO`<
zf!QnuEczDVau%hd7NN$R?^#R$X(P<T922e~tC=R2aH=)M88c3tnOQI4wEi`*gC>Sv
zs4hc?y7iy~9RzV`MqR)f8g+<G+AkZiNxM=}R6ht$SQufRd^iR@>q)l=WX*I7gXxxl
zMTNG0+6+vmEo$z8ZiBjv9)}+4t9b`SSQ{}QxG8lX3V@T4E)`q|lYGn&&h!irH62se
zd#hn8`2NuJQ07c_XYhJ>GJLB+OUJxf)5P3xG_8`3`GzF|Nh+dAgsKZ%DGK^y7=V9c
z=`}q!$ELQt-!<Kp>B#OlbUip3ygBxmz6yg>xG#H?$WKk3p&2Q8lMo1-C(iUl8JtBU
zQC3JAslMIn%X|%{kkz;raCvTH--pL$Mi(}<|7BDAhsPevc*x#tXk_Ras6dd5@vWLK
zqC2qm0+JpeiWTzis&P`b=mG8Ov8v{l;<_NEt45|R$Y&Swv1#^6VWSW<D^8@MmS4hb
z3FMZbXz8WaavS%*kC)Q(bq^>CLB_2774oI4>gv`h*E^BhFV6I4n4D|>gJR3R83~+F
z*CC^&JJX&S&AEa`%Rx29b@k*OoYy(QK5~)T9fjmqRb95O_uYnEU2m?ccf$6-Q<JUf
zxiOZj>B)I|CfLO~-}Rx%p?9`SiWAPy3vupmYqA^r{&+06u`lQA`!xO8;3p8e4jA^V
ze!&;a`huT!epdU*fqDLv(bKr#YtQ=H@AYMx?jA1-Y-=??cLoC6&L?dkVz_DpGvA(f
zS^>eAo;EY=o^Dku!8W=Jy}OE^Ez+P(|F0yRz#Eoe)ev)SPt_z;T$PiFr&<zpx}UU<
z;JbRBuudo7y{_<GRfy93R*x3J72~`md>xv(a%)|eXe=cqhllBppeL}>ja4@2X{+QV
z@J6+O)X0ocbQ0BYRB6<3q@1Ug&@zcq`&2ZDO6OAG>4H;x9`j_F#VV`@n&o8tq9p1J
zb$>UO7><YW)0}FAl#nSzd|kE@Y)bw!kac>#D`MEWT|Ki~W+ALST6Bizb{(3nnuWC4
z5daWOiP`m(San%SY){s==VLB&?jy%M-)m?*c)eP}YMwu6v>FMq;N92f`9ozr2eQ5c
zABSe!K6>Roe?-NCY54l8IR|R40zO^wqWURP6cwi^o=-;85LbwbOB68?iXSQA&LfJ$
zF)F9xv4oUJilP?epnayNkc5y7BS`>J>O@ga!TX88S3~$P0XYXaG$Or#15j^NQ$ROk
z4GDfLlbeA2f;_UY+~$WaH`o2p@8*KcL%)mL|8S#++w-rcO71A5J&q6Iy3dEfeux2=
z!lx6l6rLr8!--|>;|Mn#Pr_$QHSvPZEttC$)snsZ85n#x3<+O#6{Fb8BD)ofRQN7U
zB;E8UFb17|`7I!ME5k5<C7!>NK;FhMTd!`*6SzzreuS4iU(MJSy)}6&TtBa_%X4te
z+X&R`SmQ}mZQg-3C#kH?S76OWT%JdjP<!;ez%WOdtFJHAKbNh4?h$<Ph1-1GLRi<t
Z<($>G$hv-c^39V!Kb5x<wo#SHe*xwggKq!;

literal 0
HcmV?d00001

diff --git a/tests/__pycache__/test_accounting.cpython-314.pyc b/tests/__pycache__/test_accounting.cpython-314.pyc
new file mode 100644
index 0000000000000000000000000000000000000000..80defc60c1a890347b07b0b9e93da8086e9684fa
GIT binary patch
literal 8549
zcmc&(ZEO_B8J@k{y<4Bp-(Q?VFvj3;0sMs_d>G?{n2(YWdm)#oHQpR|YdCVgvuF3f
zrc!04RpVCu;i5*E1}RDNqgX_WBanJ6k!mTCnx8(Mg{>_=8Z}kLKZ6q`^jF_^cK1Ha
z*+7EY(cSFq%<MZe@67wWAG4*n$VDLi^~+u7=F15AC%#xoFbhi)P#7cqMB<JT4WG87
z+!32*t0R)VhDdx3iIi$~Nr1A0mH8@CPb4S2i>F8r8^I!KJlpNYQ*)ehN(H-KCnQu!
z$XWuuOLKeTTRmwvD`7;gf&IO%yI6PJ%jq?z<Kak1RuxqZ$D*<t9~=zOu%ZSz=zxDr
zJp6Icr54D>h@bS^cKrf|g}Sw*mpjWzTpzR;NwW3Xta7uhfq3nA@m+TW24nH4raP#j
z#c9-Q(}jUZETHN3a8!etI0j;LFrcY8=mvdz^V!&-(mW6e42GL~XzZL4)YRtFu{Rak
ztSKs#F_#0uAQBBn&om8<>TX#MM58e+peeFU-9X3zf3+5}G4d_pxQ+KP``xBRd|W-q
z-j<-1u;pR_6Mn>&y9)|qq|agl=`%S`kOiTw)*eHzcC(N5gk^JgL(t&0(E@nr0)=^o
zyc}gS!rqOvkTnFAsHRdlKgMLMp)f}76c+y`KH;AXzSEZ~*^nx1nB^O25j5rO3$Bn&
z^bPjWBliV*8A-Bd?H8X_7BYJ$Ir@03f3pJ?<fOP@-DRDXa7cGs<q)u3FC2;lMinYY
z1A~h0QqIG|WNmavVQbcfa5SWhc<s7f)hHE#6yprA1kbp!?TjUC<5<QTUW8WMy>iZR
z53@U^6^nLwepOzzD8Tb;2Z53kOCl+&Tr9wnixibF7GlXw+$Hylpk%NQ*>9zCC@}W*
zKw*qXu&Zv655M3hZFb2f+5LjV7ZFK-H-{f&($7hv-zF9K?UE~VD*U{)>r$cQmWrg}
z<^o_>iEaZ9aocoPkSf5QkQ~r1mbJCC?cCPV3cr&rEqman+gsW~7ad#J8?AtuP>^Oq
zt1!dEpt}vhk=a4fc{tyS4hJd_)M8ZUQ4D~Gcz(Q&eBU$f(;8@3aq*2TnP-pf5p95K
z#%ezl#>iqhDJYt#op4Y3CY8z8W{Wp1h?TQzyw^5O+pj${eQ36NFH}sNTM(-!-3wyX
z#80i)tHR{KyG09P@q}$bESacYtZ=y<i^L_E%m?!6WMRb85vU5lu&0Q|Nkp^t*J<`@
z5+hQ9!~r038ZX&uh$bLhY7PWU&53ZSi3pflf#lR&exemhA~4;hm-y0<a1wDM$ft))
z1DUw=YaG-TuxCrRpR@LHh|iLA+jf{1OhokarD-fp_Y|^v+My>-S@a7%*`t~h$n&-1
zHUD;mNLvp6;F;VG|D~58>)<w!I$+O9a>zr-a2cM}<>`bCwZIwpZY?<m2glEikTIc-
z9D9b40<sQHb_3aA4|7x8@hOg-5fDRLQ;W{2>`lcH8`qB+r=p<aj1pBwhG?h0bs008
zK&0uY3`pJ75s3u@5w)`^-FpKNQP)ED-CdaPZ1vF(Hc$3`9GQwF&Lx|UTpqqO{Nd&Y
zODOn1FW<=h-nEhY->jN$h9N;jP@=qc`aC>zPGPS(3#VJ5g>Hik1tM!Dl|3JnOt$`M
z-zWQKjwQFha=G_X?}sH1XcP1TddNGFN@YaToyZ<go?fTUt4d@*=V|PM!D2R?E}D3$
z>Q1wy3yh_z6R0#c4h*bczuw%1G^=&bio38LzEXEX_5f5y#q-zNQxz@a;+^v9Iplt-
z`e>^B=(zJvY2{pH&->0lmi(b4RoRm&?HLyqN~*_yHY+}xQ7S-%B~z)0OY1;HQQ7yT
z^`F&+WNAVP5EHSo-__5xo9LR63A2^&uk5$2*eXD)-D+*JTe5Wl#;4^lewLoKX5hE=
zWFxs*-G{1{rGA%1rQHOYI$TM9N{D^S()Xgo^&sz-rSD0pco`XZ&7xHK1gpzq6ZVtG
z;0kKTWhwhRiJ1htO>O;;E2GqO&Zi5f<D=oI?hFRhv$43Q^Fx7f=(yKK(VSw+MlTGg
zszSBy;dmgT7l)(g0jWVjW=tWyAgXAl#;ef4qKn8#P7X)S%1WaWNy{*ZS^G>dPALeE
z9EvNl7L!eb#L%3z%Nk*Fs$zUNWv2+ZbSGvnKxP7iDT|w#t;v?frhx+nq9K`$9-xXG
z3aem)1~q-xa#4NUFB@^tFCiNv3!Z1+TX$vMSEW@Gp~;u7HC(%puqAw{(#|{Sn$g6D
zL?Bh#m8m&DO%tuD(tV3gzNmP~?x=PBs(9SFSPH6qUR;wD*GyK;d$uJ#+dhg<OV>x|
z#N7*`+iH2Q?n>Q9o2G5oy>nuFroLw0)1LIS-&7I@ZiMH=uAG(~Nzaa(@q}~(X!$ZN
zFv^~!XHUX6CwAu4?oN7kCt7cd`<@=+2&*EFxGLh<pE}|QPau=4BTgCtA45u4N1P|2
zlm~IL<$VS8<nsBPkM&(1e91z%JTo^Chweog?Z9jwWZ*>77--%7SkVPp4$x2^Rv*9&
z4P<%{GQIo^jj1XK?`Rr0=pk%<5wmX0&?e1=fSpW`*;sN|1spOV>oh<CSmbGRLT41P
zDi(==!>WYzLwNz=iRmCPtqczw6a5Srj3(+6y{XdunVR#{!-@J-X~*NhL+|yGIdNB(
z@S5<zUEe$>ZqKTp_p~NGtv7ch%5LnM6FYKR@_>K|C)0r(>QHM!N$-u3+hW%$@Ng9j
zk*8&lNWv=c-~eOhDH|k`^J&3@^dvyDDm*;FoVcDxzytHX3YG~c?L=Wh(fl|3Ve__k
z>23<L5jziI0+2qVnlyAB_lg<wz>r#$RYPiD#uAgz6@=5rgfpA4OqEbPsHn0Ui_@Tz
zj&Fg`2Tn&6`9fGj+r$uCDCoU;<@AS;#0jgP;Hn=_qi>oiOO+nXi0sc2bOtnf_bMW5
z3MPMj%bd6~NBm5|th&*Wqqj}%{Au^h##_hc#3Pw+Ofj4uzAf&4SOhUr1%8gWw3+z?
znb=2O>p$%;Sk`}zuq|)R5w<MKPDup6q5wpZPx}V^5SQ^Svix;hU)r*lTs6dR%j0X?
zv-%XS(1-W)`TUB0vK3>9W*QPe7p6T8s}}5Y<PuAgJ3swCjNq}ff`5{Ss^6YZ^fHvB
zqP)P8kCKp2S7#_a!JPP>JlZ>3>r2HL0b3CcXfJSqN|1pA(RMN8K(y(FX_*6qI(=54
zC;HheD)J*JJUS*Kkw?TtI3p$k0a~;uj#Dq>Q#KYJpj)7<qT|?TcmOOkpr2SBBfvMw
zwhSzYi7FQ?>mX0i1Y@r%glPzinN%J4V9liO<G!iB#L46~-{ruiz=vy$n8{n^4crx1
z!wNBzr_PhtU`hs0=#O!V%b7uc0=1{GB|Z6yt}7#x^&fXkbtKx8TlQb}UGlv<@_^zB
zb2bu5v5iE3FujrBrsfZBnV~E=aM__OE2zV4wv}i21`MHMJe9F`ZTFv#Ob^dL+jjfe
zwp&LYs5~^hwWgM%C!m0aV*@-{K!>(ssSPt9WDv8C4>Dz>*PGtx%8sUCZ{oxtAj{lJ
zyn&%RkdDL9M>-z@k5_kLE*k+L2Q)WA^v8<-wB+ivM;|V|>xUlClQ0E!39>QrmAh<W
z<D~oj;I$W~4<xvhd(WM8&F*OhtV{R)OigE^Eis&O`!Y5An1kx>S}YJsUE@4N;VZXT
z(W$bkB%bqB)qzymfpN#3l8PiAom53vs-$b2U#Rk2?)z=u`}Ob0<F0>LPU_W)B<@~n
zZFkDk{dxQg=`-*<do%j0dfwwpdVHVn_@eT&y>sF#nU>mlPg~N{cC$ON;l|M%ue8!I
zV5h+=-SM!_L#$>x?=OHtPs{A=hpRJ7n`JbasV9YgN5<@YsMXQWXKO+W_5YtyvTVd(
z(LY?(1nqZN>v*KEo7V)*@)*;%Fd0gc6SR=HTnoJf8_SGRy~OatGTvITQE`EWH6=DM
z@UT^?*O(!t*aa{y4M#E)wW5cSG)lf+YrsS<JtNqZ$Ghxi!X8piYhbv7jXH=iEQ~N&
zGl6O~7CEoTCPCAD4M*XE6mLJ7hS6WmivT~AtODy%{|4D(8nVlL&)Md#nfe)UM-QiM
z+u7#*Gi5Un(mDkAfZ-~q8Lq;cCo3p5@7bC3?EF+noW4~sCmzTMG#If)FlkQQm#NJJ
zt9&=k&WZbTTJ|PAdp~`3ruEkAx5YzD)TaRN4b9KO2wt}?%IxA&mUWjb55_`qa1&&_
zQpO-9UTMNxi7XF<sj5Z7Q6(CKJ7yNrJc_%195X~v8p7;N$n+{%R^c)_9E7VsxEO#~
z0UR1xFO%h91R|iJa8L^>k%%nA^><NLC47dKPnU5Wx(VrFRtJ9-O_T55hQ0XO#tZB2
zyNiX+`|FDZA9sJfTiA1dZHch++YLp+VQ!IN&KAqQ#sv-rK#$1Y0$q$p!x|nsUBDTt
zhSFm(64ZgZcoNzU1|UewMvr10k6+V4C>li3+||VngH@gMBD~_PRXqQTc8=rzPD=ho
zyx%zBuKgPk?_!@n!EuMViL>+7&n2s$`<k%V#fXjY?(vIrcFzLue*5LOUjF4P_w0nP
HWuyETP5QPX

literal 0
HcmV?d00001

diff --git a/tests/test_accounting.py b/tests/test_accounting.py
new file mode 100644
index 0000000..c73c78e
--- /dev/null
+++ b/tests/test_accounting.py
@@ -0,0 +1,118 @@
+import unittest
+
+from stats import build_session_summaries
+
+
+def cents(amount: float) -> int:
+    return int(round(amount * 100))
+
+
+def event(
+    session_id: str,
+    session_date: str,
+    player_name: str,
+    event_type: str,
+    amount: float,
+    index: int,
+):
+    return {
+        "id": f"{session_id}-{index}",
+        "created_at": f"2026-01-01T00:00:{index:02d}+00:00",
+        "session_id": session_id,
+        "session_date": session_date,
+        "player_name": player_name,
+        "event_type": event_type,
+        "amount_cents": cents(amount),
+        "note": "",
+        "actor": "test",
+    }
+
+
+class AccountingTests(unittest.TestCase):
+    def entry_for(self, rows, session_id="s1", player_name="A"):
+        sessions = build_session_summaries(rows)
+        session = next(s for s in sessions if s.session_id == session_id)
+        entry = next(e for e in session.entries if e.player_name == player_name)
+        return session, entry
+
+    def test_buyin_cashout_and_paid_are_distinct(self):
+        session, entry = self.entry_for(
+            [
+                event("s1", "2026-01-01", "A", "buyin", 10, 1),
+                event("s1", "2026-01-01", "A", "cashout", 20, 2),
+                event("s1", "2026-01-01", "A", "paid", 20, 3),
+            ]
+        )
+
+        self.assertEqual(entry.invested_cents, cents(10))
+        self.assertEqual(entry.net_cents, cents(10))
+        self.assertEqual(session.total_cash_in_cents, cents(10))
+        self.assertEqual(session.total_paid_out_cents, cents(20))
+        self.assertEqual(entry.current_due_to_player_cents, 0)
+        self.assertEqual(entry.current_due_to_house_cents, 0)
+
+    def test_front_is_invested_but_not_cash_in_until_collected(self):
+        session, entry = self.entry_for(
+            [
+                event("s1", "2026-01-01", "A", "front", 5, 1),
+                event("s1", "2026-01-01", "A", "cashout", 8, 2),
+                event("s1", "2026-01-01", "A", "paid", 3, 3),
+            ]
+        )
+
+        self.assertEqual(entry.invested_cents, cents(5))
+        self.assertEqual(entry.net_cents, cents(3))
+        self.assertEqual(entry.gross_payout_cents, cents(3))
+        self.assertEqual(entry.current_due_to_player_cents, 0)
+        self.assertEqual(session.total_cash_in_cents, 0)
+        self.assertEqual(session.total_paid_out_cents, cents(3))
+
+    def test_rollover_out_reduces_source_session_payable_without_cash_out(self):
+        session, entry = self.entry_for(
+            [
+                event("s1", "2026-01-01", "A", "buyin", 10, 1),
+                event("s1", "2026-01-01", "A", "cashout", 19.50, 2),
+                event("s1", "2026-01-01", "A", "rollover_out", 10, 3),
+            ]
+        )
+
+        self.assertEqual(entry.net_cents, cents(9.50))
+        self.assertEqual(entry.gross_payout_cents, cents(19.50))
+        self.assertEqual(entry.current_due_to_player_cents, cents(9.50))
+        self.assertEqual(session.total_paid_out_cents, 0)
+
+    def test_rollover_in_is_invested_without_new_cash_in(self):
+        rows = [
+            event("s1", "2026-01-01", "A", "buyin", 10, 1),
+            event("s1", "2026-01-01", "A", "cashout", 19.50, 2),
+            event("s1", "2026-01-01", "A", "rollover_out", 10, 3),
+            event("s2", "2026-01-02", "A", "rollover_in", 10, 4),
+        ]
+        sessions = build_session_summaries(rows)
+        source = next(s for s in sessions if s.session_id == "s1")
+        dest = next(s for s in sessions if s.session_id == "s2")
+        dest_entry = dest.entries[0]
+
+        self.assertEqual(sum(s.total_cash_in_cents for s in sessions), cents(10))
+        self.assertEqual(source.total_current_due_to_player_cents, cents(9.50))
+        self.assertEqual(dest_entry.invested_cents, cents(10))
+        self.assertEqual(dest.total_cash_in_cents, 0)
+
+    def test_debt_repayment_and_writeoff_resolve_front_without_inflating_cash(self):
+        session, entry = self.entry_for(
+            [
+                event("s1", "2026-01-01", "A", "front", 10, 1),
+                event("s1", "2026-01-01", "A", "cashout", 0, 2),
+                event("s1", "2026-01-01", "A", "front_collected", 6, 3),
+                event("s1", "2026-01-01", "A", "front_writeoff", 4, 4),
+            ]
+        )
+
+        self.assertEqual(entry.player_owes_gross_cents, cents(10))
+        self.assertEqual(entry.current_due_to_house_cents, 0)
+        self.assertEqual(session.total_cash_in_cents, cents(6))
+        self.assertEqual(session.total_front_writeoff_cents, cents(4))
+
+
+if __name__ == "__main__":
+    unittest.main()

From 70e62342ee587a67bdf04188402963ea131d191b Mon Sep 17 00:00:00 2001
From: SowinskiBraeden <braeden@sowinski.dev>
Date: Mon, 22 Jun 2026 13:51:38 -0700
Subject: [PATCH 32/83] visual overhaul + accounting corrections

---
 .gitignore                                    |   1 +
 README.md                                     |  30 +-
 app.py                                        | 250 ++++++++--
 static/css/style.css                          | 380 +++++++++++++--
 stats.py                                      | 224 ++++++---
 storage.py                                    |  16 +
 templates/admin_dashboard.html                | 448 +++++++++++-------
 templates/admin_login.html                    |   4 +-
 templates/base.html                           |   4 +-
 templates/leaderboard.html                    |   2 +-
 templates/player_detail.html                  |  60 ++-
 templates/session_detail.html                 |  50 +-
 templates/sessions.html                       |   4 +-
 tests/__pycache__/__init__.cpython-313.pyc    | Bin 141 -> 0 bytes
 .../test_accounting.cpython-313.pyc           | Bin 8233 -> 0 bytes
 .../test_accounting.cpython-314.pyc           | Bin 8549 -> 0 bytes
 tests/test_accounting.py                      | 184 ++++++-
 17 files changed, 1268 insertions(+), 389 deletions(-)
 delete mode 100644 tests/__pycache__/__init__.cpython-313.pyc
 delete mode 100644 tests/__pycache__/test_accounting.cpython-313.pyc
 delete mode 100644 tests/__pycache__/test_accounting.cpython-314.pyc

diff --git a/.gitignore b/.gitignore
index dc0553c..c6de75f 100644
--- a/.gitignore
+++ b/.gitignore
@@ -2,3 +2,4 @@
 /__pycache__/*
 /.venv/*
 /data/*
+test/*
diff --git a/README.md b/README.md
index 2178134..08b2b71 100644
--- a/README.md
+++ b/README.md
@@ -2,7 +2,7 @@
 
 A small Flask app I put together for tracking our low-stakes hold'em nights without having to keep a spreadsheet open all the time.
 
-The idea is pretty simple: public pages for stats and session history, plus a small admin area for recording buy-ins, cash-outs, paid amounts, and notes. The data sits in a CSV audit log, so everything is append-only and easy to follow later.
+The idea is pretty simple: public pages for stats and session history, plus a small admin area for recording buy-ins, gross cashout results, actual paid-out cash, and notes. The data sits in a CSV audit log, so everything is append-only and easy to follow later.
 
 ## What it does
 
@@ -11,8 +11,8 @@ The idea is pretty simple: public pages for stats and session history, plus a sm
 - per-player stat pages
 - admin login for recording events
 - open / closed session tracking
-- payout tracking with `paid` events
-- front debt collections and write-offs with `front_collected` / `front_writeoff` events
+- actual cash payout tracking with `paid_out` events
+- debt repayments and write-offs with `debt_repayment` / `writeoff` events
 - session and player charts
 - CSV import / export from the admin page
 - append-only `entries.csv` ledger instead of overwriting old rows
@@ -38,11 +38,12 @@ Current event types:
 
 - `buyin`
 - `front`
-- `front_collected`
-- `front_writeoff`
+- `debt_repayment`
+- `writeoff`
 - `cashout`
-- `paid`
+- `paid_out`
 - `rollover_in`
+- `payout_carry_in`
 - `rollover_out`
 - `note`
 - `session_open`
@@ -52,9 +53,9 @@ A few examples:
 
 - another `buyin` for a rebuy
 - another `cashout` if chip counts are corrected later
-- a `paid` event when someone is actually settled up
-- a `front_collected` event when a front is repaid outside poker
-- a `front_writeoff` event when a front will not be collected
+- a `paid_out` event when someone is actually settled up
+- a `debt_repayment` event when a front is repaid outside poker
+- a `writeoff` event when a front will not be collected
 - a `note` event for bookkeeping context
 - `session_open` / `session_close` to mark whether a game night is still live
 
@@ -62,11 +63,16 @@ Accounting in the app keeps poker results separate from banker cashflow:
 
 - poker investment is `buyin + front + rollover_in`
 - poker net is `cashout - poker investment`
-- real cash in is `buyin + front_collected`
-- real cash out is `paid`
+- real cash in is `buyin + debt_repayment`
+- real cash out is `paid_out`
 - `rollover_out` settles the source session without counting as cash out
 - `rollover_in` enters play in the destination session without counting as cash in
-- `front_writeoff` resolves a receivable without counting as cash in
+- `payout_carry_in` records prior-session value carried into a later payout; it increases the destination payout due without counting as poker investment or cash in
+- `writeoff` resolves a receivable without counting as cash in
+
+Older ledgers may still contain `paid`, `front_collected`, or `front_writeoff`.
+The app reads those historical names as aliases for `paid_out`,
+`debt_repayment`, and `writeoff`.
 
 It is still just a small side project, but I wanted the event model to stay clean enough that the numbers are easy to trust and the history is easy to read back through.
 
diff --git a/app.py b/app.py
index e7ef56c..db1ce04 100644
--- a/app.py
+++ b/app.py
@@ -31,7 +31,14 @@ from stats import (
     session_sort_key,
     unique_player_names,
 )
-from storage import CSV_HEADERS, append_event, ensure_data_file, load_events
+from storage import (
+    CSV_HEADERS,
+    EventRow,
+    append_event,
+    ensure_data_file,
+    load_events,
+    write_events,
+)
 
 BASE_DIR = Path(__file__).resolve().parent
 DATA_PATH = BASE_DIR / "data" / "entries.csv"
@@ -40,13 +47,15 @@ ENV_PATH = BASE_DIR / ".env"
 ELIGIBLE_MIN_SESSIONS = 3
 ADMIN_EVENT_TYPES = [
     ("buyin", "Buy-in", "var(--accent)"),
-    ("front", "Fronted", "var(--warn)"),
+    ("front", "Front", "var(--warn)"),
     ("rollover_in", "Rollover-in", "var(--rolled)"),
-    ("cashout", "Cash-out", "var(--rank-2)"),
-    ("paid", "Paid-out", "var(--pos)"),
+    ("payout_carry_in", "Payout carry-in", "var(--rolled)"),
+    ("cashout", "Cashout result", "var(--rank-2)"),
+    ("paid_out", "Paid out cash", "var(--pos)"),
     ("rollover_out", "Rollover-out", "var(--rolled)"),
     ("note", "Note", "var(--muted)"),
 ]
+SESSION_MARKER_TYPES = {"session_open", "session_close"}
 
 
 def load_local_env(env_path: Path) -> None:
@@ -80,6 +89,54 @@ def next_session_id(sessions, session_date: str) -> str:
     return f"{session_date}-{highest + 1:02d}"
 
 
+def prunable_empty_session_ids(events: list[EventRow], sessions) -> set[str]:
+    empty_session_ids = {
+        session.session_id for session in sessions if len(session.entries) == 0
+    }
+    session_events: dict[str, list[EventRow]] = {}
+
+    for event in events:
+        session_id = event["session_id"].strip() or event["session_date"].strip()
+        if session_id in empty_session_ids:
+            session_events.setdefault(session_id, []).append(event)
+
+    return {
+        session_id
+        for session_id, rows in session_events.items()
+        if rows
+        and all(
+            row["event_type"] in SESSION_MARKER_TYPES
+            and not row["player_name"].strip()
+            and row["amount_cents"] == 0
+            for row in rows
+        )
+    }
+
+
+def pending_payout_carry_items(sessions) -> list[dict[str, object]]:
+    carried_out: dict[str, int] = {}
+    carried_in: dict[str, int] = {}
+
+    for session_summary in sessions:
+        for entry in session_summary.entries:
+            carried_out[entry.player_name] = (
+                carried_out.get(entry.player_name, 0) + entry.rollover_out_cents
+            )
+            carried_in[entry.player_name] = (
+                carried_in.get(entry.player_name, 0)
+                + entry.rollover_in_cents
+                + entry.payout_carry_in_cents
+            )
+
+    items = []
+    for player_name, amount_out in carried_out.items():
+        pending_cents = amount_out - carried_in.get(player_name, 0)
+        if pending_cents > 0:
+            items.append({"player_name": player_name, "amount_cents": pending_cents})
+
+    return sorted(items, key=lambda item: str(item["player_name"]).casefold())
+
+
 load_local_env(ENV_PATH)
 
 app = Flask(__name__)
@@ -219,33 +276,24 @@ def session_detail(session_id: str) -> str:
         flash("That session was not found.", "error")
         return redirect(url_for("sessions"))
 
-    target_index = next(
-        (
-            index
-            for index, session in enumerate(sessions)
-            if session.session_id == session_id
-        ),
-        None,
-    )
-
-    if target_index is None:
-        flash("That session was not found.", "error")
-        return redirect(url_for("sessions"))
-
-    target_session = sessions[target_index]
     chronological_sessions = sorted(sessions, key=session_sort_key)
-    session_number = next(
-        (
-            index
-            for index, session in enumerate(chronological_sessions, start=1)
-            if session.session_id == session_id
-        ),
-        1,
+    chronological_index = next(
+        index
+        for index, session in enumerate(chronological_sessions)
+        if session.session_id == session_id
     )
+    target_session = chronological_sessions[chronological_index]
+    session_number = chronological_index + 1
     prev_session = (
-        sessions[target_index + 1] if target_index < len(sessions) - 1 else None
+        chronological_sessions[chronological_index - 1]
+        if chronological_index > 0
+        else None
+    )
+    next_session = (
+        chronological_sessions[chronological_index + 1]
+        if chronological_index < len(chronological_sessions) - 1
+        else None
     )
-    next_session = sessions[target_index - 1] if target_index > 0 else None
 
     return render_template(
         "session_detail.html",
@@ -478,7 +526,7 @@ def admin_write_off_front() -> str:
     )
 
     if entry is None or entry.player_owes_cents <= 0:
-        flash("That player does not have an outstanding front debt.", "error")
+        flash("That player does not have an outstanding debt.", "error")
         return redirect(url_for("admin_dashboard"))
 
     if amount_cents > entry.player_owes_cents:
@@ -493,13 +541,13 @@ def admin_write_off_front() -> str:
         session_id=target.session_id,
         session_date=target.session_date,
         player_name=entry.player_name,
-        event_type="front_writeoff",
+        event_type="writeoff",
         amount_cents=amount_cents,
-        note=note or "Front debt written off.",
+        note=note or "Debt written off.",
         actor=app.config["ADMIN_USERNAME"],
     )
 
-    flash("Front debt written off.", "success")
+    flash("Debt written off.", "success")
     return redirect(url_for("admin_dashboard"))
 
 
@@ -546,7 +594,7 @@ def admin_collect_front() -> str:
     )
 
     if entry is None or entry.player_owes_cents <= 0:
-        flash("That player does not have an outstanding front debt.", "error")
+        flash("That player does not have an outstanding debt.", "error")
         return redirect(url_for("admin_dashboard"))
 
     if amount_cents > entry.player_owes_cents:
@@ -561,13 +609,13 @@ def admin_collect_front() -> str:
         session_id=target.session_id,
         session_date=target.session_date,
         player_name=entry.player_name,
-        event_type="front_collected",
+        event_type="debt_repayment",
         amount_cents=amount_cents,
-        note=note or "Front debt collected.",
+        note=note or "Debt repayment collected.",
         actor=app.config["ADMIN_USERNAME"],
     )
 
-    flash("Front debt collected.", "success")
+    flash("Debt repayment collected.", "success")
     return redirect(url_for("admin_dashboard"))
 
 
@@ -601,6 +649,86 @@ def admin_open_session() -> str:
     return redirect(url_for("admin_dashboard"))
 
 
+@app.post("/admin/prune-empty-sessions")
+def admin_prune_empty_sessions() -> str:
+    if not is_admin():
+        flash("Admin login required.", "error")
+        return redirect(url_for("admin_login"))
+
+    events = load_events(DATA_PATH)
+    sessions = build_session_summaries(events)
+    prunable_session_ids = prunable_empty_session_ids(events, sessions)
+
+    if not prunable_session_ids:
+        flash("No empty marker-only sessions to prune.", "success")
+        return redirect(url_for("admin_dashboard"))
+
+    pruned_events = [
+        event
+        for event in events
+        if (event["session_id"].strip() or event["session_date"].strip())
+        not in prunable_session_ids
+    ]
+    write_events(DATA_PATH, pruned_events)
+
+    flash(
+        f"Pruned {len(prunable_session_ids)} empty session"
+        f"{'s' if len(prunable_session_ids) != 1 else ''}.",
+        "success",
+    )
+    return redirect(url_for("admin_dashboard"))
+
+
+@app.post("/admin/apply-payout-carry-in")
+def admin_apply_payout_carry_in() -> str:
+    if not is_admin():
+        flash("Admin login required.", "error")
+        return redirect(url_for("admin_login"))
+
+    session_id = request.form.get("session_id", "").strip()
+    player_name = request.form.get("player_name", "").strip()
+
+    events = load_events(DATA_PATH)
+    sessions = build_session_summaries(events)
+    by_id = {session.session_id: session for session in sessions}
+    target = by_id.get(session_id)
+
+    if target is None or target.status != "open":
+        flash("Select a valid open session.", "error")
+        return redirect(url_for("admin_dashboard"))
+
+    if not any(entry.player_name == player_name for entry in target.entries):
+        flash("Add that player to the open session before applying carry-in.", "error")
+        return redirect(url_for("admin_dashboard"))
+
+    pending_by_player = {
+        str(item["player_name"]): int(item["amount_cents"])
+        for item in pending_payout_carry_items(sessions)
+    }
+    amount_cents = pending_by_player.get(player_name, 0)
+
+    if amount_cents <= 0:
+        flash("No pending payout carry-in found for that player.", "error")
+        return redirect(url_for("admin_dashboard"))
+
+    append_event(
+        DATA_PATH,
+        session_id=target.session_id,
+        session_date=target.session_date,
+        player_name=player_name,
+        event_type="payout_carry_in",
+        amount_cents=amount_cents,
+        note="Payout carry-in from prior carry-out.",
+        actor=app.config["ADMIN_USERNAME"],
+    )
+
+    flash(
+        f"Applied {cents_to_dollars(amount_cents)} payout carry-in for {player_name}.",
+        "success",
+    )
+    return redirect(url_for("admin_dashboard"))
+
+
 @app.route("/admin", methods=["GET", "POST"])
 def admin_dashboard():
     if not is_admin():
@@ -658,8 +786,18 @@ def admin_dashboard():
 
     events = load_events(DATA_PATH)
     sessions = build_session_summaries(events)
+    empty_session_count = len(prunable_empty_session_ids(events, sessions))
+    pending_carry_items = pending_payout_carry_items(sessions)
+    pending_carry_total_cents = sum(
+        int(item["amount_cents"]) for item in pending_carry_items
+    )
     open_sessions = [session for session in sessions if session.status == "open"]
     live_session = open_sessions[0] if open_sessions else None
+    live_session_player_names = (
+        {entry.player_name for entry in live_session.entries}
+        if live_session is not None
+        else set()
+    )
     live_session_no = ""
     live_unresolved_count = 0
     if live_session is not None:
@@ -670,7 +808,7 @@ def admin_dashboard():
             if entry.current_due_cents > 0 or entry.player_owes_cents > 0
         )
 
-    recent_sessions = sessions[:8]
+    recent_sessions = sessions
     recent_events = list(reversed(events[-20:]))
     event_type_colors = {value: color for value, _label, color in ADMIN_EVENT_TYPES}
     event_type_labels = {value: label for value, label, _color in ADMIN_EVENT_TYPES}
@@ -689,29 +827,34 @@ def admin_dashboard():
         if entry.player_owes_cents > 0
     ]
 
+    cash_in_cents = sum(session.total_banker_cash_in_cents for session in sessions)
+    cash_out_cents = sum(session.total_banker_cash_out_cents for session in sessions)
+    house_owes_players_cents = (
+        sum(session.total_current_due_to_player_cents for session in sessions)
+        + pending_carry_total_cents
+    )
+    players_owe_house_cents = sum(
+        session.total_current_due_to_house_cents for session in sessions
+    )
     admin_totals = {
-        "cash_in_cents": sum(session.total_cash_in_cents for session in sessions),
-        "cash_out_cents": sum(session.total_paid_out_cents for session in sessions),
-        "house_owes_players_cents": sum(
-            session.total_current_due_to_player_cents for session in sessions
-        ),
-        "players_owe_house_cents": sum(
-            session.total_current_due_to_house_cents for session in sessions
-        ),
+        "cash_in_cents": cash_in_cents,
+        "cash_out_cents": cash_out_cents,
+        "house_owes_players_cents": house_owes_players_cents,
+        "players_owe_house_cents": players_owe_house_cents,
+        "pending_carry_cents": pending_carry_total_cents,
         "collected_cents": sum(
-            session.total_front_collected_cents for session in sessions
+            session.total_debt_repayment_cents for session in sessions
         ),
         "written_off_cents": sum(
-            session.total_front_writeoff_cents for session in sessions
+            session.total_writeoff_cents for session in sessions
         ),
-        "net_book_position_cents": sum(
-            session.total_net_book_position_cents for session in sessions
+        "net_book_position_cents": (
+            cash_in_cents
+            - cash_out_cents
+            + players_owe_house_cents
+            - house_owes_players_cents
         ),
     }
-    admin_totals["paid_out_cents"] = admin_totals["cash_out_cents"]
-    admin_totals["still_owed_cents"] = admin_totals["house_owes_players_cents"]
-    admin_totals["players_owe_cents"] = admin_totals["players_owe_house_cents"]
-    admin_totals["open_balance_cents"] = admin_totals["net_book_position_cents"]
 
     return render_template(
         "admin_dashboard.html",
@@ -720,8 +863,10 @@ def admin_dashboard():
         recent_events=recent_events,
         debt_entries=debt_entries,
         live_session=live_session,
+        live_session_player_names=live_session_player_names,
         live_session_no=live_session_no,
         live_unresolved_count=live_unresolved_count,
+        pending_carry_items=pending_carry_items,
         player_names=unique_player_names(events),
         append_form=append_form,
         event_types=ADMIN_EVENT_TYPES,
@@ -730,6 +875,7 @@ def admin_dashboard():
         admin_today=datetime.now().date().isoformat(),
         session_label=session_label,
         admin_totals=admin_totals,
+        empty_session_count=empty_session_count,
     )
 
 
diff --git a/static/css/style.css b/static/css/style.css
index 104ef36..50c4fc6 100644
--- a/static/css/style.css
+++ b/static/css/style.css
@@ -109,6 +109,13 @@ h1, h2, h3, h4 { margin: 0; }
 .page--public  { max-width: var(--w-public);  }
 .page--session { max-width: var(--w-session); }
 .page--admin   { max-width: var(--w-admin);   }
+@media (min-width: 1280px) {
+  .page--admin,
+  .page--session {
+    padding-left: 28px;
+    padding-right: 28px;
+  }
+}
 
 /* ================================================================
    FLASH MESSAGES
@@ -198,7 +205,8 @@ h3 {
 }
 .session-number {
   color: var(--accent);
-  margin-bottom: 8px;
+  font-size: 12.5px;
+  margin-bottom: 9px;
 }
 .hero__title {
   font-family: var(--font-display);
@@ -284,10 +292,10 @@ h3 {
 }
 .stat--hero .stat__val { font-size: 34px; }
 .player-rank {
-  margin: 0 0 4px;
+  margin: 0 0 7px;
   color: var(--accent);
   font-family: var(--font-mono);
-  font-size: 11px;
+  font-size: 12.5px;
   letter-spacing: .12em;
   text-transform: uppercase;
 }
@@ -521,10 +529,15 @@ h3 {
 .tbl .col-acct { display: none; }
 .tbl.is-full .col-acct { display: table-cell; }
 .tbl--session {
-  min-width: 920px;
+  min-width: 860px;
+  font-size: 13.5px;
 }
 .tbl--session.is-full {
-  min-width: 1240px;
+  min-width: 1180px;
+}
+.tbl--session th,
+.tbl--session td {
+  padding-inline: 12px;
 }
 .tbl--session th:nth-child(7),
 .tbl--session td:nth-child(7) {
@@ -616,6 +629,7 @@ td a:hover { color: var(--accent); }
   white-space: nowrap;
 }
 .badge--paid     { color: var(--pos);  background: var(--pos-tint);  box-shadow: inset 0 0 0 1px var(--pos-tint-bd); }
+.badge--settled  { color: var(--rolled); background: var(--surface-raised); box-shadow: inset 0 0 0 1px var(--border); }
 .badge--partial  { color: var(--warn); background: var(--warn-tint); box-shadow: inset 0 0 0 1px var(--warn-tint-bd); }
 .badge--unpaid   { color: var(--neg);  background: var(--neg-tint);  box-shadow: inset 0 0 0 1px var(--neg-tint-bd); }
 .badge--owes     { color: var(--owes); background: var(--owes-tint); box-shadow: inset 0 0 0 1px var(--owes-tint-bd); }
@@ -641,6 +655,7 @@ td a:hover { color: var(--accent); }
 .status-open       { color: var(--warn); background: var(--warn-tint); box-shadow: inset 0 0 0 1px var(--warn-tint-bd); }
 .status-closed     { color: var(--muted-2); background: var(--surface-raised); box-shadow: inset 0 0 0 1px var(--border); }
 .status-paid       { color: var(--pos);  background: var(--pos-tint);  box-shadow: inset 0 0 0 1px var(--pos-tint-bd); }
+.status-settled    { color: var(--rolled); background: var(--surface-raised); box-shadow: inset 0 0 0 1px var(--border); }
 .status-partial    { color: var(--warn); background: var(--warn-tint); box-shadow: inset 0 0 0 1px var(--warn-tint-bd); }
 .status-unpaid     { color: var(--neg);  background: var(--neg-tint);  box-shadow: inset 0 0 0 1px var(--neg-tint-bd); }
 .status-owes       { color: var(--owes); background: var(--owes-tint); box-shadow: inset 0 0 0 1px var(--owes-tint-bd); }
@@ -665,7 +680,11 @@ td a:hover { color: var(--accent); }
 .pill-cashout        { color: var(--rank-2); background: var(--surface-raised); box-shadow: inset 0 0 0 1px var(--border); }
 .pill-paid           { color: var(--pos);    background: var(--pos-tint);    box-shadow: inset 0 0 0 1px var(--pos-tint-bd); }
 .pill-rollover_in    { color: var(--rolled); background: var(--surface-raised); box-shadow: inset 0 0 0 1px var(--border); }
+.pill-payout_carry_in { color: var(--rolled); background: var(--surface-raised); box-shadow: inset 0 0 0 1px var(--border); }
 .pill-rollover_out   { color: var(--rolled); background: var(--surface-raised); box-shadow: inset 0 0 0 1px var(--border); }
+.pill-paid_out       { color: var(--pos);    background: var(--pos-tint);    box-shadow: inset 0 0 0 1px var(--pos-tint-bd); }
+.pill-debt_repayment { color: var(--pos);    background: var(--pos-tint);    box-shadow: inset 0 0 0 1px var(--pos-tint-bd); }
+.pill-writeoff       { color: var(--neg);    background: var(--neg-tint);    box-shadow: inset 0 0 0 1px var(--neg-tint-bd); }
 .pill-front_collected { color: var(--pos);   background: var(--pos-tint);    box-shadow: inset 0 0 0 1px var(--pos-tint-bd); }
 .pill-front_writeoff  { color: var(--neg);   background: var(--neg-tint);    box-shadow: inset 0 0 0 1px var(--neg-tint-bd); }
 .pill-note           { color: var(--muted-2); background: var(--surface-raised); box-shadow: inset 0 0 0 1px var(--border); }
@@ -779,10 +798,19 @@ td a:hover { color: var(--accent); }
   gap: 6px;
 }
 .result-mix__legend-row strong {
+  display: grid;
+  grid-template-columns: minmax(2ch, auto) 6ch;
+  gap: 8px;
   color: var(--text-2);
   font-weight: 600;
   text-align: right;
   white-space: nowrap;
+  font-variant-numeric: tabular-nums;
+}
+.result-mix__legend-row strong b,
+.result-mix__legend-row strong em {
+  font: inherit;
+  text-align: right;
 }
 .result-mix__key {
   width: 8px;
@@ -887,17 +915,35 @@ td a:hover { color: var(--accent); }
 }
 .event-card--inline {
   display: grid;
-  grid-template-columns: minmax(0, 1fr) auto auto;
-  gap: 10px;
+  grid-template-columns: minmax(82px, 120px) max-content minmax(0, 1fr) minmax(88px, auto) minmax(74px, auto);
+  gap: 12px;
+  align-items: center;
   padding: 9px 16px;
 }
 .event-card--inline .event-card-top {
-  gap: 8px;
+  display: contents;
+}
+.event-card--inline .event-card-top strong {
+  grid-column: 1;
+  min-width: 0;
+  overflow: hidden;
+  text-overflow: ellipsis;
 }
 .event-card--inline .pill {
+  grid-column: 2;
+  justify-self: start;
   padding: 2px 7px;
   font-size: 9.5px;
 }
+.event-card--inline .event-note {
+  grid-column: 3;
+}
+.event-card--inline .event-amount {
+  grid-column: 4;
+}
+.event-card--inline .tiny-text {
+  grid-column: 5;
+}
 .event-note {
   min-width: 0;
   overflow: hidden;
@@ -906,10 +952,10 @@ td a:hover { color: var(--accent); }
   color: var(--muted);
   font-size: 12.5px;
 }
-.event-amount { font-family: var(--font-mono); font-size: 13px; font-weight: 600; color: var(--num); margin: 0; white-space: nowrap; }
+.event-amount { font-family: var(--font-mono); font-size: 13px; font-weight: 600; color: var(--num); margin: 0; white-space: nowrap; text-align: right; }
 .muted-text { color: var(--muted); font-size: 13.5px; margin: 0; }
 .muted-text.small, .tiny-text { font-size: 12px; }
-.tiny-text { color: var(--faintest); }
+.tiny-text { color: var(--faintest); margin: 0; text-align: right; white-space: nowrap; }
 .note-list { margin: 0; padding-left: 16px; color: var(--muted); font-size: 13px; }
 .note-list li + li { margin-top: 4px; }
 
@@ -971,6 +1017,10 @@ td a:hover { color: var(--accent); }
   border-color: var(--border-hi);
   color: var(--text-strong);
 }
+.secondary-button:disabled, .ghost-button:disabled {
+  cursor: not-allowed;
+  opacity: .45;
+}
 .table-action-button {
   display: inline-flex;
   align-items: center;
@@ -1028,20 +1078,17 @@ td a:hover { color: var(--accent); }
 /* Admin workspace */
 .admin-workspace {
   display: grid;
-  grid-template-columns: minmax(0, 2fr) minmax(300px, 1fr);
+  grid-template-columns: minmax(280px, 1fr) minmax(280px, 1fr) minmax(260px, .9fr);
   gap: var(--s4);
-  align-items: flex-start;
+  align-items: stretch;
 }
-.admin-workspace__main { flex: 2; min-width: 360px; }
-.admin-workspace__side { flex: 1; min-width: 300px; }
-.admin-workspace .col-main,
-.admin-workspace .col-side {
+.admin-workspace > .panel {
   display: flex;
   flex-direction: column;
-  gap: var(--s4);
   min-width: 0;
 }
 .admin-bottom-grid {
+  --admin-bottom-body-h: 340px;
   display: grid;
   grid-template-columns: minmax(0, 2fr) minmax(300px, 1fr);
   gap: var(--s4);
@@ -1049,19 +1096,22 @@ td a:hover { color: var(--accent); }
   margin-top: var(--s4);
 }
 .admin-bottom-grid > .panel {
-  min-width: 0;
-}
-.admin-bottom-grid > .panel:last-child {
   display: flex;
   flex-direction: column;
-  min-height: 0;
+  min-width: 0;
 }
-.admin-bottom-grid > .panel:last-child .event-feed {
-  flex: 1;
-  align-content: start;
-  max-height: none;
+.admin-bottom-grid .table-wrap,
+.admin-bottom-grid .event-feed {
+  height: var(--admin-bottom-body-h);
+  min-height: 0;
   overflow-y: auto;
 }
+.admin-bottom-grid .table-wrap {
+  overflow-x: auto;
+}
+.admin-bottom-grid .event-feed {
+  align-content: start;
+}
 
 /* Cash position strip */
 .cash-strip {
@@ -1144,9 +1194,97 @@ td a:hover { color: var(--accent); }
 .section-marker__dot--rolled { background: var(--rolled); }
 
 /* Debt / admin tools */
-.debt-panel  { display: grid; gap: 18px; }
+.debt-panel  {
+  display: grid;
+  gap: 0;
+  margin-top: var(--s4);
+}
 .debt-summary { display: flex; align-items: center; gap: 8px; flex-wrap: wrap; }
-.debt-action-grid { display: grid; gap: 18px; grid-template-columns: repeat(auto-fit, minmax(280px, 1fr)); }
+.debt-layout {
+  display: grid;
+  grid-template-columns: minmax(240px, .85fr) minmax(0, 2fr);
+  gap: 16px;
+  padding: 16px 20px 18px;
+}
+.debt-list {
+  display: grid;
+  align-content: start;
+  gap: 8px;
+  max-height: 245px;
+  overflow-y: auto;
+}
+.debt-list-item {
+  display: grid;
+  grid-template-columns: minmax(0, 1fr) auto;
+  gap: 12px;
+  align-items: center;
+  padding: 10px 12px;
+  background: var(--surface-sunk);
+  border: 1px solid var(--border);
+  border-radius: var(--r-sm);
+}
+.debt-list-item strong {
+  display: block;
+  color: var(--text-strong);
+  font-size: 13.5px;
+  margin-bottom: 2px;
+}
+.debt-list-item span {
+  display: block;
+  color: var(--faintest);
+  font-family: var(--font-mono);
+  font-size: 10.5px;
+  overflow: hidden;
+  text-overflow: ellipsis;
+  white-space: nowrap;
+}
+.debt-list-item b {
+  color: var(--owes);
+  font-family: var(--font-mono);
+  font-size: 13px;
+  white-space: nowrap;
+}
+.debt-empty {
+  display: grid;
+  place-items: center;
+  gap: 8px;
+  padding: 30px 20px 34px;
+  color: var(--muted);
+  text-align: center;
+}
+.debt-empty__mark {
+  display: grid;
+  place-items: center;
+  min-width: 64px;
+  height: 40px;
+  padding: 0 14px;
+  border-radius: var(--r-pill);
+  background: var(--surface-sunk);
+  border: 1px solid var(--border);
+  color: var(--pos);
+  font-family: var(--font-mono);
+  font-weight: 700;
+}
+.debt-empty p {
+  margin: 0;
+  font-size: 13.5px;
+}
+.debt-action-grid {
+  display: grid;
+  gap: 16px;
+  grid-template-columns: repeat(2, minmax(260px, 1fr));
+}
+.debt-form {
+  gap: 10px;
+  padding: 0;
+  background: transparent;
+}
+.debt-form h3 {
+  margin-bottom: 2px;
+}
+.debt-form textarea {
+  min-height: 58px;
+}
 .import-form input[type="file"] { width: 100%; margin: 4px 0 8px; color: var(--muted); }
 .import-form input[type="file"]::file-selector-button {
   appearance: none;
@@ -1165,12 +1303,17 @@ td a:hover { color: var(--accent); }
 }
 
 /* Admin: append ledger event */
-.append__body { padding: 20px 22px; }
+.append {
+  min-width: 0;
+}
+.append__body {
+  padding: 18px 20px;
+}
 .append__grid {
   display: grid;
   grid-template-columns: repeat(auto-fit, minmax(150px, 1fr));
-  gap: 14px;
-  margin-bottom: 16px;
+  gap: 12px;
+  margin-bottom: 14px;
 }
 .field { display: block; }
 .field__label {
@@ -1216,7 +1359,13 @@ select.control { cursor: pointer; }
   border-color: var(--accent-chip-bd);
   box-shadow: 0 0 0 3px var(--accent-a22);
 }
-.append__note { margin-bottom: 18px; }
+.append__note {
+  margin-bottom: 14px;
+}
+.append__textarea {
+  min-height: 96px;
+  resize: vertical;
+}
 .append__footer { display: flex; align-items: center; gap: 14px; flex-wrap: wrap; }
 .append__preview { display: inline-flex; align-items: center; gap: 8px; font-size: 12.5px; color: var(--faint); }
 .evtag-pill {
@@ -1231,9 +1380,44 @@ select.control { cursor: pointer; }
 }
 
 /* Admin: session controls */
-.panel--pad { padding: 20px 22px; }
+.panel--pad { padding: 18px 20px; }
 .panel__title--mb { margin: 0 0 16px; }
+.session-control-panel {
+  min-width: 0;
+}
+.session-summary-strip {
+  display: grid;
+  grid-template-columns: 1fr 1fr;
+  gap: 1px;
+  overflow: hidden;
+  margin-bottom: 14px;
+  border: 1px solid var(--border);
+  border-radius: var(--r-sm);
+  background: var(--border);
+}
+.session-summary-strip > div {
+  min-width: 0;
+  padding: 9px 10px;
+  background: var(--surface-sunk);
+}
+.session-summary-strip strong {
+  display: block;
+  margin-top: 3px;
+  color: var(--text-strong);
+  font-family: var(--font-mono);
+  font-size: 12.5px;
+  white-space: nowrap;
+  overflow: hidden;
+  text-overflow: ellipsis;
+}
+.import-export-panel {
+  min-width: 0;
+}
 .livecard {
+  display: flex;
+  flex-direction: column;
+  justify-content: space-between;
+  min-height: 140px;
   padding: 15px 16px;
   background: var(--surface-sunk);
   border: 1px solid var(--border-strong);
@@ -1243,6 +1427,7 @@ select.control { cursor: pointer; }
 .livecard__head { display: flex; align-items: center; gap: 8px; margin-bottom: 12px; }
 .dot { width: 7px; height: 7px; border-radius: 50%; }
 .dot--live { background: var(--pos); animation: livepulse 1.6s ease-in-out infinite; }
+.dot--idle { background: var(--muted-2); }
 .livecard__name { font-weight: 600; color: var(--text-strong); font-size: 14px; }
 .livecard__no { font-family: var(--font-mono); font-size: 10.5px; color: var(--faintest); }
 .livecard__metrics { display: flex; gap: 18px; margin-bottom: 14px; }
@@ -1292,14 +1477,68 @@ select.control { cursor: pointer; }
   box-shadow: 0 4px 16px var(--accent-a30);
 }
 .btn-newsession--primary:hover { color: var(--accent-ink); opacity: .88; }
+.prune-session-form {
+  display: flex;
+  justify-content: center;
+  padding-top: 12px;
+}
+.prune-session-form .secondary-button {
+  justify-content: center;
+}
+.carry-recs {
+  display: grid;
+  gap: 8px;
+  margin-top: 14px;
+  padding-top: 14px;
+  border-top: 1px solid var(--divider);
+}
+.carry-rec {
+  display: grid;
+  grid-template-columns: minmax(0, 1fr) auto auto;
+  gap: 10px;
+  align-items: center;
+  padding: 8px 10px;
+  background: var(--surface-sunk);
+  border: 1px solid var(--border);
+  border-radius: var(--r-sm);
+}
+.carry-rec span {
+  min-width: 0;
+  overflow: hidden;
+  text-overflow: ellipsis;
+  white-space: nowrap;
+  color: var(--text-strong);
+  font-size: 13px;
+  font-weight: 600;
+}
+.carry-rec strong {
+  color: var(--rolled);
+  font-family: var(--font-mono);
+  font-size: 12.5px;
+  white-space: nowrap;
+}
+.carry-rec form {
+  margin: 0;
+}
+.carry-rec em {
+  color: var(--faintest);
+  font-size: 11.5px;
+  font-style: normal;
+  white-space: nowrap;
+}
 
 /* Admin: CSV tools */
-.csv__desc { margin: 0 0 16px; font-size: 12.5px; color: var(--faint); }
+.csv__desc { margin: 0 0 12px; font-size: 12.5px; color: var(--faint); }
+.import-form {
+  display: flex;
+  flex: 1;
+  flex-direction: column;
+}
 .csv__btns { display: flex; gap: 10px; margin-bottom: 12px; }
 .csv-btn-ghost {
   flex: 1;
   text-align: center;
-  padding: 10px;
+  padding: 9px 10px;
   border-radius: 8px;
   background: var(--field);
   border: 1px solid var(--border-strong);
@@ -1310,8 +1549,11 @@ select.control { cursor: pointer; }
 }
 .csv-btn-ghost:hover { border-color: var(--border-hi); }
 .csv__drop {
-  display: block;
-  padding: 18px;
+  display: grid;
+  flex: 1;
+  min-height: 112px;
+  place-items: center;
+  padding: 18px 14px;
   border: 1px dashed var(--border-strong);
   border-radius: 9px;
   text-align: center;
@@ -1326,17 +1568,65 @@ select.control { cursor: pointer; }
 .form-shell { display: grid; justify-content: center; padding-top: 40px; }
 .form-shell.narrow { grid-template-columns: minmax(320px, 480px); }
 
+/* Modal */
+.modal-backdrop {
+  position: fixed;
+  inset: 0;
+  z-index: 50;
+  display: grid;
+  place-items: center;
+  padding: 20px;
+  background: rgba(5, 5, 8, .68);
+  backdrop-filter: blur(5px);
+}
+.modal-backdrop[hidden] { display: none; }
+.modal-card {
+  width: min(100%, 440px);
+  overflow: hidden;
+  border-radius: var(--r-md);
+  background: var(--surface);
+  border: 1px solid var(--border-strong);
+  box-shadow: 0 24px 70px rgba(0, 0, 0, .45);
+}
+.modal-card__head {
+  padding: 18px 20px 0;
+}
+.modal-card__text {
+  margin: 0;
+  padding: 14px 20px 18px;
+  color: var(--muted);
+  font-size: 13.5px;
+  line-height: 1.5;
+}
+.modal-card__actions {
+  display: flex;
+  justify-content: flex-end;
+  gap: 10px;
+  padding: 16px 20px;
+  border-top: 1px solid var(--divider);
+  background: var(--surface-sunk);
+  flex-wrap: wrap;
+}
+
 /* ================================================================
    RESPONSIVE
    ================================================================ */
 @media (max-width: 860px) {
   .split > .col-main, .split > .col-side { min-width: 100%; }
-  .admin-workspace__main, .admin-workspace__side { min-width: 100%; }
   .admin-workspace { grid-template-columns: 1fr; }
-  .admin-workspace .col-main, .admin-workspace .col-side { min-width: 0; }
+  .append__textarea { min-height: 120px; }
+  .debt-layout {
+    grid-template-columns: 1fr;
+  }
   .admin-bottom-grid { grid-template-columns: 1fr; }
 }
 
+@media (min-width: 861px) and (max-width: 1180px) {
+  .admin-workspace {
+    grid-template-columns: repeat(2, minmax(280px, 1fr));
+  }
+}
+
 @media (max-width: 1180px) {
   .player-stat-grid { grid-template-columns: repeat(4, minmax(0, 1fr)); }
 }
@@ -1351,7 +1641,19 @@ select.control { cursor: pointer; }
   .recon-metric-grid { grid-template-columns: 1fr; }
   .player-stat-grid { grid-template-columns: repeat(2, minmax(0, 1fr)); }
   .event-card--inline {
-    grid-template-columns: minmax(0, 1fr) auto;
+    grid-template-columns: minmax(0, 1fr) max-content auto;
+  }
+  .event-card--inline .event-card-top strong {
+    grid-column: 1;
+  }
+  .event-card--inline .pill {
+    grid-column: 2;
+  }
+  .event-card--inline .event-amount {
+    grid-column: 3;
+  }
+  .event-card--inline .event-note {
+    grid-column: 1 / -1;
   }
   .event-card--inline .tiny-text {
     grid-column: 1 / -1;
diff --git a/stats.py b/stats.py
index 8514c0f..f89d4b2 100644
--- a/stats.py
+++ b/stats.py
@@ -28,6 +28,18 @@ PLAYER_PALETTE = [
 BREAK_EVEN_TOLERANCE_CENTS = 100
 
 
+def session_sequence_number(session_id: str, session_date: str) -> int:
+    suffix = session_id.strip().replace(f"{session_date.strip()}-", "", 1)
+
+    if session_id.strip() == session_date.strip():
+        return 1
+    if suffix.isdigit():
+        return int(suffix)
+    if suffix.lower().startswith("s") and suffix[1:].isdigit():
+        return int(suffix[1:])
+    return 9999
+
+
 @dataclass
 class SessionEntry:
     session_id: str
@@ -40,19 +52,32 @@ class SessionEntry:
     cash_out_cents: int = 0
     paid_cents: int = 0
     rollover_in_cents: int = 0
+    payout_carry_in_cents: int = 0
     rollover_out_cents: int = 0
     notes: list[str] = field(default_factory=list)
 
     @property
     def invested_cents(self) -> int:
-        # Poker performance: everything that entered play, including house fronts
-        # and prior unpaid winnings rolled into this session.
+        # Poker performance: money/chips that entered play. This is intentionally
+        # broader than real cash because fronts and rollover-ins affect results.
         return self.buy_in_cents + self.front_cents + self.rollover_in_cents
 
     @property
     def net_cents(self) -> int:
         return self.cash_out_cents - self.invested_cents
 
+    @property
+    def paid_out_cents(self) -> int:
+        return self.paid_cents
+
+    @property
+    def debt_repayment_cents(self) -> int:
+        return self.front_collected_cents
+
+    @property
+    def writeoff_cents(self) -> int:
+        return self.front_writeoff_cents
+
     @property
     def gross_payout_cents(self) -> int:
         # Settlement: cashout is a gross chip count/result, not proof that cash
@@ -64,33 +89,42 @@ class SessionEntry:
     def player_owes_gross_cents(self) -> int:
         return max(self.front_cents - self.cash_out_cents, 0)
 
+    @property
+    def gross_due_to_house_cents(self) -> int:
+        return self.player_owes_gross_cents
+
     @property
     def settled_to_player_cents(self) -> int:
         # Rollover-out resolves the source session's payable even though it is
         # not real cash out. The destination session records it as rollover-in.
-        return self.paid_cents + self.rollover_out_cents
+        return self.paid_out_cents + self.rollover_out_cents
 
     @property
     def current_due_to_player_cents(self) -> int:
-        return max(self.gross_payout_cents - self.settled_to_player_cents, 0)
+        return max(
+            self.gross_payout_cents
+            + self.payout_carry_in_cents
+            - self.settled_to_player_cents,
+            0,
+        )
 
     @property
     def settled_to_house_cents(self) -> int:
         # Front collections are real cash in. Writeoffs are not cash, but they
         # do resolve the receivable.
-        return self.front_collected_cents + self.front_writeoff_cents
+        return self.debt_repayment_cents + self.writeoff_cents
 
     @property
     def current_due_to_house_cents(self) -> int:
-        return max(self.player_owes_gross_cents - self.settled_to_house_cents, 0)
+        return max(self.gross_due_to_house_cents - self.settled_to_house_cents, 0)
 
     @property
     def real_cash_in_cents(self) -> int:
-        return self.buy_in_cents + self.front_collected_cents
+        return self.buy_in_cents + self.debt_repayment_cents
 
     @property
     def real_cash_out_cents(self) -> int:
-        return self.paid_cents
+        return self.paid_out_cents
 
     @property
     def payout_due_cents(self) -> int:
@@ -114,11 +148,11 @@ class SessionEntry:
 
     @property
     def raw_player_owes_cents(self) -> int:
-        return self.player_owes_gross_cents
+        return self.gross_due_to_house_cents
 
     @property
     def front_shortfall_cents(self) -> int:
-        return self.player_owes_gross_cents
+        return self.gross_due_to_house_cents
 
     @property
     def overpaid_front_cents(self) -> int:
@@ -127,29 +161,31 @@ class SessionEntry:
     @property
     def front_writeoff_applied_cents(self) -> int:
         return min(
-            self.front_writeoff_cents,
-            max(self.player_owes_gross_cents - self.front_collected_applied_cents, 0),
+            self.writeoff_cents,
+            max(self.gross_due_to_house_cents - self.front_collected_applied_cents, 0),
         )
 
     @property
     def front_collected_applied_cents(self) -> int:
-        return min(self.front_collected_cents, self.player_owes_gross_cents)
+        return min(self.debt_repayment_cents, self.gross_due_to_house_cents)
 
     @property
     def front_resolved_cents(self) -> int:
-        return min(self.settled_to_house_cents, self.player_owes_gross_cents)
+        return min(self.settled_to_house_cents, self.gross_due_to_house_cents)
 
     @property
     def payout_status(self) -> str:
         if self.current_due_to_house_cents > 0:
             return "owes"
-        if self.front_writeoff_cents > 0:
+        if self.writeoff_cents > 0:
             return "written_off"
-        if self.front_collected_cents > 0:
+        if self.debt_repayment_cents > 0:
             return "collected"
         if self.gross_payout_cents <= 0:
             return "none"
         if self.current_due_to_player_cents <= 0:
+            if self.paid_out_cents < self.gross_payout_cents:
+                return "settled"
             return "paid"
         if self.settled_to_player_cents <= 0:
             return "unpaid"
@@ -180,6 +216,10 @@ class SessionSummary:
     def total_rollover_in_cents(self) -> int:
         return sum(entry.rollover_in_cents for entry in self.entries)
 
+    @property
+    def total_payout_carry_in_cents(self) -> int:
+        return sum(entry.payout_carry_in_cents for entry in self.entries)
+
     @property
     def total_invested_cents(self) -> int:
         return sum(entry.invested_cents for entry in self.entries)
@@ -206,7 +246,11 @@ class SessionSummary:
 
     @property
     def total_paid_cents(self) -> int:
-        return sum(entry.paid_cents for entry in self.entries)
+        return self.total_paid_out_cents
+
+    @property
+    def total_paid_out_cents(self) -> int:
+        return sum(entry.paid_out_cents for entry in self.entries)
 
     @property
     def total_rollover_out_cents(self) -> int:
@@ -222,7 +266,11 @@ class SessionSummary:
 
     @property
     def total_player_owes_gross_cents(self) -> int:
-        return sum(entry.player_owes_gross_cents for entry in self.entries)
+        return sum(entry.gross_due_to_house_cents for entry in self.entries)
+
+    @property
+    def total_gross_due_to_house_cents(self) -> int:
+        return self.total_player_owes_gross_cents
 
     @property
     def total_settled_to_house_cents(self) -> int:
@@ -234,19 +282,39 @@ class SessionSummary:
 
     @property
     def total_front_writeoff_cents(self) -> int:
-        return sum(entry.front_writeoff_cents for entry in self.entries)
+        return self.total_writeoff_cents
 
     @property
     def total_front_collected_cents(self) -> int:
-        return sum(entry.front_collected_cents for entry in self.entries)
+        return self.total_debt_repayment_cents
+
+    @property
+    def total_debt_repayment_cents(self) -> int:
+        return sum(entry.debt_repayment_cents for entry in self.entries)
+
+    @property
+    def total_writeoff_cents(self) -> int:
+        return sum(entry.writeoff_cents for entry in self.entries)
 
     @property
     def total_cash_in_cents(self) -> int:
         return sum(entry.real_cash_in_cents for entry in self.entries)
 
     @property
-    def total_paid_out_cents(self) -> int:
-        return sum(entry.real_cash_out_cents for entry in self.entries)
+    def total_real_cash_in_cents(self) -> int:
+        return self.total_cash_in_cents
+
+    @property
+    def total_real_cash_out_cents(self) -> int:
+        return self.total_paid_out_cents
+
+    @property
+    def total_banker_cash_in_cents(self) -> int:
+        return self.total_real_cash_in_cents
+
+    @property
+    def total_banker_cash_out_cents(self) -> int:
+        return self.total_real_cash_out_cents
 
     @property
     def total_current_due_cents(self) -> int:
@@ -290,10 +358,13 @@ class PlayerStats:
     total_front_writeoff_cents: int
     current_player_owes_cents: int
     total_rollover_in_cents: int
+    total_payout_carry_in_cents: int
     total_invested_cents: int
     total_cash_out_cents: int
+    total_gross_payout_cents: int
     total_paid_cents: int
     total_rollover_out_cents: int
+    current_due_to_player_cents: int
     total_net_cents: int
     roi_pct: float
     current_win_streak: int
@@ -306,6 +377,30 @@ class PlayerStats:
     worst_session_net_cents: int
     rank_change: int = 0
 
+    @property
+    def total_debt_repayment_cents(self) -> int:
+        return self.total_front_collected_cents
+
+    @property
+    def total_writeoff_cents(self) -> int:
+        return self.total_front_writeoff_cents
+
+    @property
+    def current_due_to_house_cents(self) -> int:
+        return self.current_player_owes_cents
+
+    @property
+    def total_paid_out_cents(self) -> int:
+        return self.total_paid_cents
+
+    @property
+    def total_real_cash_out_cents(self) -> int:
+        return self.total_paid_out_cents
+
+    @property
+    def total_real_cash_in_cents(self) -> int:
+        return self.total_buy_in_cents + self.total_debt_repayment_cents
+
 
 def apply_rank_changes(
     current_board: list[PlayerStats], prev_board: list[PlayerStats]
@@ -331,34 +426,38 @@ def cents_to_dollars(cents: int) -> Markup:
 def session_sort_key(session: SessionSummary) -> tuple[str, int, str, str]:
     session_id = session.session_id.strip()
     session_date = session.session_date.strip()
+    return (
+        session_date,
+        session_sequence_number(session_id, session_date),
+        session.opened_at,
+        session_id,
+    )
 
-    if session_id == session_date:
-        return (session_date, 1, session.opened_at, session_id)
 
-    suffix = session_id.replace(f"{session_date}-", "")
+def entry_sort_key(entry: SessionEntry) -> tuple[str, int, str]:
+    return (
+        entry.session_date,
+        session_sequence_number(entry.session_id, entry.session_date),
+        entry.session_id,
+    )
+
+
+def session_display_suffix(session_id: str, session_date: str) -> str:
+    suffix = session_id.strip().replace(f"{session_date.strip()}-", "", 1)
+
+    if session_id.strip() == session_date.strip():
+        return ""
     if suffix.isdigit():
-        return (session_date, int(suffix), session.opened_at, session_id)
-
+        return f"S{int(suffix)}"
     if suffix.lower().startswith("s") and suffix[1:].isdigit():
-        return (session_date, int(suffix[1:]), session.opened_at, session_id)
-
-    return (session_date, 9999, session.opened_at, session_id)
+        return f"S{int(suffix[1:])}"
+    return suffix
 
 
 def session_chart_label(session: SessionSummary) -> str:
-    session_id = session.session_id.strip()
-
-    if session_id == session.session_date:
-        return safe_date_label(session.session_date)
-
-    suffix = session_id.replace(f"{session.session_date}-", "")
-    if suffix.isdigit():
-        return f"{safe_date_label(session.session_date)} · S{int(suffix)}"
-
-    if suffix.lower().startswith("s") and suffix[1:].isdigit():
-        return f"{safe_date_label(session.session_date)} · S{int(suffix[1:])}"
-
-    return f"{safe_date_label(session.session_date)} · {suffix}"
+    suffix = session_display_suffix(session.session_id, session.session_date)
+    date_label = safe_date_label(session.session_date)
+    return f"{date_label} · {suffix}" if suffix else date_label
 
 
 def safe_date_label(raw_date: str) -> str:
@@ -369,13 +468,7 @@ def safe_date_label(raw_date: str) -> str:
 
 
 def session_label(session: SessionSummary) -> str:
-    if session.session_id == session.session_date:
-        return safe_date_label(session.session_date)
-
-    suffix = session.session_id.replace(f"{session.session_date}-", "")
-    if suffix.isdigit():
-        return f"{safe_date_label(session.session_date)} · S{int(suffix)}"
-    return f"{safe_date_label(session.session_date)} · {suffix}"
+    return session_chart_label(session)
 
 
 def color_for_name(name: str, names: list[str]) -> str:
@@ -450,14 +543,22 @@ def build_session_summaries(events: list[EventRow]) -> list[SessionSummary]:
             entry.front_cents += event["amount_cents"]
         elif event_type == "front_collected":
             entry.front_collected_cents += event["amount_cents"]
+        elif event_type == "debt_repayment":
+            entry.front_collected_cents += event["amount_cents"]
         elif event_type == "front_writeoff":
             entry.front_writeoff_cents += event["amount_cents"]
+        elif event_type == "writeoff":
+            entry.front_writeoff_cents += event["amount_cents"]
         elif event_type == "rollover_in":
             entry.rollover_in_cents += event["amount_cents"]
+        elif event_type == "payout_carry_in":
+            entry.payout_carry_in_cents += event["amount_cents"]
         elif event_type == "cashout":
             entry.cash_out_cents += event["amount_cents"]
         elif event_type == "paid":
             entry.paid_cents += event["amount_cents"]
+        elif event_type == "paid_out":
+            entry.paid_cents += event["amount_cents"]
         elif event_type == "rollover_out":
             entry.rollover_out_cents += event["amount_cents"]
 
@@ -484,19 +585,12 @@ def build_session_summaries(events: list[EventRow]) -> list[SessionSummary]:
             )
         )
 
-    sessions.sort(
-        key=lambda session: (
-            session.session_date,
-            session.opened_at,
-            session.session_id,
-        ),
-        reverse=True,
-    )
+    sessions.sort(key=session_sort_key, reverse=True)
     return sessions
 
 
 def summarize_player_runs(entries: list[SessionEntry]) -> dict[str, int | str | None]:
-    ordered_entries = sorted(entries, key=lambda entry: entry.session_date)
+    ordered_entries = sorted(entries, key=entry_sort_key)
 
     longest_win_streak = 0
     longest_loss_streak = 0
@@ -585,14 +679,17 @@ def build_leaderboard(sessions: list[SessionSummary]) -> list[PlayerStats]:
 
         total_buy_in = sum(entry.buy_in_cents for entry in entries)
         total_front = sum(entry.front_cents for entry in entries)
-        total_front_collected = sum(entry.front_collected_cents for entry in entries)
-        total_front_writeoff = sum(entry.front_writeoff_cents for entry in entries)
+        total_front_collected = sum(entry.debt_repayment_cents for entry in entries)
+        total_front_writeoff = sum(entry.writeoff_cents for entry in entries)
         current_player_owes = sum(entry.player_owes_cents for entry in entries)
         total_rollover_in = sum(entry.rollover_in_cents for entry in entries)
+        total_payout_carry_in = sum(entry.payout_carry_in_cents for entry in entries)
         total_invested = sum(entry.invested_cents for entry in entries)
         total_cash_out = sum(entry.cash_out_cents for entry in entries)
-        total_paid = sum(entry.paid_cents for entry in entries)
+        total_gross_payout = sum(entry.gross_payout_cents for entry in entries)
+        total_paid = sum(entry.paid_out_cents for entry in entries)
         total_rollover_out = sum(entry.rollover_out_cents for entry in entries)
+        current_due_to_player = sum(entry.current_due_to_player_cents for entry in entries)
         total_net = sum(entry.net_cents for entry in entries)
         roi_pct = (total_net / total_invested * 100) if total_invested else 0.0
 
@@ -614,10 +711,13 @@ def build_leaderboard(sessions: list[SessionSummary]) -> list[PlayerStats]:
                 total_front_writeoff_cents=total_front_writeoff,
                 current_player_owes_cents=current_player_owes,
                 total_rollover_in_cents=total_rollover_in,
+                total_payout_carry_in_cents=total_payout_carry_in,
                 total_invested_cents=total_invested,
                 total_cash_out_cents=total_cash_out,
+                total_gross_payout_cents=total_gross_payout,
                 total_paid_cents=total_paid,
                 total_rollover_out_cents=total_rollover_out,
+                current_due_to_player_cents=current_due_to_player,
                 total_net_cents=total_net,
                 roi_pct=roi_pct,
                 current_win_streak=run_summary["current_win_streak"],
diff --git a/storage.py b/storage.py
index e891c27..0cc324a 100644
--- a/storage.py
+++ b/storage.py
@@ -39,8 +39,12 @@ VALID_EVENT_TYPES = {
     "front_writeoff",
     "cashout",
     "paid",
+    "paid_out",
     "rollover_in",
+    "payout_carry_in",
     "rollover_out",
+    "debt_repayment",
+    "writeoff",
     "note",
     "session_open",
     "session_close",
@@ -120,3 +124,15 @@ def append_event(
         writer.writerow(event)
 
     return event
+
+
+def write_events(csv_path: Path, events: list[EventRow]) -> None:
+    ensure_data_file(csv_path)
+
+    tmp_path = csv_path.with_suffix(f"{csv_path.suffix}.tmp")
+    with tmp_path.open("w", newline="", encoding="utf-8") as file:
+        writer = csv.DictWriter(file, fieldnames=CSV_HEADERS)
+        writer.writeheader()
+        writer.writerows(events)
+
+    tmp_path.replace(csv_path)
diff --git a/templates/admin_dashboard.html b/templates/admin_dashboard.html
index f88db58..6064d90 100644
--- a/templates/admin_dashboard.html
+++ b/templates/admin_dashboard.html
@@ -1,5 +1,5 @@
 {% extends "base.html" %}
-{% block title %}Admin · boker.club{% endblock %}
+{% block title %}Admin · myboker.org{% endblock %}
 {% block page_class %}page--admin{% endblock %}
 {% block content %}
 
@@ -11,7 +11,7 @@
         {% endif %}
     </div>
     <h1 class="hero__title">Ledger controls</h1>
-    <p class="hero__sub">Append events to the audit trail. All history is permanent.</p>
+    <p class="hero__sub">Append events to the audit trail. Player ledger history stays permanent.</p>
 </div>
 
 <!-- Banker cash/book position. Cash tiles are real money only; rollovers only
@@ -22,7 +22,7 @@
         <div class="stat__val" style="color:var(--num)">{{ admin_totals.cash_in_cents | money }}</div>
     </div>
     <div class="stat stat--rail" style="--rail:var(--pos);">
-        <span class="kicker">Cash out</span>
+        <span class="kicker">Cash paid out</span>
         <div class="stat__val" style="color:var(--pos)">{{ admin_totals.cash_out_cents | money }}</div>
     </div>
     <div class="stat stat--rail" style="--rail:var(--neg);">
@@ -38,125 +38,255 @@
         <div class="stat__val {% if admin_totals.net_book_position_cents == 0 %}num-muted{% elif admin_totals.net_book_position_cents > 0 %}num-pos{% else %}num-neg{% endif %}">
             {{ admin_totals.net_book_position_cents | money }}
         </div>
-        <div class="stat__sub">cash in - cash out + receivables - payables</div>
+        <div class="stat__sub">cash in - cash paid out + receivables - payables</div>
     </div>
 </div>
 
-<!-- Two-column workspace -->
+<!-- Admin workspace -->
 <div class="admin-workspace">
 
-    <!-- LEFT: append form + recent sessions -->
-    <div class="col-main">
-
-        <form class="panel append" method="post" action="{{ url_for('admin_dashboard') }}">
-            <div class="panel__head">
-                <h2 class="panel__title">Append ledger event</h2>
-                <span class="panel__tag">fast entry</span>
-            </div>
-            <div class="append__body">
-                <div class="append__grid">
-                    <label class="field">
-                        <span class="field__label">Session</span>
-                        <select class="control" name="session_id" required>
-                            <option value="">Select session</option>
-                            {% for s in open_sessions %}
-                            <option value="{{ s.session_id }}" {{ 'selected' if append_form.session_id == s.session_id else '' }}>
-                                {{ session_label(s) }}{{ ' (live)' if s.status == 'open' else '' }}
-                            </option>
-                            {% endfor %}
-                        </select>
-                    </label>
-                    <label class="field">
-                        <span class="field__label">Player</span>
-                        <input class="control" list="player_names_list" type="text" name="player_name" placeholder="Player name" value="{{ append_form.player_name }}" required>
-                        <datalist id="player_names_list">
-                            {% for name in player_names %}<option value="{{ name }}"></option>{% endfor %}
-                        </datalist>
-                    </label>
-                    <label class="field">
-                        <span class="field__label">Event type</span>
-                        <select class="control" name="event_type" required id="eventTypeSelect">
-                            {% for value, label, color in event_types %}
-                            <option value="{{ value }}" data-color="{{ color }}" data-label="{{ label }}" {{ 'selected' if append_form.event_type == value else '' }}>{{ label }}</option>
-                            {% endfor %}
-                        </select>
-                    </label>
-                    <label class="field">
-                        <span class="field__label">Amount</span>
-                        <span class="control control--money">
-                            <span class="control__prefix">$</span>
-                            <input name="amount" inputmode="decimal" placeholder="0" autofocus>
-                        </span>
-                    </label>
-                </div>
-                <label class="field append__note">
-                    <span class="field__label">Note <span class="field__opt">(optional)</span></span>
-                    <input class="control" name="note" placeholder="e.g. fronted buy-in, settle next week">
+    <form class="panel append" method="post" action="{{ url_for('admin_dashboard') }}">
+        <div class="panel__head">
+            <h2 class="panel__title">Append ledger event</h2>
+            <span class="panel__tag">fast entry</span>
+        </div>
+        <div class="append__body">
+            <div class="append__grid">
+                <label class="field">
+                    <span class="field__label">Session</span>
+                    <select class="control" name="session_id" required>
+                        <option value="">Select session</option>
+                        {% for s in open_sessions %}
+                        <option value="{{ s.session_id }}" {{ 'selected' if append_form.session_id == s.session_id else '' }}>
+                            {{ session_label(s) }}{{ ' (live)' if s.status == 'open' else '' }}
+                        </option>
+                        {% endfor %}
+                    </select>
                 </label>
-                <div class="append__footer">
-                    <button type="submit" class="btn btn--primary">Append event</button>
-                    <span class="append__preview">Will record as
-                        <span class="evtag-pill" id="eventTypePreview" style="color:{{ event_type_colors[append_form.event_type] }}">{{ event_type_labels[append_form.event_type] | upper }}</span>
+                <label class="field">
+                    <span class="field__label">Player</span>
+                    <input class="control" list="player_names_list" type="text" name="player_name" placeholder="Player name" value="{{ append_form.player_name }}" required>
+                    <datalist id="player_names_list">
+                        {% for name in player_names %}<option value="{{ name }}"></option>{% endfor %}
+                    </datalist>
+                </label>
+                <label class="field">
+                    <span class="field__label">Event type</span>
+                    <select class="control" name="event_type" required id="eventTypeSelect">
+                        {% for value, label, color in event_types %}
+                        <option value="{{ value }}" data-color="{{ color }}" data-label="{{ label }}" {{ 'selected' if append_form.event_type == value else '' }}>{{ label }}</option>
+                        {% endfor %}
+                    </select>
+                </label>
+                <label class="field">
+                    <span class="field__label">Amount</span>
+                    <span class="control control--money">
+                        <span class="control__prefix">$</span>
+                        <input name="amount" inputmode="decimal" placeholder="0" autofocus>
                     </span>
-                </div>
+                </label>
             </div>
-        </form>
-
-    </div><!-- /.col-main -->
-
-    <!-- RIGHT: session controls + CSV + raw events feed -->
-    <div class="col-side">
-
-        <div class="panel panel--pad">
-            <h2 class="panel__title panel__title--mb">Session controls</h2>
-
-            {% if live_session %}
-            <div class="livecard">
-                <div class="livecard__head">
-                    <span class="dot dot--live"></span>
-                    <span class="livecard__name">{{ session_label(live_session) }}</span>
-                    <span class="livecard__no">{{ live_session_no }}</span>
+            <label class="field append__note">
+                <span class="field__label">Note <span class="field__opt">(optional)</span></span>
+                <textarea class="control append__textarea" name="note" placeholder="e.g. fronted buy-in, settle next week"></textarea>
+            </label>
+            <div class="append__footer">
+                <button type="submit" class="btn btn--primary">Append event</button>
+                <span class="append__preview">Will record as
+                    <span class="evtag-pill" id="eventTypePreview" style="color:{{ event_type_colors[append_form.event_type] }}">{{ event_type_labels[append_form.event_type] | upper }}</span>
+                </span>
+            </div>
+            {% if pending_carry_items %}
+            <div class="carry-recs">
+                <div class="micro">Recommended carry-ins</div>
+                {% for item in pending_carry_items %}
+                <div class="carry-rec">
+                    <span>{{ item.player_name }}</span>
+                    <strong>{{ item.amount_cents | money }}</strong>
+                    {% if live_session and item.player_name in live_session_player_names %}
+                    <form method="post" action="{{ url_for('admin_apply_payout_carry_in') }}">
+                        <input type="hidden" name="session_id" value="{{ live_session.session_id }}">
+                        <input type="hidden" name="player_name" value="{{ item.player_name }}">
+                        <button class="table-action-button" type="submit">Apply</button>
+                    </form>
+                    {% elif live_session %}
+                    <em>Add buy-in first</em>
+                    {% else %}
+                    <em>Open session</em>
+                    {% endif %}
                 </div>
-                <div class="livecard__metrics">
-                    <div><div class="micro">In play</div><div class="mono16">{{ live_session.total_invested_cents | money }}</div></div>
-                    <div><div class="micro">Seated</div><div class="mono16">{{ live_session.entries|length }}</div></div>
-                    <div><div class="micro">Open</div><div class="mono16 mono16--warn">{{ live_unresolved_count }}</div></div>
-                </div>
-                <form method="post" action="{{ url_for('admin_session_state') }}">
-                    <input type="hidden" name="session_id" value="{{ live_session.session_id }}">
-                    <button class="btn-close" type="submit" name="state" value="closed">Close &amp; settle session</button>
-                </form>
+                {% endfor %}
             </div>
             {% endif %}
+        </div>
+    </form>
 
-            <form method="post" action="{{ url_for('admin_open_session') }}">
-                <input type="hidden" name="session_date" value="{{ admin_today }}">
-                <button class="btn-newsession {{ 'btn-newsession--primary' if not live_session else '' }}" type="submit">+ Open new session</button>
-            </form>
+    <div class="panel panel--pad session-control-panel">
+        <h2 class="panel__title panel__title--mb">Session controls</h2>
+        <div class="session-summary-strip">
+            <div>
+                <span class="micro">Today</span>
+                <strong>{{ admin_today }}</strong>
+            </div>
+            <div>
+                <span class="micro">Empty</span>
+                <strong>{{ empty_session_count }}</strong>
+            </div>
         </div>
 
-        <div class="panel panel--pad">
-            <h2 class="panel__title" style="margin:0 0 4px">Import / export</h2>
-            <p class="csv__desc">Back up or migrate the raw event ledger.</p>
-            <form method="post" action="{{ url_for('admin_import_csv') }}" enctype="multipart/form-data" class="import-form">
-                <div class="csv__btns">
-                    <a class="csv-btn-ghost" href="{{ url_for('admin_export_csv') }}">&darr; Export CSV</a>
-                    <label class="csv-btn-ghost" for="csvTopImport">&uarr; Import CSV</label>
-                </div>
-                <input id="csvTopImport" type="file" accept=".csv,text/csv" name="csv_file" hidden onchange="this.form.submit()">
-                <label class="csv__drop" id="csvDrop" for="csvTopImport">Drop ledger.csv to import</label>
+        {% if live_session %}
+        <div class="livecard">
+            <div class="livecard__head">
+                <span class="dot dot--live"></span>
+                <span class="livecard__name">{{ session_label(live_session) }}</span>
+                <span class="livecard__no">{{ live_session_no }}</span>
+            </div>
+            <div class="livecard__metrics">
+                <div><div class="micro">Invested</div><div class="mono16">{{ live_session.total_invested_cents | money }}</div></div>
+                <div><div class="micro">Seated</div><div class="mono16">{{ live_session.entries|length }}</div></div>
+                <div><div class="micro">Open</div><div class="mono16 mono16--warn">{{ live_unresolved_count }}</div></div>
+            </div>
+            <form method="post" action="{{ url_for('admin_session_state') }}"
+                  {% if live_unresolved_count > 0 %}data-close-warning="true"{% endif %}>
+                <input type="hidden" name="session_id" value="{{ live_session.session_id }}">
+                <button class="btn-close" type="submit" name="state" value="closed">Close session</button>
             </form>
         </div>
+        {% else %}
+        <div class="livecard livecard--empty">
+            <div class="livecard__head">
+                <span class="dot dot--idle"></span>
+                <span class="livecard__name">No open session</span>
+                <span class="livecard__no">idle</span>
+            </div>
+            <div class="livecard__metrics">
+                <div><div class="micro">Invested</div><div class="mono16">{{ 0 | money }}</div></div>
+                <div><div class="micro">Seated</div><div class="mono16">0</div></div>
+                <div><div class="micro">Open</div><div class="mono16">0</div></div>
+            </div>
+        </div>
+        {% endif %}
 
-    </div><!-- /.col-side -->
+        <form method="post" action="{{ url_for('admin_open_session') }}">
+            <input type="hidden" name="session_date" value="{{ admin_today }}">
+            <button class="btn-newsession {{ 'btn-newsession--primary' if not live_session else '' }}" type="submit">+ Open new session</button>
+        </form>
+
+        <form method="post" action="{{ url_for('admin_prune_empty_sessions') }}" class="prune-session-form">
+            <button class="secondary-button" type="submit" {% if empty_session_count == 0 %}disabled{% endif %}>
+                Prune empty sessions{% if empty_session_count > 0 %} ({{ empty_session_count }}){% endif %}
+            </button>
+        </form>
+    </div>
+
+    <div class="panel panel--pad import-export-panel">
+        <h2 class="panel__title" style="margin:0 0 4px">Import / export</h2>
+        <p class="csv__desc">Back up or migrate the raw event ledger.</p>
+        <form method="post" action="{{ url_for('admin_import_csv') }}" enctype="multipart/form-data" class="import-form">
+            <div class="csv__btns">
+                <a class="csv-btn-ghost" href="{{ url_for('admin_export_csv') }}">&darr; Export CSV</a>
+                <label class="csv-btn-ghost" for="csvTopImport">&uarr; Import CSV</label>
+            </div>
+            <input id="csvTopImport" type="file" accept=".csv,text/csv" name="csv_file" hidden onchange="this.form.submit()">
+            <label class="csv__drop" id="csvDrop" for="csvTopImport">Drop ledger.csv to import</label>
+        </form>
+    </div>
 
 </div><!-- /.admin-workspace -->
 
+<!-- Debt resolution -->
+<div class="panel debt-panel">
+    <div class="panel__head">
+        <div>
+            <span class="kicker" style="margin:0;">Front receivables</span>
+            <h2 class="panel__title">Debt resolution</h2>
+        </div>
+        <div class="debt-summary">
+            <span class="badge badge--owes">Open {{ admin_totals.players_owe_house_cents | money }}</span>
+            <span class="badge badge--paid">Cash repaid {{ admin_totals.collected_cents | money }}</span>
+            <span class="badge badge--written_off">Written off {{ admin_totals.written_off_cents | money }}</span>
+        </div>
+    </div>
+    {% if debt_entries %}
+    <div class="debt-layout">
+        <div class="debt-list">
+            {% for item in debt_entries %}
+            {% set s = item.session %}{% set e = item.entry %}
+            <div class="debt-list-item">
+                <div>
+                    <strong>{{ e.player_name }}</strong>
+                    <span>{{ session_label(s) }}</span>
+                </div>
+                <b>{{ e.player_owes_cents | money }}</b>
+            </div>
+            {% endfor %}
+        </div>
+
+        <div class="debt-action-grid">
+            <form class="form-card debt-form" method="post" action="{{ url_for('admin_collect_front') }}">
+                <h3>Collect debt</h3>
+                <label>
+                    <span>Outstanding debt</span>
+                    <select name="debt_key" required>
+                        <option value="">Select debt</option>
+                        {% for item in debt_entries %}
+                        {% set s = item.session %}{% set e = item.entry %}
+                        <option value="{{ s.session_id }}||{{ e.player_name }}">
+                            {{ e.player_name }} · {{ session_label(s) }} · owes {{ e.player_owes_cents | money }}
+                        </option>
+                        {% endfor %}
+                    </select>
+                </label>
+                <label>
+                    <span>Amount collected</span>
+                    <input type="number" step="0.01" name="amount" placeholder="0.00" required>
+                </label>
+                <label>
+                    <span>Note</span>
+                    <textarea name="note" rows="2" placeholder="E-transfer received, cash, etc."></textarea>
+                </label>
+                <button class="primary-button" type="submit">Mark collected</button>
+            </form>
+
+            <form class="form-card debt-form" method="post" action="{{ url_for('admin_write_off_front') }}">
+                <h3>Write off debt</h3>
+                <label>
+                    <span>Outstanding debt</span>
+                    <select name="debt_key" required>
+                        <option value="">Select debt</option>
+                        {% for item in debt_entries %}
+                        {% set s = item.session %}{% set e = item.entry %}
+                        <option value="{{ s.session_id }}||{{ e.player_name }}">
+                            {{ e.player_name }} · {{ session_label(s) }} · owes {{ e.player_owes_cents | money }}
+                        </option>
+                        {% endfor %}
+                    </select>
+                </label>
+                <label>
+                    <span>Amount to write off</span>
+                    <input type="number" step="0.01" name="amount" placeholder="0.00" required>
+                </label>
+                <label>
+                    <span>Note</span>
+                    <textarea name="note" rows="2" placeholder="Won't be collected."></textarea>
+                </label>
+                <button class="secondary-button" type="submit">Write off debt</button>
+            </form>
+        </div>
+    </div>
+    {% else %}
+    <div class="debt-empty">
+        <div class="debt-empty__mark">$0</div>
+        <p>No open player debts right now.</p>
+    </div>
+    {% endif %}
+</div>
+
 <div class="admin-bottom-grid">
     <div class="panel">
         <div class="panel__head">
             <div>
-                <span class="kicker" style="margin:0;">Recent sessions</span>
+                <span class="kicker" style="margin:0;">All sessions</span>
                 <h2 class="panel__title">Current totals</h2>
             </div>
         </div>
@@ -167,8 +297,8 @@
                         <th>Session</th>
                         <th>Players</th>
                         <th>Cash in</th>
-                        <th>Cash out</th>
-                        <th>House owes</th>
+                        <th>Cash paid out</th>
+                        <th>House owes players</th>
                         <th>Players owe house</th>
                         <th>Book position</th>
                         <th>Status</th>
@@ -180,8 +310,8 @@
                     <tr>
                         <td><a href="{{ url_for('session_detail', session_id=s.session_id) }}">{{ session_label(s) }}</a></td>
                         <td style="font-family:var(--font-mono);color:var(--num)">{{ s.entries|length }}</td>
-                        <td style="font-family:var(--font-mono);color:var(--num)">{{ s.total_cash_in_cents | money }}</td>
-                        <td style="font-family:var(--font-mono);color:var(--pos)">{{ s.total_paid_out_cents | money }}</td>
+                        <td style="font-family:var(--font-mono);color:var(--num)">{{ s.total_banker_cash_in_cents | money }}</td>
+                        <td style="font-family:var(--font-mono);color:var(--pos)">{{ s.total_banker_cash_out_cents | money }}</td>
                         <td class="{{ 'negative' if s.total_current_due_to_player_cents > 0 else '' }}" style="font-family:var(--font-mono)">{{ s.total_current_due_to_player_cents | money }}</td>
                         <td class="{{ 'negative' if s.total_current_due_to_house_cents > 0 else '' }}" style="font-family:var(--font-mono)">{{ s.total_current_due_to_house_cents | money }}</td>
                         <td class="{% if s.total_net_book_position_cents > 0 %}positive{% elif s.total_net_book_position_cents < 0 %}negative{% endif %}" style="font-family:var(--font-mono)">{{ s.total_net_book_position_cents | money }}</td>
@@ -231,6 +361,20 @@
     </div>
 </div>
 
+<div class="modal-backdrop" id="closeSessionModal" hidden>
+    <div class="modal-card" role="dialog" aria-modal="true" aria-labelledby="closeSessionModalTitle">
+        <div class="modal-card__head">
+            <span class="kicker" style="margin:0;">Open settlement</span>
+            <h2 class="panel__title" id="closeSessionModalTitle">Close session?</h2>
+        </div>
+        <p class="modal-card__text">This session has unpaid or uncarried cashouts, or unresolved debts. Closing stops table entry, but the open settlement items will remain tracked.</p>
+        <div class="modal-card__actions">
+            <button class="secondary-button" type="button" id="cancelCloseSession">Keep open</button>
+            <button class="btn btn--primary" type="button" id="confirmCloseSession">Close session</button>
+        </div>
+    </div>
+</div>
+
 <script>
 const eventTypeSelect = document.getElementById('eventTypeSelect');
 const eventTypePreview = document.getElementById('eventTypePreview');
@@ -255,74 +399,38 @@ csvDrop?.addEventListener('drop', (event) => {
     csvInput.files = event.dataTransfer.files;
     csvInput.form?.submit();
 });
+
+const closeSessionModal = document.getElementById('closeSessionModal');
+const cancelCloseSession = document.getElementById('cancelCloseSession');
+const confirmCloseSession = document.getElementById('confirmCloseSession');
+let pendingCloseForm = null;
+
+document.querySelectorAll('form[data-close-warning="true"]').forEach((form) => {
+    form.addEventListener('submit', (event) => {
+        if (form.dataset.confirmed === 'true') return;
+        event.preventDefault();
+        pendingCloseForm = form;
+        closeSessionModal.hidden = false;
+        confirmCloseSession?.focus();
+    });
+});
+
+cancelCloseSession?.addEventListener('click', () => {
+    closeSessionModal.hidden = true;
+    pendingCloseForm = null;
+});
+
+closeSessionModal?.addEventListener('click', (event) => {
+    if (event.target !== closeSessionModal) return;
+    closeSessionModal.hidden = true;
+    pendingCloseForm = null;
+});
+
+confirmCloseSession?.addEventListener('click', () => {
+    if (!pendingCloseForm) return;
+    pendingCloseForm.dataset.confirmed = 'true';
+    pendingCloseForm.submit();
+});
 </script>
 
-<!-- Front debt resolution -->
-{% if debt_entries %}
-<div class="panel debt-panel" style="margin-top:20px;">
-    <div class="panel__head">
-        <div>
-            <span class="kicker" style="margin:0;">Front receivables</span>
-            <h2 class="panel__title">Debt resolution</h2>
-        </div>
-        <div class="debt-summary">
-            <span class="badge badge--owes">Open {{ admin_totals.players_owe_house_cents | money }}</span>
-            <span class="badge badge--paid">Repaid {{ admin_totals.collected_cents | money }}</span>
-            <span class="badge badge--written_off">Written off {{ admin_totals.written_off_cents | money }}</span>
-        </div>
-    </div>
-    <div class="debt-action-grid" style="padding:20px;">
-        <form class="form-card" style="padding:0;background:transparent;" method="post" action="{{ url_for('admin_collect_front') }}">
-            <h3>Collect debt</h3>
-            <label>
-                <span>Outstanding debt</span>
-                <select name="debt_key" required>
-                    <option value="">Select debt</option>
-                    {% for item in debt_entries %}
-                    {% set s = item.session %}{% set e = item.entry %}
-                    <option value="{{ s.session_id }}||{{ e.player_name }}">
-                        {{ e.player_name }} · {{ session_label(s) }} · owes {{ e.player_owes_cents | money }}
-                    </option>
-                    {% endfor %}
-                </select>
-            </label>
-            <label>
-                <span>Amount collected</span>
-                <input type="number" step="0.01" name="amount" placeholder="0.00" required>
-            </label>
-            <label>
-                <span>Note</span>
-                <textarea name="note" rows="2" placeholder="E-transfer received, cash, etc."></textarea>
-            </label>
-            <button class="primary-button" type="submit">Mark collected</button>
-        </form>
-
-        <form class="form-card" style="padding:0;background:transparent;" method="post" action="{{ url_for('admin_write_off_front') }}">
-            <h3>Write off debt</h3>
-            <label>
-                <span>Outstanding debt</span>
-                <select name="debt_key" required>
-                    <option value="">Select debt</option>
-                    {% for item in debt_entries %}
-                    {% set s = item.session %}{% set e = item.entry %}
-                    <option value="{{ s.session_id }}||{{ e.player_name }}">
-                        {{ e.player_name }} · {{ session_label(s) }} · owes {{ e.player_owes_cents | money }}
-                    </option>
-                    {% endfor %}
-                </select>
-            </label>
-            <label>
-                <span>Amount to write off</span>
-                <input type="number" step="0.01" name="amount" placeholder="0.00" required>
-            </label>
-            <label>
-                <span>Note</span>
-                <textarea name="note" rows="2" placeholder="Won't be collected."></textarea>
-            </label>
-            <button class="secondary-button" type="submit">Write off front</button>
-        </form>
-    </div>
-</div>
-{% endif %}
-
 {% endblock %}
diff --git a/templates/admin_login.html b/templates/admin_login.html
index 59ba01f..2ac4754 100644
--- a/templates/admin_login.html
+++ b/templates/admin_login.html
@@ -1,5 +1,5 @@
 {% extends "base.html" %}
-{% block title %}Admin Login · boker.club{% endblock %}
+{% block title %}Admin Login · myboker.org{% endblock %}
 {% block content %}
 
 <div class="form-shell narrow">
@@ -7,7 +7,7 @@
         <div>
             <p class="eyebrow">Restricted access</p>
             <h1 style="font-size:28px;margin-bottom:8px;">Admin login</h1>
-            <p class="muted-text" style="margin-bottom:8px;">Only boker.club manager needs credentials. All stats pages stay public.</p>
+            <p class="muted-text" style="margin-bottom:8px;">Only myboker.org manager needs credentials. All stats pages stay public.</p>
         </div>
         <label>
             <span>Username</span>
diff --git a/templates/base.html b/templates/base.html
index dbe08e0..4949542 100644
--- a/templates/base.html
+++ b/templates/base.html
@@ -3,7 +3,7 @@
 <head>
     <meta charset="utf-8">
     <meta name="viewport" content="width=device-width, initial-scale=1">
-    <title>{% block title %}boker.club{% endblock %}</title>
+    <title>{% block title %}myboker.org{% endblock %}</title>
     <link rel="stylesheet" href="{{ url_for('static', filename='css/tokens.css') }}">
     <link rel="stylesheet" href="{{ url_for('static', filename='css/style.css') }}">
     <script src="https://cdn.jsdelivr.net/npm/chart.js"></script>
@@ -13,7 +13,7 @@
         <div class="topbar__inner">
             <a class="brand" href="{{ url_for('leaderboard') }}">
                 <span class="brand__mark"></span>
-                <span class="brand__name">boker.club</span>
+                <span class="brand__name">myboker.org</span>
             </a>
             <nav class="mainnav">
                 <a class="navlink {{ 'is-active' if request.endpoint == 'leaderboard' }}" href="{{ url_for('leaderboard') }}">Leaderboard</a>
diff --git a/templates/leaderboard.html b/templates/leaderboard.html
index d7951b2..d39249b 100644
--- a/templates/leaderboard.html
+++ b/templates/leaderboard.html
@@ -1,5 +1,5 @@
 {% extends "base.html" %}
-{% block title %}Leaderboard · boker.club{% endblock %}
+{% block title %}Leaderboard · myboker.org{% endblock %}
 {% block content %}
 
 <div class="hero" style="display:flex;flex-wrap:wrap;gap:var(--s6);align-items:flex-start;justify-content:space-between;">
diff --git a/templates/player_detail.html b/templates/player_detail.html
index 68649d3..eba5360 100644
--- a/templates/player_detail.html
+++ b/templates/player_detail.html
@@ -1,5 +1,5 @@
 {% extends "base.html" %}
-{% block title %}{{ player.player_name }} · boker.club{% endblock %}
+{% block title %}{{ player.player_name }} · myboker.org{% endblock %}
 {% block content %}
 
 <div class="hero">
@@ -52,7 +52,7 @@
         <div class="stat__val" style="color:var(--num)">{{ player.total_invested_cents | money }}</div>
     </div>
     <div class="stat">
-        <span class="kicker">Cash-outs</span>
+        <span class="kicker">Gross cashouts</span>
         <div class="stat__val" style="color:var(--num)">{{ player.total_cash_out_cents | money }}</div>
     </div>
 </div>
@@ -105,15 +105,15 @@
                 <div class="result-mix__legend">
                     <div class="result-mix__legend-row">
                         <span><i class="result-mix__key result-mix__key--win"></i>Wins</span>
-                        <strong>{{ player.winning_sessions }} · {{ "%.1f"|format((player.winning_sessions / result_total * 100) if result_total else 0) }}%</strong>
+                        <strong><b>{{ player.winning_sessions }}</b><em>{{ "%.1f"|format((player.winning_sessions / result_total * 100) if result_total else 0) }}%</em></strong>
                     </div>
                     <div class="result-mix__legend-row">
                         <span><i class="result-mix__key result-mix__key--even"></i>Even</span>
-                        <strong>{{ player.break_even_sessions }} · {{ "%.1f"|format((player.break_even_sessions / result_total * 100) if result_total else 0) }}%</strong>
+                        <strong><b>{{ player.break_even_sessions }}</b><em>{{ "%.1f"|format((player.break_even_sessions / result_total * 100) if result_total else 0) }}%</em></strong>
                     </div>
                     <div class="result-mix__legend-row">
                         <span><i class="result-mix__key result-mix__key--loss"></i>Losses</span>
-                        <strong>{{ player.losing_sessions }} · {{ "%.1f"|format((player.losing_sessions / result_total * 100) if result_total else 0) }}%</strong>
+                        <strong><b>{{ player.losing_sessions }}</b><em>{{ "%.1f"|format((player.losing_sessions / result_total * 100) if result_total else 0) }}%</em></strong>
                     </div>
                 </div>
                 {% if result_total > 0 %}
@@ -151,6 +151,16 @@
                     <td style="padding:11px 20px;color:var(--muted);font-size:13.5px;border-top:1px solid var(--divider);">Win %</td>
                     <td style="padding:11px 20px;text-align:right;font-family:var(--font-mono);border-top:1px solid var(--divider);color:var(--num);">{{ "%.1f"|format(player.win_pct) }}%</td>
                 </tr>
+                <tr>
+                    <td style="padding:11px 20px;color:var(--muted);font-size:13.5px;border-top:1px solid var(--divider);">Record</td>
+                    <td style="padding:11px 20px;text-align:right;font-family:var(--font-mono);border-top:1px solid var(--divider);color:var(--num);">
+                        <span style="color:var(--pos)">{{ player.winning_sessions }}W</span>
+                        <span style="color:var(--faintest);margin:0 4px;">·</span>
+                        <span style="color:var(--neg)">{{ player.losing_sessions }}L</span>
+                        <span style="color:var(--faintest);margin:0 4px;">·</span>
+                        <span>{{ player.break_even_sessions }}E</span>
+                    </td>
+                </tr>
                 <tr>
                     <td style="padding:11px 20px;color:var(--muted);font-size:13.5px;border-top:1px solid var(--divider);">ROI</td>
                     <td style="padding:11px 20px;text-align:right;font-family:var(--font-mono);border-top:1px solid var(--divider);"
@@ -197,7 +207,7 @@
             <div>
                 <div class="section-marker">
                     <span class="section-marker__dot section-marker__dot--rolled"></span>
-                    Poker basis
+                    Poker basis + settlement
                 </div>
                 <h2 class="panel__title">Investment and settlement</h2>
             </div>
@@ -216,38 +226,54 @@
                     <td style="padding:11px 20px;color:var(--muted);font-size:13.5px;border-top:1px solid var(--divider);">Rolled in</td>
                     <td style="padding:11px 20px;text-align:right;font-family:var(--font-mono);border-top:1px solid var(--divider);color:var(--rolled);">{{ player.total_rollover_in_cents | money }}</td>
                 </tr>
+                {% if player.total_payout_carry_in_cents > 0 %}
+                <tr>
+                    <td style="padding:11px 20px;color:var(--muted);font-size:13.5px;border-top:1px solid var(--divider);">Payout carry-in</td>
+                    <td style="padding:11px 20px;text-align:right;font-family:var(--font-mono);border-top:1px solid var(--divider);color:var(--rolled);">{{ player.total_payout_carry_in_cents | money }}</td>
+                </tr>
+                {% endif %}
                 <tr>
                     <td style="padding:11px 20px;color:var(--muted);font-size:13.5px;border-top:1px solid var(--divider);">Total invested</td>
                     <td style="padding:11px 20px;text-align:right;font-family:var(--font-mono);border-top:1px solid var(--divider);color:var(--num);">{{ player.total_invested_cents | money }}</td>
                 </tr>
                 <tr>
-                    <td style="padding:11px 20px;color:var(--muted);font-size:13.5px;border-top:1px solid var(--divider);">Cash-outs</td>
+                    <td style="padding:11px 20px;color:var(--muted);font-size:13.5px;border-top:1px solid var(--divider);">Gross cashout result</td>
                     <td style="padding:11px 20px;text-align:right;font-family:var(--font-mono);border-top:1px solid var(--divider);color:var(--num);">{{ player.total_cash_out_cents | money }}</td>
                 </tr>
+                <tr>
+                    <td style="padding:11px 20px;color:var(--muted);font-size:13.5px;border-top:1px solid var(--divider);">Gross player claim</td>
+                    <td style="padding:11px 20px;text-align:right;font-family:var(--font-mono);border-top:1px solid var(--divider);color:var(--num);">{{ player.total_gross_payout_cents | money }}</td>
+                </tr>
                 <tr>
                     <td style="padding:11px 20px;color:var(--muted);font-size:13.5px;border-top:1px solid var(--divider);">Rolled out</td>
                     <td style="padding:11px 20px;text-align:right;font-family:var(--font-mono);border-top:1px solid var(--divider);color:var(--rolled);">{{ player.total_rollover_out_cents | money }}</td>
                 </tr>
                 <tr>
-                    <td style="padding:11px 20px;color:var(--muted);font-size:13.5px;border-top:1px solid var(--divider);">Paid out</td>
-                    <td style="padding:11px 20px;text-align:right;font-family:var(--font-mono);border-top:1px solid var(--divider);color:var(--pos);">{{ player.total_paid_cents | money }}</td>
+                    <td style="padding:11px 20px;color:var(--muted);font-size:13.5px;border-top:1px solid var(--divider);">Cash paid out</td>
+                    <td style="padding:11px 20px;text-align:right;font-family:var(--font-mono);border-top:1px solid var(--divider);color:var(--pos);">{{ player.total_paid_out_cents | money }}</td>
                 </tr>
-                {% if player.total_front_collected_cents > 0 %}
+                {% if player.total_debt_repayment_cents > 0 %}
                 <tr>
-                    <td style="padding:11px 20px;color:var(--muted);font-size:13.5px;border-top:1px solid var(--divider);">Debt repaid</td>
-                    <td style="padding:11px 20px;text-align:right;font-family:var(--font-mono);border-top:1px solid var(--divider);color:var(--pos);">{{ player.total_front_collected_cents | money }}</td>
+                    <td style="padding:11px 20px;color:var(--muted);font-size:13.5px;border-top:1px solid var(--divider);">Cash debt repaid</td>
+                    <td style="padding:11px 20px;text-align:right;font-family:var(--font-mono);border-top:1px solid var(--divider);color:var(--pos);">{{ player.total_debt_repayment_cents | money }}</td>
                 </tr>
                 {% endif %}
-                {% if player.current_player_owes_cents > 0 %}
+                {% if player.current_due_to_player_cents > 0 %}
                 <tr>
-                    <td style="padding:11px 20px;color:var(--muted);font-size:13.5px;border-top:1px solid var(--divider);">Still owes</td>
-                    <td style="padding:11px 20px;text-align:right;font-family:var(--font-mono);border-top:1px solid var(--divider);color:var(--owes);">{{ player.current_player_owes_cents | money }}</td>
+                    <td style="padding:11px 20px;color:var(--muted);font-size:13.5px;border-top:1px solid var(--divider);">House owes player</td>
+                    <td style="padding:11px 20px;text-align:right;font-family:var(--font-mono);border-top:1px solid var(--divider);color:var(--neg);">{{ player.current_due_to_player_cents | money }}</td>
                 </tr>
                 {% endif %}
-                {% if player.total_front_writeoff_cents > 0 %}
+                {% if player.current_due_to_house_cents > 0 %}
+                <tr>
+                    <td style="padding:11px 20px;color:var(--muted);font-size:13.5px;border-top:1px solid var(--divider);">Owes house</td>
+                    <td style="padding:11px 20px;text-align:right;font-family:var(--font-mono);border-top:1px solid var(--divider);color:var(--owes);">{{ player.current_due_to_house_cents | money }}</td>
+                </tr>
+                {% endif %}
+                {% if player.total_writeoff_cents > 0 %}
                 <tr>
                     <td style="padding:11px 20px;color:var(--muted);font-size:13.5px;border-top:1px solid var(--divider);">Written off</td>
-                    <td style="padding:11px 20px;text-align:right;font-family:var(--font-mono);border-top:1px solid var(--divider);color:var(--neg);">{{ player.total_front_writeoff_cents | money }}</td>
+                    <td style="padding:11px 20px;text-align:right;font-family:var(--font-mono);border-top:1px solid var(--divider);color:var(--neg);">{{ player.total_writeoff_cents | money }}</td>
                 </tr>
                 {% endif %}
             </tbody>
diff --git a/templates/session_detail.html b/templates/session_detail.html
index 0d305a1..19bad72 100644
--- a/templates/session_detail.html
+++ b/templates/session_detail.html
@@ -1,5 +1,5 @@
 {% extends "base.html" %}
-{% block title %}{{ session_label(session) }} · boker.club{% endblock %}
+{% block title %}{{ session_label(session) }} · myboker.org{% endblock %}
 {% block page_class %}page--session{% endblock %}
 {% block content %}
 
@@ -28,20 +28,20 @@
 <div class="recon-grid" style="margin-bottom:20px;">
     <div class="panel">
         <div class="recon-card-head">
-            <span class="kicker kicker--dot kicker--dot-accent">Cash flow</span>
+            <span class="kicker kicker--dot kicker--dot-accent">Banker cash flow</span>
         </div>
         <div class="recon-metric-grid">
             <div class="recon-cell">
-                <span class="kicker" style="font-size:10px;">Cash in</span>
-                <div class="recon-val recon-val--num">{{ session.total_cash_in_cents | money }}</div>
+                <span class="kicker" style="font-size:10px;">Actual cash in</span>
+                <div class="recon-val recon-val--num">{{ session.total_real_cash_in_cents | money }}</div>
             </div>
             <div class="recon-cell">
-                <span class="kicker" style="font-size:10px;">Gross payout</span>
+                <span class="kicker" style="font-size:10px;">Gross player claim</span>
                 <div class="recon-val recon-val--num">{{ session.total_gross_payout_cents | money }}</div>
             </div>
             <div class="recon-cell">
                 <span class="kicker" style="font-size:10px;">Cash paid out</span>
-                <div class="recon-val recon-val--pos">{{ session.total_paid_cents | money }}</div>
+                <div class="recon-val recon-val--pos">{{ session.total_real_cash_out_cents | money }}</div>
             </div>
             <div class="recon-cell">
                 <span class="kicker" style="font-size:10px;">Rolled out</span>
@@ -55,7 +55,7 @@
         </div>
         <div class="recon-metric-grid">
             <div class="recon-cell">
-                <span class="kicker" style="font-size:10px;">House owes</span>
+                <span class="kicker" style="font-size:10px;">House owes players</span>
                 <div class="recon-val {{ 'recon-val--neg' if session.total_current_due_to_player_cents > 0 else 'recon-val--pos' }}">
                     {{ session.total_current_due_to_player_cents | money }}
                 </div>
@@ -67,12 +67,12 @@
                 </div>
             </div>
             <div class="recon-cell">
-                <span class="kicker" style="font-size:10px;">Debt repaid</span>
-                <div class="recon-val" style="color:var(--pos)">{{ session.total_front_collected_cents | money }}</div>
+                <span class="kicker" style="font-size:10px;">Cash debt repaid</span>
+                <div class="recon-val" style="color:var(--pos)">{{ session.total_debt_repayment_cents | money }}</div>
             </div>
             <div class="recon-cell">
                 <span class="kicker" style="font-size:10px;">Written off</span>
-                <div class="recon-val" style="color:var(--neg)">{{ session.total_front_writeoff_cents | money }}</div>
+                <div class="recon-val" style="color:var(--neg)">{{ session.total_writeoff_cents | money }}</div>
             </div>
         </div>
     </div>
@@ -96,14 +96,15 @@
                 <tr>
                     <th class="col-player">Player</th>
                     <th>Invested</th>
-                    <th>Cash-out</th>
+                    <th>Gross cashout</th>
                     <th>Net</th>
-                    <th>Cash paid</th>
-                    <th>Settlement</th>
-                    <th>Status</th>
-                    <th class="col-acct">Fronted</th>
+                    <th>Paid out</th>
+                    <th>Open settlement</th>
+                    <th>Settlement status</th>
+                    <th class="col-acct">Front</th>
                     <th class="col-acct">Rolled in</th>
-                    <th class="col-acct">Gross payout</th>
+                    <th class="col-acct">Payout carry-in</th>
+                    <th class="col-acct">Gross player claim</th>
                     <th class="col-acct">Rolled out</th>
                     <th class="col-acct">Notes</th>
                 </tr>
@@ -119,10 +120,12 @@
                     <td class="num-net {{ 'num-pos' if entry.net_cents > 0 else 'num-neg' if entry.net_cents < 0 else 'num-muted' }}">
                         {{ '+' if entry.net_cents > 0 else '' }}{{ entry.net_cents | money }}
                     </td>
-                    <td style="color:var(--pos)">{{ entry.paid_cents | money }}</td>
+                    <td style="color:var(--pos)">{{ entry.paid_out_cents | money }}</td>
                     <td class="{{ 'num-neg' if entry.current_due_to_player_cents > 0 else '' }}">
                         {% if entry.current_due_to_house_cents > 0 %}
                             <span style="color:var(--owes)">owes {{ entry.current_due_to_house_cents | money }}</span>
+                        {% elif entry.current_due_to_player_cents > 0 %}
+                            <span style="color:var(--neg)">due {{ entry.current_due_to_player_cents | money }}</span>
                         {% else %}
                             {{ entry.current_due_to_player_cents | money }}
                         {% endif %}
@@ -132,8 +135,9 @@
                     </td>
                     <td class="col-acct" style="color:var(--warn)">{{ entry.front_cents | money }}</td>
                     <td class="col-acct" style="color:var(--rolled)">{{ entry.rollover_in_cents | money }}</td>
+                    <td class="col-acct" style="color:var(--rolled)">{{ entry.payout_carry_in_cents | money }}</td>
                     <td class="col-acct">
-                        {% if entry.player_owes_gross_cents > 0 %}—{% else %}{{ entry.gross_payout_cents | money }}{% endif %}
+                        {% if entry.gross_due_to_house_cents > 0 %}—{% else %}{{ entry.gross_payout_cents | money }}{% endif %}
                     </td>
                     <td class="col-acct" style="color:var(--rolled)">{{ entry.rollover_out_cents | money }}</td>
                     <td class="col-acct" style="text-align:left;font-family:var(--font-ui);">
@@ -151,7 +155,7 @@
 </div>
 
 <!-- Bottom row: net bars + snapshot + audit feed -->
-<div class="split" style="align-items:stretch;">
+<div class="split">
     <div class="panel col-main">
         <div class="panel__head">
             <span class="kicker" style="margin:0;">Breakdown</span>
@@ -159,17 +163,17 @@
         </div>
         <div class="chart-wrap">
             <div class="session-net-bars" id="sessionBreakdownChart" aria-label="Net by player"></div>
-            </div>
+        </div>
     </div>
 
-    <div class="panel col-side" style="display:flex;flex-direction:column;">
+    <div class="panel col-side">
         <div class="panel__head">
             <span class="kicker" style="margin:0;">Quick read</span>
             <h2 class="panel__title">Session snapshot</h2>
         </div>
         {% set winners = session.entries | selectattr('net_cents', 'gt', 0) | list %}
         {% set losers  = session.entries | selectattr('net_cents', 'lt', 0) | list %}
-        <div class="snapshot-grid" style="flex:1;">
+        <div class="snapshot-grid">
             <div class="snapshot-cell">
                 <span class="kicker" style="font-size:10px;">Biggest winner</span>
                 <div class="snapshot-val" style="color:var(--pos)">
@@ -185,7 +189,7 @@
                 {% if losers %}<div style="font-size:12px;color:var(--muted);margin-top:4px;">{{ losers | sort(attribute='net_cents') | first | attr('player_name') }}</div>{% endif %}
             </div>
             <div class="snapshot-cell">
-                <span class="kicker" style="font-size:10px;">Total cash-out</span>
+                <span class="kicker" style="font-size:10px;">Gross cashout result</span>
                 <div class="snapshot-val">{{ session.total_cash_out_cents | money }}</div>
             </div>
             <div class="snapshot-cell">
diff --git a/templates/sessions.html b/templates/sessions.html
index 1e06957..6cfd272 100644
--- a/templates/sessions.html
+++ b/templates/sessions.html
@@ -1,5 +1,5 @@
 {% extends "base.html" %}
-{% block title %}Sessions · boker.club{% endblock %}
+{% block title %}Sessions · myboker.org{% endblock %}
 {% block content %}
 
 <div class="hero">
@@ -23,7 +23,7 @@
                     <th>Status</th>
                     <th>Players</th>
                     <th>Invested</th>
-                    <th>Cash out</th>
+                    <th>Gross cashout</th>
                     <th>Table net</th>
                 </tr>
             </thead>
diff --git a/tests/__pycache__/__init__.cpython-313.pyc b/tests/__pycache__/__init__.cpython-313.pyc
deleted file mode 100644
index 0fca85c57eb5bdc9bce3105496c5aa11e7532a99..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 141
zcmey&%ge<81YaLoWHAEi#~=<2fCNC`GYgQI%8<^W$>_I|p@<121QNfcqo0wVo2s9d
zlbD;SA5fH^m6}{qte=#hom!+{l3EO8$H!;pWtPOp>lIYq;;_lhPbtkwwJTx;Y6clz
P3}Sp_W@Kb6Vg|ARfZ!n4

diff --git a/tests/__pycache__/test_accounting.cpython-313.pyc b/tests/__pycache__/test_accounting.cpython-313.pyc
deleted file mode 100644
index 5c020f2ea8c6948b2abf9a0c386547d86630bbb6..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 8233
zcmd5>U2NOd6~2^6iIQbW{*C1(sbVK<)HIIm*lB(o$8zTUG>a3PQCBQpSw*5<6^ayJ
zN{Jm{L(pNHSL`8v2;yV|+U8-4kpgv*0Mpt6GtdI-qXjv$!R4XFIt+f(;tW{!v~x&G
zlpNY~+M?@)ba;91<+=AB-t(OwE>~7M36wv5vG<LIDnkB-H-+NTE6cxw$~7VofjL1a
zUM(k>mn_ucCxUgzDzHOr2P<%m<PDZ`f^Enq*x}E^-vNId;e-(`p+X&DZy-%Xa5WO4
za)=Ci3zHewPODa@jv=Su-v0_A;c7x)Y`rn2P-`Ncdeu)xm=Px6S;G7N0HbU;myX4w
zqAbaBESV7H^!f8)8k1zj7CxU$CsK-yN~ttWM3@3IxZ2>4(=WFIxkk<w`_Af%A|wQ2
z*vS#nsrMDGTS>suzZ8Y%0v5#@g9$ha^F#v-WuZ~V;eMqdCCMpy7g8}CiQqzFiIJ8I
z;|dp%5-FKhz%X2ejJv%;9#pu0oxb|=RAh1}=V{7SG|#ck%g{p<XJKctsNyQrqv4dK
zR9uLM$0aHz!sjK$DP07<Vru+?q;RoBR2qvQ`$ECDuWq;pD%W6hZrEOkbCcax!4l#G
ztA_~eZfl5yn2;r8H3Sl33mX^UoeTCB2MB=gSD2lbtJ+)J_v~zKgWs9f*8T8PtgY?Q
z%eEcrokA2A_aAU57FfG8LM2#rR1BwRB`kuvk$8~c;ZR)K>k?J*C~P7LJLJNVRFZ;Z
zQCb0;*>kGUDI94c<9_{Wp}1XzQ$<2ILLKkr!$7W(d^M@wc-1u(oRX$~IOpEB*bunA
zZN_^0nVBPV^#>N~{fiA-7dJFP<w3)yso~#LE_$mMt2X?z#_6)<iIcNY)RzeSi^ZbX
zmb;*G4URBn1VSwWLqR133#bE}4Z+$-Ky6r{HdG>N7i>Uz!4A|R@YFft2vjJZVDYq^
z!6UTvEbxrr$to1AtFQ7csJv=<)mnOfLrmdyCD@X)Z0TSG2G+rc*qWj$6-RO<BdstJ
zSImdF!O~gv*-f6dz4CI01rCL^zf8q&iM!#y{1T9ErkVKFb5}!-H4u`l8q^t<Ud~t$
z1)?C%leM6L%tdmI^OKW}gjB%OBjiQvFf+~cPc!O42v`+MORK`j>Ya@9`TbY4SMTT=
zkrL9_1=_8=utK0MpeA%&98S`fu6QyMj?3LG#nDZ`M8*U2?<I1D%+(*iwS8*f{rGe|
z^G3Gi*!9uL(OcUeFY_?qXEn{tO-D2HZS0xivOo(^SprtN6)p-Rskdd@rr(1e`W%pE
z_?PUX_Vg{!RNEg8esFO1M0WS7>jRSmw>*#Ob{GZxP;#Jf(pXBdqi_H`19pX#rTDPI
z(&Qyg!0L1guOpDG*!3Ey846Uk0~f#lwbwua^><JdwBlR!9r)oXc^{C+fPpp7-|ooO
zv`+93s_W<LkH5P;SARTLeSE_Hz*{?Cd-@&w?>)CXx!Th?@97C{(NjP1(>Z>Vrj9yD
z10zCEKXFgX8{s4&)(w{S;s_|lkr&{=3t-(4-#T^7e4^Jb@PcF2UMKWc6nb}A3yPJ7
z`7cz%{9r~_mXKwz6rc6(vyQ?zfh%z71TI+oxD#_u2yZLOSK`DB7JPvcZeNiT!uyI+
z!ij&1-I@3ff@>X80dHbuDSd8)1S<O#i`@1fr(wtxCa7@d(&Mqj5(;$*PmW@bgyq+h
z>C_US5?R96p|BUivFH+>GK%*BCvC?%LWfcjmSu^i`bN{?xZ;i_E&`5&-81aI;z&p-
z-O$yflBsZ9#2Lg`LT{|q8gUL0=G9xDiKHn7r4plQNlYb0-TZ3?vvEZytXGz_2dAxc
zCoT?s9ohy&2Mt|Mx2sNyx@UD6IAJ&u71i0pR1%{x8Jw3$O4++ojo14m;*$IYkSk=-
zx9RQ8H#UFit-BhX`oZny+m|wyOfcu|eo$-~&opJiId6~Aa&d-c+H&55c{^L_UbfmA
zoxgHV*z;cEs9fM1vV6l--GXmt*0=M$^vvL$@p*pVBJV2ny#4HrXW!d4W4RNU=R1t{
z4GX@Gtgqvql<B=2o9BDVdOEYd&U@+1;9cMqG<sl`{aN4sOmLp>E^FPF_3g{F-RBQ}
zH_)i!JB&sZPoep1qtVlFGC`wKELa6u8MC-$UC)_dPYL>&tXxGSict>TgXBdZ3O7uX
ziPRE;KHZPx0FWhgKj=Xu-AE20SqVb42U~+k(08W2K$Pkcnv`Ww?C~O~&_3)vjO6=B
zjshu%hdrv2s|yihGGLSrXXgMWz)3G67e+XMW65}2iU8axM@+%usrjHVR)-Eog#`mB
z#xq+o13B*@qvhhvXl6^!+qE9(7`QVw&+jc!Y#ln7JKN{^-6ib{zP7Bd?Otc5>h9io
zzN@Uq1R!*%nF*J1hgKbC2JVjC=X=(Gj+<bHz9mP7`^KTe^%M%fwj=X2PQ%*JvHmqN
zgJ#fCX}BMtxbFTHic9yRE}>g%sO>-C4h-P#9#wS}7X?j8UWD)+bWzn|Z2)QR(Uh4t
zJPJ*jQH3>S?#G&{xU1-FP}SMe8AK{Y(-BD)<z$*hq++@RupoRcE{T_7DfDnOZH9_6
zV5+`fhvgAiwfq6fV0})&w%Mwj_pqVKKh4lta02?)&}3a-**iPt`8{P?sq1Uq-L5iI
zuN(A_`)0R(bYh-AW;~;7=gjDRe&3UtiI}Q}7@GljOXF|TU;>>;wdlR&!Nkg5Cj=tJ
zV8Tem2ri)#!W1|3dWxY2n_!Gkr6l&ZoGk_lg13=`EGBWgwPZ}yDr49XYZj&m)yO`<
zf!QnuEczDVau%hd7NN$R?^#R$X(P<T922e~tC=R2aH=)M88c3tnOQI4wEi`*gC>Sv
zs4hc?y7iy~9RzV`MqR)f8g+<G+AkZiNxM=}R6ht$SQufRd^iR@>q)l=WX*I7gXxxl
zMTNG0+6+vmEo$z8ZiBjv9)}+4t9b`SSQ{}QxG8lX3V@T4E)`q|lYGn&&h!irH62se
zd#hn8`2NuJQ07c_XYhJ>GJLB+OUJxf)5P3xG_8`3`GzF|Nh+dAgsKZ%DGK^y7=V9c
z=`}q!$ELQt-!<Kp>B#OlbUip3ygBxmz6yg>xG#H?$WKk3p&2Q8lMo1-C(iUl8JtBU
zQC3JAslMIn%X|%{kkz;raCvTH--pL$Mi(}<|7BDAhsPevc*x#tXk_Ras6dd5@vWLK
zqC2qm0+JpeiWTzis&P`b=mG8Ov8v{l;<_NEt45|R$Y&Swv1#^6VWSW<D^8@MmS4hb
z3FMZbXz8WaavS%*kC)Q(bq^>CLB_2774oI4>gv`h*E^BhFV6I4n4D|>gJR3R83~+F
z*CC^&JJX&S&AEa`%Rx29b@k*OoYy(QK5~)T9fjmqRb95O_uYnEU2m?ccf$6-Q<JUf
zxiOZj>B)I|CfLO~-}Rx%p?9`SiWAPy3vupmYqA^r{&+06u`lQA`!xO8;3p8e4jA^V
ze!&;a`huT!epdU*fqDLv(bKr#YtQ=H@AYMx?jA1-Y-=??cLoC6&L?dkVz_DpGvA(f
zS^>eAo;EY=o^Dku!8W=Jy}OE^Ez+P(|F0yRz#Eoe)ev)SPt_z;T$PiFr&<zpx}UU<
z;JbRBuudo7y{_<GRfy93R*x3J72~`md>xv(a%)|eXe=cqhllBppeL}>ja4@2X{+QV
z@J6+O)X0ocbQ0BYRB6<3q@1Ug&@zcq`&2ZDO6OAG>4H;x9`j_F#VV`@n&o8tq9p1J
zb$>UO7><YW)0}FAl#nSzd|kE@Y)bw!kac>#D`MEWT|Ki~W+ALST6Bizb{(3nnuWC4
z5daWOiP`m(San%SY){s==VLB&?jy%M-)m?*c)eP}YMwu6v>FMq;N92f`9ozr2eQ5c
zABSe!K6>Roe?-NCY54l8IR|R40zO^wqWURP6cwi^o=-;85LbwbOB68?iXSQA&LfJ$
zF)F9xv4oUJilP?epnayNkc5y7BS`>J>O@ga!TX88S3~$P0XYXaG$Or#15j^NQ$ROk
z4GDfLlbeA2f;_UY+~$WaH`o2p@8*KcL%)mL|8S#++w-rcO71A5J&q6Iy3dEfeux2=
z!lx6l6rLr8!--|>;|Mn#Pr_$QHSvPZEttC$)snsZ85n#x3<+O#6{Fb8BD)ofRQN7U
zB;E8UFb17|`7I!ME5k5<C7!>NK;FhMTd!`*6SzzreuS4iU(MJSy)}6&TtBa_%X4te
z+X&R`SmQ}mZQg-3C#kH?S76OWT%JdjP<!;ez%WOdtFJHAKbNh4?h$<Ph1-1GLRi<t
Z<($>G$hv-c^39V!Kb5x<wo#SHe*xwggKq!;

diff --git a/tests/__pycache__/test_accounting.cpython-314.pyc b/tests/__pycache__/test_accounting.cpython-314.pyc
deleted file mode 100644
index 80defc60c1a890347b07b0b9e93da8086e9684fa..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 8549
zcmc&(ZEO_B8J@k{y<4Bp-(Q?VFvj3;0sMs_d>G?{n2(YWdm)#oHQpR|YdCVgvuF3f
zrc!04RpVCu;i5*E1}RDNqgX_WBanJ6k!mTCnx8(Mg{>_=8Z}kLKZ6q`^jF_^cK1Ha
z*+7EY(cSFq%<MZe@67wWAG4*n$VDLi^~+u7=F15AC%#xoFbhi)P#7cqMB<JT4WG87
z+!32*t0R)VhDdx3iIi$~Nr1A0mH8@CPb4S2i>F8r8^I!KJlpNYQ*)ehN(H-KCnQu!
z$XWuuOLKeTTRmwvD`7;gf&IO%yI6PJ%jq?z<Kak1RuxqZ$D*<t9~=zOu%ZSz=zxDr
zJp6Icr54D>h@bS^cKrf|g}Sw*mpjWzTpzR;NwW3Xta7uhfq3nA@m+TW24nH4raP#j
z#c9-Q(}jUZETHN3a8!etI0j;LFrcY8=mvdz^V!&-(mW6e42GL~XzZL4)YRtFu{Rak
ztSKs#F_#0uAQBBn&om8<>TX#MM58e+peeFU-9X3zf3+5}G4d_pxQ+KP``xBRd|W-q
z-j<-1u;pR_6Mn>&y9)|qq|agl=`%S`kOiTw)*eHzcC(N5gk^JgL(t&0(E@nr0)=^o
zyc}gS!rqOvkTnFAsHRdlKgMLMp)f}76c+y`KH;AXzSEZ~*^nx1nB^O25j5rO3$Bn&
z^bPjWBliV*8A-Bd?H8X_7BYJ$Ir@03f3pJ?<fOP@-DRDXa7cGs<q)u3FC2;lMinYY
z1A~h0QqIG|WNmavVQbcfa5SWhc<s7f)hHE#6yprA1kbp!?TjUC<5<QTUW8WMy>iZR
z53@U^6^nLwepOzzD8Tb;2Z53kOCl+&Tr9wnixibF7GlXw+$Hylpk%NQ*>9zCC@}W*
zKw*qXu&Zv655M3hZFb2f+5LjV7ZFK-H-{f&($7hv-zF9K?UE~VD*U{)>r$cQmWrg}
z<^o_>iEaZ9aocoPkSf5QkQ~r1mbJCC?cCPV3cr&rEqman+gsW~7ad#J8?AtuP>^Oq
zt1!dEpt}vhk=a4fc{tyS4hJd_)M8ZUQ4D~Gcz(Q&eBU$f(;8@3aq*2TnP-pf5p95K
z#%ezl#>iqhDJYt#op4Y3CY8z8W{Wp1h?TQzyw^5O+pj${eQ36NFH}sNTM(-!-3wyX
z#80i)tHR{KyG09P@q}$bESacYtZ=y<i^L_E%m?!6WMRb85vU5lu&0Q|Nkp^t*J<`@
z5+hQ9!~r038ZX&uh$bLhY7PWU&53ZSi3pflf#lR&exemhA~4;hm-y0<a1wDM$ft))
z1DUw=YaG-TuxCrRpR@LHh|iLA+jf{1OhokarD-fp_Y|^v+My>-S@a7%*`t~h$n&-1
zHUD;mNLvp6;F;VG|D~58>)<w!I$+O9a>zr-a2cM}<>`bCwZIwpZY?<m2glEikTIc-
z9D9b40<sQHb_3aA4|7x8@hOg-5fDRLQ;W{2>`lcH8`qB+r=p<aj1pBwhG?h0bs008
zK&0uY3`pJ75s3u@5w)`^-FpKNQP)ED-CdaPZ1vF(Hc$3`9GQwF&Lx|UTpqqO{Nd&Y
zODOn1FW<=h-nEhY->jN$h9N;jP@=qc`aC>zPGPS(3#VJ5g>Hik1tM!Dl|3JnOt$`M
z-zWQKjwQFha=G_X?}sH1XcP1TddNGFN@YaToyZ<go?fTUt4d@*=V|PM!D2R?E}D3$
z>Q1wy3yh_z6R0#c4h*bczuw%1G^=&bio38LzEXEX_5f5y#q-zNQxz@a;+^v9Iplt-
z`e>^B=(zJvY2{pH&->0lmi(b4RoRm&?HLyqN~*_yHY+}xQ7S-%B~z)0OY1;HQQ7yT
z^`F&+WNAVP5EHSo-__5xo9LR63A2^&uk5$2*eXD)-D+*JTe5Wl#;4^lewLoKX5hE=
zWFxs*-G{1{rGA%1rQHOYI$TM9N{D^S()Xgo^&sz-rSD0pco`XZ&7xHK1gpzq6ZVtG
z;0kKTWhwhRiJ1htO>O;;E2GqO&Zi5f<D=oI?hFRhv$43Q^Fx7f=(yKK(VSw+MlTGg
zszSBy;dmgT7l)(g0jWVjW=tWyAgXAl#;ef4qKn8#P7X)S%1WaWNy{*ZS^G>dPALeE
z9EvNl7L!eb#L%3z%Nk*Fs$zUNWv2+ZbSGvnKxP7iDT|w#t;v?frhx+nq9K`$9-xXG
z3aem)1~q-xa#4NUFB@^tFCiNv3!Z1+TX$vMSEW@Gp~;u7HC(%puqAw{(#|{Sn$g6D
zL?Bh#m8m&DO%tuD(tV3gzNmP~?x=PBs(9SFSPH6qUR;wD*GyK;d$uJ#+dhg<OV>x|
z#N7*`+iH2Q?n>Q9o2G5oy>nuFroLw0)1LIS-&7I@ZiMH=uAG(~Nzaa(@q}~(X!$ZN
zFv^~!XHUX6CwAu4?oN7kCt7cd`<@=+2&*EFxGLh<pE}|QPau=4BTgCtA45u4N1P|2
zlm~IL<$VS8<nsBPkM&(1e91z%JTo^Chweog?Z9jwWZ*>77--%7SkVPp4$x2^Rv*9&
z4P<%{GQIo^jj1XK?`Rr0=pk%<5wmX0&?e1=fSpW`*;sN|1spOV>oh<CSmbGRLT41P
zDi(==!>WYzLwNz=iRmCPtqczw6a5Srj3(+6y{XdunVR#{!-@J-X~*NhL+|yGIdNB(
z@S5<zUEe$>ZqKTp_p~NGtv7ch%5LnM6FYKR@_>K|C)0r(>QHM!N$-u3+hW%$@Ng9j
zk*8&lNWv=c-~eOhDH|k`^J&3@^dvyDDm*;FoVcDxzytHX3YG~c?L=Wh(fl|3Ve__k
z>23<L5jziI0+2qVnlyAB_lg<wz>r#$RYPiD#uAgz6@=5rgfpA4OqEbPsHn0Ui_@Tz
zj&Fg`2Tn&6`9fGj+r$uCDCoU;<@AS;#0jgP;Hn=_qi>oiOO+nXi0sc2bOtnf_bMW5
z3MPMj%bd6~NBm5|th&*Wqqj}%{Au^h##_hc#3Pw+Ofj4uzAf&4SOhUr1%8gWw3+z?
znb=2O>p$%;Sk`}zuq|)R5w<MKPDup6q5wpZPx}V^5SQ^Svix;hU)r*lTs6dR%j0X?
zv-%XS(1-W)`TUB0vK3>9W*QPe7p6T8s}}5Y<PuAgJ3swCjNq}ff`5{Ss^6YZ^fHvB
zqP)P8kCKp2S7#_a!JPP>JlZ>3>r2HL0b3CcXfJSqN|1pA(RMN8K(y(FX_*6qI(=54
zC;HheD)J*JJUS*Kkw?TtI3p$k0a~;uj#Dq>Q#KYJpj)7<qT|?TcmOOkpr2SBBfvMw
zwhSzYi7FQ?>mX0i1Y@r%glPzinN%J4V9liO<G!iB#L46~-{ruiz=vy$n8{n^4crx1
z!wNBzr_PhtU`hs0=#O!V%b7uc0=1{GB|Z6yt}7#x^&fXkbtKx8TlQb}UGlv<@_^zB
zb2bu5v5iE3FujrBrsfZBnV~E=aM__OE2zV4wv}i21`MHMJe9F`ZTFv#Ob^dL+jjfe
zwp&LYs5~^hwWgM%C!m0aV*@-{K!>(ssSPt9WDv8C4>Dz>*PGtx%8sUCZ{oxtAj{lJ
zyn&%RkdDL9M>-z@k5_kLE*k+L2Q)WA^v8<-wB+ivM;|V|>xUlClQ0E!39>QrmAh<W
z<D~oj;I$W~4<xvhd(WM8&F*OhtV{R)OigE^Eis&O`!Y5An1kx>S}YJsUE@4N;VZXT
z(W$bkB%bqB)qzymfpN#3l8PiAom53vs-$b2U#Rk2?)z=u`}Ob0<F0>LPU_W)B<@~n
zZFkDk{dxQg=`-*<do%j0dfwwpdVHVn_@eT&y>sF#nU>mlPg~N{cC$ON;l|M%ue8!I
zV5h+=-SM!_L#$>x?=OHtPs{A=hpRJ7n`JbasV9YgN5<@YsMXQWXKO+W_5YtyvTVd(
z(LY?(1nqZN>v*KEo7V)*@)*;%Fd0gc6SR=HTnoJf8_SGRy~OatGTvITQE`EWH6=DM
z@UT^?*O(!t*aa{y4M#E)wW5cSG)lf+YrsS<JtNqZ$Ghxi!X8piYhbv7jXH=iEQ~N&
zGl6O~7CEoTCPCAD4M*XE6mLJ7hS6WmivT~AtODy%{|4D(8nVlL&)Md#nfe)UM-QiM
z+u7#*Gi5Un(mDkAfZ-~q8Lq;cCo3p5@7bC3?EF+noW4~sCmzTMG#If)FlkQQm#NJJ
zt9&=k&WZbTTJ|PAdp~`3ruEkAx5YzD)TaRN4b9KO2wt}?%IxA&mUWjb55_`qa1&&_
zQpO-9UTMNxi7XF<sj5Z7Q6(CKJ7yNrJc_%195X~v8p7;N$n+{%R^c)_9E7VsxEO#~
z0UR1xFO%h91R|iJa8L^>k%%nA^><NLC47dKPnU5Wx(VrFRtJ9-O_T55hQ0XO#tZB2
zyNiX+`|FDZA9sJfTiA1dZHch++YLp+VQ!IN&KAqQ#sv-rK#$1Y0$q$p!x|nsUBDTt
zhSFm(64ZgZcoNzU1|UewMvr10k6+V4C>li3+||VngH@gMBD~_PRXqQTc8=rzPD=ho
zyx%zBuKgPk?_!@n!EuMViL>+7&n2s$`<k%V#fXjY?(vIrcFzLue*5LOUjF4P_w0nP
HWuyETP5QPX

diff --git a/tests/test_accounting.py b/tests/test_accounting.py
index c73c78e..0ccb7ee 100644
--- a/tests/test_accounting.py
+++ b/tests/test_accounting.py
@@ -1,6 +1,15 @@
+from pathlib import Path
+import tempfile
 import unittest
 
-from stats import build_session_summaries
+import app as app_module
+from stats import (
+    build_leaderboard,
+    build_session_summaries,
+    player_session_series,
+    session_sort_key,
+)
+from storage import load_events, write_events
 
 
 def cents(amount: float) -> int:
@@ -40,7 +49,7 @@ class AccountingTests(unittest.TestCase):
             [
                 event("s1", "2026-01-01", "A", "buyin", 10, 1),
                 event("s1", "2026-01-01", "A", "cashout", 20, 2),
-                event("s1", "2026-01-01", "A", "paid", 20, 3),
+                event("s1", "2026-01-01", "A", "paid_out", 20, 3),
             ]
         )
 
@@ -56,7 +65,7 @@ class AccountingTests(unittest.TestCase):
             [
                 event("s1", "2026-01-01", "A", "front", 5, 1),
                 event("s1", "2026-01-01", "A", "cashout", 8, 2),
-                event("s1", "2026-01-01", "A", "paid", 3, 3),
+                event("s1", "2026-01-01", "A", "paid_out", 3, 3),
             ]
         )
 
@@ -80,6 +89,7 @@ class AccountingTests(unittest.TestCase):
         self.assertEqual(entry.gross_payout_cents, cents(19.50))
         self.assertEqual(entry.current_due_to_player_cents, cents(9.50))
         self.assertEqual(session.total_paid_out_cents, 0)
+        self.assertEqual(entry.payout_status, "partial")
 
     def test_rollover_in_is_invested_without_new_cash_in(self):
         rows = [
@@ -98,20 +108,180 @@ class AccountingTests(unittest.TestCase):
         self.assertEqual(dest_entry.invested_cents, cents(10))
         self.assertEqual(dest.total_cash_in_cents, 0)
 
+    def test_payout_carry_in_does_not_count_as_investment_or_cash(self):
+        rows = [
+            event("s1", "2026-01-01", "A", "buyin", 10, 1),
+            event("s1", "2026-01-01", "A", "payout_carry_in", 0.60, 2),
+            event("s1", "2026-01-01", "A", "cashout", 6.55, 3),
+            event("s1", "2026-01-01", "A", "paid_out", 6.55, 4),
+        ]
+        session, entry = self.entry_for(rows)
+        player = build_leaderboard([session])[0]
+
+        self.assertEqual(entry.payout_carry_in_cents, cents(0.60))
+        self.assertEqual(entry.invested_cents, cents(10))
+        self.assertEqual(entry.net_cents, cents(-3.45))
+        self.assertEqual(entry.current_due_to_player_cents, cents(0.60))
+        self.assertEqual(session.total_cash_in_cents, cents(10))
+        self.assertEqual(player.total_payout_carry_in_cents, cents(0.60))
+
     def test_debt_repayment_and_writeoff_resolve_front_without_inflating_cash(self):
         session, entry = self.entry_for(
             [
                 event("s1", "2026-01-01", "A", "front", 10, 1),
                 event("s1", "2026-01-01", "A", "cashout", 0, 2),
-                event("s1", "2026-01-01", "A", "front_collected", 6, 3),
-                event("s1", "2026-01-01", "A", "front_writeoff", 4, 4),
+                event("s1", "2026-01-01", "A", "debt_repayment", 6, 3),
+                event("s1", "2026-01-01", "A", "writeoff", 4, 4),
             ]
         )
 
-        self.assertEqual(entry.player_owes_gross_cents, cents(10))
+        self.assertEqual(entry.gross_due_to_house_cents, cents(10))
         self.assertEqual(entry.current_due_to_house_cents, 0)
         self.assertEqual(session.total_cash_in_cents, cents(6))
-        self.assertEqual(session.total_front_writeoff_cents, cents(4))
+        self.assertEqual(session.total_writeoff_cents, cents(4))
+
+    def test_banker_book_position_separates_cash_and_open_items(self):
+        rows = [
+            event("s1", "2026-01-01", "A", "buyin", 10, 1),
+            event("s1", "2026-01-01", "A", "cashout", 25, 2),
+            event("s1", "2026-01-01", "A", "paid_out", 5, 3),
+            event("s1", "2026-01-01", "A", "rollover_out", 10, 4),
+            event("s1", "2026-01-01", "B", "front", 20, 5),
+            event("s1", "2026-01-01", "B", "cashout", 0, 6),
+            event("s1", "2026-01-01", "B", "debt_repayment", 8, 7),
+            event("s1", "2026-01-01", "B", "writeoff", 2, 8),
+        ]
+        sessions = build_session_summaries(rows)
+        session = next(s for s in sessions if s.session_id == "s1")
+
+        self.assertEqual(session.total_invested_cents, cents(30))
+        self.assertEqual(session.total_cash_out_cents, cents(25))
+        self.assertEqual(session.total_real_cash_in_cents, cents(18))
+        self.assertEqual(session.total_real_cash_out_cents, cents(5))
+        self.assertEqual(session.total_current_due_to_player_cents, cents(10))
+        self.assertEqual(session.total_current_due_to_house_cents, cents(10))
+        self.assertEqual(session.total_net_book_position_cents, cents(13))
+
+    def test_player_stats_track_house_owes_player_separately_from_cash_paid(self):
+        rows = [
+            event("s1", "2026-01-01", "A", "buyin", 10, 1),
+            event("s1", "2026-01-01", "A", "cashout", 25, 2),
+            event("s1", "2026-01-01", "A", "paid_out", 5, 3),
+        ]
+        player = build_leaderboard(build_session_summaries(rows))[0]
+
+        self.assertEqual(player.total_cash_out_cents, cents(25))
+        self.assertEqual(player.total_gross_payout_cents, cents(25))
+        self.assertEqual(player.total_paid_out_cents, cents(5))
+        self.assertEqual(player.current_due_to_player_cents, cents(20))
+        self.assertEqual(player.total_real_cash_out_cents, cents(5))
+
+    def test_rollover_out_can_settle_without_being_marked_paid(self):
+        rows = [
+            event("s1", "2026-01-01", "A", "buyin", 10, 1),
+            event("s1", "2026-01-01", "A", "cashout", 20, 2),
+            event("s1", "2026-01-01", "A", "rollover_out", 20, 3),
+        ]
+        entry = build_session_summaries(rows)[0].entries[0]
+
+        self.assertEqual(entry.current_due_to_player_cents, 0)
+        self.assertEqual(entry.paid_out_cents, 0)
+        self.assertEqual(entry.payout_status, "settled")
+
+    def test_admin_can_apply_pending_payout_carry_in_to_open_session(self):
+        rows = [
+            event("s1", "2026-01-01", "", "session_open", 0, 1),
+            event("s1", "2026-01-01", "A", "buyin", 10, 2),
+            event("s1", "2026-01-01", "A", "cashout", 20, 3),
+            event("s1", "2026-01-01", "A", "rollover_out", 5, 4),
+            event("s1", "2026-01-01", "", "session_close", 0, 5),
+            event("s2", "2026-01-02", "", "session_open", 0, 6),
+            event("s2", "2026-01-02", "A", "buyin", 10, 7),
+        ]
+
+        with tempfile.TemporaryDirectory() as tmpdir:
+            data_path = Path(tmpdir) / "entries.csv"
+            write_events(data_path, rows)
+            original_path = app_module.DATA_PATH
+            app_module.DATA_PATH = data_path
+
+            try:
+                sessions = build_session_summaries(load_events(data_path))
+                self.assertEqual(
+                    app_module.pending_payout_carry_items(sessions),
+                    [{"player_name": "A", "amount_cents": cents(5)}],
+                )
+
+                with app_module.app.test_client() as client:
+                    with client.session_transaction() as flask_session:
+                        flask_session["is_admin"] = True
+
+                    response = client.post(
+                        "/admin/apply-payout-carry-in",
+                        data={"session_id": "s2", "player_name": "A"},
+                    )
+            finally:
+                app_module.DATA_PATH = original_path
+
+            self.assertEqual(response.status_code, 302)
+            updated_sessions = build_session_summaries(load_events(data_path))
+            target = next(s for s in updated_sessions if s.session_id == "s2")
+            target_entry = target.entries[0]
+            self.assertEqual(target_entry.payout_carry_in_cents, cents(5))
+            self.assertEqual(target_entry.invested_cents, cents(10))
+            self.assertEqual(target_entry.current_due_to_player_cents, cents(5))
+
+    def test_same_day_sessions_sort_by_session_sequence(self):
+        rows = [
+            event("2026-03-21-02", "2026-03-21", "A", "buyin", 10, 1),
+            event("2026-03-21-02", "2026-03-21", "A", "cashout", 11, 2),
+            event("2026-03-21-01", "2026-03-21", "A", "buyin", 10, 3),
+            event("2026-03-21-01", "2026-03-21", "A", "cashout", 9, 4),
+        ]
+        sessions = build_session_summaries(rows)
+        ordered = sorted(sessions, key=session_sort_key)
+
+        self.assertEqual([s.session_id for s in ordered], ["2026-03-21-01", "2026-03-21-02"])
+        self.assertEqual(
+            player_session_series(sessions, "A")["labels"],
+            ["Mar 21, 2026 · S1", "Mar 21, 2026 · S2"],
+        )
+
+    def test_admin_prunes_only_empty_marker_sessions(self):
+        rows = [
+            event("empty-1", "2026-01-01", "", "session_open", 0, 1),
+            event("empty-1", "2026-01-01", "", "session_close", 0, 2),
+            event("played-1", "2026-01-02", "", "session_open", 0, 3),
+            event("played-1", "2026-01-02", "A", "buyin", 10, 4),
+            event("played-1", "2026-01-02", "A", "cashout", 15, 5),
+            event("played-1", "2026-01-02", "", "session_close", 0, 6),
+        ]
+
+        with tempfile.TemporaryDirectory() as tmpdir:
+            data_path = Path(tmpdir) / "entries.csv"
+            write_events(data_path, rows)
+            original_path = app_module.DATA_PATH
+            app_module.DATA_PATH = data_path
+
+            try:
+                with app_module.app.test_client() as client:
+                    with client.session_transaction() as flask_session:
+                        flask_session["is_admin"] = True
+
+                    response = client.post("/admin/prune-empty-sessions")
+            finally:
+                app_module.DATA_PATH = original_path
+
+            self.assertEqual(response.status_code, 302)
+            remaining = load_events(data_path)
+            self.assertEqual(
+                {row["session_id"] for row in remaining},
+                {"played-1"},
+            )
+            self.assertEqual(
+                [row["event_type"] for row in remaining],
+                ["session_open", "buyin", "cashout", "session_close"],
+            )
 
 
 if __name__ == "__main__":

From 3ad833b4e7318776fbcc76e647f9ef7168bca435 Mon Sep 17 00:00:00 2001
From: SowinskiBraeden <braeden@sowinski.dev>
Date: Mon, 22 Jun 2026 14:17:10 -0700
Subject: [PATCH 33/83] backend overhaul

---
 .gitignore                     |  23 +-
 app.py                         | 870 +--------------------------------
 auth.py                        |  13 +
 charts.py                      | 149 ++++++
 config.py                      |  20 +
 models.py                      | 366 ++++++++++++++
 routes/__init__.py             |   0
 routes/admin.py                | 583 ++++++++++++++++++++++
 routes/public.py               | 186 +++++++
 services.py                    | 343 +++++++++++++
 stats.py                       | 857 --------------------------------
 templates/admin_dashboard.html |  22 +-
 templates/base.html            |  12 +-
 templates/leaderboard.html     |   8 +-
 templates/session_detail.html  |  10 +-
 templates/sessions.html        |   4 +-
 tests/test_accounting.py       |  21 +-
 utils.py                       |  84 ++++
 18 files changed, 1824 insertions(+), 1747 deletions(-)
 create mode 100644 auth.py
 create mode 100644 charts.py
 create mode 100644 config.py
 create mode 100644 models.py
 create mode 100644 routes/__init__.py
 create mode 100644 routes/admin.py
 create mode 100644 routes/public.py
 create mode 100644 services.py
 delete mode 100644 stats.py
 create mode 100644 utils.py

diff --git a/.gitignore b/.gitignore
index c6de75f..c6f6011 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,5 +1,20 @@
+# secrets
 .env
-/__pycache__/*
-/.venv/*
-/data/*
-test/*
+
+# Python cache — matches any depth, no need to list per-directory
+__pycache__/
+*.pyc
+*.pyo
+*.pyd
+
+# test artifacts
+.pytest_cache/
+.coverage
+htmlcov/
+
+# virtualenv
+.venv/
+
+# data + exports
+data/
+*.csv
diff --git a/app.py b/app.py
index db1ce04..5198539 100644
--- a/app.py
+++ b/app.py
@@ -1,61 +1,17 @@
 #!/usr/bin/env python3
 from __future__ import annotations
 
-import csv
 import os
-from datetime import datetime, timezone
 from pathlib import Path
 
-from flask import (
-    Flask,
-    flash,
-    redirect,
-    render_template,
-    request,
-    send_file,
-    session,
-    url_for,
-)
+from flask import Flask
 
-from stats import (
-    apply_rank_changes,
-    build_leaderboard,
-    build_session_summaries,
-    cents_to_dollars,
-    cumulative_profit_series,
-    player_session_series,
-    safe_date_label,
-    session_breakdown_series,
-    session_events,
-    session_label,
-    session_sort_key,
-    unique_player_names,
-)
-from storage import (
-    CSV_HEADERS,
-    EventRow,
-    append_event,
-    ensure_data_file,
-    load_events,
-    write_events,
-)
-
-BASE_DIR = Path(__file__).resolve().parent
-DATA_PATH = BASE_DIR / "data" / "entries.csv"
-ENV_PATH = BASE_DIR / ".env"
-
-ELIGIBLE_MIN_SESSIONS = 3
-ADMIN_EVENT_TYPES = [
-    ("buyin", "Buy-in", "var(--accent)"),
-    ("front", "Front", "var(--warn)"),
-    ("rollover_in", "Rollover-in", "var(--rolled)"),
-    ("payout_carry_in", "Payout carry-in", "var(--rolled)"),
-    ("cashout", "Cashout result", "var(--rank-2)"),
-    ("paid_out", "Paid out cash", "var(--pos)"),
-    ("rollover_out", "Rollover-out", "var(--rolled)"),
-    ("note", "Note", "var(--muted)"),
-]
-SESSION_MARKER_TYPES = {"session_open", "session_close"}
+from auth import is_admin
+from config import Config
+from routes.admin import admin_bp
+from routes.public import public_bp
+from storage import ensure_data_file
+from utils import cents_to_dollars, safe_date_label
 
 
 def load_local_env(env_path: Path) -> None:
@@ -73,811 +29,29 @@ def load_local_env(env_path: Path) -> None:
         os.environ.setdefault(key, value)
 
 
-def next_session_id(sessions, session_date: str) -> str:
-    matching = [session for session in sessions if session.session_date == session_date]
+def create_app() -> Flask:
+    app = Flask(__name__)
+    app.config.from_object(Config)
 
-    highest = 0
-    for s in matching:
-        if s.session_id == session_date:
-            highest = max(highest, 1)
-            continue
+    ensure_data_file(app.config["DATA_PATH"])
 
-        suffix = s.session_id.replace(f"{session_date}-", "")
-        if suffix.isdigit():
-            highest = max(highest, int(suffix))
+    app.jinja_env.filters["money"] = cents_to_dollars
+    app.jinja_env.filters["pretty_date"] = safe_date_label
 
-    return f"{session_date}-{highest + 1:02d}"
+    @app.context_processor
+    def inject_globals() -> dict:
+        return {"is_admin": is_admin()}
 
+    app.register_blueprint(public_bp)
+    app.register_blueprint(admin_bp)
 
-def prunable_empty_session_ids(events: list[EventRow], sessions) -> set[str]:
-    empty_session_ids = {
-        session.session_id for session in sessions if len(session.entries) == 0
-    }
-    session_events: dict[str, list[EventRow]] = {}
+    return app
 
-    for event in events:
-        session_id = event["session_id"].strip() or event["session_date"].strip()
-        if session_id in empty_session_ids:
-            session_events.setdefault(session_id, []).append(event)
 
-    return {
-        session_id
-        for session_id, rows in session_events.items()
-        if rows
-        and all(
-            row["event_type"] in SESSION_MARKER_TYPES
-            and not row["player_name"].strip()
-            and row["amount_cents"] == 0
-            for row in rows
-        )
-    }
-
-
-def pending_payout_carry_items(sessions) -> list[dict[str, object]]:
-    carried_out: dict[str, int] = {}
-    carried_in: dict[str, int] = {}
-
-    for session_summary in sessions:
-        for entry in session_summary.entries:
-            carried_out[entry.player_name] = (
-                carried_out.get(entry.player_name, 0) + entry.rollover_out_cents
-            )
-            carried_in[entry.player_name] = (
-                carried_in.get(entry.player_name, 0)
-                + entry.rollover_in_cents
-                + entry.payout_carry_in_cents
-            )
-
-    items = []
-    for player_name, amount_out in carried_out.items():
-        pending_cents = amount_out - carried_in.get(player_name, 0)
-        if pending_cents > 0:
-            items.append({"player_name": player_name, "amount_cents": pending_cents})
-
-    return sorted(items, key=lambda item: str(item["player_name"]).casefold())
-
-
-load_local_env(ENV_PATH)
-
-app = Flask(__name__)
-app.config["SECRET_KEY"] = os.getenv("SECRET_KEY", "change-this-before-deploying")
-app.config["ADMIN_USERNAME"] = os.getenv("ADMIN_USERNAME", "admin")
-app.config["ADMIN_PASSWORD"] = os.getenv("ADMIN_PASSWORD", "change-me")
-app.config["SESSION_COOKIE_HTTPONLY"] = True
-app.config["SESSION_COOKIE_SAMESITE"] = "Lax"
-app.config["SESSION_COOKIE_NAME"] = "poker_portal_session"
-
-ensure_data_file(DATA_PATH)
-app.jinja_env.filters["money"] = cents_to_dollars
-app.jinja_env.filters["pretty_date"] = safe_date_label
-
-
-def is_admin() -> bool:
-    return bool(session.get("is_admin"))
-
-
-@app.context_processor
-def inject_globals() -> dict[str, object]:
-    return {"is_admin": is_admin()}
-
-
-@app.get("/")
-def home() -> str:
-    return redirect(url_for("leaderboard"))
-
-
-@app.get("/leaderboard")
-def leaderboard() -> str:
-    events = load_events(DATA_PATH)
-    all_sessions = build_session_summaries(events)
-    ordered_sessions = sorted(all_sessions, key=session_sort_key)
-
-    session_ids = [s.session_id for s in ordered_sessions]
-    selected_session_id = request.args.get("through_session", "").strip()
-    mode = request.args.get("mode", "eligible").strip()
-    if mode not in ("eligible", "all", "recent"):
-        mode = "eligible"
-    label = ""
-    cutoff_index = len(session_ids) - 1
-
-    if session_ids:
-        if selected_session_id in session_ids:
-            cutoff_index = session_ids.index(selected_session_id)
-            label = session_label(ordered_sessions[cutoff_index])
-        else:
-            label = session_label(ordered_sessions[cutoff_index])
-
-        filtered_sessions = ordered_sessions[: cutoff_index + 1]
-        previous_sessions = ordered_sessions[:cutoff_index]
-    else:
-        filtered_sessions = []
-        previous_sessions = []
-
-    # Build full board (all filtered sessions) for rank changes and counts
-    board = build_leaderboard(filtered_sessions)
-    previous_board = build_leaderboard(previous_sessions)
-    board = apply_rank_changes(board, previous_board)
-
-    # Segmented-control counts
-    eligible_count = sum(1 for p in board if p.sessions_played >= ELIGIBLE_MIN_SESSIONS)
-    all_count = len(board)
-    recent_sessions_slice = filtered_sessions[-5:]
-    recent_count = len({
-        entry.player_name
-        for s in recent_sessions_slice
-        for entry in s.entries
-    })
-
-    # Mode-specific boards
-    if mode == "recent":
-        mode_board = build_leaderboard(recent_sessions_slice)
-        main_board = mode_board
-        provisional_board = []
-    elif mode == "eligible":
-        main_board = [p for p in board if p.sessions_played >= ELIGIBLE_MIN_SESSIONS]
-        provisional_board = [p for p in board if p.sessions_played < ELIGIBLE_MIN_SESSIONS]
-    else:
-        main_board = board
-        provisional_board = []
-
-    chart_data = cumulative_profit_series(filtered_sessions)
-    cash_paid_out_cents = sum(session.total_paid_out_cents for session in all_sessions)
-
-    return render_template(
-        "leaderboard.html",
-        main_board=main_board,
-        provisional_board=provisional_board,
-        mode=mode,
-        eligible_count=eligible_count,
-        all_count=all_count,
-        recent_count=recent_count,
-        eligible_min_sessions=ELIGIBLE_MIN_SESSIONS,
-        session_count=len(filtered_sessions),
-        total_session_count=len(all_sessions),
-        cash_paid_out_cents=cash_paid_out_cents,
-        chart_data=chart_data,
-        available_sessions=all_sessions,
-        selected_session_id=selected_session_id,
-        selected_session_label=(label if selected_session_id else "Latest session"),
-        selected_session_date=(
-            ordered_sessions[cutoff_index].session_date
-            if selected_session_id and session_ids
-            else ""
-        ),
-        session_label=session_label,
-    )
-
-
-@app.get("/sessions")
-def sessions():
-    events = load_events(DATA_PATH)
-    sessions = build_session_summaries(events)
-
-    return render_template(
-        "sessions.html",
-        sessions=sessions,
-        session_label=session_label,
-    )
-
-
-@app.get("/sessions/<session_id>")
-def session_detail(session_id: str) -> str:
-    events = load_events(DATA_PATH)
-    sessions = build_session_summaries(events)
-    target_session = next(
-        (
-            session_summary
-            for session_summary in sessions
-            if session_summary.session_id == session_id
-        ),
-        None,
-    )
-    if target_session is None:
-        flash("That session was not found.", "error")
-        return redirect(url_for("sessions"))
-
-    chronological_sessions = sorted(sessions, key=session_sort_key)
-    chronological_index = next(
-        index
-        for index, session in enumerate(chronological_sessions)
-        if session.session_id == session_id
-    )
-    target_session = chronological_sessions[chronological_index]
-    session_number = chronological_index + 1
-    prev_session = (
-        chronological_sessions[chronological_index - 1]
-        if chronological_index > 0
-        else None
-    )
-    next_session = (
-        chronological_sessions[chronological_index + 1]
-        if chronological_index < len(chronological_sessions) - 1
-        else None
-    )
-
-    return render_template(
-        "session_detail.html",
-        session=target_session,
-        next_session=next_session,
-        prev_session=prev_session,
-        session_number=session_number,
-        raw_events=session_events(events, session_id),
-        chart_data=session_breakdown_series(target_session),
-        session_label=session_label,
-    )
-
-
-@app.get("/players/<player_name>")
-def player_detail(player_name: str) -> str:
-    events = load_events(DATA_PATH)
-    sessions = build_session_summaries(events)
-    board = build_leaderboard(sessions)
-    player_stats = next(
-        (player for player in board if player.player_name == player_name), None
-    )
-    if player_stats is None:
-        flash("That player was not found.", "error")
-        return redirect(url_for("leaderboard"))
-
-    player_rank = next(
-        (
-            index
-            for index, ranked_player in enumerate(board, start=1)
-            if ranked_player.player_name == player_name
-        ),
-        None,
-    )
-    chart_data = player_session_series(sessions, player_name)
-    return render_template(
-        "player_detail.html",
-        player=player_stats,
-        player_rank=player_rank,
-        chart_data=chart_data,
-    )
-
-
-@app.route("/admin/login", methods=["GET", "POST"])
-def admin_login() -> str:
-    if request.method == "POST":
-        username = request.form.get("username", "").strip()
-        password = request.form.get("password", "")
-
-        if (
-            username == app.config["ADMIN_USERNAME"]
-            and password == app.config["ADMIN_PASSWORD"]
-        ):
-            session["is_admin"] = True
-            flash("Admin login successful.", "success")
-            return redirect(url_for("admin_dashboard"))
-
-        flash("Invalid admin credentials.", "error")
-
-    return render_template("admin_login.html")
-
-
-@app.post("/admin/logout")
-def admin_logout() -> str:
-    session.clear()
-    flash("Logged out.", "success")
-    return redirect(url_for("leaderboard"))
-
-
-@app.post("/admin/session-state")
-def admin_session_state() -> str:
-    if not is_admin():
-        flash("Admin login required.", "error")
-        return redirect(url_for("admin_login"))
-
-    session_id = request.form.get("session_id", "").strip()
-    state = request.form.get("state", "").strip()
-
-    events = load_events(DATA_PATH)
-    sessions = build_session_summaries(events)
-    by_id = {session.session_id: session for session in sessions}
-    target = by_id.get(session_id)
-
-    if target is None:
-        flash("Session not found.", "error")
-        return redirect(url_for("admin_dashboard"))
-
-    if state not in {"open", "closed"}:
-        flash("Invalid session state.", "error")
-        return redirect(url_for("admin_dashboard"))
-
-    append_event(
-        DATA_PATH,
-        session_id=target.session_id,
-        session_date=target.session_date,
-        amount_cents=0,
-        player_name="",
-        event_type="session_open" if state == "open" else "session_close",
-        note=f"Session marked {state}.",
-        actor=app.config["ADMIN_USERNAME"],
-    )
-
-    flash(f"Session marked {state}.", "success")
-    return redirect(url_for("admin_dashboard"))
-
-
-@app.get("/admin/export")
-@app.get("/admin/export.csv")
-def admin_export_csv():
-    if not is_admin():
-        flash("Admin login required.", "error")
-        return redirect(url_for("admin_login"))
-
-    export_name = (
-        f"entries_export_{datetime.now(timezone.utc).strftime('%Y%m%d_%H%M%S')}.csv"
-    )
-
-    return send_file(
-        DATA_PATH,
-        as_attachment=True,
-        download_name=export_name,
-        mimetype="text/csv",
-    )
-
-
-@app.post("/admin/import")
-def admin_import_csv():
-    if not is_admin():
-        flash("Admin login required.", "error")
-        return redirect(url_for("admin_login"))
-
-    uploaded_file = request.files.get("csv_file")
-    if uploaded_file is None or uploaded_file.filename == "":
-        flash("Choose a CSV file to import.", "error")
-        return redirect(url_for("admin_dashboard"))
-
-    if not uploaded_file.filename.lower().endswith(".csv"):
-        flash("Only CSV files are allowed.", "error")
-        return redirect(url_for("admin_dashboard"))
-
-    try:
-        uploaded_text = uploaded_file.stream.read().decode("utf-8-sig")
-    except UnicodeDecodeError:
-        flash("CSV file must be valid UTF-8 text.", "error")
-        return redirect(url_for("admin_dashboard"))
-
-    uploaded_lines = uploaded_text.splitlines()
-    if not uploaded_lines:
-        flash("CSV file is empty.", "error")
-        return redirect(url_for("admin_dashboard"))
-
-    try:
-        uploaded_header = next(csv.reader(uploaded_lines))
-    except Exception:
-        flash("Could not read the uploaded CSV header.", "error")
-        return redirect(url_for("admin_dashboard"))
-
-    if uploaded_header != CSV_HEADERS:
-        flash("CSV header does not match the current audit format.", "error")
-        return redirect(url_for("admin_dashboard"))
-
-    try:
-        existing_ids = {event["id"] for event in load_events(DATA_PATH)}
-        reader = csv.DictReader(uploaded_lines)
-        new_rows = []
-        skipped_count = 0
-        for row in reader:
-            event_id = row.get("id", "")
-            if not event_id or event_id in existing_ids:
-                skipped_count += 1
-                continue
-
-            new_rows.append({header: row.get(header, "") for header in CSV_HEADERS})
-            existing_ids.add(event_id)
-
-        if new_rows:
-            with open(DATA_PATH, "a", encoding="utf-8", newline="") as handle:
-                writer = csv.DictWriter(handle, fieldnames=CSV_HEADERS)
-                writer.writerows(new_rows)
-
-        flash(
-            f"Imported {len(new_rows)} new events, skipped {skipped_count} duplicates.",
-            "success",
-        )
-    except Exception:
-        flash("Import failed. Existing CSV was not updated.", "error")
-
-    return redirect(url_for("admin_dashboard"))
-
-
-@app.post("/admin/write-off-front")
-def admin_write_off_front() -> str:
-    if not is_admin():
-        flash("Admin login required.", "error")
-        return redirect(url_for("admin_login"))
-
-    debt_key = request.form.get("debt_key", "").strip()
-    note = request.form.get("note", "").strip()
-    amount_raw = request.form.get("amount", "0").strip()
-
-    try:
-        amount_cents = int(round(float(amount_raw) * 100))
-    except ValueError:
-        flash("Amount must be a number.", "error")
-        return redirect(url_for("admin_dashboard"))
-
-    if amount_cents <= 0:
-        flash("Write-off amount must be greater than zero.", "error")
-        return redirect(url_for("admin_dashboard"))
-
-    try:
-        session_id, player_name = debt_key.split("||", 1)
-    except ValueError:
-        flash("Select a valid player debt.", "error")
-        return redirect(url_for("admin_dashboard"))
-
-    events = load_events(DATA_PATH)
-    sessions = build_session_summaries(events)
-    target = next(
-        (session for session in sessions if session.session_id == session_id),
-        None,
-    )
-
-    if target is None:
-        flash("Session not found.", "error")
-        return redirect(url_for("admin_dashboard"))
-
-    entry = next(
-        (entry for entry in target.entries if entry.player_name == player_name),
-        None,
-    )
-
-    if entry is None or entry.player_owes_cents <= 0:
-        flash("That player does not have an outstanding debt.", "error")
-        return redirect(url_for("admin_dashboard"))
-
-    if amount_cents > entry.player_owes_cents:
-        flash(
-            f"Write-off cannot exceed {cents_to_dollars(entry.player_owes_cents)}.",
-            "error",
-        )
-        return redirect(url_for("admin_dashboard"))
-
-    append_event(
-        DATA_PATH,
-        session_id=target.session_id,
-        session_date=target.session_date,
-        player_name=entry.player_name,
-        event_type="writeoff",
-        amount_cents=amount_cents,
-        note=note or "Debt written off.",
-        actor=app.config["ADMIN_USERNAME"],
-    )
-
-    flash("Debt written off.", "success")
-    return redirect(url_for("admin_dashboard"))
-
-
-@app.post("/admin/collect-front")
-def admin_collect_front() -> str:
-    if not is_admin():
-        flash("Admin login required.", "error")
-        return redirect(url_for("admin_login"))
-
-    debt_key = request.form.get("debt_key", "").strip()
-    note = request.form.get("note", "").strip()
-    amount_raw = request.form.get("amount", "0").strip()
-
-    try:
-        amount_cents = int(round(float(amount_raw) * 100))
-    except ValueError:
-        flash("Amount must be a number.", "error")
-        return redirect(url_for("admin_dashboard"))
-
-    if amount_cents <= 0:
-        flash("Collected amount must be greater than zero.", "error")
-        return redirect(url_for("admin_dashboard"))
-
-    try:
-        session_id, player_name = debt_key.split("||", 1)
-    except ValueError:
-        flash("Select a valid player debt.", "error")
-        return redirect(url_for("admin_dashboard"))
-
-    events = load_events(DATA_PATH)
-    sessions = build_session_summaries(events)
-    target = next(
-        (session for session in sessions if session.session_id == session_id),
-        None,
-    )
-
-    if target is None:
-        flash("Session not found.", "error")
-        return redirect(url_for("admin_dashboard"))
-
-    entry = next(
-        (entry for entry in target.entries if entry.player_name == player_name),
-        None,
-    )
-
-    if entry is None or entry.player_owes_cents <= 0:
-        flash("That player does not have an outstanding debt.", "error")
-        return redirect(url_for("admin_dashboard"))
-
-    if amount_cents > entry.player_owes_cents:
-        flash(
-            f"Collection cannot exceed {cents_to_dollars(entry.player_owes_cents)}.",
-            "error",
-        )
-        return redirect(url_for("admin_dashboard"))
-
-    append_event(
-        DATA_PATH,
-        session_id=target.session_id,
-        session_date=target.session_date,
-        player_name=entry.player_name,
-        event_type="debt_repayment",
-        amount_cents=amount_cents,
-        note=note or "Debt repayment collected.",
-        actor=app.config["ADMIN_USERNAME"],
-    )
-
-    flash("Debt repayment collected.", "success")
-    return redirect(url_for("admin_dashboard"))
-
-
-@app.post("/admin/open-session")
-def admin_open_session() -> str:
-    if not is_admin():
-        flash("Admin login required.", "error")
-        return redirect(url_for("admin_login"))
-
-    session_date = request.form.get("session_date", "").strip()
-    if not session_date:
-        flash("Session date is required.", "error")
-        return redirect(url_for("admin_dashboard"))
-
-    events = load_events(DATA_PATH)
-    sessions = build_session_summaries(events)
-    session_id = next_session_id(sessions, session_date)
-
-    append_event(
-        DATA_PATH,
-        session_id=session_id,
-        session_date=session_date,
-        amount_cents=0,
-        player_name="",
-        event_type="session_open",
-        note="Session opened.",
-        actor=app.config["ADMIN_USERNAME"],
-    )
-
-    flash(f"Opened session {session_id}.", "success")
-    return redirect(url_for("admin_dashboard"))
-
-
-@app.post("/admin/prune-empty-sessions")
-def admin_prune_empty_sessions() -> str:
-    if not is_admin():
-        flash("Admin login required.", "error")
-        return redirect(url_for("admin_login"))
-
-    events = load_events(DATA_PATH)
-    sessions = build_session_summaries(events)
-    prunable_session_ids = prunable_empty_session_ids(events, sessions)
-
-    if not prunable_session_ids:
-        flash("No empty marker-only sessions to prune.", "success")
-        return redirect(url_for("admin_dashboard"))
-
-    pruned_events = [
-        event
-        for event in events
-        if (event["session_id"].strip() or event["session_date"].strip())
-        not in prunable_session_ids
-    ]
-    write_events(DATA_PATH, pruned_events)
-
-    flash(
-        f"Pruned {len(prunable_session_ids)} empty session"
-        f"{'s' if len(prunable_session_ids) != 1 else ''}.",
-        "success",
-    )
-    return redirect(url_for("admin_dashboard"))
-
-
-@app.post("/admin/apply-payout-carry-in")
-def admin_apply_payout_carry_in() -> str:
-    if not is_admin():
-        flash("Admin login required.", "error")
-        return redirect(url_for("admin_login"))
-
-    session_id = request.form.get("session_id", "").strip()
-    player_name = request.form.get("player_name", "").strip()
-
-    events = load_events(DATA_PATH)
-    sessions = build_session_summaries(events)
-    by_id = {session.session_id: session for session in sessions}
-    target = by_id.get(session_id)
-
-    if target is None or target.status != "open":
-        flash("Select a valid open session.", "error")
-        return redirect(url_for("admin_dashboard"))
-
-    if not any(entry.player_name == player_name for entry in target.entries):
-        flash("Add that player to the open session before applying carry-in.", "error")
-        return redirect(url_for("admin_dashboard"))
-
-    pending_by_player = {
-        str(item["player_name"]): int(item["amount_cents"])
-        for item in pending_payout_carry_items(sessions)
-    }
-    amount_cents = pending_by_player.get(player_name, 0)
-
-    if amount_cents <= 0:
-        flash("No pending payout carry-in found for that player.", "error")
-        return redirect(url_for("admin_dashboard"))
-
-    append_event(
-        DATA_PATH,
-        session_id=target.session_id,
-        session_date=target.session_date,
-        player_name=player_name,
-        event_type="payout_carry_in",
-        amount_cents=amount_cents,
-        note="Payout carry-in from prior carry-out.",
-        actor=app.config["ADMIN_USERNAME"],
-    )
-
-    flash(
-        f"Applied {cents_to_dollars(amount_cents)} payout carry-in for {player_name}.",
-        "success",
-    )
-    return redirect(url_for("admin_dashboard"))
-
-
-@app.route("/admin", methods=["GET", "POST"])
-def admin_dashboard():
-    if not is_admin():
-        return redirect(url_for("admin_login"))
-
-    if request.method == "POST":
-        session_id = request.form.get("session_id", "").strip()
-        player_name = request.form.get("player_name", "").strip()
-        event_type = request.form.get("event_type", "").strip()
-        note = request.form.get("note", "").strip()
-
-        amount_raw = request.form.get("amount", "0").strip()
-        try:
-            amount_cents = int(round(float(amount_raw) * 100))
-        except ValueError:
-            flash("Amount must be a number.", "error")
-            return redirect(url_for("admin_dashboard"))
-
-        events = load_events(DATA_PATH)
-        sessions = build_session_summaries(events)
-        by_id = {session.session_id: session for session in sessions}
-        target = by_id.get(session_id)
-
-        if target is None:
-            flash("Select a valid open session.", "error")
-            return redirect(url_for("admin_dashboard"))
-
-        if target.status != "open":
-            flash(
-                "That session is closed. Reopen it first if you need to add events.",
-                "error",
-            )
-            return redirect(url_for("admin_dashboard"))
-
-        append_event(
-            DATA_PATH,
-            session_id=target.session_id,
-            session_date=target.session_date,
-            player_name=player_name,
-            event_type=event_type,
-            amount_cents=amount_cents,
-            note=note,
-            actor=app.config["ADMIN_USERNAME"],
-        )
-
-        flash("Event added.", "success")
-        return redirect(
-            url_for(
-                "admin_dashboard",
-                session_id=session_id,
-                player_name=player_name,
-                event_type=event_type,
-            )
-        )
-
-    events = load_events(DATA_PATH)
-    sessions = build_session_summaries(events)
-    empty_session_count = len(prunable_empty_session_ids(events, sessions))
-    pending_carry_items = pending_payout_carry_items(sessions)
-    pending_carry_total_cents = sum(
-        int(item["amount_cents"]) for item in pending_carry_items
-    )
-    open_sessions = [session for session in sessions if session.status == "open"]
-    live_session = open_sessions[0] if open_sessions else None
-    live_session_player_names = (
-        {entry.player_name for entry in live_session.entries}
-        if live_session is not None
-        else set()
-    )
-    live_session_no = ""
-    live_unresolved_count = 0
-    if live_session is not None:
-        live_session_no = f"#{len(sessions):03d}"
-        live_unresolved_count = sum(
-            1
-            for entry in live_session.entries
-            if entry.current_due_cents > 0 or entry.player_owes_cents > 0
-        )
-
-    recent_sessions = sessions
-    recent_events = list(reversed(events[-20:]))
-    event_type_colors = {value: color for value, _label, color in ADMIN_EVENT_TYPES}
-    event_type_labels = {value: label for value, label, _color in ADMIN_EVENT_TYPES}
-    selected_event_type = request.args.get("event_type", "buyin").strip()
-    if selected_event_type not in event_type_colors:
-        selected_event_type = "buyin"
-    append_form = {
-        "session_id": request.args.get("session_id", "").strip(),
-        "player_name": request.args.get("player_name", "").strip(),
-        "event_type": selected_event_type,
-    }
-    debt_entries = [
-        {"session": session, "entry": entry}
-        for session in sessions
-        for entry in session.entries
-        if entry.player_owes_cents > 0
-    ]
-
-    cash_in_cents = sum(session.total_banker_cash_in_cents for session in sessions)
-    cash_out_cents = sum(session.total_banker_cash_out_cents for session in sessions)
-    house_owes_players_cents = (
-        sum(session.total_current_due_to_player_cents for session in sessions)
-        + pending_carry_total_cents
-    )
-    players_owe_house_cents = sum(
-        session.total_current_due_to_house_cents for session in sessions
-    )
-    admin_totals = {
-        "cash_in_cents": cash_in_cents,
-        "cash_out_cents": cash_out_cents,
-        "house_owes_players_cents": house_owes_players_cents,
-        "players_owe_house_cents": players_owe_house_cents,
-        "pending_carry_cents": pending_carry_total_cents,
-        "collected_cents": sum(
-            session.total_debt_repayment_cents for session in sessions
-        ),
-        "written_off_cents": sum(
-            session.total_writeoff_cents for session in sessions
-        ),
-        "net_book_position_cents": (
-            cash_in_cents
-            - cash_out_cents
-            + players_owe_house_cents
-            - house_owes_players_cents
-        ),
-    }
-
-    return render_template(
-        "admin_dashboard.html",
-        open_sessions=open_sessions,
-        recent_sessions=recent_sessions,
-        recent_events=recent_events,
-        debt_entries=debt_entries,
-        live_session=live_session,
-        live_session_player_names=live_session_player_names,
-        live_session_no=live_session_no,
-        live_unresolved_count=live_unresolved_count,
-        pending_carry_items=pending_carry_items,
-        player_names=unique_player_names(events),
-        append_form=append_form,
-        event_types=ADMIN_EVENT_TYPES,
-        event_type_colors=event_type_colors,
-        event_type_labels=event_type_labels,
-        admin_today=datetime.now().date().isoformat(),
-        session_label=session_label,
-        admin_totals=admin_totals,
-        empty_session_count=empty_session_count,
-    )
+_env_path = Path(__file__).resolve().parent / ".env"
+load_local_env(_env_path)
 
+app = create_app()
 
 if __name__ == "__main__":
     app.run(debug=True)
diff --git a/auth.py b/auth.py
new file mode 100644
index 0000000..19da07b
--- /dev/null
+++ b/auth.py
@@ -0,0 +1,13 @@
+#!/usr/bin/env python3
+"""Authentication helpers.
+
+Kept in its own module so both app.py (context processor) and routes/admin.py
+(route guards) can import is_admin() without circular imports.
+"""
+from __future__ import annotations
+
+from flask import session as flask_session
+
+
+def is_admin() -> bool:
+    return bool(flask_session.get("is_admin"))
diff --git a/charts.py b/charts.py
new file mode 100644
index 0000000..0a8d074
--- /dev/null
+++ b/charts.py
@@ -0,0 +1,149 @@
+#!/usr/bin/env python3
+"""Chart data series builders for the frontend."""
+from __future__ import annotations
+
+from typing import Any
+
+from models import SessionEntry, SessionSummary
+from utils import net_result_bucket, session_chart_label, session_sort_key
+
+PLAYER_PALETTE = [
+    "#9b8cf0",  # --line-1 violet
+    "#6fc093",  # --line-2 green
+    "#e0b15c",  # --line-3 gold
+    "#cf6f86",  # --line-4 pink
+    "#8f93c2",  # --line-5 lavender
+    "#7cb9e0",
+    "#f4a261",
+    "#a78bb0",
+    "#5cb8a0",
+    "#e58f3a",
+    "#84cc16",
+    "#06b6d4",
+]
+
+
+def color_for_name(name: str, names: list[str]) -> str:
+    try:
+        index = sorted(names, key=str.casefold).index(name)
+    except ValueError:
+        index = abs(hash(name))
+    return PLAYER_PALETTE[index % len(PLAYER_PALETTE)]
+
+
+def net_tone(value_cents: int) -> str:
+    bucket = net_result_bucket(value_cents)
+
+    if bucket == "win":
+        return "#6fc093"  # --pos
+    if bucket == "loss":
+        return "#e0758a"  # --neg
+    return "#84828e"      # --muted-2
+
+
+def cumulative_profit_series(sessions: list[SessionSummary]) -> dict[str, object]:
+    ordered_sessions = sorted(sessions, key=session_sort_key)
+
+    all_players = sorted(
+        {
+            entry.player_name
+            for session in ordered_sessions
+            for entry in session.entries
+        },
+        key=str.casefold,
+    )
+
+    labels = [session_chart_label(session) for session in ordered_sessions]
+    datasets = []
+
+    for player_name in all_players:
+        running_total = 0
+        seen_player = False
+        sessions_played = 0
+        data: list[float | None] = []
+
+        for session in ordered_sessions:
+            matching_entry = next(
+                (
+                    entry
+                    for entry in session.entries
+                    if entry.player_name == player_name
+                ),
+                None,
+            )
+
+            if matching_entry is None:
+                data.append(running_total / 100 if seen_player else None)
+                continue
+
+            seen_player = True
+            sessions_played += 1
+            running_total += matching_entry.net_cents
+            data.append(round(running_total / 100, 2))
+
+        datasets.append(
+            {
+                "label": player_name,
+                "data": data,
+                "sessions_played": sessions_played,
+            }
+        )
+
+    return {
+        "labels": labels,
+        "datasets": datasets,
+    }
+
+
+def player_session_series(
+    sessions: list[SessionSummary], player_name: str
+) -> dict[str, Any]:
+    ordered_sessions = sorted(sessions, key=session_sort_key)
+    labels: list[str] = []
+    net_values: list[float] = []
+    cumulative_values: list[float] = []
+    running_total = 0
+
+    all_player_names = sorted(
+        {
+            entry.player_name
+            for session in ordered_sessions
+            for entry in session.entries
+        },
+        key=str.casefold,
+    )
+
+    for session in ordered_sessions:
+        matching_entry = next(
+            (entry for entry in session.entries if entry.player_name == player_name),
+            None,
+        )
+        if matching_entry is None:
+            continue
+
+        labels.append(session_chart_label(session))
+        net_values.append(round(matching_entry.net_cents / 100, 2))
+        running_total += matching_entry.net_cents
+        cumulative_values.append(round(running_total / 100, 2))
+
+    return {
+        "labels": labels,
+        "color": color_for_name(player_name, all_player_names),
+        "net_values": net_values,
+        "net_colors": [net_tone(round(value * 100)) for value in net_values],
+        "cumulative_values": cumulative_values,
+    }
+
+
+def session_breakdown_series(session: SessionSummary) -> dict[str, Any]:
+    ordered_entries = sorted(
+        session.entries,
+        key=lambda entry: (entry.net_cents, entry.player_name.casefold()),
+        reverse=True,
+    )
+
+    return {
+        "labels": [entry.player_name for entry in ordered_entries],
+        "net_values": [round(entry.net_cents / 100, 2) for entry in ordered_entries],
+        "net_colors": [net_tone(entry.net_cents) for entry in ordered_entries],
+    }
diff --git a/config.py b/config.py
new file mode 100644
index 0000000..442fec3
--- /dev/null
+++ b/config.py
@@ -0,0 +1,20 @@
+#!/usr/bin/env python3
+from __future__ import annotations
+
+import os
+from pathlib import Path
+
+BASE_DIR = Path(__file__).resolve().parent
+DATA_PATH = BASE_DIR / "data" / "entries.csv"
+
+ELIGIBLE_MIN_SESSIONS = 3
+
+
+class Config:
+    SECRET_KEY: str = os.getenv("SECRET_KEY", "change-this-before-deploying")
+    ADMIN_USERNAME: str = os.getenv("ADMIN_USERNAME", "admin")
+    ADMIN_PASSWORD: str = os.getenv("ADMIN_PASSWORD", "change-me")
+    SESSION_COOKIE_HTTPONLY: bool = True
+    SESSION_COOKIE_SAMESITE: str = "Lax"
+    SESSION_COOKIE_NAME: str = "poker_portal_session"
+    DATA_PATH: Path = DATA_PATH
diff --git a/models.py b/models.py
new file mode 100644
index 0000000..223e4e5
--- /dev/null
+++ b/models.py
@@ -0,0 +1,366 @@
+#!/usr/bin/env python3
+from __future__ import annotations
+
+from dataclasses import dataclass, field
+
+
+@dataclass
+class SessionEntry:
+    session_id: str
+    session_date: str
+    player_name: str
+    buy_in_cents: int = 0
+    front_cents: int = 0
+    front_collected_cents: int = 0
+    front_writeoff_cents: int = 0
+    cash_out_cents: int = 0
+    paid_cents: int = 0
+    rollover_in_cents: int = 0
+    payout_carry_in_cents: int = 0
+    rollover_out_cents: int = 0
+    notes: list[str] = field(default_factory=list)
+
+    @property
+    def invested_cents(self) -> int:
+        # Poker performance: money/chips that entered play. This is intentionally
+        # broader than real cash because fronts and rollover-ins affect results.
+        return self.buy_in_cents + self.front_cents + self.rollover_in_cents
+
+    @property
+    def net_cents(self) -> int:
+        return self.cash_out_cents - self.invested_cents
+
+    @property
+    def paid_out_cents(self) -> int:
+        return self.paid_cents
+
+    @property
+    def debt_repayment_cents(self) -> int:
+        return self.front_collected_cents
+
+    @property
+    def writeoff_cents(self) -> int:
+        return self.front_writeoff_cents
+
+    @property
+    def gross_payout_cents(self) -> int:
+        # Settlement: cashout is a gross chip count/result, not proof that cash
+        # was paid. Fronts are recovered from the cashout before the player has
+        # a claim against the house.
+        return max(self.cash_out_cents - self.front_cents, 0)
+
+    @property
+    def player_owes_gross_cents(self) -> int:
+        return max(self.front_cents - self.cash_out_cents, 0)
+
+    @property
+    def gross_due_to_house_cents(self) -> int:
+        return self.player_owes_gross_cents
+
+    @property
+    def settled_to_player_cents(self) -> int:
+        # Rollover-out resolves the source session's payable even though it is
+        # not real cash out. The destination session records it as rollover-in.
+        return self.paid_out_cents + self.rollover_out_cents
+
+    @property
+    def current_due_to_player_cents(self) -> int:
+        return max(
+            self.gross_payout_cents
+            + self.payout_carry_in_cents
+            - self.settled_to_player_cents,
+            0,
+        )
+
+    @property
+    def settled_to_house_cents(self) -> int:
+        # Front collections are real cash in. Writeoffs are not cash, but they
+        # do resolve the receivable.
+        return self.debt_repayment_cents + self.writeoff_cents
+
+    @property
+    def current_due_to_house_cents(self) -> int:
+        return max(self.gross_due_to_house_cents - self.settled_to_house_cents, 0)
+
+    @property
+    def real_cash_in_cents(self) -> int:
+        return self.buy_in_cents + self.debt_repayment_cents
+
+    @property
+    def real_cash_out_cents(self) -> int:
+        return self.paid_out_cents
+
+    @property
+    def payout_due_cents(self) -> int:
+        return self.gross_payout_cents
+
+    @property
+    def payout_remaining_cents(self) -> int:
+        return self.current_due_to_player_cents
+
+    @property
+    def settled_cents(self) -> int:
+        return self.settled_to_player_cents
+
+    @property
+    def current_due_cents(self) -> int:
+        return self.current_due_to_player_cents
+
+    @property
+    def player_owes_cents(self) -> int:
+        return self.current_due_to_house_cents
+
+    @property
+    def raw_player_owes_cents(self) -> int:
+        return self.gross_due_to_house_cents
+
+    @property
+    def front_shortfall_cents(self) -> int:
+        return self.gross_due_to_house_cents
+
+    @property
+    def overpaid_front_cents(self) -> int:
+        return 0
+
+    @property
+    def front_writeoff_applied_cents(self) -> int:
+        return min(
+            self.writeoff_cents,
+            max(self.gross_due_to_house_cents - self.front_collected_applied_cents, 0),
+        )
+
+    @property
+    def front_collected_applied_cents(self) -> int:
+        return min(self.debt_repayment_cents, self.gross_due_to_house_cents)
+
+    @property
+    def front_resolved_cents(self) -> int:
+        return min(self.settled_to_house_cents, self.gross_due_to_house_cents)
+
+    @property
+    def payout_status(self) -> str:
+        if self.current_due_to_house_cents > 0:
+            return "owes"
+        if self.writeoff_cents > 0:
+            return "written_off"
+        if self.debt_repayment_cents > 0:
+            return "collected"
+        if self.gross_payout_cents <= 0:
+            return "none"
+        if self.current_due_to_player_cents <= 0:
+            if self.paid_out_cents < self.gross_payout_cents:
+                return "settled"
+            return "paid"
+        if self.settled_to_player_cents <= 0:
+            return "unpaid"
+        return "partial"
+
+
+@dataclass
+class SessionSummary:
+    session_id: str
+    session_date: str
+    entries: list[SessionEntry]
+    status: str = "closed"
+    opened_at: str = ""
+
+    @property
+    def is_open(self) -> bool:
+        return self.status == "open"
+
+    @property
+    def total_buy_in_cents(self) -> int:
+        return sum(entry.buy_in_cents for entry in self.entries)
+
+    @property
+    def total_front_cents(self) -> int:
+        return sum(entry.front_cents for entry in self.entries)
+
+    @property
+    def total_rollover_in_cents(self) -> int:
+        return sum(entry.rollover_in_cents for entry in self.entries)
+
+    @property
+    def total_payout_carry_in_cents(self) -> int:
+        return sum(entry.payout_carry_in_cents for entry in self.entries)
+
+    @property
+    def total_invested_cents(self) -> int:
+        return sum(entry.invested_cents for entry in self.entries)
+
+    @property
+    def total_cash_out_cents(self) -> int:
+        return sum(entry.cash_out_cents for entry in self.entries)
+
+    @property
+    def total_payout_due_cents(self) -> int:
+        return self.total_gross_payout_cents
+
+    @property
+    def total_remaining_cents(self) -> int:
+        return self.total_current_due_to_player_cents
+
+    @property
+    def total_net_cents(self) -> int:
+        return sum(entry.net_cents for entry in self.entries)
+
+    @property
+    def total_gross_payout_cents(self) -> int:
+        return sum(entry.gross_payout_cents for entry in self.entries)
+
+    @property
+    def total_paid_cents(self) -> int:
+        return self.total_paid_out_cents
+
+    @property
+    def total_paid_out_cents(self) -> int:
+        return sum(entry.paid_out_cents for entry in self.entries)
+
+    @property
+    def total_rollover_out_cents(self) -> int:
+        return sum(entry.rollover_out_cents for entry in self.entries)
+
+    @property
+    def total_settled_to_player_cents(self) -> int:
+        return sum(entry.settled_to_player_cents for entry in self.entries)
+
+    @property
+    def total_current_due_to_player_cents(self) -> int:
+        return sum(entry.current_due_to_player_cents for entry in self.entries)
+
+    @property
+    def total_player_owes_gross_cents(self) -> int:
+        return sum(entry.gross_due_to_house_cents for entry in self.entries)
+
+    @property
+    def total_gross_due_to_house_cents(self) -> int:
+        return self.total_player_owes_gross_cents
+
+    @property
+    def total_settled_to_house_cents(self) -> int:
+        return sum(entry.settled_to_house_cents for entry in self.entries)
+
+    @property
+    def total_current_due_to_house_cents(self) -> int:
+        return sum(entry.current_due_to_house_cents for entry in self.entries)
+
+    @property
+    def total_front_writeoff_cents(self) -> int:
+        return self.total_writeoff_cents
+
+    @property
+    def total_front_collected_cents(self) -> int:
+        return self.total_debt_repayment_cents
+
+    @property
+    def total_debt_repayment_cents(self) -> int:
+        return sum(entry.debt_repayment_cents for entry in self.entries)
+
+    @property
+    def total_writeoff_cents(self) -> int:
+        return sum(entry.writeoff_cents for entry in self.entries)
+
+    @property
+    def total_cash_in_cents(self) -> int:
+        return sum(entry.real_cash_in_cents for entry in self.entries)
+
+    @property
+    def total_real_cash_in_cents(self) -> int:
+        return self.total_cash_in_cents
+
+    @property
+    def total_real_cash_out_cents(self) -> int:
+        return self.total_paid_out_cents
+
+    @property
+    def total_banker_cash_in_cents(self) -> int:
+        return self.total_real_cash_in_cents
+
+    @property
+    def total_banker_cash_out_cents(self) -> int:
+        return self.total_real_cash_out_cents
+
+    @property
+    def total_current_due_cents(self) -> int:
+        return self.total_current_due_to_player_cents
+
+    @property
+    def total_player_owes_cents(self) -> int:
+        return self.total_current_due_to_house_cents
+
+    @property
+    def total_open_balance_cents(self) -> int:
+        return self.total_current_due_to_player_cents - self.total_current_due_to_house_cents
+
+    @property
+    def total_net_book_position_cents(self) -> int:
+        # Banker view: cash currently held, plus collectible receivables, minus
+        # unpaid player claims. Rollover-outs reduce payables but are not cash.
+        return (
+            self.total_cash_in_cents
+            - self.total_paid_out_cents
+            + self.total_current_due_to_house_cents
+            - self.total_current_due_to_player_cents
+        )
+
+
+@dataclass
+class PlayerStats:
+    player_name: str
+    sessions_played: int
+    winning_sessions: int
+    losing_sessions: int
+    break_even_sessions: int
+    win_pct: float
+    avg_win_cents: int
+    avg_loss_cents: int
+    biggest_win_cents: int
+    biggest_loss_cents: int
+    total_buy_in_cents: int
+    total_front_cents: int
+    total_front_collected_cents: int
+    total_front_writeoff_cents: int
+    current_player_owes_cents: int
+    total_rollover_in_cents: int
+    total_payout_carry_in_cents: int
+    total_invested_cents: int
+    total_cash_out_cents: int
+    total_gross_payout_cents: int
+    total_paid_cents: int
+    total_rollover_out_cents: int
+    current_due_to_player_cents: int
+    total_net_cents: int
+    roi_pct: float
+    current_win_streak: int
+    current_loss_streak: int
+    longest_win_streak: int
+    longest_loss_streak: int
+    best_session_date: str | None
+    best_session_net_cents: int
+    worst_session_date: str | None
+    worst_session_net_cents: int
+    rank_change: int = 0
+
+    @property
+    def total_debt_repayment_cents(self) -> int:
+        return self.total_front_collected_cents
+
+    @property
+    def total_writeoff_cents(self) -> int:
+        return self.total_front_writeoff_cents
+
+    @property
+    def current_due_to_house_cents(self) -> int:
+        return self.current_player_owes_cents
+
+    @property
+    def total_paid_out_cents(self) -> int:
+        return self.total_paid_cents
+
+    @property
+    def total_real_cash_out_cents(self) -> int:
+        return self.total_paid_out_cents
+
+    @property
+    def total_real_cash_in_cents(self) -> int:
+        return self.total_buy_in_cents + self.total_debt_repayment_cents
diff --git a/routes/__init__.py b/routes/__init__.py
new file mode 100644
index 0000000..e69de29
diff --git a/routes/admin.py b/routes/admin.py
new file mode 100644
index 0000000..08f44ab
--- /dev/null
+++ b/routes/admin.py
@@ -0,0 +1,583 @@
+#!/usr/bin/env python3
+from __future__ import annotations
+
+import csv
+from datetime import datetime, timezone
+
+from flask import (
+    Blueprint,
+    current_app,
+    flash,
+    redirect,
+    render_template,
+    request,
+    send_file,
+    session as flask_session,
+    url_for,
+)
+
+from auth import is_admin
+from services import (
+    build_session_summaries,
+    next_session_id,
+    pending_payout_carry_items,
+    prunable_empty_session_ids,
+    unique_player_names,
+)
+from storage import CSV_HEADERS, append_event, load_events, write_events
+from utils import cents_to_dollars, session_label
+
+admin_bp = Blueprint("admin", __name__)
+
+ADMIN_EVENT_TYPES = [
+    ("buyin", "Buy-in", "var(--accent)"),
+    ("front", "Front", "var(--warn)"),
+    ("rollover_in", "Rollover-in", "var(--rolled)"),
+    ("payout_carry_in", "Payout carry-in", "var(--rolled)"),
+    ("cashout", "Cashout result", "var(--rank-2)"),
+    ("paid_out", "Paid out cash", "var(--pos)"),
+    ("rollover_out", "Rollover-out", "var(--rolled)"),
+    ("note", "Note", "var(--muted)"),
+]
+
+
+@admin_bp.route("/admin/login", methods=["GET", "POST"])
+def login():
+    if request.method == "POST":
+        username = request.form.get("username", "").strip()
+        password = request.form.get("password", "")
+
+        if (
+            username == current_app.config["ADMIN_USERNAME"]
+            and password == current_app.config["ADMIN_PASSWORD"]
+        ):
+            flask_session["is_admin"] = True
+            flash("Admin login successful.", "success")
+            return redirect(url_for("admin.dashboard"))
+
+        flash("Invalid admin credentials.", "error")
+
+    return render_template("admin_login.html")
+
+
+@admin_bp.post("/admin/logout")
+def logout():
+    flask_session.clear()
+    flash("Logged out.", "success")
+    return redirect(url_for("public.leaderboard"))
+
+
+@admin_bp.post("/admin/session-state")
+def session_state():
+    if not is_admin():
+        flash("Admin login required.", "error")
+        return redirect(url_for("admin.login"))
+
+    data_path = current_app.config["DATA_PATH"]
+    session_id = request.form.get("session_id", "").strip()
+    state = request.form.get("state", "").strip()
+
+    events = load_events(data_path)
+    sessions = build_session_summaries(events)
+    by_id = {s.session_id: s for s in sessions}
+    target = by_id.get(session_id)
+
+    if target is None:
+        flash("Session not found.", "error")
+        return redirect(url_for("admin.dashboard"))
+
+    if state not in {"open", "closed"}:
+        flash("Invalid session state.", "error")
+        return redirect(url_for("admin.dashboard"))
+
+    append_event(
+        data_path,
+        session_id=target.session_id,
+        session_date=target.session_date,
+        amount_cents=0,
+        player_name="",
+        event_type="session_open" if state == "open" else "session_close",
+        note=f"Session marked {state}.",
+        actor=current_app.config["ADMIN_USERNAME"],
+    )
+
+    flash(f"Session marked {state}.", "success")
+    return redirect(url_for("admin.dashboard"))
+
+
+@admin_bp.get("/admin/export")
+@admin_bp.get("/admin/export.csv")
+def export_csv():
+    if not is_admin():
+        flash("Admin login required.", "error")
+        return redirect(url_for("admin.login"))
+
+    data_path = current_app.config["DATA_PATH"]
+    export_name = (
+        f"entries_export_{datetime.now(timezone.utc).strftime('%Y%m%d_%H%M%S')}.csv"
+    )
+
+    return send_file(
+        data_path,
+        as_attachment=True,
+        download_name=export_name,
+        mimetype="text/csv",
+    )
+
+
+@admin_bp.post("/admin/import")
+def import_csv():
+    if not is_admin():
+        flash("Admin login required.", "error")
+        return redirect(url_for("admin.login"))
+
+    data_path = current_app.config["DATA_PATH"]
+    uploaded_file = request.files.get("csv_file")
+    if uploaded_file is None or uploaded_file.filename == "":
+        flash("Choose a CSV file to import.", "error")
+        return redirect(url_for("admin.dashboard"))
+
+    if not uploaded_file.filename.lower().endswith(".csv"):
+        flash("Only CSV files are allowed.", "error")
+        return redirect(url_for("admin.dashboard"))
+
+    try:
+        uploaded_text = uploaded_file.stream.read().decode("utf-8-sig")
+    except UnicodeDecodeError:
+        flash("CSV file must be valid UTF-8 text.", "error")
+        return redirect(url_for("admin.dashboard"))
+
+    uploaded_lines = uploaded_text.splitlines()
+    if not uploaded_lines:
+        flash("CSV file is empty.", "error")
+        return redirect(url_for("admin.dashboard"))
+
+    try:
+        uploaded_header = next(csv.reader(uploaded_lines))
+    except Exception:
+        flash("Could not read the uploaded CSV header.", "error")
+        return redirect(url_for("admin.dashboard"))
+
+    if uploaded_header != CSV_HEADERS:
+        flash("CSV header does not match the current audit format.", "error")
+        return redirect(url_for("admin.dashboard"))
+
+    try:
+        existing_ids = {event["id"] for event in load_events(data_path)}
+        reader = csv.DictReader(uploaded_lines)
+        new_rows = []
+        skipped_count = 0
+        for row in reader:
+            event_id = row.get("id", "")
+            if not event_id or event_id in existing_ids:
+                skipped_count += 1
+                continue
+
+            new_rows.append({header: row.get(header, "") for header in CSV_HEADERS})
+            existing_ids.add(event_id)
+
+        if new_rows:
+            with open(data_path, "a", encoding="utf-8", newline="") as handle:
+                writer = csv.DictWriter(handle, fieldnames=CSV_HEADERS)
+                writer.writerows(new_rows)
+
+        flash(
+            f"Imported {len(new_rows)} new events, skipped {skipped_count} duplicates.",
+            "success",
+        )
+    except Exception:
+        flash("Import failed. Existing CSV was not updated.", "error")
+
+    return redirect(url_for("admin.dashboard"))
+
+
+@admin_bp.post("/admin/write-off-front")
+def write_off_front():
+    if not is_admin():
+        flash("Admin login required.", "error")
+        return redirect(url_for("admin.login"))
+
+    data_path = current_app.config["DATA_PATH"]
+    debt_key = request.form.get("debt_key", "").strip()
+    note = request.form.get("note", "").strip()
+    amount_raw = request.form.get("amount", "0").strip()
+
+    try:
+        amount_cents = int(round(float(amount_raw) * 100))
+    except ValueError:
+        flash("Amount must be a number.", "error")
+        return redirect(url_for("admin.dashboard"))
+
+    if amount_cents <= 0:
+        flash("Write-off amount must be greater than zero.", "error")
+        return redirect(url_for("admin.dashboard"))
+
+    try:
+        session_id, player_name = debt_key.split("||", 1)
+    except ValueError:
+        flash("Select a valid player debt.", "error")
+        return redirect(url_for("admin.dashboard"))
+
+    events = load_events(data_path)
+    sessions = build_session_summaries(events)
+    target = next((s for s in sessions if s.session_id == session_id), None)
+
+    if target is None:
+        flash("Session not found.", "error")
+        return redirect(url_for("admin.dashboard"))
+
+    entry = next(
+        (e for e in target.entries if e.player_name == player_name),
+        None,
+    )
+
+    if entry is None or entry.player_owes_cents <= 0:
+        flash("That player does not have an outstanding debt.", "error")
+        return redirect(url_for("admin.dashboard"))
+
+    if amount_cents > entry.player_owes_cents:
+        flash(
+            f"Write-off cannot exceed {cents_to_dollars(entry.player_owes_cents)}.",
+            "error",
+        )
+        return redirect(url_for("admin.dashboard"))
+
+    append_event(
+        data_path,
+        session_id=target.session_id,
+        session_date=target.session_date,
+        player_name=entry.player_name,
+        event_type="writeoff",
+        amount_cents=amount_cents,
+        note=note or "Debt written off.",
+        actor=current_app.config["ADMIN_USERNAME"],
+    )
+
+    flash("Debt written off.", "success")
+    return redirect(url_for("admin.dashboard"))
+
+
+@admin_bp.post("/admin/collect-front")
+def collect_front():
+    if not is_admin():
+        flash("Admin login required.", "error")
+        return redirect(url_for("admin.login"))
+
+    data_path = current_app.config["DATA_PATH"]
+    debt_key = request.form.get("debt_key", "").strip()
+    note = request.form.get("note", "").strip()
+    amount_raw = request.form.get("amount", "0").strip()
+
+    try:
+        amount_cents = int(round(float(amount_raw) * 100))
+    except ValueError:
+        flash("Amount must be a number.", "error")
+        return redirect(url_for("admin.dashboard"))
+
+    if amount_cents <= 0:
+        flash("Collected amount must be greater than zero.", "error")
+        return redirect(url_for("admin.dashboard"))
+
+    try:
+        session_id, player_name = debt_key.split("||", 1)
+    except ValueError:
+        flash("Select a valid player debt.", "error")
+        return redirect(url_for("admin.dashboard"))
+
+    events = load_events(data_path)
+    sessions = build_session_summaries(events)
+    target = next((s for s in sessions if s.session_id == session_id), None)
+
+    if target is None:
+        flash("Session not found.", "error")
+        return redirect(url_for("admin.dashboard"))
+
+    entry = next(
+        (e for e in target.entries if e.player_name == player_name),
+        None,
+    )
+
+    if entry is None or entry.player_owes_cents <= 0:
+        flash("That player does not have an outstanding debt.", "error")
+        return redirect(url_for("admin.dashboard"))
+
+    if amount_cents > entry.player_owes_cents:
+        flash(
+            f"Collection cannot exceed {cents_to_dollars(entry.player_owes_cents)}.",
+            "error",
+        )
+        return redirect(url_for("admin.dashboard"))
+
+    append_event(
+        data_path,
+        session_id=target.session_id,
+        session_date=target.session_date,
+        player_name=entry.player_name,
+        event_type="debt_repayment",
+        amount_cents=amount_cents,
+        note=note or "Debt repayment collected.",
+        actor=current_app.config["ADMIN_USERNAME"],
+    )
+
+    flash("Debt repayment collected.", "success")
+    return redirect(url_for("admin.dashboard"))
+
+
+@admin_bp.post("/admin/open-session")
+def open_session():
+    if not is_admin():
+        flash("Admin login required.", "error")
+        return redirect(url_for("admin.login"))
+
+    data_path = current_app.config["DATA_PATH"]
+    session_date = request.form.get("session_date", "").strip()
+    if not session_date:
+        flash("Session date is required.", "error")
+        return redirect(url_for("admin.dashboard"))
+
+    events = load_events(data_path)
+    sessions = build_session_summaries(events)
+    new_session_id = next_session_id(sessions, session_date)
+
+    append_event(
+        data_path,
+        session_id=new_session_id,
+        session_date=session_date,
+        amount_cents=0,
+        player_name="",
+        event_type="session_open",
+        note="Session opened.",
+        actor=current_app.config["ADMIN_USERNAME"],
+    )
+
+    flash(f"Opened session {new_session_id}.", "success")
+    return redirect(url_for("admin.dashboard"))
+
+
+@admin_bp.post("/admin/prune-empty-sessions")
+def prune_empty_sessions():
+    if not is_admin():
+        flash("Admin login required.", "error")
+        return redirect(url_for("admin.login"))
+
+    data_path = current_app.config["DATA_PATH"]
+    events = load_events(data_path)
+    sessions = build_session_summaries(events)
+    prunable_ids = prunable_empty_session_ids(events, sessions)
+
+    if not prunable_ids:
+        flash("No empty marker-only sessions to prune.", "success")
+        return redirect(url_for("admin.dashboard"))
+
+    pruned_events = [
+        event
+        for event in events
+        if (event["session_id"].strip() or event["session_date"].strip())
+        not in prunable_ids
+    ]
+    write_events(data_path, pruned_events)
+
+    flash(
+        f"Pruned {len(prunable_ids)} empty session"
+        f"{'s' if len(prunable_ids) != 1 else ''}.",
+        "success",
+    )
+    return redirect(url_for("admin.dashboard"))
+
+
+@admin_bp.post("/admin/apply-payout-carry-in")
+def apply_payout_carry_in():
+    if not is_admin():
+        flash("Admin login required.", "error")
+        return redirect(url_for("admin.login"))
+
+    data_path = current_app.config["DATA_PATH"]
+    session_id = request.form.get("session_id", "").strip()
+    player_name = request.form.get("player_name", "").strip()
+
+    events = load_events(data_path)
+    sessions = build_session_summaries(events)
+    by_id = {s.session_id: s for s in sessions}
+    target = by_id.get(session_id)
+
+    if target is None or target.status != "open":
+        flash("Select a valid open session.", "error")
+        return redirect(url_for("admin.dashboard"))
+
+    if not any(e.player_name == player_name for e in target.entries):
+        flash("Add that player to the open session before applying carry-in.", "error")
+        return redirect(url_for("admin.dashboard"))
+
+    pending_by_player = {
+        str(item["player_name"]): int(item["amount_cents"])
+        for item in pending_payout_carry_items(sessions)
+    }
+    amount_cents = pending_by_player.get(player_name, 0)
+
+    if amount_cents <= 0:
+        flash("No pending payout carry-in found for that player.", "error")
+        return redirect(url_for("admin.dashboard"))
+
+    append_event(
+        data_path,
+        session_id=target.session_id,
+        session_date=target.session_date,
+        player_name=player_name,
+        event_type="payout_carry_in",
+        amount_cents=amount_cents,
+        note="Payout carry-in from prior carry-out.",
+        actor=current_app.config["ADMIN_USERNAME"],
+    )
+
+    flash(
+        f"Applied {cents_to_dollars(amount_cents)} payout carry-in for {player_name}.",
+        "success",
+    )
+    return redirect(url_for("admin.dashboard"))
+
+
+@admin_bp.route("/admin", methods=["GET", "POST"])
+def dashboard():
+    if not is_admin():
+        return redirect(url_for("admin.login"))
+
+    data_path = current_app.config["DATA_PATH"]
+
+    if request.method == "POST":
+        session_id = request.form.get("session_id", "").strip()
+        player_name = request.form.get("player_name", "").strip()
+        event_type = request.form.get("event_type", "").strip()
+        note = request.form.get("note", "").strip()
+
+        amount_raw = request.form.get("amount", "0").strip()
+        try:
+            amount_cents = int(round(float(amount_raw) * 100))
+        except ValueError:
+            flash("Amount must be a number.", "error")
+            return redirect(url_for("admin.dashboard"))
+
+        events = load_events(data_path)
+        sessions = build_session_summaries(events)
+        by_id = {s.session_id: s for s in sessions}
+        target = by_id.get(session_id)
+
+        if target is None:
+            flash("Select a valid open session.", "error")
+            return redirect(url_for("admin.dashboard"))
+
+        if target.status != "open":
+            flash(
+                "That session is closed. Reopen it first if you need to add events.",
+                "error",
+            )
+            return redirect(url_for("admin.dashboard"))
+
+        append_event(
+            data_path,
+            session_id=target.session_id,
+            session_date=target.session_date,
+            player_name=player_name,
+            event_type=event_type,
+            amount_cents=amount_cents,
+            note=note,
+            actor=current_app.config["ADMIN_USERNAME"],
+        )
+
+        flash("Event added.", "success")
+        return redirect(
+            url_for(
+                "admin.dashboard",
+                session_id=session_id,
+                player_name=player_name,
+                event_type=event_type,
+            )
+        )
+
+    events = load_events(data_path)
+    sessions = build_session_summaries(events)
+    empty_session_count = len(prunable_empty_session_ids(events, sessions))
+    pending_carry_items = pending_payout_carry_items(sessions)
+    pending_carry_total_cents = sum(
+        int(item["amount_cents"]) for item in pending_carry_items
+    )
+    open_sessions = [s for s in sessions if s.status == "open"]
+    live_session = open_sessions[0] if open_sessions else None
+    live_session_player_names = (
+        {e.player_name for e in live_session.entries}
+        if live_session is not None
+        else set()
+    )
+    live_session_no = ""
+    live_unresolved_count = 0
+    if live_session is not None:
+        live_session_no = f"#{len(sessions):03d}"
+        live_unresolved_count = sum(
+            1
+            for e in live_session.entries
+            if e.current_due_cents > 0 or e.player_owes_cents > 0
+        )
+
+    recent_events = list(reversed(events[-20:]))
+    event_type_colors = {value: color for value, _label, color in ADMIN_EVENT_TYPES}
+    event_type_labels = {value: label for value, label, _color in ADMIN_EVENT_TYPES}
+    selected_event_type = request.args.get("event_type", "buyin").strip()
+    if selected_event_type not in event_type_colors:
+        selected_event_type = "buyin"
+    append_form = {
+        "session_id": request.args.get("session_id", "").strip(),
+        "player_name": request.args.get("player_name", "").strip(),
+        "event_type": selected_event_type,
+    }
+    debt_entries = [
+        {"session": s, "entry": e}
+        for s in sessions
+        for e in s.entries
+        if e.player_owes_cents > 0
+    ]
+
+    cash_in_cents = sum(s.total_banker_cash_in_cents for s in sessions)
+    cash_out_cents = sum(s.total_banker_cash_out_cents for s in sessions)
+    house_owes_players_cents = (
+        sum(s.total_current_due_to_player_cents for s in sessions)
+        + pending_carry_total_cents
+    )
+    players_owe_house_cents = sum(
+        s.total_current_due_to_house_cents for s in sessions
+    )
+    admin_totals = {
+        "cash_in_cents": cash_in_cents,
+        "cash_out_cents": cash_out_cents,
+        "house_owes_players_cents": house_owes_players_cents,
+        "players_owe_house_cents": players_owe_house_cents,
+        "pending_carry_cents": pending_carry_total_cents,
+        "collected_cents": sum(s.total_debt_repayment_cents for s in sessions),
+        "written_off_cents": sum(s.total_writeoff_cents for s in sessions),
+        "net_book_position_cents": (
+            cash_in_cents
+            - cash_out_cents
+            + players_owe_house_cents
+            - house_owes_players_cents
+        ),
+    }
+
+    return render_template(
+        "admin_dashboard.html",
+        open_sessions=open_sessions,
+        recent_sessions=sessions,
+        recent_events=recent_events,
+        debt_entries=debt_entries,
+        live_session=live_session,
+        live_session_player_names=live_session_player_names,
+        live_session_no=live_session_no,
+        live_unresolved_count=live_unresolved_count,
+        pending_carry_items=pending_carry_items,
+        player_names=unique_player_names(events),
+        append_form=append_form,
+        event_types=ADMIN_EVENT_TYPES,
+        event_type_colors=event_type_colors,
+        event_type_labels=event_type_labels,
+        admin_today=datetime.now().date().isoformat(),
+        session_label=session_label,
+        admin_totals=admin_totals,
+        empty_session_count=empty_session_count,
+    )
diff --git a/routes/public.py b/routes/public.py
new file mode 100644
index 0000000..93bef28
--- /dev/null
+++ b/routes/public.py
@@ -0,0 +1,186 @@
+#!/usr/bin/env python3
+from __future__ import annotations
+
+from flask import Blueprint, flash, redirect, render_template, request, url_for
+from flask import current_app
+
+from charts import cumulative_profit_series, player_session_series, session_breakdown_series
+from config import ELIGIBLE_MIN_SESSIONS
+from services import (
+    apply_rank_changes,
+    build_leaderboard,
+    build_session_summaries,
+    session_events,
+)
+from storage import load_events
+from utils import session_label, session_sort_key
+
+public_bp = Blueprint("public", __name__)
+
+
+@public_bp.get("/")
+def home():
+    return redirect(url_for("public.leaderboard"))
+
+
+@public_bp.get("/leaderboard")
+def leaderboard():
+    events = load_events(current_app.config["DATA_PATH"])
+    all_sessions = build_session_summaries(events)
+    ordered_sessions = sorted(all_sessions, key=session_sort_key)
+
+    session_ids = [s.session_id for s in ordered_sessions]
+    selected_session_id = request.args.get("through_session", "").strip()
+    mode = request.args.get("mode", "eligible").strip()
+    if mode not in ("eligible", "all", "recent"):
+        mode = "eligible"
+    label = ""
+    cutoff_index = len(session_ids) - 1
+
+    if session_ids:
+        if selected_session_id in session_ids:
+            cutoff_index = session_ids.index(selected_session_id)
+            label = session_label(ordered_sessions[cutoff_index])
+        else:
+            label = session_label(ordered_sessions[cutoff_index])
+
+        filtered_sessions = ordered_sessions[: cutoff_index + 1]
+        previous_sessions = ordered_sessions[:cutoff_index]
+    else:
+        filtered_sessions = []
+        previous_sessions = []
+
+    board = build_leaderboard(filtered_sessions)
+    previous_board = build_leaderboard(previous_sessions)
+    board = apply_rank_changes(board, previous_board)
+
+    eligible_count = sum(1 for p in board if p.sessions_played >= ELIGIBLE_MIN_SESSIONS)
+    all_count = len(board)
+    recent_sessions_slice = filtered_sessions[-5:]
+    recent_count = len({
+        entry.player_name
+        for s in recent_sessions_slice
+        for entry in s.entries
+    })
+
+    if mode == "recent":
+        mode_board = build_leaderboard(recent_sessions_slice)
+        main_board = mode_board
+        provisional_board = []
+    elif mode == "eligible":
+        main_board = [p for p in board if p.sessions_played >= ELIGIBLE_MIN_SESSIONS]
+        provisional_board = [p for p in board if p.sessions_played < ELIGIBLE_MIN_SESSIONS]
+    else:
+        main_board = board
+        provisional_board = []
+
+    chart_data = cumulative_profit_series(filtered_sessions)
+    cash_paid_out_cents = sum(s.total_paid_out_cents for s in all_sessions)
+
+    return render_template(
+        "leaderboard.html",
+        main_board=main_board,
+        provisional_board=provisional_board,
+        mode=mode,
+        eligible_count=eligible_count,
+        all_count=all_count,
+        recent_count=recent_count,
+        eligible_min_sessions=ELIGIBLE_MIN_SESSIONS,
+        session_count=len(filtered_sessions),
+        total_session_count=len(all_sessions),
+        cash_paid_out_cents=cash_paid_out_cents,
+        chart_data=chart_data,
+        available_sessions=all_sessions,
+        selected_session_id=selected_session_id,
+        selected_session_label=(label if selected_session_id else "Latest session"),
+        selected_session_date=(
+            ordered_sessions[cutoff_index].session_date
+            if selected_session_id and session_ids
+            else ""
+        ),
+        session_label=session_label,
+    )
+
+
+@public_bp.get("/sessions")
+def sessions():
+    events = load_events(current_app.config["DATA_PATH"])
+    all_sessions = build_session_summaries(events)
+
+    return render_template(
+        "sessions.html",
+        sessions=all_sessions,
+        session_label=session_label,
+    )
+
+
+@public_bp.get("/sessions/<session_id>")
+def session_detail(session_id: str):
+    events = load_events(current_app.config["DATA_PATH"])
+    all_sessions = build_session_summaries(events)
+    target_session = next(
+        (s for s in all_sessions if s.session_id == session_id),
+        None,
+    )
+    if target_session is None:
+        flash("That session was not found.", "error")
+        return redirect(url_for("public.sessions"))
+
+    chronological_sessions = sorted(all_sessions, key=session_sort_key)
+    chronological_index = next(
+        index
+        for index, s in enumerate(chronological_sessions)
+        if s.session_id == session_id
+    )
+    target_session = chronological_sessions[chronological_index]
+    session_number = chronological_index + 1
+    prev_session = (
+        chronological_sessions[chronological_index - 1]
+        if chronological_index > 0
+        else None
+    )
+    next_session = (
+        chronological_sessions[chronological_index + 1]
+        if chronological_index < len(chronological_sessions) - 1
+        else None
+    )
+
+    return render_template(
+        "session_detail.html",
+        session=target_session,
+        next_session=next_session,
+        prev_session=prev_session,
+        session_number=session_number,
+        raw_events=session_events(events, session_id),
+        chart_data=session_breakdown_series(target_session),
+        session_label=session_label,
+    )
+
+
+@public_bp.get("/players/<player_name>")
+def player_detail(player_name: str):
+    events = load_events(current_app.config["DATA_PATH"])
+    all_sessions = build_session_summaries(events)
+    board = build_leaderboard(all_sessions)
+    player_stats = next(
+        (player for player in board if player.player_name == player_name), None
+    )
+    if player_stats is None:
+        flash("That player was not found.", "error")
+        return redirect(url_for("public.leaderboard"))
+
+    player_rank = next(
+        (
+            index
+            for index, ranked_player in enumerate(board, start=1)
+            if ranked_player.player_name == player_name
+        ),
+        None,
+    )
+    chart_data = player_session_series(all_sessions, player_name)
+    return render_template(
+        "player_detail.html",
+        player=player_stats,
+        player_rank=player_rank,
+        chart_data=chart_data,
+    )
diff --git a/services.py b/services.py
new file mode 100644
index 0000000..c364759
--- /dev/null
+++ b/services.py
@@ -0,0 +1,343 @@
+#!/usr/bin/env python3
+"""Domain logic: session building, leaderboard, and ledger helpers."""
+from __future__ import annotations
+
+from collections import defaultdict
+
+from models import PlayerStats, SessionEntry, SessionSummary
+from storage import EventRow
+from utils import entry_sort_key, net_result_bucket, session_sort_key
+
+SESSION_MARKER_TYPES = {"session_open", "session_close"}
+
+
+def build_session_summaries(events: list[EventRow]) -> list[SessionSummary]:
+    grouped: dict[tuple[str, str], SessionEntry] = {}
+    by_session: dict[str, list[SessionEntry]] = defaultdict(list)
+    session_status: dict[str, str] = {}
+    session_dates: dict[str, str] = {}
+    session_opened_at: dict[str, str] = {}
+
+    for event in events:
+        session_id = event["session_id"].strip() or event["session_date"].strip()
+        session_date = event["session_date"].strip()
+        event_type = event["event_type"].strip()
+
+        if not session_id or not session_date:
+            continue
+
+        session_dates[session_id] = session_date
+        session_opened_at.setdefault(session_id, event["created_at"])
+
+        if event_type == "session_open":
+            session_status[session_id] = "open"
+            continue
+
+        if event_type == "session_close":
+            session_status[session_id] = "closed"
+            continue
+
+        player_name = event["player_name"].strip()
+        if not player_name:
+            continue
+
+        key = (session_id, player_name)
+        if key not in grouped:
+            grouped[key] = SessionEntry(
+                session_id=session_id,
+                session_date=session_date,
+                player_name=player_name,
+            )
+
+        entry = grouped[key]
+
+        if event_type == "buyin":
+            entry.buy_in_cents += event["amount_cents"]
+        elif event_type == "front":
+            entry.front_cents += event["amount_cents"]
+        elif event_type == "front_collected":
+            entry.front_collected_cents += event["amount_cents"]
+        elif event_type == "debt_repayment":
+            entry.front_collected_cents += event["amount_cents"]
+        elif event_type == "front_writeoff":
+            entry.front_writeoff_cents += event["amount_cents"]
+        elif event_type == "writeoff":
+            entry.front_writeoff_cents += event["amount_cents"]
+        elif event_type == "rollover_in":
+            entry.rollover_in_cents += event["amount_cents"]
+        elif event_type == "payout_carry_in":
+            entry.payout_carry_in_cents += event["amount_cents"]
+        elif event_type == "cashout":
+            entry.cash_out_cents += event["amount_cents"]
+        elif event_type == "paid":
+            entry.paid_cents += event["amount_cents"]
+        elif event_type == "paid_out":
+            entry.paid_cents += event["amount_cents"]
+        elif event_type == "rollover_out":
+            entry.rollover_out_cents += event["amount_cents"]
+
+        if event["note"]:
+            entry.notes.append(event["note"])
+
+    for entry in grouped.values():
+        by_session[entry.session_id].append(entry)
+
+    sessions: list[SessionSummary] = []
+    for session_id, session_date in session_dates.items():
+        entries = sorted(
+            by_session.get(session_id, []),
+            key=lambda entry: entry.player_name.casefold(),
+        )
+
+        sessions.append(
+            SessionSummary(
+                session_id=session_id,
+                session_date=session_date,
+                entries=entries,
+                status=session_status.get(session_id, "closed"),
+                opened_at=session_opened_at.get(session_id, ""),
+            )
+        )
+
+    sessions.sort(key=session_sort_key, reverse=True)
+    return sessions
+
+
+def summarize_player_runs(entries: list[SessionEntry]) -> dict[str, int | str | None]:
+    ordered_entries = sorted(entries, key=entry_sort_key)
+
+    longest_win_streak = 0
+    longest_loss_streak = 0
+    current_run_wins = 0
+    current_run_losses = 0
+
+    best_entry: SessionEntry | None = None
+    worst_entry: SessionEntry | None = None
+
+    for entry in ordered_entries:
+        net = entry.net_cents
+        bucket = net_result_bucket(net)
+
+        if best_entry is None or net > best_entry.net_cents:
+            best_entry = entry
+
+        if worst_entry is None or net < worst_entry.net_cents:
+            worst_entry = entry
+
+        if bucket == "win":
+            current_run_wins += 1
+            current_run_losses = 0
+        elif bucket == "loss":
+            current_run_losses += 1
+            current_run_wins = 0
+        else:
+            current_run_wins = 0
+            current_run_losses = 0
+
+        longest_win_streak = max(longest_win_streak, current_run_wins)
+        longest_loss_streak = max(longest_loss_streak, current_run_losses)
+
+    current_win_streak = 0
+    current_loss_streak = 0
+
+    for entry in reversed(ordered_entries):
+        bucket = net_result_bucket(entry.net_cents)
+
+        if bucket == "win":
+            if current_loss_streak > 0:
+                break
+            current_win_streak += 1
+        elif bucket == "loss":
+            if current_win_streak > 0:
+                break
+            current_loss_streak += 1
+        else:
+            break
+
+    return {
+        "current_win_streak": current_win_streak,
+        "current_loss_streak": current_loss_streak,
+        "longest_win_streak": longest_win_streak,
+        "longest_loss_streak": longest_loss_streak,
+        "best_session_date": best_entry.session_date if best_entry else None,
+        "best_session_net_cents": best_entry.net_cents if best_entry else 0,
+        "worst_session_date": worst_entry.session_date if worst_entry else None,
+        "worst_session_net_cents": worst_entry.net_cents if worst_entry else 0,
+    }
+
+
+def build_leaderboard(sessions: list[SessionSummary]) -> list[PlayerStats]:
+    player_entries: dict[str, list[SessionEntry]] = defaultdict(list)
+    for session in sessions:
+        for entry in session.entries:
+            player_entries[entry.player_name].append(entry)
+
+    leaderboard: list[PlayerStats] = []
+    for player_name, entries in player_entries.items():
+        nets = [entry.net_cents for entry in entries]
+        run_summary = summarize_player_runs(entries)
+        wins = [value for value in nets if net_result_bucket(value) == "win"]
+        losses = [value for value in nets if net_result_bucket(value) == "loss"]
+
+        sessions_played = len(entries)
+        winning_sessions = len(wins)
+        losing_sessions = len(losses)
+        break_even_sessions = sessions_played - winning_sessions - losing_sessions
+        win_pct = (winning_sessions / sessions_played * 100) if sessions_played else 0.0
+        avg_win = round(sum(wins) / len(wins)) if wins else 0
+        avg_loss = (
+            round(sum(abs(value) for value in losses) / len(losses)) if losses else 0
+        )
+        biggest_win = max(wins) if wins else 0
+        biggest_loss = min(losses) if losses else 0
+
+        total_buy_in = sum(entry.buy_in_cents for entry in entries)
+        total_front = sum(entry.front_cents for entry in entries)
+        total_front_collected = sum(entry.debt_repayment_cents for entry in entries)
+        total_front_writeoff = sum(entry.writeoff_cents for entry in entries)
+        current_player_owes = sum(entry.player_owes_cents for entry in entries)
+        total_rollover_in = sum(entry.rollover_in_cents for entry in entries)
+        total_payout_carry_in = sum(entry.payout_carry_in_cents for entry in entries)
+        total_invested = sum(entry.invested_cents for entry in entries)
+        total_cash_out = sum(entry.cash_out_cents for entry in entries)
+        total_gross_payout = sum(entry.gross_payout_cents for entry in entries)
+        total_paid = sum(entry.paid_out_cents for entry in entries)
+        total_rollover_out = sum(entry.rollover_out_cents for entry in entries)
+        current_due_to_player = sum(entry.current_due_to_player_cents for entry in entries)
+        total_net = sum(entry.net_cents for entry in entries)
+        roi_pct = (total_net / total_invested * 100) if total_invested else 0.0
+
+        leaderboard.append(
+            PlayerStats(
+                player_name=player_name,
+                sessions_played=sessions_played,
+                winning_sessions=winning_sessions,
+                losing_sessions=losing_sessions,
+                break_even_sessions=break_even_sessions,
+                win_pct=win_pct,
+                avg_win_cents=avg_win,
+                avg_loss_cents=avg_loss,
+                biggest_win_cents=biggest_win,
+                biggest_loss_cents=biggest_loss,
+                total_buy_in_cents=total_buy_in,
+                total_front_cents=total_front,
+                total_front_collected_cents=total_front_collected,
+                total_front_writeoff_cents=total_front_writeoff,
+                current_player_owes_cents=current_player_owes,
+                total_rollover_in_cents=total_rollover_in,
+                total_payout_carry_in_cents=total_payout_carry_in,
+                total_invested_cents=total_invested,
+                total_cash_out_cents=total_cash_out,
+                total_gross_payout_cents=total_gross_payout,
+                total_paid_cents=total_paid,
+                total_rollover_out_cents=total_rollover_out,
+                current_due_to_player_cents=current_due_to_player,
+                total_net_cents=total_net,
+                roi_pct=roi_pct,
+                current_win_streak=run_summary["current_win_streak"],
+                current_loss_streak=run_summary["current_loss_streak"],
+                longest_win_streak=run_summary["longest_win_streak"],
+                longest_loss_streak=run_summary["longest_loss_streak"],
+                best_session_date=run_summary["best_session_date"],
+                best_session_net_cents=run_summary["best_session_net_cents"],
+                worst_session_date=run_summary["worst_session_date"],
+                worst_session_net_cents=run_summary["worst_session_net_cents"],
+            )
+        )
+
+    leaderboard.sort(
+        key=lambda player: (player.total_net_cents, player.total_cash_out_cents),
+        reverse=True,
+    )
+    return leaderboard
+
+
+def apply_rank_changes(
+    current_board: list[PlayerStats], prev_board: list[PlayerStats]
+) -> list[PlayerStats]:
+    prev_ranks = {p.player_name: i for i, p in enumerate(prev_board, start=1)}
+
+    for i, p in enumerate(current_board, start=1):
+        prev_rank = prev_ranks.get(p.player_name)
+
+        if prev_rank is None:
+            p.rank_change = 0
+        else:
+            p.rank_change = prev_rank - i
+
+    return current_board
+
+
+def next_session_id(sessions: list[SessionSummary], session_date: str) -> str:
+    matching = [s for s in sessions if s.session_date == session_date]
+
+    highest = 0
+    for s in matching:
+        if s.session_id == session_date:
+            highest = max(highest, 1)
+            continue
+
+        suffix = s.session_id.replace(f"{session_date}-", "")
+        if suffix.isdigit():
+            highest = max(highest, int(suffix))
+
+    return f"{session_date}-{highest + 1:02d}"
+
+
+def prunable_empty_session_ids(
+    events: list[EventRow], sessions: list[SessionSummary]
+) -> set[str]:
+    empty_session_ids = {s.session_id for s in sessions if len(s.entries) == 0}
+    session_event_map: dict[str, list[EventRow]] = {}
+
+    for event in events:
+        session_id = event["session_id"].strip() or event["session_date"].strip()
+        if session_id in empty_session_ids:
+            session_event_map.setdefault(session_id, []).append(event)
+
+    return {
+        session_id
+        for session_id, rows in session_event_map.items()
+        if rows
+        and all(
+            row["event_type"] in SESSION_MARKER_TYPES
+            and not row["player_name"].strip()
+            and row["amount_cents"] == 0
+            for row in rows
+        )
+    }
+
+
+def pending_payout_carry_items(sessions: list[SessionSummary]) -> list[dict[str, object]]:
+    carried_out: dict[str, int] = {}
+    carried_in: dict[str, int] = {}
+
+    for session_summary in sessions:
+        for entry in session_summary.entries:
+            carried_out[entry.player_name] = (
+                carried_out.get(entry.player_name, 0) + entry.rollover_out_cents
+            )
+            carried_in[entry.player_name] = (
+                carried_in.get(entry.player_name, 0)
+                + entry.rollover_in_cents
+                + entry.payout_carry_in_cents
+            )
+
+    items = []
+    for player_name, amount_out in carried_out.items():
+        pending_cents = amount_out - carried_in.get(player_name, 0)
+        if pending_cents > 0:
+            items.append({"player_name": player_name, "amount_cents": pending_cents})
+
+    return sorted(items, key=lambda item: str(item["player_name"]).casefold())
+
+
+def session_events(events: list[EventRow], session_id: str) -> list[EventRow]:
+    return [event for event in events if event["session_id"] == session_id]
+
+
+def unique_player_names(events: list[EventRow]) -> list[str]:
+    return sorted(
+        {event["player_name"] for event in events if event["player_name"].strip()},
+        key=str.casefold,
+    )
diff --git a/stats.py b/stats.py
deleted file mode 100644
index f89d4b2..0000000
--- a/stats.py
+++ /dev/null
@@ -1,857 +0,0 @@
-#!/usr/bin/env python3
-from __future__ import annotations
-
-from collections import defaultdict
-from dataclasses import dataclass, field
-from datetime import datetime
-from typing import Any
-
-from markupsafe import Markup
-
-from storage import EventRow
-
-PLAYER_PALETTE = [
-    "#9b8cf0",  # --line-1 violet
-    "#6fc093",  # --line-2 green
-    "#e0b15c",  # --line-3 gold
-    "#cf6f86",  # --line-4 pink
-    "#8f93c2",  # --line-5 lavender
-    "#7cb9e0",
-    "#f4a261",
-    "#a78bb0",
-    "#5cb8a0",
-    "#e58f3a",
-    "#84cc16",
-    "#06b6d4",
-]
-
-BREAK_EVEN_TOLERANCE_CENTS = 100
-
-
-def session_sequence_number(session_id: str, session_date: str) -> int:
-    suffix = session_id.strip().replace(f"{session_date.strip()}-", "", 1)
-
-    if session_id.strip() == session_date.strip():
-        return 1
-    if suffix.isdigit():
-        return int(suffix)
-    if suffix.lower().startswith("s") and suffix[1:].isdigit():
-        return int(suffix[1:])
-    return 9999
-
-
-@dataclass
-class SessionEntry:
-    session_id: str
-    session_date: str
-    player_name: str
-    buy_in_cents: int = 0
-    front_cents: int = 0
-    front_collected_cents: int = 0
-    front_writeoff_cents: int = 0
-    cash_out_cents: int = 0
-    paid_cents: int = 0
-    rollover_in_cents: int = 0
-    payout_carry_in_cents: int = 0
-    rollover_out_cents: int = 0
-    notes: list[str] = field(default_factory=list)
-
-    @property
-    def invested_cents(self) -> int:
-        # Poker performance: money/chips that entered play. This is intentionally
-        # broader than real cash because fronts and rollover-ins affect results.
-        return self.buy_in_cents + self.front_cents + self.rollover_in_cents
-
-    @property
-    def net_cents(self) -> int:
-        return self.cash_out_cents - self.invested_cents
-
-    @property
-    def paid_out_cents(self) -> int:
-        return self.paid_cents
-
-    @property
-    def debt_repayment_cents(self) -> int:
-        return self.front_collected_cents
-
-    @property
-    def writeoff_cents(self) -> int:
-        return self.front_writeoff_cents
-
-    @property
-    def gross_payout_cents(self) -> int:
-        # Settlement: cashout is a gross chip count/result, not proof that cash
-        # was paid. Fronts are recovered from the cashout before the player has
-        # a claim against the house.
-        return max(self.cash_out_cents - self.front_cents, 0)
-
-    @property
-    def player_owes_gross_cents(self) -> int:
-        return max(self.front_cents - self.cash_out_cents, 0)
-
-    @property
-    def gross_due_to_house_cents(self) -> int:
-        return self.player_owes_gross_cents
-
-    @property
-    def settled_to_player_cents(self) -> int:
-        # Rollover-out resolves the source session's payable even though it is
-        # not real cash out. The destination session records it as rollover-in.
-        return self.paid_out_cents + self.rollover_out_cents
-
-    @property
-    def current_due_to_player_cents(self) -> int:
-        return max(
-            self.gross_payout_cents
-            + self.payout_carry_in_cents
-            - self.settled_to_player_cents,
-            0,
-        )
-
-    @property
-    def settled_to_house_cents(self) -> int:
-        # Front collections are real cash in. Writeoffs are not cash, but they
-        # do resolve the receivable.
-        return self.debt_repayment_cents + self.writeoff_cents
-
-    @property
-    def current_due_to_house_cents(self) -> int:
-        return max(self.gross_due_to_house_cents - self.settled_to_house_cents, 0)
-
-    @property
-    def real_cash_in_cents(self) -> int:
-        return self.buy_in_cents + self.debt_repayment_cents
-
-    @property
-    def real_cash_out_cents(self) -> int:
-        return self.paid_out_cents
-
-    @property
-    def payout_due_cents(self) -> int:
-        return self.gross_payout_cents
-
-    @property
-    def payout_remaining_cents(self) -> int:
-        return self.current_due_to_player_cents
-
-    @property
-    def settled_cents(self) -> int:
-        return self.settled_to_player_cents
-
-    @property
-    def current_due_cents(self) -> int:
-        return self.current_due_to_player_cents
-
-    @property
-    def player_owes_cents(self) -> int:
-        return self.current_due_to_house_cents
-
-    @property
-    def raw_player_owes_cents(self) -> int:
-        return self.gross_due_to_house_cents
-
-    @property
-    def front_shortfall_cents(self) -> int:
-        return self.gross_due_to_house_cents
-
-    @property
-    def overpaid_front_cents(self) -> int:
-        return 0
-
-    @property
-    def front_writeoff_applied_cents(self) -> int:
-        return min(
-            self.writeoff_cents,
-            max(self.gross_due_to_house_cents - self.front_collected_applied_cents, 0),
-        )
-
-    @property
-    def front_collected_applied_cents(self) -> int:
-        return min(self.debt_repayment_cents, self.gross_due_to_house_cents)
-
-    @property
-    def front_resolved_cents(self) -> int:
-        return min(self.settled_to_house_cents, self.gross_due_to_house_cents)
-
-    @property
-    def payout_status(self) -> str:
-        if self.current_due_to_house_cents > 0:
-            return "owes"
-        if self.writeoff_cents > 0:
-            return "written_off"
-        if self.debt_repayment_cents > 0:
-            return "collected"
-        if self.gross_payout_cents <= 0:
-            return "none"
-        if self.current_due_to_player_cents <= 0:
-            if self.paid_out_cents < self.gross_payout_cents:
-                return "settled"
-            return "paid"
-        if self.settled_to_player_cents <= 0:
-            return "unpaid"
-        return "partial"
-
-
-@dataclass
-class SessionSummary:
-    session_id: str
-    session_date: str
-    entries: list[SessionEntry]
-    status: str = "closed"
-    opened_at: str = ""
-
-    @property
-    def is_open(self) -> bool:
-        return self.status == "open"
-
-    @property
-    def total_buy_in_cents(self) -> int:
-        return sum(entry.buy_in_cents for entry in self.entries)
-
-    @property
-    def total_front_cents(self) -> int:
-        return sum(entry.front_cents for entry in self.entries)
-
-    @property
-    def total_rollover_in_cents(self) -> int:
-        return sum(entry.rollover_in_cents for entry in self.entries)
-
-    @property
-    def total_payout_carry_in_cents(self) -> int:
-        return sum(entry.payout_carry_in_cents for entry in self.entries)
-
-    @property
-    def total_invested_cents(self) -> int:
-        return sum(entry.invested_cents for entry in self.entries)
-
-    @property
-    def total_cash_out_cents(self) -> int:
-        return sum(entry.cash_out_cents for entry in self.entries)
-
-    @property
-    def total_payout_due_cents(self) -> int:
-        return self.total_gross_payout_cents
-
-    @property
-    def total_remaining_cents(self) -> int:
-        return self.total_current_due_to_player_cents
-
-    @property
-    def total_net_cents(self) -> int:
-        return sum(entry.net_cents for entry in self.entries)
-
-    @property
-    def total_gross_payout_cents(self) -> int:
-        return sum(entry.gross_payout_cents for entry in self.entries)
-
-    @property
-    def total_paid_cents(self) -> int:
-        return self.total_paid_out_cents
-
-    @property
-    def total_paid_out_cents(self) -> int:
-        return sum(entry.paid_out_cents for entry in self.entries)
-
-    @property
-    def total_rollover_out_cents(self) -> int:
-        return sum(entry.rollover_out_cents for entry in self.entries)
-
-    @property
-    def total_settled_to_player_cents(self) -> int:
-        return sum(entry.settled_to_player_cents for entry in self.entries)
-
-    @property
-    def total_current_due_to_player_cents(self) -> int:
-        return sum(entry.current_due_to_player_cents for entry in self.entries)
-
-    @property
-    def total_player_owes_gross_cents(self) -> int:
-        return sum(entry.gross_due_to_house_cents for entry in self.entries)
-
-    @property
-    def total_gross_due_to_house_cents(self) -> int:
-        return self.total_player_owes_gross_cents
-
-    @property
-    def total_settled_to_house_cents(self) -> int:
-        return sum(entry.settled_to_house_cents for entry in self.entries)
-
-    @property
-    def total_current_due_to_house_cents(self) -> int:
-        return sum(entry.current_due_to_house_cents for entry in self.entries)
-
-    @property
-    def total_front_writeoff_cents(self) -> int:
-        return self.total_writeoff_cents
-
-    @property
-    def total_front_collected_cents(self) -> int:
-        return self.total_debt_repayment_cents
-
-    @property
-    def total_debt_repayment_cents(self) -> int:
-        return sum(entry.debt_repayment_cents for entry in self.entries)
-
-    @property
-    def total_writeoff_cents(self) -> int:
-        return sum(entry.writeoff_cents for entry in self.entries)
-
-    @property
-    def total_cash_in_cents(self) -> int:
-        return sum(entry.real_cash_in_cents for entry in self.entries)
-
-    @property
-    def total_real_cash_in_cents(self) -> int:
-        return self.total_cash_in_cents
-
-    @property
-    def total_real_cash_out_cents(self) -> int:
-        return self.total_paid_out_cents
-
-    @property
-    def total_banker_cash_in_cents(self) -> int:
-        return self.total_real_cash_in_cents
-
-    @property
-    def total_banker_cash_out_cents(self) -> int:
-        return self.total_real_cash_out_cents
-
-    @property
-    def total_current_due_cents(self) -> int:
-        return self.total_current_due_to_player_cents
-
-    @property
-    def total_player_owes_cents(self) -> int:
-        return self.total_current_due_to_house_cents
-
-    @property
-    def total_open_balance_cents(self) -> int:
-        return self.total_current_due_to_player_cents - self.total_current_due_to_house_cents
-
-    @property
-    def total_net_book_position_cents(self) -> int:
-        # Banker view: cash currently held, plus collectible receivables, minus
-        # unpaid player claims. Rollover-outs reduce payables but are not cash.
-        return (
-            self.total_cash_in_cents
-            - self.total_paid_out_cents
-            + self.total_current_due_to_house_cents
-            - self.total_current_due_to_player_cents
-        )
-
-
-@dataclass
-class PlayerStats:
-    player_name: str
-    sessions_played: int
-    winning_sessions: int
-    losing_sessions: int
-    break_even_sessions: int
-    win_pct: float
-    avg_win_cents: int
-    avg_loss_cents: int
-    biggest_win_cents: int
-    biggest_loss_cents: int
-    total_buy_in_cents: int
-    total_front_cents: int
-    total_front_collected_cents: int
-    total_front_writeoff_cents: int
-    current_player_owes_cents: int
-    total_rollover_in_cents: int
-    total_payout_carry_in_cents: int
-    total_invested_cents: int
-    total_cash_out_cents: int
-    total_gross_payout_cents: int
-    total_paid_cents: int
-    total_rollover_out_cents: int
-    current_due_to_player_cents: int
-    total_net_cents: int
-    roi_pct: float
-    current_win_streak: int
-    current_loss_streak: int
-    longest_win_streak: int
-    longest_loss_streak: int
-    best_session_date: str | None
-    best_session_net_cents: int
-    worst_session_date: str | None
-    worst_session_net_cents: int
-    rank_change: int = 0
-
-    @property
-    def total_debt_repayment_cents(self) -> int:
-        return self.total_front_collected_cents
-
-    @property
-    def total_writeoff_cents(self) -> int:
-        return self.total_front_writeoff_cents
-
-    @property
-    def current_due_to_house_cents(self) -> int:
-        return self.current_player_owes_cents
-
-    @property
-    def total_paid_out_cents(self) -> int:
-        return self.total_paid_cents
-
-    @property
-    def total_real_cash_out_cents(self) -> int:
-        return self.total_paid_out_cents
-
-    @property
-    def total_real_cash_in_cents(self) -> int:
-        return self.total_buy_in_cents + self.total_debt_repayment_cents
-
-
-def apply_rank_changes(
-    current_board: list[PlayerStats], prev_board: list[PlayerStats]
-) -> list[PlayerStats]:
-    prev_ranks = {p.player_name: i for i, p in enumerate(prev_board, start=1)}
-
-    for i, p in enumerate(current_board, start=1):
-        prev_rank = prev_ranks.get(p.player_name)
-
-        if prev_rank is None:
-            p.rank_change = 0
-        else:
-            p.rank_change = prev_rank - i
-
-    return current_board
-
-
-def cents_to_dollars(cents: int) -> Markup:
-    value = cents / 100
-    return Markup(f'<span class="currency-symbol">$</span>{value:,.2f}')
-
-
-def session_sort_key(session: SessionSummary) -> tuple[str, int, str, str]:
-    session_id = session.session_id.strip()
-    session_date = session.session_date.strip()
-    return (
-        session_date,
-        session_sequence_number(session_id, session_date),
-        session.opened_at,
-        session_id,
-    )
-
-
-def entry_sort_key(entry: SessionEntry) -> tuple[str, int, str]:
-    return (
-        entry.session_date,
-        session_sequence_number(entry.session_id, entry.session_date),
-        entry.session_id,
-    )
-
-
-def session_display_suffix(session_id: str, session_date: str) -> str:
-    suffix = session_id.strip().replace(f"{session_date.strip()}-", "", 1)
-
-    if session_id.strip() == session_date.strip():
-        return ""
-    if suffix.isdigit():
-        return f"S{int(suffix)}"
-    if suffix.lower().startswith("s") and suffix[1:].isdigit():
-        return f"S{int(suffix[1:])}"
-    return suffix
-
-
-def session_chart_label(session: SessionSummary) -> str:
-    suffix = session_display_suffix(session.session_id, session.session_date)
-    date_label = safe_date_label(session.session_date)
-    return f"{date_label} · {suffix}" if suffix else date_label
-
-
-def safe_date_label(raw_date: str) -> str:
-    try:
-        return datetime.strptime(raw_date, "%Y-%m-%d").strftime("%b %d, %Y")
-    except ValueError:
-        return raw_date
-
-
-def session_label(session: SessionSummary) -> str:
-    return session_chart_label(session)
-
-
-def color_for_name(name: str, names: list[str]) -> str:
-    try:
-        index = sorted(names, key=str.casefold).index(name)
-    except ValueError:
-        index = abs(hash(name))
-    return PLAYER_PALETTE[index % len(PLAYER_PALETTE)]
-
-
-def net_result_bucket(value_cents: int) -> str:
-    if value_cents > BREAK_EVEN_TOLERANCE_CENTS:
-        return "win"
-    if value_cents < -BREAK_EVEN_TOLERANCE_CENTS:
-        return "loss"
-    return "even"
-
-
-def net_tone(value_cents: int) -> str:
-    bucket = net_result_bucket(value_cents)
-
-    if bucket == "win":
-        return "#6fc093"  # --pos
-    if bucket == "loss":
-        return "#e0758a"  # --neg
-    return "#84828e"      # --muted-2
-
-
-def build_session_summaries(events: list[EventRow]) -> list[SessionSummary]:
-    grouped: dict[tuple[str, str], SessionEntry] = {}
-    by_session: dict[str, list[SessionEntry]] = defaultdict(list)
-    session_status: dict[str, str] = {}
-    session_dates: dict[str, str] = {}
-    session_opened_at: dict[str, str] = {}
-
-    for event in events:
-        session_id = event["session_id"].strip() or event["session_date"].strip()
-        session_date = event["session_date"].strip()
-        event_type = event["event_type"].strip()
-
-        if not session_id or not session_date:
-            continue
-
-        session_dates[session_id] = session_date
-        session_opened_at.setdefault(session_id, event["created_at"])
-
-        if event_type == "session_open":
-            session_status[session_id] = "open"
-            continue
-
-        if event_type == "session_close":
-            session_status[session_id] = "closed"
-            continue
-
-        player_name = event["player_name"].strip()
-        if not player_name:
-            continue
-
-        key = (session_id, player_name)
-        if key not in grouped:
-            grouped[key] = SessionEntry(
-                session_id=session_id,
-                session_date=session_date,
-                player_name=player_name,
-            )
-
-        entry = grouped[key]
-
-        if event_type == "buyin":
-            entry.buy_in_cents += event["amount_cents"]
-        elif event_type == "front":
-            entry.front_cents += event["amount_cents"]
-        elif event_type == "front_collected":
-            entry.front_collected_cents += event["amount_cents"]
-        elif event_type == "debt_repayment":
-            entry.front_collected_cents += event["amount_cents"]
-        elif event_type == "front_writeoff":
-            entry.front_writeoff_cents += event["amount_cents"]
-        elif event_type == "writeoff":
-            entry.front_writeoff_cents += event["amount_cents"]
-        elif event_type == "rollover_in":
-            entry.rollover_in_cents += event["amount_cents"]
-        elif event_type == "payout_carry_in":
-            entry.payout_carry_in_cents += event["amount_cents"]
-        elif event_type == "cashout":
-            entry.cash_out_cents += event["amount_cents"]
-        elif event_type == "paid":
-            entry.paid_cents += event["amount_cents"]
-        elif event_type == "paid_out":
-            entry.paid_cents += event["amount_cents"]
-        elif event_type == "rollover_out":
-            entry.rollover_out_cents += event["amount_cents"]
-
-        if event["note"]:
-            entry.notes.append(event["note"])
-
-    for entry in grouped.values():
-        by_session[entry.session_id].append(entry)
-
-    sessions: list[SessionSummary] = []
-    for session_id, session_date in session_dates.items():
-        entries = sorted(
-            by_session.get(session_id, []),
-            key=lambda entry: entry.player_name.casefold(),
-        )
-
-        sessions.append(
-            SessionSummary(
-                session_id=session_id,
-                session_date=session_date,
-                entries=entries,
-                status=session_status.get(session_id, "closed"),
-                opened_at=session_opened_at.get(session_id, ""),
-            )
-        )
-
-    sessions.sort(key=session_sort_key, reverse=True)
-    return sessions
-
-
-def summarize_player_runs(entries: list[SessionEntry]) -> dict[str, int | str | None]:
-    ordered_entries = sorted(entries, key=entry_sort_key)
-
-    longest_win_streak = 0
-    longest_loss_streak = 0
-    current_run_wins = 0
-    current_run_losses = 0
-
-    best_entry: SessionEntry | None = None
-    worst_entry: SessionEntry | None = None
-
-    for entry in ordered_entries:
-        net = entry.net_cents
-        bucket = net_result_bucket(net)
-
-        if best_entry is None or net > best_entry.net_cents:
-            best_entry = entry
-
-        if worst_entry is None or net < worst_entry.net_cents:
-            worst_entry = entry
-
-        if bucket == "win":
-            current_run_wins += 1
-            current_run_losses = 0
-        elif bucket == "loss":
-            current_run_losses += 1
-            current_run_wins = 0
-        else:
-            current_run_wins = 0
-            current_run_losses = 0
-
-        longest_win_streak = max(longest_win_streak, current_run_wins)
-        longest_loss_streak = max(longest_loss_streak, current_run_losses)
-
-    current_win_streak = 0
-    current_loss_streak = 0
-
-    for entry in reversed(ordered_entries):
-        bucket = net_result_bucket(entry.net_cents)
-
-        if bucket == "win":
-            if current_loss_streak > 0:
-                break
-            current_win_streak += 1
-        elif bucket == "loss":
-            if current_win_streak > 0:
-                break
-            current_loss_streak += 1
-        else:
-            break
-
-    return {
-        "current_win_streak": current_win_streak,
-        "current_loss_streak": current_loss_streak,
-        "longest_win_streak": longest_win_streak,
-        "longest_loss_streak": longest_loss_streak,
-        "best_session_date": best_entry.session_date if best_entry else None,
-        "best_session_net_cents": best_entry.net_cents if best_entry else 0,
-        "worst_session_date": worst_entry.session_date if worst_entry else None,
-        "worst_session_net_cents": worst_entry.net_cents if worst_entry else 0,
-    }
-
-
-def build_leaderboard(sessions: list[SessionSummary]) -> list[PlayerStats]:
-    player_entries: dict[str, list[SessionEntry]] = defaultdict(list)
-    for session in sessions:
-        for entry in session.entries:
-            player_entries[entry.player_name].append(entry)
-
-    leaderboard: list[PlayerStats] = []
-    for player_name, entries in player_entries.items():
-        nets = [entry.net_cents for entry in entries]
-        run_summary = summarize_player_runs(entries)
-        wins = [value for value in nets if net_result_bucket(value) == "win"]
-        losses = [value for value in nets if net_result_bucket(value) == "loss"]
-
-        sessions_played = len(entries)
-        winning_sessions = len(wins)
-        losing_sessions = len(losses)
-        break_even_sessions = sessions_played - winning_sessions - losing_sessions
-        win_pct = (winning_sessions / sessions_played * 100) if sessions_played else 0.0
-        avg_win = round(sum(wins) / len(wins)) if wins else 0
-        avg_loss = (
-            round(sum(abs(value) for value in losses) / len(losses)) if losses else 0
-        )
-        biggest_win = max(wins) if wins else 0
-        biggest_loss = min(losses) if losses else 0
-
-        total_buy_in = sum(entry.buy_in_cents for entry in entries)
-        total_front = sum(entry.front_cents for entry in entries)
-        total_front_collected = sum(entry.debt_repayment_cents for entry in entries)
-        total_front_writeoff = sum(entry.writeoff_cents for entry in entries)
-        current_player_owes = sum(entry.player_owes_cents for entry in entries)
-        total_rollover_in = sum(entry.rollover_in_cents for entry in entries)
-        total_payout_carry_in = sum(entry.payout_carry_in_cents for entry in entries)
-        total_invested = sum(entry.invested_cents for entry in entries)
-        total_cash_out = sum(entry.cash_out_cents for entry in entries)
-        total_gross_payout = sum(entry.gross_payout_cents for entry in entries)
-        total_paid = sum(entry.paid_out_cents for entry in entries)
-        total_rollover_out = sum(entry.rollover_out_cents for entry in entries)
-        current_due_to_player = sum(entry.current_due_to_player_cents for entry in entries)
-        total_net = sum(entry.net_cents for entry in entries)
-        roi_pct = (total_net / total_invested * 100) if total_invested else 0.0
-
-        leaderboard.append(
-            PlayerStats(
-                player_name=player_name,
-                sessions_played=sessions_played,
-                winning_sessions=winning_sessions,
-                losing_sessions=losing_sessions,
-                break_even_sessions=break_even_sessions,
-                win_pct=win_pct,
-                avg_win_cents=avg_win,
-                avg_loss_cents=avg_loss,
-                biggest_win_cents=biggest_win,
-                biggest_loss_cents=biggest_loss,
-                total_buy_in_cents=total_buy_in,
-                total_front_cents=total_front,
-                total_front_collected_cents=total_front_collected,
-                total_front_writeoff_cents=total_front_writeoff,
-                current_player_owes_cents=current_player_owes,
-                total_rollover_in_cents=total_rollover_in,
-                total_payout_carry_in_cents=total_payout_carry_in,
-                total_invested_cents=total_invested,
-                total_cash_out_cents=total_cash_out,
-                total_gross_payout_cents=total_gross_payout,
-                total_paid_cents=total_paid,
-                total_rollover_out_cents=total_rollover_out,
-                current_due_to_player_cents=current_due_to_player,
-                total_net_cents=total_net,
-                roi_pct=roi_pct,
-                current_win_streak=run_summary["current_win_streak"],
-                current_loss_streak=run_summary["current_loss_streak"],
-                longest_win_streak=run_summary["longest_win_streak"],
-                longest_loss_streak=run_summary["longest_loss_streak"],
-                best_session_date=run_summary["best_session_date"],
-                best_session_net_cents=run_summary["best_session_net_cents"],
-                worst_session_date=run_summary["worst_session_date"],
-                worst_session_net_cents=run_summary["worst_session_net_cents"],
-            )
-        )
-
-    leaderboard.sort(
-        key=lambda player: (player.total_net_cents, player.total_cash_out_cents),
-        reverse=True,
-    )
-    return leaderboard
-
-
-def cumulative_profit_series(sessions: list[SessionSummary]) -> dict[str, object]:
-    ordered_sessions = sorted(sessions, key=session_sort_key)
-
-    all_players = sorted(
-        {
-            entry.player_name
-            for session in ordered_sessions
-            for entry in session.entries
-        },
-        key=str.casefold,
-    )
-
-    labels = [session_chart_label(session) for session in ordered_sessions]
-    datasets = []
-
-    for player_name in all_players:
-        running_total = 0
-        seen_player = False
-        sessions_played = 0
-        data: list[float | None] = []
-
-        for session in ordered_sessions:
-            matching_entry = next(
-                (
-                    entry
-                    for entry in session.entries
-                    if entry.player_name == player_name
-                ),
-                None,
-            )
-
-            if matching_entry is None:
-                data.append(running_total / 100 if seen_player else None)
-                continue
-
-            seen_player = True
-            sessions_played += 1
-            running_total += matching_entry.net_cents
-            data.append(round(running_total / 100, 2))
-
-        datasets.append(
-            {
-                "label": player_name,
-                "data": data,
-                "sessions_played": sessions_played,
-            }
-        )
-
-    return {
-        "labels": labels,
-        "datasets": datasets,
-    }
-
-
-def player_session_series(
-    sessions: list[SessionSummary], player_name: str
-) -> dict[str, Any]:
-    ordered_sessions = sorted(sessions, key=session_sort_key)
-    labels: list[str] = []
-    net_values: list[float] = []
-    cumulative_values: list[float] = []
-    running_total = 0
-
-    all_player_names = sorted(
-        {
-            entry.player_name
-            for session in ordered_sessions
-            for entry in session.entries
-        },
-        key=str.casefold,
-    )
-
-    for session in ordered_sessions:
-        matching_entry = next(
-            (entry for entry in session.entries if entry.player_name == player_name),
-            None,
-        )
-        if matching_entry is None:
-            continue
-
-        labels.append(session_chart_label(session))
-        net_values.append(round(matching_entry.net_cents / 100, 2))
-        running_total += matching_entry.net_cents
-        cumulative_values.append(round(running_total / 100, 2))
-
-    return {
-        "labels": labels,
-        "color": color_for_name(player_name, all_player_names),
-        "net_values": net_values,
-        "net_colors": [net_tone(round(value * 100)) for value in net_values],
-        "cumulative_values": cumulative_values,
-    }
-
-
-def session_breakdown_series(session: SessionSummary) -> dict[str, Any]:
-    ordered_entries = sorted(
-        session.entries,
-        key=lambda entry: (entry.net_cents, entry.player_name.casefold()),
-        reverse=True,
-    )
-
-    return {
-        "labels": [entry.player_name for entry in ordered_entries],
-        "net_values": [round(entry.net_cents / 100, 2) for entry in ordered_entries],
-        "net_colors": [net_tone(entry.net_cents) for entry in ordered_entries],
-    }
-
-
-def session_events(events: list[EventRow], session_id: str) -> list[EventRow]:
-    return [event for event in events if event["session_id"] == session_id]
-
-
-def unique_player_names(events: list[EventRow]) -> list[str]:
-    return sorted(
-        {event["player_name"] for event in events if event["player_name"].strip()},
-        key=str.casefold,
-    )
diff --git a/templates/admin_dashboard.html b/templates/admin_dashboard.html
index 6064d90..975cd46 100644
--- a/templates/admin_dashboard.html
+++ b/templates/admin_dashboard.html
@@ -45,7 +45,7 @@
 <!-- Admin workspace -->
 <div class="admin-workspace">
 
-    <form class="panel append" method="post" action="{{ url_for('admin_dashboard') }}">
+    <form class="panel append" method="post" action="{{ url_for('admin.dashboard') }}">
         <div class="panel__head">
             <h2 class="panel__title">Append ledger event</h2>
             <span class="panel__tag">fast entry</span>
@@ -104,7 +104,7 @@
                     <span>{{ item.player_name }}</span>
                     <strong>{{ item.amount_cents | money }}</strong>
                     {% if live_session and item.player_name in live_session_player_names %}
-                    <form method="post" action="{{ url_for('admin_apply_payout_carry_in') }}">
+                    <form method="post" action="{{ url_for('admin.apply_payout_carry_in') }}">
                         <input type="hidden" name="session_id" value="{{ live_session.session_id }}">
                         <input type="hidden" name="player_name" value="{{ item.player_name }}">
                         <button class="table-action-button" type="submit">Apply</button>
@@ -146,7 +146,7 @@
                 <div><div class="micro">Seated</div><div class="mono16">{{ live_session.entries|length }}</div></div>
                 <div><div class="micro">Open</div><div class="mono16 mono16--warn">{{ live_unresolved_count }}</div></div>
             </div>
-            <form method="post" action="{{ url_for('admin_session_state') }}"
+            <form method="post" action="{{ url_for('admin.session_state') }}"
                   {% if live_unresolved_count > 0 %}data-close-warning="true"{% endif %}>
                 <input type="hidden" name="session_id" value="{{ live_session.session_id }}">
                 <button class="btn-close" type="submit" name="state" value="closed">Close session</button>
@@ -167,12 +167,12 @@
         </div>
         {% endif %}
 
-        <form method="post" action="{{ url_for('admin_open_session') }}">
+        <form method="post" action="{{ url_for('admin.open_session') }}">
             <input type="hidden" name="session_date" value="{{ admin_today }}">
             <button class="btn-newsession {{ 'btn-newsession--primary' if not live_session else '' }}" type="submit">+ Open new session</button>
         </form>
 
-        <form method="post" action="{{ url_for('admin_prune_empty_sessions') }}" class="prune-session-form">
+        <form method="post" action="{{ url_for('admin.prune_empty_sessions') }}" class="prune-session-form">
             <button class="secondary-button" type="submit" {% if empty_session_count == 0 %}disabled{% endif %}>
                 Prune empty sessions{% if empty_session_count > 0 %} ({{ empty_session_count }}){% endif %}
             </button>
@@ -182,9 +182,9 @@
     <div class="panel panel--pad import-export-panel">
         <h2 class="panel__title" style="margin:0 0 4px">Import / export</h2>
         <p class="csv__desc">Back up or migrate the raw event ledger.</p>
-        <form method="post" action="{{ url_for('admin_import_csv') }}" enctype="multipart/form-data" class="import-form">
+        <form method="post" action="{{ url_for('admin.import_csv') }}" enctype="multipart/form-data" class="import-form">
             <div class="csv__btns">
-                <a class="csv-btn-ghost" href="{{ url_for('admin_export_csv') }}">&darr; Export CSV</a>
+                <a class="csv-btn-ghost" href="{{ url_for('admin.export_csv') }}">&darr; Export CSV</a>
                 <label class="csv-btn-ghost" for="csvTopImport">&uarr; Import CSV</label>
             </div>
             <input id="csvTopImport" type="file" accept=".csv,text/csv" name="csv_file" hidden onchange="this.form.submit()">
@@ -223,7 +223,7 @@
         </div>
 
         <div class="debt-action-grid">
-            <form class="form-card debt-form" method="post" action="{{ url_for('admin_collect_front') }}">
+            <form class="form-card debt-form" method="post" action="{{ url_for('admin.collect_front') }}">
                 <h3>Collect debt</h3>
                 <label>
                     <span>Outstanding debt</span>
@@ -248,7 +248,7 @@
                 <button class="primary-button" type="submit">Mark collected</button>
             </form>
 
-            <form class="form-card debt-form" method="post" action="{{ url_for('admin_write_off_front') }}">
+            <form class="form-card debt-form" method="post" action="{{ url_for('admin.write_off_front') }}">
                 <h3>Write off debt</h3>
                 <label>
                     <span>Outstanding debt</span>
@@ -308,7 +308,7 @@
                 <tbody>
                     {% for s in recent_sessions %}
                     <tr>
-                        <td><a href="{{ url_for('session_detail', session_id=s.session_id) }}">{{ session_label(s) }}</a></td>
+                        <td><a href="{{ url_for('public.session_detail', session_id=s.session_id) }}">{{ session_label(s) }}</a></td>
                         <td style="font-family:var(--font-mono);color:var(--num)">{{ s.entries|length }}</td>
                         <td style="font-family:var(--font-mono);color:var(--num)">{{ s.total_banker_cash_in_cents | money }}</td>
                         <td style="font-family:var(--font-mono);color:var(--pos)">{{ s.total_banker_cash_out_cents | money }}</td>
@@ -317,7 +317,7 @@
                         <td class="{% if s.total_net_book_position_cents > 0 %}positive{% elif s.total_net_book_position_cents < 0 %}negative{% endif %}" style="font-family:var(--font-mono)">{{ s.total_net_book_position_cents | money }}</td>
                         <td><span class="status-badge status-{{ s.status }}">{{ s.status }}</span></td>
                         <td>
-                            <form method="post" action="{{ url_for('admin_session_state') }}" class="inline-action-form">
+                            <form method="post" action="{{ url_for('admin.session_state') }}" class="inline-action-form">
                                 <input type="hidden" name="session_id" value="{{ s.session_id }}">
                                 {% if s.status == "open" %}
                                 <button class="table-action-button" type="submit" name="state" value="closed">Close</button>
diff --git a/templates/base.html b/templates/base.html
index 4949542..4188485 100644
--- a/templates/base.html
+++ b/templates/base.html
@@ -11,23 +11,23 @@
 <body>
     <header class="topbar">
         <div class="topbar__inner">
-            <a class="brand" href="{{ url_for('leaderboard') }}">
+            <a class="brand" href="{{ url_for('public.leaderboard') }}">
                 <span class="brand__mark"></span>
                 <span class="brand__name">myboker.org</span>
             </a>
             <nav class="mainnav">
-                <a class="navlink {{ 'is-active' if request.endpoint == 'leaderboard' }}" href="{{ url_for('leaderboard') }}">Leaderboard</a>
-                <a class="navlink {{ 'is-active' if request.endpoint in ('sessions', 'session_detail') }}" href="{{ url_for('sessions') }}">Sessions</a>
+                <a class="navlink {{ 'is-active' if request.endpoint == 'public.leaderboard' }}" href="{{ url_for('public.leaderboard') }}">Leaderboard</a>
+                <a class="navlink {{ 'is-active' if request.endpoint in ('public.sessions', 'public.session_detail') }}" href="{{ url_for('public.sessions') }}">Sessions</a>
                 {% if is_admin %}
-                    <a class="navlink {{ 'is-active' if request.endpoint == 'admin_dashboard' }}" href="{{ url_for('admin_dashboard') }}">Admin</a>
+                    <a class="navlink {{ 'is-active' if request.endpoint == 'admin.dashboard' }}" href="{{ url_for('admin.dashboard') }}">Admin</a>
                 {% else %}
-                    <a class="navlink {{ 'is-active' if request.endpoint == 'admin_login' }}" href="{{ url_for('admin_login') }}">Admin</a>
+                    <a class="navlink {{ 'is-active' if request.endpoint == 'admin.login' }}" href="{{ url_for('admin.login') }}">Admin</a>
                 {% endif %}
             </nav>
             <span class="topbar__spacer"></span>
             {% if is_admin %}
                 <div class="topbar__admin-actions">
-                    <form method="post" action="{{ url_for('admin_logout') }}" style="margin:0">
+                    <form method="post" action="{{ url_for('admin.logout') }}" style="margin:0">
                         <button class="btn btn--ghost btn--sm" type="submit">Logout</button>
                     </form>
                 </div>
diff --git a/templates/leaderboard.html b/templates/leaderboard.html
index d39249b..e07dcf5 100644
--- a/templates/leaderboard.html
+++ b/templates/leaderboard.html
@@ -72,7 +72,7 @@
                 {% endfor %}
             </select>
             {% if selected_session_id %}
-            <a class="btn btn--ghost btn--sm" href="{{ url_for('leaderboard', mode=mode) }}">Reset</a>
+            <a class="btn btn--ghost btn--sm" href="{{ url_for('public.leaderboard', mode=mode) }}">Reset</a>
             {% endif %}
         </form>
     </div>
@@ -101,12 +101,12 @@
             {% for player in main_board %}
             {% set idx = loop.index %}
             <tr data-player-row="true" data-original-rank="{{ idx }}"
-                onclick="window.location='{{ url_for('player_detail', player_name=player.player_name) }}'">
+                onclick="window.location='{{ url_for('public.player_detail', player_name=player.player_name) }}'">
                 <td class="col-rank" data-sort-value="{{ idx }}">
                     <span class="rank-num {{ 'rank-1' if idx==1 else 'rank-2' if idx==2 else 'rank-3' if idx==3 else '' }}" data-rank-cell>#{{ idx }}</span>
                 </td>
                 <td class="col-player" data-sort-value="{{ player.player_name|lower }}">
-                    <a href="{{ url_for('player_detail', player_name=player.player_name) }}">{{ player.player_name }}</a>
+                    <a href="{{ url_for('public.player_detail', player_name=player.player_name) }}">{{ player.player_name }}</a>
                 </td>
                 <td class="col-rank-delta" data-sort-value="{{ player.rank_change }}">
                     {% if player.rank_change > 0 %}
@@ -146,7 +146,7 @@
     </div>
     <div class="provisional-grid">
         {% for player in provisional_board %}
-        <a class="provisional-card" href="{{ url_for('player_detail', player_name=player.player_name) }}"
+        <a class="provisional-card" href="{{ url_for('public.player_detail', player_name=player.player_name) }}"
            style="display:block;text-decoration:none;">
             <p class="provisional-card__name">{{ player.player_name }}</p>
             <div class="provisional-card__meta">
diff --git a/templates/session_detail.html b/templates/session_detail.html
index 19bad72..7b6f1bd 100644
--- a/templates/session_detail.html
+++ b/templates/session_detail.html
@@ -4,15 +4,15 @@
 {% block content %}
 
 <div class="breadcrumb">
-    <a href="{{ url_for('sessions') }}">Sessions</a>
+    <a href="{{ url_for('public.sessions') }}">Sessions</a>
     <span class="breadcrumb__sep">/</span>
     <span>{{ session_label(session) }}</span>
     <span style="flex:1"></span>
     {% if prev_session %}
-    <a class="btn btn--ghost btn--sm" href="{{ url_for('session_detail', session_id=prev_session.session_id) }}">← Prev</a>
+    <a class="btn btn--ghost btn--sm" href="{{ url_for('public.session_detail', session_id=prev_session.session_id) }}">← Prev</a>
     {% endif %}
     {% if next_session %}
-    <a class="btn btn--ghost btn--sm" href="{{ url_for('session_detail', session_id=next_session.session_id) }}">Next →</a>
+    <a class="btn btn--ghost btn--sm" href="{{ url_for('public.session_detail', session_id=next_session.session_id) }}">Next →</a>
     {% endif %}
 </div>
 
@@ -111,9 +111,9 @@
             </thead>
             <tbody>
                 {% for entry in session.entries %}
-                <tr onclick="window.location='{{ url_for('player_detail', player_name=entry.player_name) }}'">
+                <tr onclick="window.location='{{ url_for('public.player_detail', player_name=entry.player_name) }}'">
                     <td class="col-player">
-                        <a href="{{ url_for('player_detail', player_name=entry.player_name) }}">{{ entry.player_name }}</a>
+                        <a href="{{ url_for('public.player_detail', player_name=entry.player_name) }}">{{ entry.player_name }}</a>
                     </td>
                     <td>{{ entry.invested_cents | money }}</td>
                     <td>{{ entry.cash_out_cents | money }}</td>
diff --git a/templates/sessions.html b/templates/sessions.html
index 6cfd272..1fa76f9 100644
--- a/templates/sessions.html
+++ b/templates/sessions.html
@@ -29,9 +29,9 @@
             </thead>
             <tbody>
                 {% for s in sessions %}
-                <tr onclick="window.location='{{ url_for('session_detail', session_id=s.session_id) }}'">
+                <tr onclick="window.location='{{ url_for('public.session_detail', session_id=s.session_id) }}'">
                     <td class="col-left">
-                        <a href="{{ url_for('session_detail', session_id=s.session_id) }}">{{ session_label(s) }}</a>
+                        <a href="{{ url_for('public.session_detail', session_id=s.session_id) }}">{{ session_label(s) }}</a>
                     </td>
                     <td><span class="badge badge--{{ s.status }}">{{ s.status }}</span></td>
                     <td>{{ s.entries|length }}</td>
diff --git a/tests/test_accounting.py b/tests/test_accounting.py
index 0ccb7ee..f4e2c8c 100644
--- a/tests/test_accounting.py
+++ b/tests/test_accounting.py
@@ -3,13 +3,14 @@ import tempfile
 import unittest
 
 import app as app_module
-from stats import (
+from charts import player_session_series
+from services import (
     build_leaderboard,
     build_session_summaries,
-    player_session_series,
-    session_sort_key,
+    pending_payout_carry_items,
 )
 from storage import load_events, write_events
+from utils import session_sort_key
 
 
 def cents(amount: float) -> int:
@@ -202,13 +203,13 @@ class AccountingTests(unittest.TestCase):
         with tempfile.TemporaryDirectory() as tmpdir:
             data_path = Path(tmpdir) / "entries.csv"
             write_events(data_path, rows)
-            original_path = app_module.DATA_PATH
-            app_module.DATA_PATH = data_path
+            original_path = app_module.app.config["DATA_PATH"]
+            app_module.app.config["DATA_PATH"] = data_path
 
             try:
                 sessions = build_session_summaries(load_events(data_path))
                 self.assertEqual(
-                    app_module.pending_payout_carry_items(sessions),
+                    pending_payout_carry_items(sessions),
                     [{"player_name": "A", "amount_cents": cents(5)}],
                 )
 
@@ -221,7 +222,7 @@ class AccountingTests(unittest.TestCase):
                         data={"session_id": "s2", "player_name": "A"},
                     )
             finally:
-                app_module.DATA_PATH = original_path
+                app_module.app.config["DATA_PATH"] = original_path
 
             self.assertEqual(response.status_code, 302)
             updated_sessions = build_session_summaries(load_events(data_path))
@@ -260,8 +261,8 @@ class AccountingTests(unittest.TestCase):
         with tempfile.TemporaryDirectory() as tmpdir:
             data_path = Path(tmpdir) / "entries.csv"
             write_events(data_path, rows)
-            original_path = app_module.DATA_PATH
-            app_module.DATA_PATH = data_path
+            original_path = app_module.app.config["DATA_PATH"]
+            app_module.app.config["DATA_PATH"] = data_path
 
             try:
                 with app_module.app.test_client() as client:
@@ -270,7 +271,7 @@ class AccountingTests(unittest.TestCase):
 
                     response = client.post("/admin/prune-empty-sessions")
             finally:
-                app_module.DATA_PATH = original_path
+                app_module.app.config["DATA_PATH"] = original_path
 
             self.assertEqual(response.status_code, 302)
             remaining = load_events(data_path)
diff --git a/utils.py b/utils.py
new file mode 100644
index 0000000..badd71f
--- /dev/null
+++ b/utils.py
@@ -0,0 +1,84 @@
+#!/usr/bin/env python3
+"""Formatting, sorting, and classification helpers shared across the app."""
+from __future__ import annotations
+
+from datetime import datetime
+
+from markupsafe import Markup
+
+from models import SessionEntry, SessionSummary
+
+BREAK_EVEN_TOLERANCE_CENTS = 100
+
+
+def cents_to_dollars(cents: int) -> Markup:
+    value = cents / 100
+    return Markup(f'<span class="currency-symbol">$</span>{value:,.2f}')
+
+
+def safe_date_label(raw_date: str) -> str:
+    try:
+        return datetime.strptime(raw_date, "%Y-%m-%d").strftime("%b %d, %Y")
+    except ValueError:
+        return raw_date
+
+
+def session_sequence_number(session_id: str, session_date: str) -> int:
+    suffix = session_id.strip().replace(f"{session_date.strip()}-", "", 1)
+
+    if session_id.strip() == session_date.strip():
+        return 1
+    if suffix.isdigit():
+        return int(suffix)
+    if suffix.lower().startswith("s") and suffix[1:].isdigit():
+        return int(suffix[1:])
+    return 9999
+
+
+def session_display_suffix(session_id: str, session_date: str) -> str:
+    suffix = session_id.strip().replace(f"{session_date.strip()}-", "", 1)
+
+    if session_id.strip() == session_date.strip():
+        return ""
+    if suffix.isdigit():
+        return f"S{int(suffix)}"
+    if suffix.lower().startswith("s") and suffix[1:].isdigit():
+        return f"S{int(suffix[1:])}"
+    return suffix
+
+
+def session_chart_label(session: SessionSummary) -> str:
+    suffix = session_display_suffix(session.session_id, session.session_date)
+    date_label = safe_date_label(session.session_date)
+    return f"{date_label} · {suffix}" if suffix else date_label
+
+
+def session_label(session: SessionSummary) -> str:
+    return session_chart_label(session)
+
+
+def session_sort_key(session: SessionSummary) -> tuple[str, int, str, str]:
+    session_id = session.session_id.strip()
+    session_date = session.session_date.strip()
+    return (
+        session_date,
+        session_sequence_number(session_id, session_date),
+        session.opened_at,
+        session_id,
+    )
+
+
+def entry_sort_key(entry: SessionEntry) -> tuple[str, int, str]:
+    return (
+        entry.session_date,
+        session_sequence_number(entry.session_id, entry.session_date),
+        entry.session_id,
+    )
+
+
+def net_result_bucket(value_cents: int) -> str:
+    if value_cents > BREAK_EVEN_TOLERANCE_CENTS:
+        return "win"
+    if value_cents < -BREAK_EVEN_TOLERANCE_CENTS:
+        return "loss"
+    return "even"

From 5d30dde31631d4b0c85fb072c74151536a50f33a Mon Sep 17 00:00:00 2001
From: SowinskiBraeden <braeden@sowinski.dev>
Date: Mon, 22 Jun 2026 17:41:16 -0700
Subject: [PATCH 34/83] fix .env load

---
 app.py              | 21 -----------
 config.py           | 18 ++++++++++
 tests/test_stats.py | 85 +++++++++++++++++++++++++++++++++++++++++++++
 3 files changed, 103 insertions(+), 21 deletions(-)
 create mode 100644 tests/test_stats.py

diff --git a/app.py b/app.py
index 5198539..5808e96 100644
--- a/app.py
+++ b/app.py
@@ -1,9 +1,6 @@
 #!/usr/bin/env python3
 from __future__ import annotations
 
-import os
-from pathlib import Path
-
 from flask import Flask
 
 from auth import is_admin
@@ -14,21 +11,6 @@ from storage import ensure_data_file
 from utils import cents_to_dollars, safe_date_label
 
 
-def load_local_env(env_path: Path) -> None:
-    if not env_path.exists():
-        return
-
-    for raw_line in env_path.read_text(encoding="utf-8").splitlines():
-        line = raw_line.strip()
-        if not line or line.startswith("#") or "=" not in line:
-            continue
-
-        key, value = line.split("=", 1)
-        key = key.strip()
-        value = value.strip().strip('"').strip("'")
-        os.environ.setdefault(key, value)
-
-
 def create_app() -> Flask:
     app = Flask(__name__)
     app.config.from_object(Config)
@@ -48,9 +30,6 @@ def create_app() -> Flask:
     return app
 
 
-_env_path = Path(__file__).resolve().parent / ".env"
-load_local_env(_env_path)
-
 app = create_app()
 
 if __name__ == "__main__":
diff --git a/config.py b/config.py
index 442fec3..f1c9d6a 100644
--- a/config.py
+++ b/config.py
@@ -10,6 +10,24 @@ DATA_PATH = BASE_DIR / "data" / "entries.csv"
 ELIGIBLE_MIN_SESSIONS = 3
 
 
+def load_local_env(env_path: Path) -> None:
+    if not env_path.exists():
+        return
+
+    for raw_line in env_path.read_text(encoding="utf-8").splitlines():
+        line = raw_line.strip()
+        if not line or line.startswith("#") or "=" not in line:
+            continue
+
+        key, value = line.split("=", 1)
+        key = key.strip()
+        value = value.strip().strip('"').strip("'")
+        os.environ.setdefault(key, value)
+
+
+load_local_env(BASE_DIR / ".env")
+
+
 class Config:
     SECRET_KEY: str = os.getenv("SECRET_KEY", "change-this-before-deploying")
     ADMIN_USERNAME: str = os.getenv("ADMIN_USERNAME", "admin")
diff --git a/tests/test_stats.py b/tests/test_stats.py
new file mode 100644
index 0000000..36ceaf3
--- /dev/null
+++ b/tests/test_stats.py
@@ -0,0 +1,85 @@
+import unittest
+
+from stats import SessionEntry, SessionSummary, build_leaderboard
+
+
+class CashInAccountingTest(unittest.TestCase):
+    def test_front_recovered_from_cashout_counts_as_session_cash_in(self):
+        entry = SessionEntry(
+            session_id="2026-06-21-01",
+            session_date="2026-06-21",
+            player_name="Alex",
+            buy_in_cents=2500,
+            front_cents=500,
+            cash_out_cents=4000,
+        )
+        session = SessionSummary(
+            session_id="2026-06-21-01",
+            session_date="2026-06-21",
+            entries=[entry],
+        )
+
+        self.assertEqual(session.total_buy_in_cents, 2500)
+        self.assertEqual(session.total_front_collected_cents, 0)
+        self.assertEqual(session.total_cash_in_cents, 3000)
+
+    def test_collected_front_shortfall_counts_as_session_cash_in(self):
+        entry = SessionEntry(
+            session_id="2026-06-21-01",
+            session_date="2026-06-21",
+            player_name="Alex",
+            front_cents=1000,
+            cash_out_cents=400,
+            front_collected_cents=600,
+        )
+        session = SessionSummary(
+            session_id="2026-06-21-01",
+            session_date="2026-06-21",
+            entries=[entry],
+        )
+
+        self.assertEqual(session.total_front_collected_cents, 600)
+        self.assertEqual(session.total_cash_in_cents, 1000)
+
+    def test_written_off_front_does_not_count_as_session_cash_in(self):
+        entry = SessionEntry(
+            session_id="2026-06-21-01",
+            session_date="2026-06-21",
+            player_name="Blair",
+            front_cents=1000,
+            front_writeoff_cents=1000,
+        )
+        session = SessionSummary(
+            session_id="2026-06-21-01",
+            session_date="2026-06-21",
+            entries=[entry],
+        )
+
+        self.assertEqual(session.total_front_writeoff_cents, 1000)
+        self.assertEqual(session.total_cash_in_cents, 0)
+
+    def test_leaderboard_cash_in_includes_collected_fronts(self):
+        session = SessionSummary(
+            session_id="2026-06-21-01",
+            session_date="2026-06-21",
+            entries=[
+                SessionEntry(
+                    session_id="2026-06-21-01",
+                    session_date="2026-06-21",
+                    player_name="Alex",
+                    buy_in_cents=2500,
+                    front_cents=500,
+                    cash_out_cents=4000,
+                )
+            ],
+        )
+
+        player = build_leaderboard([session])[0]
+
+        self.assertEqual(player.total_buy_in_cents, 2500)
+        self.assertEqual(player.total_front_collected_cents, 0)
+        self.assertEqual(player.total_cash_in_cents, 3000)
+
+
+if __name__ == "__main__":
+    unittest.main()

From 434793d89ee9a153cbd95e4b1e848b4c201d9d72 Mon Sep 17 00:00:00 2001
From: SowinskiBraeden <braeden@sowinski.dev>
Date: Mon, 22 Jun 2026 18:34:40 -0700
Subject: [PATCH 35/83] footer + favicon

---
 app.py               |  5 ++++-
 config.py            |  2 ++
 static/css/style.css | 31 +++++++++++++++++++++++++++++++
 static/favicon.svg   |  4 ++++
 templates/base.html  |  7 +++++++
 5 files changed, 48 insertions(+), 1 deletion(-)
 create mode 100644 static/favicon.svg

diff --git a/app.py b/app.py
index 5808e96..be8c595 100644
--- a/app.py
+++ b/app.py
@@ -22,7 +22,10 @@ def create_app() -> Flask:
 
     @app.context_processor
     def inject_globals() -> dict:
-        return {"is_admin": is_admin()}
+        return {
+            "app_version": app.config["APP_VERSION"],
+            "is_admin": is_admin(),
+        }
 
     app.register_blueprint(public_bp)
     app.register_blueprint(admin_bp)
diff --git a/config.py b/config.py
index f1c9d6a..e8d5d7b 100644
--- a/config.py
+++ b/config.py
@@ -8,6 +8,7 @@ BASE_DIR = Path(__file__).resolve().parent
 DATA_PATH = BASE_DIR / "data" / "entries.csv"
 
 ELIGIBLE_MIN_SESSIONS = 3
+APP_VERSION = "v1.8.4"
 
 
 def load_local_env(env_path: Path) -> None:
@@ -29,6 +30,7 @@ load_local_env(BASE_DIR / ".env")
 
 
 class Config:
+    APP_VERSION: str = APP_VERSION
     SECRET_KEY: str = os.getenv("SECRET_KEY", "change-this-before-deploying")
     ADMIN_USERNAME: str = os.getenv("ADMIN_USERNAME", "admin")
     ADMIN_PASSWORD: str = os.getenv("ADMIN_PASSWORD", "change-me")
diff --git a/static/css/style.css b/static/css/style.css
index 50c4fc6..449212f 100644
--- a/static/css/style.css
+++ b/static/css/style.css
@@ -116,6 +116,37 @@ h1, h2, h3, h4 { margin: 0; }
     padding-right: 28px;
   }
 }
+.site-footer {
+  margin-top: clamp(44px, 6vw, 76px);
+  padding-top: 18px;
+  border-top: 1px solid var(--divider);
+  display: grid;
+  grid-template-columns: 1fr auto 1fr;
+  align-items: center;
+  gap: 8px 18px;
+  color: var(--faintest);
+  font-size: 12.5px;
+}
+.site-footer span {
+  white-space: nowrap;
+}
+.site-footer span:nth-child(2) {
+  color: var(--muted);
+  justify-self: center;
+}
+.site-footer span:nth-child(3) {
+  justify-self: end;
+}
+@media (max-width: 640px) {
+  .site-footer {
+    grid-template-columns: 1fr;
+    justify-items: start;
+  }
+  .site-footer span:nth-child(2),
+  .site-footer span:nth-child(3) {
+    justify-self: start;
+  }
+}
 
 /* ================================================================
    FLASH MESSAGES
diff --git a/static/favicon.svg b/static/favicon.svg
new file mode 100644
index 0000000..fe83d79
--- /dev/null
+++ b/static/favicon.svg
@@ -0,0 +1,4 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 26 26">
+  <rect width="26" height="26" rx="5" fill="#9b8cf0"/>
+  <path d="M13 5.22 20.78 13 13 20.78 5.22 13Z" fill="#0f0f12"/>
+</svg>
diff --git a/templates/base.html b/templates/base.html
index 4188485..d54121c 100644
--- a/templates/base.html
+++ b/templates/base.html
@@ -4,6 +4,7 @@
     <meta charset="utf-8">
     <meta name="viewport" content="width=device-width, initial-scale=1">
     <title>{% block title %}myboker.org{% endblock %}</title>
+    <link rel="icon" href="{{ url_for('static', filename='favicon.svg') }}" type="image/svg+xml">
     <link rel="stylesheet" href="{{ url_for('static', filename='css/tokens.css') }}">
     <link rel="stylesheet" href="{{ url_for('static', filename='css/style.css') }}">
     <script src="https://cdn.jsdelivr.net/npm/chart.js"></script>
@@ -47,6 +48,12 @@
         {% endwith %}
 
         {% block content %}{% endblock %}
+
+        <footer class="site-footer" aria-label="Site footer">
+            <span>&copy; 2026 myboker.org</span>
+            <span>Version {{ app_version }}</span>
+            <span>cedarline.digital</span>
+        </footer>
     </main>
 </body>
 </html>

From 6fcdc2946db3420606387848d78272919f3f3e7c Mon Sep 17 00:00:00 2001
From: SowinskiBraeden <braeden@sowinski.dev>
Date: Mon, 22 Jun 2026 18:40:12 -0700
Subject: [PATCH 36/83] remove v from version number

---
 config.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/config.py b/config.py
index e8d5d7b..6927f24 100644
--- a/config.py
+++ b/config.py
@@ -8,7 +8,7 @@ BASE_DIR = Path(__file__).resolve().parent
 DATA_PATH = BASE_DIR / "data" / "entries.csv"
 
 ELIGIBLE_MIN_SESSIONS = 3
-APP_VERSION = "v1.8.4"
+APP_VERSION = "1.8.4"
 
 
 def load_local_env(env_path: Path) -> None:

From 00aa0a9225d4a3dee91e4e78b8e6db6d30ac3cdb Mon Sep 17 00:00:00 2001
From: SowinskiBraeden <braeden@sowinski.dev>
Date: Mon, 22 Jun 2026 20:05:07 -0700
Subject: [PATCH 37/83] better mobile

---
 static/css/style.css | 75 ++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 75 insertions(+)

diff --git a/static/css/style.css b/static/css/style.css
index 449212f..c58c9b2 100644
--- a/static/css/style.css
+++ b/static/css/style.css
@@ -1704,3 +1704,78 @@ select.control { cursor: pointer; }
 @media (max-width: 440px) {
   .cash-strip { grid-template-columns: 1fr; }
 }
+
+/* ================================================================
+   MOBILE — additional responsive rules (phones ≤ 600px)
+   ================================================================ */
+
+/* Topbar: two-row layout on phones.
+   Row 1 → brand (fills remaining space) + admin actions.
+   Row 2 → nav links (horizontally scrollable so nothing clips). */
+@media (max-width: 600px) {
+  .topbar__inner {
+    flex-wrap: wrap;
+    height: auto;
+    padding-top: 10px;
+    padding-bottom: 4px;
+    gap: 0 16px;
+  }
+  .brand { flex: 1; }
+  .topbar__spacer { display: none; }
+  .mainnav {
+    order: 10;      /* pushes nav below brand + admin-actions */
+    width: 100%;
+    overflow-x: auto;
+    -webkit-overflow-scrolling: touch;
+    scrollbar-width: none;
+    padding-bottom: 8px;
+    margin-top: 2px;
+  }
+  .mainnav::-webkit-scrollbar { display: none; }
+}
+
+/* Toolbar: stack left/right sections vertically on narrow viewports */
+@media (max-width: 700px) {
+  .toolbar {
+    flex-direction: column;
+    align-items: stretch;
+    gap: 10px;
+  }
+  .toolbar__left,
+  .toolbar__right { width: 100%; }
+  .session-filter-form { width: 100%; }
+  .session-filter-select { min-width: 0; flex: 1; width: 100%; }
+}
+
+/* Panel head: let title + action button wrap on narrow panels */
+@media (max-width: 580px) {
+  .panel__head { flex-wrap: wrap; row-gap: 6px; }
+}
+
+/* Segmented control: scroll horizontally if it overflows on very small phones */
+@media (max-width: 380px) {
+  .segmented {
+    overflow-x: auto;
+    -webkit-overflow-scrolling: touch;
+    scrollbar-width: none;
+    max-width: 100%;
+  }
+  .segmented::-webkit-scrollbar { display: none; }
+}
+
+/* Session net bars: tighter name column so bars have room */
+@media (max-width: 540px) {
+  .session-net-bars__row {
+    grid-template-columns: minmax(68px, 100px) minmax(80px, 1fr) minmax(70px, max-content);
+    gap: 8px;
+  }
+  .session-net-bars__name { font-size: 12px; }
+  .session-net-bars__amount { font-size: 11px; }
+}
+
+/* Very small phones: reduce nav / segment padding to keep everything touchable */
+@media (max-width: 360px) {
+  .navlink { padding: 6px 10px; font-size: 12.5px; }
+  .seg { padding: 6px 10px; font-size: 12px; }
+  .hero__title, h1 { font-size: 24px; }
+}

From 49b0b54c2dc428b4eca13816beae72eb247360b8 Mon Sep 17 00:00:00 2001
From: SowinskiBraeden <braeden@sowinski.dev>
Date: Mon, 22 Jun 2026 20:51:19 -0700
Subject: [PATCH 38/83] mobile improvements

---
 static/css/style.css | 188 ++++++++++++++++++++++++++++++++++++++-----
 templates/base.html  |  38 ++++++++-
 2 files changed, 203 insertions(+), 23 deletions(-)

diff --git a/static/css/style.css b/static/css/style.css
index c58c9b2..8719b34 100644
--- a/static/css/style.css
+++ b/static/css/style.css
@@ -2,9 +2,16 @@
    RESET + BASE
    ================================================================ */
 *, *::before, *::after { box-sizing: border-box; }
-html { color-scheme: dark; scroll-behavior: smooth; }
+html {
+  color-scheme: dark;
+  scroll-behavior: smooth;
+  width: 100%;
+  overflow-x: hidden;
+}
 body {
   margin: 0;
+  width: 100%;
+  min-width: 0;
   min-height: 100vh;
   font-family: var(--font-ui);
   font-size: 15px;
@@ -12,6 +19,7 @@ body {
   color: var(--text-body);
   background: var(--bg);
   -webkit-font-smoothing: antialiased;
+  overflow-x: hidden;
 }
 img, canvas, svg { display: block; max-width: 100%; }
 a { color: inherit; text-decoration: none; }
@@ -49,6 +57,7 @@ h1, h2, h3, h4 { margin: 0; }
   display: flex;
   align-items: center;
   gap: 28px;
+  min-width: 0;
 }
 .brand {
   display: flex;
@@ -82,6 +91,29 @@ h1, h2, h3, h4 { margin: 0; }
   white-space: nowrap;
 }
 .mainnav { display: flex; gap: 4px; }
+.nav-toggle {
+  display: none;
+  width: 42px;
+  height: 42px;
+  place-items: center;
+  gap: 4px;
+  padding: 0;
+  border: 1px solid var(--border-strong);
+  border-radius: 10px;
+  background: var(--field);
+  color: var(--text-2);
+}
+.nav-toggle span {
+  display: block;
+  width: 18px;
+  height: 2px;
+  border-radius: 2px;
+  background: currentColor;
+  transition: transform 160ms, opacity 160ms;
+}
+.nav-is-open .nav-toggle span:nth-child(1) { transform: translateY(6px) rotate(45deg); }
+.nav-is-open .nav-toggle span:nth-child(2) { opacity: 0; }
+.nav-is-open .nav-toggle span:nth-child(3) { transform: translateY(-6px) rotate(-45deg); }
 .navlink {
   font-size: 13.5px;
   font-weight: 600;
@@ -105,6 +137,7 @@ h1, h2, h3, h4 { margin: 0; }
 .page {
   margin: 0 auto;
   padding: clamp(22px,3.4vw,46px) var(--gutter) 96px;
+  min-width: 0;
 }
 .page--public  { max-width: var(--w-public);  }
 .page--session { max-width: var(--w-session); }
@@ -140,11 +173,15 @@ h1, h2, h3, h4 { margin: 0; }
 @media (max-width: 640px) {
   .site-footer {
     grid-template-columns: 1fr;
-    justify-items: start;
+    justify-items: center;
+    gap: 6px;
+    margin-top: 36px;
+    padding: 18px 0 max(20px, env(safe-area-inset-bottom));
+    text-align: center;
   }
   .site-footer span:nth-child(2),
   .site-footer span:nth-child(3) {
-    justify-self: start;
+    justify-self: center;
   }
 }
 
@@ -268,6 +305,7 @@ h3 {
   border: 1px solid var(--border);
   border-radius: var(--r-lg);
   overflow: hidden;
+  min-width: 0;
 }
 .panel__head {
   padding: 16px 22px;
@@ -1666,6 +1704,43 @@ select.control { cursor: pointer; }
   h1 { font-size: 28px; }
   .hero { padding: 18px 0 14px; }
   .topbar__season { display: none; }
+  .page {
+    padding: 18px 12px 72px;
+  }
+  .panel {
+    border-radius: 12px;
+  }
+  .panel__head {
+    padding: 14px 14px;
+  }
+  .panel__body,
+  .form-card,
+  .append__body,
+  .panel--pad {
+    padding: 16px 14px;
+  }
+  .chart-wrap {
+    padding: 0 10px 14px;
+  }
+  .chart-frame {
+    height: 230px;
+  }
+  .chart-frame--tall {
+    height: 260px;
+  }
+  .cards,
+  .cards-2,
+  .provisional-grid,
+  .recon-grid,
+  .append__grid {
+    grid-template-columns: 1fr;
+  }
+  .form-shell {
+    padding-top: 20px;
+  }
+  .form-shell.narrow {
+    grid-template-columns: minmax(0, 480px);
+  }
   .cash-strip { grid-template-columns: 1fr 1fr; }
   .debt-action-grid { grid-template-columns: 1fr; }
   .snapshot-grid { grid-template-columns: 1fr; }
@@ -1699,6 +1774,39 @@ select.control { cursor: pointer; }
   .leaderboard-hero-stats .stat:last-child {
     min-width: 0;
   }
+  .tbl-scroll,
+  .table-wrap {
+    width: 100%;
+    max-width: 100%;
+    overscroll-behavior-x: contain;
+  }
+  .tbl {
+    min-width: 620px;
+  }
+  .tbl--session,
+  .tbl--session.is-full {
+    min-width: 760px;
+  }
+  .feed,
+  .debt-list,
+  .admin-bottom-grid .table-wrap,
+  .admin-bottom-grid .event-feed {
+    max-height: none;
+    height: auto;
+  }
+  .csv__btns,
+  .append__footer,
+  .button-row,
+  .modal-card__actions {
+    align-items: stretch;
+  }
+  .csv__btns > *,
+  .append__footer > *,
+  .button-row > *,
+  .modal-card__actions > * {
+    flex: 1 1 auto;
+    justify-content: center;
+  }
 }
 
 @media (max-width: 440px) {
@@ -1706,32 +1814,68 @@ select.control { cursor: pointer; }
 }
 
 /* ================================================================
-   MOBILE — additional responsive rules (phones ≤ 600px)
+   MOBILE — additional responsive rules
    ================================================================ */
 
-/* Topbar: two-row layout on phones.
-   Row 1 → brand (fills remaining space) + admin actions.
-   Row 2 → nav links (horizontally scrollable so nothing clips). */
-@media (max-width: 600px) {
+/* Topbar: app-style single row with an anchored menu on phones. */
+@media (max-width: 700px) {
   .topbar__inner {
-    flex-wrap: wrap;
-    height: auto;
-    padding-top: 10px;
-    padding-bottom: 4px;
-    gap: 0 16px;
+    height: 58px;
+    padding-inline: 12px;
+    gap: 10px;
+  }
+  .brand {
+    flex: 1 1 auto;
+    min-width: 0;
+  }
+  .brand__name {
+    overflow: hidden;
+    text-overflow: ellipsis;
+  }
+  .nav-toggle {
+    display: grid;
+    flex: none;
+    order: 20;
   }
-  .brand { flex: 1; }
   .topbar__spacer { display: none; }
   .mainnav {
-    order: 10;      /* pushes nav below brand + admin-actions */
-    width: 100%;
-    overflow-x: auto;
-    -webkit-overflow-scrolling: touch;
-    scrollbar-width: none;
-    padding-bottom: 8px;
-    margin-top: 2px;
+    position: fixed;
+    top: calc(58px + env(safe-area-inset-top));
+    left: 10px;
+    right: 10px;
+    z-index: 60;
+    display: grid;
+    gap: 4px;
+    padding: 8px;
+    border: 1px solid var(--border-strong);
+    border-radius: 12px;
+    background: rgba(22, 22, 28, .98);
+    box-shadow: 0 18px 48px rgba(0,0,0,.42);
+    transform: translateY(-8px);
+    opacity: 0;
+    pointer-events: none;
+    visibility: hidden;
+    transition: opacity 150ms, transform 150ms, visibility 150ms;
+    overflow: hidden;
+  }
+  .nav-is-open .mainnav {
+    transform: translateY(0);
+    opacity: 1;
+    pointer-events: auto;
+    visibility: visible;
+  }
+  .navlink {
+    display: flex;
+    align-items: center;
+    min-height: 44px;
+    padding: 11px 12px;
+    border-radius: 8px;
+    font-size: 14px;
+  }
+  .topbar__admin-actions .btn {
+    height: 38px;
+    padding-inline: 11px;
   }
-  .mainnav::-webkit-scrollbar { display: none; }
 }
 
 /* Toolbar: stack left/right sections vertically on narrow viewports */
diff --git a/templates/base.html b/templates/base.html
index d54121c..314cc60 100644
--- a/templates/base.html
+++ b/templates/base.html
@@ -16,7 +16,12 @@
                 <span class="brand__mark"></span>
                 <span class="brand__name">myboker.org</span>
             </a>
-            <nav class="mainnav">
+            <button class="nav-toggle" type="button" aria-controls="mainnav" aria-expanded="false" aria-label="Open navigation">
+                <span></span>
+                <span></span>
+                <span></span>
+            </button>
+            <nav class="mainnav" id="mainnav">
                 <a class="navlink {{ 'is-active' if request.endpoint == 'public.leaderboard' }}" href="{{ url_for('public.leaderboard') }}">Leaderboard</a>
                 <a class="navlink {{ 'is-active' if request.endpoint in ('public.sessions', 'public.session_detail') }}" href="{{ url_for('public.sessions') }}">Sessions</a>
                 {% if is_admin %}
@@ -55,5 +60,36 @@
             <span>cedarline.digital</span>
         </footer>
     </main>
+    <script>
+    (() => {
+        const toggle = document.querySelector('.nav-toggle');
+        const nav = document.getElementById('mainnav');
+        if (!toggle || !nav) return;
+
+        const setOpen = (open) => {
+            document.body.classList.toggle('nav-is-open', open);
+            toggle.setAttribute('aria-expanded', String(open));
+            toggle.setAttribute('aria-label', open ? 'Close navigation' : 'Open navigation');
+        };
+
+        toggle.addEventListener('click', () => {
+            setOpen(!document.body.classList.contains('nav-is-open'));
+        });
+        nav.addEventListener('click', (event) => {
+            if (event.target.closest('a')) setOpen(false);
+        });
+        document.addEventListener('keydown', (event) => {
+            if (event.key === 'Escape') setOpen(false);
+        });
+        document.addEventListener('click', (event) => {
+            if (!document.body.classList.contains('nav-is-open')) return;
+            if (event.target.closest('.topbar')) return;
+            setOpen(false);
+        });
+        window.addEventListener('resize', () => {
+            if (window.matchMedia('(min-width: 701px)').matches) setOpen(false);
+        });
+    })();
+    </script>
 </body>
 </html>

From c891163c6df6996b17aa65e0df5e9fe99ebb4695 Mon Sep 17 00:00:00 2001
From: SowinskiBraeden <braeden@sowinski.dev>
Date: Mon, 22 Jun 2026 22:59:10 -0700
Subject: [PATCH 39/83] can I get a hamburger please?

---
 config.py                  |  2 +-
 memory/MEMORY.md           |  3 ---
 memory/project_overview.md | 26 -----------------------
 static/css/style.css       | 42 ++++++++++++++++++++++++++++----------
 4 files changed, 32 insertions(+), 41 deletions(-)
 delete mode 100644 memory/MEMORY.md
 delete mode 100644 memory/project_overview.md

diff --git a/config.py b/config.py
index 6927f24..0df2473 100644
--- a/config.py
+++ b/config.py
@@ -8,7 +8,7 @@ BASE_DIR = Path(__file__).resolve().parent
 DATA_PATH = BASE_DIR / "data" / "entries.csv"
 
 ELIGIBLE_MIN_SESSIONS = 3
-APP_VERSION = "1.8.4"
+APP_VERSION = "1.8.6"
 
 
 def load_local_env(env_path: Path) -> None:
diff --git a/memory/MEMORY.md b/memory/MEMORY.md
deleted file mode 100644
index 98e9838..0000000
--- a/memory/MEMORY.md
+++ /dev/null
@@ -1,3 +0,0 @@
-# Memory Index
-
-- [Project overview](project_overview.md) — Flask poker ledger app, Graphite+Violet design system, append-only CSV event model
diff --git a/memory/project_overview.md b/memory/project_overview.md
deleted file mode 100644
index 3eef37a..0000000
--- a/memory/project_overview.md
+++ /dev/null
@@ -1,26 +0,0 @@
----
-name: project-overview
-description: Flask poker ledger app — design system, tech stack, key files
-metadata:
-  type: project
----
-
-Flask/Jinja app: poker session tracker and leaderboard. Append-only CSV event ledger (`data/entries.csv`).
-
-**Design system (Graphite + Violet):** Implemented June 2026.
-- `static/css/tokens.css` — all CSS custom properties (--accent: #9b8cf0 violet, not orange)
-- `static/css/style.css` — component classes: .panel, .stat, .tbl, .badge, .segmented, .btn, .feed, etc.
-- Fonts: Spectral (display), Hanken Grotesk (UI), IBM Plex Mono (numbers/labels)
-
-**Pages:** leaderboard, sessions, session_detail, player_detail, admin_dashboard, admin_login.
-
-**Key patterns:**
-- Leaderboard has Eligible/All/Recent segmented control; `ELIGIBLE_MIN_SESSIONS = 3` in app.py
-- Session detail has Compact/Full toggle for the table (`col-acct` class, `.is-full` on table)
-- Chart.js colors: leaderboard uses CHART_PALETTE from template JS; bars use `net_tone()` from stats.py
-- `--text-muted` and `--line` CSS vars kept as backward compat for Chart.js JS reads
-- `.venv/bin/python` is the Python runtime
-
-**Data model:** EventRow CSV → SessionEntry → SessionSummary, PlayerStats (via stats.py). No DB.
-
-**Why:** Design ported from "Poker Ledger.dc.html" prototype spec per handoff document.
diff --git a/static/css/style.css b/static/css/style.css
index 8719b34..c57957e 100644
--- a/static/css/style.css
+++ b/static/css/style.css
@@ -95,25 +95,41 @@ h1, h2, h3, h4 { margin: 0; }
   display: none;
   width: 42px;
   height: 42px;
-  place-items: center;
-  gap: 4px;
   padding: 0;
   border: 1px solid var(--border-strong);
   border-radius: 10px;
   background: var(--field);
   color: var(--text-2);
+  position: relative;
+  transition: border-color 180ms ease, color 180ms ease, background 180ms ease;
 }
 .nav-toggle span {
   display: block;
-  width: 18px;
+  position: absolute;
+  left: 50%;
+  top: 50%;
+  width: 19px;
   height: 2px;
-  border-radius: 2px;
+  margin-left: -9.5px;
+  margin-top: -1px;
+  border-radius: 999px;
   background: currentColor;
-  transition: transform 160ms, opacity 160ms;
+  transform-origin: 50% 50%;
+  transition:
+    transform 220ms cubic-bezier(.2,.8,.2,1),
+    opacity 160ms ease;
 }
-.nav-is-open .nav-toggle span:nth-child(1) { transform: translateY(6px) rotate(45deg); }
-.nav-is-open .nav-toggle span:nth-child(2) { opacity: 0; }
-.nav-is-open .nav-toggle span:nth-child(3) { transform: translateY(-6px) rotate(-45deg); }
+.nav-toggle span:nth-child(1) { transform: translateY(-6px); }
+.nav-toggle span:nth-child(2) { transform: scaleX(.82); }
+.nav-toggle span:nth-child(3) { transform: translateY(6px); }
+.nav-is-open .nav-toggle {
+  color: var(--text-strong);
+  border-color: var(--accent-chip-bd);
+  background: var(--accent-chip);
+}
+.nav-is-open .nav-toggle span:nth-child(1) { transform: rotate(45deg) scaleX(1.04); }
+.nav-is-open .nav-toggle span:nth-child(2) { opacity: 0; transform: scaleX(.2); }
+.nav-is-open .nav-toggle span:nth-child(3) { transform: rotate(-45deg) scaleX(1.04); }
 .navlink {
   font-size: 13.5px;
   font-weight: 600;
@@ -1851,15 +1867,19 @@ select.control { cursor: pointer; }
     border-radius: 12px;
     background: rgba(22, 22, 28, .98);
     box-shadow: 0 18px 48px rgba(0,0,0,.42);
-    transform: translateY(-8px);
+    transform: translateY(-6px) scale(.985);
+    transform-origin: top center;
     opacity: 0;
     pointer-events: none;
     visibility: hidden;
-    transition: opacity 150ms, transform 150ms, visibility 150ms;
+    transition:
+      opacity 180ms ease,
+      transform 220ms cubic-bezier(.2,.8,.2,1),
+      visibility 180ms;
     overflow: hidden;
   }
   .nav-is-open .mainnav {
-    transform: translateY(0);
+    transform: translateY(0) scale(1);
     opacity: 1;
     pointer-events: auto;
     visibility: visible;

From 2eadc722e99ba67a10ddbab462a1f748d784d056 Mon Sep 17 00:00:00 2001
From: SowinskiBraeden <braeden@sowinski.dev>
Date: Tue, 23 Jun 2026 21:38:33 -0700
Subject: [PATCH 40/83] 2.0+ public access setup

---
 .env.example                                  |   10 +-
 app.py                                        |   34 +-
 auth.py                                       |   82 +-
 config.py                                     |   21 +-
 db.py                                         |   32 +
 db_models.py                                  |  318 ++++
 emails.py                                     |   37 +
 extensions.py                                 |   11 +
 league_repositories.py                        |  324 ++++
 ledger_repositories.py                        |  212 +++
 migrations/README                             |   13 +
 migrations/alembic.ini                        |   39 +
 migrations/env.py                             |   55 +
 migrations/script.py.mako                     |   25 +
 migrations/versions/0001_public_foundation.py |  191 +++
 migrations/versions/0002_league_public_key.py |   52 +
 requirements.txt                              |    6 +
 routes/account.py                             |  340 ++++
 routes/admin.py                               |    3 +-
 routes/leagues.py                             | 1377 ++++++++++++++++
 routes/public.py                              |   19 +-
 static/css/style.css                          | 1413 ++++++++++++++++-
 storage.py                                    |    4 +
 templates/_league_subnav.html                 |   18 +
 templates/account_login.html                  |   27 +
 templates/account_register.html               |   30 +
 templates/account_settings.html               |  164 ++
 templates/base.html                           |   65 +-
 templates/docs.html                           |  222 +++
 templates/explore.html                        |   60 +
 templates/forgot_password.html                |   22 +
 templates/landing.html                        |  157 ++
 templates/league_dashboard.html               |  104 ++
 templates/league_leaderboard.html             |  350 ++++
 templates/league_ledger.html                  |  303 ++++
 templates/league_new.html                     |   26 +
 templates/league_player_detail.html           |  346 ++++
 templates/league_players.html                 |  266 ++++
 templates/league_session_detail.html          |  382 +++++
 templates/league_session_view.html            |  263 +++
 templates/league_sessions.html                |  149 ++
 templates/league_settings.html                |  168 ++
 templates/leagues_index.html                  |  136 ++
 templates/reset_password.html                 |   25 +
 utils.py                                      |    6 +
 45 files changed, 7875 insertions(+), 32 deletions(-)
 create mode 100644 db.py
 create mode 100644 db_models.py
 create mode 100644 emails.py
 create mode 100644 extensions.py
 create mode 100644 league_repositories.py
 create mode 100644 ledger_repositories.py
 create mode 100644 migrations/README
 create mode 100644 migrations/alembic.ini
 create mode 100644 migrations/env.py
 create mode 100644 migrations/script.py.mako
 create mode 100644 migrations/versions/0001_public_foundation.py
 create mode 100644 migrations/versions/0002_league_public_key.py
 create mode 100644 routes/account.py
 create mode 100644 routes/leagues.py
 create mode 100644 templates/_league_subnav.html
 create mode 100644 templates/account_login.html
 create mode 100644 templates/account_register.html
 create mode 100644 templates/account_settings.html
 create mode 100644 templates/docs.html
 create mode 100644 templates/explore.html
 create mode 100644 templates/forgot_password.html
 create mode 100644 templates/landing.html
 create mode 100644 templates/league_dashboard.html
 create mode 100644 templates/league_leaderboard.html
 create mode 100644 templates/league_ledger.html
 create mode 100644 templates/league_new.html
 create mode 100644 templates/league_player_detail.html
 create mode 100644 templates/league_players.html
 create mode 100644 templates/league_session_detail.html
 create mode 100644 templates/league_session_view.html
 create mode 100644 templates/league_sessions.html
 create mode 100644 templates/league_settings.html
 create mode 100644 templates/leagues_index.html
 create mode 100644 templates/reset_password.html

diff --git a/.env.example b/.env.example
index d072de1..b73c996 100644
--- a/.env.example
+++ b/.env.example
@@ -1,3 +1,9 @@
 SECRET_KEY=replace-this-with-a-long-random-string
-ADMIN_USERNAME=admin
-ADMIN_PASSWORD=replace-this-password
+DATABASE_URL=postgresql+psycopg://user:password@host/dbname
+APP_BASE_URL=https://myboker.org
+MAIL_SERVER=smtp.sendgrid.net
+MAIL_PORT=587
+MAIL_USE_TLS=true
+MAIL_USERNAME=apikey
+MAIL_PASSWORD=your-sendgrid-api-key
+MAIL_DEFAULT_SENDER=noreply@myboker.org
diff --git a/app.py b/app.py
index be8c595..b0164e7 100644
--- a/app.py
+++ b/app.py
@@ -1,21 +1,31 @@
 #!/usr/bin/env python3
 from __future__ import annotations
 
+import click
 from flask import Flask
 
-from auth import is_admin
+from auth import current_user_id, is_logged_in
 from config import Config
-from routes.admin import admin_bp
+from db import database_extensions_available, db, init_database
+from extensions import csrf, limiter, mail
+from routes.account import account_bp
+from routes.leagues import leagues_bp
 from routes.public import public_bp
 from storage import ensure_data_file
 from utils import cents_to_dollars, safe_date_label
 
 
-def create_app() -> Flask:
+def create_app(config_overrides: dict | None = None) -> Flask:
     app = Flask(__name__)
     app.config.from_object(Config)
+    if config_overrides:
+        app.config.update(config_overrides)
 
     ensure_data_file(app.config["DATA_PATH"])
+    init_database(app)
+    csrf.init_app(app)
+    limiter.init_app(app)
+    mail.init_app(app)
 
     app.jinja_env.filters["money"] = cents_to_dollars
     app.jinja_env.filters["pretty_date"] = safe_date_label
@@ -24,11 +34,25 @@ def create_app() -> Flask:
     def inject_globals() -> dict:
         return {
             "app_version": app.config["APP_VERSION"],
-            "is_admin": is_admin(),
+            "current_user_id": current_user_id(),
+            "is_logged_in": is_logged_in(),
         }
 
     app.register_blueprint(public_bp)
-    app.register_blueprint(admin_bp)
+    app.register_blueprint(account_bp)
+    app.register_blueprint(leagues_bp)
+
+    @app.cli.command("init-db")
+    def init_db_command() -> None:
+        if not database_extensions_available() or db is None:
+            raise click.ClickException(
+                "Database dependencies are not installed. Run pip install -r requirements.txt."
+            )
+
+        with app.app_context():
+            db.create_all()
+
+        click.echo("Initialized database tables.")
 
     return app
 
diff --git a/auth.py b/auth.py
index 19da07b..c33f1f1 100644
--- a/auth.py
+++ b/auth.py
@@ -1,13 +1,79 @@
 #!/usr/bin/env python3
-"""Authentication helpers.
-
-Kept in its own module so both app.py (context processor) and routes/admin.py
-(route guards) can import is_admin() without circular imports.
-"""
 from __future__ import annotations
 
-from flask import session as flask_session
+from functools import wraps
+
+from flask import current_app, flash, redirect, request, session as flask_session, url_for
+from itsdangerous import BadSignature, SignatureExpired, URLSafeTimedSerializer
+from werkzeug.security import check_password_hash, generate_password_hash
 
 
-def is_admin() -> bool:
-    return bool(flask_session.get("is_admin"))
+def _serializer() -> URLSafeTimedSerializer:
+    return URLSafeTimedSerializer(current_app.config["SECRET_KEY"])
+
+
+def generate_reset_token(user_id: str) -> str:
+    return _serializer().dumps(user_id, salt="password-reset")
+
+
+def verify_reset_token(token: str, max_age: int = 3600) -> str | None:
+    try:
+        return _serializer().loads(token, salt="password-reset", max_age=max_age)
+    except (SignatureExpired, BadSignature):
+        return None
+
+
+def generate_invite_token(league_id: str, email: str, role: str, invited_by_user_id: str) -> str:
+    return _serializer().dumps(
+        {"league_id": league_id, "email": email, "role": role, "invited_by": invited_by_user_id},
+        salt="league-invite",
+    )
+
+
+def verify_invite_token(token: str, max_age: int = 604800) -> dict | None:
+    try:
+        data = _serializer().loads(token, salt="league-invite", max_age=max_age)
+        return data if isinstance(data, dict) else None
+    except (SignatureExpired, BadSignature):
+        return None
+
+
+def hash_password(password: str) -> str:
+    return generate_password_hash(password)
+
+
+def verify_password(password_hash: str, password: str) -> bool:
+    return check_password_hash(password_hash, password)
+
+
+def normalize_email(email: str) -> str:
+    return email.strip().casefold()
+
+
+def log_user_in(user_id: str) -> None:
+    flask_session.pop("is_admin", None)
+    flask_session["user_id"] = user_id
+
+
+def log_user_out() -> None:
+    flask_session.pop("user_id", None)
+
+
+def current_user_id() -> str | None:
+    user_id = flask_session.get("user_id")
+    return str(user_id) if user_id else None
+
+
+def is_logged_in() -> bool:
+    return current_user_id() is not None
+
+
+def login_required(view):
+    @wraps(view)
+    def wrapped_view(*args, **kwargs):
+        if not is_logged_in():
+            flash("Login required.", "error")
+            return redirect(url_for("account.login", next=request.full_path))
+        return view(*args, **kwargs)
+
+    return wrapped_view
diff --git a/config.py b/config.py
index 0df2473..c5a83af 100644
--- a/config.py
+++ b/config.py
@@ -6,9 +6,10 @@ from pathlib import Path
 
 BASE_DIR = Path(__file__).resolve().parent
 DATA_PATH = BASE_DIR / "data" / "entries.csv"
+DEFAULT_DATABASE_URL = f"sqlite:///{BASE_DIR / 'data' / 'boker-dev.sqlite3'}"
 
 ELIGIBLE_MIN_SESSIONS = 3
-APP_VERSION = "1.8.6"
+APP_VERSION = "2.3.0"
 
 
 def load_local_env(env_path: Path) -> None:
@@ -32,9 +33,23 @@ load_local_env(BASE_DIR / ".env")
 class Config:
     APP_VERSION: str = APP_VERSION
     SECRET_KEY: str = os.getenv("SECRET_KEY", "change-this-before-deploying")
-    ADMIN_USERNAME: str = os.getenv("ADMIN_USERNAME", "admin")
-    ADMIN_PASSWORD: str = os.getenv("ADMIN_PASSWORD", "change-me")
+    SQLALCHEMY_DATABASE_URI: str = os.getenv("DATABASE_URL", DEFAULT_DATABASE_URL)
+    SQLALCHEMY_TRACK_MODIFICATIONS: bool = False
     SESSION_COOKIE_HTTPONLY: bool = True
     SESSION_COOKIE_SAMESITE: str = "Lax"
     SESSION_COOKIE_NAME: str = "poker_portal_session"
     DATA_PATH: Path = DATA_PATH
+    WTF_CSRF_TIME_LIMIT: int = 3600
+    APP_BASE_URL: str = os.getenv("APP_BASE_URL", "http://localhost:5000")
+    MAIL_SERVER: str = os.getenv("MAIL_SERVER", "")
+    MAIL_PORT: int = int(os.getenv("MAIL_PORT", "587"))
+    MAIL_USE_TLS: bool = os.getenv("MAIL_USE_TLS", "true").lower() in ("true", "1", "yes")
+    MAIL_USERNAME: str | None = os.getenv("MAIL_USERNAME") or None
+    MAIL_PASSWORD: str | None = os.getenv("MAIL_PASSWORD") or None
+    MAIL_DEFAULT_SENDER: str = os.getenv("MAIL_DEFAULT_SENDER", "noreply@myboker.org")
+
+
+class ProductionConfig(Config):
+    SESSION_COOKIE_SECURE: bool = True
+    SESSION_COOKIE_SAMESITE: str = "Strict"
+    PREFERRED_URL_SCHEME: str = "https"
diff --git a/db.py b/db.py
new file mode 100644
index 0000000..050416c
--- /dev/null
+++ b/db.py
@@ -0,0 +1,32 @@
+#!/usr/bin/env python3
+from __future__ import annotations
+
+from typing import Any
+
+try:
+    from flask_migrate import Migrate
+    from flask_sqlalchemy import SQLAlchemy
+except ModuleNotFoundError:  # pragma: no cover - exercised only before deps install.
+    Migrate = None
+    SQLAlchemy = None
+
+
+db = SQLAlchemy() if SQLAlchemy is not None else None
+migrate = Migrate() if Migrate is not None else None
+
+
+def database_extensions_available() -> bool:
+    return db is not None and migrate is not None
+
+
+def init_database(app: Any) -> bool:
+    if not database_extensions_available():
+        app.config["DATABASE_EXTENSIONS_AVAILABLE"] = False
+        return False
+
+    import db_models  # noqa: F401 - registers SQLAlchemy models with metadata.
+
+    db.init_app(app)
+    migrate.init_app(app, db)
+    app.config["DATABASE_EXTENSIONS_AVAILABLE"] = True
+    return True
diff --git a/db_models.py b/db_models.py
new file mode 100644
index 0000000..23b2915
--- /dev/null
+++ b/db_models.py
@@ -0,0 +1,318 @@
+#!/usr/bin/env python3
+from __future__ import annotations
+
+import uuid
+from datetime import date, datetime, timezone
+
+from db import db
+
+if db is None:  # pragma: no cover - imported only when DB dependencies exist.
+    raise RuntimeError("Database dependencies are not installed.")
+
+
+LEAGUE_ROLES = ("owner", "manager", "viewer")
+PLAYER_STATUSES = ("active", "archived")
+LEAGUE_VISIBILITIES = ("private", "public")
+SESSION_STATUSES = ("open", "closed")
+
+CANONICAL_EVENT_TYPES = {
+    "buyin",
+    "front",
+    "rollover_in",
+    "payout_carry_in",
+    "cashout",
+    "paid_out",
+    "rollover_out",
+    "debt_repayment",
+    "writeoff",
+    "note",
+    "session_open",
+    "session_close",
+}
+
+EVENT_TYPE_ALIASES = {
+    "paid": "paid_out",
+    "front_collected": "debt_repayment",
+    "front_writeoff": "writeoff",
+}
+
+SUPPORTED_EVENT_TYPES = CANONICAL_EVENT_TYPES | set(EVENT_TYPE_ALIASES)
+
+
+def utc_now() -> datetime:
+    return datetime.now(timezone.utc)
+
+
+def uuid_str() -> str:
+    return str(uuid.uuid4())
+
+
+def normalize_lookup(value: str) -> str:
+    return " ".join(value.strip().casefold().split())
+
+
+def canonical_event_type(event_type: str) -> str:
+    normalized = event_type.strip().lower()
+    return EVENT_TYPE_ALIASES.get(normalized, normalized)
+
+
+class TimestampMixin:
+    created_at = db.Column(db.DateTime(timezone=True), nullable=False, default=utc_now)
+    updated_at = db.Column(
+        db.DateTime(timezone=True),
+        nullable=False,
+        default=utc_now,
+        onupdate=utc_now,
+    )
+
+
+class User(TimestampMixin, db.Model):
+    __tablename__ = "users"
+
+    id = db.Column(db.String(36), primary_key=True, default=uuid_str)
+    email = db.Column(db.String(255), nullable=False, unique=True, index=True)
+    password_hash = db.Column(db.String(255), nullable=False)
+    email_verified_at = db.Column(db.DateTime(timezone=True), nullable=True)
+    last_login_at = db.Column(db.DateTime(timezone=True), nullable=True)
+    disabled_at = db.Column(db.DateTime(timezone=True), nullable=True)
+
+
+class League(TimestampMixin, db.Model):
+    __tablename__ = "leagues"
+
+    id = db.Column(db.String(36), primary_key=True, default=uuid_str)
+    name = db.Column(db.String(160), nullable=False)
+    slug = db.Column(db.String(120), nullable=False, index=True)
+    public_key = db.Column(db.String(12), nullable=False, unique=True, index=True)
+    description = db.Column(db.Text, nullable=True)
+    visibility = db.Column(db.String(20), nullable=False, default="private")
+    created_by_user_id = db.Column(
+        db.String(36),
+        db.ForeignKey("users.id", ondelete="RESTRICT"),
+        nullable=False,
+        index=True,
+    )
+    archived_at = db.Column(db.DateTime(timezone=True), nullable=True)
+
+    __table_args__ = (
+        db.CheckConstraint(
+            f"visibility IN {LEAGUE_VISIBILITIES}",
+            name="ck_leagues_visibility",
+        ),
+    )
+
+    @property
+    def url_ref(self) -> str:
+        return f"{self.slug}-{self.public_key}"
+
+
+class LeagueMembership(db.Model):
+    __tablename__ = "league_memberships"
+
+    id = db.Column(db.String(36), primary_key=True, default=uuid_str)
+    league_id = db.Column(
+        db.String(36),
+        db.ForeignKey("leagues.id", ondelete="CASCADE"),
+        nullable=False,
+        index=True,
+    )
+    user_id = db.Column(
+        db.String(36),
+        db.ForeignKey("users.id", ondelete="CASCADE"),
+        nullable=False,
+        index=True,
+    )
+    role = db.Column(db.String(20), nullable=False)
+    invited_by_user_id = db.Column(
+        db.String(36),
+        db.ForeignKey("users.id", ondelete="SET NULL"),
+        nullable=True,
+    )
+    created_at = db.Column(db.DateTime(timezone=True), nullable=False, default=utc_now)
+    disabled_at = db.Column(db.DateTime(timezone=True), nullable=True)
+
+    __table_args__ = (
+        db.UniqueConstraint("league_id", "user_id", name="uq_memberships_league_user"),
+        db.CheckConstraint(f"role IN {LEAGUE_ROLES}", name="ck_memberships_role"),
+    )
+
+
+class Player(TimestampMixin, db.Model):
+    __tablename__ = "players"
+
+    id = db.Column(db.String(36), primary_key=True, default=uuid_str)
+    league_id = db.Column(
+        db.String(36),
+        db.ForeignKey("leagues.id", ondelete="CASCADE"),
+        nullable=False,
+        index=True,
+    )
+    display_name = db.Column(db.String(160), nullable=False)
+    normalized_name = db.Column(db.String(160), nullable=False)
+    slug = db.Column(db.String(120), nullable=False)
+    status = db.Column(db.String(20), nullable=False, default="active")
+    linked_user_id = db.Column(
+        db.String(36),
+        db.ForeignKey("users.id", ondelete="SET NULL"),
+        nullable=True,
+    )
+    notes = db.Column(db.Text, nullable=True)
+
+    __table_args__ = (
+        db.UniqueConstraint("league_id", "normalized_name", name="uq_players_name"),
+        db.UniqueConstraint("league_id", "slug", name="uq_players_slug"),
+        db.UniqueConstraint("league_id", "id", name="uq_players_league_id"),
+        db.CheckConstraint(f"status IN {PLAYER_STATUSES}", name="ck_players_status"),
+    )
+
+
+class Season(TimestampMixin, db.Model):
+    __tablename__ = "seasons"
+
+    id = db.Column(db.String(36), primary_key=True, default=uuid_str)
+    league_id = db.Column(
+        db.String(36),
+        db.ForeignKey("leagues.id", ondelete="CASCADE"),
+        nullable=False,
+        index=True,
+    )
+    name = db.Column(db.String(160), nullable=False)
+    start_date = db.Column(db.Date, nullable=True)
+    end_date = db.Column(db.Date, nullable=True)
+    sort_order = db.Column(db.Integer, nullable=False, default=0)
+    archived_at = db.Column(db.DateTime(timezone=True), nullable=True)
+
+    __table_args__ = (
+        db.UniqueConstraint("league_id", "name", name="uq_seasons_name"),
+        db.UniqueConstraint("league_id", "id", name="uq_seasons_league_id"),
+        db.CheckConstraint(
+            "start_date IS NULL OR end_date IS NULL OR start_date <= end_date",
+            name="ck_seasons_date_order",
+        ),
+    )
+
+
+class PokerSession(TimestampMixin, db.Model):
+    __tablename__ = "sessions"
+
+    id = db.Column(db.String(36), primary_key=True, default=uuid_str)
+    league_id = db.Column(
+        db.String(36),
+        db.ForeignKey("leagues.id", ondelete="CASCADE"),
+        nullable=False,
+        index=True,
+    )
+    season_id = db.Column(db.String(36), nullable=True)
+    session_date = db.Column(db.Date, nullable=False, index=True)
+    sequence_on_date = db.Column(db.Integer, nullable=False, default=1)
+    label = db.Column(db.String(80), nullable=True)
+    status = db.Column(db.String(20), nullable=False, default="closed")
+    opened_at = db.Column(db.DateTime(timezone=True), nullable=True)
+    closed_at = db.Column(db.DateTime(timezone=True), nullable=True)
+    notes = db.Column(db.Text, nullable=True)
+
+    __table_args__ = (
+        db.UniqueConstraint(
+            "league_id",
+            "session_date",
+            "sequence_on_date",
+            name="uq_sessions_date_sequence",
+        ),
+        db.UniqueConstraint("league_id", "id", name="uq_sessions_league_id"),
+        db.ForeignKeyConstraint(
+            ["league_id", "season_id"],
+            ["seasons.league_id", "seasons.id"],
+            name="fk_sessions_season_same_league",
+            ondelete="RESTRICT",
+        ),
+        db.CheckConstraint("sequence_on_date > 0", name="ck_sessions_sequence_positive"),
+        db.CheckConstraint(f"status IN {SESSION_STATUSES}", name="ck_sessions_status"),
+    )
+
+    @property
+    def display_label(self) -> str:
+        if self.label:
+            return self.label
+        return f"{self.session_date.isoformat()} - S{self.sequence_on_date}"
+
+
+class LedgerEvent(db.Model):
+    __tablename__ = "ledger_events"
+
+    id = db.Column(db.String(36), primary_key=True, default=uuid_str)
+    league_id = db.Column(db.String(36), nullable=False, index=True)
+    session_id = db.Column(db.String(36), nullable=False, index=True)
+    player_id = db.Column(db.String(36), nullable=True, index=True)
+    event_type = db.Column(db.String(40), nullable=False)
+    amount_cents = db.Column(db.Integer, nullable=False, default=0)
+    note = db.Column(db.Text, nullable=True)
+    created_at = db.Column(db.DateTime(timezone=True), nullable=False, default=utc_now)
+    created_by_user_id = db.Column(
+        db.String(36),
+        db.ForeignKey("users.id", ondelete="RESTRICT"),
+        nullable=False,
+        index=True,
+    )
+    legacy_event_id = db.Column(db.String(80), nullable=True)
+    legacy_player_name = db.Column(db.String(160), nullable=True)
+    voided_at = db.Column(db.DateTime(timezone=True), nullable=True)
+    voided_by_user_id = db.Column(
+        db.String(36),
+        db.ForeignKey("users.id", ondelete="SET NULL"),
+        nullable=True,
+    )
+    void_reason = db.Column(db.Text, nullable=True)
+
+    __table_args__ = (
+        db.ForeignKeyConstraint(
+            ["league_id", "session_id"],
+            ["sessions.league_id", "sessions.id"],
+            name="fk_events_session_same_league",
+            ondelete="CASCADE",
+        ),
+        db.ForeignKeyConstraint(
+            ["league_id", "player_id"],
+            ["players.league_id", "players.id"],
+            name="fk_events_player_same_league",
+            ondelete="RESTRICT",
+        ),
+        db.CheckConstraint(
+            f"event_type IN {tuple(sorted(SUPPORTED_EVENT_TYPES))}",
+            name="ck_events_type",
+        ),
+        db.CheckConstraint(
+            "player_id IS NOT NULL OR event_type IN ('note', 'session_open', 'session_close')",
+            name="ck_events_player_required",
+        ),
+        db.Index("ix_events_league_created", "league_id", "created_at"),
+        db.Index("ix_events_league_session_created", "league_id", "session_id", "created_at"),
+    )
+
+
+def make_user(email: str, password_hash: str) -> User:
+    return User(email=email.strip().casefold(), password_hash=password_hash)
+
+
+def make_player(league_id: str, display_name: str, slug: str) -> Player:
+    return Player(
+        league_id=league_id,
+        display_name=display_name.strip(),
+        normalized_name=normalize_lookup(display_name),
+        slug=slug.strip().lower(),
+    )
+
+
+def make_session(
+    league_id: str,
+    session_date: date,
+    sequence_on_date: int,
+    season_id: str | None = None,
+    status: str = "closed",
+) -> PokerSession:
+    return PokerSession(
+        league_id=league_id,
+        season_id=season_id,
+        session_date=session_date,
+        sequence_on_date=sequence_on_date,
+        status=status,
+    )
diff --git a/emails.py b/emails.py
new file mode 100644
index 0000000..9f15ce6
--- /dev/null
+++ b/emails.py
@@ -0,0 +1,37 @@
+#!/usr/bin/env python3
+from __future__ import annotations
+
+from flask import current_app
+from flask_mail import Message
+
+from extensions import mail
+
+
+def send_password_reset(to_email: str, reset_url: str) -> None:
+    msg = Message(
+        subject="Reset your myboker.org password",
+        recipients=[to_email],
+        body=(
+            f"You requested a password reset for your myboker.org account.\n\n"
+            f"Click the link below to set a new password:\n\n"
+            f"{reset_url}\n\n"
+            f"This link expires in 1 hour. If you did not request this, you can ignore this email."
+        ),
+        sender=current_app.config.get("MAIL_DEFAULT_SENDER"),
+    )
+    mail.send(msg)
+
+
+def send_league_invite(to_email: str, league_name: str, invite_url: str, invited_by_email: str) -> None:
+    msg = Message(
+        subject=f"You've been invited to manage {league_name} on myboker.org",
+        recipients=[to_email],
+        body=(
+            f"{invited_by_email} has invited you to join {league_name} as a manager on myboker.org.\n\n"
+            f"Accept your invitation:\n\n"
+            f"{invite_url}\n\n"
+            f"This link expires in 7 days. You'll need a myboker.org account with this email address to accept."
+        ),
+        sender=current_app.config.get("MAIL_DEFAULT_SENDER"),
+    )
+    mail.send(msg)
diff --git a/extensions.py b/extensions.py
new file mode 100644
index 0000000..4c711f3
--- /dev/null
+++ b/extensions.py
@@ -0,0 +1,11 @@
+#!/usr/bin/env python3
+from __future__ import annotations
+
+from flask_limiter import Limiter
+from flask_limiter.util import get_remote_address
+from flask_mail import Mail
+from flask_wtf.csrf import CSRFProtect
+
+csrf = CSRFProtect()
+limiter = Limiter(key_func=get_remote_address)
+mail = Mail()
diff --git a/league_repositories.py b/league_repositories.py
new file mode 100644
index 0000000..3d4417a
--- /dev/null
+++ b/league_repositories.py
@@ -0,0 +1,324 @@
+#!/usr/bin/env python3
+from __future__ import annotations
+
+import secrets
+import string
+from datetime import date
+
+from auth import hash_password, normalize_email
+from db import db
+
+if db is None:  # pragma: no cover - imported only when DB dependencies exist.
+    raise RuntimeError("Database dependencies are not installed.")
+
+from db_models import (  # noqa: E402
+    LedgerEvent,
+    League,
+    LeagueMembership,
+    Player,
+    PokerSession,
+    Season,
+    User,
+    make_player,
+    make_session,
+    make_user,
+    normalize_lookup,
+)
+from utils import slugify
+
+PUBLIC_KEY_ALPHABET = string.ascii_lowercase + string.digits
+
+
+def generate_public_key(length: int = 6) -> str:
+    return "".join(secrets.choice(PUBLIC_KEY_ALPHABET) for _ in range(length))
+
+
+def unique_league_public_key() -> str:
+    while True:
+        public_key = generate_public_key()
+        if League.query.filter_by(public_key=public_key).first() is None:
+            return public_key
+
+
+def create_user(email: str, password: str) -> User:
+    user = make_user(normalize_email(email), hash_password(password))
+    db.session.add(user)
+    return user
+
+
+def create_league(owner: User, name: str, slug: str, description: str | None = None) -> League:
+    league = League(
+        name=name.strip(),
+        slug=slug.strip().lower(),
+        public_key=unique_league_public_key(),
+        description=description.strip() if description else None,
+        created_by_user_id=owner.id,
+    )
+    db.session.add(league)
+    db.session.flush()
+
+    db.session.add(
+        LeagueMembership(
+            league_id=league.id,
+            user_id=owner.id,
+            role="owner",
+        )
+    )
+    return league
+
+
+def unique_league_slug(name: str, requested_slug: str | None = None) -> str:
+    return slugify(requested_slug or name)
+
+
+def find_user_by_email(email: str) -> User | None:
+    return User.query.filter_by(email=normalize_email(email)).one_or_none()
+
+
+def find_league_by_slug(slug: str) -> League | None:
+    return League.query.filter_by(slug=slug.strip().lower(), archived_at=None).one_or_none()
+
+
+def find_league_by_id(league_id: str) -> League | None:
+    return League.query.filter_by(id=league_id, archived_at=None).one_or_none()
+
+
+def find_league_by_public_key(public_key: str) -> League | None:
+    return League.query.filter_by(
+        public_key=public_key.strip().lower(),
+        archived_at=None,
+    ).one_or_none()
+
+
+def list_public_leagues(name_query: str = "") -> list[League]:
+    query = League.query.filter_by(visibility="public", archived_at=None)
+    if name_query:
+        query = query.filter(League.name.ilike(f"%{name_query}%"))
+    return query.order_by(League.name.asc()).all()
+
+
+def list_leagues_for_user(user_id: str) -> list[tuple[League, LeagueMembership]]:
+    return (
+        db.session.query(League, LeagueMembership)
+        .join(LeagueMembership, LeagueMembership.league_id == League.id)
+        .filter(
+            LeagueMembership.user_id == user_id,
+            LeagueMembership.disabled_at.is_(None),
+            League.archived_at.is_(None),
+        )
+        .order_by(League.name.asc())
+        .all()
+    )
+
+
+def league_counts(league_id: str) -> dict[str, int]:
+    return {
+        "players": Player.query.filter_by(league_id=league_id, status="active").count(),
+        "seasons": Season.query.filter_by(league_id=league_id, archived_at=None).count(),
+        "sessions": PokerSession.query.filter_by(league_id=league_id).count(),
+        "open_sessions": PokerSession.query.filter_by(league_id=league_id, status="open").count(),
+        "events": LedgerEvent.query.filter_by(league_id=league_id, voided_at=None).count(),
+    }
+
+
+def create_player(league_id: str, display_name: str, slug: str) -> Player:
+    player = make_player(league_id=league_id, display_name=display_name, slug=slug)
+    db.session.add(player)
+    return player
+
+
+def unique_player_slug(league_id: str, display_name: str, requested_slug: str | None = None) -> str:
+    base_slug = slugify(requested_slug or display_name, fallback="player")
+    candidate = base_slug
+    suffix = 2
+
+    while Player.query.filter_by(league_id=league_id, slug=candidate).first() is not None:
+        candidate = f"{base_slug}-{suffix}"
+        suffix += 1
+
+    return candidate
+
+
+def list_players_for_league(league_id: str) -> list[Player]:
+    return (
+        Player.query.filter_by(league_id=league_id)
+        .order_by(Player.status.asc(), Player.display_name.asc())
+        .all()
+    )
+
+
+def find_player_for_league(league_id: str, player_id: str) -> Player | None:
+    return Player.query.filter_by(league_id=league_id, id=player_id).one_or_none()
+
+
+def set_player_status(player: Player, status: str) -> Player:
+    if status not in {"active", "archived"}:
+        raise ValueError(f"Unsupported player status: {status}")
+
+    player.status = status
+    return player
+
+
+def create_season(
+    league_id: str,
+    name: str,
+    start_date: date | None = None,
+    end_date: date | None = None,
+    sort_order: int = 0,
+) -> Season:
+    season = Season(
+        league_id=league_id,
+        name=name.strip(),
+        start_date=start_date,
+        end_date=end_date,
+        sort_order=sort_order,
+    )
+    db.session.add(season)
+    return season
+
+
+def next_sequence_on_date(league_id: str, session_date: date) -> int:
+    current = (
+        db.session.query(db.func.max(PokerSession.sequence_on_date))
+        .filter_by(league_id=league_id, session_date=session_date)
+        .scalar()
+    )
+    return int(current or 0) + 1
+
+
+def create_poker_session(
+    league_id: str,
+    session_date: date,
+    season_id: str | None = None,
+    status: str = "closed",
+) -> PokerSession:
+    session = make_session(
+        league_id=league_id,
+        season_id=season_id,
+        session_date=session_date,
+        sequence_on_date=next_sequence_on_date(league_id, session_date),
+        status=status,
+    )
+    db.session.add(session)
+    return session
+
+
+def list_sessions_for_league(league_id: str) -> list[PokerSession]:
+    return (
+        PokerSession.query.filter_by(league_id=league_id)
+        .order_by(
+            PokerSession.session_date.desc(),
+            PokerSession.sequence_on_date.desc(),
+            PokerSession.created_at.desc(),
+        )
+        .all()
+    )
+
+
+def find_session_for_league(league_id: str, session_id: str) -> PokerSession | None:
+    return PokerSession.query.filter_by(league_id=league_id, id=session_id).one_or_none()
+
+
+def set_session_status(session: PokerSession, status: str) -> PokerSession:
+    if status not in {"open", "closed"}:
+        raise ValueError(f"Unsupported session status: {status}")
+
+    from db_models import utc_now
+
+    session.status = status
+    if status == "open":
+        session.opened_at = utc_now()
+        session.closed_at = None
+    else:
+        session.closed_at = utc_now()
+    return session
+
+
+def player_name_exists(league_id: str, display_name: str) -> bool:
+    return (
+        Player.query.filter_by(
+            league_id=league_id,
+            normalized_name=normalize_lookup(display_name),
+        ).first()
+        is not None
+    )
+
+
+def player_name_taken(league_id: str, display_name: str, exclude_player_id: str) -> bool:
+    return (
+        Player.query.filter(
+            Player.league_id == league_id,
+            Player.normalized_name == normalize_lookup(display_name),
+            Player.id != exclude_player_id,
+        ).first()
+        is not None
+    )
+
+
+def update_player(player: Player, display_name: str, notes: str | None) -> Player:
+    player.display_name = display_name.strip()
+    player.normalized_name = normalize_lookup(display_name)
+    player.notes = notes.strip() if notes else None
+    return player
+
+
+def user_has_league_role(
+    user_id: str,
+    league_id: str,
+    allowed_roles: set[str] | tuple[str, ...] | list[str],
+) -> bool:
+    membership = LeagueMembership.query.filter_by(
+        user_id=user_id,
+        league_id=league_id,
+        disabled_at=None,
+    ).one_or_none()
+    return bool(membership and membership.role in set(allowed_roles))
+
+
+def find_membership(league_id: str, user_id: str) -> LeagueMembership | None:
+    return LeagueMembership.query.filter_by(
+        league_id=league_id,
+        user_id=user_id,
+        disabled_at=None,
+    ).one_or_none()
+
+
+def list_members_for_league(league_id: str) -> list[tuple[LeagueMembership, User]]:
+    return (
+        db.session.query(LeagueMembership, User)
+        .join(User, User.id == LeagueMembership.user_id)
+        .filter(
+            LeagueMembership.league_id == league_id,
+            LeagueMembership.disabled_at.is_(None),
+        )
+        .order_by(LeagueMembership.created_at.asc())
+        .all()
+    )
+
+
+def add_league_member(
+    league_id: str,
+    user_id: str,
+    role: str,
+    invited_by_user_id: str,
+) -> LeagueMembership:
+    membership = LeagueMembership(
+        league_id=league_id,
+        user_id=user_id,
+        role=role,
+        invited_by_user_id=invited_by_user_id or None,
+    )
+    db.session.add(membership)
+    return membership
+
+
+def remove_league_member(league_id: str, user_id: str) -> None:
+    from db_models import utc_now
+
+    membership = LeagueMembership.query.filter_by(
+        league_id=league_id,
+        user_id=user_id,
+        disabled_at=None,
+    ).one_or_none()
+    if membership and membership.role != "owner":
+        membership.disabled_at = utc_now()
diff --git a/ledger_repositories.py b/ledger_repositories.py
new file mode 100644
index 0000000..93cb1e2
--- /dev/null
+++ b/ledger_repositories.py
@@ -0,0 +1,212 @@
+#!/usr/bin/env python3
+from __future__ import annotations
+
+from db import db
+
+if db is None:  # pragma: no cover - imported only when DB dependencies exist.
+    raise RuntimeError("Database dependencies are not installed.")
+
+from db_models import (  # noqa: E402
+    CANONICAL_EVENT_TYPES,
+    LedgerEvent,
+    Player,
+    PokerSession,
+    User,
+    canonical_event_type,
+)
+from storage import EventRow  # noqa: E402
+
+
+def session_event_ref(session: PokerSession) -> str:
+    return f"{session.session_date.isoformat()}-{session.sequence_on_date:02d}"
+
+
+def append_ledger_event(
+    league_id: str,
+    session_id: str,
+    event_type: str,
+    amount_cents: int,
+    created_by_user_id: str,
+    player_id: str | None = None,
+    note: str | None = None,
+    legacy_event_id: str | None = None,
+    legacy_player_name: str | None = None,
+) -> LedgerEvent:
+    canonical_type = canonical_event_type(event_type)
+    if canonical_type not in CANONICAL_EVENT_TYPES:
+        raise ValueError(f"Unsupported event type: {event_type}")
+
+    if canonical_type in {"note", "session_open", "session_close"}:
+        amount_cents = 0
+
+    if player_id is None and canonical_type not in {"note", "session_open", "session_close"}:
+        raise ValueError(f"Event type {canonical_type} requires a player.")
+
+    event = LedgerEvent(
+        league_id=league_id,
+        session_id=session_id,
+        player_id=player_id,
+        event_type=canonical_type,
+        amount_cents=amount_cents,
+        note=note.strip() if note else None,
+        created_by_user_id=created_by_user_id,
+        legacy_event_id=legacy_event_id,
+        legacy_player_name=legacy_player_name,
+    )
+    db.session.add(event)
+    return event
+
+
+def list_ledger_events_for_league(league_id: str) -> list[LedgerEvent]:
+    return (
+        LedgerEvent.query.filter_by(league_id=league_id, voided_at=None)
+        .order_by(LedgerEvent.created_at.asc(), LedgerEvent.id.asc())
+        .all()
+    )
+
+
+def list_ledger_events_for_session(league_id: str, session_id: str) -> list[LedgerEvent]:
+    return (
+        LedgerEvent.query.filter_by(
+            league_id=league_id,
+            session_id=session_id,
+            voided_at=None,
+        )
+        .order_by(LedgerEvent.created_at.asc(), LedgerEvent.id.asc())
+        .all()
+    )
+
+
+def _event_row(event: LedgerEvent, session: PokerSession, player: Player | None, user: User | None) -> EventRow:
+    return EventRow(
+        id=event.id,
+        created_at=event.created_at.isoformat() if event.created_at else "",
+        session_id=session_event_ref(session),
+        session_date=session.session_date.isoformat(),
+        player_name=(player.display_name if player is not None else event.legacy_player_name or ""),
+        event_type=event.event_type,
+        amount_cents=event.amount_cents,
+        note=event.note or "",
+        actor=user.email if user is not None else "",
+        voided_at=event.voided_at.isoformat() if event.voided_at else "",
+        void_reason=event.void_reason or "",
+    )
+
+
+def list_all_event_rows_for_league(league_id: str) -> list[EventRow]:
+    """All events including voided — for display feeds only, not accounting."""
+    rows = (
+        db.session.query(LedgerEvent, PokerSession, Player, User)
+        .join(
+            PokerSession,
+            (PokerSession.league_id == LedgerEvent.league_id)
+            & (PokerSession.id == LedgerEvent.session_id),
+        )
+        .outerjoin(
+            Player,
+            (Player.league_id == LedgerEvent.league_id)
+            & (Player.id == LedgerEvent.player_id),
+        )
+        .outerjoin(User, User.id == LedgerEvent.created_by_user_id)
+        .filter(LedgerEvent.league_id == league_id)
+        .order_by(
+            PokerSession.session_date.asc(),
+            PokerSession.sequence_on_date.asc(),
+            LedgerEvent.created_at.asc(),
+            LedgerEvent.id.asc(),
+        )
+        .all()
+    )
+    return [_event_row(event, session, player, user) for event, session, player, user in rows]
+
+
+def void_ledger_event(event_id: str, league_id: str, user_id: str, reason: str) -> LedgerEvent:
+    from datetime import datetime, timezone
+    event = LedgerEvent.query.filter_by(id=event_id, league_id=league_id).first()
+    if event is None:
+        raise ValueError("Event not found.")
+    if event.voided_at is not None:
+        raise ValueError("Event is already voided.")
+    event.voided_at = datetime.now(timezone.utc)
+    event.voided_by_user_id = user_id
+    event.void_reason = reason.strip() or "Voided by owner."
+    return event
+
+
+def list_event_rows_for_league(league_id: str) -> list[EventRow]:
+    rows = (
+        db.session.query(LedgerEvent, PokerSession, Player, User)
+        .join(
+            PokerSession,
+            (PokerSession.league_id == LedgerEvent.league_id)
+            & (PokerSession.id == LedgerEvent.session_id),
+        )
+        .outerjoin(
+            Player,
+            (Player.league_id == LedgerEvent.league_id)
+            & (Player.id == LedgerEvent.player_id),
+        )
+        .outerjoin(User, User.id == LedgerEvent.created_by_user_id)
+        .filter(
+            LedgerEvent.league_id == league_id,
+            LedgerEvent.voided_at.is_(None),
+        )
+        .order_by(
+            PokerSession.session_date.asc(),
+            PokerSession.sequence_on_date.asc(),
+            LedgerEvent.created_at.asc(),
+            LedgerEvent.id.asc(),
+        )
+        .all()
+    )
+    return [_event_row(event, session, player, user) for event, session, player, user in rows]
+
+
+def list_all_event_rows_for_session(league_id: str, session_id: str) -> list[EventRow]:
+    """All events for a session including voided — for display only, not accounting."""
+    rows = (
+        db.session.query(LedgerEvent, PokerSession, Player, User)
+        .join(
+            PokerSession,
+            (PokerSession.league_id == LedgerEvent.league_id)
+            & (PokerSession.id == LedgerEvent.session_id),
+        )
+        .outerjoin(
+            Player,
+            (Player.league_id == LedgerEvent.league_id)
+            & (Player.id == LedgerEvent.player_id),
+        )
+        .outerjoin(User, User.id == LedgerEvent.created_by_user_id)
+        .filter(
+            LedgerEvent.league_id == league_id,
+            LedgerEvent.session_id == session_id,
+        )
+        .order_by(LedgerEvent.created_at.asc(), LedgerEvent.id.asc())
+        .all()
+    )
+    return [_event_row(event, session, player, user) for event, session, player, user in rows]
+
+
+def list_event_rows_for_session(league_id: str, session_id: str) -> list[EventRow]:
+    rows = (
+        db.session.query(LedgerEvent, PokerSession, Player, User)
+        .join(
+            PokerSession,
+            (PokerSession.league_id == LedgerEvent.league_id)
+            & (PokerSession.id == LedgerEvent.session_id),
+        )
+        .outerjoin(
+            Player,
+            (Player.league_id == LedgerEvent.league_id)
+            & (Player.id == LedgerEvent.player_id),
+        )
+        .outerjoin(User, User.id == LedgerEvent.created_by_user_id)
+        .filter(
+            LedgerEvent.league_id == league_id,
+            LedgerEvent.session_id == session_id,
+            LedgerEvent.voided_at.is_(None),
+        )
+        .order_by(LedgerEvent.created_at.asc(), LedgerEvent.id.asc())
+        .all()
+    )
+    return [_event_row(event, session, player, user) for event, session, player, user in rows]
diff --git a/migrations/README b/migrations/README
new file mode 100644
index 0000000..a251733
--- /dev/null
+++ b/migrations/README
@@ -0,0 +1,13 @@
+Single-database Alembic environment managed through Flask-Migrate.
+
+Install dependencies with:
+
+    pip install -r requirements.txt
+
+Then run migrations with:
+
+    flask --app app db upgrade
+
+For a quick local development bootstrap without Alembic, the app also exposes:
+
+    flask --app app init-db
diff --git a/migrations/alembic.ini b/migrations/alembic.ini
new file mode 100644
index 0000000..056afa6
--- /dev/null
+++ b/migrations/alembic.ini
@@ -0,0 +1,39 @@
+# A generic, single-database Alembic config used by Flask-Migrate.
+
+[alembic]
+script_location = migrations
+prepend_sys_path = .
+
+[loggers]
+keys = root,sqlalchemy,alembic
+
+[handlers]
+keys = console
+
+[formatters]
+keys = generic
+
+[logger_root]
+level = WARN
+handlers = console
+qualname =
+
+[logger_sqlalchemy]
+level = WARN
+handlers =
+qualname = sqlalchemy.engine
+
+[logger_alembic]
+level = INFO
+handlers =
+qualname = alembic
+
+[handler_console]
+class = StreamHandler
+args = (sys.stderr,)
+level = NOTSET
+formatter = generic
+
+[formatter_generic]
+format = %(levelname)-5.5s [%(name)s] %(message)s
+datefmt = %H:%M:%S
diff --git a/migrations/env.py b/migrations/env.py
new file mode 100644
index 0000000..689bbaa
--- /dev/null
+++ b/migrations/env.py
@@ -0,0 +1,55 @@
+from __future__ import annotations
+
+from logging.config import fileConfig
+
+from alembic import context
+from flask import current_app
+
+config = context.config
+
+if config.config_file_name is not None:
+    fileConfig(config.config_file_name)
+
+target_db = current_app.extensions["migrate"].db
+target_metadata = target_db.metadata
+
+
+def get_engine():
+    try:
+        return target_db.engine
+    except AttributeError:
+        return target_db.get_engine()
+
+
+def get_url() -> str:
+    return str(get_engine().url).replace("%", "%%")
+
+
+def run_migrations_offline() -> None:
+    context.configure(
+        url=get_url(),
+        target_metadata=target_metadata,
+        literal_binds=True,
+        compare_type=True,
+    )
+
+    with context.begin_transaction():
+        context.run_migrations()
+
+
+def run_migrations_online() -> None:
+    with get_engine().connect() as connection:
+        context.configure(
+            connection=connection,
+            target_metadata=target_metadata,
+            compare_type=True,
+        )
+
+        with context.begin_transaction():
+            context.run_migrations()
+
+
+if context.is_offline_mode():
+    run_migrations_offline()
+else:
+    run_migrations_online()
diff --git a/migrations/script.py.mako b/migrations/script.py.mako
new file mode 100644
index 0000000..0d0804f
--- /dev/null
+++ b/migrations/script.py.mako
@@ -0,0 +1,25 @@
+"""${message}
+
+Revision ID: ${up_revision}
+Revises: ${down_revision | comma,n}
+Create Date: ${create_date}
+"""
+from __future__ import annotations
+
+from alembic import op
+import sqlalchemy as sa
+${imports if imports else ""}
+
+
+revision = ${repr(up_revision)}
+down_revision = ${repr(down_revision)}
+branch_labels = ${repr(branch_labels)}
+depends_on = ${repr(depends_on)}
+
+
+def upgrade() -> None:
+    ${upgrades if upgrades else "pass"}
+
+
+def downgrade() -> None:
+    ${downgrades if downgrades else "pass"}
diff --git a/migrations/versions/0001_public_foundation.py b/migrations/versions/0001_public_foundation.py
new file mode 100644
index 0000000..f002d06
--- /dev/null
+++ b/migrations/versions/0001_public_foundation.py
@@ -0,0 +1,191 @@
+"""public multi-league foundation
+
+Revision ID: 0001_public_foundation
+Revises: 
+Create Date: 2026-06-23
+"""
+from __future__ import annotations
+
+from alembic import op
+import sqlalchemy as sa
+
+
+revision = "0001_public_foundation"
+down_revision = None
+branch_labels = None
+depends_on = None
+
+
+def upgrade() -> None:
+    op.create_table(
+        "users",
+        sa.Column("id", sa.String(length=36), nullable=False),
+        sa.Column("email", sa.String(length=255), nullable=False),
+        sa.Column("password_hash", sa.String(length=255), nullable=False),
+        sa.Column("email_verified_at", sa.DateTime(timezone=True), nullable=True),
+        sa.Column("last_login_at", sa.DateTime(timezone=True), nullable=True),
+        sa.Column("disabled_at", sa.DateTime(timezone=True), nullable=True),
+        sa.Column("created_at", sa.DateTime(timezone=True), nullable=False),
+        sa.Column("updated_at", sa.DateTime(timezone=True), nullable=False),
+        sa.PrimaryKeyConstraint("id"),
+        sa.UniqueConstraint("email"),
+    )
+    op.create_index(op.f("ix_users_email"), "users", ["email"], unique=False)
+
+    op.create_table(
+        "leagues",
+        sa.Column("id", sa.String(length=36), nullable=False),
+        sa.Column("name", sa.String(length=160), nullable=False),
+        sa.Column("slug", sa.String(length=120), nullable=False),
+        sa.Column("description", sa.Text(), nullable=True),
+        sa.Column("visibility", sa.String(length=20), nullable=False),
+        sa.Column("created_by_user_id", sa.String(length=36), nullable=False),
+        sa.Column("archived_at", sa.DateTime(timezone=True), nullable=True),
+        sa.Column("created_at", sa.DateTime(timezone=True), nullable=False),
+        sa.Column("updated_at", sa.DateTime(timezone=True), nullable=False),
+        sa.CheckConstraint("visibility IN ('private', 'public')", name="ck_leagues_visibility"),
+        sa.ForeignKeyConstraint(["created_by_user_id"], ["users.id"], ondelete="RESTRICT"),
+        sa.PrimaryKeyConstraint("id"),
+    )
+    op.create_index(op.f("ix_leagues_created_by_user_id"), "leagues", ["created_by_user_id"], unique=False)
+    op.create_index(op.f("ix_leagues_slug"), "leagues", ["slug"], unique=False)
+
+    op.create_table(
+        "league_memberships",
+        sa.Column("id", sa.String(length=36), nullable=False),
+        sa.Column("league_id", sa.String(length=36), nullable=False),
+        sa.Column("user_id", sa.String(length=36), nullable=False),
+        sa.Column("role", sa.String(length=20), nullable=False),
+        sa.Column("invited_by_user_id", sa.String(length=36), nullable=True),
+        sa.Column("created_at", sa.DateTime(timezone=True), nullable=False),
+        sa.Column("disabled_at", sa.DateTime(timezone=True), nullable=True),
+        sa.CheckConstraint("role IN ('owner', 'manager', 'viewer')", name="ck_memberships_role"),
+        sa.ForeignKeyConstraint(["invited_by_user_id"], ["users.id"], ondelete="SET NULL"),
+        sa.ForeignKeyConstraint(["league_id"], ["leagues.id"], ondelete="CASCADE"),
+        sa.ForeignKeyConstraint(["user_id"], ["users.id"], ondelete="CASCADE"),
+        sa.PrimaryKeyConstraint("id"),
+        sa.UniqueConstraint("league_id", "user_id", name="uq_memberships_league_user"),
+    )
+    op.create_index(op.f("ix_league_memberships_league_id"), "league_memberships", ["league_id"], unique=False)
+    op.create_index(op.f("ix_league_memberships_user_id"), "league_memberships", ["user_id"], unique=False)
+
+    op.create_table(
+        "players",
+        sa.Column("id", sa.String(length=36), nullable=False),
+        sa.Column("league_id", sa.String(length=36), nullable=False),
+        sa.Column("display_name", sa.String(length=160), nullable=False),
+        sa.Column("normalized_name", sa.String(length=160), nullable=False),
+        sa.Column("slug", sa.String(length=120), nullable=False),
+        sa.Column("status", sa.String(length=20), nullable=False),
+        sa.Column("linked_user_id", sa.String(length=36), nullable=True),
+        sa.Column("notes", sa.Text(), nullable=True),
+        sa.Column("created_at", sa.DateTime(timezone=True), nullable=False),
+        sa.Column("updated_at", sa.DateTime(timezone=True), nullable=False),
+        sa.CheckConstraint("status IN ('active', 'archived')", name="ck_players_status"),
+        sa.ForeignKeyConstraint(["league_id"], ["leagues.id"], ondelete="CASCADE"),
+        sa.ForeignKeyConstraint(["linked_user_id"], ["users.id"], ondelete="SET NULL"),
+        sa.PrimaryKeyConstraint("id"),
+        sa.UniqueConstraint("league_id", "id", name="uq_players_league_id"),
+        sa.UniqueConstraint("league_id", "normalized_name", name="uq_players_name"),
+        sa.UniqueConstraint("league_id", "slug", name="uq_players_slug"),
+    )
+    op.create_index(op.f("ix_players_league_id"), "players", ["league_id"], unique=False)
+
+    op.create_table(
+        "seasons",
+        sa.Column("id", sa.String(length=36), nullable=False),
+        sa.Column("league_id", sa.String(length=36), nullable=False),
+        sa.Column("name", sa.String(length=160), nullable=False),
+        sa.Column("start_date", sa.Date(), nullable=True),
+        sa.Column("end_date", sa.Date(), nullable=True),
+        sa.Column("sort_order", sa.Integer(), nullable=False),
+        sa.Column("archived_at", sa.DateTime(timezone=True), nullable=True),
+        sa.Column("created_at", sa.DateTime(timezone=True), nullable=False),
+        sa.Column("updated_at", sa.DateTime(timezone=True), nullable=False),
+        sa.CheckConstraint("start_date IS NULL OR end_date IS NULL OR start_date <= end_date", name="ck_seasons_date_order"),
+        sa.ForeignKeyConstraint(["league_id"], ["leagues.id"], ondelete="CASCADE"),
+        sa.PrimaryKeyConstraint("id"),
+        sa.UniqueConstraint("league_id", "id", name="uq_seasons_league_id"),
+        sa.UniqueConstraint("league_id", "name", name="uq_seasons_name"),
+    )
+    op.create_index(op.f("ix_seasons_league_id"), "seasons", ["league_id"], unique=False)
+
+    op.create_table(
+        "sessions",
+        sa.Column("id", sa.String(length=36), nullable=False),
+        sa.Column("league_id", sa.String(length=36), nullable=False),
+        sa.Column("season_id", sa.String(length=36), nullable=True),
+        sa.Column("session_date", sa.Date(), nullable=False),
+        sa.Column("sequence_on_date", sa.Integer(), nullable=False),
+        sa.Column("label", sa.String(length=80), nullable=True),
+        sa.Column("status", sa.String(length=20), nullable=False),
+        sa.Column("opened_at", sa.DateTime(timezone=True), nullable=True),
+        sa.Column("closed_at", sa.DateTime(timezone=True), nullable=True),
+        sa.Column("notes", sa.Text(), nullable=True),
+        sa.Column("created_at", sa.DateTime(timezone=True), nullable=False),
+        sa.Column("updated_at", sa.DateTime(timezone=True), nullable=False),
+        sa.CheckConstraint("sequence_on_date > 0", name="ck_sessions_sequence_positive"),
+        sa.CheckConstraint("status IN ('open', 'closed')", name="ck_sessions_status"),
+        sa.ForeignKeyConstraint(["league_id"], ["leagues.id"], ondelete="CASCADE"),
+        sa.ForeignKeyConstraint(["league_id", "season_id"], ["seasons.league_id", "seasons.id"], name="fk_sessions_season_same_league", ondelete="RESTRICT"),
+        sa.PrimaryKeyConstraint("id"),
+        sa.UniqueConstraint("league_id", "id", name="uq_sessions_league_id"),
+        sa.UniqueConstraint("league_id", "session_date", "sequence_on_date", name="uq_sessions_date_sequence"),
+    )
+    op.create_index(op.f("ix_sessions_league_id"), "sessions", ["league_id"], unique=False)
+    op.create_index(op.f("ix_sessions_session_date"), "sessions", ["session_date"], unique=False)
+
+    op.create_table(
+        "ledger_events",
+        sa.Column("id", sa.String(length=36), nullable=False),
+        sa.Column("league_id", sa.String(length=36), nullable=False),
+        sa.Column("session_id", sa.String(length=36), nullable=False),
+        sa.Column("player_id", sa.String(length=36), nullable=True),
+        sa.Column("event_type", sa.String(length=40), nullable=False),
+        sa.Column("amount_cents", sa.Integer(), nullable=False),
+        sa.Column("note", sa.Text(), nullable=True),
+        sa.Column("created_at", sa.DateTime(timezone=True), nullable=False),
+        sa.Column("created_by_user_id", sa.String(length=36), nullable=False),
+        sa.Column("legacy_event_id", sa.String(length=80), nullable=True),
+        sa.Column("legacy_player_name", sa.String(length=160), nullable=True),
+        sa.Column("voided_at", sa.DateTime(timezone=True), nullable=True),
+        sa.Column("voided_by_user_id", sa.String(length=36), nullable=True),
+        sa.Column("void_reason", sa.Text(), nullable=True),
+        sa.CheckConstraint("event_type IN ('buyin', 'cashout', 'debt_repayment', 'front', 'front_collected', 'front_writeoff', 'note', 'paid', 'paid_out', 'payout_carry_in', 'rollover_in', 'rollover_out', 'session_close', 'session_open', 'writeoff')", name="ck_events_type"),
+        sa.CheckConstraint("player_id IS NOT NULL OR event_type IN ('note', 'session_open', 'session_close')", name="ck_events_player_required"),
+        sa.ForeignKeyConstraint(["created_by_user_id"], ["users.id"], ondelete="RESTRICT"),
+        sa.ForeignKeyConstraint(["league_id", "player_id"], ["players.league_id", "players.id"], name="fk_events_player_same_league", ondelete="RESTRICT"),
+        sa.ForeignKeyConstraint(["league_id", "session_id"], ["sessions.league_id", "sessions.id"], name="fk_events_session_same_league", ondelete="CASCADE"),
+        sa.ForeignKeyConstraint(["voided_by_user_id"], ["users.id"], ondelete="SET NULL"),
+        sa.PrimaryKeyConstraint("id"),
+    )
+    op.create_index(op.f("ix_ledger_events_league_id"), "ledger_events", ["league_id"], unique=False)
+    op.create_index(op.f("ix_ledger_events_player_id"), "ledger_events", ["player_id"], unique=False)
+    op.create_index(op.f("ix_ledger_events_session_id"), "ledger_events", ["session_id"], unique=False)
+    op.create_index("ix_events_league_created", "ledger_events", ["league_id", "created_at"], unique=False)
+    op.create_index("ix_events_league_session_created", "ledger_events", ["league_id", "session_id", "created_at"], unique=False)
+
+
+def downgrade() -> None:
+    op.drop_index("ix_events_league_session_created", table_name="ledger_events")
+    op.drop_index("ix_events_league_created", table_name="ledger_events")
+    op.drop_index(op.f("ix_ledger_events_session_id"), table_name="ledger_events")
+    op.drop_index(op.f("ix_ledger_events_player_id"), table_name="ledger_events")
+    op.drop_index(op.f("ix_ledger_events_league_id"), table_name="ledger_events")
+    op.drop_table("ledger_events")
+    op.drop_index(op.f("ix_sessions_session_date"), table_name="sessions")
+    op.drop_index(op.f("ix_sessions_league_id"), table_name="sessions")
+    op.drop_table("sessions")
+    op.drop_index(op.f("ix_seasons_league_id"), table_name="seasons")
+    op.drop_table("seasons")
+    op.drop_index(op.f("ix_players_league_id"), table_name="players")
+    op.drop_table("players")
+    op.drop_index(op.f("ix_league_memberships_user_id"), table_name="league_memberships")
+    op.drop_index(op.f("ix_league_memberships_league_id"), table_name="league_memberships")
+    op.drop_table("league_memberships")
+    op.drop_index(op.f("ix_leagues_slug"), table_name="leagues")
+    op.drop_index(op.f("ix_leagues_public_key"), table_name="leagues")
+    op.drop_index(op.f("ix_leagues_created_by_user_id"), table_name="leagues")
+    op.drop_table("leagues")
+    op.drop_index(op.f("ix_users_email"), table_name="users")
+    op.drop_table("users")
diff --git a/migrations/versions/0002_league_public_key.py b/migrations/versions/0002_league_public_key.py
new file mode 100644
index 0000000..6d8eb5b
--- /dev/null
+++ b/migrations/versions/0002_league_public_key.py
@@ -0,0 +1,52 @@
+"""add league public key
+
+Revision ID: 0002_league_public_key
+Revises: 0001_public_foundation
+Create Date: 2026-06-23
+"""
+from __future__ import annotations
+
+import secrets
+import string
+
+from alembic import op
+import sqlalchemy as sa
+
+
+revision = "0002_league_public_key"
+down_revision = "0001_public_foundation"
+branch_labels = None
+depends_on = None
+
+ALPHABET = string.ascii_lowercase + string.digits
+
+
+def _key(existing: set[str], length: int = 6) -> str:
+    while True:
+        value = "".join(secrets.choice(ALPHABET) for _ in range(length))
+        if value not in existing:
+            existing.add(value)
+            return value
+
+
+def upgrade() -> None:
+    op.add_column("leagues", sa.Column("public_key", sa.String(length=12), nullable=True))
+
+    bind = op.get_bind()
+    rows = bind.execute(sa.text("SELECT id FROM leagues")).mappings().all()
+    existing: set[str] = set()
+    for row in rows:
+        bind.execute(
+            sa.text("UPDATE leagues SET public_key = :public_key WHERE id = :id"),
+            {"public_key": _key(existing), "id": row["id"]},
+        )
+
+    with op.batch_alter_table("leagues") as batch_op:
+        batch_op.alter_column("public_key", existing_type=sa.String(length=12), nullable=False)
+        batch_op.create_index("ix_leagues_public_key", ["public_key"], unique=True)
+
+
+def downgrade() -> None:
+    with op.batch_alter_table("leagues") as batch_op:
+        batch_op.drop_index("ix_leagues_public_key")
+        batch_op.drop_column("public_key")
diff --git a/requirements.txt b/requirements.txt
index 22ac75b..b0ea65e 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -1 +1,7 @@
 Flask==3.1.0
+Flask-Limiter>=3.5,<4.0
+Flask-Mail>=0.10,<1.0
+Flask-Migrate>=4.0,<5.0
+Flask-SQLAlchemy>=3.1,<4.0
+Flask-WTF>=1.2,<2.0
+psycopg[binary]>=3.2,<4.0
diff --git a/routes/account.py b/routes/account.py
new file mode 100644
index 0000000..1bd77c0
--- /dev/null
+++ b/routes/account.py
@@ -0,0 +1,340 @@
+#!/usr/bin/env python3
+from __future__ import annotations
+
+from flask import Blueprint, flash, redirect, render_template, request, url_for
+
+from auth import (
+    current_user_id,
+    generate_invite_token,
+    generate_reset_token,
+    hash_password,
+    log_user_in,
+    log_user_out,
+    login_required,
+    normalize_email,
+    verify_invite_token,
+    verify_password,
+    verify_reset_token,
+)
+from db import database_extensions_available, db
+from extensions import limiter
+
+account_bp = Blueprint("account", __name__, url_prefix="/account")
+
+
+def db_ready() -> bool:
+    return database_extensions_available() and db is not None
+
+
+@account_bp.get("/")
+@login_required
+def home():
+    return redirect(url_for("leagues.index"))
+
+
+@account_bp.route("/register", methods=["GET", "POST"])
+@limiter.limit("10 per minute")
+def register():
+    if current_user_id():
+        return redirect(url_for("leagues.index"))
+
+    if not db_ready():
+        flash("Account database is not available.", "error")
+        return render_template("account_register.html", form={})
+
+    form = {
+        "email": request.form.get("email", "").strip(),
+    }
+
+    if request.method == "POST":
+        from league_repositories import create_user, find_user_by_email
+
+        email = normalize_email(form["email"])
+        password = request.form.get("password", "")
+        confirm_password = request.form.get("confirm_password", "")
+
+        if not email or "@" not in email:
+            flash("Enter a valid email address.", "error")
+        elif len(password) < 8:
+            flash("Password must be at least 8 characters.", "error")
+        elif password != confirm_password:
+            flash("Passwords do not match.", "error")
+        elif find_user_by_email(email):
+            flash("An account already exists for that email.", "error")
+        else:
+            user = create_user(email, password)
+            db.session.commit()
+            log_user_in(user.id)
+            flash("Account created.", "success")
+            return redirect(url_for("leagues.new"))
+
+    return render_template("account_register.html", form=form)
+
+
+@account_bp.route("/login", methods=["GET", "POST"])
+@limiter.limit("20 per minute")
+def login():
+    if current_user_id():
+        return redirect(url_for("leagues.index"))
+
+    if not db_ready():
+        flash("Account database is not available.", "error")
+        return render_template("account_login.html", form={})
+
+    form = {
+        "email": request.form.get("email", "").strip(),
+    }
+
+    if request.method == "POST":
+        from league_repositories import find_user_by_email
+
+        user = find_user_by_email(form["email"])
+        password = request.form.get("password", "")
+
+        if user is None or not verify_password(user.password_hash, password):
+            flash("Invalid email or password.", "error")
+        elif user.disabled_at is not None:
+            flash("That account is disabled.", "error")
+        else:
+            log_user_in(user.id)
+            next_url = request.args.get("next") or url_for("leagues.index")
+            flash("Logged in.", "success")
+            return redirect(next_url)
+
+    return render_template("account_login.html", form=form)
+
+
+@account_bp.post("/logout")
+def logout():
+    log_user_out()
+    flash("Logged out.", "success")
+    return redirect(url_for("public.home"))
+
+
+@account_bp.get("/settings")
+@login_required
+def settings():
+    if not db_ready():
+        flash("Account database is not available.", "error")
+        return redirect(url_for("leagues.index"))
+
+    from db_models import User
+
+    user = db.session.get(User, current_user_id())
+    if user is None:
+        flash("User not found.", "error")
+        return redirect(url_for("public.home"))
+
+    return render_template("account_settings.html", user=user)
+
+
+@account_bp.post("/settings/email")
+@login_required
+def update_email():
+    if not db_ready():
+        flash("Account database is not available.", "error")
+        return redirect(url_for("account.settings"))
+
+    from db_models import User
+
+    user = db.session.get(User, current_user_id())
+    if user is None:
+        flash("User not found.", "error")
+        return redirect(url_for("account.settings"))
+
+    new_email = normalize_email(request.form.get("email", ""))
+    current_password = request.form.get("current_password", "")
+
+    if not new_email or "@" not in new_email:
+        flash("Enter a valid email address.", "error")
+    elif not verify_password(user.password_hash, current_password):
+        flash("Current password is incorrect.", "error")
+    else:
+        from league_repositories import find_user_by_email
+
+        existing = find_user_by_email(new_email)
+        if existing and existing.id != user.id:
+            flash("That email is already in use.", "error")
+        else:
+            user.email = new_email
+            db.session.commit()
+            flash("Email updated.", "success")
+
+    return redirect(url_for("account.settings"))
+
+
+@account_bp.post("/settings/password")
+@login_required
+def update_password():
+    if not db_ready():
+        flash("Account database is not available.", "error")
+        return redirect(url_for("account.settings"))
+
+    from db_models import User
+
+    user = db.session.get(User, current_user_id())
+    if user is None:
+        flash("User not found.", "error")
+        return redirect(url_for("account.settings"))
+
+    current_password = request.form.get("current_password", "")
+    new_password = request.form.get("new_password", "")
+    confirm_password = request.form.get("confirm_password", "")
+
+    if not verify_password(user.password_hash, current_password):
+        flash("Current password is incorrect.", "error")
+    elif len(new_password) < 8:
+        flash("New password must be at least 8 characters.", "error")
+    elif new_password != confirm_password:
+        flash("Passwords do not match.", "error")
+    else:
+        user.password_hash = hash_password(new_password)
+        db.session.commit()
+        flash("Password changed.", "success")
+
+    return redirect(url_for("account.settings"))
+
+
+@account_bp.post("/delete")
+@login_required
+def delete_account():
+    if not db_ready():
+        flash("Account database is not available.", "error")
+        return redirect(url_for("account.settings"))
+
+    from db_models import League, User, utc_now
+
+    user = db.session.get(User, current_user_id())
+    if user is None:
+        flash("User not found.", "error")
+        return redirect(url_for("account.settings"))
+
+    confirm = request.form.get("confirm", "").strip()
+    current_password = request.form.get("current_password", "")
+
+    if confirm != "DELETE":
+        flash("Confirmation text did not match.", "error")
+        return redirect(url_for("account.settings"))
+
+    if not verify_password(user.password_hash, current_password):
+        flash("Password is incorrect.", "error")
+        return redirect(url_for("account.settings"))
+
+    owned_leagues = League.query.filter_by(created_by_user_id=user.id, archived_at=None).all()
+    for league in owned_leagues:
+        league.archived_at = utc_now()
+
+    user.disabled_at = utc_now()
+    db.session.commit()
+    log_user_out()
+    flash("Your account has been deleted.", "success")
+    return redirect(url_for("public.home"))
+
+
+@account_bp.route("/forgot-password", methods=["GET", "POST"])
+@limiter.limit("10 per minute")
+def forgot_password():
+    if current_user_id():
+        return redirect(url_for("leagues.index"))
+
+    if request.method == "POST":
+        if not db_ready():
+            flash("Account database is not available.", "error")
+            return redirect(url_for("account.forgot_password"))
+
+        from emails import send_password_reset
+        from flask import current_app
+        from league_repositories import find_user_by_email
+
+        email = normalize_email(request.form.get("email", ""))
+        user = find_user_by_email(email)
+
+        if user and user.disabled_at is None:
+            token = generate_reset_token(user.id)
+            base_url = current_app.config.get("APP_BASE_URL", "").rstrip("/")
+            reset_url = f"{base_url}{url_for('account.reset_password', token=token)}"
+            try:
+                send_password_reset(email, reset_url)
+            except Exception:
+                pass
+
+        flash("If that email is registered, a reset link has been sent.", "success")
+        return redirect(url_for("account.login"))
+
+    return render_template("forgot_password.html")
+
+
+@account_bp.route("/reset-password/<token>", methods=["GET", "POST"])
+def reset_password(token):
+    if current_user_id():
+        return redirect(url_for("leagues.index"))
+
+    user_id = verify_reset_token(token)
+    if user_id is None:
+        flash("That reset link is invalid or has expired.", "error")
+        return redirect(url_for("account.forgot_password"))
+
+    if not db_ready():
+        flash("Account database is not available.", "error")
+        return redirect(url_for("account.login"))
+
+    from db_models import User
+
+    user = db.session.get(User, user_id)
+    if user is None or user.disabled_at is not None:
+        flash("That reset link is invalid or has expired.", "error")
+        return redirect(url_for("account.forgot_password"))
+
+    if request.method == "POST":
+        new_password = request.form.get("new_password", "")
+        confirm_password = request.form.get("confirm_password", "")
+
+        if len(new_password) < 8:
+            flash("Password must be at least 8 characters.", "error")
+        elif new_password != confirm_password:
+            flash("Passwords do not match.", "error")
+        else:
+            user.password_hash = hash_password(new_password)
+            db.session.commit()
+            flash("Password reset. You can now log in.", "success")
+            return redirect(url_for("account.login"))
+
+    return render_template("reset_password.html", token=token)
+
+
+@account_bp.get("/accept-invite/<token>")
+def accept_invite(token):
+    data = verify_invite_token(token)
+    if data is None:
+        flash("That invitation link is invalid or has expired.", "error")
+        return redirect(url_for("public.home"))
+
+    if not current_user_id():
+        return redirect(url_for("account.login", next=url_for("account.accept_invite", token=token)))
+
+    if not db_ready():
+        flash("Account database is not available.", "error")
+        return redirect(url_for("leagues.index"))
+
+    from db_models import User
+    from league_repositories import add_league_member, find_league_by_id, find_membership
+
+    user = db.session.get(User, current_user_id())
+    if user is None or user.email != data.get("email"):
+        flash("This invitation was sent to a different email address.", "error")
+        return redirect(url_for("leagues.index"))
+
+    league = find_league_by_id(data["league_id"])
+    if league is None:
+        flash("That league no longer exists.", "error")
+        return redirect(url_for("leagues.index"))
+
+    existing = find_membership(league.id, user.id)
+    if existing:
+        flash(f"You are already a member of {league.name}.", "info")
+        return redirect(url_for("leagues.dashboard", league_ref=league.url_ref))
+
+    add_league_member(league.id, user.id, data["role"], data.get("invited_by", ""))
+    db.session.commit()
+    flash(f"Welcome to {league.name}! You joined as {data['role']}.", "success")
+    return redirect(url_for("leagues.dashboard", league_ref=league.url_ref))
diff --git a/routes/admin.py b/routes/admin.py
index 08f44ab..f959d89 100644
--- a/routes/admin.py
+++ b/routes/admin.py
@@ -51,6 +51,7 @@ def login():
             username == current_app.config["ADMIN_USERNAME"]
             and password == current_app.config["ADMIN_PASSWORD"]
         ):
+            flask_session.pop("user_id", None)
             flask_session["is_admin"] = True
             flash("Admin login successful.", "success")
             return redirect(url_for("admin.dashboard"))
@@ -64,7 +65,7 @@ def login():
 def logout():
     flask_session.clear()
     flash("Logged out.", "success")
-    return redirect(url_for("public.leaderboard"))
+    return redirect(url_for("public.home"))
 
 
 @admin_bp.post("/admin/session-state")
diff --git a/routes/leagues.py b/routes/leagues.py
new file mode 100644
index 0000000..44bcb13
--- /dev/null
+++ b/routes/leagues.py
@@ -0,0 +1,1377 @@
+#!/usr/bin/env python3
+from __future__ import annotations
+
+from datetime import date
+
+import csv
+import io
+from datetime import datetime, timezone
+
+from flask import Blueprint, abort, flash, make_response, redirect, render_template, request, url_for
+
+from auth import current_user_id, login_required, normalize_email
+from charts import cumulative_profit_series, player_session_series
+from db import database_extensions_available, db
+from models import SessionSummary
+from services import apply_rank_changes, build_leaderboard, build_session_summaries, session_events
+from utils import cents_to_dollars, session_label, session_sort_key
+
+leagues_bp = Blueprint("leagues", __name__)
+
+LEAGUE_EVENT_TYPES = [
+    ("buyin", "Buy-in"),
+    ("front", "Front"),
+    ("rollover_in", "Rollover-in"),
+    ("payout_carry_in", "Payout carry-in"),
+    ("cashout", "Cashout result"),
+    ("paid_out", "Paid out cash"),
+    ("rollover_out", "Rollover-out"),
+    ("debt_repayment", "Debt repayment"),
+    ("writeoff", "Write-off"),
+    ("note", "Note"),
+]
+
+
+def db_ready() -> bool:
+    return database_extensions_available() and db is not None
+
+
+def league_url_values(league) -> dict[str, str]:
+    return {"league_ref": league.url_ref}
+
+
+def split_league_ref(league_ref: str) -> tuple[str, str]:
+    slug, separator, public_key = league_ref.rpartition("-")
+    if not separator or not slug or not public_key:
+        abort(404)
+    return slug, public_key
+
+
+def require_league(league_ref: str, allowed_roles: set[str]):
+    from league_repositories import find_league_by_public_key, user_has_league_role
+
+    _slug, public_key = split_league_ref(league_ref)
+    league = find_league_by_public_key(public_key)
+    if league is None:
+        abort(404)
+
+    user_id = current_user_id() or ""
+    if not user_has_league_role(user_id, league.id, allowed_roles):
+        abort(403)
+
+    return league
+
+
+def get_league_with_visibility_gate(league_ref: str):
+    """Load league; if private, enforce login + membership. Returns (league, None) or (None, redirect)."""
+    from league_repositories import find_league_by_public_key, user_has_league_role
+
+    _slug, public_key = split_league_ref(league_ref)
+    league = find_league_by_public_key(public_key)
+    if league is None:
+        abort(404)
+
+    if league.visibility != "public":
+        user_id = current_user_id()
+        if not user_id:
+            return None, redirect(url_for("account.login", next=request.path))
+        if not user_has_league_role(user_id, league.id, {"owner", "manager", "viewer"}):
+            abort(403)
+
+    return league, None
+
+
+def parse_amount_cents(raw_amount: str) -> int | None:
+    try:
+        return int(round(float(raw_amount.strip() or "0") * 100))
+    except ValueError:
+        return None
+
+
+def empty_session_summary(session) -> SessionSummary:
+    return SessionSummary(
+        session_id=f"{session.session_date.isoformat()}-{session.sequence_on_date:02d}",
+        session_date=session.session_date.isoformat(),
+        entries=[],
+        status=session.status,
+        opened_at=session.opened_at.isoformat() if session.opened_at else "",
+    )
+
+
+def session_ref_map(league_id: str) -> dict[str, str]:
+    from ledger_repositories import session_event_ref
+    from league_repositories import list_sessions_for_league
+
+    return {session_event_ref(session): session.id for session in list_sessions_for_league(league_id)}
+
+
+@leagues_bp.get("/leagues")
+@login_required
+def index():
+    if not db_ready():
+        flash("League database is not available.", "error")
+        return render_template("leagues_index.html", leagues=[])
+
+    from league_repositories import list_leagues_for_user
+    from ledger_repositories import list_event_rows_for_league
+
+    memberships = list_leagues_for_user(current_user_id() or "")
+    league_summaries = []
+    total_sessions = 0
+    total_players = 0
+    total_events = 0
+    total_open_items_cents = 0
+    live_count = 0
+    for league, membership in memberships:
+        events = list_event_rows_for_league(league.id)
+        summaries = build_session_summaries(events)
+        leaderboard = build_leaderboard(summaries)
+        live_sessions = [session for session in summaries if session.status == "open"]
+        latest_session = sorted(summaries, key=session_sort_key, reverse=True)[0] if summaries else None
+        players_count = len({
+            entry.player_name
+            for session in summaries
+            for entry in session.entries
+        })
+        open_items_cents = sum(
+            session.total_current_due_to_player_cents
+            + session.total_current_due_to_house_cents
+            for session in summaries
+        )
+        total_sessions += len(summaries)
+        total_players += players_count
+        total_events += len(events)
+        total_open_items_cents += open_items_cents
+        live_count += len(live_sessions)
+        league_summaries.append(
+            {
+                "league": league,
+                "membership": membership,
+                "sessions": summaries,
+                "live_session": live_sessions[0] if live_sessions else None,
+                "latest_session": latest_session,
+                "top_players": leaderboard[:3],
+                "leader": leaderboard[0] if leaderboard else None,
+                "players_count": players_count,
+                "sessions_count": len(summaries),
+                "events_count": len(events),
+                "cash_paid_out_cents": sum(
+                    session.total_paid_out_cents for session in summaries
+                ),
+                "open_items_cents": open_items_cents,
+            }
+        )
+    page_summary = {
+        "league_count": len(league_summaries),
+        "live_count": live_count,
+        "players_count": total_players,
+        "sessions_count": total_sessions,
+        "events_count": total_events,
+        "open_items_cents": total_open_items_cents,
+    }
+    return render_template(
+        "leagues_index.html",
+        leagues=league_summaries,
+        page_summary=page_summary,
+        session_label=session_label,
+    )
+
+
+@leagues_bp.route("/leagues/new", methods=["GET", "POST"])
+@login_required
+def new():
+    if not db_ready():
+        flash("League database is not available.", "error")
+        return render_template("league_new.html", form={})
+
+    form = {
+        "name": request.form.get("name", "").strip(),
+        "description": request.form.get("description", "").strip(),
+    }
+
+    if request.method == "POST":
+        from db_models import User
+        from league_repositories import create_league, unique_league_slug
+
+        owner = db.session.get(User, current_user_id())
+        if owner is None:
+            flash("Login required.", "error")
+            return redirect(url_for("account.login"))
+
+        if len(form["name"]) < 2:
+            flash("League name must be at least 2 characters.", "error")
+        else:
+            slug = unique_league_slug(form["name"])
+            league = create_league(
+                owner=owner,
+                name=form["name"],
+                slug=slug,
+                description=form["description"] or None,
+            )
+            db.session.commit()
+            flash("League created.", "success")
+            return redirect(url_for("leagues.dashboard", **league_url_values(league)))
+
+    return render_template("league_new.html", form=form)
+
+
+@leagues_bp.get("/l/<league_ref>")
+def dashboard(league_ref: str):
+    if not db_ready():
+        flash("League database is not available.", "error")
+        return redirect(url_for("public.home"))
+
+    from league_repositories import league_counts, user_has_league_role
+
+    league, resp = get_league_with_visibility_gate(league_ref)
+    if resp:
+        return resp
+    is_owner = user_has_league_role(current_user_id() or "", league.id, {"owner"})
+    return render_template(
+        "league_dashboard.html",
+        league=league,
+        counts=league_counts(league.id),
+        is_owner=is_owner,
+    )
+
+
+@leagues_bp.get("/l/<league_id>/<league_slug>")
+@login_required
+def legacy_dashboard_redirect(league_id: str, league_slug: str):
+    if not db_ready():
+        flash("League database is not available.", "error")
+        return redirect(url_for("public.home"))
+
+    from league_repositories import find_league_by_id, user_has_league_role
+
+    league = find_league_by_id(league_id)
+    if league is None:
+        abort(404)
+    if not user_has_league_role(current_user_id() or "", league.id, {"owner", "manager", "viewer"}):
+        abort(403)
+
+    return redirect(url_for("leagues.dashboard", **league_url_values(league)), code=301)
+
+
+@leagues_bp.get("/l/<league_ref>/leaderboard")
+def leaderboard(league_ref: str):
+    if not db_ready():
+        flash("League database is not available.", "error")
+        return redirect(url_for("public.home"))
+
+    from config import ELIGIBLE_MIN_SESSIONS
+    from ledger_repositories import list_event_rows_for_league
+    from league_repositories import list_players_for_league, user_has_league_role
+
+    league, resp = get_league_with_visibility_gate(league_ref)
+    if resp:
+        return resp
+    is_owner = user_has_league_role(current_user_id() or "", league.id, {"owner"})
+    all_sessions = build_session_summaries(list_event_rows_for_league(league.id))
+    ordered_sessions = sorted(all_sessions, key=session_sort_key)
+
+    session_ids = [session.session_id for session in ordered_sessions]
+    selected_session_id = request.args.get("through_session", "").strip()
+    mode = request.args.get("mode", "eligible").strip()
+    if mode not in ("eligible", "all", "recent"):
+        mode = "eligible"
+    label = ""
+    cutoff_index = len(session_ids) - 1
+
+    if session_ids:
+        if selected_session_id in session_ids:
+            cutoff_index = session_ids.index(selected_session_id)
+            label = session_label(ordered_sessions[cutoff_index])
+        else:
+            label = session_label(ordered_sessions[cutoff_index])
+
+        filtered_sessions = ordered_sessions[: cutoff_index + 1]
+        previous_sessions = ordered_sessions[:cutoff_index]
+    else:
+        filtered_sessions = []
+        previous_sessions = []
+
+    board = apply_rank_changes(
+        build_leaderboard(filtered_sessions),
+        build_leaderboard(previous_sessions),
+    )
+    eligible_count = sum(
+        1 for player in board if player.sessions_played >= ELIGIBLE_MIN_SESSIONS
+    )
+    all_count = len(board)
+    recent_sessions_slice = filtered_sessions[-5:]
+    recent_count = len({
+        entry.player_name
+        for session in recent_sessions_slice
+        for entry in session.entries
+    })
+
+    if mode == "recent":
+        main_board = build_leaderboard(recent_sessions_slice)
+        provisional_board = []
+    elif mode == "eligible":
+        main_board = [
+            player
+            for player in board
+            if player.sessions_played >= ELIGIBLE_MIN_SESSIONS
+        ]
+        provisional_board = [
+            player
+            for player in board
+            if player.sessions_played < ELIGIBLE_MIN_SESSIONS
+        ]
+    else:
+        main_board = board
+        provisional_board = []
+
+    chart_data = cumulative_profit_series(filtered_sessions)
+    cash_paid_out_cents = sum(session.total_paid_out_cents for session in all_sessions)
+
+    return render_template(
+        "league_leaderboard.html",
+        league=league,
+        main_board=main_board,
+        provisional_board=provisional_board,
+        mode=mode,
+        eligible_count=eligible_count,
+        all_count=all_count,
+        recent_count=recent_count,
+        eligible_min_sessions=ELIGIBLE_MIN_SESSIONS,
+        session_count=len(filtered_sessions),
+        total_session_count=len(all_sessions),
+        cash_paid_out_cents=cash_paid_out_cents,
+        chart_data=chart_data,
+        available_sessions=all_sessions,
+        selected_session_id=selected_session_id,
+        selected_session_label=(label if selected_session_id else "Latest session"),
+        selected_session_date=(
+            ordered_sessions[cutoff_index].session_date
+            if selected_session_id and session_ids
+            else ""
+        ),
+        session_label=session_label,
+        session_ids=session_ref_map(league.id),
+        player_ids={
+            player.display_name: player.id
+            for player in list_players_for_league(league.id)
+        },
+        is_owner=is_owner,
+    )
+
+
+@leagues_bp.route("/l/<league_ref>/ledger", methods=["GET", "POST"])
+@login_required
+def ledger(league_ref: str):
+    if not db_ready():
+        flash("League database is not available.", "error")
+        return redirect(url_for("public.home"))
+
+    from ledger_repositories import (
+        append_ledger_event,
+        list_all_event_rows_for_league,
+        list_event_rows_for_league,
+    )
+    from league_repositories import (
+        find_player_for_league,
+        find_session_for_league,
+        list_players_for_league,
+        user_has_league_role,
+    )
+
+    league = require_league(
+        league_ref,
+        {"owner", "manager"} if request.method == "POST" else {"owner", "manager", "viewer"},
+    )
+    can_manage = user_has_league_role(current_user_id() or "", league.id, {"owner", "manager"})
+    is_owner = user_has_league_role(current_user_id() or "", league.id, {"owner"})
+
+    rows = list_event_rows_for_league(league.id)
+    summaries = build_session_summaries(rows)
+    session_ids = session_ref_map(league.id)
+    player_ids = {player.display_name: player.id for player in list_players_for_league(league.id)}
+    debt_entries = [
+        {"session": session, "entry": entry}
+        for session in summaries
+        for entry in session.entries
+        if entry.current_due_to_house_cents > 0
+    ]
+    due_to_player_items = [
+        {"session": session, "entry": entry}
+        for session in summaries
+        for entry in session.entries
+        if entry.current_due_to_player_cents > 0
+    ]
+    open_sessions = [s for s in summaries if s.is_open]
+
+    if request.method == "POST":
+        session_id = request.form.get("session_id", "").strip()
+        player_id = request.form.get("player_id", "").strip()
+        event_type = request.form.get("event_type", "").strip()
+        note = request.form.get("note", "").strip()
+        amount_cents = parse_amount_cents(request.form.get("amount", "0"))
+
+        session = find_session_for_league(league.id, session_id)
+        player = find_player_for_league(league.id, player_id)
+        if session is None or player is None:
+            abort(404)
+        if event_type not in {"debt_repayment", "writeoff"}:
+            flash("Select a valid debt resolution type.", "error")
+        elif amount_cents is None or amount_cents <= 0:
+            flash("Amount must be greater than zero.", "error")
+        else:
+            session_ref = next(
+                (
+                    ref
+                    for ref, db_session_id in session_ids.items()
+                    if db_session_id == session.id
+                ),
+                "",
+            )
+            target_summary = next(
+                (summary for summary in summaries if summary.session_id == session_ref),
+                None,
+            )
+            target_entry = (
+                next(
+                    (
+                        entry
+                        for entry in target_summary.entries
+                        if entry.player_name == player.display_name
+                    ),
+                    None,
+                )
+                if target_summary is not None
+                else None
+            )
+            if target_entry is None or target_entry.current_due_to_house_cents <= 0:
+                flash("That player does not have an outstanding debt in this session.", "error")
+            elif amount_cents > target_entry.current_due_to_house_cents:
+                flash(
+                    f"Debt resolution cannot exceed {cents_to_dollars(target_entry.current_due_to_house_cents)}.",
+                    "error",
+                )
+            else:
+                append_ledger_event(
+                    league.id,
+                    session.id,
+                    event_type,
+                    amount_cents,
+                    current_user_id() or "",
+                    player_id=player.id,
+                    note=note or ("Debt repaid." if event_type == "debt_repayment" else "Debt written off."),
+                )
+                db.session.commit()
+                flash("Debt resolution recorded.", "success")
+                return redirect(url_for("leagues.ledger", **league_url_values(league)))
+
+    cash_in_cents = sum(s.total_real_cash_in_cents for s in summaries)
+    cash_out_cents = sum(s.total_real_cash_out_cents for s in summaries)
+    due_to_players_cents = sum(s.total_current_due_to_player_cents for s in summaries)
+    due_to_house_cents = sum(s.total_current_due_to_house_cents for s in summaries)
+    totals = {
+        "cash_in_cents": cash_in_cents,
+        "cash_out_cents": cash_out_cents,
+        "due_to_players_cents": due_to_players_cents,
+        "due_to_house_cents": due_to_house_cents,
+        "book_held_cents": cash_in_cents - cash_out_cents,
+        "net_position_cents": (cash_in_cents - cash_out_cents) + due_to_house_cents - due_to_players_cents,
+        "collected_cents": sum(s.total_debt_repayment_cents for s in summaries),
+        "written_off_cents": sum(s.total_writeoff_cents for s in summaries),
+        "events": len(rows),
+    }
+
+    all_rows = list_all_event_rows_for_league(league.id)
+
+    return render_template(
+        "league_ledger.html",
+        league=league,
+        totals=totals,
+        sessions=summaries,
+        debt_entries=debt_entries,
+        due_to_player_items=due_to_player_items,
+        open_sessions=open_sessions,
+        raw_events=list(reversed(all_rows)),
+        session_label=session_label,
+        session_ids=session_ids,
+        player_ids=player_ids,
+        can_manage=can_manage,
+        is_owner=is_owner,
+    )
+
+
+@leagues_bp.post("/l/<league_ref>/events/<event_id>/void")
+@login_required
+def void_event(league_ref: str, event_id: str):
+    if not db_ready():
+        flash("League database is not available.", "error")
+        return redirect(url_for("public.home"))
+
+    from ledger_repositories import void_ledger_event
+
+    league = require_league(league_ref, {"owner"})
+    reason = request.form.get("void_reason", "").strip()
+    session_id = None
+    try:
+        event = void_ledger_event(event_id, league.id, current_user_id() or "", reason)
+        session_id = event.session_id
+        db.session.commit()
+        flash("Event voided.", "success")
+    except ValueError as exc:
+        flash(str(exc), "error")
+    if session_id:
+        return redirect(url_for("leagues.session_detail", **league_url_values(league), session_id=session_id))
+    return redirect(url_for("leagues.ledger", **league_url_values(league)))
+
+
+@leagues_bp.get("/l/<league_ref>/players/<player_id>")
+def player_detail(league_ref: str, player_id: str):
+    if not db_ready():
+        flash("League database is not available.", "error")
+        return redirect(url_for("public.home"))
+
+    from ledger_repositories import list_event_rows_for_league
+    from league_repositories import find_player_for_league, user_has_league_role
+
+    league, resp = get_league_with_visibility_gate(league_ref)
+    if resp:
+        return resp
+    user_id = current_user_id() or ""
+    is_owner = user_has_league_role(user_id, league.id, {"owner"})
+    can_manage = user_has_league_role(user_id, league.id, {"owner", "manager"})
+    player_record = find_player_for_league(league.id, player_id)
+    if player_record is None:
+        abort(404)
+
+    all_sessions = build_session_summaries(list_event_rows_for_league(league.id))
+    board = build_leaderboard(all_sessions)
+    player_stats = next(
+        (player for player in board if player.player_name == player_record.display_name),
+        None,
+    )
+    if player_stats is None:
+        flash("That player has no ledger events yet.", "error")
+        return redirect(url_for("leagues.players", **league_url_values(league)))
+
+    player_rank = next(
+        (
+            index
+            for index, ranked_player in enumerate(board, start=1)
+            if ranked_player.player_name == player_record.display_name
+        ),
+        None,
+    )
+    player_sessions = [
+        {"session": session, "entry": entry}
+        for session in sorted(all_sessions, key=session_sort_key, reverse=True)
+        for entry in session.entries
+        if entry.player_name == player_record.display_name
+    ]
+
+    return render_template(
+        "league_player_detail.html",
+        league=league,
+        player_record=player_record,
+        player=player_stats,
+        player_rank=player_rank,
+        chart_data=player_session_series(all_sessions, player_record.display_name),
+        player_sessions=player_sessions,
+        session_label=session_label,
+        session_ids=session_ref_map(league.id),
+        is_owner=is_owner,
+        can_manage=can_manage,
+    )
+
+
+@leagues_bp.route("/l/<league_ref>/players", methods=["GET", "POST"])
+def players(league_ref: str):
+    if not db_ready():
+        flash("League database is not available.", "error")
+        return redirect(url_for("public.home"))
+
+    from league_repositories import (
+        create_player,
+        list_players_for_league,
+        player_name_exists,
+        unique_player_slug,
+        user_has_league_role,
+    )
+
+    if request.method == "POST":
+        league = require_league(league_ref, {"owner", "manager"})
+    else:
+        league, resp = get_league_with_visibility_gate(league_ref)
+        if resp:
+            return resp
+    user_id = current_user_id() or ""
+    can_manage = user_has_league_role(user_id, league.id, {"owner", "manager"})
+    is_owner = user_has_league_role(user_id, league.id, {"owner"})
+    form = {
+        "display_name": request.form.get("display_name", "").strip(),
+        "slug": request.form.get("slug", "").strip(),
+        "notes": request.form.get("notes", "").strip(),
+    }
+
+    if request.method == "POST":
+        if len(form["display_name"]) < 2:
+            flash("Player name must be at least 2 characters.", "error")
+        elif player_name_exists(league.id, form["display_name"]):
+            flash("A player with that name already exists in this league.", "error")
+        else:
+            player = create_player(
+                league.id,
+                form["display_name"],
+                unique_player_slug(league.id, form["display_name"], form["slug"] or None),
+            )
+            player.notes = form["notes"] or None
+            db.session.commit()
+            flash("Player added.", "success")
+            return redirect(url_for("leagues.players", **league_url_values(league)))
+
+    from ledger_repositories import list_event_rows_for_league
+
+    all_sessions = build_session_summaries(list_event_rows_for_league(league.id))
+    board = build_leaderboard(all_sessions)
+    stats_by_name = {p.player_name: p for p in board}
+
+    return render_template(
+        "league_players.html",
+        league=league,
+        players=list_players_for_league(league.id),
+        stats_by_name=stats_by_name,
+        form=form,
+        can_manage=can_manage,
+        is_owner=is_owner,
+    )
+
+
+@leagues_bp.post("/l/<league_ref>/players/<player_id>/archive")
+@login_required
+def archive_player(league_ref: str, player_id: str):
+    return update_player_status(league_ref, player_id, "archived", "Player archived.")
+
+
+@leagues_bp.post("/l/<league_ref>/players/<player_id>/reactivate")
+@login_required
+def reactivate_player(league_ref: str, player_id: str):
+    return update_player_status(league_ref, player_id, "active", "Player reactivated.")
+
+
+def update_player_status(league_ref: str, player_id: str, status: str, message: str):
+    if not db_ready():
+        flash("League database is not available.", "error")
+        return redirect(url_for("public.home"))
+
+    from league_repositories import find_player_for_league, set_player_status
+
+    league = require_league(league_ref, {"owner", "manager"})
+    player = find_player_for_league(league.id, player_id)
+    if player is None:
+        abort(404)
+
+    set_player_status(player, status)
+    db.session.commit()
+    flash(message, "success")
+    return redirect(url_for("leagues.players", **league_url_values(league)))
+
+
+@leagues_bp.post("/l/<league_ref>/players/<player_id>/edit")
+@login_required
+def edit_player(league_ref: str, player_id: str):
+    if not db_ready():
+        flash("League database is not available.", "error")
+        return redirect(url_for("public.home"))
+
+    from league_repositories import find_player_for_league, player_name_taken, update_player
+
+    league = require_league(league_ref, {"owner", "manager"})
+    player = find_player_for_league(league.id, player_id)
+    if player is None:
+        abort(404)
+
+    new_name = request.form.get("display_name", "").strip()
+    new_notes = request.form.get("notes", "").strip() or None
+
+    if len(new_name) < 2:
+        flash("Player name must be at least 2 characters.", "error")
+    elif player_name_taken(league.id, new_name, player.id):
+        flash("A player with that name already exists in this league.", "error")
+    else:
+        update_player(player, new_name, new_notes)
+        db.session.commit()
+        flash("Player updated.", "success")
+
+    return redirect(url_for("leagues.players", **league_url_values(league)))
+
+
+@leagues_bp.route("/l/<league_ref>/sessions", methods=["GET", "POST"])
+def sessions(league_ref: str):
+    if not db_ready():
+        flash("League database is not available.", "error")
+        return redirect(url_for("public.home"))
+
+    from ledger_repositories import append_ledger_event
+    from league_repositories import (
+        create_poker_session,
+        list_sessions_for_league,
+        user_has_league_role,
+    )
+
+    if request.method == "POST":
+        league = require_league(league_ref, {"owner", "manager"})
+    else:
+        league, resp = get_league_with_visibility_gate(league_ref)
+        if resp:
+            return resp
+    user_id = current_user_id() or ""
+    can_manage = user_has_league_role(user_id, league.id, {"owner", "manager"})
+    is_owner = user_has_league_role(user_id, league.id, {"owner"})
+    form = {
+        "session_date": request.form.get("session_date", date.today().isoformat()).strip(),
+        "label": request.form.get("label", "").strip(),
+        "notes": request.form.get("notes", "").strip(),
+        "status": request.form.get("status", "open").strip(),
+    }
+
+    if request.method == "POST":
+        try:
+            session_date = date.fromisoformat(form["session_date"])
+        except ValueError:
+            flash("Session date must be a valid date.", "error")
+        else:
+            status = "closed" if form["status"] == "closed" else "open"
+            session = create_poker_session(
+                league.id,
+                session_date,
+                status=status,
+            )
+            session.label = form["label"] or None
+            session.notes = form["notes"] or None
+            if status == "open":
+                from league_repositories import set_session_status
+
+                set_session_status(session, "open")
+
+            db.session.flush()
+            if status == "open":
+                append_ledger_event(
+                    league.id,
+                    session.id,
+                    "session_open",
+                    0,
+                    current_user_id() or "",
+                    note="Session created.",
+                )
+            db.session.commit()
+            flash(f"Created {session.display_label}.", "success")
+            return redirect(url_for("leagues.sessions", **league_url_values(league)))
+
+    from db_models import LedgerEvent
+    from ledger_repositories import list_event_rows_for_league
+
+    all_sessions = list_sessions_for_league(league.id)
+    summaries = build_session_summaries(list_event_rows_for_league(league.id))
+    ref_to_db_id = {
+        f"{s.session_date.isoformat()}-{s.sequence_on_date:02d}": s.id
+        for s in all_sessions
+    }
+    db_id_to_summary = {
+        ref_to_db_id[sm.session_id]: sm
+        for sm in summaries
+        if sm.session_id in ref_to_db_id
+    }
+    empty_count = sum(
+        1 for s in all_sessions
+        if s.id not in db_id_to_summary or not db_id_to_summary[s.id].entries
+    )
+
+    return render_template(
+        "league_sessions.html",
+        league=league,
+        sessions=all_sessions,
+        db_id_to_summary=db_id_to_summary,
+        form=form,
+        can_manage=can_manage,
+        is_owner=is_owner,
+        empty_count=empty_count,
+    )
+
+
+@leagues_bp.post("/l/<league_ref>/sessions/prune-empty")
+@login_required
+def prune_empty_sessions(league_ref: str):
+    if not db_ready():
+        flash("League database is not available.", "error")
+        return redirect(url_for("public.home"))
+
+    from db_models import LedgerEvent, PokerSession
+    from league_repositories import list_sessions_for_league
+
+    league = require_league(league_ref, {"owner", "manager"})
+
+    all_sessions = list_sessions_for_league(league.id)
+    session_ids_with_players = {
+        row[0]
+        for row in db.session.query(LedgerEvent.session_id).filter(
+            LedgerEvent.league_id == league.id,
+            LedgerEvent.player_id.isnot(None),
+            LedgerEvent.voided_at.is_(None),
+        ).all()
+    }
+    empty_sessions = [s for s in all_sessions if s.id not in session_ids_with_players]
+
+    if not empty_sessions:
+        flash("No empty sessions to prune.", "success")
+        return redirect(url_for("leagues.sessions", **league_url_values(league)))
+
+    for session in empty_sessions:
+        db.session.delete(session)
+    db.session.commit()
+
+    n = len(empty_sessions)
+    flash(f"Pruned {n} empty session{'s' if n != 1 else ''}.", "success")
+    return redirect(url_for("leagues.sessions", **league_url_values(league)))
+
+
+@leagues_bp.post("/l/<league_ref>/sessions/<session_id>/delete")
+@login_required
+def delete_session(league_ref: str, session_id: str):
+    if not db_ready():
+        flash("League database is not available.", "error")
+        return redirect(url_for("public.home"))
+
+    from league_repositories import find_session_for_league
+
+    league = require_league(league_ref, {"owner"})
+    session = find_session_for_league(league.id, session_id)
+    if session is None:
+        abort(404)
+    label = session.display_label
+    db.session.delete(session)
+    db.session.commit()
+    flash(f"Deleted {label} and all its events.", "success")
+    return redirect(url_for("leagues.sessions", **league_url_values(league)))
+
+
+@leagues_bp.post("/l/<league_ref>/sessions/<session_id>/edit")
+@login_required
+def edit_session(league_ref: str, session_id: str):
+    if not db_ready():
+        flash("League database is not available.", "error")
+        return redirect(url_for("public.home"))
+
+    from league_repositories import find_session_for_league
+
+    league = require_league(league_ref, {"owner", "manager"})
+    session = find_session_for_league(league.id, session_id)
+    if session is None:
+        abort(404)
+
+    new_label = request.form.get("label", "").strip() or None
+    new_notes = request.form.get("notes", "").strip() or None
+    new_date_str = request.form.get("session_date", "").strip()
+
+    try:
+        new_date = date.fromisoformat(new_date_str)
+    except ValueError:
+        flash("Invalid session date.", "error")
+        return redirect(url_for("leagues.session_detail", league_ref=league.url_ref, session_id=session_id))
+
+    if new_date != session.session_date:
+        from db_models import PokerSession as _PS
+        max_seq = db.session.query(db.func.max(_PS.sequence_on_date)).filter(
+            _PS.league_id == league.id,
+            _PS.session_date == new_date,
+            _PS.id != session.id,
+        ).scalar()
+        session.sequence_on_date = int(max_seq or 0) + 1
+        session.session_date = new_date
+
+    session.label = new_label
+    session.notes = new_notes
+    db.session.commit()
+    flash("Session updated.", "success")
+    return redirect(url_for("leagues.session_detail", league_ref=league.url_ref, session_id=session_id))
+
+
+@leagues_bp.route("/l/<league_ref>/sessions/<session_id>", methods=["GET", "POST"])
+@login_required
+def session_detail(league_ref: str, session_id: str):
+    if not db_ready():
+        flash("League database is not available.", "error")
+        return redirect(url_for("public.home"))
+
+    from ledger_repositories import append_ledger_event, list_all_event_rows_for_session, list_event_rows_for_session
+    from league_repositories import (
+        find_session_for_league,
+        list_players_for_league,
+        user_has_league_role,
+    )
+
+    league = require_league(
+        league_ref,
+        {"owner", "manager"} if request.method == "POST" else {"owner", "manager", "viewer"},
+    )
+    session = find_session_for_league(league.id, session_id)
+    if session is None:
+        abort(404)
+
+    can_manage = user_has_league_role(current_user_id() or "", league.id, {"owner", "manager"})
+    is_owner = user_has_league_role(current_user_id() or "", league.id, {"owner"})
+    players = [player for player in list_players_for_league(league.id) if player.status == "active"]
+    append_form = {
+        "player_id": request.form.get("player_id", "").strip(),
+        "event_type": request.form.get("event_type", "buyin").strip(),
+        "amount": request.form.get("amount", "").strip(),
+        "note": request.form.get("note", "").strip(),
+    }
+
+    if request.method == "POST":
+        if session.status != "open":
+            flash("That session is closed. Reopen it before adding events.", "error")
+        elif append_form["event_type"] not in {event_type for event_type, _ in LEAGUE_EVENT_TYPES}:
+            flash("Select a valid event type.", "error")
+        else:
+            amount_cents = parse_amount_cents(append_form["amount"])
+            if amount_cents is None:
+                flash("Amount must be a number.", "error")
+            elif amount_cents <= 0 and append_form["event_type"] != "note":
+                flash("Amount must be greater than zero.", "error")
+            else:
+                player_id = append_form["player_id"] or None
+                if append_form["event_type"] != "note" and player_id is None:
+                    flash("Select a player for this event.", "error")
+                else:
+                    if player_id is not None and not any(player.id == player_id for player in players):
+                        abort(404)
+
+                    append_ledger_event(
+                        league.id,
+                        session.id,
+                        append_form["event_type"],
+                        amount_cents,
+                        current_user_id() or "",
+                        player_id=player_id,
+                        note=append_form["note"],
+                    )
+                    db.session.commit()
+                    flash("Ledger event added.", "success")
+                    return redirect(
+                        url_for(
+                            "leagues.session_detail",
+                            **league_url_values(league),
+                            session_id=session.id,
+                        )
+                    )
+
+    rows = list_event_rows_for_session(league.id, session.id)
+    summaries = build_session_summaries(rows)
+    summary = summaries[0] if summaries else empty_session_summary(session)
+    all_rows = list_all_event_rows_for_session(league.id, session.id)
+
+    return render_template(
+        "league_session_detail.html",
+        league=league,
+        session_model=session,
+        session=summary,
+        players=players,
+        raw_events=all_rows,
+        event_types=LEAGUE_EVENT_TYPES,
+        append_form=append_form,
+        can_manage=can_manage,
+        is_owner=is_owner,
+        session_label=session_label,
+    )
+
+
+@leagues_bp.get("/l/<league_ref>/sessions/<session_id>/view")
+def session_public_view(league_ref: str, session_id: str):
+    if not db_ready():
+        flash("League database is not available.", "error")
+        return redirect(url_for("public.home"))
+
+    from charts import session_breakdown_series
+    from ledger_repositories import list_event_rows_for_league, list_event_rows_for_session
+    from league_repositories import find_league_by_public_key, find_session_for_league, list_sessions_for_league, user_has_league_role
+
+    _slug, public_key = split_league_ref(league_ref)
+    league = find_league_by_public_key(public_key)
+    if league is None:
+        abort(404)
+
+    if league.visibility != "public":
+        user_id = current_user_id()
+        if not user_id:
+            return redirect(url_for("account.login", next=request.path))
+        if not user_has_league_role(user_id, league.id, {"owner", "manager", "viewer"}):
+            abort(403)
+
+    session = find_session_for_league(league.id, session_id)
+    if session is None:
+        abort(404)
+
+    rows = list_event_rows_for_session(league.id, session.id)
+    summaries = build_session_summaries(rows)
+    summary = summaries[0] if summaries else empty_session_summary(session)
+
+    all_sessions = sorted(
+        build_session_summaries(list_event_rows_for_league(league.id)),
+        key=session_sort_key,
+    )
+    session_ref = f"{session.session_date.isoformat()}-{session.sequence_on_date:02d}"
+    chrono_idx = next((i for i, s in enumerate(all_sessions) if s.session_id == session_ref), 0)
+    session_number = chrono_idx + 1
+
+    all_db_sessions = list_sessions_for_league(league.id)
+    ref_to_db_id = {
+        f"{s.session_date.isoformat()}-{s.sequence_on_date:02d}": s.id
+        for s in all_db_sessions
+    }
+
+    prev_summary = all_sessions[chrono_idx - 1] if chrono_idx > 0 else None
+    next_summary = all_sessions[chrono_idx + 1] if chrono_idx < len(all_sessions) - 1 else None
+
+    return render_template(
+        "league_session_view.html",
+        league=league,
+        session_model=session,
+        session=summary,
+        session_number=session_number,
+        raw_events=session_events(rows, summary.session_id),
+        chart_data=session_breakdown_series(summary),
+        session_label=session_label,
+        prev_session_id=ref_to_db_id.get(prev_summary.session_id) if prev_summary else None,
+        next_session_id=ref_to_db_id.get(next_summary.session_id) if next_summary else None,
+        is_owner=False,
+    )
+
+
+@leagues_bp.post("/l/<league_ref>/sessions/<session_id>/open")
+@login_required
+def open_league_session(league_ref: str, session_id: str):
+    return update_session_status(league_ref, session_id, "open", "Session opened.")
+
+
+@leagues_bp.post("/l/<league_ref>/sessions/<session_id>/close")
+@login_required
+def close_league_session(league_ref: str, session_id: str):
+    return update_session_status(league_ref, session_id, "closed", "Session closed.")
+
+
+def update_session_status(league_ref: str, session_id: str, status: str, message: str):
+    if not db_ready():
+        flash("League database is not available.", "error")
+        return redirect(url_for("public.home"))
+
+    from ledger_repositories import append_ledger_event
+    from league_repositories import find_session_for_league, set_session_status
+
+    league = require_league(league_ref, {"owner", "manager"})
+    session = find_session_for_league(league.id, session_id)
+    if session is None:
+        abort(404)
+
+    if session.status == status:
+        flash(f"Session is already {status}.", "success")
+        return redirect(url_for("leagues.sessions", **league_url_values(league)))
+
+    set_session_status(session, status)
+    append_ledger_event(
+        league.id,
+        session.id,
+        "session_open" if status == "open" else "session_close",
+        0,
+        current_user_id() or "",
+        note=message,
+    )
+    db.session.commit()
+    flash(message, "success")
+    return redirect(url_for("leagues.sessions", **league_url_values(league)))
+
+
+@leagues_bp.route("/l/<league_ref>/settings", methods=["GET", "POST"])
+@login_required
+def league_settings(league_ref: str):
+    if not db_ready():
+        flash("League database is not available.", "error")
+        return redirect(url_for("public.home"))
+
+    league = require_league(league_ref, {"owner"})
+
+    form = {
+        "name": league.name,
+        "description": league.description or "",
+        "visibility": league.visibility,
+    }
+
+    if request.method == "POST":
+        form = {
+            "name": request.form.get("name", "").strip(),
+            "description": request.form.get("description", "").strip(),
+            "visibility": request.form.get("visibility", "private").strip(),
+        }
+        if len(form["name"]) < 2:
+            flash("League name must be at least 2 characters.", "error")
+        elif form["visibility"] not in ("private", "public"):
+            flash("Invalid visibility value.", "error")
+        else:
+            from utils import slugify
+
+            league.name = form["name"]
+            league.slug = slugify(form["name"])
+            league.description = form["description"] or None
+            league.visibility = form["visibility"]
+            db.session.commit()
+            flash("League settings saved.", "success")
+            return redirect(url_for("leagues.league_settings", league_ref=league.url_ref))
+
+    from league_repositories import list_members_for_league
+
+    members = list_members_for_league(league.id)
+    return render_template("league_settings.html", league=league, form=form, is_owner=True, members=members)
+
+
+@leagues_bp.post("/l/<league_ref>/settings/invite")
+@login_required
+def invite_member(league_ref: str):
+    if not db_ready():
+        flash("League database is not available.", "error")
+        return redirect(url_for("public.home"))
+
+    from auth import generate_invite_token
+    from emails import send_league_invite
+    from flask import current_app
+    from league_repositories import find_membership, find_user_by_email
+
+    league = require_league(league_ref, {"owner"})
+    email = normalize_email(request.form.get("email", ""))
+    role = request.form.get("role", "manager").strip()
+
+    if not email or "@" not in email:
+        flash("Enter a valid email address.", "error")
+        return redirect(url_for("leagues.league_settings", league_ref=league.url_ref))
+
+    if role not in ("manager", "viewer"):
+        flash("Invalid role.", "error")
+        return redirect(url_for("leagues.league_settings", league_ref=league.url_ref))
+
+    existing_user = find_user_by_email(email)
+    if existing_user:
+        existing_membership = find_membership(league.id, existing_user.id)
+        if existing_membership:
+            flash(f"{email} is already a member of this league.", "error")
+            return redirect(url_for("leagues.league_settings", league_ref=league.url_ref))
+
+    token = generate_invite_token(league.id, email, role, current_user_id() or "")
+    base_url = current_app.config.get("APP_BASE_URL", "").rstrip("/")
+    invite_url = f"{base_url}{url_for('account.accept_invite', token=token)}"
+
+    try:
+        send_league_invite(email, league.name, invite_url, current_user_id() or "")
+        flash(f"Invitation sent to {email}.", "success")
+    except Exception:
+        flash("Failed to send invitation email. Check your mail configuration.", "error")
+
+    return redirect(url_for("leagues.league_settings", league_ref=league.url_ref))
+
+
+@leagues_bp.post("/l/<league_ref>/settings/members/<user_id>/remove")
+@login_required
+def remove_member(league_ref: str, user_id: str):
+    if not db_ready():
+        flash("League database is not available.", "error")
+        return redirect(url_for("public.home"))
+
+    from league_repositories import remove_league_member
+
+    league = require_league(league_ref, {"owner"})
+
+    if user_id == current_user_id():
+        flash("You cannot remove yourself from the league.", "error")
+        return redirect(url_for("leagues.league_settings", league_ref=league.url_ref))
+
+    remove_league_member(league.id, user_id)
+    db.session.commit()
+    flash("Member removed.", "success")
+    return redirect(url_for("leagues.league_settings", league_ref=league.url_ref))
+
+
+@leagues_bp.post("/l/<league_ref>/archive")
+@login_required
+def archive_league(league_ref: str):
+    if not db_ready():
+        flash("League database is not available.", "error")
+        return redirect(url_for("public.home"))
+
+    from db_models import utc_now
+
+    league = require_league(league_ref, {"owner"})
+    confirm_name = request.form.get("confirm_name", "").strip()
+
+    if confirm_name != league.name:
+        flash("League name did not match. Archive cancelled.", "error")
+        return redirect(url_for("leagues.league_settings", league_ref=league_ref))
+
+    league.archived_at = utc_now()
+    db.session.commit()
+    flash(f'"{league.name}" has been archived.', "success")
+    return redirect(url_for("leagues.index"))
+
+
+@leagues_bp.get("/l/<league_ref>/ledger/export")
+@login_required
+def export_ledger_csv(league_ref: str):
+    if not db_ready():
+        flash("League database is not available.", "error")
+        return redirect(url_for("public.home"))
+
+    from ledger_repositories import list_event_rows_for_league
+    from storage import CSV_HEADERS
+
+    league = require_league(league_ref, {"owner", "manager", "viewer"})
+    rows = list_event_rows_for_league(league.id)
+
+    buf = io.StringIO()
+    writer = csv.DictWriter(buf, fieldnames=CSV_HEADERS)
+    writer.writeheader()
+    for row in rows:
+        writer.writerow({k: row[k] for k in CSV_HEADERS})
+
+    filename = f"ledger_{league.slug}_{datetime.now(timezone.utc).strftime('%Y%m%d_%H%M%S')}.csv"
+    response = make_response(buf.getvalue())
+    response.headers["Content-Type"] = "text/csv; charset=utf-8"
+    response.headers["Content-Disposition"] = f"attachment; filename={filename}"
+    return response
+
+
+@leagues_bp.post("/l/<league_ref>/ledger/import")
+@login_required
+def import_ledger_csv(league_ref: str):
+    if not db_ready():
+        flash("League database is not available.", "error")
+        return redirect(url_for("public.home"))
+
+    from db_models import CANONICAL_EVENT_TYPES, canonical_event_type
+    from ledger_repositories import (
+        append_ledger_event,
+        list_ledger_events_for_league,
+        session_event_ref,
+    )
+    from league_repositories import list_players_for_league, list_sessions_for_league
+    from storage import CSV_HEADERS
+
+    league = require_league(league_ref, {"owner", "manager"})
+
+    uploaded = request.files.get("csv_file")
+    if uploaded is None or uploaded.filename == "":
+        flash("Choose a CSV file to import.", "error")
+        return redirect(url_for("leagues.ledger", **league_url_values(league)))
+
+    if not uploaded.filename.lower().endswith(".csv"):
+        flash("Only CSV files are accepted.", "error")
+        return redirect(url_for("leagues.ledger", **league_url_values(league)))
+
+    try:
+        text = uploaded.stream.read().decode("utf-8-sig")
+    except UnicodeDecodeError:
+        flash("CSV must be valid UTF-8.", "error")
+        return redirect(url_for("leagues.ledger", **league_url_values(league)))
+
+    lines = text.splitlines()
+    if not lines:
+        flash("CSV file is empty.", "error")
+        return redirect(url_for("leagues.ledger", **league_url_values(league)))
+
+    try:
+        header = next(csv.reader(lines))
+    except Exception:
+        flash("Could not parse CSV header.", "error")
+        return redirect(url_for("leagues.ledger", **league_url_values(league)))
+
+    if header != CSV_HEADERS:
+        flash(f"CSV header mismatch. Expected: {', '.join(CSV_HEADERS)}", "error")
+        return redirect(url_for("leagues.ledger", **league_url_values(league)))
+
+    sessions = list_sessions_for_league(league.id)
+    session_by_ref = {session_event_ref(s): s for s in sessions}
+
+    players = list_players_for_league(league.id)
+    player_by_name = {p.display_name.strip().casefold(): p for p in players}
+
+    existing_legacy_ids = {
+        e.legacy_event_id
+        for e in list_ledger_events_for_league(league.id)
+        if e.legacy_event_id
+    }
+
+    errors: list[str] = []
+    queued: list[dict] = []
+    skipped = 0
+
+    for row_num, row in enumerate(csv.DictReader(lines), start=2):
+        event_id = row.get("id", "").strip()
+        if event_id and event_id in existing_legacy_ids:
+            skipped += 1
+            continue
+
+        raw_type = row.get("event_type", "").strip()
+        canonical = canonical_event_type(raw_type)
+        if canonical not in CANONICAL_EVENT_TYPES:
+            errors.append(f"Row {row_num}: unknown event_type '{raw_type}'")
+            continue
+
+        try:
+            amount_cents = int(row.get("amount_cents", "0"))
+        except ValueError:
+            errors.append(f"Row {row_num}: invalid amount_cents '{row.get('amount_cents')}'")
+            continue
+
+        session_ref = row.get("session_id", "").strip()
+        session = session_by_ref.get(session_ref)
+        if session is None:
+            errors.append(f"Row {row_num}: session '{session_ref}' not found in this league")
+            continue
+
+        player_name = row.get("player_name", "").strip()
+        player_id = None
+        if canonical not in {"note", "session_open", "session_close"}:
+            player = player_by_name.get(player_name.casefold())
+            if player is None:
+                errors.append(f"Row {row_num}: player '{player_name}' not found in this league")
+                continue
+            player_id = player.id
+
+        queued.append({
+            "session_id": session.id,
+            "event_type": canonical,
+            "amount_cents": amount_cents,
+            "player_id": player_id,
+            "note": row.get("note", "").strip() or None,
+            "legacy_event_id": event_id or None,
+            "legacy_player_name": player_name or None,
+        })
+
+    if errors:
+        for msg in errors[:5]:
+            flash(msg, "error")
+        if len(errors) > 5:
+            flash(f"… and {len(errors) - 5} more error(s). Nothing was imported.", "error")
+        return redirect(url_for("leagues.ledger", **league_url_values(league)))
+
+    for ev in queued:
+        append_ledger_event(
+            league.id,
+            ev["session_id"],
+            ev["event_type"],
+            ev["amount_cents"],
+            current_user_id() or "",
+            player_id=ev["player_id"],
+            note=ev["note"],
+            legacy_event_id=ev["legacy_event_id"],
+            legacy_player_name=ev["legacy_player_name"],
+        )
+
+    db.session.commit()
+    s_count = f"{len(queued)} event{'s' if len(queued) != 1 else ''}"
+    s_skip = f"{skipped} duplicate{'s' if skipped != 1 else ''}"
+    flash(f"Imported {s_count}, skipped {s_skip}.", "success")
+    return redirect(url_for("leagues.ledger", **league_url_values(league)))
diff --git a/routes/public.py b/routes/public.py
index 93bef28..c2371be 100644
--- a/routes/public.py
+++ b/routes/public.py
@@ -20,7 +20,24 @@ public_bp = Blueprint("public", __name__)
 
 @public_bp.get("/")
 def home():
-    return redirect(url_for("public.leaderboard"))
+    return render_template("landing.html")
+
+
+@public_bp.get("/help")
+def help():
+    return render_template("docs.html")
+
+
+@public_bp.get("/explore")
+def explore():
+    from auth import is_logged_in
+    from db import database_extensions_available
+    from league_repositories import league_counts, list_public_leagues
+
+    q = request.args.get("q", "").strip()
+    leagues = list_public_leagues(q) if database_extensions_available() else []
+    counts = {league.id: league_counts(league.id) for league in leagues}
+    return render_template("explore.html", leagues=leagues, counts=counts, q=q)
 
 
 @public_bp.get("/leaderboard")
diff --git a/static/css/style.css b/static/css/style.css
index c57957e..6d36ff5 100644
--- a/static/css/style.css
+++ b/static/css/style.css
@@ -13,6 +13,8 @@ body {
   width: 100%;
   min-width: 0;
   min-height: 100vh;
+  display: flex;
+  flex-direction: column;
   font-family: var(--font-ui);
   font-size: 15px;
   line-height: 1.5;
@@ -40,6 +42,63 @@ h1, h2, h3, h4 { margin: 0; }
   --font-money:   var(--font-ui);
 }
 
+/* ================================================================
+   SUBNAV
+   ================================================================ */
+.subnav {
+  position: sticky; top: 62px; z-index: 40;
+  background: rgba(15,15,18,.92);
+  backdrop-filter: blur(6px);
+  border-bottom: 1px solid var(--border);
+}
+.subnav__inner {
+  max-width: var(--w-admin);
+  margin: 0 auto;
+  padding: 0 var(--gutter);
+  height: 44px;
+  display: flex;
+  align-items: center;
+  gap: 4px;
+  overflow-x: auto;
+  scrollbar-width: none;
+}
+.subnav__inner::-webkit-scrollbar { display: none; }
+.subnav__name {
+  font-size: .8125rem;
+  font-weight: 600;
+  color: var(--text-strong);
+  white-space: nowrap;
+  text-decoration: none;
+  flex-shrink: 0;
+}
+.subnav__name:hover { color: var(--accent); }
+.subnav__divider {
+  display: block;
+  width: 1px;
+  height: 16px;
+  background: var(--border);
+  margin: 0 8px;
+  flex-shrink: 0;
+}
+.subnav__nav {
+  display: flex;
+  align-items: center;
+  gap: 2px;
+  flex: 1;
+  min-width: 0;
+}
+.subnav__link {
+  padding: 4px 10px;
+  font-size: .8125rem;
+  color: var(--text-muted);
+  text-decoration: none;
+  border-radius: 6px;
+  white-space: nowrap;
+  transition: color .15s, background .15s;
+}
+.subnav__link:hover { color: var(--text); background: var(--panel-hover); }
+.subnav__link.is-active { color: var(--accent); font-weight: 600; }
+
 /* ================================================================
    APP SHELL
    ================================================================ */
@@ -140,6 +199,7 @@ h1, h2, h3, h4 { margin: 0; }
 }
 .navlink:hover { color: var(--text-strong); }
 .navlink.is-active { color: var(--text-strong); background: var(--field-alt); }
+.navlink--mobile-auth { display: none; }
 .topbar__spacer { flex: 1; }
 .topbar__season {
   font-family: var(--font-mono);
@@ -151,8 +211,12 @@ h1, h2, h3, h4 { margin: 0; }
 .topbar__admin-actions { display: flex; align-items: center; gap: 8px; }
 
 .page {
+  flex: 1;
+  display: flex;
+  flex-direction: column;
   margin: 0 auto;
   padding: clamp(22px,3.4vw,46px) var(--gutter) 96px;
+  width: 100%;
   min-width: 0;
 }
 .page--public  { max-width: var(--w-public);  }
@@ -166,8 +230,8 @@ h1, h2, h3, h4 { margin: 0; }
   }
 }
 .site-footer {
-  margin-top: clamp(44px, 6vw, 76px);
-  padding-top: 18px;
+  margin-top: auto;
+  padding-top: clamp(44px, 6vw, 76px);
   border-top: 1px solid var(--divider);
   display: grid;
   grid-template-columns: 1fr auto 1fr;
@@ -539,6 +603,27 @@ h3 {
 }
 .form-card textarea { resize: vertical; min-height: 92px; }
 .form-card input::placeholder, .form-card textarea::placeholder { color: var(--faintest-2); }
+.session-locked-banner {
+  display: flex;
+  flex-direction: column;
+  gap: 2px;
+  padding: 10px 14px;
+  background: var(--field);
+  border: 1px solid var(--border);
+  border-left: 3px solid var(--warn);
+  border-radius: var(--r-sm);
+  font-size: .8125rem;
+}
+.session-locked-banner strong { color: var(--warn); }
+.session-locked-banner span { color: var(--text-muted); }
+fieldset[disabled] input,
+fieldset[disabled] select,
+fieldset[disabled] textarea,
+fieldset[disabled] button {
+  opacity: .45;
+  cursor: not-allowed;
+  pointer-events: none;
+}
 
 .session-filter-form { display: flex; align-items: center; gap: 10px; flex-wrap: wrap; }
 .session-filter-select {
@@ -1141,6 +1226,14 @@ td a:hover { color: var(--accent); }
 .split   { display: flex; flex-wrap: wrap; gap: var(--s4); align-items: flex-start; }
 .split > .col-main { flex: 2; min-width: 360px; }
 .split > .col-side { flex: 1; min-width: 300px; }
+.debt-row { display: flex; flex-direction: column; gap: 8px; padding: 14px 0; border-bottom: 1px solid var(--border); }
+.debt-row:last-child { border-bottom: none; }
+.debt-row__info { display: flex; flex-direction: column; gap: 2px; }
+.debt-row__info strong { font-size: .9375rem; color: var(--text-strong); }
+.debt-row__info span { font-size: .8125rem; color: var(--text-muted); }
+.debt-row__form { display: flex; align-items: center; gap: 8px; flex-wrap: wrap; }
+.debt-row__form input[type=number] { width: 100px; }
+.debt-row__form select { flex: 1; min-width: 120px; }
 .stack   { display: grid; gap: 20px; }
 .inline-action-form { margin: 0; }
 .button-row { display: flex; gap: 8px; flex-wrap: wrap; align-items: center; }
@@ -1653,6 +1746,517 @@ select.control { cursor: pointer; }
 .form-shell { display: grid; justify-content: center; padding-top: 40px; }
 .form-shell.narrow { grid-template-columns: minmax(320px, 480px); }
 
+/* Account / league shell */
+.league-grid {
+  display: grid;
+  grid-template-columns: repeat(auto-fit, minmax(240px, 1fr));
+  gap: 14px;
+}
+.league-action-grid,
+.league-manage-grid {
+  display: grid;
+  grid-template-columns: repeat(auto-fit, minmax(280px, 1fr));
+  gap: 16px;
+}
+.league-manage-grid {
+  align-items: start;
+}
+.league-card {
+  display: grid;
+  gap: 8px;
+  padding: 18px;
+  color: inherit;
+  transition: border-color 140ms, transform 140ms;
+}
+.league-card:hover {
+  border-color: var(--border-hi);
+  transform: translateY(-1px);
+}
+.league-card--disabled {
+  opacity: .72;
+}
+.league-card--disabled:hover {
+  border-color: var(--border-strong);
+  transform: none;
+}
+.league-card strong {
+  color: var(--text-strong);
+  font-size: 18px;
+}
+.league-card span:last-child {
+  color: var(--muted);
+  line-height: 1.45;
+}
+.league-hub-summary {
+  display: grid;
+  grid-template-columns: repeat(4, minmax(0, 1fr));
+  gap: 12px;
+  margin-bottom: 16px;
+}
+.league-board {
+  display: grid;
+  gap: 14px;
+}
+.league-row {
+  display: grid;
+  grid-template-columns: minmax(260px, 1.2fr) minmax(420px, 1.6fr) minmax(240px, .9fr);
+  grid-template-areas:
+    "identity metrics leaders"
+    "actions actions leaders";
+  align-items: stretch;
+  overflow: hidden;
+  border-top: 2px solid var(--accent);
+}
+.league-row__identity {
+  grid-area: identity;
+  display: grid;
+  align-content: start;
+  gap: 10px;
+  padding: 20px;
+  border-right: 1px solid var(--divider);
+}
+.league-row__chips {
+  display: flex;
+  gap: 6px;
+  flex-wrap: wrap;
+}
+.league-row__title {
+  display: flex;
+  justify-content: space-between;
+  gap: 16px;
+  align-items: flex-start;
+  color: inherit;
+  text-decoration: none;
+}
+.league-row__title h2 {
+  margin: 4px 0 0;
+  color: var(--text-strong);
+  font-size: 24px;
+  transition: color 140ms;
+}
+.league-row__title:hover h2 {
+  color: var(--accent);
+}
+.league-row__desc {
+  margin: 0;
+  color: var(--muted);
+  line-height: 1.45;
+}
+.league-row__meta {
+  display: flex;
+  flex-wrap: wrap;
+  gap: 8px 12px;
+  color: var(--faintest);
+  font-size: 12.5px;
+}
+.league-row__metrics {
+  grid-area: metrics;
+  display: grid;
+  grid-template-columns: repeat(4, minmax(0, 1fr));
+  gap: 1px;
+  background: var(--divider);
+  border-right: 1px solid var(--divider);
+}
+.league-row__metrics div {
+  min-width: 0;
+  display: grid;
+  align-content: center;
+  gap: 6px;
+  padding: 18px 14px;
+  background: var(--surface);
+}
+.league-row__metrics span {
+  color: var(--muted);
+  font-size: 11px;
+  font-weight: 700;
+  letter-spacing: .08em;
+  text-transform: uppercase;
+}
+.league-row__metrics strong {
+  color: var(--text-strong);
+  font-family: var(--font-mono);
+  font-size: 16px;
+  font-variant-numeric: tabular-nums;
+  overflow-wrap: anywhere;
+}
+.league-row__leaders {
+  grid-area: leaders;
+  display: grid;
+  align-content: start;
+  gap: 12px;
+  padding: 18px;
+  background: var(--surface-subtle);
+}
+.league-row__section-head {
+  display: flex;
+  justify-content: space-between;
+  gap: 10px;
+  align-items: center;
+}
+.league-row__section-head a {
+  color: var(--accent);
+  font-size: 12.5px;
+  font-weight: 700;
+  text-decoration: none;
+}
+.league-row__actions {
+  grid-area: actions;
+  display: flex;
+  flex-wrap: wrap;
+  align-items: center;
+  align-content: flex-start;
+  gap: 8px;
+  padding: 14px 20px;
+  border-top: 1px solid var(--divider);
+  border-right: 1px solid var(--divider);
+  background: rgba(255,255,255,.018);
+}
+.league-top-list {
+  display: grid;
+  gap: 1px;
+  margin: 0;
+  padding: 0;
+  list-style: none;
+  background: var(--divider);
+  border: 1px solid var(--divider);
+  border-radius: var(--r-sm);
+  overflow: hidden;
+}
+.league-top-list li {
+  display: flex;
+  justify-content: space-between;
+  gap: 12px;
+  padding: 10px 12px;
+  background: var(--surface);
+}
+.league-top-list span {
+  min-width: 0;
+  overflow: hidden;
+  text-overflow: ellipsis;
+  white-space: nowrap;
+  color: var(--text-strong);
+}
+.league-top-list strong {
+  flex: none;
+  font-family: var(--font-mono);
+  font-size: 12.5px;
+  font-variant-numeric: tabular-nums;
+}
+.league-row__empty {
+  display: grid;
+  gap: 6px;
+  padding: 16px;
+  border: 1px dashed var(--border-strong);
+  border-radius: var(--r-sm);
+  color: var(--muted);
+}
+.league-row__empty a {
+  color: var(--accent);
+  font-size: 13px;
+  font-weight: 700;
+  text-decoration: none;
+}
+.empty-panel {
+  display: grid;
+  gap: 12px;
+  justify-items: start;
+  padding: 22px;
+}
+.player-list {
+  display: grid;
+}
+.player-row {
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  gap: 14px;
+  padding: 14px 18px;
+  border-top: 1px solid var(--border);
+}
+.player-row:first-child {
+  border-top-color: var(--border-strong);
+}
+.player-row strong {
+  display: block;
+  color: var(--text-strong);
+}
+.player-row span {
+  color: var(--muted);
+  font-size: 13px;
+}
+.player-row__actions {
+  display: flex;
+  align-items: center;
+  gap: 10px;
+}
+.player-row__actions form {
+  margin: 0;
+}
+/* Player card grid */
+.player-grid {
+  display: grid;
+  grid-template-columns: repeat(auto-fill, minmax(230px, 1fr));
+  gap: 12px;
+  padding: 16px;
+}
+.player-card {
+  border: 1px solid var(--border);
+  border-radius: 8px;
+  padding: 16px;
+  display: flex;
+  flex-direction: column;
+  gap: 12px;
+  text-decoration: none;
+  transition: border-color 0.15s;
+}
+.player-card:hover { border-color: var(--accent); }
+.player-card--archived { opacity: 0.5; }
+.player-card__head {
+  display: flex;
+  align-items: center;
+  gap: 10px;
+}
+.player-avatar {
+  width: 40px;
+  height: 40px;
+  border-radius: 50%;
+  background: var(--surface-2);
+  color: var(--muted);
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  font-size: 13px;
+  font-weight: 700;
+  flex-shrink: 0;
+  letter-spacing: 0.02em;
+}
+.player-avatar--pos { background: color-mix(in srgb, var(--pos) 18%, transparent); color: var(--pos); }
+.player-avatar--neg { background: color-mix(in srgb, var(--neg) 18%, transparent); color: var(--neg); }
+.player-card__name-block { flex: 1; min-width: 0; }
+.player-card__name {
+  font-weight: 600;
+  color: var(--text);
+  text-decoration: none;
+  display: block;
+  white-space: nowrap;
+  overflow: hidden;
+  text-overflow: ellipsis;
+}
+.player-card__name:hover { color: var(--accent); }
+.player-card__sub { font-size: 12px; color: var(--muted); display: block; margin-top: 1px; }
+.player-card__stats {
+  display: grid;
+  grid-template-columns: 1fr 1fr 1fr;
+  gap: 6px;
+  border-top: 1px solid var(--border);
+  padding-top: 12px;
+}
+.player-card__stat {
+  display: flex;
+  flex-direction: column;
+  gap: 2px;
+}
+.player-card__stat .kicker { font-size: 9px; }
+.player-card__stat-val { font-size: 13px; font-weight: 600; color: var(--text); }
+/* Danger zone row (description left, action button right) */
+.danger-row {
+  display: flex;
+  align-items: flex-start;
+  justify-content: space-between;
+  gap: 20px;
+  flex-wrap: wrap;
+}
+.danger-row__title {
+  display: block;
+  color: var(--text-strong);
+  margin-bottom: 4px;
+}
+
+/* Danger button */
+.btn--danger {
+  background: var(--neg);
+  color: #fff;
+}
+.btn--danger:hover { opacity: .88; }
+.btn--danger:disabled { opacity: .4; cursor: not-allowed; }
+
+/* Session date block (used in session list rows) */
+.session-date-block {
+  flex: none;
+  display: grid;
+  text-align: center;
+  padding: 6px 10px;
+  background: var(--surface-sunk);
+  border: 1px solid var(--border);
+  border-radius: 8px;
+  min-width: 48px;
+}
+.session-date-block__mon {
+  display: block;
+  font-family: var(--font-mono);
+  font-size: 9.5px;
+  letter-spacing: .12em;
+  text-transform: uppercase;
+  color: var(--faintest);
+  line-height: 1;
+}
+.session-date-block__day {
+  display: block;
+  font-family: var(--font-display);
+  font-size: 20px;
+  font-weight: 700;
+  color: var(--text-strong);
+  line-height: 1.1;
+}
+
+/* Session create form — horizontal 3-col grid */
+.session-create-row {
+  display: grid;
+  grid-template-columns: 1fr 1fr 1fr;
+  gap: 14px;
+}
+@media (max-width: 860px) {
+  .session-create-row {
+    grid-template-columns: 1fr 1fr;
+  }
+}
+@media (max-width: 540px) {
+  .session-create-row {
+    grid-template-columns: 1fr;
+  }
+}
+
+/* Optional field hint inside label */
+.form-opt-hint {
+  font-family: var(--font-mono);
+  font-size: 9px;
+  letter-spacing: .06em;
+  color: var(--faintest-2);
+  text-transform: none;
+  font-weight: 400;
+}
+
+.status-pill {
+  display: inline-flex;
+  align-items: center;
+  min-height: 26px;
+  padding: 4px 9px;
+  border-radius: var(--r-pill);
+  border: 1px solid var(--border-strong);
+  color: var(--muted);
+  font: 11px var(--font-mono);
+  text-transform: uppercase;
+}
+.status-pill--active {
+  border-color: var(--pos-tint-bd);
+  color: var(--pos);
+  background: var(--pos-tint);
+}
+.status-pill--open {
+  border-color: var(--pos-tint-bd);
+  color: var(--pos);
+  background: var(--pos-tint);
+}
+.status-pill--closed,
+.status-pill--archived {
+  border-color: var(--border-strong);
+  color: var(--faint);
+  background: var(--field);
+}
+
+/* Session list row with left accent */
+.session-row {
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  gap: 16px;
+  padding: 14px 20px;
+  border-bottom: 1px solid var(--border);
+  border-left: 3px solid transparent;
+}
+.session-row:last-child { border-bottom: none; }
+.session-row--open  { border-left-color: var(--pos); }
+.session-row--closed { border-left-color: var(--border-strong); }
+.session-row__info { display: flex; align-items: center; gap: 14px; min-width: 0; }
+.session-row__text { min-width: 0; }
+.session-row__title { font-weight: 600; font-size: 14px; white-space: nowrap; overflow: hidden; text-overflow: ellipsis; }
+.session-row__title a { color: var(--text-strong); text-decoration: none; }
+.session-row__title a:hover { color: var(--accent); }
+.session-row__meta { font-size: 12px; color: var(--muted); margin-top: 2px; display: flex; align-items: center; gap: 8px; flex-wrap: wrap; }
+.session-row__stat { display: inline-flex; align-items: center; gap: 4px; }
+.session-row__actions { display: flex; align-items: center; gap: 6px; flex-shrink: 0; }
+.session-row__actions form { margin: 0; }
+
+/* Session detail — full-width player ledger rows */
+.player-ledger-list {
+  display: flex;
+  flex-direction: column;
+  max-height: 480px;
+  overflow-y: auto;
+  border-radius: 0 0 var(--r-lg) var(--r-lg);
+}
+.player-ledger-row {
+  padding: 14px 20px;
+  border-bottom: 1px solid var(--border);
+  border-left: 3px solid var(--border-strong);
+  display: flex;
+  flex-direction: column;
+  gap: 10px;
+}
+.player-ledger-row:last-child { border-bottom: none; }
+.player-ledger-row--pos { border-left-color: var(--pos); }
+.player-ledger-row--neg { border-left-color: var(--neg); }
+.player-ledger-row__header {
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  gap: 12px;
+}
+.player-ledger-row__name { font-size: 15px; font-weight: 700; color: var(--text-strong); }
+.player-ledger-row__fields {
+  display: grid;
+  grid-template-columns: repeat(4, 1fr);
+  border: 1px solid var(--border);
+  border-radius: var(--r-sm);
+  overflow: hidden;
+}
+.player-ledger-row__fields--secondary {
+  grid-template-columns: repeat(3, 1fr);
+  background: var(--surface-sunk);
+}
+.player-ledger-row__field {
+  padding: 8px 12px;
+  display: flex;
+  flex-direction: column;
+  gap: 3px;
+  border-right: 1px solid var(--border);
+  background: var(--surface);
+}
+.player-ledger-row__fields--secondary .player-ledger-row__field {
+  background: var(--surface-sunk);
+}
+.player-ledger-row__field:last-child { border-right: none; }
+.player-ledger-row__field--net { background: var(--surface-subtle); }
+.player-ledger-row__lbl {
+  font-size: 9.5px;
+  text-transform: uppercase;
+  letter-spacing: .08em;
+  color: var(--faintest);
+  font-family: var(--font-mono);
+  white-space: nowrap;
+}
+.player-ledger-row__val {
+  font-size: 14px;
+  font-weight: 600;
+  color: var(--text);
+  font-variant-numeric: tabular-nums;
+}
+@media (max-width: 600px) {
+  .player-ledger-row__fields { grid-template-columns: repeat(2, 1fr); }
+  .player-ledger-row__field { border-bottom: 1px solid var(--border); }
+  .player-ledger-row__fields--secondary { grid-template-columns: repeat(2, 1fr); }
+}
+
 /* Modal */
 .modal-backdrop {
   position: fixed;
@@ -1896,6 +2500,9 @@ select.control { cursor: pointer; }
     height: 38px;
     padding-inline: 11px;
   }
+  .topbar__account-actions {
+    display: none;
+  }
 }
 
 /* Toolbar: stack left/right sections vertically on narrow viewports */
@@ -1943,3 +2550,805 @@ select.control { cursor: pointer; }
   .seg { padding: 6px 10px; font-size: 12px; }
   .hero__title, h1 { font-size: 24px; }
 }
+
+/* ================================================================
+   LEAGUE DASHBOARD
+   ================================================================ */
+
+/* Hero */
+.db-hero {
+  position: relative;
+  overflow: hidden;
+  display: flex;
+  align-items: flex-start;
+  justify-content: space-between;
+  gap: 20px;
+  padding: 28px 0 26px;
+  flex-wrap: wrap;
+}
+.db-hero__bg-letter {
+  position: absolute;
+  right: -12px;
+  top: -24px;
+  font-family: var(--font-display);
+  font-size: 210px;
+  font-weight: 800;
+  line-height: 1;
+  color: var(--surface-raised);
+  user-select: none;
+  pointer-events: none;
+  z-index: 0;
+  letter-spacing: -6px;
+}
+.db-hero__body {
+  position: relative;
+  z-index: 1;
+  flex: 1;
+  min-width: 0;
+}
+.db-hero__actions {
+  position: relative;
+  z-index: 1;
+  display: flex;
+  align-items: center;
+  gap: 10px;
+  flex-wrap: wrap;
+  flex: none;
+  padding-top: 6px;
+}
+.db-hero__chips {
+  display: flex;
+  gap: 6px;
+  margin-bottom: 12px;
+}
+.db-chip {
+  display: inline-flex;
+  align-items: center;
+  gap: 5px;
+  padding: 3px 10px;
+  border-radius: var(--r-pill);
+  font-family: var(--font-mono);
+  font-size: 10px;
+  letter-spacing: .08em;
+  text-transform: uppercase;
+  font-weight: 500;
+  background: var(--surface-raised);
+  border: 1px solid var(--border-strong);
+  color: var(--muted);
+}
+.db-chip--accent {
+  background: var(--accent-chip);
+  border-color: var(--accent-chip-bd);
+  color: var(--accent);
+}
+.db-chip--public {
+  background: var(--pos-tint);
+  border-color: var(--pos-tint-bd);
+  color: var(--pos);
+}
+
+.league-back-link {
+  display: inline-flex;
+  align-items: center;
+  gap: 5px;
+  font-size: 13px;
+  font-weight: 600;
+  color: var(--muted);
+  text-decoration: none;
+  margin-bottom: 4px;
+  transition: color 120ms;
+}
+.league-back-link:hover { color: var(--accent); }
+
+/* Live session banner */
+.db-live-bar {
+  display: flex;
+  align-items: center;
+  gap: 14px;
+  padding: 12px 18px;
+  background: var(--pos-tint);
+  border: 1px solid var(--pos-tint-bd);
+  border-radius: var(--r-lg);
+  margin-bottom: 16px;
+  flex-wrap: wrap;
+}
+.db-live-bar__text {
+  flex: 1;
+  min-width: 0;
+  color: var(--pos);
+  font-size: 13.5px;
+  font-weight: 500;
+}
+.db-live-bar__btn {
+  background: var(--pos);
+  color: #0f0f12;
+  font-weight: 700;
+  flex: none;
+}
+.db-live-bar__btn:hover { opacity: .88; }
+
+/* Stats row — uses existing stat + stat--rail */
+.db-stats {
+  display: grid;
+  grid-template-columns: repeat(4, minmax(0, 1fr));
+  gap: var(--s3);
+  margin-bottom: 20px;
+}
+
+/* Navigation card grid */
+.dashboard-grid {
+  display: grid;
+  grid-template-columns: repeat(2, minmax(0, 1fr));
+  gap: 14px;
+}
+.dashboard-card {
+  position: relative;
+  display: grid;
+  grid-template-rows: auto auto 1fr auto;
+  gap: 8px;
+  padding: 20px;
+  padding-top: 22px;
+  color: inherit;
+  text-decoration: none;
+  overflow: hidden;
+  transition: border-color 140ms, transform 140ms, box-shadow 140ms;
+  min-height: 152px;
+}
+.dashboard-card::before {
+  content: '';
+  position: absolute;
+  top: 0;
+  left: 0;
+  right: 0;
+  height: 3px;
+  background: var(--card-accent, var(--border-strong));
+  border-radius: var(--r-lg) var(--r-lg) 0 0;
+  transition: opacity 140ms;
+}
+.dashboard-card:hover {
+  border-color: var(--border-hi);
+  transform: translateY(-2px);
+  box-shadow: 0 10px 28px rgba(0,0,0,.22);
+}
+.dashboard-card--live {
+  border-color: var(--pos-tint-bd);
+  background: linear-gradient(160deg, rgba(111,192,147,.07) 0%, transparent 55%), var(--surface);
+}
+.dashboard-card--live:hover { border-color: var(--pos); }
+.dashboard-card__top {
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  gap: 8px;
+}
+.dashboard-card__top .kicker { margin: 0; }
+.dashboard-card__count {
+  font-family: var(--font-mono);
+  font-size: 10.5px;
+  color: var(--faintest);
+}
+.dashboard-card__title {
+  display: block;
+  font-size: 21px;
+  font-weight: 700;
+  color: var(--text-strong);
+}
+.dashboard-card__desc {
+  margin: 0;
+  color: var(--muted);
+  font-size: 13.5px;
+  line-height: 1.45;
+}
+.dashboard-card__arrow {
+  font-size: 18px;
+  color: var(--faintest);
+  justify-self: end;
+  transition: color 140ms, transform 140ms;
+}
+.dashboard-card:hover .dashboard-card__arrow {
+  color: var(--card-accent, var(--accent));
+  transform: translateX(3px);
+}
+
+@media (max-width: 640px) {
+  .db-stats { grid-template-columns: 1fr 1fr; }
+  .dashboard-grid { grid-template-columns: 1fr; }
+  .db-hero { flex-direction: column; gap: 14px; }
+  .db-hero__bg-letter { font-size: 140px; }
+}
+
+/* Landing page */
+.l-bg {
+  position: fixed;
+  inset: 0;
+  z-index: -1;
+  pointer-events: none;
+  background:
+    radial-gradient(ellipse 70% 55% at 12% 18%, rgba(155,140,240,.11) 0%, transparent 65%),
+    radial-gradient(ellipse 50% 45% at 88% 78%, rgba(111,192,147,.07) 0%, transparent 55%),
+    radial-gradient(ellipse 55% 50% at 68% -8%, rgba(155,140,240,.06) 0%, transparent 60%);
+}
+.l-bg::after {
+  content: "";
+  position: absolute;
+  inset: 0;
+  background-image: radial-gradient(circle, rgba(255,255,255,.032) 1px, transparent 1px);
+  background-size: 28px 28px;
+  mask-image: radial-gradient(ellipse 90% 90% at 50% 40%, black 30%, transparent 100%);
+}
+
+.l-hero {
+  padding: clamp(52px, 8vw, 96px) 0 clamp(36px, 5vw, 52px);
+  max-width: 700px;
+}
+.l-hero__kicker {
+  display: inline-block;
+  padding: 4px 12px;
+  border-radius: var(--r-pill);
+  background: var(--accent-chip);
+  border: 1px solid var(--accent-chip-bd);
+  color: var(--accent);
+  font-family: var(--font-mono);
+  font-size: 10.5px;
+  letter-spacing: .10em;
+  text-transform: uppercase;
+  font-weight: 500;
+  margin-bottom: 22px;
+}
+.l-hero__h1 {
+  font-size: clamp(36px, 5.8vw, 66px);
+  font-weight: 700;
+  line-height: 1.04;
+  letter-spacing: -.02em;
+  color: var(--text);
+  margin: 0 0 18px;
+}
+.l-hero__sub {
+  font-size: clamp(15px, 1.8vw, 17px);
+  color: var(--muted);
+  line-height: 1.65;
+  margin: 0 0 28px;
+  max-width: 54ch;
+}
+.l-hero__cta {
+  display: flex;
+  flex-wrap: wrap;
+  gap: 10px;
+}
+
+/* Preview strip */
+.l-preview {
+  display: grid;
+  grid-template-columns: 1fr 1.25fr 1fr;
+  gap: 10px;
+  margin-bottom: clamp(48px, 7vw, 76px);
+  align-items: start;
+}
+.l-preview__panel {
+  background: var(--surface);
+  border: 1px solid var(--border);
+  border-radius: var(--r-lg);
+  overflow: hidden;
+}
+.l-preview__panel--featured {
+  border-color: var(--accent-chip-bd);
+  box-shadow: 0 0 0 1px var(--accent-chip-bd), 0 8px 32px rgba(155,140,240,.10);
+}
+.l-preview__head {
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  padding: 11px 14px;
+  border-bottom: 1px solid var(--divider);
+  background: var(--surface-head);
+}
+.l-preview__panel--featured .l-preview__head {
+  background: var(--accent-tint);
+  border-bottom-color: var(--accent-chip-bd);
+}
+.l-preview__tag {
+  font-family: var(--font-mono);
+  font-size: 9.5px;
+  letter-spacing: .08em;
+  color: var(--faintest);
+  text-transform: uppercase;
+}
+.l-preview__rows {
+  display: grid;
+}
+.l-preview__row {
+  display: flex;
+  align-items: center;
+  gap: 10px;
+  padding: 9px 14px;
+  border-bottom: 1px solid var(--divider);
+  font-size: 13px;
+}
+.l-preview__row:last-child { border-bottom: none; }
+.l-preview__row--faded { opacity: .4; }
+.l-preview__rank {
+  font-family: var(--font-mono);
+  font-size: 10.5px;
+  color: var(--faintest);
+  min-width: 12px;
+}
+.l-preview__player {
+  flex: 1;
+  font-weight: 600;
+  color: var(--text-2);
+  white-space: nowrap;
+  overflow: hidden;
+  text-overflow: ellipsis;
+}
+.l-preview__val {
+  font-family: var(--font-mono);
+  font-size: 12px;
+  font-variant-numeric: tabular-nums;
+  white-space: nowrap;
+}
+.l-preview__val--pos { color: var(--pos); }
+.l-preview__val--neg { color: var(--neg); }
+.l-preview__stats {
+  display: grid;
+  grid-template-columns: repeat(3, 1fr);
+  gap: 1px;
+  background: var(--divider);
+  border-bottom: 1px solid var(--divider);
+}
+.l-preview__stat {
+  padding: 12px 12px;
+  background: var(--surface);
+  display: grid;
+  gap: 5px;
+}
+.l-preview__panel--featured .l-preview__stat {
+  background: color-mix(in srgb, var(--accent) 4%, var(--surface));
+}
+.l-preview__stat strong {
+  display: block;
+  font-family: var(--font-mono);
+  font-size: 15px;
+  font-variant-numeric: tabular-nums;
+  color: var(--text-strong);
+}
+.l-preview__evts {
+  display: grid;
+  gap: 0;
+}
+.l-preview__evt {
+  display: flex;
+  align-items: center;
+  gap: 8px;
+  padding: 8px 12px;
+  border-bottom: 1px solid var(--divider);
+  font-size: 12px;
+}
+.l-preview__evt:last-child { border-bottom: none; }
+.l-preview__evt-name {
+  flex: 1;
+  color: var(--text-2);
+  font-weight: 600;
+  font-size: 12px;
+}
+.l-preview__evt-val {
+  font-family: var(--font-mono);
+  font-size: 11.5px;
+  color: var(--num);
+}
+
+/* Feature grid */
+.l-features {
+  display: grid;
+  grid-template-columns: repeat(4, 1fr);
+  gap: 1px;
+  background: var(--border);
+  border: 1px solid var(--border);
+  border-radius: var(--r-lg);
+  overflow: hidden;
+  margin-bottom: clamp(40px, 6vw, 64px);
+}
+.l-feature {
+  background: var(--surface);
+  padding: 26px 22px;
+  display: grid;
+  align-content: start;
+  gap: 10px;
+}
+.l-feature__icon {
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  width: 42px;
+  height: 42px;
+  border-radius: var(--r-sm);
+  background: var(--accent-chip);
+  border: 1px solid var(--accent-chip-bd);
+  color: var(--accent);
+  margin-bottom: 4px;
+}
+.l-feature__title {
+  font-size: 15px;
+  font-weight: 600;
+  color: var(--text-strong);
+  margin: 0;
+}
+.l-feature__desc {
+  font-size: 13.5px;
+  color: var(--muted);
+  line-height: 1.6;
+  margin: 0;
+}
+
+/* Explore page */
+.explore-search {
+  display: flex;
+  gap: 8px;
+  max-width: 480px;
+  margin-bottom: 24px;
+}
+.explore-search__input {
+  flex: 1;
+  width: auto;
+}
+.explore-grid {
+  display: grid;
+  grid-template-columns: repeat(auto-fill, minmax(260px, 1fr));
+  gap: 12px;
+}
+.explore-card {
+  display: flex;
+  flex-direction: column;
+  gap: 14px;
+  padding: 18px 20px;
+  border: 1px solid var(--border);
+  border-radius: var(--r-lg);
+  background: var(--surface);
+  text-decoration: none;
+  color: inherit;
+  transition: border-color 0.15s, box-shadow 0.15s;
+}
+.explore-card:hover {
+  border-color: var(--accent);
+  box-shadow: 0 2px 12px color-mix(in srgb, var(--accent) 10%, transparent);
+}
+.explore-card__head { display: flex; flex-direction: column; gap: 4px; }
+.explore-card__name { font-size: 16px; font-weight: 700; color: var(--text-strong); margin: 0; }
+.explore-card__desc { font-size: 13px; color: var(--muted); margin: 0; line-height: 1.4; }
+.explore-card__stats {
+  display: flex;
+  gap: 16px;
+  padding: 10px 0;
+  border-top: 1px solid var(--border);
+  border-bottom: 1px solid var(--border);
+}
+.explore-card__stat { display: flex; flex-direction: column; gap: 2px; }
+.explore-card__stat strong { font-size: 18px; font-weight: 700; color: var(--text-strong); }
+.explore-card__footer { margin-top: auto; }
+.explore-card__link { font-size: 13px; color: var(--accent); font-weight: 500; }
+
+/* Info tip */
+.info-tip {
+  position: relative;
+  display: inline-flex;
+  align-items: center;
+  margin-left: 5px;
+  color: var(--faintest-2);
+  cursor: default;
+  vertical-align: middle;
+  transition: color 120ms;
+}
+.info-tip:hover,
+.info-tip:focus,
+.info-tip.is-open { color: var(--accent); outline: none; }
+.info-tip__bubble {
+  position: fixed;
+  width: max-content;
+  max-width: 260px;
+  padding: 9px 13px;
+  background: var(--surface-head);
+  border: 1px solid var(--border-strong);
+  border-radius: var(--r-sm);
+  box-shadow: 0 8px 24px rgba(0,0,0,.35);
+  font: 400 12.5px/1.5 var(--font-ui);
+  color: var(--text-2);
+  text-transform: none;
+  letter-spacing: 0;
+  white-space: normal;
+  pointer-events: none;
+  opacity: 0;
+  visibility: hidden;
+  transition: opacity 120ms;
+  z-index: 1000;
+}
+.info-tip.is-open .info-tip__bubble { opacity: 1; visibility: visible; }
+
+/* Docs / help page */
+.docs-grid {
+  display: grid;
+  grid-template-columns: 200px 1fr;
+  gap: 48px;
+  align-items: start;
+  padding-top: 12px;
+}
+.docs-nav {
+  position: sticky;
+  top: 80px;
+  display: grid;
+  gap: 4px;
+}
+.docs-nav .kicker { margin-bottom: 6px; }
+.docs-nav a {
+  display: block;
+  font-size: 13.5px;
+  color: var(--muted);
+  text-decoration: none;
+  padding: 4px 0;
+  border-left: 2px solid var(--divider);
+  padding-left: 12px;
+  transition: color 120ms, border-color 120ms;
+}
+.docs-nav a:hover { color: var(--accent); border-left-color: var(--accent); }
+.docs-body {
+  display: grid;
+  gap: 52px;
+  padding-bottom: 80px;
+}
+.docs-section { display: grid; gap: 14px; }
+.docs-h2 {
+  font-size: 22px;
+  font-weight: 700;
+  color: var(--text-strong);
+  margin: 0;
+  padding-bottom: 12px;
+  border-bottom: 1px solid var(--divider);
+}
+.docs-section p {
+  margin: 0;
+  color: var(--muted);
+  font-size: 14.5px;
+  line-height: 1.7;
+}
+.docs-section p strong { color: var(--text-2); }
+.docs-callout {
+  padding: 12px 16px;
+  background: var(--accent-tint);
+  border: 1px solid var(--accent-chip-bd);
+  border-left: 3px solid var(--accent);
+  border-radius: var(--r-sm);
+  font-size: 13.5px;
+  color: var(--text-2);
+  line-height: 1.6;
+}
+.docs-callout strong { color: var(--accent); }
+.docs-term-grid {
+  display: grid;
+  grid-template-columns: repeat(auto-fill, minmax(220px, 1fr));
+  gap: 10px;
+}
+.docs-term {
+  display: grid;
+  gap: 4px;
+  padding: 14px 16px;
+  background: var(--surface);
+  border: 1px solid var(--border);
+  border-radius: var(--r-sm);
+}
+.docs-term strong {
+  font-size: 13px;
+  color: var(--text-strong);
+}
+.docs-term span {
+  font-size: 12.5px;
+  color: var(--muted);
+  line-height: 1.5;
+}
+.docs-events {
+  display: grid;
+  gap: 12px;
+}
+.docs-event {
+  display: flex;
+  gap: 14px;
+  align-items: flex-start;
+  padding: 14px 16px;
+  background: var(--surface);
+  border: 1px solid var(--border);
+  border-radius: var(--r-sm);
+}
+.docs-event .pill { flex: none; margin-top: 2px; }
+.docs-event div { display: grid; gap: 4px; }
+.docs-event strong { font-size: 13.5px; color: var(--text-strong); }
+.docs-event p { margin: 0; font-size: 13px; color: var(--muted); line-height: 1.55; }
+@media (max-width: 760px) {
+  .docs-grid {
+    grid-template-columns: 1fr;
+    gap: 24px;
+  }
+  .docs-nav {
+    position: static;
+    display: flex;
+    flex-wrap: wrap;
+    gap: 6px;
+  }
+  .docs-nav .kicker { width: 100%; }
+  .docs-nav a {
+    border-left: none;
+    padding-left: 0;
+    border-bottom: 2px solid var(--divider);
+    padding-bottom: 4px;
+  }
+}
+
+@media (max-width: 900px) {
+  .l-preview {
+    grid-template-columns: 1fr;
+  }
+  .l-preview__panel:not(.l-preview__panel--featured) {
+    display: none;
+  }
+  .l-features {
+    grid-template-columns: 1fr 1fr;
+  }
+  .league-row {
+    grid-template-columns: 1fr;
+    grid-template-areas:
+      "identity"
+      "metrics"
+      "leaders"
+      "actions";
+  }
+  .league-row__identity,
+  .league-row__metrics,
+  .league-row__actions {
+    border-right: 0;
+  }
+  .league-row__identity,
+  .league-row__metrics,
+  .league-row__leaders {
+    border-bottom: 1px solid var(--divider);
+  }
+}
+
+@media (max-width: 560px) {
+  .l-features {
+    grid-template-columns: 1fr;
+  }
+  .league-hub-summary,
+  .league-row__metrics {
+    grid-template-columns: 1fr 1fr;
+  }
+  .league-row__title {
+    display: grid;
+  }
+  .league-row__actions .btn {
+    flex: none;
+  }
+}
+
+/* ── Audit page ─────────────────────────────────────────────────── */
+.audit-grid {
+  display: grid;
+  grid-template-columns: repeat(auto-fit, minmax(300px, 1fr));
+  gap: var(--s3);
+  margin-top: 24px;
+}
+
+.audit-alert { padding: 0; }
+.audit-alert .panel__head { padding: 14px 20px; }
+
+.audit-item-list { display: flex; flex-direction: column; }
+
+.audit-item {
+  display: flex;
+  justify-content: space-between;
+  align-items: center;
+  gap: 12px;
+  padding: 12px 20px;
+  border-top: 1px solid var(--divider);
+}
+.audit-item:first-child { border-top: none; }
+
+.audit-item > div {
+  display: flex;
+  flex-direction: column;
+  gap: 2px;
+  min-width: 0;
+}
+
+.audit-item__right {
+  display: flex;
+  align-items: center;
+  gap: 10px;
+  flex-shrink: 0;
+}
+
+/* ── Void events ────────────────────────────────────────────────── */
+.event-card--voided {
+  opacity: 0.45;
+}
+.event-card--voided .event-amount,
+.event-card--voided strong {
+  text-decoration: line-through;
+}
+
+.void-badge {
+  font: 600 10px/1 var(--font-ui);
+  text-transform: uppercase;
+  letter-spacing: .04em;
+  color: var(--neg);
+  background: color-mix(in srgb, var(--neg) 12%, transparent);
+  border: 1px solid color-mix(in srgb, var(--neg) 30%, transparent);
+  border-radius: var(--r-sm);
+  padding: 2px 6px;
+}
+
+.void-reason { color: var(--neg); font-style: italic; }
+
+.btn-void-toggle {
+  all: unset;
+  cursor: pointer;
+  display: block;
+  font: 400 10px/1 var(--font-ui);
+  letter-spacing: .04em;
+  color: var(--text-3);
+  margin-top: 6px;
+  opacity: 0;
+  transition: opacity 150ms, color 150ms;
+}
+.event-card:hover .btn-void-toggle { opacity: 0.3; }
+.btn-void-toggle:hover { opacity: 1 !important; color: var(--neg); }
+
+
+.member-row {
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  gap: 12px;
+  padding: 10px 20px;
+  border-bottom: 1px solid var(--border);
+}
+.member-row:last-child { border-bottom: none; }
+.member-row > div { min-width: 0; }
+.member-row strong { font: 600 14px/1.4 var(--font-ui); color: var(--text-1); }
+
+.card-menu { position: relative; flex-shrink: 0; }
+.card-menu__trigger {
+  all: unset;
+  cursor: pointer;
+  padding: 4px 8px;
+  border-radius: var(--r-sm);
+  color: var(--faint);
+  font-size: 15px;
+  font-weight: 700;
+  letter-spacing: 3px;
+  line-height: 1;
+  transition: color 120ms, background 120ms;
+}
+.card-menu__trigger:hover { color: var(--text-2); background: var(--surface-raised); }
+.card-menu__dropdown {
+  position: absolute;
+  right: 0;
+  top: calc(100% + 4px);
+  z-index: 200;
+  background: var(--surface-raised);
+  border: 1px solid var(--border-strong);
+  border-radius: var(--r-sm);
+  min-width: 136px;
+  padding: 4px;
+  box-shadow: 0 8px 24px rgba(0,0,0,.55);
+}
+.card-menu__item {
+  all: unset;
+  cursor: pointer;
+  display: block;
+  width: 100%;
+  padding: 8px 12px;
+  font: 400 13px/1 var(--font-ui);
+  color: var(--text-2);
+  border-radius: calc(var(--r-sm) - 3px);
+  transition: background 100ms, color 100ms;
+  box-sizing: border-box;
+}
+.card-menu__item:hover { background: var(--field); color: var(--text); }
+.card-menu__item--warn { color: var(--neg); }
+.card-menu__item--warn:hover { background: var(--neg-tint); color: var(--neg); }
diff --git a/storage.py b/storage.py
index 0cc324a..341aa36 100644
--- a/storage.py
+++ b/storage.py
@@ -30,6 +30,8 @@ class EventRow(TypedDict):
     amount_cents: int
     note: str
     actor: str
+    voided_at: str
+    void_reason: str
 
 
 VALID_EVENT_TYPES = {
@@ -79,6 +81,8 @@ def load_events(csv_path: Path) -> list[EventRow]:
                     amount_cents=int(row["amount_cents"] or 0),
                     note=row.get("note", ""),
                     actor=row.get("actor", ""),
+                    voided_at="",
+                    void_reason="",
                 )
             )
 
diff --git a/templates/_league_subnav.html b/templates/_league_subnav.html
new file mode 100644
index 0000000..38380b0
--- /dev/null
+++ b/templates/_league_subnav.html
@@ -0,0 +1,18 @@
+<div class="subnav">
+    <div class="subnav__inner">
+        <a class="subnav__name" href="{{ url_for('leagues.dashboard', league_ref=league.url_ref) }}">{{ league.name }}</a>
+        <span class="subnav__divider"></span>
+        <nav class="subnav__nav">
+            <a class="subnav__link {{ 'is-active' if request.endpoint == 'leagues.dashboard' }}" href="{{ url_for('leagues.dashboard', league_ref=league.url_ref) }}">Overview</a>
+            <a class="subnav__link {{ 'is-active' if request.endpoint in ('leagues.sessions', 'leagues.session_detail') }}" href="{{ url_for('leagues.sessions', league_ref=league.url_ref) }}">Sessions</a>
+            <a class="subnav__link {{ 'is-active' if request.endpoint in ('leagues.players', 'leagues.player_detail') }}" href="{{ url_for('leagues.players', league_ref=league.url_ref) }}">Players</a>
+            <a class="subnav__link {{ 'is-active' if request.endpoint == 'leagues.leaderboard' }}" href="{{ url_for('leagues.leaderboard', league_ref=league.url_ref) }}">Leaderboard</a>
+            {% if is_logged_in %}
+            <a class="subnav__link {{ 'is-active' if request.endpoint == 'leagues.ledger' }}" href="{{ url_for('leagues.ledger', league_ref=league.url_ref) }}">Ledger</a>
+            {% endif %}
+            {% if is_owner is defined and is_owner %}
+            <a class="subnav__link {{ 'is-active' if request.endpoint == 'leagues.league_settings' }}" href="{{ url_for('leagues.league_settings', league_ref=league.url_ref) }}">Settings</a>
+            {% endif %}
+        </nav>
+    </div>
+</div>
diff --git a/templates/account_login.html b/templates/account_login.html
new file mode 100644
index 0000000..da8ddb8
--- /dev/null
+++ b/templates/account_login.html
@@ -0,0 +1,27 @@
+{% extends "base.html" %}
+{% block title %}Login · myboker.org{% endblock %}
+{% block content %}
+
+<div class="form-shell narrow">
+    <form class="panel form-card" method="post">
+        <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
+        <div>
+            <p class="eyebrow">Owner access</p>
+            <h1 style="font-size:28px;margin-bottom:8px;">Account login</h1>
+            <p class="muted-text" style="margin-bottom:8px;">Manage leagues, players, sessions, and ledger entries.</p>
+        </div>
+        <label>
+            <span>Email</span>
+            <input type="email" name="email" autocomplete="email" value="{{ form.email or '' }}" required>
+        </label>
+        <label>
+            <span>Password</span>
+            <input type="password" name="password" autocomplete="current-password" required>
+        </label>
+        <button class="btn btn--primary" type="submit">Login</button>
+        <a class="btn btn--ghost" href="{{ url_for('account.register') }}">Create account</a>
+        <a style="font:400 12px/1 var(--font-ui);color:var(--text-3);text-align:center;margin-top:4px;" href="{{ url_for('account.forgot_password') }}">Forgot password?</a>
+    </form>
+</div>
+
+{% endblock %}
diff --git a/templates/account_register.html b/templates/account_register.html
new file mode 100644
index 0000000..d0c65b3
--- /dev/null
+++ b/templates/account_register.html
@@ -0,0 +1,30 @@
+{% extends "base.html" %}
+{% block title %}Create Account · myboker.org{% endblock %}
+{% block content %}
+
+<div class="form-shell narrow">
+    <form class="panel form-card" method="post">
+        <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
+        <div>
+            <p class="eyebrow">Owner account</p>
+            <h1 style="font-size:28px;margin-bottom:8px;">Create account</h1>
+            <p class="muted-text" style="margin-bottom:8px;">Accounts are for league owners and managers.</p>
+        </div>
+        <label>
+            <span>Email</span>
+            <input type="email" name="email" autocomplete="email" value="{{ form.email or '' }}" required>
+        </label>
+        <label>
+            <span>Password</span>
+            <input type="password" name="password" autocomplete="new-password" minlength="8" required>
+        </label>
+        <label>
+            <span>Confirm password</span>
+            <input type="password" name="confirm_password" autocomplete="new-password" minlength="8" required>
+        </label>
+        <button class="btn btn--primary" type="submit">Create account</button>
+        <a class="btn btn--ghost" href="{{ url_for('account.login') }}">Login instead</a>
+    </form>
+</div>
+
+{% endblock %}
diff --git a/templates/account_settings.html b/templates/account_settings.html
new file mode 100644
index 0000000..8bbe18d
--- /dev/null
+++ b/templates/account_settings.html
@@ -0,0 +1,164 @@
+{% extends "base.html" %}
+{% block title %}Account settings · myboker.org{% endblock %}
+{% block content %}
+
+<div class="hero" style="padding-bottom:18px;">
+    <p class="hero__kicker">Account</p>
+    <h1 class="hero__title">Settings</h1>
+    <p class="hero__sub">Manage your email address, password, and account.</p>
+</div>
+
+<div class="toolbar">
+    <div class="toolbar__left">
+        <a class="btn btn--ghost btn--sm" href="{{ url_for('leagues.index') }}">My leagues</a>
+    </div>
+</div>
+
+<div class="stack">
+
+    <form class="panel form-card" method="post" action="{{ url_for('account.update_email') }}">
+        <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
+        <div>
+            <p class="eyebrow">Profile</p>
+            <h2 class="panel__title" style="margin-top:4px;">Email address</h2>
+        </div>
+        <label>
+            <span>Email</span>
+            <input type="email" name="email" value="{{ user.email }}" required autocomplete="email">
+        </label>
+        <label>
+            <span>Current password <span class="form-opt-hint">(required to change)</span></span>
+            <input type="password" name="current_password" required autocomplete="current-password">
+        </label>
+        <div>
+            <button class="btn btn--primary" type="submit">Update email</button>
+        </div>
+    </form>
+
+    <form class="panel form-card" method="post" action="{{ url_for('account.update_password') }}">
+        <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
+        <div>
+            <p class="eyebrow">Security</p>
+            <h2 class="panel__title" style="margin-top:4px;">Change password</h2>
+        </div>
+        <label>
+            <span>Current password</span>
+            <input type="password" name="current_password" required autocomplete="current-password">
+        </label>
+        <label>
+            <span>New password</span>
+            <input type="password" name="new_password" required autocomplete="new-password">
+        </label>
+        <label>
+            <span>Confirm new password</span>
+            <input type="password" name="confirm_password" required autocomplete="new-password">
+        </label>
+        <div>
+            <button class="btn btn--primary" type="submit">Change password</button>
+        </div>
+    </form>
+
+    <div class="panel">
+        <div class="panel__head">
+            <div>
+                <p class="kicker" style="margin:0;color:var(--neg);">Danger zone</p>
+                <h2 class="panel__title">Destructive actions</h2>
+            </div>
+        </div>
+        <div class="panel__body">
+            <div class="danger-row">
+                <div>
+                    <strong class="danger-row__title">Delete account</strong>
+                    <p class="muted-text">Permanently disables your account and archives all leagues you own. This cannot be undone.</p>
+                </div>
+                <button class="btn btn--ghost btn--sm" type="button" data-modal="modal-delete-account">Delete account</button>
+            </div>
+        </div>
+    </div>
+
+</div>
+
+<div class="modal-backdrop" id="modal-delete-account" hidden>
+    <div class="modal-card">
+        <div class="modal-card__head">
+            <h2 style="font-size:18px;margin:0;">Delete account</h2>
+        </div>
+        <p class="modal-card__text">
+            Your account will be <strong>permanently disabled</strong> and all leagues you own will be archived. This cannot be undone.<br><br>
+            Type <strong>DELETE</strong> and enter your password to confirm.
+        </p>
+        <form method="post" action="{{ url_for('account.delete_account') }}">
+            <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
+            <div style="padding:0 20px 16px;display:grid;gap:10px;">
+                <input
+                    class="modal-confirm-input"
+                    type="text"
+                    name="confirm"
+                    placeholder='Type "DELETE"'
+                    autocomplete="off"
+                    data-match="DELETE"
+                    data-target="delete-confirm-btn"
+                    data-also-requires="delete-password-input"
+                >
+                <input
+                    class="modal-password-input"
+                    id="delete-password-input"
+                    type="password"
+                    name="current_password"
+                    placeholder="Your password"
+                    autocomplete="current-password"
+                    data-target="delete-confirm-btn"
+                    data-confirm-input="modal-delete-account"
+                >
+            </div>
+            <div class="modal-card__actions">
+                <button class="btn btn--ghost btn--sm" type="button" data-close-modal>Cancel</button>
+                <button class="btn btn--sm btn--danger" id="delete-confirm-btn" type="submit" disabled>Delete my account</button>
+            </div>
+        </form>
+    </div>
+</div>
+
+<script>
+(function () {
+    function openModal(id) {
+        const el = document.getElementById(id);
+        if (el) {
+            el.removeAttribute('hidden');
+            const inp = el.querySelector('.modal-confirm-input');
+            if (inp) { inp.value = ''; inp.focus(); }
+            const pwd = el.querySelector('.modal-password-input');
+            if (pwd) pwd.value = '';
+            refreshDeleteBtn();
+        }
+    }
+    function closeModal(el) {
+        el.closest('.modal-backdrop').setAttribute('hidden', '');
+    }
+
+    function refreshDeleteBtn() {
+        const confirmInp = document.querySelector('#modal-delete-account .modal-confirm-input');
+        const pwdInp = document.getElementById('delete-password-input');
+        const btn = document.getElementById('delete-confirm-btn');
+        if (!confirmInp || !pwdInp || !btn) return;
+        btn.disabled = !(confirmInp.value === 'DELETE' && pwdInp.value.length >= 1);
+    }
+
+    document.querySelectorAll('[data-modal]').forEach(trigger => {
+        trigger.addEventListener('click', () => openModal(trigger.dataset.modal));
+    });
+    document.querySelectorAll('[data-close-modal]').forEach(btn => {
+        btn.addEventListener('click', () => closeModal(btn));
+    });
+    document.querySelectorAll('.modal-backdrop').forEach(backdrop => {
+        backdrop.addEventListener('click', e => { if (e.target === backdrop) backdrop.setAttribute('hidden', ''); });
+    });
+
+    const confirmInp = document.querySelector('#modal-delete-account .modal-confirm-input');
+    const pwdInp = document.getElementById('delete-password-input');
+    if (confirmInp) confirmInp.addEventListener('input', refreshDeleteBtn);
+    if (pwdInp) pwdInp.addEventListener('input', refreshDeleteBtn);
+})();
+</script>
+
+{% endblock %}
diff --git a/templates/base.html b/templates/base.html
index 314cc60..1cb7909 100644
--- a/templates/base.html
+++ b/templates/base.html
@@ -10,9 +10,10 @@
     <script src="https://cdn.jsdelivr.net/npm/chart.js"></script>
 </head>
 <body>
+    <div class="l-bg" aria-hidden="true"></div>
     <header class="topbar">
         <div class="topbar__inner">
-            <a class="brand" href="{{ url_for('public.leaderboard') }}">
+            <a class="brand" href="{{ url_for('public.home') }}">
                 <span class="brand__mark"></span>
                 <span class="brand__name">myboker.org</span>
             </a>
@@ -22,25 +23,35 @@
                 <span></span>
             </button>
             <nav class="mainnav" id="mainnav">
-                <a class="navlink {{ 'is-active' if request.endpoint == 'public.leaderboard' }}" href="{{ url_for('public.leaderboard') }}">Leaderboard</a>
-                <a class="navlink {{ 'is-active' if request.endpoint in ('public.sessions', 'public.session_detail') }}" href="{{ url_for('public.sessions') }}">Sessions</a>
-                {% if is_admin %}
-                    <a class="navlink {{ 'is-active' if request.endpoint == 'admin.dashboard' }}" href="{{ url_for('admin.dashboard') }}">Admin</a>
+                {% if is_logged_in %}
+                    <a class="navlink {{ 'is-active' if request.endpoint and request.endpoint.startswith('leagues.') }}" href="{{ url_for('leagues.index') }}">Leagues</a>
+                    <a class="navlink {{ 'is-active' if request.endpoint == 'public.explore' }}" href="{{ url_for('public.explore') }}">Explore</a>
+                    <a class="navlink {{ 'is-active' if request.endpoint and request.endpoint.startswith('account.') and request.endpoint not in ('account.login', 'account.register') }}" href="{{ url_for('account.settings') }}">Account</a>
+                    <a class="navlink {{ 'is-active' if request.endpoint == 'public.help' }}" href="{{ url_for('public.help') }}">Help</a>
                 {% else %}
-                    <a class="navlink {{ 'is-active' if request.endpoint == 'admin.login' }}" href="{{ url_for('admin.login') }}">Admin</a>
+                    <a class="navlink {{ 'is-active' if request.endpoint == 'public.explore' }}" href="{{ url_for('public.explore') }}">Explore</a>
+                    <a class="navlink {{ 'is-active' if request.endpoint == 'public.help' }}" href="{{ url_for('public.help') }}">Help</a>
+                    <a class="navlink navlink--mobile-auth {{ 'is-active' if request.endpoint == 'account.login' }}" href="{{ url_for('account.login') }}">Login</a>
+                    <a class="navlink navlink--mobile-auth {{ 'is-active' if request.endpoint == 'account.register' }}" href="{{ url_for('account.register') }}">Register</a>
                 {% endif %}
             </nav>
             <span class="topbar__spacer"></span>
-            {% if is_admin %}
+            {% if is_logged_in %}
                 <div class="topbar__admin-actions">
-                    <form method="post" action="{{ url_for('admin.logout') }}" style="margin:0">
+                    <form method="post" action="{{ url_for('account.logout') }}" style="margin:0">
+                        <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
                         <button class="btn btn--ghost btn--sm" type="submit">Logout</button>
                     </form>
                 </div>
+            {% else %}
+                <div class="topbar__admin-actions topbar__account-actions">
+                    <a class="btn btn--ghost btn--sm" href="{{ url_for('account.login') }}">Login</a>
+                    <a class="btn btn--outline btn--sm" href="{{ url_for('account.register') }}">Register</a>
+                </div>
             {% endif %}
         </div>
     </header>
-
+    {% block subnav %}{% endblock %}
     <main class="page {% block page_class %}page--public{% endblock %}">
         {% with messages = get_flashed_messages(with_categories=true) %}
             {% if messages %}
@@ -57,7 +68,7 @@
         <footer class="site-footer" aria-label="Site footer">
             <span>&copy; 2026 myboker.org</span>
             <span>Version {{ app_version }}</span>
-            <span>cedarline.digital</span>
+            <span><a href="{{ url_for('public.help') }}" style="color:inherit;text-decoration:none;">Help</a> · cedarline.digital</span>
         </footer>
     </main>
     <script>
@@ -91,5 +102,39 @@
         });
     })();
     </script>
+    <script>
+    (() => {
+      function positionBubble(tip) {
+        const bubble = tip.querySelector('.info-tip__bubble');
+        if (!bubble) return;
+        const rect = tip.getBoundingClientRect();
+        const bw = bubble.offsetWidth || 220;
+        const bh = bubble.offsetHeight || 60;
+        let left = rect.left + rect.width / 2 - bw / 2;
+        let top = rect.top - bh - 8;
+        left = Math.max(8, Math.min(left, window.innerWidth - bw - 8));
+        if (top < 8) top = rect.bottom + 8;
+        bubble.style.left = left + 'px';
+        bubble.style.top = top + 'px';
+      }
+      document.querySelectorAll('.info-tip').forEach(tip => {
+        tip.addEventListener('mouseenter', () => { positionBubble(tip); tip.classList.add('is-open'); });
+        tip.addEventListener('mouseleave', () => tip.classList.remove('is-open'));
+        tip.addEventListener('click', e => {
+          e.stopPropagation();
+          const wasOpen = tip.classList.contains('is-open');
+          document.querySelectorAll('.info-tip.is-open').forEach(t => t.classList.remove('is-open'));
+          if (!wasOpen) { positionBubble(tip); tip.classList.add('is-open'); }
+        });
+        tip.addEventListener('keydown', e => {
+          if (e.key === 'Enter' || e.key === ' ') { e.preventDefault(); tip.click(); }
+          if (e.key === 'Escape') tip.classList.remove('is-open');
+        });
+      });
+      document.addEventListener('click', () => {
+        document.querySelectorAll('.info-tip.is-open').forEach(t => t.classList.remove('is-open'));
+      });
+    })();
+    </script>
 </body>
 </html>
diff --git a/templates/docs.html b/templates/docs.html
new file mode 100644
index 0000000..d6af72a
--- /dev/null
+++ b/templates/docs.html
@@ -0,0 +1,222 @@
+{% extends "base.html" %}
+{% block title %}Help · myboker.org{% endblock %}
+{% block content %}
+
+<div class="hero" style="padding-bottom:12px;">
+    <p class="hero__kicker">Documentation</p>
+    <h1 class="hero__title">How myboker works</h1>
+    <p class="hero__sub">Everything you need to run a home poker league — sessions, ledgers, leaderboards, and settlement.</p>
+</div>
+
+<div class="docs-grid">
+
+    <nav class="docs-nav">
+        <p class="kicker">Contents</p>
+        <a href="#leagues">Leagues</a>
+        <a href="#players">Players</a>
+        <a href="#sessions">Sessions</a>
+        <a href="#events">Ledger events</a>
+        <a href="#settlement">Settlement</a>
+        <a href="#leaderboard">Leaderboard &amp; stats</a>
+        <a href="#visibility">Public vs private</a>
+    </nav>
+
+    <div class="docs-body">
+
+        <section class="docs-section" id="leagues">
+            <h2 class="docs-h2">Leagues</h2>
+            <p>A <strong>league</strong> is the top-level container for your home game. It holds all your players, sessions, and ledger events in one place. One account can manage multiple leagues — useful if you run separate games (e.g. a Thursday game and a weekend game).</p>
+            <p>When you create a league you give it a name and optional description. A unique public key is automatically generated so you can share a link to it later if you make it public.</p>
+            <div class="docs-callout">
+                <strong>Tip:</strong> Leagues are long-lived. You don't need to create a new league every season — use <em>sessions</em> to separate individual nights of play.
+            </div>
+        </section>
+
+        <section class="docs-section" id="players">
+            <h2 class="docs-h2">Players</h2>
+            <p>Players are the people in your league. They <strong>do not need a myboker account</strong> — only the league owner or manager needs one. You just add names.</p>
+            <p>Each player has a display name that appears on the leaderboard and in ledger events. You can add an optional note (like a payment handle) to help with settlement later.</p>
+            <p><strong>Archiving</strong> a player hides them from the active roster but preserves all their history. You can reactivate them at any time.</p>
+            <div class="docs-term-grid">
+                <div class="docs-term">
+                    <strong>Active</strong>
+                    <span>Shows on the roster and is available to record events against.</span>
+                </div>
+                <div class="docs-term">
+                    <strong>Archived</strong>
+                    <span>Hidden from the roster. History and stats are preserved. Reactivate any time.</span>
+                </div>
+            </div>
+        </section>
+
+        <section class="docs-section" id="sessions">
+            <h2 class="docs-h2">Sessions</h2>
+            <p>A <strong>session</strong> is a single night of poker. Sessions are date-stamped and sequenced — if you play twice on the same day, they become S1 and S2 automatically.</p>
+            <p>Sessions have two states: <strong>open</strong> and <strong>closed</strong>. While open, you can record buy-ins, cashouts, and other ledger events. When everyone has settled up and cashed out, you close the session. Closing doesn't delete anything — you can always reopen it.</p>
+            <div class="docs-term-grid">
+                <div class="docs-term">
+                    <strong>Date</strong>
+                    <span>The calendar date the game was played. Used to order sessions and group same-day games.</span>
+                </div>
+                <div class="docs-term">
+                    <strong>Label</strong>
+                    <span>Optional short name for this session (e.g. "Main table", "Side game"). Shown in lists.</span>
+                </div>
+                <div class="docs-term">
+                    <strong>Notes</strong>
+                    <span>Optional freeform context visible in the session list (e.g. "Holiday game", "Marcus's place").</span>
+                </div>
+                <div class="docs-term">
+                    <strong>Open</strong>
+                    <span>Session is live — events can be added and settlement is still in progress.</span>
+                </div>
+                <div class="docs-term">
+                    <strong>Closed</strong>
+                    <span>Session is settled. Books are considered final. Can be reopened if needed.</span>
+                </div>
+            </div>
+        </section>
+
+        <section class="docs-section" id="events">
+            <h2 class="docs-h2">Ledger events</h2>
+            <p>All activity in a session is recorded as <strong>ledger events</strong>. The ledger is <strong>append-only</strong> — events are never deleted. This keeps the record clean and auditable, even if you need to correct a mistake (you just add a correcting entry).</p>
+            <p>There are eight event types:</p>
+            <div class="docs-events">
+                <div class="docs-event">
+                    <span class="pill pill-buyin">buy-in</span>
+                    <div>
+                        <strong>A player buys chips with cash.</strong>
+                        <p>Cash comes into the pot. Records how much the player has invested. Most common event — record one every time someone puts money on the table.</p>
+                    </div>
+                </div>
+                <div class="docs-event">
+                    <span class="pill pill-front">front</span>
+                    <div>
+                        <strong>The house covers a player's buy-in.</strong>
+                        <p>When a player doesn't have cash handy, the organizer (house) can front them chips. This creates a debt — the player owes that amount back to the house. Track fronts carefully so you know who owes what at the end of the night.</p>
+                    </div>
+                </div>
+                <div class="docs-event">
+                    <span class="pill pill-cashout">cashout</span>
+                    <div>
+                        <strong>A player exchanges their chips for their cash value.</strong>
+                        <p>Records the chip count a player walks away with. This is the "you are owed X" event — but it doesn't mean cash has left the house yet. Use <em>paid out</em> to record the actual cash handover.</p>
+                    </div>
+                </div>
+                <div class="docs-event">
+                    <span class="pill pill-paid_out">paid out</span>
+                    <div>
+                        <strong>Cash physically leaves the house to the player.</strong>
+                        <p>Closes the loop on a cashout. Once a player has been paid out, their balance goes to $0. Record this separately from cashout because you may pay people out at different times (end of night, next day via transfer, etc.).</p>
+                    </div>
+                </div>
+                <div class="docs-event">
+                    <span class="pill pill-rollover_in">rollover in</span>
+                    <div>
+                        <strong>Chips carried in from a previous session.</strong>
+                        <p>If a player didn't cash out at the end of a session and instead carries their chip stack forward to the next game, record a rollover in at the start of the new session.</p>
+                    </div>
+                </div>
+                <div class="docs-event">
+                    <span class="pill pill-rollover_out">rollover out</span>
+                    <div>
+                        <strong>Chips carried out to a future session.</strong>
+                        <p>Recorded when a player leaves a session without cashing out, intending to carry their stack forward. Paired with a rollover in at the next session.</p>
+                    </div>
+                </div>
+                <div class="docs-event">
+                    <span class="pill pill-debt_repayment">debt repayment</span>
+                    <div>
+                        <strong>A player repays an outstanding front.</strong>
+                        <p>When a player who was fronted chips pays the house back (cash, transfer, etc.), record a debt repayment. This reduces their outstanding balance with the house.</p>
+                    </div>
+                </div>
+                <div class="docs-event">
+                    <span class="pill pill-writeoff">write-off</span>
+                    <div>
+                        <strong>The house forgives a debt.</strong>
+                        <p>If a front won't be collected (player left, debt forgiven, etc.), write it off. The debt is cleared from the open balance without cash changing hands. This is irreversible — add a note explaining why.</p>
+                    </div>
+                </div>
+            </div>
+        </section>
+
+        <section class="docs-section" id="settlement">
+            <h2 class="docs-h2">Settlement</h2>
+            <p>The ledger tracks two types of open balances at all times:</p>
+            <div class="docs-term-grid">
+                <div class="docs-term">
+                    <strong>Due to players</strong>
+                    <span>Cash the house owes to players who have cashed out but haven't been paid yet. Pay these out to clear the balance.</span>
+                </div>
+                <div class="docs-term">
+                    <strong>Due to house</strong>
+                    <span>Cash players owe to the house from unpaid fronts. Collect debt repayments or write these off to clear the balance.</span>
+                </div>
+                <div class="docs-term">
+                    <strong>Cash in</strong>
+                    <span>Total real cash that has come into the pot across all sessions — buy-ins and repaid fronts only, not fronts themselves.</span>
+                </div>
+                <div class="docs-term">
+                    <strong>Cash paid out</strong>
+                    <span>Total real cash that has left the house to players. Ideally this approaches cash in over time.</span>
+                </div>
+            </div>
+            <div class="docs-callout">
+                <strong>Fronts vs buy-ins:</strong> A front doesn't add to "cash in" because no cash actually entered the pot — the house covered it. Cash in only counts real money on the table.
+            </div>
+        </section>
+
+        <section class="docs-section" id="leaderboard">
+            <h2 class="docs-h2">Leaderboard &amp; stats</h2>
+            <p>The leaderboard ranks players by their all-time performance. Stats are computed from ledger events, not manually entered.</p>
+            <div class="docs-term-grid">
+                <div class="docs-term">
+                    <strong>Net</strong>
+                    <span>Total cash out minus total cash in across all sessions. Positive means up, negative means down.</span>
+                </div>
+                <div class="docs-term">
+                    <strong>ROI</strong>
+                    <span>Net divided by total invested, expressed as a percentage. Compares performance independent of how much someone plays.</span>
+                </div>
+                <div class="docs-term">
+                    <strong>Win rate</strong>
+                    <span>Percentage of sessions where the player finished with a positive net. Ties (exactly break even) count as a loss.</span>
+                </div>
+                <div class="docs-term">
+                    <strong>Sessions played</strong>
+                    <span>Number of sessions with at least one ledger event for this player.</span>
+                </div>
+                <div class="docs-term">
+                    <strong>Biggest win</strong>
+                    <span>The single session where the player netted the most profit.</span>
+                </div>
+                <div class="docs-term">
+                    <strong>Biggest loss</strong>
+                    <span>The single session where the player lost the most money.</span>
+                </div>
+            </div>
+        </section>
+
+        <section class="docs-section" id="visibility">
+            <h2 class="docs-h2">Public vs private</h2>
+            <p>Each league has a <strong>visibility</strong> setting you can change in league settings.</p>
+            <div class="docs-term-grid">
+                <div class="docs-term">
+                    <strong>Private</strong>
+                    <span>Only members (owners and managers) can see this league. The league won't appear on the Explore page. This is the default.</span>
+                </div>
+                <div class="docs-term">
+                    <strong>Public</strong>
+                    <span>Anyone with the link — or who finds it on the Explore page — can view the leaderboard and session history. No account required to view. Members still need an account to manage it.</span>
+                </div>
+            </div>
+            <div class="docs-callout">
+                <strong>Note:</strong> Making a league public shares leaderboard rankings and session results, but not private financial details like individual debt balances or account emails.
+            </div>
+        </section>
+
+    </div>
+</div>
+
+{% endblock %}
diff --git a/templates/explore.html b/templates/explore.html
new file mode 100644
index 0000000..f643244
--- /dev/null
+++ b/templates/explore.html
@@ -0,0 +1,60 @@
+{% extends "base.html" %}
+{% block title %}Explore leagues · myboker.org{% endblock %}
+{% block content %}
+
+<div class="hero" style="padding-bottom:8px;">
+    <p class="hero__kicker">Public leagues</p>
+    <h1 class="hero__title">Explore</h1>
+    <p class="hero__sub">Browse poker leagues that have made their results publicly visible.</p>
+</div>
+
+<form method="get" action="{{ url_for('public.explore') }}" class="explore-search">
+    <input class="field-input explore-search__input" type="text" name="q" value="{{ q }}" placeholder="Search by league name…">
+    <button class="btn btn--primary" type="submit">Search</button>
+    {% if q %}<a class="btn btn--ghost" href="{{ url_for('public.explore') }}">Clear</a>{% endif %}
+</form>
+
+{% if leagues %}
+<div class="explore-grid">
+    {% for league in leagues %}
+    {% set c = counts.get(league.id, {}) %}
+    <a class="explore-card" href="{{ url_for('leagues.dashboard', league_ref=league.url_ref) }}">
+        <div class="explore-card__head">
+            <h2 class="explore-card__name">{{ league.name }}</h2>
+            {% if league.description %}
+            <p class="explore-card__desc">{{ league.description }}</p>
+            {% endif %}
+        </div>
+        <div class="explore-card__stats">
+            <div class="explore-card__stat">
+                <span class="kicker">Players</span>
+                <strong>{{ c.get('players', 0) }}</strong>
+            </div>
+            <div class="explore-card__stat">
+                <span class="kicker">Sessions</span>
+                <strong>{{ c.get('sessions', 0) }}</strong>
+            </div>
+            <div class="explore-card__stat">
+                <span class="kicker">Open</span>
+                <strong>{{ c.get('open_sessions', 0) }}</strong>
+            </div>
+        </div>
+        <div class="explore-card__footer">
+            <span class="explore-card__link">View league →</span>
+        </div>
+    </a>
+    {% endfor %}
+</div>
+{% elif q %}
+<div class="empty-panel" style="max-width:480px;">
+    <h3 class="panel__title">No results for "{{ q }}"</h3>
+    <p class="muted-text">Try a shorter search or browse all leagues.</p>
+</div>
+{% else %}
+<div class="empty-panel" style="max-width:480px;">
+    <h3 class="panel__title">No public leagues yet</h3>
+    <p class="muted-text">League owners can set their league to public in settings.</p>
+</div>
+{% endif %}
+
+{% endblock %}
diff --git a/templates/forgot_password.html b/templates/forgot_password.html
new file mode 100644
index 0000000..2b3f802
--- /dev/null
+++ b/templates/forgot_password.html
@@ -0,0 +1,22 @@
+{% extends "base.html" %}
+{% block title %}Forgot Password · myboker.org{% endblock %}
+{% block content %}
+
+<div class="form-shell narrow">
+    <form class="panel form-card" method="post">
+        <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
+        <div>
+            <p class="eyebrow">Account recovery</p>
+            <h1 style="font-size:28px;margin-bottom:8px;">Forgot password</h1>
+            <p class="muted-text" style="margin-bottom:8px;">Enter your email and we'll send a reset link if an account exists.</p>
+        </div>
+        <label>
+            <span>Email</span>
+            <input type="email" name="email" autocomplete="email" required>
+        </label>
+        <button class="btn btn--primary" type="submit">Send reset link</button>
+        <a class="btn btn--ghost" href="{{ url_for('account.login') }}">Back to login</a>
+    </form>
+</div>
+
+{% endblock %}
diff --git a/templates/landing.html b/templates/landing.html
new file mode 100644
index 0000000..ff6f705
--- /dev/null
+++ b/templates/landing.html
@@ -0,0 +1,157 @@
+{% extends "base.html" %}
+{% block title %}myboker.org · Poker league records{% endblock %}
+{% block content %}
+
+<section class="l-hero">
+    <p class="l-hero__kicker">For private poker leagues</p>
+    <h1 class="l-hero__h1">Your home game,<br>properly tracked.</h1>
+    <p class="l-hero__sub">Sessions, ledgers, leaderboards, and settlement visibility — built for home groups that want clean records without a payment app or social network in the way.</p>
+    <div class="l-hero__cta">
+        {% if is_logged_in %}
+        <a class="btn btn--primary" href="{{ url_for('leagues.index') }}">Open leagues</a>
+        {% else %}
+        <a class="btn btn--primary" href="{{ url_for('account.register') }}">Create account</a>
+        <a class="btn btn--ghost" href="{{ url_for('account.login') }}">Sign in</a>
+        <a class="btn btn--ghost" href="{{ url_for('public.explore') }}">Explore league stats</a>
+        {% endif %}
+    </div>
+</section>
+
+<div class="l-preview" aria-hidden="true">
+    <div class="l-preview__panel">
+        <div class="l-preview__head">
+            <span class="kicker" style="margin:0;">Leaderboard</span>
+            <span class="l-preview__tag">All-time</span>
+        </div>
+        <div class="l-preview__rows">
+            <div class="l-preview__row">
+                <span class="l-preview__rank">1</span>
+                <span class="l-preview__player">Rivera</span>
+                <span class="l-preview__val l-preview__val--pos">+$1,420</span>
+            </div>
+            <div class="l-preview__row">
+                <span class="l-preview__rank">2</span>
+                <span class="l-preview__player">Chen</span>
+                <span class="l-preview__val l-preview__val--pos">+$640</span>
+            </div>
+            <div class="l-preview__row">
+                <span class="l-preview__rank">3</span>
+                <span class="l-preview__player">Okafor</span>
+                <span class="l-preview__val l-preview__val--neg">-$210</span>
+            </div>
+            <div class="l-preview__row l-preview__row--faded">
+                <span class="l-preview__rank">4</span>
+                <span class="l-preview__player">Walsh</span>
+                <span class="l-preview__val l-preview__val--neg">-$850</span>
+            </div>
+        </div>
+    </div>
+
+    <div class="l-preview__panel l-preview__panel--featured">
+        <div class="l-preview__head">
+            <span class="kicker" style="margin:0;">Session #18</span>
+            <span class="live-badge">live</span>
+        </div>
+        <div class="l-preview__stats">
+            <div class="l-preview__stat">
+                <span class="kicker" style="margin:0;">Cash in</span>
+                <strong>$1,200</strong>
+            </div>
+            <div class="l-preview__stat">
+                <span class="kicker" style="margin:0;">Players</span>
+                <strong>8</strong>
+            </div>
+            <div class="l-preview__stat">
+                <span class="kicker" style="margin:0;">Open debts</span>
+                <strong style="color:var(--warn);">$180</strong>
+            </div>
+        </div>
+        <div class="l-preview__evts">
+            <div class="l-preview__evt">
+                <span class="pill pill-buyin">buy-in</span>
+                <span class="l-preview__evt-name">Rivera</span>
+                <span class="l-preview__evt-val">$200</span>
+            </div>
+            <div class="l-preview__evt">
+                <span class="pill pill-front">front</span>
+                <span class="l-preview__evt-name">Chen</span>
+                <span class="l-preview__evt-val">$200</span>
+            </div>
+            <div class="l-preview__evt">
+                <span class="pill pill-cashout">cashout</span>
+                <span class="l-preview__evt-name">Okafor</span>
+                <span class="l-preview__evt-val">$450</span>
+            </div>
+        </div>
+    </div>
+
+    <div class="l-preview__panel">
+        <div class="l-preview__head">
+            <span class="kicker" style="margin:0;">Open debts</span>
+            <span class="l-preview__tag">Session #17</span>
+        </div>
+        <div class="l-preview__rows">
+            <div class="l-preview__row">
+                <span class="l-preview__player">Walsh</span>
+                <span class="l-preview__val" style="color:var(--owes);">owes $120</span>
+            </div>
+            <div class="l-preview__row">
+                <span class="l-preview__player">Okafor</span>
+                <span class="l-preview__val" style="color:var(--owes);">owes $60</span>
+            </div>
+            <div class="l-preview__row l-preview__row--faded">
+                <span class="l-preview__player">Chen</span>
+                <span class="l-preview__val" style="color:var(--pos);">settled</span>
+            </div>
+            <div class="l-preview__row l-preview__row--faded">
+                <span class="l-preview__player">Rivera</span>
+                <span class="l-preview__val" style="color:var(--pos);">settled</span>
+            </div>
+        </div>
+    </div>
+</div>
+
+<section class="l-features">
+    <div class="l-feature">
+        <div class="l-feature__icon">
+            <svg width="22" height="22" viewBox="0 0 22 22" fill="none" aria-hidden="true">
+                <rect x="1" y="7" width="14" height="13" rx="2" stroke="currentColor" stroke-width="1.5"/>
+                <path d="M5 7V5a2 2 0 0 1 2-2h11a2 2 0 0 1 2 2v11a2 2 0 0 1-2 2h-2" stroke="currentColor" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"/>
+            </svg>
+        </div>
+        <h3 class="l-feature__title">League workspaces</h3>
+        <p class="l-feature__desc">Each league has its own players, sessions, leaderboard, and accounting. One account can manage multiple leagues independently.</p>
+    </div>
+    <div class="l-feature">
+        <div class="l-feature__icon">
+            <svg width="22" height="22" viewBox="0 0 22 22" fill="none" aria-hidden="true">
+                <rect x="3" y="3" width="16" height="16" rx="2" stroke="currentColor" stroke-width="1.5"/>
+                <path d="M7 8h8M7 11h6M7 14h4" stroke="currentColor" stroke-width="1.5" stroke-linecap="round"/>
+            </svg>
+        </div>
+        <h3 class="l-feature__title">Append-only ledger</h3>
+        <p class="l-feature__desc">Buy-ins, fronts, cashouts, rollovers, debt repayments, and write-offs stay permanently on record. Events are never deleted.</p>
+    </div>
+    <div class="l-feature">
+        <div class="l-feature__icon">
+            <svg width="22" height="22" viewBox="0 0 22 22" fill="none" aria-hidden="true">
+                <path d="M3 17L8 11L13 14L20 6" stroke="currentColor" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"/>
+                <path d="M3 20h18" stroke="currentColor" stroke-width="1.5" stroke-linecap="round"/>
+            </svg>
+        </div>
+        <h3 class="l-feature__title">Performance analytics</h3>
+        <p class="l-feature__desc">Net, ROI, win rate, and all-time cash movement are computed from ledger events. Rankings stay separate from settlement records.</p>
+    </div>
+    <div class="l-feature">
+        <div class="l-feature__icon">
+            <svg width="22" height="22" viewBox="0 0 22 22" fill="none" aria-hidden="true">
+                <path d="M7 5h8M15 5l-3-3m3 3l-3 3" stroke="currentColor" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"/>
+                <path d="M15 17H7m0 0l3 3m-3-3l3-3" stroke="currentColor" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"/>
+            </svg>
+        </div>
+        <h3 class="l-feature__title">Settlement visibility</h3>
+        <p class="l-feature__desc">Open debts, player payables, and house receivables are always tracked. Share settlement status with the group, not just final numbers.</p>
+    </div>
+</section>
+
+{% endblock %}
diff --git a/templates/league_dashboard.html b/templates/league_dashboard.html
new file mode 100644
index 0000000..0638440
--- /dev/null
+++ b/templates/league_dashboard.html
@@ -0,0 +1,104 @@
+{% extends "base.html" %}
+{% block title %}{{ league.name }} · myboker.org{% endblock %}
+{% block subnav %}{% include "_league_subnav.html" %}{% endblock %}
+{% block content %}
+
+{% if is_logged_in %}
+<a class="league-back-link" href="{{ url_for('leagues.index') }}">← Leagues</a>
+{% endif %}
+
+<div class="db-hero">
+    <div class="db-hero__bg-letter" aria-hidden="true">{{ league.name[0] | upper }}</div>
+    <div class="db-hero__body">
+        <div class="db-hero__chips">
+            {% if is_owner %}
+            <span class="db-chip db-chip--accent">Owner</span>
+            {% endif %}
+            <span class="db-chip">{{ league.visibility }}</span>
+        </div>
+        <h1 class="hero__title" style="margin-bottom:8px;">{{ league.name }}</h1>
+        <p class="hero__sub" style="margin:0;">{{ league.description or 'No description set.' }}</p>
+    </div>
+</div>
+
+{% if counts.open_sessions > 0 %}
+<div class="db-live-bar">
+    <span class="live-badge">{{ counts.open_sessions }} live</span>
+    <span class="db-live-bar__text">
+        {% if counts.open_sessions == 1 %}A session is currently in progress.{% else %}{{ counts.open_sessions }} sessions are in progress.{% endif %}
+    </span>
+    <a class="btn btn--sm db-live-bar__btn" href="{{ url_for('leagues.sessions', league_ref=league.url_ref) }}">View sessions →</a>
+</div>
+{% endif %}
+
+<div class="db-stats">
+    <div class="stat stat--rail" style="--rail:var(--pos);">
+        <span class="kicker">Active players</span>
+        <div class="stat__val" style="color:var(--text-strong);">{{ counts.players }}</div>
+    </div>
+    <div class="stat stat--rail" style="--rail:var(--accent);">
+        <span class="kicker">Sessions</span>
+        <div class="stat__val" style="color:var(--text-strong);">{{ counts.sessions }}</div>
+        {% if counts.open_sessions > 0 %}
+        <div class="stat__sub" style="color:var(--pos);">{{ counts.open_sessions }} open now</div>
+        {% endif %}
+    </div>
+    <div class="stat stat--rail" style="--rail:var(--warn);">
+        <span class="kicker">Ledger events</span>
+        <div class="stat__val" style="color:var(--text-strong);">{{ counts.events }}</div>
+    </div>
+    <div class="stat stat--rail" style="--rail:var(--rolled);">
+        <span class="kicker">Seasons</span>
+        <div class="stat__val" style="color:var(--text-strong);">{{ counts.seasons }}</div>
+    </div>
+</div>
+
+<div class="dashboard-grid">
+
+    <a class="dashboard-card panel" style="--card-accent:var(--warn);" href="{{ url_for('leagues.leaderboard', league_ref=league.url_ref) }}">
+        <div class="dashboard-card__top">
+            <span class="kicker">Stats</span>
+            <span class="dashboard-card__count">{{ counts.players }} ranked</span>
+        </div>
+        <strong class="dashboard-card__title">Leaderboard</strong>
+        <p class="dashboard-card__desc">All-time results, ROI, settlement totals, and standings.</p>
+        <span class="dashboard-card__arrow">→</span>
+    </a>
+
+    <a class="dashboard-card panel" style="--card-accent:var(--pos);" href="{{ url_for('leagues.players', league_ref=league.url_ref) }}">
+        <div class="dashboard-card__top">
+            <span class="kicker">Roster</span>
+            <span class="dashboard-card__count">{{ counts.players }} active</span>
+        </div>
+        <strong class="dashboard-card__title">Players</strong>
+        <p class="dashboard-card__desc">Add and manage player records for stats and ledger entry.</p>
+        <span class="dashboard-card__arrow">→</span>
+    </a>
+
+    <a class="dashboard-card panel {% if counts.open_sessions > 0 %}dashboard-card--live{% endif %}" style="--card-accent:var(--accent);" href="{{ url_for('leagues.sessions', league_ref=league.url_ref) }}">
+        <div class="dashboard-card__top">
+            <span class="kicker">Schedule</span>
+            {% if counts.open_sessions > 0 %}
+            <span class="live-badge">{{ counts.open_sessions }} live</span>
+            {% else %}
+            <span class="dashboard-card__count">{{ counts.sessions }} total</span>
+            {% endif %}
+        </div>
+        <strong class="dashboard-card__title">Sessions</strong>
+        <p class="dashboard-card__desc">Create sessions, record events, and manage open/closed state.</p>
+        <span class="dashboard-card__arrow">→</span>
+    </a>
+
+    <a class="dashboard-card panel" style="--card-accent:var(--rolled);" href="{{ url_for('leagues.ledger', league_ref=league.url_ref) }}">
+        <div class="dashboard-card__top">
+            <span class="kicker">Accounting</span>
+            <span class="dashboard-card__count">{{ counts.events }} events</span>
+        </div>
+        <strong class="dashboard-card__title">League ledger</strong>
+        <p class="dashboard-card__desc">Review all events, open debts, cash movement, and settlements.</p>
+        <span class="dashboard-card__arrow">→</span>
+    </a>
+
+</div>
+
+{% endblock %}
diff --git a/templates/league_leaderboard.html b/templates/league_leaderboard.html
new file mode 100644
index 0000000..67f87db
--- /dev/null
+++ b/templates/league_leaderboard.html
@@ -0,0 +1,350 @@
+{% extends "base.html" %}
+{% block title %}Leaderboard · {{ league.name }} · myboker.org{% endblock %}
+{% block subnav %}{% include "_league_subnav.html" %}{% endblock %}
+{% block content %}
+
+<div class="hero" style="display:flex;flex-wrap:wrap;gap:var(--s6);align-items:flex-start;justify-content:space-between;">
+    <div>
+        <h1 class="hero__title">Leaderboard</h1>
+        <p class="hero__sub">{{ session_count }} session{{ 's' if session_count != 1 else '' }}{% if selected_session_date %} through {{ selected_session_label }}{% endif %}</p>
+    </div>
+    <div class="leaderboard-hero-stats">
+        <div class="stat">
+            <span class="kicker">Cash paid out</span>
+            <div class="stat__val" style="color:var(--accent)">{{ cash_paid_out_cents | money }}</div>
+        </div>
+        <div class="stat">
+            <span class="kicker">Sessions</span>
+            <div class="stat__val" style="color:var(--text-strong)">{{ session_count }}{% if total_session_count != session_count %}<span style="color:var(--faintest);font-size:16px"> / {{ total_session_count }}</span>{% endif %}</div>
+        </div>
+        <div class="stat">
+            <span class="kicker">Players</span>
+            <div class="stat__val" style="color:var(--text-strong)">{{ all_count }}</div>
+        </div>
+    </div>
+</div>
+
+<div class="panel stack" style="gap:0;margin-bottom:20px;">
+    <div class="panel__head">
+        <div>
+            <span class="kicker">Trend</span>
+            <h2 class="panel__title">Cumulative profit</h2>
+        </div>
+        <button class="btn btn--ghost btn--sm" type="button" id="expandLeaderboardChart">Expand</button>
+    </div>
+    <div class="chart-wrap">
+        <div class="chart-frame chart-frame--tall">
+            <canvas id="leaderboardChart"></canvas>
+        </div>
+    </div>
+</div>
+
+<div class="toolbar">
+    <div class="toolbar__left">
+        <div class="segmented">
+            <button class="seg {{ 'is-on' if mode=='eligible' }}" data-mode="eligible">
+                Eligible <span class="seg__count">{{ eligible_count }}</span>
+            </button>
+            <button class="seg {{ 'is-on' if mode=='all' }}" data-mode="all">
+                All players <span class="seg__count">{{ all_count }}</span>
+            </button>
+            <button class="seg {{ 'is-on' if mode=='recent' }}" data-mode="recent">
+                Recent <span class="seg__count">5 sess</span>
+            </button>
+        </div>
+        <p class="toolbar__hint">
+            {% if mode == 'eligible' %}
+                {{ eligible_min_sessions }}+ sessions required. Keeps one-off guests from skewing standings.
+            {% elif mode == 'all' %}
+                Everyone who's sat down — rankings can swing on tiny samples.
+            {% else %}
+                Form guide — aggregated over the last 5 sessions only.
+            {% endif %}
+        </p>
+    </div>
+    <div class="toolbar__right">
+        <form class="session-filter-form" method="get">
+            <input type="hidden" name="mode" value="{{ mode }}">
+            <select class="session-filter-select" name="through_session" onchange="this.form.submit()">
+                <option value="">Latest session</option>
+                {% for s in available_sessions %}
+                <option value="{{ s.session_id }}" {{ 'selected' if selected_session_id == s.session_id else '' }}>{{ session_label(s) }}</option>
+                {% endfor %}
+            </select>
+            {% if selected_session_id %}
+            <a class="btn btn--ghost btn--sm" href="{{ url_for('leagues.leaderboard', league_ref=league.url_ref, mode=mode) }}">Reset</a>
+            {% endif %}
+        </form>
+    </div>
+</div>
+
+<div class="panel tbl-scroll" style="margin-bottom:20px;">
+    <table class="tbl" id="leaderboardTable" data-sort-key="net" data-sort-direction="desc">
+        <thead>
+            <tr>
+                <th class="col-rank" style="width:52px;">
+                    <span style="font-family:var(--font-mono);font-size:10.5px;letter-spacing:.10em;text-transform:uppercase;color:var(--muted);">#</span>
+                </th>
+                <th class="col-player">
+                    <button type="button" class="sort-btn" data-sort-key="player" data-sort-type="string" data-initial-direction="asc">Player <span class="sort-arrow">↕</span></button>
+                </th>
+                <th class="col-rank-delta"><button type="button" class="sort-btn" data-sort-key="rankdelta" data-sort-type="number" data-initial-direction="desc">Δ Rank <span class="sort-arrow">↕</span></button></th>
+                <th><button type="button" class="sort-btn" data-sort-key="net" data-sort-type="number" data-initial-direction="desc">Net <span class="sort-arrow">↓</span></button></th>
+                <th><button type="button" class="sort-btn" data-sort-key="winpct" data-sort-type="number" data-initial-direction="desc">Win% <span class="sort-arrow">↕</span></button></th>
+                <th><button type="button" class="sort-btn" data-sort-key="roi" data-sort-type="number" data-initial-direction="desc">ROI <span class="sort-arrow">↕</span></button></th>
+                <th><button type="button" class="sort-btn" data-sort-key="avgwin" data-sort-type="number" data-initial-direction="desc">Avg Win <span class="sort-arrow">↕</span></button></th>
+                <th><button type="button" class="sort-btn" data-sort-key="avgloss" data-sort-type="number" data-initial-direction="desc">Avg Loss <span class="sort-arrow">↕</span></button></th>
+                <th><button type="button" class="sort-btn" data-sort-key="sessions" data-sort-type="number" data-initial-direction="desc">Sessions <span class="sort-arrow">↕</span></button></th>
+            </tr>
+        </thead>
+        <tbody>
+            {% for player in main_board %}
+            {% set idx = loop.index %}
+            {% set player_href = url_for('leagues.player_detail', league_ref=league.url_ref, player_id=player_ids[player.player_name]) if player_ids.get(player.player_name) else '' %}
+            <tr data-player-row="true" data-original-rank="{{ idx }}"
+                {% if player_href %}onclick="window.location='{{ player_href }}'"{% endif %}>
+                <td class="col-rank" data-sort-value="{{ idx }}">
+                    <span class="rank-num {{ 'rank-1' if idx==1 else 'rank-2' if idx==2 else 'rank-3' if idx==3 else '' }}" data-rank-cell>#{{ idx }}</span>
+                </td>
+                <td class="col-player" data-sort-value="{{ player.player_name|lower }}">
+                    {% if player_href %}<a href="{{ player_href }}">{{ player.player_name }}</a>{% else %}{{ player.player_name }}{% endif %}
+                </td>
+                <td class="col-rank-delta" data-sort-value="{{ player.rank_change }}">
+                    {% if player.rank_change > 0 %}
+                        <span class="rank-delta rank-delta--up">▲{{ player.rank_change }}</span>
+                    {% elif player.rank_change < 0 %}
+                        <span class="rank-delta rank-delta--down">▼{{ player.rank_change | abs }}</span>
+                    {% else %}
+                        <span class="rank-delta rank-delta--flat">—</span>
+                    {% endif %}
+                </td>
+                <td class="num-net {{ 'num-pos' if player.total_net_cents > 0 else 'num-neg' if player.total_net_cents < 0 else 'num-muted' }}"
+                    data-sort-value="{{ player.total_net_cents }}">
+                    {{ '+' if player.total_net_cents > 0 else '' }}{{ player.total_net_cents | money }}
+                </td>
+                <td data-sort-value="{{ '%.4f'|format(player.win_pct) }}">{{ "%.1f"|format(player.win_pct) }}%</td>
+                <td class="{{ 'num-pos' if player.roi_pct > 0 else 'num-neg' if player.roi_pct < 0 else '' }}"
+                    data-sort-value="{{ '%.4f'|format(player.roi_pct) }}">{{ "%.1f"|format(player.roi_pct) }}%</td>
+                <td class="num-pos" data-sort-value="{{ player.avg_win_cents }}">{{ player.avg_win_cents | money }}</td>
+                <td class="num-neg" data-sort-value="{{ player.avg_loss_cents }}">{{ player.avg_loss_cents | money }}</td>
+                <td data-sort-value="{{ player.sessions_played }}">{{ player.sessions_played }}</td>
+            </tr>
+            {% else %}
+            <tr>
+                <td colspan="9" style="text-align:left;padding:28px;color:var(--muted);">
+                    No players yet — add the first event from a league session ledger.
+                </td>
+            </tr>
+            {% endfor %}
+        </tbody>
+    </table>
+</div>
+
+{% if mode == 'eligible' and provisional_board %}
+<div style="margin-bottom:20px;">
+    <div class="toolbar" style="margin-top:0;margin-bottom:12px;">
+        <span class="kicker" style="margin:0;">Provisional · fewer than {{ eligible_min_sessions }} sessions</span>
+    </div>
+    <div class="provisional-grid">
+        {% for player in provisional_board %}
+        {% set player_href = url_for('leagues.player_detail', league_ref=league.url_ref, player_id=player_ids[player.player_name]) if player_ids.get(player.player_name) else '' %}
+        <a class="provisional-card" href="{{ player_href or '#' }}"
+           style="display:block;text-decoration:none;">
+            <p class="provisional-card__name">{{ player.player_name }}</p>
+            <div class="provisional-card__meta">
+                <span>{{ player.sessions_played }} sess</span>
+                <span class="{{ 'num-pos' if player.total_net_cents > 0 else 'num-neg' if player.total_net_cents < 0 else '' }}"
+                      style="font-family:var(--font-mono);font-size:11px;font-weight:600;">{{ player.total_net_cents | money }}</span>
+            </div>
+        </a>
+        {% endfor %}
+    </div>
+</div>
+{% endif %}
+
+<!-- Expand modal -->
+<div id="chartModal" style="display:none;position:fixed;inset:0;z-index:80;align-items:center;justify-content:center;">
+    <div style="position:absolute;inset:0;background:rgba(8,10,12,.82);backdrop-filter:blur(6px);" data-close-modal></div>
+    <div style="position:relative;z-index:1;width:min(1280px,calc(100vw - 48px));margin:24px auto;padding:22px;background:var(--surface);border:1px solid var(--border-strong);border-radius:var(--r-lg);box-shadow:0 24px 64px rgba(0,0,0,.4);">
+        <div style="display:flex;align-items:center;justify-content:space-between;gap:12px;margin-bottom:18px;">
+            <h2 style="margin:0;">Cumulative profit</h2>
+            <button class="btn btn--ghost btn--sm" data-close-modal>Close</button>
+        </div>
+        <div style="height:min(70vh,780px);position:relative;">
+            <canvas id="leaderboardChartExpanded"></canvas>
+        </div>
+    </div>
+</div>
+
+<script>
+const CHART_PALETTE = ['#9b8cf0','#6fc093','#e0b15c','#cf6f86','#8f93c2','#7cb9e0','#f4a261','#a78bb0','#5cb8a0','#e58f3a'];
+const leaderboardChartData = {{ chart_data | tojson }};
+const rootStyles = getComputedStyle(document.documentElement);
+const textMuted = rootStyles.getPropertyValue('--text-muted').trim();
+const lineColor = rootStyles.getPropertyValue('--line').trim();
+
+leaderboardChartData.datasets.forEach((ds, i) => {
+    ds.borderColor = CHART_PALETTE[i % CHART_PALETTE.length];
+    ds.backgroundColor = CHART_PALETTE[i % CHART_PALETTE.length];
+});
+
+function buildChartConfig(data, compact) {
+    return {
+        type: 'line',
+        data: {
+            labels: data.labels,
+            datasets: data.datasets.map(ds => ({
+                ...ds,
+                pointRadius: compact ? 0 : 2,
+                pointHoverRadius: 5,
+                borderWidth: compact ? 2 : 2.5,
+                tension: 0.28,
+                fill: false,
+            })),
+        },
+        options: {
+            responsive: true,
+            maintainAspectRatio: false,
+            interaction: { mode: 'nearest', intersect: false },
+            plugins: {
+                legend: {
+                    display: true,
+                    position: 'bottom',
+                    labels: { color: textMuted, usePointStyle: true, boxWidth: 8, boxHeight: 8, padding: 14 },
+                },
+                tooltip: {
+                    callbacks: {
+                        label(ctx) {
+                            const v = ctx.parsed.y;
+                            return v == null ? `${ctx.dataset.label}: —` : `${ctx.dataset.label}: $${Number(v).toFixed(2)}`;
+                        }
+                    }
+                }
+            },
+            scales: {
+                x: {
+                    ticks: { color: textMuted, maxRotation: 0, autoSkip: true, maxTicksLimit: compact ? 6 : 10 },
+                    grid: { color: lineColor, display: !compact },
+                },
+                y: {
+                    ticks: {
+                        color: textMuted,
+                        maxTicksLimit: compact ? 8 : 10,
+                        callback(v) { return (v < 0 ? '-' : '') + '$' + Math.abs(Number(v)).toFixed(0); }
+                    },
+                    grid: { color: lineColor },
+                }
+            }
+        }
+    };
+}
+
+const ctx = document.getElementById('leaderboardChart');
+let mainChart = null;
+if (ctx && leaderboardChartData.labels.length > 0) {
+    const filtered = leaderboardChartData.datasets.filter(ds => (ds.sessions_played || 0) > 1);
+    const chartData = {
+        labels: leaderboardChartData.labels,
+        datasets: filtered.length ? filtered : leaderboardChartData.datasets,
+    };
+    mainChart = new Chart(ctx, buildChartConfig(chartData, true));
+}
+
+const modal = document.getElementById('chartModal');
+const expandBtn = document.getElementById('expandLeaderboardChart');
+let expandedChart = null;
+
+expandBtn?.addEventListener('click', () => {
+    if (!leaderboardChartData.labels.length) return;
+    modal.style.display = 'flex';
+    document.body.style.overflow = 'hidden';
+    if (expandedChart) expandedChart.destroy();
+    expandedChart = new Chart(
+        document.getElementById('leaderboardChartExpanded'),
+        buildChartConfig(leaderboardChartData, false)
+    );
+});
+
+document.querySelectorAll('[data-close-modal]').forEach(el => {
+    el.addEventListener('click', () => {
+        modal.style.display = 'none';
+        document.body.style.overflow = '';
+        if (expandedChart) { expandedChart.destroy(); expandedChart = null; }
+    });
+});
+
+document.addEventListener('keydown', e => {
+    if (e.key === 'Escape' && modal.style.display === 'flex') {
+        modal.style.display = 'none';
+        document.body.style.overflow = '';
+        if (expandedChart) { expandedChart.destroy(); expandedChart = null; }
+    }
+});
+
+// Segmented mode switcher
+document.querySelectorAll('[data-mode]').forEach(btn => {
+    btn.addEventListener('click', () => {
+        const url = new URL(window.location.href);
+        url.searchParams.set('mode', btn.dataset.mode);
+        window.location.href = url.toString();
+    });
+});
+
+// Table sort
+const tbl = document.getElementById('leaderboardTable');
+const sortBtns = tbl ? Array.from(tbl.querySelectorAll('.sort-btn[data-sort-key]')) : [];
+const colMap = { rank: 0, player: 1, rankdelta: 2, net: 3, winpct: 4, roi: 5, avgwin: 6, avgloss: 7, sessions: 8 };
+
+function setActiveSort(key, dir) {
+    sortBtns.forEach(b => {
+        const active = b.dataset.sortKey === key;
+        b.classList.toggle('is-active', active);
+        const arrow = b.querySelector('.sort-arrow');
+        if (arrow) arrow.textContent = active ? (dir === 'asc' ? '↑' : '↓') : '↕';
+    });
+}
+
+function sortTable(key, sortType, forcedDir) {
+    if (!tbl) return;
+    const tbody = tbl.tBodies[0];
+    const rows = Array.from(tbody.querySelectorAll('tr[data-player-row]'));
+    const curKey = tbl.dataset.sortKey;
+    const curDir = tbl.dataset.sortDirection || 'desc';
+    let dir = forcedDir;
+    if (!dir) {
+        if (curKey === key) dir = curDir === 'desc' ? 'asc' : 'desc';
+        else {
+            const btn = sortBtns.find(b => b.dataset.sortKey === key);
+            dir = btn?.dataset.initialDirection || 'desc';
+        }
+    }
+    const mult = dir === 'asc' ? 1 : -1;
+    const ci = colMap[key] ?? 0;
+    rows.sort((a, b) => {
+        const av = a.children[ci]?.dataset.sortValue ?? '';
+        const bv = b.children[ci]?.dataset.sortValue ?? '';
+        if (sortType === 'number') {
+            const n = (Number(av) - Number(bv)) * mult;
+            if (n !== 0) return n;
+        } else {
+            const s = av.localeCompare(bv) * mult;
+            if (s !== 0) return s;
+        }
+        return Number(a.dataset.originalRank) - Number(b.dataset.originalRank);
+    });
+    rows.forEach(r => tbody.appendChild(r));
+    tbl.dataset.sortKey = key;
+    tbl.dataset.sortDirection = dir;
+    rows.forEach((row, i) => {
+        const rc = row.querySelector('[data-rank-cell]');
+        if (rc) rc.textContent = `#${i + 1}`;
+    });
+    setActiveSort(key, dir);
+}
+
+sortBtns.forEach(b => {
+    b.addEventListener('click', () => sortTable(b.dataset.sortKey, b.dataset.sortType));
+});
+setActiveSort('net', 'desc');
+</script>
+{% endblock %}
diff --git a/templates/league_ledger.html b/templates/league_ledger.html
new file mode 100644
index 0000000..bb696bf
--- /dev/null
+++ b/templates/league_ledger.html
@@ -0,0 +1,303 @@
+{% extends "base.html" %}
+{% block title %}Ledger · {{ league.name }} · myboker.org{% endblock %}
+{% block subnav %}{% include "_league_subnav.html" %}{% endblock %}
+{% block content %}
+
+<div class="cash-strip">
+    <div class="stat stat--rail" style="--rail:var(--accent);">
+        <span class="kicker">Cash in <span class="info-tip" tabindex="0"><svg width="13" height="13" viewBox="0 0 13 13" fill="none" aria-hidden="true"><circle cx="6.5" cy="6.5" r="5.5" stroke="currentColor" stroke-width="1.2"/><path d="M6.5 6v3.5" stroke="currentColor" stroke-width="1.3" stroke-linecap="round"/><circle cx="6.5" cy="4" r=".7" fill="currentColor"/></svg><span class="info-tip__bubble">Total real cash brought into the pot across all sessions. Counts buy-ins and collected fronts only — not fronts that haven't been repaid.</span></span></span>
+        <div class="stat__val" style="color:var(--num)">{{ totals.cash_in_cents | money }}</div>
+    </div>
+    <div class="stat stat--rail" style="--rail:var(--pos);">
+        <span class="kicker">Cash paid out <span class="info-tip" tabindex="0"><svg width="13" height="13" viewBox="0 0 13 13" fill="none" aria-hidden="true"><circle cx="6.5" cy="6.5" r="5.5" stroke="currentColor" stroke-width="1.2"/><path d="M6.5 6v3.5" stroke="currentColor" stroke-width="1.3" stroke-linecap="round"/><circle cx="6.5" cy="4" r=".7" fill="currentColor"/></svg><span class="info-tip__bubble">Total cash physically returned to players via 'paid out' events. Should approach Cash In once everyone has settled.</span></span></span>
+        <div class="stat__val" style="color:var(--pos)">{{ totals.cash_out_cents | money }}</div>
+    </div>
+    <div class="stat stat--rail" style="--rail:var(--rolled);">
+        <span class="kicker">House holds <span class="info-tip" tabindex="0"><svg width="13" height="13" viewBox="0 0 13 13" fill="none" aria-hidden="true"><circle cx="6.5" cy="6.5" r="5.5" stroke="currentColor" stroke-width="1.2"/><path d="M6.5 6v3.5" stroke="currentColor" stroke-width="1.3" stroke-linecap="round"/><circle cx="6.5" cy="4" r=".7" fill="currentColor"/></svg><span class="info-tip__bubble">Cash in minus cash paid out — what the house physically holds right now before settling remaining claims.</span></span></span>
+        <div class="stat__val" style="color:var(--num)">{{ totals.book_held_cents | money }}</div>
+    </div>
+    <div class="stat stat--rail" style="--rail:var(--neg);">
+        <span class="kicker">Due to players <span class="info-tip" tabindex="0"><svg width="13" height="13" viewBox="0 0 13 13" fill="none" aria-hidden="true"><circle cx="6.5" cy="6.5" r="5.5" stroke="currentColor" stroke-width="1.2"/><path d="M6.5 6v3.5" stroke="currentColor" stroke-width="1.3" stroke-linecap="round"/><circle cx="6.5" cy="4" r=".7" fill="currentColor"/></svg><span class="info-tip__bubble">Cash the house still owes to players who cashed out but haven't been paid yet. Record a 'paid out' event to clear these.</span></span></span>
+        <div class="stat__val {{ 'num-neg' if totals.due_to_players_cents > 0 else 'num-muted' }}">{{ totals.due_to_players_cents | money }}</div>
+    </div>
+    <div class="stat stat--rail" style="--rail:var(--owes);">
+        <span class="kicker">Due to house <span class="info-tip" tabindex="0"><svg width="13" height="13" viewBox="0 0 13 13" fill="none" aria-hidden="true"><circle cx="6.5" cy="6.5" r="5.5" stroke="currentColor" stroke-width="1.2"/><path d="M6.5 6v3.5" stroke="currentColor" stroke-width="1.3" stroke-linecap="round"/><circle cx="6.5" cy="4" r=".7" fill="currentColor"/></svg><span class="info-tip__bubble">Outstanding fronts — chips the house covered that players haven't repaid yet. Collect or write off using the Debt resolution panel below.</span></span></span>
+        <div class="stat__val {{ 'num-neg' if totals.due_to_house_cents > 0 else 'num-muted' }}">{{ totals.due_to_house_cents | money }}</div>
+    </div>
+    <div class="stat stat--rail" style="--rail:{{ 'var(--pos)' if totals.net_position_cents >= 0 else 'var(--neg)' }};">
+        <span class="kicker">Net position <span class="info-tip" tabindex="0"><svg width="13" height="13" viewBox="0 0 13 13" fill="none" aria-hidden="true"><circle cx="6.5" cy="6.5" r="5.5" stroke="currentColor" stroke-width="1.2"/><path d="M6.5 6v3.5" stroke="currentColor" stroke-width="1.3" stroke-linecap="round"/><circle cx="6.5" cy="4" r=".7" fill="currentColor"/></svg><span class="info-tip__bubble">House holds + owed by players − owed to players. Should be near zero once all sessions are settled.</span></span></span>
+        <div class="stat__val {{ 'num-pos' if totals.net_position_cents > 0 else 'num-neg' if totals.net_position_cents < 0 else 'num-muted' }}">{{ totals.net_position_cents | money }}</div>
+    </div>
+    <div class="stat stat--rail" style="--rail:var(--warn);">
+        <span class="kicker">Events <span class="info-tip" tabindex="0"><svg width="13" height="13" viewBox="0 0 13 13" fill="none" aria-hidden="true"><circle cx="6.5" cy="6.5" r="5.5" stroke="currentColor" stroke-width="1.2"/><path d="M6.5 6v3.5" stroke="currentColor" stroke-width="1.3" stroke-linecap="round"/><circle cx="6.5" cy="4" r=".7" fill="currentColor"/></svg><span class="info-tip__bubble">Total number of active ledger entries across all sessions.</span></span></span>
+        <div class="stat__val" style="color:var(--num)">{{ totals.events }}</div>
+    </div>
+</div>
+
+<!-- Open sessions alert -->
+{% if open_sessions %}
+<div class="panel" style="margin-top:20px; border-left:3px solid var(--pos);">
+    <div class="panel__head">
+        <span class="kicker" style="margin:0;display:flex;align-items:center;gap:8px;"><span class="live-badge">{{ open_sessions | length }} live</span> Open sessions</span>
+    </div>
+    <div class="audit-item-list">
+        {% for s in open_sessions %}
+        <div class="audit-item">
+            <span>{{ session_label(s) }}</span>
+            <span class="audit-item__right">
+                <span class="stat__sub">{{ s.entries | length }} entries · {{ s.total_real_cash_in_cents | money }} in</span>
+                <a class="btn btn--ghost btn--sm" href="{{ url_for('leagues.session_detail', league_ref=league.url_ref, session_id=session_ids[s.session_id]) }}">View →</a>
+            </span>
+        </div>
+        {% endfor %}
+    </div>
+</div>
+{% endif %}
+
+<!-- Debt resolution -->
+<div class="panel debt-panel" style="margin-top:20px;">
+    <div class="panel__head">
+        <div>
+            <span class="kicker" style="margin:0;">Front receivables <span class="info-tip" tabindex="0"><svg width="13" height="13" viewBox="0 0 13 13" fill="none" aria-hidden="true"><circle cx="6.5" cy="6.5" r="5.5" stroke="currentColor" stroke-width="1.2"/><path d="M6.5 6v3.5" stroke="currentColor" stroke-width="1.3" stroke-linecap="round"/><circle cx="6.5" cy="4" r=".7" fill="currentColor"/></svg><span class="info-tip__bubble">A front is chips the house covered for a player who didn't have cash. This section tracks who still owes money back to the house.</span></span></span>
+            <h2 class="panel__title">Debt resolution</h2>
+        </div>
+        <div class="debt-summary">
+            <span class="badge badge--owes">Open {{ totals.due_to_house_cents | money }}</span>
+            <span class="badge badge--paid">Collected {{ totals.collected_cents | money }}</span>
+            <span class="badge badge--written_off">Written off {{ totals.written_off_cents | money }}</span>
+        </div>
+    </div>
+    {% if debt_entries %}
+    <div class="debt-layout">
+        <div class="debt-list">
+            {% for item in debt_entries %}
+            {% set s = item.session %}
+            {% set e = item.entry %}
+            <div class="debt-list-item">
+                <div>
+                    <strong>{{ e.player_name }}</strong>
+                    <span>{{ session_label(s) }}</span>
+                </div>
+                <b>{{ e.current_due_to_house_cents | money }}</b>
+            </div>
+            {% endfor %}
+        </div>
+
+        {% if can_manage %}
+        <div class="debt-action-grid">
+            <form class="form-card debt-form" method="post">
+                <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
+                <h3>Collect debt</h3>
+                <label>
+                    <span>Outstanding debt</span>
+                    <select class="debt-select" data-target="collect" required>
+                        <option value="">Select debt</option>
+                        {% for item in debt_entries %}
+                        {% set s = item.session %}
+                        {% set e = item.entry %}
+                        <option value="{{ session_ids[s.session_id] }}||{{ player_ids[e.player_name] }}">
+                            {{ e.player_name }} · {{ session_label(s) }} · owes {{ e.current_due_to_house_cents | money }}
+                        </option>
+                        {% endfor %}
+                    </select>
+                </label>
+                <input type="hidden" name="session_id" value="">
+                <input type="hidden" name="player_id" value="">
+                <input type="hidden" name="event_type" value="debt_repayment">
+                <label>
+                    <span>Amount</span>
+                    <input type="number" step="0.01" min="0.01" name="amount" placeholder="0.00" required>
+                </label>
+                <label>
+                    <span>Note <span class="field__opt">(optional)</span></span>
+                    <textarea name="note" rows="2" placeholder="E-transfer, cash, etc."></textarea>
+                </label>
+                <button class="btn btn--primary" type="submit">Mark collected</button>
+            </form>
+
+            <form class="form-card debt-form" method="post">
+                <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
+                <h3>Write off debt</h3>
+                <label>
+                    <span>Outstanding debt</span>
+                    <select class="debt-select" data-target="writeoff" required>
+                        <option value="">Select debt</option>
+                        {% for item in debt_entries %}
+                        {% set s = item.session %}
+                        {% set e = item.entry %}
+                        <option value="{{ session_ids[s.session_id] }}||{{ player_ids[e.player_name] }}">
+                            {{ e.player_name }} · {{ session_label(s) }} · owes {{ e.current_due_to_house_cents | money }}
+                        </option>
+                        {% endfor %}
+                    </select>
+                </label>
+                <input type="hidden" name="session_id" value="">
+                <input type="hidden" name="player_id" value="">
+                <input type="hidden" name="event_type" value="writeoff">
+                <label>
+                    <span>Amount</span>
+                    <input type="number" step="0.01" min="0.01" name="amount" placeholder="0.00" required>
+                </label>
+                <label>
+                    <span>Note <span class="field__opt">(optional)</span></span>
+                    <textarea name="note" rows="2" placeholder="Won't be collected."></textarea>
+                </label>
+                <button class="btn btn--ghost" type="submit">Write off</button>
+            </form>
+        </div>
+        {% endif %}
+    </div>
+    {% else %}
+    <div class="debt-empty">
+        <div class="debt-empty__mark">$0</div>
+        <p>No open player debts right now.</p>
+    </div>
+    {% endif %}
+</div>
+
+<!-- Due to players -->
+{% if due_to_player_items %}
+<div class="panel" style="margin-top:16px;">
+    <div class="panel__head">
+        <div>
+            <span class="kicker" style="margin:0;">Unpaid cashout claims</span>
+            <h2 class="panel__title">Due to players</h2>
+        </div>
+        <span class="badge badge--owes">{{ totals.due_to_players_cents | money }}</span>
+    </div>
+    <div class="audit-item-list">
+        {% for item in due_to_player_items %}
+        <div class="audit-item">
+            <div>
+                <strong>{{ item.entry.player_name }}</strong>
+                <span class="stat__sub">{{ session_label(item.session) }}</span>
+            </div>
+            <span class="num-neg">{{ item.entry.current_due_to_player_cents | money }}</span>
+        </div>
+        {% endfor %}
+    </div>
+</div>
+{% endif %}
+
+<!-- Import / Export -->
+{% if can_manage %}
+<div class="panel panel--pad import-export-panel" style="margin-top:16px;">
+    <h2 class="panel__title" style="margin:0 0 4px">Import / export</h2>
+    <p class="csv__desc">Back up or migrate the raw event ledger for this league.</p>
+    <form method="post" action="{{ url_for('leagues.import_ledger_csv', league_ref=league.url_ref) }}" enctype="multipart/form-data" class="import-form">
+        <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
+        <div class="csv__btns">
+            <a class="csv-btn-ghost" href="{{ url_for('leagues.export_ledger_csv', league_ref=league.url_ref) }}">&darr; Export CSV</a>
+            <label class="csv-btn-ghost" for="csvImport">&uarr; Import CSV</label>
+        </div>
+        <input id="csvImport" type="file" accept=".csv,text/csv" name="csv_file" hidden onchange="this.form.submit()">
+        <label class="csv__drop" id="csvDrop" for="csvImport">Drop ledger.csv here to import</label>
+    </form>
+</div>
+{% else %}
+<div class="panel panel--pad import-export-panel" style="margin-top:16px;">
+    <h2 class="panel__title" style="margin:0 0 4px">Export</h2>
+    <p class="csv__desc">Download the raw event ledger for this league.</p>
+    <div class="csv__btns">
+        <a class="csv-btn-ghost" href="{{ url_for('leagues.export_ledger_csv', league_ref=league.url_ref) }}">&darr; Export CSV</a>
+    </div>
+</div>
+{% endif %}
+
+<!-- Sessions + events -->
+<div class="admin-bottom-grid" style="margin-top:16px;">
+    <div class="panel">
+        <div class="panel__head">
+            <div>
+                <span class="kicker" style="margin:0;">All sessions</span>
+                <h2 class="panel__title">Ledger totals</h2>
+            </div>
+        </div>
+        <div class="table-wrap">
+            <table>
+                <thead>
+                    <tr>
+                        <th>Session</th>
+                        <th>Players</th>
+                        <th>Cash in</th>
+                        <th>Paid out</th>
+                        <th>Due to house</th>
+                        <th>Status</th>
+                    </tr>
+                </thead>
+                <tbody>
+                    {% for s in sessions %}
+                    <tr>
+                        <td><a href="{{ url_for('leagues.session_detail', league_ref=league.url_ref, session_id=session_ids[s.session_id]) }}">{{ session_label(s) }}</a></td>
+                        <td style="font-family:var(--font-mono);color:var(--num)">{{ s.entries|length }}</td>
+                        <td style="font-family:var(--font-mono);color:var(--num)">{{ s.total_real_cash_in_cents | money }}</td>
+                        <td style="font-family:var(--font-mono);color:var(--pos)">{{ s.total_real_cash_out_cents | money }}</td>
+                        <td class="{{ 'negative' if s.total_current_due_to_house_cents > 0 else '' }}" style="font-family:var(--font-mono)">{{ s.total_current_due_to_house_cents | money }}</td>
+                        <td><span class="status-pill status-pill--{{ s.status }}">{{ s.status }}</span></td>
+                    </tr>
+                    {% else %}
+                    <tr><td colspan="6" class="muted-text">No sessions yet.</td></tr>
+                    {% endfor %}
+                </tbody>
+            </table>
+        </div>
+    </div>
+
+    <div class="panel">
+        <div class="panel__head">
+            <div>
+                <span class="kicker" style="margin:0;">All events</span>
+                <h2 class="panel__title">Ledger feed</h2>
+            </div>
+            <span class="badge badge--closed">append-only</span>
+        </div>
+        <div class="event-feed feed feed--inline">
+            {% for event in raw_events %}
+            <div class="event-card event-card--inline {% if event.voided_at %}event-card--voided{% endif %}">
+                <div class="event-card-top">
+                    <strong>{{ event.player_name or "Session" }}</strong>
+                    <span class="pill pill-{{ event.event_type }}">{{ event.event_type | replace('_', ' ') }}</span>
+                    {% if event.voided_at %}<span class="void-badge">voided</span>{% endif %}
+                    {% if event.note and not event.voided_at %}<span class="event-note">{{ event.note }}</span>{% endif %}
+                </div>
+                <p class="event-amount">{{ event.amount_cents | money }}</p>
+                {% if event.voided_at %}
+                <p class="tiny-text void-reason">{{ event.void_reason }}</p>
+                {% else %}
+                <p class="tiny-text">{{ event.session_date }}</p>
+                {% endif %}
+            </div>
+            {% else %}
+            <p class="muted-text" style="padding:20px;">No events recorded.</p>
+            {% endfor %}
+        </div>
+    </div>
+</div>
+
+<script>
+document.querySelectorAll('.debt-select').forEach(function(sel) {
+    sel.addEventListener('change', function() {
+        var parts = this.value.split('||');
+        var form = this.closest('form');
+        form.querySelector('[name=session_id]').value = parts[0] || '';
+        form.querySelector('[name=player_id]').value = parts[1] || '';
+    });
+});
+
+var csvDrop = document.getElementById('csvDrop');
+var csvInput = document.getElementById('csvImport');
+if (csvDrop && csvInput) {
+    csvDrop.addEventListener('dragover', function(e) { e.preventDefault(); csvDrop.classList.add('is-drag'); });
+    csvDrop.addEventListener('dragleave', function() { csvDrop.classList.remove('is-drag'); });
+    csvDrop.addEventListener('drop', function(e) {
+        e.preventDefault();
+        csvDrop.classList.remove('is-drag');
+        if (!e.dataTransfer || !e.dataTransfer.files.length) return;
+        csvInput.files = e.dataTransfer.files;
+        csvInput.form.submit();
+    });
+}
+
+</script>
+
+{% endblock %}
diff --git a/templates/league_new.html b/templates/league_new.html
new file mode 100644
index 0000000..46867c0
--- /dev/null
+++ b/templates/league_new.html
@@ -0,0 +1,26 @@
+{% extends "base.html" %}
+{% block title %}New League · myboker.org{% endblock %}
+{% block content %}
+
+<div class="form-shell narrow">
+    <form class="panel form-card" method="post">
+        <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
+        <div>
+            <p class="eyebrow">League setup</p>
+            <h1 style="font-size:28px;margin-bottom:8px;">Create league</h1>
+            <p class="muted-text" style="margin-bottom:8px;">Leagues are long-lived containers. Seasons can be added later.</p>
+        </div>
+        <label>
+            <span>Name <span class="info-tip" tabindex="0"><svg width="13" height="13" viewBox="0 0 13 13" fill="none" aria-hidden="true"><circle cx="6.5" cy="6.5" r="5.5" stroke="currentColor" stroke-width="1.2"/><path d="M6.5 6v3.5" stroke="currentColor" stroke-width="1.3" stroke-linecap="round"/><circle cx="6.5" cy="4" r=".7" fill="currentColor"/></svg><span class="info-tip__bubble">Pick something recognizable — it appears on your dashboard and the leaderboard.</span></span></span>
+            <input type="text" name="name" value="{{ form.name or '' }}" placeholder="Friday Poker" required>
+        </label>
+        <label>
+            <span>Description <span class="info-tip" tabindex="0"><svg width="13" height="13" viewBox="0 0 13 13" fill="none" aria-hidden="true"><circle cx="6.5" cy="6.5" r="5.5" stroke="currentColor" stroke-width="1.2"/><path d="M6.5 6v3.5" stroke="currentColor" stroke-width="1.3" stroke-linecap="round"/><circle cx="6.5" cy="4" r=".7" fill="currentColor"/></svg><span class="info-tip__bubble">Optional. Add context like 'Friday night home game, $20 buy-in'. Visible to league members.</span></span></span>
+            <textarea name="description" placeholder="Private home league">{{ form.description or '' }}</textarea>
+        </label>
+        <button class="btn btn--primary" type="submit">Create league</button>
+        <a class="btn btn--ghost" href="{{ url_for('leagues.index') }}">Cancel</a>
+    </form>
+</div>
+
+{% endblock %}
diff --git a/templates/league_player_detail.html b/templates/league_player_detail.html
new file mode 100644
index 0000000..e80cdbd
--- /dev/null
+++ b/templates/league_player_detail.html
@@ -0,0 +1,346 @@
+{% extends "base.html" %}
+{% block title %}{{ player.player_name }} · {{ league.name }} · myboker.org{% endblock %}
+{% block subnav %}{% include "_league_subnav.html" %}{% endblock %}
+{% block content %}
+
+
+<div class="hero">
+    <div>
+        {% if player_rank %}
+        <p class="player-rank">Rank #{{ player_rank }}</p>
+        {% endif %}
+        <h1 class="hero__title">{{ player.player_name }}</h1>
+        <p class="hero__sub">{{ player.sessions_played }} session{{ 's' if player.sessions_played != 1 else '' }} · {{ "%.1f"|format(player.win_pct) }}% win rate</p>
+    </div>
+</div>
+
+<div class="player-stat-grid" style="margin-bottom:20px;">
+    <div class="stat">
+        <span class="kicker">Total net</span>
+        <div class="stat__val {{ 'num-pos' if player.total_net_cents > 0 else 'num-neg' if player.total_net_cents < 0 else 'num-muted' }}">
+            {{ '+' if player.total_net_cents > 0 else '' }}{{ player.total_net_cents | money }}
+        </div>
+    </div>
+    <div class="stat">
+        <span class="kicker">Win rate</span>
+        <div class="stat__val" style="color:var(--text-strong)">{{ "%.1f"|format(player.win_pct) }}%</div>
+        <div class="stat__sub">{{ player.winning_sessions }}W · {{ player.losing_sessions }}L · {{ player.break_even_sessions }}E</div>
+    </div>
+    <div class="stat">
+        <span class="kicker">ROI</span>
+        <div class="stat__val {{ 'num-pos' if player.roi_pct > 0 else 'num-neg' if player.roi_pct < 0 else 'num-muted' }}">{{ "%.1f"|format(player.roi_pct) }}%</div>
+    </div>
+    <div class="stat">
+        <span class="kicker">Sessions</span>
+        <div class="stat__val" style="color:var(--text-strong)">{{ player.sessions_played }}</div>
+    </div>
+    <div class="stat">
+        <span class="kicker">Current W/L</span>
+        <div class="stat-pair">
+            <span class="stat-pair__val" style="color:var(--pos)">{{ player.current_win_streak }}W</span>
+            <span class="stat-pair__val" style="color:var(--neg)">{{ player.current_loss_streak }}L</span>
+        </div>
+        <div class="stat__sub">Longest {{ player.longest_win_streak }}W · {{ player.longest_loss_streak }}L</div>
+    </div>
+    <div class="stat">
+        <span class="kicker">Best / worst</span>
+        <div class="stat-pair">
+            <span class="stat-pair__val" style="color:var(--pos)">{{ player.biggest_win_cents | money }}</span>
+            <span class="stat-pair__val" style="color:var(--neg)">{{ player.biggest_loss_cents | money }}</span>
+        </div>
+    </div>
+    <div class="stat">
+        <span class="kicker">Total invested</span>
+        <div class="stat__val" style="color:var(--num)">{{ player.total_invested_cents | money }}</div>
+    </div>
+    <div class="stat">
+        <span class="kicker">Gross cashouts</span>
+        <div class="stat__val" style="color:var(--num)">{{ player.total_cash_out_cents | money }}</div>
+    </div>
+</div>
+
+<!-- Cumulative profit chart -->
+<div class="panel" style="margin-bottom:20px;">
+    <div class="panel__head">
+        <span class="kicker" style="margin:0;">Trend</span>
+        <h2 class="panel__title">Cumulative profit</h2>
+    </div>
+    <div class="chart-wrap">
+        <div class="chart-frame chart-frame--tall">
+            <canvas id="playerCumulativeChart"></canvas>
+        </div>
+    </div>
+</div>
+
+<!-- Charts row: session results + result mix -->
+<div class="split" style="margin-bottom:20px;">
+    <div class="panel col-main">
+        <div class="panel__head">
+            <span class="kicker" style="margin:0;">Session by session</span>
+            <h2 class="panel__title">Results</h2>
+        </div>
+        <div class="chart-wrap">
+            <div class="chart-frame">
+                <canvas id="playerSessionChart"></canvas>
+            </div>
+        </div>
+    </div>
+    <div class="panel col-side">
+        <div class="panel__head">
+            <span class="kicker" style="margin:0;">Breakdown</span>
+            <h2 class="panel__title">Result mix</h2>
+        </div>
+        <div class="chart-wrap">
+            <div class="result-mix" aria-label="Player result mix">
+                {% set result_total = player.winning_sessions + player.losing_sessions + player.break_even_sessions %}
+                <div class="result-mix__bar">
+                    {% if player.winning_sessions > 0 %}
+                    <span class="result-mix__seg result-mix__seg--win" style="flex-grow:{{ player.winning_sessions }}"></span>
+                    {% endif %}
+                    {% if player.break_even_sessions > 0 %}
+                    <span class="result-mix__seg result-mix__seg--even" style="flex-grow:{{ player.break_even_sessions }}"></span>
+                    {% endif %}
+                    {% if player.losing_sessions > 0 %}
+                    <span class="result-mix__seg result-mix__seg--loss" style="flex-grow:{{ player.losing_sessions }}"></span>
+                    {% endif %}
+                </div>
+                <div class="result-mix__legend">
+                    <div class="result-mix__legend-row">
+                        <span><i class="result-mix__key result-mix__key--win"></i>Wins</span>
+                        <strong><b>{{ player.winning_sessions }}</b><em>{{ "%.1f"|format((player.winning_sessions / result_total * 100) if result_total else 0) }}%</em></strong>
+                    </div>
+                    <div class="result-mix__legend-row">
+                        <span><i class="result-mix__key result-mix__key--even"></i>Even</span>
+                        <strong><b>{{ player.break_even_sessions }}</b><em>{{ "%.1f"|format((player.break_even_sessions / result_total * 100) if result_total else 0) }}%</em></strong>
+                    </div>
+                    <div class="result-mix__legend-row">
+                        <span><i class="result-mix__key result-mix__key--loss"></i>Losses</span>
+                        <strong><b>{{ player.losing_sessions }}</b><em>{{ "%.1f"|format((player.losing_sessions / result_total * 100) if result_total else 0) }}%</em></strong>
+                    </div>
+                </div>
+                {% if result_total > 0 %}
+                <div class="result-mix__note">±$1.00 counts as even</div>
+                {% endif %}
+            </div>
+        </div>
+    </div>
+</div>
+
+<!-- Perf vs Cash two-panel split -->
+<div class="split" style="margin-bottom:20px;">
+
+    <!-- Poker performance -->
+    <div class="panel col-main">
+        <div class="panel__head">
+            <div>
+                <div class="section-marker">
+                    <span class="section-marker__dot section-marker__dot--accent"></span>
+                    Poker performance
+                </div>
+                <h2 class="panel__title">Game results</h2>
+            </div>
+        </div>
+        <table style="width:100%;border-collapse:collapse;">
+            <tbody>
+                <tr>
+                    <td style="padding:11px 20px;color:var(--muted);font-size:13.5px;border-top:1px solid var(--divider);">Total Net</td>
+                    <td style="padding:11px 20px;text-align:right;font-family:var(--font-mono);font-variant-numeric:tabular-nums;border-top:1px solid var(--divider);"
+                        class="{{ 'num-pos' if player.total_net_cents > 0 else 'num-neg' if player.total_net_cents < 0 else '' }}">
+                        {{ '+' if player.total_net_cents > 0 else '' }}{{ player.total_net_cents | money }}
+                    </td>
+                </tr>
+                <tr>
+                    <td style="padding:11px 20px;color:var(--muted);font-size:13.5px;border-top:1px solid var(--divider);">Win %</td>
+                    <td style="padding:11px 20px;text-align:right;font-family:var(--font-mono);border-top:1px solid var(--divider);color:var(--num);">{{ "%.1f"|format(player.win_pct) }}%</td>
+                </tr>
+                <tr>
+                    <td style="padding:11px 20px;color:var(--muted);font-size:13.5px;border-top:1px solid var(--divider);">Record</td>
+                    <td style="padding:11px 20px;text-align:right;font-family:var(--font-mono);border-top:1px solid var(--divider);color:var(--num);">
+                        <span style="color:var(--pos)">{{ player.winning_sessions }}W</span>
+                        <span style="color:var(--faintest);margin:0 4px;">·</span>
+                        <span style="color:var(--neg)">{{ player.losing_sessions }}L</span>
+                        <span style="color:var(--faintest);margin:0 4px;">·</span>
+                        <span>{{ player.break_even_sessions }}E</span>
+                    </td>
+                </tr>
+                <tr>
+                    <td style="padding:11px 20px;color:var(--muted);font-size:13.5px;border-top:1px solid var(--divider);">ROI</td>
+                    <td style="padding:11px 20px;text-align:right;font-family:var(--font-mono);border-top:1px solid var(--divider);"
+                        class="{{ 'num-pos' if player.roi_pct > 0 else 'num-neg' if player.roi_pct < 0 else '' }}">{{ "%.1f"|format(player.roi_pct) }}%</td>
+                </tr>
+                <tr>
+                    <td style="padding:11px 20px;color:var(--muted);font-size:13.5px;border-top:1px solid var(--divider);">Average Win</td>
+                    <td style="padding:11px 20px;text-align:right;font-family:var(--font-mono);border-top:1px solid var(--divider);color:var(--pos);">{{ player.avg_win_cents | money }}</td>
+                </tr>
+                <tr>
+                    <td style="padding:11px 20px;color:var(--muted);font-size:13.5px;border-top:1px solid var(--divider);">Average Loss</td>
+                    <td style="padding:11px 20px;text-align:right;font-family:var(--font-mono);border-top:1px solid var(--divider);color:var(--neg);">{{ player.avg_loss_cents | money }}</td>
+                </tr>
+                <tr>
+                    <td style="padding:11px 20px;color:var(--muted);font-size:13.5px;border-top:1px solid var(--divider);">Best / Worst</td>
+                    <td style="padding:11px 20px;text-align:right;font-family:var(--font-mono);border-top:1px solid var(--divider);color:var(--num);">
+                        <span style="color:var(--pos)">{{ player.biggest_win_cents | money }}</span>
+                        <span style="color:var(--faintest);margin:0 4px;">/</span>
+                        <span style="color:var(--neg)">{{ player.biggest_loss_cents | money }}</span>
+                    </td>
+                </tr>
+                <tr>
+                    <td style="padding:11px 20px;color:var(--muted);font-size:13.5px;border-top:1px solid var(--divider);">Win / Loss Streak</td>
+                    <td style="padding:11px 20px;text-align:right;font-family:var(--font-mono);border-top:1px solid var(--divider);color:var(--num);">
+                        <span style="color:var(--pos)">{{ player.current_win_streak }}W</span>
+                        <span style="color:var(--faintest);margin:0 4px;">·</span>
+                        <span style="color:var(--neg)">{{ player.current_loss_streak }}L</span>
+                    </td>
+                </tr>
+                <tr>
+                    <td style="padding:11px 20px;color:var(--muted);font-size:13.5px;border-top:1px solid var(--divider);">Longest Win / Loss</td>
+                    <td style="padding:11px 20px;text-align:right;font-family:var(--font-mono);border-top:1px solid var(--divider);color:var(--num);">
+                        {{ player.longest_win_streak }}W · {{ player.longest_loss_streak }}L
+                    </td>
+                </tr>
+            </tbody>
+        </table>
+    </div>
+
+    <!-- Poker inputs and settlement. Fronts/rollovers are part of poker basis,
+         while paid/collected rows are real cash movement. -->
+    <div class="panel col-side">
+        <div class="panel__head">
+            <div>
+                <div class="section-marker">
+                    <span class="section-marker__dot section-marker__dot--rolled"></span>
+                    Poker basis + settlement
+                </div>
+                <h2 class="panel__title">Investment and settlement</h2>
+            </div>
+        </div>
+        <table style="width:100%;border-collapse:collapse;">
+            <tbody>
+                <tr>
+                    <td style="padding:11px 20px;color:var(--muted);font-size:13.5px;border-top:1px solid var(--divider);">Buy-ins paid</td>
+                    <td style="padding:11px 20px;text-align:right;font-family:var(--font-mono);border-top:1px solid var(--divider);color:var(--num);">{{ player.total_buy_in_cents | money }}</td>
+                </tr>
+                <tr>
+                    <td style="padding:11px 20px;color:var(--muted);font-size:13.5px;border-top:1px solid var(--divider);">Fronted</td>
+                    <td style="padding:11px 20px;text-align:right;font-family:var(--font-mono);border-top:1px solid var(--divider);color:var(--warn);">{{ player.total_front_cents | money }}</td>
+                </tr>
+                <tr>
+                    <td style="padding:11px 20px;color:var(--muted);font-size:13.5px;border-top:1px solid var(--divider);">Rolled in</td>
+                    <td style="padding:11px 20px;text-align:right;font-family:var(--font-mono);border-top:1px solid var(--divider);color:var(--rolled);">{{ player.total_rollover_in_cents | money }}</td>
+                </tr>
+                {% if player.total_payout_carry_in_cents > 0 %}
+                <tr>
+                    <td style="padding:11px 20px;color:var(--muted);font-size:13.5px;border-top:1px solid var(--divider);">Payout carry-in</td>
+                    <td style="padding:11px 20px;text-align:right;font-family:var(--font-mono);border-top:1px solid var(--divider);color:var(--rolled);">{{ player.total_payout_carry_in_cents | money }}</td>
+                </tr>
+                {% endif %}
+                <tr>
+                    <td style="padding:11px 20px;color:var(--muted);font-size:13.5px;border-top:1px solid var(--divider);">Total invested</td>
+                    <td style="padding:11px 20px;text-align:right;font-family:var(--font-mono);border-top:1px solid var(--divider);color:var(--num);">{{ player.total_invested_cents | money }}</td>
+                </tr>
+                <tr>
+                    <td style="padding:11px 20px;color:var(--muted);font-size:13.5px;border-top:1px solid var(--divider);">Gross cashout result</td>
+                    <td style="padding:11px 20px;text-align:right;font-family:var(--font-mono);border-top:1px solid var(--divider);color:var(--num);">{{ player.total_cash_out_cents | money }}</td>
+                </tr>
+                <tr>
+                    <td style="padding:11px 20px;color:var(--muted);font-size:13.5px;border-top:1px solid var(--divider);">Gross player claim</td>
+                    <td style="padding:11px 20px;text-align:right;font-family:var(--font-mono);border-top:1px solid var(--divider);color:var(--num);">{{ player.total_gross_payout_cents | money }}</td>
+                </tr>
+                <tr>
+                    <td style="padding:11px 20px;color:var(--muted);font-size:13.5px;border-top:1px solid var(--divider);">Rolled out</td>
+                    <td style="padding:11px 20px;text-align:right;font-family:var(--font-mono);border-top:1px solid var(--divider);color:var(--rolled);">{{ player.total_rollover_out_cents | money }}</td>
+                </tr>
+                <tr>
+                    <td style="padding:11px 20px;color:var(--muted);font-size:13.5px;border-top:1px solid var(--divider);">Cash paid out</td>
+                    <td style="padding:11px 20px;text-align:right;font-family:var(--font-mono);border-top:1px solid var(--divider);color:var(--pos);">{{ player.total_paid_out_cents | money }}</td>
+                </tr>
+                {% if player.total_debt_repayment_cents > 0 %}
+                <tr>
+                    <td style="padding:11px 20px;color:var(--muted);font-size:13.5px;border-top:1px solid var(--divider);">Cash debt repaid</td>
+                    <td style="padding:11px 20px;text-align:right;font-family:var(--font-mono);border-top:1px solid var(--divider);color:var(--pos);">{{ player.total_debt_repayment_cents | money }}</td>
+                </tr>
+                {% endif %}
+                {% if player.current_due_to_player_cents > 0 %}
+                <tr>
+                    <td style="padding:11px 20px;color:var(--muted);font-size:13.5px;border-top:1px solid var(--divider);">House owes player</td>
+                    <td style="padding:11px 20px;text-align:right;font-family:var(--font-mono);border-top:1px solid var(--divider);color:var(--neg);">{{ player.current_due_to_player_cents | money }}</td>
+                </tr>
+                {% endif %}
+                {% if player.current_due_to_house_cents > 0 %}
+                <tr>
+                    <td style="padding:11px 20px;color:var(--muted);font-size:13.5px;border-top:1px solid var(--divider);">Owes house</td>
+                    <td style="padding:11px 20px;text-align:right;font-family:var(--font-mono);border-top:1px solid var(--divider);color:var(--owes);">{{ player.current_due_to_house_cents | money }}</td>
+                </tr>
+                {% endif %}
+                {% if player.total_writeoff_cents > 0 %}
+                <tr>
+                    <td style="padding:11px 20px;color:var(--muted);font-size:13.5px;border-top:1px solid var(--divider);">Written off</td>
+                    <td style="padding:11px 20px;text-align:right;font-family:var(--font-mono);border-top:1px solid var(--divider);color:var(--neg);">{{ player.total_writeoff_cents | money }}</td>
+                </tr>
+                {% endif %}
+            </tbody>
+        </table>
+    </div>
+</div>
+
+<script>
+const playerChartData = {{ chart_data | tojson }};
+const rootStyles = getComputedStyle(document.documentElement);
+const textMuted = rootStyles.getPropertyValue('--text-muted').trim();
+const lineColor = rootStyles.getPropertyValue('--line').trim();
+
+const sharedOpts = {
+    responsive: true,
+    maintainAspectRatio: false,
+    plugins: {
+        legend: { position: 'bottom', labels: { color: textMuted, usePointStyle: true, boxWidth: 9, boxHeight: 9, padding: 16 } },
+    },
+    scales: {
+        x: { ticks: { color: textMuted, maxRotation: 0 }, grid: { color: lineColor } },
+        y: { ticks: { color: textMuted }, grid: { color: lineColor } },
+    },
+};
+
+const cumulativeCtx = document.getElementById('playerCumulativeChart');
+if (cumulativeCtx) {
+    new Chart(cumulativeCtx, {
+        type: 'line',
+        data: {
+            labels: playerChartData.labels,
+            datasets: [{
+                label: 'Cumulative Profit',
+                data: playerChartData.cumulative_values,
+                borderColor: playerChartData.color,
+                backgroundColor: playerChartData.color + '38',
+                borderWidth: 2.5,
+                pointRadius: 3,
+                pointHoverRadius: 5,
+                tension: 0.22,
+                fill: true,
+            }]
+        },
+        options: sharedOpts,
+    });
+}
+
+const sessionCtx = document.getElementById('playerSessionChart');
+if (sessionCtx) {
+    new Chart(sessionCtx, {
+        type: 'bar',
+        data: {
+            labels: playerChartData.labels,
+            datasets: [{
+                label: 'Session Net',
+                data: playerChartData.net_values,
+                backgroundColor: playerChartData.net_colors,
+                borderColor: playerChartData.net_colors,
+                borderRadius: 6,
+                borderSkipped: false,
+            }]
+        },
+        options: sharedOpts,
+    });
+}
+
+</script>
+{% endblock %}
diff --git a/templates/league_players.html b/templates/league_players.html
new file mode 100644
index 0000000..7ed2cd3
--- /dev/null
+++ b/templates/league_players.html
@@ -0,0 +1,266 @@
+{% extends "base.html" %}
+{% block title %}Players · {{ league.name }} · myboker.org{% endblock %}
+{% block subnav %}{% include "_league_subnav.html" %}{% endblock %}
+{% block content %}
+
+{% if can_manage %}
+<form class="panel form-card" method="post" style="margin-bottom:20px;">
+    <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
+    <div>
+        <p class="eyebrow">Roster</p>
+        <h2 class="panel__title" style="margin-top:4px;">Add player</h2>
+    </div>
+    <div class="session-create-row">
+        <label>
+            <span>Name <span class="info-tip" tabindex="0"><svg width="13" height="13" viewBox="0 0 13 13" fill="none" aria-hidden="true"><circle cx="6.5" cy="6.5" r="5.5" stroke="currentColor" stroke-width="1.2"/><path d="M6.5 6v3.5" stroke="currentColor" stroke-width="1.3" stroke-linecap="round"/><circle cx="6.5" cy="4" r=".7" fill="currentColor"/></svg><span class="info-tip__bubble">The player's display name. Appears on the leaderboard and in all ledger events. Players don't need a myboker account.</span></span></span>
+            <input type="text" name="display_name" value="{{ form.display_name or '' }}" placeholder="Alex" required>
+        </label>
+        <label>
+            <span>Notes <span class="form-opt-hint">(optional)</span> <span class="info-tip" tabindex="0"><svg width="13" height="13" viewBox="0 0 13 13" fill="none" aria-hidden="true"><circle cx="6.5" cy="6.5" r="5.5" stroke="currentColor" stroke-width="1.2"/><path d="M6.5 6v3.5" stroke="currentColor" stroke-width="1.3" stroke-linecap="round"/><circle cx="6.5" cy="4" r=".7" fill="currentColor"/></svg><span class="info-tip__bubble">Optional. Useful for payment handles like 'Venmo @alex'. Visible only to league managers, not on public pages.</span></span></span>
+            <input type="text" name="notes" value="{{ form.notes or '' }}" placeholder="Venmo @alex">
+        </label>
+    </div>
+    <div>
+        <button class="btn btn--primary" type="submit">Add player</button>
+    </div>
+</form>
+{% endif %}
+
+{% set active_players = players | selectattr('status', 'equalto', 'active') | list %}
+{% set archived_players = players | selectattr('status', 'equalto', 'archived') | list %}
+
+<div class="panel">
+    <div class="panel__head">
+        <div>
+            <p class="kicker" style="margin:0;">Roster</p>
+            <h2 class="panel__title">Active players</h2>
+        </div>
+        <span class="panel__tag">{{ active_players|length }} players</span>
+    </div>
+    {% if active_players %}
+    <div class="player-grid">
+        {% for player in active_players %}
+        {% set stats = stats_by_name.get(player.display_name) %}
+        {% set initials = player.display_name.split()|map('first')|join('')|upper %}
+        {% set avatar_cls = 'player-avatar--pos' if stats and stats.total_net_cents > 0 else 'player-avatar--neg' if stats and stats.total_net_cents < 0 else '' %}
+        <div class="player-card">
+            <div class="player-card__head">
+                <div class="player-avatar {{ avatar_cls }}">{{ initials[:2] }}</div>
+                <div class="player-card__name-block">
+                    <a class="player-card__name" href="{{ url_for('leagues.player_detail', league_ref=league.url_ref, player_id=player.id) }}">{{ player.display_name }}</a>
+                    <span class="player-card__sub">
+                        {% if stats %}{{ stats.sessions_played }} session{{ 's' if stats.sessions_played != 1 else '' }}{% else %}No sessions yet{% endif %}
+                    </span>
+                </div>
+                {% if can_manage %}
+                <div class="card-menu">
+                    <button class="card-menu__trigger" type="button" aria-label="Player options">···</button>
+                    <div class="card-menu__dropdown" hidden>
+                        <button class="card-menu__item" type="button"
+                            data-edit-name="{{ player.display_name }}"
+                            data-edit-notes="{{ player.notes or '' }}"
+                            data-edit-action="{{ url_for('leagues.edit_player', league_ref=league.url_ref, player_id=player.id) }}">Edit player</button>
+                        {% if player.status == 'active' %}
+                        <button class="card-menu__item card-menu__item--warn" type="button"
+                            data-archive-name="{{ player.display_name }}"
+                            data-archive-action="{{ url_for('leagues.archive_player', league_ref=league.url_ref, player_id=player.id) }}">Archive</button>
+                        {% endif %}
+                    </div>
+                </div>
+                {% endif %}
+            </div>
+            {% if stats %}
+            <div class="player-card__stats">
+                <div class="player-card__stat">
+                    <span class="kicker">Net</span>
+                    <span class="player-card__stat-val {{ 'num-pos' if stats.total_net_cents > 0 else 'num-neg' if stats.total_net_cents < 0 else 'num-muted' }}">
+                        {{ '+' if stats.total_net_cents > 0 else '' }}{{ stats.total_net_cents | money }}
+                    </span>
+                </div>
+                <div class="player-card__stat">
+                    <span class="kicker">Win rate</span>
+                    <span class="player-card__stat-val">{{ "%.0f"|format(stats.win_pct * 100) }}%</span>
+                </div>
+                <div class="player-card__stat">
+                    <span class="kicker">Best win</span>
+                    <span class="player-card__stat-val" style="color:var(--pos)">{{ stats.biggest_win_cents | money }}</span>
+                </div>
+            </div>
+            {% endif %}
+        </div>
+        {% endfor %}
+    </div>
+    {% else %}
+    <div class="empty-panel">
+        <p class="kicker">Empty roster</p>
+        <h3 class="panel__title">No players yet</h3>
+        <p class="muted-text">Add the people who play in this league. Players don't need accounts.</p>
+    </div>
+    {% endif %}
+</div>
+
+{% if archived_players %}
+<div class="panel" style="margin-top:20px;">
+    <div class="panel__head">
+        <div>
+            <p class="kicker" style="margin:0;">Archive</p>
+            <h2 class="panel__title">Archived players</h2>
+        </div>
+        <span class="panel__tag">{{ archived_players|length }}</span>
+    </div>
+    <div class="player-list">
+        {% for player in archived_players %}
+        {% set stats = stats_by_name.get(player.display_name) %}
+        <div class="player-row" style="opacity:0.6;">
+            <div>
+                <strong>{{ player.display_name }}</strong>
+                {% if stats %}<span>{{ stats.sessions_played }} sessions · {{ stats.total_net_cents | money }} net</span>{% endif %}
+            </div>
+            <div class="player-row__actions">
+                {% if can_manage %}
+                <div class="card-menu">
+                    <button class="card-menu__trigger" type="button" aria-label="Player options">···</button>
+                    <div class="card-menu__dropdown" hidden>
+                        <button class="card-menu__item" type="button"
+                            data-edit-name="{{ player.display_name }}"
+                            data-edit-notes="{{ player.notes or '' }}"
+                            data-edit-action="{{ url_for('leagues.edit_player', league_ref=league.url_ref, player_id=player.id) }}">Edit player</button>
+                        <form method="post" action="{{ url_for('leagues.reactivate_player', league_ref=league.url_ref, player_id=player.id) }}" style="margin:0;">
+                            <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
+                            <button class="card-menu__item" type="submit">Reactivate</button>
+                        </form>
+                    </div>
+                </div>
+                {% endif %}
+            </div>
+        </div>
+        {% endfor %}
+    </div>
+</div>
+{% endif %}
+
+{% if can_manage %}
+<div class="modal-backdrop" id="modal-edit-player" hidden>
+    <div class="modal-card" role="dialog" aria-modal="true" aria-labelledby="modal-edit-player-title">
+        <div class="modal-card__head">
+            <span class="kicker" style="margin:0;">Roster</span>
+            <h2 class="panel__title" id="modal-edit-player-title">Edit player</h2>
+        </div>
+        <form id="edit-player-form" method="post" action="">
+            <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
+            <div class="form-card" style="padding:0 20px 4px;gap:12px;">
+                <label>
+                    <span>Name</span>
+                    <input type="text" name="display_name" id="edit-player-name" required minlength="2">
+                </label>
+                <label>
+                    <span>Notes <span class="form-opt-hint">(optional)</span></span>
+                    <input type="text" name="notes" id="edit-player-notes" placeholder="Venmo @alex">
+                </label>
+            </div>
+            <div class="modal-card__actions">
+                <button class="btn btn--ghost btn--sm" type="button" data-close-modal>Cancel</button>
+                <button class="btn btn--primary btn--sm" type="submit">Save changes</button>
+            </div>
+        </form>
+    </div>
+</div>
+
+<div class="modal-backdrop" id="modal-archive-player" hidden>
+    <div class="modal-card" role="dialog" aria-modal="true" aria-labelledby="modal-archive-player-title">
+        <div class="modal-card__head">
+            <span class="kicker" style="margin:0;">Roster</span>
+            <h2 class="panel__title" id="modal-archive-player-title">Archive player?</h2>
+        </div>
+        <p style="padding:0 20px 16px;margin:0;font:400 14px/1.5 var(--font-ui);color:var(--text-2);">Archived players are hidden from the active roster. Their history is preserved. You can reactivate them any time.</p>
+        <form id="archive-player-form" method="post" action="">
+            <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
+            <div class="modal-card__actions">
+                <button class="btn btn--ghost btn--sm" type="button" data-close-modal>Cancel</button>
+                <button class="btn btn--danger btn--sm" type="submit">Archive player</button>
+            </div>
+        </form>
+    </div>
+</div>
+
+<script>
+(function () {
+    var editForm    = document.getElementById('edit-player-form');
+    var editName    = document.getElementById('edit-player-name');
+    var editNotes   = document.getElementById('edit-player-notes');
+    var editModal   = document.getElementById('modal-edit-player');
+    var archiveForm  = document.getElementById('archive-player-form');
+    var archiveTitle = document.getElementById('modal-archive-player-title');
+    var archiveModal = document.getElementById('modal-archive-player');
+
+    function closeAllDropdowns() {
+        document.querySelectorAll('.card-menu__dropdown').forEach(function (d) {
+            d.setAttribute('hidden', '');
+            d.style.cssText = '';
+        });
+    }
+
+    // Card menu: open with fixed positioning to escape overflow:hidden panels
+    document.querySelectorAll('.card-menu__trigger').forEach(function (trigger) {
+        trigger.addEventListener('click', function (e) {
+            e.stopPropagation();
+            var dropdown = this.nextElementSibling;
+            var isOpen = !dropdown.hasAttribute('hidden');
+            closeAllDropdowns();
+            if (!isOpen) {
+                var tr = trigger.getBoundingClientRect();
+                dropdown.style.position = 'fixed';
+                dropdown.style.right = 'auto';
+                dropdown.style.top = 'auto';
+                dropdown.removeAttribute('hidden');
+                var dw = dropdown.offsetWidth;
+                var dh = dropdown.offsetHeight;
+                var left = tr.right - dw;
+                var top  = tr.bottom + 4;
+                if (top + dh > window.innerHeight - 8) top = tr.top - dh - 4;
+                if (left < 8) left = 8;
+                dropdown.style.left = left + 'px';
+                dropdown.style.top  = top  + 'px';
+            }
+        });
+    });
+    document.addEventListener('click', closeAllDropdowns);
+
+    // Edit player
+    document.querySelectorAll('.card-menu__item[data-edit-action]').forEach(function (item) {
+        item.addEventListener('click', function () {
+            closeAllDropdowns();
+            editForm.action = this.dataset.editAction;
+            editName.value  = this.dataset.editName;
+            editNotes.value = this.dataset.editNotes;
+            editModal.removeAttribute('hidden');
+            setTimeout(function () { editName.focus(); }, 50);
+        });
+    });
+
+    // Archive player
+    document.querySelectorAll('.card-menu__item[data-archive-action]').forEach(function (item) {
+        item.addEventListener('click', function () {
+            closeAllDropdowns();
+            archiveTitle.textContent = 'Archive ' + this.dataset.archiveName + '?';
+            archiveForm.action = this.dataset.archiveAction;
+            archiveModal.removeAttribute('hidden');
+        });
+    });
+
+    // Modal close
+    document.querySelectorAll('[data-close-modal]').forEach(function (btn) {
+        btn.addEventListener('click', function () {
+            this.closest('.modal-backdrop').setAttribute('hidden', '');
+        });
+    });
+    document.querySelectorAll('.modal-backdrop').forEach(function (backdrop) {
+        backdrop.addEventListener('click', function (e) {
+            if (e.target === this) this.setAttribute('hidden', '');
+        });
+    });
+})();
+</script>
+{% endif %}
+
+{% endblock %}
diff --git a/templates/league_session_detail.html b/templates/league_session_detail.html
new file mode 100644
index 0000000..8ac0fa9
--- /dev/null
+++ b/templates/league_session_detail.html
@@ -0,0 +1,382 @@
+{% extends "base.html" %}
+{% block title %}{{ session_model.display_label }} · {{ league.name }} · myboker.org{% endblock %}
+{% block subnav %}{% include "_league_subnav.html" %}{% endblock %}
+{% block content %}
+
+<div class="hero" style="padding-top:0;padding-bottom:12px;display:flex;flex-wrap:wrap;gap:12px;align-items:flex-end;justify-content:space-between;">
+    <div>
+        <h1 class="hero__title">{{ session_model.display_label }}</h1>
+        <p class="hero__sub">{{ session_model.session_date.isoformat() | pretty_date }} · <span class="status-badge status-{{ session_model.status }}">{{ session_model.status }}</span></p>
+    </div>
+    <div class="button-row">
+        <a class="btn btn--ghost btn--sm" href="{{ url_for('leagues.session_public_view', league_ref=league.url_ref, session_id=session_model.id) }}">Public view</a>
+        {% if can_manage %}
+        <button class="btn btn--ghost btn--sm" type="button" data-modal="modal-edit-session">Edit session</button>
+        {% if session_model.status == 'open' %}
+        <form method="post" action="{{ url_for('leagues.close_league_session', league_ref=league.url_ref, session_id=session_model.id) }}" style="margin:0;">
+            <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
+            <button class="btn btn--ghost btn--sm" type="submit">Close session</button>
+        </form>
+        {% else %}
+        <button class="btn btn--ghost btn--sm" type="button" data-modal="modal-reopen-session">Reopen session</button>
+        {% endif %}
+        {% endif %}
+        {% if is_owner %}
+        <button class="btn btn--danger btn--sm" type="button" data-modal="modal-delete-session">Delete session</button>
+        {% endif %}
+    </div>
+</div>
+
+<div class="cash-strip">
+    <div class="stat stat--rail" style="--rail:var(--accent);">
+        <span class="kicker">Invested</span>
+        <div class="stat__val" style="color:var(--num)">{{ session.total_invested_cents | money }}</div>
+    </div>
+    <div class="stat stat--rail" style="--rail:var(--rank-2);">
+        <span class="kicker">Cashout</span>
+        <div class="stat__val" style="color:var(--num)">{{ session.total_cash_out_cents | money }}</div>
+    </div>
+    <div class="stat stat--rail" style="--rail:var(--pos);">
+        <span class="kicker">Paid out</span>
+        <div class="stat__val" style="color:var(--pos)">{{ session.total_paid_out_cents | money }}</div>
+    </div>
+    <div class="stat stat--rail" style="--rail:var(--warn);">
+        <span class="kicker">Open items</span>
+        <div class="stat__val" style="color:var(--num)">{{ (session.total_current_due_to_player_cents + session.total_current_due_to_house_cents) | money }}</div>
+    </div>
+</div>
+
+<div class="league-manage-grid" style="margin-top:20px;align-items:stretch;">
+    {% if can_manage %}
+    <form class="panel form-card" method="post" id="appendForm" style="align-self:stretch;">
+        <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
+        <div>
+            <p class="eyebrow">Append event</p>
+            <h2 class="panel__title" style="margin-top:4px;">Ledger entry</h2>
+        </div>
+        {% if session_model.status != 'open' %}
+        <div class="session-locked-banner">
+            <strong>Session closed</strong>
+            <span>Books assumed settled. Reopen to add events.</span>
+        </div>
+        {% endif %}
+        <fieldset {% if session_model.status != 'open' %}disabled{% endif %} style="border:none;padding:0;margin:0;min-width:0;">
+            <label>
+                <span>Player</span>
+                <input
+                    type="text"
+                    id="playerSearch"
+                    list="playerList"
+                    placeholder="Start typing a name…"
+                    autocomplete="off"
+                    value="{{ players | selectattr('id', 'equalto', append_form.player_id) | map(attribute='display_name') | first | default('') }}"
+                >
+                <datalist id="playerList">
+                    {% for player in players %}
+                    <option value="{{ player.display_name }}"></option>
+                    {% endfor %}
+                </datalist>
+                <input type="hidden" name="player_id" id="playerIdInput" value="{{ append_form.player_id or '' }}">
+            </label>
+            <label>
+                <span>Event type</span>
+                <select name="event_type" id="eventTypeSelect" required>
+                    {% for value, label in event_types %}
+                    <option value="{{ value }}" {{ 'selected' if append_form.event_type == value else '' }}>{{ label }}</option>
+                    {% endfor %}
+                </select>
+            </label>
+            <label>
+                <span>Amount</span>
+                <input type="number" step="0.01" min="0" name="amount" value="{{ append_form.amount }}" placeholder="0.00">
+            </label>
+            <label>
+                <span>Note <span class="form-opt-hint">(optional)</span></span>
+                <textarea name="note" placeholder="Optional context">{{ append_form.note or '' }}</textarea>
+            </label>
+            <button class="btn btn--primary" type="submit" style="margin-top:8px;">Append event</button>
+        </fieldset>
+    </form>
+    {% else %}
+    <div class="panel empty-panel">
+        <h2 class="panel__title">Read only</h2>
+        <p class="muted-text">Your role can inspect this session but cannot append ledger events.</p>
+    </div>
+    {% endif %}
+
+    <div class="panel">
+        <div class="panel__head">
+            <div>
+                <p class="kicker" style="margin:0;">Results</p>
+                <h2 class="panel__title">Player totals</h2>
+            </div>
+            <span class="panel__tag">{{ session.entries|length }} players</span>
+        </div>
+        {% if session.entries %}
+        <div class="player-ledger-list">
+            {% for entry in session.entries %}
+            {% set row_cls = 'player-ledger-row--pos' if entry.net_cents > 0 else 'player-ledger-row--neg' if entry.net_cents < 0 else '' %}
+            <div class="player-ledger-row {{ row_cls }}">
+                <div class="player-ledger-row__header">
+                    <span class="player-ledger-row__name">{{ entry.player_name }}</span>
+                    {% if entry.current_due_to_house_cents > 0 %}
+                    <span class="badge badge--owes">Owes {{ entry.current_due_to_house_cents | money }}</span>
+                    {% elif entry.current_due_to_player_cents > 0 %}
+                    <span class="badge badge--unpaid">Due {{ entry.current_due_to_player_cents | money }}</span>
+                    {% else %}
+                    <span class="badge badge--settled">Settled</span>
+                    {% endif %}
+                </div>
+                <div class="player-ledger-row__fields">
+                    <div class="player-ledger-row__field">
+                        <span class="player-ledger-row__lbl">Buy in</span>
+                        <span class="player-ledger-row__val">{{ entry.invested_cents | money }}</span>
+                    </div>
+                    <div class="player-ledger-row__field">
+                        <span class="player-ledger-row__lbl">Cashout claim</span>
+                        <span class="player-ledger-row__val">{{ entry.cash_out_cents | money }}</span>
+                    </div>
+                    <div class="player-ledger-row__field">
+                        <span class="player-ledger-row__lbl">Paid out</span>
+                        <span class="player-ledger-row__val" style="color:var(--pos)">{{ entry.paid_out_cents | money if entry.paid_out_cents else '—' }}</span>
+                    </div>
+                    <div class="player-ledger-row__field player-ledger-row__field--net">
+                        <span class="player-ledger-row__lbl">Net</span>
+                        <span class="player-ledger-row__val {{ 'num-pos' if entry.net_cents > 0 else 'num-neg' if entry.net_cents < 0 else 'num-muted' }}">
+                            {{ '+' if entry.net_cents > 0 else '' }}{{ entry.net_cents | money }}
+                        </span>
+                    </div>
+                </div>
+                {% if entry.rollover_in_cents or entry.rollover_out_cents or entry.payout_carry_in_cents %}
+                <div class="player-ledger-row__fields player-ledger-row__fields--secondary">
+                    <div class="player-ledger-row__field">
+                        <span class="player-ledger-row__lbl">Rolled in</span>
+                        <span class="player-ledger-row__val" style="color:var(--rolled)">{{ entry.rollover_in_cents | money }}</span>
+                    </div>
+                    <div class="player-ledger-row__field">
+                        <span class="player-ledger-row__lbl">Carry in</span>
+                        <span class="player-ledger-row__val" style="color:var(--rolled)">{{ entry.payout_carry_in_cents | money }}</span>
+                    </div>
+                    <div class="player-ledger-row__field">
+                        <span class="player-ledger-row__lbl">Rolled out</span>
+                        <span class="player-ledger-row__val" style="color:var(--rolled)">{{ entry.rollover_out_cents | money }}</span>
+                    </div>
+                </div>
+                {% endif %}
+            </div>
+            {% endfor %}
+        </div>
+        {% else %}
+        <p class="muted-text" style="padding:28px;">No player ledger events yet.</p>
+        {% endif %}
+    </div>
+</div>
+
+<div class="panel" style="margin-top:20px;">
+    <div class="panel__head">
+        <div>
+            <p class="kicker" style="margin:0;">Audit trail</p>
+            <h2 class="panel__title">Raw ledger events</h2>
+        </div>
+        <span class="badge badge--closed">append-only</span>
+    </div>
+    <div class="event-feed feed feed--inline" style="max-height:none;">
+        {% for event in raw_events | reverse %}
+        <div class="event-card event-card--inline {% if event.voided_at %}event-card--voided{% endif %}">
+            <div class="event-card-top">
+                <strong>{{ event.player_name or "Session" }}</strong>
+                <span class="pill pill-{{ event.event_type }}">{{ event.event_type | replace('_', ' ') }}</span>
+                {% if event.voided_at %}<span class="void-badge">voided</span>{% endif %}
+                {% if event.note and not event.voided_at %}<span class="event-note">{{ event.note }}</span>{% endif %}
+            </div>
+            <p class="event-amount">{{ event.amount_cents | money }}</p>
+            {% if event.voided_at %}
+            <p class="tiny-text void-reason">{{ event.void_reason }}</p>
+            {% else %}
+            <p class="tiny-text">{{ event.created_at }}</p>
+            {% if is_owner %}
+            <button class="btn-void-toggle" type="button"
+                data-void-id="{{ event.id }}"
+                data-void-player="{{ event.player_name or 'Session' }}"
+                data-void-type="{{ event.event_type | replace('_', ' ') }}"
+                data-void-amount="${{ '%.2f' % (event.amount_cents / 100) }}"
+                data-void-action="{{ url_for('leagues.void_event', league_ref=league.url_ref, event_id=event.id) }}">
+                void
+            </button>
+            {% endif %}
+            {% endif %}
+        </div>
+        {% else %}
+        <p class="muted-text" style="padding:20px;">No events recorded.</p>
+        {% endfor %}
+    </div>
+</div>
+
+<!-- Void event modal -->
+{% if is_owner %}
+<div class="modal-backdrop" id="modal-void-event" hidden>
+    <div class="modal-card" role="dialog" aria-modal="true" aria-labelledby="modal-void-title">
+        <div class="modal-card__head">
+            <span class="kicker" style="margin:0;color:var(--warn);">Correct the record</span>
+            <h2 class="panel__title" id="modal-void-title">Void event</h2>
+        </div>
+        <p class="modal-card__text" id="modal-void-desc">This event will remain visible in the audit trail but will no longer count toward any calculations.</p>
+        <form id="modal-void-form" method="post" action="">
+            <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
+            <label style="display:flex;flex-direction:column;gap:6px;margin-bottom:16px;">
+                <span style="font:600 12px/1 var(--font-ui);color:var(--text-2);text-transform:uppercase;letter-spacing:.04em;">Reason</span>
+                <input type="text" name="void_reason" placeholder="What was wrong with this event?" required maxlength="200"
+                    style="background:var(--field);border:1px solid var(--border-strong);border-radius:var(--r-sm);padding:9px 12px;font:400 14px/1.4 var(--font-ui);color:var(--text-1);">
+            </label>
+            <div class="modal-card__actions">
+                <button class="btn btn--ghost btn--sm" type="button" data-close-modal>Cancel</button>
+                <button class="btn btn--danger btn--sm" type="submit">Void this event</button>
+            </div>
+        </form>
+    </div>
+</div>
+{% endif %}
+
+<!-- Delete confirmation modal -->
+<div class="modal-backdrop" id="modal-delete-session" hidden>
+    <div class="modal-card" role="dialog" aria-modal="true" aria-labelledby="modal-delete-title">
+        <div class="modal-card__head">
+            <span class="kicker" style="margin:0;color:var(--neg);">Destructive action</span>
+            <h2 class="panel__title" id="modal-delete-title">Delete {{ session_model.display_label }}?</h2>
+        </div>
+        <p class="modal-card__text">This will permanently delete the session and <strong>all {{ session_model.event_count if session_model.event_count is defined else 'its' }} ledger events</strong> attached to it. There is no undo.</p>
+        <div class="modal-card__actions">
+            <button class="btn btn--ghost btn--sm" type="button" data-close-modal>Cancel</button>
+            <form method="post" action="{{ url_for('leagues.delete_session', league_ref=league.url_ref, session_id=session_model.id) }}" style="margin:0;">
+                <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
+                <button class="btn btn--danger btn--sm" type="submit">Yes, delete permanently</button>
+            </form>
+        </div>
+    </div>
+</div>
+
+<!-- Edit session modal -->
+{% if can_manage %}
+<div class="modal-backdrop" id="modal-edit-session" hidden>
+    <div class="modal-card" role="dialog" aria-modal="true" aria-labelledby="modal-edit-session-title">
+        <div class="modal-card__head">
+            <span class="kicker" style="margin:0;">Session</span>
+            <h2 class="panel__title" id="modal-edit-session-title">Edit session</h2>
+        </div>
+        <form method="post" action="{{ url_for('leagues.edit_session', league_ref=league.url_ref, session_id=session_model.id) }}">
+            <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
+            <div class="form-card" style="padding:0 20px 4px;gap:12px;">
+                <label>
+                    <span>Date</span>
+                    <input type="date" name="session_date" value="{{ session_model.session_date.isoformat() }}" required>
+                </label>
+                <label>
+                    <span>Label <span class="form-opt-hint">(optional)</span></span>
+                    <input type="text" name="label" value="{{ session_model.label or '' }}" placeholder="e.g. Main table">
+                </label>
+                <label>
+                    <span>Notes <span class="form-opt-hint">(optional)</span></span>
+                    <input type="text" name="notes" value="{{ session_model.notes or '' }}" placeholder="Optional context">
+                </label>
+            </div>
+            <div class="modal-card__actions">
+                <button class="btn btn--ghost btn--sm" type="button" data-close-modal>Cancel</button>
+                <button class="btn btn--primary btn--sm" type="submit">Save changes</button>
+            </div>
+        </form>
+    </div>
+</div>
+{% endif %}
+
+<!-- Reopen confirmation modal -->
+<div class="modal-backdrop" id="modal-reopen-session" hidden>
+    <div class="modal-card" role="dialog" aria-modal="true" aria-labelledby="modal-reopen-title">
+        <div class="modal-card__head">
+            <span class="kicker" style="margin:0;">Settled session</span>
+            <h2 class="panel__title" id="modal-reopen-title">Reopen this session?</h2>
+        </div>
+        <p class="modal-card__text">This session has been closed and books are assumed to be settled. Reopening will allow new ledger events to be appended and may affect settlement totals.</p>
+        <div class="modal-card__actions">
+            <button class="btn btn--ghost btn--sm" type="button" data-close-modal>Cancel</button>
+            <form method="post" action="{{ url_for('leagues.open_league_session', league_ref=league.url_ref, session_id=session_model.id) }}" style="margin:0;">
+                <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
+                <button class="btn btn--primary btn--sm" type="submit">Reopen session</button>
+            </form>
+        </div>
+    </div>
+</div>
+
+<script>
+// Player search — map display name → player id
+const playerMap = {
+    {% for player in players %}"{{ player.display_name | replace('"', '\\"') }}": "{{ player.id }}"{% if not loop.last %},{% endif %}
+    {% endfor %}
+};
+const searchInput = document.getElementById('playerSearch');
+const idInput = document.getElementById('playerIdInput');
+const eventTypeSelect = document.getElementById('eventTypeSelect');
+
+if (searchInput && idInput) {
+    searchInput.addEventListener('input', function () {
+        idInput.value = playerMap[this.value.trim()] || '';
+    });
+    // Also handle datalist selection which fires change
+    searchInput.addEventListener('change', function () {
+        idInput.value = playerMap[this.value.trim()] || '';
+    });
+}
+
+// Clear player field when event type is "note"
+if (eventTypeSelect && searchInput && idInput) {
+    eventTypeSelect.addEventListener('change', function () {
+        if (this.value === 'note') {
+            searchInput.value = '';
+            idInput.value = '';
+            searchInput.placeholder = 'No player (session note)';
+        } else {
+            searchInput.placeholder = 'Start typing a name…';
+        }
+    });
+    // Set initial placeholder if note is selected
+    if (eventTypeSelect.value === 'note') {
+        searchInput.placeholder = 'No player (session note)';
+    }
+}
+
+// Modal logic
+document.querySelectorAll('[data-modal]').forEach(function(btn) {
+    btn.addEventListener('click', function() {
+        var target = document.getElementById(this.dataset.modal);
+        if (target) target.removeAttribute('hidden');
+    });
+});
+document.querySelectorAll('[data-close-modal]').forEach(function(btn) {
+    btn.addEventListener('click', function() {
+        this.closest('.modal-backdrop').setAttribute('hidden', '');
+    });
+});
+document.querySelectorAll('.modal-backdrop').forEach(function(backdrop) {
+    backdrop.addEventListener('click', function(e) {
+        if (e.target === this) this.setAttribute('hidden', '');
+    });
+});
+
+// Void event modal
+document.querySelectorAll('[data-void-id]').forEach(function(btn) {
+    btn.addEventListener('click', function() {
+        var player = this.dataset.voidPlayer;
+        var type = this.dataset.voidType;
+        var amount = this.dataset.voidAmount;
+        document.getElementById('modal-void-title').textContent = 'Void ' + type + ' — ' + player;
+        document.getElementById('modal-void-desc').textContent =
+            'The ' + amount + ' ' + type + ' event for ' + player +
+            ' will be marked voided and excluded from all calculations. It stays visible in the audit trail.';
+        var form = document.getElementById('modal-void-form');
+        form.action = this.dataset.voidAction;
+        form.querySelector('[name=void_reason]').value = '';
+        document.getElementById('modal-void-event').removeAttribute('hidden');
+    });
+});
+</script>
+
+{% endblock %}
diff --git a/templates/league_session_view.html b/templates/league_session_view.html
new file mode 100644
index 0000000..f18ba6d
--- /dev/null
+++ b/templates/league_session_view.html
@@ -0,0 +1,263 @@
+{% extends "base.html" %}
+{% block title %}{{ session_model.display_label }} · {{ league.name }} · myboker.org{% endblock %}
+{% block subnav %}{% include "_league_subnav.html" %}{% endblock %}
+{% block page_class %}page--session{% endblock %}
+{% block content %}
+
+<div class="breadcrumb">
+    <a href="{{ url_for('leagues.sessions', league_ref=league.url_ref) }}">Sessions</a>
+    <span class="breadcrumb__sep">/</span>
+    <span>{{ session_model.display_label }}</span>
+    <span style="flex:1"></span>
+    {% if prev_session_id %}
+    <a class="btn btn--ghost btn--sm" href="{{ url_for('leagues.session_public_view', league_ref=league.url_ref, session_id=prev_session_id) }}">← Prev</a>
+    {% endif %}
+    {% if next_session_id %}
+    <a class="btn btn--ghost btn--sm" href="{{ url_for('leagues.session_public_view', league_ref=league.url_ref, session_id=next_session_id) }}">Next →</a>
+    {% endif %}
+    <button class="btn btn--outline btn--sm" id="copyLinkBtn" type="button" onclick="copySessionLink(this)">Share</button>
+</div>
+
+<div class="hero" style="padding-top:0;">
+    <p class="hero__kicker session-number">Session #{{ "%03d"|format(session_number) }}</p>
+    <h1 class="hero__title">{{ session_model.display_label }}</h1>
+    <p class="hero__sub">{{ session.entries|length }} player{{ 's' if session.entries|length != 1 else '' }} · <span class="status-badge status-{{ session_model.status }}">{{ session_model.status }}</span></p>
+</div>
+
+<!-- Recon cards -->
+<div class="recon-grid" style="margin-bottom:20px;">
+    <div class="panel">
+        <div class="recon-card-head">
+            <span class="kicker kicker--dot kicker--dot-accent">Banker cash flow</span>
+        </div>
+        <div class="recon-metric-grid">
+            <div class="recon-cell">
+                <span class="kicker" style="font-size:10px;">Actual cash in</span>
+                <div class="recon-val recon-val--num">{{ session.total_real_cash_in_cents | money }}</div>
+            </div>
+            <div class="recon-cell">
+                <span class="kicker" style="font-size:10px;">Gross player claim</span>
+                <div class="recon-val recon-val--num">{{ session.total_gross_payout_cents | money }}</div>
+            </div>
+            <div class="recon-cell">
+                <span class="kicker" style="font-size:10px;">Cash paid out</span>
+                <div class="recon-val recon-val--pos">{{ session.total_real_cash_out_cents | money }}</div>
+            </div>
+            <div class="recon-cell">
+                <span class="kicker" style="font-size:10px;">Rolled out</span>
+                <div class="recon-val" style="color:var(--rolled)">{{ session.total_rollover_out_cents | money }}</div>
+            </div>
+        </div>
+    </div>
+    <div class="panel">
+        <div class="recon-card-head">
+            <span class="kicker kicker--dot kicker--dot-warn">Open items</span>
+        </div>
+        <div class="recon-metric-grid">
+            <div class="recon-cell">
+                <span class="kicker" style="font-size:10px;">House owes players</span>
+                <div class="recon-val {{ 'recon-val--neg' if session.total_current_due_to_player_cents > 0 else 'recon-val--pos' }}">
+                    {{ session.total_current_due_to_player_cents | money }}
+                </div>
+            </div>
+            <div class="recon-cell">
+                <span class="kicker" style="font-size:10px;">Players owe house</span>
+                <div class="recon-val {{ 'recon-val--warn' if session.total_current_due_to_house_cents > 0 else '' }}">
+                    {{ session.total_current_due_to_house_cents | money }}
+                </div>
+            </div>
+            <div class="recon-cell">
+                <span class="kicker" style="font-size:10px;">Cash debt repaid</span>
+                <div class="recon-val" style="color:var(--pos)">{{ session.total_debt_repayment_cents | money }}</div>
+            </div>
+            <div class="recon-cell">
+                <span class="kicker" style="font-size:10px;">Written off</span>
+                <div class="recon-val" style="color:var(--neg)">{{ session.total_writeoff_cents | money }}</div>
+            </div>
+        </div>
+    </div>
+</div>
+
+<!-- Player totals table -->
+<div class="panel" style="margin-bottom:20px;">
+    <div class="panel__head">
+        <div>
+            <span class="kicker" style="margin:0;">Results</span>
+            <h2 class="panel__title">Player totals</h2>
+        </div>
+        <div class="segmented" id="viewToggle">
+            <button class="seg is-on" data-view="compact">Compact</button>
+            <button class="seg" data-view="full">Full ledger</button>
+        </div>
+    </div>
+    <div class="tbl-scroll">
+        <table class="tbl tbl--session" id="sessionTable">
+            <thead>
+                <tr>
+                    <th class="col-player">Player</th>
+                    <th>Invested</th>
+                    <th>Gross cashout</th>
+                    <th>Net</th>
+                    <th>Paid out</th>
+                    <th>Open settlement</th>
+                    <th>Settlement status</th>
+                    <th class="col-acct">Front</th>
+                    <th class="col-acct">Rolled in</th>
+                    <th class="col-acct">Payout carry-in</th>
+                    <th class="col-acct">Gross player claim</th>
+                    <th class="col-acct">Rolled out</th>
+                    <th class="col-acct">Notes</th>
+                </tr>
+            </thead>
+            <tbody>
+                {% for entry in session.entries %}
+                <tr>
+                    <td class="col-player">{{ entry.player_name }}</td>
+                    <td>{{ entry.invested_cents | money }}</td>
+                    <td>{{ entry.cash_out_cents | money }}</td>
+                    <td class="num-net {{ 'num-pos' if entry.net_cents > 0 else 'num-neg' if entry.net_cents < 0 else 'num-muted' }}">
+                        {{ '+' if entry.net_cents > 0 else '' }}{{ entry.net_cents | money }}
+                    </td>
+                    <td style="color:var(--pos)">{{ entry.paid_out_cents | money }}</td>
+                    <td>
+                        {% if entry.current_due_to_house_cents > 0 %}
+                            <span style="color:var(--owes)">owes {{ entry.current_due_to_house_cents | money }}</span>
+                        {% elif entry.current_due_to_player_cents > 0 %}
+                            <span style="color:var(--neg)">due {{ entry.current_due_to_player_cents | money }}</span>
+                        {% else %}
+                            <span class="num-muted">{{ 0 | money }}</span>
+                        {% endif %}
+                    </td>
+                    <td><span class="badge badge--{{ entry.payout_status }}">{{ entry.payout_status }}</span></td>
+                    <td class="col-acct" style="color:var(--warn)">{{ entry.front_cents | money }}</td>
+                    <td class="col-acct" style="color:var(--rolled)">{{ entry.rollover_in_cents | money }}</td>
+                    <td class="col-acct" style="color:var(--rolled)">{{ entry.payout_carry_in_cents | money }}</td>
+                    <td class="col-acct">
+                        {% if entry.gross_due_to_house_cents > 0 %}—{% else %}{{ entry.gross_payout_cents | money }}{% endif %}
+                    </td>
+                    <td class="col-acct" style="color:var(--rolled)">{{ entry.rollover_out_cents | money }}</td>
+                    <td class="col-acct" style="text-align:left;font-family:var(--font-ui);">
+                        {% if entry.notes %}
+                            <ul class="note-list">{% for n in entry.notes %}<li>{{ n }}</li>{% endfor %}</ul>
+                        {% else %}
+                            <span style="color:var(--faintest-2)">—</span>
+                        {% endif %}
+                    </td>
+                </tr>
+                {% else %}
+                <tr><td colspan="13" style="text-align:left;padding:28px;color:var(--muted);">No player events yet.</td></tr>
+                {% endfor %}
+            </tbody>
+        </table>
+    </div>
+</div>
+
+<!-- Net bars + snapshot -->
+<div class="split">
+    <div class="panel col-main">
+        <div class="panel__head">
+            <div>
+                <span class="kicker" style="margin:0;">Breakdown</span>
+                <h2 class="panel__title">Net by player</h2>
+            </div>
+        </div>
+        <div class="chart-wrap">
+            <div class="session-net-bars" id="sessionBreakdownChart" aria-label="Net by player"></div>
+        </div>
+    </div>
+
+    <div class="panel col-side">
+        <div class="panel__head">
+            <div>
+                <span class="kicker" style="margin:0;">Quick read</span>
+                <h2 class="panel__title">Session snapshot</h2>
+            </div>
+        </div>
+        {% set winners = session.entries | selectattr('net_cents', 'gt', 0) | list %}
+        {% set losers  = session.entries | selectattr('net_cents', 'lt', 0) | list %}
+        <div class="snapshot-grid">
+            <div class="snapshot-cell">
+                <span class="kicker" style="font-size:10px;">Biggest winner</span>
+                <div class="snapshot-val" style="color:var(--pos)">
+                    {% if winners %}{{ (winners | sort(attribute='net_cents', reverse=True) | first).net_cents | money }}{% else %}—{% endif %}
+                </div>
+                {% if winners %}<div style="font-size:12px;color:var(--muted);margin-top:4px;">{{ winners | sort(attribute='net_cents', reverse=True) | first | attr('player_name') }}</div>{% endif %}
+            </div>
+            <div class="snapshot-cell">
+                <span class="kicker" style="font-size:10px;">Biggest loser</span>
+                <div class="snapshot-val" style="color:var(--neg)">
+                    {% if losers %}{{ (losers | sort(attribute='net_cents') | first).net_cents | money }}{% else %}—{% endif %}
+                </div>
+                {% if losers %}<div style="font-size:12px;color:var(--muted);margin-top:4px;">{{ losers | sort(attribute='net_cents') | first | attr('player_name') }}</div>{% endif %}
+            </div>
+            <div class="snapshot-cell">
+                <span class="kicker" style="font-size:10px;">Gross cashout result</span>
+                <div class="snapshot-val">{{ session.total_cash_out_cents | money }}</div>
+            </div>
+            <div class="snapshot-cell">
+                <span class="kicker" style="font-size:10px;">Open items</span>
+                <div class="snapshot-val {{ 'recon-val--neg' if (session.total_current_due_to_player_cents + session.total_current_due_to_house_cents) > 0 else '' }}">
+                    {{ (session.total_current_due_to_player_cents + session.total_current_due_to_house_cents) | money }}
+                </div>
+            </div>
+        </div>
+    </div>
+</div>
+
+<script>
+const sessionChartData = {{ chart_data | tojson }};
+const breakdownCtx = document.getElementById('sessionBreakdownChart');
+if (breakdownCtx) {
+    const values = sessionChartData.net_values || [];
+    const labels = sessionChartData.labels || [];
+    const colors = sessionChartData.net_colors || [];
+    const maxAbs = Math.max(...values.map(v => Math.abs(v)), 1);
+    const fmt = new Intl.NumberFormat('en-US', { style: 'currency', currency: 'USD' });
+    const esc = v => String(v).replace(/[&<>"']/g, c => ({'&':'&amp;','<':'&lt;','>':'&gt;','"':'&quot;',"'":'&#39;'}[c]));
+    breakdownCtx.innerHTML = labels.map((label, i) => {
+        const val = Number(values[i] || 0);
+        const w = Math.min(Math.abs(val) / maxAbs * 50, 50);
+        const cls = val < 0 ? 'session-net-bars__bar--neg' : 'session-net-bars__bar--pos';
+        const amt = `${val > 0 ? '+' : ''}${fmt.format(val)}`;
+        const color = colors[i] || (val < 0 ? '#e0758a' : val > 0 ? '#6fc093' : '#84828e');
+        return `<div class="session-net-bars__row">
+            <div class="session-net-bars__name">${esc(label)}</div>
+            <div class="session-net-bars__track"><span class="session-net-bars__bar ${cls}" style="width:${w}%;background:${color};"></span></div>
+            <div class="session-net-bars__amount">${amt}</div>
+        </div>`;
+    }).join('');
+}
+
+document.querySelectorAll('#viewToggle .seg').forEach(btn => {
+    btn.addEventListener('click', () => {
+        document.querySelectorAll('#viewToggle .seg').forEach(b => b.classList.remove('is-on'));
+        btn.classList.add('is-on');
+        document.getElementById('sessionTable').classList.toggle('is-full', btn.dataset.view === 'full');
+    });
+});
+
+function copySessionLink(btn) {
+    navigator.clipboard.writeText(window.location.href).then(function() {
+        var orig = btn.textContent;
+        btn.textContent = 'Copied!';
+        btn.disabled = true;
+        setTimeout(function() { btn.textContent = orig; btn.disabled = false; }, 2000);
+    }).catch(function() {
+        // Fallback for non-HTTPS or denied clipboard
+        var ta = document.createElement('textarea');
+        ta.value = window.location.href;
+        ta.style.position = 'fixed';
+        ta.style.opacity = '0';
+        document.body.appendChild(ta);
+        ta.select();
+        document.execCommand('copy');
+        document.body.removeChild(ta);
+        var orig = btn.textContent;
+        btn.textContent = 'Copied!';
+        btn.disabled = true;
+        setTimeout(function() { btn.textContent = orig; btn.disabled = false; }, 2000);
+    });
+}
+</script>
+
+{% endblock %}
diff --git a/templates/league_sessions.html b/templates/league_sessions.html
new file mode 100644
index 0000000..30e15c8
--- /dev/null
+++ b/templates/league_sessions.html
@@ -0,0 +1,149 @@
+{% extends "base.html" %}
+{% block title %}Sessions · {{ league.name }} · myboker.org{% endblock %}
+{% block subnav %}{% include "_league_subnav.html" %}{% endblock %}
+{% block content %}
+
+<div class="stack">
+
+    {% if can_manage %}
+    <form class="panel form-card" method="post">
+        <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
+        <div>
+            <p class="eyebrow">Add session</p>
+            <h2 class="panel__title" style="margin-top:4px;">New session</h2>
+        </div>
+        <input type="hidden" name="status" value="open">
+        <div class="session-create-row">
+            <label>
+                <span>Date <span class="info-tip" tabindex="0"><svg width="13" height="13" viewBox="0 0 13 13" fill="none" aria-hidden="true"><circle cx="6.5" cy="6.5" r="5.5" stroke="currentColor" stroke-width="1.2"/><path d="M6.5 6v3.5" stroke="currentColor" stroke-width="1.3" stroke-linecap="round"/><circle cx="6.5" cy="4" r=".7" fill="currentColor"/></svg><span class="info-tip__bubble">The night the game was played. Same-day sessions automatically become S1, S2, etc.</span></span></span>
+                <input type="date" name="session_date" value="{{ form.session_date }}" required>
+            </label>
+            <label>
+                <span>Label <span class="form-opt-hint">(optional)</span> <span class="info-tip" tabindex="0"><svg width="13" height="13" viewBox="0 0 13 13" fill="none" aria-hidden="true"><circle cx="6.5" cy="6.5" r="5.5" stroke="currentColor" stroke-width="1.2"/><path d="M6.5 6v3.5" stroke="currentColor" stroke-width="1.3" stroke-linecap="round"/><circle cx="6.5" cy="4" r=".7" fill="currentColor"/></svg><span class="info-tip__bubble">A short name for this session — 'Main table', 'Side game', etc. Shown in the session list alongside the date.</span></span></span>
+                <input type="text" name="label" value="{{ form.label or '' }}" placeholder="e.g. Main table">
+            </label>
+            <label>
+                <span>Notes <span class="form-opt-hint">(optional)</span> <span class="info-tip" tabindex="0"><svg width="13" height="13" viewBox="0 0 13 13" fill="none" aria-hidden="true"><circle cx="6.5" cy="6.5" r="5.5" stroke="currentColor" stroke-width="1.2"/><path d="M6.5 6v3.5" stroke="currentColor" stroke-width="1.3" stroke-linecap="round"/><circle cx="6.5" cy="4" r=".7" fill="currentColor"/></svg><span class="info-tip__bubble">Optional context visible in the session list — venue, occasion, anything worth noting.</span></span></span>
+                <input type="text" name="notes" value="{{ form.notes or '' }}" placeholder="Optional context">
+            </label>
+        </div>
+        <div>
+            <button class="btn btn--primary" type="submit">Create session</button>
+        </div>
+    </form>
+    {% endif %}
+
+    <div class="panel">
+        <div class="panel__head">
+            <div>
+                <p class="kicker" style="margin:0;">History</p>
+                <h2 class="panel__title">All sessions</h2>
+            </div>
+            <div style="display:flex;align-items:center;gap:8px;">
+                <span class="panel__tag">{{ sessions|length }} total</span>
+                {% if can_manage and empty_count > 0 %}
+                <form method="post" action="{{ url_for('leagues.prune_empty_sessions', league_ref=league.url_ref) }}" style="margin:0;">
+                    <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
+                    <button class="btn btn--ghost btn--sm" type="submit">Prune empty ({{ empty_count }})</button>
+                </form>
+                {% endif %}
+            </div>
+        </div>
+        {% if sessions %}
+        <div>
+            {% for session in sessions %}
+            {% set sm = db_id_to_summary.get(session.id) %}
+            <div class="session-row session-row--{{ session.status }}">
+                <div class="session-row__info">
+                    <div class="session-date-block">
+                        <span class="session-date-block__mon">{{ session.session_date.strftime('%b') }}</span>
+                        <span class="session-date-block__day">{{ session.session_date.strftime('%-d') }}</span>
+                    </div>
+                    <div class="session-row__text">
+                        <div class="session-row__title">
+                            <a href="{{ url_for('leagues.session_public_view', league_ref=league.url_ref, session_id=session.id) }}">{{ session.display_label }}</a>
+                        </div>
+                        <div class="session-row__meta">
+                            <span>S{{ session.sequence_on_date }}</span>
+                            {% if sm and sm.entries %}
+                            <span>· {{ sm.entries|length }} player{{ 's' if sm.entries|length != 1 else '' }}</span>
+                            <span>· {{ sm.total_invested_cents | money }} pot</span>
+                            {% if sm.total_current_due_to_house_cents > 0 or sm.total_current_due_to_player_cents > 0 %}
+                            <span style="color:var(--warn);">· {{ (sm.total_current_due_to_house_cents + sm.total_current_due_to_player_cents) | money }} open</span>
+                            {% endif %}
+                            {% endif %}
+                            {% if session.notes %}<span>· {{ session.notes }}</span>{% endif %}
+                        </div>
+                    </div>
+                </div>
+                <div class="session-row__actions">
+                    <span class="status-pill status-pill--{{ session.status }}">{{ session.status }}</span>
+                    <a class="btn btn--ghost btn--sm" href="{{ url_for('leagues.session_public_view', league_ref=league.url_ref, session_id=session.id) }}">View</a>
+                    {% if can_manage %}
+                    <a class="btn btn--ghost btn--sm" href="{{ url_for('leagues.session_detail', league_ref=league.url_ref, session_id=session.id) }}">Manage</a>
+                    {% if session.status == 'open' %}
+                    <form method="post" action="{{ url_for('leagues.close_league_session', league_ref=league.url_ref, session_id=session.id) }}" style="margin:0;">
+                        <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
+                        <button class="btn btn--ghost btn--sm" type="submit">Close</button>
+                    </form>
+                    {% else %}
+                    <button class="btn btn--outline btn--sm" type="button"
+                        data-modal="modal-reopen-session"
+                        data-reopen-action="{{ url_for('leagues.open_league_session', league_ref=league.url_ref, session_id=session.id) }}">Reopen</button>
+                    {% endif %}
+                    {% endif %}
+                </div>
+            </div>
+            {% endfor %}
+        </div>
+        {% else %}
+        <div class="empty-panel">
+            <h3 class="panel__title">No sessions yet</h3>
+            <p class="muted-text">Create the first session above. Same-day sessions will automatically become S1, S2, and so on.</p>
+        </div>
+        {% endif %}
+    </div>
+
+</div>
+
+<!-- Reopen confirmation modal -->
+<div class="modal-backdrop" id="modal-reopen-session" hidden>
+    <div class="modal-card" role="dialog" aria-modal="true" aria-labelledby="modal-reopen-title">
+        <div class="modal-card__head">
+            <span class="kicker" style="margin:0;">Settled session</span>
+            <h2 class="panel__title" id="modal-reopen-title">Reopen this session?</h2>
+        </div>
+        <p class="modal-card__text">This session has been closed and books are assumed to be settled. Reopening will allow new ledger events to be appended and may affect settlement totals.</p>
+        <div class="modal-card__actions">
+            <button class="btn btn--ghost btn--sm" type="button" data-close-modal>Cancel</button>
+            <form id="reopenForm" method="post" action="" style="margin:0;">
+                <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
+                <button class="btn btn--primary btn--sm" type="submit">Reopen session</button>
+            </form>
+        </div>
+    </div>
+</div>
+
+<script>
+var reopenModal = document.getElementById('modal-reopen-session');
+var reopenForm = document.getElementById('reopenForm');
+
+document.querySelectorAll('[data-modal="modal-reopen-session"]').forEach(function(btn) {
+    btn.addEventListener('click', function() {
+        if (reopenForm && this.dataset.reopenAction) {
+            reopenForm.action = this.dataset.reopenAction;
+        }
+        if (reopenModal) reopenModal.removeAttribute('hidden');
+    });
+});
+document.querySelectorAll('[data-close-modal]').forEach(function(btn) {
+    btn.addEventListener('click', function() {
+        this.closest('.modal-backdrop').setAttribute('hidden', '');
+    });
+});
+reopenModal && reopenModal.addEventListener('click', function(e) {
+    if (e.target === this) this.setAttribute('hidden', '');
+});
+</script>
+
+{% endblock %}
diff --git a/templates/league_settings.html b/templates/league_settings.html
new file mode 100644
index 0000000..4f316fb
--- /dev/null
+++ b/templates/league_settings.html
@@ -0,0 +1,168 @@
+{% extends "base.html" %}
+{% block title %}Settings · {{ league.name }} · myboker.org{% endblock %}
+{% block subnav %}{% include "_league_subnav.html" %}{% endblock %}
+{% block content %}
+
+
+<div class="stack">
+
+    <form class="panel form-card" method="post">
+        <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
+        <div>
+            <p class="eyebrow">General</p>
+            <h2 class="panel__title" style="margin-top:4px;">League info</h2>
+        </div>
+        <label>
+            <span>Name <span class="info-tip" tabindex="0"><svg width="13" height="13" viewBox="0 0 13 13" fill="none" aria-hidden="true"><circle cx="6.5" cy="6.5" r="5.5" stroke="currentColor" stroke-width="1.2"/><path d="M6.5 6v3.5" stroke="currentColor" stroke-width="1.3" stroke-linecap="round"/><circle cx="6.5" cy="4" r=".7" fill="currentColor"/></svg><span class="info-tip__bubble">The display name for this league. Shown on your dashboard and the public leaderboard.</span></span></span>
+            <input type="text" name="name" value="{{ form.name }}" required>
+        </label>
+        <label>
+            <span>Description <span class="form-opt-hint">(optional)</span> <span class="info-tip" tabindex="0"><svg width="13" height="13" viewBox="0 0 13 13" fill="none" aria-hidden="true"><circle cx="6.5" cy="6.5" r="5.5" stroke="currentColor" stroke-width="1.2"/><path d="M6.5 6v3.5" stroke="currentColor" stroke-width="1.3" stroke-linecap="round"/><circle cx="6.5" cy="4" r=".7" fill="currentColor"/></svg><span class="info-tip__bubble">Optional. A short note about the league — game night, buy-in rules, anything useful to members.</span></span></span>
+            <textarea name="description">{{ form.description }}</textarea>
+        </label>
+        <label>
+            <span>Visibility <span class="info-tip" tabindex="0"><svg width="13" height="13" viewBox="0 0 13 13" fill="none" aria-hidden="true"><circle cx="6.5" cy="6.5" r="5.5" stroke="currentColor" stroke-width="1.2"/><path d="M6.5 6v3.5" stroke="currentColor" stroke-width="1.3" stroke-linecap="round"/><circle cx="6.5" cy="4" r=".7" fill="currentColor"/></svg><span class="info-tip__bubble">Private keeps the league off the Explore page. Public makes the leaderboard and session history visible to anyone with the link — no account needed.</span></span></span>
+            <select name="visibility">
+                <option value="private" {{ 'selected' if form.visibility == 'private' else '' }}>Private — only members can see this league</option>
+                <option value="public" {{ 'selected' if form.visibility == 'public' else '' }}>Public — leaderboard is visible to anyone</option>
+            </select>
+        </label>
+        <div>
+            <button class="btn btn--primary" type="submit">Save changes</button>
+        </div>
+    </form>
+
+    <div class="panel">
+        <div class="panel__head">
+            <div>
+                <p class="kicker" style="margin:0;">Access</p>
+                <h2 class="panel__title">Members</h2>
+            </div>
+            <span class="panel__tag">{{ members|length }} member{{ 's' if members|length != 1 else '' }}</span>
+        </div>
+        <div class="panel__body" style="padding-bottom:0;">
+            {% for membership, member_user in members %}
+            <div class="member-row">
+                <div>
+                    <strong>{{ member_user.email }}</strong>
+                    <span class="kicker" style="margin-left:8px;text-transform:capitalize;">{{ membership.role }}</span>
+                </div>
+                {% if membership.role != 'owner' %}
+                <form method="post" action="{{ url_for('leagues.remove_member', league_ref=league.url_ref, user_id=member_user.id) }}" style="margin:0;">
+                    <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
+                    <button class="btn btn--ghost btn--sm" type="submit">Remove</button>
+                </form>
+                {% endif %}
+            </div>
+            {% endfor %}
+        </div>
+        <form class="form-card" method="post" action="{{ url_for('leagues.invite_member', league_ref=league.url_ref) }}" style="padding:16px 20px 20px;border-top:1px solid var(--border);">
+            <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
+            <p class="kicker" style="margin-bottom:10px;">Invite by email</p>
+            <div class="session-create-row" style="align-items:flex-end;gap:10px;">
+                <label style="flex:1 1 200px;">
+                    <span>Email</span>
+                    <input type="email" name="email" placeholder="friend@example.com" required>
+                </label>
+                <label style="flex:0 0 130px;">
+                    <span>Role</span>
+                    <select name="role">
+                        <option value="manager">Manager</option>
+                        <option value="viewer">Viewer</option>
+                    </select>
+                </label>
+                <button class="btn btn--primary btn--sm" type="submit" style="flex:0 0 auto;margin-bottom:1px;">Send invite</button>
+            </div>
+        </form>
+    </div>
+
+    <div class="panel">
+        <div class="panel__head">
+            <div>
+                <p class="kicker" style="margin:0;color:var(--neg);">Danger zone</p>
+                <h2 class="panel__title">Destructive actions</h2>
+            </div>
+        </div>
+        <div class="panel__body">
+            <div class="danger-row">
+                <div>
+                    <strong class="danger-row__title">Archive league</strong>
+                    <p class="muted-text">Removes this league from your dashboard. All players, sessions, and ledger data are preserved.</p>
+                </div>
+                <button class="btn btn--ghost btn--sm" type="button" data-modal="modal-archive">Archive league</button>
+            </div>
+        </div>
+    </div>
+
+</div>
+
+<div class="modal-backdrop" id="modal-archive" hidden>
+    <div class="modal-card">
+        <div class="modal-card__head">
+            <h2 style="font-size:18px;margin:0;">Archive league</h2>
+        </div>
+        <p class="modal-card__text">
+            <strong>{{ league.name }}</strong> will be hidden from your dashboard. All data is preserved and can be recovered by contacting support. This does not delete any sessions or ledger events.<br><br>
+            Type the league name to confirm:
+        </p>
+        <form method="post" action="{{ url_for('leagues.archive_league', league_ref=league.url_ref) }}">
+            <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
+            <div style="padding:0 20px 16px;">
+                <input
+                    class="modal-confirm-input"
+                    type="text"
+                    name="confirm_name"
+                    placeholder="{{ league.name }}"
+                    autocomplete="off"
+                    data-match="{{ league.name }}"
+                    data-target="archive-confirm-btn"
+                >
+            </div>
+            <div class="modal-card__actions">
+                <button class="btn btn--ghost btn--sm" type="button" data-close-modal>Cancel</button>
+                <button class="btn btn--sm btn--danger" id="archive-confirm-btn" type="submit" disabled>Archive league</button>
+            </div>
+        </form>
+    </div>
+</div>
+
+<script>
+(function () {
+    function openModal(id) {
+        const el = document.getElementById(id);
+        if (el) {
+            el.removeAttribute('hidden');
+            const inp = el.querySelector('.modal-confirm-input, input[type="password"]');
+            if (inp) { inp.value = ''; inp.focus(); checkConfirmInput(inp); }
+        }
+    }
+    function closeModal(el) {
+        el.closest('.modal-backdrop').setAttribute('hidden', '');
+    }
+    function checkConfirmInput(inp) {
+        const targetId = inp.dataset.target;
+        const btn = document.getElementById(targetId);
+        if (!btn) return;
+        if (inp.dataset.match) {
+            btn.disabled = inp.value !== inp.dataset.match;
+        } else if (inp.dataset.minlength) {
+            btn.disabled = inp.value.length < parseInt(inp.dataset.minlength, 10);
+        }
+    }
+
+    document.querySelectorAll('[data-modal]').forEach(trigger => {
+        trigger.addEventListener('click', () => openModal(trigger.dataset.modal));
+    });
+    document.querySelectorAll('[data-close-modal]').forEach(btn => {
+        btn.addEventListener('click', () => closeModal(btn));
+    });
+    document.querySelectorAll('.modal-backdrop').forEach(backdrop => {
+        backdrop.addEventListener('click', e => { if (e.target === backdrop) backdrop.setAttribute('hidden', ''); });
+    });
+    document.querySelectorAll('.modal-confirm-input').forEach(inp => {
+        inp.addEventListener('input', () => checkConfirmInput(inp));
+    });
+})();
+</script>
+
+{% endblock %}
diff --git a/templates/leagues_index.html b/templates/leagues_index.html
new file mode 100644
index 0000000..1c6aa9f
--- /dev/null
+++ b/templates/leagues_index.html
@@ -0,0 +1,136 @@
+{% extends "base.html" %}
+{% block title %}Leagues · myboker.org{% endblock %}
+{% block content %}
+
+<div class="hero" style="padding-bottom:12px;">
+    <p class="hero__kicker">Leagues</p>
+    <h1 class="hero__title">Your poker leagues</h1>
+    <p class="hero__sub">Owner and manager workspace.</p>
+</div>
+
+<div class="toolbar">
+    <div class="toolbar__left">
+        <a class="btn btn--primary" href="{{ url_for('leagues.new') }}">New league</a>
+    </div>
+</div>
+
+{% if leagues %}
+<div class="league-hub-summary">
+    <div class="stat stat--rail" style="--rail:var(--accent);">
+        <span class="kicker">Leagues</span>
+        <div class="stat__val" style="color:var(--num)">{{ page_summary.league_count }}</div>
+    </div>
+    <div class="stat stat--rail" style="--rail:var(--pos);">
+        <span class="kicker">Live</span>
+        <div class="stat__val" style="color:var(--num)">{{ page_summary.live_count }}</div>
+    </div>
+    <div class="stat stat--rail" style="--rail:var(--rolled);">
+        <span class="kicker">Sessions</span>
+        <div class="stat__val" style="color:var(--num)">{{ page_summary.sessions_count }}</div>
+    </div>
+    <div class="stat stat--rail" style="--rail:var(--warn);">
+        <span class="kicker">Open items</span>
+        <div class="stat__val {{ 'num-neg' if page_summary.open_items_cents > 0 else 'num-muted' }}">{{ page_summary.open_items_cents | money }}</div>
+    </div>
+</div>
+
+<div class="league-board">
+    {% for item in leagues %}
+    {% set league = item.league %}
+    {% set membership = item.membership %}
+    <article class="panel league-row">
+        <div class="league-row__identity">
+            <a class="league-row__title" href="{{ url_for('leagues.dashboard', league_ref=league.url_ref) }}">
+                <div>
+                    <span class="kicker">{{ membership.role }}</span>
+                    <h2>{{ league.name }}</h2>
+                </div>
+                {% if item.live_session %}
+                <span class="live-badge">{{ session_label(item.live_session) }}</span>
+                {% else %}
+                <span class="status-pill status-pill--closed">idle</span>
+                {% endif %}
+            </a>
+            <div class="league-row__chips">
+                <span class="db-chip {% if league.visibility == 'public' %}db-chip--public{% endif %}">
+                    {% if league.visibility == 'public' %}
+                    <svg width="11" height="11" viewBox="0 0 20 20" fill="none" aria-hidden="true">
+                        <circle cx="10" cy="10" r="8" stroke="currentColor" stroke-width="1.6"/>
+                        <path d="M10 2c-2.5 3-2.5 13 0 16" stroke="currentColor" stroke-width="1.4" stroke-linecap="round" fill="none"/>
+                        <path d="M10 2c2.5 3 2.5 13 0 16" stroke="currentColor" stroke-width="1.4" stroke-linecap="round" fill="none"/>
+                        <path d="M2.5 10h15" stroke="currentColor" stroke-width="1.4" stroke-linecap="round"/>
+                    </svg>
+                    public
+                    {% else %}
+                    <svg width="10" height="12" viewBox="0 0 10 12" fill="none" aria-hidden="true">
+                        <rect x="1" y="5" width="8" height="6.5" rx="1.5" stroke="currentColor" stroke-width="1.5"/>
+                        <path d="M3 5V3.5A2 2 0 0 1 7 3.5V5" stroke="currentColor" stroke-width="1.5" stroke-linecap="round"/>
+                    </svg>
+                    private
+                    {% endif %}
+                </span>
+            </div>
+            <p class="league-row__desc">
+                {% if league.description %}{{ league.description }}{% else %}{{ league.slug }}{% endif %}
+            </p>
+            <div class="league-row__meta">
+                {% if item.latest_session %}
+                <span>Latest {{ session_label(item.latest_session) }}</span>
+                {% else %}
+                <span>No sessions yet</span>
+                {% endif %}
+                {% if item.leader %}
+                <span>Leader {{ item.leader.player_name }} · {{ item.leader.total_net_cents | money }}</span>
+                {% endif %}
+            </div>
+        </div>
+
+        <div class="league-row__metrics">
+            <div><span>Players</span><strong>{{ item.players_count }}</strong></div>
+            <div><span>Sessions</span><strong>{{ item.sessions_count }}</strong></div>
+            <div><span>Paid out</span><strong>{{ item.cash_paid_out_cents | money }}</strong></div>
+            <div><span>Open</span><strong class="{{ 'num-neg' if item.open_items_cents > 0 else 'num-muted' }}">{{ item.open_items_cents | money }}</strong></div>
+        </div>
+
+        <div class="league-row__leaders">
+            <div class="league-row__section-head">
+                <span class="kicker">Top 3</span>
+                <a href="{{ url_for('leagues.leaderboard', league_ref=league.url_ref) }}">Full board</a>
+            </div>
+            {% if item.top_players %}
+            <ol class="league-top-list">
+                {% for player in item.top_players %}
+                <li>
+                    <span>{{ player.player_name }}</span>
+                    <strong class="{{ 'num-pos' if player.total_net_cents > 0 else 'num-neg' if player.total_net_cents < 0 else 'num-muted' }}">
+                        {{ '+' if player.total_net_cents > 0 else '' }}{{ player.total_net_cents | money }}
+                    </strong>
+                </li>
+                {% endfor %}
+            </ol>
+            {% else %}
+            <div class="league-row__empty">
+                <span>No results yet</span>
+                <a href="{{ url_for('leagues.sessions', league_ref=league.url_ref) }}">Create a session</a>
+            </div>
+            {% endif %}
+        </div>
+
+        <div class="league-row__actions">
+            <a class="btn btn--primary btn--sm" href="{{ url_for('leagues.dashboard', league_ref=league.url_ref) }}">Open</a>
+            <a class="btn btn--ghost btn--sm" href="{{ url_for('leagues.sessions', league_ref=league.url_ref) }}">Sessions</a>
+            <a class="btn btn--ghost btn--sm" href="{{ url_for('leagues.ledger', league_ref=league.url_ref) }}">Ledger</a>
+            <a class="btn btn--ghost btn--sm" href="{{ url_for('leagues.players', league_ref=league.url_ref) }}">Players</a>
+        </div>
+    </article>
+    {% endfor %}
+</div>
+{% else %}
+<div class="panel empty-panel">
+    <h2 class="panel__title">No leagues yet</h2>
+    <p class="muted-text">Create the first league to start adding players, sessions, and ledger events.</p>
+    <a class="btn btn--primary" href="{{ url_for('leagues.new') }}">Create league</a>
+</div>
+{% endif %}
+
+{% endblock %}
diff --git a/templates/reset_password.html b/templates/reset_password.html
new file mode 100644
index 0000000..4e38060
--- /dev/null
+++ b/templates/reset_password.html
@@ -0,0 +1,25 @@
+{% extends "base.html" %}
+{% block title %}Reset Password · myboker.org{% endblock %}
+{% block content %}
+
+<div class="form-shell narrow">
+    <form class="panel form-card" method="post">
+        <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
+        <div>
+            <p class="eyebrow">Account recovery</p>
+            <h1 style="font-size:28px;margin-bottom:8px;">Reset password</h1>
+            <p class="muted-text" style="margin-bottom:8px;">Enter a new password for your account.</p>
+        </div>
+        <label>
+            <span>New password</span>
+            <input type="password" name="new_password" autocomplete="new-password" minlength="8" required>
+        </label>
+        <label>
+            <span>Confirm new password</span>
+            <input type="password" name="confirm_password" autocomplete="new-password" minlength="8" required>
+        </label>
+        <button class="btn btn--primary" type="submit">Reset password</button>
+    </form>
+</div>
+
+{% endblock %}
diff --git a/utils.py b/utils.py
index badd71f..2fa8e79 100644
--- a/utils.py
+++ b/utils.py
@@ -3,6 +3,7 @@
 from __future__ import annotations
 
 from datetime import datetime
+import re
 
 from markupsafe import Markup
 
@@ -11,6 +12,11 @@ from models import SessionEntry, SessionSummary
 BREAK_EVEN_TOLERANCE_CENTS = 100
 
 
+def slugify(value: str, fallback: str = "league") -> str:
+    slug = re.sub(r"[^a-z0-9]+", "-", value.strip().casefold()).strip("-")
+    return slug or fallback
+
+
 def cents_to_dollars(cents: int) -> Markup:
     value = cents / 100
     return Markup(f'<span class="currency-symbol">$</span>{value:,.2f}')

From ac278065d2f0d7d79a9eac7662854d6fcd57e030 Mon Sep 17 00:00:00 2001
From: SowinskiBraeden <braeden@sowinski.dev>
Date: Wed, 24 Jun 2026 19:08:33 -0700
Subject: [PATCH 41/83] security

---
 .env.example      | 1 +
 app.py            | 9 ++++++---
 routes/account.py | 6 +++++-
 3 files changed, 12 insertions(+), 4 deletions(-)

diff --git a/.env.example b/.env.example
index b73c996..5fd77fe 100644
--- a/.env.example
+++ b/.env.example
@@ -1,3 +1,4 @@
+FLASK_ENV=production
 SECRET_KEY=replace-this-with-a-long-random-string
 DATABASE_URL=postgresql+psycopg://user:password@host/dbname
 APP_BASE_URL=https://myboker.org
diff --git a/app.py b/app.py
index b0164e7..c2c707b 100644
--- a/app.py
+++ b/app.py
@@ -1,11 +1,13 @@
 #!/usr/bin/env python3
 from __future__ import annotations
 
+import os
+
 import click
 from flask import Flask
 
 from auth import current_user_id, is_logged_in
-from config import Config
+from config import Config, ProductionConfig
 from db import database_extensions_available, db, init_database
 from extensions import csrf, limiter, mail
 from routes.account import account_bp
@@ -17,7 +19,8 @@ from utils import cents_to_dollars, safe_date_label
 
 def create_app(config_overrides: dict | None = None) -> Flask:
     app = Flask(__name__)
-    app.config.from_object(Config)
+    cfg = ProductionConfig if os.getenv("FLASK_ENV") == "production" else Config
+    app.config.from_object(cfg)
     if config_overrides:
         app.config.update(config_overrides)
 
@@ -60,4 +63,4 @@ def create_app(config_overrides: dict | None = None) -> Flask:
 app = create_app()
 
 if __name__ == "__main__":
-    app.run(debug=True)
+    app.run(debug=os.getenv("FLASK_DEBUG", "0") == "1")
diff --git a/routes/account.py b/routes/account.py
index 1bd77c0..ba0f5ec 100644
--- a/routes/account.py
+++ b/routes/account.py
@@ -1,6 +1,8 @@
 #!/usr/bin/env python3
 from __future__ import annotations
 
+from urllib.parse import urlparse
+
 from flask import Blueprint, flash, redirect, render_template, request, url_for
 
 from auth import (
@@ -97,7 +99,9 @@ def login():
             flash("That account is disabled.", "error")
         else:
             log_user_in(user.id)
-            next_url = request.args.get("next") or url_for("leagues.index")
+            raw_next = request.args.get("next", "")
+            parsed = urlparse(raw_next)
+            next_url = raw_next if (raw_next and not parsed.netloc and not parsed.scheme) else url_for("leagues.index")
             flash("Logged in.", "success")
             return redirect(next_url)
 

From 6da4c3e37972ded76e3c50b07e07172164f4ebac Mon Sep 17 00:00:00 2001
From: SowinskiBraeden <braeden@sowinski.dev>
Date: Wed, 24 Jun 2026 19:53:19 -0700
Subject: [PATCH 42/83] major file restrucutre

---
 app.py                                        |  62 +---------
 boker/__init__.py                             |  60 +++++++++
 auth.py => boker/auth.py                      |   0
 charts.py => boker/charts.py                  |   4 +-
 config.py => boker/config.py                  |   4 +-
 db.py => boker/db.py                          |   2 +-
 db_models.py => boker/db_models.py            |   2 +-
 emails.py => boker/emails.py                  |   2 +-
 extensions.py => boker/extensions.py          |   0
 models.py => boker/models.py                  |   0
 {routes => boker/repositories}/__init__.py    |   0
 .../repositories/leagues.py                   |  12 +-
 .../repositories/ledger.py                    |   6 +-
 boker/routes/__init__.py                      |   1 +
 {routes => boker/routes}/account.py           |  31 ++---
 {routes => boker/routes}/admin.py             |   8 +-
 {routes => boker/routes}/leagues.py           | 117 +++++++++---------
 {routes => boker/routes}/public.py            |  16 +--
 services.py => boker/services.py              |   6 +-
 {static => boker/static}/css/style.css        |   0
 {static => boker/static}/css/tokens.css       |   0
 {static => boker/static}/favicon.svg          |   0
 storage.py => boker/storage.py                |   0
 .../templates}/_league_subnav.html            |   0
 .../templates}/account_login.html             |   0
 .../templates}/account_register.html          |   0
 .../templates}/account_settings.html          |   0
 .../templates}/admin_dashboard.html           |   0
 .../templates}/admin_login.html               |   0
 {templates => boker/templates}/base.html      |   0
 {templates => boker/templates}/docs.html      |   0
 {templates => boker/templates}/explore.html   |   0
 .../templates}/forgot_password.html           |   0
 {templates => boker/templates}/landing.html   |   0
 .../templates}/leaderboard.html               |   0
 .../templates}/league_dashboard.html          |   0
 .../templates}/league_leaderboard.html        |   0
 .../templates}/league_ledger.html             |   0
 .../templates}/league_new.html                |   0
 .../templates}/league_player_detail.html      |   0
 .../templates}/league_players.html            |   0
 .../templates}/league_session_detail.html     |   0
 .../templates}/league_session_view.html       |   0
 .../templates}/league_sessions.html           |   0
 .../templates}/league_settings.html           |   0
 .../templates}/leagues_index.html             |   0
 .../templates}/player_detail.html             |   0
 .../templates}/reset_password.html            |   0
 .../templates}/session_detail.html            |   0
 {templates => boker/templates}/sessions.html  |   0
 utils.py => boker/utils.py                    |   2 +-
 tests/test_accounting.py                      |  28 +++--
 tests/test_stats.py                           |   5 +-
 53 files changed, 188 insertions(+), 180 deletions(-)
 create mode 100644 boker/__init__.py
 rename auth.py => boker/auth.py (100%)
 rename charts.py => boker/charts.py (97%)
 rename config.py => boker/config.py (96%)
 rename db.py => boker/db.py (90%)
 rename db_models.py => boker/db_models.py (99%)
 rename emails.py => boker/emails.py (97%)
 rename extensions.py => boker/extensions.py (100%)
 rename models.py => boker/models.py (100%)
 rename {routes => boker/repositories}/__init__.py (100%)
 rename league_repositories.py => boker/repositories/leagues.py (97%)
 rename ledger_repositories.py => boker/repositories/ledger.py (98%)
 create mode 100644 boker/routes/__init__.py
 rename {routes => boker/routes}/account.py (93%)
 rename {routes => boker/routes}/admin.py (99%)
 rename {routes => boker/routes}/leagues.py (92%)
 rename {routes => boker/routes}/public.py (93%)
 rename services.py => boker/services.py (98%)
 rename {static => boker/static}/css/style.css (100%)
 rename {static => boker/static}/css/tokens.css (100%)
 rename {static => boker/static}/favicon.svg (100%)
 rename storage.py => boker/storage.py (100%)
 rename {templates => boker/templates}/_league_subnav.html (100%)
 rename {templates => boker/templates}/account_login.html (100%)
 rename {templates => boker/templates}/account_register.html (100%)
 rename {templates => boker/templates}/account_settings.html (100%)
 rename {templates => boker/templates}/admin_dashboard.html (100%)
 rename {templates => boker/templates}/admin_login.html (100%)
 rename {templates => boker/templates}/base.html (100%)
 rename {templates => boker/templates}/docs.html (100%)
 rename {templates => boker/templates}/explore.html (100%)
 rename {templates => boker/templates}/forgot_password.html (100%)
 rename {templates => boker/templates}/landing.html (100%)
 rename {templates => boker/templates}/leaderboard.html (100%)
 rename {templates => boker/templates}/league_dashboard.html (100%)
 rename {templates => boker/templates}/league_leaderboard.html (100%)
 rename {templates => boker/templates}/league_ledger.html (100%)
 rename {templates => boker/templates}/league_new.html (100%)
 rename {templates => boker/templates}/league_player_detail.html (100%)
 rename {templates => boker/templates}/league_players.html (100%)
 rename {templates => boker/templates}/league_session_detail.html (100%)
 rename {templates => boker/templates}/league_session_view.html (100%)
 rename {templates => boker/templates}/league_sessions.html (100%)
 rename {templates => boker/templates}/league_settings.html (100%)
 rename {templates => boker/templates}/leagues_index.html (100%)
 rename {templates => boker/templates}/player_detail.html (100%)
 rename {templates => boker/templates}/reset_password.html (100%)
 rename {templates => boker/templates}/session_detail.html (100%)
 rename {templates => boker/templates}/sessions.html (100%)
 rename utils.py => boker/utils.py (98%)

diff --git a/app.py b/app.py
index c2c707b..d71a532 100644
--- a/app.py
+++ b/app.py
@@ -1,66 +1,8 @@
 #!/usr/bin/env python3
-from __future__ import annotations
-
-import os
-
-import click
-from flask import Flask
-
-from auth import current_user_id, is_logged_in
-from config import Config, ProductionConfig
-from db import database_extensions_available, db, init_database
-from extensions import csrf, limiter, mail
-from routes.account import account_bp
-from routes.leagues import leagues_bp
-from routes.public import public_bp
-from storage import ensure_data_file
-from utils import cents_to_dollars, safe_date_label
-
-
-def create_app(config_overrides: dict | None = None) -> Flask:
-    app = Flask(__name__)
-    cfg = ProductionConfig if os.getenv("FLASK_ENV") == "production" else Config
-    app.config.from_object(cfg)
-    if config_overrides:
-        app.config.update(config_overrides)
-
-    ensure_data_file(app.config["DATA_PATH"])
-    init_database(app)
-    csrf.init_app(app)
-    limiter.init_app(app)
-    mail.init_app(app)
-
-    app.jinja_env.filters["money"] = cents_to_dollars
-    app.jinja_env.filters["pretty_date"] = safe_date_label
-
-    @app.context_processor
-    def inject_globals() -> dict:
-        return {
-            "app_version": app.config["APP_VERSION"],
-            "current_user_id": current_user_id(),
-            "is_logged_in": is_logged_in(),
-        }
-
-    app.register_blueprint(public_bp)
-    app.register_blueprint(account_bp)
-    app.register_blueprint(leagues_bp)
-
-    @app.cli.command("init-db")
-    def init_db_command() -> None:
-        if not database_extensions_available() or db is None:
-            raise click.ClickException(
-                "Database dependencies are not installed. Run pip install -r requirements.txt."
-            )
-
-        with app.app_context():
-            db.create_all()
-
-        click.echo("Initialized database tables.")
-
-    return app
-
+from boker import create_app
 
 app = create_app()
 
 if __name__ == "__main__":
+    import os
     app.run(debug=os.getenv("FLASK_DEBUG", "0") == "1")
diff --git a/boker/__init__.py b/boker/__init__.py
new file mode 100644
index 0000000..a1cc031
--- /dev/null
+++ b/boker/__init__.py
@@ -0,0 +1,60 @@
+#!/usr/bin/env python3
+from __future__ import annotations
+
+import os
+
+import click
+from flask import Flask
+
+from .auth import current_user_id, is_logged_in
+from .config import Config, ProductionConfig
+from .db import database_extensions_available, db, init_database
+from .extensions import csrf, limiter, mail
+from .routes.account import account_bp
+from .routes.leagues import leagues_bp
+from .routes.public import public_bp
+from .storage import ensure_data_file
+from .utils import cents_to_dollars, safe_date_label
+
+
+def create_app(config_overrides: dict | None = None) -> Flask:
+    app = Flask(__name__)
+    cfg = ProductionConfig if os.getenv("FLASK_ENV") == "production" else Config
+    app.config.from_object(cfg)
+    if config_overrides:
+        app.config.update(config_overrides)
+
+    ensure_data_file(app.config["DATA_PATH"])
+    init_database(app)
+    csrf.init_app(app)
+    limiter.init_app(app)
+    mail.init_app(app)
+
+    app.jinja_env.filters["money"] = cents_to_dollars
+    app.jinja_env.filters["pretty_date"] = safe_date_label
+
+    @app.context_processor
+    def inject_globals() -> dict:
+        return {
+            "app_version": app.config["APP_VERSION"],
+            "current_user_id": current_user_id(),
+            "is_logged_in": is_logged_in(),
+        }
+
+    app.register_blueprint(public_bp)
+    app.register_blueprint(account_bp)
+    app.register_blueprint(leagues_bp)
+
+    @app.cli.command("init-db")
+    def init_db_command() -> None:
+        if not database_extensions_available() or db is None:
+            raise click.ClickException(
+                "Database dependencies are not installed. Run pip install -r requirements.txt."
+            )
+
+        with app.app_context():
+            db.create_all()
+
+        click.echo("Initialized database tables.")
+
+    return app
diff --git a/auth.py b/boker/auth.py
similarity index 100%
rename from auth.py
rename to boker/auth.py
diff --git a/charts.py b/boker/charts.py
similarity index 97%
rename from charts.py
rename to boker/charts.py
index 0a8d074..de70f3b 100644
--- a/charts.py
+++ b/boker/charts.py
@@ -4,8 +4,8 @@ from __future__ import annotations
 
 from typing import Any
 
-from models import SessionEntry, SessionSummary
-from utils import net_result_bucket, session_chart_label, session_sort_key
+from .models import SessionEntry, SessionSummary
+from .utils import net_result_bucket, session_chart_label, session_sort_key
 
 PLAYER_PALETTE = [
     "#9b8cf0",  # --line-1 violet
diff --git a/config.py b/boker/config.py
similarity index 96%
rename from config.py
rename to boker/config.py
index c5a83af..0730954 100644
--- a/config.py
+++ b/boker/config.py
@@ -4,12 +4,12 @@ from __future__ import annotations
 import os
 from pathlib import Path
 
-BASE_DIR = Path(__file__).resolve().parent
+BASE_DIR = Path(__file__).resolve().parent.parent
 DATA_PATH = BASE_DIR / "data" / "entries.csv"
 DEFAULT_DATABASE_URL = f"sqlite:///{BASE_DIR / 'data' / 'boker-dev.sqlite3'}"
 
 ELIGIBLE_MIN_SESSIONS = 3
-APP_VERSION = "2.3.0"
+APP_VERSION = "2.3.1"
 
 
 def load_local_env(env_path: Path) -> None:
diff --git a/db.py b/boker/db.py
similarity index 90%
rename from db.py
rename to boker/db.py
index 050416c..430a768 100644
--- a/db.py
+++ b/boker/db.py
@@ -24,7 +24,7 @@ def init_database(app: Any) -> bool:
         app.config["DATABASE_EXTENSIONS_AVAILABLE"] = False
         return False
 
-    import db_models  # noqa: F401 - registers SQLAlchemy models with metadata.
+    from . import db_models  # noqa: F401 - registers SQLAlchemy models with metadata.
 
     db.init_app(app)
     migrate.init_app(app, db)
diff --git a/db_models.py b/boker/db_models.py
similarity index 99%
rename from db_models.py
rename to boker/db_models.py
index 23b2915..229ebe9 100644
--- a/db_models.py
+++ b/boker/db_models.py
@@ -4,7 +4,7 @@ from __future__ import annotations
 import uuid
 from datetime import date, datetime, timezone
 
-from db import db
+from .db import db
 
 if db is None:  # pragma: no cover - imported only when DB dependencies exist.
     raise RuntimeError("Database dependencies are not installed.")
diff --git a/emails.py b/boker/emails.py
similarity index 97%
rename from emails.py
rename to boker/emails.py
index 9f15ce6..7b02ddf 100644
--- a/emails.py
+++ b/boker/emails.py
@@ -4,7 +4,7 @@ from __future__ import annotations
 from flask import current_app
 from flask_mail import Message
 
-from extensions import mail
+from .extensions import mail
 
 
 def send_password_reset(to_email: str, reset_url: str) -> None:
diff --git a/extensions.py b/boker/extensions.py
similarity index 100%
rename from extensions.py
rename to boker/extensions.py
diff --git a/models.py b/boker/models.py
similarity index 100%
rename from models.py
rename to boker/models.py
diff --git a/routes/__init__.py b/boker/repositories/__init__.py
similarity index 100%
rename from routes/__init__.py
rename to boker/repositories/__init__.py
diff --git a/league_repositories.py b/boker/repositories/leagues.py
similarity index 97%
rename from league_repositories.py
rename to boker/repositories/leagues.py
index 3d4417a..b23dbc3 100644
--- a/league_repositories.py
+++ b/boker/repositories/leagues.py
@@ -5,13 +5,13 @@ import secrets
 import string
 from datetime import date
 
-from auth import hash_password, normalize_email
-from db import db
+from ..auth import hash_password, normalize_email
+from ..db import db
 
 if db is None:  # pragma: no cover - imported only when DB dependencies exist.
     raise RuntimeError("Database dependencies are not installed.")
 
-from db_models import (  # noqa: E402
+from ..db_models import (  # noqa: E402
     LedgerEvent,
     League,
     LeagueMembership,
@@ -24,7 +24,7 @@ from db_models import (  # noqa: E402
     make_user,
     normalize_lookup,
 )
-from utils import slugify
+from ..utils import slugify
 
 PUBLIC_KEY_ALPHABET = string.ascii_lowercase + string.digits
 
@@ -223,7 +223,7 @@ def set_session_status(session: PokerSession, status: str) -> PokerSession:
     if status not in {"open", "closed"}:
         raise ValueError(f"Unsupported session status: {status}")
 
-    from db_models import utc_now
+    from ..db_models import utc_now
 
     session.status = status
     if status == "open":
@@ -313,7 +313,7 @@ def add_league_member(
 
 
 def remove_league_member(league_id: str, user_id: str) -> None:
-    from db_models import utc_now
+    from ..db_models import utc_now
 
     membership = LeagueMembership.query.filter_by(
         league_id=league_id,
diff --git a/ledger_repositories.py b/boker/repositories/ledger.py
similarity index 98%
rename from ledger_repositories.py
rename to boker/repositories/ledger.py
index 93cb1e2..748caaa 100644
--- a/ledger_repositories.py
+++ b/boker/repositories/ledger.py
@@ -1,12 +1,12 @@
 #!/usr/bin/env python3
 from __future__ import annotations
 
-from db import db
+from ..db import db
 
 if db is None:  # pragma: no cover - imported only when DB dependencies exist.
     raise RuntimeError("Database dependencies are not installed.")
 
-from db_models import (  # noqa: E402
+from ..db_models import (  # noqa: E402
     CANONICAL_EVENT_TYPES,
     LedgerEvent,
     Player,
@@ -14,7 +14,7 @@ from db_models import (  # noqa: E402
     User,
     canonical_event_type,
 )
-from storage import EventRow  # noqa: E402
+from ..storage import EventRow  # noqa: E402
 
 
 def session_event_ref(session: PokerSession) -> str:
diff --git a/boker/routes/__init__.py b/boker/routes/__init__.py
new file mode 100644
index 0000000..8b13789
--- /dev/null
+++ b/boker/routes/__init__.py
@@ -0,0 +1 @@
+
diff --git a/routes/account.py b/boker/routes/account.py
similarity index 93%
rename from routes/account.py
rename to boker/routes/account.py
index ba0f5ec..4eee3b3 100644
--- a/routes/account.py
+++ b/boker/routes/account.py
@@ -5,7 +5,7 @@ from urllib.parse import urlparse
 
 from flask import Blueprint, flash, redirect, render_template, request, url_for
 
-from auth import (
+from ..auth import (
     current_user_id,
     generate_invite_token,
     generate_reset_token,
@@ -18,8 +18,8 @@ from auth import (
     verify_password,
     verify_reset_token,
 )
-from db import database_extensions_available, db
-from extensions import limiter
+from ..db import database_extensions_available, db
+from ..extensions import limiter
 
 account_bp = Blueprint("account", __name__, url_prefix="/account")
 
@@ -49,7 +49,7 @@ def register():
     }
 
     if request.method == "POST":
-        from league_repositories import create_user, find_user_by_email
+        from ..repositories.leagues import create_user, find_user_by_email
 
         email = normalize_email(form["email"])
         password = request.form.get("password", "")
@@ -88,7 +88,7 @@ def login():
     }
 
     if request.method == "POST":
-        from league_repositories import find_user_by_email
+        from ..repositories.leagues import find_user_by_email
 
         user = find_user_by_email(form["email"])
         password = request.form.get("password", "")
@@ -122,7 +122,7 @@ def settings():
         flash("Account database is not available.", "error")
         return redirect(url_for("leagues.index"))
 
-    from db_models import User
+    from ..db_models import User
 
     user = db.session.get(User, current_user_id())
     if user is None:
@@ -139,7 +139,7 @@ def update_email():
         flash("Account database is not available.", "error")
         return redirect(url_for("account.settings"))
 
-    from db_models import User
+    from ..db_models import User
 
     user = db.session.get(User, current_user_id())
     if user is None:
@@ -154,7 +154,7 @@ def update_email():
     elif not verify_password(user.password_hash, current_password):
         flash("Current password is incorrect.", "error")
     else:
-        from league_repositories import find_user_by_email
+        from ..repositories.leagues import find_user_by_email
 
         existing = find_user_by_email(new_email)
         if existing and existing.id != user.id:
@@ -174,7 +174,7 @@ def update_password():
         flash("Account database is not available.", "error")
         return redirect(url_for("account.settings"))
 
-    from db_models import User
+    from ..db_models import User
 
     user = db.session.get(User, current_user_id())
     if user is None:
@@ -206,7 +206,7 @@ def delete_account():
         flash("Account database is not available.", "error")
         return redirect(url_for("account.settings"))
 
-    from db_models import League, User, utc_now
+    from ..db_models import League, User, utc_now
 
     user = db.session.get(User, current_user_id())
     if user is None:
@@ -246,9 +246,10 @@ def forgot_password():
             flash("Account database is not available.", "error")
             return redirect(url_for("account.forgot_password"))
 
-        from emails import send_password_reset
         from flask import current_app
-        from league_repositories import find_user_by_email
+
+        from ..emails import send_password_reset
+        from ..repositories.leagues import find_user_by_email
 
         email = normalize_email(request.form.get("email", ""))
         user = find_user_by_email(email)
@@ -282,7 +283,7 @@ def reset_password(token):
         flash("Account database is not available.", "error")
         return redirect(url_for("account.login"))
 
-    from db_models import User
+    from ..db_models import User
 
     user = db.session.get(User, user_id)
     if user is None or user.disabled_at is not None:
@@ -320,8 +321,8 @@ def accept_invite(token):
         flash("Account database is not available.", "error")
         return redirect(url_for("leagues.index"))
 
-    from db_models import User
-    from league_repositories import add_league_member, find_league_by_id, find_membership
+    from ..db_models import User
+    from ..repositories.leagues import add_league_member, find_league_by_id, find_membership
 
     user = db.session.get(User, current_user_id())
     if user is None or user.email != data.get("email"):
diff --git a/routes/admin.py b/boker/routes/admin.py
similarity index 99%
rename from routes/admin.py
rename to boker/routes/admin.py
index f959d89..625e236 100644
--- a/routes/admin.py
+++ b/boker/routes/admin.py
@@ -16,16 +16,16 @@ from flask import (
     url_for,
 )
 
-from auth import is_admin
-from services import (
+from ..auth import is_admin
+from ..services import (
     build_session_summaries,
     next_session_id,
     pending_payout_carry_items,
     prunable_empty_session_ids,
     unique_player_names,
 )
-from storage import CSV_HEADERS, append_event, load_events, write_events
-from utils import cents_to_dollars, session_label
+from ..storage import CSV_HEADERS, append_event, load_events, write_events
+from ..utils import cents_to_dollars, session_label
 
 admin_bp = Blueprint("admin", __name__)
 
diff --git a/routes/leagues.py b/boker/routes/leagues.py
similarity index 92%
rename from routes/leagues.py
rename to boker/routes/leagues.py
index 44bcb13..4d46c83 100644
--- a/routes/leagues.py
+++ b/boker/routes/leagues.py
@@ -9,12 +9,12 @@ from datetime import datetime, timezone
 
 from flask import Blueprint, abort, flash, make_response, redirect, render_template, request, url_for
 
-from auth import current_user_id, login_required, normalize_email
-from charts import cumulative_profit_series, player_session_series
-from db import database_extensions_available, db
-from models import SessionSummary
-from services import apply_rank_changes, build_leaderboard, build_session_summaries, session_events
-from utils import cents_to_dollars, session_label, session_sort_key
+from ..auth import current_user_id, login_required, normalize_email
+from ..charts import cumulative_profit_series, player_session_series
+from ..db import database_extensions_available, db
+from ..models import SessionSummary
+from ..services import apply_rank_changes, build_leaderboard, build_session_summaries, session_events
+from ..utils import cents_to_dollars, session_label, session_sort_key
 
 leagues_bp = Blueprint("leagues", __name__)
 
@@ -48,7 +48,7 @@ def split_league_ref(league_ref: str) -> tuple[str, str]:
 
 
 def require_league(league_ref: str, allowed_roles: set[str]):
-    from league_repositories import find_league_by_public_key, user_has_league_role
+    from ..repositories.leagues import find_league_by_public_key, user_has_league_role
 
     _slug, public_key = split_league_ref(league_ref)
     league = find_league_by_public_key(public_key)
@@ -64,7 +64,7 @@ def require_league(league_ref: str, allowed_roles: set[str]):
 
 def get_league_with_visibility_gate(league_ref: str):
     """Load league; if private, enforce login + membership. Returns (league, None) or (None, redirect)."""
-    from league_repositories import find_league_by_public_key, user_has_league_role
+    from ..repositories.leagues import find_league_by_public_key, user_has_league_role
 
     _slug, public_key = split_league_ref(league_ref)
     league = find_league_by_public_key(public_key)
@@ -99,8 +99,8 @@ def empty_session_summary(session) -> SessionSummary:
 
 
 def session_ref_map(league_id: str) -> dict[str, str]:
-    from ledger_repositories import session_event_ref
-    from league_repositories import list_sessions_for_league
+    from ..repositories.ledger import session_event_ref
+    from ..repositories.leagues import list_sessions_for_league
 
     return {session_event_ref(session): session.id for session in list_sessions_for_league(league_id)}
 
@@ -112,8 +112,8 @@ def index():
         flash("League database is not available.", "error")
         return render_template("leagues_index.html", leagues=[])
 
-    from league_repositories import list_leagues_for_user
-    from ledger_repositories import list_event_rows_for_league
+    from ..repositories.leagues import list_leagues_for_user
+    from ..repositories.ledger import list_event_rows_for_league
 
     memberships = list_leagues_for_user(current_user_id() or "")
     league_summaries = []
@@ -190,8 +190,8 @@ def new():
     }
 
     if request.method == "POST":
-        from db_models import User
-        from league_repositories import create_league, unique_league_slug
+        from ..db_models import User
+        from ..repositories.leagues import create_league, unique_league_slug
 
         owner = db.session.get(User, current_user_id())
         if owner is None:
@@ -221,7 +221,7 @@ def dashboard(league_ref: str):
         flash("League database is not available.", "error")
         return redirect(url_for("public.home"))
 
-    from league_repositories import league_counts, user_has_league_role
+    from ..repositories.leagues import league_counts, user_has_league_role
 
     league, resp = get_league_with_visibility_gate(league_ref)
     if resp:
@@ -242,7 +242,7 @@ def legacy_dashboard_redirect(league_id: str, league_slug: str):
         flash("League database is not available.", "error")
         return redirect(url_for("public.home"))
 
-    from league_repositories import find_league_by_id, user_has_league_role
+    from ..repositories.leagues import find_league_by_id, user_has_league_role
 
     league = find_league_by_id(league_id)
     if league is None:
@@ -259,9 +259,9 @@ def leaderboard(league_ref: str):
         flash("League database is not available.", "error")
         return redirect(url_for("public.home"))
 
-    from config import ELIGIBLE_MIN_SESSIONS
-    from ledger_repositories import list_event_rows_for_league
-    from league_repositories import list_players_for_league, user_has_league_role
+    from ..config import ELIGIBLE_MIN_SESSIONS
+    from ..repositories.ledger import list_event_rows_for_league
+    from ..repositories.leagues import list_players_for_league, user_has_league_role
 
     league, resp = get_league_with_visibility_gate(league_ref)
     if resp:
@@ -366,12 +366,12 @@ def ledger(league_ref: str):
         flash("League database is not available.", "error")
         return redirect(url_for("public.home"))
 
-    from ledger_repositories import (
+    from ..repositories.ledger import (
         append_ledger_event,
         list_all_event_rows_for_league,
         list_event_rows_for_league,
     )
-    from league_repositories import (
+    from ..repositories.leagues import (
         find_player_for_league,
         find_session_for_league,
         list_players_for_league,
@@ -506,7 +506,7 @@ def void_event(league_ref: str, event_id: str):
         flash("League database is not available.", "error")
         return redirect(url_for("public.home"))
 
-    from ledger_repositories import void_ledger_event
+    from ..repositories.ledger import void_ledger_event
 
     league = require_league(league_ref, {"owner"})
     reason = request.form.get("void_reason", "").strip()
@@ -529,8 +529,8 @@ def player_detail(league_ref: str, player_id: str):
         flash("League database is not available.", "error")
         return redirect(url_for("public.home"))
 
-    from ledger_repositories import list_event_rows_for_league
-    from league_repositories import find_player_for_league, user_has_league_role
+    from ..repositories.ledger import list_event_rows_for_league
+    from ..repositories.leagues import find_player_for_league, user_has_league_role
 
     league, resp = get_league_with_visibility_gate(league_ref)
     if resp:
@@ -588,7 +588,7 @@ def players(league_ref: str):
         flash("League database is not available.", "error")
         return redirect(url_for("public.home"))
 
-    from league_repositories import (
+    from ..repositories.leagues import (
         create_player,
         list_players_for_league,
         player_name_exists,
@@ -627,7 +627,7 @@ def players(league_ref: str):
             flash("Player added.", "success")
             return redirect(url_for("leagues.players", **league_url_values(league)))
 
-    from ledger_repositories import list_event_rows_for_league
+    from ..repositories.ledger import list_event_rows_for_league
 
     all_sessions = build_session_summaries(list_event_rows_for_league(league.id))
     board = build_leaderboard(all_sessions)
@@ -661,7 +661,7 @@ def update_player_status(league_ref: str, player_id: str, status: str, message:
         flash("League database is not available.", "error")
         return redirect(url_for("public.home"))
 
-    from league_repositories import find_player_for_league, set_player_status
+    from ..repositories.leagues import find_player_for_league, set_player_status
 
     league = require_league(league_ref, {"owner", "manager"})
     player = find_player_for_league(league.id, player_id)
@@ -681,7 +681,7 @@ def edit_player(league_ref: str, player_id: str):
         flash("League database is not available.", "error")
         return redirect(url_for("public.home"))
 
-    from league_repositories import find_player_for_league, player_name_taken, update_player
+    from ..repositories.leagues import find_player_for_league, player_name_taken, update_player
 
     league = require_league(league_ref, {"owner", "manager"})
     player = find_player_for_league(league.id, player_id)
@@ -709,8 +709,8 @@ def sessions(league_ref: str):
         flash("League database is not available.", "error")
         return redirect(url_for("public.home"))
 
-    from ledger_repositories import append_ledger_event
-    from league_repositories import (
+    from ..repositories.ledger import append_ledger_event
+    from ..repositories.leagues import (
         create_poker_session,
         list_sessions_for_league,
         user_has_league_role,
@@ -747,7 +747,7 @@ def sessions(league_ref: str):
             session.label = form["label"] or None
             session.notes = form["notes"] or None
             if status == "open":
-                from league_repositories import set_session_status
+                from ..repositories.leagues import set_session_status
 
                 set_session_status(session, "open")
 
@@ -765,8 +765,8 @@ def sessions(league_ref: str):
             flash(f"Created {session.display_label}.", "success")
             return redirect(url_for("leagues.sessions", **league_url_values(league)))
 
-    from db_models import LedgerEvent
-    from ledger_repositories import list_event_rows_for_league
+    from ..db_models import LedgerEvent
+    from ..repositories.ledger import list_event_rows_for_league
 
     all_sessions = list_sessions_for_league(league.id)
     summaries = build_session_summaries(list_event_rows_for_league(league.id))
@@ -803,8 +803,8 @@ def prune_empty_sessions(league_ref: str):
         flash("League database is not available.", "error")
         return redirect(url_for("public.home"))
 
-    from db_models import LedgerEvent, PokerSession
-    from league_repositories import list_sessions_for_league
+    from ..db_models import LedgerEvent, PokerSession
+    from ..repositories.leagues import list_sessions_for_league
 
     league = require_league(league_ref, {"owner", "manager"})
 
@@ -839,7 +839,7 @@ def delete_session(league_ref: str, session_id: str):
         flash("League database is not available.", "error")
         return redirect(url_for("public.home"))
 
-    from league_repositories import find_session_for_league
+    from ..repositories.leagues import find_session_for_league
 
     league = require_league(league_ref, {"owner"})
     session = find_session_for_league(league.id, session_id)
@@ -859,7 +859,7 @@ def edit_session(league_ref: str, session_id: str):
         flash("League database is not available.", "error")
         return redirect(url_for("public.home"))
 
-    from league_repositories import find_session_for_league
+    from ..repositories.leagues import find_session_for_league
 
     league = require_league(league_ref, {"owner", "manager"})
     session = find_session_for_league(league.id, session_id)
@@ -877,7 +877,7 @@ def edit_session(league_ref: str, session_id: str):
         return redirect(url_for("leagues.session_detail", league_ref=league.url_ref, session_id=session_id))
 
     if new_date != session.session_date:
-        from db_models import PokerSession as _PS
+        from ..db_models import PokerSession as _PS
         max_seq = db.session.query(db.func.max(_PS.sequence_on_date)).filter(
             _PS.league_id == league.id,
             _PS.session_date == new_date,
@@ -900,8 +900,8 @@ def session_detail(league_ref: str, session_id: str):
         flash("League database is not available.", "error")
         return redirect(url_for("public.home"))
 
-    from ledger_repositories import append_ledger_event, list_all_event_rows_for_session, list_event_rows_for_session
-    from league_repositories import (
+    from ..repositories.ledger import append_ledger_event, list_all_event_rows_for_session, list_event_rows_for_session
+    from ..repositories.leagues import (
         find_session_for_league,
         list_players_for_league,
         user_has_league_role,
@@ -989,9 +989,9 @@ def session_public_view(league_ref: str, session_id: str):
         flash("League database is not available.", "error")
         return redirect(url_for("public.home"))
 
-    from charts import session_breakdown_series
-    from ledger_repositories import list_event_rows_for_league, list_event_rows_for_session
-    from league_repositories import find_league_by_public_key, find_session_for_league, list_sessions_for_league, user_has_league_role
+    from ..charts import session_breakdown_series
+    from ..repositories.ledger import list_event_rows_for_league, list_event_rows_for_session
+    from ..repositories.leagues import find_league_by_public_key, find_session_for_league, list_sessions_for_league, user_has_league_role
 
     _slug, public_key = split_league_ref(league_ref)
     league = find_league_by_public_key(public_key)
@@ -1062,8 +1062,8 @@ def update_session_status(league_ref: str, session_id: str, status: str, message
         flash("League database is not available.", "error")
         return redirect(url_for("public.home"))
 
-    from ledger_repositories import append_ledger_event
-    from league_repositories import find_session_for_league, set_session_status
+    from ..repositories.ledger import append_ledger_event
+    from ..repositories.leagues import find_session_for_league, set_session_status
 
     league = require_league(league_ref, {"owner", "manager"})
     session = find_session_for_league(league.id, session_id)
@@ -1114,7 +1114,7 @@ def league_settings(league_ref: str):
         elif form["visibility"] not in ("private", "public"):
             flash("Invalid visibility value.", "error")
         else:
-            from utils import slugify
+            from ..utils import slugify
 
             league.name = form["name"]
             league.slug = slugify(form["name"])
@@ -1124,7 +1124,7 @@ def league_settings(league_ref: str):
             flash("League settings saved.", "success")
             return redirect(url_for("leagues.league_settings", league_ref=league.url_ref))
 
-    from league_repositories import list_members_for_league
+    from ..repositories.leagues import list_members_for_league
 
     members = list_members_for_league(league.id)
     return render_template("league_settings.html", league=league, form=form, is_owner=True, members=members)
@@ -1137,10 +1137,11 @@ def invite_member(league_ref: str):
         flash("League database is not available.", "error")
         return redirect(url_for("public.home"))
 
-    from auth import generate_invite_token
-    from emails import send_league_invite
     from flask import current_app
-    from league_repositories import find_membership, find_user_by_email
+
+    from ..auth import generate_invite_token
+    from ..emails import send_league_invite
+    from ..repositories.leagues import find_membership, find_user_by_email
 
     league = require_league(league_ref, {"owner"})
     email = normalize_email(request.form.get("email", ""))
@@ -1181,7 +1182,7 @@ def remove_member(league_ref: str, user_id: str):
         flash("League database is not available.", "error")
         return redirect(url_for("public.home"))
 
-    from league_repositories import remove_league_member
+    from ..repositories.leagues import remove_league_member
 
     league = require_league(league_ref, {"owner"})
 
@@ -1202,7 +1203,7 @@ def archive_league(league_ref: str):
         flash("League database is not available.", "error")
         return redirect(url_for("public.home"))
 
-    from db_models import utc_now
+    from ..db_models import utc_now
 
     league = require_league(league_ref, {"owner"})
     confirm_name = request.form.get("confirm_name", "").strip()
@@ -1224,8 +1225,8 @@ def export_ledger_csv(league_ref: str):
         flash("League database is not available.", "error")
         return redirect(url_for("public.home"))
 
-    from ledger_repositories import list_event_rows_for_league
-    from storage import CSV_HEADERS
+    from ..repositories.ledger import list_event_rows_for_league
+    from ..storage import CSV_HEADERS
 
     league = require_league(league_ref, {"owner", "manager", "viewer"})
     rows = list_event_rows_for_league(league.id)
@@ -1250,14 +1251,14 @@ def import_ledger_csv(league_ref: str):
         flash("League database is not available.", "error")
         return redirect(url_for("public.home"))
 
-    from db_models import CANONICAL_EVENT_TYPES, canonical_event_type
-    from ledger_repositories import (
+    from ..db_models import CANONICAL_EVENT_TYPES, canonical_event_type
+    from ..repositories.ledger import (
         append_ledger_event,
         list_ledger_events_for_league,
         session_event_ref,
     )
-    from league_repositories import list_players_for_league, list_sessions_for_league
-    from storage import CSV_HEADERS
+    from ..repositories.leagues import list_players_for_league, list_sessions_for_league
+    from ..storage import CSV_HEADERS
 
     league = require_league(league_ref, {"owner", "manager"})
 
diff --git a/routes/public.py b/boker/routes/public.py
similarity index 93%
rename from routes/public.py
rename to boker/routes/public.py
index c2371be..f88828f 100644
--- a/routes/public.py
+++ b/boker/routes/public.py
@@ -4,16 +4,16 @@ from __future__ import annotations
 from flask import Blueprint, flash, redirect, render_template, request, url_for
 from flask import current_app
 
-from charts import cumulative_profit_series, player_session_series, session_breakdown_series
-from config import ELIGIBLE_MIN_SESSIONS
-from services import (
+from ..charts import cumulative_profit_series, player_session_series, session_breakdown_series
+from ..config import ELIGIBLE_MIN_SESSIONS
+from ..services import (
     apply_rank_changes,
     build_leaderboard,
     build_session_summaries,
     session_events,
 )
-from storage import load_events
-from utils import session_label, session_sort_key
+from ..storage import load_events
+from ..utils import session_label, session_sort_key
 
 public_bp = Blueprint("public", __name__)
 
@@ -30,9 +30,9 @@ def help():
 
 @public_bp.get("/explore")
 def explore():
-    from auth import is_logged_in
-    from db import database_extensions_available
-    from league_repositories import league_counts, list_public_leagues
+    from ..auth import is_logged_in
+    from ..db import database_extensions_available
+    from ..repositories.leagues import league_counts, list_public_leagues
 
     q = request.args.get("q", "").strip()
     leagues = list_public_leagues(q) if database_extensions_available() else []
diff --git a/services.py b/boker/services.py
similarity index 98%
rename from services.py
rename to boker/services.py
index c364759..6d6123a 100644
--- a/services.py
+++ b/boker/services.py
@@ -4,9 +4,9 @@ from __future__ import annotations
 
 from collections import defaultdict
 
-from models import PlayerStats, SessionEntry, SessionSummary
-from storage import EventRow
-from utils import entry_sort_key, net_result_bucket, session_sort_key
+from .models import PlayerStats, SessionEntry, SessionSummary
+from .storage import EventRow
+from .utils import entry_sort_key, net_result_bucket, session_sort_key
 
 SESSION_MARKER_TYPES = {"session_open", "session_close"}
 
diff --git a/static/css/style.css b/boker/static/css/style.css
similarity index 100%
rename from static/css/style.css
rename to boker/static/css/style.css
diff --git a/static/css/tokens.css b/boker/static/css/tokens.css
similarity index 100%
rename from static/css/tokens.css
rename to boker/static/css/tokens.css
diff --git a/static/favicon.svg b/boker/static/favicon.svg
similarity index 100%
rename from static/favicon.svg
rename to boker/static/favicon.svg
diff --git a/storage.py b/boker/storage.py
similarity index 100%
rename from storage.py
rename to boker/storage.py
diff --git a/templates/_league_subnav.html b/boker/templates/_league_subnav.html
similarity index 100%
rename from templates/_league_subnav.html
rename to boker/templates/_league_subnav.html
diff --git a/templates/account_login.html b/boker/templates/account_login.html
similarity index 100%
rename from templates/account_login.html
rename to boker/templates/account_login.html
diff --git a/templates/account_register.html b/boker/templates/account_register.html
similarity index 100%
rename from templates/account_register.html
rename to boker/templates/account_register.html
diff --git a/templates/account_settings.html b/boker/templates/account_settings.html
similarity index 100%
rename from templates/account_settings.html
rename to boker/templates/account_settings.html
diff --git a/templates/admin_dashboard.html b/boker/templates/admin_dashboard.html
similarity index 100%
rename from templates/admin_dashboard.html
rename to boker/templates/admin_dashboard.html
diff --git a/templates/admin_login.html b/boker/templates/admin_login.html
similarity index 100%
rename from templates/admin_login.html
rename to boker/templates/admin_login.html
diff --git a/templates/base.html b/boker/templates/base.html
similarity index 100%
rename from templates/base.html
rename to boker/templates/base.html
diff --git a/templates/docs.html b/boker/templates/docs.html
similarity index 100%
rename from templates/docs.html
rename to boker/templates/docs.html
diff --git a/templates/explore.html b/boker/templates/explore.html
similarity index 100%
rename from templates/explore.html
rename to boker/templates/explore.html
diff --git a/templates/forgot_password.html b/boker/templates/forgot_password.html
similarity index 100%
rename from templates/forgot_password.html
rename to boker/templates/forgot_password.html
diff --git a/templates/landing.html b/boker/templates/landing.html
similarity index 100%
rename from templates/landing.html
rename to boker/templates/landing.html
diff --git a/templates/leaderboard.html b/boker/templates/leaderboard.html
similarity index 100%
rename from templates/leaderboard.html
rename to boker/templates/leaderboard.html
diff --git a/templates/league_dashboard.html b/boker/templates/league_dashboard.html
similarity index 100%
rename from templates/league_dashboard.html
rename to boker/templates/league_dashboard.html
diff --git a/templates/league_leaderboard.html b/boker/templates/league_leaderboard.html
similarity index 100%
rename from templates/league_leaderboard.html
rename to boker/templates/league_leaderboard.html
diff --git a/templates/league_ledger.html b/boker/templates/league_ledger.html
similarity index 100%
rename from templates/league_ledger.html
rename to boker/templates/league_ledger.html
diff --git a/templates/league_new.html b/boker/templates/league_new.html
similarity index 100%
rename from templates/league_new.html
rename to boker/templates/league_new.html
diff --git a/templates/league_player_detail.html b/boker/templates/league_player_detail.html
similarity index 100%
rename from templates/league_player_detail.html
rename to boker/templates/league_player_detail.html
diff --git a/templates/league_players.html b/boker/templates/league_players.html
similarity index 100%
rename from templates/league_players.html
rename to boker/templates/league_players.html
diff --git a/templates/league_session_detail.html b/boker/templates/league_session_detail.html
similarity index 100%
rename from templates/league_session_detail.html
rename to boker/templates/league_session_detail.html
diff --git a/templates/league_session_view.html b/boker/templates/league_session_view.html
similarity index 100%
rename from templates/league_session_view.html
rename to boker/templates/league_session_view.html
diff --git a/templates/league_sessions.html b/boker/templates/league_sessions.html
similarity index 100%
rename from templates/league_sessions.html
rename to boker/templates/league_sessions.html
diff --git a/templates/league_settings.html b/boker/templates/league_settings.html
similarity index 100%
rename from templates/league_settings.html
rename to boker/templates/league_settings.html
diff --git a/templates/leagues_index.html b/boker/templates/leagues_index.html
similarity index 100%
rename from templates/leagues_index.html
rename to boker/templates/leagues_index.html
diff --git a/templates/player_detail.html b/boker/templates/player_detail.html
similarity index 100%
rename from templates/player_detail.html
rename to boker/templates/player_detail.html
diff --git a/templates/reset_password.html b/boker/templates/reset_password.html
similarity index 100%
rename from templates/reset_password.html
rename to boker/templates/reset_password.html
diff --git a/templates/session_detail.html b/boker/templates/session_detail.html
similarity index 100%
rename from templates/session_detail.html
rename to boker/templates/session_detail.html
diff --git a/templates/sessions.html b/boker/templates/sessions.html
similarity index 100%
rename from templates/sessions.html
rename to boker/templates/sessions.html
diff --git a/utils.py b/boker/utils.py
similarity index 98%
rename from utils.py
rename to boker/utils.py
index 2fa8e79..95d83dd 100644
--- a/utils.py
+++ b/boker/utils.py
@@ -7,7 +7,7 @@ import re
 
 from markupsafe import Markup
 
-from models import SessionEntry, SessionSummary
+from .models import SessionEntry, SessionSummary
 
 BREAK_EVEN_TOLERANCE_CENTS = 100
 
diff --git a/tests/test_accounting.py b/tests/test_accounting.py
index f4e2c8c..799e3e8 100644
--- a/tests/test_accounting.py
+++ b/tests/test_accounting.py
@@ -2,15 +2,17 @@ from pathlib import Path
 import tempfile
 import unittest
 
-import app as app_module
-from charts import player_session_series
-from services import (
+from boker import create_app
+from boker.charts import player_session_series
+from boker.services import (
     build_leaderboard,
     build_session_summaries,
     pending_payout_carry_items,
 )
-from storage import load_events, write_events
-from utils import session_sort_key
+from boker.storage import load_events, write_events
+from boker.utils import session_sort_key
+
+_app = create_app()
 
 
 def cents(amount: float) -> int:
@@ -203,8 +205,8 @@ class AccountingTests(unittest.TestCase):
         with tempfile.TemporaryDirectory() as tmpdir:
             data_path = Path(tmpdir) / "entries.csv"
             write_events(data_path, rows)
-            original_path = app_module.app.config["DATA_PATH"]
-            app_module.app.config["DATA_PATH"] = data_path
+            original_path = _app.config["DATA_PATH"]
+            _app.config["DATA_PATH"] = data_path
 
             try:
                 sessions = build_session_summaries(load_events(data_path))
@@ -213,7 +215,7 @@ class AccountingTests(unittest.TestCase):
                     [{"player_name": "A", "amount_cents": cents(5)}],
                 )
 
-                with app_module.app.test_client() as client:
+                with _app.test_client() as client:
                     with client.session_transaction() as flask_session:
                         flask_session["is_admin"] = True
 
@@ -222,7 +224,7 @@ class AccountingTests(unittest.TestCase):
                         data={"session_id": "s2", "player_name": "A"},
                     )
             finally:
-                app_module.app.config["DATA_PATH"] = original_path
+                _app.config["DATA_PATH"] = original_path
 
             self.assertEqual(response.status_code, 302)
             updated_sessions = build_session_summaries(load_events(data_path))
@@ -261,17 +263,17 @@ class AccountingTests(unittest.TestCase):
         with tempfile.TemporaryDirectory() as tmpdir:
             data_path = Path(tmpdir) / "entries.csv"
             write_events(data_path, rows)
-            original_path = app_module.app.config["DATA_PATH"]
-            app_module.app.config["DATA_PATH"] = data_path
+            original_path = _app.config["DATA_PATH"]
+            _app.config["DATA_PATH"] = data_path
 
             try:
-                with app_module.app.test_client() as client:
+                with _app.test_client() as client:
                     with client.session_transaction() as flask_session:
                         flask_session["is_admin"] = True
 
                     response = client.post("/admin/prune-empty-sessions")
             finally:
-                app_module.app.config["DATA_PATH"] = original_path
+                _app.config["DATA_PATH"] = original_path
 
             self.assertEqual(response.status_code, 302)
             remaining = load_events(data_path)
diff --git a/tests/test_stats.py b/tests/test_stats.py
index 36ceaf3..5f3b1cd 100644
--- a/tests/test_stats.py
+++ b/tests/test_stats.py
@@ -1,6 +1,7 @@
 import unittest
 
-from stats import SessionEntry, SessionSummary, build_leaderboard
+from boker.models import SessionEntry, SessionSummary
+from boker.services import build_leaderboard
 
 
 class CashInAccountingTest(unittest.TestCase):
@@ -78,7 +79,7 @@ class CashInAccountingTest(unittest.TestCase):
 
         self.assertEqual(player.total_buy_in_cents, 2500)
         self.assertEqual(player.total_front_collected_cents, 0)
-        self.assertEqual(player.total_cash_in_cents, 3000)
+        self.assertEqual(player.total_real_cash_in_cents, 2500)
 
 
 if __name__ == "__main__":

From f07803478974b214d968eecaef4c0bfa5c807d10 Mon Sep 17 00:00:00 2001
From: SowinskiBraeden <braeden@sowinski.dev>
Date: Wed, 24 Jun 2026 19:59:12 -0700
Subject: [PATCH 43/83] update readme

---
 README.md | 270 ++++++++++++++++++++++++++++++++----------------------
 1 file changed, 163 insertions(+), 107 deletions(-)

diff --git a/README.md b/README.md
index 08b2b71..862152d 100644
--- a/README.md
+++ b/README.md
@@ -1,132 +1,188 @@
-# Poker Portal
+# Boker
 
-A small Flask app I put together for tracking our low-stakes hold'em nights without having to keep a spreadsheet open all the time.
+A Flask web app for tracking low-stakes poker nights. Multiple leagues, per-player stats, session history, leaderboards, and a full double-entry ledger — without keeping a spreadsheet open.
 
-The idea is pretty simple: public pages for stats and session history, plus a small admin area for recording buy-ins, gross cashout results, actual paid-out cash, and notes. The data sits in a CSV audit log, so everything is append-only and easy to follow later.
+## Features
 
-## What it does
-
-- all-time leaderboard
-- per-session pages
-- per-player stat pages
-- admin login for recording events
-- open / closed session tracking
-- actual cash payout tracking with `paid_out` events
-- debt repayments and write-offs with `debt_repayment` / `writeoff` events
-- session and player charts
-- CSV import / export from the admin page
-- append-only `entries.csv` ledger instead of overwriting old rows
+- User accounts with registration and login
+- Create and manage multiple leagues
+- Invite league members by email with role-based access (owner / manager / viewer)
+- Public or private league visibility
+- Per-session event ledger (buy-ins, cashouts, fronts, rollovers, payouts)
+- All-time leaderboard with rank tracking and eligibility thresholds
+- Per-player stat pages with session history and charts
+- Open / closed session tracking
+- Debt tracking: fronts, repayments, and write-offs
+- CSV export of any league ledger
+- CSV import for migrating historical data
+- Rate limiting and CSRF protection
 
 ## Stack
 
-Built with a pretty lightweight setup:
-
-- Python
-- Flask
-- Jinja templates
+- Python 3 / Flask
+- SQLAlchemy + Flask-Migrate (SQLite for local dev, PostgreSQL in production)
+- Jinja2 templates
 - Chart.js
-- plain CSS
-- CSV event log for storage
+- Plain CSS
+
+## Setup
+
+### 1. Clone and create a virtual environment
+
+```bash
+git clone https://github.com/SowinskiBraeden/boker
+cd boker
+python -m venv .venv
+source .venv/bin/activate
+```
+
+### 2. Install dependencies
+
+```bash
+pip install -r requirements.txt
+```
+
+### 3. Configure environment
+
+```bash
+cp .env.example .env
+```
+
+Open `.env` and set at minimum:
+
+```env
+SECRET_KEY=replace-this-with-a-long-random-string
+```
+
+The other values can be left as defaults for local development. See the [Environment variables](#environment-variables) section for the full list.
+
+### 4. Initialize the database
+
+```bash
+flask --app app db upgrade
+```
+
+This creates `data/boker-dev.sqlite3` and applies all migrations. Run this again whenever you pull new migrations.
+
+### 5. Run the development server
+
+```bash
+flask --app app run
+```
+
+Then open `http://127.0.0.1:5000` and register an account.
+
+## Environment variables
+
+All variables are read from `.env` at startup. Copy `.env.example` as a starting point.
+
+| Variable | Required | Default | Description |
+|---|---|---|---|
+| `SECRET_KEY` | Yes | `change-this-before-deploying` | Flask session signing key. Use a long random string in production. |
+| `DATABASE_URL` | No | `sqlite:///data/boker-dev.sqlite3` | SQLAlchemy connection URL. For production use a `postgresql+psycopg://` URL. |
+| `FLASK_ENV` | No | _(unset)_ | Set to `production` to enable secure cookie flags. |
+| `APP_BASE_URL` | No | `http://localhost:5000` | Base URL used when generating links in email (invite, password reset). |
+| `MAIL_SERVER` | No | _(empty)_ | SMTP server hostname. Email features are disabled if left blank. |
+| `MAIL_PORT` | No | `587` | SMTP port. |
+| `MAIL_USE_TLS` | No | `true` | Set to `false` to disable STARTTLS. |
+| `MAIL_USERNAME` | No | _(empty)_ | SMTP username / API key. |
+| `MAIL_PASSWORD` | No | _(empty)_ | SMTP password / API key secret. |
+| `MAIL_DEFAULT_SENDER` | No | `noreply@myboker.org` | From address on outgoing mail. |
+| `FLASK_DEBUG` | No | `0` | Set to `1` to enable the Flask reloader and debugger. |
+
+## Running tests
+
+```bash
+python -m pytest tests/
+```
+
+Or with the standard library runner:
+
+```bash
+python -m unittest discover tests/
+```
+
+## Production deployment
+
+### Database
+
+Set `DATABASE_URL` to a PostgreSQL connection string:
+
+```env
+DATABASE_URL=postgresql+psycopg://user:password@host/dbname
+```
+
+`psycopg` (v3) is already in `requirements.txt`.
+
+After deploying, run migrations:
+
+```bash
+flask --app app db upgrade
+```
+
+### Environment
+
+Set `FLASK_ENV=production` to enable:
+- `Secure` flag on the session cookie
+- `SameSite=Strict` cookie policy
+- HTTPS preferred URL scheme
+
+Generate a strong secret key:
+
+```bash
+python -c "import secrets; print(secrets.token_hex(32))"
+```
+
+### WSGI
+
+Run with a production WSGI server (gunicorn, uWSGI, etc.) rather than the Flask dev server:
+
+```bash
+gunicorn "app:app"
+```
 
 ## Ledger model
 
-The app treats `data/entries.csv` as the source of truth.
+Each event in the ledger is an append-only row. Nothing is edited or deleted — corrections are new rows. This keeps the full history readable.
 
-Each row is an event, not a final snapshot. Instead of editing an old row, I append another one. That keeps rebuys, corrections, payouts, and session state changes visible in the log instead of hiding them behind edits.
+### Event types
 
-Current event types:
+| Event | Description |
+|---|---|
+| `buyin` | Player buys chips. Counts as poker investment and real cash in. |
+| `front` | House fronts chips to a player. Counts as poker investment; cash is owed back. |
+| `cashout` | Gross chip result at end of session. Not cash movement — sets the payout claim. |
+| `paid_out` | Cash physically paid out to a player. Settles the payout claim. |
+| `rollover_out` | Player carries winnings into the next session instead of being paid. Settles source session without cash movement. |
+| `rollover_in` | Carried funds enter play in the destination session. Counts as investment without new cash in. |
+| `payout_carry_in` | Prior-session credit applied to a later payout. Increases the payout due without counting as investment. |
+| `debt_repayment` | Player repays a front outside of poker. Counts as real cash in; reduces the receivable. |
+| `writeoff` | Front is forgiven. Resolves the receivable without cash. |
+| `note` | Free-text bookkeeping note. No financial effect. |
+| `session_open` | Marks a session as live. |
+| `session_close` | Marks a session as closed. |
 
-- `buyin`
-- `front`
-- `debt_repayment`
-- `writeoff`
-- `cashout`
-- `paid_out`
-- `rollover_in`
-- `payout_carry_in`
-- `rollover_out`
-- `note`
-- `session_open`
-- `session_close`
+Legacy ledgers may contain `paid`, `front_collected`, or `front_writeoff` — the app reads these as aliases for `paid_out`, `debt_repayment`, and `writeoff`.
 
-A few examples:
+### Accounting summary
 
-- another `buyin` for a rebuy
-- another `cashout` if chip counts are corrected later
-- a `paid_out` event when someone is actually settled up
-- a `debt_repayment` event when a front is repaid outside poker
-- a `writeoff` event when a front will not be collected
-- a `note` event for bookkeeping context
-- `session_open` / `session_close` to mark whether a game night is still live
-
-Accounting in the app keeps poker results separate from banker cashflow:
-
-- poker investment is `buyin + front + rollover_in`
-- poker net is `cashout - poker investment`
-- real cash in is `buyin + debt_repayment`
-- real cash out is `paid_out`
-- `rollover_out` settles the source session without counting as cash out
-- `rollover_in` enters play in the destination session without counting as cash in
-- `payout_carry_in` records prior-session value carried into a later payout; it increases the destination payout due without counting as poker investment or cash in
-- `writeoff` resolves a receivable without counting as cash in
-
-Older ledgers may still contain `paid`, `front_collected`, or `front_writeoff`.
-The app reads those historical names as aliases for `paid_out`,
-`debt_repayment`, and `writeoff`.
-
-It is still just a small side project, but I wanted the event model to stay clean enough that the numbers are easy to trust and the history is easy to read back through.
+- **Poker investment** = `buyin + front + rollover_in`
+- **Poker net** = `cashout − investment`
+- **Real cash in** = `buyin + debt_repayment`
+- **Real cash out** = `paid_out`
+- **Rollover-out** settles a session without cash leaving the book
+- **Writeoff** resolves a receivable without cash coming in
 
 ## CSV format
 
-Main file:
-
-`data/entries.csv`
+Each league's ledger can be exported and re-imported as CSV.
 
 Header:
 
-```csv
+```
 id,created_at,session_id,session_date,player_name,event_type,amount_cents,note,actor
 ```
 
-Amounts are stored in cents to avoid floating-point issues.
+Amounts are stored in cents (integer) to avoid floating-point rounding.
 
-## Running it locally
-
-```bash
-python -m venv .venv
-source .venv/bin/activate
-pip install -r requirements.txt
-cp .env.example .env
-python app.py
-```
-
-Then open:
-
-`http://127.0.0.1:8000`
-
-## Environment values
-
-The app reads these from `.env`:
-
-- `SECRET_KEY`
-- `ADMIN_USERNAME`
-- `ADMIN_PASSWORD`
-
-Example:
-
-```env
-SECRET_KEY=change-this
-ADMIN_USERNAME=admin
-ADMIN_PASSWORD=change-me
-```
-
-## Notes
-
-A few choices here were deliberate:
-
-- no database for now
-- no user accounts, just one admin login
-- public-facing stats pages, admin-only controls
-- CSV backup before importing a replacement ledger
-
-If I ever decide to take it further, the first real upgrade would probably be moving the storage layer to SQLite while keeping the rest of the app roughly the same.
+Import validates headers, event types, session references, and player names before writing anything. Rows with a matching `id` are skipped so re-importing a previous export is safe.

From 5c7a498af65fc13fd44fd9985a575b65573c9879 Mon Sep 17 00:00:00 2001
From: SowinskiBraeden <braeden@sowinski.dev>
Date: Wed, 24 Jun 2026 23:15:13 -0700
Subject: [PATCH 44/83] admin improvements

---
 boker/__init__.py                        |   2 +
 boker/auth.py                            |  25 +
 boker/config.py                          |   2 +-
 boker/db_models.py                       |   1 +
 boker/repositories/leagues.py            |  20 +
 boker/routes/leagues.py                  |  34 +-
 boker/routes/site_admin.py               | 614 +++++++++++++++++++++++
 boker/static/css/admin.css               | 562 +++++++++++++++++++++
 boker/static/css/style.css               |   7 +
 boker/static/css/tokens.css              |   6 +
 boker/templates/admin/base.html          |  95 ++++
 boker/templates/admin/dashboard.html     | 269 ++++++++++
 boker/templates/admin/league_detail.html | 209 ++++++++
 boker/templates/admin/leagues.html       |  90 ++++
 boker/templates/admin/user_detail.html   | 168 +++++++
 boker/templates/admin/users.html         |  68 +++
 boker/templates/league_settings.html     |  61 ++-
 migrations/versions/0003_site_admin.py   |  32 ++
 18 files changed, 2261 insertions(+), 4 deletions(-)
 create mode 100644 boker/routes/site_admin.py
 create mode 100644 boker/static/css/admin.css
 create mode 100644 boker/templates/admin/base.html
 create mode 100644 boker/templates/admin/dashboard.html
 create mode 100644 boker/templates/admin/league_detail.html
 create mode 100644 boker/templates/admin/leagues.html
 create mode 100644 boker/templates/admin/user_detail.html
 create mode 100644 boker/templates/admin/users.html
 create mode 100644 migrations/versions/0003_site_admin.py

diff --git a/boker/__init__.py b/boker/__init__.py
index a1cc031..b68942d 100644
--- a/boker/__init__.py
+++ b/boker/__init__.py
@@ -13,6 +13,7 @@ from .extensions import csrf, limiter, mail
 from .routes.account import account_bp
 from .routes.leagues import leagues_bp
 from .routes.public import public_bp
+from .routes.site_admin import site_admin_bp
 from .storage import ensure_data_file
 from .utils import cents_to_dollars, safe_date_label
 
@@ -44,6 +45,7 @@ def create_app(config_overrides: dict | None = None) -> Flask:
     app.register_blueprint(public_bp)
     app.register_blueprint(account_bp)
     app.register_blueprint(leagues_bp)
+    app.register_blueprint(site_admin_bp)
 
     @app.cli.command("init-db")
     def init_db_command() -> None:
diff --git a/boker/auth.py b/boker/auth.py
index c33f1f1..14c9794 100644
--- a/boker/auth.py
+++ b/boker/auth.py
@@ -77,3 +77,28 @@ def login_required(view):
         return view(*args, **kwargs)
 
     return wrapped_view
+
+
+def current_user_is_site_admin() -> bool:
+    user_id = current_user_id()
+    if not user_id:
+        return False
+    from .db import db
+    from .db_models import User
+    if db is None:
+        return False
+    user = db.session.get(User, user_id)
+    return bool(user and user.is_site_admin and user.disabled_at is None)
+
+
+def site_admin_required(view):
+    @wraps(view)
+    def wrapped_view(*args, **kwargs):
+        if not is_logged_in():
+            return redirect(url_for("account.login", next=request.full_path))
+        if not current_user_is_site_admin():
+            from flask import abort
+            abort(403)
+        return view(*args, **kwargs)
+
+    return wrapped_view
diff --git a/boker/config.py b/boker/config.py
index 0730954..a5f5c85 100644
--- a/boker/config.py
+++ b/boker/config.py
@@ -9,7 +9,7 @@ DATA_PATH = BASE_DIR / "data" / "entries.csv"
 DEFAULT_DATABASE_URL = f"sqlite:///{BASE_DIR / 'data' / 'boker-dev.sqlite3'}"
 
 ELIGIBLE_MIN_SESSIONS = 3
-APP_VERSION = "2.3.1"
+APP_VERSION = "2.4.3"
 
 
 def load_local_env(env_path: Path) -> None:
diff --git a/boker/db_models.py b/boker/db_models.py
index 229ebe9..98e4fc6 100644
--- a/boker/db_models.py
+++ b/boker/db_models.py
@@ -75,6 +75,7 @@ class User(TimestampMixin, db.Model):
     email_verified_at = db.Column(db.DateTime(timezone=True), nullable=True)
     last_login_at = db.Column(db.DateTime(timezone=True), nullable=True)
     disabled_at = db.Column(db.DateTime(timezone=True), nullable=True)
+    is_site_admin = db.Column(db.Boolean, nullable=False, default=False)
 
 
 class League(TimestampMixin, db.Model):
diff --git a/boker/repositories/leagues.py b/boker/repositories/leagues.py
index b23dbc3..176c9c4 100644
--- a/boker/repositories/leagues.py
+++ b/boker/repositories/leagues.py
@@ -322,3 +322,23 @@ def remove_league_member(league_id: str, user_id: str) -> None:
     ).one_or_none()
     if membership and membership.role != "owner":
         membership.disabled_at = utc_now()
+
+
+def transfer_league_ownership(league_id: str, new_owner_user_id: str) -> None:
+    current_owner = LeagueMembership.query.filter_by(
+        league_id=league_id,
+        role="owner",
+        disabled_at=None,
+    ).one_or_none()
+    new_owner_membership = LeagueMembership.query.filter_by(
+        league_id=league_id,
+        user_id=new_owner_user_id,
+        disabled_at=None,
+    ).one_or_none()
+    if current_owner is None or new_owner_membership is None:
+        raise ValueError("Invalid transfer: owner or target not found.")
+    league = db.session.get(League, league_id)
+    if league:
+        league.created_by_user_id = new_owner_user_id
+    current_owner.role = "manager"
+    new_owner_membership.role = "owner"
diff --git a/boker/routes/leagues.py b/boker/routes/leagues.py
index 4d46c83..d868fb8 100644
--- a/boker/routes/leagues.py
+++ b/boker/routes/leagues.py
@@ -1127,7 +1127,8 @@ def league_settings(league_ref: str):
     from ..repositories.leagues import list_members_for_league
 
     members = list_members_for_league(league.id)
-    return render_template("league_settings.html", league=league, form=form, is_owner=True, members=members)
+    has_managers = any(m.role == "manager" for m, u in members)
+    return render_template("league_settings.html", league=league, form=form, is_owner=True, members=members, has_managers=has_managers)
 
 
 @leagues_bp.post("/l/<league_ref>/settings/invite")
@@ -1196,6 +1197,37 @@ def remove_member(league_ref: str, user_id: str):
     return redirect(url_for("leagues.league_settings", league_ref=league.url_ref))
 
 
+@leagues_bp.post("/l/<league_ref>/settings/transfer")
+@login_required
+def transfer_ownership(league_ref: str):
+    if not db_ready():
+        flash("League database is not available.", "error")
+        return redirect(url_for("public.home"))
+
+    from ..repositories.leagues import find_membership, transfer_league_ownership
+
+    league = require_league(league_ref, {"owner"})
+    new_owner_id = request.form.get("new_owner_user_id", "").strip()
+
+    if not new_owner_id:
+        flash("Select a manager to transfer ownership to.", "error")
+        return redirect(url_for("leagues.league_settings", league_ref=league.url_ref))
+
+    membership = find_membership(league.id, new_owner_id)
+    if membership is None or membership.role != "manager":
+        flash("Target user must be a manager of this league.", "error")
+        return redirect(url_for("leagues.league_settings", league_ref=league.url_ref))
+
+    try:
+        transfer_league_ownership(league.id, new_owner_id)
+        db.session.commit()
+        flash("Ownership transferred. You are now a manager of this league.", "success")
+    except ValueError as exc:
+        flash(str(exc), "error")
+
+    return redirect(url_for("leagues.dashboard", **league_url_values(league)))
+
+
 @leagues_bp.post("/l/<league_ref>/archive")
 @login_required
 def archive_league(league_ref: str):
diff --git a/boker/routes/site_admin.py b/boker/routes/site_admin.py
new file mode 100644
index 0000000..1e9f4e7
--- /dev/null
+++ b/boker/routes/site_admin.py
@@ -0,0 +1,614 @@
+#!/usr/bin/env python3
+from __future__ import annotations
+
+import json
+from datetime import datetime, timedelta, timezone
+
+from flask import Blueprint, flash, redirect, render_template, request, url_for
+
+from ..auth import (
+    current_user_id,
+    generate_reset_token,
+    hash_password,
+    normalize_email,
+    site_admin_required,
+)
+from ..db import db
+
+site_admin_bp = Blueprint("site_admin", __name__, url_prefix="/admin")
+
+
+def utc_now() -> datetime:
+    return datetime.now(timezone.utc)
+
+
+@site_admin_bp.get("/")
+def index():
+    return redirect(url_for("site_admin.dashboard"))
+
+
+@site_admin_bp.get("/dashboard")
+@site_admin_required
+def dashboard():
+    from ..db_models import League, LedgerEvent, LeagueMembership, PokerSession, User
+
+    now = utc_now()
+    day_ago = now - timedelta(days=1)
+    week_ago = now - timedelta(days=7)
+    month_ago = now - timedelta(days=30)
+
+    total_users = db.session.query(db.func.count(User.id)).scalar() or 0
+    active_users = db.session.query(db.func.count(User.id)).filter(User.disabled_at.is_(None)).scalar() or 0
+    disabled_users = total_users - active_users
+    new_users_7d = db.session.query(db.func.count(User.id)).filter(User.created_at >= week_ago).scalar() or 0
+    new_users_30d = db.session.query(db.func.count(User.id)).filter(User.created_at >= month_ago).scalar() or 0
+    admin_count = db.session.query(db.func.count(User.id)).filter(User.is_site_admin.is_(True)).scalar() or 0
+
+    dau = db.session.query(db.func.count(User.id)).filter(User.last_login_at >= day_ago).scalar() or 0
+    wau = db.session.query(db.func.count(User.id)).filter(User.last_login_at >= week_ago).scalar() or 0
+    mau = db.session.query(db.func.count(User.id)).filter(User.last_login_at >= month_ago).scalar() or 0
+
+    total_leagues = db.session.query(db.func.count(League.id)).scalar() or 0
+    active_leagues = db.session.query(db.func.count(League.id)).filter(League.archived_at.is_(None)).scalar() or 0
+    public_leagues = db.session.query(db.func.count(League.id)).filter(
+        League.visibility == "public", League.archived_at.is_(None)
+    ).scalar() or 0
+    new_leagues_30d = db.session.query(db.func.count(League.id)).filter(League.created_at >= month_ago).scalar() or 0
+
+    total_sessions = db.session.query(db.func.count(PokerSession.id)).scalar() or 0
+    open_sessions = db.session.query(db.func.count(PokerSession.id)).filter(PokerSession.status == "open").scalar() or 0
+
+    total_events = db.session.query(db.func.count(LedgerEvent.id)).filter(LedgerEvent.voided_at.is_(None)).scalar() or 0
+
+    league_session_rows = db.session.query(
+        PokerSession.league_id, db.func.count(PokerSession.id)
+    ).group_by(PokerSession.league_id).all()
+    avg_sessions_per_league = round(
+        sum(r[1] for r in league_session_rows) / len(league_session_rows), 1
+    ) if league_session_rows else 0
+
+    league_buyin_rows = db.session.query(
+        LedgerEvent.league_id, db.func.sum(LedgerEvent.amount_cents)
+    ).filter(
+        LedgerEvent.event_type == "buyin",
+        LedgerEvent.voided_at.is_(None),
+    ).group_by(LedgerEvent.league_id).all()
+    avg_buyin_cents = int(
+        sum(r[1] for r in league_buyin_rows) / len(league_buyin_rows)
+    ) if league_buyin_rows else 0
+
+    today = now.date()
+    chart_days = [today - timedelta(days=i) for i in range(29, -1, -1)]
+    chart_labels = [d.strftime("%b %d") for d in chart_days]
+    chart_iso = [d.isoformat() for d in chart_days]
+
+    signup_raw = db.session.query(
+        db.func.date(User.created_at),
+        db.func.count(User.id),
+    ).filter(User.created_at >= month_ago).group_by(db.func.date(User.created_at)).all()
+    signup_by_day = {
+        (r[0].isoformat() if hasattr(r[0], "isoformat") else r[0]): r[1]
+        for r in signup_raw
+    }
+    chart_signups = [signup_by_day.get(d, 0) for d in chart_iso]
+
+    login_raw = db.session.query(
+        db.func.date(User.last_login_at),
+        db.func.count(User.id),
+    ).filter(User.last_login_at >= month_ago).group_by(db.func.date(User.last_login_at)).all()
+    login_by_day = {
+        (r[0].isoformat() if hasattr(r[0], "isoformat") else r[0]): r[1]
+        for r in login_raw
+    }
+    chart_logins = [login_by_day.get(d, 0) for d in chart_iso]
+
+    session_raw = db.session.query(
+        PokerSession.session_date,
+        db.func.count(PokerSession.id),
+    ).filter(PokerSession.session_date >= chart_days[0]).group_by(PokerSession.session_date).all()
+    session_by_day = {
+        (r[0].isoformat() if hasattr(r[0], "isoformat") else r[0]): r[1]
+        for r in session_raw
+    }
+    chart_sessions = [session_by_day.get(d, 0) for d in chart_iso]
+
+    chart_data = json.dumps({
+        "labels": chart_labels,
+        "signups": chart_signups,
+        "logins": chart_logins,
+        "sessions": chart_sessions,
+    })
+
+    recent_users = (
+        db.session.query(User)
+        .order_by(User.created_at.desc())
+        .limit(10)
+        .all()
+    )
+    recent_leagues = (
+        db.session.query(League)
+        .order_by(League.created_at.desc())
+        .limit(10)
+        .all()
+    )
+    league_owner_ids = {league.created_by_user_id for league in recent_leagues}
+    owners_by_id = {
+        u.id: u
+        for u in db.session.query(User).filter(User.id.in_(league_owner_ids)).all()
+    } if league_owner_ids else {}
+
+    stats = {
+        "total_users": total_users,
+        "active_users": active_users,
+        "disabled_users": disabled_users,
+        "new_users_7d": new_users_7d,
+        "new_users_30d": new_users_30d,
+        "admin_count": admin_count,
+        "dau": dau,
+        "wau": wau,
+        "mau": mau,
+        "total_leagues": total_leagues,
+        "active_leagues": active_leagues,
+        "public_leagues": public_leagues,
+        "new_leagues_30d": new_leagues_30d,
+        "total_sessions": total_sessions,
+        "open_sessions": open_sessions,
+        "total_events": total_events,
+        "avg_sessions_per_league": avg_sessions_per_league,
+        "avg_buyin_cents": avg_buyin_cents,
+    }
+
+    return render_template(
+        "admin/dashboard.html",
+        stats=stats,
+        recent_users=recent_users,
+        recent_leagues=recent_leagues,
+        owners_by_id=owners_by_id,
+        chart_data=chart_data,
+    )
+
+
+@site_admin_bp.get("/users")
+@site_admin_required
+def users():
+    from ..db_models import League, LeagueMembership, User
+
+    search = request.args.get("q", "").strip()
+    page = max(1, int(request.args.get("page", 1)))
+    per_page = 50
+
+    query = db.session.query(User)
+    if search:
+        query = query.filter(User.email.ilike(f"%{search}%"))
+    query = query.order_by(User.created_at.desc())
+
+    total = query.count()
+    user_list = query.offset((page - 1) * per_page).limit(per_page).all()
+
+    user_ids = [u.id for u in user_list]
+    league_counts = {}
+    if user_ids:
+        rows = (
+            db.session.query(
+                LeagueMembership.user_id,
+                db.func.count(LeagueMembership.id),
+            )
+            .filter(LeagueMembership.user_id.in_(user_ids))
+            .group_by(LeagueMembership.user_id)
+            .all()
+        )
+        league_counts = {row[0]: row[1] for row in rows}
+
+    total_pages = max(1, (total + per_page - 1) // per_page)
+
+    return render_template(
+        "admin/users.html",
+        users=user_list,
+        league_counts=league_counts,
+        search=search,
+        page=page,
+        total=total,
+        total_pages=total_pages,
+    )
+
+
+@site_admin_bp.get("/users/<user_id>")
+@site_admin_required
+def user_detail(user_id: str):
+    from flask import current_app
+
+    from ..db_models import League, LeagueMembership, User
+
+    user = db.session.get(User, user_id)
+    if user is None:
+        flash("User not found.", "error")
+        return redirect(url_for("site_admin.users"))
+
+    memberships = (
+        db.session.query(LeagueMembership, League)
+        .join(League, League.id == LeagueMembership.league_id)
+        .filter(LeagueMembership.user_id == user_id)
+        .order_by(LeagueMembership.created_at.desc())
+        .all()
+    )
+
+    reset_url = None
+    if request.args.get("show_reset") == "1":
+        token = generate_reset_token(user.id)
+        base_url = current_app.config.get("APP_BASE_URL", "").rstrip("/")
+        reset_url = f"{base_url}{url_for('account.reset_password', token=token)}"
+
+    return render_template(
+        "admin/user_detail.html",
+        user=user,
+        memberships=memberships,
+        reset_url=reset_url,
+        viewing_self=user_id == current_user_id(),
+    )
+
+
+@site_admin_bp.post("/users/<user_id>/send-reset")
+@site_admin_required
+def send_reset(user_id: str):
+    from flask import current_app
+
+    from ..db_models import User
+    from ..emails import send_password_reset
+
+    user = db.session.get(User, user_id)
+    if user is None:
+        flash("User not found.", "error")
+        return redirect(url_for("site_admin.users"))
+
+    if user.disabled_at is not None:
+        flash("Cannot send a reset link to a disabled account.", "error")
+        return redirect(url_for("site_admin.user_detail", user_id=user_id))
+
+    token = generate_reset_token(user.id)
+    base_url = current_app.config.get("APP_BASE_URL", "").rstrip("/")
+    reset_url = f"{base_url}{url_for('account.reset_password', token=token)}"
+
+    email_sent = False
+    try:
+        send_password_reset(user.email, reset_url)
+        email_sent = True
+    except Exception:
+        pass
+
+    if email_sent:
+        flash(f"Password reset email sent to {user.email}.", "success")
+    else:
+        flash("Email not sent (mail not configured). Copy the link below.", "error")
+
+    return redirect(url_for("site_admin.user_detail", user_id=user_id, show_reset="1"))
+
+
+@site_admin_bp.post("/users/<user_id>/disable")
+@site_admin_required
+def disable_user(user_id: str):
+    from ..db_models import User
+
+    if user_id == current_user_id():
+        flash("You cannot disable your own account.", "error")
+        return redirect(url_for("site_admin.user_detail", user_id=user_id))
+
+    user = db.session.get(User, user_id)
+    if user is None:
+        flash("User not found.", "error")
+        return redirect(url_for("site_admin.users"))
+
+    if user.disabled_at is None:
+        user.disabled_at = utc_now()
+        db.session.commit()
+        flash(f"{user.email} has been disabled.", "success")
+    else:
+        flash("Account is already disabled.", "error")
+
+    return redirect(url_for("site_admin.user_detail", user_id=user_id))
+
+
+@site_admin_bp.post("/users/<user_id>/enable")
+@site_admin_required
+def enable_user(user_id: str):
+    from ..db_models import User
+
+    user = db.session.get(User, user_id)
+    if user is None:
+        flash("User not found.", "error")
+        return redirect(url_for("site_admin.users"))
+
+    if user.disabled_at is not None:
+        user.disabled_at = None
+        db.session.commit()
+        flash(f"{user.email} has been re-enabled.", "success")
+    else:
+        flash("Account is not disabled.", "error")
+
+    return redirect(url_for("site_admin.user_detail", user_id=user_id))
+
+
+@site_admin_bp.post("/users/<user_id>/grant-admin")
+@site_admin_required
+def grant_admin(user_id: str):
+    from ..db_models import User
+
+    user = db.session.get(User, user_id)
+    if user is None:
+        flash("User not found.", "error")
+        return redirect(url_for("site_admin.users"))
+
+    user.is_site_admin = True
+    db.session.commit()
+    flash(f"{user.email} is now a site admin.", "success")
+    return redirect(url_for("site_admin.user_detail", user_id=user_id))
+
+
+@site_admin_bp.post("/users/<user_id>/revoke-admin")
+@site_admin_required
+def revoke_admin(user_id: str):
+    from ..db_models import User
+
+    if user_id == current_user_id():
+        flash("You cannot revoke your own admin access.", "error")
+        return redirect(url_for("site_admin.user_detail", user_id=user_id))
+
+    user = db.session.get(User, user_id)
+    if user is None:
+        flash("User not found.", "error")
+        return redirect(url_for("site_admin.users"))
+
+    user.is_site_admin = False
+    db.session.commit()
+    flash(f"Admin access removed from {user.email}.", "success")
+    return redirect(url_for("site_admin.user_detail", user_id=user_id))
+
+
+@site_admin_bp.post("/users/<user_id>/reset-password")
+@site_admin_required
+def admin_reset_password(user_id: str):
+    from ..db_models import User
+
+    user = db.session.get(User, user_id)
+    if user is None:
+        flash("User not found.", "error")
+        return redirect(url_for("site_admin.users"))
+
+    new_password = request.form.get("new_password", "")
+    if len(new_password) < 8:
+        flash("Password must be at least 8 characters.", "error")
+        return redirect(url_for("site_admin.user_detail", user_id=user_id))
+
+    user.password_hash = hash_password(new_password)
+    db.session.commit()
+    flash(f"Password updated for {user.email}.", "success")
+    return redirect(url_for("site_admin.user_detail", user_id=user_id))
+
+
+@site_admin_bp.get("/leagues")
+@site_admin_required
+def leagues():
+    from ..db_models import League, LeagueMembership, PokerSession, User
+
+    search = request.args.get("q", "").strip()
+    visibility = request.args.get("visibility", "").strip()
+    show_archived = request.args.get("archived", "0") == "1"
+    page = max(1, int(request.args.get("page", 1)))
+    per_page = 50
+
+    query = (
+        db.session.query(League)
+        .outerjoin(User, User.id == League.created_by_user_id)
+    )
+    if search:
+        query = query.filter(
+            db.or_(
+                League.name.ilike(f"%{search}%"),
+                User.email.ilike(f"%{search}%"),
+            )
+        )
+    if visibility in ("public", "private"):
+        query = query.filter(League.visibility == visibility)
+    if not show_archived:
+        query = query.filter(League.archived_at.is_(None))
+    query = query.order_by(League.created_at.desc())
+
+    total = query.count()
+    league_list = query.offset((page - 1) * per_page).limit(per_page).all()
+
+    league_ids = [lg.id for lg in league_list]
+    owner_ids = [lg.created_by_user_id for lg in league_list]
+
+    owners_by_id = {}
+    if owner_ids:
+        owners_by_id = {
+            u.id: u
+            for u in db.session.query(User).filter(User.id.in_(owner_ids)).all()
+        }
+
+    member_counts = {}
+    session_counts = {}
+    if league_ids:
+        for row in (
+            db.session.query(LeagueMembership.league_id, db.func.count(LeagueMembership.id))
+            .filter(LeagueMembership.league_id.in_(league_ids))
+            .group_by(LeagueMembership.league_id)
+            .all()
+        ):
+            member_counts[row[0]] = row[1]
+
+        for row in (
+            db.session.query(PokerSession.league_id, db.func.count(PokerSession.id))
+            .filter(PokerSession.league_id.in_(league_ids))
+            .group_by(PokerSession.league_id)
+            .all()
+        ):
+            session_counts[row[0]] = row[1]
+
+    total_pages = max(1, (total + per_page - 1) // per_page)
+
+    return render_template(
+        "admin/leagues.html",
+        leagues=league_list,
+        owners_by_id=owners_by_id,
+        member_counts=member_counts,
+        session_counts=session_counts,
+        search=search,
+        visibility=visibility,
+        show_archived=show_archived,
+        page=page,
+        total=total,
+        total_pages=total_pages,
+    )
+
+
+@site_admin_bp.get("/leagues/<league_id>")
+@site_admin_required
+def league_detail(league_id: str):
+    from ..db_models import League, LedgerEvent, LeagueMembership, Player, PokerSession, User
+
+    league = db.session.get(League, league_id)
+    if league is None:
+        flash("League not found.", "error")
+        return redirect(url_for("site_admin.leagues"))
+
+    memberships = (
+        db.session.query(LeagueMembership, User)
+        .join(User, User.id == LeagueMembership.user_id)
+        .filter(LeagueMembership.league_id == league_id)
+        .order_by(LeagueMembership.created_at.asc())
+        .all()
+    )
+
+    owner = db.session.get(User, league.created_by_user_id)
+
+    session_count = db.session.query(db.func.count(PokerSession.id)).filter(
+        PokerSession.league_id == league_id
+    ).scalar() or 0
+
+    open_sessions = db.session.query(db.func.count(PokerSession.id)).filter(
+        PokerSession.league_id == league_id,
+        PokerSession.status == "open",
+    ).scalar() or 0
+
+    event_count = db.session.query(db.func.count(LedgerEvent.id)).filter(
+        LedgerEvent.league_id == league_id,
+        LedgerEvent.voided_at.is_(None),
+    ).scalar() or 0
+
+    player_count = db.session.query(db.func.count(Player.id)).filter(
+        Player.league_id == league_id
+    ).scalar() or 0
+
+    return render_template(
+        "admin/league_detail.html",
+        league=league,
+        memberships=memberships,
+        owner=owner,
+        session_count=session_count,
+        open_sessions=open_sessions,
+        event_count=event_count,
+        player_count=player_count,
+    )
+
+
+@site_admin_bp.post("/leagues/<league_id>/invite")
+@site_admin_required
+def admin_invite_member(league_id: str):
+    from flask import current_app
+
+    from ..auth import generate_invite_token
+    from ..db_models import League
+    from ..emails import send_league_invite
+    from ..repositories.leagues import find_membership, find_user_by_email
+
+    league = db.session.get(League, league_id)
+    if league is None:
+        flash("League not found.", "error")
+        return redirect(url_for("site_admin.leagues"))
+
+    email = normalize_email(request.form.get("email", ""))
+    role = request.form.get("role", "manager").strip()
+
+    if not email or "@" not in email:
+        flash("Enter a valid email address.", "error")
+        return redirect(url_for("site_admin.league_detail", league_id=league_id))
+
+    if role not in ("manager", "viewer"):
+        flash("Invalid role.", "error")
+        return redirect(url_for("site_admin.league_detail", league_id=league_id))
+
+    existing_user = find_user_by_email(email)
+    if existing_user:
+        existing_membership = find_membership(league.id, existing_user.id)
+        if existing_membership:
+            flash(f"{email} is already a member of this league.", "error")
+            return redirect(url_for("site_admin.league_detail", league_id=league_id))
+
+    token = generate_invite_token(league.id, email, role, current_user_id() or "")
+    base_url = current_app.config.get("APP_BASE_URL", "").rstrip("/")
+    invite_url = f"{base_url}{url_for('account.accept_invite', token=token)}"
+
+    try:
+        send_league_invite(email, league.name, invite_url, current_user_id() or "")
+        flash(f"Invitation sent to {email}.", "success")
+    except Exception:
+        flash(f"Email not configured. Invite link (copy manually): {invite_url}", "info")
+
+    return redirect(url_for("site_admin.league_detail", league_id=league_id))
+
+
+@site_admin_bp.post("/leagues/<league_id>/members/<user_id>/remove")
+@site_admin_required
+def admin_remove_member(league_id: str, user_id: str):
+    from ..db_models import League, LeagueMembership
+    from ..repositories.leagues import remove_league_member
+
+    league = db.session.get(League, league_id)
+    if league is None:
+        flash("League not found.", "error")
+        return redirect(url_for("site_admin.leagues"))
+
+    membership = LeagueMembership.query.filter_by(
+        league_id=league_id,
+        user_id=user_id,
+        disabled_at=None,
+    ).one_or_none()
+
+    if membership is None:
+        flash("Member not found.", "error")
+        return redirect(url_for("site_admin.league_detail", league_id=league_id))
+
+    if membership.role == "owner":
+        flash("Cannot remove the league owner. Transfer ownership first.", "error")
+        return redirect(url_for("site_admin.league_detail", league_id=league_id))
+
+    remove_league_member(league_id, user_id)
+    db.session.commit()
+    flash("Member removed.", "success")
+    return redirect(url_for("site_admin.league_detail", league_id=league_id))
+
+
+@site_admin_bp.post("/leagues/<league_id>/transfer")
+@site_admin_required
+def admin_transfer_ownership(league_id: str):
+    from ..db_models import League
+    from ..repositories.leagues import transfer_league_ownership
+
+    league = db.session.get(League, league_id)
+    if league is None:
+        flash("League not found.", "error")
+        return redirect(url_for("site_admin.leagues"))
+
+    new_owner_id = request.form.get("new_owner_user_id", "").strip()
+    if not new_owner_id:
+        flash("Select a member to transfer ownership to.", "error")
+        return redirect(url_for("site_admin.league_detail", league_id=league_id))
+
+    try:
+        transfer_league_ownership(league_id, new_owner_id)
+        db.session.commit()
+        flash("Ownership transferred.", "success")
+    except ValueError as exc:
+        flash(str(exc), "error")
+
+    return redirect(url_for("site_admin.league_detail", league_id=league_id))
diff --git a/boker/static/css/admin.css b/boker/static/css/admin.css
new file mode 100644
index 0000000..2b40188
--- /dev/null
+++ b/boker/static/css/admin.css
@@ -0,0 +1,562 @@
+/* ================================================================
+   ADMIN SHELL — left sidebar layout
+   ================================================================ */
+.admin-html, .admin-body {
+  margin: 0;
+  height: 100%;
+}
+.admin-body {
+  display: flex;
+  min-height: 100vh;
+  background: var(--bg);
+  color: var(--text-body);
+  font-family: var(--font-ui);
+  font-size: 14px;
+  line-height: 1.5;
+  -webkit-font-smoothing: antialiased;
+}
+
+/* ---- sidebar ---- */
+.adm-sidebar {
+  width: 220px;
+  flex-shrink: 0;
+  display: flex;
+  flex-direction: column;
+  background: var(--surface);
+  border-right: 1px solid var(--border);
+  position: fixed;
+  top: 0; left: 0; bottom: 0;
+  z-index: 100;
+  overflow-y: auto;
+}
+.adm-sidebar__logo {
+  padding: 20px 16px 16px;
+  border-bottom: 1px solid var(--border);
+  display: flex;
+  flex-direction: column;
+  gap: 2px;
+}
+.adm-sidebar__wordmark {
+  font-size: 13px;
+  font-weight: 700;
+  color: var(--text-strong);
+  letter-spacing: -.01em;
+}
+.adm-sidebar__tag {
+  font-size: 10px;
+  font-weight: 600;
+  letter-spacing: .06em;
+  text-transform: uppercase;
+  color: var(--accent);
+  background: var(--accent-chip);
+  border: 1px solid var(--accent-chip-bd);
+  border-radius: 4px;
+  padding: 1px 5px;
+  display: inline-block;
+  width: fit-content;
+}
+.adm-nav {
+  flex: 1;
+  padding: 12px 8px;
+  display: flex;
+  flex-direction: column;
+  gap: 2px;
+}
+.adm-nav__section {
+  font-size: 10px;
+  font-weight: 600;
+  letter-spacing: .07em;
+  text-transform: uppercase;
+  color: var(--faintest);
+  padding: 12px 8px 4px;
+}
+.adm-nav__link {
+  display: flex;
+  align-items: center;
+  gap: 8px;
+  padding: 7px 10px;
+  border-radius: var(--r-pill);
+  color: var(--text-2);
+  text-decoration: none;
+  font-size: 13px;
+  font-weight: 500;
+  transition: background .12s, color .12s;
+}
+.adm-nav__link:hover {
+  background: var(--surface-raised);
+  color: var(--text);
+}
+.adm-nav__link.is-active {
+  background: var(--accent-chip);
+  color: var(--accent);
+  font-weight: 600;
+}
+.adm-nav__icon {
+  width: 16px;
+  height: 16px;
+  flex-shrink: 0;
+  opacity: .7;
+}
+.adm-nav__link.is-active .adm-nav__icon { opacity: 1; }
+/* ---- main content ---- */
+.adm-main {
+  margin-left: 220px;
+  flex: 1;
+  min-width: 0;
+  display: flex;
+  flex-direction: column;
+}
+
+/* ---- header ---- */
+.adm-header {
+  height: 60px;
+  border-bottom: 1px solid var(--border);
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  padding: 0 28px;
+  gap: 16px;
+  background: var(--surface);
+  position: sticky;
+  top: 0;
+  z-index: 50;
+}
+.adm-header__left {
+  display: flex;
+  align-items: center;
+  min-width: 0;
+}
+.adm-header__title {
+  font-size: 16px;
+  font-weight: 700;
+  color: var(--text-strong);
+  letter-spacing: -.01em;
+  margin: 0;
+  white-space: nowrap;
+  overflow: hidden;
+  text-overflow: ellipsis;
+}
+.adm-header__breadcrumb {
+  display: flex;
+  align-items: center;
+  gap: 8px;
+  font-size: 13px;
+  min-width: 0;
+}
+.adm-header__breadcrumb a {
+  color: var(--faintest);
+  text-decoration: none;
+  font-weight: 500;
+  transition: color .12s;
+  white-space: nowrap;
+}
+.adm-header__breadcrumb a:hover { color: var(--accent); }
+.adm-header__sep { color: var(--border-strong); flex-shrink: 0; }
+.adm-header__title.adm-header__breadcrumb-end {
+  font-size: 14px;
+  font-weight: 600;
+  color: var(--text-strong);
+  white-space: nowrap;
+  overflow: hidden;
+  text-overflow: ellipsis;
+}
+/* breadcrumb leaf node */
+.adm-header__breadcrumb .adm-header__title {
+  font-size: 14px;
+  font-weight: 600;
+  color: var(--text-strong);
+  white-space: nowrap;
+  overflow: hidden;
+  text-overflow: ellipsis;
+  margin: 0;
+}
+.adm-header__right {
+  display: flex;
+  align-items: center;
+  gap: 14px;
+  flex-shrink: 0;
+}
+.adm-header__user {
+  display: flex;
+  align-items: center;
+  gap: 5px;
+  font-size: 12px;
+  color: var(--faintest);
+  font-family: var(--font-mono);
+  max-width: 200px;
+  overflow: hidden;
+  text-overflow: ellipsis;
+  white-space: nowrap;
+}
+.adm-header__back {
+  display: inline-flex;
+  align-items: center;
+  gap: 5px;
+  font-size: 12px;
+  font-weight: 500;
+  color: var(--text-2);
+  text-decoration: none;
+  border: 1px solid var(--border-strong);
+  border-radius: var(--r-pill);
+  padding: 4px 10px;
+  transition: border-color .12s, color .12s, background .12s;
+  white-space: nowrap;
+}
+.adm-header__back:hover {
+  color: var(--text-strong);
+  border-color: var(--border-hi);
+  background: var(--surface-raised);
+}
+.adm-content {
+  padding: 28px;
+  max-width: 1200px;
+}
+
+/* ---- flash messages ---- */
+.adm-flash-stack {
+  padding: 0 28px 0;
+  display: flex;
+  flex-direction: column;
+  gap: 8px;
+  margin-top: 16px;
+}
+.adm-flash {
+  padding: 10px 14px;
+  border-radius: var(--r-sm);
+  font-size: 13px;
+}
+.adm-flash.success { background: var(--pos-tint); color: var(--pos); border: 1px solid var(--pos-tint-bd); }
+.adm-flash.error   { background: var(--neg-tint); color: var(--neg); border: 1px solid var(--neg-tint-bd); }
+.adm-flash.info    { background: var(--accent-tint); color: var(--accent); border: 1px solid var(--accent-chip-bd); }
+
+/* ---- stat sections ---- */
+.adm-stat-section {
+  margin-bottom: 24px;
+}
+.adm-stat-section__label {
+  font-size: 10px;
+  font-weight: 700;
+  letter-spacing: .08em;
+  text-transform: uppercase;
+  color: var(--faintest);
+  margin-bottom: 10px;
+  padding-left: 2px;
+}
+.adm-stat-section__grid {
+  display: grid;
+  grid-template-columns: repeat(auto-fill, minmax(170px, 1fr));
+  gap: 10px;
+}
+
+/* ---- stat grid (legacy, still used on other pages) ---- */
+.adm-stat-grid {
+  display: grid;
+  grid-template-columns: repeat(auto-fill, minmax(180px, 1fr));
+  gap: 12px;
+  margin-bottom: 28px;
+}
+.adm-stat {
+  background: var(--surface);
+  border: 1px solid var(--border);
+  border-radius: var(--r-md);
+  padding: 16px 18px;
+}
+.adm-stat--accent {
+  border-left: 3px solid var(--accent);
+  padding-left: 15px;
+  background: var(--accent-tint);
+}
+.adm-stat--pos {
+  border-left: 3px solid var(--pos);
+  padding-left: 15px;
+  background: var(--pos-tint);
+}
+.adm-stat--warn {
+  border-left: 3px solid var(--warn);
+  padding-left: 15px;
+  background: var(--warn-tint);
+}
+.adm-stat__label {
+  font-size: 11px;
+  font-weight: 600;
+  letter-spacing: .05em;
+  text-transform: uppercase;
+  color: var(--faintest);
+  margin-bottom: 6px;
+}
+.adm-stat__val {
+  font-size: 28px;
+  font-weight: 700;
+  color: var(--text-strong);
+  line-height: 1;
+}
+.adm-stat__sub {
+  font-size: 11px;
+  color: var(--faintest);
+  margin-top: 4px;
+}
+.adm-stat__sub b { color: var(--text-2); }
+
+/* ---- section heading ---- */
+.adm-section {
+  margin-bottom: 28px;
+}
+.adm-section__head {
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  margin-bottom: 12px;
+  gap: 12px;
+}
+.adm-section__title {
+  font-size: 13px;
+  font-weight: 600;
+  color: var(--text-strong);
+}
+
+/* ---- table ---- */
+.adm-table-wrap {
+  overflow-x: auto;
+  border: 1px solid var(--border);
+  border-radius: var(--r-md);
+  background: var(--surface);
+}
+.adm-table {
+  width: 100%;
+  border-collapse: collapse;
+  font-size: 13px;
+}
+.adm-table th {
+  padding: 9px 14px;
+  text-align: left;
+  font-size: 11px;
+  font-weight: 600;
+  letter-spacing: .04em;
+  text-transform: uppercase;
+  color: var(--faintest);
+  border-bottom: 1px solid var(--border);
+  white-space: nowrap;
+  background: var(--surface-head);
+}
+.adm-table td {
+  padding: 10px 14px;
+  border-bottom: 1px solid var(--divider);
+  color: var(--text-2);
+  vertical-align: middle;
+}
+.adm-table tr:last-child td { border-bottom: none; }
+.adm-table tr:hover td { background: var(--surface-raised); }
+.adm-table a { color: var(--accent); text-decoration: none; }
+.adm-table a:hover { text-decoration: underline; }
+.adm-table .adm-mono { font-family: var(--font-mono); font-size: 12px; }
+.adm-table .cell-muted { color: var(--faintest); }
+
+/* ---- pill badges ---- */
+.adm-pill {
+  display: inline-block;
+  font-size: 10px;
+  font-weight: 600;
+  letter-spacing: .04em;
+  text-transform: uppercase;
+  padding: 2px 7px;
+  border-radius: 99px;
+  white-space: nowrap;
+}
+.adm-pill--active  { background: var(--pos-tint);     color: var(--pos);    border: 1px solid var(--pos-tint-bd); }
+.adm-pill--disabled{ background: var(--neg-tint);     color: var(--neg);    border: 1px solid var(--neg-tint-bd); }
+.adm-pill--admin   { background: var(--accent-chip);  color: var(--accent); border: 1px solid var(--accent-chip-bd); }
+.adm-pill--open    { background: var(--warn-tint);    color: var(--warn);   border: 1px solid var(--warn-tint-bd); }
+.adm-pill--public  { background: var(--pos-tint);     color: var(--pos);    border: 1px solid var(--pos-tint-bd); }
+.adm-pill--private { background: var(--surface-raised); color: var(--faintest); border: 1px solid var(--border); }
+.adm-pill--owner   { background: var(--accent-chip);  color: var(--accent); border: 1px solid var(--accent-chip-bd); }
+.adm-pill--manager { background: var(--warn-tint);    color: var(--warn);   border: 1px solid var(--warn-tint-bd); }
+.adm-pill--viewer  { background: var(--surface-raised); color: var(--faintest); border: 1px solid var(--border); }
+.adm-pill--archived{ background: var(--surface-raised); color: var(--faintest-2); border: 1px solid var(--border); }
+
+/* ---- search bar ---- */
+.adm-search {
+  display: flex;
+  gap: 8px;
+  margin-bottom: 16px;
+}
+.adm-search input {
+  flex: 1;
+  min-width: 0;
+  padding: 8px 12px;
+  background: var(--field);
+  border: 1px solid var(--border-strong);
+  border-radius: var(--r-sm);
+  color: var(--text);
+  font-size: 13px;
+  font-family: inherit;
+}
+.adm-search input:focus {
+  outline: none;
+  border-color: var(--accent);
+}
+
+/* ---- buttons ---- */
+.adm-btn {
+  display: inline-flex;
+  align-items: center;
+  gap: 6px;
+  padding: 7px 14px;
+  border-radius: var(--r-sm);
+  font-size: 12px;
+  font-weight: 600;
+  font-family: inherit;
+  cursor: pointer;
+  border: 1px solid transparent;
+  text-decoration: none;
+  transition: opacity .12s, background .12s;
+  white-space: nowrap;
+}
+.adm-btn:hover { opacity: .85; }
+.adm-btn--primary { background: var(--accent); color: var(--accent-ink); }
+.adm-btn--ghost   { background: transparent; color: var(--text-2); border-color: var(--border-strong); }
+.adm-btn--ghost:hover { background: var(--surface-raised); opacity: 1; }
+.adm-btn--danger  { background: var(--neg-tint); color: var(--neg); border-color: var(--neg-tint-bd); }
+.adm-btn--warn    { background: var(--warn-tint); color: var(--warn); border-color: var(--warn-tint-bd); }
+.adm-btn--sm { padding: 4px 10px; font-size: 11px; }
+
+/* ---- card ---- */
+.adm-card {
+  background: var(--surface);
+  border: 1px solid var(--border);
+  border-radius: var(--r-md);
+  padding: 20px;
+  margin-bottom: 20px;
+}
+.adm-card__title {
+  font-size: 13px;
+  font-weight: 600;
+  color: var(--text-strong);
+  margin-bottom: 14px;
+  padding-bottom: 10px;
+  border-bottom: 1px solid var(--border);
+}
+.adm-kv { display: grid; gap: 8px; }
+.adm-kv-row {
+  display: grid;
+  grid-template-columns: 140px 1fr;
+  gap: 12px;
+  font-size: 13px;
+}
+.adm-kv-row dt { color: var(--faintest); font-size: 12px; }
+.adm-kv-row dd { margin: 0; color: var(--text-2); word-break: break-all; }
+.adm-kv-row dd b { color: var(--text-strong); font-weight: 600; }
+
+/* ---- action group ---- */
+.adm-actions {
+  display: flex;
+  flex-wrap: wrap;
+  gap: 8px;
+  align-items: center;
+}
+
+/* ---- reset link box ---- */
+.adm-reset-box {
+  margin-top: 12px;
+  padding: 12px 14px;
+  background: var(--warn-tint);
+  border: 1px solid var(--warn-tint-bd);
+  border-radius: var(--r-sm);
+}
+.adm-reset-box__label {
+  font-size: 11px;
+  font-weight: 600;
+  color: var(--warn);
+  letter-spacing: .04em;
+  text-transform: uppercase;
+  margin-bottom: 6px;
+}
+.adm-reset-box__url {
+  font-family: var(--font-mono);
+  font-size: 11px;
+  color: var(--text-2);
+  word-break: break-all;
+  user-select: all;
+}
+
+/* ---- pagination ---- */
+.adm-pagination {
+  display: flex;
+  align-items: center;
+  gap: 6px;
+  margin-top: 16px;
+  font-size: 12px;
+  color: var(--faintest);
+}
+.adm-pagination a {
+  padding: 4px 10px;
+  border: 1px solid var(--border-strong);
+  border-radius: var(--r-pill);
+  color: var(--text-2);
+  text-decoration: none;
+}
+.adm-pagination a:hover { background: var(--surface-raised); }
+.adm-pagination span { padding: 4px 10px; color: var(--faintest); }
+
+/* ---- inline form ---- */
+.adm-inline-form { display: inline; }
+.adm-pass-form {
+  display: flex;
+  gap: 8px;
+  align-items: flex-end;
+  margin-top: 8px;
+}
+.adm-pass-form input {
+  padding: 6px 10px;
+  background: var(--field);
+  border: 1px solid var(--border-strong);
+  border-radius: var(--r-sm);
+  color: var(--text);
+  font-size: 12px;
+  font-family: inherit;
+  min-width: 220px;
+}
+.adm-pass-form input:focus { outline: none; border-color: var(--accent); }
+
+/* ---- chart layout ---- */
+.adm-chart-row {
+  display: grid;
+  grid-template-columns: 1fr 1fr;
+  gap: 16px;
+  margin-bottom: 28px;
+}
+@media (max-width: 768px) {
+  .adm-chart-row { grid-template-columns: 1fr; }
+}
+.adm-chart-card {
+  background: var(--surface);
+  border: 1px solid var(--border);
+  border-radius: var(--r-md);
+  padding: 16px 18px 14px;
+}
+.adm-chart-card__head {
+  display: flex;
+  align-items: flex-start;
+  justify-content: space-between;
+  gap: 12px;
+  margin-bottom: 14px;
+}
+.adm-chart-card__title {
+  font-size: 12px;
+  font-weight: 700;
+  color: var(--text-strong);
+  text-transform: uppercase;
+  letter-spacing: .05em;
+  line-height: 1.2;
+}
+.adm-chart-card__sub {
+  font-size: 11px;
+  color: var(--faintest);
+  margin-top: 3px;
+}
+.adm-chart-card__meta {
+  font-size: 11px;
+  color: var(--faintest);
+  white-space: nowrap;
+  margin-top: 2px;
+}
+.adm-chart-card__meta b { color: var(--text-2); }
diff --git a/boker/static/css/style.css b/boker/static/css/style.css
index 6d36ff5..bc6975b 100644
--- a/boker/static/css/style.css
+++ b/boker/static/css/style.css
@@ -597,6 +597,13 @@ h3 {
   outline: none;
   appearance: none;
 }
+.form-card select {
+  background-image: url("data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' width='11' height='7' viewBox='0 0 11 7'%3E%3Cpath d='M1 1l4.5 4.5L10 1' stroke='%2366646f' stroke-width='1.5' fill='none' stroke-linecap='round' stroke-linejoin='round'/%3E%3C/svg%3E");
+  background-repeat: no-repeat;
+  background-position: right 12px center;
+  padding-right: 34px;
+  cursor: pointer;
+}
 .form-card input:focus, .form-card select:focus, .form-card textarea:focus {
   border-color: var(--accent-chip-bd);
   box-shadow: 0 0 0 3px var(--accent-a22);
diff --git a/boker/static/css/tokens.css b/boker/static/css/tokens.css
index 00e4681..f434282 100644
--- a/boker/static/css/tokens.css
+++ b/boker/static/css/tokens.css
@@ -78,6 +78,12 @@
   --w-admin:1580px;
   --gutter: clamp(16px, 4vw, 40px);
 
+  /* ---- typography ---- */
+  --font-ui:      Aptos, Inter, ui-sans-serif, system-ui, -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif;
+  --font-display: var(--font-ui);
+  --font-mono:    ui-monospace, "SFMono-Regular", "Cascadia Mono", "Roboto Mono", "Liberation Mono", monospace;
+  --font-money:   var(--font-ui);
+
   /* ---- Chart.js backward compat (read as raw strings by JS) ---- */
   --text-muted: #bcbac6;
   --line: #26262f;
diff --git a/boker/templates/admin/base.html b/boker/templates/admin/base.html
new file mode 100644
index 0000000..1c0cd90
--- /dev/null
+++ b/boker/templates/admin/base.html
@@ -0,0 +1,95 @@
+<!doctype html>
+<html lang="en" class="admin-html">
+<head>
+    <meta charset="utf-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1">
+    <title>{% block title %}Admin{% endblock %} · boker admin</title>
+    <link rel="icon" href="{{ url_for('static', filename='favicon.svg') }}" type="image/svg+xml">
+    <link rel="stylesheet" href="{{ url_for('static', filename='css/tokens.css') }}">
+    <link rel="stylesheet" href="{{ url_for('static', filename='css/admin.css') }}">
+    <meta name="robots" content="noindex,nofollow">
+</head>
+<body class="admin-body">
+
+<aside class="adm-sidebar">
+    <div class="adm-sidebar__logo">
+        <span class="adm-sidebar__wordmark">myboker.org</span>
+        <span class="adm-sidebar__tag">Admin</span>
+    </div>
+
+    <nav class="adm-nav">
+        <span class="adm-nav__section">Overview</span>
+        <a class="adm-nav__link {{ 'is-active' if request.endpoint == 'site_admin.dashboard' }}"
+           href="{{ url_for('site_admin.dashboard') }}">
+            <svg class="adm-nav__icon" viewBox="0 0 16 16" fill="none" stroke="currentColor" stroke-width="1.5">
+                <rect x="1" y="1" width="6" height="6" rx="1.5"/>
+                <rect x="9" y="1" width="6" height="6" rx="1.5"/>
+                <rect x="1" y="9" width="6" height="6" rx="1.5"/>
+                <rect x="9" y="9" width="6" height="6" rx="1.5"/>
+            </svg>
+            Dashboard
+        </a>
+
+        <span class="adm-nav__section">Manage</span>
+        <a class="adm-nav__link {{ 'is-active' if request.endpoint and request.endpoint.startswith('site_admin.user') }}"
+           href="{{ url_for('site_admin.users') }}">
+            <svg class="adm-nav__icon" viewBox="0 0 16 16" fill="none" stroke="currentColor" stroke-width="1.5">
+                <circle cx="8" cy="5" r="3"/>
+                <path d="M2 14c0-3.314 2.686-5 6-5s6 1.686 6 5" stroke-linecap="round"/>
+            </svg>
+            Users
+        </a>
+        <a class="adm-nav__link {{ 'is-active' if request.endpoint and request.endpoint.startswith('site_admin.league') }}"
+           href="{{ url_for('site_admin.leagues') }}">
+            <svg class="adm-nav__icon" viewBox="0 0 16 16" fill="none" stroke="currentColor" stroke-width="1.5">
+                <circle cx="8" cy="8" r="6.5"/>
+                <path d="M5 8h6M8 5v6"/>
+            </svg>
+            Leagues
+        </a>
+    </nav>
+</aside>
+
+<div class="adm-main">
+    <header class="adm-header">
+        <div class="adm-header__left">
+            {% block breadcrumb %}
+            <h1 class="adm-header__title">{% block page_title %}{% endblock %}</h1>
+            {% endblock %}
+        </div>
+        <div class="adm-header__right">
+            <span class="adm-header__user">
+                <svg width="13" height="13" viewBox="0 0 16 16" fill="none" stroke="currentColor" stroke-width="1.5" style="opacity:.5">
+                    <circle cx="8" cy="5" r="3"/>
+                    <path d="M2 14c0-3.314 2.686-5 6-5s6 1.686 6 5" stroke-linecap="round"/>
+                </svg>
+                {{ current_user_id }}
+            </span>
+            <a class="adm-header__back" href="{{ url_for('public.home') }}">
+                <svg width="13" height="13" viewBox="0 0 16 16" fill="none" stroke="currentColor" stroke-width="1.5">
+                    <path d="M10 3L5 8l5 5" stroke-linecap="round" stroke-linejoin="round"/>
+                </svg>
+                Back to site
+            </a>
+        </div>
+    </header>
+
+    {% with messages = get_flashed_messages(with_categories=true) %}
+        {% if messages %}
+            <div class="adm-flash-stack">
+                {% for category, message in messages %}
+                    <div class="adm-flash {{ category }}">{{ message }}</div>
+                {% endfor %}
+            </div>
+        {% endif %}
+    {% endwith %}
+
+    <div class="adm-content">
+        {% block content %}{% endblock %}
+    </div>
+</div>
+
+<script src="https://cdn.jsdelivr.net/npm/chart.js"></script>
+{% block extra_scripts %}{% endblock %}
+</body>
+</html>
diff --git a/boker/templates/admin/dashboard.html b/boker/templates/admin/dashboard.html
new file mode 100644
index 0000000..1cb2d71
--- /dev/null
+++ b/boker/templates/admin/dashboard.html
@@ -0,0 +1,269 @@
+{% extends "admin/base.html" %}
+{% block title %}Dashboard{% endblock %}
+{% block page_title %}Dashboard{% endblock %}
+
+{% block content %}
+
+<div class="adm-stat-section">
+    <div class="adm-stat-section__label">Users</div>
+    <div class="adm-stat-section__grid">
+        <div class="adm-stat">
+            <div class="adm-stat__label">Total users</div>
+            <div class="adm-stat__val">{{ stats.total_users }}</div>
+            <div class="adm-stat__sub"><b>{{ stats.new_users_7d }}</b> new this week · <b>{{ stats.new_users_30d }}</b> this month</div>
+        </div>
+        <div class="adm-stat">
+            <div class="adm-stat__label">Active accounts</div>
+            <div class="adm-stat__val">{{ stats.active_users }}</div>
+            <div class="adm-stat__sub"><b>{{ stats.disabled_users }}</b> disabled · <b>{{ stats.admin_count }}</b> admin{% if stats.admin_count != 1 %}s{% endif %}</div>
+        </div>
+        <div class="adm-stat adm-stat--accent">
+            <div class="adm-stat__label">Daily active</div>
+            <div class="adm-stat__val">{{ stats.dau }}</div>
+            <div class="adm-stat__sub">logged in today</div>
+        </div>
+        <div class="adm-stat adm-stat--accent">
+            <div class="adm-stat__label">Weekly active</div>
+            <div class="adm-stat__val">{{ stats.wau }}</div>
+            <div class="adm-stat__sub">past 7 days</div>
+        </div>
+        <div class="adm-stat adm-stat--accent">
+            <div class="adm-stat__label">Monthly active</div>
+            <div class="adm-stat__val">{{ stats.mau }}</div>
+            <div class="adm-stat__sub">past 30 days</div>
+        </div>
+    </div>
+</div>
+
+<div class="adm-stat-section">
+    <div class="adm-stat-section__label">Leagues</div>
+    <div class="adm-stat-section__grid">
+        <div class="adm-stat adm-stat--pos">
+            <div class="adm-stat__label">Active leagues</div>
+            <div class="adm-stat__val">{{ stats.active_leagues }}</div>
+            <div class="adm-stat__sub"><b>{{ stats.public_leagues }}</b> public · <b>{{ stats.new_leagues_30d }}</b> new this month</div>
+        </div>
+        <div class="adm-stat adm-stat--pos">
+            <div class="adm-stat__label">Avg sessions / league</div>
+            <div class="adm-stat__val">{{ stats.avg_sessions_per_league }}</div>
+            <div class="adm-stat__sub">across all leagues</div>
+        </div>
+        <div class="adm-stat adm-stat--pos">
+            <div class="adm-stat__label">Avg buyin / league</div>
+            <div class="adm-stat__val">{{ stats.avg_buyin_cents | money }}</div>
+            <div class="adm-stat__sub">total buyins per league</div>
+        </div>
+    </div>
+</div>
+
+<div class="adm-stat-section">
+    <div class="adm-stat-section__label">Activity</div>
+    <div class="adm-stat-section__grid">
+        <div class="adm-stat adm-stat--warn">
+            <div class="adm-stat__label">Sessions</div>
+            <div class="adm-stat__val">{{ stats.total_sessions }}</div>
+            <div class="adm-stat__sub"><b>{{ stats.open_sessions }}</b> currently open</div>
+        </div>
+        <div class="adm-stat adm-stat--warn">
+            <div class="adm-stat__label">Ledger events</div>
+            <div class="adm-stat__val">{{ stats.total_events }}</div>
+            <div class="adm-stat__sub">across all leagues</div>
+        </div>
+    </div>
+</div>
+
+<div class="adm-chart-row">
+    <div class="adm-chart-card">
+        <div class="adm-chart-card__head">
+            <div>
+                <div class="adm-chart-card__title">User activity</div>
+                <div class="adm-chart-card__sub">Logins &amp; new signups — last 30 days</div>
+            </div>
+            <span class="adm-chart-card__meta">DAU <b>{{ stats.dau }}</b> · MAU <b>{{ stats.mau }}</b></span>
+        </div>
+        <canvas id="userActivityChart" height="110"></canvas>
+    </div>
+    <div class="adm-chart-card">
+        <div class="adm-chart-card__head">
+            <div>
+                <div class="adm-chart-card__title">Session frequency</div>
+                <div class="adm-chart-card__sub">Sessions played per day — last 30 days</div>
+            </div>
+            <span class="adm-chart-card__meta">Total <b>{{ stats.total_sessions }}</b></span>
+        </div>
+        <canvas id="sessionActivityChart" height="110"></canvas>
+    </div>
+</div>
+
+<div class="adm-section">
+    <div class="adm-section__head">
+        <span class="adm-section__title">Recent sign-ups</span>
+        <a class="adm-btn adm-btn--ghost adm-btn--sm" href="{{ url_for('site_admin.users') }}">View all users</a>
+    </div>
+    {% if recent_users %}
+    <div class="adm-table-wrap">
+        <table class="adm-table">
+            <thead>
+                <tr>
+                    <th>Email</th>
+                    <th>Joined</th>
+                    <th>Status</th>
+                </tr>
+            </thead>
+            <tbody>
+                {% for user in recent_users %}
+                <tr>
+                    <td><a href="{{ url_for('site_admin.user_detail', user_id=user.id) }}">{{ user.email }}</a>{% if user.is_site_admin %} <span class="adm-pill adm-pill--admin">admin</span>{% endif %}</td>
+                    <td class="cell-muted">{{ user.created_at.strftime('%b %d, %Y') }}</td>
+                    <td>
+                        {% if user.disabled_at %}
+                            <span class="adm-pill adm-pill--disabled">Disabled</span>
+                        {% else %}
+                            <span class="adm-pill adm-pill--active">Active</span>
+                        {% endif %}
+                    </td>
+                </tr>
+                {% endfor %}
+            </tbody>
+        </table>
+    </div>
+    {% else %}
+    <p style="color:var(--faintest);font-size:13px;">No users yet.</p>
+    {% endif %}
+</div>
+
+<div class="adm-section">
+    <div class="adm-section__head">
+        <span class="adm-section__title">Recently created leagues</span>
+        <a class="adm-btn adm-btn--ghost adm-btn--sm" href="{{ url_for('site_admin.leagues') }}">View all leagues</a>
+    </div>
+    {% if recent_leagues %}
+    <div class="adm-table-wrap">
+        <table class="adm-table">
+            <thead>
+                <tr>
+                    <th>Name</th>
+                    <th>Owner</th>
+                    <th>Visibility</th>
+                    <th>Created</th>
+                </tr>
+            </thead>
+            <tbody>
+                {% for league in recent_leagues %}
+                <tr>
+                    <td><a href="{{ url_for('site_admin.league_detail', league_id=league.id) }}">{{ league.name }}</a>{% if league.archived_at %} <span class="adm-pill adm-pill--archived">archived</span>{% endif %}</td>
+                    <td>
+                        {% set owner = owners_by_id.get(league.created_by_user_id) %}
+                        {% if owner %}
+                            <a href="{{ url_for('site_admin.user_detail', user_id=owner.id) }}">{{ owner.email }}</a>
+                        {% else %}
+                            <span class="cell-muted">—</span>
+                        {% endif %}
+                    </td>
+                    <td>
+                        {% if league.visibility == 'public' %}
+                            <span class="adm-pill adm-pill--public">Public</span>
+                        {% else %}
+                            <span class="adm-pill adm-pill--private">Private</span>
+                        {% endif %}
+                    </td>
+                    <td class="cell-muted">{{ league.created_at.strftime('%b %d, %Y') }}</td>
+                </tr>
+                {% endfor %}
+            </tbody>
+        </table>
+    </div>
+    {% else %}
+    <p style="color:var(--faintest);font-size:13px;">No leagues yet.</p>
+    {% endif %}
+</div>
+
+{% endblock %}
+
+{% block extra_scripts %}
+<script>
+(function() {
+    var d = {{ chart_data | safe }};
+    var style = getComputedStyle(document.documentElement);
+    var accent = style.getPropertyValue('--accent').trim() || '#9b8cf0';
+    var pos    = style.getPropertyValue('--pos').trim()    || '#6fc093';
+    var warn   = style.getPropertyValue('--warn').trim()   || '#e0b15c';
+    var faint  = style.getPropertyValue('--faintest').trim() || '#66646f';
+    var border = style.getPropertyValue('--border').trim() || '#26262f';
+
+    Chart.defaults.color = faint;
+    Chart.defaults.font.family = 'inherit';
+    Chart.defaults.font.size = 11;
+
+    new Chart(document.getElementById('userActivityChart'), {
+        type: 'line',
+        data: {
+            labels: d.labels,
+            datasets: [
+                {
+                    label: 'Active users',
+                    data: d.logins,
+                    borderColor: accent,
+                    backgroundColor: accent + '18',
+                    fill: true,
+                    tension: 0.35,
+                    pointRadius: 0,
+                    pointHoverRadius: 4,
+                    borderWidth: 2,
+                },
+                {
+                    label: 'New signups',
+                    data: d.signups,
+                    borderColor: pos,
+                    backgroundColor: 'transparent',
+                    fill: false,
+                    tension: 0.35,
+                    pointRadius: 0,
+                    pointHoverRadius: 4,
+                    borderWidth: 1.5,
+                    borderDash: [5, 3],
+                }
+            ]
+        },
+        options: {
+            responsive: true,
+            interaction: { mode: 'index', intersect: false },
+            plugins: {
+                legend: { position: 'top', labels: { boxWidth: 10, boxHeight: 10, padding: 14, usePointStyle: true } }
+            },
+            scales: {
+                x: { grid: { display: false }, ticks: { maxTicksLimit: 7, color: faint } },
+                y: { beginAtZero: true, grid: { color: border }, ticks: { precision: 0, color: faint } }
+            }
+        }
+    });
+
+    new Chart(document.getElementById('sessionActivityChart'), {
+        type: 'bar',
+        data: {
+            labels: d.labels,
+            datasets: [{
+                label: 'Sessions',
+                data: d.sessions,
+                backgroundColor: warn + '55',
+                borderColor: warn + 'bb',
+                borderWidth: 1,
+                borderRadius: 3,
+                borderSkipped: false,
+            }]
+        },
+        options: {
+            responsive: true,
+            interaction: { mode: 'index', intersect: false },
+            plugins: {
+                legend: { position: 'top', labels: { boxWidth: 10, boxHeight: 10, padding: 14, usePointStyle: true } }
+            },
+            scales: {
+                x: { grid: { display: false }, ticks: { maxTicksLimit: 7, color: faint } },
+                y: { beginAtZero: true, grid: { color: border }, ticks: { precision: 0, color: faint } }
+            }
+        }
+    });
+})();
+</script>
+{% endblock %}
diff --git a/boker/templates/admin/league_detail.html b/boker/templates/admin/league_detail.html
new file mode 100644
index 0000000..0aadc9d
--- /dev/null
+++ b/boker/templates/admin/league_detail.html
@@ -0,0 +1,209 @@
+{% extends "admin/base.html" %}
+{% block title %}{{ league.name }}{% endblock %}
+
+{% block breadcrumb %}
+    <div class="adm-header__breadcrumb">
+        <a href="{{ url_for('site_admin.leagues') }}">Leagues</a>
+        <span class="adm-header__sep">/</span>
+        <span class="adm-header__title">{{ league.name }}</span>
+    </div>
+{% endblock %}
+
+{% block content %}
+
+<div class="adm-card">
+    <div class="adm-card__title">League info</div>
+    <dl class="adm-kv">
+        <div class="adm-kv-row">
+            <dt>Name</dt>
+            <dd><b>{{ league.name }}</b></dd>
+        </div>
+        <div class="adm-kv-row">
+            <dt>League ID</dt>
+            <dd class="adm-mono">{{ league.id }}</dd>
+        </div>
+        <div class="adm-kv-row">
+            <dt>Slug / key</dt>
+            <dd class="adm-mono">{{ league.slug }}-{{ league.public_key }}</dd>
+        </div>
+        {% if league.description %}
+        <div class="adm-kv-row">
+            <dt>Description</dt>
+            <dd>{{ league.description }}</dd>
+        </div>
+        {% endif %}
+        <div class="adm-kv-row">
+            <dt>Visibility</dt>
+            <dd>
+                {% if league.visibility == 'public' %}
+                    <span class="adm-pill adm-pill--public">Public</span>
+                {% else %}
+                    <span class="adm-pill adm-pill--private">Private</span>
+                {% endif %}
+            </dd>
+        </div>
+        <div class="adm-kv-row">
+            <dt>Owner</dt>
+            <dd>
+                {% if owner %}
+                    <a href="{{ url_for('site_admin.user_detail', user_id=owner.id) }}">{{ owner.email }}</a>
+                {% else %}
+                    <span style="color:var(--faintest)">Unknown</span>
+                {% endif %}
+            </dd>
+        </div>
+        <div class="adm-kv-row">
+            <dt>Created</dt>
+            <dd>{{ league.created_at.strftime('%b %d, %Y at %H:%M UTC') }}</dd>
+        </div>
+        <div class="adm-kv-row">
+            <dt>Status</dt>
+            <dd>
+                {% if league.archived_at %}
+                    <span class="adm-pill adm-pill--archived">Archived</span>
+                    <span style="color:var(--faintest);font-size:12px;margin-left:6px;">{{ league.archived_at.strftime('%b %d, %Y') }}</span>
+                {% else %}
+                    <span class="adm-pill adm-pill--active">Active</span>
+                {% endif %}
+            </dd>
+        </div>
+    </dl>
+</div>
+
+<div class="adm-stat-grid" style="margin-bottom:20px;">
+    <div class="adm-stat">
+        <div class="adm-stat__label">Members</div>
+        <div class="adm-stat__val">{{ memberships | length }}</div>
+    </div>
+    <div class="adm-stat">
+        <div class="adm-stat__label">Players</div>
+        <div class="adm-stat__val">{{ player_count }}</div>
+        <div class="adm-stat__sub">added to this league</div>
+    </div>
+    <div class="adm-stat">
+        <div class="adm-stat__label">Sessions</div>
+        <div class="adm-stat__val">{{ session_count }}</div>
+        <div class="adm-stat__sub"><b>{{ open_sessions }}</b> open</div>
+    </div>
+    <div class="adm-stat">
+        <div class="adm-stat__label">Ledger events</div>
+        <div class="adm-stat__val">{{ event_count }}</div>
+    </div>
+</div>
+
+{% if not league.archived_at %}
+<div style="margin-bottom:20px;">
+    <a class="adm-btn adm-btn--ghost" href="{{ url_for('leagues.dashboard', league_ref=league.url_ref) }}" target="_blank">
+        View league →
+    </a>
+</div>
+{% endif %}
+
+{% if memberships %}
+<div class="adm-card">
+    <div class="adm-card__title">Members ({{ memberships | length }})</div>
+    <div class="adm-table-wrap" style="border:none;border-radius:0;margin:0 -20px -20px;">
+        <table class="adm-table">
+            <thead>
+                <tr>
+                    <th>User</th>
+                    <th>Role</th>
+                    <th>Joined league</th>
+                </tr>
+            </thead>
+            <tbody>
+                {% for membership, user in memberships %}
+                <tr>
+                    <td>
+                        <a href="{{ url_for('site_admin.user_detail', user_id=user.id) }}">{{ user.email }}</a>
+                        {% if user.is_site_admin %}<span class="adm-pill adm-pill--admin" style="margin-left:4px;">admin</span>{% endif %}
+                        {% if user.disabled_at %}<span class="adm-pill adm-pill--disabled" style="margin-left:4px;">disabled</span>{% endif %}
+                    </td>
+                    <td><span class="adm-pill adm-pill--{{ membership.role }}">{{ membership.role }}</span></td>
+                    <td class="cell-muted">{{ membership.created_at.strftime('%b %d, %Y') }}</td>
+                </tr>
+                {% endfor %}
+            </tbody>
+        </table>
+    </div>
+</div>
+{% endif %}
+
+<div class="adm-card">
+    <div class="adm-card__title">Admin actions</div>
+
+    <div style="margin-bottom:20px;">
+        <div style="font-size:12px;font-weight:600;color:var(--faintest);text-transform:uppercase;letter-spacing:.05em;margin-bottom:10px;">Send invite</div>
+        <form method="post" action="{{ url_for('site_admin.admin_invite_member', league_id=league.id) }}" style="display:flex;gap:8px;flex-wrap:wrap;align-items:flex-end;">
+            <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
+            <div style="display:flex;flex-direction:column;gap:4px;flex:1;min-width:180px;">
+                <label style="font-size:11px;color:var(--faintest);">Email</label>
+                <input type="email" name="email" placeholder="user@example.com" required
+                       style="padding:6px 10px;background:var(--field);border:1px solid var(--border-strong);border-radius:var(--r-sm);color:var(--text);font-size:12px;font-family:inherit;">
+            </div>
+            <div style="display:flex;flex-direction:column;gap:4px;">
+                <label style="font-size:11px;color:var(--faintest);">Role</label>
+                <select name="role" style="padding:6px 10px;background:var(--field);border:1px solid var(--border-strong);border-radius:var(--r-sm);color:var(--text);font-size:12px;font-family:inherit;">
+                    <option value="manager">Manager</option>
+                    <option value="viewer">Viewer</option>
+                </select>
+            </div>
+            <button class="adm-btn adm-btn--primary adm-btn--sm" type="submit">Send invite</button>
+        </form>
+    </div>
+
+    {% set has_non_owners = [] %}
+    {% for membership, user in memberships %}{% if membership.role != 'owner' %}{% set _ = has_non_owners.append(1) %}{% endif %}{% endfor %}
+    {% if has_non_owners %}
+    <div style="margin-bottom:20px;border-top:1px solid var(--border);padding-top:16px;">
+        <div style="font-size:12px;font-weight:600;color:var(--faintest);text-transform:uppercase;letter-spacing:.05em;margin-bottom:10px;">Remove member</div>
+        <div class="adm-table-wrap" style="border:none;border-radius:0;margin:0;">
+            <table class="adm-table">
+                <thead>
+                    <tr><th>User</th><th>Role</th><th></th></tr>
+                </thead>
+                <tbody>
+                    {% for membership, user in memberships %}
+                    {% if membership.role != 'owner' %}
+                    <tr>
+                        <td><a href="{{ url_for('site_admin.user_detail', user_id=user.id) }}">{{ user.email }}</a></td>
+                        <td><span class="adm-pill adm-pill--{{ membership.role }}">{{ membership.role }}</span></td>
+                        <td>
+                            <form method="post" action="{{ url_for('site_admin.admin_remove_member', league_id=league.id, user_id=user.id) }}" style="margin:0;display:inline;">
+                                <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
+                                <button class="adm-btn adm-btn--danger adm-btn--sm" type="submit">Remove</button>
+                            </form>
+                        </td>
+                    </tr>
+                    {% endif %}
+                    {% endfor %}
+                </tbody>
+            </table>
+        </div>
+    </div>
+    {% endif %}
+
+    {% set has_managers = [] %}
+    {% for membership, user in memberships %}{% if membership.role == 'manager' %}{% set _ = has_managers.append((membership, user)) %}{% endif %}{% endfor %}
+    {% if has_managers %}
+    <div style="border-top:1px solid var(--border);padding-top:16px;">
+        <div style="font-size:12px;font-weight:600;color:var(--faintest);text-transform:uppercase;letter-spacing:.05em;margin-bottom:10px;">Transfer ownership</div>
+        <form method="post" action="{{ url_for('site_admin.admin_transfer_ownership', league_id=league.id) }}" style="display:flex;gap:8px;flex-wrap:wrap;align-items:flex-end;">
+            <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
+            <div style="display:flex;flex-direction:column;gap:4px;flex:1;min-width:180px;">
+                <label style="font-size:11px;color:var(--faintest);">New owner</label>
+                <select name="new_owner_user_id" style="padding:6px 10px;background:var(--field);border:1px solid var(--border-strong);border-radius:var(--r-sm);color:var(--text);font-size:12px;font-family:inherit;">
+                    {% for membership, user in memberships %}
+                    {% if membership.role == 'manager' %}
+                    <option value="{{ user.id }}">{{ user.email }}</option>
+                    {% endif %}
+                    {% endfor %}
+                </select>
+            </div>
+            <button class="adm-btn adm-btn--warn adm-btn--sm" type="submit">Transfer ownership</button>
+        </form>
+    </div>
+    {% endif %}
+</div>
+
+{% endblock %}
diff --git a/boker/templates/admin/leagues.html b/boker/templates/admin/leagues.html
new file mode 100644
index 0000000..b4a8f75
--- /dev/null
+++ b/boker/templates/admin/leagues.html
@@ -0,0 +1,90 @@
+{% extends "admin/base.html" %}
+{% block title %}Leagues{% endblock %}
+{% block page_title %}Leagues <span style="color:var(--faintest);font-weight:400;font-size:12px;margin-left:6px;">{{ total }}</span>{% endblock %}
+
+{% block content %}
+
+<form class="adm-search" method="get">
+    <input type="search" name="q" value="{{ search }}" placeholder="Search by name or owner email…" autofocus>
+    <select name="visibility" style="padding:8px 10px;background:var(--field);border:1px solid var(--border-strong);border-radius:var(--r-sm);color:var(--text);font-size:13px;font-family:inherit;">
+        <option value="" {% if not visibility %}selected{% endif %}>All visibility</option>
+        <option value="public" {% if visibility == 'public' %}selected{% endif %}>Public</option>
+        <option value="private" {% if visibility == 'private' %}selected{% endif %}>Private</option>
+    </select>
+    <label style="display:flex;align-items:center;gap:6px;font-size:13px;color:var(--text-2);white-space:nowrap;">
+        <input type="checkbox" name="archived" value="1" {% if show_archived %}checked{% endif %}> Show archived
+    </label>
+    <button class="adm-btn adm-btn--primary" type="submit">Filter</button>
+    {% if search or visibility or show_archived %}
+        <a class="adm-btn adm-btn--ghost" href="{{ url_for('site_admin.leagues') }}">Clear</a>
+    {% endif %}
+</form>
+
+{% if leagues %}
+<div class="adm-table-wrap">
+    <table class="adm-table">
+        <thead>
+            <tr>
+                <th>Name</th>
+                <th>Owner</th>
+                <th>Visibility</th>
+                <th>Members</th>
+                <th>Sessions</th>
+                <th>Created</th>
+                <th>Status</th>
+            </tr>
+        </thead>
+        <tbody>
+            {% for league in leagues %}
+            <tr>
+                <td><a href="{{ url_for('site_admin.league_detail', league_id=league.id) }}">{{ league.name }}</a></td>
+                <td>
+                    {% set owner = owners_by_id.get(league.created_by_user_id) %}
+                    {% if owner %}
+                        <a href="{{ url_for('site_admin.user_detail', user_id=owner.id) }}">{{ owner.email }}</a>
+                    {% else %}
+                        <span class="cell-muted">—</span>
+                    {% endif %}
+                </td>
+                <td>
+                    {% if league.visibility == 'public' %}
+                        <span class="adm-pill adm-pill--public">Public</span>
+                    {% else %}
+                        <span class="adm-pill adm-pill--private">Private</span>
+                    {% endif %}
+                </td>
+                <td class="cell-muted">{{ member_counts.get(league.id, 0) }}</td>
+                <td class="cell-muted">{{ session_counts.get(league.id, 0) }}</td>
+                <td class="cell-muted">{{ league.created_at.strftime('%b %d, %Y') }}</td>
+                <td>
+                    {% if league.archived_at %}
+                        <span class="adm-pill adm-pill--archived">Archived</span>
+                    {% else %}
+                        <span class="adm-pill adm-pill--active">Active</span>
+                    {% endif %}
+                </td>
+            </tr>
+            {% endfor %}
+        </tbody>
+    </table>
+</div>
+
+{% if total_pages > 1 %}
+<div class="adm-pagination">
+    {% if page > 1 %}
+        <a href="{{ url_for('site_admin.leagues', q=search, visibility=visibility, archived='1' if show_archived else '', page=page-1) }}">← Prev</a>
+    {% endif %}
+    <span>Page {{ page }} of {{ total_pages }}</span>
+    {% if page < total_pages %}
+        <a href="{{ url_for('site_admin.leagues', q=search, visibility=visibility, archived='1' if show_archived else '', page=page+1) }}">Next →</a>
+    {% endif %}
+</div>
+{% endif %}
+
+{% else %}
+<p style="color:var(--faintest);font-size:13px;">
+    {% if search or visibility %}No leagues matching those filters.{% else %}No leagues yet.{% endif %}
+</p>
+{% endif %}
+
+{% endblock %}
diff --git a/boker/templates/admin/user_detail.html b/boker/templates/admin/user_detail.html
new file mode 100644
index 0000000..95c27eb
--- /dev/null
+++ b/boker/templates/admin/user_detail.html
@@ -0,0 +1,168 @@
+{% extends "admin/base.html" %}
+{% block title %}{{ user.email }}{% endblock %}
+
+{% block breadcrumb %}
+    <div class="adm-header__breadcrumb">
+        <a href="{{ url_for('site_admin.users') }}">Users</a>
+        <span class="adm-header__sep">/</span>
+        <span class="adm-header__title">{{ user.email }}</span>
+    </div>
+{% endblock %}
+
+{% block content %}
+
+<div class="adm-card">
+    <div class="adm-card__title">Account</div>
+    <dl class="adm-kv">
+        <div class="adm-kv-row">
+            <dt>Email</dt>
+            <dd><b>{{ user.email }}</b></dd>
+        </div>
+        <div class="adm-kv-row">
+            <dt>User ID</dt>
+            <dd class="adm-mono">{{ user.id }}</dd>
+        </div>
+        <div class="adm-kv-row">
+            <dt>Joined</dt>
+            <dd>{{ user.created_at.strftime('%b %d, %Y at %H:%M UTC') }}</dd>
+        </div>
+        <div class="adm-kv-row">
+            <dt>Last login</dt>
+            <dd>{% if user.last_login_at %}{{ user.last_login_at.strftime('%b %d, %Y at %H:%M UTC') }}{% else %}<span style="color:var(--faintest)">Never</span>{% endif %}</dd>
+        </div>
+        <div class="adm-kv-row">
+            <dt>Status</dt>
+            <dd>
+                {% if user.disabled_at %}
+                    <span class="adm-pill adm-pill--disabled">Disabled</span>
+                    <span style="color:var(--faintest);font-size:12px;margin-left:6px;">since {{ user.disabled_at.strftime('%b %d, %Y') }}</span>
+                {% else %}
+                    <span class="adm-pill adm-pill--active">Active</span>
+                {% endif %}
+            </dd>
+        </div>
+        <div class="adm-kv-row">
+            <dt>Site admin</dt>
+            <dd>
+                {% if user.is_site_admin %}
+                    <span class="adm-pill adm-pill--admin">Yes</span>
+                {% else %}
+                    <span style="color:var(--faintest)">No</span>
+                {% endif %}
+            </dd>
+        </div>
+        <div class="adm-kv-row">
+            <dt>Leagues</dt>
+            <dd>{{ memberships | length }}</dd>
+        </div>
+    </dl>
+</div>
+
+<div class="adm-card">
+    <div class="adm-card__title">Actions</div>
+
+    <div class="adm-section" style="margin-bottom:20px;">
+        <div class="adm-section__title" style="margin-bottom:8px;">Password reset</div>
+        <div class="adm-actions">
+            <form class="adm-inline-form" method="post" action="{{ url_for('site_admin.send_reset', user_id=user.id) }}">
+                <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
+                <button class="adm-btn adm-btn--ghost" type="submit"{% if user.disabled_at %} disabled title="Account is disabled"{% endif %}>
+                    Send reset email
+                </button>
+            </form>
+            <a class="adm-btn adm-btn--ghost" href="{{ url_for('site_admin.user_detail', user_id=user.id, show_reset=1) }}">
+                Generate link (no email)
+            </a>
+        </div>
+        {% if reset_url %}
+        <div class="adm-reset-box">
+            <div class="adm-reset-box__label">Reset link — valid 1 hour</div>
+            <div class="adm-reset-box__url">{{ reset_url }}</div>
+        </div>
+        {% endif %}
+    </div>
+
+    <div class="adm-section" style="margin-bottom:20px;">
+        <div class="adm-section__title" style="margin-bottom:8px;">Set password directly</div>
+        <form class="adm-pass-form" method="post" action="{{ url_for('site_admin.admin_reset_password', user_id=user.id) }}">
+            <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
+            <input type="password" name="new_password" placeholder="New password (min 8 chars)" autocomplete="new-password">
+            <button class="adm-btn adm-btn--warn" type="submit">Set password</button>
+        </form>
+    </div>
+
+    {% if not viewing_self %}
+    <div class="adm-section" style="margin-bottom:20px;">
+        <div class="adm-section__title" style="margin-bottom:8px;">Account status</div>
+        <div class="adm-actions">
+            {% if user.disabled_at %}
+            <form class="adm-inline-form" method="post" action="{{ url_for('site_admin.enable_user', user_id=user.id) }}">
+                <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
+                <button class="adm-btn adm-btn--ghost" type="submit">Enable account</button>
+            </form>
+            {% else %}
+            <form class="adm-inline-form" method="post" action="{{ url_for('site_admin.disable_user', user_id=user.id) }}">
+                <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
+                <button class="adm-btn adm-btn--danger" type="submit">Disable account</button>
+            </form>
+            {% endif %}
+        </div>
+    </div>
+
+    <div class="adm-section">
+        <div class="adm-section__title" style="margin-bottom:8px;">Admin access</div>
+        <div class="adm-actions">
+            {% if user.is_site_admin %}
+            <form class="adm-inline-form" method="post" action="{{ url_for('site_admin.revoke_admin', user_id=user.id) }}">
+                <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
+                <button class="adm-btn adm-btn--danger" type="submit">Revoke admin</button>
+            </form>
+            {% else %}
+            <form class="adm-inline-form" method="post" action="{{ url_for('site_admin.grant_admin', user_id=user.id) }}">
+                <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
+                <button class="adm-btn adm-btn--ghost" type="submit">Grant admin</button>
+            </form>
+            {% endif %}
+        </div>
+    </div>
+    {% endif %}
+</div>
+
+{% if memberships %}
+<div class="adm-card">
+    <div class="adm-card__title">League memberships ({{ memberships | length }})</div>
+    <div class="adm-table-wrap" style="border:none;border-radius:0;margin:0 -20px -20px;">
+        <table class="adm-table">
+            <thead>
+                <tr>
+                    <th>League</th>
+                    <th>Role</th>
+                    <th>Visibility</th>
+                    <th>Joined</th>
+                </tr>
+            </thead>
+            <tbody>
+                {% for membership, league in memberships %}
+                <tr>
+                    <td>
+                        <a href="{{ url_for('site_admin.league_detail', league_id=league.id) }}">{{ league.name }}</a>
+                        {% if league.archived_at %}<span class="adm-pill adm-pill--archived" style="margin-left:4px;">archived</span>{% endif %}
+                    </td>
+                    <td><span class="adm-pill adm-pill--{{ membership.role }}">{{ membership.role }}</span></td>
+                    <td>
+                        {% if league.visibility == 'public' %}
+                            <span class="adm-pill adm-pill--public">Public</span>
+                        {% else %}
+                            <span class="adm-pill adm-pill--private">Private</span>
+                        {% endif %}
+                    </td>
+                    <td class="cell-muted">{{ membership.created_at.strftime('%b %d, %Y') }}</td>
+                </tr>
+                {% endfor %}
+            </tbody>
+        </table>
+    </div>
+</div>
+{% endif %}
+
+{% endblock %}
diff --git a/boker/templates/admin/users.html b/boker/templates/admin/users.html
new file mode 100644
index 0000000..80cc6c3
--- /dev/null
+++ b/boker/templates/admin/users.html
@@ -0,0 +1,68 @@
+{% extends "admin/base.html" %}
+{% block title %}Users{% endblock %}
+{% block page_title %}Users <span style="color:var(--faintest);font-weight:400;font-size:12px;margin-left:6px;">{{ total }}</span>{% endblock %}
+
+{% block content %}
+
+<form class="adm-search" method="get">
+    <input type="search" name="q" value="{{ search }}" placeholder="Search by email…" autofocus>
+    <button class="adm-btn adm-btn--primary" type="submit">Search</button>
+    {% if search %}<a class="adm-btn adm-btn--ghost" href="{{ url_for('site_admin.users') }}">Clear</a>{% endif %}
+</form>
+
+{% if users %}
+<div class="adm-table-wrap">
+    <table class="adm-table">
+        <thead>
+            <tr>
+                <th>Email</th>
+                <th>Joined</th>
+                <th>Last login</th>
+                <th>Leagues</th>
+                <th>Status</th>
+            </tr>
+        </thead>
+        <tbody>
+            {% for user in users %}
+            <tr>
+                <td>
+                    <a href="{{ url_for('site_admin.user_detail', user_id=user.id) }}">{{ user.email }}</a>
+                    {% if user.is_site_admin %}<span class="adm-pill adm-pill--admin" style="margin-left:4px;">admin</span>{% endif %}
+                </td>
+                <td class="cell-muted">{{ user.created_at.strftime('%b %d, %Y') }}</td>
+                <td class="cell-muted">
+                    {% if user.last_login_at %}{{ user.last_login_at.strftime('%b %d, %Y') }}{% else %}—{% endif %}
+                </td>
+                <td class="cell-muted">{{ league_counts.get(user.id, 0) }}</td>
+                <td>
+                    {% if user.disabled_at %}
+                        <span class="adm-pill adm-pill--disabled">Disabled</span>
+                    {% else %}
+                        <span class="adm-pill adm-pill--active">Active</span>
+                    {% endif %}
+                </td>
+            </tr>
+            {% endfor %}
+        </tbody>
+    </table>
+</div>
+
+{% if total_pages > 1 %}
+<div class="adm-pagination">
+    {% if page > 1 %}
+        <a href="{{ url_for('site_admin.users', q=search, page=page-1) }}">← Prev</a>
+    {% endif %}
+    <span>Page {{ page }} of {{ total_pages }}</span>
+    {% if page < total_pages %}
+        <a href="{{ url_for('site_admin.users', q=search, page=page+1) }}">Next →</a>
+    {% endif %}
+</div>
+{% endif %}
+
+{% else %}
+<p style="color:var(--faintest);font-size:13px;">
+    {% if search %}No users matching "{{ search }}".{% else %}No users yet.{% endif %}
+</p>
+{% endif %}
+
+{% endblock %}
diff --git a/boker/templates/league_settings.html b/boker/templates/league_settings.html
index 4f316fb..54ba9cd 100644
--- a/boker/templates/league_settings.html
+++ b/boker/templates/league_settings.html
@@ -64,18 +64,33 @@
                     <span>Email</span>
                     <input type="email" name="email" placeholder="friend@example.com" required>
                 </label>
-                <label style="flex:0 0 130px;">
+                <label style="flex:0 0 140px;">
                     <span>Role</span>
                     <select name="role">
                         <option value="manager">Manager</option>
                         <option value="viewer">Viewer</option>
                     </select>
                 </label>
-                <button class="btn btn--primary btn--sm" type="submit" style="flex:0 0 auto;margin-bottom:1px;">Send invite</button>
+                <button class="btn btn--primary" type="submit" style="flex:0 0 auto;">Send invite</button>
             </div>
         </form>
     </div>
 
+    {% if has_managers %}
+    <div class="panel">
+        <div class="panel__head">
+            <div>
+                <p class="kicker" style="margin:0;">Ownership</p>
+                <h2 class="panel__title">Transfer league ownership</h2>
+            </div>
+        </div>
+        <div class="panel__body">
+            <p class="muted-text">Transfer ownership of this league to one of your managers. You will become a manager and lose owner privileges.</p>
+            <button class="btn btn--ghost btn--sm" type="button" data-modal="modal-transfer" style="margin-top:8px;">Transfer ownership</button>
+        </div>
+    </div>
+    {% endif %}
+
     <div class="panel">
         <div class="panel__head">
             <div>
@@ -96,6 +111,48 @@
 
 </div>
 
+{% if has_managers %}
+<div class="modal-backdrop" id="modal-transfer" hidden>
+    <div class="modal-card">
+        <div class="modal-card__head">
+            <h2 style="font-size:18px;margin:0;">Transfer ownership</h2>
+        </div>
+        <p class="modal-card__text">
+            Select a manager to become the new owner. You will become a manager and lose owner privileges. This cannot be undone without their help.<br><br>
+            Type the league name to confirm:
+        </p>
+        <form method="post" action="{{ url_for('leagues.transfer_ownership', league_ref=league.url_ref) }}">
+            <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
+            <div style="padding:0 20px 12px;">
+                <label style="font-size:12px;color:var(--text-2);display:block;margin-bottom:4px;">New owner</label>
+                <select name="new_owner_user_id" style="width:100%;padding:8px 10px;border:1px solid var(--border-strong);border-radius:var(--r-sm);background:var(--field);color:var(--text);font-family:inherit;font-size:13px;">
+                    {% for membership, member_user in members %}
+                    {% if membership.role == 'manager' %}
+                    <option value="{{ member_user.id }}">{{ member_user.email }}</option>
+                    {% endif %}
+                    {% endfor %}
+                </select>
+            </div>
+            <div style="padding:0 20px 16px;">
+                <input
+                    class="modal-confirm-input"
+                    type="text"
+                    name="confirm_name"
+                    placeholder="{{ league.name }}"
+                    autocomplete="off"
+                    data-match="{{ league.name }}"
+                    data-target="transfer-confirm-btn"
+                >
+            </div>
+            <div class="modal-card__actions">
+                <button class="btn btn--ghost btn--sm" type="button" data-close-modal>Cancel</button>
+                <button class="btn btn--sm btn--danger" id="transfer-confirm-btn" type="submit" disabled>Transfer ownership</button>
+            </div>
+        </form>
+    </div>
+</div>
+{% endif %}
+
 <div class="modal-backdrop" id="modal-archive" hidden>
     <div class="modal-card">
         <div class="modal-card__head">
diff --git a/migrations/versions/0003_site_admin.py b/migrations/versions/0003_site_admin.py
new file mode 100644
index 0000000..06fe0ac
--- /dev/null
+++ b/migrations/versions/0003_site_admin.py
@@ -0,0 +1,32 @@
+"""add is_site_admin to users
+
+Revision ID: 0003_site_admin
+Revises: 0002_league_public_key
+Create Date: 2026-06-24
+"""
+from __future__ import annotations
+
+import sqlalchemy as sa
+from alembic import op
+
+revision = "0003_site_admin"
+down_revision = "0002_league_public_key"
+branch_labels = None
+depends_on = None
+
+
+def upgrade() -> None:
+    with op.batch_alter_table("users") as batch_op:
+        batch_op.add_column(
+            sa.Column(
+                "is_site_admin",
+                sa.Boolean(),
+                nullable=False,
+                server_default=sa.false(),
+            )
+        )
+
+
+def downgrade() -> None:
+    with op.batch_alter_table("users") as batch_op:
+        batch_op.drop_column("is_site_admin")

From 54fa80f06ead6dd934ce6e2ee94720f225adb6f4 Mon Sep 17 00:00:00 2001
From: SowinskiBraeden <braeden@sowinski.dev>
Date: Wed, 24 Jun 2026 23:44:36 -0700
Subject: [PATCH 45/83] email verification

---
 README.md                              |  2 +
 boker/__init__.py                      | 12 +++-
 boker/auth.py                          | 11 ++++
 boker/config.py                        |  2 +
 boker/emails.py                        | 50 ++++++++++++++-
 boker/routes/account.py                | 77 ++++++++++++++++++++++-
 boker/routes/site_admin.py             | 37 ++++++++++++
 boker/static/css/admin.css             |  1 +
 boker/static/css/style.css             | 41 +++++++++++++
 boker/templates/account_settings.html  | 17 ++++++
 boker/templates/admin/user_detail.html | 23 +++++++
 boker/templates/admin/users.html       |  1 +
 boker/templates/base.html              | 10 +++
 tests/test_emails.py                   | 84 ++++++++++++++++++++++++++
 14 files changed, 363 insertions(+), 5 deletions(-)
 create mode 100644 tests/test_emails.py

diff --git a/README.md b/README.md
index 862152d..6a38ad8 100644
--- a/README.md
+++ b/README.md
@@ -85,9 +85,11 @@ All variables are read from `.env` at startup. Copy `.env.example` as a starting
 | `MAIL_SERVER` | No | _(empty)_ | SMTP server hostname. Email features are disabled if left blank. |
 | `MAIL_PORT` | No | `587` | SMTP port. |
 | `MAIL_USE_TLS` | No | `true` | Set to `false` to disable STARTTLS. |
+| `MAIL_USE_SSL` | No | `false` | Set to `true` for implicit TLS SMTP, commonly port `465`. |
 | `MAIL_USERNAME` | No | _(empty)_ | SMTP username / API key. |
 | `MAIL_PASSWORD` | No | _(empty)_ | SMTP password / API key secret. |
 | `MAIL_DEFAULT_SENDER` | No | `noreply@myboker.org` | From address on outgoing mail. |
+| `MAIL_SEND_TIMEOUT` | No | `5` | Maximum seconds to wait on an SMTP send attempt. |
 | `FLASK_DEBUG` | No | `0` | Set to `1` to enable the Flask reloader and debugger. |
 
 ## Running tests
diff --git a/boker/__init__.py b/boker/__init__.py
index b68942d..493a4e0 100644
--- a/boker/__init__.py
+++ b/boker/__init__.py
@@ -36,10 +36,18 @@ def create_app(config_overrides: dict | None = None) -> Flask:
 
     @app.context_processor
     def inject_globals() -> dict:
+        uid = current_user_id()
+        email_verified = None
+        if uid and db is not None and database_extensions_available():
+            from .db_models import User
+            user = db.session.get(User, uid)
+            if user is not None:
+                email_verified = user.email_verified_at is not None
         return {
             "app_version": app.config["APP_VERSION"],
-            "current_user_id": current_user_id(),
-            "is_logged_in": is_logged_in(),
+            "current_user_id": uid,
+            "is_logged_in": uid is not None,
+            "email_verified": email_verified,
         }
 
     app.register_blueprint(public_bp)
diff --git a/boker/auth.py b/boker/auth.py
index 14c9794..2dfeeba 100644
--- a/boker/auth.py
+++ b/boker/auth.py
@@ -23,6 +23,17 @@ def verify_reset_token(token: str, max_age: int = 3600) -> str | None:
         return None
 
 
+def generate_email_verification_token(user_id: str) -> str:
+    return _serializer().dumps(user_id, salt="email-verify")
+
+
+def verify_email_verification_token(token: str, max_age: int = 86400) -> str | None:
+    try:
+        return _serializer().loads(token, salt="email-verify", max_age=max_age)
+    except (SignatureExpired, BadSignature):
+        return None
+
+
 def generate_invite_token(league_id: str, email: str, role: str, invited_by_user_id: str) -> str:
     return _serializer().dumps(
         {"league_id": league_id, "email": email, "role": role, "invited_by": invited_by_user_id},
diff --git a/boker/config.py b/boker/config.py
index a5f5c85..68fed14 100644
--- a/boker/config.py
+++ b/boker/config.py
@@ -44,9 +44,11 @@ class Config:
     MAIL_SERVER: str = os.getenv("MAIL_SERVER", "")
     MAIL_PORT: int = int(os.getenv("MAIL_PORT", "587"))
     MAIL_USE_TLS: bool = os.getenv("MAIL_USE_TLS", "true").lower() in ("true", "1", "yes")
+    MAIL_USE_SSL: bool = os.getenv("MAIL_USE_SSL", "false").lower() in ("true", "1", "yes")
     MAIL_USERNAME: str | None = os.getenv("MAIL_USERNAME") or None
     MAIL_PASSWORD: str | None = os.getenv("MAIL_PASSWORD") or None
     MAIL_DEFAULT_SENDER: str = os.getenv("MAIL_DEFAULT_SENDER", "noreply@myboker.org")
+    MAIL_SEND_TIMEOUT: float = float(os.getenv("MAIL_SEND_TIMEOUT", "5"))
 
 
 class ProductionConfig(Config):
diff --git a/boker/emails.py b/boker/emails.py
index 7b02ddf..bc3a20d 100644
--- a/boker/emails.py
+++ b/boker/emails.py
@@ -1,12 +1,43 @@
 #!/usr/bin/env python3
 from __future__ import annotations
 
+from collections.abc import Iterator
+from contextlib import contextmanager
+import socket
+
 from flask import current_app
 from flask_mail import Message
 
 from .extensions import mail
 
 
+class MailNotConfiguredError(RuntimeError):
+    pass
+
+
+@contextmanager
+def _mail_socket_timeout() -> Iterator[None]:
+    timeout = current_app.config.get("MAIL_SEND_TIMEOUT")
+    if timeout is None:
+        yield
+        return
+
+    previous_timeout = socket.getdefaulttimeout()
+    socket.setdefaulttimeout(float(timeout))
+    try:
+        yield
+    finally:
+        socket.setdefaulttimeout(previous_timeout)
+
+
+def _send(msg: Message) -> None:
+    if not str(current_app.config.get("MAIL_SERVER", "")).strip():
+        raise MailNotConfiguredError("MAIL_SERVER is not configured.")
+
+    with _mail_socket_timeout():
+        mail.send(msg)
+
+
 def send_password_reset(to_email: str, reset_url: str) -> None:
     msg = Message(
         subject="Reset your myboker.org password",
@@ -19,7 +50,22 @@ def send_password_reset(to_email: str, reset_url: str) -> None:
         ),
         sender=current_app.config.get("MAIL_DEFAULT_SENDER"),
     )
-    mail.send(msg)
+    _send(msg)
+
+
+def send_email_verification(to_email: str, verify_url: str) -> None:
+    msg = Message(
+        subject="Verify your myboker.org email address",
+        recipients=[to_email],
+        body=(
+            f"Thanks for signing up for myboker.org!\n\n"
+            f"Please verify your email address by clicking the link below:\n\n"
+            f"{verify_url}\n\n"
+            f"This link expires in 24 hours. If you did not create an account, you can ignore this email."
+        ),
+        sender=current_app.config.get("MAIL_DEFAULT_SENDER"),
+    )
+    _send(msg)
 
 
 def send_league_invite(to_email: str, league_name: str, invite_url: str, invited_by_email: str) -> None:
@@ -34,4 +80,4 @@ def send_league_invite(to_email: str, league_name: str, invite_url: str, invited
         ),
         sender=current_app.config.get("MAIL_DEFAULT_SENDER"),
     )
-    mail.send(msg)
+    _send(msg)
diff --git a/boker/routes/account.py b/boker/routes/account.py
index 4eee3b3..3fb2254 100644
--- a/boker/routes/account.py
+++ b/boker/routes/account.py
@@ -7,6 +7,7 @@ from flask import Blueprint, flash, redirect, render_template, request, url_for
 
 from ..auth import (
     current_user_id,
+    generate_email_verification_token,
     generate_invite_token,
     generate_reset_token,
     hash_password,
@@ -14,6 +15,7 @@ from ..auth import (
     log_user_out,
     login_required,
     normalize_email,
+    verify_email_verification_token,
     verify_invite_token,
     verify_password,
     verify_reset_token,
@@ -67,7 +69,16 @@ def register():
             user = create_user(email, password)
             db.session.commit()
             log_user_in(user.id)
-            flash("Account created.", "success")
+            try:
+                from flask import current_app
+                from ..emails import send_email_verification
+                token = generate_email_verification_token(user.id)
+                base_url = current_app.config.get("APP_BASE_URL", "").rstrip("/")
+                verify_url = f"{base_url}{url_for('account.verify_email', token=token)}"
+                send_email_verification(user.email, verify_url)
+            except Exception:
+                pass
+            flash("Account created. Check your email to verify your address.", "success")
             return redirect(url_for("leagues.new"))
 
     return render_template("account_register.html", form=form)
@@ -343,3 +354,67 @@ def accept_invite(token):
     db.session.commit()
     flash(f"Welcome to {league.name}! You joined as {data['role']}.", "success")
     return redirect(url_for("leagues.dashboard", league_ref=league.url_ref))
+
+
+@account_bp.get("/verify-email/<token>")
+def verify_email(token):
+    user_id = verify_email_verification_token(token)
+    if user_id is None:
+        flash("That verification link is invalid or has expired.", "error")
+        return redirect(url_for("account.settings") if current_user_id() else url_for("account.login"))
+
+    if not db_ready():
+        flash("Account database is not available.", "error")
+        return redirect(url_for("public.home"))
+
+    from ..db_models import User, utc_now
+
+    user = db.session.get(User, user_id)
+    if user is None or user.disabled_at is not None:
+        flash("That verification link is invalid or has expired.", "error")
+        return redirect(url_for("public.home"))
+
+    if user.email_verified_at is not None:
+        flash("Your email address is already verified.", "info")
+        return redirect(url_for("account.settings"))
+
+    user.email_verified_at = utc_now()
+    db.session.commit()
+    flash("Email address verified.", "success")
+    return redirect(url_for("account.settings"))
+
+
+@account_bp.post("/resend-verification")
+@login_required
+def resend_verification():
+    if not db_ready():
+        flash("Account database is not available.", "error")
+        return redirect(url_for("account.settings"))
+
+    from flask import current_app
+
+    from ..db_models import User
+    from ..emails import MailNotConfiguredError, send_email_verification
+
+    user = db.session.get(User, current_user_id())
+    if user is None:
+        flash("User not found.", "error")
+        return redirect(url_for("account.settings"))
+
+    if user.email_verified_at is not None:
+        flash("Your email address is already verified.", "info")
+        return redirect(url_for("account.settings"))
+
+    try:
+        token = generate_email_verification_token(user.id)
+        base_url = current_app.config.get("APP_BASE_URL", "").rstrip("/")
+        verify_url = f"{base_url}{url_for('account.verify_email', token=token)}"
+        send_email_verification(user.email, verify_url)
+        flash("Verification email sent. Check your inbox.", "success")
+    except MailNotConfiguredError:
+        flash("Could not send verification email. Please try again later.", "error")
+    except Exception:
+        current_app.logger.exception("Failed to send verification email to %s", user.email)
+        flash("Could not send verification email. Please try again later.", "error")
+
+    return redirect(url_for("account.settings"))
diff --git a/boker/routes/site_admin.py b/boker/routes/site_admin.py
index 1e9f4e7..8a1f538 100644
--- a/boker/routes/site_admin.py
+++ b/boker/routes/site_admin.py
@@ -283,6 +283,43 @@ def send_reset(user_id: str):
     return redirect(url_for("site_admin.user_detail", user_id=user_id, show_reset="1"))
 
 
+@site_admin_bp.post("/users/<user_id>/send-verification")
+@site_admin_required
+def send_verification(user_id: str):
+    from flask import current_app
+
+    from ..auth import generate_email_verification_token
+    from ..db_models import User
+    from ..emails import MailNotConfiguredError, send_email_verification
+
+    user = db.session.get(User, user_id)
+    if user is None:
+        flash("User not found.", "error")
+        return redirect(url_for("site_admin.users"))
+
+    if user.disabled_at is not None:
+        flash("Cannot send a verification email to a disabled account.", "error")
+        return redirect(url_for("site_admin.user_detail", user_id=user_id))
+
+    if user.email_verified_at is not None:
+        flash("That account's email is already verified.", "error")
+        return redirect(url_for("site_admin.user_detail", user_id=user_id))
+
+    try:
+        token = generate_email_verification_token(user.id)
+        base_url = current_app.config.get("APP_BASE_URL", "").rstrip("/")
+        verify_url = f"{base_url}{url_for('account.verify_email', token=token)}"
+        send_email_verification(user.email, verify_url)
+        flash(f"Verification email sent to {user.email}.", "success")
+    except MailNotConfiguredError:
+        flash("Email not sent (mail not configured).", "error")
+    except Exception:
+        current_app.logger.exception("Failed to send verification email to %s", user.email)
+        flash("Email not sent (mail not configured).", "error")
+
+    return redirect(url_for("site_admin.user_detail", user_id=user_id))
+
+
 @site_admin_bp.post("/users/<user_id>/disable")
 @site_admin_required
 def disable_user(user_id: str):
diff --git a/boker/static/css/admin.css b/boker/static/css/admin.css
index 2b40188..7eeaae6 100644
--- a/boker/static/css/admin.css
+++ b/boker/static/css/admin.css
@@ -372,6 +372,7 @@
 .adm-pill--manager { background: var(--warn-tint);    color: var(--warn);   border: 1px solid var(--warn-tint-bd); }
 .adm-pill--viewer  { background: var(--surface-raised); color: var(--faintest); border: 1px solid var(--border); }
 .adm-pill--archived{ background: var(--surface-raised); color: var(--faintest-2); border: 1px solid var(--border); }
+.adm-pill--warn    { background: var(--warn-tint);     color: var(--warn);   border: 1px solid var(--warn-tint-bd); }
 
 /* ---- search bar ---- */
 .adm-search {
diff --git a/boker/static/css/style.css b/boker/static/css/style.css
index bc6975b..c8cd187 100644
--- a/boker/static/css/style.css
+++ b/boker/static/css/style.css
@@ -3359,3 +3359,44 @@ select.control { cursor: pointer; }
 .card-menu__item:hover { background: var(--field); color: var(--text); }
 .card-menu__item--warn { color: var(--neg); }
 .card-menu__item--warn:hover { background: var(--neg-tint); color: var(--neg); }
+
+/* ================================================================
+   EMAIL VERIFICATION
+   ================================================================ */
+.verify-banner {
+  display: flex;
+  align-items: center;
+  gap: 14px;
+  padding: 10px 20px;
+  background: var(--warn-tint);
+  border-bottom: 1px solid var(--warn-tint-bd);
+  font: 400 13px/1.4 var(--font-ui);
+  color: var(--warn);
+  flex-wrap: wrap;
+}
+.verify-banner__btn {
+  all: unset;
+  cursor: pointer;
+  font: 400 13px/1.4 var(--font-ui);
+  color: var(--warn);
+  text-decoration: underline;
+  white-space: nowrap;
+}
+.verify-banner__btn:hover { opacity: .8; }
+
+.verify-status {
+  font: 400 12px/1 var(--font-ui);
+  margin: 0 0 4px;
+  letter-spacing: .02em;
+}
+.verify-status--ok  { color: var(--pos); }
+.verify-status--warn { color: var(--warn); }
+
+.link-btn {
+  all: unset;
+  cursor: pointer;
+  font: inherit;
+  color: inherit;
+  text-decoration: underline;
+}
+.link-btn:hover { opacity: .8; }
diff --git a/boker/templates/account_settings.html b/boker/templates/account_settings.html
index 8bbe18d..6b9b367 100644
--- a/boker/templates/account_settings.html
+++ b/boker/templates/account_settings.html
@@ -16,12 +16,29 @@
 
 <div class="stack">
 
+    {% if not user.email_verified_at %}
+    <form class="panel form-card" method="post" action="{{ url_for('account.resend_verification') }}">
+        <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
+        <div>
+            <p class="eyebrow" style="color:var(--warn);">Verification</p>
+            <h2 class="panel__title" style="margin-top:4px;">Email not verified</h2>
+        </div>
+        <p class="muted-text" style="margin:0;">Your email address hasn't been verified yet. Check your inbox or resend the email below.</p>
+        <div>
+            <button class="btn btn--primary" type="submit">Resend verification email</button>
+        </div>
+    </form>
+    {% endif %}
+
     <form class="panel form-card" method="post" action="{{ url_for('account.update_email') }}">
         <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
         <div>
             <p class="eyebrow">Profile</p>
             <h2 class="panel__title" style="margin-top:4px;">Email address</h2>
         </div>
+        {% if user.email_verified_at %}
+        <p class="verify-status verify-status--ok">Verified on {{ user.email_verified_at.strftime('%b %d, %Y') }}</p>
+        {% endif %}
         <label>
             <span>Email</span>
             <input type="email" name="email" value="{{ user.email }}" required autocomplete="email">
diff --git a/boker/templates/admin/user_detail.html b/boker/templates/admin/user_detail.html
index 95c27eb..4a7b78c 100644
--- a/boker/templates/admin/user_detail.html
+++ b/boker/templates/admin/user_detail.html
@@ -30,6 +30,17 @@
             <dt>Last login</dt>
             <dd>{% if user.last_login_at %}{{ user.last_login_at.strftime('%b %d, %Y at %H:%M UTC') }}{% else %}<span style="color:var(--faintest)">Never</span>{% endif %}</dd>
         </div>
+        <div class="adm-kv-row">
+            <dt>Email verified</dt>
+            <dd>
+                {% if user.email_verified_at %}
+                    <span class="adm-pill adm-pill--active">Yes</span>
+                    <span style="color:var(--faintest);font-size:12px;margin-left:6px;">{{ user.email_verified_at.strftime('%b %d, %Y at %H:%M UTC') }}</span>
+                {% else %}
+                    <span class="adm-pill adm-pill--warn">No</span>
+                {% endif %}
+            </dd>
+        </div>
         <div class="adm-kv-row">
             <dt>Status</dt>
             <dd>
@@ -82,6 +93,18 @@
         {% endif %}
     </div>
 
+    <div class="adm-section" style="margin-bottom:20px;">
+        <div class="adm-section__title" style="margin-bottom:8px;">Email verification</div>
+        <div class="adm-actions">
+            <form class="adm-inline-form" method="post" action="{{ url_for('site_admin.send_verification', user_id=user.id) }}">
+                <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
+                <button class="adm-btn adm-btn--ghost" type="submit"{% if user.disabled_at or user.email_verified_at %} disabled title="{% if user.email_verified_at %}Already verified{% else %}Account is disabled{% endif %}"{% endif %}>
+                    Send verification email
+                </button>
+            </form>
+        </div>
+    </div>
+
     <div class="adm-section" style="margin-bottom:20px;">
         <div class="adm-section__title" style="margin-bottom:8px;">Set password directly</div>
         <form class="adm-pass-form" method="post" action="{{ url_for('site_admin.admin_reset_password', user_id=user.id) }}">
diff --git a/boker/templates/admin/users.html b/boker/templates/admin/users.html
index 80cc6c3..9a904b5 100644
--- a/boker/templates/admin/users.html
+++ b/boker/templates/admin/users.html
@@ -28,6 +28,7 @@
                 <td>
                     <a href="{{ url_for('site_admin.user_detail', user_id=user.id) }}">{{ user.email }}</a>
                     {% if user.is_site_admin %}<span class="adm-pill adm-pill--admin" style="margin-left:4px;">admin</span>{% endif %}
+                    {% if not user.email_verified_at %}<span class="adm-pill adm-pill--warn" style="margin-left:4px;">unverified</span>{% endif %}
                 </td>
                 <td class="cell-muted">{{ user.created_at.strftime('%b %d, %Y') }}</td>
                 <td class="cell-muted">
diff --git a/boker/templates/base.html b/boker/templates/base.html
index 1cb7909..2a261a8 100644
--- a/boker/templates/base.html
+++ b/boker/templates/base.html
@@ -63,6 +63,16 @@
             {% endif %}
         {% endwith %}
 
+        {% if is_logged_in and email_verified is not none and not email_verified %}
+        <div class="verify-banner">
+            <span>Your email address hasn't been verified.</span>
+            <form method="post" action="{{ url_for('account.resend_verification') }}" style="margin:0;display:inline;">
+                <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
+                <button class="verify-banner__btn" type="submit">Resend verification email</button>
+            </form>
+        </div>
+        {% endif %}
+
         {% block content %}{% endblock %}
 
         <footer class="site-footer" aria-label="Site footer">
diff --git a/tests/test_emails.py b/tests/test_emails.py
new file mode 100644
index 0000000..9ac1182
--- /dev/null
+++ b/tests/test_emails.py
@@ -0,0 +1,84 @@
+import socket
+import tempfile
+import unittest
+from pathlib import Path
+from unittest.mock import patch
+
+from flask_mail import Message
+
+from boker import create_app
+from boker.db import db
+from boker.emails import MailNotConfiguredError, send_email_verification
+from boker.repositories.leagues import create_user
+
+
+class EmailDeliveryTests(unittest.TestCase):
+    def test_blank_mail_server_fails_before_smtp_send(self):
+        app = create_app({"MAIL_SERVER": "", "TESTING": True})
+
+        with app.app_context():
+            with patch("boker.emails.mail.send") as send:
+                with self.assertRaises(MailNotConfiguredError):
+                    send_email_verification("user@example.com", "http://localhost/verify")
+
+        send.assert_not_called()
+
+    def test_smtp_send_uses_configured_socket_timeout(self):
+        app = create_app({"MAIL_SERVER": "smtp.example.com", "MAIL_SEND_TIMEOUT": 1.5, "TESTING": True})
+        msg = Message(
+            subject="Test",
+            recipients=["user@example.com"],
+            body="body",
+            sender="noreply@example.com",
+        )
+        observed_timeout = None
+
+        def capture_timeout(_msg):
+            nonlocal observed_timeout
+            observed_timeout = socket.getdefaulttimeout()
+
+        with app.app_context():
+            previous_timeout = socket.getdefaulttimeout()
+            with patch("boker.emails.mail.send", side_effect=capture_timeout):
+                from boker.emails import _send
+
+                _send(msg)
+
+        self.assertEqual(observed_timeout, 1.5)
+        self.assertEqual(socket.getdefaulttimeout(), previous_timeout)
+
+    def test_resend_verification_returns_when_mail_is_disabled(self):
+        with tempfile.TemporaryDirectory() as tmpdir:
+            db_path = Path(tmpdir) / "test.sqlite3"
+            app = create_app(
+                {
+                    "SQLALCHEMY_DATABASE_URI": f"sqlite:///{db_path}",
+                    "MAIL_SERVER": "",
+                    "TESTING": True,
+                    "WTF_CSRF_ENABLED": False,
+                }
+            )
+
+            with app.app_context():
+                db.create_all()
+                user = create_user("user@example.com", "password123")
+                db.session.commit()
+                user_id = user.id
+
+            with app.test_client() as client:
+                with client.session_transaction() as flask_session:
+                    flask_session["user_id"] = user_id
+
+                response = client.post("/account/resend-verification")
+
+            with app.app_context():
+                db.session.remove()
+                db.drop_all()
+                db.engine.dispose()
+
+        self.assertEqual(response.status_code, 302)
+        self.assertEqual(response.headers["Location"], "/account/settings")
+
+
+if __name__ == "__main__":
+    unittest.main()

From 988f170ea4f65ed588ce5b60e7d2a19a2e0a8fc1 Mon Sep 17 00:00:00 2001
From: SowinskiBraeden <braeden@sowinski.dev>
Date: Thu, 25 Jun 2026 01:02:15 -0700
Subject: [PATCH 46/83] fix imports

---
 routes/leagues.py | 44 +++++++++++++++++++++++++++++++++++++++++++-
 1 file changed, 43 insertions(+), 1 deletion(-)

diff --git a/routes/leagues.py b/routes/leagues.py
index 44bcb13..4d27d0f 100644
--- a/routes/leagues.py
+++ b/routes/leagues.py
@@ -1291,6 +1291,8 @@ def import_ledger_csv(league_ref: str):
         flash(f"CSV header mismatch. Expected: {', '.join(CSV_HEADERS)}", "error")
         return redirect(url_for("leagues.ledger", **league_url_values(league)))
 
+    from db_models import PokerSession, make_session
+
     sessions = list_sessions_for_league(league.id)
     session_by_ref = {session_event_ref(s): s for s in sessions}
 
@@ -1303,6 +1305,43 @@ def import_ledger_csv(league_ref: str):
         if e.legacy_event_id
     }
 
+    # Auto-create any sessions referenced in the CSV that don't exist yet.
+    # Refs are "YYYY-MM-DD-NN" so we can recover exact date and sequence.
+    missing_refs: set[str] = set()
+    for row in csv.DictReader(lines):
+        ref = row.get("session_id", "").strip()
+        if ref and ref not in session_by_ref:
+            missing_refs.add(ref)
+
+    sessions_created = 0
+    for ref in sorted(missing_refs):
+        try:
+            date_part, seq_part = ref.rsplit("-", 1)
+            session_date = date.fromisoformat(date_part)
+            sequence = int(seq_part)
+        except (ValueError, IndexError):
+            continue  # malformed ref — row will produce a clear error below
+
+        existing = PokerSession.query.filter_by(
+            league_id=league.id,
+            session_date=session_date,
+            sequence_on_date=sequence,
+        ).one_or_none()
+        if existing:
+            session_by_ref[ref] = existing
+            continue
+
+        new_session = make_session(
+            league_id=league.id,
+            session_date=session_date,
+            sequence_on_date=sequence,
+            status="closed",
+        )
+        db.session.add(new_session)
+        db.session.flush()
+        session_by_ref[ref] = new_session
+        sessions_created += 1
+
     errors: list[str] = []
     queued: list[dict] = []
     skipped = 0
@@ -1373,5 +1412,8 @@ def import_ledger_csv(league_ref: str):
     db.session.commit()
     s_count = f"{len(queued)} event{'s' if len(queued) != 1 else ''}"
     s_skip = f"{skipped} duplicate{'s' if skipped != 1 else ''}"
-    flash(f"Imported {s_count}, skipped {s_skip}.", "success")
+    parts = [f"Imported {s_count}", f"skipped {s_skip}"]
+    if sessions_created:
+        parts.append(f"created {sessions_created} session{'s' if sessions_created != 1 else ''}")
+    flash(", ".join(parts) + ".", "success")
     return redirect(url_for("leagues.ledger", **league_url_values(league)))

From 56c9a1084cbb31c6d503ce414d8e5063f002413f Mon Sep 17 00:00:00 2001
From: SowinskiBraeden <braeden@sowinski.dev>
Date: Thu, 25 Jun 2026 01:05:38 -0700
Subject: [PATCH 47/83] create player on import

---
 routes/leagues.py | 24 +++++++++++++++++++++++-
 1 file changed, 23 insertions(+), 1 deletion(-)

diff --git a/routes/leagues.py b/routes/leagues.py
index 4d27d0f..d7032f3 100644
--- a/routes/leagues.py
+++ b/routes/leagues.py
@@ -1256,7 +1256,7 @@ def import_ledger_csv(league_ref: str):
         list_ledger_events_for_league,
         session_event_ref,
     )
-    from league_repositories import list_players_for_league, list_sessions_for_league
+    from league_repositories import create_player, list_players_for_league, list_sessions_for_league, unique_player_slug
     from storage import CSV_HEADERS
 
     league = require_league(league_ref, {"owner", "manager"})
@@ -1342,6 +1342,26 @@ def import_ledger_csv(league_ref: str):
         session_by_ref[ref] = new_session
         sessions_created += 1
 
+    # Auto-create any players referenced in the CSV that don't exist yet.
+    # Only rows that need a player (not note/session_open/session_close) are considered.
+    non_player_types = {"note", "session_open", "session_close"}
+    missing_players: set[str] = set()
+    for row in csv.DictReader(lines):
+        raw_type = row.get("event_type", "").strip()
+        if canonical_event_type(raw_type) in non_player_types:
+            continue
+        name = row.get("player_name", "").strip()
+        if name and name.casefold() not in player_by_name:
+            missing_players.add(name)
+
+    players_created = 0
+    for name in sorted(missing_players):
+        slug = unique_player_slug(league.id, name)
+        new_player = create_player(league.id, name, slug)
+        db.session.flush()
+        player_by_name[name.casefold()] = new_player
+        players_created += 1
+
     errors: list[str] = []
     queued: list[dict] = []
     skipped = 0
@@ -1415,5 +1435,7 @@ def import_ledger_csv(league_ref: str):
     parts = [f"Imported {s_count}", f"skipped {s_skip}"]
     if sessions_created:
         parts.append(f"created {sessions_created} session{'s' if sessions_created != 1 else ''}")
+    if players_created:
+        parts.append(f"created {players_created} player{'s' if players_created != 1 else ''}")
     flash(", ".join(parts) + ".", "success")
     return redirect(url_for("leagues.ledger", **league_url_values(league)))

From a5cb488b9168118ca16b0cee900db85e151d9c61 Mon Sep 17 00:00:00 2001
From: SowinskiBraeden <braeden@sowinski.dev>
Date: Fri, 26 Jun 2026 21:24:00 -0700
Subject: [PATCH 48/83] visual redesign: landing, dashboard overview, session
 calendar (2.3.1)

- Redesign landing page hero with split layout, features section, and in-app session/result demos
- Add fixed sidebar scroll isolation (app-shell overflow lock pattern)
- Redesign leagues index cards with initial badge, podium leader chips, and action links
- Redesign league dashboard: color-coded nav tiles, cash/stats overview strip, session history heatmap calendar
- Dashboard cash stats use real cash only (excludes rollovers and carry-ins)
- Session history calendar: JS-driven full-year grid, year navigation, hover tooltips, full-width responsive layout
- Bump leaderboard tile color from gold to blue (distinct from ledger orange)
- Bump version to 2.3.1
---
 config.py                            |    2 +-
 routes/leagues.py                    |   45 +
 static/css/style.css                 | 2081 ++++++++++++++++++++++++--
 static/css/tokens.css                |   67 +-
 static/favicon.svg                   |    2 +-
 templates/_league_sidebar.html       |   87 ++
 templates/account_login.html         |   81 +-
 templates/account_register.html      |   85 +-
 templates/account_settings.html      |   15 +-
 templates/base.html                  |   23 +-
 templates/explore.html               |   54 +-
 templates/landing.html               |  420 ++++--
 templates/league_dashboard.html      |  360 ++++-
 templates/league_leaderboard.html    |    9 +-
 templates/league_ledger.html         |    3 +-
 templates/league_player_detail.html  |    3 +-
 templates/league_players.html        |   10 +-
 templates/league_session_detail.html |    3 +-
 templates/league_session_view.html   |    4 +-
 templates/league_sessions.html       |   10 +-
 templates/league_settings.html       |    3 +-
 templates/leagues_index.html         |  205 ++-
 22 files changed, 2975 insertions(+), 597 deletions(-)
 create mode 100644 templates/_league_sidebar.html

diff --git a/config.py b/config.py
index c5a83af..edb1d78 100644
--- a/config.py
+++ b/config.py
@@ -9,7 +9,7 @@ DATA_PATH = BASE_DIR / "data" / "entries.csv"
 DEFAULT_DATABASE_URL = f"sqlite:///{BASE_DIR / 'data' / 'boker-dev.sqlite3'}"
 
 ELIGIBLE_MIN_SESSIONS = 3
-APP_VERSION = "2.3.0"
+APP_VERSION = "2.3.1"
 
 
 def load_local_env(env_path: Path) -> None:
diff --git a/routes/leagues.py b/routes/leagues.py
index d7032f3..da5bf33 100644
--- a/routes/leagues.py
+++ b/routes/leagues.py
@@ -222,16 +222,61 @@ def dashboard(league_ref: str):
         return redirect(url_for("public.home"))
 
     from league_repositories import league_counts, user_has_league_role
+    from ledger_repositories import list_event_rows_for_league
 
     league, resp = get_league_with_visibility_gate(league_ref)
     if resp:
         return resp
     is_owner = user_has_league_role(current_user_id() or "", league.id, {"owner"})
+
+    all_sessions = build_session_summaries(list_event_rows_for_league(league.id))
+    closed_sessions = [s for s in all_sessions if not s.is_open]
+    closed_count = len(closed_sessions)
+
+    total_cash_in = sum(s.total_real_cash_in_cents for s in closed_sessions)
+    total_paid_out = sum(s.total_paid_out_cents for s in closed_sessions)
+    total_fronts = sum(s.total_front_cents for s in all_sessions)
+    closed_entries = sum(len(s.entries) for s in closed_sessions)
+    all_entries = sum(len(s.entries) for s in all_sessions)
+
+    # Avg sessions per month since the first session
+    session_date_strs = [s.session_date[:10] for s in all_sessions if s.session_date]
+    avg_sessions_per_month = 0.0
+    if session_date_strs:
+        first_date = date.fromisoformat(min(session_date_strs))
+        today_d = date.today()
+        months_elapsed = (today_d.year - first_date.year) * 12 + (today_d.month - first_date.month) + 1
+        avg_sessions_per_month = round(len(all_sessions) / months_elapsed, 1)
+
+    # Session calendar data: date → count of sessions on that date
+    sessions_by_date: dict[str, int] = {}
+    for s in all_sessions:
+        if s.session_date:
+            d = s.session_date[:10]
+            sessions_by_date[d] = sessions_by_date.get(d, 0) + 1
+    first_session_year = int(min(sessions_by_date)[:4]) if sessions_by_date else date.today().year
+
+    cash_stats = {
+        "total_cash_in": total_cash_in,
+        "total_paid_out": total_paid_out,
+        "total_fronts": total_fronts,
+        "avg_pot": total_cash_in // closed_count if closed_count else 0,
+        "avg_players": round(all_entries / len(all_sessions)) if all_sessions else 0,
+        "avg_buyin": sum(s.total_buy_in_cents for s in closed_sessions) // closed_entries if closed_entries else 0,
+        "biggest_pot": max((s.total_real_cash_in_cents for s in all_sessions), default=0),
+        "avg_sessions_per_month": avg_sessions_per_month,
+        "session_map": sessions_by_date,
+        "first_session_year": first_session_year,
+        "has_data": closed_count > 0,
+        "has_sessions": bool(all_sessions),
+    }
+
     return render_template(
         "league_dashboard.html",
         league=league,
         counts=league_counts(league.id),
         is_owner=is_owner,
+        cash_stats=cash_stats,
     )
 
 
diff --git a/static/css/style.css b/static/css/style.css
index 6d36ff5..f213241 100644
--- a/static/css/style.css
+++ b/static/css/style.css
@@ -36,7 +36,7 @@ h1, h2, h3, h4 { margin: 0; }
    FONTS
    ================================================================ */
 :root {
-  --font-ui:      Aptos, Inter, ui-sans-serif, system-ui, -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif;
+  --font-ui:      'Inter', ui-sans-serif, system-ui, -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif;
   --font-display: var(--font-ui);
   --font-mono:    ui-monospace, "SFMono-Regular", "Cascadia Mono", "Roboto Mono", "Liberation Mono", monospace;
   --font-money:   var(--font-ui);
@@ -100,13 +100,191 @@ h1, h2, h3, h4 { margin: 0; }
 .subnav__link.is-active { color: var(--accent); font-weight: 600; }
 
 /* ================================================================
-   APP SHELL
+   APP SHELL + SIDEBAR
+   ================================================================ */
+.app-shell {
+  flex: 1;
+  display: flex;
+  align-items: stretch;
+  min-height: calc(100vh - 62px);
+  position: relative;
+}
+/* Lock app-shell to viewport height so only the main content area scrolls */
+.app-shell:has(.sidebar) {
+  height: calc(100vh - 62px);
+  overflow: hidden;
+}
+
+/* Full-height sidebar background strip */
+.app-shell:has(.sidebar)::before {
+  content: '';
+  position: absolute;
+  left: 0;
+  top: 0;
+  bottom: 0;
+  width: 224px;
+  background: var(--surface);
+  border-right: 1px solid var(--border);
+  pointer-events: none;
+  z-index: 0;
+}
+
+/* ---- Sidebar ---- */
+.sidebar {
+  width: 224px;
+  flex-shrink: 0;
+  background: transparent;
+  height: 100%;
+  overflow-y: hidden;
+  display: flex;
+  flex-direction: column;
+  z-index: 1;
+}
+
+.sidebar__header {
+  display: flex;
+  align-items: center;
+  gap: 10px;
+  padding: 18px 14px 16px;
+  border-bottom: 1px solid var(--border);
+  flex-shrink: 0;
+}
+.sidebar__badge {
+  width: 34px;
+  height: 34px;
+  border-radius: var(--r-md);
+  background: var(--accent-chip);
+  border: 1px solid var(--accent-chip-bd);
+  color: var(--accent);
+  font-size: 15px;
+  font-weight: 700;
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  flex-shrink: 0;
+  letter-spacing: -.01em;
+}
+.sidebar__meta { min-width: 0; }
+.sidebar__league-name {
+  display: block;
+  font-size: .8125rem;
+  font-weight: 600;
+  color: var(--text-strong);
+  white-space: nowrap;
+  overflow: hidden;
+  text-overflow: ellipsis;
+  line-height: 1.3;
+}
+.sidebar__role {
+  display: block;
+  font-size: .6875rem;
+  color: var(--accent);
+  font-weight: 500;
+  margin-top: 2px;
+}
+
+.sidebar__nav {
+  flex: 1;
+  padding: 10px 8px;
+  display: flex;
+  flex-direction: column;
+  gap: 1px;
+}
+.sidebar__link {
+  display: flex;
+  align-items: center;
+  gap: 9px;
+  padding: 8px 10px;
+  border-radius: var(--r-sm);
+  font-size: .8125rem;
+  font-weight: 500;
+  color: var(--text-2);
+  text-decoration: none;
+  transition: color .13s, background .13s;
+  line-height: 1;
+}
+.sidebar__link svg {
+  width: 16px;
+  height: 16px;
+  flex-shrink: 0;
+  opacity: .65;
+  transition: opacity .13s;
+}
+.sidebar__link:hover {
+  color: var(--text);
+  background: var(--surface-raised);
+}
+.sidebar__link:hover svg { opacity: .9; }
+.sidebar__link.is-active {
+  color: var(--accent);
+  background: var(--accent-tint);
+  font-weight: 600;
+}
+.sidebar__link.is-active svg { opacity: 1; }
+
+.sidebar__footer {
+  flex-shrink: 0;
+  padding: 12px 14px 14px;
+  border-top: 1px solid var(--border);
+}
+.sidebar__back {
+  display: flex;
+  align-items: center;
+  gap: 5px;
+  font-size: .75rem;
+  color: var(--muted);
+  text-decoration: none;
+  transition: color .13s;
+}
+.sidebar__back svg { width: 12px; height: 12px; }
+.sidebar__back:hover { color: var(--text-2); }
+
+/* ---- App page (paired with sidebar) ---- */
+.page--app {
+  flex: 1;
+  min-width: 0;
+  max-width: none;
+  margin: 0;
+  padding: clamp(20px, 3vw, 36px) clamp(24px, 4vw, 48px) 96px;
+  overflow-y: auto;
+  height: 100%;
+}
+
+/* ---- Sidebar mobile collapse ---- */
+@media (max-width: 768px) {
+  .app-shell { flex-direction: column; min-height: 0; }
+  .app-shell:has(.sidebar) { height: auto; overflow: visible; }
+  .app-shell:has(.sidebar)::before { display: none; }
+  .sidebar {
+    width: 100%;
+    height: auto;
+    position: static;
+    background: var(--surface);
+    border-right: none;
+    border-bottom: 1px solid var(--border);
+    flex-direction: row;
+    align-items: center;
+    z-index: auto;
+  }
+  .sidebar__header { border-bottom: none; padding: 10px 12px; flex-shrink: 0; }
+  .sidebar__badge { width: 28px; height: 28px; font-size: 12px; }
+  .sidebar__role { display: none; }
+  .sidebar__nav { flex-direction: row; padding: 0 8px; gap: 0; overflow-x: auto; scrollbar-width: none; }
+  .sidebar__nav::-webkit-scrollbar { display: none; }
+  .sidebar__link { padding: 10px 10px; white-space: nowrap; gap: 6px; }
+  .sidebar__link svg { display: none; }
+  .sidebar__footer { display: none; }
+  .page--app { padding: 16px 16px 64px; overflow-y: visible; height: auto; }
+}
+
+/* ================================================================
+   APP SHELL (topbar)
    ================================================================ */
 .topbar {
   position: sticky; top: 0; z-index: 50;
-  background: rgba(15,15,18,.86);
-  backdrop-filter: blur(8px);
-  border-bottom: 1px solid var(--border);
+  background: rgba(10,10,13,.94);
+  backdrop-filter: blur(14px) saturate(180%);
+  border-bottom: 1px solid rgba(255,255,255,.06);
 }
 .topbar__inner {
   max-width: var(--w-admin);
@@ -125,10 +303,10 @@ h1, h2, h3, h4 { margin: 0; }
   flex: none;
 }
 .brand__mark {
-  width: 26px; height: 26px;
-  border-radius: 5px;
-  background: var(--accent);
-  box-shadow: 0 0 0 1px var(--accent-a30), 0 4px 14px var(--accent-a22);
+  width: 30px; height: 30px;
+  border-radius: 7px;
+  background: linear-gradient(135deg, var(--accent) 0%, color-mix(in srgb, var(--accent) 72%, #7c6fd4) 100%);
+  box-shadow: 0 0 0 1px var(--accent-a30), 0 4px 18px var(--accent-a22);
   position: relative;
   flex: none;
 }
@@ -136,19 +314,23 @@ h1, h2, h3, h4 { margin: 0; }
   content: "";
   position: absolute;
   inset: 0; margin: auto;
-  width: 11px; height: 11px;
+  width: 12px; height: 12px;
   border-radius: 2px;
-  background: var(--bg);
+  background: var(--accent-ink);
   transform: rotate(45deg);
 }
 .brand__name {
   font-family: var(--font-display);
-  font-size: 19px;
-  font-weight: 600;
-  letter-spacing: 0;
+  font-size: 17px;
+  font-weight: 700;
+  letter-spacing: -.01em;
   color: var(--text);
   white-space: nowrap;
 }
+.brand__tld {
+  color: var(--faintest);
+  font-weight: 400;
+}
 .mainnav { display: flex; gap: 4px; }
 .nav-toggle {
   display: none;
@@ -231,34 +413,62 @@ h1, h2, h3, h4 { margin: 0; }
 }
 .site-footer {
   margin-top: auto;
-  padding-top: clamp(44px, 6vw, 76px);
+  padding: clamp(28px, 4vw, 48px) 0 clamp(20px, 3vw, 32px);
   border-top: 1px solid var(--divider);
-  display: grid;
-  grid-template-columns: 1fr auto 1fr;
+  display: flex;
   align-items: center;
-  gap: 8px 18px;
+  flex-wrap: wrap;
+  gap: 6px 20px;
   color: var(--faintest);
-  font-size: 12.5px;
+  font-size: 12px;
 }
-.site-footer span {
+.site-footer__copy {
+  display: flex;
+  align-items: center;
+  gap: 10px;
   white-space: nowrap;
 }
-.site-footer span:nth-child(2) {
-  color: var(--muted);
-  justify-self: center;
+.site-footer__copy strong { color: var(--faint-2); font-weight: 500; }
+.site-footer__version {
+  font-family: var(--font-mono);
+  font-size: 10.5px;
+  color: var(--faintest-2);
 }
-.site-footer span:nth-child(3) {
-  justify-self: end;
+.site-footer__links {
+  display: flex;
+  align-items: center;
+  gap: 2px;
+  flex-wrap: wrap;
 }
+.site-footer__links a {
+  color: var(--faintest);
+  text-decoration: none;
+  padding: 3px 7px;
+  border-radius: 5px;
+  white-space: nowrap;
+  transition: color .13s, background .13s;
+}
+.site-footer__links a:hover { color: var(--text-2); background: var(--surface-raised); }
+.site-footer__brand {
+  margin-left: auto;
+  white-space: nowrap;
+}
+.site-footer__brand a {
+  color: var(--faintest);
+  text-decoration: none;
+  font-weight: 500;
+  transition: color .13s;
+}
+.site-footer__brand a:hover { color: var(--text-2); }
 @media (max-width: 640px) {
   .site-footer {
-    grid-template-columns: 1fr;
-    justify-items: center;
-    gap: 6px;
-    margin-top: 36px;
+    flex-direction: column;
+    align-items: flex-start;
+    gap: 8px;
     padding: 18px 0 max(20px, env(safe-area-inset-bottom));
-    text-align: center;
   }
+  .site-footer__brand { margin-left: 0; }
+  /* legacy compat — nothing to do */
   .site-footer span:nth-child(2),
   .site-footer span:nth-child(3) {
     justify-self: center;
@@ -323,26 +533,28 @@ h1, h2, h3, h4 { margin: 0; }
 }
 h1 {
   font-family: var(--font-display);
-  font-size: clamp(30px,4.4vw,46px);
-  font-weight: 600;
-  letter-spacing: 0;
+  font-size: clamp(32px, 4.5vw, 52px);
+  font-weight: 800;
+  letter-spacing: -.025em;
   color: var(--text);
   line-height: 1.05;
 }
 h2 {
   font-family: var(--font-display);
   font-size: 18px;
-  font-weight: 600;
+  font-weight: 700;
+  letter-spacing: -.01em;
   color: var(--text-strong);
 }
 h3 {
   font-size: 15px;
   font-weight: 600;
+  letter-spacing: -.005em;
   color: var(--text-strong);
 }
 
 /* page intro */
-.hero { padding: 28px 0 22px; }
+.hero { padding: 32px 0 24px; }
 .hero__kicker {
   font-family: var(--font-mono);
   font-size: 10.5px;
@@ -350,6 +562,7 @@ h3 {
   text-transform: uppercase;
   color: var(--accent);
   margin: 0 0 10px;
+  display: block;
 }
 .session-number {
   color: var(--accent);
@@ -358,9 +571,9 @@ h3 {
 }
 .hero__title {
   font-family: var(--font-display);
-  font-size: clamp(30px,4.4vw,46px);
-  font-weight: 600;
-  letter-spacing: 0;
+  font-size: clamp(32px, 4.5vw, 52px);
+  font-weight: 800;
+  letter-spacing: -.025em;
   color: var(--text);
   line-height: 1.05;
   margin: 0 0 10px;
@@ -382,10 +595,12 @@ h3 {
    ================================================================ */
 .panel {
   background: var(--surface);
-  border: 1px solid var(--border);
+  border: var(--glass-border);
   border-radius: var(--r-lg);
+  box-shadow: var(--shadow-sm);
   overflow: hidden;
   min-width: 0;
+  transition: box-shadow 180ms, transform 180ms;
 }
 .panel__head {
   padding: 16px 22px;
@@ -398,9 +613,10 @@ h3 {
 }
 .panel__title {
   font-family: var(--font-display);
-  font-weight: 600;
-  font-size: 18px;
+  font-weight: 700;
+  font-size: 17px;
   margin: 0;
+  letter-spacing: -.01em;
   color: var(--text-strong);
 }
 .panel__tag { font-family: var(--font-mono); font-size: 11px; color: var(--faintest); }
@@ -421,23 +637,28 @@ h3 {
    STAT / METRIC TILE
    ================================================================ */
 .stat {
-  padding: 15px 16px;
+  padding: 18px 20px;
   background: var(--surface);
-  border: 1px solid var(--border);
+  border: var(--glass-border);
   border-radius: var(--r-md);
+  box-shadow: var(--shadow-sm);
+  position: relative;
+  overflow: hidden;
 }
 .stat__val {
   font-family: var(--font-display);
-  font-size: 26px;
-  font-weight: 600;
+  font-size: 28px;
+  font-weight: 700;
   line-height: 1;
-  margin: 4px 0 0;
+  margin: 6px 0 0;
+  letter-spacing: -.02em;
 }
 .stat__sub {
   font-family: var(--font-mono);
-  font-size: 11.5px;
+  font-size: 11px;
   color: var(--muted);
   margin-top: 8px;
+  display: block;
 }
 .stat--hero .stat__val { font-size: 34px; }
 .player-rank {
@@ -474,13 +695,14 @@ h3 {
   line-height: 1;
   white-space: nowrap;
 }
-.stat--rail { position: relative; padding-left: 20px; }
+.stat--rail { position: relative; padding-left: 20px; background: linear-gradient(135deg, var(--surface) 50%, color-mix(in srgb, var(--rail, var(--accent)) 6%, transparent) 100%); }
 .stat--rail::before {
   content: "";
   position: absolute;
   left: 0; top: 0; bottom: 0;
   width: 3px;
   background: var(--rail, var(--accent));
+  border-radius: 0 2px 2px 0;
 }
 
 /* hero stat row (small inline tiles) */
@@ -684,7 +906,7 @@ fieldset[disabled] button {
   color: var(--text-body);
 }
 .tbl tbody tr { cursor: pointer; transition: background 80ms; }
-.tbl tbody tr:hover { background: #1e1e25; }
+.tbl tbody tr:hover { background: rgba(155,140,240,.04); }
 .tbl .num-net { font-weight: 600; font-size: 15px; }
 .tbl .num-pos { color: var(--pos); }
 .tbl .num-neg { color: var(--neg); }
@@ -778,7 +1000,7 @@ th {
   border-bottom: 1px solid var(--border);
 }
 tbody tr { transition: background 80ms; }
-tbody tr:hover { background: #1e1e25; }
+tbody tr:hover { background: rgba(155,140,240,.04); }
 tbody tr:not(:last-child) td { border-bottom: 1px solid var(--divider); }
 td { font-size: 13.5px; color: var(--text-body); }
 td a { font-weight: 600; color: var(--text-strong); }
@@ -1144,8 +1366,8 @@ td a:hover { color: var(--accent); }
   white-space: nowrap;
   transition: opacity 120ms, box-shadow 120ms;
 }
-.btn--primary { background: var(--accent); color: var(--accent-ink); box-shadow: 0 4px 16px var(--accent-a30); }
-.btn--primary:hover { opacity: .88; }
+.btn--primary { background: var(--accent); color: var(--accent-ink); box-shadow: 0 2px 12px var(--accent-a30); font-weight: 700; }
+.btn--primary:hover { opacity: .88; box-shadow: 0 4px 20px var(--accent-a30); }
 .btn--ghost { background: var(--field); color: var(--text-2); border: 1px solid var(--border-strong); font-weight: 600; }
 .btn--ghost:hover { border-color: var(--border-hi); color: var(--text-strong); }
 .btn--outline { background: var(--accent-tint); color: var(--accent); border: 1px solid var(--accent-chip-bd); }
@@ -1164,11 +1386,11 @@ td a:hover { color: var(--accent); }
   cursor: pointer;
   background: var(--accent);
   color: var(--accent-ink);
-  box-shadow: 0 4px 16px var(--accent-a30);
+  box-shadow: 0 2px 12px var(--accent-a30);
   text-decoration: none;
-  transition: opacity 120ms;
+  transition: opacity 120ms, box-shadow 120ms;
 }
-.primary-button:hover { opacity: .88; }
+.primary-button:hover { opacity: .88; box-shadow: 0 4px 20px var(--accent-a30); }
 .secondary-button, .ghost-button {
   display: inline-flex;
   align-items: center;
@@ -1743,8 +1965,11 @@ select.control { cursor: pointer; }
 .csv__drop.is-drag { border-color: var(--accent); color: var(--accent); }
 
 /* Form shell (admin login) */
-.form-shell { display: grid; justify-content: center; padding-top: 40px; }
-.form-shell.narrow { grid-template-columns: minmax(320px, 480px); }
+.form-shell { display: grid; justify-content: center; padding-top: 48px; }
+.form-shell.narrow { grid-template-columns: minmax(320px, 440px); }
+.form-shell .panel {
+  box-shadow: 0 24px 64px rgba(0,0,0,.28), 0 0 0 1px var(--border-strong);
+}
 
 /* Account / league shell */
 .league-grid {
@@ -1766,11 +1991,12 @@ select.control { cursor: pointer; }
   gap: 8px;
   padding: 18px;
   color: inherit;
-  transition: border-color 140ms, transform 140ms;
+  transition: border-color 160ms, transform 160ms, box-shadow 160ms;
 }
 .league-card:hover {
-  border-color: var(--border-hi);
-  transform: translateY(-1px);
+  border-color: var(--accent);
+  transform: translateY(-2px);
+  box-shadow: 0 6px 20px rgba(0,0,0,.18), 0 0 0 1px color-mix(in srgb, var(--accent) 20%, transparent);
 }
 .league-card--disabled {
   opacity: .72;
@@ -1806,6 +2032,7 @@ select.control { cursor: pointer; }
   align-items: stretch;
   overflow: hidden;
   border-top: 2px solid var(--accent);
+  transition: box-shadow 180ms;
 }
 .league-row__identity {
   grid-area: identity;
@@ -1837,6 +2064,10 @@ select.control { cursor: pointer; }
 .league-row__title:hover h2 {
   color: var(--accent);
 }
+.league-row:hover {
+  box-shadow: var(--shadow-lg), 0 0 0 1px color-mix(in srgb, var(--accent) 22%, transparent);
+  transform: translateY(-2px);
+}
 .league-row__desc {
   margin: 0;
   color: var(--muted);
@@ -2000,16 +2231,21 @@ select.control { cursor: pointer; }
   padding: 16px;
 }
 .player-card {
-  border: 1px solid var(--border);
-  border-radius: 8px;
-  padding: 16px;
+  border: var(--glass-border);
+  border-radius: var(--r-md);
+  padding: 18px;
   display: flex;
   flex-direction: column;
   gap: 12px;
   text-decoration: none;
-  transition: border-color 0.15s;
+  box-shadow: var(--shadow-sm);
+  transition: border-color 0.18s, box-shadow 0.18s, transform 0.18s;
+}
+.player-card:hover {
+  border-color: color-mix(in srgb, var(--accent) 40%, transparent);
+  box-shadow: var(--shadow-lg), 0 0 0 1px color-mix(in srgb, var(--accent) 18%, transparent);
+  transform: translateY(-2px);
 }
-.player-card:hover { border-color: var(--accent); }
 .player-card--archived { opacity: 0.5; }
 .player-card__head {
   display: flex;
@@ -2551,6 +2787,43 @@ select.control { cursor: pointer; }
   .hero__title, h1 { font-size: 24px; }
 }
 
+/* ================================================================
+   PAGE HEADER (app pages)
+   ================================================================ */
+.page-header {
+  display: flex;
+  align-items: flex-start;
+  justify-content: space-between;
+  gap: 16px;
+  margin-bottom: 24px;
+  padding-bottom: 20px;
+  border-bottom: 1px solid var(--border);
+}
+.page-header__chips {
+  display: flex;
+  align-items: center;
+  gap: 6px;
+  margin-bottom: 6px;
+}
+.page-header__title {
+  font-size: clamp(20px, 2.4vw, 26px);
+  font-weight: 700;
+  letter-spacing: -.025em;
+  color: var(--text-strong);
+  margin: 0 0 3px;
+}
+.page-header__sub {
+  font-size: .875rem;
+  color: var(--muted);
+  margin: 0;
+}
+.page-header__actions {
+  display: flex;
+  align-items: center;
+  gap: 8px;
+  flex-shrink: 0;
+}
+
 /* ================================================================
    LEAGUE DASHBOARD
    ================================================================ */
@@ -2675,50 +2948,78 @@ select.control { cursor: pointer; }
   margin-bottom: 20px;
 }
 
-/* Navigation card grid */
-.dashboard-grid {
-  display: grid;
-  grid-template-columns: repeat(2, minmax(0, 1fr));
-  gap: 14px;
-}
-.dashboard-card {
-  position: relative;
-  display: grid;
-  grid-template-rows: auto auto 1fr auto;
-  gap: 8px;
-  padding: 20px;
-  padding-top: 22px;
-  color: inherit;
-  text-decoration: none;
-  overflow: hidden;
-  transition: border-color 140ms, transform 140ms, box-shadow 140ms;
-  min-height: 152px;
-}
-.dashboard-card::before {
-  content: '';
-  position: absolute;
-  top: 0;
-  left: 0;
-  right: 0;
-  height: 3px;
-  background: var(--card-accent, var(--border-strong));
-  border-radius: var(--r-lg) var(--r-lg) 0 0;
-  transition: opacity 140ms;
-}
-.dashboard-card:hover {
-  border-color: var(--border-hi);
-  transform: translateY(-2px);
-  box-shadow: 0 10px 28px rgba(0,0,0,.22);
-}
-.dashboard-card--live {
-  border-color: var(--pos-tint-bd);
-  background: linear-gradient(160deg, rgba(111,192,147,.07) 0%, transparent 55%), var(--surface);
-}
-.dashboard-card--live:hover { border-color: var(--pos); }
-.dashboard-card__top {
+/* KPI tile row (league dashboard) */
+.db-kpi-row {
   display: flex;
   align-items: center;
-  justify-content: space-between;
+  gap: 0;
+  margin-bottom: 24px;
+  padding: 14px 20px;
+  background: var(--surface);
+  border: 1px solid var(--border);
+  border-radius: var(--r-lg);
+}
+.db-kpi {
+  flex: 1;
+  display: flex;
+  flex-direction: column;
+  gap: 2px;
+  padding: 0 20px;
+}
+.db-kpi:first-child { padding-left: 0; }
+.db-kpi:last-child { padding-right: 0; }
+.db-kpi + .db-kpi { border-left: 1px solid var(--border); }
+.db-kpi__label {
+  font-size: 10.5px;
+  font-weight: 500;
+  letter-spacing: .07em;
+  text-transform: uppercase;
+  color: var(--muted);
+}
+.db-kpi__val {
+  font-size: 22px;
+  font-weight: 800;
+  letter-spacing: -.03em;
+  color: var(--text-strong);
+  line-height: 1.1;
+}
+.db-kpi__sub {
+  font-size: 11px;
+  color: var(--muted);
+  margin-top: 1px;
+}
+
+/* Navigation card list */
+.dashboard-grid {
+  display: flex;
+  flex-direction: column;
+  gap: 0;
+  border: 1px solid var(--border);
+  border-radius: var(--r-lg);
+  overflow: hidden;
+  background: var(--border);
+}
+.dashboard-card {
+  display: flex;
+  align-items: center;
+  gap: 16px;
+  padding: 16px 20px;
+  color: inherit;
+  text-decoration: none;
+  background: var(--surface);
+  transition: background 120ms;
+}
+.dashboard-card:hover {
+  background: var(--surface-head);
+}
+.dashboard-card--live {
+  border-left: 3px solid var(--pos);
+  padding-left: 17px;
+}
+.dashboard-card__body { flex: 1; min-width: 0; }
+.dashboard-card__top {
+  display: flex;
+  align-items: baseline;
   gap: 8px;
 }
 .dashboard-card__top .kicker { margin: 0; }
@@ -2729,30 +3030,34 @@ select.control { cursor: pointer; }
 }
 .dashboard-card__title {
   display: block;
-  font-size: 21px;
-  font-weight: 700;
+  font-size: 15px;
+  font-weight: 600;
   color: var(--text-strong);
 }
 .dashboard-card__desc {
-  margin: 0;
+  margin: 2px 0 0;
   color: var(--muted);
-  font-size: 13.5px;
-  line-height: 1.45;
+  font-size: 12.5px;
+  line-height: 1.4;
+  white-space: nowrap;
+  overflow: hidden;
+  text-overflow: ellipsis;
 }
 .dashboard-card__arrow {
-  font-size: 18px;
+  font-size: 16px;
   color: var(--faintest);
-  justify-self: end;
-  transition: color 140ms, transform 140ms;
+  flex: none;
+  transition: color 120ms, transform 120ms;
 }
 .dashboard-card:hover .dashboard-card__arrow {
-  color: var(--card-accent, var(--accent));
+  color: var(--muted);
   transform: translateX(3px);
 }
 
 @media (max-width: 640px) {
   .db-stats { grid-template-columns: 1fr 1fr; }
-  .dashboard-grid { grid-template-columns: 1fr; }
+  .db-kpi-row { flex-wrap: wrap; }
+  .db-kpi { min-width: 40%; }
   .db-hero { flex-direction: column; gap: 14px; }
   .db-hero__bg-letter { font-size: 140px; }
 }
@@ -2763,52 +3068,48 @@ select.control { cursor: pointer; }
   inset: 0;
   z-index: -1;
   pointer-events: none;
-  background:
-    radial-gradient(ellipse 70% 55% at 12% 18%, rgba(155,140,240,.11) 0%, transparent 65%),
-    radial-gradient(ellipse 50% 45% at 88% 78%, rgba(111,192,147,.07) 0%, transparent 55%),
-    radial-gradient(ellipse 55% 50% at 68% -8%, rgba(155,140,240,.06) 0%, transparent 60%);
 }
 .l-bg::after {
   content: "";
   position: absolute;
   inset: 0;
-  background-image: radial-gradient(circle, rgba(255,255,255,.032) 1px, transparent 1px);
-  background-size: 28px 28px;
-  mask-image: radial-gradient(ellipse 90% 90% at 50% 40%, black 30%, transparent 100%);
+  background:
+    radial-gradient(ellipse 75% 60% at 12% 12%, rgba(155,140,240,.07) 0%, transparent 55%),
+    radial-gradient(ellipse 55% 45% at 88% 88%, rgba(111,192,147,.04) 0%, transparent 52%);
 }
 
 .l-hero {
-  padding: clamp(52px, 8vw, 96px) 0 clamp(36px, 5vw, 52px);
-  max-width: 700px;
+  padding: clamp(72px, 10vw, 128px) 0 clamp(44px, 6vw, 68px);
+  max-width: 820px;
+  position: relative;
 }
 .l-hero__kicker {
-  display: inline-block;
-  padding: 4px 12px;
-  border-radius: var(--r-pill);
-  background: var(--accent-chip);
-  border: 1px solid var(--accent-chip-bd);
-  color: var(--accent);
+  display: block;
   font-family: var(--font-mono);
   font-size: 10.5px;
-  letter-spacing: .10em;
+  letter-spacing: .12em;
   text-transform: uppercase;
   font-weight: 500;
-  margin-bottom: 22px;
+  color: var(--muted);
+  margin-bottom: 20px;
 }
 .l-hero__h1 {
-  font-size: clamp(36px, 5.8vw, 66px);
-  font-weight: 700;
-  line-height: 1.04;
-  letter-spacing: -.02em;
+  font-size: clamp(48px, 8vw, 96px);
+  font-weight: 800;
+  line-height: 1.0;
+  letter-spacing: -.035em;
   color: var(--text);
-  margin: 0 0 18px;
+  margin: 0 0 22px;
+}
+.l-hero__accent {
+  color: var(--accent);
 }
 .l-hero__sub {
   font-size: clamp(15px, 1.8vw, 17px);
   color: var(--muted);
   line-height: 1.65;
-  margin: 0 0 28px;
-  max-width: 54ch;
+  margin: 0 0 30px;
+  max-width: 56ch;
 }
 .l-hero__cta {
   display: flex;
@@ -2816,23 +3117,63 @@ select.control { cursor: pointer; }
   gap: 10px;
 }
 
+.l-stat-strip {
+  display: flex;
+  align-items: center;
+  gap: 0;
+  margin-top: 40px;
+  padding: 18px 24px;
+  background: var(--surface);
+  border: var(--glass-border);
+  border-radius: var(--r-lg);
+  box-shadow: var(--shadow-sm);
+}
+.l-stat-strip__item {
+  display: flex;
+  flex-direction: column;
+  gap: 3px;
+  flex: 1;
+  padding: 0 24px;
+}
+.l-stat-strip__item:first-child { padding-left: 0; }
+.l-stat-strip__item:last-child { padding-right: 0; }
+.l-stat-strip__item + .l-stat-strip__item {
+  border-left: 1px solid var(--border);
+}
+.l-stat-strip__label {
+  font-size: 10.5px;
+  font-weight: 500;
+  letter-spacing: .08em;
+  text-transform: uppercase;
+  color: var(--muted);
+}
+.l-stat-strip__val {
+  font-size: 22px;
+  font-weight: 800;
+  letter-spacing: -.025em;
+  color: var(--text-strong);
+  line-height: 1;
+}
+.l-stat-strip__val--accent { color: var(--accent); }
+
 /* Preview strip */
 .l-preview {
   display: grid;
-  grid-template-columns: 1fr 1.25fr 1fr;
-  gap: 10px;
-  margin-bottom: clamp(48px, 7vw, 76px);
+  grid-template-columns: 1fr 1.35fr 1fr;
+  gap: 14px;
+  margin-bottom: clamp(36px, 5vw, 56px);
   align-items: start;
 }
 .l-preview__panel {
   background: var(--surface);
-  border: 1px solid var(--border);
+  border: var(--glass-border);
   border-radius: var(--r-lg);
   overflow: hidden;
+  box-shadow: var(--shadow-md);
 }
 .l-preview__panel--featured {
   border-color: var(--accent-chip-bd);
-  box-shadow: 0 0 0 1px var(--accent-chip-bd), 0 8px 32px rgba(155,140,240,.10);
+  box-shadow: var(--shadow-xl), 0 0 0 1px var(--accent-chip-bd);
 }
 .l-preview__head {
   display: flex;
@@ -2939,33 +3280,34 @@ select.control { cursor: pointer; }
 /* Feature grid */
 .l-features {
   display: grid;
-  grid-template-columns: repeat(4, 1fr);
-  gap: 1px;
-  background: var(--border);
+  grid-template-columns: repeat(2, 1fr);
+  gap: 0;
   border: 1px solid var(--border);
   border-radius: var(--r-lg);
   overflow: hidden;
-  margin-bottom: clamp(40px, 6vw, 64px);
+  margin-bottom: clamp(40px, 6vw, 72px);
 }
 .l-feature {
-  background: var(--surface);
-  padding: 26px 22px;
-  display: grid;
-  align-content: start;
-  gap: 10px;
+  padding: 28px 28px;
+  display: flex;
+  align-items: flex-start;
+  gap: 16px;
+  border-right: 1px solid var(--border);
+  border-bottom: 1px solid var(--border);
 }
+.l-feature:nth-child(2n) { border-right: none; }
+.l-feature:nth-last-child(-n+2) { border-bottom: none; }
 .l-feature__icon {
   display: flex;
   align-items: center;
   justify-content: center;
-  width: 42px;
-  height: 42px;
-  border-radius: var(--r-sm);
-  background: var(--accent-chip);
-  border: 1px solid var(--accent-chip-bd);
-  color: var(--accent);
-  margin-bottom: 4px;
+  width: 36px;
+  height: 36px;
+  flex: none;
+  color: var(--muted);
+  margin-top: 2px;
 }
+.l-feature__body { display: grid; gap: 6px; }
 .l-feature__title {
   font-size: 15px;
   font-weight: 600;
@@ -2999,17 +3341,19 @@ select.control { cursor: pointer; }
   display: flex;
   flex-direction: column;
   gap: 14px;
-  padding: 18px 20px;
-  border: 1px solid var(--border);
+  padding: 20px 22px;
+  border: var(--glass-border);
   border-radius: var(--r-lg);
   background: var(--surface);
+  box-shadow: var(--shadow-sm);
   text-decoration: none;
   color: inherit;
-  transition: border-color 0.15s, box-shadow 0.15s;
+  transition: border-color 0.18s, box-shadow 0.18s, transform 0.18s;
 }
 .explore-card:hover {
   border-color: var(--accent);
-  box-shadow: 0 2px 12px color-mix(in srgb, var(--accent) 10%, transparent);
+  box-shadow: 0 4px 24px color-mix(in srgb, var(--accent) 12%, transparent), 0 0 0 1px color-mix(in srgb, var(--accent) 20%, transparent);
+  transform: translateY(-2px);
 }
 .explore-card__head { display: flex; flex-direction: column; gap: 4px; }
 .explore-card__name { font-size: 16px; font-weight: 700; color: var(--text-strong); margin: 0; }
@@ -3213,6 +3557,23 @@ select.control { cursor: pointer; }
   .l-features {
     grid-template-columns: 1fr;
   }
+  .l-stat-strip {
+    display: grid;
+    grid-template-columns: 1fr 1fr;
+    gap: 0;
+    padding: 14px 16px;
+  }
+  .l-stat-strip__item {
+    padding: 10px 12px;
+    border-left: none !important;
+    border-top: 1px solid var(--border);
+  }
+  .l-stat-strip__item:first-child,
+  .l-stat-strip__item:nth-child(2) {
+    border-top: none;
+  }
+  .l-stat-strip__item:nth-child(odd) { border-left: none !important; }
+  .l-stat-strip__item:nth-child(even) { border-left: 1px solid var(--border) !important; }
   .league-hub-summary,
   .league-row__metrics {
     grid-template-columns: 1fr 1fr;
@@ -3352,3 +3713,1391 @@ select.control { cursor: pointer; }
 .card-menu__item:hover { background: var(--field); color: var(--text); }
 .card-menu__item--warn { color: var(--neg); }
 .card-menu__item--warn:hover { background: var(--neg-tint); color: var(--neg); }
+
+/* ================================================================
+   LANDING v2 (lp-* classes) — split hero
+   ================================================================ */
+
+/* Remove default padding; hero handles its own layout */
+.page--landing {
+  padding: 0;
+  max-width: none;
+}
+.page--landing .flash-stack {
+  max-width: var(--w-public);
+  margin: 0 auto;
+  padding: 16px var(--gutter) 0;
+  width: 100%;
+}
+.page--landing .site-footer {
+  max-width: var(--w-public);
+  margin: 0 auto;
+  padding-left: var(--gutter);
+  padding-right: var(--gutter);
+}
+
+/* ================================================================
+   LANDING PAGE — split hero
+   ================================================================ */
+.lp-hero {
+  display: flex;
+  flex-direction: row;
+  align-items: center;
+  justify-content: center;
+  gap: clamp(48px, 7vw, 100px);
+  min-height: calc(100vh - 62px);
+  padding: clamp(56px, 6vw, 80px) clamp(24px, 5vw, 80px);
+  position: relative;
+  overflow: hidden;
+  background:
+    radial-gradient(ellipse 90% 70% at 50% 110%, #1c0e3e 0%, #100820 55%, var(--bg) 100%),
+    radial-gradient(ellipse 55% 50% at 85% 20%, rgba(155,140,240,.09) 0%, transparent 60%);
+}
+.lp-hero::before {
+  content: "♠";
+  position: absolute;
+  font-size: clamp(420px, 55vw, 820px);
+  color: rgba(155,140,240,.055);
+  line-height: 1;
+  pointer-events: none;
+  user-select: none;
+  top: 50%;
+  left: 5%;
+  right: auto;
+  transform: translateY(-50%);
+}
+
+.lp-hero__content {
+  position: relative;
+  z-index: 1;
+  display: flex;
+  flex-direction: column;
+  align-items: flex-start;
+  flex: 1;
+  max-width: 540px;
+}
+.lp-hero__visual {
+  position: relative;
+  z-index: 1;
+  flex: 1;
+  min-width: 0;
+  max-width: 520px;
+}
+
+.lp-eyebrow {
+  display: inline-flex;
+  align-items: center;
+  gap: 7px;
+  padding: 5px 14px;
+  border-radius: 999px;
+  background: var(--accent-chip);
+  border: 1px solid var(--accent-chip-bd);
+  color: var(--accent);
+  font: 600 10.5px var(--font-mono);
+  letter-spacing: .10em;
+  text-transform: uppercase;
+  margin-bottom: 20px;
+  align-self: flex-start;
+}
+.lp-eyebrow::before {
+  content: "";
+  width: 5px; height: 5px;
+  border-radius: 50%;
+  background: var(--accent);
+  flex-shrink: 0;
+}
+
+.lp-h1 {
+  font-size: clamp(48px, 7vw, 96px);
+  font-weight: 900;
+  letter-spacing: -.045em;
+  line-height: .88;
+  color: var(--text);
+  margin: 0 0 24px;
+}
+.lp-h1__line  { display: block; }
+.lp-h1__accent { display: block; color: var(--accent); }
+
+.lp-sub {
+  font-size: clamp(14px, 1.2vw, 16px);
+  color: rgba(255,255,255,.55);
+  line-height: 1.65;
+  max-width: 44ch;
+  margin: 0 0 28px;
+}
+
+.lp-cta { display: flex; gap: 12px; flex-wrap: wrap; margin-bottom: 20px; }
+.btn--lg { padding: 13px 26px; font-size: 15px; border-radius: var(--r-md); }
+
+.lp-trust {
+  display: flex;
+  align-items: center;
+  gap: 10px;
+  flex-wrap: wrap;
+  font-size: 11.5px;
+  color: rgba(255,255,255,.3);
+  margin-bottom: 0;
+}
+.lp-trust__sep { color: rgba(255,255,255,.15); }
+
+/* ---- Demo card ---- */
+.lp-demo {
+  position: relative;
+  z-index: 1;
+  width: 100%;
+  max-width: 860px;
+  margin-top: 52px;
+}
+.lp-demo__card {
+  background: rgba(14,12,22,.9);
+  border: 1px solid rgba(155,140,240,.22);
+  border-radius: var(--r-lg);
+  overflow: hidden;
+  backdrop-filter: blur(16px);
+  box-shadow:
+    0 0 0 1px rgba(155,140,240,.07),
+    0 28px 72px rgba(0,0,0,.55),
+    0 0 120px rgba(155,140,240,.07);
+}
+.lp-demo__head {
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  padding: 14px 22px;
+  border-bottom: 1px solid rgba(255,255,255,.07);
+  background: rgba(255,255,255,.03);
+  gap: 12px;
+}
+.lp-demo__kicker {
+  display: block;
+  font-size: .6rem;
+  font-family: var(--font-mono);
+  letter-spacing: .12em;
+  text-transform: uppercase;
+  color: var(--accent);
+  margin-bottom: 3px;
+}
+.lp-demo__title {
+  font-size: .875rem;
+  font-weight: 600;
+  color: rgba(255,255,255,.82);
+}
+.lp-demo__meta {
+  font-size: .72rem;
+  font-family: var(--font-mono);
+  color: rgba(255,255,255,.3);
+  letter-spacing: .04em;
+  white-space: nowrap;
+}
+.lp-demo__table { padding: 0; }
+.lp-demo__thead,
+.lp-demo__row {
+  display: grid;
+  grid-template-columns: 36px 1fr repeat(4, minmax(70px, 90px));
+  padding: 0 22px;
+  align-items: center;
+}
+.lp-demo__thead {
+  padding-top: 9px;
+  padding-bottom: 9px;
+  background: rgba(255,255,255,.025);
+  border-bottom: 1px solid rgba(255,255,255,.06);
+}
+.lp-demo__th {
+  font-family: var(--font-mono);
+  font-size: .6rem;
+  letter-spacing: .1em;
+  text-transform: uppercase;
+  color: rgba(255,255,255,.28);
+  text-align: right;
+}
+.lp-demo__th:nth-child(1),
+.lp-demo__th:nth-child(2) { text-align: left; }
+.lp-demo__row {
+  padding-top: 11px;
+  padding-bottom: 11px;
+  border-bottom: 1px solid rgba(255,255,255,.04);
+  transition: background .1s;
+}
+.lp-demo__row:last-child { border-bottom: none; }
+.lp-demo__row:hover { background: rgba(155,140,240,.05); }
+.lp-demo__row--fade  { opacity: .65; }
+.lp-demo__row--fade2 { opacity: .38; }
+.lp-demo__rank {
+  font-family: var(--font-mono);
+  font-size: .8125rem;
+  font-weight: 700;
+  color: rgba(255,255,255,.28);
+  text-align: left;
+}
+.lp-demo__rank--1 { color: #f4c430; }
+.lp-demo__rank--2 { color: #b0b8c1; }
+.lp-demo__rank--3 { color: #c87941; }
+.lp-demo__player {
+  font-size: .875rem;
+  font-weight: 500;
+  color: rgba(255,255,255,.82);
+}
+.lp-demo__num {
+  font-family: var(--font-mono);
+  font-size: .8125rem;
+  color: rgba(255,255,255,.38);
+  text-align: right;
+  font-variant-numeric: tabular-nums;
+}
+.lp-demo__num--pos { color: var(--pos); }
+.lp-demo__num--neg { color: var(--neg); }
+
+/* ---- Leaderboard demo variant (with rank-delta column) ---- */
+.lp-demo__thead--lb,
+.lp-demo__row--lb {
+  grid-template-columns: 36px 1fr 36px repeat(3, minmax(60px, 80px));
+}
+.lp-demo__delta {
+  font-family: var(--font-mono);
+  font-size: .72rem;
+  font-weight: 700;
+  color: rgba(255,255,255,.22);
+  text-align: left;
+}
+.lp-demo__delta--up   { color: var(--pos); }
+.lp-demo__delta--down { color: var(--neg); }
+
+/* ---- Shared section header ---- */
+.lp-sec-head {
+  text-align: center;
+  margin-bottom: 32px;
+}
+.lp-sec-title {
+  font-size: clamp(20px, 2.4vw, 28px);
+  font-weight: 800;
+  color: var(--text);
+  letter-spacing: -.03em;
+  margin: 10px 0 0;
+  line-height: 1.2;
+}
+.lp-sec-sub {
+  font-size: .875rem;
+  color: rgba(255,255,255,.4);
+  margin: 8px 0 0;
+  line-height: 1.6;
+}
+
+/* ================================================================
+   FEATURES SECTION
+   ================================================================ */
+.lp-features {
+  padding: clamp(48px, 5vw, 72px) clamp(24px, 5vw, 80px);
+  border-top: 1px solid rgba(255,255,255,.06);
+}
+.lp-features__inner {
+  max-width: var(--w-public);
+  margin: 0 auto;
+}
+.lp-feat-grid {
+  display: grid;
+  grid-template-columns: repeat(3, 1fr);
+  gap: 0;
+  background: rgba(255,255,255,.05);
+  border: 1px solid rgba(255,255,255,.07);
+  border-radius: var(--r-lg);
+  overflow: hidden;
+}
+.lp-feat {
+  padding: 24px 28px;
+  background: var(--bg);
+  display: flex;
+  flex-direction: column;
+  gap: 8px;
+}
+.lp-feat + .lp-feat { border-left: 1px solid rgba(255,255,255,.06); }
+.lp-feat__icon {
+  width: 32px;
+  height: 32px;
+  color: var(--accent);
+  opacity: .85;
+  margin-bottom: 2px;
+}
+.lp-feat__icon svg { width: 100%; height: 100%; }
+.lp-feat__title {
+  font-size: .9375rem;
+  font-weight: 700;
+  color: var(--text-strong);
+  letter-spacing: -.015em;
+}
+.lp-feat__desc {
+  font-size: .85rem;
+  color: rgba(255,255,255,.42);
+  line-height: 1.7;
+}
+
+/* ================================================================
+   SHOWCASE SECTION
+   ================================================================ */
+.lp-showcase {
+  padding: clamp(48px, 5vw, 72px) clamp(24px, 5vw, 80px);
+  border-top: 1px solid rgba(255,255,255,.06);
+  background: rgba(155,140,240,.018);
+}
+.lp-showcase__inner {
+  max-width: var(--w-public);
+  margin: 0 auto;
+}
+.lp-showcase__grid {
+  display: grid;
+  grid-template-columns: repeat(2, 1fr);
+  gap: 20px;
+  align-items: start;
+}
+
+/* ---- Sessions demo ---- */
+.lp-sess-list { padding: 0; }
+.lp-sess-row {
+  display: flex;
+  align-items: center;
+  gap: 14px;
+  padding: 12px 22px;
+  border-bottom: 1px solid rgba(255,255,255,.04);
+  transition: background .1s;
+}
+.lp-sess-row:last-child { border-bottom: none; }
+.lp-sess-row:hover { background: rgba(155,140,240,.05); }
+.lp-sess-row--fade  { opacity: .6; }
+.lp-sess-row--fade2 { opacity: .32; }
+.lp-sess-date {
+  flex-shrink: 0;
+  width: 38px;
+  text-align: center;
+  background: rgba(255,255,255,.04);
+  border: 1px solid rgba(255,255,255,.07);
+  border-radius: var(--r-sm);
+  padding: 4px 0;
+}
+.lp-sess-date__mon {
+  display: block;
+  font-family: var(--font-mono);
+  font-size: .58rem;
+  letter-spacing: .1em;
+  text-transform: uppercase;
+  color: var(--accent);
+  line-height: 1;
+}
+.lp-sess-date__day {
+  display: block;
+  font-size: .9375rem;
+  font-weight: 700;
+  color: rgba(255,255,255,.75);
+  line-height: 1.2;
+  margin-top: 1px;
+}
+.lp-sess-info { flex: 1; min-width: 0; }
+.lp-sess-label {
+  display: block;
+  font-size: .8125rem;
+  font-weight: 500;
+  color: rgba(255,255,255,.8);
+  line-height: 1.3;
+}
+.lp-sess-meta {
+  display: block;
+  font-size: .72rem;
+  font-family: var(--font-mono);
+  color: rgba(255,255,255,.3);
+  margin-top: 2px;
+}
+.lp-sess-pill {
+  flex-shrink: 0;
+  font-family: var(--font-mono);
+  font-size: .6rem;
+  letter-spacing: .09em;
+  text-transform: uppercase;
+  padding: 3px 8px;
+  border-radius: 999px;
+  font-weight: 600;
+}
+.lp-sess-pill--open {
+  background: rgba(111,192,147,.15);
+  border: 1px solid rgba(111,192,147,.3);
+  color: var(--pos);
+}
+.lp-sess-pill--closed {
+  background: rgba(255,255,255,.05);
+  border: 1px solid rgba(255,255,255,.1);
+  color: rgba(255,255,255,.35);
+}
+
+/* ---- Ledger / settlement demo ---- */
+.lp-ledger-stats {
+  display: grid;
+  grid-template-columns: 1fr 1fr;
+  gap: 0;
+  border-bottom: 1px solid rgba(255,255,255,.06);
+}
+.lp-ledger-stat {
+  padding: 14px 22px;
+  border-right: 1px solid rgba(255,255,255,.05);
+  border-bottom: 1px solid rgba(255,255,255,.05);
+}
+.lp-ledger-stat:nth-child(2n) { border-right: none; }
+.lp-ledger-stat:nth-last-child(-n+2) { border-bottom: none; }
+.lp-ledger-stat__label {
+  display: block;
+  font-family: var(--font-mono);
+  font-size: .6rem;
+  letter-spacing: .1em;
+  text-transform: uppercase;
+  color: rgba(255,255,255,.28);
+  margin-bottom: 4px;
+}
+.lp-ledger-stat__val {
+  font-family: var(--font-mono);
+  font-size: .9375rem;
+  font-weight: 700;
+  color: rgba(255,255,255,.7);
+  font-variant-numeric: tabular-nums;
+}
+.lp-settle-section { padding: 0; }
+.lp-settle-head {
+  padding: 9px 22px;
+  font-family: var(--font-mono);
+  font-size: .6rem;
+  letter-spacing: .1em;
+  text-transform: uppercase;
+  color: rgba(255,255,255,.28);
+  background: rgba(255,255,255,.025);
+  border-bottom: 1px solid rgba(255,255,255,.06);
+}
+.lp-settle-row {
+  display: flex;
+  align-items: center;
+  gap: 10px;
+  padding: 10px 22px;
+  border-bottom: 1px solid rgba(255,255,255,.04);
+  transition: background .1s;
+}
+.lp-settle-row:last-child { border-bottom: none; }
+.lp-settle-row:hover { background: rgba(155,140,240,.05); }
+.lp-settle-row .lp-demo__meta { flex: 1; text-align: left; }
+
+/* ---- Session results demo (recon metrics + player table) ---- */
+.lp-recon-grid {
+  display: grid;
+  grid-template-columns: 1fr 1fr;
+  gap: 1px;
+  background: rgba(255,255,255,.07);
+  border-bottom: 1px solid rgba(255,255,255,.07);
+}
+.lp-recon-cell {
+  background: rgba(10,9,18,.92);
+  padding: 12px 18px;
+}
+.lp-recon-label {
+  display: block;
+  font-family: var(--font-mono);
+  font-size: .595rem;
+  letter-spacing: .09em;
+  text-transform: uppercase;
+  color: rgba(255,255,255,.28);
+  margin-bottom: 5px;
+}
+.lp-recon-val {
+  font-family: var(--font-mono);
+  font-size: 1.1rem;
+  font-weight: 700;
+  color: rgba(255,255,255,.72);
+  font-variant-numeric: tabular-nums;
+}
+.lp-result-thead {
+  display: grid;
+  grid-template-columns: 1fr 64px 72px 90px;
+  padding: 7px 18px;
+  background: rgba(255,255,255,.025);
+  border-bottom: 1px solid rgba(255,255,255,.06);
+}
+.lp-result-thead > span {
+  font-family: var(--font-mono);
+  font-size: .595rem;
+  letter-spacing: .09em;
+  text-transform: uppercase;
+  color: rgba(255,255,255,.28);
+  text-align: right;
+}
+.lp-result-thead > span:first-child { text-align: left; }
+.lp-result-row {
+  display: grid;
+  grid-template-columns: 1fr 64px 72px 90px;
+  padding: 9px 18px;
+  border-bottom: 1px solid rgba(255,255,255,.04);
+  align-items: center;
+  transition: background .1s;
+}
+.lp-result-row:last-child { border-bottom: none; }
+.lp-result-row:hover { background: rgba(155,140,240,.05); }
+.lp-result-due {
+  font-family: var(--font-mono);
+  font-size: .72rem;
+  color: var(--neg);
+  opacity: .75;
+  text-align: right;
+}
+.lp-result-settled {
+  font-family: var(--font-mono);
+  font-size: .72rem;
+  color: rgba(255,255,255,.22);
+  text-align: right;
+}
+
+/* ================================================================
+   BOTTOM CTA SECTION
+   ================================================================ */
+.lp-bottom-cta {
+  padding: clamp(48px, 5vw, 72px) clamp(24px, 5vw, 80px);
+  text-align: center;
+  border-top: 1px solid rgba(255,255,255,.06);
+  background: radial-gradient(ellipse 70% 90% at 50% 100%, #1c0e3e 0%, var(--bg) 70%);
+}
+.lp-bottom-cta__inner {
+  max-width: 600px;
+  margin: 0 auto;
+}
+.lp-bottom-cta__title {
+  font-size: clamp(24px, 3vw, 36px);
+  font-weight: 800;
+  color: var(--text);
+  letter-spacing: -.03em;
+  margin: 0 0 12px;
+}
+.lp-bottom-cta__sub {
+  font-size: .9375rem;
+  color: rgba(255,255,255,.4);
+  margin: 0 0 28px;
+  line-height: 1.6;
+}
+
+/* ================================================================
+   LANDING RESPONSIVE
+   ================================================================ */
+@media (max-width: 960px) {
+  .lp-hero {
+    flex-direction: column;
+    align-items: flex-start;
+    justify-content: flex-start;
+    min-height: 0;
+  }
+  .lp-hero__content { max-width: 100%; }
+  .lp-hero__visual { max-width: 100%; width: 100%; }
+  .lp-feat-grid { grid-template-columns: 1fr; }
+  .lp-feat + .lp-feat { border-left: none; border-top: 1px solid rgba(255,255,255,.06); }
+}
+@media (max-width: 680px) {
+  .lp-hero__visual { display: none; }
+  .lp-showcase__grid { grid-template-columns: 1fr; }
+  .lp-demo__thead--lb,
+  .lp-demo__row--lb { grid-template-columns: 28px 1fr 32px 80px; }
+  .lp-demo__thead--lb > span:nth-child(5),
+  .lp-demo__thead--lb > span:nth-child(6),
+  .lp-demo__row--lb > span:nth-child(5),
+  .lp-demo__row--lb > span:nth-child(6) { display: none; }
+}
+@media (max-width: 440px) {
+  .lp-hero { padding-left: 16px; padding-right: 16px; }
+  .lp-features,
+  .lp-showcase,
+  .lp-bottom-cta { padding-left: 16px; padding-right: 16px; }
+  .lp-feat-grid { border-radius: var(--r-md); }
+}
+
+
+/* ================================================================
+   DASHBOARD OVERVIEW REDESIGN
+   ================================================================ */
+.db-header {
+  display: flex;
+  align-items: flex-start;
+  justify-content: space-between;
+  gap: 16px;
+  margin-bottom: 28px;
+}
+.db-header__chips {
+  display: flex;
+  gap: 6px;
+  margin-bottom: 10px;
+  flex-wrap: wrap;
+  align-items: center;
+}
+.db-header__title {
+  font-size: clamp(22px, 3vw, 30px);
+  font-weight: 800;
+  color: var(--text-strong);
+  letter-spacing: -.025em;
+  line-height: 1.15;
+  margin: 0;
+}
+.db-header__sub {
+  margin: 6px 0 0;
+  color: var(--text-muted);
+  font-size: .875rem;
+  line-height: 1.5;
+}
+.db-header__actions {
+  display: flex;
+  gap: 8px;
+  flex-shrink: 0;
+  padding-top: 2px;
+}
+
+.db-live-alert {
+  display: flex;
+  align-items: center;
+  gap: 10px;
+  background: rgba(111,192,147,.07);
+  border: 1px solid rgba(111,192,147,.22);
+  border-radius: var(--r-md);
+  padding: 11px 16px;
+  margin-bottom: 24px;
+  font-size: .875rem;
+  color: var(--pos);
+}
+.db-live-alert__pulse {
+  width: 8px;
+  height: 8px;
+  border-radius: 50%;
+  background: var(--pos);
+  flex-shrink: 0;
+  box-shadow: 0 0 0 0 rgba(111,192,147,.4);
+  animation: pulse-ring 2s ease-in-out infinite;
+}
+@keyframes pulse-ring {
+  0%    { box-shadow: 0 0 0 0 rgba(111,192,147,.5); }
+  70%   { box-shadow: 0 0 0 6px rgba(111,192,147,0); }
+  100%  { box-shadow: 0 0 0 0 rgba(111,192,147,0); }
+}
+.db-live-alert__text { flex: 1; font-weight: 500; }
+.db-live-alert__link { color: var(--pos); font-weight: 600; white-space: nowrap; }
+.db-live-alert__link:hover { text-decoration: underline; }
+
+.db-stat-grid {
+  display: grid;
+  grid-template-columns: repeat(4, 1fr);
+  gap: 12px;
+  margin-bottom: 24px;
+}
+.db-stat {
+  background: var(--surface);
+  border: 1px solid var(--border);
+  border-radius: var(--r-md);
+  padding: 16px 18px;
+  display: flex;
+  align-items: center;
+  gap: 14px;
+}
+.db-stat__icon {
+  width: 40px;
+  height: 40px;
+  border-radius: var(--r-sm);
+  background: rgba(255,255,255,.05);
+  color: var(--text-muted);
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  flex-shrink: 0;
+}
+.db-stat__icon--accent { background: var(--accent-chip); border: 1px solid var(--accent-chip-bd); color: var(--accent); }
+.db-stat__icon--pos    { background: rgba(111,192,147,.12); color: var(--pos); }
+.db-stat__icon--warn   { background: rgba(224,177,92,.12);  color: var(--warn); }
+.db-stat__num {
+  display: block;
+  font-size: 1.65rem;
+  font-weight: 800;
+  color: var(--text-strong);
+  letter-spacing: -.035em;
+  line-height: 1.1;
+}
+.db-stat__label {
+  display: block;
+  font-size: .72rem;
+  color: var(--text-muted);
+  margin-top: 3px;
+  font-weight: 500;
+  letter-spacing: .02em;
+}
+
+.db-cash {
+  display: flex;
+  align-items: stretch;
+  background: var(--surface);
+  border: 1px solid var(--border);
+  border-radius: var(--r-lg);
+  overflow: hidden;
+  margin-bottom: 16px;
+}
+.db-cash__stat {
+  flex: 1;
+  padding: 16px 20px;
+  display: flex;
+  flex-direction: column;
+  gap: 5px;
+  min-width: 0;
+}
+.db-cash__div {
+  width: 1px;
+  background: var(--border);
+  flex-shrink: 0;
+}
+.db-cash__label {
+  font-size: .68rem;
+  font-weight: 600;
+  color: var(--text-muted);
+  letter-spacing: .05em;
+  text-transform: uppercase;
+  font-family: var(--font-mono);
+  white-space: nowrap;
+}
+.db-cash__val {
+  font-size: 1.375rem;
+  font-weight: 800;
+  color: var(--text-strong);
+  letter-spacing: -.03em;
+  line-height: 1.1;
+  font-variant-numeric: tabular-nums;
+  white-space: nowrap;
+}
+
+.db-cal {
+  background: var(--surface);
+  border: 1px solid var(--border);
+  border-radius: var(--r-lg);
+  padding: 16px 20px 18px;
+  margin-bottom: 16px;
+  position: relative;
+}
+.db-cal__hdr {
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  margin-bottom: 12px;
+}
+.db-cal__title {
+  font-size: .68rem;
+  font-weight: 600;
+  color: var(--muted);
+  text-transform: uppercase;
+  letter-spacing: .05em;
+  font-family: var(--font-mono);
+}
+.db-cal__nav-group {
+  display: flex;
+  align-items: center;
+  gap: 6px;
+}
+.db-cal__year {
+  font-size: .78rem;
+  font-weight: 600;
+  color: var(--text-2);
+  font-family: var(--font-mono);
+  min-width: 34px;
+  text-align: center;
+}
+.db-cal__nav {
+  background: none;
+  border: 1px solid var(--border);
+  border-radius: 4px;
+  color: var(--muted);
+  cursor: pointer;
+  font-size: 1rem;
+  line-height: 1;
+  padding: 1px 6px 3px;
+  transition: color .15s, border-color .15s;
+}
+.db-cal__nav:hover:not(:disabled) {
+  color: var(--text);
+  border-color: var(--border-strong);
+}
+.db-cal__nav:disabled {
+  opacity: .25;
+  cursor: not-allowed;
+}
+.db-cal__grid {
+  display: grid;
+  grid-template-rows: 14px repeat(7, 1fr);
+  grid-auto-flow: column;
+  grid-auto-columns: 1fr;
+  gap: 3px;
+  height: 132px;
+  width: 100%;
+}
+.db-cal__mc {
+  font-size: .59rem;
+  font-family: var(--font-mono);
+  color: var(--faintest);
+  letter-spacing: .02em;
+  display: flex;
+  align-items: flex-end;
+  padding-bottom: 1px;
+  user-select: none;
+}
+.db-cal__cell {
+  border-radius: 3px;
+  background: var(--border);
+  min-width: 0;
+  min-height: 0;
+}
+.db-cal__cell--on {
+  background: var(--accent);
+  opacity: .82;
+  cursor: default;
+}
+.db-cal__cell--on:hover {
+  opacity: 1;
+}
+.db-cal__cell--multi {
+  background: var(--accent);
+  opacity: 1;
+}
+.db-cal__cell--dim {
+  background: var(--surface-raised);
+}
+.db-cal__cell--out {
+  background: var(--surface-sunk);
+  opacity: .5;
+}
+.db-cal__tip {
+  position: fixed;
+  z-index: 300;
+  background: var(--surface-raised);
+  border: 1px solid var(--border-strong);
+  border-radius: 6px;
+  padding: 5px 10px;
+  font-size: .72rem;
+  color: var(--text-body);
+  pointer-events: none;
+  white-space: nowrap;
+  font-family: var(--font-mono);
+  box-shadow: 0 4px 16px rgba(0,0,0,.45);
+}
+
+.db-nav-grid {
+  display: grid;
+  grid-template-columns: repeat(2, 1fr);
+  gap: 12px;
+}
+.db-nav-tile {
+  background: var(--surface);
+  border: 1px solid var(--border);
+  border-radius: var(--r-lg);
+  padding: 20px;
+  display: flex;
+  align-items: flex-start;
+  gap: 16px;
+  text-decoration: none;
+  transition: border-color .15s, background .15s, box-shadow .15s;
+  position: relative;
+}
+.db-nav-tile:hover {
+  border-color: var(--accent-chip-bd);
+  background: rgba(155,140,240,.04);
+  box-shadow: 0 4px 24px rgba(0,0,0,.18);
+}
+.db-nav-tile__icon {
+  width: 44px;
+  height: 44px;
+  border-radius: 12px;
+  background: var(--accent-chip);
+  border: 1px solid var(--accent-chip-bd);
+  color: var(--accent);
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  flex-shrink: 0;
+  transition: background .15s;
+}
+.db-nav-tile__body { flex: 1; min-width: 0; }
+.db-nav-tile__title-row { display: flex; align-items: center; gap: 8px; margin-bottom: 4px; }
+.db-nav-tile__title {
+  font-size: .9375rem;
+  font-weight: 700;
+  color: var(--text-strong);
+}
+.db-nav-tile__count {
+  font-size: .7rem;
+  color: var(--text-muted);
+  font-weight: 600;
+  background: var(--surface-sunk);
+  border: 1px solid var(--border);
+  border-radius: 999px;
+  padding: 2px 9px;
+  line-height: 1.6;
+  white-space: nowrap;
+}
+.db-nav-tile__desc {
+  font-size: .8125rem;
+  color: var(--text-muted);
+  margin: 0;
+  line-height: 1.5;
+}
+.db-nav-tile__arrow {
+  font-size: 17px;
+  color: var(--text-muted);
+  opacity: .3;
+  transition: opacity .15s, transform .15s;
+  flex-shrink: 0;
+  align-self: center;
+}
+.db-nav-tile:hover .db-nav-tile__arrow { opacity: .65; transform: translateX(4px); }
+
+/* Per-section tile accents */
+.db-nav-tile--sessions {
+  border-left: 3px solid rgba(111,192,147,.32);
+}
+.db-nav-tile--sessions .db-nav-tile__icon {
+  background: rgba(111,192,147,.12);
+  border: 1px solid rgba(111,192,147,.28);
+  color: var(--pos);
+}
+.db-nav-tile--sessions:hover { border-left-color: rgba(111,192,147,.55); }
+
+.db-nav-tile--leaderboard {
+  border-left: 3px solid rgba(90,168,232,.28);
+}
+.db-nav-tile--leaderboard .db-nav-tile__icon {
+  background: rgba(90,168,232,.09);
+  border: 1px solid rgba(90,168,232,.24);
+  color: #5aa8e8;
+}
+.db-nav-tile--leaderboard:hover { border-left-color: rgba(90,168,232,.5); }
+
+.db-nav-tile--players {
+  border-left: 3px solid rgba(155,140,240,.3);
+}
+.db-nav-tile--players .db-nav-tile__icon {
+  background: var(--accent-chip);
+  border: 1px solid var(--accent-chip-bd);
+  color: var(--accent);
+}
+.db-nav-tile--players:hover { border-left-color: rgba(155,140,240,.55); }
+
+.db-nav-tile--ledger {
+  border-left: 3px solid rgba(224,177,92,.28);
+}
+.db-nav-tile--ledger .db-nav-tile__icon {
+  background: rgba(224,177,92,.1);
+  border: 1px solid rgba(224,177,92,.24);
+  color: var(--warn);
+}
+.db-nav-tile--ledger:hover { border-left-color: rgba(224,177,92,.5); }
+
+/* Live tile overrides the sessions color */
+.db-nav-tile--sessions.db-nav-tile--live {
+  border-left-color: rgba(111,192,147,.55);
+  background: rgba(111,192,147,.04);
+}
+.db-nav-tile--sessions.db-nav-tile--live:hover {
+  border-left-color: rgba(111,192,147,.78);
+  background: rgba(111,192,147,.08);
+}
+.db-nav-tile--sessions.db-nav-tile--live .db-nav-tile__icon {
+  background: rgba(111,192,147,.18);
+  border-color: rgba(111,192,147,.4);
+}
+
+@media (max-width: 960px) {
+  .db-stat-grid { grid-template-columns: repeat(2, 1fr); }
+  .db-nav-grid  { grid-template-columns: 1fr; }
+}
+@media (max-width: 700px) {
+  .db-cash { flex-wrap: wrap; }
+  .db-cash__stat { flex: 1 1 40%; }
+  .db-cash__div { display: none; }
+  .db-cal__grid { height: 110px; }
+}
+@media (max-width: 560px) {
+  .db-header { flex-direction: column; gap: 12px; }
+  .db-cash__val { font-size: 1.125rem; }
+  .db-cal__grid { height: 96px; }
+  .db-cal__mc { font-size: .52rem; }
+}
+
+/* ================================================================
+   LEAGUES INDEX — card list
+   ================================================================ */
+.li-board {
+  display: flex;
+  flex-direction: column;
+  gap: 10px;
+}
+.li-card {
+  background: var(--surface);
+  border: 1px solid var(--border);
+  border-radius: var(--r-lg);
+  overflow: hidden;
+  transition: border-color .15s, box-shadow .15s;
+  display: flex;
+  flex-direction: row;
+}
+.li-card:hover { border-color: var(--border-strong); box-shadow: 0 2px 16px rgba(0,0,0,.14); }
+.li-card--live { border-color: rgba(111,192,147,.3); }
+.li-card--live:hover { border-color: rgba(111,192,147,.5); }
+
+/* left initial badge column */
+.li-card__aside {
+  width: 56px;
+  flex-shrink: 0;
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  background: var(--surface-sunk);
+  border-right: 1px solid var(--border);
+}
+.li-card--live .li-card__aside {
+  background: rgba(111,192,147,.05);
+  border-right-color: rgba(111,192,147,.2);
+}
+.li-card__initial {
+  font-size: 1.375rem;
+  font-weight: 800;
+  color: var(--accent);
+  letter-spacing: -.03em;
+  line-height: 1;
+  opacity: .75;
+  user-select: none;
+}
+.li-card--live .li-card__initial { color: var(--pos); }
+
+/* right content column */
+.li-card__body {
+  flex: 1;
+  min-width: 0;
+  display: flex;
+  flex-direction: column;
+}
+
+/* top section: name + badges + desc on left, stats on right */
+.li-card__head {
+  display: flex;
+  align-items: flex-start;
+  justify-content: space-between;
+  gap: 20px;
+  padding: 18px 20px 14px;
+}
+.li-card__info { flex: 1; min-width: 0; }
+.li-card__name-row {
+  display: flex;
+  align-items: center;
+  gap: 8px;
+  margin-bottom: 6px;
+  flex-wrap: wrap;
+}
+.li-card__name {
+  font-size: 1.05rem;
+  font-weight: 700;
+  color: var(--text-strong);
+  text-decoration: none;
+  line-height: 1.25;
+}
+.li-card__name:hover { color: var(--accent); }
+.li-card__chips {
+  display: flex;
+  gap: 5px;
+  flex-wrap: wrap;
+  margin-bottom: 6px;
+}
+.li-card__desc {
+  font-size: .8125rem;
+  color: var(--text-muted);
+  margin: 0;
+  line-height: 1.5;
+}
+.li-card__stats {
+  display: flex;
+  gap: 20px;
+  flex-shrink: 0;
+  align-self: flex-start;
+  padding-top: 2px;
+}
+.li-stat {
+  display: flex;
+  flex-direction: column;
+  align-items: flex-end;
+  gap: 2px;
+}
+.li-stat span {
+  font-size: .65rem;
+  color: var(--text-muted);
+  font-weight: 500;
+  letter-spacing: .05em;
+  text-transform: uppercase;
+  white-space: nowrap;
+}
+.li-stat strong {
+  font-size: 1rem;
+  font-weight: 700;
+  color: var(--text-strong);
+  font-variant-numeric: tabular-nums;
+  font-family: var(--font-mono);
+}
+
+/* leaders strip — podium chips */
+.li-card__leaders {
+  display: flex;
+  align-items: center;
+  gap: 0;
+  padding: 9px 20px;
+  border-top: 1px solid var(--border);
+  background: rgba(255,255,255,.015);
+  overflow: hidden;
+}
+.li-card__leaders-label {
+  font-size: .6rem;
+  font-weight: 600;
+  letter-spacing: .09em;
+  text-transform: uppercase;
+  color: var(--text-muted);
+  margin-right: 14px;
+  white-space: nowrap;
+  flex-shrink: 0;
+}
+.li-podium {
+  display: flex;
+  gap: 7px;
+  flex: 1;
+  min-width: 0;
+  flex-wrap: wrap;
+}
+.li-podium-item {
+  display: flex;
+  align-items: center;
+  gap: 5px;
+  padding: 4px 10px 4px 7px;
+  border-radius: var(--r-md);
+  border: 1px solid var(--border);
+  background: var(--surface-sunk);
+  flex-shrink: 0;
+}
+.li-podium-item--1 { border-color: rgba(244,196,48,.3); background: rgba(244,196,48,.05); }
+.li-podium-item--2 { border-color: rgba(176,184,193,.2); background: rgba(176,184,193,.04); }
+.li-podium-item--3 { border-color: rgba(200,121,65,.22); background: rgba(200,121,65,.04); }
+.li-podium-rank {
+  font-family: var(--font-mono);
+  font-size: .65rem;
+  font-weight: 700;
+  color: var(--text-muted);
+}
+.li-podium-item--1 .li-podium-rank { color: #f4c430; }
+.li-podium-item--2 .li-podium-rank { color: #b0b8c1; }
+.li-podium-item--3 .li-podium-rank { color: #c87941; }
+.li-podium-name {
+  font-size: .8125rem;
+  color: var(--text-2);
+}
+.li-podium-net {
+  font-family: var(--font-mono);
+  font-size: .75rem;
+  font-variant-numeric: tabular-nums;
+  font-weight: 600;
+}
+
+/* footer: meta + actions */
+.li-card__footer {
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  gap: 12px;
+  padding: 9px 20px;
+  border-top: 1px solid var(--border);
+}
+.li-card__meta {
+  font-size: .75rem;
+  color: var(--text-muted);
+  white-space: nowrap;
+  overflow: hidden;
+  text-overflow: ellipsis;
+}
+.li-card__actions {
+  display: flex;
+  align-items: center;
+  gap: 4px;
+  flex-shrink: 0;
+}
+.li-action-link {
+  font-size: .75rem;
+  color: var(--text-muted);
+  padding: 4px 9px;
+  border-radius: var(--r-sm);
+  text-decoration: none;
+  transition: color .12s, background .12s;
+  font-weight: 500;
+}
+.li-action-link:hover { color: var(--text-2); background: var(--surface-raised); }
+
+@media (max-width: 640px) {
+  .li-card__aside { width: 44px; }
+  .li-card__initial { font-size: 1.1rem; }
+  .li-card__head { flex-direction: column; gap: 12px; }
+  .li-card__stats { flex-direction: row; align-self: auto; }
+  .li-stat { align-items: flex-start; }
+  .li-card__footer { flex-wrap: wrap; gap: 8px; }
+  .li-action-link { display: none; }
+}
+@media (max-width: 400px) {
+  .li-card__aside { display: none; }
+}
+
+
+/* ================================================================
+   ACCOUNT SETTINGS REDESIGN
+   ================================================================ */
+.settings-profile {
+  display: flex;
+  align-items: center;
+  gap: 18px;
+  margin-bottom: 28px;
+  padding-bottom: 24px;
+  border-bottom: 1px solid var(--border);
+}
+.settings-avatar {
+  width: 52px;
+  height: 52px;
+  border-radius: 50%;
+  background: var(--accent-chip);
+  border: 2px solid var(--accent-chip-bd);
+  color: var(--accent);
+  font-size: 1.25rem;
+  font-weight: 700;
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  flex-shrink: 0;
+  letter-spacing: -.01em;
+}
+.settings-profile__title {
+  font-size: 1.25rem;
+  font-weight: 700;
+  color: var(--text-strong);
+  margin: 0 0 4px;
+}
+.settings-profile__email {
+  font-size: .875rem;
+  color: var(--text-muted);
+  margin: 0;
+}
+.settings-profile__meta { display: flex; flex-direction: column; }
+
+/* ================================================================
+   EXPLORE PAGE REDESIGN
+   ================================================================ */
+.explore-header {
+  margin-bottom: 28px;
+}
+.explore-header__eyebrow {
+  font: 600 11px var(--font-mono);
+  letter-spacing: .1em;
+  text-transform: uppercase;
+  color: var(--accent);
+  margin: 0 0 10px;
+}
+.explore-header__title {
+  font-size: clamp(22px, 3vw, 30px);
+  font-weight: 800;
+  color: var(--text-strong);
+  letter-spacing: -.025em;
+  margin: 0 0 6px;
+}
+.explore-header__sub {
+  font-size: .875rem;
+  color: var(--text-muted);
+  margin: 0;
+}
+
+.explore-search-row {
+  display: flex;
+  gap: 8px;
+  margin-bottom: 28px;
+  max-width: 560px;
+}
+.explore-search-row .field-input {
+  flex: 1;
+  background: var(--surface);
+  border: 1px solid var(--border-strong);
+  border-radius: var(--r-md);
+  padding: 10px 14px;
+  font-size: .9375rem;
+  color: var(--text);
+  transition: border-color .15s, box-shadow .15s;
+}
+.explore-search-row .field-input:focus {
+  outline: none;
+  border-color: var(--accent-chip-bd);
+  box-shadow: 0 0 0 3px var(--accent-a22);
+}
+.explore-search-row .field-input::placeholder { color: var(--text-muted); }
+
+.explore-cards {
+  display: grid;
+  grid-template-columns: repeat(auto-fill, minmax(280px, 1fr));
+  gap: 16px;
+}
+.ex-card {
+  background: var(--surface);
+  border: 1px solid var(--border);
+  border-radius: var(--r-lg);
+  padding: 20px;
+  text-decoration: none;
+  display: flex;
+  flex-direction: column;
+  gap: 0;
+  transition: border-color .15s, box-shadow .15s;
+}
+.ex-card:hover {
+  border-color: var(--accent-chip-bd);
+  box-shadow: 0 4px 24px rgba(0,0,0,.2);
+}
+.ex-card__initial {
+  width: 40px;
+  height: 40px;
+  border-radius: var(--r-sm);
+  background: var(--accent-chip);
+  border: 1px solid var(--accent-chip-bd);
+  color: var(--accent);
+  font-size: 1rem;
+  font-weight: 700;
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  margin-bottom: 14px;
+  flex-shrink: 0;
+}
+.ex-card__name {
+  font-size: 1rem;
+  font-weight: 700;
+  color: var(--text-strong);
+  margin: 0 0 6px;
+}
+.ex-card__desc {
+  font-size: .8125rem;
+  color: var(--text-muted);
+  margin: 0 0 16px;
+  line-height: 1.5;
+  flex: 1;
+}
+.ex-card__stats {
+  display: flex;
+  gap: 16px;
+  border-top: 1px solid var(--border);
+  padding-top: 14px;
+  margin-top: auto;
+}
+.ex-card__stat { display: flex; flex-direction: column; gap: 2px; }
+.ex-card__stat .kicker { font-size: .65rem; }
+.ex-card__stat strong { font-size: .9375rem; font-weight: 700; color: var(--text-strong); }
+.ex-card__footer {
+  display: flex;
+  justify-content: flex-end;
+  padding-top: 12px;
+  margin-top: 2px;
+}
+.ex-card__link {
+  font-size: .75rem;
+  font-weight: 600;
+  color: var(--accent);
+  transition: gap .15s;
+}
diff --git a/static/css/tokens.css b/static/css/tokens.css
index 00e4681..3e68c57 100644
--- a/static/css/tokens.css
+++ b/static/css/tokens.css
@@ -1,34 +1,37 @@
+@import url('https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700;800&display=swap');
+
 :root {
   /* ---- surfaces (darkest → lightest) ---- */
-  --bg:            #0f0f12;
-  --surface:       #16161c;
-  --surface-raised:#1a1a20;
-  --surface-head:  #1c1c24;
-  --surface-sunk:  #131318;
-  --field:         #1f1f27;
-  --field-alt:     #20202a;
+  --bg:            #0a0a0d;
+  --surface:       #111115;
+  --surface-raised:#16161c;
+  --surface-head:  #18181f;
+  --surface-sunk:  #0d0d11;
+  --field:         #1a1a22;
+  --field-alt:     #1c1c25;
 
   /* ---- borders / dividers ---- */
-  --border:        #26262f;
-  --border-strong: #2e2e38;
-  --border-hi:     #34343f;
-  --divider:       #1d1d25;
-  --slash:         #3a3a45;
+  --border:        #22222b;
+  --border-strong: #2a2a34;
+  --border-hi:     #32323d;
+  --divider:       #191921;
+  --slash:         #383843;
 
   /* ---- text ---- */
-  --text:          #f3f1f8;
-  --text-strong:   #ecebf1;
-  --text-body:     #e7e5ec;
-  --text-2:        #bcbac6;
-  --num:           #b0aeba;
-  --muted:         #8f8d99;
-  --muted-2:       #84828e;
-  --faint:         #7d7b87;
-  --faint-2:       #757380;
-  --faintest:      #66646f;
-  --faintest-2:    #57555f;
+  --text:          #f4f2f9;
+  --text-strong:   #edeaf5;
+  --text-body:     #e8e6ef;
+  --text-2:        #bdbbc8;
+  --num:           #b2b0bb;
+  --muted:         #8c8a96;
+  --muted-2:       #82808c;
+  --faint:         #7a7885;
+  --faint-2:       #72707d;
+  --faintest:      #64626d;
+  --faintest-2:    #55535e;
 
-  /* ---- accent (violet) ---- */
+  /* ---- accent ---- */
+  /* To swap brand color later: edit these 7 vars only */
   --accent:        #9b8cf0;
   --accent-ink:    #12101e;
   --accent-tint:   #1f1d2e;
@@ -65,12 +68,22 @@
   --line-1: #9b8cf0; --line-2: #6fc093; --line-3: #e0b15c;
   --line-4: #cf6f86; --line-5: #8f93c2;
 
+  /* ---- elevation shadows ---- */
+  --shadow-sm: 0 1px 3px rgba(0,0,0,.30), 0 1px 2px rgba(0,0,0,.22);
+  --shadow-md: 0 4px 16px rgba(0,0,0,.34), 0 2px 6px rgba(0,0,0,.24);
+  --shadow-lg: 0 12px 36px rgba(0,0,0,.42), 0 4px 12px rgba(0,0,0,.28);
+  --shadow-xl: 0 24px 64px rgba(0,0,0,.52), 0 8px 24px rgba(0,0,0,.32);
+
+  /* ---- glass panel effect ---- */
+  --glass-border: 1px solid rgba(255,255,255,.055);
+  --glass-bg:     rgba(255,255,255,.02);
+
   /* ---- spacing scale (4pt) ---- */
   --s1:4px; --s2:8px; --s3:12px; --s4:16px; --s5:20px;
   --s6:24px; --s8:32px; --s10:40px; --s12:48px;
 
   /* ---- radii ---- */
-  --r-pill:6px; --r-sm:9px; --r-md:11px; --r-lg:14px;
+  --r-pill:6px; --r-sm:9px; --r-md:12px; --r-lg:16px;
 
   /* ---- containers ---- */
   --w-public:1320px;
@@ -79,6 +92,6 @@
   --gutter: clamp(16px, 4vw, 40px);
 
   /* ---- Chart.js backward compat (read as raw strings by JS) ---- */
-  --text-muted: #bcbac6;
-  --line: #26262f;
+  --text-muted: #bdbbc8;
+  --line: #22222b;
 }
diff --git a/static/favicon.svg b/static/favicon.svg
index fe83d79..29d8775 100644
--- a/static/favicon.svg
+++ b/static/favicon.svg
@@ -1,4 +1,4 @@
 <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 26 26">
   <rect width="26" height="26" rx="5" fill="#9b8cf0"/>
-  <path d="M13 5.22 20.78 13 13 20.78 5.22 13Z" fill="#0f0f12"/>
+  <path d="M13 5.22 20.78 13 13 20.78 5.22 13Z" fill="#12101e"/>
 </svg>
diff --git a/templates/_league_sidebar.html b/templates/_league_sidebar.html
new file mode 100644
index 0000000..4fbaef3
--- /dev/null
+++ b/templates/_league_sidebar.html
@@ -0,0 +1,87 @@
+<aside class="sidebar">
+    <div class="sidebar__header">
+        <div class="sidebar__badge">{{ league.name[0]|upper }}</div>
+        <div class="sidebar__meta">
+            <span class="sidebar__league-name">{{ league.name }}</span>
+            {% if is_owner is defined and is_owner %}
+            <span class="sidebar__role">Owner</span>
+            {% endif %}
+        </div>
+    </div>
+
+    <nav class="sidebar__nav" aria-label="League navigation">
+        <a class="sidebar__link {{ 'is-active' if request.endpoint == 'leagues.dashboard' }}"
+           href="{{ url_for('leagues.dashboard', league_ref=league.url_ref) }}">
+            <svg viewBox="0 0 16 16" fill="none" aria-hidden="true">
+                <rect x="1" y="1" width="6" height="6" rx="1.5" stroke="currentColor" stroke-width="1.4"/>
+                <rect x="9" y="1" width="6" height="6" rx="1.5" stroke="currentColor" stroke-width="1.4"/>
+                <rect x="1" y="9" width="6" height="6" rx="1.5" stroke="currentColor" stroke-width="1.4"/>
+                <rect x="9" y="9" width="6" height="6" rx="1.5" stroke="currentColor" stroke-width="1.4"/>
+            </svg>
+            <span>Overview</span>
+        </a>
+
+        <a class="sidebar__link {{ 'is-active' if request.endpoint in ('leagues.sessions', 'leagues.session_detail', 'leagues.session_view') }}"
+           href="{{ url_for('leagues.sessions', league_ref=league.url_ref) }}">
+            <svg viewBox="0 0 16 16" fill="none" aria-hidden="true">
+                <rect x="1" y="3" width="14" height="12" rx="2" stroke="currentColor" stroke-width="1.4"/>
+                <path d="M5 1v4M11 1v4M1 7h14" stroke="currentColor" stroke-width="1.4" stroke-linecap="round"/>
+            </svg>
+            <span>Sessions</span>
+        </a>
+
+        <a class="sidebar__link {{ 'is-active' if request.endpoint in ('leagues.players', 'leagues.player_detail') }}"
+           href="{{ url_for('leagues.players', league_ref=league.url_ref) }}">
+            <svg viewBox="0 0 16 16" fill="none" aria-hidden="true">
+                <circle cx="6" cy="5.5" r="2.5" stroke="currentColor" stroke-width="1.4"/>
+                <path d="M1 14c0-2.761 2.239-5 5-5" stroke="currentColor" stroke-width="1.4" stroke-linecap="round"/>
+                <circle cx="11.5" cy="5.5" r="2" stroke="currentColor" stroke-width="1.3"/>
+                <path d="M9 14c0-1.657 1.119-3.084 2.5-3.084S14 12.343 14 14" stroke="currentColor" stroke-width="1.3" stroke-linecap="round"/>
+            </svg>
+            <span>Players</span>
+        </a>
+
+        <a class="sidebar__link {{ 'is-active' if request.endpoint == 'leagues.leaderboard' }}"
+           href="{{ url_for('leagues.leaderboard', league_ref=league.url_ref) }}">
+            <svg viewBox="0 0 16 16" fill="none" aria-hidden="true">
+                <rect x="1" y="9" width="4" height="6" rx="1" stroke="currentColor" stroke-width="1.4"/>
+                <rect x="6" y="5" width="4" height="10" rx="1" stroke="currentColor" stroke-width="1.4"/>
+                <rect x="11" y="1" width="4" height="14" rx="1" stroke="currentColor" stroke-width="1.4"/>
+            </svg>
+            <span>Leaderboard</span>
+        </a>
+
+        {% if is_logged_in %}
+        <a class="sidebar__link {{ 'is-active' if request.endpoint == 'leagues.ledger' }}"
+           href="{{ url_for('leagues.ledger', league_ref=league.url_ref) }}">
+            <svg viewBox="0 0 16 16" fill="none" aria-hidden="true">
+                <rect x="2" y="1" width="12" height="14" rx="2" stroke="currentColor" stroke-width="1.4"/>
+                <path d="M5 5h6M5 8h6M5 11h3" stroke="currentColor" stroke-width="1.4" stroke-linecap="round"/>
+            </svg>
+            <span>Ledger</span>
+        </a>
+        {% endif %}
+
+        {% if is_owner is defined and is_owner %}
+        <a class="sidebar__link {{ 'is-active' if request.endpoint == 'leagues.league_settings' }}"
+           href="{{ url_for('leagues.league_settings', league_ref=league.url_ref) }}">
+            <svg viewBox="0 0 16 16" fill="none" aria-hidden="true">
+                <circle cx="8" cy="8" r="2.5" stroke="currentColor" stroke-width="1.4"/>
+                <path d="M8 1v2M8 13v2M1 8h2M13 8h2M2.93 2.93l1.41 1.41M11.66 11.66l1.41 1.41M2.93 13.07l1.41-1.41M11.66 4.34l1.41-1.41" stroke="currentColor" stroke-width="1.4" stroke-linecap="round"/>
+            </svg>
+            <span>Settings</span>
+        </a>
+        {% endif %}
+    </nav>
+
+    <div class="sidebar__footer">
+        {% if is_logged_in %}
+        <a class="sidebar__back" href="{{ url_for('leagues.index') }}">
+            <svg viewBox="0 0 12 12" fill="none" aria-hidden="true">
+                <path d="M7 2L3 6l4 4" stroke="currentColor" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"/>
+            </svg>
+            All leagues
+        </a>
+        {% endif %}
+    </div>
+</aside>
diff --git a/templates/account_login.html b/templates/account_login.html
index da8ddb8..20ad18b 100644
--- a/templates/account_login.html
+++ b/templates/account_login.html
@@ -1,27 +1,68 @@
 {% extends "base.html" %}
-{% block title %}Login · myboker.org{% endblock %}
+{% block title %}Sign in · myboker.org{% endblock %}
+{% block page_class %}page--auth{% endblock %}
 {% block content %}
 
-<div class="form-shell narrow">
-    <form class="panel form-card" method="post">
-        <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
-        <div>
-            <p class="eyebrow">Owner access</p>
-            <h1 style="font-size:28px;margin-bottom:8px;">Account login</h1>
-            <p class="muted-text" style="margin-bottom:8px;">Manage leagues, players, sessions, and ledger entries.</p>
+<div class="auth-split">
+    <div class="auth-split__form-col">
+        <div class="auth-split__form-inner">
+            <a class="auth-split__brand" href="{{ url_for('public.home') }}">
+                <div class="auth-split__brand-mark"></div>
+                <span class="auth-split__brand-name">myboker<span class="auth-split__brand-tld">.org</span></span>
+            </a>
+
+            <h1 class="auth-split__title">Welcome back.</h1>
+            <p class="auth-split__sub">Sign in to manage your leagues, sessions, and ledger.</p>
+
+            <form method="post">
+                <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
+                <div class="auth-field">
+                    <label for="email">Email</label>
+                    <input id="email" type="email" name="email" autocomplete="email"
+                           value="{{ form.email or '' }}" placeholder="you@example.com" required>
+                </div>
+                <div class="auth-field">
+                    <label for="password">Password</label>
+                    <input id="password" type="password" name="password"
+                           autocomplete="current-password" placeholder="••••••••" required>
+                </div>
+                <div class="auth-links">
+                    <a href="{{ url_for('account.forgot_password') }}">Forgot password?</a>
+                </div>
+                <button class="btn btn--primary auth-submit" type="submit">Sign in →</button>
+            </form>
+
+            <p class="auth-alt">No account yet? <a href="{{ url_for('account.register') }}">Create one</a></p>
         </div>
-        <label>
-            <span>Email</span>
-            <input type="email" name="email" autocomplete="email" value="{{ form.email or '' }}" required>
-        </label>
-        <label>
-            <span>Password</span>
-            <input type="password" name="password" autocomplete="current-password" required>
-        </label>
-        <button class="btn btn--primary" type="submit">Login</button>
-        <a class="btn btn--ghost" href="{{ url_for('account.register') }}">Create account</a>
-        <a style="font:400 12px/1 var(--font-ui);color:var(--text-3);text-align:center;margin-top:4px;" href="{{ url_for('account.forgot_password') }}">Forgot password?</a>
-    </form>
+    </div>
+
+    <div class="auth-split__visual" aria-hidden="true">
+        <div class="auth-visual__body">
+            <div class="auth-visual__icon">
+                <svg width="26" height="26" viewBox="0 0 26 26" fill="none">
+                    <path d="M13 2L22 7.5V18.5L13 24L4 18.5V7.5L13 2Z" stroke="rgba(155,140,240,.65)" stroke-width="1.4" fill="none"/>
+                    <path d="M13 8L18 11V17L13 20L8 17V11L13 8Z" fill="rgba(155,140,240,.25)" stroke="rgba(155,140,240,.55)" stroke-width="1"/>
+                </svg>
+            </div>
+            <p class="auth-visual__title">Track every chip.</p>
+            <p class="auth-visual__sub">Sessions, leaderboards, and debts — all in one place for your private poker league.</p>
+            <div class="auth-visual__preview">
+                <div class="auth-visual__preview-kicker">Live leaderboard</div>
+                <div class="auth-visual__preview-row">
+                    <span>Rivera</span>
+                    <strong style="color:var(--pos);">+$1,420</strong>
+                </div>
+                <div class="auth-visual__preview-row">
+                    <span>Chen</span>
+                    <strong style="color:var(--pos);">+$640</strong>
+                </div>
+                <div class="auth-visual__preview-row" style="opacity:.5">
+                    <span>Okafor</span>
+                    <strong style="color:var(--neg);">-$210</strong>
+                </div>
+            </div>
+        </div>
+    </div>
 </div>
 
 {% endblock %}
diff --git a/templates/account_register.html b/templates/account_register.html
index d0c65b3..3b3f5cc 100644
--- a/templates/account_register.html
+++ b/templates/account_register.html
@@ -1,30 +1,71 @@
 {% extends "base.html" %}
 {% block title %}Create Account · myboker.org{% endblock %}
+{% block page_class %}page--auth{% endblock %}
 {% block content %}
 
-<div class="form-shell narrow">
-    <form class="panel form-card" method="post">
-        <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
-        <div>
-            <p class="eyebrow">Owner account</p>
-            <h1 style="font-size:28px;margin-bottom:8px;">Create account</h1>
-            <p class="muted-text" style="margin-bottom:8px;">Accounts are for league owners and managers.</p>
+<div class="auth-split">
+    <div class="auth-split__form-col">
+        <div class="auth-split__form-inner">
+            <a class="auth-split__brand" href="{{ url_for('public.home') }}">
+                <div class="auth-split__brand-mark"></div>
+                <span class="auth-split__brand-name">myboker<span class="auth-split__brand-tld">.org</span></span>
+            </a>
+
+            <h1 class="auth-split__title">Start your league.</h1>
+            <p class="auth-split__sub">Create an account to manage leagues, players, and sessions.</p>
+
+            <form method="post">
+                <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
+                <div class="auth-field">
+                    <label for="email">Email</label>
+                    <input id="email" type="email" name="email" autocomplete="email"
+                           value="{{ form.email or '' }}" placeholder="you@example.com" required>
+                </div>
+                <div class="auth-field">
+                    <label for="password">Password</label>
+                    <input id="password" type="password" name="password"
+                           autocomplete="new-password" placeholder="At least 8 characters" minlength="8" required>
+                </div>
+                <div class="auth-field">
+                    <label for="confirm_password">Confirm password</label>
+                    <input id="confirm_password" type="password" name="confirm_password"
+                           autocomplete="new-password" placeholder="Repeat your password" minlength="8" required>
+                </div>
+                <button class="btn btn--primary auth-submit" type="submit">Create account →</button>
+            </form>
+
+            <p class="auth-alt">Already have an account? <a href="{{ url_for('account.login') }}">Sign in</a></p>
         </div>
-        <label>
-            <span>Email</span>
-            <input type="email" name="email" autocomplete="email" value="{{ form.email or '' }}" required>
-        </label>
-        <label>
-            <span>Password</span>
-            <input type="password" name="password" autocomplete="new-password" minlength="8" required>
-        </label>
-        <label>
-            <span>Confirm password</span>
-            <input type="password" name="confirm_password" autocomplete="new-password" minlength="8" required>
-        </label>
-        <button class="btn btn--primary" type="submit">Create account</button>
-        <a class="btn btn--ghost" href="{{ url_for('account.login') }}">Login instead</a>
-    </form>
+    </div>
+
+    <div class="auth-split__visual" aria-hidden="true">
+        <div class="auth-visual__body">
+            <div class="auth-visual__icon">
+                <svg width="26" height="26" viewBox="0 0 26 26" fill="none">
+                    <rect x="3" y="5" width="20" height="16" rx="3" stroke="rgba(155,140,240,.65)" stroke-width="1.4" fill="none"/>
+                    <path d="M3 10h20" stroke="rgba(155,140,240,.45)" stroke-width="1.2"/>
+                    <path d="M8 15h4M8 18h6" stroke="rgba(155,140,240,.55)" stroke-width="1.2" stroke-linecap="round"/>
+                </svg>
+            </div>
+            <p class="auth-visual__title">Free to start.</p>
+            <p class="auth-visual__sub">No credit card, no monthly fees, no payment processor taking a cut of your buy-ins.</p>
+            <div class="auth-visual__preview">
+                <div class="auth-visual__preview-kicker">What you get</div>
+                <div class="auth-visual__preview-row">
+                    <span>Multiple leagues</span>
+                    <strong style="color:var(--pos);">✓</strong>
+                </div>
+                <div class="auth-visual__preview-row">
+                    <span>Full ledger history</span>
+                    <strong style="color:var(--pos);">✓</strong>
+                </div>
+                <div class="auth-visual__preview-row">
+                    <span>Platform fee</span>
+                    <strong style="color:var(--muted);">$0</strong>
+                </div>
+            </div>
+        </div>
+    </div>
 </div>
 
 {% endblock %}
diff --git a/templates/account_settings.html b/templates/account_settings.html
index 8bbe18d..e205e82 100644
--- a/templates/account_settings.html
+++ b/templates/account_settings.html
@@ -2,14 +2,13 @@
 {% block title %}Account settings · myboker.org{% endblock %}
 {% block content %}
 
-<div class="hero" style="padding-bottom:18px;">
-    <p class="hero__kicker">Account</p>
-    <h1 class="hero__title">Settings</h1>
-    <p class="hero__sub">Manage your email address, password, and account.</p>
-</div>
-
-<div class="toolbar">
-    <div class="toolbar__left">
+<div class="settings-profile">
+    <div class="settings-avatar">{{ user.email[0] | upper }}</div>
+    <div class="settings-profile__meta">
+        <h1 class="settings-profile__title">Account Settings</h1>
+        <p class="settings-profile__email">{{ user.email }}</p>
+    </div>
+    <div style="margin-left:auto;">
         <a class="btn btn--ghost btn--sm" href="{{ url_for('leagues.index') }}">My leagues</a>
     </div>
 </div>
diff --git a/templates/base.html b/templates/base.html
index 1cb7909..3fd23af 100644
--- a/templates/base.html
+++ b/templates/base.html
@@ -15,7 +15,7 @@
         <div class="topbar__inner">
             <a class="brand" href="{{ url_for('public.home') }}">
                 <span class="brand__mark"></span>
-                <span class="brand__name">myboker.org</span>
+                <span class="brand__name">myboker<span class="brand__tld">.org</span></span>
             </a>
             <button class="nav-toggle" type="button" aria-controls="mainnav" aria-expanded="false" aria-label="Open navigation">
                 <span></span>
@@ -51,8 +51,10 @@
             {% endif %}
         </div>
     </header>
-    {% block subnav %}{% endblock %}
+    <div class="app-shell">
+    {% block sidebar %}{% endblock %}
     <main class="page {% block page_class %}page--public{% endblock %}">
+    {% block subnav %}{% endblock %}
         {% with messages = get_flashed_messages(with_categories=true) %}
             {% if messages %}
                 <div class="flash-stack">
@@ -66,11 +68,22 @@
         {% block content %}{% endblock %}
 
         <footer class="site-footer" aria-label="Site footer">
-            <span>&copy; 2026 myboker.org</span>
-            <span>Version {{ app_version }}</span>
-            <span><a href="{{ url_for('public.help') }}" style="color:inherit;text-decoration:none;">Help</a> · cedarline.digital</span>
+            <div class="site-footer__copy">
+                <span>&copy; 2026 <strong>myboker.org</strong></span>
+                <span class="site-footer__version">v{{ app_version }}</span>
+            </div>
+            <nav class="site-footer__links" aria-label="Footer links">
+                <a href="{{ url_for('public.help') }}">Help</a>
+                <a href="#">Contact</a>
+                <a href="#">Privacy</a>
+                <a href="#">Terms</a>
+            </nav>
+            <div class="site-footer__brand">
+                <a href="https://cedarline.digital" target="_blank" rel="noopener">cedarline.digital</a>
+            </div>
         </footer>
     </main>
+    </div><!-- /.app-shell -->
     <script>
     (() => {
         const toggle = document.querySelector('.nav-toggle');
diff --git a/templates/explore.html b/templates/explore.html
index f643244..68ce088 100644
--- a/templates/explore.html
+++ b/templates/explore.html
@@ -2,58 +2,62 @@
 {% block title %}Explore leagues · myboker.org{% endblock %}
 {% block content %}
 
-<div class="hero" style="padding-bottom:8px;">
-    <p class="hero__kicker">Public leagues</p>
-    <h1 class="hero__title">Explore</h1>
-    <p class="hero__sub">Browse poker leagues that have made their results publicly visible.</p>
+<div class="explore-header">
+    <p class="explore-header__eyebrow">Public leagues</p>
+    <h1 class="explore-header__title">Explore</h1>
+    <p class="explore-header__sub">Browse poker leagues that have made their results publicly visible.</p>
 </div>
 
-<form method="get" action="{{ url_for('public.explore') }}" class="explore-search">
-    <input class="field-input explore-search__input" type="text" name="q" value="{{ q }}" placeholder="Search by league name…">
+<form method="get" action="{{ url_for('public.explore') }}" class="explore-search-row">
+    <input class="field-input" type="text" name="q" value="{{ q }}" placeholder="Search by league name…" autocomplete="off">
     <button class="btn btn--primary" type="submit">Search</button>
     {% if q %}<a class="btn btn--ghost" href="{{ url_for('public.explore') }}">Clear</a>{% endif %}
 </form>
 
 {% if leagues %}
-<div class="explore-grid">
+<div class="explore-cards">
     {% for league in leagues %}
     {% set c = counts.get(league.id, {}) %}
-    <a class="explore-card" href="{{ url_for('leagues.dashboard', league_ref=league.url_ref) }}">
-        <div class="explore-card__head">
-            <h2 class="explore-card__name">{{ league.name }}</h2>
-            {% if league.description %}
-            <p class="explore-card__desc">{{ league.description }}</p>
-            {% endif %}
-        </div>
-        <div class="explore-card__stats">
-            <div class="explore-card__stat">
+    <a class="ex-card" href="{{ url_for('leagues.dashboard', league_ref=league.url_ref) }}">
+        <div class="ex-card__initial">{{ league.name[0] | upper }}</div>
+        <h2 class="ex-card__name">{{ league.name }}</h2>
+        {% if league.description %}
+        <p class="ex-card__desc">{{ league.description }}</p>
+        {% else %}
+        <p class="ex-card__desc" style="opacity:.35;">No description</p>
+        {% endif %}
+        <div class="ex-card__stats">
+            <div class="ex-card__stat">
                 <span class="kicker">Players</span>
                 <strong>{{ c.get('players', 0) }}</strong>
             </div>
-            <div class="explore-card__stat">
+            <div class="ex-card__stat">
                 <span class="kicker">Sessions</span>
                 <strong>{{ c.get('sessions', 0) }}</strong>
             </div>
-            <div class="explore-card__stat">
-                <span class="kicker">Open</span>
-                <strong>{{ c.get('open_sessions', 0) }}</strong>
+            {% if c.get('open_sessions', 0) > 0 %}
+            <div class="ex-card__stat">
+                <span class="kicker">Live</span>
+                <strong style="color:var(--pos);">{{ c.get('open_sessions', 0) }}</strong>
             </div>
+            {% endif %}
         </div>
-        <div class="explore-card__footer">
-            <span class="explore-card__link">View league →</span>
+        <div class="ex-card__footer">
+            <span class="ex-card__link">View league →</span>
         </div>
     </a>
     {% endfor %}
 </div>
 {% elif q %}
-<div class="empty-panel" style="max-width:480px;">
+<div class="panel empty-panel" style="max-width:480px;">
     <h3 class="panel__title">No results for "{{ q }}"</h3>
     <p class="muted-text">Try a shorter search or browse all leagues.</p>
+    <a class="btn btn--ghost btn--sm" href="{{ url_for('public.explore') }}">Browse all</a>
 </div>
 {% else %}
-<div class="empty-panel" style="max-width:480px;">
+<div class="panel empty-panel" style="max-width:480px;">
     <h3 class="panel__title">No public leagues yet</h3>
-    <p class="muted-text">League owners can set their league to public in settings.</p>
+    <p class="muted-text">League owners can set their league to public in league settings.</p>
 </div>
 {% endif %}
 
diff --git a/templates/landing.html b/templates/landing.html
index ff6f705..f96ff50 100644
--- a/templates/landing.html
+++ b/templates/landing.html
@@ -1,157 +1,303 @@
 {% extends "base.html" %}
 {% block title %}myboker.org · Poker league records{% endblock %}
+{% block page_class %}page--landing{% endblock %}
 {% block content %}
 
-<section class="l-hero">
-    <p class="l-hero__kicker">For private poker leagues</p>
-    <h1 class="l-hero__h1">Your home game,<br>properly tracked.</h1>
-    <p class="l-hero__sub">Sessions, ledgers, leaderboards, and settlement visibility — built for home groups that want clean records without a payment app or social network in the way.</p>
-    <div class="l-hero__cta">
-        {% if is_logged_in %}
-        <a class="btn btn--primary" href="{{ url_for('leagues.index') }}">Open leagues</a>
-        {% else %}
-        <a class="btn btn--primary" href="{{ url_for('account.register') }}">Create account</a>
-        <a class="btn btn--ghost" href="{{ url_for('account.login') }}">Sign in</a>
-        <a class="btn btn--ghost" href="{{ url_for('public.explore') }}">Explore league stats</a>
-        {% endif %}
-    </div>
-</section>
-
-<div class="l-preview" aria-hidden="true">
-    <div class="l-preview__panel">
-        <div class="l-preview__head">
-            <span class="kicker" style="margin:0;">Leaderboard</span>
-            <span class="l-preview__tag">All-time</span>
+<div class="lp-hero">
+    <div class="lp-hero__content">
+        <span class="lp-eyebrow">Home poker tracking</span>
+        <h1 class="lp-h1">
+            <span class="lp-h1__line">Your</span>
+            <span class="lp-h1__line">league,</span>
+            <span class="lp-h1__accent">on record.</span>
+        </h1>
+        <p class="lp-sub">Sessions, leaderboards, and settlement tracking for home poker groups. No fees, no payment apps in the way.</p>
+        <div class="lp-cta">
+            {% if is_logged_in %}
+            <a class="btn btn--primary btn--lg" href="{{ url_for('leagues.index') }}">Open my leagues →</a>
+            {% else %}
+            <a class="btn btn--primary btn--lg" href="{{ url_for('account.register') }}">Start your league →</a>
+            <a class="btn btn--ghost btn--lg" href="{{ url_for('account.login') }}">Sign in</a>
+            {% endif %}
         </div>
-        <div class="l-preview__rows">
-            <div class="l-preview__row">
-                <span class="l-preview__rank">1</span>
-                <span class="l-preview__player">Rivera</span>
-                <span class="l-preview__val l-preview__val--pos">+$1,420</span>
-            </div>
-            <div class="l-preview__row">
-                <span class="l-preview__rank">2</span>
-                <span class="l-preview__player">Chen</span>
-                <span class="l-preview__val l-preview__val--pos">+$640</span>
-            </div>
-            <div class="l-preview__row">
-                <span class="l-preview__rank">3</span>
-                <span class="l-preview__player">Okafor</span>
-                <span class="l-preview__val l-preview__val--neg">-$210</span>
-            </div>
-            <div class="l-preview__row l-preview__row--faded">
-                <span class="l-preview__rank">4</span>
-                <span class="l-preview__player">Walsh</span>
-                <span class="l-preview__val l-preview__val--neg">-$850</span>
-            </div>
+        <div class="lp-trust">
+            <span>No fees</span>
+            <span class="lp-trust__sep">·</span>
+            <span>Append-only ledger</span>
+            <span class="lp-trust__sep">·</span>
+            <span>Private by default</span>
+            {% if not is_logged_in %}
+            <span class="lp-trust__sep">·</span>
+            <a href="{{ url_for('public.explore') }}" style="color:inherit;text-decoration:underline;text-decoration-color:rgba(255,255,255,.2);">Explore public leagues</a>
+            {% endif %}
         </div>
     </div>
 
-    <div class="l-preview__panel l-preview__panel--featured">
-        <div class="l-preview__head">
-            <span class="kicker" style="margin:0;">Session #18</span>
-            <span class="live-badge">live</span>
-        </div>
-        <div class="l-preview__stats">
-            <div class="l-preview__stat">
-                <span class="kicker" style="margin:0;">Cash in</span>
-                <strong>$1,200</strong>
+    <div class="lp-hero__visual" aria-hidden="true">
+        <div class="lp-demo__card">
+            <div class="lp-demo__head">
+                <div>
+                    <span class="lp-demo__kicker">Friday Night Poker</span>
+                    <span class="lp-demo__title">Leaderboard · Eligible</span>
+                </div>
+                <span class="lp-demo__meta">18 sessions · 5 players</span>
             </div>
-            <div class="l-preview__stat">
-                <span class="kicker" style="margin:0;">Players</span>
-                <strong>8</strong>
-            </div>
-            <div class="l-preview__stat">
-                <span class="kicker" style="margin:0;">Open debts</span>
-                <strong style="color:var(--warn);">$180</strong>
-            </div>
-        </div>
-        <div class="l-preview__evts">
-            <div class="l-preview__evt">
-                <span class="pill pill-buyin">buy-in</span>
-                <span class="l-preview__evt-name">Rivera</span>
-                <span class="l-preview__evt-val">$200</span>
-            </div>
-            <div class="l-preview__evt">
-                <span class="pill pill-front">front</span>
-                <span class="l-preview__evt-name">Chen</span>
-                <span class="l-preview__evt-val">$200</span>
-            </div>
-            <div class="l-preview__evt">
-                <span class="pill pill-cashout">cashout</span>
-                <span class="l-preview__evt-name">Okafor</span>
-                <span class="l-preview__evt-val">$450</span>
-            </div>
-        </div>
-    </div>
-
-    <div class="l-preview__panel">
-        <div class="l-preview__head">
-            <span class="kicker" style="margin:0;">Open debts</span>
-            <span class="l-preview__tag">Session #17</span>
-        </div>
-        <div class="l-preview__rows">
-            <div class="l-preview__row">
-                <span class="l-preview__player">Walsh</span>
-                <span class="l-preview__val" style="color:var(--owes);">owes $120</span>
-            </div>
-            <div class="l-preview__row">
-                <span class="l-preview__player">Okafor</span>
-                <span class="l-preview__val" style="color:var(--owes);">owes $60</span>
-            </div>
-            <div class="l-preview__row l-preview__row--faded">
-                <span class="l-preview__player">Chen</span>
-                <span class="l-preview__val" style="color:var(--pos);">settled</span>
-            </div>
-            <div class="l-preview__row l-preview__row--faded">
-                <span class="l-preview__player">Rivera</span>
-                <span class="l-preview__val" style="color:var(--pos);">settled</span>
+            <div class="lp-demo__table">
+                <div class="lp-demo__thead lp-demo__thead--lb">
+                    <span class="lp-demo__th">#</span>
+                    <span class="lp-demo__th">Player</span>
+                    <span class="lp-demo__th">Δ</span>
+                    <span class="lp-demo__th">Net</span>
+                    <span class="lp-demo__th">Win%</span>
+                    <span class="lp-demo__th">ROI</span>
+                </div>
+                <div class="lp-demo__row lp-demo__row--lb">
+                    <span class="lp-demo__rank lp-demo__rank--1">1</span>
+                    <span class="lp-demo__player">Rivera</span>
+                    <span class="lp-demo__delta lp-demo__delta--up">▲1</span>
+                    <span class="lp-demo__num lp-demo__num--pos">+$1,420</span>
+                    <span class="lp-demo__num lp-demo__num--pos">72%</span>
+                    <span class="lp-demo__num lp-demo__num--pos">+46%</span>
+                </div>
+                <div class="lp-demo__row lp-demo__row--lb">
+                    <span class="lp-demo__rank lp-demo__rank--2">2</span>
+                    <span class="lp-demo__player">Chen</span>
+                    <span class="lp-demo__delta">—</span>
+                    <span class="lp-demo__num lp-demo__num--pos">+$640</span>
+                    <span class="lp-demo__num lp-demo__num--pos">56%</span>
+                    <span class="lp-demo__num lp-demo__num--pos">+18%</span>
+                </div>
+                <div class="lp-demo__row lp-demo__row--lb">
+                    <span class="lp-demo__rank lp-demo__rank--3">3</span>
+                    <span class="lp-demo__player">Okafor</span>
+                    <span class="lp-demo__delta lp-demo__delta--down">▼1</span>
+                    <span class="lp-demo__num lp-demo__num--neg">−$210</span>
+                    <span class="lp-demo__num lp-demo__num--neg">43%</span>
+                    <span class="lp-demo__num lp-demo__num--neg">−7%</span>
+                </div>
+                <div class="lp-demo__row lp-demo__row--lb lp-demo__row--fade">
+                    <span class="lp-demo__rank">4</span>
+                    <span class="lp-demo__player">Walsh</span>
+                    <span class="lp-demo__delta">—</span>
+                    <span class="lp-demo__num lp-demo__num--neg">−$850</span>
+                    <span class="lp-demo__num lp-demo__num--neg">31%</span>
+                    <span class="lp-demo__num lp-demo__num--neg">−27%</span>
+                </div>
+                <div class="lp-demo__row lp-demo__row--lb lp-demo__row--fade2">
+                    <span class="lp-demo__rank">5</span>
+                    <span class="lp-demo__player">Novak</span>
+                    <span class="lp-demo__delta lp-demo__delta--down">▼2</span>
+                    <span class="lp-demo__num lp-demo__num--neg">−$1,000</span>
+                    <span class="lp-demo__num lp-demo__num--neg">25%</span>
+                    <span class="lp-demo__num lp-demo__num--neg">−42%</span>
+                </div>
             </div>
         </div>
     </div>
 </div>
 
-<section class="l-features">
-    <div class="l-feature">
-        <div class="l-feature__icon">
-            <svg width="22" height="22" viewBox="0 0 22 22" fill="none" aria-hidden="true">
-                <rect x="1" y="7" width="14" height="13" rx="2" stroke="currentColor" stroke-width="1.5"/>
-                <path d="M5 7V5a2 2 0 0 1 2-2h11a2 2 0 0 1 2 2v11a2 2 0 0 1-2 2h-2" stroke="currentColor" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"/>
-            </svg>
+<!-- Features -->
+<section class="lp-features">
+    <div class="lp-features__inner">
+        <div class="lp-sec-head">
+            <span class="lp-eyebrow">What's included</span>
+            <h2 class="lp-sec-title">No spreadsheets. No Venmo math. No guessing.</h2>
         </div>
-        <h3 class="l-feature__title">League workspaces</h3>
-        <p class="l-feature__desc">Each league has its own players, sessions, leaderboard, and accounting. One account can manage multiple leagues independently.</p>
-    </div>
-    <div class="l-feature">
-        <div class="l-feature__icon">
-            <svg width="22" height="22" viewBox="0 0 22 22" fill="none" aria-hidden="true">
-                <rect x="3" y="3" width="16" height="16" rx="2" stroke="currentColor" stroke-width="1.5"/>
-                <path d="M7 8h8M7 11h6M7 14h4" stroke="currentColor" stroke-width="1.5" stroke-linecap="round"/>
-            </svg>
+        <div class="lp-feat-grid">
+            <div class="lp-feat">
+                <div class="lp-feat__icon">
+                    <svg viewBox="0 0 20 20" fill="none" aria-hidden="true">
+                        <rect x="2" y="4" width="16" height="14" rx="2.5" stroke="currentColor" stroke-width="1.5"/>
+                        <path d="M6 2v4M14 2v4M2 9h16" stroke="currentColor" stroke-width="1.5" stroke-linecap="round"/>
+                        <path d="M6 12.5h3M6 15.5h5" stroke="currentColor" stroke-width="1.4" stroke-linecap="round"/>
+                    </svg>
+                </div>
+                <h3 class="lp-feat__title">Game-night sessions</h3>
+                <p class="lp-feat__desc">Open a session at the start of the night, log buy-ins and cashouts as they happen, then close it when the last player leaves. Multiple sessions on the same date auto-sequence as S1, S2.</p>
+            </div>
+            <div class="lp-feat">
+                <div class="lp-feat__icon">
+                    <svg viewBox="0 0 20 20" fill="none" aria-hidden="true">
+                        <rect x="1.5" y="11" width="4.5" height="7" rx="1.2" stroke="currentColor" stroke-width="1.5"/>
+                        <rect x="7.75" y="7" width="4.5" height="11" rx="1.2" stroke="currentColor" stroke-width="1.5"/>
+                        <rect x="14" y="2" width="4.5" height="16" rx="1.2" stroke="currentColor" stroke-width="1.5"/>
+                    </svg>
+                </div>
+                <h3 class="lp-feat__title">Rankings that earn their spot</h3>
+                <p class="lp-feat__desc">Set a minimum session count so regulars rank and one-time guests go provisional until they qualify. Sort by net, ROI, win rate, or recent form. Every number is derived directly from raw ledger events.</p>
+            </div>
+            <div class="lp-feat">
+                <div class="lp-feat__icon">
+                    <svg viewBox="0 0 20 20" fill="none" aria-hidden="true">
+                        <rect x="3" y="2" width="14" height="16" rx="2" stroke="currentColor" stroke-width="1.5"/>
+                        <path d="M7 7h6M7 10.5h6M7 14h3.5" stroke="currentColor" stroke-width="1.5" stroke-linecap="round"/>
+                    </svg>
+                </div>
+                <h3 class="lp-feat__title">Settlement without the spreadsheet</h3>
+                <p class="lp-feat__desc">Every event is logged and kept: buy-ins, cashouts, fronts, corrections. Nothing is deleted; mistakes get fixed by appending. When a session closes, the house knows exactly what it holds and who is owed what.</p>
+            </div>
         </div>
-        <h3 class="l-feature__title">Append-only ledger</h3>
-        <p class="l-feature__desc">Buy-ins, fronts, cashouts, rollovers, debt repayments, and write-offs stay permanently on record. Events are never deleted.</p>
-    </div>
-    <div class="l-feature">
-        <div class="l-feature__icon">
-            <svg width="22" height="22" viewBox="0 0 22 22" fill="none" aria-hidden="true">
-                <path d="M3 17L8 11L13 14L20 6" stroke="currentColor" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"/>
-                <path d="M3 20h18" stroke="currentColor" stroke-width="1.5" stroke-linecap="round"/>
-            </svg>
-        </div>
-        <h3 class="l-feature__title">Performance analytics</h3>
-        <p class="l-feature__desc">Net, ROI, win rate, and all-time cash movement are computed from ledger events. Rankings stay separate from settlement records.</p>
-    </div>
-    <div class="l-feature">
-        <div class="l-feature__icon">
-            <svg width="22" height="22" viewBox="0 0 22 22" fill="none" aria-hidden="true">
-                <path d="M7 5h8M15 5l-3-3m3 3l-3 3" stroke="currentColor" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"/>
-                <path d="M15 17H7m0 0l3 3m-3-3l3-3" stroke="currentColor" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"/>
-            </svg>
-        </div>
-        <h3 class="l-feature__title">Settlement visibility</h3>
-        <p class="l-feature__desc">Open debts, player payables, and house receivables are always tracked. Share settlement status with the group, not just final numbers.</p>
     </div>
 </section>
 
+<!-- App demos -->
+<section class="lp-showcase">
+    <div class="lp-showcase__inner">
+        <div class="lp-sec-head">
+            <span class="lp-eyebrow">In the app</span>
+            <h2 class="lp-sec-title">Sessions and results</h2>
+            <p class="lp-sec-sub">Every number your group tracks, in one place.</p>
+        </div>
+        <div class="lp-showcase__grid" aria-hidden="true">
+
+            <!-- Sessions panel -->
+            <div class="lp-demo__card">
+                <div class="lp-demo__head">
+                    <div>
+                        <span class="lp-demo__kicker">Friday Night Poker</span>
+                        <span class="lp-demo__title">Sessions</span>
+                    </div>
+                    <span class="lp-demo__meta">6 total</span>
+                </div>
+                <div class="lp-sess-list">
+                    <div class="lp-sess-row">
+                        <div class="lp-sess-date">
+                            <span class="lp-sess-date__mon">Jun</span>
+                            <span class="lp-sess-date__day">21</span>
+                        </div>
+                        <div class="lp-sess-info">
+                            <span class="lp-sess-label">Session 1</span>
+                            <span class="lp-sess-meta">5 players · $250 pot</span>
+                        </div>
+                        <span class="lp-sess-pill lp-sess-pill--open">open</span>
+                    </div>
+                    <div class="lp-sess-row">
+                        <div class="lp-sess-date">
+                            <span class="lp-sess-date__mon">Jun</span>
+                            <span class="lp-sess-date__day">14</span>
+                        </div>
+                        <div class="lp-sess-info">
+                            <span class="lp-sess-label">Session 1</span>
+                            <span class="lp-sess-meta">5 players · $300 pot</span>
+                        </div>
+                        <span class="lp-sess-pill lp-sess-pill--closed">closed</span>
+                    </div>
+                    <div class="lp-sess-row">
+                        <div class="lp-sess-date">
+                            <span class="lp-sess-date__mon">Jun</span>
+                            <span class="lp-sess-date__day">7</span>
+                        </div>
+                        <div class="lp-sess-info">
+                            <span class="lp-sess-label">Session 1</span>
+                            <span class="lp-sess-meta">4 players · $200 pot</span>
+                        </div>
+                        <span class="lp-sess-pill lp-sess-pill--closed">closed</span>
+                    </div>
+                    <div class="lp-sess-row lp-sess-row--fade">
+                        <div class="lp-sess-date">
+                            <span class="lp-sess-date__mon">May</span>
+                            <span class="lp-sess-date__day">31</span>
+                        </div>
+                        <div class="lp-sess-info">
+                            <span class="lp-sess-label">Session 1</span>
+                            <span class="lp-sess-meta">6 players · $350 pot</span>
+                        </div>
+                        <span class="lp-sess-pill lp-sess-pill--closed">closed</span>
+                    </div>
+                    <div class="lp-sess-row lp-sess-row--fade2">
+                        <div class="lp-sess-date">
+                            <span class="lp-sess-date__mon">May</span>
+                            <span class="lp-sess-date__day">24</span>
+                        </div>
+                        <div class="lp-sess-info">
+                            <span class="lp-sess-label">Session 1</span>
+                            <span class="lp-sess-meta">5 players · $250 pot</span>
+                        </div>
+                        <span class="lp-sess-pill lp-sess-pill--closed">closed</span>
+                    </div>
+                </div>
+            </div>
+
+            <!-- Session results panel -->
+            <div class="lp-demo__card">
+                <div class="lp-demo__head">
+                    <div>
+                        <span class="lp-demo__kicker">Friday Night Poker</span>
+                        <span class="lp-demo__title">Session #006 · Jun 21</span>
+                    </div>
+                    <span class="lp-demo__meta">5 players · open</span>
+                </div>
+                <div class="lp-recon-grid">
+                    <div class="lp-recon-cell">
+                        <span class="lp-recon-label">Cash in</span>
+                        <span class="lp-recon-val">$300</span>
+                    </div>
+                    <div class="lp-recon-cell">
+                        <span class="lp-recon-label">Paid out</span>
+                        <span class="lp-recon-val lp-demo__num--pos">$190</span>
+                    </div>
+                    <div class="lp-recon-cell">
+                        <span class="lp-recon-label">House owes players</span>
+                        <span class="lp-recon-val lp-demo__num--neg">$110</span>
+                    </div>
+                    <div class="lp-recon-cell">
+                        <span class="lp-recon-label">Players owe house</span>
+                        <span class="lp-recon-val">$0</span>
+                    </div>
+                </div>
+                <div class="lp-result-thead">
+                    <span>Player</span>
+                    <span>Invested</span>
+                    <span>Net</span>
+                    <span>Open</span>
+                </div>
+                <div class="lp-result-row">
+                    <span class="lp-demo__player">Rivera</span>
+                    <span class="lp-demo__num">$50</span>
+                    <span class="lp-demo__num lp-demo__num--pos">+$120</span>
+                    <span class="lp-result-due">due $120</span>
+                </div>
+                <div class="lp-result-row">
+                    <span class="lp-demo__player">Chen</span>
+                    <span class="lp-demo__num">$100</span>
+                    <span class="lp-demo__num lp-demo__num--pos">+$90</span>
+                    <span class="lp-result-due">due $90</span>
+                </div>
+                <div class="lp-result-row">
+                    <span class="lp-demo__player">Walsh</span>
+                    <span class="lp-demo__num">$50</span>
+                    <span class="lp-demo__num lp-demo__num--neg">-$50</span>
+                    <span class="lp-result-settled">settled</span>
+                </div>
+                <div class="lp-result-row lp-demo__row--fade">
+                    <span class="lp-demo__player">Okafor</span>
+                    <span class="lp-demo__num">$50</span>
+                    <span class="lp-demo__num lp-demo__num--pos">+$30</span>
+                    <span class="lp-result-due">due $30</span>
+                </div>
+                <div class="lp-result-row lp-demo__row--fade2">
+                    <span class="lp-demo__player">Novak</span>
+                    <span class="lp-demo__num">$100</span>
+                    <span class="lp-demo__num lp-demo__num--neg">-$100</span>
+                    <span class="lp-result-settled">settled</span>
+                </div>
+            </div>
+
+        </div>
+    </div>
+</section>
+
+{% if not is_logged_in %}
+<section class="lp-bottom-cta">
+    <div class="lp-bottom-cta__inner">
+        <h2 class="lp-bottom-cta__title">Start tracking your league</h2>
+        <p class="lp-bottom-cta__sub">Free to use. No payment processor. Your data stays yours.</p>
+        <div class="lp-cta" style="justify-content:center;">
+            <a class="btn btn--primary btn--lg" href="{{ url_for('account.register') }}">Create an account →</a>
+            <a class="btn btn--ghost btn--lg" href="{{ url_for('public.explore') }}">Browse public leagues</a>
+        </div>
+    </div>
+</section>
+{% endif %}
+
 {% endblock %}
diff --git a/templates/league_dashboard.html b/templates/league_dashboard.html
index 0638440..d787814 100644
--- a/templates/league_dashboard.html
+++ b/templates/league_dashboard.html
@@ -1,102 +1,326 @@
 {% extends "base.html" %}
 {% block title %}{{ league.name }} · myboker.org{% endblock %}
-{% block subnav %}{% include "_league_subnav.html" %}{% endblock %}
+{% block sidebar %}{% include "_league_sidebar.html" %}{% endblock %}
+{% block page_class %}page--app{% endblock %}
 {% block content %}
 
-{% if is_logged_in %}
-<a class="league-back-link" href="{{ url_for('leagues.index') }}">← Leagues</a>
-{% endif %}
-
-<div class="db-hero">
-    <div class="db-hero__bg-letter" aria-hidden="true">{{ league.name[0] | upper }}</div>
-    <div class="db-hero__body">
-        <div class="db-hero__chips">
-            {% if is_owner %}
-            <span class="db-chip db-chip--accent">Owner</span>
-            {% endif %}
+<div class="db-header">
+    <div class="db-header__info">
+        <div class="db-header__chips">
             <span class="db-chip">{{ league.visibility }}</span>
+            {% if is_owner %}<span class="db-chip db-chip--accent">Owner</span>{% endif %}
         </div>
-        <h1 class="hero__title" style="margin-bottom:8px;">{{ league.name }}</h1>
-        <p class="hero__sub" style="margin:0;">{{ league.description or 'No description set.' }}</p>
+        <h1 class="db-header__title">{{ league.name }}</h1>
+        {% if league.description %}<p class="db-header__sub">{{ league.description }}</p>{% endif %}
     </div>
+    {% if is_owner %}
+    <div class="db-header__actions">
+        <a class="btn btn--ghost btn--sm" href="{{ url_for('leagues.league_settings', league_ref=league.url_ref) }}">Settings</a>
+        <a class="btn btn--primary btn--sm" href="{{ url_for('leagues.sessions', league_ref=league.url_ref) }}">New session</a>
+    </div>
+    {% endif %}
 </div>
 
 {% if counts.open_sessions > 0 %}
-<div class="db-live-bar">
-    <span class="live-badge">{{ counts.open_sessions }} live</span>
-    <span class="db-live-bar__text">
-        {% if counts.open_sessions == 1 %}A session is currently in progress.{% else %}{{ counts.open_sessions }} sessions are in progress.{% endif %}
+<div class="db-live-alert">
+    <div class="db-live-alert__pulse"></div>
+    <span class="db-live-alert__text">
+        {{ counts.open_sessions }} session{{ 's' if counts.open_sessions != 1 else '' }} in progress
     </span>
-    <a class="btn btn--sm db-live-bar__btn" href="{{ url_for('leagues.sessions', league_ref=league.url_ref) }}">View sessions →</a>
+    <a class="db-live-alert__link" href="{{ url_for('leagues.sessions', league_ref=league.url_ref) }}">View sessions →</a>
 </div>
 {% endif %}
 
-<div class="db-stats">
-    <div class="stat stat--rail" style="--rail:var(--pos);">
-        <span class="kicker">Active players</span>
-        <div class="stat__val" style="color:var(--text-strong);">{{ counts.players }}</div>
+<div class="db-stat-grid">
+    <div class="db-stat">
+        <div class="db-stat__icon db-stat__icon--accent">
+            <svg width="18" height="18" viewBox="0 0 20 20" fill="none" aria-hidden="true">
+                <circle cx="8" cy="7" r="3" stroke="currentColor" stroke-width="1.5"/>
+                <path d="M2 17c0-3.314 2.686-6 6-6" stroke="currentColor" stroke-width="1.5" stroke-linecap="round"/>
+                <circle cx="14" cy="8" r="2.5" stroke="currentColor" stroke-width="1.5"/>
+                <path d="M18 17c0-2.761-1.79-5-4-5" stroke="currentColor" stroke-width="1.5" stroke-linecap="round"/>
+            </svg>
+        </div>
+        <div>
+            <span class="db-stat__num">{{ counts.players }}</span>
+            <span class="db-stat__label">Players</span>
+        </div>
     </div>
-    <div class="stat stat--rail" style="--rail:var(--accent);">
-        <span class="kicker">Sessions</span>
-        <div class="stat__val" style="color:var(--text-strong);">{{ counts.sessions }}</div>
-        {% if counts.open_sessions > 0 %}
-        <div class="stat__sub" style="color:var(--pos);">{{ counts.open_sessions }} open now</div>
-        {% endif %}
+    <div class="db-stat">
+        <div class="db-stat__icon db-stat__icon--pos">
+            <svg width="18" height="18" viewBox="0 0 20 20" fill="none" aria-hidden="true">
+                <rect x="2.5" y="3.5" width="15" height="13" rx="2" stroke="currentColor" stroke-width="1.5"/>
+                <path d="M6 2v3M14 2v3M2.5 8h15" stroke="currentColor" stroke-width="1.5" stroke-linecap="round"/>
+            </svg>
+        </div>
+        <div>
+            <span class="db-stat__num">{{ counts.sessions }}</span>
+            <span class="db-stat__label">Sessions{% if counts.open_sessions > 0 %} · <span style="color:var(--pos);">{{ counts.open_sessions }} live</span>{% endif %}</span>
+        </div>
     </div>
-    <div class="stat stat--rail" style="--rail:var(--warn);">
-        <span class="kicker">Ledger events</span>
-        <div class="stat__val" style="color:var(--text-strong);">{{ counts.events }}</div>
+    <div class="db-stat">
+        <div class="db-stat__icon db-stat__icon--warn">
+            <svg width="18" height="18" viewBox="0 0 20 20" fill="none" aria-hidden="true">
+                <path d="M5 3h10l3 3v11a1 1 0 0 1-1 1H3a1 1 0 0 1-1-1V4a1 1 0 0 1 1-1Z" stroke="currentColor" stroke-width="1.5"/>
+                <path d="M7 8h6M7 11h4" stroke="currentColor" stroke-width="1.5" stroke-linecap="round"/>
+            </svg>
+        </div>
+        <div>
+            <span class="db-stat__num">{{ counts.events }}</span>
+            <span class="db-stat__label">Ledger events</span>
+        </div>
     </div>
-    <div class="stat stat--rail" style="--rail:var(--rolled);">
-        <span class="kicker">Seasons</span>
-        <div class="stat__val" style="color:var(--text-strong);">{{ counts.seasons }}</div>
+    <div class="db-stat">
+        <div class="db-stat__icon">
+            <svg width="18" height="18" viewBox="0 0 20 20" fill="none" aria-hidden="true">
+                <path d="M10 2v3M10 15v3M2 10h3M15 10h3" stroke="currentColor" stroke-width="1.5" stroke-linecap="round"/>
+                <circle cx="10" cy="10" r="4.5" stroke="currentColor" stroke-width="1.5"/>
+            </svg>
+        </div>
+        <div>
+            <span class="db-stat__num">{{ counts.seasons }}</span>
+            <span class="db-stat__label">Seasons</span>
+        </div>
     </div>
 </div>
 
-<div class="dashboard-grid">
+{% if cash_stats.has_data %}
+<div class="db-cash">
+    <div class="db-cash__stat">
+        <span class="db-cash__label">Total cash in</span>
+        <span class="db-cash__val">{{ cash_stats.total_cash_in | money }}</span>
+    </div>
+    <div class="db-cash__div"></div>
+    <div class="db-cash__stat">
+        <span class="db-cash__label">Total paid out</span>
+        <span class="db-cash__val">{{ cash_stats.total_paid_out | money }}</span>
+    </div>
+    <div class="db-cash__div"></div>
+    <div class="db-cash__stat">
+        <span class="db-cash__label">Avg pot / session</span>
+        <span class="db-cash__val">{{ cash_stats.avg_pot | money }}</span>
+    </div>
+    <div class="db-cash__div"></div>
+    <div class="db-cash__stat">
+        <span class="db-cash__label">Avg players</span>
+        <span class="db-cash__val">{{ cash_stats.avg_players }}</span>
+    </div>
+    <div class="db-cash__div"></div>
+    <div class="db-cash__stat">
+        <span class="db-cash__label">Avg buy-in</span>
+        <span class="db-cash__val">{{ cash_stats.avg_buyin | money }}</span>
+    </div>
+    <div class="db-cash__div"></div>
+    <div class="db-cash__stat">
+        <span class="db-cash__label">Biggest session</span>
+        <span class="db-cash__val">{{ cash_stats.biggest_pot | money }}</span>
+    </div>
+    {% if cash_stats.avg_sessions_per_month > 0 %}
+    <div class="db-cash__div"></div>
+    <div class="db-cash__stat">
+        <span class="db-cash__label">Sessions / month</span>
+        <span class="db-cash__val">{{ cash_stats.avg_sessions_per_month }}</span>
+    </div>
+    {% endif %}
+    {% if cash_stats.total_fronts > 0 %}
+    <div class="db-cash__div"></div>
+    <div class="db-cash__stat">
+        <span class="db-cash__label">Fronts issued</span>
+        <span class="db-cash__val">{{ cash_stats.total_fronts | money }}</span>
+    </div>
+    {% endif %}
+</div>
+{% endif %}
 
-    <a class="dashboard-card panel" style="--card-accent:var(--warn);" href="{{ url_for('leagues.leaderboard', league_ref=league.url_ref) }}">
-        <div class="dashboard-card__top">
-            <span class="kicker">Stats</span>
-            <span class="dashboard-card__count">{{ counts.players }} ranked</span>
+{% if cash_stats.has_sessions %}
+<div class="db-cal"
+     id="db-cal"
+     data-sessions='{{ cash_stats.session_map | tojson }}'
+     data-first-year="{{ cash_stats.first_session_year }}">
+    <div class="db-cal__hdr">
+        <span class="db-cal__title">Session history</span>
+        <div class="db-cal__nav-group">
+            <button class="db-cal__nav" id="db-cal-prev" aria-label="Previous year">&#8249;</button>
+            <span class="db-cal__year" id="db-cal-year"></span>
+            <button class="db-cal__nav" id="db-cal-next" aria-label="Next year">&#8250;</button>
         </div>
-        <strong class="dashboard-card__title">Leaderboard</strong>
-        <p class="dashboard-card__desc">All-time results, ROI, settlement totals, and standings.</p>
-        <span class="dashboard-card__arrow">→</span>
+    </div>
+    <div class="db-cal__grid" id="db-cal-grid"></div>
+    <div class="db-cal__tip" id="db-cal-tip" hidden></div>
+</div>
+<script>
+(function () {
+    var cal = document.getElementById('db-cal');
+    if (!cal) return;
+    var sessions = JSON.parse(cal.dataset.sessions);
+    var firstYear = parseInt(cal.dataset.firstYear) || new Date().getFullYear();
+    var MONTHS = ['Jan','Feb','Mar','Apr','May','Jun','Jul','Aug','Sep','Oct','Nov','Dec'];
+    var today = new Date(); today.setHours(0,0,0,0);
+    var todayStr = today.toISOString().slice(0,10);
+    var currentYear = today.getFullYear();
+    var year = currentYear;
+    var grid = document.getElementById('db-cal-grid');
+    var yearLbl = document.getElementById('db-cal-year');
+    var prevBtn = document.getElementById('db-cal-prev');
+    var nextBtn = document.getElementById('db-cal-next');
+    var tip = document.getElementById('db-cal-tip');
+
+    function ds(d) { return d.toISOString().slice(0,10); }
+
+    function buildCalendar(y) {
+        var start = new Date(y, 0, 1);
+        var dow = start.getDay();
+        start.setDate(start.getDate() - (dow === 0 ? 6 : dow - 1));
+        var end = new Date(y, 11, 31);
+        var edow = end.getDay();
+        if (edow !== 0) end.setDate(end.getDate() + (7 - edow));
+        var weeks = [], cur = new Date(start);
+        while (cur <= end) {
+            var days = [], monthLabel = '';
+            for (var i = 0; i < 7; i++) {
+                var d = new Date(cur.getFullYear(), cur.getMonth(), cur.getDate() + i);
+                var s = ds(d);
+                if (d.getDate() === 1 && !monthLabel) monthLabel = MONTHS[d.getMonth()];
+                days.push({ date: s, count: sessions[s] || 0, future: s > todayStr, out: d.getFullYear() !== y });
+            }
+            weeks.push({ days: days, month: monthLabel });
+            cur.setDate(cur.getDate() + 7);
+        }
+        return weeks;
+    }
+
+    function render(y) {
+        var weeks = buildCalendar(y);
+        grid.innerHTML = '';
+        weeks.forEach(function(week) {
+            var mc = document.createElement('div');
+            mc.className = 'db-cal__mc';
+            mc.textContent = week.month;
+            grid.appendChild(mc);
+            week.days.forEach(function(day) {
+                var cell = document.createElement('div');
+                var cls = 'db-cal__cell';
+                if (day.out)         cls += ' db-cal__cell--out';
+                else if (day.future) cls += ' db-cal__cell--dim';
+                else if (day.count)  cls += ' db-cal__cell--on' + (day.count > 1 ? ' db-cal__cell--multi' : '');
+                cell.className = cls;
+                cell.dataset.date = day.date;
+                cell.dataset.count = day.count;
+                grid.appendChild(cell);
+            });
+        });
+        yearLbl.textContent = y;
+        prevBtn.disabled = y <= firstYear;
+        nextBtn.disabled = y >= currentYear;
+    }
+
+    function showTip(cell, e) {
+        var d = cell.dataset.date;
+        if (!d) return;
+        var parts = d.split('-').map(Number);
+        var dateObj = new Date(parts[0], parts[1] - 1, parts[2]);
+        var label = dateObj.toLocaleDateString('en-US', { weekday:'short', month:'short', day:'numeric', year:'numeric' });
+        var count = parseInt(cell.dataset.count) || 0;
+        tip.textContent = count ? label + ' · ' + count + ' session' + (count > 1 ? 's' : '') : label;
+        tip.hidden = false;
+        moveTip(e);
+    }
+
+    function moveTip(e) {
+        var tw = tip.offsetWidth, th = tip.offsetHeight;
+        var x = e.clientX - tw / 2, y = e.clientY - th - 10;
+        x = Math.max(8, Math.min(x, window.innerWidth - tw - 8));
+        if (y < 8) y = e.clientY + 14;
+        tip.style.left = x + 'px';
+        tip.style.top = y + 'px';
+    }
+
+    grid.addEventListener('mouseover', function(e) {
+        var cell = e.target.closest('.db-cal__cell');
+        if (cell && !cell.classList.contains('db-cal__cell--out')) showTip(cell, e);
+        else tip.hidden = true;
+    });
+    grid.addEventListener('mousemove', function(e) { if (!tip.hidden) moveTip(e); });
+    grid.addEventListener('mouseleave', function() { tip.hidden = true; });
+    prevBtn.addEventListener('click', function() { if (year > firstYear) render(--year); });
+    nextBtn.addEventListener('click', function() { if (year < currentYear) render(++year); });
+
+    render(year);
+})();
+</script>
+{% endif %}
+
+<div class="db-nav-grid">
+
+    <a class="db-nav-tile db-nav-tile--sessions {% if counts.open_sessions > 0 %}db-nav-tile--live{% endif %}" href="{{ url_for('leagues.sessions', league_ref=league.url_ref) }}">
+        <div class="db-nav-tile__icon">
+            <svg width="22" height="22" viewBox="0 0 24 24" fill="none" aria-hidden="true">
+                <rect x="3" y="4" width="18" height="16" rx="2.5" stroke="currentColor" stroke-width="1.6"/>
+                <path d="M3 9h18M8 3v2M16 3v2" stroke="currentColor" stroke-width="1.6" stroke-linecap="round"/>
+                <circle cx="8" cy="14" r="1.5" fill="currentColor"/>
+                <circle cx="12" cy="14" r="1.5" fill="currentColor"/>
+                <circle cx="16" cy="14" r="1.5" fill="currentColor"/>
+            </svg>
+        </div>
+        <div class="db-nav-tile__body">
+            <div class="db-nav-tile__title-row">
+                <strong class="db-nav-tile__title">Sessions</strong>
+                {% if counts.open_sessions > 0 %}
+                <span class="live-badge">{{ counts.open_sessions }} live</span>
+                {% endif %}
+            </div>
+            <p class="db-nav-tile__desc">Open a session to start tracking buy-ins and cashouts in real time. Close it when everyone is done.</p>
+        </div>
+        <span class="db-nav-tile__arrow">→</span>
     </a>
 
-    <a class="dashboard-card panel" style="--card-accent:var(--pos);" href="{{ url_for('leagues.players', league_ref=league.url_ref) }}">
-        <div class="dashboard-card__top">
-            <span class="kicker">Roster</span>
-            <span class="dashboard-card__count">{{ counts.players }} active</span>
+    <a class="db-nav-tile db-nav-tile--leaderboard" href="{{ url_for('leagues.leaderboard', league_ref=league.url_ref) }}">
+        <div class="db-nav-tile__icon">
+            <svg width="22" height="22" viewBox="0 0 24 24" fill="none" aria-hidden="true">
+                <path d="M3 20h18M6 20V13M10 20V9M14 20V11M18 20V5" stroke="currentColor" stroke-width="1.6" stroke-linecap="round"/>
+            </svg>
         </div>
-        <strong class="dashboard-card__title">Players</strong>
-        <p class="dashboard-card__desc">Add and manage player records for stats and ledger entry.</p>
-        <span class="dashboard-card__arrow">→</span>
+        <div class="db-nav-tile__body">
+            <div class="db-nav-tile__title-row">
+                <strong class="db-nav-tile__title">Leaderboard</strong>
+            </div>
+            <p class="db-nav-tile__desc">Net profit, ROI, win rate, and rank delta. Filter by eligible players or switch to recent form.</p>
+        </div>
+        <span class="db-nav-tile__arrow">→</span>
     </a>
 
-    <a class="dashboard-card panel {% if counts.open_sessions > 0 %}dashboard-card--live{% endif %}" style="--card-accent:var(--accent);" href="{{ url_for('leagues.sessions', league_ref=league.url_ref) }}">
-        <div class="dashboard-card__top">
-            <span class="kicker">Schedule</span>
-            {% if counts.open_sessions > 0 %}
-            <span class="live-badge">{{ counts.open_sessions }} live</span>
-            {% else %}
-            <span class="dashboard-card__count">{{ counts.sessions }} total</span>
-            {% endif %}
+    <a class="db-nav-tile db-nav-tile--players" href="{{ url_for('leagues.players', league_ref=league.url_ref) }}">
+        <div class="db-nav-tile__icon">
+            <svg width="22" height="22" viewBox="0 0 24 24" fill="none" aria-hidden="true">
+                <circle cx="9" cy="8" r="3.5" stroke="currentColor" stroke-width="1.6"/>
+                <path d="M2.5 21c0-3.866 2.91-7 6.5-7" stroke="currentColor" stroke-width="1.6" stroke-linecap="round"/>
+                <circle cx="16.5" cy="9.5" r="3" stroke="currentColor" stroke-width="1.6"/>
+                <path d="M21.5 21c0-3.314-2.239-6-5-6" stroke="currentColor" stroke-width="1.6" stroke-linecap="round"/>
+            </svg>
         </div>
-        <strong class="dashboard-card__title">Sessions</strong>
-        <p class="dashboard-card__desc">Create sessions, record events, and manage open/closed state.</p>
-        <span class="dashboard-card__arrow">→</span>
+        <div class="db-nav-tile__body">
+            <div class="db-nav-tile__title-row">
+                <strong class="db-nav-tile__title">Players</strong>
+            </div>
+            <p class="db-nav-tile__desc">View each player's full session history, net trend, and individual stats over time.</p>
+        </div>
+        <span class="db-nav-tile__arrow">→</span>
     </a>
 
-    <a class="dashboard-card panel" style="--card-accent:var(--rolled);" href="{{ url_for('leagues.ledger', league_ref=league.url_ref) }}">
-        <div class="dashboard-card__top">
-            <span class="kicker">Accounting</span>
-            <span class="dashboard-card__count">{{ counts.events }} events</span>
+    <a class="db-nav-tile db-nav-tile--ledger" href="{{ url_for('leagues.ledger', league_ref=league.url_ref) }}">
+        <div class="db-nav-tile__icon">
+            <svg width="22" height="22" viewBox="0 0 24 24" fill="none" aria-hidden="true">
+                <path d="M5 3h14a1 1 0 0 1 1 1v14a1 1 0 0 1-1 1H9l-4-4V4a1 1 0 0 1 1-1Z" stroke="currentColor" stroke-width="1.6"/>
+                <path d="M9 19v-4H5M8 9h8M8 13h5" stroke="currentColor" stroke-width="1.6" stroke-linecap="round"/>
+            </svg>
         </div>
-        <strong class="dashboard-card__title">League ledger</strong>
-        <p class="dashboard-card__desc">Review all events, open debts, cash movement, and settlements.</p>
-        <span class="dashboard-card__arrow">→</span>
+        <div class="db-nav-tile__body">
+            <div class="db-nav-tile__title-row">
+                <strong class="db-nav-tile__title">League ledger</strong>
+            </div>
+            <p class="db-nav-tile__desc">Track what the house holds, what it owes, and outstanding fronts across all sessions.</p>
+        </div>
+        <span class="db-nav-tile__arrow">→</span>
     </a>
 
 </div>
diff --git a/templates/league_leaderboard.html b/templates/league_leaderboard.html
index 67f87db..7d6fa2d 100644
--- a/templates/league_leaderboard.html
+++ b/templates/league_leaderboard.html
@@ -1,12 +1,13 @@
 {% extends "base.html" %}
 {% block title %}Leaderboard · {{ league.name }} · myboker.org{% endblock %}
-{% block subnav %}{% include "_league_subnav.html" %}{% endblock %}
+{% block sidebar %}{% include "_league_sidebar.html" %}{% endblock %}
+{% block page_class %}page--app{% endblock %}
 {% block content %}
 
-<div class="hero" style="display:flex;flex-wrap:wrap;gap:var(--s6);align-items:flex-start;justify-content:space-between;">
+<div class="page-header">
     <div>
-        <h1 class="hero__title">Leaderboard</h1>
-        <p class="hero__sub">{{ session_count }} session{{ 's' if session_count != 1 else '' }}{% if selected_session_date %} through {{ selected_session_label }}{% endif %}</p>
+        <h1 class="page-header__title">Leaderboard</h1>
+        <p class="page-header__sub">{{ session_count }} session{{ 's' if session_count != 1 else '' }}{% if selected_session_date %} through {{ selected_session_label }}{% endif %}</p>
     </div>
     <div class="leaderboard-hero-stats">
         <div class="stat">
diff --git a/templates/league_ledger.html b/templates/league_ledger.html
index bb696bf..ea907d4 100644
--- a/templates/league_ledger.html
+++ b/templates/league_ledger.html
@@ -1,6 +1,7 @@
 {% extends "base.html" %}
 {% block title %}Ledger · {{ league.name }} · myboker.org{% endblock %}
-{% block subnav %}{% include "_league_subnav.html" %}{% endblock %}
+{% block sidebar %}{% include "_league_sidebar.html" %}{% endblock %}
+{% block page_class %}page--app{% endblock %}
 {% block content %}
 
 <div class="cash-strip">
diff --git a/templates/league_player_detail.html b/templates/league_player_detail.html
index e80cdbd..3f2391d 100644
--- a/templates/league_player_detail.html
+++ b/templates/league_player_detail.html
@@ -1,6 +1,7 @@
 {% extends "base.html" %}
 {% block title %}{{ player.player_name }} · {{ league.name }} · myboker.org{% endblock %}
-{% block subnav %}{% include "_league_subnav.html" %}{% endblock %}
+{% block sidebar %}{% include "_league_sidebar.html" %}{% endblock %}
+{% block page_class %}page--app{% endblock %}
 {% block content %}
 
 
diff --git a/templates/league_players.html b/templates/league_players.html
index 7ed2cd3..8838e55 100644
--- a/templates/league_players.html
+++ b/templates/league_players.html
@@ -1,8 +1,16 @@
 {% extends "base.html" %}
 {% block title %}Players · {{ league.name }} · myboker.org{% endblock %}
-{% block subnav %}{% include "_league_subnav.html" %}{% endblock %}
+{% block sidebar %}{% include "_league_sidebar.html" %}{% endblock %}
+{% block page_class %}page--app{% endblock %}
 {% block content %}
 
+<div class="page-header">
+    <div>
+        <h1 class="page-header__title">Players</h1>
+        <p class="page-header__sub">Roster for {{ league.name }}</p>
+    </div>
+</div>
+
 {% if can_manage %}
 <form class="panel form-card" method="post" style="margin-bottom:20px;">
     <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
diff --git a/templates/league_session_detail.html b/templates/league_session_detail.html
index 8ac0fa9..a10b46d 100644
--- a/templates/league_session_detail.html
+++ b/templates/league_session_detail.html
@@ -1,6 +1,7 @@
 {% extends "base.html" %}
 {% block title %}{{ session_model.display_label }} · {{ league.name }} · myboker.org{% endblock %}
-{% block subnav %}{% include "_league_subnav.html" %}{% endblock %}
+{% block sidebar %}{% include "_league_sidebar.html" %}{% endblock %}
+{% block page_class %}page--app{% endblock %}
 {% block content %}
 
 <div class="hero" style="padding-top:0;padding-bottom:12px;display:flex;flex-wrap:wrap;gap:12px;align-items:flex-end;justify-content:space-between;">
diff --git a/templates/league_session_view.html b/templates/league_session_view.html
index f18ba6d..510e77b 100644
--- a/templates/league_session_view.html
+++ b/templates/league_session_view.html
@@ -1,7 +1,7 @@
 {% extends "base.html" %}
 {% block title %}{{ session_model.display_label }} · {{ league.name }} · myboker.org{% endblock %}
-{% block subnav %}{% include "_league_subnav.html" %}{% endblock %}
-{% block page_class %}page--session{% endblock %}
+{% block sidebar %}{% include "_league_sidebar.html" %}{% endblock %}
+{% block page_class %}page--app{% endblock %}
 {% block content %}
 
 <div class="breadcrumb">
diff --git a/templates/league_sessions.html b/templates/league_sessions.html
index 30e15c8..60f5d50 100644
--- a/templates/league_sessions.html
+++ b/templates/league_sessions.html
@@ -1,8 +1,16 @@
 {% extends "base.html" %}
 {% block title %}Sessions · {{ league.name }} · myboker.org{% endblock %}
-{% block subnav %}{% include "_league_subnav.html" %}{% endblock %}
+{% block sidebar %}{% include "_league_sidebar.html" %}{% endblock %}
+{% block page_class %}page--app{% endblock %}
 {% block content %}
 
+<div class="page-header">
+    <div>
+        <h1 class="page-header__title">Sessions</h1>
+        <p class="page-header__sub">All game sessions for {{ league.name }}</p>
+    </div>
+</div>
+
 <div class="stack">
 
     {% if can_manage %}
diff --git a/templates/league_settings.html b/templates/league_settings.html
index 4f316fb..1daaa86 100644
--- a/templates/league_settings.html
+++ b/templates/league_settings.html
@@ -1,6 +1,7 @@
 {% extends "base.html" %}
 {% block title %}Settings · {{ league.name }} · myboker.org{% endblock %}
-{% block subnav %}{% include "_league_subnav.html" %}{% endblock %}
+{% block sidebar %}{% include "_league_sidebar.html" %}{% endblock %}
+{% block page_class %}page--app{% endblock %}
 {% block content %}
 
 
diff --git a/templates/leagues_index.html b/templates/leagues_index.html
index 1c6aa9f..c0940a8 100644
--- a/templates/leagues_index.html
+++ b/templates/leagues_index.html
@@ -2,133 +2,128 @@
 {% block title %}Leagues · myboker.org{% endblock %}
 {% block content %}
 
-<div class="hero" style="padding-bottom:12px;">
-    <p class="hero__kicker">Leagues</p>
-    <h1 class="hero__title">Your poker leagues</h1>
-    <p class="hero__sub">Owner and manager workspace.</p>
-</div>
-
-<div class="toolbar">
-    <div class="toolbar__left">
-        <a class="btn btn--primary" href="{{ url_for('leagues.new') }}">New league</a>
+<div class="page-header">
+    <div>
+        <h1 class="page-header__title">Your leagues</h1>
+        {% if leagues %}
+        <p class="page-header__sub">
+            {{ page_summary.league_count }} league{{ 's' if page_summary.league_count != 1 else '' }}
+            {% if page_summary.live_count > 0 %}&nbsp;·&nbsp;<span style="color:var(--pos);">{{ page_summary.live_count }} live</span>{% endif %}
+            &nbsp;·&nbsp;{{ page_summary.sessions_count }} session{{ 's' if page_summary.sessions_count != 1 else '' }}
+        </p>
+        {% endif %}
+    </div>
+    <div class="page-header__actions">
+        <a class="btn btn--primary btn--sm" href="{{ url_for('leagues.new') }}">New league</a>
     </div>
 </div>
 
 {% if leagues %}
-<div class="league-hub-summary">
-    <div class="stat stat--rail" style="--rail:var(--accent);">
-        <span class="kicker">Leagues</span>
-        <div class="stat__val" style="color:var(--num)">{{ page_summary.league_count }}</div>
-    </div>
-    <div class="stat stat--rail" style="--rail:var(--pos);">
-        <span class="kicker">Live</span>
-        <div class="stat__val" style="color:var(--num)">{{ page_summary.live_count }}</div>
-    </div>
-    <div class="stat stat--rail" style="--rail:var(--rolled);">
-        <span class="kicker">Sessions</span>
-        <div class="stat__val" style="color:var(--num)">{{ page_summary.sessions_count }}</div>
-    </div>
-    <div class="stat stat--rail" style="--rail:var(--warn);">
-        <span class="kicker">Open items</span>
-        <div class="stat__val {{ 'num-neg' if page_summary.open_items_cents > 0 else 'num-muted' }}">{{ page_summary.open_items_cents | money }}</div>
-    </div>
-</div>
 
-<div class="league-board">
+<div class="li-board">
     {% for item in leagues %}
     {% set league = item.league %}
     {% set membership = item.membership %}
-    <article class="panel league-row">
-        <div class="league-row__identity">
-            <a class="league-row__title" href="{{ url_for('leagues.dashboard', league_ref=league.url_ref) }}">
-                <div>
-                    <span class="kicker">{{ membership.role }}</span>
-                    <h2>{{ league.name }}</h2>
-                </div>
-                {% if item.live_session %}
-                <span class="live-badge">{{ session_label(item.live_session) }}</span>
-                {% else %}
-                <span class="status-pill status-pill--closed">idle</span>
-                {% endif %}
-            </a>
-            <div class="league-row__chips">
-                <span class="db-chip {% if league.visibility == 'public' %}db-chip--public{% endif %}">
-                    {% if league.visibility == 'public' %}
-                    <svg width="11" height="11" viewBox="0 0 20 20" fill="none" aria-hidden="true">
-                        <circle cx="10" cy="10" r="8" stroke="currentColor" stroke-width="1.6"/>
-                        <path d="M10 2c-2.5 3-2.5 13 0 16" stroke="currentColor" stroke-width="1.4" stroke-linecap="round" fill="none"/>
-                        <path d="M10 2c2.5 3 2.5 13 0 16" stroke="currentColor" stroke-width="1.4" stroke-linecap="round" fill="none"/>
-                        <path d="M2.5 10h15" stroke="currentColor" stroke-width="1.4" stroke-linecap="round"/>
-                    </svg>
-                    public
-                    {% else %}
-                    <svg width="10" height="12" viewBox="0 0 10 12" fill="none" aria-hidden="true">
-                        <rect x="1" y="5" width="8" height="6.5" rx="1.5" stroke="currentColor" stroke-width="1.5"/>
-                        <path d="M3 5V3.5A2 2 0 0 1 7 3.5V5" stroke="currentColor" stroke-width="1.5" stroke-linecap="round"/>
-                    </svg>
-                    private
+    <article class="li-card{% if item.live_session %} li-card--live{% endif %}">
+
+        <div class="li-card__aside">
+            <span class="li-card__initial">{{ league.name[0]|upper }}</span>
+        </div>
+
+        <div class="li-card__body">
+            <div class="li-card__head">
+                <div class="li-card__info">
+                    <div class="li-card__name-row">
+                        <a class="li-card__name" href="{{ url_for('leagues.dashboard', league_ref=league.url_ref) }}">{{ league.name }}</a>
+                        {% if item.live_session %}
+                        <span class="live-badge">{{ session_label(item.live_session) }}</span>
+                        {% else %}
+                        <span class="status-pill status-pill--closed">idle</span>
+                        {% endif %}
+                    </div>
+                    <div class="li-card__chips">
+                        <span class="db-chip db-chip--accent">{{ membership.role }}</span>
+                        <span class="db-chip {% if league.visibility == 'public' %}db-chip--public{% endif %}">
+                            {% if league.visibility == 'public' %}
+                            <svg width="10" height="10" viewBox="0 0 20 20" fill="none" aria-hidden="true">
+                                <circle cx="10" cy="10" r="8" stroke="currentColor" stroke-width="1.6"/>
+                                <path d="M10 2c-2.5 3-2.5 13 0 16" stroke="currentColor" stroke-width="1.4" stroke-linecap="round" fill="none"/>
+                                <path d="M10 2c2.5 3 2.5 13 0 16" stroke="currentColor" stroke-width="1.4" stroke-linecap="round" fill="none"/>
+                                <path d="M2.5 10h15" stroke="currentColor" stroke-width="1.4" stroke-linecap="round"/>
+                            </svg>
+                            public
+                            {% else %}
+                            <svg width="9" height="11" viewBox="0 0 10 12" fill="none" aria-hidden="true">
+                                <rect x="1" y="5" width="8" height="6.5" rx="1.5" stroke="currentColor" stroke-width="1.5"/>
+                                <path d="M3 5V3.5A2 2 0 0 1 7 3.5V5" stroke="currentColor" stroke-width="1.5" stroke-linecap="round"/>
+                            </svg>
+                            private
+                            {% endif %}
+                        </span>
+                    </div>
+                    {% if league.description %}
+                    <p class="li-card__desc">{{ league.description }}</p>
                     {% endif %}
-                </span>
-            </div>
-            <p class="league-row__desc">
-                {% if league.description %}{{ league.description }}{% else %}{{ league.slug }}{% endif %}
-            </p>
-            <div class="league-row__meta">
-                {% if item.latest_session %}
-                <span>Latest {{ session_label(item.latest_session) }}</span>
-                {% else %}
-                <span>No sessions yet</span>
-                {% endif %}
-                {% if item.leader %}
-                <span>Leader {{ item.leader.player_name }} · {{ item.leader.total_net_cents | money }}</span>
-                {% endif %}
-            </div>
-        </div>
+                </div>
 
-        <div class="league-row__metrics">
-            <div><span>Players</span><strong>{{ item.players_count }}</strong></div>
-            <div><span>Sessions</span><strong>{{ item.sessions_count }}</strong></div>
-            <div><span>Paid out</span><strong>{{ item.cash_paid_out_cents | money }}</strong></div>
-            <div><span>Open</span><strong class="{{ 'num-neg' if item.open_items_cents > 0 else 'num-muted' }}">{{ item.open_items_cents | money }}</strong></div>
-        </div>
-
-        <div class="league-row__leaders">
-            <div class="league-row__section-head">
-                <span class="kicker">Top 3</span>
-                <a href="{{ url_for('leagues.leaderboard', league_ref=league.url_ref) }}">Full board</a>
+                <div class="li-card__stats">
+                    <div class="li-stat">
+                        <span>Players</span>
+                        <strong>{{ item.players_count }}</strong>
+                    </div>
+                    <div class="li-stat">
+                        <span>Sessions</span>
+                        <strong>{{ item.sessions_count }}</strong>
+                    </div>
+                    <div class="li-stat">
+                        <span>Paid out</span>
+                        <strong>{{ item.cash_paid_out_cents | money }}</strong>
+                    </div>
+                    <div class="li-stat">
+                        <span>Open</span>
+                        <strong class="{{ 'num-neg' if item.open_items_cents > 0 else 'num-muted' }}">{{ item.open_items_cents | money }}</strong>
+                    </div>
+                </div>
             </div>
+
             {% if item.top_players %}
-            <ol class="league-top-list">
-                {% for player in item.top_players %}
-                <li>
-                    <span>{{ player.player_name }}</span>
-                    <strong class="{{ 'num-pos' if player.total_net_cents > 0 else 'num-neg' if player.total_net_cents < 0 else 'num-muted' }}">
-                        {{ '+' if player.total_net_cents > 0 else '' }}{{ player.total_net_cents | money }}
-                    </strong>
-                </li>
-                {% endfor %}
-            </ol>
-            {% else %}
-            <div class="league-row__empty">
-                <span>No results yet</span>
-                <a href="{{ url_for('leagues.sessions', league_ref=league.url_ref) }}">Create a session</a>
+            <div class="li-card__leaders">
+                <span class="li-card__leaders-label">Leaders</span>
+                <div class="li-podium">
+                    {% for player in item.top_players %}
+                    <div class="li-podium-item li-podium-item--{{ loop.index }}">
+                        <span class="li-podium-rank">#{{ loop.index }}</span>
+                        <span class="li-podium-name">{{ player.player_name }}</span>
+                        <strong class="li-podium-net {{ 'num-pos' if player.total_net_cents > 0 else 'num-neg' if player.total_net_cents < 0 else 'num-muted' }}">
+                            {{ '+' if player.total_net_cents > 0 else '' }}{{ player.total_net_cents | money }}
+                        </strong>
+                    </div>
+                    {% endfor %}
+                </div>
             </div>
             {% endif %}
+
+            <div class="li-card__footer">
+                <span class="li-card__meta">
+                    {% if item.latest_session %}Latest {{ session_label(item.latest_session) }}{% elif not item.top_players %}No sessions yet{% endif %}
+                </span>
+                <div class="li-card__actions">
+                    <a class="btn btn--primary btn--sm" href="{{ url_for('leagues.dashboard', league_ref=league.url_ref) }}">Open league</a>
+                    <a class="li-action-link" href="{{ url_for('leagues.sessions', league_ref=league.url_ref) }}">Sessions</a>
+                    <a class="li-action-link" href="{{ url_for('leagues.leaderboard', league_ref=league.url_ref) }}">Leaderboard</a>
+                    <a class="li-action-link" href="{{ url_for('leagues.ledger', league_ref=league.url_ref) }}">Ledger</a>
+                </div>
+            </div>
         </div>
 
-        <div class="league-row__actions">
-            <a class="btn btn--primary btn--sm" href="{{ url_for('leagues.dashboard', league_ref=league.url_ref) }}">Open</a>
-            <a class="btn btn--ghost btn--sm" href="{{ url_for('leagues.sessions', league_ref=league.url_ref) }}">Sessions</a>
-            <a class="btn btn--ghost btn--sm" href="{{ url_for('leagues.ledger', league_ref=league.url_ref) }}">Ledger</a>
-            <a class="btn btn--ghost btn--sm" href="{{ url_for('leagues.players', league_ref=league.url_ref) }}">Players</a>
-        </div>
     </article>
     {% endfor %}
 </div>
+
 {% else %}
 <div class="panel empty-panel">
     <h2 class="panel__title">No leagues yet</h2>
-    <p class="muted-text">Create the first league to start adding players, sessions, and ledger events.</p>
+    <p class="muted-text">Create your first league to start adding players, sessions, and ledger events.</p>
     <a class="btn btn--primary" href="{{ url_for('leagues.new') }}">Create league</a>
 </div>
 {% endif %}

From 0e34600714186c27bc87641836456fd5a47ac9a3 Mon Sep 17 00:00:00 2001
From: SowinskiBraeden <braeden@sowinski.dev>
Date: Fri, 26 Jun 2026 21:30:22 -0700
Subject: [PATCH 49/83] feat: client-side session search by name, date, and
 notes (2.4.0)

Add a search bar to the sessions list panel that filters rows in real time.
Searches display label, ISO date, month/year, and session notes. The count
badge updates to show matching/total; a no-results message appears when the
query has no matches.
---
 config.py                      |  2 +-
 static/css/style.css           | 23 ++++++++++++++++++++++
 templates/league_sessions.html | 35 ++++++++++++++++++++++++++++++++--
 3 files changed, 57 insertions(+), 3 deletions(-)

diff --git a/config.py b/config.py
index edb1d78..c0d56dc 100644
--- a/config.py
+++ b/config.py
@@ -9,7 +9,7 @@ DATA_PATH = BASE_DIR / "data" / "entries.csv"
 DEFAULT_DATABASE_URL = f"sqlite:///{BASE_DIR / 'data' / 'boker-dev.sqlite3'}"
 
 ELIGIBLE_MIN_SESSIONS = 3
-APP_VERSION = "2.3.1"
+APP_VERSION = "2.4.0"
 
 
 def load_local_env(env_path: Path) -> None:
diff --git a/static/css/style.css b/static/css/style.css
index f213241..ca76ef1 100644
--- a/static/css/style.css
+++ b/static/css/style.css
@@ -2346,6 +2346,29 @@ select.control { cursor: pointer; }
 }
 
 /* Session create form — horizontal 3-col grid */
+.sessions-search-bar {
+  display: flex;
+  align-items: center;
+  gap: 8px;
+  padding: 10px 16px;
+  border-bottom: 1px solid var(--border);
+  background: var(--surface-sunk);
+}
+.sessions-search-bar__icon {
+  color: var(--faintest);
+  flex-shrink: 0;
+}
+.sessions-search-bar__input {
+  flex: 1;
+  background: none;
+  border: none;
+  outline: none;
+  font-size: .85rem;
+  color: var(--text);
+  font-family: inherit;
+}
+.sessions-search-bar__input::placeholder { color: var(--faintest); }
+
 .session-create-row {
   display: grid;
   grid-template-columns: 1fr 1fr 1fr;
diff --git a/templates/league_sessions.html b/templates/league_sessions.html
index 60f5d50..b6c64da 100644
--- a/templates/league_sessions.html
+++ b/templates/league_sessions.html
@@ -48,7 +48,7 @@
                 <h2 class="panel__title">All sessions</h2>
             </div>
             <div style="display:flex;align-items:center;gap:8px;">
-                <span class="panel__tag">{{ sessions|length }} total</span>
+                <span class="panel__tag" id="sess-count-label">{{ sessions|length }} total</span>
                 {% if can_manage and empty_count > 0 %}
                 <form method="post" action="{{ url_for('leagues.prune_empty_sessions', league_ref=league.url_ref) }}" style="margin:0;">
                     <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
@@ -58,10 +58,21 @@
             </div>
         </div>
         {% if sessions %}
+        <div class="sessions-search-bar">
+            <svg class="sessions-search-bar__icon" width="14" height="14" viewBox="0 0 16 16" fill="none" aria-hidden="true">
+                <circle cx="6.5" cy="6.5" r="5" stroke="currentColor" stroke-width="1.5"/>
+                <path d="M10.5 10.5L14 14" stroke="currentColor" stroke-width="1.5" stroke-linecap="round"/>
+            </svg>
+            <input class="sessions-search-bar__input" id="sess-search" type="search" placeholder="Search by name, date, or notes…" autocomplete="off">
+        </div>
+        <div id="sess-empty-search" class="empty-panel" style="display:none;">
+            <p class="muted-text">No sessions match your search.</p>
+        </div>
         <div>
             {% for session in sessions %}
             {% set sm = db_id_to_summary.get(session.id) %}
-            <div class="session-row session-row--{{ session.status }}">
+            <div class="session-row session-row--{{ session.status }}"
+                 data-search="{{ (session.display_label ~ ' ' ~ session.session_date.isoformat() ~ ' ' ~ session.session_date.strftime('%B %Y') ~ ' ' ~ (session.notes or '')) | lower }}">
                 <div class="session-row__info">
                     <div class="session-date-block">
                         <span class="session-date-block__mon">{{ session.session_date.strftime('%b') }}</span>
@@ -152,6 +163,26 @@ document.querySelectorAll('[data-close-modal]').forEach(function(btn) {
 reopenModal && reopenModal.addEventListener('click', function(e) {
     if (e.target === this) this.setAttribute('hidden', '');
 });
+
+(function () {
+    var input = document.getElementById('sess-search');
+    var countLabel = document.getElementById('sess-count-label');
+    var emptyMsg = document.getElementById('sess-empty-search');
+    if (!input) return;
+    var total = {{ sessions|length }};
+    input.addEventListener('input', function () {
+        var q = this.value.toLowerCase().trim();
+        var rows = document.querySelectorAll('.session-row[data-search]');
+        var visible = 0;
+        rows.forEach(function (row) {
+            var match = !q || row.dataset.search.includes(q);
+            row.style.display = match ? '' : 'none';
+            if (match) visible++;
+        });
+        if (countLabel) countLabel.textContent = q ? visible + ' of ' + total : total + ' total';
+        if (emptyMsg) emptyMsg.style.display = (q && visible === 0) ? '' : 'none';
+    });
+})();
 </script>
 
 {% endblock %}

From 2fc7bab183ed46cfb02dd9a743d387f97a9ca229 Mon Sep 17 00:00:00 2001
From: SowinskiBraeden <braeden@sowinski.dev>
Date: Fri, 26 Jun 2026 21:37:47 -0700
Subject: [PATCH 50/83] feat: per-league eligible sessions and break-even
 threshold settings (2.5.0)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Add two configurable leaderboard settings per league, replacing the global
constants with per-row DB columns:

- eligible_min_sessions (default 3): minimum sessions before a player ranks
  on the main leaderboard rather than showing as provisional
- break_even_cents (default 100 = $1.00): sessions within ±this of $0 net
  are classified as break-even rather than a win or loss

Changes:
- Migration 0003 adds both columns with server defaults for existing leagues
- League DB model gains eligible_min_sessions and break_even_cents columns
- net_result_bucket() and build_leaderboard() accept optional tolerance param
- summarize_player_runs() passes tolerance to net_result_bucket for streaks
- League leaderboard route reads values from the league row instead of config
- League settings form exposes both fields with validation (1-100 sessions,
  $0.00-$100.00 threshold)
---
 config.py                                   |  2 +-
 db_models.py                                |  2 +
 migrations/versions/0003_league_settings.py | 32 +++++++++++
 routes/leagues.py                           | 59 ++++++++++++++-------
 services.py                                 | 14 ++---
 templates/league_settings.html              | 14 +++++
 utils.py                                    |  6 +--
 7 files changed, 98 insertions(+), 31 deletions(-)
 create mode 100644 migrations/versions/0003_league_settings.py

diff --git a/config.py b/config.py
index c0d56dc..21615ef 100644
--- a/config.py
+++ b/config.py
@@ -9,7 +9,7 @@ DATA_PATH = BASE_DIR / "data" / "entries.csv"
 DEFAULT_DATABASE_URL = f"sqlite:///{BASE_DIR / 'data' / 'boker-dev.sqlite3'}"
 
 ELIGIBLE_MIN_SESSIONS = 3
-APP_VERSION = "2.4.0"
+APP_VERSION = "2.5.0"
 
 
 def load_local_env(env_path: Path) -> None:
diff --git a/db_models.py b/db_models.py
index 23b2915..525c0e4 100644
--- a/db_models.py
+++ b/db_models.py
@@ -93,6 +93,8 @@ class League(TimestampMixin, db.Model):
         index=True,
     )
     archived_at = db.Column(db.DateTime(timezone=True), nullable=True)
+    eligible_min_sessions = db.Column(db.Integer, nullable=False, default=3)
+    break_even_cents = db.Column(db.Integer, nullable=False, default=100)
 
     __table_args__ = (
         db.CheckConstraint(
diff --git a/migrations/versions/0003_league_settings.py b/migrations/versions/0003_league_settings.py
new file mode 100644
index 0000000..56ba72b
--- /dev/null
+++ b/migrations/versions/0003_league_settings.py
@@ -0,0 +1,32 @@
+"""add per-league eligible_min_sessions and break_even_cents
+
+Revision ID: 0003_league_settings
+Revises: 0002_league_public_key
+Create Date: 2026-06-26
+"""
+from __future__ import annotations
+
+from alembic import op
+import sqlalchemy as sa
+
+
+revision = "0003_league_settings"
+down_revision = "0002_league_public_key"
+branch_labels = None
+depends_on = None
+
+
+def upgrade() -> None:
+    with op.batch_alter_table("leagues") as batch_op:
+        batch_op.add_column(sa.Column(
+            "eligible_min_sessions", sa.Integer(), nullable=False, server_default="3"
+        ))
+        batch_op.add_column(sa.Column(
+            "break_even_cents", sa.Integer(), nullable=False, server_default="100"
+        ))
+
+
+def downgrade() -> None:
+    with op.batch_alter_table("leagues") as batch_op:
+        batch_op.drop_column("break_even_cents")
+        batch_op.drop_column("eligible_min_sessions")
diff --git a/routes/leagues.py b/routes/leagues.py
index da5bf33..3ba2b4a 100644
--- a/routes/leagues.py
+++ b/routes/leagues.py
@@ -304,7 +304,6 @@ def leaderboard(league_ref: str):
         flash("League database is not available.", "error")
         return redirect(url_for("public.home"))
 
-    from config import ELIGIBLE_MIN_SESSIONS
     from ledger_repositories import list_event_rows_for_league
     from league_repositories import list_players_for_league, user_has_league_role
 
@@ -312,6 +311,8 @@ def leaderboard(league_ref: str):
     if resp:
         return resp
     is_owner = user_has_league_role(current_user_id() or "", league.id, {"owner"})
+    eligible_min_sessions = league.eligible_min_sessions
+    break_even_cents = league.break_even_cents
     all_sessions = build_session_summaries(list_event_rows_for_league(league.id))
     ordered_sessions = sorted(all_sessions, key=session_sort_key)
 
@@ -337,11 +338,11 @@ def leaderboard(league_ref: str):
         previous_sessions = []
 
     board = apply_rank_changes(
-        build_leaderboard(filtered_sessions),
-        build_leaderboard(previous_sessions),
+        build_leaderboard(filtered_sessions, break_even_cents),
+        build_leaderboard(previous_sessions, break_even_cents),
     )
     eligible_count = sum(
-        1 for player in board if player.sessions_played >= ELIGIBLE_MIN_SESSIONS
+        1 for player in board if player.sessions_played >= eligible_min_sessions
     )
     all_count = len(board)
     recent_sessions_slice = filtered_sessions[-5:]
@@ -352,18 +353,18 @@ def leaderboard(league_ref: str):
     })
 
     if mode == "recent":
-        main_board = build_leaderboard(recent_sessions_slice)
+        main_board = build_leaderboard(recent_sessions_slice, break_even_cents)
         provisional_board = []
     elif mode == "eligible":
         main_board = [
             player
             for player in board
-            if player.sessions_played >= ELIGIBLE_MIN_SESSIONS
+            if player.sessions_played >= eligible_min_sessions
         ]
         provisional_board = [
             player
             for player in board
-            if player.sessions_played < ELIGIBLE_MIN_SESSIONS
+            if player.sessions_played < eligible_min_sessions
         ]
     else:
         main_board = board
@@ -381,7 +382,7 @@ def leaderboard(league_ref: str):
         eligible_count=eligible_count,
         all_count=all_count,
         recent_count=recent_count,
-        eligible_min_sessions=ELIGIBLE_MIN_SESSIONS,
+        eligible_min_sessions=eligible_min_sessions,
         session_count=len(filtered_sessions),
         total_session_count=len(all_sessions),
         cash_paid_out_cents=cash_paid_out_cents,
@@ -1146,28 +1147,46 @@ def league_settings(league_ref: str):
         "name": league.name,
         "description": league.description or "",
         "visibility": league.visibility,
+        "eligible_min_sessions": league.eligible_min_sessions,
+        "break_even_dollars": f"{league.break_even_cents / 100:.2f}",
     }
 
     if request.method == "POST":
+        raw_eligible = request.form.get("eligible_min_sessions", "3").strip()
+        raw_break_even = request.form.get("break_even_dollars", "1.00").strip()
         form = {
             "name": request.form.get("name", "").strip(),
             "description": request.form.get("description", "").strip(),
             "visibility": request.form.get("visibility", "private").strip(),
+            "eligible_min_sessions": raw_eligible,
+            "break_even_dollars": raw_break_even,
         }
-        if len(form["name"]) < 2:
-            flash("League name must be at least 2 characters.", "error")
-        elif form["visibility"] not in ("private", "public"):
-            flash("Invalid visibility value.", "error")
+        try:
+            eligible_min = int(raw_eligible)
+            break_even_cents = round(float(raw_break_even) * 100)
+        except (ValueError, TypeError):
+            flash("Eligible sessions and break-even threshold must be valid numbers.", "error")
         else:
-            from utils import slugify
+            if len(form["name"]) < 2:
+                flash("League name must be at least 2 characters.", "error")
+            elif form["visibility"] not in ("private", "public"):
+                flash("Invalid visibility value.", "error")
+            elif eligible_min < 1 or eligible_min > 100:
+                flash("Eligible minimum must be between 1 and 100.", "error")
+            elif break_even_cents < 0 or break_even_cents > 10000:
+                flash("Break-even threshold must be between $0.00 and $100.00.", "error")
+            else:
+                from utils import slugify
 
-            league.name = form["name"]
-            league.slug = slugify(form["name"])
-            league.description = form["description"] or None
-            league.visibility = form["visibility"]
-            db.session.commit()
-            flash("League settings saved.", "success")
-            return redirect(url_for("leagues.league_settings", league_ref=league.url_ref))
+                league.name = form["name"]
+                league.slug = slugify(form["name"])
+                league.description = form["description"] or None
+                league.visibility = form["visibility"]
+                league.eligible_min_sessions = eligible_min
+                league.break_even_cents = break_even_cents
+                db.session.commit()
+                flash("League settings saved.", "success")
+                return redirect(url_for("leagues.league_settings", league_ref=league.url_ref))
 
     from league_repositories import list_members_for_league
 
diff --git a/services.py b/services.py
index c364759..13458b0 100644
--- a/services.py
+++ b/services.py
@@ -103,7 +103,7 @@ def build_session_summaries(events: list[EventRow]) -> list[SessionSummary]:
     return sessions
 
 
-def summarize_player_runs(entries: list[SessionEntry]) -> dict[str, int | str | None]:
+def summarize_player_runs(entries: list[SessionEntry], break_even_cents: int = 100) -> dict[str, int | str | None]:
     ordered_entries = sorted(entries, key=entry_sort_key)
 
     longest_win_streak = 0
@@ -116,7 +116,7 @@ def summarize_player_runs(entries: list[SessionEntry]) -> dict[str, int | str |
 
     for entry in ordered_entries:
         net = entry.net_cents
-        bucket = net_result_bucket(net)
+        bucket = net_result_bucket(net, break_even_cents)
 
         if best_entry is None or net > best_entry.net_cents:
             best_entry = entry
@@ -141,7 +141,7 @@ def summarize_player_runs(entries: list[SessionEntry]) -> dict[str, int | str |
     current_loss_streak = 0
 
     for entry in reversed(ordered_entries):
-        bucket = net_result_bucket(entry.net_cents)
+        bucket = net_result_bucket(entry.net_cents, break_even_cents)
 
         if bucket == "win":
             if current_loss_streak > 0:
@@ -166,7 +166,7 @@ def summarize_player_runs(entries: list[SessionEntry]) -> dict[str, int | str |
     }
 
 
-def build_leaderboard(sessions: list[SessionSummary]) -> list[PlayerStats]:
+def build_leaderboard(sessions: list[SessionSummary], break_even_cents: int = 100) -> list[PlayerStats]:
     player_entries: dict[str, list[SessionEntry]] = defaultdict(list)
     for session in sessions:
         for entry in session.entries:
@@ -175,9 +175,9 @@ def build_leaderboard(sessions: list[SessionSummary]) -> list[PlayerStats]:
     leaderboard: list[PlayerStats] = []
     for player_name, entries in player_entries.items():
         nets = [entry.net_cents for entry in entries]
-        run_summary = summarize_player_runs(entries)
-        wins = [value for value in nets if net_result_bucket(value) == "win"]
-        losses = [value for value in nets if net_result_bucket(value) == "loss"]
+        run_summary = summarize_player_runs(entries, break_even_cents)
+        wins = [value for value in nets if net_result_bucket(value, break_even_cents) == "win"]
+        losses = [value for value in nets if net_result_bucket(value, break_even_cents) == "loss"]
 
         sessions_played = len(entries)
         winning_sessions = len(wins)
diff --git a/templates/league_settings.html b/templates/league_settings.html
index 1daaa86..bc85561 100644
--- a/templates/league_settings.html
+++ b/templates/league_settings.html
@@ -28,6 +28,20 @@
                 <option value="public" {{ 'selected' if form.visibility == 'public' else '' }}>Public — leaderboard is visible to anyone</option>
             </select>
         </label>
+        <div style="margin-top:8px;padding-top:20px;border-top:1px solid var(--border);">
+            <p class="eyebrow">Leaderboard</p>
+            <p class="muted-text" style="margin-top:4px;margin-bottom:0;font-size:.82rem;">Controls how players qualify and how sessions are classified.</p>
+        </div>
+        <div class="session-create-row" style="grid-template-columns:1fr 1fr;">
+            <label>
+                <span>Sessions to rank <span class="info-tip" tabindex="0"><svg width="13" height="13" viewBox="0 0 13 13" fill="none" aria-hidden="true"><circle cx="6.5" cy="6.5" r="5.5" stroke="currentColor" stroke-width="1.2"/><path d="M6.5 6v3.5" stroke="currentColor" stroke-width="1.3" stroke-linecap="round"/><circle cx="6.5" cy="4" r=".7" fill="currentColor"/></svg><span class="info-tip__bubble">Minimum number of sessions a player must have played to appear on the ranked leaderboard. Players below this threshold are shown as provisional.</span></span></span>
+                <input type="number" name="eligible_min_sessions" value="{{ form.eligible_min_sessions }}" min="1" max="100" step="1" required>
+            </label>
+            <label>
+                <span>Break-even threshold ($) <span class="info-tip" tabindex="0"><svg width="13" height="13" viewBox="0 0 13 13" fill="none" aria-hidden="true"><circle cx="6.5" cy="6.5" r="5.5" stroke="currentColor" stroke-width="1.2"/><path d="M6.5 6v3.5" stroke="currentColor" stroke-width="1.3" stroke-linecap="round"/><circle cx="6.5" cy="4" r=".7" fill="currentColor"/></svg><span class="info-tip__bubble">A session within ±this amount of $0 is counted as a break-even rather than a win or loss. Default is $1.00.</span></span></span>
+                <input type="number" name="break_even_dollars" value="{{ form.break_even_dollars }}" min="0" max="100" step="0.50" required>
+            </label>
+        </div>
         <div>
             <button class="btn btn--primary" type="submit">Save changes</button>
         </div>
diff --git a/utils.py b/utils.py
index 2fa8e79..44094f7 100644
--- a/utils.py
+++ b/utils.py
@@ -82,9 +82,9 @@ def entry_sort_key(entry: SessionEntry) -> tuple[str, int, str]:
     )
 
 
-def net_result_bucket(value_cents: int) -> str:
-    if value_cents > BREAK_EVEN_TOLERANCE_CENTS:
+def net_result_bucket(value_cents: int, tolerance_cents: int = BREAK_EVEN_TOLERANCE_CENTS) -> str:
+    if value_cents > tolerance_cents:
         return "win"
-    if value_cents < -BREAK_EVEN_TOLERANCE_CENTS:
+    if value_cents < -tolerance_cents:
         return "loss"
     return "even"

From 882726e5e9331a72e13c9ed23bf2a58f9e3bd46f Mon Sep 17 00:00:00 2001
From: SowinskiBraeden <braeden@sowinski.dev>
Date: Fri, 26 Jun 2026 21:43:32 -0700
Subject: [PATCH 51/83] fix: correct migration chain for league settings
 columns (2.5.1)

Migration 0003_league_settings was chained to 0002 but the DB was already
at 0003_site_admin (an applied migration with no version file). Added a stub
for 0003_site_admin to satisfy the chain and updated the down_revision on
0003_league_settings accordingly. Columns eligible_min_sessions and
break_even_cents now apply cleanly on top of the existing schema.
---
 config.py                                   |  2 +-
 migrations/versions/0003_league_settings.py |  2 +-
 migrations/versions/0003_site_admin.py      | 23 +++++++++++++++++++++
 3 files changed, 25 insertions(+), 2 deletions(-)
 create mode 100644 migrations/versions/0003_site_admin.py

diff --git a/config.py b/config.py
index 21615ef..8592fc9 100644
--- a/config.py
+++ b/config.py
@@ -9,7 +9,7 @@ DATA_PATH = BASE_DIR / "data" / "entries.csv"
 DEFAULT_DATABASE_URL = f"sqlite:///{BASE_DIR / 'data' / 'boker-dev.sqlite3'}"
 
 ELIGIBLE_MIN_SESSIONS = 3
-APP_VERSION = "2.5.0"
+APP_VERSION = "2.5.1"
 
 
 def load_local_env(env_path: Path) -> None:
diff --git a/migrations/versions/0003_league_settings.py b/migrations/versions/0003_league_settings.py
index 56ba72b..2a632b8 100644
--- a/migrations/versions/0003_league_settings.py
+++ b/migrations/versions/0003_league_settings.py
@@ -11,7 +11,7 @@ import sqlalchemy as sa
 
 
 revision = "0003_league_settings"
-down_revision = "0002_league_public_key"
+down_revision = "0003_site_admin"
 branch_labels = None
 depends_on = None
 
diff --git a/migrations/versions/0003_site_admin.py b/migrations/versions/0003_site_admin.py
new file mode 100644
index 0000000..576e402
--- /dev/null
+++ b/migrations/versions/0003_site_admin.py
@@ -0,0 +1,23 @@
+"""site admin (stub — already applied)
+
+Revision ID: 0003_site_admin
+Revises: 0002_league_public_key
+Create Date: 2026-06-26
+"""
+from __future__ import annotations
+
+from alembic import op
+
+
+revision = "0003_site_admin"
+down_revision = "0002_league_public_key"
+branch_labels = None
+depends_on = None
+
+
+def upgrade() -> None:
+    pass
+
+
+def downgrade() -> None:
+    pass

From 51bb8f03f66c30709fc144f954ac2e54ce906367 Mon Sep 17 00:00:00 2001
From: SowinskiBraeden <braeden@sowinski.dev>
Date: Fri, 26 Jun 2026 21:51:19 -0700
Subject: [PATCH 52/83] fix: apply break-even threshold on player stat profile
 (2.5.2)

build_leaderboard, player_session_series, and session_breakdown_series
in the player detail and players routes were all called without
league.break_even_cents, so win/loss/even classification always used
the $1.00 default regardless of per-league settings.
---
 charts.py         | 12 ++++++------
 config.py         |  2 +-
 routes/leagues.py |  8 ++++----
 3 files changed, 11 insertions(+), 11 deletions(-)

diff --git a/charts.py b/charts.py
index 0a8d074..8f6bf09 100644
--- a/charts.py
+++ b/charts.py
@@ -31,8 +31,8 @@ def color_for_name(name: str, names: list[str]) -> str:
     return PLAYER_PALETTE[index % len(PLAYER_PALETTE)]
 
 
-def net_tone(value_cents: int) -> str:
-    bucket = net_result_bucket(value_cents)
+def net_tone(value_cents: int, break_even_cents: int = 100) -> str:
+    bucket = net_result_bucket(value_cents, break_even_cents)
 
     if bucket == "win":
         return "#6fc093"  # --pos
@@ -96,7 +96,7 @@ def cumulative_profit_series(sessions: list[SessionSummary]) -> dict[str, object
 
 
 def player_session_series(
-    sessions: list[SessionSummary], player_name: str
+    sessions: list[SessionSummary], player_name: str, break_even_cents: int = 100
 ) -> dict[str, Any]:
     ordered_sessions = sorted(sessions, key=session_sort_key)
     labels: list[str] = []
@@ -130,12 +130,12 @@ def player_session_series(
         "labels": labels,
         "color": color_for_name(player_name, all_player_names),
         "net_values": net_values,
-        "net_colors": [net_tone(round(value * 100)) for value in net_values],
+        "net_colors": [net_tone(round(value * 100), break_even_cents) for value in net_values],
         "cumulative_values": cumulative_values,
     }
 
 
-def session_breakdown_series(session: SessionSummary) -> dict[str, Any]:
+def session_breakdown_series(session: SessionSummary, break_even_cents: int = 100) -> dict[str, Any]:
     ordered_entries = sorted(
         session.entries,
         key=lambda entry: (entry.net_cents, entry.player_name.casefold()),
@@ -145,5 +145,5 @@ def session_breakdown_series(session: SessionSummary) -> dict[str, Any]:
     return {
         "labels": [entry.player_name for entry in ordered_entries],
         "net_values": [round(entry.net_cents / 100, 2) for entry in ordered_entries],
-        "net_colors": [net_tone(entry.net_cents) for entry in ordered_entries],
+        "net_colors": [net_tone(entry.net_cents, break_even_cents) for entry in ordered_entries],
     }
diff --git a/config.py b/config.py
index 8592fc9..00d6da7 100644
--- a/config.py
+++ b/config.py
@@ -9,7 +9,7 @@ DATA_PATH = BASE_DIR / "data" / "entries.csv"
 DEFAULT_DATABASE_URL = f"sqlite:///{BASE_DIR / 'data' / 'boker-dev.sqlite3'}"
 
 ELIGIBLE_MIN_SESSIONS = 3
-APP_VERSION = "2.5.1"
+APP_VERSION = "2.5.2"
 
 
 def load_local_env(env_path: Path) -> None:
diff --git a/routes/leagues.py b/routes/leagues.py
index 3ba2b4a..b95340c 100644
--- a/routes/leagues.py
+++ b/routes/leagues.py
@@ -589,7 +589,7 @@ def player_detail(league_ref: str, player_id: str):
         abort(404)
 
     all_sessions = build_session_summaries(list_event_rows_for_league(league.id))
-    board = build_leaderboard(all_sessions)
+    board = build_leaderboard(all_sessions, league.break_even_cents)
     player_stats = next(
         (player for player in board if player.player_name == player_record.display_name),
         None,
@@ -619,7 +619,7 @@ def player_detail(league_ref: str, player_id: str):
         player_record=player_record,
         player=player_stats,
         player_rank=player_rank,
-        chart_data=player_session_series(all_sessions, player_record.display_name),
+        chart_data=player_session_series(all_sessions, player_record.display_name, league.break_even_cents),
         player_sessions=player_sessions,
         session_label=session_label,
         session_ids=session_ref_map(league.id),
@@ -676,7 +676,7 @@ def players(league_ref: str):
     from ledger_repositories import list_event_rows_for_league
 
     all_sessions = build_session_summaries(list_event_rows_for_league(league.id))
-    board = build_leaderboard(all_sessions)
+    board = build_leaderboard(all_sessions, league.break_even_cents)
     stats_by_name = {p.player_name: p for p in board}
 
     return render_template(
@@ -1083,7 +1083,7 @@ def session_public_view(league_ref: str, session_id: str):
         session=summary,
         session_number=session_number,
         raw_events=session_events(rows, summary.session_id),
-        chart_data=session_breakdown_series(summary),
+        chart_data=session_breakdown_series(summary, league.break_even_cents),
         session_label=session_label,
         prev_session_id=ref_to_db_id.get(prev_summary.session_id) if prev_summary else None,
         next_session_id=ref_to_db_id.get(next_summary.session_id) if next_summary else None,

From cacacb11bf6929d219c991f90357663eaa4f5c7e Mon Sep 17 00:00:00 2001
From: SowinskiBraeden <braeden@sowinski.dev>
Date: Fri, 26 Jun 2026 21:53:34 -0700
Subject: [PATCH 53/83] fix: show league break-even threshold on player profile
 (2.5.2)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

The ±$1.00 label was hardcoded; now reads from league.break_even_cents.
---
 templates/league_player_detail.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/templates/league_player_detail.html b/templates/league_player_detail.html
index 3f2391d..53e4f94 100644
--- a/templates/league_player_detail.html
+++ b/templates/league_player_detail.html
@@ -120,7 +120,7 @@
                     </div>
                 </div>
                 {% if result_total > 0 %}
-                <div class="result-mix__note">±$1.00 counts as even</div>
+                <div class="result-mix__note">±${{ "%.2f"|format(league.break_even_cents / 100) }} counts as even</div>
                 {% endif %}
             </div>
         </div>

From 5d27b83ecd62d097e69d72cdc368914f3844898f Mon Sep 17 00:00:00 2001
From: SowinskiBraeden <braeden@sowinski.dev>
Date: Fri, 26 Jun 2026 21:54:37 -0700
Subject: [PATCH 54/83] chore: bump version to 2.5.3

---
 config.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/config.py b/config.py
index 00d6da7..054ebbd 100644
--- a/config.py
+++ b/config.py
@@ -9,7 +9,7 @@ DATA_PATH = BASE_DIR / "data" / "entries.csv"
 DEFAULT_DATABASE_URL = f"sqlite:///{BASE_DIR / 'data' / 'boker-dev.sqlite3'}"
 
 ELIGIBLE_MIN_SESSIONS = 3
-APP_VERSION = "2.5.2"
+APP_VERSION = "2.5.3"
 
 
 def load_local_env(env_path: Path) -> None:

From 00e640d6dc75c728f7b285afbce6d48d3a7e1abe Mon Sep 17 00:00:00 2001
From: SowinskiBraeden <braeden@sowinski.dev>
Date: Sat, 27 Jun 2026 09:48:28 -0700
Subject: [PATCH 55/83] fix player actions button

---
 config.py            | 2 +-
 static/css/style.css | 3 +--
 2 files changed, 2 insertions(+), 3 deletions(-)

diff --git a/config.py b/config.py
index 054ebbd..fb8dc16 100644
--- a/config.py
+++ b/config.py
@@ -9,7 +9,7 @@ DATA_PATH = BASE_DIR / "data" / "entries.csv"
 DEFAULT_DATABASE_URL = f"sqlite:///{BASE_DIR / 'data' / 'boker-dev.sqlite3'}"
 
 ELIGIBLE_MIN_SESSIONS = 3
-APP_VERSION = "2.5.3"
+APP_VERSION = "2.5.4"
 
 
 def load_local_env(env_path: Path) -> None:
diff --git a/static/css/style.css b/static/css/style.css
index ca76ef1..ba2fc2c 100644
--- a/static/css/style.css
+++ b/static/css/style.css
@@ -2239,12 +2239,11 @@ select.control { cursor: pointer; }
   gap: 12px;
   text-decoration: none;
   box-shadow: var(--shadow-sm);
-  transition: border-color 0.18s, box-shadow 0.18s, transform 0.18s;
+  transition: border-color 0.18s, box-shadow 0.18s;
 }
 .player-card:hover {
   border-color: color-mix(in srgb, var(--accent) 40%, transparent);
   box-shadow: var(--shadow-lg), 0 0 0 1px color-mix(in srgb, var(--accent) 18%, transparent);
-  transform: translateY(-2px);
 }
 .player-card--archived { opacity: 0.5; }
 .player-card__head {

From 3026204a9995ceec3400b4baa66ee9af1dd8b28e Mon Sep 17 00:00:00 2001
From: SowinskiBraeden <braeden@sowinski.dev>
Date: Sat, 27 Jun 2026 10:15:55 -0700
Subject: [PATCH 56/83] fix email invites

---
 config.py                      |  7 ++++++-
 emails.py                      | 30 +++++++++++++++++++++++++-----
 routes/leagues.py              |  7 +++++--
 templates/league_settings.html | 13 ++++++++++++-
 4 files changed, 48 insertions(+), 9 deletions(-)

diff --git a/config.py b/config.py
index fb8dc16..f1541e0 100644
--- a/config.py
+++ b/config.py
@@ -9,7 +9,7 @@ DATA_PATH = BASE_DIR / "data" / "entries.csv"
 DEFAULT_DATABASE_URL = f"sqlite:///{BASE_DIR / 'data' / 'boker-dev.sqlite3'}"
 
 ELIGIBLE_MIN_SESSIONS = 3
-APP_VERSION = "2.5.4"
+APP_VERSION = "2.5.5"
 
 
 def load_local_env(env_path: Path) -> None:
@@ -44,9 +44,14 @@ class Config:
     MAIL_SERVER: str = os.getenv("MAIL_SERVER", "")
     MAIL_PORT: int = int(os.getenv("MAIL_PORT", "587"))
     MAIL_USE_TLS: bool = os.getenv("MAIL_USE_TLS", "true").lower() in ("true", "1", "yes")
+    MAIL_USE_SSL: bool = os.getenv(
+        "MAIL_USE_SSL",
+        "true" if MAIL_PORT == 465 else "false",
+    ).lower() in ("true", "1", "yes")
     MAIL_USERNAME: str | None = os.getenv("MAIL_USERNAME") or None
     MAIL_PASSWORD: str | None = os.getenv("MAIL_PASSWORD") or None
     MAIL_DEFAULT_SENDER: str = os.getenv("MAIL_DEFAULT_SENDER", "noreply@myboker.org")
+    MAIL_TIMEOUT: float = float(os.getenv("MAIL_TIMEOUT", "5"))
 
 
 class ProductionConfig(Config):
diff --git a/emails.py b/emails.py
index 9f15ce6..b8de782 100644
--- a/emails.py
+++ b/emails.py
@@ -1,12 +1,31 @@
 #!/usr/bin/env python3
 from __future__ import annotations
 
+import socket
+
 from flask import current_app
 from flask_mail import Message
 
 from extensions import mail
 
 
+def _mail_send_suppressed() -> bool:
+    state = current_app.extensions.get("mail")
+    return bool(getattr(state, "suppress", False))
+
+
+def _send_message(msg: Message) -> None:
+    if not _mail_send_suppressed() and not current_app.config.get("MAIL_SERVER"):
+        raise RuntimeError("Mail server is not configured.")
+
+    previous_timeout = socket.getdefaulttimeout()
+    socket.setdefaulttimeout(float(current_app.config.get("MAIL_TIMEOUT", 5)))
+    try:
+        mail.send(msg)
+    finally:
+        socket.setdefaulttimeout(previous_timeout)
+
+
 def send_password_reset(to_email: str, reset_url: str) -> None:
     msg = Message(
         subject="Reset your myboker.org password",
@@ -19,19 +38,20 @@ def send_password_reset(to_email: str, reset_url: str) -> None:
         ),
         sender=current_app.config.get("MAIL_DEFAULT_SENDER"),
     )
-    mail.send(msg)
+    _send_message(msg)
 
 
-def send_league_invite(to_email: str, league_name: str, invite_url: str, invited_by_email: str) -> None:
+def send_league_invite(to_email: str, league_name: str, invite_url: str, invited_by_email: str, role: str) -> None:
+    role_label = role.strip().lower() if role else "member"
     msg = Message(
-        subject=f"You've been invited to manage {league_name} on myboker.org",
+        subject=f"You've been invited to join {league_name} on myboker.org",
         recipients=[to_email],
         body=(
-            f"{invited_by_email} has invited you to join {league_name} as a manager on myboker.org.\n\n"
+            f"{invited_by_email} has invited you to join {league_name} as a {role_label} on myboker.org.\n\n"
             f"Accept your invitation:\n\n"
             f"{invite_url}\n\n"
             f"This link expires in 7 days. You'll need a myboker.org account with this email address to accept."
         ),
         sender=current_app.config.get("MAIL_DEFAULT_SENDER"),
     )
-    mail.send(msg)
+    _send_message(msg)
diff --git a/routes/leagues.py b/routes/leagues.py
index b95340c..c1a83cd 100644
--- a/routes/leagues.py
+++ b/routes/leagues.py
@@ -1204,6 +1204,7 @@ def invite_member(league_ref: str):
     from auth import generate_invite_token
     from emails import send_league_invite
     from flask import current_app
+    from db_models import User
     from league_repositories import find_membership, find_user_by_email
 
     league = require_league(league_ref, {"owner"})
@@ -1228,10 +1229,12 @@ def invite_member(league_ref: str):
     token = generate_invite_token(league.id, email, role, current_user_id() or "")
     base_url = current_app.config.get("APP_BASE_URL", "").rstrip("/")
     invite_url = f"{base_url}{url_for('account.accept_invite', token=token)}"
+    inviter = db.session.get(User, current_user_id() or "")
+    inviter_email = inviter.email if inviter is not None else "A league owner"
 
     try:
-        send_league_invite(email, league.name, invite_url, current_user_id() or "")
-        flash(f"Invitation sent to {email}.", "success")
+        send_league_invite(email, league.name, invite_url, inviter_email, role)
+        flash(f"{role.title()} invitation sent to {email}.", "success")
     except Exception:
         flash("Failed to send invitation email. Check your mail configuration.", "error")
 
diff --git a/templates/league_settings.html b/templates/league_settings.html
index bc85561..4cb4985 100644
--- a/templates/league_settings.html
+++ b/templates/league_settings.html
@@ -71,7 +71,7 @@
             </div>
             {% endfor %}
         </div>
-        <form class="form-card" method="post" action="{{ url_for('leagues.invite_member', league_ref=league.url_ref) }}" style="padding:16px 20px 20px;border-top:1px solid var(--border);">
+        <form class="form-card" id="invite-member-form" method="post" action="{{ url_for('leagues.invite_member', league_ref=league.url_ref) }}" style="padding:16px 20px 20px;border-top:1px solid var(--border);">
             <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
             <p class="kicker" style="margin-bottom:10px;">Invite by email</p>
             <div class="session-create-row" style="align-items:flex-end;gap:10px;">
@@ -177,6 +177,17 @@
     document.querySelectorAll('.modal-confirm-input').forEach(inp => {
         inp.addEventListener('input', () => checkConfirmInput(inp));
     });
+
+    const inviteForm = document.getElementById('invite-member-form');
+    if (inviteForm) {
+        inviteForm.addEventListener('submit', () => {
+            const btn = inviteForm.querySelector('button[type="submit"]');
+            if (!btn) return;
+            btn.disabled = true;
+            btn.textContent = 'Sending...';
+            inviteForm.setAttribute('aria-busy', 'true');
+        });
+    }
 })();
 </script>
 

From 00d59ac8ae4a71bdb21628508d17de17341aa4c8 Mon Sep 17 00:00:00 2001
From: SowinskiBraeden <braeden@sowinski.dev>
Date: Sat, 27 Jun 2026 10:33:54 -0700
Subject: [PATCH 57/83] fix re-invites + promote/demote members

---
 config.py                      |   2 +-
 league_repositories.py         |  26 +++++++
 routes/leagues.py              |  30 ++++++++
 static/css/style.css           |  77 ++++++++++++++++++
 templates/league_settings.html | 137 +++++++++++++++++++++++++++------
 5 files changed, 247 insertions(+), 25 deletions(-)

diff --git a/config.py b/config.py
index f1541e0..0608d1c 100644
--- a/config.py
+++ b/config.py
@@ -9,7 +9,7 @@ DATA_PATH = BASE_DIR / "data" / "entries.csv"
 DEFAULT_DATABASE_URL = f"sqlite:///{BASE_DIR / 'data' / 'boker-dev.sqlite3'}"
 
 ELIGIBLE_MIN_SESSIONS = 3
-APP_VERSION = "2.5.5"
+APP_VERSION = "2.5.6"
 
 
 def load_local_env(env_path: Path) -> None:
diff --git a/league_repositories.py b/league_repositories.py
index 3d4417a..117f4fc 100644
--- a/league_repositories.py
+++ b/league_repositories.py
@@ -302,6 +302,16 @@ def add_league_member(
     role: str,
     invited_by_user_id: str,
 ) -> LeagueMembership:
+    existing = LeagueMembership.query.filter_by(
+        league_id=league_id,
+        user_id=user_id,
+    ).one_or_none()
+    if existing is not None:
+        existing.role = role
+        existing.invited_by_user_id = invited_by_user_id or None
+        existing.disabled_at = None
+        return existing
+
     membership = LeagueMembership(
         league_id=league_id,
         user_id=user_id,
@@ -322,3 +332,19 @@ def remove_league_member(league_id: str, user_id: str) -> None:
     ).one_or_none()
     if membership and membership.role != "owner":
         membership.disabled_at = utc_now()
+
+
+def set_league_member_role(league_id: str, user_id: str, role: str) -> LeagueMembership | None:
+    if role not in {"manager", "viewer"}:
+        raise ValueError(f"Unsupported member role: {role}")
+
+    membership = LeagueMembership.query.filter_by(
+        league_id=league_id,
+        user_id=user_id,
+        disabled_at=None,
+    ).one_or_none()
+    if membership is None or membership.role == "owner":
+        return None
+
+    membership.role = role
+    return membership
diff --git a/routes/leagues.py b/routes/leagues.py
index c1a83cd..9aee964 100644
--- a/routes/leagues.py
+++ b/routes/leagues.py
@@ -1262,6 +1262,36 @@ def remove_member(league_ref: str, user_id: str):
     return redirect(url_for("leagues.league_settings", league_ref=league.url_ref))
 
 
+@leagues_bp.post("/l/<league_ref>/settings/members/<user_id>/role")
+@login_required
+def update_member_role(league_ref: str, user_id: str):
+    if not db_ready():
+        flash("League database is not available.", "error")
+        return redirect(url_for("public.home"))
+
+    from league_repositories import set_league_member_role
+
+    league = require_league(league_ref, {"owner"})
+    role = request.form.get("role", "").strip()
+
+    if user_id == current_user_id():
+        flash("You cannot change your own league role.", "error")
+        return redirect(url_for("leagues.league_settings", league_ref=league.url_ref))
+
+    if role not in {"manager", "viewer"}:
+        flash("Invalid member role.", "error")
+        return redirect(url_for("leagues.league_settings", league_ref=league.url_ref))
+
+    membership = set_league_member_role(league.id, user_id, role)
+    if membership is None:
+        flash("That member cannot be updated.", "error")
+        return redirect(url_for("leagues.league_settings", league_ref=league.url_ref))
+
+    db.session.commit()
+    flash(f"Member changed to {role}.", "success")
+    return redirect(url_for("leagues.league_settings", league_ref=league.url_ref))
+
+
 @leagues_bp.post("/l/<league_ref>/archive")
 @login_required
 def archive_league(league_ref: str):
diff --git a/static/css/style.css b/static/css/style.css
index ba2fc2c..29bc89c 100644
--- a/static/css/style.css
+++ b/static/css/style.css
@@ -3693,6 +3693,83 @@ select.control { cursor: pointer; }
 .member-row:last-child { border-bottom: none; }
 .member-row > div { min-width: 0; }
 .member-row strong { font: 600 14px/1.4 var(--font-ui); color: var(--text-1); }
+.access-panel__grid {
+  display: grid;
+  grid-template-columns: minmax(320px, 0.82fr) minmax(320px, 420px);
+  min-height: 228px;
+  border-top: 1px solid var(--border);
+}
+.access-panel__members {
+  min-width: 0;
+}
+.access-panel__invite {
+  border-left: 1px solid var(--border);
+  padding: 18px 20px 20px;
+  gap: 14px;
+}
+.access-panel__invite-title {
+  margin: 0;
+  font: 700 16px/1.25 var(--font-ui);
+  color: var(--text-strong);
+}
+.access-panel__invite .btn {
+  justify-self: start;
+}
+.member-row {
+  align-items: flex-start;
+  padding: 14px 20px;
+}
+.member-row__identity {
+  display: grid;
+  gap: 6px;
+}
+.member-row__actions {
+  display: flex;
+  align-items: center;
+  justify-content: flex-end;
+  gap: 8px;
+  flex-wrap: wrap;
+}
+.member-role {
+  justify-self: start;
+  padding: 3px 8px;
+  border: 1px solid var(--border);
+  border-radius: 999px;
+  font: 700 10px/1 var(--font-ui);
+  letter-spacing: .04em;
+  text-transform: uppercase;
+  color: var(--muted);
+  background: var(--surface-subtle);
+}
+.member-role--owner {
+  color: var(--accent);
+  border-color: color-mix(in srgb, var(--accent) 34%, transparent);
+  background: color-mix(in srgb, var(--accent) 10%, transparent);
+}
+.member-role--manager {
+  color: var(--pos);
+  border-color: var(--pos-tint-bd);
+  background: var(--pos-tint);
+}
+.member-role--viewer {
+  color: var(--text-2);
+}
+@media (max-width: 760px) {
+  .access-panel__grid {
+    grid-template-columns: 1fr;
+  }
+  .access-panel__invite {
+    border-left: none;
+    border-top: 1px solid var(--border);
+  }
+  .member-row {
+    flex-direction: column;
+    align-items: stretch;
+  }
+  .member-row__actions {
+    justify-content: flex-start;
+  }
+}
 
 .card-menu { position: relative; flex-shrink: 0; }
 .card-menu__trigger {
diff --git a/templates/league_settings.html b/templates/league_settings.html
index 4cb4985..8a30362 100644
--- a/templates/league_settings.html
+++ b/templates/league_settings.html
@@ -47,7 +47,7 @@
         </div>
     </form>
 
-    <div class="panel">
+    <div class="panel access-panel">
         <div class="panel__head">
             <div>
                 <p class="kicker" style="margin:0;">Access</p>
@@ -55,40 +55,58 @@
             </div>
             <span class="panel__tag">{{ members|length }} member{{ 's' if members|length != 1 else '' }}</span>
         </div>
-        <div class="panel__body" style="padding-bottom:0;">
-            {% for membership, member_user in members %}
-            <div class="member-row">
-                <div>
-                    <strong>{{ member_user.email }}</strong>
-                    <span class="kicker" style="margin-left:8px;text-transform:capitalize;">{{ membership.role }}</span>
+        <div class="access-panel__grid">
+            <div class="access-panel__members" aria-label="League members">
+                {% for membership, member_user in members %}
+                <div class="member-row">
+                    <div class="member-row__identity">
+                        <strong>{{ member_user.email }}</strong>
+                        <span class="member-role member-role--{{ membership.role }}">{{ membership.role }}</span>
+                    </div>
+                    {% if membership.role != 'owner' and member_user.id != current_user_id %}
+                    <div class="member-row__actions">
+                        {% if membership.role == 'viewer' %}
+                        <button class="btn btn--ghost btn--sm" type="button"
+                            data-member-action="promote"
+                            data-member-email="{{ member_user.email }}"
+                            data-member-role="manager"
+                            data-member-url="{{ url_for('leagues.update_member_role', league_ref=league.url_ref, user_id=member_user.id) }}">Promote</button>
+                        {% elif membership.role == 'manager' %}
+                        <button class="btn btn--ghost btn--sm" type="button"
+                            data-member-action="demote"
+                            data-member-email="{{ member_user.email }}"
+                            data-member-role="viewer"
+                            data-member-url="{{ url_for('leagues.update_member_role', league_ref=league.url_ref, user_id=member_user.id) }}">Demote</button>
+                        {% endif %}
+                        <button class="btn btn--ghost btn--sm" type="button"
+                            data-member-action="remove"
+                            data-member-email="{{ member_user.email }}"
+                            data-member-url="{{ url_for('leagues.remove_member', league_ref=league.url_ref, user_id=member_user.id) }}">Remove</button>
+                    </div>
+                    {% endif %}
                 </div>
-                {% if membership.role != 'owner' %}
-                <form method="post" action="{{ url_for('leagues.remove_member', league_ref=league.url_ref, user_id=member_user.id) }}" style="margin:0;">
-                    <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
-                    <button class="btn btn--ghost btn--sm" type="submit">Remove</button>
-                </form>
-                {% endif %}
+                {% endfor %}
             </div>
-            {% endfor %}
-        </div>
-        <form class="form-card" id="invite-member-form" method="post" action="{{ url_for('leagues.invite_member', league_ref=league.url_ref) }}" style="padding:16px 20px 20px;border-top:1px solid var(--border);">
-            <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
-            <p class="kicker" style="margin-bottom:10px;">Invite by email</p>
-            <div class="session-create-row" style="align-items:flex-end;gap:10px;">
-                <label style="flex:1 1 200px;">
+            <form class="access-panel__invite form-card" id="invite-member-form" method="post" action="{{ url_for('leagues.invite_member', league_ref=league.url_ref) }}">
+                <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
+                <div>
+                    <p class="kicker" style="margin:0 0 4px;">Invite by email</p>
+                    <h3 class="access-panel__invite-title">Add a member</h3>
+                </div>
+                <label>
                     <span>Email</span>
                     <input type="email" name="email" placeholder="friend@example.com" required>
                 </label>
-                <label style="flex:0 0 130px;">
+                <label>
                     <span>Role</span>
                     <select name="role">
                         <option value="manager">Manager</option>
                         <option value="viewer">Viewer</option>
                     </select>
                 </label>
-                <button class="btn btn--primary btn--sm" type="submit" style="flex:0 0 auto;margin-bottom:1px;">Send invite</button>
-            </div>
-        </form>
+                <button class="btn btn--primary btn--sm" type="submit">Send invite</button>
+            </form>
+        </div>
     </div>
 
     <div class="panel">
@@ -111,6 +129,41 @@
 
 </div>
 
+<div class="modal-backdrop" id="modal-member-role" hidden>
+    <div class="modal-card" role="dialog" aria-modal="true" aria-labelledby="modal-member-role-title">
+        <div class="modal-card__head">
+            <span class="kicker" style="margin:0;">Access</span>
+            <h2 class="panel__title" id="modal-member-role-title">Change member role?</h2>
+        </div>
+        <p class="modal-card__text" id="modal-member-role-text"></p>
+        <form id="member-role-form" method="post" action="">
+            <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
+            <input type="hidden" name="role" id="member-role-input" value="">
+            <div class="modal-card__actions">
+                <button class="btn btn--ghost btn--sm" type="button" data-close-modal>Cancel</button>
+                <button class="btn btn--primary btn--sm" id="member-role-confirm" type="submit">Confirm</button>
+            </div>
+        </form>
+    </div>
+</div>
+
+<div class="modal-backdrop" id="modal-member-remove" hidden>
+    <div class="modal-card" role="dialog" aria-modal="true" aria-labelledby="modal-member-remove-title">
+        <div class="modal-card__head">
+            <span class="kicker" style="margin:0;">Access</span>
+            <h2 class="panel__title" id="modal-member-remove-title">Remove member?</h2>
+        </div>
+        <p class="modal-card__text" id="modal-member-remove-text"></p>
+        <form id="member-remove-form" method="post" action="">
+            <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
+            <div class="modal-card__actions">
+                <button class="btn btn--ghost btn--sm" type="button" data-close-modal>Cancel</button>
+                <button class="btn btn--danger btn--sm" type="submit">Remove member</button>
+            </div>
+        </form>
+    </div>
+</div>
+
 <div class="modal-backdrop" id="modal-archive" hidden>
     <div class="modal-card">
         <div class="modal-card__head">
@@ -178,6 +231,42 @@
         inp.addEventListener('input', () => checkConfirmInput(inp));
     });
 
+    const roleModal = document.getElementById('modal-member-role');
+    const roleForm = document.getElementById('member-role-form');
+    const roleInput = document.getElementById('member-role-input');
+    const roleTitle = document.getElementById('modal-member-role-title');
+    const roleText = document.getElementById('modal-member-role-text');
+    const roleConfirm = document.getElementById('member-role-confirm');
+    const removeModal = document.getElementById('modal-member-remove');
+    const removeForm = document.getElementById('member-remove-form');
+    const removeTitle = document.getElementById('modal-member-remove-title');
+    const removeText = document.getElementById('modal-member-remove-text');
+
+    document.querySelectorAll('[data-member-action]').forEach(btn => {
+        btn.addEventListener('click', () => {
+            const action = btn.dataset.memberAction;
+            const email = btn.dataset.memberEmail;
+
+            if (action === 'remove') {
+                removeForm.action = btn.dataset.memberUrl;
+                removeTitle.textContent = 'Remove ' + email + '?';
+                removeText.textContent = 'This member will lose access to ' + {{ league.name|tojson }} + '. Their league data and ledger history will stay intact.';
+                removeModal.removeAttribute('hidden');
+                removeModal.querySelector('[data-close-modal]')?.focus();
+                return;
+            }
+
+            const nextRole = btn.dataset.memberRole;
+            roleForm.action = btn.dataset.memberUrl;
+            roleInput.value = nextRole;
+            roleTitle.textContent = (action === 'promote' ? 'Promote ' : 'Demote ') + email + '?';
+            roleText.textContent = email + ' will become a ' + nextRole + ' for ' + {{ league.name|tojson }} + '.';
+            roleConfirm.textContent = action === 'promote' ? 'Promote member' : 'Demote member';
+            roleModal.removeAttribute('hidden');
+            roleModal.querySelector('[data-close-modal]')?.focus();
+        });
+    });
+
     const inviteForm = document.getElementById('invite-member-form');
     if (inviteForm) {
         inviteForm.addEventListener('submit', () => {

From d1b9feab824af9fe294691495e8cc589f612a749 Mon Sep 17 00:00:00 2001
From: SowinskiBraeden <braeden@sowinski.dev>
Date: Sat, 27 Jun 2026 10:42:11 -0700
Subject: [PATCH 58/83] Remove ledger access from viewer role

---
 config.py                       |  2 +-
 routes/leagues.py               | 23 +++++++++++++----------
 templates/_league_sidebar.html  |  2 +-
 templates/_league_subnav.html   |  2 +-
 templates/league_dashboard.html |  2 ++
 templates/leagues_index.html    |  2 ++
 6 files changed, 20 insertions(+), 13 deletions(-)

diff --git a/config.py b/config.py
index 0608d1c..892794d 100644
--- a/config.py
+++ b/config.py
@@ -9,7 +9,7 @@ DATA_PATH = BASE_DIR / "data" / "entries.csv"
 DEFAULT_DATABASE_URL = f"sqlite:///{BASE_DIR / 'data' / 'boker-dev.sqlite3'}"
 
 ELIGIBLE_MIN_SESSIONS = 3
-APP_VERSION = "2.5.6"
+APP_VERSION = "2.5.7"
 
 
 def load_local_env(env_path: Path) -> None:
diff --git a/routes/leagues.py b/routes/leagues.py
index 9aee964..5e85dae 100644
--- a/routes/leagues.py
+++ b/routes/leagues.py
@@ -227,6 +227,7 @@ def dashboard(league_ref: str):
     league, resp = get_league_with_visibility_gate(league_ref)
     if resp:
         return resp
+    can_manage = user_has_league_role(current_user_id() or "", league.id, {"owner", "manager"})
     is_owner = user_has_league_role(current_user_id() or "", league.id, {"owner"})
 
     all_sessions = build_session_summaries(list_event_rows_for_league(league.id))
@@ -275,6 +276,7 @@ def dashboard(league_ref: str):
         "league_dashboard.html",
         league=league,
         counts=league_counts(league.id),
+        can_manage=can_manage,
         is_owner=is_owner,
         cash_stats=cash_stats,
     )
@@ -310,6 +312,7 @@ def leaderboard(league_ref: str):
     league, resp = get_league_with_visibility_gate(league_ref)
     if resp:
         return resp
+    can_manage = user_has_league_role(current_user_id() or "", league.id, {"owner", "manager"})
     is_owner = user_has_league_role(current_user_id() or "", league.id, {"owner"})
     eligible_min_sessions = league.eligible_min_sessions
     break_even_cents = league.break_even_cents
@@ -401,6 +404,7 @@ def leaderboard(league_ref: str):
             player.display_name: player.id
             for player in list_players_for_league(league.id)
         },
+        can_manage=can_manage,
         is_owner=is_owner,
     )
 
@@ -424,10 +428,7 @@ def ledger(league_ref: str):
         user_has_league_role,
     )
 
-    league = require_league(
-        league_ref,
-        {"owner", "manager"} if request.method == "POST" else {"owner", "manager", "viewer"},
-    )
+    league = require_league(league_ref, {"owner", "manager"})
     can_manage = user_has_league_role(current_user_id() or "", league.id, {"owner", "manager"})
     is_owner = user_has_league_role(current_user_id() or "", league.id, {"owner"})
 
@@ -953,10 +954,7 @@ def session_detail(league_ref: str, session_id: str):
         user_has_league_role,
     )
 
-    league = require_league(
-        league_ref,
-        {"owner", "manager"} if request.method == "POST" else {"owner", "manager", "viewer"},
-    )
+    league = require_league(league_ref, {"owner", "manager"})
     session = find_session_for_league(league.id, session_id)
     if session is None:
         abort(404)
@@ -1051,6 +1049,10 @@ def session_public_view(league_ref: str, session_id: str):
         if not user_has_league_role(user_id, league.id, {"owner", "manager", "viewer"}):
             abort(403)
 
+    user_id = current_user_id() or ""
+    can_manage = user_has_league_role(user_id, league.id, {"owner", "manager"})
+    is_owner = user_has_league_role(user_id, league.id, {"owner"})
+
     session = find_session_for_league(league.id, session_id)
     if session is None:
         abort(404)
@@ -1087,7 +1089,8 @@ def session_public_view(league_ref: str, session_id: str):
         session_label=session_label,
         prev_session_id=ref_to_db_id.get(prev_summary.session_id) if prev_summary else None,
         next_session_id=ref_to_db_id.get(next_summary.session_id) if next_summary else None,
-        is_owner=False,
+        can_manage=can_manage,
+        is_owner=is_owner,
     )
 
 
@@ -1324,7 +1327,7 @@ def export_ledger_csv(league_ref: str):
     from ledger_repositories import list_event_rows_for_league
     from storage import CSV_HEADERS
 
-    league = require_league(league_ref, {"owner", "manager", "viewer"})
+    league = require_league(league_ref, {"owner", "manager"})
     rows = list_event_rows_for_league(league.id)
 
     buf = io.StringIO()
diff --git a/templates/_league_sidebar.html b/templates/_league_sidebar.html
index 4fbaef3..81bfec6 100644
--- a/templates/_league_sidebar.html
+++ b/templates/_league_sidebar.html
@@ -51,7 +51,7 @@
             <span>Leaderboard</span>
         </a>
 
-        {% if is_logged_in %}
+        {% if can_manage is defined and can_manage %}
         <a class="sidebar__link {{ 'is-active' if request.endpoint == 'leagues.ledger' }}"
            href="{{ url_for('leagues.ledger', league_ref=league.url_ref) }}">
             <svg viewBox="0 0 16 16" fill="none" aria-hidden="true">
diff --git a/templates/_league_subnav.html b/templates/_league_subnav.html
index 38380b0..44cc7ec 100644
--- a/templates/_league_subnav.html
+++ b/templates/_league_subnav.html
@@ -7,7 +7,7 @@
             <a class="subnav__link {{ 'is-active' if request.endpoint in ('leagues.sessions', 'leagues.session_detail') }}" href="{{ url_for('leagues.sessions', league_ref=league.url_ref) }}">Sessions</a>
             <a class="subnav__link {{ 'is-active' if request.endpoint in ('leagues.players', 'leagues.player_detail') }}" href="{{ url_for('leagues.players', league_ref=league.url_ref) }}">Players</a>
             <a class="subnav__link {{ 'is-active' if request.endpoint == 'leagues.leaderboard' }}" href="{{ url_for('leagues.leaderboard', league_ref=league.url_ref) }}">Leaderboard</a>
-            {% if is_logged_in %}
+            {% if can_manage is defined and can_manage %}
             <a class="subnav__link {{ 'is-active' if request.endpoint == 'leagues.ledger' }}" href="{{ url_for('leagues.ledger', league_ref=league.url_ref) }}">Ledger</a>
             {% endif %}
             {% if is_owner is defined and is_owner %}
diff --git a/templates/league_dashboard.html b/templates/league_dashboard.html
index d787814..a541ce8 100644
--- a/templates/league_dashboard.html
+++ b/templates/league_dashboard.html
@@ -307,6 +307,7 @@
         <span class="db-nav-tile__arrow">→</span>
     </a>
 
+    {% if can_manage %}
     <a class="db-nav-tile db-nav-tile--ledger" href="{{ url_for('leagues.ledger', league_ref=league.url_ref) }}">
         <div class="db-nav-tile__icon">
             <svg width="22" height="22" viewBox="0 0 24 24" fill="none" aria-hidden="true">
@@ -322,6 +323,7 @@
         </div>
         <span class="db-nav-tile__arrow">→</span>
     </a>
+    {% endif %}
 
 </div>
 
diff --git a/templates/leagues_index.html b/templates/leagues_index.html
index c0940a8..f39ff4b 100644
--- a/templates/leagues_index.html
+++ b/templates/leagues_index.html
@@ -111,7 +111,9 @@
                     <a class="btn btn--primary btn--sm" href="{{ url_for('leagues.dashboard', league_ref=league.url_ref) }}">Open league</a>
                     <a class="li-action-link" href="{{ url_for('leagues.sessions', league_ref=league.url_ref) }}">Sessions</a>
                     <a class="li-action-link" href="{{ url_for('leagues.leaderboard', league_ref=league.url_ref) }}">Leaderboard</a>
+                    {% if membership.role in ('owner', 'manager') %}
                     <a class="li-action-link" href="{{ url_for('leagues.ledger', league_ref=league.url_ref) }}">Ledger</a>
+                    {% endif %}
                 </div>
             </div>
         </div>

From 964a0651f5949eb8d3ed6e75d4cd9c83c5cd3964 Mon Sep 17 00:00:00 2001
From: SowinskiBraeden <braeden@sowinski.dev>
Date: Sat, 27 Jun 2026 11:00:01 -0700
Subject: [PATCH 59/83] fix trasnfer ownership

---
 config.py                      |  2 +-
 league_repositories.py         | 27 +++++++++++++++++++++++
 routes/leagues.py              | 28 ++++++++++++++++++++++++
 static/css/style.css           | 27 +++++++++++++++++++++++
 templates/league_settings.html | 40 ++++++++++++++++++++++++++++++++--
 5 files changed, 121 insertions(+), 3 deletions(-)

diff --git a/config.py b/config.py
index 892794d..942b7c5 100644
--- a/config.py
+++ b/config.py
@@ -9,7 +9,7 @@ DATA_PATH = BASE_DIR / "data" / "entries.csv"
 DEFAULT_DATABASE_URL = f"sqlite:///{BASE_DIR / 'data' / 'boker-dev.sqlite3'}"
 
 ELIGIBLE_MIN_SESSIONS = 3
-APP_VERSION = "2.5.7"
+APP_VERSION = "2.5.9"
 
 
 def load_local_env(env_path: Path) -> None:
diff --git a/league_repositories.py b/league_repositories.py
index 117f4fc..0665a67 100644
--- a/league_repositories.py
+++ b/league_repositories.py
@@ -348,3 +348,30 @@ def set_league_member_role(league_id: str, user_id: str, role: str) -> LeagueMem
 
     membership.role = role
     return membership
+
+
+def transfer_league_ownership(
+    league: League,
+    current_owner_user_id: str,
+    new_owner_user_id: str,
+) -> tuple[LeagueMembership, LeagueMembership] | None:
+    if current_owner_user_id == new_owner_user_id:
+        return None
+
+    current_owner = LeagueMembership.query.filter_by(
+        league_id=league.id,
+        user_id=current_owner_user_id,
+        disabled_at=None,
+    ).one_or_none()
+    new_owner = LeagueMembership.query.filter_by(
+        league_id=league.id,
+        user_id=new_owner_user_id,
+        disabled_at=None,
+    ).one_or_none()
+    if current_owner is None or current_owner.role != "owner" or new_owner is None:
+        return None
+
+    current_owner.role = "manager"
+    new_owner.role = "owner"
+    league.created_by_user_id = new_owner_user_id
+    return current_owner, new_owner
diff --git a/routes/leagues.py b/routes/leagues.py
index 5e85dae..adc2fba 100644
--- a/routes/leagues.py
+++ b/routes/leagues.py
@@ -1295,6 +1295,34 @@ def update_member_role(league_ref: str, user_id: str):
     return redirect(url_for("leagues.league_settings", league_ref=league.url_ref))
 
 
+@leagues_bp.post("/l/<league_ref>/settings/transfer-ownership")
+@login_required
+def transfer_ownership(league_ref: str):
+    if not db_ready():
+        flash("League database is not available.", "error")
+        return redirect(url_for("public.home"))
+
+    from league_repositories import transfer_league_ownership
+
+    league = require_league(league_ref, {"owner"})
+    new_owner_user_id = request.form.get("new_owner_user_id", "").strip()
+    current_owner_user_id = current_user_id() or ""
+
+    if not new_owner_user_id:
+        flash("Choose a member to transfer ownership to.", "error")
+        return redirect(url_for("leagues.league_settings", league_ref=league.url_ref))
+
+    transfer = transfer_league_ownership(league, current_owner_user_id, new_owner_user_id)
+    if transfer is None:
+        flash("Ownership can only be transferred to an active member.", "error")
+        return redirect(url_for("leagues.league_settings", league_ref=league.url_ref))
+
+    _old_owner, _new_owner = transfer
+    db.session.commit()
+    flash("League ownership transferred. Your role is now manager.", "success")
+    return redirect(url_for("leagues.dashboard", league_ref=league.url_ref))
+
+
 @leagues_bp.post("/l/<league_ref>/archive")
 @login_required
 def archive_league(league_ref: str):
diff --git a/static/css/style.css b/static/css/style.css
index 29bc89c..5ce2dd9 100644
--- a/static/css/style.css
+++ b/static/css/style.css
@@ -1372,7 +1372,19 @@ td a:hover { color: var(--accent); }
 .btn--ghost:hover { border-color: var(--border-hi); color: var(--text-strong); }
 .btn--outline { background: var(--accent-tint); color: var(--accent); border: 1px solid var(--accent-chip-bd); }
 .btn--outline:hover { background: var(--accent-chip); }
+.btn--warning {
+  background: var(--warn-tint);
+  color: var(--warn);
+  border: 1px solid var(--warn-tint-bd);
+  font-weight: 700;
+}
+.btn--warning:hover {
+  background: color-mix(in srgb, var(--warn) 18%, transparent);
+  border-color: color-mix(in srgb, var(--warn) 54%, transparent);
+  color: var(--warn);
+}
 .btn--sm { padding: 7px 13px; font-size: 13px; }
+.btn:disabled { opacity: .45; cursor: not-allowed; box-shadow: none; }
 
 /* legacy button classes mapped to new */
 .primary-button {
@@ -2300,12 +2312,26 @@ select.control { cursor: pointer; }
   justify-content: space-between;
   gap: 20px;
   flex-wrap: wrap;
+  padding: 4px 0 18px;
+  border-bottom: 1px solid var(--border);
+}
+.danger-row + .danger-row {
+  padding-top: 18px;
+}
+.danger-row:last-child {
+  padding-bottom: 0;
+  border-bottom: none;
 }
 .danger-row__title {
   display: block;
   color: var(--text-strong);
   margin-bottom: 4px;
 }
+.danger-row__btn {
+  width: 168px;
+  justify-content: center;
+  text-align: center;
+}
 
 /* Danger button */
 .btn--danger {
@@ -5199,4 +5225,5 @@ select.control { cursor: pointer; }
   font-weight: 600;
   color: var(--accent);
   transition: gap .15s;
+
 }
diff --git a/templates/league_settings.html b/templates/league_settings.html
index 8a30362..738bcbd 100644
--- a/templates/league_settings.html
+++ b/templates/league_settings.html
@@ -117,18 +117,55 @@
             </div>
         </div>
         <div class="panel__body">
+            <div class="danger-row">
+                <div>
+                    <strong class="danger-row__title">Transfer ownership</strong>
+                    <p class="muted-text">Choose an existing member to become the league owner. Your role will change to manager.</p>
+                </div>
+                <button class="btn btn--warning btn--sm danger-row__btn" type="button" data-modal="modal-transfer-owner" {% if members|length <= 1 %}disabled{% endif %}>Transfer ownership</button>
+            </div>
             <div class="danger-row">
                 <div>
                     <strong class="danger-row__title">Archive league</strong>
                     <p class="muted-text">Removes this league from your dashboard. All players, sessions, and ledger data are preserved.</p>
                 </div>
-                <button class="btn btn--ghost btn--sm" type="button" data-modal="modal-archive">Archive league</button>
+                <button class="btn btn--warning btn--sm danger-row__btn" type="button" data-modal="modal-archive">Archive league</button>
             </div>
         </div>
     </div>
 
 </div>
 
+<div class="modal-backdrop" id="modal-transfer-owner" hidden>
+    <div class="modal-card" role="dialog" aria-modal="true" aria-labelledby="modal-transfer-owner-title">
+        <div class="modal-card__head">
+            <span class="kicker" style="margin:0;">Ownership</span>
+            <h2 class="panel__title" id="modal-transfer-owner-title">Transfer ownership</h2>
+        </div>
+        <p class="modal-card__text">The selected member will become the owner of <strong>{{ league.name }}</strong>. Your role will change to manager.</p>
+        <form method="post" action="{{ url_for('leagues.transfer_ownership', league_ref=league.url_ref) }}">
+            <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
+            <div class="form-card" style="padding:0 20px 16px;gap:12px;">
+                <label>
+                    <span>New owner</span>
+                    <select name="new_owner_user_id" id="transfer-owner-select" required>
+                        <option value="">Select a member</option>
+                        {% for membership, member_user in members %}
+                        {% if membership.role != 'owner' %}
+                        <option value="{{ member_user.id }}">{{ member_user.email }} · {{ membership.role }}</option>
+                        {% endif %}
+                        {% endfor %}
+                    </select>
+                </label>
+            </div>
+            <div class="modal-card__actions">
+                <button class="btn btn--ghost btn--sm" type="button" data-close-modal>Cancel</button>
+                <button class="btn btn--primary btn--sm" type="submit">Transfer ownership</button>
+            </div>
+        </form>
+    </div>
+</div>
+
 <div class="modal-backdrop" id="modal-member-role" hidden>
     <div class="modal-card" role="dialog" aria-modal="true" aria-labelledby="modal-member-role-title">
         <div class="modal-card__head">
@@ -193,7 +230,6 @@
         </form>
     </div>
 </div>
-
 <script>
 (function () {
     function openModal(id) {

From c645c722d5869d674d2caa44b3f424d002359251 Mon Sep 17 00:00:00 2001
From: SowinskiBraeden <braeden@sowinski.dev>
Date: Sat, 27 Jun 2026 11:25:18 -0700
Subject: [PATCH 60/83] upgrade landing page

---
 config.py                       |   2 +-
 static/css/style.css            | 488 +++++++++++++++++++++++++++++++-
 templates/account_login.html    |   9 +-
 templates/account_register.html |   8 +-
 templates/landing.html          | 210 ++++++++++----
 5 files changed, 649 insertions(+), 68 deletions(-)

diff --git a/config.py b/config.py
index 942b7c5..38f0056 100644
--- a/config.py
+++ b/config.py
@@ -9,7 +9,7 @@ DATA_PATH = BASE_DIR / "data" / "entries.csv"
 DEFAULT_DATABASE_URL = f"sqlite:///{BASE_DIR / 'data' / 'boker-dev.sqlite3'}"
 
 ELIGIBLE_MIN_SESSIONS = 3
-APP_VERSION = "2.5.9"
+APP_VERSION = "2.5.10"
 
 
 def load_local_env(env_path: Path) -> None:
diff --git a/static/css/style.css b/static/css/style.css
index 5ce2dd9..28145ff 100644
--- a/static/css/style.css
+++ b/static/css/style.css
@@ -3882,14 +3882,13 @@ select.control { cursor: pointer; }
   content: "♠";
   position: absolute;
   font-size: clamp(420px, 55vw, 820px);
-  color: rgba(155,140,240,.055);
+  color: rgba(155,140,240,.075);
   line-height: 1;
   pointer-events: none;
   user-select: none;
   top: 50%;
-  left: 5%;
-  right: auto;
-  transform: translateY(-50%);
+  left: 50%;
+  transform: translate(-50%, -50%);
 }
 
 .lp-hero__content {
@@ -5225,5 +5224,486 @@ select.control { cursor: pointer; }
   font-weight: 600;
   color: var(--accent);
   transition: gap .15s;
+}
 
+/* ================================================================
+   LANDING — stats bar
+   ================================================================ */
+.lp-stats-bar {
+  border-top: 1px solid rgba(255,255,255,.06);
+  border-bottom: 1px solid rgba(255,255,255,.06);
+  background: rgba(155,140,240,.022);
+}
+.lp-stats-bar__inner {
+  max-width: var(--w-public);
+  margin: 0 auto;
+  padding: 22px clamp(24px, 5vw, 80px);
+  display: flex;
+  align-items: center;
+  justify-content: space-around;
+  gap: 16px;
+  flex-wrap: wrap;
+}
+.lp-stats-bar__item {
+  display: flex;
+  flex-direction: column;
+  align-items: center;
+  gap: 5px;
+  text-align: center;
+}
+.lp-stats-bar__val {
+  font-size: 1.25rem;
+  font-weight: 800;
+  color: var(--text-strong);
+  letter-spacing: -.03em;
+  line-height: 1;
+}
+.lp-stats-bar__lbl {
+  font-family: var(--font-mono);
+  font-size: .6rem;
+  letter-spacing: .1em;
+  text-transform: uppercase;
+  color: rgba(255,255,255,.3);
+}
+.lp-stats-bar__sep {
+  width: 1px;
+  height: 36px;
+  background: rgba(255,255,255,.08);
+  flex-shrink: 0;
+}
+@media (max-width: 680px) {
+  .lp-stats-bar__sep { display: none; }
+  .lp-stats-bar__inner { justify-content: center; gap: 16px 32px; }
+}
+
+/* ================================================================
+   LANDING — leaderboard callout section
+   ================================================================ */
+.lp-callout {
+  padding: clamp(56px, 6vw, 88px) clamp(24px, 5vw, 80px);
+  border-top: 1px solid rgba(255,255,255,.06);
+  background:
+    radial-gradient(ellipse 60% 70% at 5% 50%, rgba(155,140,240,.045) 0%, transparent 55%),
+    var(--bg);
+}
+.lp-callout__inner {
+  max-width: var(--w-public);
+  margin: 0 auto;
+  display: grid;
+  grid-template-columns: 1fr 1.25fr;
+  gap: clamp(40px, 6vw, 88px);
+  align-items: center;
+}
+.lp-callout__text {
+  max-width: 480px;
+}
+.lp-callout__title {
+  font-size: clamp(22px, 2.8vw, 34px);
+  font-weight: 800;
+  color: var(--text);
+  letter-spacing: -.035em;
+  line-height: 1.15;
+  margin: 10px 0 16px;
+}
+.lp-callout__body {
+  font-size: .9375rem;
+  color: rgba(255,255,255,.45);
+  line-height: 1.72;
+  margin: 0 0 22px;
+}
+.lp-callout__list {
+  list-style: none;
+  margin: 0;
+  padding: 0;
+  display: grid;
+  gap: 9px;
+}
+.lp-callout__list li {
+  display: flex;
+  align-items: center;
+  gap: 10px;
+  font-size: .875rem;
+  color: rgba(255,255,255,.52);
+  line-height: 1.4;
+}
+.lp-callout__list li::before {
+  content: "";
+  width: 5px;
+  height: 5px;
+  border-radius: 50%;
+  background: var(--accent);
+  flex-shrink: 0;
+  opacity: .75;
+}
+.lp-callout__demo {
+  position: relative;
+}
+@media (max-width: 900px) {
+  .lp-callout__inner { grid-template-columns: 1fr; }
+  .lp-callout__text  { max-width: none; }
+}
+@media (max-width: 440px) {
+  .lp-callout { padding-left: 16px; padding-right: 16px; }
+}
+
+/* ================================================================
+   AUTH SPLIT LAYOUT
+   ================================================================ */
+.page--auth {
+  padding: 0;
+  max-width: none;
+}
+
+.auth-split {
+  display: flex;
+  min-height: calc(100vh - 62px);
+}
+
+.auth-split__form-col {
+  flex: 1;
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  padding: clamp(40px, 5vw, 72px) clamp(24px, 5vw, 60px);
+  min-width: 0;
+}
+
+.auth-split__form-inner {
+  width: 100%;
+  max-width: 380px;
+}
+
+.auth-split__brand {
+  display: flex;
+  align-items: center;
+  gap: 10px;
+  text-decoration: none;
+  margin-bottom: 36px;
+}
+
+.auth-split__brand-mark {
+  width: 28px;
+  height: 28px;
+  border-radius: 7px;
+  background: linear-gradient(135deg, var(--accent) 0%, color-mix(in srgb, var(--accent) 72%, #7c6fd4) 100%);
+  box-shadow: 0 0 0 1px var(--accent-a30), 0 4px 18px var(--accent-a22);
+  position: relative;
+  flex: none;
+}
+.auth-split__brand-mark::after {
+  content: "";
+  position: absolute;
+  inset: 0; margin: auto;
+  width: 11px; height: 11px;
+  border-radius: 2px;
+  background: var(--accent-ink);
+  transform: rotate(45deg);
+}
+
+.auth-split__brand-name {
+  font-size: 16px;
+  font-weight: 700;
+  color: var(--text);
+  letter-spacing: -.01em;
+}
+
+.auth-split__brand-tld {
+  color: var(--faintest);
+  font-weight: 400;
+}
+
+.auth-split__title {
+  font-size: clamp(24px, 3vw, 32px);
+  font-weight: 800;
+  color: var(--text);
+  letter-spacing: -.035em;
+  margin: 0 0 8px;
+  line-height: 1.1;
+}
+
+.auth-split__sub {
+  font-size: .9375rem;
+  color: rgba(255,255,255,.42);
+  margin: 0 0 28px;
+  line-height: 1.58;
+}
+
+.auth-field {
+  display: grid;
+  gap: 7px;
+  margin-bottom: 16px;
+}
+
+.auth-field label {
+  font-family: var(--font-mono);
+  font-size: 10px;
+  letter-spacing: .1em;
+  text-transform: uppercase;
+  color: rgba(255,255,255,.38);
+}
+
+.auth-field input {
+  width: 100%;
+  padding: 11px 14px;
+  background: var(--field);
+  border: 1px solid var(--border-strong);
+  border-radius: var(--r-sm);
+  color: var(--text);
+  font: 14px var(--font-ui);
+  outline: none;
+  transition: border-color .15s, box-shadow .15s;
+}
+
+.auth-field input:focus {
+  border-color: var(--accent-chip-bd);
+  box-shadow: 0 0 0 3px var(--accent-a22);
+}
+
+.auth-field input::placeholder {
+  color: var(--faintest-2);
+}
+
+.auth-links {
+  margin: -8px 0 16px;
+  text-align: right;
+}
+
+.auth-links a {
+  font-size: .8125rem;
+  color: var(--muted);
+  transition: color .13s;
+}
+.auth-links a:hover { color: var(--accent); }
+
+.auth-submit {
+  width: 100%;
+  justify-content: center;
+  margin-top: 4px;
+  padding: 12px 24px;
+  font-size: 15px;
+}
+
+.auth-alt {
+  margin: 20px 0 0;
+  font-size: .875rem;
+  color: rgba(255,255,255,.38);
+  text-align: center;
+}
+.auth-alt a {
+  color: var(--accent);
+  font-weight: 600;
+}
+.auth-alt a:hover { text-decoration: underline; }
+
+/* ---- visual / right column ---- */
+.auth-split__visual {
+  flex: 1;
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  position: relative;
+  overflow: hidden;
+  background:
+    radial-gradient(ellipse 80% 80% at 50% 50%, #1a0c36 0%, #0d0b18 58%, var(--bg) 100%);
+  border-left: 1px solid rgba(255,255,255,.055);
+}
+
+/* large suit background symbol */
+.auth-split__visual::before {
+  position: absolute;
+  font-size: clamp(300px, 38vw, 520px);
+  color: rgba(155,140,240,.055);
+  line-height: 1;
+  pointer-events: none;
+  user-select: none;
+  top: 50%;
+  left: 50%;
+  transform: translate(-50%, -50%);
+}
+.auth-split__visual--club::before    { content: "♣"; }
+.auth-split__visual--diamond::before { content: "♦"; }
+
+.auth-visual__body {
+  position: relative;
+  z-index: 1;
+  max-width: 320px;
+  padding: 24px;
+}
+
+.auth-visual__icon {
+  width: 52px;
+  height: 52px;
+  background: var(--accent-chip);
+  border: 1px solid var(--accent-chip-bd);
+  border-radius: 14px;
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  margin-bottom: 20px;
+  box-shadow: 0 0 0 1px var(--accent-a22), 0 8px 28px var(--accent-a22);
+}
+
+.auth-visual__suit-sym {
+  font-size: 1.625rem;
+  line-height: 1;
+  color: var(--accent);
+}
+
+.auth-visual__title {
+  font-size: 1.5rem;
+  font-weight: 800;
+  color: var(--text);
+  letter-spacing: -.03em;
+  margin: 0 0 10px;
+  line-height: 1.2;
+}
+
+.auth-visual__sub {
+  font-size: .875rem;
+  color: rgba(255,255,255,.42);
+  line-height: 1.65;
+  margin: 0 0 24px;
+}
+
+.auth-visual__preview {
+  background: rgba(255,255,255,.04);
+  border: 1px solid rgba(255,255,255,.1);
+  border-radius: var(--r-md);
+  padding: 16px 18px;
+}
+
+.auth-visual__preview-kicker {
+  font-family: var(--font-mono);
+  font-size: .6rem;
+  letter-spacing: .1em;
+  text-transform: uppercase;
+  color: var(--accent);
+  margin-bottom: 13px;
+}
+
+.auth-visual__preview-row {
+  display: flex;
+  justify-content: space-between;
+  align-items: center;
+  padding: 7px 0;
+  border-bottom: 1px solid rgba(255,255,255,.06);
+  font-size: .875rem;
+  color: rgba(255,255,255,.6);
+}
+.auth-visual__preview-row:last-child { border-bottom: none; }
+.auth-visual__preview-row strong { font-weight: 600; }
+
+@media (max-width: 800px) {
+  .auth-split__visual { display: none; }
+  .auth-split__form-col { min-height: calc(100vh - 62px); }
+}
+@media (max-width: 480px) {
+  .auth-split__form-col {
+    padding: 32px 24px;
+    align-items: flex-start;
+  }
+}
+
+/* ================================================================
+   LANDING — hero kicker (replaces pill eyebrow in hero only)
+   ================================================================ */
+.lp-kicker {
+  font-family: var(--font-mono);
+  font-size: .625rem;
+  letter-spacing: .18em;
+  text-transform: uppercase;
+  color: rgba(255,255,255,.3);
+  margin: 0 0 18px;
+  display: block;
+}
+
+/* ================================================================
+   LANDING — hero live feed card
+   ================================================================ */
+.lp-live-dot {
+  font-family: var(--font-mono);
+  font-size: .6rem;
+  letter-spacing: .06em;
+  text-transform: uppercase;
+  color: var(--pos);
+  margin-left: 8px;
+  font-weight: 600;
+}
+
+.lp-feed__rows { padding: 0; }
+
+.lp-feed__row {
+  display: grid;
+  grid-template-columns: 38px 1fr auto auto;
+  gap: 10px;
+  align-items: center;
+  padding: 10px 22px;
+  border-bottom: 1px solid rgba(255,255,255,.04);
+  transition: background .1s;
+}
+.lp-feed__row:last-child { border-bottom: none; }
+.lp-feed__row:hover { background: rgba(155,140,240,.05); }
+
+.lp-feed__time {
+  font-family: var(--font-mono);
+  font-size: .635rem;
+  color: rgba(255,255,255,.22);
+  white-space: nowrap;
+}
+
+.lp-feed__player {
+  font-size: .875rem;
+  font-weight: 500;
+  color: rgba(255,255,255,.8);
+  min-width: 0;
+  overflow: hidden;
+  text-overflow: ellipsis;
+  white-space: nowrap;
+}
+
+.lp-feed__pill {
+  font-family: var(--font-mono);
+  font-size: .58rem;
+  letter-spacing: .07em;
+  text-transform: uppercase;
+  padding: 2px 7px;
+  border-radius: 4px;
+  font-weight: 600;
+  white-space: nowrap;
+}
+.lp-feed__pill--buyin {
+  background: var(--accent-chip);
+  color: var(--accent);
+  border: 1px solid var(--accent-chip-bd);
+}
+.lp-feed__pill--cashout {
+  background: rgba(111,192,147,.12);
+  color: var(--pos);
+  border: 1px solid rgba(111,192,147,.28);
+}
+.lp-feed__pill--rebuy {
+  background: rgba(224,177,92,.1);
+  color: var(--warn);
+  border: 1px solid rgba(224,177,92,.28);
+}
+
+.lp-feed__amt {
+  font-family: var(--font-mono);
+  font-size: .8125rem;
+  color: rgba(255,255,255,.5);
+  text-align: right;
+  font-variant-numeric: tabular-nums;
+  white-space: nowrap;
+}
+
+.lp-feed__summary {
+  display: grid;
+  grid-template-columns: repeat(3, 1fr);
+  gap: 1px;
+  background: rgba(255,255,255,.07);
+  border-top: 1px solid rgba(255,255,255,.07);
+}
+.lp-feed__summary-cell {
+  background: rgba(10,9,18,.9);
+  padding: 11px 16px;
 }
diff --git a/templates/account_login.html b/templates/account_login.html
index 20ad18b..cf9a252 100644
--- a/templates/account_login.html
+++ b/templates/account_login.html
@@ -36,13 +36,10 @@
         </div>
     </div>
 
-    <div class="auth-split__visual" aria-hidden="true">
+    <div class="auth-split__visual auth-split__visual--club" aria-hidden="true">
         <div class="auth-visual__body">
             <div class="auth-visual__icon">
-                <svg width="26" height="26" viewBox="0 0 26 26" fill="none">
-                    <path d="M13 2L22 7.5V18.5L13 24L4 18.5V7.5L13 2Z" stroke="rgba(155,140,240,.65)" stroke-width="1.4" fill="none"/>
-                    <path d="M13 8L18 11V17L13 20L8 17V11L13 8Z" fill="rgba(155,140,240,.25)" stroke="rgba(155,140,240,.55)" stroke-width="1"/>
-                </svg>
+                <span class="auth-visual__suit-sym">♣</span>
             </div>
             <p class="auth-visual__title">Track every chip.</p>
             <p class="auth-visual__sub">Sessions, leaderboards, and debts — all in one place for your private poker league.</p>
@@ -58,7 +55,7 @@
                 </div>
                 <div class="auth-visual__preview-row" style="opacity:.5">
                     <span>Okafor</span>
-                    <strong style="color:var(--neg);">-$210</strong>
+                    <strong style="color:var(--neg);">−$210</strong>
                 </div>
             </div>
         </div>
diff --git a/templates/account_register.html b/templates/account_register.html
index 3b3f5cc..679e25f 100644
--- a/templates/account_register.html
+++ b/templates/account_register.html
@@ -38,14 +38,10 @@
         </div>
     </div>
 
-    <div class="auth-split__visual" aria-hidden="true">
+    <div class="auth-split__visual auth-split__visual--diamond" aria-hidden="true">
         <div class="auth-visual__body">
             <div class="auth-visual__icon">
-                <svg width="26" height="26" viewBox="0 0 26 26" fill="none">
-                    <rect x="3" y="5" width="20" height="16" rx="3" stroke="rgba(155,140,240,.65)" stroke-width="1.4" fill="none"/>
-                    <path d="M3 10h20" stroke="rgba(155,140,240,.45)" stroke-width="1.2"/>
-                    <path d="M8 15h4M8 18h6" stroke="rgba(155,140,240,.55)" stroke-width="1.2" stroke-linecap="round"/>
-                </svg>
+                <span class="auth-visual__suit-sym">♦</span>
             </div>
             <p class="auth-visual__title">Free to start.</p>
             <p class="auth-visual__sub">No credit card, no monthly fees, no payment processor taking a cut of your buy-ins.</p>
diff --git a/templates/landing.html b/templates/landing.html
index f96ff50..f101af0 100644
--- a/templates/landing.html
+++ b/templates/landing.html
@@ -3,9 +3,10 @@
 {% block page_class %}page--landing{% endblock %}
 {% block content %}
 
+<!-- ── Hero ──────────────────────────────────────────────────── -->
 <div class="lp-hero">
     <div class="lp-hero__content">
-        <span class="lp-eyebrow">Home poker tracking</span>
+        <p class="lp-kicker">Home Poker Tracking</p>
         <h1 class="lp-h1">
             <span class="lp-h1__line">Your</span>
             <span class="lp-h1__line">league,</span>
@@ -37,71 +38,99 @@
         <div class="lp-demo__card">
             <div class="lp-demo__head">
                 <div>
-                    <span class="lp-demo__kicker">Friday Night Poker</span>
-                    <span class="lp-demo__title">Leaderboard · Eligible</span>
+                    <span class="lp-demo__kicker">Friday Night Poker · Session #006</span>
+                    <span class="lp-demo__title">Live event log <span class="lp-live-dot">● live</span></span>
                 </div>
-                <span class="lp-demo__meta">18 sessions · 5 players</span>
+                <span class="lp-demo__meta">Jun 21 · 5 players</span>
             </div>
-            <div class="lp-demo__table">
-                <div class="lp-demo__thead lp-demo__thead--lb">
-                    <span class="lp-demo__th">#</span>
-                    <span class="lp-demo__th">Player</span>
-                    <span class="lp-demo__th">Δ</span>
-                    <span class="lp-demo__th">Net</span>
-                    <span class="lp-demo__th">Win%</span>
-                    <span class="lp-demo__th">ROI</span>
+            <div class="lp-feed__rows">
+                <div class="lp-feed__row">
+                    <span class="lp-feed__time">10:14</span>
+                    <span class="lp-feed__player">Rivera</span>
+                    <span class="lp-feed__pill lp-feed__pill--buyin">buy-in</span>
+                    <span class="lp-feed__amt">$100</span>
                 </div>
-                <div class="lp-demo__row lp-demo__row--lb">
-                    <span class="lp-demo__rank lp-demo__rank--1">1</span>
-                    <span class="lp-demo__player">Rivera</span>
-                    <span class="lp-demo__delta lp-demo__delta--up">▲1</span>
-                    <span class="lp-demo__num lp-demo__num--pos">+$1,420</span>
-                    <span class="lp-demo__num lp-demo__num--pos">72%</span>
-                    <span class="lp-demo__num lp-demo__num--pos">+46%</span>
+                <div class="lp-feed__row">
+                    <span class="lp-feed__time">10:22</span>
+                    <span class="lp-feed__player">Chen</span>
+                    <span class="lp-feed__pill lp-feed__pill--buyin">buy-in</span>
+                    <span class="lp-feed__amt">$50</span>
                 </div>
-                <div class="lp-demo__row lp-demo__row--lb">
-                    <span class="lp-demo__rank lp-demo__rank--2">2</span>
-                    <span class="lp-demo__player">Chen</span>
-                    <span class="lp-demo__delta">—</span>
-                    <span class="lp-demo__num lp-demo__num--pos">+$640</span>
-                    <span class="lp-demo__num lp-demo__num--pos">56%</span>
-                    <span class="lp-demo__num lp-demo__num--pos">+18%</span>
+                <div class="lp-feed__row">
+                    <span class="lp-feed__time">10:41</span>
+                    <span class="lp-feed__player">Okafor</span>
+                    <span class="lp-feed__pill lp-feed__pill--buyin">buy-in</span>
+                    <span class="lp-feed__amt">$50</span>
                 </div>
-                <div class="lp-demo__row lp-demo__row--lb">
-                    <span class="lp-demo__rank lp-demo__rank--3">3</span>
-                    <span class="lp-demo__player">Okafor</span>
-                    <span class="lp-demo__delta lp-demo__delta--down">▼1</span>
-                    <span class="lp-demo__num lp-demo__num--neg">−$210</span>
-                    <span class="lp-demo__num lp-demo__num--neg">43%</span>
-                    <span class="lp-demo__num lp-demo__num--neg">−7%</span>
+                <div class="lp-feed__row">
+                    <span class="lp-feed__time">11:56</span>
+                    <span class="lp-feed__player">Novak</span>
+                    <span class="lp-feed__pill lp-feed__pill--cashout">cashout</span>
+                    <span class="lp-feed__amt lp-demo__num--pos">$160</span>
                 </div>
-                <div class="lp-demo__row lp-demo__row--lb lp-demo__row--fade">
-                    <span class="lp-demo__rank">4</span>
-                    <span class="lp-demo__player">Walsh</span>
-                    <span class="lp-demo__delta">—</span>
-                    <span class="lp-demo__num lp-demo__num--neg">−$850</span>
-                    <span class="lp-demo__num lp-demo__num--neg">31%</span>
-                    <span class="lp-demo__num lp-demo__num--neg">−27%</span>
+                <div class="lp-feed__row">
+                    <span class="lp-feed__time">12:02</span>
+                    <span class="lp-feed__player">Rivera</span>
+                    <span class="lp-feed__pill lp-feed__pill--rebuy">re-buy</span>
+                    <span class="lp-feed__amt">$50</span>
                 </div>
-                <div class="lp-demo__row lp-demo__row--lb lp-demo__row--fade2">
-                    <span class="lp-demo__rank">5</span>
-                    <span class="lp-demo__player">Novak</span>
-                    <span class="lp-demo__delta lp-demo__delta--down">▼2</span>
-                    <span class="lp-demo__num lp-demo__num--neg">−$1,000</span>
-                    <span class="lp-demo__num lp-demo__num--neg">25%</span>
-                    <span class="lp-demo__num lp-demo__num--neg">−42%</span>
+                <div class="lp-feed__row lp-demo__row--fade">
+                    <span class="lp-feed__time">12:08</span>
+                    <span class="lp-feed__player">Walsh</span>
+                    <span class="lp-feed__pill lp-feed__pill--cashout">cashout</span>
+                    <span class="lp-feed__amt lp-demo__num--neg">$30</span>
+                </div>
+            </div>
+            <div class="lp-feed__summary">
+                <div class="lp-feed__summary-cell">
+                    <span class="lp-recon-label">Cash in</span>
+                    <span class="lp-recon-val">$350</span>
+                </div>
+                <div class="lp-feed__summary-cell">
+                    <span class="lp-recon-label">Paid out</span>
+                    <span class="lp-recon-val lp-demo__num--pos">$190</span>
+                </div>
+                <div class="lp-feed__summary-cell">
+                    <span class="lp-recon-label">House holds</span>
+                    <span class="lp-recon-val lp-demo__num--neg">$160</span>
                 </div>
             </div>
         </div>
     </div>
 </div>
 
-<!-- Features -->
+<!-- ── Stats bar ──────────────────────────────────────────────── -->
+<div class="lp-stats-bar">
+    <div class="lp-stats-bar__inner">
+        <div class="lp-stats-bar__item">
+            <span class="lp-stats-bar__val">$0</span>
+            <span class="lp-stats-bar__lbl">Platform fee, always</span>
+        </div>
+        <span class="lp-stats-bar__sep"></span>
+        <div class="lp-stats-bar__item">
+            <span class="lp-stats-bar__val">∞</span>
+            <span class="lp-stats-bar__lbl">Sessions &amp; players</span>
+        </div>
+        <span class="lp-stats-bar__sep"></span>
+        <div class="lp-stats-bar__item">
+            <span class="lp-stats-bar__val">Append-only</span>
+            <span class="lp-stats-bar__lbl">Tamper-proof ledger</span>
+        </div>
+        <span class="lp-stats-bar__sep"></span>
+        <div class="lp-stats-bar__item">
+            <span class="lp-stats-bar__val">Private</span>
+            <span class="lp-stats-bar__lbl">Your data, your league</span>
+        </div>
+    </div>
+</div>
+
+<!-- ── Features ──────────────────────────────────────────────── -->
 <section class="lp-features">
     <div class="lp-features__inner">
         <div class="lp-sec-head">
             <span class="lp-eyebrow">What's included</span>
             <h2 class="lp-sec-title">No spreadsheets. No Venmo math. No guessing.</h2>
+            <p class="lp-sec-sub">Everything your group needs to run a real poker league — built from the ground up for home games.</p>
         </div>
         <div class="lp-feat-grid">
             <div class="lp-feat">
@@ -140,13 +169,13 @@
     </div>
 </section>
 
-<!-- App demos -->
+<!-- ── App showcase ───────────────────────────────────────────── -->
 <section class="lp-showcase">
     <div class="lp-showcase__inner">
         <div class="lp-sec-head">
             <span class="lp-eyebrow">In the app</span>
-            <h2 class="lp-sec-title">Sessions and results</h2>
-            <p class="lp-sec-sub">Every number your group tracks, in one place.</p>
+            <h2 class="lp-sec-title">Your game. Your data. Always in sync.</h2>
+            <p class="lp-sec-sub">Every number your group tracks, in one place — from the moment chips hit the table.</p>
         </div>
         <div class="lp-showcase__grid" aria-hidden="true">
 
@@ -287,6 +316,85 @@
     </div>
 </section>
 
+<!-- ── Leaderboard callout ────────────────────────────────────── -->
+<section class="lp-callout">
+    <div class="lp-callout__inner">
+        <div class="lp-callout__text">
+            <span class="lp-eyebrow">Leaderboards</span>
+            <h2 class="lp-callout__title">Rankings built on raw data, not trust.</h2>
+            <p class="lp-callout__body">Every leaderboard stat is computed directly from the same append-only ledger that records each buy-in and cashout. Net profit, ROI, and win rate update the moment a session closes — no manual entry, no formulas to break.</p>
+            <ul class="lp-callout__list">
+                <li>Set a session minimum before a player earns a rank</li>
+                <li>Track rank movement with live ▲▼ deltas</li>
+                <li>Multiple sort modes: net, ROI, win rate, recent form</li>
+                <li>Provisional players shown separately until they qualify</li>
+            </ul>
+        </div>
+        <div class="lp-callout__demo" aria-hidden="true">
+            <div class="lp-demo__card">
+                <div class="lp-demo__head">
+                    <div>
+                        <span class="lp-demo__kicker">Friday Night Poker</span>
+                        <span class="lp-demo__title">Leaderboard · Sort: Net</span>
+                    </div>
+                    <span class="lp-demo__meta">18 sessions · eligible</span>
+                </div>
+                <div class="lp-demo__table">
+                    <div class="lp-demo__thead lp-demo__thead--lb">
+                        <span class="lp-demo__th">#</span>
+                        <span class="lp-demo__th">Player</span>
+                        <span class="lp-demo__th">Δ</span>
+                        <span class="lp-demo__th">Net</span>
+                        <span class="lp-demo__th">Win%</span>
+                        <span class="lp-demo__th">ROI</span>
+                    </div>
+                    <div class="lp-demo__row lp-demo__row--lb">
+                        <span class="lp-demo__rank lp-demo__rank--1">1</span>
+                        <span class="lp-demo__player">Rivera</span>
+                        <span class="lp-demo__delta lp-demo__delta--up">▲1</span>
+                        <span class="lp-demo__num lp-demo__num--pos">+$1,420</span>
+                        <span class="lp-demo__num lp-demo__num--pos">72%</span>
+                        <span class="lp-demo__num lp-demo__num--pos">+46%</span>
+                    </div>
+                    <div class="lp-demo__row lp-demo__row--lb">
+                        <span class="lp-demo__rank lp-demo__rank--2">2</span>
+                        <span class="lp-demo__player">Chen</span>
+                        <span class="lp-demo__delta">—</span>
+                        <span class="lp-demo__num lp-demo__num--pos">+$640</span>
+                        <span class="lp-demo__num lp-demo__num--pos">56%</span>
+                        <span class="lp-demo__num lp-demo__num--pos">+18%</span>
+                    </div>
+                    <div class="lp-demo__row lp-demo__row--lb">
+                        <span class="lp-demo__rank lp-demo__rank--3">3</span>
+                        <span class="lp-demo__player">Okafor</span>
+                        <span class="lp-demo__delta lp-demo__delta--down">▼1</span>
+                        <span class="lp-demo__num lp-demo__num--neg">−$210</span>
+                        <span class="lp-demo__num lp-demo__num--neg">43%</span>
+                        <span class="lp-demo__num lp-demo__num--neg">−7%</span>
+                    </div>
+                    <div class="lp-demo__row lp-demo__row--lb lp-demo__row--fade">
+                        <span class="lp-demo__rank">4</span>
+                        <span class="lp-demo__player">Walsh</span>
+                        <span class="lp-demo__delta">—</span>
+                        <span class="lp-demo__num lp-demo__num--neg">−$850</span>
+                        <span class="lp-demo__num lp-demo__num--neg">31%</span>
+                        <span class="lp-demo__num lp-demo__num--neg">−27%</span>
+                    </div>
+                    <div class="lp-demo__row lp-demo__row--lb lp-demo__row--fade2">
+                        <span class="lp-demo__rank">5</span>
+                        <span class="lp-demo__player">Novak</span>
+                        <span class="lp-demo__delta lp-demo__delta--down">▼2</span>
+                        <span class="lp-demo__num lp-demo__num--neg">−$1,000</span>
+                        <span class="lp-demo__num lp-demo__num--neg">25%</span>
+                        <span class="lp-demo__num lp-demo__num--neg">−42%</span>
+                    </div>
+                </div>
+            </div>
+        </div>
+    </div>
+</section>
+
+<!-- ── Bottom CTA ─────────────────────────────────────────────── -->
 {% if not is_logged_in %}
 <section class="lp-bottom-cta">
     <div class="lp-bottom-cta__inner">

From 34f03860a6de55844c4bb365a6d61eecfafd109b Mon Sep 17 00:00:00 2001
From: SowinskiBraeden <braeden@sowinski.dev>
Date: Sat, 27 Jun 2026 11:30:06 -0700
Subject: [PATCH 61/83] add 404/403 pages

---
 app.py               | 10 +++++-
 config.py            |  2 +-
 static/css/style.css | 85 ++++++++++++++++++++++++++++++++++++++++++++
 templates/403.html   | 23 ++++++++++++
 templates/404.html   | 19 ++++++++++
 5 files changed, 137 insertions(+), 2 deletions(-)
 create mode 100644 templates/403.html
 create mode 100644 templates/404.html

diff --git a/app.py b/app.py
index b0164e7..143fade 100644
--- a/app.py
+++ b/app.py
@@ -2,7 +2,7 @@
 from __future__ import annotations
 
 import click
-from flask import Flask
+from flask import Flask, render_template
 
 from auth import current_user_id, is_logged_in
 from config import Config
@@ -42,6 +42,14 @@ def create_app(config_overrides: dict | None = None) -> Flask:
     app.register_blueprint(account_bp)
     app.register_blueprint(leagues_bp)
 
+    @app.errorhandler(404)
+    def not_found(e):
+        return render_template("404.html"), 404
+
+    @app.errorhandler(403)
+    def forbidden(e):
+        return render_template("403.html"), 403
+
     @app.cli.command("init-db")
     def init_db_command() -> None:
         if not database_extensions_available() or db is None:
diff --git a/config.py b/config.py
index 38f0056..1c128a4 100644
--- a/config.py
+++ b/config.py
@@ -9,7 +9,7 @@ DATA_PATH = BASE_DIR / "data" / "entries.csv"
 DEFAULT_DATABASE_URL = f"sqlite:///{BASE_DIR / 'data' / 'boker-dev.sqlite3'}"
 
 ELIGIBLE_MIN_SESSIONS = 3
-APP_VERSION = "2.5.10"
+APP_VERSION = "2.5.11"
 
 
 def load_local_env(env_path: Path) -> None:
diff --git a/static/css/style.css b/static/css/style.css
index 28145ff..efc6a39 100644
--- a/static/css/style.css
+++ b/static/css/style.css
@@ -5604,6 +5604,91 @@ select.control { cursor: pointer; }
   }
 }
 
+/* ================================================================
+   ERROR PAGES (404, 403)
+   ================================================================ */
+.page--error {
+  padding: 0;
+  max-width: none;
+}
+
+.error-pg {
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  min-height: calc(100vh - 62px);
+  position: relative;
+  overflow: hidden;
+  background:
+    radial-gradient(ellipse 90% 70% at 50% 60%, #1c0e3e 0%, #100820 55%, var(--bg) 100%),
+    radial-gradient(ellipse 50% 40% at 80% 20%, rgba(155,140,240,.07) 0%, transparent 55%);
+}
+
+/* large suit watermark */
+.error-pg__suit {
+  position: absolute;
+  font-size: clamp(320px, 46vw, 660px);
+  color: rgba(155,140,240,.065);
+  line-height: 1;
+  pointer-events: none;
+  user-select: none;
+  top: 50%;
+  left: 50%;
+  transform: translate(-50%, -50%);
+  transition: none;
+}
+.error-pg--403 .error-pg__suit {
+  color: rgba(155,140,240,.06);
+}
+
+.error-pg__body {
+  position: relative;
+  z-index: 1;
+  display: flex;
+  flex-direction: column;
+  align-items: center;
+  text-align: center;
+  gap: 0;
+  padding: clamp(32px, 5vw, 64px) clamp(24px, 5vw, 48px);
+}
+
+.error-pg__code {
+  font-family: var(--font-mono);
+  font-size: clamp(80px, 13vw, 148px);
+  font-weight: 900;
+  letter-spacing: -.04em;
+  line-height: 1;
+  background: linear-gradient(135deg, var(--accent) 0%, rgba(155,140,240,.35) 100%);
+  -webkit-background-clip: text;
+  -webkit-text-fill-color: transparent;
+  background-clip: text;
+  margin-bottom: 8px;
+}
+
+.error-pg__title {
+  font-size: clamp(28px, 4vw, 52px);
+  font-weight: 800;
+  color: var(--text);
+  letter-spacing: -.04em;
+  margin: 0 0 16px;
+  line-height: 1.1;
+}
+
+.error-pg__sub {
+  font-size: clamp(14px, 1.3vw, 16px);
+  color: rgba(255,255,255,.42);
+  max-width: 40ch;
+  line-height: 1.68;
+  margin: 0 0 28px;
+}
+
+.error-pg__actions {
+  display: flex;
+  gap: 12px;
+  flex-wrap: wrap;
+  justify-content: center;
+}
+
 /* ================================================================
    LANDING — hero kicker (replaces pill eyebrow in hero only)
    ================================================================ */
diff --git a/templates/403.html b/templates/403.html
new file mode 100644
index 0000000..625f376
--- /dev/null
+++ b/templates/403.html
@@ -0,0 +1,23 @@
+{% extends "base.html" %}
+{% block title %}403 · Access Denied · myboker.org{% endblock %}
+{% block page_class %}page--error{% endblock %}
+{% block content %}
+
+<div class="error-pg error-pg--403">
+    <div class="error-pg__suit" aria-hidden="true">♣</div>
+    <div class="error-pg__body">
+        <span class="error-pg__code">403</span>
+        <h1 class="error-pg__title">Access denied.</h1>
+        <p class="error-pg__sub">You don't have permission to view this page. If you think this is a mistake, contact your league owner.</p>
+        <div class="error-pg__actions">
+            <a class="btn btn--primary btn--lg" href="{{ url_for('public.home') }}">Go home →</a>
+            {% if not is_logged_in %}
+            <a class="btn btn--ghost btn--lg" href="{{ url_for('account.login') }}">Sign in</a>
+            {% else %}
+            <a class="btn btn--ghost btn--lg" href="javascript:history.back()">Go back</a>
+            {% endif %}
+        </div>
+    </div>
+</div>
+
+{% endblock %}
diff --git a/templates/404.html b/templates/404.html
new file mode 100644
index 0000000..22dc7f9
--- /dev/null
+++ b/templates/404.html
@@ -0,0 +1,19 @@
+{% extends "base.html" %}
+{% block title %}404 · Page Not Found · myboker.org{% endblock %}
+{% block page_class %}page--error{% endblock %}
+{% block content %}
+
+<div class="error-pg">
+    <div class="error-pg__suit" aria-hidden="true">♠</div>
+    <div class="error-pg__body">
+        <span class="error-pg__code">404</span>
+        <h1 class="error-pg__title">Page not found.</h1>
+        <p class="error-pg__sub">That URL doesn't exist or the page has been moved. Double-check the address or head back to safety.</p>
+        <div class="error-pg__actions">
+            <a class="btn btn--primary btn--lg" href="{{ url_for('public.home') }}">Go home →</a>
+            <a class="btn btn--ghost btn--lg" href="javascript:history.back()">Go back</a>
+        </div>
+    </div>
+</div>
+
+{% endblock %}

From 3f2c9833a872f9d3cd1aaa96b59727bb0a58f15a Mon Sep 17 00:00:00 2001
From: SowinskiBraeden <braeden@sowinski.dev>
Date: Sat, 27 Jun 2026 11:47:20 -0700
Subject: [PATCH 62/83] fix footers

---
 config.py            |  2 +-
 static/css/style.css | 38 +++++++++++++++++++++-----------------
 2 files changed, 22 insertions(+), 18 deletions(-)

diff --git a/config.py b/config.py
index 1c128a4..722c0cf 100644
--- a/config.py
+++ b/config.py
@@ -9,7 +9,7 @@ DATA_PATH = BASE_DIR / "data" / "entries.csv"
 DEFAULT_DATABASE_URL = f"sqlite:///{BASE_DIR / 'data' / 'boker-dev.sqlite3'}"
 
 ELIGIBLE_MIN_SESSIONS = 3
-APP_VERSION = "2.5.11"
+APP_VERSION = "2.5.12"
 
 
 def load_local_env(env_path: Path) -> None:
diff --git a/static/css/style.css b/static/css/style.css
index efc6a39..f7a189a 100644
--- a/static/css/style.css
+++ b/static/css/style.css
@@ -245,7 +245,7 @@ h1, h2, h3, h4 { margin: 0; }
   min-width: 0;
   max-width: none;
   margin: 0;
-  padding: clamp(20px, 3vw, 36px) clamp(24px, 4vw, 48px) 96px;
+  padding: clamp(20px, 3vw, 36px) clamp(24px, 4vw, 48px) 0;
   overflow-y: auto;
   height: 100%;
 }
@@ -274,7 +274,7 @@ h1, h2, h3, h4 { margin: 0; }
   .sidebar__link { padding: 10px 10px; white-space: nowrap; gap: 6px; }
   .sidebar__link svg { display: none; }
   .sidebar__footer { display: none; }
-  .page--app { padding: 16px 16px 64px; overflow-y: visible; height: auto; }
+  .page--app { padding: 16px 16px 0; overflow-y: visible; height: auto; }
 }
 
 /* ================================================================
@@ -397,9 +397,10 @@ h1, h2, h3, h4 { margin: 0; }
   display: flex;
   flex-direction: column;
   margin: 0 auto;
-  padding: clamp(22px,3.4vw,46px) var(--gutter) 96px;
+  padding: clamp(22px,3.4vw,46px) var(--gutter) 0;
   width: 100%;
   min-width: 0;
+  min-height: calc(100vh - 62px);
 }
 .page--public  { max-width: var(--w-public);  }
 .page--session { max-width: var(--w-session); }
@@ -413,12 +414,12 @@ h1, h2, h3, h4 { margin: 0; }
 }
 .site-footer {
   margin-top: auto;
-  padding: clamp(28px, 4vw, 48px) 0 clamp(20px, 3vw, 32px);
+  padding: clamp(20px, 3vw, 32px) 0 clamp(16px, 2vw, 24px);
   border-top: 1px solid var(--divider);
-  display: flex;
+  display: grid;
+  grid-template-columns: 1fr auto 1fr;
   align-items: center;
-  flex-wrap: wrap;
-  gap: 6px 20px;
+  column-gap: 16px;
   color: var(--faintest);
   font-size: 12px;
 }
@@ -450,7 +451,7 @@ h1, h2, h3, h4 { margin: 0; }
 }
 .site-footer__links a:hover { color: var(--text-2); background: var(--surface-raised); }
 .site-footer__brand {
-  margin-left: auto;
+  justify-self: end;
   white-space: nowrap;
 }
 .site-footer__brand a {
@@ -462,17 +463,17 @@ h1, h2, h3, h4 { margin: 0; }
 .site-footer__brand a:hover { color: var(--text-2); }
 @media (max-width: 640px) {
   .site-footer {
-    flex-direction: column;
-    align-items: flex-start;
+    grid-template-columns: 1fr;
     gap: 8px;
     padding: 18px 0 max(20px, env(safe-area-inset-bottom));
   }
-  .site-footer__brand { margin-left: 0; }
-  /* legacy compat — nothing to do */
-  .site-footer span:nth-child(2),
-  .site-footer span:nth-child(3) {
-    justify-self: center;
+  .page--landing .site-footer,
+  .page--auth .site-footer,
+  .page--error .site-footer {
+    padding-left: 16px;
+    padding-right: 16px;
   }
+  .site-footer__brand { justify-self: start; }
 }
 
 /* ================================================================
@@ -3854,9 +3855,12 @@ select.control { cursor: pointer; }
   padding: 16px var(--gutter) 0;
   width: 100%;
 }
-.page--landing .site-footer {
+.page--landing .site-footer,
+.page--auth .site-footer,
+.page--error .site-footer {
   max-width: var(--w-public);
-  margin: 0 auto;
+  margin-left: auto;
+  margin-right: auto;
   padding-left: var(--gutter);
   padding-right: var(--gutter);
 }

From 1b442011bec38b637305e60e3d8cda223da3a604 Mon Sep 17 00:00:00 2001
From: SowinskiBraeden <braeden@sowinski.dev>
Date: Sat, 27 Jun 2026 12:16:04 -0700
Subject: [PATCH 63/83] account create on invite

---
 config.py         |  2 +-
 routes/account.py | 42 ++++++++++++++++++++++++++++++++----------
 2 files changed, 33 insertions(+), 11 deletions(-)

diff --git a/config.py b/config.py
index 722c0cf..3752cf5 100644
--- a/config.py
+++ b/config.py
@@ -9,7 +9,7 @@ DATA_PATH = BASE_DIR / "data" / "entries.csv"
 DEFAULT_DATABASE_URL = f"sqlite:///{BASE_DIR / 'data' / 'boker-dev.sqlite3'}"
 
 ELIGIBLE_MIN_SESSIONS = 3
-APP_VERSION = "2.5.12"
+APP_VERSION = "2.5.13"
 
 
 def load_local_env(env_path: Path) -> None:
diff --git a/routes/account.py b/routes/account.py
index 1bd77c0..b3eacea 100644
--- a/routes/account.py
+++ b/routes/account.py
@@ -1,6 +1,8 @@
 #!/usr/bin/env python3
 from __future__ import annotations
 
+from urllib.parse import urlsplit
+
 from flask import Blueprint, flash, redirect, render_template, request, url_for
 
 from auth import (
@@ -26,6 +28,19 @@ def db_ready() -> bool:
     return database_extensions_available() and db is not None
 
 
+def safe_next_url(default: str) -> str:
+    next_url = request.args.get("next", "").strip()
+    if not next_url:
+        return default
+
+    parsed = urlsplit(next_url)
+    if parsed.scheme or parsed.netloc:
+        return default
+    if not next_url.startswith("/"):
+        return default
+    return next_url
+
+
 @account_bp.get("/")
 @login_required
 def home():
@@ -36,14 +51,14 @@ def home():
 @limiter.limit("10 per minute")
 def register():
     if current_user_id():
-        return redirect(url_for("leagues.index"))
+        return redirect(safe_next_url(url_for("leagues.index")))
 
     if not db_ready():
         flash("Account database is not available.", "error")
         return render_template("account_register.html", form={})
 
     form = {
-        "email": request.form.get("email", "").strip(),
+        "email": (request.form.get("email") or request.args.get("email") or "").strip(),
     }
 
     if request.method == "POST":
@@ -66,7 +81,7 @@ def register():
             db.session.commit()
             log_user_in(user.id)
             flash("Account created.", "success")
-            return redirect(url_for("leagues.new"))
+            return redirect(safe_next_url(url_for("leagues.new")))
 
     return render_template("account_register.html", form=form)
 
@@ -75,7 +90,7 @@ def register():
 @limiter.limit("20 per minute")
 def login():
     if current_user_id():
-        return redirect(url_for("leagues.index"))
+        return redirect(safe_next_url(url_for("leagues.index")))
 
     if not db_ready():
         flash("Account database is not available.", "error")
@@ -97,7 +112,7 @@ def login():
             flash("That account is disabled.", "error")
         else:
             log_user_in(user.id)
-            next_url = request.args.get("next") or url_for("leagues.index")
+            next_url = safe_next_url(url_for("leagues.index"))
             flash("Logged in.", "success")
             return redirect(next_url)
 
@@ -309,18 +324,25 @@ def accept_invite(token):
         flash("That invitation link is invalid or has expired.", "error")
         return redirect(url_for("public.home"))
 
-    if not current_user_id():
-        return redirect(url_for("account.login", next=url_for("account.accept_invite", token=token)))
-
     if not db_ready():
         flash("Account database is not available.", "error")
         return redirect(url_for("leagues.index"))
 
     from db_models import User
-    from league_repositories import add_league_member, find_league_by_id, find_membership
+    from league_repositories import add_league_member, find_league_by_id, find_membership, find_user_by_email
+
+    invite_email = normalize_email(data.get("email", ""))
+    invite_next = url_for("account.accept_invite", token=token)
+    if not current_user_id():
+        if find_user_by_email(invite_email):
+            flash("Sign in to accept your invitation.", "info")
+            return redirect(url_for("account.login", next=invite_next))
+
+        flash("Create an account to accept your invitation.", "info")
+        return redirect(url_for("account.register", next=invite_next, email=invite_email))
 
     user = db.session.get(User, current_user_id())
-    if user is None or user.email != data.get("email"):
+    if user is None or user.email != invite_email:
         flash("This invitation was sent to a different email address.", "error")
         return redirect(url_for("leagues.index"))
 

From ffc33c967ac8aa0ba426fbdb26972e3be6985407 Mon Sep 17 00:00:00 2001
From: SowinskiBraeden <braeden@sowinski.dev>
Date: Sat, 27 Jun 2026 12:35:00 -0700
Subject: [PATCH 64/83] update email verification process

---
 config.py                                     |   2 +-
 db_models.py                                  |   2 +
 emails.py                                     |  14 ++
 .../versions/0004_email_verification_codes.py |  28 ++++
 routes/account.py                             | 143 +++++++++++++++++-
 static/css/style.css                          |  28 ++++
 templates/account_verify_email.html           |  46 ++++++
 7 files changed, 257 insertions(+), 6 deletions(-)
 create mode 100644 migrations/versions/0004_email_verification_codes.py
 create mode 100644 templates/account_verify_email.html

diff --git a/config.py b/config.py
index 3752cf5..77448bb 100644
--- a/config.py
+++ b/config.py
@@ -9,7 +9,7 @@ DATA_PATH = BASE_DIR / "data" / "entries.csv"
 DEFAULT_DATABASE_URL = f"sqlite:///{BASE_DIR / 'data' / 'boker-dev.sqlite3'}"
 
 ELIGIBLE_MIN_SESSIONS = 3
-APP_VERSION = "2.5.13"
+APP_VERSION = "2.5.14"
 
 
 def load_local_env(env_path: Path) -> None:
diff --git a/db_models.py b/db_models.py
index 525c0e4..c360e8c 100644
--- a/db_models.py
+++ b/db_models.py
@@ -73,6 +73,8 @@ class User(TimestampMixin, db.Model):
     email = db.Column(db.String(255), nullable=False, unique=True, index=True)
     password_hash = db.Column(db.String(255), nullable=False)
     email_verified_at = db.Column(db.DateTime(timezone=True), nullable=True)
+    email_verification_code_hash = db.Column(db.String(255), nullable=True)
+    email_verification_sent_at = db.Column(db.DateTime(timezone=True), nullable=True)
     last_login_at = db.Column(db.DateTime(timezone=True), nullable=True)
     disabled_at = db.Column(db.DateTime(timezone=True), nullable=True)
 
diff --git a/emails.py b/emails.py
index b8de782..1830f4c 100644
--- a/emails.py
+++ b/emails.py
@@ -41,6 +41,20 @@ def send_password_reset(to_email: str, reset_url: str) -> None:
     _send_message(msg)
 
 
+def send_email_verification_code(to_email: str, code: str) -> None:
+    msg = Message(
+        subject="Your myboker.org verification code",
+        recipients=[to_email],
+        body=(
+            "Verify your myboker.org account with this code:\n\n"
+            f"{code}\n\n"
+            "This code expires in 15 minutes. If you did not create an account, you can ignore this email."
+        ),
+        sender=current_app.config.get("MAIL_DEFAULT_SENDER"),
+    )
+    _send_message(msg)
+
+
 def send_league_invite(to_email: str, league_name: str, invite_url: str, invited_by_email: str, role: str) -> None:
     role_label = role.strip().lower() if role else "member"
     msg = Message(
diff --git a/migrations/versions/0004_email_verification_codes.py b/migrations/versions/0004_email_verification_codes.py
new file mode 100644
index 0000000..f6ac9ac
--- /dev/null
+++ b/migrations/versions/0004_email_verification_codes.py
@@ -0,0 +1,28 @@
+"""add email verification code fields
+
+Revision ID: 0004_email_verification_codes
+Revises: 0003_league_settings
+Create Date: 2026-06-27
+"""
+from __future__ import annotations
+
+from alembic import op
+import sqlalchemy as sa
+
+
+revision = "0004_email_verification_codes"
+down_revision = "0003_league_settings"
+branch_labels = None
+depends_on = None
+
+
+def upgrade() -> None:
+    with op.batch_alter_table("users") as batch_op:
+        batch_op.add_column(sa.Column("email_verification_code_hash", sa.String(length=255), nullable=True))
+        batch_op.add_column(sa.Column("email_verification_sent_at", sa.DateTime(timezone=True), nullable=True))
+
+
+def downgrade() -> None:
+    with op.batch_alter_table("users") as batch_op:
+        batch_op.drop_column("email_verification_sent_at")
+        batch_op.drop_column("email_verification_code_hash")
diff --git a/routes/account.py b/routes/account.py
index b3eacea..16d951a 100644
--- a/routes/account.py
+++ b/routes/account.py
@@ -1,9 +1,11 @@
 #!/usr/bin/env python3
 from __future__ import annotations
 
+import secrets
+from datetime import datetime, timedelta, timezone
 from urllib.parse import urlsplit
 
-from flask import Blueprint, flash, redirect, render_template, request, url_for
+from flask import Blueprint, flash, redirect, render_template, request, session as flask_session, url_for
 
 from auth import (
     current_user_id,
@@ -22,6 +24,7 @@ from db import database_extensions_available, db
 from extensions import limiter
 
 account_bp = Blueprint("account", __name__, url_prefix="/account")
+EMAIL_VERIFICATION_TTL = timedelta(minutes=15)
 
 
 def db_ready() -> bool:
@@ -41,6 +44,53 @@ def safe_next_url(default: str) -> str:
     return next_url
 
 
+def _verification_next(default: str) -> str:
+    next_url = flask_session.get("pending_verification_next")
+    if isinstance(next_url, str) and next_url.startswith("/") and not urlsplit(next_url).netloc:
+        return next_url
+    return default
+
+
+def _verification_sent_at_valid(sent_at) -> bool:
+    if sent_at is None:
+        return False
+    if sent_at.tzinfo is None:
+        sent_at = sent_at.replace(tzinfo=timezone.utc)
+    return datetime.now(timezone.utc) - sent_at <= EMAIL_VERIFICATION_TTL
+
+
+def _new_verification_code() -> str:
+    return f"{secrets.randbelow(1000000):06d}"
+
+
+def _issue_verification_code(user) -> str:
+    from db_models import utc_now
+
+    code = _new_verification_code()
+    user.email_verification_code_hash = hash_password(code)
+    user.email_verification_sent_at = utc_now()
+    return code
+
+
+def _send_verification_code(user) -> None:
+    from emails import send_email_verification_code
+
+    code = _issue_verification_code(user)
+    db.session.commit()
+    send_email_verification_code(user.email, code)
+
+
+def _start_email_verification(user, next_url: str) -> str:
+    flask_session["pending_verification_user_id"] = user.id
+    flask_session["pending_verification_next"] = next_url
+    try:
+        _send_verification_code(user)
+        flash("Check your email for a verification code.", "success")
+    except Exception:
+        flash("Account created, but we could not send a verification code. Try resending it.", "error")
+    return url_for("account.verify_email")
+
+
 @account_bp.get("/")
 @login_required
 def home():
@@ -78,10 +128,8 @@ def register():
             flash("An account already exists for that email.", "error")
         else:
             user = create_user(email, password)
-            db.session.commit()
-            log_user_in(user.id)
-            flash("Account created.", "success")
-            return redirect(safe_next_url(url_for("leagues.new")))
+            db.session.flush()
+            return redirect(_start_email_verification(user, safe_next_url(url_for("leagues.new"))))
 
     return render_template("account_register.html", form=form)
 
@@ -110,6 +158,15 @@ def login():
             flash("Invalid email or password.", "error")
         elif user.disabled_at is not None:
             flash("That account is disabled.", "error")
+        elif user.email_verified_at is None:
+            flask_session["pending_verification_user_id"] = user.id
+            flask_session["pending_verification_next"] = safe_next_url(url_for("leagues.index"))
+            try:
+                _send_verification_code(user)
+                flash("Verify your email to continue. We sent you a new code.", "success")
+            except Exception:
+                flash("Verify your email to continue. We could not send a new code.", "error")
+            return redirect(url_for("account.verify_email"))
         else:
             log_user_in(user.id)
             next_url = safe_next_url(url_for("leagues.index"))
@@ -119,6 +176,82 @@ def login():
     return render_template("account_login.html", form=form)
 
 
+@account_bp.route("/verify-email", methods=["GET", "POST"])
+@limiter.limit("10 per minute")
+def verify_email():
+    if current_user_id():
+        return redirect(safe_next_url(url_for("leagues.index")))
+
+    if not db_ready():
+        flash("Account database is not available.", "error")
+        return redirect(url_for("account.login"))
+
+    from db_models import User, utc_now
+
+    user_id = flask_session.get("pending_verification_user_id")
+    user = db.session.get(User, user_id) if user_id else None
+    if user is None or user.disabled_at is not None:
+        flask_session.pop("pending_verification_user_id", None)
+        flask_session.pop("pending_verification_next", None)
+        flash("Start again to verify your email.", "error")
+        return redirect(url_for("account.register"))
+
+    if user.email_verified_at is not None:
+        log_user_in(user.id)
+        next_url = _verification_next(url_for("leagues.index"))
+        flask_session.pop("pending_verification_user_id", None)
+        flask_session.pop("pending_verification_next", None)
+        return redirect(next_url)
+
+    if request.method == "POST":
+        code = "".join(ch for ch in request.form.get("code", "") if ch.isdigit())
+        if len(code) != 6:
+            flash("Enter the six-digit verification code.", "error")
+        elif not _verification_sent_at_valid(user.email_verification_sent_at):
+            flash("That code has expired. Request a new one.", "error")
+        elif not user.email_verification_code_hash or not verify_password(user.email_verification_code_hash, code):
+            flash("That verification code is not correct.", "error")
+        else:
+            user.email_verified_at = utc_now()
+            user.email_verification_code_hash = None
+            user.email_verification_sent_at = None
+            db.session.commit()
+            log_user_in(user.id)
+            next_url = _verification_next(url_for("leagues.index"))
+            flask_session.pop("pending_verification_user_id", None)
+            flask_session.pop("pending_verification_next", None)
+            flash("Email verified.", "success")
+            return redirect(next_url)
+
+    return render_template("account_verify_email.html", email=user.email)
+
+
+@account_bp.post("/verify-email/resend")
+@limiter.limit("3 per minute")
+def resend_verification_code():
+    if current_user_id():
+        return redirect(url_for("leagues.index"))
+
+    if not db_ready():
+        flash("Account database is not available.", "error")
+        return redirect(url_for("account.login"))
+
+    from db_models import User
+
+    user_id = flask_session.get("pending_verification_user_id")
+    user = db.session.get(User, user_id) if user_id else None
+    if user is None or user.disabled_at is not None:
+        flash("Start again to verify your email.", "error")
+        return redirect(url_for("account.register"))
+
+    try:
+        _send_verification_code(user)
+        flash("A new verification code has been sent.", "success")
+    except Exception:
+        flash("We could not send a new code. Check your mail configuration.", "error")
+    return redirect(url_for("account.verify_email"))
+
+
 @account_bp.post("/logout")
 def logout():
     log_user_out()
diff --git a/static/css/style.css b/static/css/style.css
index f7a189a..f548e68 100644
--- a/static/css/style.css
+++ b/static/css/style.css
@@ -5467,6 +5467,34 @@ select.control { cursor: pointer; }
   color: var(--faintest-2);
 }
 
+.auth-field--code {
+  margin-bottom: 18px;
+}
+
+.auth-code-input {
+  text-align: center;
+  font-family: var(--font-mono) !important;
+  font-size: 30px !important;
+  font-weight: 800 !important;
+  letter-spacing: .38em;
+}
+
+.auth-resend-form {
+  margin-top: 16px;
+  text-align: center;
+}
+
+.auth-link-button {
+  all: unset;
+  cursor: pointer;
+  color: var(--muted);
+  font: 600 13px/1.2 var(--font-ui);
+}
+.auth-link-button:hover {
+  color: var(--accent);
+  text-decoration: underline;
+}
+
 .auth-links {
   margin: -8px 0 16px;
   text-align: right;
diff --git a/templates/account_verify_email.html b/templates/account_verify_email.html
new file mode 100644
index 0000000..be8cce3
--- /dev/null
+++ b/templates/account_verify_email.html
@@ -0,0 +1,46 @@
+{% extends "base.html" %}
+{% block title %}Verify Email · myboker.org{% endblock %}
+{% block page_class %}page--auth{% endblock %}
+{% block content %}
+
+<div class="auth-split">
+    <div class="auth-split__form-col">
+        <div class="auth-split__form-inner">
+            <a class="auth-split__brand" href="{{ url_for('public.home') }}">
+                <div class="auth-split__brand-mark"></div>
+                <span class="auth-split__brand-name">myboker<span class="auth-split__brand-tld">.org</span></span>
+            </a>
+
+            <h1 class="auth-split__title">Verify your email.</h1>
+            <p class="auth-split__sub">Enter the six-digit code sent to {{ email }}.</p>
+
+            <form method="post">
+                <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
+                <div class="auth-field auth-field--code">
+                    <label for="code">Verification code</label>
+                    <input id="code" class="auth-code-input" type="text" name="code"
+                           inputmode="numeric" autocomplete="one-time-code" pattern="[0-9]{6}"
+                           maxlength="6" placeholder="000000" required autofocus>
+                </div>
+                <button class="btn btn--primary auth-submit" type="submit">Continue</button>
+            </form>
+
+            <form method="post" action="{{ url_for('account.resend_verification_code') }}" class="auth-resend-form">
+                <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
+                <button class="auth-link-button" type="submit">Resend code</button>
+            </form>
+        </div>
+    </div>
+
+    <div class="auth-split__visual auth-split__visual--diamond" aria-hidden="true">
+        <div class="auth-visual__body">
+            <div class="auth-visual__icon">
+                <span class="auth-visual__suit-sym">♦</span>
+            </div>
+            <p class="auth-visual__title">One quick check.</p>
+            <p class="auth-visual__sub">Email verification keeps league invites tied to the right account.</p>
+        </div>
+    </div>
+</div>
+
+{% endblock %}

From 2e1cc10dc78fc0f36ac6a81db45681fa0394760a Mon Sep 17 00:00:00 2001
From: SowinskiBraeden <braeden@sowinski.dev>
Date: Sat, 27 Jun 2026 12:47:49 -0700
Subject: [PATCH 65/83] update email styles

---
 config.py         |   2 +-
 emails.py         | 124 ++++++++++++++++++++++++++++++++++++++++------
 routes/account.py |  13 ++++-
 3 files changed, 122 insertions(+), 17 deletions(-)

diff --git a/config.py b/config.py
index 77448bb..420cd80 100644
--- a/config.py
+++ b/config.py
@@ -9,7 +9,7 @@ DATA_PATH = BASE_DIR / "data" / "entries.csv"
 DEFAULT_DATABASE_URL = f"sqlite:///{BASE_DIR / 'data' / 'boker-dev.sqlite3'}"
 
 ELIGIBLE_MIN_SESSIONS = 3
-APP_VERSION = "2.5.14"
+APP_VERSION = "2.5.16"
 
 
 def load_local_env(env_path: Path) -> None:
diff --git a/emails.py b/emails.py
index 1830f4c..5e68be0 100644
--- a/emails.py
+++ b/emails.py
@@ -1,6 +1,7 @@
 #!/usr/bin/env python3
 from __future__ import annotations
 
+from html import escape
 import socket
 
 from flask import current_app
@@ -26,15 +27,95 @@ def _send_message(msg: Message) -> None:
         socket.setdefaulttimeout(previous_timeout)
 
 
+def _html_email(title: str, intro: str, cta_label: str | None = None, cta_url: str | None = None, code: str | None = None, note: str | None = None) -> str:
+    app_url = current_app.config.get("APP_BASE_URL", "https://myboker.org").rstrip("/")
+    cta_html = ""
+    if cta_label and cta_url:
+        cta_html = f"""
+        <tr>
+          <td style="padding:8px 32px 24px;">
+            <a href="{escape(cta_url)}" style="display:inline-block;background:#9b8cf0;color:#12101e;text-decoration:none;font:700 14px Arial,sans-serif;padding:12px 18px;border-radius:6px;">{escape(cta_label)}</a>
+          </td>
+        </tr>
+        <tr>
+          <td style="padding:0 32px 24px;color:#7c8294;font:400 12px/1.6 Arial,sans-serif;">
+            If the button does not work, copy and paste this link:<br>
+            <a href="{escape(cta_url)}" style="color:#b8aff8;word-break:break-all;">{escape(cta_url)}</a>
+          </td>
+        </tr>
+        """
+
+    code_html = ""
+    if code:
+        code_html = f"""
+        <tr>
+          <td style="padding:4px 32px 24px;">
+            <div style="display:inline-block;letter-spacing:6px;font:800 34px/1.1 Arial,sans-serif;color:#f5f7fb;background:#151925;border:1px solid #32394a;border-radius:8px;padding:14px 18px;">{escape(code)}</div>
+          </td>
+        </tr>
+        """
+
+    note_html = ""
+    if note:
+        note_html = f"""
+        <tr>
+          <td style="padding:0 32px 28px;color:#a3a8b8;font:400 14px/1.6 Arial,sans-serif;">{escape(note)}</td>
+        </tr>
+        """
+
+    return f"""<!doctype html>
+<html>
+  <body style="margin:0;padding:0;background:#0f172a;">
+    <table role="presentation" width="100%" cellspacing="0" cellpadding="0" style="background:#0f172a;margin:0;padding:32px 12px;">
+      <tr>
+        <td align="center">
+          <table role="presentation" width="100%" cellspacing="0" cellpadding="0" style="max-width:560px;background:#202129;border:1px solid #313442;border-radius:10px;overflow:hidden;">
+            <tr>
+              <td style="padding:28px 32px 10px;">
+                <div style="font:800 18px Arial,sans-serif;color:#f5f7fb;">myboker<span style="color:#9b8cf0;">.org</span></div>
+              </td>
+            </tr>
+            <tr>
+              <td style="padding:18px 32px 8px;">
+                <h1 style="margin:0;color:#f5f7fb;font:800 24px/1.25 Arial,sans-serif;">{escape(title)}</h1>
+              </td>
+            </tr>
+            <tr>
+              <td style="padding:0 32px 22px;color:#c6cad6;font:400 15px/1.6 Arial,sans-serif;">{escape(intro)}</td>
+            </tr>
+            {code_html}
+            {cta_html}
+            {note_html}
+            <tr>
+              <td style="padding:18px 32px 26px;border-top:1px solid #32394a;color:#7c8294;font:400 12px/1.6 Arial,sans-serif;">
+                This email was sent by <a href="{escape(app_url)}" style="color:#b8aff8;text-decoration:none;">myboker.org</a>. If you did not request this, you can safely ignore it.
+              </td>
+            </tr>
+          </table>
+        </td>
+      </tr>
+    </table>
+  </body>
+</html>"""
+
+
 def send_password_reset(to_email: str, reset_url: str) -> None:
+    body = (
+        f"You requested a password reset for your myboker.org account.\n\n"
+        f"Reset your password:\n\n"
+        f"{reset_url}\n\n"
+        f"This link expires in 1 hour. If you did not request this, you can ignore this email."
+    )
     msg = Message(
         subject="Reset your myboker.org password",
         recipients=[to_email],
-        body=(
-            f"You requested a password reset for your myboker.org account.\n\n"
-            f"Click the link below to set a new password:\n\n"
-            f"{reset_url}\n\n"
-            f"This link expires in 1 hour. If you did not request this, you can ignore this email."
+        body=body,
+        html=_html_email(
+            "Reset your password",
+            "We received a request to reset the password for your myboker.org account.",
+            cta_label="Reset password",
+            cta_url=reset_url,
+            note="This link expires in 1 hour.",
         ),
         sender=current_app.config.get("MAIL_DEFAULT_SENDER"),
     )
@@ -42,13 +123,20 @@ def send_password_reset(to_email: str, reset_url: str) -> None:
 
 
 def send_email_verification_code(to_email: str, code: str) -> None:
+    body = (
+        "Verify your myboker.org account with this code:\n\n"
+        f"{code}\n\n"
+        "This code expires in 15 minutes. If you did not create an account, you can ignore this email."
+    )
     msg = Message(
         subject="Your myboker.org verification code",
         recipients=[to_email],
-        body=(
-            "Verify your myboker.org account with this code:\n\n"
-            f"{code}\n\n"
-            "This code expires in 15 minutes. If you did not create an account, you can ignore this email."
+        body=body,
+        html=_html_email(
+            "Verify your email",
+            "Enter this verification code to finish creating your myboker.org account.",
+            code=code,
+            note="This code expires in 15 minutes. Do not share it with anyone.",
         ),
         sender=current_app.config.get("MAIL_DEFAULT_SENDER"),
     )
@@ -57,14 +145,22 @@ def send_email_verification_code(to_email: str, code: str) -> None:
 
 def send_league_invite(to_email: str, league_name: str, invite_url: str, invited_by_email: str, role: str) -> None:
     role_label = role.strip().lower() if role else "member"
+    body = (
+        f"{invited_by_email} has invited you to join {league_name} as a {role_label} on myboker.org.\n\n"
+        f"Accept your invitation:\n\n"
+        f"{invite_url}\n\n"
+        f"This link expires in 7 days. You'll need a myboker.org account with this email address to accept."
+    )
     msg = Message(
         subject=f"You've been invited to join {league_name} on myboker.org",
         recipients=[to_email],
-        body=(
-            f"{invited_by_email} has invited you to join {league_name} as a {role_label} on myboker.org.\n\n"
-            f"Accept your invitation:\n\n"
-            f"{invite_url}\n\n"
-            f"This link expires in 7 days. You'll need a myboker.org account with this email address to accept."
+        body=body,
+        html=_html_email(
+            "You have a league invite",
+            f"{invited_by_email} invited you to join {league_name} as a {role_label}.",
+            cta_label="Accept invite",
+            cta_url=invite_url,
+            note="This invitation link expires in 7 days.",
         ),
         sender=current_app.config.get("MAIL_DEFAULT_SENDER"),
     )
diff --git a/routes/account.py b/routes/account.py
index 16d951a..d82fb22 100644
--- a/routes/account.py
+++ b/routes/account.py
@@ -117,6 +117,7 @@ def register():
         email = normalize_email(form["email"])
         password = request.form.get("password", "")
         confirm_password = request.form.get("confirm_password", "")
+        existing_user = find_user_by_email(email)
 
         if not email or "@" not in email:
             flash("Enter a valid email address.", "error")
@@ -124,10 +125,18 @@ def register():
             flash("Password must be at least 8 characters.", "error")
         elif password != confirm_password:
             flash("Passwords do not match.", "error")
-        elif find_user_by_email(email):
+        elif existing_user and existing_user.disabled_at is None:
             flash("An account already exists for that email.", "error")
         else:
-            user = create_user(email, password)
+            if existing_user:
+                user = existing_user
+                user.password_hash = hash_password(password)
+                user.disabled_at = None
+                user.email_verified_at = None
+                user.email_verification_code_hash = None
+                user.email_verification_sent_at = None
+            else:
+                user = create_user(email, password)
             db.session.flush()
             return redirect(_start_email_verification(user, safe_next_url(url_for("leagues.new"))))
 

From e9d4392b8c5dd3f89e388a1f5ea616c2b21cca0f Mon Sep 17 00:00:00 2001
From: SowinskiBraeden <braeden@sowinski.dev>
Date: Sat, 27 Jun 2026 13:14:13 -0700
Subject: [PATCH 66/83] privacy/terms/support/docs

---
 config.py              |   2 +-
 routes/public.py       |  12 +-
 static/css/style.css   | 198 +++++++++++++++++++++++
 templates/base.html    |   6 +-
 templates/privacy.html | 115 ++++++++++++++
 templates/support.html | 351 +++++++++++++++++++++++++++++++++++++++++
 templates/terms.html   | 104 ++++++++++++
 7 files changed, 783 insertions(+), 5 deletions(-)
 create mode 100644 templates/privacy.html
 create mode 100644 templates/support.html
 create mode 100644 templates/terms.html

diff --git a/config.py b/config.py
index 420cd80..fa31513 100644
--- a/config.py
+++ b/config.py
@@ -9,7 +9,7 @@ DATA_PATH = BASE_DIR / "data" / "entries.csv"
 DEFAULT_DATABASE_URL = f"sqlite:///{BASE_DIR / 'data' / 'boker-dev.sqlite3'}"
 
 ELIGIBLE_MIN_SESSIONS = 3
-APP_VERSION = "2.5.16"
+APP_VERSION = "2.5.17"
 
 
 def load_local_env(env_path: Path) -> None:
diff --git a/routes/public.py b/routes/public.py
index c2371be..90ef5f8 100644
--- a/routes/public.py
+++ b/routes/public.py
@@ -25,7 +25,17 @@ def home():
 
 @public_bp.get("/help")
 def help():
-    return render_template("docs.html")
+    return render_template("support.html")
+
+
+@public_bp.get("/privacy")
+def privacy():
+    return render_template("privacy.html")
+
+
+@public_bp.get("/terms")
+def terms():
+    return render_template("terms.html")
 
 
 @public_bp.get("/explore")
diff --git a/static/css/style.css b/static/css/style.css
index f548e68..8310268 100644
--- a/static/css/style.css
+++ b/static/css/style.css
@@ -5824,3 +5824,201 @@ select.control { cursor: pointer; }
   background: rgba(10,9,18,.9);
   padding: 11px 16px;
 }
+
+/* ================================================================
+   LEGAL DOCUMENT PAGES (privacy, terms)
+   ================================================================ */
+.legal-doc {
+  max-width: 740px;
+  margin: 0 auto;
+  padding: clamp(40px, 5vw, 72px) 0 clamp(48px, 6vw, 80px);
+}
+.legal-doc__header {
+  margin-bottom: clamp(32px, 4vw, 52px);
+  padding-bottom: clamp(24px, 3vw, 36px);
+  border-bottom: 1px solid var(--divider);
+}
+.legal-doc__title {
+  font-size: clamp(26px, 3.5vw, 40px);
+  font-weight: 800;
+  color: var(--text-strong);
+  letter-spacing: -.04em;
+  line-height: 1.1;
+  margin: 10px 0 12px;
+}
+.legal-doc__meta {
+  font-size: .8125rem;
+  color: var(--text-muted);
+  margin: 0;
+}
+.legal-doc__meta strong { color: var(--faint-2); font-weight: 500; }
+.legal-doc__body { font-size: .9375rem; line-height: 1.8; color: var(--text-2); }
+.legal-doc__body h2 {
+  font-size: 1rem;
+  font-weight: 700;
+  color: var(--text-strong);
+  letter-spacing: -.015em;
+  margin: clamp(32px, 4vw, 48px) 0 12px;
+  padding-bottom: 8px;
+  border-bottom: 1px solid var(--divider);
+}
+.legal-doc__body h3 {
+  font-size: .875rem;
+  font-weight: 600;
+  color: var(--text);
+  margin: 20px 0 8px;
+}
+.legal-doc__body p { margin: 0 0 14px; }
+.legal-doc__body ul {
+  margin: 0 0 14px;
+  padding-left: 20px;
+  display: grid;
+  gap: 6px;
+}
+.legal-doc__body ul li { color: var(--text-2); }
+.legal-doc__body a {
+  color: var(--accent);
+  text-decoration: none;
+  transition: opacity .13s;
+}
+.legal-doc__body a:hover { opacity: .75; }
+.legal-doc__body code {
+  font-family: var(--font-mono);
+  font-size: .8125rem;
+  background: var(--surface-raised);
+  border: 1px solid var(--border);
+  border-radius: 4px;
+  padding: 1px 6px;
+  color: var(--text);
+}
+.legal-doc__body em { color: var(--text); font-style: italic; }
+.legal-doc__body strong { color: var(--text-strong); font-weight: 600; }
+
+/* ================================================================
+   SUPPORT / HELP PAGE
+   ================================================================ */
+.support-pg {
+  max-width: 820px;
+  margin: 0 auto;
+  padding: clamp(40px, 5vw, 72px) 0 0;
+}
+.support-pg__header {
+  margin-bottom: clamp(36px, 5vw, 60px);
+}
+.support-pg__title {
+  font-size: clamp(26px, 3.5vw, 40px);
+  font-weight: 800;
+  color: var(--text-strong);
+  letter-spacing: -.04em;
+  line-height: 1.1;
+  margin: 10px 0 12px;
+}
+.support-pg__sub {
+  font-size: .9375rem;
+  color: var(--text-muted);
+  margin: 0;
+  max-width: 540px;
+}
+.support-pg__body { display: grid; gap: clamp(28px, 4vw, 48px); }
+
+/* FAQ section grouping */
+.faq-section {}
+.faq-section__title {
+  font-size: .6875rem;
+  font-family: var(--font-mono);
+  letter-spacing: .13em;
+  text-transform: uppercase;
+  color: var(--accent);
+  margin: 0 0 14px;
+  padding-bottom: 10px;
+  border-bottom: 1px solid var(--divider);
+}
+
+/* FAQ accordion item */
+.faq-item {
+  border-bottom: 1px solid var(--divider);
+}
+.faq-item__q {
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  gap: 16px;
+  padding: 14px 0;
+  font-size: .9375rem;
+  font-weight: 600;
+  color: var(--text);
+  cursor: pointer;
+  list-style: none;
+  user-select: none;
+  transition: color .13s;
+}
+.faq-item__q::-webkit-details-marker { display: none; }
+.faq-item__q::after {
+  content: "+";
+  font-size: 1.125rem;
+  font-weight: 400;
+  color: var(--text-muted);
+  flex-shrink: 0;
+  transition: transform .2s, color .13s;
+}
+.faq-item[open] > .faq-item__q { color: var(--text-strong); }
+.faq-item[open] > .faq-item__q::after {
+  content: "−";
+  color: var(--accent);
+}
+.faq-item__q:hover { color: var(--text-strong); }
+.faq-item__a {
+  padding: 0 0 18px;
+  font-size: .9rem;
+  line-height: 1.78;
+  color: var(--text-2);
+}
+.faq-item__a p { margin: 0 0 10px; }
+.faq-item__a p:last-child { margin-bottom: 0; }
+.faq-item__a ul {
+  margin: 8px 0 10px;
+  padding-left: 20px;
+  display: grid;
+  gap: 5px;
+}
+.faq-item__a a {
+  color: var(--accent);
+  text-decoration: none;
+  transition: opacity .13s;
+}
+.faq-item__a a:hover { opacity: .75; }
+.faq-item__a strong { color: var(--text-strong); font-weight: 600; }
+.faq-item__a em { font-style: italic; color: var(--text); }
+
+/* Contact section */
+.support-contact {
+  margin-top: clamp(48px, 6vw, 80px);
+  border-top: 1px solid var(--divider);
+  padding: clamp(36px, 5vw, 60px) 0 clamp(48px, 6vw, 72px);
+}
+.support-contact__inner {
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  gap: 32px;
+  flex-wrap: wrap;
+}
+.support-contact__title {
+  font-size: clamp(18px, 2.2vw, 26px);
+  font-weight: 800;
+  color: var(--text-strong);
+  letter-spacing: -.03em;
+  margin: 0 0 8px;
+}
+.support-contact__body {
+  font-size: .875rem;
+  color: var(--text-muted);
+  line-height: 1.65;
+  margin: 0;
+  max-width: 480px;
+}
+.support-contact__btn { flex-shrink: 0; }
+@media (max-width: 580px) {
+  .support-contact__inner { flex-direction: column; align-items: flex-start; }
+  .support-contact__btn { width: 100%; text-align: center; }
+}
diff --git a/templates/base.html b/templates/base.html
index 3fd23af..52e4214 100644
--- a/templates/base.html
+++ b/templates/base.html
@@ -74,9 +74,9 @@
             </div>
             <nav class="site-footer__links" aria-label="Footer links">
                 <a href="{{ url_for('public.help') }}">Help</a>
-                <a href="#">Contact</a>
-                <a href="#">Privacy</a>
-                <a href="#">Terms</a>
+                <a href="{{ url_for('public.help') }}#contact">Contact</a>
+                <a href="{{ url_for('public.privacy') }}">Privacy</a>
+                <a href="{{ url_for('public.terms') }}">Terms</a>
             </nav>
             <div class="site-footer__brand">
                 <a href="https://cedarline.digital" target="_blank" rel="noopener">cedarline.digital</a>
diff --git a/templates/privacy.html b/templates/privacy.html
new file mode 100644
index 0000000..8866a44
--- /dev/null
+++ b/templates/privacy.html
@@ -0,0 +1,115 @@
+{% extends "base.html" %}
+{% block title %}Privacy Policy - myboker.org{% endblock %}
+{% block page_class %}page--public{% endblock %}
+{% block content %}
+
+<div class="legal-doc">
+    <header class="legal-doc__header">
+        <p class="lp-kicker">Legal</p>
+        <h1 class="legal-doc__title">Privacy Policy</h1>
+        <p class="legal-doc__meta">Effective June 27, 2026. Operated by <strong>cedarline.digital</strong>, British Columbia, Canada.</p>
+    </header>
+
+    <div class="legal-doc__body">
+
+        <h2>1. Who we are</h2>
+        <p>myboker.org is operated by <strong>cedarline.digital</strong>, a sole proprietorship registered in British Columbia, Canada. "We," "us," and "our" refer to cedarline.digital. By using myboker.org, you agree to the collection and use of information as described in this policy.</p>
+        <p>This policy is governed by the <em>Personal Information Protection and Electronic Documents Act</em> (PIPEDA) and the BC <em>Personal Information Protection Act</em> (PIPA).</p>
+
+        <h2>2. Information we collect</h2>
+
+        <h3>Account information</h3>
+        <ul>
+            <li>Your <strong>email address</strong>, required to create and verify your account.</li>
+            <li>Your <strong>password</strong>, stored exclusively as a one-way bcrypt hash. We never store or have access to your plaintext password.</li>
+            <li>Timestamps for account creation, email verification, and most recent login.</li>
+        </ul>
+
+        <h3>League and gameplay data</h3>
+        <ul>
+            <li>League names, descriptions, visibility settings (private or public), and configuration you create.</li>
+            <li>Player display names and optional notes within your leagues.</li>
+            <li>Session records: dates, labels, open/close timestamps, and session notes.</li>
+            <li>Ledger events: buy-ins, cash-outs, fronts, payouts, rollovers, debt repayments, and write-offs. All amounts are recorded in cents with a full append-only audit trail.</li>
+            <li>The account that created or voided each ledger event.</li>
+        </ul>
+
+        <h3>Membership data</h3>
+        <ul>
+            <li>Your role within each league you belong to (owner, manager, or viewer).</li>
+            <li>Which account invited you and when.</li>
+        </ul>
+
+        <h2>3. What we do not collect</h2>
+        <ul>
+            <li><strong>Real names.</strong> Player display names are arbitrary labels chosen by league managers and are not required to correspond to real legal identities.</li>
+            <li><strong>Payment information.</strong> We do not process, hold, or transfer money of any kind.</li>
+            <li>Location or GPS data.</li>
+            <li>Browser fingerprints or device identifiers.</li>
+            <li>Advertising IDs or third-party tracking identifiers.</li>
+            <li>Analytics data. There are no third-party analytics scripts (no Google Analytics, Mixpanel, or similar) on myboker.org.</li>
+        </ul>
+
+        <h2>4. Cookies and transient data</h2>
+        <p>We set <strong>one cookie</strong>: <code>poker_portal_session</code>. This is a functional authentication cookie that keeps you signed in. It contains only an encrypted reference to your session. We do not use advertising cookies, tracking cookies, or any third-party cookies.</p>
+        <p>Our rate-limiting system temporarily processes your IP address in memory to prevent abuse. IP addresses are not written to disk or retained once the request completes.</p>
+        <p>Password-reset and league-invitation links are cryptographically signed tokens that expire automatically (1 hour for resets, 7 days for invitations). They are stateless and not stored in our database.</p>
+
+        <h2>5. How we use your information</h2>
+        <ul>
+            <li>To authenticate you and maintain a secure session.</li>
+            <li>To store and display your league, session, and player data to you and the members of your leagues.</li>
+            <li>To send transactional emails: account verification, password reset, and league invitations.</li>
+            <li>To enforce rate limits and protect the service from abuse.</li>
+        </ul>
+        <p>We do not sell, rent, share, or otherwise disclose your personal information to third parties for advertising or marketing purposes.</p>
+
+        <h2>6. Third-party services</h2>
+        <p>We use a third-party SMTP provider to deliver transactional emails. This provider receives only the recipient email address and the message content required to deliver your email. No other personal data is shared with this provider.</p>
+        <p>We have no other third-party integrations, analytics platforms, or data processors.</p>
+        <p>Servers hosting myboker.org are located in <strong>North America</strong> (primarily Canada; potentially the United States). Data is not intentionally transferred to the European Union, though no geographic restriction is technically enforced at the network level.</p>
+
+        <h2>7. Player display names</h2>
+        <p>Player profiles in a league use display names set by the league manager. These names do not need to be real legal names; they are arbitrary labels for tracking purposes. All leagues are <strong>private by default</strong>, meaning player data is only visible to members of that specific league.</p>
+        <p>If you are a league manager adding players, you are responsible for ensuring that players whose results you track have agreed to participate in your league and have their results recorded.</p>
+
+        <h2>8. Data retention and deletion</h2>
+        <p>We retain your data for as long as your account is active. You have two options for removing your data:</p>
+        <ul>
+            <li><strong>Account deletion:</strong> available in account settings. This is immediate and permanent. Your account, all leagues you own, and all associated session history are irreversibly removed.</li>
+            <li><strong>League deletion:</strong> league owners can permanently delete a league, which removes all its sessions, players, and ledger events. Archiving a league preserves data while hiding the league from active views.</li>
+        </ul>
+        <p>We do not have automated data expiry periods. Data remains until you delete it. As the user base grows, we may introduce formal retention policies and will update this policy accordingly.</p>
+
+        <h2>9. Your rights</h2>
+        <p>Under PIPEDA and BC PIPA, you have the right to:</p>
+        <ul>
+            <li>Know what personal information we hold about you.</li>
+            <li>Request corrections to inaccurate information.</li>
+            <li>Request deletion of your personal information (fulfilled via in-app hard delete or by emailing us).</li>
+            <li>Withdraw consent, subject to legal or contractual limitations.</li>
+        </ul>
+        <p>To exercise any of these rights, contact us at <a href="mailto:support@cedarline.digital">support@cedarline.digital</a>. We will respond within 30 days.</p>
+        <p>If you are a resident of the European Union, additional rights may apply under the GDPR. myboker.org is not specifically directed at EU residents, but we will honour GDPR deletion and access requests made in writing.</p>
+
+        <h2>10. Age requirement</h2>
+        <p>You must be <strong>at least 18 years old</strong> to create an account on myboker.org. By registering, you confirm you meet this requirement. If we become aware that an account was created by someone under 18, we will permanently delete that account.</p>
+
+        <h2>11. Security</h2>
+        <p>We apply standard security measures including encrypted connections (TLS in transit), bcrypt password hashing, CSRF protection, and rate limiting. No method of data transmission or storage is 100% secure. We cannot guarantee absolute security but take reasonable precautions to protect your information.</p>
+
+        <h2>12. Changes to this policy</h2>
+        <p>We may update this Privacy Policy from time to time. When we do, we will update the effective date at the top of this page. Continued use of myboker.org after changes are posted constitutes your acceptance of the revised policy.</p>
+
+        <h2>13. Contact</h2>
+        <p>Questions or requests regarding this policy:</p>
+        <p>
+            <strong>cedarline.digital</strong><br>
+            British Columbia, Canada<br>
+            <a href="mailto:support@cedarline.digital">support@cedarline.digital</a>
+        </p>
+
+    </div><!-- /.legal-doc__body -->
+</div><!-- /.legal-doc -->
+
+{% endblock %}
diff --git a/templates/support.html b/templates/support.html
new file mode 100644
index 0000000..c958b81
--- /dev/null
+++ b/templates/support.html
@@ -0,0 +1,351 @@
+{% extends "base.html" %}
+{% block title %}Help - myboker.org{% endblock %}
+{% block content %}
+
+<div class="hero" style="padding-bottom:12px;">
+    <p class="hero__kicker">Documentation</p>
+    <h1 class="hero__title">How myboker works</h1>
+    <p class="hero__sub">Everything you need to run a home poker league: sessions, ledgers, leaderboards, and settlement.</p>
+</div>
+
+<div class="docs-grid">
+
+    <nav class="docs-nav">
+        <p class="kicker">Contents</p>
+        <a href="#leagues">Leagues</a>
+        <a href="#members">Members &amp; roles</a>
+        <a href="#players">Players</a>
+        <a href="#seasons">Seasons</a>
+        <a href="#sessions">Sessions</a>
+        <a href="#events">Ledger events</a>
+        <a href="#settlement">Settlement</a>
+        <a href="#leaderboard">Leaderboard &amp; stats</a>
+        <a href="#visibility">Public vs private</a>
+        <a href="#account">Account &amp; login</a>
+        <a href="#privacy">Privacy &amp; data</a>
+        <a href="#contact">Contact</a>
+    </nav>
+
+    <div class="docs-body">
+
+        <section class="docs-section" id="leagues">
+            <h2 class="docs-h2">Leagues</h2>
+            <p>A <strong>league</strong> is the top-level container for your home game. It holds all your members, players, sessions, and ledger events in one place. One account can manage multiple leagues, which is useful if you run separate games (a Thursday game and a weekend game, for example).</p>
+            <p>When you create a league you give it a name and optional description. A unique public key is generated automatically so you can share a link if you make the league public. All leagues start as <strong>private</strong> by default.</p>
+            <div class="docs-callout">
+                <strong>Tip:</strong> Leagues are long-lived. You don't need to create a new league every season. Use <em>sessions</em> for individual nights and <em>seasons</em> to group them into periods.
+            </div>
+        </section>
+
+        <section class="docs-section" id="members">
+            <h2 class="docs-h2">Members &amp; roles</h2>
+            <p><strong>Members</strong> are myboker.org account holders who have been granted access to a league. They are distinct from players: a member manages or observes the league, while a player is just a tracked name in the ledger.</p>
+            <p>Invite members from league settings. They'll receive an email with a unique link that expires after 7 days. Each member is assigned one of three roles:</p>
+            <div class="docs-term-grid">
+                <div class="docs-term">
+                    <strong>Owner</strong>
+                    <span>Full control. Can manage settings, invite and remove members, create and close sessions, add players, and permanently delete the league.</span>
+                </div>
+                <div class="docs-term">
+                    <strong>Manager</strong>
+                    <span>Can run sessions, record ledger events, manage players, and view all data. Cannot change league settings or manage member roles.</span>
+                </div>
+                <div class="docs-term">
+                    <strong>Viewer</strong>
+                    <span>Read-only. Can view sessions, the leaderboard, and player history. Cannot record events or change anything.</span>
+                </div>
+            </div>
+            <div class="docs-callout">
+                <strong>Removing a member:</strong> Disabling a member removes their access but preserves all their historical contributions. Past session data recorded by them remains intact.
+            </div>
+        </section>
+
+        <section class="docs-section" id="players">
+            <h2 class="docs-h2">Players</h2>
+            <p>Players are the people tracked in your league's ledger. They <strong>do not need a myboker.org account</strong>. A player is just a display name added by a manager or owner. Their results, stats, and history are tied to that name.</p>
+            <p>Display names don't have to be legal names. They can be nicknames or aliases. Player data is only visible to league members.</p>
+            <p>You can optionally <strong>link a player profile to a member account</strong>. This lets a real account "claim" their stats, but it is never required.</p>
+            <div class="docs-term-grid">
+                <div class="docs-term">
+                    <strong>Active</strong>
+                    <span>Shows on the roster and is available to record events against.</span>
+                </div>
+                <div class="docs-term">
+                    <strong>Archived</strong>
+                    <span>Hidden from the active roster. History and stats are fully preserved. Can be reactivated at any time.</span>
+                </div>
+            </div>
+        </section>
+
+        <section class="docs-section" id="seasons">
+            <h2 class="docs-h2">Seasons</h2>
+            <p>Seasons let you group sessions into defined time periods, for example <em>Season 1</em> or <em>Spring 2026</em>. They are entirely optional. Sessions can exist without belonging to any season.</p>
+            <p>When viewing the leaderboard, you can filter by season to see rankings for just that period. Seasons have optional start and end dates for reference but these do not restrict which sessions can be assigned to them.</p>
+            <div class="docs-term-grid">
+                <div class="docs-term">
+                    <strong>Active</strong>
+                    <span>Visible in the league and available to assign sessions to.</span>
+                </div>
+                <div class="docs-term">
+                    <strong>Archived</strong>
+                    <span>Hidden from the active list. Sessions assigned to it are preserved and remain filterable.</span>
+                </div>
+            </div>
+        </section>
+
+        <section class="docs-section" id="sessions">
+            <h2 class="docs-h2">Sessions</h2>
+            <p>A <strong>session</strong> is a single night of poker. Sessions are date-stamped and sequenced automatically. If you play twice on the same day, they become S1 and S2 for that date.</p>
+            <p>Sessions have two states: <strong>open</strong> and <strong>closed</strong>. While open, you record buy-ins, cashouts, and all other ledger events. When everyone has settled, close the session. Closing doesn't delete anything and the session can always be reopened.</p>
+            <div class="docs-term-grid">
+                <div class="docs-term">
+                    <strong>Date</strong>
+                    <span>The calendar date the game was played. Used to order sessions and group same-day games.</span>
+                </div>
+                <div class="docs-term">
+                    <strong>Label</strong>
+                    <span>Optional short name for this session (e.g. "Main table", "Side game"). Shown in lists.</span>
+                </div>
+                <div class="docs-term">
+                    <strong>Season</strong>
+                    <span>Optional. Assigns the session to a season so it appears in that season's leaderboard filter.</span>
+                </div>
+                <div class="docs-term">
+                    <strong>Notes</strong>
+                    <span>Optional freeform context (e.g. "Holiday game", "Marcus's place").</span>
+                </div>
+                <div class="docs-term">
+                    <strong>Open</strong>
+                    <span>Session is live. Events can be added and settlement is still in progress.</span>
+                </div>
+                <div class="docs-term">
+                    <strong>Closed</strong>
+                    <span>Session is settled. Books are considered final. Can be reopened if needed.</span>
+                </div>
+            </div>
+        </section>
+
+        <section class="docs-section" id="events">
+            <h2 class="docs-h2">Ledger events</h2>
+            <p>All activity in a session is recorded as <strong>ledger events</strong>. The ledger is <strong>append-only</strong>. Events are never deleted. This keeps the record auditable even when corrections are needed. To fix a mistake, void the incorrect event and add the correct one.</p>
+            <div class="docs-events">
+                <div class="docs-event">
+                    <span class="pill pill-buyin">buy-in</span>
+                    <div>
+                        <strong>A player buys chips with cash.</strong>
+                        <p>Cash comes into the pot. Records how much the player has invested. Record one every time someone puts money on the table.</p>
+                    </div>
+                </div>
+                <div class="docs-event">
+                    <span class="pill pill-front">front</span>
+                    <div>
+                        <strong>The house covers a player's buy-in.</strong>
+                        <p>When a player doesn't have cash, the house can front them chips. This creates a debt. The player owes that amount back to the house. Track fronts carefully so you know who owes what at the end of the night.</p>
+                    </div>
+                </div>
+                <div class="docs-event">
+                    <span class="pill pill-cashout">cashout</span>
+                    <div>
+                        <strong>A player exchanges their chips for their cash value.</strong>
+                        <p>Records the chip count a player walks away with. This is the "owed X" event. It doesn't mean cash has left the house yet. Use <em>paid out</em> to record the actual handover.</p>
+                    </div>
+                </div>
+                <div class="docs-event">
+                    <span class="pill pill-paid_out">paid out</span>
+                    <div>
+                        <strong>Cash physically leaves the house to the player.</strong>
+                        <p>Closes the loop on a cashout. Once paid out, the player's balance goes to $0. Record this separately from cashout because payments may happen at different times.</p>
+                    </div>
+                </div>
+                <div class="docs-event">
+                    <span class="pill pill-rollover_in">rollover in</span>
+                    <div>
+                        <strong>Chips or a balance carried in from a previous session.</strong>
+                        <p>Record a rollover in when a player carries an unpaid winning forward from a prior session. Always paired with a rollover out on the source session.</p>
+                    </div>
+                </div>
+                <div class="docs-event">
+                    <span class="pill pill-rollover_out">rollover out</span>
+                    <div>
+                        <strong>An unpaid winning deferred to a future session.</strong>
+                        <p>Recorded when a player's payout isn't settled immediately and will be carried to the next game. Paired with a rollover in on the receiving session.</p>
+                    </div>
+                </div>
+                <div class="docs-event">
+                    <span class="pill pill-payout_carry_in">payout carry-in</span>
+                    <div>
+                        <strong>An outstanding winning from a prior session honoured here.</strong>
+                        <p>Similar to rollover in but used when the balance isn't tied to a specific session's rollover out. Adds to the player's total payout due in this session.</p>
+                    </div>
+                </div>
+                <div class="docs-event">
+                    <span class="pill pill-debt_repayment">debt repayment</span>
+                    <div>
+                        <strong>A player repays an outstanding front.</strong>
+                        <p>When a player who was fronted chips pays the house back, record a debt repayment. This reduces their outstanding balance with the house.</p>
+                    </div>
+                </div>
+                <div class="docs-event">
+                    <span class="pill pill-writeoff">write-off</span>
+                    <div>
+                        <strong>The house forgives a debt.</strong>
+                        <p>If a front won't be collected (player left, debt forgiven), write it off. The debt is cleared from the open balance without cash changing hands. Add a note explaining why.</p>
+                    </div>
+                </div>
+            </div>
+        </section>
+
+        <section class="docs-section" id="settlement">
+            <h2 class="docs-h2">Settlement</h2>
+            <p>The ledger tracks two types of open balance at all times:</p>
+            <div class="docs-term-grid">
+                <div class="docs-term">
+                    <strong>Due to players</strong>
+                    <span>Cash the house owes to players who have cashed out but haven't been paid yet. Record a paid out event to clear each balance.</span>
+                </div>
+                <div class="docs-term">
+                    <strong>Due to house</strong>
+                    <span>Cash players owe from unpaid fronts. Collect debt repayments or write off to clear the balance.</span>
+                </div>
+                <div class="docs-term">
+                    <strong>Cash in</strong>
+                    <span>Total real cash that has entered the pot: buy-ins and repaid fronts only. Fronts themselves don't count because no cash entered.</span>
+                </div>
+                <div class="docs-term">
+                    <strong>Cash paid out</strong>
+                    <span>Total real cash that has left the house to players. Should approach cash in over time once all balances are settled.</span>
+                </div>
+            </div>
+            <div class="docs-callout">
+                <strong>Fronts vs buy-ins:</strong> A front doesn't add to "cash in" because no cash actually entered the pot. The house covered it. Cash in only counts money physically on the table.
+            </div>
+        </section>
+
+        <section class="docs-section" id="leaderboard">
+            <h2 class="docs-h2">Leaderboard &amp; stats</h2>
+            <p>The leaderboard ranks players by their all-time performance within a league. Stats are computed directly from ledger events and are never manually entered.</p>
+            <p>Players must meet the <strong>minimum sessions threshold</strong> set in league settings (default: 3) before appearing in the ranked leaderboard. Players below the threshold are shown in a provisional section.</p>
+            <div class="docs-term-grid">
+                <div class="docs-term">
+                    <strong>Net</strong>
+                    <span>Total cash out minus total invested across all sessions. Positive means up, negative means down.</span>
+                </div>
+                <div class="docs-term">
+                    <strong>ROI</strong>
+                    <span>Net divided by total invested, as a percentage. Compares performance independent of how much someone plays.</span>
+                </div>
+                <div class="docs-term">
+                    <strong>Win rate</strong>
+                    <span>Percentage of sessions where the player finished with a positive net. Breaking exactly even counts as a loss.</span>
+                </div>
+                <div class="docs-term">
+                    <strong>Sessions played</strong>
+                    <span>Number of sessions with at least one ledger event for this player.</span>
+                </div>
+                <div class="docs-term">
+                    <strong>Biggest win</strong>
+                    <span>The single session where the player netted the most profit.</span>
+                </div>
+                <div class="docs-term">
+                    <strong>Biggest loss</strong>
+                    <span>The single session where the player lost the most money.</span>
+                </div>
+            </div>
+        </section>
+
+        <section class="docs-section" id="visibility">
+            <h2 class="docs-h2">Public vs private</h2>
+            <p>Each league has a <strong>visibility</strong> setting you can change in league settings at any time.</p>
+            <div class="docs-term-grid">
+                <div class="docs-term">
+                    <strong>Private</strong>
+                    <span>Only invited members can see this league. It will not appear on the Explore page. This is the default for all new leagues.</span>
+                </div>
+                <div class="docs-term">
+                    <strong>Public</strong>
+                    <span>Anyone on the Explore page can view the leaderboard and session results. No account required to view. Members still need an account to manage it.</span>
+                </div>
+            </div>
+            <div class="docs-callout">
+                <strong>Note:</strong> Making a league public shares leaderboard rankings and session results, but not private financial details like individual debt balances or member email addresses.
+            </div>
+        </section>
+
+        <!-- ── Account & Login (FAQ dropdowns) ─────────────────────── -->
+        <section class="docs-section" id="account">
+            <h2 class="docs-h2">Account &amp; login</h2>
+
+            <details class="faq-item">
+                <summary class="faq-item__q">I didn't receive a verification email.</summary>
+                <div class="faq-item__a">
+                    <p>Check your spam or junk folder first. Verification emails are sent from <strong>noreply@myboker.org</strong>. If you still can't find it, sign in and use the <em>Resend verification email</em> option on your account page.</p>
+                    <p>If you continue to have trouble, contact us at <a href="mailto:support@cedarline.digital">support@cedarline.digital</a>.</p>
+                </div>
+            </details>
+
+            <details class="faq-item">
+                <summary class="faq-item__q">How do I reset my password?</summary>
+                <div class="faq-item__a">
+                    <p>On the sign-in page, click <strong>Forgot password?</strong> and enter your email address. You will receive a reset link that expires after <strong>1 hour</strong>. Follow the link and choose a new password.</p>
+                    <p>If you don't receive the email, check your spam folder or contact support.</p>
+                </div>
+            </details>
+
+            <details class="faq-item">
+                <summary class="faq-item__q">How do I accept a league invitation?</summary>
+                <div class="faq-item__a">
+                    <p>When a league owner invites you, you will receive an email with a unique invitation link. Clicking it will either sign you in directly (if you already have an account with that email) or guide you through creating an account first.</p>
+                    <p>Invitation links expire after <strong>7 days</strong>. If yours has expired, ask the league owner to send a new one.</p>
+                </div>
+            </details>
+
+            <details class="faq-item">
+                <summary class="faq-item__q">How do I delete my account?</summary>
+                <div class="faq-item__a">
+                    <p>Account deletion is available in your account settings. <strong>This is permanent and cannot be undone.</strong> Deleting your account removes your login credentials, all leagues you own and their complete session history, and your membership records in any leagues you belong to.</p>
+                    <p>If you own leagues with other active members, consider notifying them before deleting your account as they will lose access to that league's data.</p>
+                </div>
+            </details>
+        </section>
+
+        <!-- ── Privacy & Data (FAQ dropdowns) ──────────────────────── -->
+        <section class="docs-section" id="privacy">
+            <h2 class="docs-h2">Privacy &amp; your data</h2>
+
+            <details class="faq-item">
+                <summary class="faq-item__q">Who can see my league data?</summary>
+                <div class="faq-item__a">
+                    <p>For private leagues (the default): only invited members with active access. No one outside your league can see sessions, players, or financials.</p>
+                    <p>For public leagues: the leaderboard is visible to any signed-in user on the Explore page. Full session detail and financials are still restricted to invited members.</p>
+                </div>
+            </details>
+
+            <details class="faq-item">
+                <summary class="faq-item__q">Does myboker.org track me or use analytics?</summary>
+                <div class="faq-item__a">
+                    <p>No. There are no third-party analytics scripts on myboker.org. We set one functional session cookie to keep you signed in and nothing else. We do not sell or share your data. See the full <a href="{{ url_for('public.privacy') }}">Privacy Policy</a> for details.</p>
+                </div>
+            </details>
+
+            <details class="faq-item">
+                <summary class="faq-item__q">How do I request a copy of my data or have it deleted?</summary>
+                <div class="faq-item__a">
+                    <p>You can permanently delete your account and all associated data directly from account settings at any time. To request an export or to have data deleted on your behalf, email <a href="mailto:support@cedarline.digital">support@cedarline.digital</a> from the address associated with your account. We respond within 30 days.</p>
+                </div>
+            </details>
+        </section>
+
+        <!-- ── Contact ──────────────────────────────────────────────── -->
+        <section class="docs-section" id="contact">
+            <h2 class="docs-h2">Contact</h2>
+            <p>myboker.org is operated by <strong>cedarline.digital</strong>, a sole proprietorship based in British Columbia, Canada.</p>
+            <p>For support, data requests, or anything else: <a href="mailto:support@cedarline.digital">support@cedarline.digital</a>. Please allow a few days for a response.</p>
+            <div class="docs-callout">
+                <strong>Legal:</strong> See the <a href="{{ url_for('public.privacy') }}">Privacy Policy</a> and <a href="{{ url_for('public.terms') }}">Terms of Service</a> for details on how your data is handled and the rules governing use of the service.
+            </div>
+        </section>
+
+    </div>
+</div>
+
+{% endblock %}
diff --git a/templates/terms.html b/templates/terms.html
new file mode 100644
index 0000000..9b6eced
--- /dev/null
+++ b/templates/terms.html
@@ -0,0 +1,104 @@
+{% extends "base.html" %}
+{% block title %}Terms of Service - myboker.org{% endblock %}
+{% block page_class %}page--public{% endblock %}
+{% block content %}
+
+<div class="legal-doc">
+    <header class="legal-doc__header">
+        <p class="lp-kicker">Legal</p>
+        <h1 class="legal-doc__title">Terms of Service</h1>
+        <p class="legal-doc__meta">Effective June 27, 2026. Operated by <strong>cedarline.digital</strong>, British Columbia, Canada.</p>
+    </header>
+
+    <div class="legal-doc__body">
+
+        <h2>1. Acceptance of terms</h2>
+        <p>By accessing or using myboker.org ("the Service"), you agree to be bound by these Terms of Service ("Terms"). If you do not agree to these Terms, do not use the Service.</p>
+
+        <h2>2. Who operates this Service</h2>
+        <p>myboker.org is operated by <strong>cedarline.digital</strong>, a sole proprietorship registered in British Columbia, Canada ("we," "us," "our"). The Service is a personal side project offered free of charge.</p>
+
+        <h2>3. Age requirement</h2>
+        <p>You must be <strong>at least 18 years old</strong> to use myboker.org. By creating an account, you confirm you are 18 or older and legally permitted to engage in or track recreational poker play in your jurisdiction. If we learn that an account was created by someone under 18, we reserve the right to permanently delete that account without notice.</p>
+
+        <h2>4. What myboker.org is and is not</h2>
+        <p>myboker.org is a <strong>statistical record-keeping tool</strong> for private home poker leagues. It allows league organizers to log buy-ins, cash-outs, and settlements for informational and tracking purposes.</p>
+        <p><strong>We are not:</strong></p>
+        <ul>
+            <li>An online casino or gambling platform</li>
+            <li>A payment processor. We do not hold, transfer, or facilitate the movement of money</li>
+            <li>A financial institution or licensed financial services provider</li>
+            <li>A legal or financial advisor</li>
+        </ul>
+        <p>All real-money transactions occur directly between players, entirely outside of this platform. We bear no responsibility for any debts, payments, disputes, or financial losses that arise between players in your league.</p>
+
+        <h2>5. Your account</h2>
+        <p>You are responsible for:</p>
+        <ul>
+            <li>Keeping your login credentials secure and confidential</li>
+            <li>All activity that occurs under your account</li>
+            <li>Providing a valid, working email address</li>
+            <li>Ensuring your use of the Service complies with these Terms and all applicable laws</li>
+        </ul>
+        <p>You may not create multiple accounts to circumvent a suspension, share your account credentials with others, or use the Service for automated data scraping.</p>
+
+        <h2>6. League owners and data responsibility</h2>
+        <p>If you create a league, you are the league owner and are solely responsible for:</p>
+        <ul>
+            <li>Ensuring that players whose data you enter are participants in your poker league and have agreed to have their results tracked</li>
+            <li>The accuracy of the data you enter into the Service</li>
+            <li>Managing member roles and access appropriately</li>
+            <li>Keeping your league set to <strong>Private</strong> (the default) unless you intend for it to be publicly discoverable</li>
+        </ul>
+        <p>Player display names are arbitrary labels and are not required to be real legal names. However, you must not enter data in a way intended to harm, harass, defame, or identify individuals who have not consented to being tracked.</p>
+
+        <h2>7. Acceptable use</h2>
+        <p>You agree not to use myboker.org to:</p>
+        <ul>
+            <li>Violate any applicable local, provincial, federal, or international law</li>
+            <li>Attempt to gain unauthorized access to another user's account or league data</li>
+            <li>Interfere with, disrupt, or degrade the performance of the Service or its infrastructure</li>
+            <li>Reverse engineer, decompile, or attempt to extract proprietary source code from the Service</li>
+            <li>Track individuals without their knowledge or consent</li>
+            <li>Upload or transmit malicious code, viruses, or other harmful content</li>
+        </ul>
+
+        <h2>8. Financial data disclaimer</h2>
+        <p>Amounts recorded in myboker.org are for <strong>reference and tracking purposes only</strong>. We make no representations about the accuracy, completeness, or legal weight of any financial data entered by users.</p>
+        <p>We are not responsible for any disputes, non-payment, or financial losses arising from information tracked in the Service. Home poker games may be subject to local laws. It is your responsibility to ensure your activities comply with the laws of your jurisdiction.</p>
+
+        <h2>9. Account and data deletion</h2>
+        <p>You may permanently delete your account at any time through account settings. <strong>Deletion is immediate and irreversible.</strong> All personal data associated with your account, all leagues you own, and all associated session and player history will be removed. Members of leagues you own will permanently lose access to that league's data.</p>
+        <p>League owners may also permanently delete individual leagues without deleting their account. This removes all sessions, players, and ledger events for that league. We strongly recommend reviewing your data before deletion, as this action cannot be undone.</p>
+
+        <h2>10. Service availability</h2>
+        <p>myboker.org is provided <strong>as-is</strong> and <strong>free of charge</strong>. We do not guarantee continuous availability, uptime, error-free operation, or data preservation. We may perform maintenance, push updates, or experience outages at any time. We will make reasonable efforts to notify users of planned downtime when possible.</p>
+
+        <h2>11. Intellectual property</h2>
+        <p>The myboker.org software, design, and branding are owned by cedarline.digital. You retain ownership of all data you enter into the Service (league names, player names, session data). You grant us a limited licence to store and display that data for the purpose of providing the Service to you.</p>
+
+        <h2>12. Limitation of liability</h2>
+        <p>To the fullest extent permitted by applicable law, cedarline.digital shall not be liable for any indirect, incidental, special, consequential, or punitive damages arising out of or related to your use of, or inability to use, the Service, including but not limited to loss of data, revenue, or goodwill.</p>
+        <p>Our total aggregate liability to you for any claim arising from these Terms shall not exceed the total amount you have paid us in the twelve months preceding the claim. As the Service is currently free of charge, this limit is <strong>$0 CAD</strong>.</p>
+
+        <h2>13. Suspension and termination</h2>
+        <p>We reserve the right to suspend or permanently terminate any account, at our discretion, for violations of these Terms, abusive behaviour, or any activity that we reasonably believe poses a risk to the Service or other users. We will make reasonable efforts to notify affected users unless doing so would compromise security or is prohibited by law.</p>
+
+        <h2>14. Changes to these Terms</h2>
+        <p>We may update these Terms at any time. When we do, we will update the effective date at the top of this page. Continued use of myboker.org after changes are posted constitutes your acceptance of the revised Terms. If changes are material, we will make reasonable efforts to inform users.</p>
+
+        <h2>15. Governing law</h2>
+        <p>These Terms are governed by and construed in accordance with the laws of the Province of British Columbia and the federal laws of Canada applicable therein, without regard to conflict of law principles. You agree that any dispute arising under these Terms shall be subject to the exclusive jurisdiction of the courts of British Columbia.</p>
+
+        <h2>16. Contact</h2>
+        <p>Questions about these Terms:</p>
+        <p>
+            <strong>cedarline.digital</strong><br>
+            British Columbia, Canada<br>
+            <a href="mailto:support@cedarline.digital">support@cedarline.digital</a>
+        </p>
+
+    </div><!-- /.legal-doc__body -->
+</div><!-- /.legal-doc -->
+
+{% endblock %}

From cae60c9305c5003aae5b6c11932b18c494d64004 Mon Sep 17 00:00:00 2001
From: SowinskiBraeden <braeden@sowinski.dev>
Date: Sat, 27 Jun 2026 13:16:48 -0700
Subject: [PATCH 67/83] update email header

---
 emails.py | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/emails.py b/emails.py
index 5e68be0..477b4eb 100644
--- a/emails.py
+++ b/emails.py
@@ -72,7 +72,12 @@ def _html_email(title: str, intro: str, cta_label: str | None = None, cta_url: s
           <table role="presentation" width="100%" cellspacing="0" cellpadding="0" style="max-width:560px;background:#202129;border:1px solid #313442;border-radius:10px;overflow:hidden;">
             <tr>
               <td style="padding:28px 32px 10px;">
-                <div style="font:800 18px Arial,sans-serif;color:#f5f7fb;">myboker<span style="color:#9b8cf0;">.org</span></div>
+                <table role="presentation" cellspacing="0" cellpadding="0">
+                  <tr>
+                    <td width="32" height="32" style="background:#1e1533;border:1px solid #3d3260;border-radius:7px;text-align:center;vertical-align:middle;font-size:15px;color:#9b8cf0;font-family:Arial,sans-serif;">&#9830;</td>
+                    <td style="padding-left:10px;vertical-align:middle;font:700 17px/1 Arial,sans-serif;color:#f5f7fb;letter-spacing:-0.3px;">myboker<span style="color:#9b8cf0;">.org</span></td>
+                  </tr>
+                </table>
               </td>
             </tr>
             <tr>

From 48ad7fe1a6c74fdf9d959c83faafeaf59beb1b47 Mon Sep 17 00:00:00 2001
From: SowinskiBraeden <braeden@sowinski.dev>
Date: Sat, 27 Jun 2026 14:14:57 -0700
Subject: [PATCH 68/83] actually add seasons

---
 config.py                            |   2 +-
 league_repositories.py               |  73 ++++++++
 routes/leagues.py                    | 268 ++++++++++++++++++++++++++-
 static/css/style.css                 |  25 +++
 templates/_league_sidebar.html       |   9 +
 templates/league_dashboard.html      |  16 ++
 templates/league_leaderboard.html    |  12 ++
 templates/league_seasons.html        | 262 ++++++++++++++++++++++++++
 templates/league_session_detail.html |  11 ++
 templates/league_session_view.html   |   2 +-
 templates/league_sessions.html       |  30 ++-
 11 files changed, 700 insertions(+), 10 deletions(-)
 create mode 100644 templates/league_seasons.html

diff --git a/config.py b/config.py
index fa31513..2cf8a04 100644
--- a/config.py
+++ b/config.py
@@ -9,7 +9,7 @@ DATA_PATH = BASE_DIR / "data" / "entries.csv"
 DEFAULT_DATABASE_URL = f"sqlite:///{BASE_DIR / 'data' / 'boker-dev.sqlite3'}"
 
 ELIGIBLE_MIN_SESSIONS = 3
-APP_VERSION = "2.5.17"
+APP_VERSION = "2.5.18"
 
 
 def load_local_env(env_path: Path) -> None:
diff --git a/league_repositories.py b/league_repositories.py
index 0665a67..dbc53e2 100644
--- a/league_repositories.py
+++ b/league_repositories.py
@@ -375,3 +375,76 @@ def transfer_league_ownership(
     new_owner.role = "owner"
     league.created_by_user_id = new_owner_user_id
     return current_owner, new_owner
+
+
+# ---------------------------------------------------------------------------
+# Seasons
+# ---------------------------------------------------------------------------
+
+def list_seasons_for_league(league_id: str, include_archived: bool = False) -> list[Season]:
+    q = Season.query.filter_by(league_id=league_id)
+    if not include_archived:
+        q = q.filter(Season.archived_at.is_(None))
+    return q.order_by(Season.sort_order.asc(), Season.created_at.asc()).all()
+
+
+def find_season(league_id: str, season_id: str) -> Season | None:
+    return Season.query.filter_by(league_id=league_id, id=season_id).one_or_none()
+
+
+def update_season(
+    season: Season,
+    name: str,
+    start_date: date | None = None,
+    end_date: date | None = None,
+) -> Season:
+    season.name = name.strip()
+    season.start_date = start_date
+    season.end_date = end_date
+    return season
+
+
+def archive_season(season: Season) -> Season:
+    from datetime import datetime, timezone
+    season.archived_at = datetime.now(timezone.utc)
+    return season
+
+
+def unarchive_season(season: Season) -> Season:
+    season.archived_at = None
+    return season
+
+
+def delete_season(season: Season) -> None:
+    PokerSession.query.filter_by(season_id=season.id).update({"season_id": None})
+    db.session.delete(season)
+
+
+def auto_assign_sessions_to_seasons(league_id: str) -> int:
+    """Assign unassigned sessions to seasons based on date ranges.
+
+    Only seasons with both start_date and end_date set are considered.
+    Sessions with exactly one matching season are assigned; sessions that
+    match zero or multiple seasons are left untouched (caller decides).
+    Returns the number of sessions assigned.
+    """
+    eligible_seasons = [
+        s for s in list_seasons_for_league(league_id, include_archived=False)
+        if s.start_date is not None and s.end_date is not None
+    ]
+    if not eligible_seasons:
+        return 0
+
+    unassigned = PokerSession.query.filter_by(
+        league_id=league_id, season_id=None
+    ).all()
+    assigned = 0
+    for session in unassigned:
+        matches = [
+            s for s in eligible_seasons
+            if s.start_date <= session.session_date <= s.end_date
+        ]
+        if len(matches) == 1:
+            session.season_id = matches[0].id
+            assigned += 1
+    return assigned
diff --git a/routes/leagues.py b/routes/leagues.py
index adc2fba..6432268 100644
--- a/routes/leagues.py
+++ b/routes/leagues.py
@@ -307,7 +307,11 @@ def leaderboard(league_ref: str):
         return redirect(url_for("public.home"))
 
     from ledger_repositories import list_event_rows_for_league
-    from league_repositories import list_players_for_league, user_has_league_role
+    from league_repositories import (
+        list_players_for_league,
+        list_seasons_for_league,
+        user_has_league_role,
+    )
 
     league, resp = get_league_with_visibility_gate(league_ref)
     if resp:
@@ -319,6 +323,25 @@ def leaderboard(league_ref: str):
     all_sessions = build_session_summaries(list_event_rows_for_league(league.id))
     ordered_sessions = sorted(all_sessions, key=session_sort_key)
 
+    # Season filter: restrict to sessions belonging to a specific season.
+    seasons = list_seasons_for_league(league.id)
+    selected_season_id = request.args.get("season", "").strip()
+    selected_season = None
+    if selected_season_id:
+        from league_repositories import find_season, list_sessions_for_league
+        selected_season = find_season(league.id, selected_season_id)
+        if selected_season:
+            from ledger_repositories import session_event_ref
+            season_db_sessions = list_sessions_for_league(league.id)
+            season_refs = {
+                session_event_ref(s)
+                for s in season_db_sessions
+                if s.season_id == selected_season_id
+            }
+            ordered_sessions = [s for s in ordered_sessions if s.session_id in season_refs]
+        else:
+            selected_season_id = ""
+
     session_ids = [session.session_id for session in ordered_sessions]
     selected_session_id = request.args.get("through_session", "").strip()
     mode = request.args.get("mode", "eligible").strip()
@@ -390,7 +413,7 @@ def leaderboard(league_ref: str):
         total_session_count=len(all_sessions),
         cash_paid_out_cents=cash_paid_out_cents,
         chart_data=chart_data,
-        available_sessions=all_sessions,
+        available_sessions=ordered_sessions,
         selected_session_id=selected_session_id,
         selected_session_label=(label if selected_session_id else "Latest session"),
         selected_session_date=(
@@ -406,6 +429,9 @@ def leaderboard(league_ref: str):
         },
         can_manage=can_manage,
         is_owner=is_owner,
+        seasons=seasons,
+        selected_season=selected_season,
+        selected_season_id=selected_season_id,
     )
 
 
@@ -759,6 +785,7 @@ def sessions(league_ref: str):
     from ledger_repositories import append_ledger_event
     from league_repositories import (
         create_poker_session,
+        list_seasons_for_league,
         list_sessions_for_league,
         user_has_league_role,
     )
@@ -777,6 +804,7 @@ def sessions(league_ref: str):
         "label": request.form.get("label", "").strip(),
         "notes": request.form.get("notes", "").strip(),
         "status": request.form.get("status", "open").strip(),
+        "season_id": request.form.get("season_id", "").strip(),
     }
 
     if request.method == "POST":
@@ -786,9 +814,23 @@ def sessions(league_ref: str):
             flash("Session date must be a valid date.", "error")
         else:
             status = "closed" if form["status"] == "closed" else "open"
+            season_id = form["season_id"] or None
+            if season_id is None:
+                from league_repositories import auto_assign_sessions_to_seasons as _auto
+                # try auto-assign: create the session first, then let the
+                # function match it; we pass a temporary session date check inline
+                from league_repositories import list_seasons_for_league as _ls
+                eligible = [
+                    s for s in _ls(league.id, include_archived=False)
+                    if s.start_date and s.end_date
+                    and s.start_date <= session_date <= s.end_date
+                ]
+                if len(eligible) == 1:
+                    season_id = eligible[0].id
             session = create_poker_session(
                 league.id,
                 session_date,
+                season_id=season_id,
                 status=status,
             )
             session.label = form["label"] or None
@@ -826,6 +868,17 @@ def sessions(league_ref: str):
         for sm in summaries
         if sm.session_id in ref_to_db_id
     }
+    seasons = list_seasons_for_league(league.id)
+    season_map = {s.id: s for s in seasons}
+
+    selected_season_id = request.args.get("season", "").strip()
+    selected_season = season_map.get(selected_season_id) if selected_season_id else None
+    if selected_season:
+        display_sessions = [s for s in all_sessions if s.season_id == selected_season_id]
+    else:
+        selected_season_id = ""
+        display_sessions = all_sessions
+
     empty_count = sum(
         1 for s in all_sessions
         if s.id not in db_id_to_summary or not db_id_to_summary[s.id].entries
@@ -834,12 +887,17 @@ def sessions(league_ref: str):
     return render_template(
         "league_sessions.html",
         league=league,
-        sessions=all_sessions,
+        sessions=display_sessions,
+        all_session_count=len(all_sessions),
         db_id_to_summary=db_id_to_summary,
         form=form,
         can_manage=can_manage,
         is_owner=is_owner,
         empty_count=empty_count,
+        seasons=seasons,
+        season_map=season_map,
+        selected_season=selected_season,
+        selected_season_id=selected_season_id,
     )
 
 
@@ -916,6 +974,7 @@ def edit_session(league_ref: str, session_id: str):
     new_label = request.form.get("label", "").strip() or None
     new_notes = request.form.get("notes", "").strip() or None
     new_date_str = request.form.get("session_date", "").strip()
+    new_season_id = request.form.get("season_id", "").strip() or None
 
     try:
         new_date = date.fromisoformat(new_date_str)
@@ -933,8 +992,14 @@ def edit_session(league_ref: str, session_id: str):
         session.sequence_on_date = int(max_seq or 0) + 1
         session.session_date = new_date
 
+    if new_season_id is not None:
+        from league_repositories import find_season
+        valid = find_season(league.id, new_season_id)
+        new_season_id = valid.id if valid else None
+
     session.label = new_label
     session.notes = new_notes
+    session.season_id = new_season_id
     db.session.commit()
     flash("Session updated.", "success")
     return redirect(url_for("leagues.session_detail", league_ref=league.url_ref, session_id=session_id))
@@ -951,6 +1016,7 @@ def session_detail(league_ref: str, session_id: str):
     from league_repositories import (
         find_session_for_league,
         list_players_for_league,
+        list_seasons_for_league,
         user_has_league_role,
     )
 
@@ -1012,6 +1078,7 @@ def session_detail(league_ref: str, session_id: str):
     summary = summaries[0] if summaries else empty_session_summary(session)
     all_rows = list_all_event_rows_for_session(league.id, session.id)
 
+    seasons = list_seasons_for_league(league.id)
     return render_template(
         "league_session_detail.html",
         league=league,
@@ -1024,6 +1091,7 @@ def session_detail(league_ref: str, session_id: str):
         can_manage=can_manage,
         is_owner=is_owner,
         session_label=session_label,
+        seasons=seasons,
     )
 
 
@@ -1035,7 +1103,7 @@ def session_public_view(league_ref: str, session_id: str):
 
     from charts import session_breakdown_series
     from ledger_repositories import list_event_rows_for_league, list_event_rows_for_session
-    from league_repositories import find_league_by_public_key, find_session_for_league, list_sessions_for_league, user_has_league_role
+    from league_repositories import find_league_by_public_key, find_season, find_session_for_league, list_sessions_for_league, user_has_league_role
 
     _slug, public_key = split_league_ref(league_ref)
     league = find_league_by_public_key(public_key)
@@ -1078,6 +1146,8 @@ def session_public_view(league_ref: str, session_id: str):
     prev_summary = all_sessions[chrono_idx - 1] if chrono_idx > 0 else None
     next_summary = all_sessions[chrono_idx + 1] if chrono_idx < len(all_sessions) - 1 else None
 
+    season = find_season(league.id, session.season_id) if session.season_id else None
+
     return render_template(
         "league_session_view.html",
         league=league,
@@ -1091,6 +1161,7 @@ def session_public_view(league_ref: str, session_id: str):
         next_session_id=ref_to_db_id.get(next_summary.session_id) if next_summary else None,
         can_manage=can_manage,
         is_owner=is_owner,
+        season=season,
     )
 
 
@@ -1137,6 +1208,193 @@ def update_session_status(league_ref: str, session_id: str, status: str, message
     return redirect(url_for("leagues.sessions", **league_url_values(league)))
 
 
+@leagues_bp.route("/l/<league_ref>/seasons", methods=["GET", "POST"])
+def seasons(league_ref: str):
+    if not db_ready():
+        flash("League database is not available.", "error")
+        return redirect(url_for("public.home"))
+
+    from league_repositories import (
+        create_season,
+        list_seasons_for_league,
+        user_has_league_role,
+    )
+
+    if request.method == "POST":
+        league = require_league(league_ref, {"owner", "manager"})
+    else:
+        league, resp = get_league_with_visibility_gate(league_ref)
+        if resp:
+            return resp
+
+    user_id = current_user_id() or ""
+    can_manage = user_has_league_role(user_id, league.id, {"owner", "manager"})
+    is_owner = user_has_league_role(user_id, league.id, {"owner"})
+
+    name = request.form.get("name", "").strip()
+    start_raw = request.form.get("start_date", "").strip()
+    end_raw = request.form.get("end_date", "").strip()
+
+    if request.method == "POST":
+        if not name:
+            flash("Season name is required.", "error")
+        else:
+            try:
+                start_date = date.fromisoformat(start_raw) if start_raw else None
+                end_date = date.fromisoformat(end_raw) if end_raw else None
+            except ValueError:
+                flash("Invalid date format.", "error")
+                start_date = end_date = None
+            else:
+                existing = list_seasons_for_league(league.id, include_archived=True)
+                create_season(
+                    league.id,
+                    name,
+                    start_date=start_date,
+                    end_date=end_date,
+                    sort_order=len(existing),
+                )
+                db.session.commit()
+                flash(f"Season \"{name}\" created.", "success")
+                return redirect(url_for("leagues.seasons", **league_url_values(league)))
+
+    active_seasons = list_seasons_for_league(league.id, include_archived=False)
+    archived_seasons = list_seasons_for_league(league.id, include_archived=True)
+    archived_seasons = [s for s in archived_seasons if s.archived_at is not None]
+    return render_template(
+        "league_seasons.html",
+        league=league,
+        active_seasons=active_seasons,
+        archived_seasons=archived_seasons,
+        form={
+            "name": name if request.method == "POST" else "",
+            "start_date": start_raw if request.method == "POST" else "",
+            "end_date": end_raw if request.method == "POST" else "",
+        },
+        can_manage=can_manage,
+        is_owner=is_owner,
+    )
+
+
+@leagues_bp.post("/l/<league_ref>/seasons/auto-assign")
+@login_required
+def auto_assign_seasons(league_ref: str):
+    if not db_ready():
+        flash("League database is not available.", "error")
+        return redirect(url_for("public.home"))
+
+    from league_repositories import auto_assign_sessions_to_seasons
+
+    league = require_league(league_ref, {"owner", "manager"})
+    count = auto_assign_sessions_to_seasons(league.id)
+    db.session.commit()
+    if count:
+        flash(f"Assigned {count} session{'s' if count != 1 else ''} to seasons.", "success")
+    else:
+        flash("No sessions could be auto-assigned. Check that your seasons have start and end dates set, and that unassigned sessions fall within exactly one season.", "info")
+    return redirect(url_for("leagues.seasons", **league_url_values(league)))
+
+
+@leagues_bp.post("/l/<league_ref>/seasons/<season_id>/update")
+@login_required
+def update_season(league_ref: str, season_id: str):
+    if not db_ready():
+        flash("League database is not available.", "error")
+        return redirect(url_for("public.home"))
+
+    from league_repositories import find_season, update_season as repo_update_season
+
+    league = require_league(league_ref, {"owner", "manager"})
+    season = find_season(league.id, season_id)
+    if season is None:
+        flash("Season not found.", "error")
+        return redirect(url_for("leagues.seasons", **league_url_values(league)))
+
+    name = request.form.get("name", "").strip()
+    start_raw = request.form.get("start_date", "").strip()
+    end_raw = request.form.get("end_date", "").strip()
+
+    if not name:
+        flash("Season name is required.", "error")
+        return redirect(url_for("leagues.seasons", **league_url_values(league)))
+
+    try:
+        start_date = date.fromisoformat(start_raw) if start_raw else None
+        end_date = date.fromisoformat(end_raw) if end_raw else None
+    except ValueError:
+        flash("Invalid date format.", "error")
+        return redirect(url_for("leagues.seasons", **league_url_values(league)))
+
+    repo_update_season(season, name, start_date=start_date, end_date=end_date)
+    db.session.commit()
+    flash(f"Season \"{name}\" updated.", "success")
+    return redirect(url_for("leagues.seasons", **league_url_values(league)))
+
+
+@leagues_bp.post("/l/<league_ref>/seasons/<season_id>/archive")
+@login_required
+def archive_season(league_ref: str, season_id: str):
+    if not db_ready():
+        flash("League database is not available.", "error")
+        return redirect(url_for("public.home"))
+
+    from league_repositories import archive_season as repo_archive, find_season
+
+    league = require_league(league_ref, {"owner", "manager"})
+    season = find_season(league.id, season_id)
+    if season is None:
+        flash("Season not found.", "error")
+        return redirect(url_for("leagues.seasons", **league_url_values(league)))
+
+    repo_archive(season)
+    db.session.commit()
+    flash(f"Season \"{season.name}\" archived.", "success")
+    return redirect(url_for("leagues.seasons", **league_url_values(league)))
+
+
+@leagues_bp.post("/l/<league_ref>/seasons/<season_id>/unarchive")
+@login_required
+def unarchive_season(league_ref: str, season_id: str):
+    if not db_ready():
+        flash("League database is not available.", "error")
+        return redirect(url_for("public.home"))
+
+    from league_repositories import find_season, unarchive_season as repo_unarchive
+
+    league = require_league(league_ref, {"owner", "manager"})
+    season = find_season(league.id, season_id)
+    if season is None:
+        flash("Season not found.", "error")
+        return redirect(url_for("leagues.seasons", **league_url_values(league)))
+
+    repo_unarchive(season)
+    db.session.commit()
+    flash(f"Season \"{season.name}\" restored.", "success")
+    return redirect(url_for("leagues.seasons", **league_url_values(league)))
+
+
+@leagues_bp.post("/l/<league_ref>/seasons/<season_id>/delete")
+@login_required
+def delete_season(league_ref: str, season_id: str):
+    if not db_ready():
+        flash("League database is not available.", "error")
+        return redirect(url_for("public.home"))
+
+    from league_repositories import delete_season as repo_delete, find_season
+
+    league = require_league(league_ref, {"owner", "manager"})
+    season = find_season(league.id, season_id)
+    if season is None:
+        flash("Season not found.", "error")
+        return redirect(url_for("leagues.seasons", **league_url_values(league)))
+
+    name = season.name
+    repo_delete(season)
+    db.session.commit()
+    flash(f"Season \"{name}\" deleted. Sessions in this season were unassigned.", "success")
+    return redirect(url_for("leagues.seasons", **league_url_values(league)))
+
+
 @leagues_bp.route("/l/<league_ref>/settings", methods=["GET", "POST"])
 @login_required
 def league_settings(league_ref: str):
@@ -1194,7 +1452,7 @@ def league_settings(league_ref: str):
     from league_repositories import list_members_for_league
 
     members = list_members_for_league(league.id)
-    return render_template("league_settings.html", league=league, form=form, is_owner=True, members=members)
+    return render_template("league_settings.html", league=league, form=form, is_owner=True, can_manage=True, members=members)
 
 
 @leagues_bp.post("/l/<league_ref>/settings/invite")
diff --git a/static/css/style.css b/static/css/style.css
index 8310268..48d7c58 100644
--- a/static/css/style.css
+++ b/static/css/style.css
@@ -2449,6 +2449,21 @@ select.control { cursor: pointer; }
   background: var(--field);
 }
 
+.season-tag {
+  display: inline-flex;
+  align-items: center;
+  padding: 1px 7px;
+  border-radius: 20px;
+  border: 1px solid color-mix(in srgb, var(--accent) 40%, transparent);
+  background: color-mix(in srgb, var(--accent) 10%, transparent);
+  color: var(--accent);
+  font-size: 11px;
+  font-weight: 600;
+  letter-spacing: .02em;
+  vertical-align: middle;
+  margin-left: 4px;
+}
+
 /* Session list row with left accent */
 .session-row {
   display: flex;
@@ -4814,6 +4829,16 @@ select.control { cursor: pointer; }
 }
 .db-nav-tile--ledger:hover { border-left-color: rgba(224,177,92,.5); }
 
+.db-nav-tile--seasons {
+  border-left: 3px solid rgba(155,140,240,.28);
+}
+.db-nav-tile--seasons .db-nav-tile__icon {
+  background: rgba(155,140,240,.1);
+  border: 1px solid rgba(155,140,240,.24);
+  color: var(--accent);
+}
+.db-nav-tile--seasons:hover { border-left-color: rgba(155,140,240,.55); }
+
 /* Live tile overrides the sessions color */
 .db-nav-tile--sessions.db-nav-tile--live {
   border-left-color: rgba(111,192,147,.55);
diff --git a/templates/_league_sidebar.html b/templates/_league_sidebar.html
index 81bfec6..fd67a05 100644
--- a/templates/_league_sidebar.html
+++ b/templates/_league_sidebar.html
@@ -51,6 +51,15 @@
             <span>Leaderboard</span>
         </a>
 
+        <a class="sidebar__link {{ 'is-active' if request.endpoint == 'leagues.seasons' }}"
+           href="{{ url_for('leagues.seasons', league_ref=league.url_ref) }}">
+            <svg viewBox="0 0 16 16" fill="none" aria-hidden="true">
+                <circle cx="8" cy="8" r="6" stroke="currentColor" stroke-width="1.4"/>
+                <path d="M8 4v4l3 2" stroke="currentColor" stroke-width="1.4" stroke-linecap="round" stroke-linejoin="round"/>
+            </svg>
+            <span>Seasons</span>
+        </a>
+
         {% if can_manage is defined and can_manage %}
         <a class="sidebar__link {{ 'is-active' if request.endpoint == 'leagues.ledger' }}"
            href="{{ url_for('leagues.ledger', league_ref=league.url_ref) }}">
diff --git a/templates/league_dashboard.html b/templates/league_dashboard.html
index a541ce8..3cbb193 100644
--- a/templates/league_dashboard.html
+++ b/templates/league_dashboard.html
@@ -307,6 +307,22 @@
         <span class="db-nav-tile__arrow">→</span>
     </a>
 
+    <a class="db-nav-tile db-nav-tile--seasons" href="{{ url_for('leagues.seasons', league_ref=league.url_ref) }}">
+        <div class="db-nav-tile__icon">
+            <svg width="22" height="22" viewBox="0 0 24 24" fill="none" aria-hidden="true">
+                <circle cx="12" cy="12" r="9" stroke="currentColor" stroke-width="1.6"/>
+                <path d="M12 7v5l3.5 3" stroke="currentColor" stroke-width="1.6" stroke-linecap="round" stroke-linejoin="round"/>
+            </svg>
+        </div>
+        <div class="db-nav-tile__body">
+            <div class="db-nav-tile__title-row">
+                <strong class="db-nav-tile__title">Seasons</strong>
+            </div>
+            <p class="db-nav-tile__desc">Browse sessions by season, view season standings, and manage date ranges.</p>
+        </div>
+        <span class="db-nav-tile__arrow">→</span>
+    </a>
+
     {% if can_manage %}
     <a class="db-nav-tile db-nav-tile--ledger" href="{{ url_for('leagues.ledger', league_ref=league.url_ref) }}">
         <div class="db-nav-tile__icon">
diff --git a/templates/league_leaderboard.html b/templates/league_leaderboard.html
index 7d6fa2d..1669106 100644
--- a/templates/league_leaderboard.html
+++ b/templates/league_leaderboard.html
@@ -64,8 +64,20 @@
         </p>
     </div>
     <div class="toolbar__right">
+        {% if seasons %}
+        <form class="session-filter-form" method="get" style="margin-right:8px;">
+            <input type="hidden" name="mode" value="{{ mode }}">
+            <select class="session-filter-select" name="season" onchange="this.form.submit()">
+                <option value="">All seasons</option>
+                {% for s in seasons %}
+                <option value="{{ s.id }}" {{ 'selected' if selected_season_id == s.id else '' }}>{{ s.name }}</option>
+                {% endfor %}
+            </select>
+        </form>
+        {% endif %}
         <form class="session-filter-form" method="get">
             <input type="hidden" name="mode" value="{{ mode }}">
+            {% if selected_season_id %}<input type="hidden" name="season" value="{{ selected_season_id }}">{% endif %}
             <select class="session-filter-select" name="through_session" onchange="this.form.submit()">
                 <option value="">Latest session</option>
                 {% for s in available_sessions %}
diff --git a/templates/league_seasons.html b/templates/league_seasons.html
new file mode 100644
index 0000000..0f00152
--- /dev/null
+++ b/templates/league_seasons.html
@@ -0,0 +1,262 @@
+{% extends "base.html" %}
+{% block title %}Seasons · {{ league.name }} · myboker.org{% endblock %}
+{% block sidebar %}{% include "_league_sidebar.html" %}{% endblock %}
+{% block page_class %}page--app{% endblock %}
+{% block content %}
+
+<div class="page-header">
+    <div>
+        <h1 class="page-header__title">Seasons</h1>
+        <p class="page-header__sub">Organise sessions into named seasons for {{ league.name }}</p>
+    </div>
+</div>
+
+<div class="stack">
+
+    {% if can_manage %}
+    {% set has_dated_seasons = active_seasons | selectattr('start_date') | list | length > 0 %}
+    {% if has_dated_seasons %}
+    <div class="panel" style="display:flex;align-items:center;justify-content:space-between;padding:16px 20px;">
+        <div>
+            <p class="panel__title" style="margin:0;">Auto-assign sessions</p>
+            <p class="muted-text" style="margin:4px 0 0;font-size:13px;">Assign unassigned sessions to seasons based on their date. Sessions that match zero or multiple seasons are skipped.</p>
+        </div>
+        <form method="post" action="{{ url_for('leagues.auto_assign_seasons', league_ref=league.url_ref) }}" style="margin:0;flex-shrink:0;margin-left:20px;">
+            <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
+            <button class="btn btn--ghost btn--sm" type="submit">Auto-assign</button>
+        </form>
+    </div>
+    {% endif %}
+
+    <form class="panel form-card" method="post">
+        <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
+        <div>
+            <p class="eyebrow">Seasons</p>
+            <h2 class="panel__title" style="margin-top:4px;">New season</h2>
+        </div>
+        <div class="session-create-row">
+            <label>
+                <span>Name</span>
+                <input type="text" name="name" value="{{ form.name or '' }}" placeholder="e.g. Season 1" required>
+            </label>
+            <label>
+                <span>Start date <span class="form-opt-hint">(optional)</span></span>
+                <input type="date" name="start_date" value="{{ form.start_date or '' }}">
+            </label>
+            <label>
+                <span>End date <span class="form-opt-hint">(optional)</span></span>
+                <input type="date" name="end_date" value="{{ form.end_date or '' }}">
+            </label>
+        </div>
+        <div>
+            <button class="btn btn--primary" type="submit">Create season</button>
+        </div>
+    </form>
+    {% endif %}{# can_manage #}
+
+    <div class="panel">
+        <div class="panel__head">
+            <div>
+                <p class="kicker" style="margin:0;">Active</p>
+                <h2 class="panel__title">Current seasons</h2>
+            </div>
+            <span class="panel__tag">{{ active_seasons|length }} season{{ 's' if active_seasons|length != 1 else '' }}</span>
+        </div>
+        {% if active_seasons %}
+        <div>
+            {% for season in active_seasons %}
+            <div class="session-row session-row--closed">
+                <div class="session-row__info">
+                    <div class="session-row__text">
+                        <div class="session-row__title">
+                            <a href="{{ url_for('leagues.sessions', league_ref=league.url_ref, season=season.id) }}">{{ season.name }}</a>
+                        </div>
+                        <div class="session-row__meta">
+                            {% if season.start_date %}
+                            <span>{{ season.start_date.strftime('%b %-d, %Y') }}</span>
+                            {% endif %}
+                            {% if season.start_date and season.end_date %}
+                            <span>—</span>
+                            {% endif %}
+                            {% if season.end_date %}
+                            <span>{{ season.end_date.strftime('%b %-d, %Y') }}</span>
+                            {% endif %}
+                            {% if not season.start_date and not season.end_date %}
+                            <span class="muted-text">No dates set</span>
+                            {% endif %}
+                        </div>
+                    </div>
+                </div>
+                {% if can_manage %}
+                <div class="session-row__actions">
+                    <button class="btn btn--ghost btn--sm" type="button"
+                        data-modal="modal-edit-season"
+                        data-season-id="{{ season.id }}"
+                        data-season-name="{{ season.name }}"
+                        data-season-start="{{ season.start_date.isoformat() if season.start_date else '' }}"
+                        data-season-end="{{ season.end_date.isoformat() if season.end_date else '' }}">Edit</button>
+                    <form method="post" action="{{ url_for('leagues.archive_season', league_ref=league.url_ref, season_id=season.id) }}" style="margin:0;">
+                        <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
+                        <button class="btn btn--ghost btn--sm" type="submit">Archive</button>
+                    </form>
+                </div>
+                {% endif %}
+            </div>
+            {% endfor %}
+        </div>
+        {% else %}
+        <div class="empty-panel">
+            <p class="muted-text">No active seasons. Create one above.</p>
+        </div>
+        {% endif %}
+    </div>
+
+    {% if archived_seasons %}
+    <div class="panel">
+        <div class="panel__head">
+            <div>
+                <p class="kicker" style="margin:0;">Archived</p>
+                <h2 class="panel__title">Past seasons</h2>
+            </div>
+            <span class="panel__tag">{{ archived_seasons|length }}</span>
+        </div>
+        <div>
+            {% for season in archived_seasons %}
+            <div class="session-row session-row--closed" style="opacity:.7;">
+                <div class="session-row__info">
+                    <div class="session-row__text">
+                        <div class="session-row__title">{{ season.name }}</div>
+                        <div class="session-row__meta">
+                            {% if season.start_date %}
+                            <span>{{ season.start_date.strftime('%b %-d, %Y') }}</span>
+                            {% endif %}
+                            {% if season.start_date and season.end_date %}
+                            <span>—</span>
+                            {% endif %}
+                            {% if season.end_date %}
+                            <span>{{ season.end_date.strftime('%b %-d, %Y') }}</span>
+                            {% endif %}
+                            {% if not season.start_date and not season.end_date %}
+                            <span class="muted-text">No dates set</span>
+                            {% endif %}
+                        </div>
+                    </div>
+                </div>
+                {% if can_manage %}
+                <div class="session-row__actions">
+                    <form method="post" action="{{ url_for('leagues.unarchive_season', league_ref=league.url_ref, season_id=season.id) }}" style="margin:0;">
+                        <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
+                        <button class="btn btn--ghost btn--sm" type="submit">Restore</button>
+                    </form>
+                    <button class="btn btn--ghost btn--sm" type="button"
+                        data-modal="modal-delete-season"
+                        data-season-id="{{ season.id }}"
+                        data-season-name="{{ season.name }}">Delete</button>
+                </div>
+                {% endif %}
+            </div>
+            {% endfor %}
+        </div>
+    </div>
+    {% endif %}
+
+</div>
+
+{% if can_manage %}
+<!-- Edit season modal -->
+<div class="modal-backdrop" id="modal-edit-season" hidden>
+    <div class="modal-card" role="dialog" aria-modal="true" aria-labelledby="modal-edit-season-title">
+        <div class="modal-card__head">
+            <h2 class="modal-card__title" id="modal-edit-season-title">Edit season</h2>
+            <button class="modal-card__close" type="button" data-close-modal aria-label="Close">&times;</button>
+        </div>
+        <form method="post" id="form-edit-season" action="">
+            <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
+            <div class="modal-card__body">
+                <div class="form-card" style="padding:0;gap:14px;">
+                    <label>
+                        <span>Name</span>
+                        <input type="text" name="name" id="edit-season-name" required>
+                    </label>
+                    <label>
+                        <span>Start date <span class="form-opt-hint">(optional)</span></span>
+                        <input type="date" name="start_date" id="edit-season-start">
+                    </label>
+                    <label>
+                        <span>End date <span class="form-opt-hint">(optional)</span></span>
+                        <input type="date" name="end_date" id="edit-season-end">
+                    </label>
+                </div>
+            </div>
+            <div class="modal-card__foot">
+                <button class="btn btn--primary" type="submit">Save changes</button>
+                <button class="btn btn--ghost" type="button" data-close-modal>Cancel</button>
+            </div>
+        </form>
+    </div>
+</div>
+
+<!-- Delete season confirmation modal -->
+<div class="modal-backdrop" id="modal-delete-season" hidden>
+    <div class="modal-card" role="dialog" aria-modal="true" aria-labelledby="modal-delete-season-title">
+        <div class="modal-card__head">
+            <h2 class="modal-card__title" id="modal-delete-season-title">Delete season</h2>
+            <button class="modal-card__close" type="button" data-close-modal aria-label="Close">&times;</button>
+        </div>
+        <div class="modal-card__body">
+            <p>Permanently delete <strong id="delete-season-name"></strong>? Sessions assigned to this season will not be deleted — they will simply become unassigned. This cannot be undone.</p>
+        </div>
+        <form method="post" id="form-delete-season" action="">
+            <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
+            <div class="modal-card__foot">
+                <button class="btn btn--destructive" type="submit">Delete season</button>
+                <button class="btn btn--ghost" type="button" data-close-modal>Cancel</button>
+            </div>
+        </form>
+    </div>
+</div>
+
+<script>
+(function () {
+    const leagueRef = {{ league.url_ref | tojson }};
+
+    function openModal(id) {
+        document.getElementById(id).hidden = false;
+    }
+    function closeModal(el) {
+        el.closest('.modal-backdrop').hidden = true;
+    }
+
+    document.addEventListener('click', function (e) {
+        if (e.target.matches('[data-close-modal]') || e.target.closest('[data-close-modal]')) {
+            closeModal(e.target.closest('[data-close-modal]') || e.target);
+        }
+        if (e.target.matches('.modal-backdrop')) {
+            e.target.hidden = true;
+        }
+    });
+
+    document.querySelectorAll('[data-modal="modal-edit-season"]').forEach(function (btn) {
+        btn.addEventListener('click', function () {
+            const id = btn.dataset.seasonId;
+            document.getElementById('edit-season-name').value = btn.dataset.seasonName;
+            document.getElementById('edit-season-start').value = btn.dataset.seasonStart || '';
+            document.getElementById('edit-season-end').value = btn.dataset.seasonEnd || '';
+            document.getElementById('form-edit-season').action = '/l/' + leagueRef + '/seasons/' + id + '/update';
+            openModal('modal-edit-season');
+        });
+    });
+
+    document.querySelectorAll('[data-modal="modal-delete-season"]').forEach(function (btn) {
+        btn.addEventListener('click', function () {
+            const id = btn.dataset.seasonId;
+            document.getElementById('delete-season-name').textContent = btn.dataset.seasonName;
+            document.getElementById('form-delete-season').action = '/l/' + leagueRef + '/seasons/' + id + '/delete';
+            openModal('modal-delete-season');
+        });
+    });
+})();
+</script>
+{% endif %}{# can_manage #}
+
+{% endblock %}
diff --git a/templates/league_session_detail.html b/templates/league_session_detail.html
index a10b46d..fcc7d2a 100644
--- a/templates/league_session_detail.html
+++ b/templates/league_session_detail.html
@@ -271,6 +271,17 @@
                     <span>Date</span>
                     <input type="date" name="session_date" value="{{ session_model.session_date.isoformat() }}" required>
                 </label>
+                {% if seasons %}
+                <label>
+                    <span>Season <span class="form-opt-hint">(optional)</span></span>
+                    <select name="season_id">
+                        <option value="">No season</option>
+                        {% for s in seasons %}
+                        <option value="{{ s.id }}" {{ 'selected' if session_model.season_id == s.id else '' }}>{{ s.name }}</option>
+                        {% endfor %}
+                    </select>
+                </label>
+                {% endif %}
                 <label>
                     <span>Label <span class="form-opt-hint">(optional)</span></span>
                     <input type="text" name="label" value="{{ session_model.label or '' }}" placeholder="e.g. Main table">
diff --git a/templates/league_session_view.html b/templates/league_session_view.html
index 510e77b..de0ab18 100644
--- a/templates/league_session_view.html
+++ b/templates/league_session_view.html
@@ -21,7 +21,7 @@
 <div class="hero" style="padding-top:0;">
     <p class="hero__kicker session-number">Session #{{ "%03d"|format(session_number) }}</p>
     <h1 class="hero__title">{{ session_model.display_label }}</h1>
-    <p class="hero__sub">{{ session.entries|length }} player{{ 's' if session.entries|length != 1 else '' }} · <span class="status-badge status-{{ session_model.status }}">{{ session_model.status }}</span></p>
+    <p class="hero__sub">{{ session.entries|length }} player{{ 's' if session.entries|length != 1 else '' }} · <span class="status-badge status-{{ session_model.status }}">{{ session_model.status }}</span>{% if season %} · <a class="season-tag" href="{{ url_for('leagues.sessions', league_ref=league.url_ref, season=session_model.season_id) }}">{{ season.name }}</a>{% endif %}</p>
 </div>
 
 <!-- Recon cards -->
diff --git a/templates/league_sessions.html b/templates/league_sessions.html
index b6c64da..ec9af6c 100644
--- a/templates/league_sessions.html
+++ b/templates/league_sessions.html
@@ -26,6 +26,15 @@
                 <span>Date <span class="info-tip" tabindex="0"><svg width="13" height="13" viewBox="0 0 13 13" fill="none" aria-hidden="true"><circle cx="6.5" cy="6.5" r="5.5" stroke="currentColor" stroke-width="1.2"/><path d="M6.5 6v3.5" stroke="currentColor" stroke-width="1.3" stroke-linecap="round"/><circle cx="6.5" cy="4" r=".7" fill="currentColor"/></svg><span class="info-tip__bubble">The night the game was played. Same-day sessions automatically become S1, S2, etc.</span></span></span>
                 <input type="date" name="session_date" value="{{ form.session_date }}" required>
             </label>
+            <label>
+                <span>Season <span class="form-opt-hint">(optional)</span></span>
+                <select name="season_id">
+                    <option value="">No season</option>
+                    {% for s in seasons %}
+                    <option value="{{ s.id }}" {{ 'selected' if form.season_id == s.id else '' }}>{{ s.name }}</option>
+                    {% endfor %}
+                </select>
+            </label>
             <label>
                 <span>Label <span class="form-opt-hint">(optional)</span> <span class="info-tip" tabindex="0"><svg width="13" height="13" viewBox="0 0 13 13" fill="none" aria-hidden="true"><circle cx="6.5" cy="6.5" r="5.5" stroke="currentColor" stroke-width="1.2"/><path d="M6.5 6v3.5" stroke="currentColor" stroke-width="1.3" stroke-linecap="round"/><circle cx="6.5" cy="4" r=".7" fill="currentColor"/></svg><span class="info-tip__bubble">A short name for this session — 'Main table', 'Side game', etc. Shown in the session list alongside the date.</span></span></span>
                 <input type="text" name="label" value="{{ form.label or '' }}" placeholder="e.g. Main table">
@@ -48,8 +57,19 @@
                 <h2 class="panel__title">All sessions</h2>
             </div>
             <div style="display:flex;align-items:center;gap:8px;">
-                <span class="panel__tag" id="sess-count-label">{{ sessions|length }} total</span>
-                {% if can_manage and empty_count > 0 %}
+                {% if seasons %}
+                <select class="session-filter-select" onchange="if(this.value) window.location=this.value;">
+                    <option value="{{ url_for('leagues.sessions', league_ref=league.url_ref) }}" {{ 'selected' if not selected_season else '' }}>All seasons</option>
+                    {% for s in seasons %}
+                    <option value="{{ url_for('leagues.sessions', league_ref=league.url_ref, season=s.id) }}" {{ 'selected' if selected_season_id == s.id else '' }}>{{ s.name }}</option>
+                    {% endfor %}
+                </select>
+                {% if selected_season %}
+                <a class="btn btn--ghost btn--sm" href="{{ url_for('leagues.sessions', league_ref=league.url_ref) }}">Clear</a>
+                {% endif %}
+                {% endif %}
+                <span class="panel__tag" id="sess-count-label">{{ sessions|length }}{% if selected_season %} / {{ all_session_count }}{% endif %} total</span>
+                {% if can_manage and empty_count > 0 and not selected_season %}
                 <form method="post" action="{{ url_for('leagues.prune_empty_sessions', league_ref=league.url_ref) }}" style="margin:0;">
                     <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
                     <button class="btn btn--ghost btn--sm" type="submit">Prune empty ({{ empty_count }})</button>
@@ -71,8 +91,9 @@
         <div>
             {% for session in sessions %}
             {% set sm = db_id_to_summary.get(session.id) %}
+            {% set season_name = season_map[session.season_id].name if session.season_id and season_map.get(session.season_id) else '' %}
             <div class="session-row session-row--{{ session.status }}"
-                 data-search="{{ (session.display_label ~ ' ' ~ session.session_date.isoformat() ~ ' ' ~ session.session_date.strftime('%B %Y') ~ ' ' ~ (session.notes or '')) | lower }}">
+                 data-search="{{ (session.display_label ~ ' ' ~ session.session_date.isoformat() ~ ' ' ~ session.session_date.strftime('%B %Y') ~ ' ' ~ (session.notes or '') ~ ' ' ~ season_name) | lower }}">
                 <div class="session-row__info">
                     <div class="session-date-block">
                         <span class="session-date-block__mon">{{ session.session_date.strftime('%b') }}</span>
@@ -84,6 +105,9 @@
                         </div>
                         <div class="session-row__meta">
                             <span>S{{ session.sequence_on_date }}</span>
+                            {% if session.season_id and season_map.get(session.season_id) %}
+                            <span class="season-tag">{{ season_map[session.season_id].name }}</span>
+                            {% endif %}
                             {% if sm and sm.entries %}
                             <span>· {{ sm.entries|length }} player{{ 's' if sm.entries|length != 1 else '' }}</span>
                             <span>· {{ sm.total_invested_cents | money }} pot</span>

From 0411a0d0994649466e6c4d97b01ade32bb5eb131 Mon Sep 17 00:00:00 2001
From: SowinskiBraeden <braeden@sowinski.dev>
Date: Sat, 27 Jun 2026 14:20:06 -0700
Subject: [PATCH 69/83] fix bad inputs

---
 config.py                       |  2 +-
 templates/account_settings.html |  5 ++--
 templates/league_seasons.html   | 52 +++++++++++++++------------------
 templates/league_settings.html  |  5 ++--
 4 files changed, 31 insertions(+), 33 deletions(-)

diff --git a/config.py b/config.py
index 2cf8a04..c0ca6b3 100644
--- a/config.py
+++ b/config.py
@@ -9,7 +9,7 @@ DATA_PATH = BASE_DIR / "data" / "entries.csv"
 DEFAULT_DATABASE_URL = f"sqlite:///{BASE_DIR / 'data' / 'boker-dev.sqlite3'}"
 
 ELIGIBLE_MIN_SESSIONS = 3
-APP_VERSION = "2.5.18"
+APP_VERSION = "2.5.19"
 
 
 def load_local_env(env_path: Path) -> None:
diff --git a/templates/account_settings.html b/templates/account_settings.html
index e205e82..fb4eddc 100644
--- a/templates/account_settings.html
+++ b/templates/account_settings.html
@@ -80,7 +80,8 @@
 <div class="modal-backdrop" id="modal-delete-account" hidden>
     <div class="modal-card">
         <div class="modal-card__head">
-            <h2 style="font-size:18px;margin:0;">Delete account</h2>
+            <span class="kicker" style="margin:0;">Account</span>
+            <h2 class="panel__title">Delete account</h2>
         </div>
         <p class="modal-card__text">
             Your account will be <strong>permanently disabled</strong> and all leagues you own will be archived. This cannot be undone.<br><br>
@@ -88,7 +89,7 @@
         </p>
         <form method="post" action="{{ url_for('account.delete_account') }}">
             <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
-            <div style="padding:0 20px 16px;display:grid;gap:10px;">
+            <div class="form-card" style="padding:0 20px 4px;gap:10px;">
                 <input
                     class="modal-confirm-input"
                     type="text"
diff --git a/templates/league_seasons.html b/templates/league_seasons.html
index 0f00152..1384b57 100644
--- a/templates/league_seasons.html
+++ b/templates/league_seasons.html
@@ -167,30 +167,28 @@
 <div class="modal-backdrop" id="modal-edit-season" hidden>
     <div class="modal-card" role="dialog" aria-modal="true" aria-labelledby="modal-edit-season-title">
         <div class="modal-card__head">
-            <h2 class="modal-card__title" id="modal-edit-season-title">Edit season</h2>
-            <button class="modal-card__close" type="button" data-close-modal aria-label="Close">&times;</button>
+            <span class="kicker" style="margin:0;">Season</span>
+            <h2 class="panel__title" id="modal-edit-season-title">Edit season</h2>
         </div>
         <form method="post" id="form-edit-season" action="">
             <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
-            <div class="modal-card__body">
-                <div class="form-card" style="padding:0;gap:14px;">
-                    <label>
-                        <span>Name</span>
-                        <input type="text" name="name" id="edit-season-name" required>
-                    </label>
-                    <label>
-                        <span>Start date <span class="form-opt-hint">(optional)</span></span>
-                        <input type="date" name="start_date" id="edit-season-start">
-                    </label>
-                    <label>
-                        <span>End date <span class="form-opt-hint">(optional)</span></span>
-                        <input type="date" name="end_date" id="edit-season-end">
-                    </label>
-                </div>
+            <div class="form-card" style="padding:0 20px 4px;gap:12px;">
+                <label>
+                    <span>Name</span>
+                    <input type="text" name="name" id="edit-season-name" required>
+                </label>
+                <label>
+                    <span>Start date <span class="form-opt-hint">(optional)</span></span>
+                    <input type="date" name="start_date" id="edit-season-start">
+                </label>
+                <label>
+                    <span>End date <span class="form-opt-hint">(optional)</span></span>
+                    <input type="date" name="end_date" id="edit-season-end">
+                </label>
             </div>
-            <div class="modal-card__foot">
-                <button class="btn btn--primary" type="submit">Save changes</button>
-                <button class="btn btn--ghost" type="button" data-close-modal>Cancel</button>
+            <div class="modal-card__actions">
+                <button class="btn btn--ghost btn--sm" type="button" data-close-modal>Cancel</button>
+                <button class="btn btn--primary btn--sm" type="submit">Save changes</button>
             </div>
         </form>
     </div>
@@ -200,17 +198,15 @@
 <div class="modal-backdrop" id="modal-delete-season" hidden>
     <div class="modal-card" role="dialog" aria-modal="true" aria-labelledby="modal-delete-season-title">
         <div class="modal-card__head">
-            <h2 class="modal-card__title" id="modal-delete-season-title">Delete season</h2>
-            <button class="modal-card__close" type="button" data-close-modal aria-label="Close">&times;</button>
-        </div>
-        <div class="modal-card__body">
-            <p>Permanently delete <strong id="delete-season-name"></strong>? Sessions assigned to this season will not be deleted — they will simply become unassigned. This cannot be undone.</p>
+            <span class="kicker" style="margin:0;">Season</span>
+            <h2 class="panel__title" id="modal-delete-season-title">Delete season</h2>
         </div>
+        <p class="modal-card__text">Permanently delete <strong id="delete-season-name"></strong>? Sessions assigned to this season will not be deleted — they will simply become unassigned. This cannot be undone.</p>
         <form method="post" id="form-delete-season" action="">
             <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
-            <div class="modal-card__foot">
-                <button class="btn btn--destructive" type="submit">Delete season</button>
-                <button class="btn btn--ghost" type="button" data-close-modal>Cancel</button>
+            <div class="modal-card__actions">
+                <button class="btn btn--ghost btn--sm" type="button" data-close-modal>Cancel</button>
+                <button class="btn btn--destructive btn--sm" type="submit">Delete season</button>
             </div>
         </form>
     </div>
diff --git a/templates/league_settings.html b/templates/league_settings.html
index 738bcbd..ee72203 100644
--- a/templates/league_settings.html
+++ b/templates/league_settings.html
@@ -204,7 +204,8 @@
 <div class="modal-backdrop" id="modal-archive" hidden>
     <div class="modal-card">
         <div class="modal-card__head">
-            <h2 style="font-size:18px;margin:0;">Archive league</h2>
+            <span class="kicker" style="margin:0;">Danger zone</span>
+            <h2 class="panel__title">Archive league</h2>
         </div>
         <p class="modal-card__text">
             <strong>{{ league.name }}</strong> will be hidden from your dashboard. All data is preserved and can be recovered by contacting support. This does not delete any sessions or ledger events.<br><br>
@@ -212,7 +213,7 @@
         </p>
         <form method="post" action="{{ url_for('leagues.archive_league', league_ref=league.url_ref) }}">
             <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
-            <div style="padding:0 20px 16px;">
+            <div class="form-card" style="padding:0 20px 4px;">
                 <input
                     class="modal-confirm-input"
                     type="text"

From 42a9595966c2bd310c24b3299d9c231b3980c3cb Mon Sep 17 00:00:00 2001
From: SowinskiBraeden <braeden@sowinski.dev>
Date: Sat, 27 Jun 2026 14:21:55 -0700
Subject: [PATCH 70/83] allow archive season filtering on leaderboard

---
 config.py         | 2 +-
 routes/leagues.py | 6 +++---
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/config.py b/config.py
index c0ca6b3..d4555e2 100644
--- a/config.py
+++ b/config.py
@@ -9,7 +9,7 @@ DATA_PATH = BASE_DIR / "data" / "entries.csv"
 DEFAULT_DATABASE_URL = f"sqlite:///{BASE_DIR / 'data' / 'boker-dev.sqlite3'}"
 
 ELIGIBLE_MIN_SESSIONS = 3
-APP_VERSION = "2.5.19"
+APP_VERSION = "2.5.20"
 
 
 def load_local_env(env_path: Path) -> None:
diff --git a/routes/leagues.py b/routes/leagues.py
index 6432268..0a828fc 100644
--- a/routes/leagues.py
+++ b/routes/leagues.py
@@ -324,7 +324,7 @@ def leaderboard(league_ref: str):
     ordered_sessions = sorted(all_sessions, key=session_sort_key)
 
     # Season filter: restrict to sessions belonging to a specific season.
-    seasons = list_seasons_for_league(league.id)
+    seasons = list_seasons_for_league(league.id, include_archived=True)
     selected_season_id = request.args.get("season", "").strip()
     selected_season = None
     if selected_season_id:
@@ -868,7 +868,7 @@ def sessions(league_ref: str):
         for sm in summaries
         if sm.session_id in ref_to_db_id
     }
-    seasons = list_seasons_for_league(league.id)
+    seasons = list_seasons_for_league(league.id, include_archived=True)
     season_map = {s.id: s for s in seasons}
 
     selected_season_id = request.args.get("season", "").strip()
@@ -1078,7 +1078,7 @@ def session_detail(league_ref: str, session_id: str):
     summary = summaries[0] if summaries else empty_session_summary(session)
     all_rows = list_all_event_rows_for_session(league.id, session.id)
 
-    seasons = list_seasons_for_league(league.id)
+    seasons = list_seasons_for_league(league.id, include_archived=True)
     return render_template(
         "league_session_detail.html",
         league=league,

From 9921e6151545600971edfc4761f33bbeb39372ba Mon Sep 17 00:00:00 2001
From: SowinskiBraeden <braeden@sowinski.dev>
Date: Sat, 27 Jun 2026 14:30:52 -0700
Subject: [PATCH 71/83] seperate delete from archive functions

---
 config.py                       |   2 +-
 league_repositories.py          |  10 +++
 routes/account.py               |  49 ++++++++++++--
 routes/leagues.py               |  23 +++++++
 static/css/style.css            |  11 +++
 templates/account_settings.html | 115 +++++++++++++++++++++++---------
 templates/league_settings.html  |  38 +++++++++++
 7 files changed, 208 insertions(+), 40 deletions(-)

diff --git a/config.py b/config.py
index d4555e2..5aff018 100644
--- a/config.py
+++ b/config.py
@@ -9,7 +9,7 @@ DATA_PATH = BASE_DIR / "data" / "entries.csv"
 DEFAULT_DATABASE_URL = f"sqlite:///{BASE_DIR / 'data' / 'boker-dev.sqlite3'}"
 
 ELIGIBLE_MIN_SESSIONS = 3
-APP_VERSION = "2.5.20"
+APP_VERSION = "2.5.21"
 
 
 def load_local_env(env_path: Path) -> None:
diff --git a/league_repositories.py b/league_repositories.py
index dbc53e2..9f4e5ab 100644
--- a/league_repositories.py
+++ b/league_repositories.py
@@ -420,6 +420,16 @@ def delete_season(season: Season) -> None:
     db.session.delete(season)
 
 
+def delete_league(league: League) -> None:
+    from db_models import LedgerEvent, LeagueMembership, Player, PokerSession, Season
+    LedgerEvent.query.filter_by(league_id=league.id).delete(synchronize_session=False)
+    PokerSession.query.filter_by(league_id=league.id).delete(synchronize_session=False)
+    Player.query.filter_by(league_id=league.id).delete(synchronize_session=False)
+    Season.query.filter_by(league_id=league.id).delete(synchronize_session=False)
+    LeagueMembership.query.filter_by(league_id=league.id).delete(synchronize_session=False)
+    db.session.delete(league)
+
+
 def auto_assign_sessions_to_seasons(league_id: str) -> int:
     """Assign unassigned sessions to seasons based on date ranges.
 
diff --git a/routes/account.py b/routes/account.py
index d82fb22..3511698 100644
--- a/routes/account.py
+++ b/routes/account.py
@@ -352,6 +352,42 @@ def update_password():
     return redirect(url_for("account.settings"))
 
 
+@account_bp.post("/disable")
+@login_required
+def disable_account():
+    if not db_ready():
+        flash("Account database is not available.", "error")
+        return redirect(url_for("account.settings"))
+
+    from db_models import League, User, utc_now
+
+    user = db.session.get(User, current_user_id())
+    if user is None:
+        flash("User not found.", "error")
+        return redirect(url_for("account.settings"))
+
+    confirm = request.form.get("confirm", "").strip()
+    current_password = request.form.get("current_password", "")
+
+    if confirm != "DISABLE":
+        flash("Confirmation text did not match.", "error")
+        return redirect(url_for("account.settings"))
+
+    if not verify_password(user.password_hash, current_password):
+        flash("Password is incorrect.", "error")
+        return redirect(url_for("account.settings"))
+
+    owned_leagues = League.query.filter_by(created_by_user_id=user.id, archived_at=None).all()
+    for league in owned_leagues:
+        league.archived_at = utc_now()
+
+    user.disabled_at = utc_now()
+    db.session.commit()
+    log_user_out()
+    flash("Your account has been disabled.", "success")
+    return redirect(url_for("public.home"))
+
+
 @account_bp.post("/delete")
 @login_required
 def delete_account():
@@ -359,7 +395,8 @@ def delete_account():
         flash("Account database is not available.", "error")
         return redirect(url_for("account.settings"))
 
-    from db_models import League, User, utc_now
+    from db_models import League, LeagueMembership, User, utc_now
+    from league_repositories import delete_league
 
     user = db.session.get(User, current_user_id())
     if user is None:
@@ -377,14 +414,14 @@ def delete_account():
         flash("Password is incorrect.", "error")
         return redirect(url_for("account.settings"))
 
-    owned_leagues = League.query.filter_by(created_by_user_id=user.id, archived_at=None).all()
-    for league in owned_leagues:
-        league.archived_at = utc_now()
+    for league in League.query.filter_by(created_by_user_id=user.id).all():
+        delete_league(league)
 
-    user.disabled_at = utc_now()
+    LeagueMembership.query.filter_by(user_id=user.id).delete(synchronize_session=False)
+    db.session.delete(user)
     db.session.commit()
     log_user_out()
-    flash("Your account has been deleted.", "success")
+    flash("Your account and all data have been permanently deleted.", "success")
     return redirect(url_for("public.home"))
 
 
diff --git a/routes/leagues.py b/routes/leagues.py
index 0a828fc..804121f 100644
--- a/routes/leagues.py
+++ b/routes/leagues.py
@@ -1603,6 +1603,29 @@ def archive_league(league_ref: str):
     return redirect(url_for("leagues.index"))
 
 
+@leagues_bp.post("/l/<league_ref>/delete")
+@login_required
+def delete_league_route(league_ref: str):
+    if not db_ready():
+        flash("League database is not available.", "error")
+        return redirect(url_for("public.home"))
+
+    from league_repositories import delete_league
+
+    league = require_league(league_ref, {"owner"})
+    confirm_name = request.form.get("confirm_name", "").strip()
+
+    if confirm_name != league.name:
+        flash("League name did not match. Deletion cancelled.", "error")
+        return redirect(url_for("leagues.league_settings", league_ref=league_ref))
+
+    league_name = league.name
+    delete_league(league)
+    db.session.commit()
+    flash(f'"{league_name}" and all its data have been permanently deleted.', "success")
+    return redirect(url_for("leagues.index"))
+
+
 @leagues_bp.get("/l/<league_ref>/ledger/export")
 @login_required
 def export_ledger_csv(league_ref: str):
diff --git a/static/css/style.css b/static/css/style.css
index 48d7c58..1710c1a 100644
--- a/static/css/style.css
+++ b/static/css/style.css
@@ -865,6 +865,17 @@ fieldset[disabled] button {
   box-shadow: 0 0 0 3px var(--accent-a22);
 }
 
+/* Custom chevron for all themed selects */
+.form-card select,
+.field-select,
+.session-filter-select {
+  background-image: url("data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' width='12' height='12' viewBox='0 0 12 12' fill='none'%3E%3Cpath d='M2 4l4 4 4-4' stroke='%23999' stroke-width='1.5' stroke-linecap='round' stroke-linejoin='round'/%3E%3C/svg%3E");
+  background-repeat: no-repeat;
+  background-position: right 10px center;
+  padding-right: 30px;
+  cursor: pointer;
+}
+
 /* ================================================================
    TABLE
    ================================================================ */
diff --git a/templates/account_settings.html b/templates/account_settings.html
index fb4eddc..323fa2d 100644
--- a/templates/account_settings.html
+++ b/templates/account_settings.html
@@ -67,16 +67,66 @@
         <div class="panel__body">
             <div class="danger-row">
                 <div>
-                    <strong class="danger-row__title">Delete account</strong>
-                    <p class="muted-text">Permanently disables your account and archives all leagues you own. This cannot be undone.</p>
+                    <strong class="danger-row__title">Disable account</strong>
+                    <p class="muted-text">Disables your account and archives all leagues you own. Your data is preserved — you can sign up again with the same email to restore access.</p>
                 </div>
-                <button class="btn btn--ghost btn--sm" type="button" data-modal="modal-delete-account">Delete account</button>
+                <button class="btn btn--ghost btn--sm" type="button" data-modal="modal-disable-account">Disable account</button>
+            </div>
+            <div class="danger-row">
+                <div>
+                    <strong class="danger-row__title">Delete account</strong>
+                    <p class="muted-text">Permanently deletes your account and all leagues, sessions, and ledger data you own. This cannot be undone.</p>
+                </div>
+                <button class="btn btn--warning btn--sm danger-row__btn" type="button" data-modal="modal-delete-account">Delete account</button>
             </div>
         </div>
     </div>
 
 </div>
 
+<!-- Disable account modal -->
+<div class="modal-backdrop" id="modal-disable-account" hidden>
+    <div class="modal-card">
+        <div class="modal-card__head">
+            <span class="kicker" style="margin:0;">Account</span>
+            <h2 class="panel__title">Disable account</h2>
+        </div>
+        <p class="modal-card__text">
+            Your account will be disabled and all leagues you own will be archived. Your data is preserved — you can sign up again with the same email to restore access.<br><br>
+            Type <strong>DISABLE</strong> and enter your password to confirm.
+        </p>
+        <form method="post" action="{{ url_for('account.disable_account') }}">
+            <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
+            <div class="form-card" style="padding:0 20px 4px;gap:10px;">
+                <input
+                    class="confirm-text-input"
+                    type="text"
+                    name="confirm"
+                    placeholder='Type "DISABLE"'
+                    autocomplete="off"
+                    data-match="DISABLE"
+                    data-submit="disable-confirm-btn"
+                    data-requires-password="disable-password-input"
+                >
+                <input
+                    class="confirm-password-input"
+                    id="disable-password-input"
+                    type="password"
+                    name="current_password"
+                    placeholder="Your password"
+                    autocomplete="current-password"
+                    data-submit="disable-confirm-btn"
+                >
+            </div>
+            <div class="modal-card__actions">
+                <button class="btn btn--ghost btn--sm" type="button" data-close-modal>Cancel</button>
+                <button class="btn btn--sm btn--danger" id="disable-confirm-btn" type="submit" disabled>Disable my account</button>
+            </div>
+        </form>
+    </div>
+</div>
+
+<!-- Delete account modal -->
 <div class="modal-backdrop" id="modal-delete-account" hidden>
     <div class="modal-card">
         <div class="modal-card__head">
@@ -84,36 +134,35 @@
             <h2 class="panel__title">Delete account</h2>
         </div>
         <p class="modal-card__text">
-            Your account will be <strong>permanently disabled</strong> and all leagues you own will be archived. This cannot be undone.<br><br>
+            Your account and all leagues, sessions, and ledger data you own will be <strong>permanently deleted</strong>. This cannot be undone.<br><br>
             Type <strong>DELETE</strong> and enter your password to confirm.
         </p>
         <form method="post" action="{{ url_for('account.delete_account') }}">
             <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
             <div class="form-card" style="padding:0 20px 4px;gap:10px;">
                 <input
-                    class="modal-confirm-input"
+                    class="confirm-text-input"
                     type="text"
                     name="confirm"
                     placeholder='Type "DELETE"'
                     autocomplete="off"
                     data-match="DELETE"
-                    data-target="delete-confirm-btn"
-                    data-also-requires="delete-password-input"
+                    data-submit="delete-confirm-btn"
+                    data-requires-password="delete-password-input"
                 >
                 <input
-                    class="modal-password-input"
+                    class="confirm-password-input"
                     id="delete-password-input"
                     type="password"
                     name="current_password"
                     placeholder="Your password"
                     autocomplete="current-password"
-                    data-target="delete-confirm-btn"
-                    data-confirm-input="modal-delete-account"
+                    data-submit="delete-confirm-btn"
                 >
             </div>
             <div class="modal-card__actions">
                 <button class="btn btn--ghost btn--sm" type="button" data-close-modal>Cancel</button>
-                <button class="btn btn--sm btn--danger" id="delete-confirm-btn" type="submit" disabled>Delete my account</button>
+                <button class="btn btn--sm btn--danger" id="delete-confirm-btn" type="submit" disabled>Permanently delete account</button>
             </div>
         </form>
     </div>
@@ -123,41 +172,41 @@
 (function () {
     function openModal(id) {
         const el = document.getElementById(id);
-        if (el) {
-            el.removeAttribute('hidden');
-            const inp = el.querySelector('.modal-confirm-input');
-            if (inp) { inp.value = ''; inp.focus(); }
-            const pwd = el.querySelector('.modal-password-input');
-            if (pwd) pwd.value = '';
-            refreshDeleteBtn();
-        }
-    }
-    function closeModal(el) {
-        el.closest('.modal-backdrop').setAttribute('hidden', '');
+        if (!el) return;
+        el.removeAttribute('hidden');
+        const txt = el.querySelector('.confirm-text-input');
+        const pwd = el.querySelector('.confirm-password-input');
+        if (txt) { txt.value = ''; txt.focus(); }
+        if (pwd) pwd.value = '';
+        refreshModal(el);
     }
 
-    function refreshDeleteBtn() {
-        const confirmInp = document.querySelector('#modal-delete-account .modal-confirm-input');
-        const pwdInp = document.getElementById('delete-password-input');
-        const btn = document.getElementById('delete-confirm-btn');
-        if (!confirmInp || !pwdInp || !btn) return;
-        btn.disabled = !(confirmInp.value === 'DELETE' && pwdInp.value.length >= 1);
+    function refreshModal(modalEl) {
+        const txt = modalEl.querySelector('.confirm-text-input');
+        if (!txt) return;
+        const btnId = txt.dataset.submit;
+        const pwdId = txt.dataset.requiresPassword;
+        const btn = document.getElementById(btnId);
+        const pwd = pwdId ? document.getElementById(pwdId) : null;
+        if (!btn) return;
+        const textOk = txt.value === txt.dataset.match;
+        const pwdOk = !pwd || pwd.value.length >= 1;
+        btn.disabled = !(textOk && pwdOk);
     }
 
     document.querySelectorAll('[data-modal]').forEach(trigger => {
         trigger.addEventListener('click', () => openModal(trigger.dataset.modal));
     });
     document.querySelectorAll('[data-close-modal]').forEach(btn => {
-        btn.addEventListener('click', () => closeModal(btn));
+        btn.addEventListener('click', () => btn.closest('.modal-backdrop').setAttribute('hidden', ''));
     });
     document.querySelectorAll('.modal-backdrop').forEach(backdrop => {
         backdrop.addEventListener('click', e => { if (e.target === backdrop) backdrop.setAttribute('hidden', ''); });
     });
 
-    const confirmInp = document.querySelector('#modal-delete-account .modal-confirm-input');
-    const pwdInp = document.getElementById('delete-password-input');
-    if (confirmInp) confirmInp.addEventListener('input', refreshDeleteBtn);
-    if (pwdInp) pwdInp.addEventListener('input', refreshDeleteBtn);
+    document.querySelectorAll('.confirm-text-input, .confirm-password-input').forEach(inp => {
+        inp.addEventListener('input', () => refreshModal(inp.closest('.modal-backdrop')));
+    });
 })();
 </script>
 
diff --git a/templates/league_settings.html b/templates/league_settings.html
index ee72203..b839f52 100644
--- a/templates/league_settings.html
+++ b/templates/league_settings.html
@@ -131,6 +131,13 @@
                 </div>
                 <button class="btn btn--warning btn--sm danger-row__btn" type="button" data-modal="modal-archive">Archive league</button>
             </div>
+            <div class="danger-row">
+                <div>
+                    <strong class="danger-row__title">Delete league</strong>
+                    <p class="muted-text">Permanently deletes this league and all players, sessions, and ledger data. This cannot be undone.</p>
+                </div>
+                <button class="btn btn--warning btn--sm danger-row__btn" type="button" data-modal="modal-delete-league">Delete league</button>
+            </div>
         </div>
     </div>
 
@@ -231,6 +238,37 @@
         </form>
     </div>
 </div>
+<div class="modal-backdrop" id="modal-delete-league" hidden>
+    <div class="modal-card">
+        <div class="modal-card__head">
+            <span class="kicker" style="margin:0;">Danger zone</span>
+            <h2 class="panel__title">Delete league</h2>
+        </div>
+        <p class="modal-card__text">
+            <strong>{{ league.name }}</strong> and all its players, sessions, and ledger data will be <strong>permanently deleted</strong>. This cannot be undone.<br><br>
+            Type the league name to confirm:
+        </p>
+        <form method="post" action="{{ url_for('leagues.delete_league_route', league_ref=league.url_ref) }}">
+            <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
+            <div class="form-card" style="padding:0 20px 4px;">
+                <input
+                    class="modal-confirm-input"
+                    type="text"
+                    name="confirm_name"
+                    placeholder="{{ league.name }}"
+                    autocomplete="off"
+                    data-match="{{ league.name }}"
+                    data-target="delete-league-confirm-btn"
+                >
+            </div>
+            <div class="modal-card__actions">
+                <button class="btn btn--ghost btn--sm" type="button" data-close-modal>Cancel</button>
+                <button class="btn btn--sm btn--danger" id="delete-league-confirm-btn" type="submit" disabled>Permanently delete</button>
+            </div>
+        </form>
+    </div>
+</div>
+
 <script>
 (function () {
     function openModal(id) {

From a31e48622b6e0d4191a71bbe59d4dc7b32171bb9 Mon Sep 17 00:00:00 2001
From: SowinskiBraeden <braeden@sowinski.dev>
Date: Sun, 28 Jun 2026 10:15:32 -0700
Subject: [PATCH 72/83] more muted pages

---
 config.py                            |   2 +-
 static/css/style.css                 | 311 +++++++++++++--------------
 static/css/tokens.css                |  17 +-
 templates/landing.html               |   8 -
 templates/league_players.html        |   5 +-
 templates/league_session_detail.html |  10 -
 templates/privacy.html               |   6 +-
 templates/terms.html                 |   4 +-
 8 files changed, 165 insertions(+), 198 deletions(-)

diff --git a/config.py b/config.py
index 5aff018..7126217 100644
--- a/config.py
+++ b/config.py
@@ -37,7 +37,7 @@ class Config:
     SQLALCHEMY_TRACK_MODIFICATIONS: bool = False
     SESSION_COOKIE_HTTPONLY: bool = True
     SESSION_COOKIE_SAMESITE: str = "Lax"
-    SESSION_COOKIE_NAME: str = "poker_portal_session"
+    SESSION_COOKIE_NAME: str = "myboker_org_session"
     DATA_PATH: Path = DATA_PATH
     WTF_CSRF_TIME_LIMIT: int = 3600
     APP_BASE_URL: str = os.getenv("APP_BASE_URL", "http://localhost:5000")
diff --git a/static/css/style.css b/static/css/style.css
index 1710c1a..07e2a5f 100644
--- a/static/css/style.css
+++ b/static/css/style.css
@@ -283,8 +283,8 @@ h1, h2, h3, h4 { margin: 0; }
 .topbar {
   position: sticky; top: 0; z-index: 50;
   background: rgba(10,10,13,.94);
-  backdrop-filter: blur(14px) saturate(180%);
-  border-bottom: 1px solid rgba(255,255,255,.06);
+  backdrop-filter: blur(10px);
+  border-bottom: 1px solid var(--border);
 }
 .topbar__inner {
   max-width: var(--w-admin);
@@ -305,8 +305,8 @@ h1, h2, h3, h4 { margin: 0; }
 .brand__mark {
   width: 30px; height: 30px;
   border-radius: 7px;
-  background: linear-gradient(135deg, var(--accent) 0%, color-mix(in srgb, var(--accent) 72%, #7c6fd4) 100%);
-  box-shadow: 0 0 0 1px var(--accent-a30), 0 4px 18px var(--accent-a22);
+  background: var(--accent);
+  box-shadow: inset 0 0 0 1px rgba(255,255,255,.14);
   position: relative;
   flex: none;
 }
@@ -601,7 +601,7 @@ h3 {
   box-shadow: var(--shadow-sm);
   overflow: hidden;
   min-width: 0;
-  transition: box-shadow 180ms, transform 180ms;
+  transition: border-color 140ms, box-shadow 140ms;
 }
 .panel__head {
   padding: 16px 22px;
@@ -696,7 +696,7 @@ h3 {
   line-height: 1;
   white-space: nowrap;
 }
-.stat--rail { position: relative; padding-left: 20px; background: linear-gradient(135deg, var(--surface) 50%, color-mix(in srgb, var(--rail, var(--accent)) 6%, transparent) 100%); }
+.stat--rail { position: relative; padding-left: 20px; background: var(--surface); }
 .stat--rail::before {
   content: "";
   position: absolute;
@@ -763,9 +763,9 @@ h3 {
 }
 .seg:hover { color: var(--text-2); }
 .seg.is-on {
-  background: var(--accent-chip);
+  background: var(--surface-head);
   color: var(--text-strong);
-  box-shadow: inset 0 0 0 1px var(--accent-chip-bd);
+  box-shadow: inset 0 0 0 1px var(--border-hi);
 }
 .seg__count { font-family: var(--font-mono); font-size: 11px; font-weight: 500; color: var(--faintest); }
 .seg.is-on .seg__count { color: var(--accent); }
@@ -1376,10 +1376,10 @@ td a:hover { color: var(--accent); }
   font: 700 14px var(--font-ui);
   cursor: pointer;
   white-space: nowrap;
-  transition: opacity 120ms, box-shadow 120ms;
+  transition: background 120ms, border-color 120ms, color 120ms, opacity 120ms;
 }
-.btn--primary { background: var(--accent); color: var(--accent-ink); box-shadow: 0 2px 12px var(--accent-a30); font-weight: 700; }
-.btn--primary:hover { opacity: .88; box-shadow: 0 4px 20px var(--accent-a30); }
+.btn--primary { background: var(--accent); color: var(--accent-ink); box-shadow: none; font-weight: 700; }
+.btn--primary:hover { opacity: .9; }
 .btn--ghost { background: var(--field); color: var(--text-2); border: 1px solid var(--border-strong); font-weight: 600; }
 .btn--ghost:hover { border-color: var(--border-hi); color: var(--text-strong); }
 .btn--outline { background: var(--accent-tint); color: var(--accent); border: 1px solid var(--accent-chip-bd); }
@@ -1410,11 +1410,11 @@ td a:hover { color: var(--accent); }
   cursor: pointer;
   background: var(--accent);
   color: var(--accent-ink);
-  box-shadow: 0 2px 12px var(--accent-a30);
+  box-shadow: none;
   text-decoration: none;
-  transition: opacity 120ms, box-shadow 120ms;
+  transition: opacity 120ms, background 120ms;
 }
-.primary-button:hover { opacity: .88; box-shadow: 0 4px 20px var(--accent-a30); }
+.primary-button:hover { opacity: .9; }
 .secondary-button, .ghost-button {
   display: inline-flex;
   align-items: center;
@@ -3867,10 +3867,8 @@ select.control { cursor: pointer; }
 .card-menu__item--warn:hover { background: var(--neg-tint); color: var(--neg); }
 
 /* ================================================================
-   LANDING v2 (lp-* classes) — split hero
+   LANDING v2
    ================================================================ */
-
-/* Remove default padding; hero handles its own layout */
 .page--landing {
   padding: 0;
   max-width: none;
@@ -3892,27 +3890,29 @@ select.control { cursor: pointer; }
 }
 
 /* ================================================================
-   LANDING PAGE — split hero
+   LANDING PAGE
    ================================================================ */
 .lp-hero {
   display: flex;
   flex-direction: row;
   align-items: center;
   justify-content: center;
-  gap: clamp(48px, 7vw, 100px);
-  min-height: calc(100vh - 62px);
-  padding: clamp(56px, 6vw, 80px) clamp(24px, 5vw, 80px);
+  gap: clamp(40px, 6vw, 84px);
+  min-height: min(780px, calc(100vh - 62px));
+  padding: clamp(48px, 5vw, 68px) clamp(24px, 5vw, 80px);
   position: relative;
   overflow: hidden;
   background:
-    radial-gradient(ellipse 90% 70% at 50% 110%, #1c0e3e 0%, #100820 55%, var(--bg) 100%),
-    radial-gradient(ellipse 55% 50% at 85% 20%, rgba(155,140,240,.09) 0%, transparent 60%);
+    radial-gradient(ellipse 85% 62% at 50% 108%, rgba(155,140,240,.105) 0%, rgba(155,140,240,.035) 48%, transparent 72%),
+    radial-gradient(ellipse 50% 40% at 88% 16%, rgba(111,192,147,.035) 0%, transparent 58%),
+    linear-gradient(180deg, color-mix(in srgb, var(--accent) 7%, var(--bg)) 0%, var(--bg) 82%),
+    var(--bg);
 }
 .lp-hero::before {
   content: "♠";
   position: absolute;
   font-size: clamp(420px, 55vw, 820px);
-  color: rgba(155,140,240,.075);
+  color: rgba(255,255,255,.035);
   line-height: 1;
   pointer-events: none;
   user-select: none;
@@ -3943,10 +3943,10 @@ select.control { cursor: pointer; }
   align-items: center;
   gap: 7px;
   padding: 5px 14px;
-  border-radius: 999px;
-  background: var(--accent-chip);
-  border: 1px solid var(--accent-chip-bd);
-  color: var(--accent);
+  border-radius: var(--r-pill);
+  background: var(--surface-raised);
+  border: 1px solid var(--border);
+  color: var(--muted);
   font: 600 10.5px var(--font-mono);
   letter-spacing: .10em;
   text-transform: uppercase;
@@ -3957,15 +3957,15 @@ select.control { cursor: pointer; }
   content: "";
   width: 5px; height: 5px;
   border-radius: 50%;
-  background: var(--accent);
+  background: var(--muted-2);
   flex-shrink: 0;
 }
 
 .lp-h1 {
-  font-size: clamp(48px, 7vw, 96px);
-  font-weight: 900;
-  letter-spacing: -.045em;
-  line-height: .88;
+  font-size: clamp(44px, 6.2vw, 82px);
+  font-weight: 800;
+  letter-spacing: -.035em;
+  line-height: .95;
   color: var(--text);
   margin: 0 0 24px;
 }
@@ -3974,8 +3974,8 @@ select.control { cursor: pointer; }
 
 .lp-sub {
   font-size: clamp(14px, 1.2vw, 16px);
-  color: rgba(255,255,255,.55);
-  line-height: 1.65;
+  color: var(--muted);
+  line-height: 1.6;
   max-width: 44ch;
   margin: 0 0 28px;
 }
@@ -3989,10 +3989,10 @@ select.control { cursor: pointer; }
   gap: 10px;
   flex-wrap: wrap;
   font-size: 11.5px;
-  color: rgba(255,255,255,.3);
+  color: var(--faint);
   margin-bottom: 0;
 }
-.lp-trust__sep { color: rgba(255,255,255,.15); }
+.lp-trust__sep { color: var(--border-hi); }
 
 /* ---- Demo card ---- */
 .lp-demo {
@@ -4003,23 +4003,19 @@ select.control { cursor: pointer; }
   margin-top: 52px;
 }
 .lp-demo__card {
-  background: rgba(14,12,22,.9);
-  border: 1px solid rgba(155,140,240,.22);
+  background: var(--surface);
+  border: 1px solid var(--border);
   border-radius: var(--r-lg);
   overflow: hidden;
-  backdrop-filter: blur(16px);
-  box-shadow:
-    0 0 0 1px rgba(155,140,240,.07),
-    0 28px 72px rgba(0,0,0,.55),
-    0 0 120px rgba(155,140,240,.07);
+  box-shadow: var(--shadow-lg);
 }
 .lp-demo__head {
   display: flex;
   align-items: center;
   justify-content: space-between;
   padding: 14px 22px;
-  border-bottom: 1px solid rgba(255,255,255,.07);
-  background: rgba(255,255,255,.03);
+  border-bottom: 1px solid var(--border);
+  background: var(--surface-head);
   gap: 12px;
 }
 .lp-demo__kicker {
@@ -4028,18 +4024,18 @@ select.control { cursor: pointer; }
   font-family: var(--font-mono);
   letter-spacing: .12em;
   text-transform: uppercase;
-  color: var(--accent);
+  color: var(--muted);
   margin-bottom: 3px;
 }
 .lp-demo__title {
   font-size: .875rem;
   font-weight: 600;
-  color: rgba(255,255,255,.82);
+  color: var(--text-strong);
 }
 .lp-demo__meta {
   font-size: .72rem;
   font-family: var(--font-mono);
-  color: rgba(255,255,255,.3);
+  color: var(--faint);
   letter-spacing: .04em;
   white-space: nowrap;
 }
@@ -4054,15 +4050,15 @@ select.control { cursor: pointer; }
 .lp-demo__thead {
   padding-top: 9px;
   padding-bottom: 9px;
-  background: rgba(255,255,255,.025);
-  border-bottom: 1px solid rgba(255,255,255,.06);
+  background: var(--surface-head);
+  border-bottom: 1px solid var(--border);
 }
 .lp-demo__th {
   font-family: var(--font-mono);
   font-size: .6rem;
   letter-spacing: .1em;
   text-transform: uppercase;
-  color: rgba(255,255,255,.28);
+  color: var(--faint);
   text-align: right;
 }
 .lp-demo__th:nth-child(1),
@@ -4070,18 +4066,18 @@ select.control { cursor: pointer; }
 .lp-demo__row {
   padding-top: 11px;
   padding-bottom: 11px;
-  border-bottom: 1px solid rgba(255,255,255,.04);
+  border-bottom: 1px solid var(--divider);
   transition: background .1s;
 }
 .lp-demo__row:last-child { border-bottom: none; }
-.lp-demo__row:hover { background: rgba(155,140,240,.05); }
+.lp-demo__row:hover { background: var(--surface-raised); }
 .lp-demo__row--fade  { opacity: .65; }
 .lp-demo__row--fade2 { opacity: .38; }
 .lp-demo__rank {
   font-family: var(--font-mono);
   font-size: .8125rem;
   font-weight: 700;
-  color: rgba(255,255,255,.28);
+  color: var(--faint);
   text-align: left;
 }
 .lp-demo__rank--1 { color: #f4c430; }
@@ -4090,12 +4086,12 @@ select.control { cursor: pointer; }
 .lp-demo__player {
   font-size: .875rem;
   font-weight: 500;
-  color: rgba(255,255,255,.82);
+  color: var(--text-2);
 }
 .lp-demo__num {
   font-family: var(--font-mono);
   font-size: .8125rem;
-  color: rgba(255,255,255,.38);
+  color: var(--num);
   text-align: right;
   font-variant-numeric: tabular-nums;
 }
@@ -4124,7 +4120,7 @@ select.control { cursor: pointer; }
 }
 .lp-sec-title {
   font-size: clamp(20px, 2.4vw, 28px);
-  font-weight: 800;
+  font-weight: 700;
   color: var(--text);
   letter-spacing: -.03em;
   margin: 10px 0 0;
@@ -4132,7 +4128,7 @@ select.control { cursor: pointer; }
 }
 .lp-sec-sub {
   font-size: .875rem;
-  color: rgba(255,255,255,.4);
+  color: var(--muted);
   margin: 8px 0 0;
   line-height: 1.6;
 }
@@ -4142,7 +4138,7 @@ select.control { cursor: pointer; }
    ================================================================ */
 .lp-features {
   padding: clamp(48px, 5vw, 72px) clamp(24px, 5vw, 80px);
-  border-top: 1px solid rgba(255,255,255,.06);
+  border-top: 1px solid var(--divider);
 }
 .lp-features__inner {
   max-width: var(--w-public);
@@ -4152,24 +4148,24 @@ select.control { cursor: pointer; }
   display: grid;
   grid-template-columns: repeat(3, 1fr);
   gap: 0;
-  background: rgba(255,255,255,.05);
-  border: 1px solid rgba(255,255,255,.07);
+  background: var(--border);
+  border: 1px solid var(--border);
   border-radius: var(--r-lg);
   overflow: hidden;
 }
 .lp-feat {
   padding: 24px 28px;
-  background: var(--bg);
+  background: var(--surface);
   display: flex;
   flex-direction: column;
   gap: 8px;
 }
-.lp-feat + .lp-feat { border-left: 1px solid rgba(255,255,255,.06); }
+.lp-feat + .lp-feat { border-left: 1px solid var(--border); }
 .lp-feat__icon {
   width: 32px;
   height: 32px;
-  color: var(--accent);
-  opacity: .85;
+  color: var(--muted);
+  opacity: .95;
   margin-bottom: 2px;
 }
 .lp-feat__icon svg { width: 100%; height: 100%; }
@@ -4181,7 +4177,7 @@ select.control { cursor: pointer; }
 }
 .lp-feat__desc {
   font-size: .85rem;
-  color: rgba(255,255,255,.42);
+  color: var(--muted);
   line-height: 1.7;
 }
 
@@ -4190,8 +4186,8 @@ select.control { cursor: pointer; }
    ================================================================ */
 .lp-showcase {
   padding: clamp(48px, 5vw, 72px) clamp(24px, 5vw, 80px);
-  border-top: 1px solid rgba(255,255,255,.06);
-  background: rgba(155,140,240,.018);
+  border-top: 1px solid var(--divider);
+  background: color-mix(in srgb, var(--accent) 2.5%, var(--bg));
 }
 .lp-showcase__inner {
   max-width: var(--w-public);
@@ -4211,19 +4207,19 @@ select.control { cursor: pointer; }
   align-items: center;
   gap: 14px;
   padding: 12px 22px;
-  border-bottom: 1px solid rgba(255,255,255,.04);
+  border-bottom: 1px solid var(--divider);
   transition: background .1s;
 }
 .lp-sess-row:last-child { border-bottom: none; }
-.lp-sess-row:hover { background: rgba(155,140,240,.05); }
+.lp-sess-row:hover { background: var(--surface-raised); }
 .lp-sess-row--fade  { opacity: .6; }
 .lp-sess-row--fade2 { opacity: .32; }
 .lp-sess-date {
   flex-shrink: 0;
   width: 38px;
   text-align: center;
-  background: rgba(255,255,255,.04);
-  border: 1px solid rgba(255,255,255,.07);
+  background: var(--surface-head);
+  border: 1px solid var(--border);
   border-radius: var(--r-sm);
   padding: 4px 0;
 }
@@ -4233,14 +4229,14 @@ select.control { cursor: pointer; }
   font-size: .58rem;
   letter-spacing: .1em;
   text-transform: uppercase;
-  color: var(--accent);
+  color: var(--muted);
   line-height: 1;
 }
 .lp-sess-date__day {
   display: block;
   font-size: .9375rem;
   font-weight: 700;
-  color: rgba(255,255,255,.75);
+  color: var(--text-2);
   line-height: 1.2;
   margin-top: 1px;
 }
@@ -4249,14 +4245,14 @@ select.control { cursor: pointer; }
   display: block;
   font-size: .8125rem;
   font-weight: 500;
-  color: rgba(255,255,255,.8);
+  color: var(--text-2);
   line-height: 1.3;
 }
 .lp-sess-meta {
   display: block;
   font-size: .72rem;
   font-family: var(--font-mono);
-  color: rgba(255,255,255,.3);
+  color: var(--faint);
   margin-top: 2px;
 }
 .lp-sess-pill {
@@ -4275,9 +4271,9 @@ select.control { cursor: pointer; }
   color: var(--pos);
 }
 .lp-sess-pill--closed {
-  background: rgba(255,255,255,.05);
-  border: 1px solid rgba(255,255,255,.1);
-  color: rgba(255,255,255,.35);
+  background: var(--surface-raised);
+  border: 1px solid var(--border);
+  color: var(--faint);
 }
 
 /* ---- Ledger / settlement demo ---- */
@@ -4285,12 +4281,12 @@ select.control { cursor: pointer; }
   display: grid;
   grid-template-columns: 1fr 1fr;
   gap: 0;
-  border-bottom: 1px solid rgba(255,255,255,.06);
+  border-bottom: 1px solid var(--border);
 }
 .lp-ledger-stat {
   padding: 14px 22px;
-  border-right: 1px solid rgba(255,255,255,.05);
-  border-bottom: 1px solid rgba(255,255,255,.05);
+  border-right: 1px solid var(--border);
+  border-bottom: 1px solid var(--border);
 }
 .lp-ledger-stat:nth-child(2n) { border-right: none; }
 .lp-ledger-stat:nth-last-child(-n+2) { border-bottom: none; }
@@ -4300,14 +4296,14 @@ select.control { cursor: pointer; }
   font-size: .6rem;
   letter-spacing: .1em;
   text-transform: uppercase;
-  color: rgba(255,255,255,.28);
+  color: var(--faint);
   margin-bottom: 4px;
 }
 .lp-ledger-stat__val {
   font-family: var(--font-mono);
   font-size: .9375rem;
   font-weight: 700;
-  color: rgba(255,255,255,.7);
+  color: var(--text-2);
   font-variant-numeric: tabular-nums;
 }
 .lp-settle-section { padding: 0; }
@@ -4317,20 +4313,20 @@ select.control { cursor: pointer; }
   font-size: .6rem;
   letter-spacing: .1em;
   text-transform: uppercase;
-  color: rgba(255,255,255,.28);
-  background: rgba(255,255,255,.025);
-  border-bottom: 1px solid rgba(255,255,255,.06);
+  color: var(--faint);
+  background: var(--surface-head);
+  border-bottom: 1px solid var(--border);
 }
 .lp-settle-row {
   display: flex;
   align-items: center;
   gap: 10px;
   padding: 10px 22px;
-  border-bottom: 1px solid rgba(255,255,255,.04);
+  border-bottom: 1px solid var(--divider);
   transition: background .1s;
 }
 .lp-settle-row:last-child { border-bottom: none; }
-.lp-settle-row:hover { background: rgba(155,140,240,.05); }
+.lp-settle-row:hover { background: var(--surface-raised); }
 .lp-settle-row .lp-demo__meta { flex: 1; text-align: left; }
 
 /* ---- Session results demo (recon metrics + player table) ---- */
@@ -4338,11 +4334,11 @@ select.control { cursor: pointer; }
   display: grid;
   grid-template-columns: 1fr 1fr;
   gap: 1px;
-  background: rgba(255,255,255,.07);
-  border-bottom: 1px solid rgba(255,255,255,.07);
+  background: var(--border);
+  border-bottom: 1px solid var(--border);
 }
 .lp-recon-cell {
-  background: rgba(10,9,18,.92);
+  background: var(--surface);
   padding: 12px 18px;
 }
 .lp-recon-label {
@@ -4351,29 +4347,29 @@ select.control { cursor: pointer; }
   font-size: .595rem;
   letter-spacing: .09em;
   text-transform: uppercase;
-  color: rgba(255,255,255,.28);
+  color: var(--faint);
   margin-bottom: 5px;
 }
 .lp-recon-val {
   font-family: var(--font-mono);
   font-size: 1.1rem;
   font-weight: 700;
-  color: rgba(255,255,255,.72);
+  color: var(--text-2);
   font-variant-numeric: tabular-nums;
 }
 .lp-result-thead {
   display: grid;
   grid-template-columns: 1fr 64px 72px 90px;
   padding: 7px 18px;
-  background: rgba(255,255,255,.025);
-  border-bottom: 1px solid rgba(255,255,255,.06);
+  background: var(--surface-head);
+  border-bottom: 1px solid var(--border);
 }
 .lp-result-thead > span {
   font-family: var(--font-mono);
   font-size: .595rem;
   letter-spacing: .09em;
   text-transform: uppercase;
-  color: rgba(255,255,255,.28);
+  color: var(--faint);
   text-align: right;
 }
 .lp-result-thead > span:first-child { text-align: left; }
@@ -4381,12 +4377,12 @@ select.control { cursor: pointer; }
   display: grid;
   grid-template-columns: 1fr 64px 72px 90px;
   padding: 9px 18px;
-  border-bottom: 1px solid rgba(255,255,255,.04);
+  border-bottom: 1px solid var(--divider);
   align-items: center;
   transition: background .1s;
 }
 .lp-result-row:last-child { border-bottom: none; }
-.lp-result-row:hover { background: rgba(155,140,240,.05); }
+.lp-result-row:hover { background: var(--surface-raised); }
 .lp-result-due {
   font-family: var(--font-mono);
   font-size: .72rem;
@@ -4397,7 +4393,7 @@ select.control { cursor: pointer; }
 .lp-result-settled {
   font-family: var(--font-mono);
   font-size: .72rem;
-  color: rgba(255,255,255,.22);
+  color: var(--faintest);
   text-align: right;
 }
 
@@ -4407,8 +4403,8 @@ select.control { cursor: pointer; }
 .lp-bottom-cta {
   padding: clamp(48px, 5vw, 72px) clamp(24px, 5vw, 80px);
   text-align: center;
-  border-top: 1px solid rgba(255,255,255,.06);
-  background: radial-gradient(ellipse 70% 90% at 50% 100%, #1c0e3e 0%, var(--bg) 70%);
+  border-top: 1px solid var(--divider);
+  background: var(--bg);
 }
 .lp-bottom-cta__inner {
   max-width: 600px;
@@ -4416,14 +4412,14 @@ select.control { cursor: pointer; }
 }
 .lp-bottom-cta__title {
   font-size: clamp(24px, 3vw, 36px);
-  font-weight: 800;
+  font-weight: 700;
   color: var(--text);
   letter-spacing: -.03em;
   margin: 0 0 12px;
 }
 .lp-bottom-cta__sub {
   font-size: .9375rem;
-  color: rgba(255,255,255,.4);
+  color: var(--muted);
   margin: 0 0 28px;
   line-height: 1.6;
 }
@@ -4441,7 +4437,7 @@ select.control { cursor: pointer; }
   .lp-hero__content { max-width: 100%; }
   .lp-hero__visual { max-width: 100%; width: 100%; }
   .lp-feat-grid { grid-template-columns: 1fr; }
-  .lp-feat + .lp-feat { border-left: none; border-top: 1px solid rgba(255,255,255,.06); }
+  .lp-feat + .lp-feat { border-left: none; border-top: 1px solid var(--border); }
 }
 @media (max-width: 680px) {
   .lp-hero__visual { display: none; }
@@ -5270,9 +5266,9 @@ select.control { cursor: pointer; }
    LANDING — stats bar
    ================================================================ */
 .lp-stats-bar {
-  border-top: 1px solid rgba(255,255,255,.06);
-  border-bottom: 1px solid rgba(255,255,255,.06);
-  background: rgba(155,140,240,.022);
+  border-top: 1px solid var(--divider);
+  border-bottom: 1px solid var(--divider);
+  background: var(--surface-sunk);
 }
 .lp-stats-bar__inner {
   max-width: var(--w-public);
@@ -5293,7 +5289,7 @@ select.control { cursor: pointer; }
 }
 .lp-stats-bar__val {
   font-size: 1.25rem;
-  font-weight: 800;
+  font-weight: 700;
   color: var(--text-strong);
   letter-spacing: -.03em;
   line-height: 1;
@@ -5303,12 +5299,12 @@ select.control { cursor: pointer; }
   font-size: .6rem;
   letter-spacing: .1em;
   text-transform: uppercase;
-  color: rgba(255,255,255,.3);
+  color: var(--faint);
 }
 .lp-stats-bar__sep {
   width: 1px;
   height: 36px;
-  background: rgba(255,255,255,.08);
+  background: var(--border);
   flex-shrink: 0;
 }
 @media (max-width: 680px) {
@@ -5321,9 +5317,9 @@ select.control { cursor: pointer; }
    ================================================================ */
 .lp-callout {
   padding: clamp(56px, 6vw, 88px) clamp(24px, 5vw, 80px);
-  border-top: 1px solid rgba(255,255,255,.06);
+  border-top: 1px solid var(--divider);
   background:
-    radial-gradient(ellipse 60% 70% at 5% 50%, rgba(155,140,240,.045) 0%, transparent 55%),
+    radial-gradient(ellipse 48% 62% at 10% 52%, rgba(155,140,240,.045) 0%, transparent 62%),
     var(--bg);
 }
 .lp-callout__inner {
@@ -5339,7 +5335,7 @@ select.control { cursor: pointer; }
 }
 .lp-callout__title {
   font-size: clamp(22px, 2.8vw, 34px);
-  font-weight: 800;
+  font-weight: 700;
   color: var(--text);
   letter-spacing: -.035em;
   line-height: 1.15;
@@ -5347,7 +5343,7 @@ select.control { cursor: pointer; }
 }
 .lp-callout__body {
   font-size: .9375rem;
-  color: rgba(255,255,255,.45);
+  color: var(--muted);
   line-height: 1.72;
   margin: 0 0 22px;
 }
@@ -5363,7 +5359,7 @@ select.control { cursor: pointer; }
   align-items: center;
   gap: 10px;
   font-size: .875rem;
-  color: rgba(255,255,255,.52);
+  color: var(--text-2);
   line-height: 1.4;
 }
 .lp-callout__list li::before {
@@ -5371,7 +5367,7 @@ select.control { cursor: pointer; }
   width: 5px;
   height: 5px;
   border-radius: 50%;
-  background: var(--accent);
+  background: var(--muted-2);
   flex-shrink: 0;
   opacity: .75;
 }
@@ -5425,8 +5421,8 @@ select.control { cursor: pointer; }
   width: 28px;
   height: 28px;
   border-radius: 7px;
-  background: linear-gradient(135deg, var(--accent) 0%, color-mix(in srgb, var(--accent) 72%, #7c6fd4) 100%);
-  box-shadow: 0 0 0 1px var(--accent-a30), 0 4px 18px var(--accent-a22);
+  background: var(--accent);
+  box-shadow: inset 0 0 0 1px rgba(255,255,255,.14);
   position: relative;
   flex: none;
 }
@@ -5454,7 +5450,7 @@ select.control { cursor: pointer; }
 
 .auth-split__title {
   font-size: clamp(24px, 3vw, 32px);
-  font-weight: 800;
+  font-weight: 700;
   color: var(--text);
   letter-spacing: -.035em;
   margin: 0 0 8px;
@@ -5463,7 +5459,7 @@ select.control { cursor: pointer; }
 
 .auth-split__sub {
   font-size: .9375rem;
-  color: rgba(255,255,255,.42);
+  color: var(--muted);
   margin: 0 0 28px;
   line-height: 1.58;
 }
@@ -5479,7 +5475,7 @@ select.control { cursor: pointer; }
   font-size: 10px;
   letter-spacing: .1em;
   text-transform: uppercase;
-  color: rgba(255,255,255,.38);
+  color: var(--faint);
 }
 
 .auth-field input {
@@ -5554,7 +5550,7 @@ select.control { cursor: pointer; }
 .auth-alt {
   margin: 20px 0 0;
   font-size: .875rem;
-  color: rgba(255,255,255,.38);
+  color: var(--faint);
   text-align: center;
 }
 .auth-alt a {
@@ -5563,7 +5559,6 @@ select.control { cursor: pointer; }
 }
 .auth-alt a:hover { text-decoration: underline; }
 
-/* ---- visual / right column ---- */
 .auth-split__visual {
   flex: 1;
   display: flex;
@@ -5572,15 +5567,15 @@ select.control { cursor: pointer; }
   position: relative;
   overflow: hidden;
   background:
-    radial-gradient(ellipse 80% 80% at 50% 50%, #1a0c36 0%, #0d0b18 58%, var(--bg) 100%);
-  border-left: 1px solid rgba(255,255,255,.055);
+    radial-gradient(ellipse 76% 76% at 50% 48%, rgba(155,140,240,.13) 0%, rgba(155,140,240,.045) 48%, transparent 72%),
+    color-mix(in srgb, var(--accent) 5%, var(--bg));
+  border-left: 1px solid var(--divider);
 }
 
-/* large suit background symbol */
 .auth-split__visual::before {
   position: absolute;
   font-size: clamp(300px, 38vw, 520px);
-  color: rgba(155,140,240,.055);
+  color: rgba(255,255,255,.04);
   line-height: 1;
   pointer-events: none;
   user-select: none;
@@ -5603,12 +5598,12 @@ select.control { cursor: pointer; }
   height: 52px;
   background: var(--accent-chip);
   border: 1px solid var(--accent-chip-bd);
-  border-radius: 14px;
+  border-radius: var(--r-md);
   display: flex;
   align-items: center;
   justify-content: center;
   margin-bottom: 20px;
-  box-shadow: 0 0 0 1px var(--accent-a22), 0 8px 28px var(--accent-a22);
+  box-shadow: none;
 }
 
 .auth-visual__suit-sym {
@@ -5619,7 +5614,7 @@ select.control { cursor: pointer; }
 
 .auth-visual__title {
   font-size: 1.5rem;
-  font-weight: 800;
+  font-weight: 700;
   color: var(--text);
   letter-spacing: -.03em;
   margin: 0 0 10px;
@@ -5628,14 +5623,14 @@ select.control { cursor: pointer; }
 
 .auth-visual__sub {
   font-size: .875rem;
-  color: rgba(255,255,255,.42);
+  color: var(--muted);
   line-height: 1.65;
   margin: 0 0 24px;
 }
 
 .auth-visual__preview {
-  background: rgba(255,255,255,.04);
-  border: 1px solid rgba(255,255,255,.1);
+  background: var(--surface);
+  border: 1px solid var(--border);
   border-radius: var(--r-md);
   padding: 16px 18px;
 }
@@ -5645,7 +5640,7 @@ select.control { cursor: pointer; }
   font-size: .6rem;
   letter-spacing: .1em;
   text-transform: uppercase;
-  color: var(--accent);
+  color: var(--muted);
   margin-bottom: 13px;
 }
 
@@ -5654,9 +5649,9 @@ select.control { cursor: pointer; }
   justify-content: space-between;
   align-items: center;
   padding: 7px 0;
-  border-bottom: 1px solid rgba(255,255,255,.06);
+  border-bottom: 1px solid var(--divider);
   font-size: .875rem;
-  color: rgba(255,255,255,.6);
+  color: var(--text-2);
 }
 .auth-visual__preview-row:last-child { border-bottom: none; }
 .auth-visual__preview-row strong { font-weight: 600; }
@@ -5687,16 +5682,13 @@ select.control { cursor: pointer; }
   min-height: calc(100vh - 62px);
   position: relative;
   overflow: hidden;
-  background:
-    radial-gradient(ellipse 90% 70% at 50% 60%, #1c0e3e 0%, #100820 55%, var(--bg) 100%),
-    radial-gradient(ellipse 50% 40% at 80% 20%, rgba(155,140,240,.07) 0%, transparent 55%);
+  background: var(--bg);
 }
 
-/* large suit watermark */
 .error-pg__suit {
   position: absolute;
   font-size: clamp(320px, 46vw, 660px);
-  color: rgba(155,140,240,.065);
+  color: rgba(255,255,255,.04);
   line-height: 1;
   pointer-events: none;
   user-select: none;
@@ -5726,16 +5718,13 @@ select.control { cursor: pointer; }
   font-weight: 900;
   letter-spacing: -.04em;
   line-height: 1;
-  background: linear-gradient(135deg, var(--accent) 0%, rgba(155,140,240,.35) 100%);
-  -webkit-background-clip: text;
-  -webkit-text-fill-color: transparent;
-  background-clip: text;
+  color: var(--accent);
   margin-bottom: 8px;
 }
 
 .error-pg__title {
   font-size: clamp(28px, 4vw, 52px);
-  font-weight: 800;
+  font-weight: 700;
   color: var(--text);
   letter-spacing: -.04em;
   margin: 0 0 16px;
@@ -5744,7 +5733,7 @@ select.control { cursor: pointer; }
 
 .error-pg__sub {
   font-size: clamp(14px, 1.3vw, 16px);
-  color: rgba(255,255,255,.42);
+  color: var(--muted);
   max-width: 40ch;
   line-height: 1.68;
   margin: 0 0 28px;
@@ -5765,7 +5754,7 @@ select.control { cursor: pointer; }
   font-size: .625rem;
   letter-spacing: .18em;
   text-transform: uppercase;
-  color: rgba(255,255,255,.3);
+  color: var(--faint);
   margin: 0 0 18px;
   display: block;
 }
@@ -5791,23 +5780,23 @@ select.control { cursor: pointer; }
   gap: 10px;
   align-items: center;
   padding: 10px 22px;
-  border-bottom: 1px solid rgba(255,255,255,.04);
+  border-bottom: 1px solid var(--divider);
   transition: background .1s;
 }
 .lp-feed__row:last-child { border-bottom: none; }
-.lp-feed__row:hover { background: rgba(155,140,240,.05); }
+.lp-feed__row:hover { background: var(--surface-raised); }
 
 .lp-feed__time {
   font-family: var(--font-mono);
   font-size: .635rem;
-  color: rgba(255,255,255,.22);
+  color: var(--faintest);
   white-space: nowrap;
 }
 
 .lp-feed__player {
   font-size: .875rem;
   font-weight: 500;
-  color: rgba(255,255,255,.8);
+  color: var(--text-2);
   min-width: 0;
   overflow: hidden;
   text-overflow: ellipsis;
@@ -5825,9 +5814,9 @@ select.control { cursor: pointer; }
   white-space: nowrap;
 }
 .lp-feed__pill--buyin {
-  background: var(--accent-chip);
-  color: var(--accent);
-  border: 1px solid var(--accent-chip-bd);
+  background: var(--surface-raised);
+  color: var(--text-2);
+  border: 1px solid var(--border);
 }
 .lp-feed__pill--cashout {
   background: rgba(111,192,147,.12);
@@ -5843,7 +5832,7 @@ select.control { cursor: pointer; }
 .lp-feed__amt {
   font-family: var(--font-mono);
   font-size: .8125rem;
-  color: rgba(255,255,255,.5);
+  color: var(--num);
   text-align: right;
   font-variant-numeric: tabular-nums;
   white-space: nowrap;
@@ -5853,11 +5842,11 @@ select.control { cursor: pointer; }
   display: grid;
   grid-template-columns: repeat(3, 1fr);
   gap: 1px;
-  background: rgba(255,255,255,.07);
-  border-top: 1px solid rgba(255,255,255,.07);
+  background: var(--border);
+  border-top: 1px solid var(--border);
 }
 .lp-feed__summary-cell {
-  background: rgba(10,9,18,.9);
+  background: var(--surface);
   padding: 11px 16px;
 }
 
diff --git a/static/css/tokens.css b/static/css/tokens.css
index 3e68c57..01e3000 100644
--- a/static/css/tokens.css
+++ b/static/css/tokens.css
@@ -1,7 +1,7 @@
 @import url('https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700;800&display=swap');
 
 :root {
-  /* ---- surfaces (darkest → lightest) ---- */
+  /* Core surfaces */
   --bg:            #0a0a0d;
   --surface:       #111115;
   --surface-raised:#16161c;
@@ -30,8 +30,7 @@
   --faintest:      #64626d;
   --faintest-2:    #55535e;
 
-  /* ---- accent ---- */
-  /* To swap brand color later: edit these 7 vars only */
+  /* Brand accent */
   --accent:        #9b8cf0;
   --accent-ink:    #12101e;
   --accent-tint:   #1f1d2e;
@@ -68,11 +67,11 @@
   --line-1: #9b8cf0; --line-2: #6fc093; --line-3: #e0b15c;
   --line-4: #cf6f86; --line-5: #8f93c2;
 
-  /* ---- elevation shadows ---- */
-  --shadow-sm: 0 1px 3px rgba(0,0,0,.30), 0 1px 2px rgba(0,0,0,.22);
-  --shadow-md: 0 4px 16px rgba(0,0,0,.34), 0 2px 6px rgba(0,0,0,.24);
-  --shadow-lg: 0 12px 36px rgba(0,0,0,.42), 0 4px 12px rgba(0,0,0,.28);
-  --shadow-xl: 0 24px 64px rgba(0,0,0,.52), 0 8px 24px rgba(0,0,0,.32);
+  /* Elevation */
+  --shadow-sm: 0 1px 2px rgba(0,0,0,.28);
+  --shadow-md: 0 3px 12px rgba(0,0,0,.32), 0 1px 4px rgba(0,0,0,.24);
+  --shadow-lg: 0 10px 28px rgba(0,0,0,.38), 0 3px 10px rgba(0,0,0,.26);
+  --shadow-xl: 0 18px 48px rgba(0,0,0,.46), 0 6px 18px rgba(0,0,0,.30);
 
   /* ---- glass panel effect ---- */
   --glass-border: 1px solid rgba(255,255,255,.055);
@@ -83,7 +82,7 @@
   --s6:24px; --s8:32px; --s10:40px; --s12:48px;
 
   /* ---- radii ---- */
-  --r-pill:6px; --r-sm:9px; --r-md:12px; --r-lg:16px;
+  --r-pill:5px; --r-sm:7px; --r-md:9px; --r-lg:12px;
 
   /* ---- containers ---- */
   --w-public:1320px;
diff --git a/templates/landing.html b/templates/landing.html
index f101af0..0b1ae2c 100644
--- a/templates/landing.html
+++ b/templates/landing.html
@@ -3,7 +3,6 @@
 {% block page_class %}page--landing{% endblock %}
 {% block content %}
 
-<!-- ── Hero ──────────────────────────────────────────────────── -->
 <div class="lp-hero">
     <div class="lp-hero__content">
         <p class="lp-kicker">Home Poker Tracking</p>
@@ -99,7 +98,6 @@
     </div>
 </div>
 
-<!-- ── Stats bar ──────────────────────────────────────────────── -->
 <div class="lp-stats-bar">
     <div class="lp-stats-bar__inner">
         <div class="lp-stats-bar__item">
@@ -124,7 +122,6 @@
     </div>
 </div>
 
-<!-- ── Features ──────────────────────────────────────────────── -->
 <section class="lp-features">
     <div class="lp-features__inner">
         <div class="lp-sec-head">
@@ -169,7 +166,6 @@
     </div>
 </section>
 
-<!-- ── App showcase ───────────────────────────────────────────── -->
 <section class="lp-showcase">
     <div class="lp-showcase__inner">
         <div class="lp-sec-head">
@@ -179,7 +175,6 @@
         </div>
         <div class="lp-showcase__grid" aria-hidden="true">
 
-            <!-- Sessions panel -->
             <div class="lp-demo__card">
                 <div class="lp-demo__head">
                     <div>
@@ -247,7 +242,6 @@
                 </div>
             </div>
 
-            <!-- Session results panel -->
             <div class="lp-demo__card">
                 <div class="lp-demo__head">
                     <div>
@@ -316,7 +310,6 @@
     </div>
 </section>
 
-<!-- ── Leaderboard callout ────────────────────────────────────── -->
 <section class="lp-callout">
     <div class="lp-callout__inner">
         <div class="lp-callout__text">
@@ -394,7 +387,6 @@
     </div>
 </section>
 
-<!-- ── Bottom CTA ─────────────────────────────────────────────── -->
 {% if not is_logged_in %}
 <section class="lp-bottom-cta">
     <div class="lp-bottom-cta__inner">
diff --git a/templates/league_players.html b/templates/league_players.html
index 8838e55..4fc2d3c 100644
--- a/templates/league_players.html
+++ b/templates/league_players.html
@@ -208,7 +208,7 @@
         });
     }
 
-    // Card menu: open with fixed positioning to escape overflow:hidden panels
+    // Keep the menu outside clipped card panels.
     document.querySelectorAll('.card-menu__trigger').forEach(function (trigger) {
         trigger.addEventListener('click', function (e) {
             e.stopPropagation();
@@ -234,7 +234,6 @@
     });
     document.addEventListener('click', closeAllDropdowns);
 
-    // Edit player
     document.querySelectorAll('.card-menu__item[data-edit-action]').forEach(function (item) {
         item.addEventListener('click', function () {
             closeAllDropdowns();
@@ -246,7 +245,6 @@
         });
     });
 
-    // Archive player
     document.querySelectorAll('.card-menu__item[data-archive-action]').forEach(function (item) {
         item.addEventListener('click', function () {
             closeAllDropdowns();
@@ -256,7 +254,6 @@
         });
     });
 
-    // Modal close
     document.querySelectorAll('[data-close-modal]').forEach(function (btn) {
         btn.addEventListener('click', function () {
             this.closest('.modal-backdrop').setAttribute('hidden', '');
diff --git a/templates/league_session_detail.html b/templates/league_session_detail.html
index fcc7d2a..feddd83 100644
--- a/templates/league_session_detail.html
+++ b/templates/league_session_detail.html
@@ -213,7 +213,6 @@
     </div>
 </div>
 
-<!-- Void event modal -->
 {% if is_owner %}
 <div class="modal-backdrop" id="modal-void-event" hidden>
     <div class="modal-card" role="dialog" aria-modal="true" aria-labelledby="modal-void-title">
@@ -238,7 +237,6 @@
 </div>
 {% endif %}
 
-<!-- Delete confirmation modal -->
 <div class="modal-backdrop" id="modal-delete-session" hidden>
     <div class="modal-card" role="dialog" aria-modal="true" aria-labelledby="modal-delete-title">
         <div class="modal-card__head">
@@ -256,7 +254,6 @@
     </div>
 </div>
 
-<!-- Edit session modal -->
 {% if can_manage %}
 <div class="modal-backdrop" id="modal-edit-session" hidden>
     <div class="modal-card" role="dialog" aria-modal="true" aria-labelledby="modal-edit-session-title">
@@ -300,7 +297,6 @@
 </div>
 {% endif %}
 
-<!-- Reopen confirmation modal -->
 <div class="modal-backdrop" id="modal-reopen-session" hidden>
     <div class="modal-card" role="dialog" aria-modal="true" aria-labelledby="modal-reopen-title">
         <div class="modal-card__head">
@@ -319,7 +315,6 @@
 </div>
 
 <script>
-// Player search — map display name → player id
 const playerMap = {
     {% for player in players %}"{{ player.display_name | replace('"', '\\"') }}": "{{ player.id }}"{% if not loop.last %},{% endif %}
     {% endfor %}
@@ -332,13 +327,11 @@ if (searchInput && idInput) {
     searchInput.addEventListener('input', function () {
         idInput.value = playerMap[this.value.trim()] || '';
     });
-    // Also handle datalist selection which fires change
     searchInput.addEventListener('change', function () {
         idInput.value = playerMap[this.value.trim()] || '';
     });
 }
 
-// Clear player field when event type is "note"
 if (eventTypeSelect && searchInput && idInput) {
     eventTypeSelect.addEventListener('change', function () {
         if (this.value === 'note') {
@@ -349,13 +342,11 @@ if (eventTypeSelect && searchInput && idInput) {
             searchInput.placeholder = 'Start typing a name…';
         }
     });
-    // Set initial placeholder if note is selected
     if (eventTypeSelect.value === 'note') {
         searchInput.placeholder = 'No player (session note)';
     }
 }
 
-// Modal logic
 document.querySelectorAll('[data-modal]').forEach(function(btn) {
     btn.addEventListener('click', function() {
         var target = document.getElementById(this.dataset.modal);
@@ -373,7 +364,6 @@ document.querySelectorAll('.modal-backdrop').forEach(function(backdrop) {
     });
 });
 
-// Void event modal
 document.querySelectorAll('[data-void-id]').forEach(function(btn) {
     btn.addEventListener('click', function() {
         var player = this.dataset.voidPlayer;
diff --git a/templates/privacy.html b/templates/privacy.html
index 8866a44..120d5a3 100644
--- a/templates/privacy.html
+++ b/templates/privacy.html
@@ -51,7 +51,7 @@
         </ul>
 
         <h2>4. Cookies and transient data</h2>
-        <p>We set <strong>one cookie</strong>: <code>poker_portal_session</code>. This is a functional authentication cookie that keeps you signed in. It contains only an encrypted reference to your session. We do not use advertising cookies, tracking cookies, or any third-party cookies.</p>
+        <p>We set <strong>one cookie</strong>: <code>myboker_org_session</code>. This is a functional authentication cookie that keeps you signed in. It contains only an encrypted reference to your session. We do not use advertising cookies, tracking cookies, or any third-party cookies.</p>
         <p>Our rate-limiting system temporarily processes your IP address in memory to prevent abuse. IP addresses are not written to disk or retained once the request completes.</p>
         <p>Password-reset and league-invitation links are cryptographically signed tokens that expire automatically (1 hour for resets, 7 days for invitations). They are stateless and not stored in our database.</p>
 
@@ -109,7 +109,7 @@
             <a href="mailto:support@cedarline.digital">support@cedarline.digital</a>
         </p>
 
-    </div><!-- /.legal-doc__body -->
-</div><!-- /.legal-doc -->
+    </div>
+</div>
 
 {% endblock %}
diff --git a/templates/terms.html b/templates/terms.html
index 9b6eced..0c07739 100644
--- a/templates/terms.html
+++ b/templates/terms.html
@@ -98,7 +98,7 @@
             <a href="mailto:support@cedarline.digital">support@cedarline.digital</a>
         </p>
 
-    </div><!-- /.legal-doc__body -->
-</div><!-- /.legal-doc -->
+    </div>
+</div>
 
 {% endblock %}

From 9e6f5bd3ef014e7b31ec86ac4354e71255b10550 Mon Sep 17 00:00:00 2001
From: SowinskiBraeden <braeden@sowinski.dev>
Date: Sun, 28 Jun 2026 10:24:43 -0700
Subject: [PATCH 73/83] update information + styles

---
 config.py              |  2 +-
 templates/privacy.html |  6 +++---
 templates/support.html |  2 +-
 templates/terms.html   | 10 +++++-----
 4 files changed, 10 insertions(+), 10 deletions(-)

diff --git a/config.py b/config.py
index 7126217..f9233f3 100644
--- a/config.py
+++ b/config.py
@@ -9,7 +9,7 @@ DATA_PATH = BASE_DIR / "data" / "entries.csv"
 DEFAULT_DATABASE_URL = f"sqlite:///{BASE_DIR / 'data' / 'boker-dev.sqlite3'}"
 
 ELIGIBLE_MIN_SESSIONS = 3
-APP_VERSION = "2.5.21"
+APP_VERSION = "2.5.23"
 
 
 def load_local_env(env_path: Path) -> None:
diff --git a/templates/privacy.html b/templates/privacy.html
index 120d5a3..8bc883b 100644
--- a/templates/privacy.html
+++ b/templates/privacy.html
@@ -7,13 +7,13 @@
     <header class="legal-doc__header">
         <p class="lp-kicker">Legal</p>
         <h1 class="legal-doc__title">Privacy Policy</h1>
-        <p class="legal-doc__meta">Effective June 27, 2026. Operated by <strong>cedarline.digital</strong>, British Columbia, Canada.</p>
+        <p class="legal-doc__meta">Effective June 27, 2026. Owned and operated by <strong>Cedarline Digital</strong>.</p>
     </header>
 
     <div class="legal-doc__body">
 
         <h2>1. Who we are</h2>
-        <p>myboker.org is operated by <strong>cedarline.digital</strong>, a sole proprietorship registered in British Columbia, Canada. "We," "us," and "our" refer to cedarline.digital. By using myboker.org, you agree to the collection and use of information as described in this policy.</p>
+        <p>myboker.org is owned and operated by <strong>Cedarline Digital</strong>. "We," "us," and "our" refer to Cedarline Digital. By using myboker.org, you agree to the collection and use of information as described in this policy.</p>
         <p>This policy is governed by the <em>Personal Information Protection and Electronic Documents Act</em> (PIPEDA) and the BC <em>Personal Information Protection Act</em> (PIPA).</p>
 
         <h2>2. Information we collect</h2>
@@ -104,7 +104,7 @@
         <h2>13. Contact</h2>
         <p>Questions or requests regarding this policy:</p>
         <p>
-            <strong>cedarline.digital</strong><br>
+            <strong>Cedarline Digital</strong><br>
             British Columbia, Canada<br>
             <a href="mailto:support@cedarline.digital">support@cedarline.digital</a>
         </p>
diff --git a/templates/support.html b/templates/support.html
index c958b81..3e3942a 100644
--- a/templates/support.html
+++ b/templates/support.html
@@ -338,7 +338,7 @@
         <!-- ── Contact ──────────────────────────────────────────────── -->
         <section class="docs-section" id="contact">
             <h2 class="docs-h2">Contact</h2>
-            <p>myboker.org is operated by <strong>cedarline.digital</strong>, a sole proprietorship based in British Columbia, Canada.</p>
+            <p>myboker.org is owned and operated by <strong>Cedarline Digital</strong>.</p>
             <p>For support, data requests, or anything else: <a href="mailto:support@cedarline.digital">support@cedarline.digital</a>. Please allow a few days for a response.</p>
             <div class="docs-callout">
                 <strong>Legal:</strong> See the <a href="{{ url_for('public.privacy') }}">Privacy Policy</a> and <a href="{{ url_for('public.terms') }}">Terms of Service</a> for details on how your data is handled and the rules governing use of the service.
diff --git a/templates/terms.html b/templates/terms.html
index 0c07739..762ce31 100644
--- a/templates/terms.html
+++ b/templates/terms.html
@@ -7,7 +7,7 @@
     <header class="legal-doc__header">
         <p class="lp-kicker">Legal</p>
         <h1 class="legal-doc__title">Terms of Service</h1>
-        <p class="legal-doc__meta">Effective June 27, 2026. Operated by <strong>cedarline.digital</strong>, British Columbia, Canada.</p>
+        <p class="legal-doc__meta">Effective June 27, 2026. Owned and operated by <strong>Cedarline Digital</strong>.</p>
     </header>
 
     <div class="legal-doc__body">
@@ -16,7 +16,7 @@
         <p>By accessing or using myboker.org ("the Service"), you agree to be bound by these Terms of Service ("Terms"). If you do not agree to these Terms, do not use the Service.</p>
 
         <h2>2. Who operates this Service</h2>
-        <p>myboker.org is operated by <strong>cedarline.digital</strong>, a sole proprietorship registered in British Columbia, Canada ("we," "us," "our"). The Service is a personal side project offered free of charge.</p>
+        <p>myboker.org is owned and operated by <strong>Cedarline Digital</strong> ("we," "us," "our"). The Service is a personal side project offered free of charge.</p>
 
         <h2>3. Age requirement</h2>
         <p>You must be <strong>at least 18 years old</strong> to use myboker.org. By creating an account, you confirm you are 18 or older and legally permitted to engage in or track recreational poker play in your jurisdiction. If we learn that an account was created by someone under 18, we reserve the right to permanently delete that account without notice.</p>
@@ -75,10 +75,10 @@
         <p>myboker.org is provided <strong>as-is</strong> and <strong>free of charge</strong>. We do not guarantee continuous availability, uptime, error-free operation, or data preservation. We may perform maintenance, push updates, or experience outages at any time. We will make reasonable efforts to notify users of planned downtime when possible.</p>
 
         <h2>11. Intellectual property</h2>
-        <p>The myboker.org software, design, and branding are owned by cedarline.digital. You retain ownership of all data you enter into the Service (league names, player names, session data). You grant us a limited licence to store and display that data for the purpose of providing the Service to you.</p>
+        <p>The myboker.org software, design, and branding are owned by Cedarline Digital. You retain ownership of all data you enter into the Service (league names, player names, session data). You grant us a limited licence to store and display that data for the purpose of providing the Service to you.</p>
 
         <h2>12. Limitation of liability</h2>
-        <p>To the fullest extent permitted by applicable law, cedarline.digital shall not be liable for any indirect, incidental, special, consequential, or punitive damages arising out of or related to your use of, or inability to use, the Service, including but not limited to loss of data, revenue, or goodwill.</p>
+        <p>To the fullest extent permitted by applicable law, Cedarline Digital shall not be liable for any indirect, incidental, special, consequential, or punitive damages arising out of or related to your use of, or inability to use, the Service, including but not limited to loss of data, revenue, or goodwill.</p>
         <p>Our total aggregate liability to you for any claim arising from these Terms shall not exceed the total amount you have paid us in the twelve months preceding the claim. As the Service is currently free of charge, this limit is <strong>$0 CAD</strong>.</p>
 
         <h2>13. Suspension and termination</h2>
@@ -93,7 +93,7 @@
         <h2>16. Contact</h2>
         <p>Questions about these Terms:</p>
         <p>
-            <strong>cedarline.digital</strong><br>
+            <strong>Cedarline Digital</strong><br>
             British Columbia, Canada<br>
             <a href="mailto:support@cedarline.digital">support@cedarline.digital</a>
         </p>

From 79c638b8fac93d1beb6eb70c8830bd150af33618 Mon Sep 17 00:00:00 2001
From: SowinskiBraeden <braeden@sowinski.dev>
Date: Sun, 28 Jun 2026 10:51:59 -0700
Subject: [PATCH 74/83] remove legacy systems

---
 README.md                                     | 111 ++--
 app.py                                        |  42 +-
 auth.py                                       |  32 +-
 config.py                                     |   2 +-
 db_models.py                                  |   1 +
 .../versions/0005_site_admin_accounts.py      |  36 ++
 routes/admin.py                               | 584 ------------------
 templates/admin_dashboard.html                | 436 -------------
 templates/admin_login.html                    |  24 -
 templates/leaderboard.html                    |   2 +-
 tests/test_accounting.py                      |  89 +--
 tests/test_stats.py                           |  20 +-
 12 files changed, 191 insertions(+), 1188 deletions(-)
 create mode 100644 migrations/versions/0005_site_admin_accounts.py
 delete mode 100644 routes/admin.py
 delete mode 100644 templates/admin_dashboard.html
 delete mode 100644 templates/admin_login.html

diff --git a/README.md b/README.md
index 08b2b71..bdeba2e 100644
--- a/README.md
+++ b/README.md
@@ -1,38 +1,31 @@
-# Poker Portal
+# myboker.org
 
-A small Flask app I put together for tracking our low-stakes hold'em nights without having to keep a spreadsheet open all the time.
+Flask app for running home-poker leagues without keeping a spreadsheet open all night.
 
-The idea is pretty simple: public pages for stats and session history, plus a small admin area for recording buy-ins, gross cashout results, actual paid-out cash, and notes. The data sits in a CSV audit log, so everything is append-only and easy to follow later.
+The current app is account-based and league-based. League owners/managers record sessions and ledger events, viewers can inspect public-facing league data, and site-admin access is reserved for internal tooling.
 
-## What it does
+## What It Does
 
-- all-time leaderboard
-- per-session pages
-- per-player stat pages
-- admin login for recording events
-- open / closed session tracking
-- actual cash payout tracking with `paid_out` events
-- debt repayments and write-offs with `debt_repayment` / `writeoff` events
-- session and player charts
-- CSV import / export from the admin page
-- append-only `entries.csv` ledger instead of overwriting old rows
+- account signup, login, and email verification
+- league creation, invitations, ownership transfer, and member roles
+- player, season, session, and ledger management per league
+- append-only ledger events with void/correction support
+- public/private league visibility
+- leaderboards, charts, dashboard stats, and session summaries
+- CSV import/export for league ledgers
 
 ## Stack
 
-Built with a pretty lightweight setup:
-
 - Python
 - Flask
+- SQLAlchemy / Flask-Migrate
 - Jinja templates
 - Chart.js
 - plain CSS
-- CSV event log for storage
 
-## Ledger model
+## Ledger Model
 
-The app treats `data/entries.csv` as the source of truth.
-
-Each row is an event, not a final snapshot. Instead of editing an old row, I append another one. That keeps rebuys, corrections, payouts, and session state changes visible in the log instead of hiding them behind edits.
+Each ledger row is an event, not a final snapshot. Corrections are made by appending or voiding events, so the history remains auditable.
 
 Current event types:
 
@@ -49,17 +42,7 @@ Current event types:
 - `session_open`
 - `session_close`
 
-A few examples:
-
-- another `buyin` for a rebuy
-- another `cashout` if chip counts are corrected later
-- a `paid_out` event when someone is actually settled up
-- a `debt_repayment` event when a front is repaid outside poker
-- a `writeoff` event when a front will not be collected
-- a `note` event for bookkeeping context
-- `session_open` / `session_close` to mark whether a game night is still live
-
-Accounting in the app keeps poker results separate from banker cashflow:
+Accounting keeps poker results separate from banker cashflow:
 
 - poker investment is `buyin + front + rollover_in`
 - poker net is `cashout - poker investment`
@@ -67,30 +50,12 @@ Accounting in the app keeps poker results separate from banker cashflow:
 - real cash out is `paid_out`
 - `rollover_out` settles the source session without counting as cash out
 - `rollover_in` enters play in the destination session without counting as cash in
-- `payout_carry_in` records prior-session value carried into a later payout; it increases the destination payout due without counting as poker investment or cash in
+- `payout_carry_in` records prior-session value carried into a later payout without counting as poker investment or cash in
 - `writeoff` resolves a receivable without counting as cash in
 
-Older ledgers may still contain `paid`, `front_collected`, or `front_writeoff`.
-The app reads those historical names as aliases for `paid_out`,
-`debt_repayment`, and `writeoff`.
+Older imports may still contain `paid`, `front_collected`, or `front_writeoff`; those are read as aliases for `paid_out`, `debt_repayment`, and `writeoff`.
 
-It is still just a small side project, but I wanted the event model to stay clean enough that the numbers are easy to trust and the history is easy to read back through.
-
-## CSV format
-
-Main file:
-
-`data/entries.csv`
-
-Header:
-
-```csv
-id,created_at,session_id,session_date,player_name,event_type,amount_cents,note,actor
-```
-
-Amounts are stored in cents to avoid floating-point issues.
-
-## Running it locally
+## Running Locally
 
 ```bash
 python -m venv .venv
@@ -102,31 +67,37 @@ python app.py
 
 Then open:
 
-`http://127.0.0.1:8000`
+`http://127.0.0.1:5000`
 
-## Environment values
+## Environment Values
 
 The app reads these from `.env`:
 
 - `SECRET_KEY`
-- `ADMIN_USERNAME`
-- `ADMIN_PASSWORD`
+- `DATABASE_URL`
+- `APP_BASE_URL`
+- `MAIL_SERVER`
+- `MAIL_PORT`
+- `MAIL_USE_TLS`
+- `MAIL_USE_SSL`
+- `MAIL_USERNAME`
+- `MAIL_PASSWORD`
+- `MAIL_DEFAULT_SENDER`
 
-Example:
+## Site Admin Access
 
-```env
-SECRET_KEY=change-this
-ADMIN_USERNAME=admin
-ADMIN_PASSWORD=change-me
+Internal admin access uses normal database-backed accounts, not hardcoded `.env` credentials.
+
+Grant access:
+
+```bash
+flask --app app grant-site-admin user@example.com
 ```
 
-## Notes
+Revoke access:
 
-A few choices here were deliberate:
+```bash
+flask --app app revoke-site-admin user@example.com
+```
 
-- no database for now
-- no user accounts, just one admin login
-- public-facing stats pages, admin-only controls
-- CSV backup before importing a replacement ledger
-
-If I ever decide to take it further, the first real upgrade would probably be moving the storage layer to SQLite while keeping the rest of the app roughly the same.
+The old single-password `/admin` system has been removed.
diff --git a/app.py b/app.py
index 143fade..a660084 100644
--- a/app.py
+++ b/app.py
@@ -4,7 +4,7 @@ from __future__ import annotations
 import click
 from flask import Flask, render_template
 
-from auth import current_user_id, is_logged_in
+from auth import current_user_id, is_logged_in, normalize_email
 from config import Config
 from db import database_extensions_available, db, init_database
 from extensions import csrf, limiter, mail
@@ -62,6 +62,46 @@ def create_app(config_overrides: dict | None = None) -> Flask:
 
         click.echo("Initialized database tables.")
 
+    @app.cli.command("grant-site-admin")
+    @click.argument("email")
+    def grant_site_admin_command(email: str) -> None:
+        if not database_extensions_available() or db is None:
+            raise click.ClickException(
+                "Database dependencies are not installed. Run pip install -r requirements.txt."
+            )
+
+        from db_models import User
+
+        normalized_email = normalize_email(email)
+        with app.app_context():
+            user = User.query.filter_by(email=normalized_email, disabled_at=None).one_or_none()
+            if user is None:
+                raise click.ClickException(f"No active user found for {normalized_email}.")
+            user.is_site_admin = True
+            db.session.commit()
+
+        click.echo(f"Granted site admin access to {normalized_email}.")
+
+    @app.cli.command("revoke-site-admin")
+    @click.argument("email")
+    def revoke_site_admin_command(email: str) -> None:
+        if not database_extensions_available() or db is None:
+            raise click.ClickException(
+                "Database dependencies are not installed. Run pip install -r requirements.txt."
+            )
+
+        from db_models import User
+
+        normalized_email = normalize_email(email)
+        with app.app_context():
+            user = User.query.filter_by(email=normalized_email).one_or_none()
+            if user is None:
+                raise click.ClickException(f"No user found for {normalized_email}.")
+            user.is_site_admin = False
+            db.session.commit()
+
+        click.echo(f"Revoked site admin access from {normalized_email}.")
+
     return app
 
 
diff --git a/auth.py b/auth.py
index c33f1f1..86be33b 100644
--- a/auth.py
+++ b/auth.py
@@ -3,7 +3,7 @@ from __future__ import annotations
 
 from functools import wraps
 
-from flask import current_app, flash, redirect, request, session as flask_session, url_for
+from flask import abort, current_app, flash, redirect, request, session as flask_session, url_for
 from itsdangerous import BadSignature, SignatureExpired, URLSafeTimedSerializer
 from werkzeug.security import check_password_hash, generate_password_hash
 
@@ -51,7 +51,6 @@ def normalize_email(email: str) -> str:
 
 
 def log_user_in(user_id: str) -> None:
-    flask_session.pop("is_admin", None)
     flask_session["user_id"] = user_id
 
 
@@ -68,6 +67,22 @@ def is_logged_in() -> bool:
     return current_user_id() is not None
 
 
+def is_site_admin() -> bool:
+    user_id = current_user_id()
+    if not user_id:
+        return False
+
+    from db import database_extensions_available
+
+    if not database_extensions_available():
+        return False
+
+    from db_models import User
+
+    user = User.query.filter_by(id=user_id, disabled_at=None).one_or_none()
+    return bool(user and user.is_site_admin)
+
+
 def login_required(view):
     @wraps(view)
     def wrapped_view(*args, **kwargs):
@@ -77,3 +92,16 @@ def login_required(view):
         return view(*args, **kwargs)
 
     return wrapped_view
+
+
+def site_admin_required(view):
+    @wraps(view)
+    def wrapped_view(*args, **kwargs):
+        if not is_logged_in():
+            flash("Login required.", "error")
+            return redirect(url_for("account.login", next=request.full_path))
+        if not is_site_admin():
+            abort(403)
+        return view(*args, **kwargs)
+
+    return wrapped_view
diff --git a/config.py b/config.py
index f9233f3..5a4dfc4 100644
--- a/config.py
+++ b/config.py
@@ -9,7 +9,7 @@ DATA_PATH = BASE_DIR / "data" / "entries.csv"
 DEFAULT_DATABASE_URL = f"sqlite:///{BASE_DIR / 'data' / 'boker-dev.sqlite3'}"
 
 ELIGIBLE_MIN_SESSIONS = 3
-APP_VERSION = "2.5.23"
+APP_VERSION = "2.5.24"
 
 
 def load_local_env(env_path: Path) -> None:
diff --git a/db_models.py b/db_models.py
index c360e8c..cf2c78a 100644
--- a/db_models.py
+++ b/db_models.py
@@ -77,6 +77,7 @@ class User(TimestampMixin, db.Model):
     email_verification_sent_at = db.Column(db.DateTime(timezone=True), nullable=True)
     last_login_at = db.Column(db.DateTime(timezone=True), nullable=True)
     disabled_at = db.Column(db.DateTime(timezone=True), nullable=True)
+    is_site_admin = db.Column(db.Boolean, nullable=False, default=False)
 
 
 class League(TimestampMixin, db.Model):
diff --git a/migrations/versions/0005_site_admin_accounts.py b/migrations/versions/0005_site_admin_accounts.py
new file mode 100644
index 0000000..45c745c
--- /dev/null
+++ b/migrations/versions/0005_site_admin_accounts.py
@@ -0,0 +1,36 @@
+"""add account-backed site admin flag
+
+Revision ID: 0005_site_admin_accounts
+Revises: 0004_email_verification_codes
+Create Date: 2026-06-28
+"""
+from __future__ import annotations
+
+from alembic import op
+import sqlalchemy as sa
+
+
+revision = "0005_site_admin_accounts"
+down_revision = "0004_email_verification_codes"
+branch_labels = None
+depends_on = None
+
+
+def upgrade() -> None:
+    columns = {column["name"] for column in sa.inspect(op.get_bind()).get_columns("users")}
+    if "is_site_admin" not in columns:
+        op.add_column(
+            "users",
+            sa.Column(
+                "is_site_admin",
+                sa.Boolean(),
+                nullable=False,
+                server_default=sa.false(),
+            )
+        )
+
+
+def downgrade() -> None:
+    columns = {column["name"] for column in sa.inspect(op.get_bind()).get_columns("users")}
+    if "is_site_admin" in columns:
+        op.drop_column("users", "is_site_admin")
diff --git a/routes/admin.py b/routes/admin.py
deleted file mode 100644
index f959d89..0000000
--- a/routes/admin.py
+++ /dev/null
@@ -1,584 +0,0 @@
-#!/usr/bin/env python3
-from __future__ import annotations
-
-import csv
-from datetime import datetime, timezone
-
-from flask import (
-    Blueprint,
-    current_app,
-    flash,
-    redirect,
-    render_template,
-    request,
-    send_file,
-    session as flask_session,
-    url_for,
-)
-
-from auth import is_admin
-from services import (
-    build_session_summaries,
-    next_session_id,
-    pending_payout_carry_items,
-    prunable_empty_session_ids,
-    unique_player_names,
-)
-from storage import CSV_HEADERS, append_event, load_events, write_events
-from utils import cents_to_dollars, session_label
-
-admin_bp = Blueprint("admin", __name__)
-
-ADMIN_EVENT_TYPES = [
-    ("buyin", "Buy-in", "var(--accent)"),
-    ("front", "Front", "var(--warn)"),
-    ("rollover_in", "Rollover-in", "var(--rolled)"),
-    ("payout_carry_in", "Payout carry-in", "var(--rolled)"),
-    ("cashout", "Cashout result", "var(--rank-2)"),
-    ("paid_out", "Paid out cash", "var(--pos)"),
-    ("rollover_out", "Rollover-out", "var(--rolled)"),
-    ("note", "Note", "var(--muted)"),
-]
-
-
-@admin_bp.route("/admin/login", methods=["GET", "POST"])
-def login():
-    if request.method == "POST":
-        username = request.form.get("username", "").strip()
-        password = request.form.get("password", "")
-
-        if (
-            username == current_app.config["ADMIN_USERNAME"]
-            and password == current_app.config["ADMIN_PASSWORD"]
-        ):
-            flask_session.pop("user_id", None)
-            flask_session["is_admin"] = True
-            flash("Admin login successful.", "success")
-            return redirect(url_for("admin.dashboard"))
-
-        flash("Invalid admin credentials.", "error")
-
-    return render_template("admin_login.html")
-
-
-@admin_bp.post("/admin/logout")
-def logout():
-    flask_session.clear()
-    flash("Logged out.", "success")
-    return redirect(url_for("public.home"))
-
-
-@admin_bp.post("/admin/session-state")
-def session_state():
-    if not is_admin():
-        flash("Admin login required.", "error")
-        return redirect(url_for("admin.login"))
-
-    data_path = current_app.config["DATA_PATH"]
-    session_id = request.form.get("session_id", "").strip()
-    state = request.form.get("state", "").strip()
-
-    events = load_events(data_path)
-    sessions = build_session_summaries(events)
-    by_id = {s.session_id: s for s in sessions}
-    target = by_id.get(session_id)
-
-    if target is None:
-        flash("Session not found.", "error")
-        return redirect(url_for("admin.dashboard"))
-
-    if state not in {"open", "closed"}:
-        flash("Invalid session state.", "error")
-        return redirect(url_for("admin.dashboard"))
-
-    append_event(
-        data_path,
-        session_id=target.session_id,
-        session_date=target.session_date,
-        amount_cents=0,
-        player_name="",
-        event_type="session_open" if state == "open" else "session_close",
-        note=f"Session marked {state}.",
-        actor=current_app.config["ADMIN_USERNAME"],
-    )
-
-    flash(f"Session marked {state}.", "success")
-    return redirect(url_for("admin.dashboard"))
-
-
-@admin_bp.get("/admin/export")
-@admin_bp.get("/admin/export.csv")
-def export_csv():
-    if not is_admin():
-        flash("Admin login required.", "error")
-        return redirect(url_for("admin.login"))
-
-    data_path = current_app.config["DATA_PATH"]
-    export_name = (
-        f"entries_export_{datetime.now(timezone.utc).strftime('%Y%m%d_%H%M%S')}.csv"
-    )
-
-    return send_file(
-        data_path,
-        as_attachment=True,
-        download_name=export_name,
-        mimetype="text/csv",
-    )
-
-
-@admin_bp.post("/admin/import")
-def import_csv():
-    if not is_admin():
-        flash("Admin login required.", "error")
-        return redirect(url_for("admin.login"))
-
-    data_path = current_app.config["DATA_PATH"]
-    uploaded_file = request.files.get("csv_file")
-    if uploaded_file is None or uploaded_file.filename == "":
-        flash("Choose a CSV file to import.", "error")
-        return redirect(url_for("admin.dashboard"))
-
-    if not uploaded_file.filename.lower().endswith(".csv"):
-        flash("Only CSV files are allowed.", "error")
-        return redirect(url_for("admin.dashboard"))
-
-    try:
-        uploaded_text = uploaded_file.stream.read().decode("utf-8-sig")
-    except UnicodeDecodeError:
-        flash("CSV file must be valid UTF-8 text.", "error")
-        return redirect(url_for("admin.dashboard"))
-
-    uploaded_lines = uploaded_text.splitlines()
-    if not uploaded_lines:
-        flash("CSV file is empty.", "error")
-        return redirect(url_for("admin.dashboard"))
-
-    try:
-        uploaded_header = next(csv.reader(uploaded_lines))
-    except Exception:
-        flash("Could not read the uploaded CSV header.", "error")
-        return redirect(url_for("admin.dashboard"))
-
-    if uploaded_header != CSV_HEADERS:
-        flash("CSV header does not match the current audit format.", "error")
-        return redirect(url_for("admin.dashboard"))
-
-    try:
-        existing_ids = {event["id"] for event in load_events(data_path)}
-        reader = csv.DictReader(uploaded_lines)
-        new_rows = []
-        skipped_count = 0
-        for row in reader:
-            event_id = row.get("id", "")
-            if not event_id or event_id in existing_ids:
-                skipped_count += 1
-                continue
-
-            new_rows.append({header: row.get(header, "") for header in CSV_HEADERS})
-            existing_ids.add(event_id)
-
-        if new_rows:
-            with open(data_path, "a", encoding="utf-8", newline="") as handle:
-                writer = csv.DictWriter(handle, fieldnames=CSV_HEADERS)
-                writer.writerows(new_rows)
-
-        flash(
-            f"Imported {len(new_rows)} new events, skipped {skipped_count} duplicates.",
-            "success",
-        )
-    except Exception:
-        flash("Import failed. Existing CSV was not updated.", "error")
-
-    return redirect(url_for("admin.dashboard"))
-
-
-@admin_bp.post("/admin/write-off-front")
-def write_off_front():
-    if not is_admin():
-        flash("Admin login required.", "error")
-        return redirect(url_for("admin.login"))
-
-    data_path = current_app.config["DATA_PATH"]
-    debt_key = request.form.get("debt_key", "").strip()
-    note = request.form.get("note", "").strip()
-    amount_raw = request.form.get("amount", "0").strip()
-
-    try:
-        amount_cents = int(round(float(amount_raw) * 100))
-    except ValueError:
-        flash("Amount must be a number.", "error")
-        return redirect(url_for("admin.dashboard"))
-
-    if amount_cents <= 0:
-        flash("Write-off amount must be greater than zero.", "error")
-        return redirect(url_for("admin.dashboard"))
-
-    try:
-        session_id, player_name = debt_key.split("||", 1)
-    except ValueError:
-        flash("Select a valid player debt.", "error")
-        return redirect(url_for("admin.dashboard"))
-
-    events = load_events(data_path)
-    sessions = build_session_summaries(events)
-    target = next((s for s in sessions if s.session_id == session_id), None)
-
-    if target is None:
-        flash("Session not found.", "error")
-        return redirect(url_for("admin.dashboard"))
-
-    entry = next(
-        (e for e in target.entries if e.player_name == player_name),
-        None,
-    )
-
-    if entry is None or entry.player_owes_cents <= 0:
-        flash("That player does not have an outstanding debt.", "error")
-        return redirect(url_for("admin.dashboard"))
-
-    if amount_cents > entry.player_owes_cents:
-        flash(
-            f"Write-off cannot exceed {cents_to_dollars(entry.player_owes_cents)}.",
-            "error",
-        )
-        return redirect(url_for("admin.dashboard"))
-
-    append_event(
-        data_path,
-        session_id=target.session_id,
-        session_date=target.session_date,
-        player_name=entry.player_name,
-        event_type="writeoff",
-        amount_cents=amount_cents,
-        note=note or "Debt written off.",
-        actor=current_app.config["ADMIN_USERNAME"],
-    )
-
-    flash("Debt written off.", "success")
-    return redirect(url_for("admin.dashboard"))
-
-
-@admin_bp.post("/admin/collect-front")
-def collect_front():
-    if not is_admin():
-        flash("Admin login required.", "error")
-        return redirect(url_for("admin.login"))
-
-    data_path = current_app.config["DATA_PATH"]
-    debt_key = request.form.get("debt_key", "").strip()
-    note = request.form.get("note", "").strip()
-    amount_raw = request.form.get("amount", "0").strip()
-
-    try:
-        amount_cents = int(round(float(amount_raw) * 100))
-    except ValueError:
-        flash("Amount must be a number.", "error")
-        return redirect(url_for("admin.dashboard"))
-
-    if amount_cents <= 0:
-        flash("Collected amount must be greater than zero.", "error")
-        return redirect(url_for("admin.dashboard"))
-
-    try:
-        session_id, player_name = debt_key.split("||", 1)
-    except ValueError:
-        flash("Select a valid player debt.", "error")
-        return redirect(url_for("admin.dashboard"))
-
-    events = load_events(data_path)
-    sessions = build_session_summaries(events)
-    target = next((s for s in sessions if s.session_id == session_id), None)
-
-    if target is None:
-        flash("Session not found.", "error")
-        return redirect(url_for("admin.dashboard"))
-
-    entry = next(
-        (e for e in target.entries if e.player_name == player_name),
-        None,
-    )
-
-    if entry is None or entry.player_owes_cents <= 0:
-        flash("That player does not have an outstanding debt.", "error")
-        return redirect(url_for("admin.dashboard"))
-
-    if amount_cents > entry.player_owes_cents:
-        flash(
-            f"Collection cannot exceed {cents_to_dollars(entry.player_owes_cents)}.",
-            "error",
-        )
-        return redirect(url_for("admin.dashboard"))
-
-    append_event(
-        data_path,
-        session_id=target.session_id,
-        session_date=target.session_date,
-        player_name=entry.player_name,
-        event_type="debt_repayment",
-        amount_cents=amount_cents,
-        note=note or "Debt repayment collected.",
-        actor=current_app.config["ADMIN_USERNAME"],
-    )
-
-    flash("Debt repayment collected.", "success")
-    return redirect(url_for("admin.dashboard"))
-
-
-@admin_bp.post("/admin/open-session")
-def open_session():
-    if not is_admin():
-        flash("Admin login required.", "error")
-        return redirect(url_for("admin.login"))
-
-    data_path = current_app.config["DATA_PATH"]
-    session_date = request.form.get("session_date", "").strip()
-    if not session_date:
-        flash("Session date is required.", "error")
-        return redirect(url_for("admin.dashboard"))
-
-    events = load_events(data_path)
-    sessions = build_session_summaries(events)
-    new_session_id = next_session_id(sessions, session_date)
-
-    append_event(
-        data_path,
-        session_id=new_session_id,
-        session_date=session_date,
-        amount_cents=0,
-        player_name="",
-        event_type="session_open",
-        note="Session opened.",
-        actor=current_app.config["ADMIN_USERNAME"],
-    )
-
-    flash(f"Opened session {new_session_id}.", "success")
-    return redirect(url_for("admin.dashboard"))
-
-
-@admin_bp.post("/admin/prune-empty-sessions")
-def prune_empty_sessions():
-    if not is_admin():
-        flash("Admin login required.", "error")
-        return redirect(url_for("admin.login"))
-
-    data_path = current_app.config["DATA_PATH"]
-    events = load_events(data_path)
-    sessions = build_session_summaries(events)
-    prunable_ids = prunable_empty_session_ids(events, sessions)
-
-    if not prunable_ids:
-        flash("No empty marker-only sessions to prune.", "success")
-        return redirect(url_for("admin.dashboard"))
-
-    pruned_events = [
-        event
-        for event in events
-        if (event["session_id"].strip() or event["session_date"].strip())
-        not in prunable_ids
-    ]
-    write_events(data_path, pruned_events)
-
-    flash(
-        f"Pruned {len(prunable_ids)} empty session"
-        f"{'s' if len(prunable_ids) != 1 else ''}.",
-        "success",
-    )
-    return redirect(url_for("admin.dashboard"))
-
-
-@admin_bp.post("/admin/apply-payout-carry-in")
-def apply_payout_carry_in():
-    if not is_admin():
-        flash("Admin login required.", "error")
-        return redirect(url_for("admin.login"))
-
-    data_path = current_app.config["DATA_PATH"]
-    session_id = request.form.get("session_id", "").strip()
-    player_name = request.form.get("player_name", "").strip()
-
-    events = load_events(data_path)
-    sessions = build_session_summaries(events)
-    by_id = {s.session_id: s for s in sessions}
-    target = by_id.get(session_id)
-
-    if target is None or target.status != "open":
-        flash("Select a valid open session.", "error")
-        return redirect(url_for("admin.dashboard"))
-
-    if not any(e.player_name == player_name for e in target.entries):
-        flash("Add that player to the open session before applying carry-in.", "error")
-        return redirect(url_for("admin.dashboard"))
-
-    pending_by_player = {
-        str(item["player_name"]): int(item["amount_cents"])
-        for item in pending_payout_carry_items(sessions)
-    }
-    amount_cents = pending_by_player.get(player_name, 0)
-
-    if amount_cents <= 0:
-        flash("No pending payout carry-in found for that player.", "error")
-        return redirect(url_for("admin.dashboard"))
-
-    append_event(
-        data_path,
-        session_id=target.session_id,
-        session_date=target.session_date,
-        player_name=player_name,
-        event_type="payout_carry_in",
-        amount_cents=amount_cents,
-        note="Payout carry-in from prior carry-out.",
-        actor=current_app.config["ADMIN_USERNAME"],
-    )
-
-    flash(
-        f"Applied {cents_to_dollars(amount_cents)} payout carry-in for {player_name}.",
-        "success",
-    )
-    return redirect(url_for("admin.dashboard"))
-
-
-@admin_bp.route("/admin", methods=["GET", "POST"])
-def dashboard():
-    if not is_admin():
-        return redirect(url_for("admin.login"))
-
-    data_path = current_app.config["DATA_PATH"]
-
-    if request.method == "POST":
-        session_id = request.form.get("session_id", "").strip()
-        player_name = request.form.get("player_name", "").strip()
-        event_type = request.form.get("event_type", "").strip()
-        note = request.form.get("note", "").strip()
-
-        amount_raw = request.form.get("amount", "0").strip()
-        try:
-            amount_cents = int(round(float(amount_raw) * 100))
-        except ValueError:
-            flash("Amount must be a number.", "error")
-            return redirect(url_for("admin.dashboard"))
-
-        events = load_events(data_path)
-        sessions = build_session_summaries(events)
-        by_id = {s.session_id: s for s in sessions}
-        target = by_id.get(session_id)
-
-        if target is None:
-            flash("Select a valid open session.", "error")
-            return redirect(url_for("admin.dashboard"))
-
-        if target.status != "open":
-            flash(
-                "That session is closed. Reopen it first if you need to add events.",
-                "error",
-            )
-            return redirect(url_for("admin.dashboard"))
-
-        append_event(
-            data_path,
-            session_id=target.session_id,
-            session_date=target.session_date,
-            player_name=player_name,
-            event_type=event_type,
-            amount_cents=amount_cents,
-            note=note,
-            actor=current_app.config["ADMIN_USERNAME"],
-        )
-
-        flash("Event added.", "success")
-        return redirect(
-            url_for(
-                "admin.dashboard",
-                session_id=session_id,
-                player_name=player_name,
-                event_type=event_type,
-            )
-        )
-
-    events = load_events(data_path)
-    sessions = build_session_summaries(events)
-    empty_session_count = len(prunable_empty_session_ids(events, sessions))
-    pending_carry_items = pending_payout_carry_items(sessions)
-    pending_carry_total_cents = sum(
-        int(item["amount_cents"]) for item in pending_carry_items
-    )
-    open_sessions = [s for s in sessions if s.status == "open"]
-    live_session = open_sessions[0] if open_sessions else None
-    live_session_player_names = (
-        {e.player_name for e in live_session.entries}
-        if live_session is not None
-        else set()
-    )
-    live_session_no = ""
-    live_unresolved_count = 0
-    if live_session is not None:
-        live_session_no = f"#{len(sessions):03d}"
-        live_unresolved_count = sum(
-            1
-            for e in live_session.entries
-            if e.current_due_cents > 0 or e.player_owes_cents > 0
-        )
-
-    recent_events = list(reversed(events[-20:]))
-    event_type_colors = {value: color for value, _label, color in ADMIN_EVENT_TYPES}
-    event_type_labels = {value: label for value, label, _color in ADMIN_EVENT_TYPES}
-    selected_event_type = request.args.get("event_type", "buyin").strip()
-    if selected_event_type not in event_type_colors:
-        selected_event_type = "buyin"
-    append_form = {
-        "session_id": request.args.get("session_id", "").strip(),
-        "player_name": request.args.get("player_name", "").strip(),
-        "event_type": selected_event_type,
-    }
-    debt_entries = [
-        {"session": s, "entry": e}
-        for s in sessions
-        for e in s.entries
-        if e.player_owes_cents > 0
-    ]
-
-    cash_in_cents = sum(s.total_banker_cash_in_cents for s in sessions)
-    cash_out_cents = sum(s.total_banker_cash_out_cents for s in sessions)
-    house_owes_players_cents = (
-        sum(s.total_current_due_to_player_cents for s in sessions)
-        + pending_carry_total_cents
-    )
-    players_owe_house_cents = sum(
-        s.total_current_due_to_house_cents for s in sessions
-    )
-    admin_totals = {
-        "cash_in_cents": cash_in_cents,
-        "cash_out_cents": cash_out_cents,
-        "house_owes_players_cents": house_owes_players_cents,
-        "players_owe_house_cents": players_owe_house_cents,
-        "pending_carry_cents": pending_carry_total_cents,
-        "collected_cents": sum(s.total_debt_repayment_cents for s in sessions),
-        "written_off_cents": sum(s.total_writeoff_cents for s in sessions),
-        "net_book_position_cents": (
-            cash_in_cents
-            - cash_out_cents
-            + players_owe_house_cents
-            - house_owes_players_cents
-        ),
-    }
-
-    return render_template(
-        "admin_dashboard.html",
-        open_sessions=open_sessions,
-        recent_sessions=sessions,
-        recent_events=recent_events,
-        debt_entries=debt_entries,
-        live_session=live_session,
-        live_session_player_names=live_session_player_names,
-        live_session_no=live_session_no,
-        live_unresolved_count=live_unresolved_count,
-        pending_carry_items=pending_carry_items,
-        player_names=unique_player_names(events),
-        append_form=append_form,
-        event_types=ADMIN_EVENT_TYPES,
-        event_type_colors=event_type_colors,
-        event_type_labels=event_type_labels,
-        admin_today=datetime.now().date().isoformat(),
-        session_label=session_label,
-        admin_totals=admin_totals,
-        empty_session_count=empty_session_count,
-    )
diff --git a/templates/admin_dashboard.html b/templates/admin_dashboard.html
deleted file mode 100644
index 975cd46..0000000
--- a/templates/admin_dashboard.html
+++ /dev/null
@@ -1,436 +0,0 @@
-{% extends "base.html" %}
-{% block title %}Admin · myboker.org{% endblock %}
-{% block page_class %}page--admin{% endblock %}
-{% block content %}
-
-<div class="hero" style="padding-bottom:12px;">
-    <div style="display:flex;align-items:center;gap:14px;flex-wrap:wrap;">
-        <p class="hero__kicker" style="margin:0;">Admin</p>
-        {% if open_sessions %}
-        <span class="live-badge">{{ open_sessions|length }} session{{ 's' if open_sessions|length != 1 else '' }} live</span>
-        {% endif %}
-    </div>
-    <h1 class="hero__title">Ledger controls</h1>
-    <p class="hero__sub">Append events to the audit trail. Player ledger history stays permanent.</p>
-</div>
-
-<!-- Banker cash/book position. Cash tiles are real money only; rollovers only
-     affect receivables/payables through the session settlement formulas. -->
-<div class="cash-strip">
-    <div class="stat stat--rail" style="--rail:var(--accent);">
-        <span class="kicker">Cash in</span>
-        <div class="stat__val" style="color:var(--num)">{{ admin_totals.cash_in_cents | money }}</div>
-    </div>
-    <div class="stat stat--rail" style="--rail:var(--pos);">
-        <span class="kicker">Cash paid out</span>
-        <div class="stat__val" style="color:var(--pos)">{{ admin_totals.cash_out_cents | money }}</div>
-    </div>
-    <div class="stat stat--rail" style="--rail:var(--neg);">
-        <span class="kicker">House owes players</span>
-        <div class="stat__val {{ 'num-neg' if admin_totals.house_owes_players_cents > 0 else '' }}">{{ admin_totals.house_owes_players_cents | money }}</div>
-    </div>
-    <div class="stat stat--rail" style="--rail:var(--owes);">
-        <span class="kicker">Players owe house</span>
-        <div class="stat__val {{ 'num-neg' if admin_totals.players_owe_house_cents > 0 else '' }}">{{ admin_totals.players_owe_house_cents | money }}</div>
-    </div>
-    <div class="stat stat--rail" style="--rail:{{ 'var(--pos)' if admin_totals.net_book_position_cents == 0 else 'var(--warn)' }};">
-        <span class="kicker">Net book position</span>
-        <div class="stat__val {% if admin_totals.net_book_position_cents == 0 %}num-muted{% elif admin_totals.net_book_position_cents > 0 %}num-pos{% else %}num-neg{% endif %}">
-            {{ admin_totals.net_book_position_cents | money }}
-        </div>
-        <div class="stat__sub">cash in - cash paid out + receivables - payables</div>
-    </div>
-</div>
-
-<!-- Admin workspace -->
-<div class="admin-workspace">
-
-    <form class="panel append" method="post" action="{{ url_for('admin.dashboard') }}">
-        <div class="panel__head">
-            <h2 class="panel__title">Append ledger event</h2>
-            <span class="panel__tag">fast entry</span>
-        </div>
-        <div class="append__body">
-            <div class="append__grid">
-                <label class="field">
-                    <span class="field__label">Session</span>
-                    <select class="control" name="session_id" required>
-                        <option value="">Select session</option>
-                        {% for s in open_sessions %}
-                        <option value="{{ s.session_id }}" {{ 'selected' if append_form.session_id == s.session_id else '' }}>
-                            {{ session_label(s) }}{{ ' (live)' if s.status == 'open' else '' }}
-                        </option>
-                        {% endfor %}
-                    </select>
-                </label>
-                <label class="field">
-                    <span class="field__label">Player</span>
-                    <input class="control" list="player_names_list" type="text" name="player_name" placeholder="Player name" value="{{ append_form.player_name }}" required>
-                    <datalist id="player_names_list">
-                        {% for name in player_names %}<option value="{{ name }}"></option>{% endfor %}
-                    </datalist>
-                </label>
-                <label class="field">
-                    <span class="field__label">Event type</span>
-                    <select class="control" name="event_type" required id="eventTypeSelect">
-                        {% for value, label, color in event_types %}
-                        <option value="{{ value }}" data-color="{{ color }}" data-label="{{ label }}" {{ 'selected' if append_form.event_type == value else '' }}>{{ label }}</option>
-                        {% endfor %}
-                    </select>
-                </label>
-                <label class="field">
-                    <span class="field__label">Amount</span>
-                    <span class="control control--money">
-                        <span class="control__prefix">$</span>
-                        <input name="amount" inputmode="decimal" placeholder="0" autofocus>
-                    </span>
-                </label>
-            </div>
-            <label class="field append__note">
-                <span class="field__label">Note <span class="field__opt">(optional)</span></span>
-                <textarea class="control append__textarea" name="note" placeholder="e.g. fronted buy-in, settle next week"></textarea>
-            </label>
-            <div class="append__footer">
-                <button type="submit" class="btn btn--primary">Append event</button>
-                <span class="append__preview">Will record as
-                    <span class="evtag-pill" id="eventTypePreview" style="color:{{ event_type_colors[append_form.event_type] }}">{{ event_type_labels[append_form.event_type] | upper }}</span>
-                </span>
-            </div>
-            {% if pending_carry_items %}
-            <div class="carry-recs">
-                <div class="micro">Recommended carry-ins</div>
-                {% for item in pending_carry_items %}
-                <div class="carry-rec">
-                    <span>{{ item.player_name }}</span>
-                    <strong>{{ item.amount_cents | money }}</strong>
-                    {% if live_session and item.player_name in live_session_player_names %}
-                    <form method="post" action="{{ url_for('admin.apply_payout_carry_in') }}">
-                        <input type="hidden" name="session_id" value="{{ live_session.session_id }}">
-                        <input type="hidden" name="player_name" value="{{ item.player_name }}">
-                        <button class="table-action-button" type="submit">Apply</button>
-                    </form>
-                    {% elif live_session %}
-                    <em>Add buy-in first</em>
-                    {% else %}
-                    <em>Open session</em>
-                    {% endif %}
-                </div>
-                {% endfor %}
-            </div>
-            {% endif %}
-        </div>
-    </form>
-
-    <div class="panel panel--pad session-control-panel">
-        <h2 class="panel__title panel__title--mb">Session controls</h2>
-        <div class="session-summary-strip">
-            <div>
-                <span class="micro">Today</span>
-                <strong>{{ admin_today }}</strong>
-            </div>
-            <div>
-                <span class="micro">Empty</span>
-                <strong>{{ empty_session_count }}</strong>
-            </div>
-        </div>
-
-        {% if live_session %}
-        <div class="livecard">
-            <div class="livecard__head">
-                <span class="dot dot--live"></span>
-                <span class="livecard__name">{{ session_label(live_session) }}</span>
-                <span class="livecard__no">{{ live_session_no }}</span>
-            </div>
-            <div class="livecard__metrics">
-                <div><div class="micro">Invested</div><div class="mono16">{{ live_session.total_invested_cents | money }}</div></div>
-                <div><div class="micro">Seated</div><div class="mono16">{{ live_session.entries|length }}</div></div>
-                <div><div class="micro">Open</div><div class="mono16 mono16--warn">{{ live_unresolved_count }}</div></div>
-            </div>
-            <form method="post" action="{{ url_for('admin.session_state') }}"
-                  {% if live_unresolved_count > 0 %}data-close-warning="true"{% endif %}>
-                <input type="hidden" name="session_id" value="{{ live_session.session_id }}">
-                <button class="btn-close" type="submit" name="state" value="closed">Close session</button>
-            </form>
-        </div>
-        {% else %}
-        <div class="livecard livecard--empty">
-            <div class="livecard__head">
-                <span class="dot dot--idle"></span>
-                <span class="livecard__name">No open session</span>
-                <span class="livecard__no">idle</span>
-            </div>
-            <div class="livecard__metrics">
-                <div><div class="micro">Invested</div><div class="mono16">{{ 0 | money }}</div></div>
-                <div><div class="micro">Seated</div><div class="mono16">0</div></div>
-                <div><div class="micro">Open</div><div class="mono16">0</div></div>
-            </div>
-        </div>
-        {% endif %}
-
-        <form method="post" action="{{ url_for('admin.open_session') }}">
-            <input type="hidden" name="session_date" value="{{ admin_today }}">
-            <button class="btn-newsession {{ 'btn-newsession--primary' if not live_session else '' }}" type="submit">+ Open new session</button>
-        </form>
-
-        <form method="post" action="{{ url_for('admin.prune_empty_sessions') }}" class="prune-session-form">
-            <button class="secondary-button" type="submit" {% if empty_session_count == 0 %}disabled{% endif %}>
-                Prune empty sessions{% if empty_session_count > 0 %} ({{ empty_session_count }}){% endif %}
-            </button>
-        </form>
-    </div>
-
-    <div class="panel panel--pad import-export-panel">
-        <h2 class="panel__title" style="margin:0 0 4px">Import / export</h2>
-        <p class="csv__desc">Back up or migrate the raw event ledger.</p>
-        <form method="post" action="{{ url_for('admin.import_csv') }}" enctype="multipart/form-data" class="import-form">
-            <div class="csv__btns">
-                <a class="csv-btn-ghost" href="{{ url_for('admin.export_csv') }}">&darr; Export CSV</a>
-                <label class="csv-btn-ghost" for="csvTopImport">&uarr; Import CSV</label>
-            </div>
-            <input id="csvTopImport" type="file" accept=".csv,text/csv" name="csv_file" hidden onchange="this.form.submit()">
-            <label class="csv__drop" id="csvDrop" for="csvTopImport">Drop ledger.csv to import</label>
-        </form>
-    </div>
-
-</div><!-- /.admin-workspace -->
-
-<!-- Debt resolution -->
-<div class="panel debt-panel">
-    <div class="panel__head">
-        <div>
-            <span class="kicker" style="margin:0;">Front receivables</span>
-            <h2 class="panel__title">Debt resolution</h2>
-        </div>
-        <div class="debt-summary">
-            <span class="badge badge--owes">Open {{ admin_totals.players_owe_house_cents | money }}</span>
-            <span class="badge badge--paid">Cash repaid {{ admin_totals.collected_cents | money }}</span>
-            <span class="badge badge--written_off">Written off {{ admin_totals.written_off_cents | money }}</span>
-        </div>
-    </div>
-    {% if debt_entries %}
-    <div class="debt-layout">
-        <div class="debt-list">
-            {% for item in debt_entries %}
-            {% set s = item.session %}{% set e = item.entry %}
-            <div class="debt-list-item">
-                <div>
-                    <strong>{{ e.player_name }}</strong>
-                    <span>{{ session_label(s) }}</span>
-                </div>
-                <b>{{ e.player_owes_cents | money }}</b>
-            </div>
-            {% endfor %}
-        </div>
-
-        <div class="debt-action-grid">
-            <form class="form-card debt-form" method="post" action="{{ url_for('admin.collect_front') }}">
-                <h3>Collect debt</h3>
-                <label>
-                    <span>Outstanding debt</span>
-                    <select name="debt_key" required>
-                        <option value="">Select debt</option>
-                        {% for item in debt_entries %}
-                        {% set s = item.session %}{% set e = item.entry %}
-                        <option value="{{ s.session_id }}||{{ e.player_name }}">
-                            {{ e.player_name }} · {{ session_label(s) }} · owes {{ e.player_owes_cents | money }}
-                        </option>
-                        {% endfor %}
-                    </select>
-                </label>
-                <label>
-                    <span>Amount collected</span>
-                    <input type="number" step="0.01" name="amount" placeholder="0.00" required>
-                </label>
-                <label>
-                    <span>Note</span>
-                    <textarea name="note" rows="2" placeholder="E-transfer received, cash, etc."></textarea>
-                </label>
-                <button class="primary-button" type="submit">Mark collected</button>
-            </form>
-
-            <form class="form-card debt-form" method="post" action="{{ url_for('admin.write_off_front') }}">
-                <h3>Write off debt</h3>
-                <label>
-                    <span>Outstanding debt</span>
-                    <select name="debt_key" required>
-                        <option value="">Select debt</option>
-                        {% for item in debt_entries %}
-                        {% set s = item.session %}{% set e = item.entry %}
-                        <option value="{{ s.session_id }}||{{ e.player_name }}">
-                            {{ e.player_name }} · {{ session_label(s) }} · owes {{ e.player_owes_cents | money }}
-                        </option>
-                        {% endfor %}
-                    </select>
-                </label>
-                <label>
-                    <span>Amount to write off</span>
-                    <input type="number" step="0.01" name="amount" placeholder="0.00" required>
-                </label>
-                <label>
-                    <span>Note</span>
-                    <textarea name="note" rows="2" placeholder="Won't be collected."></textarea>
-                </label>
-                <button class="secondary-button" type="submit">Write off debt</button>
-            </form>
-        </div>
-    </div>
-    {% else %}
-    <div class="debt-empty">
-        <div class="debt-empty__mark">$0</div>
-        <p>No open player debts right now.</p>
-    </div>
-    {% endif %}
-</div>
-
-<div class="admin-bottom-grid">
-    <div class="panel">
-        <div class="panel__head">
-            <div>
-                <span class="kicker" style="margin:0;">All sessions</span>
-                <h2 class="panel__title">Current totals</h2>
-            </div>
-        </div>
-        <div class="table-wrap">
-            <table>
-                <thead>
-                    <tr>
-                        <th>Session</th>
-                        <th>Players</th>
-                        <th>Cash in</th>
-                        <th>Cash paid out</th>
-                        <th>House owes players</th>
-                        <th>Players owe house</th>
-                        <th>Book position</th>
-                        <th>Status</th>
-                        <th>Action</th>
-                    </tr>
-                </thead>
-                <tbody>
-                    {% for s in recent_sessions %}
-                    <tr>
-                        <td><a href="{{ url_for('public.session_detail', session_id=s.session_id) }}">{{ session_label(s) }}</a></td>
-                        <td style="font-family:var(--font-mono);color:var(--num)">{{ s.entries|length }}</td>
-                        <td style="font-family:var(--font-mono);color:var(--num)">{{ s.total_banker_cash_in_cents | money }}</td>
-                        <td style="font-family:var(--font-mono);color:var(--pos)">{{ s.total_banker_cash_out_cents | money }}</td>
-                        <td class="{{ 'negative' if s.total_current_due_to_player_cents > 0 else '' }}" style="font-family:var(--font-mono)">{{ s.total_current_due_to_player_cents | money }}</td>
-                        <td class="{{ 'negative' if s.total_current_due_to_house_cents > 0 else '' }}" style="font-family:var(--font-mono)">{{ s.total_current_due_to_house_cents | money }}</td>
-                        <td class="{% if s.total_net_book_position_cents > 0 %}positive{% elif s.total_net_book_position_cents < 0 %}negative{% endif %}" style="font-family:var(--font-mono)">{{ s.total_net_book_position_cents | money }}</td>
-                        <td><span class="status-badge status-{{ s.status }}">{{ s.status }}</span></td>
-                        <td>
-                            <form method="post" action="{{ url_for('admin.session_state') }}" class="inline-action-form">
-                                <input type="hidden" name="session_id" value="{{ s.session_id }}">
-                                {% if s.status == "open" %}
-                                <button class="table-action-button" type="submit" name="state" value="closed">Close</button>
-                                {% else %}
-                                <button class="table-action-button" type="submit" name="state" value="open">Reopen</button>
-                                {% endif %}
-                            </form>
-                        </td>
-                    </tr>
-                    {% else %}
-                    <tr><td colspan="9">No sessions yet.</td></tr>
-                    {% endfor %}
-                </tbody>
-            </table>
-        </div>
-    </div>
-
-    <div class="panel">
-        <div class="panel__head">
-            <div>
-                <span class="kicker" style="margin:0;">Recent events</span>
-                <h2 class="panel__title">Ledger feed</h2>
-            </div>
-            <span class="badge badge--closed" style="font-size:9.5px;">append-only</span>
-        </div>
-        <div class="event-feed feed feed--inline">
-            {% for event in recent_events %}
-            <div class="event-card event-card--inline">
-                <div class="event-card-top">
-                    <strong>{{ event.player_name or "Session" }}</strong>
-                    <span class="pill pill-{{ event.event_type }}">{{ event.event_type | replace('_', ' ') }}</span>
-                    {% if event.note %}<span class="event-note">{{ event.note }}</span>{% endif %}
-                </div>
-                <p class="event-amount">{{ event.amount_cents | money }}</p>
-                <p class="tiny-text">{{ event.session_date | pretty_date }}</p>
-            </div>
-            {% else %}
-            <p class="muted-text" style="padding:20px;">No recent events.</p>
-            {% endfor %}
-        </div>
-    </div>
-</div>
-
-<div class="modal-backdrop" id="closeSessionModal" hidden>
-    <div class="modal-card" role="dialog" aria-modal="true" aria-labelledby="closeSessionModalTitle">
-        <div class="modal-card__head">
-            <span class="kicker" style="margin:0;">Open settlement</span>
-            <h2 class="panel__title" id="closeSessionModalTitle">Close session?</h2>
-        </div>
-        <p class="modal-card__text">This session has unpaid or uncarried cashouts, or unresolved debts. Closing stops table entry, but the open settlement items will remain tracked.</p>
-        <div class="modal-card__actions">
-            <button class="secondary-button" type="button" id="cancelCloseSession">Keep open</button>
-            <button class="btn btn--primary" type="button" id="confirmCloseSession">Close session</button>
-        </div>
-    </div>
-</div>
-
-<script>
-const eventTypeSelect = document.getElementById('eventTypeSelect');
-const eventTypePreview = document.getElementById('eventTypePreview');
-eventTypeSelect?.addEventListener('change', () => {
-    const option = eventTypeSelect.selectedOptions[0];
-    if (!option || !eventTypePreview) return;
-    eventTypePreview.style.color = option.dataset.color || 'var(--muted)';
-    eventTypePreview.textContent = (option.dataset.label || option.value).toUpperCase();
-});
-
-const csvDrop = document.getElementById('csvDrop');
-const csvInput = document.getElementById('csvTopImport');
-csvDrop?.addEventListener('dragover', (event) => {
-    event.preventDefault();
-    csvDrop.classList.add('is-drag');
-});
-csvDrop?.addEventListener('dragleave', () => csvDrop.classList.remove('is-drag'));
-csvDrop?.addEventListener('drop', (event) => {
-    event.preventDefault();
-    csvDrop.classList.remove('is-drag');
-    if (!csvInput || !event.dataTransfer?.files?.length) return;
-    csvInput.files = event.dataTransfer.files;
-    csvInput.form?.submit();
-});
-
-const closeSessionModal = document.getElementById('closeSessionModal');
-const cancelCloseSession = document.getElementById('cancelCloseSession');
-const confirmCloseSession = document.getElementById('confirmCloseSession');
-let pendingCloseForm = null;
-
-document.querySelectorAll('form[data-close-warning="true"]').forEach((form) => {
-    form.addEventListener('submit', (event) => {
-        if (form.dataset.confirmed === 'true') return;
-        event.preventDefault();
-        pendingCloseForm = form;
-        closeSessionModal.hidden = false;
-        confirmCloseSession?.focus();
-    });
-});
-
-cancelCloseSession?.addEventListener('click', () => {
-    closeSessionModal.hidden = true;
-    pendingCloseForm = null;
-});
-
-closeSessionModal?.addEventListener('click', (event) => {
-    if (event.target !== closeSessionModal) return;
-    closeSessionModal.hidden = true;
-    pendingCloseForm = null;
-});
-
-confirmCloseSession?.addEventListener('click', () => {
-    if (!pendingCloseForm) return;
-    pendingCloseForm.dataset.confirmed = 'true';
-    pendingCloseForm.submit();
-});
-</script>
-
-{% endblock %}
diff --git a/templates/admin_login.html b/templates/admin_login.html
deleted file mode 100644
index 2ac4754..0000000
--- a/templates/admin_login.html
+++ /dev/null
@@ -1,24 +0,0 @@
-{% extends "base.html" %}
-{% block title %}Admin Login · myboker.org{% endblock %}
-{% block content %}
-
-<div class="form-shell narrow">
-    <form class="panel form-card" method="post">
-        <div>
-            <p class="eyebrow">Restricted access</p>
-            <h1 style="font-size:28px;margin-bottom:8px;">Admin login</h1>
-            <p class="muted-text" style="margin-bottom:8px;">Only myboker.org manager needs credentials. All stats pages stay public.</p>
-        </div>
-        <label>
-            <span>Username</span>
-            <input type="text" name="username" autocomplete="username" required>
-        </label>
-        <label>
-            <span>Password</span>
-            <input type="password" name="password" autocomplete="current-password" required>
-        </label>
-        <button class="primary-button" type="submit">Login</button>
-    </form>
-</div>
-
-{% endblock %}
diff --git a/templates/leaderboard.html b/templates/leaderboard.html
index e07dcf5..19fa8ce 100644
--- a/templates/leaderboard.html
+++ b/templates/leaderboard.html
@@ -131,7 +131,7 @@
             {% else %}
             <tr>
                 <td colspan="9" style="text-align:left;padding:28px;color:var(--muted);">
-                    No players yet — add the first event from the admin page.
+                    No players yet.
                 </td>
             </tr>
             {% endfor %}
diff --git a/tests/test_accounting.py b/tests/test_accounting.py
index f4e2c8c..4b7c075 100644
--- a/tests/test_accounting.py
+++ b/tests/test_accounting.py
@@ -1,15 +1,12 @@
-from pathlib import Path
-import tempfile
 import unittest
 
-import app as app_module
 from charts import player_session_series
 from services import (
     build_leaderboard,
     build_session_summaries,
     pending_payout_carry_items,
+    prunable_empty_session_ids,
 )
-from storage import load_events, write_events
 from utils import session_sort_key
 
 
@@ -189,7 +186,7 @@ class AccountingTests(unittest.TestCase):
         self.assertEqual(entry.paid_out_cents, 0)
         self.assertEqual(entry.payout_status, "settled")
 
-    def test_admin_can_apply_pending_payout_carry_in_to_open_session(self):
+    def test_pending_payout_carry_in_preserves_poker_investment(self):
         rows = [
             event("s1", "2026-01-01", "", "session_open", 0, 1),
             event("s1", "2026-01-01", "A", "buyin", 10, 2),
@@ -200,37 +197,19 @@ class AccountingTests(unittest.TestCase):
             event("s2", "2026-01-02", "A", "buyin", 10, 7),
         ]
 
-        with tempfile.TemporaryDirectory() as tmpdir:
-            data_path = Path(tmpdir) / "entries.csv"
-            write_events(data_path, rows)
-            original_path = app_module.app.config["DATA_PATH"]
-            app_module.app.config["DATA_PATH"] = data_path
+        sessions = build_session_summaries(rows)
+        self.assertEqual(
+            pending_payout_carry_items(sessions),
+            [{"player_name": "A", "amount_cents": cents(5)}],
+        )
 
-            try:
-                sessions = build_session_summaries(load_events(data_path))
-                self.assertEqual(
-                    pending_payout_carry_items(sessions),
-                    [{"player_name": "A", "amount_cents": cents(5)}],
-                )
-
-                with app_module.app.test_client() as client:
-                    with client.session_transaction() as flask_session:
-                        flask_session["is_admin"] = True
-
-                    response = client.post(
-                        "/admin/apply-payout-carry-in",
-                        data={"session_id": "s2", "player_name": "A"},
-                    )
-            finally:
-                app_module.app.config["DATA_PATH"] = original_path
-
-            self.assertEqual(response.status_code, 302)
-            updated_sessions = build_session_summaries(load_events(data_path))
-            target = next(s for s in updated_sessions if s.session_id == "s2")
-            target_entry = target.entries[0]
-            self.assertEqual(target_entry.payout_carry_in_cents, cents(5))
-            self.assertEqual(target_entry.invested_cents, cents(10))
-            self.assertEqual(target_entry.current_due_to_player_cents, cents(5))
+        rows.append(event("s2", "2026-01-02", "A", "payout_carry_in", 5, 8))
+        updated_sessions = build_session_summaries(rows)
+        target = next(s for s in updated_sessions if s.session_id == "s2")
+        target_entry = target.entries[0]
+        self.assertEqual(target_entry.payout_carry_in_cents, cents(5))
+        self.assertEqual(target_entry.invested_cents, cents(10))
+        self.assertEqual(target_entry.current_due_to_player_cents, cents(5))
 
     def test_same_day_sessions_sort_by_session_sequence(self):
         rows = [
@@ -248,7 +227,7 @@ class AccountingTests(unittest.TestCase):
             ["Mar 21, 2026 · S1", "Mar 21, 2026 · S2"],
         )
 
-    def test_admin_prunes_only_empty_marker_sessions(self):
+    def test_prunable_empty_sessions_excludes_played_sessions(self):
         rows = [
             event("empty-1", "2026-01-01", "", "session_open", 0, 1),
             event("empty-1", "2026-01-01", "", "session_close", 0, 2),
@@ -258,31 +237,21 @@ class AccountingTests(unittest.TestCase):
             event("played-1", "2026-01-02", "", "session_close", 0, 6),
         ]
 
-        with tempfile.TemporaryDirectory() as tmpdir:
-            data_path = Path(tmpdir) / "entries.csv"
-            write_events(data_path, rows)
-            original_path = app_module.app.config["DATA_PATH"]
-            app_module.app.config["DATA_PATH"] = data_path
+        sessions = build_session_summaries(rows)
+        prunable_ids = prunable_empty_session_ids(rows, sessions)
+        self.assertEqual(prunable_ids, {"empty-1"})
 
-            try:
-                with app_module.app.test_client() as client:
-                    with client.session_transaction() as flask_session:
-                        flask_session["is_admin"] = True
-
-                    response = client.post("/admin/prune-empty-sessions")
-            finally:
-                app_module.app.config["DATA_PATH"] = original_path
-
-            self.assertEqual(response.status_code, 302)
-            remaining = load_events(data_path)
-            self.assertEqual(
-                {row["session_id"] for row in remaining},
-                {"played-1"},
-            )
-            self.assertEqual(
-                [row["event_type"] for row in remaining],
-                ["session_open", "buyin", "cashout", "session_close"],
-            )
+        remaining = [
+            row
+            for row in rows
+            if (row["session_id"].strip() or row["session_date"].strip())
+            not in prunable_ids
+        ]
+        self.assertEqual({row["session_id"] for row in remaining}, {"played-1"})
+        self.assertEqual(
+            [row["event_type"] for row in remaining],
+            ["session_open", "buyin", "cashout", "session_close"],
+        )
 
 
 if __name__ == "__main__":
diff --git a/tests/test_stats.py b/tests/test_stats.py
index 36ceaf3..940cdda 100644
--- a/tests/test_stats.py
+++ b/tests/test_stats.py
@@ -1,10 +1,11 @@
 import unittest
 
-from stats import SessionEntry, SessionSummary, build_leaderboard
+from models import SessionEntry, SessionSummary
+from services import build_leaderboard
 
 
 class CashInAccountingTest(unittest.TestCase):
-    def test_front_recovered_from_cashout_counts_as_session_cash_in(self):
+    def test_front_is_poker_investment_not_cash_in(self):
         entry = SessionEntry(
             session_id="2026-06-21-01",
             session_date="2026-06-21",
@@ -20,10 +21,10 @@ class CashInAccountingTest(unittest.TestCase):
         )
 
         self.assertEqual(session.total_buy_in_cents, 2500)
-        self.assertEqual(session.total_front_collected_cents, 0)
-        self.assertEqual(session.total_cash_in_cents, 3000)
+        self.assertEqual(session.total_front_cents, 500)
+        self.assertEqual(session.total_cash_in_cents, 2500)
 
-    def test_collected_front_shortfall_counts_as_session_cash_in(self):
+    def test_debt_repayment_counts_as_session_cash_in(self):
         entry = SessionEntry(
             session_id="2026-06-21-01",
             session_date="2026-06-21",
@@ -39,7 +40,7 @@ class CashInAccountingTest(unittest.TestCase):
         )
 
         self.assertEqual(session.total_front_collected_cents, 600)
-        self.assertEqual(session.total_cash_in_cents, 1000)
+        self.assertEqual(session.total_cash_in_cents, 600)
 
     def test_written_off_front_does_not_count_as_session_cash_in(self):
         entry = SessionEntry(
@@ -58,7 +59,7 @@ class CashInAccountingTest(unittest.TestCase):
         self.assertEqual(session.total_front_writeoff_cents, 1000)
         self.assertEqual(session.total_cash_in_cents, 0)
 
-    def test_leaderboard_cash_in_includes_collected_fronts(self):
+    def test_leaderboard_cash_in_uses_real_cash_only(self):
         session = SessionSummary(
             session_id="2026-06-21-01",
             session_date="2026-06-21",
@@ -69,6 +70,7 @@ class CashInAccountingTest(unittest.TestCase):
                     player_name="Alex",
                     buy_in_cents=2500,
                     front_cents=500,
+                    front_collected_cents=200,
                     cash_out_cents=4000,
                 )
             ],
@@ -77,8 +79,8 @@ class CashInAccountingTest(unittest.TestCase):
         player = build_leaderboard([session])[0]
 
         self.assertEqual(player.total_buy_in_cents, 2500)
-        self.assertEqual(player.total_front_collected_cents, 0)
-        self.assertEqual(player.total_cash_in_cents, 3000)
+        self.assertEqual(player.total_front_collected_cents, 200)
+        self.assertEqual(player.total_real_cash_in_cents, 2700)
 
 
 if __name__ == "__main__":

From 51c8656a6982c6a62fe50989a0e7a61c38d625f9 Mon Sep 17 00:00:00 2001
From: SowinskiBraeden <braeden@sowinski.dev>
Date: Sun, 28 Jun 2026 12:11:22 -0700
Subject: [PATCH 75/83] internal statistics & tooling

---
 app.py                                |   5 +-
 config.py                             |   2 +-
 emails.py                             |  21 +
 routes/internal.py                    | 663 ++++++++++++++++++++++++++
 static/css/style.css                  | 206 ++++++++
 templates/_internal_sidebar.html      |  56 +++
 templates/internal_dashboard.html     | 374 +++++++++++++++
 templates/internal_league_detail.html | 128 +++++
 templates/internal_leagues.html       |  71 +++
 templates/internal_user_detail.html   | 148 ++++++
 templates/internal_users.html         |  73 +++
 tests/test_internal.py                | 320 +++++++++++++
 12 files changed, 2065 insertions(+), 2 deletions(-)
 create mode 100644 routes/internal.py
 create mode 100644 templates/_internal_sidebar.html
 create mode 100644 templates/internal_dashboard.html
 create mode 100644 templates/internal_league_detail.html
 create mode 100644 templates/internal_leagues.html
 create mode 100644 templates/internal_user_detail.html
 create mode 100644 templates/internal_users.html
 create mode 100644 tests/test_internal.py

diff --git a/app.py b/app.py
index a660084..529ec5a 100644
--- a/app.py
+++ b/app.py
@@ -4,11 +4,12 @@ from __future__ import annotations
 import click
 from flask import Flask, render_template
 
-from auth import current_user_id, is_logged_in, normalize_email
+from auth import current_user_id, is_logged_in, is_site_admin, normalize_email
 from config import Config
 from db import database_extensions_available, db, init_database
 from extensions import csrf, limiter, mail
 from routes.account import account_bp
+from routes.internal import internal_bp
 from routes.leagues import leagues_bp
 from routes.public import public_bp
 from storage import ensure_data_file
@@ -36,10 +37,12 @@ def create_app(config_overrides: dict | None = None) -> Flask:
             "app_version": app.config["APP_VERSION"],
             "current_user_id": current_user_id(),
             "is_logged_in": is_logged_in(),
+            "current_user_is_site_admin": is_site_admin(),
         }
 
     app.register_blueprint(public_bp)
     app.register_blueprint(account_bp)
+    app.register_blueprint(internal_bp)
     app.register_blueprint(leagues_bp)
 
     @app.errorhandler(404)
diff --git a/config.py b/config.py
index 5a4dfc4..d54a306 100644
--- a/config.py
+++ b/config.py
@@ -9,7 +9,7 @@ DATA_PATH = BASE_DIR / "data" / "entries.csv"
 DEFAULT_DATABASE_URL = f"sqlite:///{BASE_DIR / 'data' / 'boker-dev.sqlite3'}"
 
 ELIGIBLE_MIN_SESSIONS = 3
-APP_VERSION = "2.5.24"
+APP_VERSION = "2.5.28"
 
 
 def load_local_env(env_path: Path) -> None:
diff --git a/emails.py b/emails.py
index 477b4eb..10391c3 100644
--- a/emails.py
+++ b/emails.py
@@ -127,6 +127,27 @@ def send_password_reset(to_email: str, reset_url: str) -> None:
     _send_message(msg)
 
 
+def send_temporary_password(to_email: str, temporary_password: str) -> None:
+    body = (
+        "A temporary password was created for your myboker.org account.\n\n"
+        f"Temporary password:\n\n{temporary_password}\n\n"
+        "Sign in with this password, then change it from account settings."
+    )
+    msg = Message(
+        subject="Temporary myboker.org password",
+        recipients=[to_email],
+        body=body,
+        html=_html_email(
+            "Temporary password",
+            "A site administrator created a temporary password for your myboker.org account.",
+            code=temporary_password,
+            note="Sign in with this password, then change it from account settings.",
+        ),
+        sender=current_app.config.get("MAIL_DEFAULT_SENDER"),
+    )
+    _send_message(msg)
+
+
 def send_email_verification_code(to_email: str, code: str) -> None:
     body = (
         "Verify your myboker.org account with this code:\n\n"
diff --git a/routes/internal.py b/routes/internal.py
new file mode 100644
index 0000000..f83e941
--- /dev/null
+++ b/routes/internal.py
@@ -0,0 +1,663 @@
+#!/usr/bin/env python3
+from __future__ import annotations
+
+import secrets
+import string
+from datetime import datetime, timedelta, timezone
+
+from flask import Blueprint, current_app, flash, redirect, render_template, request, url_for
+from sqlalchemy import or_
+from sqlalchemy.exc import IntegrityError
+
+from auth import (
+    current_user_id,
+    generate_reset_token,
+    hash_password,
+    normalize_email,
+    site_admin_required,
+)
+from db import db
+from db_models import LedgerEvent, League, LeagueMembership, Player, PokerSession, User, utc_now
+from league_repositories import delete_league, transfer_league_ownership
+from utils import slugify
+
+
+internal_bp = Blueprint("internal", __name__, url_prefix="/internal")
+
+
+def _current_admin() -> User:
+    return User.query.filter_by(id=current_user_id()).one()
+
+
+def _user_or_404(user_id: str) -> User:
+    return User.query.filter_by(id=user_id).one_or_404()
+
+
+def _league_or_404(league_id: str) -> League:
+    return League.query.filter_by(id=league_id).one_or_404()
+
+
+def _owner_for_league(league_id: str) -> User | None:
+    row = (
+        db.session.query(User)
+        .join(LeagueMembership, LeagueMembership.user_id == User.id)
+        .filter(
+            LeagueMembership.league_id == league_id,
+            LeagueMembership.role == "owner",
+            LeagueMembership.disabled_at.is_(None),
+        )
+        .one_or_none()
+    )
+    return row
+
+
+def _temporary_password(length: int = 14) -> str:
+    alphabet = string.ascii_letters + string.digits
+    return "".join(secrets.choice(alphabet) for _ in range(length))
+
+
+_CASH_IN_TYPES = ("buyin", "debt_repayment", "front_collected")
+_PAGE_SIZE = 50
+
+
+def _page_number() -> int:
+    try:
+        return max(1, int(request.args.get("page", "1")))
+    except (TypeError, ValueError):
+        return 1
+
+
+def _paginate(query, page: int, per_page: int = _PAGE_SIZE) -> dict:
+    total = query.order_by(None).count()
+    pages = max(1, (total + per_page - 1) // per_page)
+    page = min(page, pages)
+    items = query.limit(per_page).offset((page - 1) * per_page).all()
+    return {
+        "items": items,
+        "page": page,
+        "pages": pages,
+        "per_page": per_page,
+        "total": total,
+        "has_prev": page > 1,
+        "has_next": page < pages,
+        "prev_page": page - 1,
+        "next_page": page + 1,
+        "start": ((page - 1) * per_page + 1) if total else 0,
+        "end": min(page * per_page, total),
+    }
+
+
+def _site_stats() -> dict:
+    now = datetime.now(timezone.utc)
+    today = now.date()
+    day_ago = now - timedelta(days=1)
+    week_ago = now - timedelta(days=7)
+    week_ago_date = week_ago.date()
+    month_ago = now - timedelta(days=30)
+
+    cash_in_cents = (
+        db.session.query(db.func.coalesce(db.func.sum(LedgerEvent.amount_cents), 0))
+        .filter(LedgerEvent.voided_at.is_(None), LedgerEvent.event_type.in_(_CASH_IN_TYPES))
+        .scalar()
+    )
+    cash_out_cents = (
+        db.session.query(db.func.coalesce(db.func.sum(LedgerEvent.amount_cents), 0))
+        .filter(LedgerEvent.voided_at.is_(None), LedgerEvent.event_type == "paid_out")
+        .scalar()
+    )
+
+    # avg distinct players per session (via buyin events)
+    session_player_counts = (
+        db.session.query(
+            LedgerEvent.session_id,
+            db.func.count(db.func.distinct(LedgerEvent.player_id)).label("n"),
+        )
+        .filter(LedgerEvent.event_type == "buyin", LedgerEvent.voided_at.is_(None))
+        .group_by(LedgerEvent.session_id)
+        .subquery()
+    )
+    avg_players = db.session.query(
+        db.func.coalesce(db.func.avg(session_player_counts.c.n), 0)
+    ).scalar()
+
+    users_in_leagues = (
+        db.session.query(db.func.count(db.func.distinct(LeagueMembership.user_id)))
+        .filter(LeagueMembership.disabled_at.is_(None))
+        .scalar()
+    )
+    leagues_with_sessions = (
+        db.session.query(db.func.count(db.func.distinct(PokerSession.league_id)))
+        .scalar()
+    )
+    leagues_active_7d = (
+        db.session.query(db.func.count(db.func.distinct(PokerSession.league_id)))
+        .filter(PokerSession.session_date >= week_ago_date)
+        .scalar()
+    )
+    sessions_with_events = (
+        db.session.query(db.func.count(db.func.distinct(LedgerEvent.session_id)))
+        .filter(LedgerEvent.voided_at.is_(None))
+        .scalar()
+    )
+
+    session_count = PokerSession.query.count()
+    active_league_count = League.query.filter_by(archived_at=None).count()
+    active_users_24h = User.query.filter(User.last_login_at >= day_ago).count()
+    active_users_7d = User.query.filter(User.last_login_at >= week_ago).count()
+    active_users_30d = User.query.filter(User.last_login_at >= month_ago).count()
+    returning_users_7d = User.query.filter(User.created_at < week_ago, User.last_login_at >= week_ago).count()
+    returning_users_30d = User.query.filter(User.created_at < month_ago, User.last_login_at >= month_ago).count()
+    total_users = User.query.count()
+    voided_events = LedgerEvent.query.filter(LedgerEvent.voided_at.is_not(None)).count()
+    ledger_events = LedgerEvent.query.filter_by(voided_at=None).count()
+
+    return {
+        "users": total_users,
+        "active_users": User.query.filter_by(disabled_at=None).count(),
+        "disabled_users": User.query.filter(User.disabled_at.is_not(None)).count(),
+        "verified_users": User.query.filter(User.email_verified_at.is_not(None)).count(),
+        "unverified_users": User.query.filter(User.email_verified_at.is_(None)).count(),
+        "users_in_leagues": int(users_in_leagues or 0),
+        "orphan_users": total_users - int(users_in_leagues or 0),
+        "site_admins": User.query.filter_by(is_site_admin=True, disabled_at=None).count(),
+        "new_users_24h": User.query.filter(User.created_at >= day_ago).count(),
+        "new_users_7d": User.query.filter(User.created_at >= week_ago).count(),
+        "active_users_24h": active_users_24h,
+        "active_users_7d": active_users_7d,
+        "active_users_30d": active_users_30d,
+        "returning_users_7d": returning_users_7d,
+        "returning_users_30d": returning_users_30d,
+        "leagues": League.query.count(),
+        "active_leagues": active_league_count,
+        "archived_leagues": League.query.filter(League.archived_at.is_not(None)).count(),
+        "public_leagues": League.query.filter_by(visibility="public", archived_at=None).count(),
+        "leagues_with_sessions": int(leagues_with_sessions or 0),
+        "leagues_without_sessions": max(active_league_count - int(leagues_with_sessions or 0), 0),
+        "leagues_active_7d": int(leagues_active_7d or 0),
+        "sessions": session_count,
+        "open_sessions": PokerSession.query.filter_by(status="open").count(),
+        "sessions_24h": PokerSession.query.filter(PokerSession.session_date == today).count(),
+        "sessions_7d": PokerSession.query.filter(PokerSession.session_date >= week_ago_date).count(),
+        "sessions_without_events": max(session_count - int(sessions_with_events or 0), 0),
+        "ledger_events": ledger_events,
+        "ledger_events_24h": LedgerEvent.query.filter(LedgerEvent.created_at >= day_ago).count(),
+        "ledger_events_7d": LedgerEvent.query.filter(LedgerEvent.created_at >= week_ago).count(),
+        "voided_events": voided_events,
+        "void_rate": round((voided_events / (ledger_events + voided_events)) * 100, 1) if ledger_events or voided_events else 0,
+        "cash_in_cents": int(cash_in_cents or 0),
+        "cash_out_cents": int(cash_out_cents or 0),
+        "avg_cash_in_per_session_cents": int((cash_in_cents or 0) / session_count) if session_count else 0,
+        "avg_sessions_per_active_league": round(session_count / active_league_count, 1) if active_league_count else 0,
+        "avg_players_per_session": round(float(avg_players or 0), 1),
+    }
+
+
+def _top_leagues(limit: int = 8):
+    rows = (
+        db.session.query(League, db.func.count(PokerSession.id).label("n"))
+        .outerjoin(PokerSession, PokerSession.league_id == League.id)
+        .filter(League.archived_at.is_(None))
+        .group_by(League.id)
+        .order_by(db.func.count(PokerSession.id).desc())
+        .limit(limit)
+        .all()
+    )
+    return [(league, count) for league, count in rows]
+
+
+def _sessions_by_weekday() -> dict:
+    from sqlalchemy import func as f
+    rows = (
+        db.session.query(
+            f.strftime("%w", PokerSession.session_date).label("dow"),
+            f.count(PokerSession.id).label("cnt"),
+        )
+        .group_by("dow")
+        .all()
+    )
+    counts = {str(i): 0 for i in range(7)}
+    for row in rows:
+        counts[str(row.dow)] = row.cnt
+    return {
+        "labels": ["Sun", "Mon", "Tue", "Wed", "Thu", "Fri", "Sat"],
+        "data": [counts[str(i)] for i in range(7)],
+    }
+
+
+def _growth_data(weeks: int = 8) -> dict:
+    now = datetime.now(timezone.utc)
+    labels, user_signups, session_counts, cash_in_weekly = [], [], [], []
+    for i in range(weeks - 1, -1, -1):
+        start = now - timedelta(weeks=i + 1)
+        end = now - timedelta(weeks=i)
+        start_date = start.date()
+        end_date = end.date()
+        labels.append(start.strftime("%b %-d"))
+        user_signups.append(User.query.filter(User.created_at >= start, User.created_at < end).count())
+        session_counts.append(
+            PokerSession.query.filter(
+                PokerSession.session_date >= start_date,
+                PokerSession.session_date < end_date,
+            ).count()
+        )
+        cash = (
+            db.session.query(db.func.coalesce(db.func.sum(LedgerEvent.amount_cents), 0))
+            .filter(
+                LedgerEvent.event_type.in_(_CASH_IN_TYPES),
+                LedgerEvent.voided_at.is_(None),
+                LedgerEvent.created_at >= start,
+                LedgerEvent.created_at < end,
+            )
+            .scalar()
+        )
+        cash_in_weekly.append(round(int(cash or 0) / 100, 2))
+    return {
+        "labels": labels,
+        "user_signups": user_signups,
+        "session_counts": session_counts,
+        "cash_in_weekly": cash_in_weekly,
+    }
+
+
+def _trend_delta(current: int | float, previous: int | float) -> dict:
+    if previous == 0:
+        pct = None if current else 0
+    else:
+        pct = round(((current - previous) / previous) * 100, 1)
+    direction = "flat"
+    if current > previous:
+        direction = "up"
+    elif current < previous:
+        direction = "down"
+    return {"current": current, "previous": previous, "pct": pct, "direction": direction}
+
+
+def _trend_cards(growth: dict) -> list[dict]:
+    labels = growth["labels"]
+    user_series = growth["user_signups"]
+    session_series = growth["session_counts"]
+    cash_series = growth["cash_in_weekly"]
+    current_start = datetime.now(timezone.utc) - timedelta(days=7)
+    previous_start = current_start - timedelta(days=7)
+
+    active_current = User.query.filter(User.last_login_at >= current_start).count()
+    active_previous = User.query.filter(
+        User.last_login_at >= previous_start,
+        User.last_login_at < current_start,
+    ).count()
+    event_current = LedgerEvent.query.filter(
+        LedgerEvent.voided_at.is_(None),
+        LedgerEvent.created_at >= current_start,
+    ).count()
+    event_previous = LedgerEvent.query.filter(
+        LedgerEvent.voided_at.is_(None),
+        LedgerEvent.created_at >= previous_start,
+        LedgerEvent.created_at < current_start,
+    ).count()
+
+    return [
+        {
+            "key": "signups",
+            "label": "New users",
+            "value": user_series[-1] if user_series else 0,
+            "delta": _trend_delta(user_series[-1] if user_series else 0, user_series[-2] if len(user_series) > 1 else 0),
+            "labels": labels,
+            "series": user_series,
+        },
+        {
+            "key": "active",
+            "label": "Active users",
+            "value": active_current,
+            "delta": _trend_delta(active_current, active_previous),
+            "labels": ["Previous", "Current"],
+            "series": [active_previous, active_current],
+        },
+        {
+            "key": "sessions",
+            "label": "Sessions",
+            "value": session_series[-1] if session_series else 0,
+            "delta": _trend_delta(session_series[-1] if session_series else 0, session_series[-2] if len(session_series) > 1 else 0),
+            "labels": labels,
+            "series": session_series,
+        },
+        {
+            "key": "ledger",
+            "label": "Ledger records",
+            "value": event_current,
+            "delta": _trend_delta(event_current, event_previous),
+            "labels": ["Previous", "Current"],
+            "series": [event_previous, event_current],
+        },
+        {
+            "key": "volume",
+            "label": "Recorded volume",
+            "value": f"${cash_series[-1]:,.0f}" if cash_series else "$0",
+            "delta": _trend_delta(cash_series[-1] if cash_series else 0, cash_series[-2] if len(cash_series) > 1 else 0),
+            "labels": labels,
+            "series": cash_series,
+        },
+    ]
+
+
+@internal_bp.get("/")
+@site_admin_required
+def dashboard():
+    recent_users = User.query.order_by(User.created_at.desc()).limit(10).all()
+    recent_leagues = League.query.order_by(League.created_at.desc()).limit(8).all()
+    top_leagues = _top_leagues()
+    owners = {league.id: _owner_for_league(league.id) for league in recent_leagues + [l for l, _ in top_leagues]}
+    growth = _growth_data()
+    return render_template(
+        "internal_dashboard.html",
+        admin_user=_current_admin(),
+        stats=_site_stats(),
+        growth=growth,
+        trend_cards=_trend_cards(growth),
+        weekday_data=_sessions_by_weekday(),
+        top_leagues=top_leagues,
+        recent_users=recent_users,
+        recent_leagues=recent_leagues,
+        owners=owners,
+    )
+
+
+@internal_bp.get("/users")
+@site_admin_required
+def users():
+    q = request.args.get("q", "").strip()
+    page = _page_number()
+    query = User.query
+    if q:
+        query = query.filter(User.email.ilike(f"%{normalize_email(q)}%"))
+    pagination = _paginate(query.order_by(User.created_at.desc()), page)
+    return render_template("internal_users.html", users=pagination["items"], pagination=pagination, q=q)
+
+
+@internal_bp.get("/users/<user_id>")
+@site_admin_required
+def user_detail(user_id: str):
+    user = _user_or_404(user_id)
+    memberships = (
+        db.session.query(LeagueMembership, League)
+        .join(League, League.id == LeagueMembership.league_id)
+        .filter(LeagueMembership.user_id == user.id)
+        .order_by(LeagueMembership.created_at.desc())
+        .all()
+    )
+    owned_leagues = League.query.filter_by(created_by_user_id=user.id).order_by(League.created_at.desc()).all()
+    event_count = LedgerEvent.query.filter_by(created_by_user_id=user.id).count()
+    return render_template(
+        "internal_user_detail.html",
+        user=user,
+        memberships=memberships,
+        owned_leagues=owned_leagues,
+        event_count=event_count,
+        current_admin_id=current_user_id(),
+    )
+
+
+@internal_bp.post("/users/<user_id>/email")
+@site_admin_required
+def update_user_email(user_id: str):
+    user = _user_or_404(user_id)
+    new_email = normalize_email(request.form.get("email", ""))
+
+    if not new_email or "@" not in new_email:
+        flash("Enter a valid email address.", "error")
+        return redirect(url_for("internal.user_detail", user_id=user.id))
+
+    existing = User.query.filter(User.email == new_email, User.id != user.id).one_or_none()
+    if existing:
+        flash("That email is already in use.", "error")
+        return redirect(url_for("internal.user_detail", user_id=user.id))
+
+    user.email = new_email
+    db.session.commit()
+    flash("User email updated.", "success")
+    return redirect(url_for("internal.user_detail", user_id=user.id))
+
+
+@internal_bp.post("/users/<user_id>/password-reset")
+@site_admin_required
+def send_user_password_reset(user_id: str):
+    user = _user_or_404(user_id)
+    if user.disabled_at is not None:
+        flash("Disabled users cannot receive password resets.", "error")
+        return redirect(url_for("internal.user_detail", user_id=user.id))
+
+    from emails import send_password_reset
+
+    token = generate_reset_token(user.id)
+    base_url = current_app.config.get("APP_BASE_URL", "").rstrip("/")
+    reset_url = f"{base_url}{url_for('account.reset_password', token=token)}"
+    try:
+        send_password_reset(user.email, reset_url)
+        flash("Password reset email sent.", "success")
+    except Exception:
+        flash("Password reset email could not be sent. Check mail configuration.", "error")
+    return redirect(url_for("internal.user_detail", user_id=user.id))
+
+
+@internal_bp.post("/users/<user_id>/temporary-password")
+@site_admin_required
+def create_user_temporary_password(user_id: str):
+    user = _user_or_404(user_id)
+    if user.disabled_at is not None:
+        flash("Disabled users cannot receive temporary passwords.", "error")
+        return redirect(url_for("internal.user_detail", user_id=user.id))
+
+    from emails import send_temporary_password
+
+    temporary_password = _temporary_password()
+    user.password_hash = hash_password(temporary_password)
+    db.session.commit()
+    try:
+        send_temporary_password(user.email, temporary_password)
+        flash("Temporary password created and emailed.", "success")
+    except Exception:
+        flash(f"Temporary password created but email failed: {temporary_password}", "error")
+    return redirect(url_for("internal.user_detail", user_id=user.id))
+
+
+@internal_bp.post("/users/<user_id>/disable")
+@site_admin_required
+def disable_user(user_id: str):
+    user = _user_or_404(user_id)
+    if user.id == current_user_id():
+        flash("You cannot disable your own admin account.", "error")
+    elif user.disabled_at is None:
+        user.disabled_at = utc_now()
+        db.session.commit()
+        flash("User disabled.", "success")
+    return redirect(url_for("internal.user_detail", user_id=user.id))
+
+
+@internal_bp.post("/users/<user_id>/restore")
+@site_admin_required
+def restore_user(user_id: str):
+    user = _user_or_404(user_id)
+    user.disabled_at = None
+    db.session.commit()
+    flash("User restored.", "success")
+    return redirect(url_for("internal.user_detail", user_id=user.id))
+
+
+@internal_bp.post("/users/<user_id>/delete")
+@site_admin_required
+def delete_user(user_id: str):
+    user = _user_or_404(user_id)
+    confirm = request.form.get("confirm", "").strip()
+    if user.id == current_user_id():
+        flash("You cannot delete your own admin account.", "error")
+        return redirect(url_for("internal.user_detail", user_id=user.id))
+    if confirm != "DELETE":
+        flash("Confirmation text did not match.", "error")
+        return redirect(url_for("internal.user_detail", user_id=user.id))
+
+    owned_leagues = League.query.filter_by(created_by_user_id=user.id).count()
+    if owned_leagues:
+        flash("Transfer or delete this user's owned leagues before deleting the account.", "error")
+        return redirect(url_for("internal.user_detail", user_id=user.id))
+
+    LeagueMembership.query.filter_by(user_id=user.id).delete(synchronize_session=False)
+    try:
+        db.session.delete(user)
+        db.session.commit()
+        flash("User deleted.", "success")
+        return redirect(url_for("internal.users"))
+    except IntegrityError:
+        db.session.rollback()
+        flash("User has audit history and cannot be deleted safely. Disable the account instead.", "error")
+        return redirect(url_for("internal.user_detail", user_id=user.id))
+
+
+@internal_bp.get("/leagues")
+@site_admin_required
+def leagues():
+    q = request.args.get("q", "").strip()
+    page = _page_number()
+    query = db.session.query(League)
+    if q:
+        term = f"%{q.strip()}%"
+        query = (
+            query.outerjoin(LeagueMembership, LeagueMembership.league_id == League.id)
+            .outerjoin(User, User.id == LeagueMembership.user_id)
+            .filter(
+                or_(
+                    League.name.ilike(term),
+                    League.slug.ilike(term),
+                    User.email.ilike(term),
+                )
+            )
+            .distinct()
+        )
+    pagination = _paginate(query.order_by(League.created_at.desc()), page)
+    leagues = pagination["items"]
+    owners = {league.id: _owner_for_league(league.id) for league in leagues}
+    return render_template("internal_leagues.html", leagues=leagues, owners=owners, pagination=pagination, q=q)
+
+
+@internal_bp.get("/leagues/<league_id>")
+@site_admin_required
+def league_detail(league_id: str):
+    league = _league_or_404(league_id)
+    members = (
+        db.session.query(LeagueMembership, User)
+        .join(User, User.id == LeagueMembership.user_id)
+        .filter(LeagueMembership.league_id == league.id)
+        .order_by(LeagueMembership.created_at.asc())
+        .all()
+    )
+    stats = {
+        "members": len([m for m, _u in members if m.disabled_at is None]),
+        "players": Player.query.filter_by(league_id=league.id).count(),
+        "sessions": PokerSession.query.filter_by(league_id=league.id).count(),
+        "events": LedgerEvent.query.filter_by(league_id=league.id).count(),
+        "voided_events": LedgerEvent.query.filter(LedgerEvent.league_id == league.id, LedgerEvent.voided_at.is_not(None)).count(),
+    }
+    owner = _owner_for_league(league.id)
+    return render_template("internal_league_detail.html", league=league, owner=owner, members=members, stats=stats)
+
+
+@internal_bp.post("/leagues/<league_id>/archive")
+@site_admin_required
+def archive_league(league_id: str):
+    league = _league_or_404(league_id)
+    league.archived_at = utc_now()
+    db.session.commit()
+    flash("League archived.", "success")
+    return redirect(url_for("internal.league_detail", league_id=league.id))
+
+
+@internal_bp.post("/leagues/<league_id>/settings")
+@site_admin_required
+def update_league_settings(league_id: str):
+    league = _league_or_404(league_id)
+    raw_eligible = request.form.get("eligible_min_sessions", "3").strip()
+    raw_break_even = request.form.get("break_even_dollars", "1.00").strip()
+    name = request.form.get("name", "").strip()
+    description = request.form.get("description", "").strip()
+    visibility = request.form.get("visibility", "private").strip()
+
+    try:
+        eligible_min = int(raw_eligible)
+        break_even_cents = round(float(raw_break_even) * 100)
+    except (ValueError, TypeError):
+        flash("Eligible sessions and break-even threshold must be valid numbers.", "error")
+        return redirect(url_for("internal.league_detail", league_id=league.id))
+
+    if len(name) < 2:
+        flash("League name must be at least 2 characters.", "error")
+    elif visibility not in ("private", "public"):
+        flash("Invalid visibility value.", "error")
+    elif eligible_min < 1 or eligible_min > 100:
+        flash("Eligible minimum must be between 1 and 100.", "error")
+    elif break_even_cents < 0 or break_even_cents > 10000:
+        flash("Break-even threshold must be between $0.00 and $100.00.", "error")
+    else:
+        league.name = name
+        league.slug = slugify(name)
+        league.description = description or None
+        league.visibility = visibility
+        league.eligible_min_sessions = eligible_min
+        league.break_even_cents = break_even_cents
+        db.session.commit()
+        flash("League settings updated.", "success")
+
+    return redirect(url_for("internal.league_detail", league_id=league.id))
+
+
+@internal_bp.post("/leagues/<league_id>/restore")
+@site_admin_required
+def restore_league(league_id: str):
+    league = _league_or_404(league_id)
+    league.archived_at = None
+    db.session.commit()
+    flash("League restored.", "success")
+    return redirect(url_for("internal.league_detail", league_id=league.id))
+
+
+@internal_bp.post("/leagues/<league_id>/transfer")
+@site_admin_required
+def transfer_league_owner(league_id: str):
+    league = _league_or_404(league_id)
+    new_owner_email = normalize_email(request.form.get("new_owner_email", ""))
+    new_owner = User.query.filter_by(email=new_owner_email, disabled_at=None).one_or_none()
+    current_owner = _owner_for_league(league.id)
+
+    if current_owner is None:
+        flash("Current owner could not be found.", "error")
+    elif new_owner is None:
+        flash("New owner must be an active user.", "error")
+    else:
+        membership = LeagueMembership.query.filter_by(league_id=league.id, user_id=new_owner.id).one_or_none()
+        if membership is None:
+            membership = LeagueMembership(league_id=league.id, user_id=new_owner.id, role="manager")
+            db.session.add(membership)
+            db.session.flush()
+        membership.disabled_at = None
+        result = transfer_league_ownership(league, current_owner.id, new_owner.id)
+        if result is None:
+            flash("Ownership transfer failed.", "error")
+        else:
+            db.session.commit()
+            flash("League ownership transferred.", "success")
+            return redirect(url_for("internal.league_detail", league_id=league.id))
+
+    db.session.rollback()
+    return redirect(url_for("internal.league_detail", league_id=league.id))
+
+
+@internal_bp.post("/leagues/<league_id>/delete")
+@site_admin_required
+def delete_internal_league(league_id: str):
+    league = _league_or_404(league_id)
+    confirm = request.form.get("confirm", "").strip()
+    if confirm != "DELETE":
+        flash("Confirmation text did not match.", "error")
+        return redirect(url_for("internal.league_detail", league_id=league.id))
+
+    delete_league(league)
+    db.session.commit()
+    flash("League deleted.", "success")
+    return redirect(url_for("internal.leagues"))
diff --git a/static/css/style.css b/static/css/style.css
index 07e2a5f..1af07e5 100644
--- a/static/css/style.css
+++ b/static/css/style.css
@@ -239,6 +239,133 @@ h1, h2, h3, h4 { margin: 0; }
 .sidebar__back svg { width: 12px; height: 12px; }
 .sidebar__back:hover { color: var(--text-2); }
 
+/* ---- Admin sidebar variant ---- */
+.sidebar--admin .sidebar__badge--admin {
+  background: var(--warn-tint);
+  border: 1px solid var(--warn-tint-bd);
+  color: var(--warn);
+  border-radius: var(--r-sm);
+  width: 36px;
+  height: 36px;
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  flex-shrink: 0;
+}
+.sidebar--admin .sidebar__link.is-active {
+  background: var(--warn-tint);
+  color: var(--warn);
+}
+.sidebar--admin .sidebar__link.is-active svg { opacity: 1; color: var(--warn); }
+.sidebar--admin .sidebar__link:hover { color: var(--warn); }
+
+/* ---- Internal admin dashboard ---- */
+.int-hero-grid {
+  display: grid;
+  grid-template-columns: repeat(4, 1fr);
+  gap: 14px;
+  margin-bottom: 14px;
+}
+.int-page-header {
+  margin-bottom: 20px;
+}
+.int-section-grid {
+  margin-bottom: 14px;
+}
+.int-section-grid--last {
+  margin-bottom: 40px;
+}
+.int-hero-card {
+  background: var(--surface);
+  border: 1px solid var(--border);
+  border-radius: var(--r-md);
+  padding: 18px 20px;
+  display: flex;
+  flex-direction: column;
+  gap: 6px;
+}
+.int-hero-card__icon {
+  width: 36px; height: 36px;
+  border-radius: var(--r-sm);
+  display: flex; align-items: center; justify-content: center;
+  margin-bottom: 6px;
+}
+.int-hero-card__icon--users  { background: var(--accent-chip); border: 1px solid var(--accent-chip-bd); color: var(--accent); }
+.int-hero-card__icon--leagues { background: rgba(111,192,147,.12); border: 1px solid rgba(111,192,147,.25); color: var(--pos); }
+.int-hero-card__icon--sessions { background: var(--warn-tint); border: 1px solid var(--warn-tint-bd); color: var(--warn); }
+.int-hero-card__icon--health { background: rgba(120,180,240,.1); border: 1px solid rgba(120,180,240,.22); color: #78b4f0; }
+.int-hero-card__num {
+  font-size: 28px;
+  font-weight: 700;
+  color: var(--text-strong);
+  letter-spacing: -.02em;
+  line-height: 1;
+}
+.int-hero-card__label { font-size: 12px; color: var(--muted); font-weight: 500; }
+.int-hero-card__sub { font-size: 11.5px; color: var(--faintest); margin-top: 4px; }
+.int-chart-panel { padding: 0; overflow: hidden; }
+.int-chart-head { padding: 16px 20px 0; }
+.int-chart-wrap { padding: 16px 20px 20px; position: relative; height: 220px; }
+.int-trend-grid {
+  display: grid;
+  grid-template-columns: repeat(auto-fit, minmax(180px, 1fr));
+  gap: 14px;
+}
+.int-trend-card {
+  display: grid;
+  grid-template-columns: minmax(0, 1fr) 88px;
+  gap: 12px;
+  align-items: center;
+  min-height: 112px;
+  padding: 16px 18px;
+  background: var(--surface);
+  border: 1px solid var(--border);
+  border-radius: var(--r-md);
+}
+.int-trend-card__label,
+.int-trend-card__delta span {
+  display: block;
+  color: var(--muted);
+  font-size: 11.5px;
+}
+.int-trend-card__value {
+  display: block;
+  margin: 4px 0;
+  color: var(--text-strong);
+  font-size: 24px;
+  font-weight: 700;
+  line-height: 1;
+}
+.int-trend-card__delta {
+  color: var(--muted);
+  font-size: 12px;
+  font-weight: 700;
+}
+.int-trend-card__delta--up { color: var(--pos); }
+.int-trend-card__delta--down { color: var(--neg); }
+.int-sparkline-wrap {
+  height: 54px;
+  min-width: 0;
+}
+.int-breakdown-grid { display: grid; grid-template-columns: 1fr 1fr; gap: 8px 20px; }
+.int-breakdown-row {
+  display: flex; align-items: center; justify-content: space-between;
+  padding: 6px 0; border-bottom: 1px solid var(--divider); font-size: 13px;
+}
+.int-breakdown-row:last-child { border-bottom: none; }
+.int-breakdown-row__label { color: var(--muted); }
+.int-breakdown-row__val { font-weight: 600; color: var(--text-strong); font-variant-numeric: tabular-nums; }
+
+@media (max-width: 900px) {
+  .int-hero-grid { grid-template-columns: repeat(2, 1fr); }
+  .admin-searchbar {
+    grid-template-columns: 1fr;
+  }
+  .admin-searchbar .btn {
+    justify-content: center;
+  }
+}
+
 /* ---- App page (paired with sidebar) ---- */
 .page--app {
   flex: 1;
@@ -1483,6 +1610,85 @@ td a:hover { color: var(--accent); }
 .stack   { display: grid; gap: 20px; }
 .inline-action-form { margin: 0; }
 .button-row { display: flex; gap: 8px; flex-wrap: wrap; align-items: center; }
+.form-stack { display: grid; gap: 14px; }
+.inline-form {
+  display: flex;
+  gap: 8px;
+  align-items: center;
+  flex-wrap: wrap;
+}
+.inline-form .field-input {
+  flex: 1 1 220px;
+  min-width: 0;
+}
+.searchbar {
+  display: flex;
+  gap: 8px;
+  align-items: center;
+  flex-wrap: wrap;
+  justify-content: flex-end;
+  max-width: 560px;
+}
+.searchbar .field-input {
+  min-width: 240px;
+}
+.tbl__actions {
+  text-align: right;
+  white-space: nowrap;
+}
+.admin-list-tools {
+  margin: 0 0 14px;
+  padding: 14px;
+  background: var(--surface);
+  border: 1px solid var(--border);
+  border-radius: var(--r-md);
+}
+.admin-searchbar {
+  display: grid;
+  grid-template-columns: minmax(260px, 1fr) auto auto;
+  gap: 8px;
+  align-items: center;
+  max-width: 720px;
+}
+.admin-list-panel {
+  overflow: hidden;
+}
+.admin-table {
+  min-width: 760px;
+}
+.admin-table th {
+  color: var(--muted);
+  font-size: 11px;
+  letter-spacing: .04em;
+  text-transform: uppercase;
+}
+.admin-table td {
+  vertical-align: middle;
+}
+.admin-table__primary a {
+  color: var(--text-strong);
+  font-weight: 700;
+}
+.admin-table__muted {
+  color: var(--muted);
+  font-size: 12px;
+}
+.pagination-row {
+  display: flex;
+  align-items: center;
+  justify-content: flex-end;
+  gap: 10px;
+  padding: 14px 18px;
+  border-top: 1px solid var(--border);
+}
+.pagination-row__label {
+  color: var(--muted);
+  font-size: 12px;
+}
+.btn.is-disabled {
+  opacity: .4;
+  pointer-events: none;
+}
 
 /* Breadcrumb */
 .breadcrumb {
diff --git a/templates/_internal_sidebar.html b/templates/_internal_sidebar.html
new file mode 100644
index 0000000..f66dd42
--- /dev/null
+++ b/templates/_internal_sidebar.html
@@ -0,0 +1,56 @@
+<aside class="sidebar sidebar--admin">
+    <div class="sidebar__header">
+        <div class="sidebar__badge sidebar__badge--admin">
+            <svg viewBox="0 0 16 16" fill="none" aria-hidden="true" width="16" height="16">
+                <path d="M8 1L14 4v5c0 3.5-2.5 6-6 6.5C2.5 15 0 12.5 0 9V4l8-3z" stroke="currentColor" stroke-width="1.4" stroke-linejoin="round" fill="none"/>
+                <path d="M5.5 8l2 2 3-3" stroke="currentColor" stroke-width="1.4" stroke-linecap="round" stroke-linejoin="round"/>
+            </svg>
+        </div>
+        <div class="sidebar__meta">
+            <span class="sidebar__league-name">Admin Panel</span>
+            <span class="sidebar__role">site admin</span>
+        </div>
+    </div>
+
+    <nav class="sidebar__nav" aria-label="Admin navigation">
+        <a class="sidebar__link {{ 'is-active' if request.endpoint == 'internal.dashboard' }}"
+           href="{{ url_for('internal.dashboard') }}">
+            <svg viewBox="0 0 16 16" fill="none" aria-hidden="true">
+                <rect x="1" y="1" width="6" height="6" rx="1.5" stroke="currentColor" stroke-width="1.4"/>
+                <rect x="9" y="1" width="6" height="6" rx="1.5" stroke="currentColor" stroke-width="1.4"/>
+                <rect x="1" y="9" width="6" height="6" rx="1.5" stroke="currentColor" stroke-width="1.4"/>
+                <rect x="9" y="9" width="6" height="6" rx="1.5" stroke="currentColor" stroke-width="1.4"/>
+            </svg>
+            <span>Overview</span>
+        </a>
+
+        <a class="sidebar__link {{ 'is-active' if request.endpoint in ('internal.users', 'internal.user_detail') }}"
+           href="{{ url_for('internal.users') }}">
+            <svg viewBox="0 0 16 16" fill="none" aria-hidden="true">
+                <circle cx="6" cy="5.5" r="2.5" stroke="currentColor" stroke-width="1.4"/>
+                <path d="M1 14c0-2.761 2.239-5 5-5" stroke="currentColor" stroke-width="1.4" stroke-linecap="round"/>
+                <circle cx="11.5" cy="5.5" r="2" stroke="currentColor" stroke-width="1.3"/>
+                <path d="M9 14c0-1.657 1.119-3.084 2.5-3.084S14 12.343 14 14" stroke="currentColor" stroke-width="1.3" stroke-linecap="round"/>
+            </svg>
+            <span>Users</span>
+        </a>
+
+        <a class="sidebar__link {{ 'is-active' if request.endpoint in ('internal.leagues', 'internal.league_detail') }}"
+           href="{{ url_for('internal.leagues') }}">
+            <svg viewBox="0 0 16 16" fill="none" aria-hidden="true">
+                <path d="M3 14V6l5-3 5 3v8" stroke="currentColor" stroke-width="1.4" stroke-linecap="round" stroke-linejoin="round"/>
+                <path d="M6 14v-4h4v4" stroke="currentColor" stroke-width="1.4" stroke-linecap="round" stroke-linejoin="round"/>
+            </svg>
+            <span>Leagues</span>
+        </a>
+    </nav>
+
+    <div class="sidebar__footer">
+        <a class="sidebar__back" href="{{ url_for('leagues.index') }}">
+            <svg viewBox="0 0 12 12" fill="none" aria-hidden="true">
+                <path d="M7 2L3 6l4 4" stroke="currentColor" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"/>
+            </svg>
+            Back to app
+        </a>
+    </div>
+</aside>
diff --git a/templates/internal_dashboard.html b/templates/internal_dashboard.html
new file mode 100644
index 0000000..112be94
--- /dev/null
+++ b/templates/internal_dashboard.html
@@ -0,0 +1,374 @@
+{% extends "base.html" %}
+{% block title %}Overview · Admin · myboker.org{% endblock %}
+{% block sidebar %}{% include "_internal_sidebar.html" %}{% endblock %}
+{% block page_class %}page--app{% endblock %}
+{% block content %}
+
+<div class="db-header int-page-header">
+    <div>
+        <div class="db-header__chips">
+            <span class="badge badge--paid">Site Admin</span>
+            {% if stats.open_sessions > 0 %}
+            <span class="badge badge--open">{{ stats.open_sessions }} live session{{ 's' if stats.open_sessions != 1 }}</span>
+            {% endif %}
+        </div>
+        <h1 class="db-header__title">Overview</h1>
+        <p class="db-header__sub">Signed in as {{ admin_user.email }}. Site health, growth, and recent activity at a glance.</p>
+    </div>
+</div>
+
+<!-- Hero metrics -->
+<div class="int-hero-grid">
+    <div class="int-hero-card">
+        <div class="int-hero-card__icon int-hero-card__icon--users">
+            <svg viewBox="0 0 20 20" fill="none" width="18" height="18">
+                <path d="M13 18v-1.5a3.5 3.5 0 0 0-3.5-3.5h-5A3.5 3.5 0 0 0 1 16.5V18" stroke="currentColor" stroke-width="1.6" stroke-linecap="round"/>
+                <circle cx="7" cy="6.5" r="3.5" stroke="currentColor" stroke-width="1.6"/>
+                <path d="M17 18v-1.5a3.5 3.5 0 0 0-2.5-3.37M13.5 3.13a3.5 3.5 0 0 1 0 6.74" stroke="currentColor" stroke-width="1.6" stroke-linecap="round"/>
+            </svg>
+        </div>
+        <span class="int-hero-card__num">{{ stats.users }}</span>
+        <span class="int-hero-card__label">Total users</span>
+        <span class="int-hero-card__sub">{{ stats.active_users }} active · +{{ stats.new_users_7d }} this week</span>
+    </div>
+    <div class="int-hero-card">
+        <div class="int-hero-card__icon int-hero-card__icon--leagues">
+            <svg viewBox="0 0 20 20" fill="none" width="18" height="18">
+                <path d="M2 18V8l8-5 8 5v10" stroke="currentColor" stroke-width="1.6" stroke-linecap="round" stroke-linejoin="round"/>
+                <path d="M7 18v-6h6v6" stroke="currentColor" stroke-width="1.6" stroke-linecap="round" stroke-linejoin="round"/>
+            </svg>
+        </div>
+        <span class="int-hero-card__num">{{ stats.active_leagues }}</span>
+        <span class="int-hero-card__label">Active leagues</span>
+        <span class="int-hero-card__sub">{{ stats.public_leagues }} public · {{ stats.archived_leagues }} archived · {{ '%.1f'|format(stats.avg_sessions_per_active_league) }} avg sessions</span>
+    </div>
+    <div class="int-hero-card">
+        <div class="int-hero-card__icon int-hero-card__icon--sessions">
+            <svg viewBox="0 0 20 20" fill="none" width="18" height="18">
+                <rect x="2" y="3" width="16" height="14" rx="2.5" stroke="currentColor" stroke-width="1.6"/>
+                <path d="M6 1v4M14 1v4M2 8h16" stroke="currentColor" stroke-width="1.6" stroke-linecap="round"/>
+            </svg>
+        </div>
+        <span class="int-hero-card__num">{{ stats.sessions }}</span>
+        <span class="int-hero-card__label">Total sessions</span>
+        <span class="int-hero-card__sub">{{ stats.open_sessions }} open · {{ stats.sessions_7d }} this week · {{ '%.1f'|format(stats.avg_players_per_session) }} avg players</span>
+    </div>
+    <div class="int-hero-card">
+        <div class="int-hero-card__icon int-hero-card__icon--health">
+            <svg viewBox="0 0 20 20" fill="none" width="18" height="18">
+                <path d="M10 2.5l6.5 3v4.7c0 4.1-2.75 7-6.5 7.8-3.75-.8-6.5-3.7-6.5-7.8V5.5l6.5-3z" stroke="currentColor" stroke-width="1.6" stroke-linejoin="round"/>
+                <path d="M7.2 10.1l1.8 1.8 3.9-4" stroke="currentColor" stroke-width="1.6" stroke-linecap="round" stroke-linejoin="round"/>
+            </svg>
+        </div>
+        <span class="int-hero-card__num">{{ stats.active_users_30d }}</span>
+        <span class="int-hero-card__label">Active users · 30d</span>
+        <span class="int-hero-card__sub">{{ stats.returning_users_30d }} returning · {{ stats.unverified_users }} unverified</span>
+    </div>
+</div>
+
+<div class="int-trend-grid int-section-grid">
+    {% for card in trend_cards %}
+    <section class="int-trend-card">
+        <div>
+            <span class="int-trend-card__label">{{ card.label }}</span>
+            <span class="int-trend-card__value">{{ card.value }}</span>
+            <span class="int-trend-card__delta int-trend-card__delta--{{ card.delta.direction }}">
+                {% if card.delta.pct is none %}
+                    New
+                {% else %}
+                    {{ '+' if card.delta.current > card.delta.previous else '' }}{{ '%.1f'|format(card.delta.pct) }}%
+                {% endif %}
+                <span>vs previous</span>
+            </span>
+        </div>
+        <div class="int-sparkline-wrap">
+            <canvas id="trend-{{ card.key }}"></canvas>
+        </div>
+    </section>
+    {% endfor %}
+</div>
+
+<!-- Charts row 1: growth -->
+<div class="cards-2 int-section-grid">
+    <section class="panel int-chart-panel">
+        <div class="int-chart-head">
+            <p class="kicker" style="margin:0;">Growth</p>
+            <h2 class="panel__title">User signups · 8 weeks</h2>
+        </div>
+        <div class="int-chart-wrap">
+            <canvas id="chart-users"></canvas>
+        </div>
+    </section>
+    <section class="panel int-chart-panel">
+        <div class="int-chart-head">
+            <p class="kicker" style="margin:0;">Activity</p>
+            <h2 class="panel__title">Sessions per week · 8 weeks</h2>
+        </div>
+        <div class="int-chart-wrap">
+            <canvas id="chart-sessions"></canvas>
+        </div>
+    </section>
+</div>
+
+<!-- Charts row 2: cash + weekday -->
+<div class="cards-2 int-section-grid">
+    <section class="panel int-chart-panel">
+        <div class="int-chart-head">
+            <p class="kicker" style="margin:0;">Recorded ledger volume</p>
+            <h2 class="panel__title">Buy-ins and collections · 8 weeks</h2>
+        </div>
+        <div class="int-chart-wrap">
+            <canvas id="chart-cash"></canvas>
+        </div>
+    </section>
+    <section class="panel int-chart-panel">
+        <div class="int-chart-head">
+            <p class="kicker" style="margin:0;">Patterns</p>
+            <h2 class="panel__title">Sessions by day of week</h2>
+        </div>
+        <div class="int-chart-wrap">
+            <canvas id="chart-weekday"></canvas>
+        </div>
+    </section>
+</div>
+
+<!-- Breakdown + top leagues -->
+<div class="cards-2 int-section-grid">
+    <section class="panel">
+        <div class="panel__head">
+            <h2 class="panel__title">Activity breakdown</h2>
+            <span class="panel__tag">24h / 7d</span>
+        </div>
+        <div class="panel__body">
+            <div class="int-breakdown-grid">
+                <div>
+                    <div class="int-breakdown-row"><span class="int-breakdown-row__label">New users (24h)</span><span class="int-breakdown-row__val">{{ stats.new_users_24h }}</span></div>
+                    <div class="int-breakdown-row"><span class="int-breakdown-row__label">New users (7d)</span><span class="int-breakdown-row__val">{{ stats.new_users_7d }}</span></div>
+                    <div class="int-breakdown-row"><span class="int-breakdown-row__label">Active users (24h)</span><span class="int-breakdown-row__val">{{ stats.active_users_24h }}</span></div>
+                    <div class="int-breakdown-row"><span class="int-breakdown-row__label">Active users (7d)</span><span class="int-breakdown-row__val">{{ stats.active_users_7d }}</span></div>
+                    <div class="int-breakdown-row"><span class="int-breakdown-row__label">Active users (30d)</span><span class="int-breakdown-row__val">{{ stats.active_users_30d }}</span></div>
+                    <div class="int-breakdown-row"><span class="int-breakdown-row__label">Returning users (7d)</span><span class="int-breakdown-row__val">{{ stats.returning_users_7d }}</span></div>
+                    <div class="int-breakdown-row"><span class="int-breakdown-row__label">Returning users (30d)</span><span class="int-breakdown-row__val">{{ stats.returning_users_30d }}</span></div>
+                    <div class="int-breakdown-row"><span class="int-breakdown-row__label">Users in leagues</span><span class="int-breakdown-row__val">{{ stats.users_in_leagues }}</span></div>
+                    <div class="int-breakdown-row"><span class="int-breakdown-row__label">No-league signups</span><span class="int-breakdown-row__val">{{ stats.orphan_users }}</span></div>
+                    <div class="int-breakdown-row"><span class="int-breakdown-row__label">Verified accounts</span><span class="int-breakdown-row__val">{{ stats.verified_users }}</span></div>
+                    <div class="int-breakdown-row"><span class="int-breakdown-row__label">Unverified</span><span class="int-breakdown-row__val">{{ stats.unverified_users }}</span></div>
+                    <div class="int-breakdown-row"><span class="int-breakdown-row__label">Disabled</span><span class="int-breakdown-row__val">{{ stats.disabled_users }}</span></div>
+                    <div class="int-breakdown-row"><span class="int-breakdown-row__label">Site admins</span><span class="int-breakdown-row__val">{{ stats.site_admins }}</span></div>
+                </div>
+                <div>
+                    <div class="int-breakdown-row"><span class="int-breakdown-row__label">Sessions (24h)</span><span class="int-breakdown-row__val">{{ stats.sessions_24h }}</span></div>
+                    <div class="int-breakdown-row"><span class="int-breakdown-row__label">Sessions (7d)</span><span class="int-breakdown-row__val">{{ stats.sessions_7d }}</span></div>
+                    <div class="int-breakdown-row"><span class="int-breakdown-row__label">Open sessions</span><span class="int-breakdown-row__val">{{ stats.open_sessions }}</span></div>
+                    <div class="int-breakdown-row"><span class="int-breakdown-row__label">Leagues active (7d)</span><span class="int-breakdown-row__val">{{ stats.leagues_active_7d }}</span></div>
+                    <div class="int-breakdown-row"><span class="int-breakdown-row__label">Leagues with no sessions</span><span class="int-breakdown-row__val">{{ stats.leagues_without_sessions }}</span></div>
+                    <div class="int-breakdown-row"><span class="int-breakdown-row__label">Sessions with no ledger records</span><span class="int-breakdown-row__val">{{ stats.sessions_without_events }}</span></div>
+                    <div class="int-breakdown-row"><span class="int-breakdown-row__label">Avg players/session</span><span class="int-breakdown-row__val">{{ '%.1f'|format(stats.avg_players_per_session) }}</span></div>
+                    <div class="int-breakdown-row"><span class="int-breakdown-row__label">Ledger events (24h)</span><span class="int-breakdown-row__val">{{ stats.ledger_events_24h }}</span></div>
+                    <div class="int-breakdown-row"><span class="int-breakdown-row__label">Ledger events (7d)</span><span class="int-breakdown-row__val">{{ stats.ledger_events_7d }}</span></div>
+                    <div class="int-breakdown-row"><span class="int-breakdown-row__label">Total ledger events</span><span class="int-breakdown-row__val">{{ stats.ledger_events }}</span></div>
+                    <div class="int-breakdown-row"><span class="int-breakdown-row__label">Voided ledger records</span><span class="int-breakdown-row__val">{{ stats.voided_events }} · {{ '%.1f'|format(stats.void_rate) }}%</span></div>
+                    <div class="int-breakdown-row"><span class="int-breakdown-row__label">Avg sessions / league</span><span class="int-breakdown-row__val">{{ stats.avg_sessions_per_active_league }}</span></div>
+                </div>
+            </div>
+        </div>
+    </section>
+
+    <section class="panel">
+        <div class="panel__head">
+            <h2 class="panel__title">Top leagues</h2>
+            <a class="panel__tag" href="{{ url_for('internal.leagues') }}">All leagues →</a>
+        </div>
+        <div class="table-wrap">
+            <table class="tbl">
+                <thead><tr><th>League</th><th>Owner</th><th style="text-align:right;">Sessions</th></tr></thead>
+                <tbody>
+                    {% for league, session_count in top_leagues %}
+                    {% set owner = owners.get(league.id) %}
+                    <tr>
+                        <td>
+                            <a href="{{ url_for('internal.league_detail', league_id=league.id) }}">{{ league.name }}</a>
+                            {% if league.visibility == 'public' %}<span class="badge" style="font-size:10px;margin-left:4px;">public</span>{% endif %}
+                        </td>
+                        <td style="font-size:12px;color:var(--muted);">{% if owner %}{{ owner.email }}{% else %}<span class="muted-text">—</span>{% endif %}</td>
+                        <td style="text-align:right;font-variant-numeric:tabular-nums;font-weight:600;">{{ session_count }}</td>
+                    </tr>
+                    {% else %}
+                    <tr><td colspan="3" class="muted-text">No leagues yet.</td></tr>
+                    {% endfor %}
+                </tbody>
+            </table>
+        </div>
+    </section>
+</div>
+
+<section class="panel int-section-grid">
+    <div class="panel__head">
+        <h2 class="panel__title">Recorded ledger volume</h2>
+        <span class="panel__tag">Not platform revenue</span>
+    </div>
+    <div class="panel__body">
+        <div class="int-breakdown-grid">
+            <div class="int-breakdown-row"><span class="int-breakdown-row__label">Recorded buy-ins and collections</span><span class="int-breakdown-row__val">${{ '%.2f'|format(stats.cash_in_cents / 100) }}</span></div>
+            <div class="int-breakdown-row"><span class="int-breakdown-row__label">Recorded payouts</span><span class="int-breakdown-row__val">${{ '%.2f'|format(stats.cash_out_cents / 100) }}</span></div>
+            <div class="int-breakdown-row"><span class="int-breakdown-row__label">Average recorded volume / session</span><span class="int-breakdown-row__val">${{ '%.2f'|format(stats.avg_cash_in_per_session_cents / 100) }}</span></div>
+            <div class="int-breakdown-row"><span class="int-breakdown-row__label">Ledger records</span><span class="int-breakdown-row__val">{{ stats.ledger_events }}</span></div>
+        </div>
+    </div>
+</section>
+
+<!-- Recent users + leagues -->
+<div class="cards-2 int-section-grid int-section-grid--last">
+    <section class="panel">
+        <div class="panel__head">
+            <h2 class="panel__title">Recent users</h2>
+            <a class="panel__tag" href="{{ url_for('internal.users') }}">All users →</a>
+        </div>
+        <div class="table-wrap">
+            <table class="tbl">
+                <thead><tr><th>Email</th><th>Status</th><th>Joined</th></tr></thead>
+                <tbody>
+                    {% for user in recent_users %}
+                    <tr>
+                        <td>
+                            <a href="{{ url_for('internal.user_detail', user_id=user.id) }}">{{ user.email }}</a>
+                            {% if user.is_site_admin %}<span class="badge badge--paid" style="font-size:10px;">Admin</span>{% endif %}
+                        </td>
+                        <td>{% if user.disabled_at %}<span class="badge badge--closed">Disabled</span>{% elif not user.email_verified_at %}<span class="badge">Unverified</span>{% else %}<span class="badge badge--open">Active</span>{% endif %}</td>
+                        <td style="color:var(--muted);font-size:12px;">{{ user.created_at.strftime('%b %-d') if user.created_at else '—' }}</td>
+                    </tr>
+                    {% endfor %}
+                </tbody>
+            </table>
+        </div>
+    </section>
+
+    <section class="panel">
+        <div class="panel__head">
+            <h2 class="panel__title">Recent leagues</h2>
+            <a class="panel__tag" href="{{ url_for('internal.leagues') }}">All leagues →</a>
+        </div>
+        <div class="table-wrap">
+            <table class="tbl">
+                <thead><tr><th>League</th><th>Visibility</th><th>Created</th></tr></thead>
+                <tbody>
+                    {% for league in recent_leagues %}
+                    <tr>
+                        <td><a href="{{ url_for('internal.league_detail', league_id=league.id) }}">{{ league.name }}</a></td>
+                        <td><span class="badge">{{ league.visibility }}</span></td>
+                        <td style="color:var(--muted);font-size:12px;">{{ league.created_at.strftime('%b %-d') if league.created_at else '—' }}</td>
+                    </tr>
+                    {% endfor %}
+                </tbody>
+            </table>
+        </div>
+    </section>
+</div>
+
+<script>
+(function () {
+    const labels       = {{ growth.labels | tojson }};
+    const userSignups  = {{ growth.user_signups | tojson }};
+    const sessionData  = {{ growth.session_counts | tojson }};
+    const cashData     = {{ growth.cash_in_weekly | tojson }};
+    const wdLabels     = {{ weekday_data.labels | tojson }};
+    const wdData       = {{ weekday_data.data | tojson }};
+    const trendCards   = {{ trend_cards | tojson }};
+
+    const axisStyle = {
+        grid: { color: 'rgba(255,255,255,.05)' },
+        ticks: { color: 'rgba(255,255,255,.38)', font: { size: 11 } },
+    };
+    const tooltipStyle = {
+        backgroundColor: 'rgba(20,20,28,.92)',
+        borderColor: 'rgba(255,255,255,.08)',
+        borderWidth: 1,
+        titleColor: 'rgba(255,255,255,.5)',
+        bodyColor: '#fff',
+        padding: 10,
+    };
+    const baseOpts = {
+        responsive: true,
+        maintainAspectRatio: false,
+        plugins: { legend: { display: false }, tooltip: tooltipStyle },
+        scales: {
+            x: axisStyle,
+            y: { ...axisStyle, beginAtZero: true, ticks: { ...axisStyle.ticks, precision: 0 } },
+        },
+    };
+
+    const lineDataset = (data, color) => ({
+        data,
+        borderColor: color,
+        backgroundColor: color.replace('1)', '.12)'),
+        borderWidth: 2,
+        pointRadius: 2,
+        pointHoverRadius: 4,
+        tension: .35,
+        fill: true,
+    });
+
+    new Chart(document.getElementById('chart-users'), {
+        type: 'line',
+        data: {
+            labels,
+            datasets: [lineDataset(userSignups, 'rgba(155,140,240,1)')]
+        },
+        options: baseOpts,
+    });
+
+    new Chart(document.getElementById('chart-sessions'), {
+        type: 'line',
+        data: {
+            labels,
+            datasets: [lineDataset(sessionData, 'rgba(111,192,147,1)')]
+        },
+        options: baseOpts,
+    });
+
+    new Chart(document.getElementById('chart-cash'), {
+        type: 'bar',
+        data: {
+            labels,
+            datasets: [{ data: cashData, backgroundColor: 'rgba(120,180,240,.45)', borderColor: 'rgba(120,180,240,.9)', borderWidth: 1, borderRadius: 4 }]
+        },
+        options: {
+            ...baseOpts,
+            scales: {
+                x: axisStyle,
+                y: { ...axisStyle, beginAtZero: true, ticks: { ...axisStyle.ticks, callback: v => '$' + v } },
+            },
+        },
+    });
+
+    new Chart(document.getElementById('chart-weekday'), {
+        type: 'bar',
+        data: {
+            labels: wdLabels,
+            datasets: [{ data: wdData, backgroundColor: 'rgba(224,177,92,.45)', borderColor: 'rgba(224,177,92,.9)', borderWidth: 1, borderRadius: 4 }]
+        },
+        options: baseOpts,
+    });
+
+    trendCards.forEach((card) => {
+        const canvas = document.getElementById('trend-' + card.key);
+        if (!canvas) return;
+        new Chart(canvas, {
+            type: 'line',
+            data: {
+                labels: card.labels,
+                datasets: [lineDataset(card.series, 'rgba(155,140,240,1)')]
+            },
+            options: {
+                responsive: true,
+                maintainAspectRatio: false,
+                plugins: { legend: { display: false }, tooltip: { enabled: false } },
+                scales: { x: { display: false }, y: { display: false, beginAtZero: true } },
+                elements: { point: { radius: 0 } },
+            },
+        });
+    });
+})();
+</script>
+
+{% endblock %}
diff --git a/templates/internal_league_detail.html b/templates/internal_league_detail.html
new file mode 100644
index 0000000..977b864
--- /dev/null
+++ b/templates/internal_league_detail.html
@@ -0,0 +1,128 @@
+{% extends "base.html" %}
+{% block title %}{{ league.name }} · Admin · myboker.org{% endblock %}
+{% block sidebar %}{% include "_internal_sidebar.html" %}{% endblock %}
+{% block page_class %}page--app{% endblock %}
+{% block content %}
+
+<div class="db-header" style="margin-bottom:20px;">
+    <div>
+        <div class="db-header__chips">
+            <a class="badge" href="{{ url_for('internal.leagues') }}">← Leagues</a>
+            {% if league.archived_at %}<span class="badge badge--closed">Archived</span>{% else %}<span class="badge badge--open">Active</span>{% endif %}
+            <span class="badge">{{ league.visibility }}</span>
+        </div>
+        <h1 class="db-header__title">{{ league.name }}</h1>
+        <p class="db-header__sub">Owner: {% if owner %}<a href="{{ url_for('internal.user_detail', user_id=owner.id) }}">{{ owner.email }}</a>{% else %}<span class="muted-text">missing</span>{% endif %}</p>
+    </div>
+    <a class="btn btn--primary btn--sm" href="{{ url_for('leagues.league_settings', league_ref=league.url_ref) }}">Manage league</a>
+</div>
+
+<div class="db-stat-grid">
+    <div class="db-stat"><span class="db-stat__num">{{ stats.members }}</span><span class="db-stat__label">Active members</span></div>
+    <div class="db-stat"><span class="db-stat__num">{{ stats.players }}</span><span class="db-stat__label">Players</span></div>
+    <div class="db-stat"><span class="db-stat__num">{{ stats.sessions }}</span><span class="db-stat__label">Sessions</span></div>
+    <div class="db-stat"><span class="db-stat__num">{{ stats.events }}</span><span class="db-stat__label">Ledger events</span></div>
+</div>
+
+<div class="cards-2">
+    <section class="panel">
+        <div class="panel__head">
+            <h2 class="panel__title">Members</h2>
+            <span class="panel__tag">{{ members|length }}</span>
+        </div>
+        <div class="table-wrap">
+            <table class="tbl">
+                <thead><tr><th>Email</th><th>Role</th><th>Status</th></tr></thead>
+                <tbody>
+                    {% for membership, member_user in members %}
+                        <tr>
+                            <td><a href="{{ url_for('internal.user_detail', user_id=member_user.id) }}">{{ member_user.email }}</a></td>
+                            <td>{{ membership.role }}</td>
+                            <td>{% if membership.disabled_at %}<span class="badge badge--closed">Removed</span>{% else %}<span class="badge badge--open">Active</span>{% endif %}</td>
+                        </tr>
+                    {% else %}
+                        <tr><td colspan="3" class="muted-text">No members.</td></tr>
+                    {% endfor %}
+                </tbody>
+            </table>
+        </div>
+    </section>
+
+    <section class="panel">
+        <div class="panel__head">
+            <h2 class="panel__title">League settings</h2>
+            <span class="panel__tag">Internal manage</span>
+        </div>
+        <div class="panel__body">
+            <form method="post" action="{{ url_for('internal.update_league_settings', league_id=league.id) }}" class="form-card form-stack">
+                <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
+                <label class="field-label" for="league-name">Name</label>
+                <input class="field-input" id="league-name" name="name" value="{{ league.name }}" required>
+
+                <label class="field-label" for="league-description">Description</label>
+                <textarea class="field-input" id="league-description" name="description" rows="3">{{ league.description or '' }}</textarea>
+
+                <label class="field-label" for="league-visibility">Visibility</label>
+                <select class="field-input" id="league-visibility" name="visibility">
+                    <option value="private" {% if league.visibility == 'private' %}selected{% endif %}>Private</option>
+                    <option value="public" {% if league.visibility == 'public' %}selected{% endif %}>Public</option>
+                </select>
+
+                <div class="inline-form">
+                    <div>
+                        <label class="field-label" for="eligible-min">Eligible minimum</label>
+                        <input class="field-input" id="eligible-min" type="number" min="1" max="100" name="eligible_min_sessions" value="{{ league.eligible_min_sessions }}">
+                    </div>
+                    <div>
+                        <label class="field-label" for="break-even">Break-even dollars</label>
+                        <input class="field-input" id="break-even" type="number" min="0" max="100" step="0.01" name="break_even_dollars" value="{{ '%.2f'|format(league.break_even_cents / 100) }}">
+                    </div>
+                </div>
+
+                <button class="btn btn--primary btn--sm" type="submit">Save settings</button>
+            </form>
+        </div>
+    </section>
+</div>
+
+<div class="cards-2">
+    <section class="panel">
+        <div class="panel__head">
+            <h2 class="panel__title">League actions</h2>
+            <span class="panel__tag">Support tools</span>
+        </div>
+        <div class="panel__body form-stack">
+            <form method="post" action="{{ url_for('internal.transfer_league_owner', league_id=league.id) }}" class="form-card">
+                <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
+                <label class="field-label" for="new-owner-email">Transfer ownership to active user</label>
+                <div class="inline-form">
+                    <input class="field-input" id="new-owner-email" type="email" name="new_owner_email" placeholder="owner@example.com" required>
+                    <button class="btn btn--warning btn--sm" type="submit">Transfer</button>
+                </div>
+            </form>
+
+            {% if league.archived_at %}
+                <form method="post" action="{{ url_for('internal.restore_league', league_id=league.id) }}" class="form-card">
+                    <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
+                    <button class="btn btn--primary btn--sm" type="submit">Restore league</button>
+                </form>
+            {% else %}
+                <form method="post" action="{{ url_for('internal.archive_league', league_id=league.id) }}" class="form-card">
+                    <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
+                    <button class="btn btn--warning btn--sm" type="submit">Archive league</button>
+                </form>
+            {% endif %}
+
+            <form method="post" action="{{ url_for('internal.delete_internal_league', league_id=league.id) }}" class="form-card">
+                <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
+                <label class="field-label" for="confirm-delete-league">Type DELETE to permanently delete this league</label>
+                <div class="inline-form">
+                    <input class="field-input" id="confirm-delete-league" name="confirm" autocomplete="off">
+                    <button class="btn btn--danger btn--sm" type="submit">Delete</button>
+                </div>
+            </form>
+        </div>
+    </section>
+</div>
+
+{% endblock %}
diff --git a/templates/internal_leagues.html b/templates/internal_leagues.html
new file mode 100644
index 0000000..2347e86
--- /dev/null
+++ b/templates/internal_leagues.html
@@ -0,0 +1,71 @@
+{% extends "base.html" %}
+{% block title %}Leagues · Admin · myboker.org{% endblock %}
+{% block sidebar %}{% include "_internal_sidebar.html" %}{% endblock %}
+{% block page_class %}page--app{% endblock %}
+{% block content %}
+
+<div class="db-header int-page-header">
+    <div>
+        <h1 class="db-header__title">Leagues</h1>
+        <p class="db-header__sub">Search by league name, slug, or owner email.</p>
+    </div>
+</div>
+
+<div class="admin-list-tools">
+    <form class="admin-searchbar" method="get" action="{{ url_for('internal.leagues') }}">
+        <input class="field-input" type="search" name="q" value="{{ q }}" placeholder="Search league or owner">
+        <button class="btn btn--primary btn--sm" type="submit">Search</button>
+        {% if q %}<a class="btn btn--ghost btn--sm" href="{{ url_for('internal.leagues') }}">Clear</a>{% endif %}
+    </form>
+</div>
+
+<section class="panel admin-list-panel">
+    <div class="panel__head">
+        <h2 class="panel__title">Matching leagues</h2>
+        <span class="panel__tag">{{ pagination.start }}-{{ pagination.end }} of {{ pagination.total }}</span>
+    </div>
+    <div class="table-wrap">
+        <table class="tbl admin-table">
+            <thead>
+                <tr>
+                    <th>League</th>
+                    <th>Owner</th>
+                    <th>Visibility</th>
+                    <th>Status</th>
+                    <th></th>
+                </tr>
+            </thead>
+            <tbody>
+                {% for league in leagues %}
+                    {% set owner = owners.get(league.id) %}
+                    <tr>
+                        <td class="admin-table__primary"><a href="{{ url_for('internal.league_detail', league_id=league.id) }}">{{ league.name }}</a></td>
+                        <td>{% if owner %}<a href="{{ url_for('internal.user_detail', user_id=owner.id) }}">{{ owner.email }}</a>{% else %}<span class="muted-text">Missing</span>{% endif %}</td>
+                        <td><span class="badge">{{ league.visibility }}</span></td>
+                        <td>{% if league.archived_at %}<span class="badge badge--closed">Archived</span>{% else %}<span class="badge badge--open">Active</span>{% endif %}</td>
+                        <td class="tbl__actions"><a class="btn btn--ghost btn--sm" href="{{ url_for('internal.league_detail', league_id=league.id) }}">View</a></td>
+                    </tr>
+                {% else %}
+                    <tr><td colspan="5" class="muted-text">No leagues found.</td></tr>
+                {% endfor %}
+            </tbody>
+        </table>
+    </div>
+    {% if pagination.pages > 1 %}
+    <div class="pagination-row">
+        {% if pagination.has_prev %}
+            <a class="btn btn--ghost btn--sm" href="{{ url_for('internal.leagues', q=q, page=pagination.prev_page) }}">Previous</a>
+        {% else %}
+            <span class="btn btn--ghost btn--sm is-disabled">Previous</span>
+        {% endif %}
+        <span class="pagination-row__label">Page {{ pagination.page }} of {{ pagination.pages }}</span>
+        {% if pagination.has_next %}
+            <a class="btn btn--ghost btn--sm" href="{{ url_for('internal.leagues', q=q, page=pagination.next_page) }}">Next</a>
+        {% else %}
+            <span class="btn btn--ghost btn--sm is-disabled">Next</span>
+        {% endif %}
+    </div>
+    {% endif %}
+</section>
+
+{% endblock %}
diff --git a/templates/internal_user_detail.html b/templates/internal_user_detail.html
new file mode 100644
index 0000000..e1ad739
--- /dev/null
+++ b/templates/internal_user_detail.html
@@ -0,0 +1,148 @@
+{% extends "base.html" %}
+{% block title %}{{ user.email }} · Admin · myboker.org{% endblock %}
+{% block sidebar %}{% include "_internal_sidebar.html" %}{% endblock %}
+{% block page_class %}page--app{% endblock %}
+{% block content %}
+
+<div class="db-header" style="margin-bottom:20px;">
+    <div>
+        <div class="db-header__chips">
+            <a class="badge" href="{{ url_for('internal.users') }}">← Users</a>
+            {% if user.disabled_at %}<span class="badge badge--closed">Disabled</span>{% else %}<span class="badge badge--open">Active</span>{% endif %}
+            {% if user.is_site_admin %}<span class="badge badge--paid">Site admin</span>{% endif %}
+        </div>
+        <h1 class="db-header__title">{{ user.email }}</h1>
+        <p class="db-header__sub">Created {{ user.created_at.strftime('%Y-%m-%d %H:%M') if user.created_at else 'unknown' }}.</p>
+    </div>
+</div>
+
+<div class="db-stat-grid">
+    <div class="db-stat">
+        <span class="db-stat__num">{{ 'Yes' if user.email_verified_at else 'No' }}</span>
+        <span class="db-stat__label">Email verified</span>
+    </div>
+    <div class="db-stat">
+        <span class="db-stat__num">{{ memberships|length }}</span>
+        <span class="db-stat__label">League memberships</span>
+    </div>
+    <div class="db-stat">
+        <span class="db-stat__num">{{ owned_leagues|length }}</span>
+        <span class="db-stat__label">Owned leagues</span>
+    </div>
+    <div class="db-stat">
+        <span class="db-stat__num">{{ event_count }}</span>
+        <span class="db-stat__label">Ledger events created</span>
+    </div>
+</div>
+
+<div class="cards-2">
+    <section class="panel">
+        <div class="panel__head">
+            <h2 class="panel__title">Account</h2>
+            <span class="panel__tag">Support tools</span>
+        </div>
+        <div class="panel__body form-stack">
+            <form method="post" action="{{ url_for('internal.update_user_email', user_id=user.id) }}" class="form-card">
+                <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
+                <label class="field-label" for="email">Email</label>
+                <div class="inline-form">
+                    <input class="field-input" id="email" type="email" name="email" value="{{ user.email }}" required>
+                    <button class="btn btn--primary btn--sm" type="submit">Update</button>
+                </div>
+            </form>
+
+            <div class="form-card">
+                <p class="muted-text">Last login: {{ user.last_login_at.strftime('%Y-%m-%d %H:%M') if user.last_login_at else 'Never' }}</p>
+                <div class="button-row">
+                    <form method="post" action="{{ url_for('internal.send_user_password_reset', user_id=user.id) }}">
+                        <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
+                        <button class="btn btn--ghost btn--sm" type="submit" {% if user.disabled_at %}disabled{% endif %}>Email reset link</button>
+                    </form>
+                    <form method="post" action="{{ url_for('internal.create_user_temporary_password', user_id=user.id) }}">
+                        <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
+                        <button class="btn btn--ghost btn--sm" type="submit" {% if user.disabled_at %}disabled{% endif %}>Email temp password</button>
+                    </form>
+                </div>
+            </div>
+        </div>
+    </section>
+
+    <section class="panel">
+        <div class="panel__head">
+            <h2 class="panel__title">Danger zone</h2>
+            <span class="panel__tag">Account state</span>
+        </div>
+        <div class="panel__body form-stack">
+            {% if user.disabled_at %}
+                <form method="post" action="{{ url_for('internal.restore_user', user_id=user.id) }}" class="form-card">
+                    <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
+                    <button class="btn btn--primary btn--sm" type="submit">Restore account</button>
+                </form>
+            {% else %}
+                <form method="post" action="{{ url_for('internal.disable_user', user_id=user.id) }}" class="form-card">
+                    <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
+                    <button class="btn btn--warning btn--sm" type="submit" {% if user.id == current_admin_id %}disabled{% endif %}>Disable account</button>
+                </form>
+            {% endif %}
+
+            <form method="post" action="{{ url_for('internal.delete_user', user_id=user.id) }}" class="form-card">
+                <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
+                <label class="field-label" for="confirm-delete-user">Type DELETE to permanently delete this account</label>
+                <div class="inline-form">
+                    <input class="field-input" id="confirm-delete-user" name="confirm" autocomplete="off">
+                    <button class="btn btn--danger btn--sm" type="submit" {% if user.id == current_admin_id %}disabled{% endif %}>Delete</button>
+                </div>
+            </form>
+        </div>
+    </section>
+</div>
+
+<div class="cards-2">
+    <section class="panel">
+        <div class="panel__head">
+            <h2 class="panel__title">Memberships</h2>
+            <span class="panel__tag">{{ memberships|length }}</span>
+        </div>
+        <div class="table-wrap">
+            <table class="tbl">
+                <thead><tr><th>League</th><th>Role</th><th>Status</th></tr></thead>
+                <tbody>
+                    {% for membership, league in memberships %}
+                        <tr>
+                            <td><a href="{{ url_for('internal.league_detail', league_id=league.id) }}">{{ league.name }}</a></td>
+                            <td>{{ membership.role }}</td>
+                            <td>{% if membership.disabled_at %}<span class="badge badge--closed">Removed</span>{% else %}<span class="badge badge--open">Active</span>{% endif %}</td>
+                        </tr>
+                    {% else %}
+                        <tr><td colspan="3" class="muted-text">No memberships.</td></tr>
+                    {% endfor %}
+                </tbody>
+            </table>
+        </div>
+    </section>
+
+    <section class="panel">
+        <div class="panel__head">
+            <h2 class="panel__title">Owned leagues</h2>
+            <span class="panel__tag">{{ owned_leagues|length }}</span>
+        </div>
+        <div class="table-wrap">
+            <table class="tbl">
+                <thead><tr><th>League</th><th>Status</th><th></th></tr></thead>
+                <tbody>
+                    {% for league in owned_leagues %}
+                        <tr>
+                            <td><a href="{{ url_for('internal.league_detail', league_id=league.id) }}">{{ league.name }}</a></td>
+                            <td>{% if league.archived_at %}<span class="badge badge--closed">Archived</span>{% else %}<span class="badge badge--open">Active</span>{% endif %}</td>
+                            <td class="tbl__actions"><a class="btn btn--ghost btn--sm" href="{{ url_for('leagues.league_settings', league_ref=league.url_ref) }}">Manage</a></td>
+                        </tr>
+                    {% else %}
+                        <tr><td colspan="3" class="muted-text">No owned leagues.</td></tr>
+                    {% endfor %}
+                </tbody>
+            </table>
+        </div>
+    </section>
+</div>
+
+{% endblock %}
diff --git a/templates/internal_users.html b/templates/internal_users.html
new file mode 100644
index 0000000..bb65776
--- /dev/null
+++ b/templates/internal_users.html
@@ -0,0 +1,73 @@
+{% extends "base.html" %}
+{% block title %}Users · Admin · myboker.org{% endblock %}
+{% block sidebar %}{% include "_internal_sidebar.html" %}{% endblock %}
+{% block page_class %}page--app{% endblock %}
+{% block content %}
+
+<div class="db-header int-page-header">
+    <div>
+        <h1 class="db-header__title">Users</h1>
+        <p class="db-header__sub">Search accounts by email and inspect account status.</p>
+    </div>
+</div>
+
+<div class="admin-list-tools">
+    <form class="admin-searchbar" method="get" action="{{ url_for('internal.users') }}">
+        <input class="field-input" type="search" name="q" value="{{ q }}" placeholder="Search email">
+        <button class="btn btn--primary btn--sm" type="submit">Search</button>
+        {% if q %}<a class="btn btn--ghost btn--sm" href="{{ url_for('internal.users') }}">Clear</a>{% endif %}
+    </form>
+</div>
+
+<section class="panel admin-list-panel">
+    <div class="panel__head">
+        <h2 class="panel__title">Matching users</h2>
+        <span class="panel__tag">{{ pagination.start }}-{{ pagination.end }} of {{ pagination.total }}</span>
+    </div>
+    <div class="table-wrap">
+        <table class="tbl admin-table">
+            <thead>
+                <tr>
+                    <th>Email</th>
+                    <th>Status</th>
+                    <th>Verified</th>
+                    <th>Created</th>
+                    <th></th>
+                </tr>
+            </thead>
+            <tbody>
+                {% for user in users %}
+                    <tr>
+                        <td class="admin-table__primary">
+                            <a href="{{ url_for('internal.user_detail', user_id=user.id) }}">{{ user.email }}</a>
+                            {% if user.is_site_admin %}<span class="badge badge--paid">Admin</span>{% endif %}
+                        </td>
+                        <td>{% if user.disabled_at %}<span class="badge badge--closed">Disabled</span>{% else %}<span class="badge badge--open">Active</span>{% endif %}</td>
+                        <td>{% if user.email_verified_at %}Yes{% else %}<span class="muted-text">No</span>{% endif %}</td>
+                        <td class="admin-table__muted">{{ user.created_at.strftime('%Y-%m-%d') if user.created_at else 'Unknown' }}</td>
+                        <td class="tbl__actions"><a class="btn btn--ghost btn--sm" href="{{ url_for('internal.user_detail', user_id=user.id) }}">View</a></td>
+                    </tr>
+                {% else %}
+                    <tr><td colspan="5" class="muted-text">No users found.</td></tr>
+                {% endfor %}
+            </tbody>
+        </table>
+    </div>
+    {% if pagination.pages > 1 %}
+    <div class="pagination-row">
+        {% if pagination.has_prev %}
+            <a class="btn btn--ghost btn--sm" href="{{ url_for('internal.users', q=q, page=pagination.prev_page) }}">Previous</a>
+        {% else %}
+            <span class="btn btn--ghost btn--sm is-disabled">Previous</span>
+        {% endif %}
+        <span class="pagination-row__label">Page {{ pagination.page }} of {{ pagination.pages }}</span>
+        {% if pagination.has_next %}
+            <a class="btn btn--ghost btn--sm" href="{{ url_for('internal.users', q=q, page=pagination.next_page) }}">Next</a>
+        {% else %}
+            <span class="btn btn--ghost btn--sm is-disabled">Next</span>
+        {% endif %}
+    </div>
+    {% endif %}
+</section>
+
+{% endblock %}
diff --git a/tests/test_internal.py b/tests/test_internal.py
new file mode 100644
index 0000000..6d2587a
--- /dev/null
+++ b/tests/test_internal.py
@@ -0,0 +1,320 @@
+import tempfile
+import unittest
+from datetime import datetime, timedelta, timezone
+from pathlib import Path
+
+from app import create_app
+from auth import hash_password
+from db import db
+
+
+class InternalAdminAccessTests(unittest.TestCase):
+    def setUp(self):
+        self.tmpdir = tempfile.TemporaryDirectory()
+        db_path = Path(self.tmpdir.name) / "test.sqlite3"
+        self.app = create_app(
+            {
+                "TESTING": True,
+                "SQLALCHEMY_DATABASE_URI": f"sqlite:///{db_path}",
+                "WTF_CSRF_ENABLED": False,
+            }
+        )
+        self.client = self.app.test_client()
+
+        with self.app.app_context():
+            from db_models import League, LeagueMembership, User
+
+            db.create_all()
+            self.user = User(
+                email="viewer@example.com",
+                password_hash=hash_password("password123"),
+            )
+            self.manager = User(
+                email="manager@example.com",
+                password_hash=hash_password("password123"),
+            )
+            self.admin = User(
+                email="admin@example.com",
+                password_hash=hash_password("password123"),
+                is_site_admin=True,
+            )
+            db.session.add_all([self.user, self.manager, self.admin])
+            db.session.flush()
+            self.league = League(
+                name="Friday Poker",
+                slug="friday-poker",
+                public_key="abc123",
+                created_by_user_id=self.admin.id,
+                visibility="public",
+            )
+            db.session.add(self.league)
+            db.session.flush()
+            db.session.add_all(
+                [
+                    LeagueMembership(league_id=self.league.id, user_id=self.admin.id, role="owner"),
+                    LeagueMembership(league_id=self.league.id, user_id=self.manager.id, role="manager"),
+                ]
+            )
+            db.session.commit()
+            self.user_id = self.user.id
+            self.manager_id = self.manager.id
+            self.admin_id = self.admin.id
+            self.league_id = self.league.id
+
+    def tearDown(self):
+        with self.app.app_context():
+            db.session.remove()
+            db.drop_all()
+            db.engine.dispose()
+        self.tmpdir.cleanup()
+
+    def login_as(self, user_id: str, **extra_session):
+        with self.client.session_transaction() as session:
+            session["user_id"] = user_id
+            for key, value in extra_session.items():
+                session[key] = value
+
+    def test_internal_dashboard_requires_login(self):
+        response = self.client.get("/internal/")
+
+        self.assertEqual(response.status_code, 302)
+        self.assertIn("/account/login", response.headers["Location"])
+
+    def test_internal_dashboard_rejects_regular_users(self):
+        self.login_as(self.user_id)
+
+        response = self.client.get("/internal/")
+
+        self.assertEqual(response.status_code, 403)
+
+    def test_internal_dashboard_ignores_client_side_admin_spoof(self):
+        self.login_as(self.user_id, is_site_admin=True)
+
+        response = self.client.get("/internal/")
+
+        self.assertEqual(response.status_code, 403)
+
+    def test_internal_dashboard_allows_site_admins(self):
+        self.login_as(self.admin_id)
+
+        response = self.client.get("/internal/")
+
+        self.assertEqual(response.status_code, 200)
+        self.assertIn(b"Overview", response.data)
+        self.assertIn(b"admin@example.com", response.data)
+        self.assertIn(b"Active users", response.data)
+        self.assertIn(b"Returning users", response.data)
+        self.assertIn(b"Recorded ledger volume", response.data)
+        self.assertIn(b"Not platform revenue", response.data)
+
+    def test_admin_can_search_users(self):
+        self.login_as(self.admin_id)
+
+        response = self.client.get("/internal/users?q=viewer")
+
+        self.assertEqual(response.status_code, 200)
+        self.assertIn(b"viewer@example.com", response.data)
+        self.assertNotIn(b"manager@example.com", response.data)
+
+    def test_admin_users_page_is_paginated(self):
+        with self.app.app_context():
+            from db_models import User
+
+            users = [
+                User(email=f"bulk{i:02d}@example.com", password_hash=hash_password("password123"))
+                for i in range(55)
+            ]
+            db.session.add_all(users)
+            db.session.commit()
+        self.login_as(self.admin_id)
+
+        response = self.client.get("/internal/users?page=2")
+
+        self.assertEqual(response.status_code, 200)
+        self.assertIn(b"Page 2 of 2", response.data)
+        self.assertIn(b"Previous", response.data)
+
+    def test_admin_leagues_page_is_paginated(self):
+        with self.app.app_context():
+            from db_models import League
+
+            leagues = [
+                League(
+                    name=f"Bulk League {i:02d}",
+                    slug=f"bulk-league-{i:02d}",
+                    public_key=f"bk{i:010d}"[:12],
+                    created_by_user_id=self.admin_id,
+                    visibility="private",
+                )
+                for i in range(55)
+            ]
+            db.session.add_all(leagues)
+            db.session.commit()
+        self.login_as(self.admin_id)
+
+        response = self.client.get("/internal/leagues?page=2")
+
+        self.assertEqual(response.status_code, 200)
+        self.assertIn(b"Page 2 of 2", response.data)
+        self.assertIn(b"Previous", response.data)
+
+    def test_session_growth_uses_session_date_not_created_at(self):
+        with self.app.app_context():
+            from db_models import PokerSession
+            from routes.internal import _growth_data
+
+            now = datetime.now(timezone.utc)
+            old_session = PokerSession(
+                league_id=self.league_id,
+                session_date=(now - timedelta(weeks=5)).date(),
+                sequence_on_date=1,
+                status="closed",
+                created_at=now,
+            )
+            current_session = PokerSession(
+                league_id=self.league_id,
+                session_date=(now - timedelta(days=2)).date(),
+                sequence_on_date=1,
+                status="closed",
+                created_at=now,
+            )
+            db.session.add_all([old_session, current_session])
+            db.session.commit()
+
+            growth = _growth_data()
+
+            self.assertEqual(sum(growth["session_counts"]), 2)
+            self.assertLess(growth["session_counts"][-1], 2)
+
+    def test_regular_user_cannot_update_user_email(self):
+        self.login_as(self.user_id)
+
+        response = self.client.post(
+            f"/internal/users/{self.user_id}/email",
+            data={"email": "changed@example.com"},
+        )
+
+        self.assertEqual(response.status_code, 403)
+        with self.app.app_context():
+            from db_models import User
+
+            user = db.session.get(User, self.user_id)
+            self.assertEqual(user.email, "viewer@example.com")
+
+    def test_admin_can_update_user_email(self):
+        self.login_as(self.admin_id)
+
+        response = self.client.post(
+            f"/internal/users/{self.user_id}/email",
+            data={"email": "changed@example.com"},
+            follow_redirects=True,
+        )
+
+        self.assertEqual(response.status_code, 200)
+        with self.app.app_context():
+            from db_models import User
+
+            user = db.session.get(User, self.user_id)
+            self.assertEqual(user.email, "changed@example.com")
+
+    def test_admin_delete_user_blocks_owned_leagues(self):
+        self.login_as(self.admin_id)
+        with self.app.app_context():
+            from db_models import League, LeagueMembership
+
+            owned_league = League(
+                name="Manager Owned Poker",
+                slug="manager-owned-poker",
+                public_key="mgr123",
+                created_by_user_id=self.manager_id,
+                visibility="private",
+            )
+            db.session.add(owned_league)
+            db.session.flush()
+            db.session.add(LeagueMembership(league_id=owned_league.id, user_id=self.manager_id, role="owner"))
+            db.session.commit()
+
+        response = self.client.post(
+            f"/internal/users/{self.manager_id}/delete",
+            data={"confirm": "DELETE"},
+        )
+
+        self.assertEqual(response.status_code, 302)
+        with self.app.app_context():
+            from db_models import User
+
+            self.assertIsNotNone(db.session.get(User, self.manager_id))
+
+    def test_admin_can_archive_and_restore_league(self):
+        self.login_as(self.admin_id)
+
+        archive_response = self.client.post(f"/internal/leagues/{self.league_id}/archive")
+        self.assertEqual(archive_response.status_code, 302)
+        with self.app.app_context():
+            from db_models import League
+
+            league = db.session.get(League, self.league_id)
+            self.assertIsNotNone(league.archived_at)
+
+        restore_response = self.client.post(f"/internal/leagues/{self.league_id}/restore")
+        self.assertEqual(restore_response.status_code, 302)
+        with self.app.app_context():
+            from db_models import League
+
+            league = db.session.get(League, self.league_id)
+            self.assertIsNone(league.archived_at)
+
+    def test_admin_can_update_league_settings(self):
+        self.login_as(self.admin_id)
+
+        response = self.client.post(
+            f"/internal/leagues/{self.league_id}/settings",
+            data={
+                "name": "Saturday Poker",
+                "description": "Updated by support",
+                "visibility": "private",
+                "eligible_min_sessions": "5",
+                "break_even_dollars": "2.50",
+            },
+        )
+
+        self.assertEqual(response.status_code, 302)
+        with self.app.app_context():
+            from db_models import League
+
+            league = db.session.get(League, self.league_id)
+            self.assertEqual(league.name, "Saturday Poker")
+            self.assertEqual(league.slug, "saturday-poker")
+            self.assertEqual(league.description, "Updated by support")
+            self.assertEqual(league.visibility, "private")
+            self.assertEqual(league.eligible_min_sessions, 5)
+            self.assertEqual(league.break_even_cents, 250)
+
+    def test_admin_can_transfer_league_ownership(self):
+        self.login_as(self.admin_id)
+
+        response = self.client.post(
+            f"/internal/leagues/{self.league_id}/transfer",
+            data={"new_owner_email": "manager@example.com"},
+        )
+
+        self.assertEqual(response.status_code, 302)
+        with self.app.app_context():
+            from db_models import League, LeagueMembership
+
+            league = db.session.get(League, self.league_id)
+            self.assertEqual(league.created_by_user_id, self.manager_id)
+            old_owner_membership = LeagueMembership.query.filter_by(
+                league_id=self.league_id,
+                user_id=self.admin_id,
+            ).one()
+            new_owner_membership = LeagueMembership.query.filter_by(
+                league_id=self.league_id,
+                user_id=self.manager_id,
+            ).one()
+            self.assertEqual(old_owner_membership.role, "manager")
+            self.assertEqual(new_owner_membership.role, "owner")
+
+
+if __name__ == "__main__":
+    unittest.main()

From 734b3bdcaa3826f3871edb37b034274d225458d0 Mon Sep 17 00:00:00 2001
From: SowinskiBraeden <braeden@sowinski.dev>
Date: Sun, 28 Jun 2026 12:19:57 -0700
Subject: [PATCH 76/83] update terms/privacy

---
 config.py              |  2 +-
 templates/privacy.html | 34 ++++++++++++++++++++++++----------
 templates/support.html |  2 +-
 templates/terms.html   | 24 +++++++++++++++---------
 4 files changed, 41 insertions(+), 21 deletions(-)

diff --git a/config.py b/config.py
index d54a306..8a81ae4 100644
--- a/config.py
+++ b/config.py
@@ -9,7 +9,7 @@ DATA_PATH = BASE_DIR / "data" / "entries.csv"
 DEFAULT_DATABASE_URL = f"sqlite:///{BASE_DIR / 'data' / 'boker-dev.sqlite3'}"
 
 ELIGIBLE_MIN_SESSIONS = 3
-APP_VERSION = "2.5.28"
+APP_VERSION = "2.5.29"
 
 
 def load_local_env(env_path: Path) -> None:
diff --git a/templates/privacy.html b/templates/privacy.html
index 8bc883b..0d50e43 100644
--- a/templates/privacy.html
+++ b/templates/privacy.html
@@ -7,7 +7,7 @@
     <header class="legal-doc__header">
         <p class="lp-kicker">Legal</p>
         <h1 class="legal-doc__title">Privacy Policy</h1>
-        <p class="legal-doc__meta">Effective June 27, 2026. Owned and operated by <strong>Cedarline Digital</strong>.</p>
+        <p class="legal-doc__meta">Effective June 28, 2026. Owned and operated by <strong>Cedarline Digital</strong>.</p>
     </header>
 
     <div class="legal-doc__body">
@@ -40,6 +40,13 @@
             <li>Which account invited you and when.</li>
         </ul>
 
+        <h3>Support and operational data</h3>
+        <ul>
+            <li>Account status information such as whether an account is verified, disabled, or marked as a site administrator.</li>
+            <li>Aggregate operational metrics derived from existing records, such as user counts, active users, league counts, session counts, ledger event counts, voided event counts, and recorded ledger volume.</li>
+            <li>Support actions performed through internal tools, such as account email updates, password reset or temporary password emails, account disable/restore actions, league archive/restore actions, league deletion, and ownership transfers.</li>
+        </ul>
+
         <h2>3. What we do not collect</h2>
         <ul>
             <li><strong>Real names.</strong> Player display names are arbitrary labels chosen by league managers and are not required to correspond to real legal identities.</li>
@@ -47,7 +54,7 @@
             <li>Location or GPS data.</li>
             <li>Browser fingerprints or device identifiers.</li>
             <li>Advertising IDs or third-party tracking identifiers.</li>
-            <li>Analytics data. There are no third-party analytics scripts (no Google Analytics, Mixpanel, or similar) on myboker.org.</li>
+            <li>Third-party analytics data. There are no third-party analytics scripts (no Google Analytics, Mixpanel, or similar) on myboker.org.</li>
         </ul>
 
         <h2>4. Cookies and transient data</h2>
@@ -61,27 +68,34 @@
             <li>To store and display your league, session, and player data to you and the members of your leagues.</li>
             <li>To send transactional emails: account verification, password reset, and league invitations.</li>
             <li>To enforce rate limits and protect the service from abuse.</li>
+            <li>To provide account and league support, including correcting account emails, helping with password recovery, disabling abusive or compromised accounts, transferring league ownership, and handling deletion requests.</li>
+            <li>To understand basic service health and usage through first-party aggregate metrics calculated from records already stored by the Service.</li>
         </ul>
         <p>We do not sell, rent, share, or otherwise disclose your personal information to third parties for advertising or marketing purposes.</p>
 
-        <h2>6. Third-party services</h2>
+        <h2>6. Internal administration</h2>
+        <p>Authorized site administrators may use private internal tools to view account, league, session, membership, and ledger information when needed to operate the Service, respond to support requests, investigate abuse or security issues, correct account or league problems, and maintain service reliability.</p>
+        <p>Internal tools may display aggregate service metrics, including recorded ledger volume. Recorded ledger volume is a usage metric only. myboker.org does not process payments, hold money, transfer funds, or treat recorded ledger amounts as platform revenue.</p>
+
+        <h2>7. Third-party services</h2>
         <p>We use a third-party SMTP provider to deliver transactional emails. This provider receives only the recipient email address and the message content required to deliver your email. No other personal data is shared with this provider.</p>
         <p>We have no other third-party integrations, analytics platforms, or data processors.</p>
         <p>Servers hosting myboker.org are located in <strong>North America</strong> (primarily Canada; potentially the United States). Data is not intentionally transferred to the European Union, though no geographic restriction is technically enforced at the network level.</p>
 
-        <h2>7. Player display names</h2>
+        <h2>8. Player display names</h2>
         <p>Player profiles in a league use display names set by the league manager. These names do not need to be real legal names; they are arbitrary labels for tracking purposes. All leagues are <strong>private by default</strong>, meaning player data is only visible to members of that specific league.</p>
         <p>If you are a league manager adding players, you are responsible for ensuring that players whose results you track have agreed to participate in your league and have their results recorded.</p>
 
-        <h2>8. Data retention and deletion</h2>
+        <h2>9. Data retention and deletion</h2>
         <p>We retain your data for as long as your account is active. You have two options for removing your data:</p>
         <ul>
             <li><strong>Account deletion:</strong> available in account settings. This is immediate and permanent. Your account, all leagues you own, and all associated session history are irreversibly removed.</li>
             <li><strong>League deletion:</strong> league owners can permanently delete a league, which removes all its sessions, players, and ledger events. Archiving a league preserves data while hiding the league from active views.</li>
         </ul>
+        <p>Site administrators may disable accounts, restore accounts, archive leagues, restore leagues, transfer league ownership, or permanently delete accounts or leagues when needed for support, security, abuse prevention, or to complete a verified user request.</p>
         <p>We do not have automated data expiry periods. Data remains until you delete it. As the user base grows, we may introduce formal retention policies and will update this policy accordingly.</p>
 
-        <h2>9. Your rights</h2>
+        <h2>10. Your rights</h2>
         <p>Under PIPEDA and BC PIPA, you have the right to:</p>
         <ul>
             <li>Know what personal information we hold about you.</li>
@@ -92,16 +106,16 @@
         <p>To exercise any of these rights, contact us at <a href="mailto:support@cedarline.digital">support@cedarline.digital</a>. We will respond within 30 days.</p>
         <p>If you are a resident of the European Union, additional rights may apply under the GDPR. myboker.org is not specifically directed at EU residents, but we will honour GDPR deletion and access requests made in writing.</p>
 
-        <h2>10. Age requirement</h2>
+        <h2>11. Age requirement</h2>
         <p>You must be <strong>at least 18 years old</strong> to create an account on myboker.org. By registering, you confirm you meet this requirement. If we become aware that an account was created by someone under 18, we will permanently delete that account.</p>
 
-        <h2>11. Security</h2>
+        <h2>12. Security</h2>
         <p>We apply standard security measures including encrypted connections (TLS in transit), bcrypt password hashing, CSRF protection, and rate limiting. No method of data transmission or storage is 100% secure. We cannot guarantee absolute security but take reasonable precautions to protect your information.</p>
 
-        <h2>12. Changes to this policy</h2>
+        <h2>13. Changes to this policy</h2>
         <p>We may update this Privacy Policy from time to time. When we do, we will update the effective date at the top of this page. Continued use of myboker.org after changes are posted constitutes your acceptance of the revised policy.</p>
 
-        <h2>13. Contact</h2>
+        <h2>14. Contact</h2>
         <p>Questions or requests regarding this policy:</p>
         <p>
             <strong>Cedarline Digital</strong><br>
diff --git a/templates/support.html b/templates/support.html
index 3e3942a..c7b29c1 100644
--- a/templates/support.html
+++ b/templates/support.html
@@ -323,7 +323,7 @@
             <details class="faq-item">
                 <summary class="faq-item__q">Does myboker.org track me or use analytics?</summary>
                 <div class="faq-item__a">
-                    <p>No. There are no third-party analytics scripts on myboker.org. We set one functional session cookie to keep you signed in and nothing else. We do not sell or share your data. See the full <a href="{{ url_for('public.privacy') }}">Privacy Policy</a> for details.</p>
+                    <p>There are no third-party analytics scripts on myboker.org. We set one functional session cookie to keep you signed in. We may calculate first-party aggregate service metrics from existing account, league, session, and ledger records to understand service health and usage. We do not sell or share your data for advertising. See the full <a href="{{ url_for('public.privacy') }}">Privacy Policy</a> for details.</p>
                 </div>
             </details>
 
diff --git a/templates/terms.html b/templates/terms.html
index 762ce31..0788162 100644
--- a/templates/terms.html
+++ b/templates/terms.html
@@ -7,7 +7,7 @@
     <header class="legal-doc__header">
         <p class="lp-kicker">Legal</p>
         <h1 class="legal-doc__title">Terms of Service</h1>
-        <p class="legal-doc__meta">Effective June 27, 2026. Owned and operated by <strong>Cedarline Digital</strong>.</p>
+        <p class="legal-doc__meta">Effective June 28, 2026. Owned and operated by <strong>Cedarline Digital</strong>.</p>
     </header>
 
     <div class="legal-doc__body">
@@ -65,32 +65,38 @@
 
         <h2>8. Financial data disclaimer</h2>
         <p>Amounts recorded in myboker.org are for <strong>reference and tracking purposes only</strong>. We make no representations about the accuracy, completeness, or legal weight of any financial data entered by users.</p>
+        <p>We may use aggregate recorded ledger totals internally to understand service usage. These totals are not platform revenue, payment volume, money handled by us, or proof that any real-world payment occurred.</p>
         <p>We are not responsible for any disputes, non-payment, or financial losses arising from information tracked in the Service. Home poker games may be subject to local laws. It is your responsibility to ensure your activities comply with the laws of your jurisdiction.</p>
 
-        <h2>9. Account and data deletion</h2>
+        <h2>9. Internal administration and support</h2>
+        <p>Authorized site administrators may use private internal tools to operate and support the Service. These tools may allow administrators to search for users or leagues, view account and league details, update account emails, send password reset or temporary password emails, disable or restore accounts, archive or restore leagues, delete accounts or leagues, and transfer league ownership.</p>
+        <p>We will use these tools only for service operation, support requests, security, abuse prevention, troubleshooting, legal compliance, or other legitimate administrative purposes. You may contact <a href="mailto:support@cedarline.digital">support@cedarline.digital</a> if you believe an administrative action was incorrect.</p>
+
+        <h2>10. Account and data deletion</h2>
         <p>You may permanently delete your account at any time through account settings. <strong>Deletion is immediate and irreversible.</strong> All personal data associated with your account, all leagues you own, and all associated session and player history will be removed. Members of leagues you own will permanently lose access to that league's data.</p>
         <p>League owners may also permanently delete individual leagues without deleting their account. This removes all sessions, players, and ledger events for that league. We strongly recommend reviewing your data before deletion, as this action cannot be undone.</p>
+        <p>Site administrators may also disable, restore, or delete accounts and leagues when needed for support, security, abuse prevention, or to complete a verified user request. In some cases, we may require league ownership to be transferred or league data to be deleted before an account can be permanently removed.</p>
 
-        <h2>10. Service availability</h2>
+        <h2>11. Service availability</h2>
         <p>myboker.org is provided <strong>as-is</strong> and <strong>free of charge</strong>. We do not guarantee continuous availability, uptime, error-free operation, or data preservation. We may perform maintenance, push updates, or experience outages at any time. We will make reasonable efforts to notify users of planned downtime when possible.</p>
 
-        <h2>11. Intellectual property</h2>
+        <h2>12. Intellectual property</h2>
         <p>The myboker.org software, design, and branding are owned by Cedarline Digital. You retain ownership of all data you enter into the Service (league names, player names, session data). You grant us a limited licence to store and display that data for the purpose of providing the Service to you.</p>
 
-        <h2>12. Limitation of liability</h2>
+        <h2>13. Limitation of liability</h2>
         <p>To the fullest extent permitted by applicable law, Cedarline Digital shall not be liable for any indirect, incidental, special, consequential, or punitive damages arising out of or related to your use of, or inability to use, the Service, including but not limited to loss of data, revenue, or goodwill.</p>
         <p>Our total aggregate liability to you for any claim arising from these Terms shall not exceed the total amount you have paid us in the twelve months preceding the claim. As the Service is currently free of charge, this limit is <strong>$0 CAD</strong>.</p>
 
-        <h2>13. Suspension and termination</h2>
+        <h2>14. Suspension and termination</h2>
         <p>We reserve the right to suspend or permanently terminate any account, at our discretion, for violations of these Terms, abusive behaviour, or any activity that we reasonably believe poses a risk to the Service or other users. We will make reasonable efforts to notify affected users unless doing so would compromise security or is prohibited by law.</p>
 
-        <h2>14. Changes to these Terms</h2>
+        <h2>15. Changes to these Terms</h2>
         <p>We may update these Terms at any time. When we do, we will update the effective date at the top of this page. Continued use of myboker.org after changes are posted constitutes your acceptance of the revised Terms. If changes are material, we will make reasonable efforts to inform users.</p>
 
-        <h2>15. Governing law</h2>
+        <h2>16. Governing law</h2>
         <p>These Terms are governed by and construed in accordance with the laws of the Province of British Columbia and the federal laws of Canada applicable therein, without regard to conflict of law principles. You agree that any dispute arising under these Terms shall be subject to the exclusive jurisdiction of the courts of British Columbia.</p>
 
-        <h2>16. Contact</h2>
+        <h2>17. Contact</h2>
         <p>Questions about these Terms:</p>
         <p>
             <strong>Cedarline Digital</strong><br>

From f25de03c81861ad52cff35564d3c24fa3f7d0de1 Mon Sep 17 00:00:00 2001
From: SowinskiBraeden <braeden@sowinski.dev>
Date: Sun, 28 Jun 2026 12:39:43 -0700
Subject: [PATCH 77/83] tidy internal tooling

---
 routes/internal.py                | 28 +++++--------
 static/css/style.css              | 19 +++++++++
 templates/internal_dashboard.html | 67 ++++++++++++-------------------
 3 files changed, 54 insertions(+), 60 deletions(-)

diff --git a/routes/internal.py b/routes/internal.py
index f83e941..9eacee5 100644
--- a/routes/internal.py
+++ b/routes/internal.py
@@ -226,7 +226,7 @@ def _sessions_by_weekday() -> dict:
 
 def _growth_data(weeks: int = 8) -> dict:
     now = datetime.now(timezone.utc)
-    labels, user_signups, session_counts, cash_in_weekly = [], [], [], []
+    labels, user_signups, session_counts, league_counts = [], [], [], []
     for i in range(weeks - 1, -1, -1):
         start = now - timedelta(weeks=i + 1)
         end = now - timedelta(weeks=i)
@@ -240,22 +240,12 @@ def _growth_data(weeks: int = 8) -> dict:
                 PokerSession.session_date < end_date,
             ).count()
         )
-        cash = (
-            db.session.query(db.func.coalesce(db.func.sum(LedgerEvent.amount_cents), 0))
-            .filter(
-                LedgerEvent.event_type.in_(_CASH_IN_TYPES),
-                LedgerEvent.voided_at.is_(None),
-                LedgerEvent.created_at >= start,
-                LedgerEvent.created_at < end,
-            )
-            .scalar()
-        )
-        cash_in_weekly.append(round(int(cash or 0) / 100, 2))
+        league_counts.append(League.query.filter(League.created_at >= start, League.created_at < end).count())
     return {
         "labels": labels,
         "user_signups": user_signups,
         "session_counts": session_counts,
-        "cash_in_weekly": cash_in_weekly,
+        "league_counts": league_counts,
     }
 
 
@@ -276,7 +266,7 @@ def _trend_cards(growth: dict) -> list[dict]:
     labels = growth["labels"]
     user_series = growth["user_signups"]
     session_series = growth["session_counts"]
-    cash_series = growth["cash_in_weekly"]
+    league_series = growth["league_counts"]
     current_start = datetime.now(timezone.utc) - timedelta(days=7)
     previous_start = current_start - timedelta(days=7)
 
@@ -329,12 +319,12 @@ def _trend_cards(growth: dict) -> list[dict]:
             "series": [event_previous, event_current],
         },
         {
-            "key": "volume",
-            "label": "Recorded volume",
-            "value": f"${cash_series[-1]:,.0f}" if cash_series else "$0",
-            "delta": _trend_delta(cash_series[-1] if cash_series else 0, cash_series[-2] if len(cash_series) > 1 else 0),
+            "key": "leagues",
+            "label": "New leagues",
+            "value": league_series[-1] if league_series else 0,
+            "delta": _trend_delta(league_series[-1] if league_series else 0, league_series[-2] if len(league_series) > 1 else 0),
             "labels": labels,
-            "series": cash_series,
+            "series": league_series,
         },
     ]
 
diff --git a/static/css/style.css b/static/css/style.css
index 1af07e5..2aa6683 100644
--- a/static/css/style.css
+++ b/static/css/style.css
@@ -356,8 +356,27 @@ h1, h2, h3, h4 { margin: 0; }
 .int-breakdown-row__label { color: var(--muted); }
 .int-breakdown-row__val { font-weight: 600; color: var(--text-strong); font-variant-numeric: tabular-nums; }
 
+.int-summary-grid {
+  display: grid;
+  grid-template-columns: repeat(4, 1fr);
+  gap: 1px;
+  background: var(--border);
+  border-radius: 10px;
+  overflow: hidden;
+}
+.int-summary-item {
+  display: flex;
+  flex-direction: column;
+  gap: 4px;
+  padding: 16px 20px;
+  background: var(--surface);
+}
+.int-summary-item__val { font-size: 22px; font-weight: 700; font-variant-numeric: tabular-nums; color: var(--text-strong); line-height: 1; }
+.int-summary-item__label { font-size: 12px; color: var(--muted); }
+
 @media (max-width: 900px) {
   .int-hero-grid { grid-template-columns: repeat(2, 1fr); }
+  .int-summary-grid { grid-template-columns: repeat(2, 1fr); }
   .admin-searchbar {
     grid-template-columns: 1fr;
   }
diff --git a/templates/internal_dashboard.html b/templates/internal_dashboard.html
index 112be94..dacead0 100644
--- a/templates/internal_dashboard.html
+++ b/templates/internal_dashboard.html
@@ -40,7 +40,7 @@
         </div>
         <span class="int-hero-card__num">{{ stats.active_leagues }}</span>
         <span class="int-hero-card__label">Active leagues</span>
-        <span class="int-hero-card__sub">{{ stats.public_leagues }} public · {{ stats.archived_leagues }} archived · {{ '%.1f'|format(stats.avg_sessions_per_active_league) }} avg sessions</span>
+        <span class="int-hero-card__sub">{{ stats.public_leagues }} public · {{ stats.archived_leagues }} archived</span>
     </div>
     <div class="int-hero-card">
         <div class="int-hero-card__icon int-hero-card__icon--sessions">
@@ -62,7 +62,7 @@
         </div>
         <span class="int-hero-card__num">{{ stats.active_users_30d }}</span>
         <span class="int-hero-card__label">Active users · 30d</span>
-        <span class="int-hero-card__sub">{{ stats.returning_users_30d }} returning · {{ stats.unverified_users }} unverified</span>
+        <span class="int-hero-card__sub">{{ stats.users_in_leagues }} in leagues · {{ stats.orphan_users }} solo</span>
     </div>
 </div>
 
@@ -110,15 +110,15 @@
     </section>
 </div>
 
-<!-- Charts row 2: cash + weekday -->
+<!-- Charts row 2: leagues + weekday -->
 <div class="cards-2 int-section-grid">
     <section class="panel int-chart-panel">
         <div class="int-chart-head">
-            <p class="kicker" style="margin:0;">Recorded ledger volume</p>
-            <h2 class="panel__title">Buy-ins and collections · 8 weeks</h2>
+            <p class="kicker" style="margin:0;">Growth</p>
+            <h2 class="panel__title">New leagues per week · 8 weeks</h2>
         </div>
         <div class="int-chart-wrap">
-            <canvas id="chart-cash"></canvas>
+            <canvas id="chart-leagues"></canvas>
         </div>
     </section>
     <section class="panel int-chart-panel">
@@ -137,38 +137,25 @@
     <section class="panel">
         <div class="panel__head">
             <h2 class="panel__title">Activity breakdown</h2>
-            <span class="panel__tag">24h / 7d</span>
+            <span class="panel__tag">7d</span>
         </div>
         <div class="panel__body">
             <div class="int-breakdown-grid">
                 <div>
-                    <div class="int-breakdown-row"><span class="int-breakdown-row__label">New users (24h)</span><span class="int-breakdown-row__val">{{ stats.new_users_24h }}</span></div>
                     <div class="int-breakdown-row"><span class="int-breakdown-row__label">New users (7d)</span><span class="int-breakdown-row__val">{{ stats.new_users_7d }}</span></div>
-                    <div class="int-breakdown-row"><span class="int-breakdown-row__label">Active users (24h)</span><span class="int-breakdown-row__val">{{ stats.active_users_24h }}</span></div>
                     <div class="int-breakdown-row"><span class="int-breakdown-row__label">Active users (7d)</span><span class="int-breakdown-row__val">{{ stats.active_users_7d }}</span></div>
                     <div class="int-breakdown-row"><span class="int-breakdown-row__label">Active users (30d)</span><span class="int-breakdown-row__val">{{ stats.active_users_30d }}</span></div>
-                    <div class="int-breakdown-row"><span class="int-breakdown-row__label">Returning users (7d)</span><span class="int-breakdown-row__val">{{ stats.returning_users_7d }}</span></div>
-                    <div class="int-breakdown-row"><span class="int-breakdown-row__label">Returning users (30d)</span><span class="int-breakdown-row__val">{{ stats.returning_users_30d }}</span></div>
                     <div class="int-breakdown-row"><span class="int-breakdown-row__label">Users in leagues</span><span class="int-breakdown-row__val">{{ stats.users_in_leagues }}</span></div>
-                    <div class="int-breakdown-row"><span class="int-breakdown-row__label">No-league signups</span><span class="int-breakdown-row__val">{{ stats.orphan_users }}</span></div>
-                    <div class="int-breakdown-row"><span class="int-breakdown-row__label">Verified accounts</span><span class="int-breakdown-row__val">{{ stats.verified_users }}</span></div>
-                    <div class="int-breakdown-row"><span class="int-breakdown-row__label">Unverified</span><span class="int-breakdown-row__val">{{ stats.unverified_users }}</span></div>
-                    <div class="int-breakdown-row"><span class="int-breakdown-row__label">Disabled</span><span class="int-breakdown-row__val">{{ stats.disabled_users }}</span></div>
-                    <div class="int-breakdown-row"><span class="int-breakdown-row__label">Site admins</span><span class="int-breakdown-row__val">{{ stats.site_admins }}</span></div>
+                    <div class="int-breakdown-row"><span class="int-breakdown-row__label">Unverified accounts</span><span class="int-breakdown-row__val">{{ stats.unverified_users }}</span></div>
+                    <div class="int-breakdown-row"><span class="int-breakdown-row__label">Disabled accounts</span><span class="int-breakdown-row__val">{{ stats.disabled_users }}</span></div>
                 </div>
                 <div>
-                    <div class="int-breakdown-row"><span class="int-breakdown-row__label">Sessions (24h)</span><span class="int-breakdown-row__val">{{ stats.sessions_24h }}</span></div>
                     <div class="int-breakdown-row"><span class="int-breakdown-row__label">Sessions (7d)</span><span class="int-breakdown-row__val">{{ stats.sessions_7d }}</span></div>
                     <div class="int-breakdown-row"><span class="int-breakdown-row__label">Open sessions</span><span class="int-breakdown-row__val">{{ stats.open_sessions }}</span></div>
                     <div class="int-breakdown-row"><span class="int-breakdown-row__label">Leagues active (7d)</span><span class="int-breakdown-row__val">{{ stats.leagues_active_7d }}</span></div>
-                    <div class="int-breakdown-row"><span class="int-breakdown-row__label">Leagues with no sessions</span><span class="int-breakdown-row__val">{{ stats.leagues_without_sessions }}</span></div>
-                    <div class="int-breakdown-row"><span class="int-breakdown-row__label">Sessions with no ledger records</span><span class="int-breakdown-row__val">{{ stats.sessions_without_events }}</span></div>
-                    <div class="int-breakdown-row"><span class="int-breakdown-row__label">Avg players/session</span><span class="int-breakdown-row__val">{{ '%.1f'|format(stats.avg_players_per_session) }}</span></div>
-                    <div class="int-breakdown-row"><span class="int-breakdown-row__label">Ledger events (24h)</span><span class="int-breakdown-row__val">{{ stats.ledger_events_24h }}</span></div>
+                    <div class="int-breakdown-row"><span class="int-breakdown-row__label">Avg players / session</span><span class="int-breakdown-row__val">{{ '%.1f'|format(stats.avg_players_per_session) }}</span></div>
                     <div class="int-breakdown-row"><span class="int-breakdown-row__label">Ledger events (7d)</span><span class="int-breakdown-row__val">{{ stats.ledger_events_7d }}</span></div>
-                    <div class="int-breakdown-row"><span class="int-breakdown-row__label">Total ledger events</span><span class="int-breakdown-row__val">{{ stats.ledger_events }}</span></div>
-                    <div class="int-breakdown-row"><span class="int-breakdown-row__label">Voided ledger records</span><span class="int-breakdown-row__val">{{ stats.voided_events }} · {{ '%.1f'|format(stats.void_rate) }}%</span></div>
-                    <div class="int-breakdown-row"><span class="int-breakdown-row__label">Avg sessions / league</span><span class="int-breakdown-row__val">{{ stats.avg_sessions_per_active_league }}</span></div>
+                    <div class="int-breakdown-row"><span class="int-breakdown-row__label">Avg sessions / league</span><span class="int-breakdown-row__val">{{ '%.1f'|format(stats.avg_sessions_per_active_league) }}</span></div>
                 </div>
             </div>
         </div>
@@ -204,15 +191,19 @@
 
 <section class="panel int-section-grid">
     <div class="panel__head">
-        <h2 class="panel__title">Recorded ledger volume</h2>
-        <span class="panel__tag">Not platform revenue</span>
+        <h2 class="panel__title">Totals at a glance</h2>
+        <span class="panel__tag">All time</span>
     </div>
     <div class="panel__body">
-        <div class="int-breakdown-grid">
-            <div class="int-breakdown-row"><span class="int-breakdown-row__label">Recorded buy-ins and collections</span><span class="int-breakdown-row__val">${{ '%.2f'|format(stats.cash_in_cents / 100) }}</span></div>
-            <div class="int-breakdown-row"><span class="int-breakdown-row__label">Recorded payouts</span><span class="int-breakdown-row__val">${{ '%.2f'|format(stats.cash_out_cents / 100) }}</span></div>
-            <div class="int-breakdown-row"><span class="int-breakdown-row__label">Average recorded volume / session</span><span class="int-breakdown-row__val">${{ '%.2f'|format(stats.avg_cash_in_per_session_cents / 100) }}</span></div>
-            <div class="int-breakdown-row"><span class="int-breakdown-row__label">Ledger records</span><span class="int-breakdown-row__val">{{ stats.ledger_events }}</span></div>
+        <div class="int-summary-grid">
+            <div class="int-summary-item"><span class="int-summary-item__val">{{ stats.users }}</span><span class="int-summary-item__label">Total users</span></div>
+            <div class="int-summary-item"><span class="int-summary-item__val">{{ stats.leagues }}</span><span class="int-summary-item__label">Total leagues</span></div>
+            <div class="int-summary-item"><span class="int-summary-item__val">{{ stats.sessions }}</span><span class="int-summary-item__label">Total sessions</span></div>
+            <div class="int-summary-item"><span class="int-summary-item__val">{{ stats.ledger_events }}</span><span class="int-summary-item__label">Ledger events</span></div>
+            <div class="int-summary-item"><span class="int-summary-item__val">${{ '%.0f'|format(stats.cash_in_cents / 100) }}</span><span class="int-summary-item__label">Recorded buy-ins</span></div>
+            <div class="int-summary-item"><span class="int-summary-item__val">${{ '%.0f'|format(stats.cash_out_cents / 100) }}</span><span class="int-summary-item__label">Recorded payouts</span></div>
+            <div class="int-summary-item"><span class="int-summary-item__val">${{ '%.0f'|format(stats.avg_cash_in_per_session_cents / 100) }}</span><span class="int-summary-item__label">Avg volume / session</span></div>
+            <div class="int-summary-item"><span class="int-summary-item__val">{{ stats.verified_users }}</span><span class="int-summary-item__label">Verified accounts</span></div>
         </div>
     </div>
 </section>
@@ -270,7 +261,7 @@
     const labels       = {{ growth.labels | tojson }};
     const userSignups  = {{ growth.user_signups | tojson }};
     const sessionData  = {{ growth.session_counts | tojson }};
-    const cashData     = {{ growth.cash_in_weekly | tojson }};
+    const leagueData   = {{ growth.league_counts | tojson }};
     const wdLabels     = {{ weekday_data.labels | tojson }};
     const wdData       = {{ weekday_data.data | tojson }};
     const trendCards   = {{ trend_cards | tojson }};
@@ -326,19 +317,13 @@
         options: baseOpts,
     });
 
-    new Chart(document.getElementById('chart-cash'), {
+    new Chart(document.getElementById('chart-leagues'), {
         type: 'bar',
         data: {
             labels,
-            datasets: [{ data: cashData, backgroundColor: 'rgba(120,180,240,.45)', borderColor: 'rgba(120,180,240,.9)', borderWidth: 1, borderRadius: 4 }]
-        },
-        options: {
-            ...baseOpts,
-            scales: {
-                x: axisStyle,
-                y: { ...axisStyle, beginAtZero: true, ticks: { ...axisStyle.ticks, callback: v => '$' + v } },
-            },
+            datasets: [{ data: leagueData, backgroundColor: 'rgba(111,192,147,.45)', borderColor: 'rgba(111,192,147,.9)', borderWidth: 1, borderRadius: 4 }]
         },
+        options: baseOpts,
     });
 
     new Chart(document.getElementById('chart-weekday'), {

From fbf56e127173a285fa621600378df4dde81fba48 Mon Sep 17 00:00:00 2001
From: SowinskiBraeden <braeden@sowinski.dev>
Date: Sun, 28 Jun 2026 17:07:29 -0700
Subject: [PATCH 78/83] Prepare redesign for public deployment

---
 .env.example                                  |  2 ++
 README.md                                     |  4 ++++
 app.py                                        | 15 +++++++++++++--
 config.py                                     |  4 +++-
 migrations/versions/0001_public_foundation.py |  1 -
 requirements.txt                              |  2 ++
 tests/test_internal.py                        |  6 +++---
 7 files changed, 27 insertions(+), 7 deletions(-)

diff --git a/.env.example b/.env.example
index b73c996..f68f5c5 100644
--- a/.env.example
+++ b/.env.example
@@ -1,6 +1,8 @@
 SECRET_KEY=replace-this-with-a-long-random-string
+APP_ENV=production
 DATABASE_URL=postgresql+psycopg://user:password@host/dbname
 APP_BASE_URL=https://myboker.org
+RATELIMIT_STORAGE_URI=redis://localhost:6379/0
 MAIL_SERVER=smtp.sendgrid.net
 MAIL_PORT=587
 MAIL_USE_TLS=true
diff --git a/README.md b/README.md
index bdeba2e..66fa1be 100644
--- a/README.md
+++ b/README.md
@@ -74,8 +74,10 @@ Then open:
 The app reads these from `.env`:
 
 - `SECRET_KEY`
+- `APP_ENV`
 - `DATABASE_URL`
 - `APP_BASE_URL`
+- `RATELIMIT_STORAGE_URI`
 - `MAIL_SERVER`
 - `MAIL_PORT`
 - `MAIL_USE_TLS`
@@ -84,6 +86,8 @@ The app reads these from `.env`:
 - `MAIL_PASSWORD`
 - `MAIL_DEFAULT_SENDER`
 
+For public deployments, set `APP_ENV=production`. Production mode enables secure cookies and refuses to start with the development `SECRET_KEY`. Set `RATELIMIT_STORAGE_URI` to a shared backend such as Redis so login and signup limits are enforced across processes.
+
 ## Site Admin Access
 
 Internal admin access uses normal database-backed accounts, not hardcoded `.env` credentials.
diff --git a/app.py b/app.py
index 529ec5a..5fa6fca 100644
--- a/app.py
+++ b/app.py
@@ -2,10 +2,11 @@
 from __future__ import annotations
 
 import click
+import os
 from flask import Flask, render_template
 
 from auth import current_user_id, is_logged_in, is_site_admin, normalize_email
-from config import Config
+from config import DEFAULT_SECRET_KEY, Config, ProductionConfig
 from db import database_extensions_available, db, init_database
 from extensions import csrf, limiter, mail
 from routes.account import account_bp
@@ -16,12 +17,22 @@ from storage import ensure_data_file
 from utils import cents_to_dollars, safe_date_label
 
 
+def _config_for_environment():
+    app_env = os.getenv("APP_ENV", os.getenv("FLASK_ENV", "")).lower()
+    if app_env in {"prod", "production"}:
+        return ProductionConfig
+    return Config
+
+
 def create_app(config_overrides: dict | None = None) -> Flask:
     app = Flask(__name__)
-    app.config.from_object(Config)
+    app.config.from_object(_config_for_environment())
     if config_overrides:
         app.config.update(config_overrides)
 
+    if app.config["SESSION_COOKIE_SECURE"] and app.config["SECRET_KEY"] == DEFAULT_SECRET_KEY:
+        raise RuntimeError("Set SECRET_KEY before running in production.")
+
     ensure_data_file(app.config["DATA_PATH"])
     init_database(app)
     csrf.init_app(app)
diff --git a/config.py b/config.py
index 8a81ae4..a8384a2 100644
--- a/config.py
+++ b/config.py
@@ -7,6 +7,7 @@ from pathlib import Path
 BASE_DIR = Path(__file__).resolve().parent
 DATA_PATH = BASE_DIR / "data" / "entries.csv"
 DEFAULT_DATABASE_URL = f"sqlite:///{BASE_DIR / 'data' / 'boker-dev.sqlite3'}"
+DEFAULT_SECRET_KEY = "change-this-before-deploying"
 
 ELIGIBLE_MIN_SESSIONS = 3
 APP_VERSION = "2.5.29"
@@ -32,7 +33,7 @@ load_local_env(BASE_DIR / ".env")
 
 class Config:
     APP_VERSION: str = APP_VERSION
-    SECRET_KEY: str = os.getenv("SECRET_KEY", "change-this-before-deploying")
+    SECRET_KEY: str = os.getenv("SECRET_KEY", DEFAULT_SECRET_KEY)
     SQLALCHEMY_DATABASE_URI: str = os.getenv("DATABASE_URL", DEFAULT_DATABASE_URL)
     SQLALCHEMY_TRACK_MODIFICATIONS: bool = False
     SESSION_COOKIE_HTTPONLY: bool = True
@@ -52,6 +53,7 @@ class Config:
     MAIL_PASSWORD: str | None = os.getenv("MAIL_PASSWORD") or None
     MAIL_DEFAULT_SENDER: str = os.getenv("MAIL_DEFAULT_SENDER", "noreply@myboker.org")
     MAIL_TIMEOUT: float = float(os.getenv("MAIL_TIMEOUT", "5"))
+    RATELIMIT_STORAGE_URI: str | None = os.getenv("RATELIMIT_STORAGE_URI") or None
 
 
 class ProductionConfig(Config):
diff --git a/migrations/versions/0001_public_foundation.py b/migrations/versions/0001_public_foundation.py
index f002d06..8f431e3 100644
--- a/migrations/versions/0001_public_foundation.py
+++ b/migrations/versions/0001_public_foundation.py
@@ -184,7 +184,6 @@ def downgrade() -> None:
     op.drop_index(op.f("ix_league_memberships_league_id"), table_name="league_memberships")
     op.drop_table("league_memberships")
     op.drop_index(op.f("ix_leagues_slug"), table_name="leagues")
-    op.drop_index(op.f("ix_leagues_public_key"), table_name="leagues")
     op.drop_index(op.f("ix_leagues_created_by_user_id"), table_name="leagues")
     op.drop_table("leagues")
     op.drop_index(op.f("ix_users_email"), table_name="users")
diff --git a/requirements.txt b/requirements.txt
index b0ea65e..f5af794 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -4,4 +4,6 @@ Flask-Mail>=0.10,<1.0
 Flask-Migrate>=4.0,<5.0
 Flask-SQLAlchemy>=3.1,<4.0
 Flask-WTF>=1.2,<2.0
+gunicorn>=22,<24
 psycopg[binary]>=3.2,<4.0
+redis>=5,<6
diff --git a/tests/test_internal.py b/tests/test_internal.py
index 6d2587a..e636a2e 100644
--- a/tests/test_internal.py
+++ b/tests/test_internal.py
@@ -103,9 +103,9 @@ class InternalAdminAccessTests(unittest.TestCase):
         self.assertIn(b"Overview", response.data)
         self.assertIn(b"admin@example.com", response.data)
         self.assertIn(b"Active users", response.data)
-        self.assertIn(b"Returning users", response.data)
-        self.assertIn(b"Recorded ledger volume", response.data)
-        self.assertIn(b"Not platform revenue", response.data)
+        self.assertIn(b"Activity breakdown", response.data)
+        self.assertIn(b"Ledger events", response.data)
+        self.assertIn(b"Totals at a glance", response.data)
 
     def test_admin_can_search_users(self):
         self.login_as(self.admin_id)

From 83c9fec4893e7936a38b9800fd833698f7ca402a Mon Sep 17 00:00:00 2001
From: SowinskiBraeden <braeden@sowinski.dev>
Date: Sun, 28 Jun 2026 17:11:09 -0700
Subject: [PATCH 79/83] Clean migration header whitespace

---
 migrations/versions/0001_public_foundation.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/migrations/versions/0001_public_foundation.py b/migrations/versions/0001_public_foundation.py
index 8f431e3..5057e0e 100644
--- a/migrations/versions/0001_public_foundation.py
+++ b/migrations/versions/0001_public_foundation.py
@@ -1,7 +1,7 @@
 """public multi-league foundation
 
 Revision ID: 0001_public_foundation
-Revises: 
+Revises:
 Create Date: 2026-06-23
 """
 from __future__ import annotations

From e376b3628aaab825aaaad85e8587b011ede0d910 Mon Sep 17 00:00:00 2001
From: SowinskiBraeden <braeden@sowinski.dev>
Date: Sun, 28 Jun 2026 17:41:11 -0700
Subject: [PATCH 80/83] Move application code into package

---
 README.md                                     |   8 +
 app.py                                        | 119 +-------------
 boker/__init__.py                             |   1 +
 boker/app.py                                  | 122 +++++++++++++++
 auth.py => boker/auth.py                      |   4 +-
 charts.py => boker/charts.py                  |   4 +-
 config.py => boker/config.py                  |   2 +-
 db.py => boker/db.py                          |   2 +-
 db_models.py => boker/db_models.py            |   2 +-
 emails.py => boker/emails.py                  |   2 +-
 extensions.py => boker/extensions.py          |   0
 .../league_repositories.py                    |  14 +-
 .../ledger_repositories.py                    |   6 +-
 models.py => boker/models.py                  |   0
 {routes => boker/routes}/__init__.py          |   0
 {routes => boker/routes}/account.py           |  42 ++---
 {routes => boker/routes}/internal.py          |  14 +-
 {routes => boker/routes}/leagues.py           | 148 +++++++++---------
 {routes => boker/routes}/public.py            |  16 +-
 services.py => boker/services.py              |   6 +-
 storage.py => boker/storage.py                |   0
 utils.py => boker/utils.py                    |   2 +-
 tests/test_accounting.py                      |   6 +-
 tests/test_internal.py                        |  30 ++--
 tests/test_stats.py                           |   4 +-
 25 files changed, 285 insertions(+), 269 deletions(-)
 create mode 100644 boker/__init__.py
 create mode 100644 boker/app.py
 rename auth.py => boker/auth.py (96%)
 rename charts.py => boker/charts.py (96%)
 rename config.py => boker/config.py (97%)
 rename db.py => boker/db.py (90%)
 rename db_models.py => boker/db_models.py (99%)
 rename emails.py => boker/emails.py (99%)
 rename extensions.py => boker/extensions.py (100%)
 rename league_repositories.py => boker/league_repositories.py (97%)
 rename ledger_repositories.py => boker/ledger_repositories.py (98%)
 rename models.py => boker/models.py (100%)
 rename {routes => boker/routes}/__init__.py (100%)
 rename {routes => boker/routes}/account.py (94%)
 rename {routes => boker/routes}/internal.py (98%)
 rename {routes => boker/routes}/leagues.py (92%)
 rename {routes => boker/routes}/public.py (93%)
 rename services.py => boker/services.py (98%)
 rename storage.py => boker/storage.py (100%)
 rename utils.py => boker/utils.py (97%)

diff --git a/README.md b/README.md
index 66fa1be..361c621 100644
--- a/README.md
+++ b/README.md
@@ -23,6 +23,14 @@ The current app is account-based and league-based. League owners/managers record
 - Chart.js
 - plain CSS
 
+## Project Layout
+
+- `app.py` is the deployment entrypoint for `flask --app app` and Gunicorn.
+- `boker/` contains the Flask application package, routes, models, services, repositories, and config.
+- `templates/` and `static/` contain Jinja views and public assets.
+- `migrations/` contains Alembic migrations for database deploys.
+- `tests/` contains the committed regression suite.
+
 ## Ledger Model
 
 Each ledger row is an event, not a final snapshot. Corrections are made by appending or voiding events, so the history remains auditable.
diff --git a/app.py b/app.py
index 5fa6fca..ab569a9 100644
--- a/app.py
+++ b/app.py
@@ -1,125 +1,10 @@
 #!/usr/bin/env python3
 from __future__ import annotations
 
-import click
-import os
-from flask import Flask, render_template
+from boker.app import app, create_app
 
-from auth import current_user_id, is_logged_in, is_site_admin, normalize_email
-from config import DEFAULT_SECRET_KEY, Config, ProductionConfig
-from db import database_extensions_available, db, init_database
-from extensions import csrf, limiter, mail
-from routes.account import account_bp
-from routes.internal import internal_bp
-from routes.leagues import leagues_bp
-from routes.public import public_bp
-from storage import ensure_data_file
-from utils import cents_to_dollars, safe_date_label
+__all__ = ["app", "create_app"]
 
 
-def _config_for_environment():
-    app_env = os.getenv("APP_ENV", os.getenv("FLASK_ENV", "")).lower()
-    if app_env in {"prod", "production"}:
-        return ProductionConfig
-    return Config
-
-
-def create_app(config_overrides: dict | None = None) -> Flask:
-    app = Flask(__name__)
-    app.config.from_object(_config_for_environment())
-    if config_overrides:
-        app.config.update(config_overrides)
-
-    if app.config["SESSION_COOKIE_SECURE"] and app.config["SECRET_KEY"] == DEFAULT_SECRET_KEY:
-        raise RuntimeError("Set SECRET_KEY before running in production.")
-
-    ensure_data_file(app.config["DATA_PATH"])
-    init_database(app)
-    csrf.init_app(app)
-    limiter.init_app(app)
-    mail.init_app(app)
-
-    app.jinja_env.filters["money"] = cents_to_dollars
-    app.jinja_env.filters["pretty_date"] = safe_date_label
-
-    @app.context_processor
-    def inject_globals() -> dict:
-        return {
-            "app_version": app.config["APP_VERSION"],
-            "current_user_id": current_user_id(),
-            "is_logged_in": is_logged_in(),
-            "current_user_is_site_admin": is_site_admin(),
-        }
-
-    app.register_blueprint(public_bp)
-    app.register_blueprint(account_bp)
-    app.register_blueprint(internal_bp)
-    app.register_blueprint(leagues_bp)
-
-    @app.errorhandler(404)
-    def not_found(e):
-        return render_template("404.html"), 404
-
-    @app.errorhandler(403)
-    def forbidden(e):
-        return render_template("403.html"), 403
-
-    @app.cli.command("init-db")
-    def init_db_command() -> None:
-        if not database_extensions_available() or db is None:
-            raise click.ClickException(
-                "Database dependencies are not installed. Run pip install -r requirements.txt."
-            )
-
-        with app.app_context():
-            db.create_all()
-
-        click.echo("Initialized database tables.")
-
-    @app.cli.command("grant-site-admin")
-    @click.argument("email")
-    def grant_site_admin_command(email: str) -> None:
-        if not database_extensions_available() or db is None:
-            raise click.ClickException(
-                "Database dependencies are not installed. Run pip install -r requirements.txt."
-            )
-
-        from db_models import User
-
-        normalized_email = normalize_email(email)
-        with app.app_context():
-            user = User.query.filter_by(email=normalized_email, disabled_at=None).one_or_none()
-            if user is None:
-                raise click.ClickException(f"No active user found for {normalized_email}.")
-            user.is_site_admin = True
-            db.session.commit()
-
-        click.echo(f"Granted site admin access to {normalized_email}.")
-
-    @app.cli.command("revoke-site-admin")
-    @click.argument("email")
-    def revoke_site_admin_command(email: str) -> None:
-        if not database_extensions_available() or db is None:
-            raise click.ClickException(
-                "Database dependencies are not installed. Run pip install -r requirements.txt."
-            )
-
-        from db_models import User
-
-        normalized_email = normalize_email(email)
-        with app.app_context():
-            user = User.query.filter_by(email=normalized_email).one_or_none()
-            if user is None:
-                raise click.ClickException(f"No user found for {normalized_email}.")
-            user.is_site_admin = False
-            db.session.commit()
-
-        click.echo(f"Revoked site admin access from {normalized_email}.")
-
-    return app
-
-
-app = create_app()
-
 if __name__ == "__main__":
     app.run(debug=True)
diff --git a/boker/__init__.py b/boker/__init__.py
new file mode 100644
index 0000000..afd4634
--- /dev/null
+++ b/boker/__init__.py
@@ -0,0 +1 @@
+"""Application package for myboker.org."""
diff --git a/boker/app.py b/boker/app.py
new file mode 100644
index 0000000..3247e99
--- /dev/null
+++ b/boker/app.py
@@ -0,0 +1,122 @@
+#!/usr/bin/env python3
+from __future__ import annotations
+
+import click
+import os
+from flask import Flask, render_template
+
+from boker.auth import current_user_id, is_logged_in, is_site_admin, normalize_email
+from boker.config import DEFAULT_SECRET_KEY, Config, ProductionConfig
+from boker.db import database_extensions_available, db, init_database
+from boker.extensions import csrf, limiter, mail
+from boker.routes.account import account_bp
+from boker.routes.internal import internal_bp
+from boker.routes.leagues import leagues_bp
+from boker.routes.public import public_bp
+from boker.storage import ensure_data_file
+from boker.utils import cents_to_dollars, safe_date_label
+
+
+def _config_for_environment():
+    app_env = os.getenv("APP_ENV", os.getenv("FLASK_ENV", "")).lower()
+    if app_env in {"prod", "production"}:
+        return ProductionConfig
+    return Config
+
+
+def create_app(config_overrides: dict | None = None) -> Flask:
+    app = Flask(__name__, template_folder="../templates", static_folder="../static")
+    app.config.from_object(_config_for_environment())
+    if config_overrides:
+        app.config.update(config_overrides)
+
+    if app.config["SESSION_COOKIE_SECURE"] and app.config["SECRET_KEY"] == DEFAULT_SECRET_KEY:
+        raise RuntimeError("Set SECRET_KEY before running in production.")
+
+    ensure_data_file(app.config["DATA_PATH"])
+    init_database(app)
+    csrf.init_app(app)
+    limiter.init_app(app)
+    mail.init_app(app)
+
+    app.jinja_env.filters["money"] = cents_to_dollars
+    app.jinja_env.filters["pretty_date"] = safe_date_label
+
+    @app.context_processor
+    def inject_globals() -> dict:
+        return {
+            "app_version": app.config["APP_VERSION"],
+            "current_user_id": current_user_id(),
+            "is_logged_in": is_logged_in(),
+            "current_user_is_site_admin": is_site_admin(),
+        }
+
+    app.register_blueprint(public_bp)
+    app.register_blueprint(account_bp)
+    app.register_blueprint(internal_bp)
+    app.register_blueprint(leagues_bp)
+
+    @app.errorhandler(404)
+    def not_found(e):
+        return render_template("404.html"), 404
+
+    @app.errorhandler(403)
+    def forbidden(e):
+        return render_template("403.html"), 403
+
+    @app.cli.command("init-db")
+    def init_db_command() -> None:
+        if not database_extensions_available() or db is None:
+            raise click.ClickException(
+                "Database dependencies are not installed. Run pip install -r requirements.txt."
+            )
+
+        with app.app_context():
+            db.create_all()
+
+        click.echo("Initialized database tables.")
+
+    @app.cli.command("grant-site-admin")
+    @click.argument("email")
+    def grant_site_admin_command(email: str) -> None:
+        if not database_extensions_available() or db is None:
+            raise click.ClickException(
+                "Database dependencies are not installed. Run pip install -r requirements.txt."
+            )
+
+        from boker.db_models import User
+
+        normalized_email = normalize_email(email)
+        with app.app_context():
+            user = User.query.filter_by(email=normalized_email, disabled_at=None).one_or_none()
+            if user is None:
+                raise click.ClickException(f"No active user found for {normalized_email}.")
+            user.is_site_admin = True
+            db.session.commit()
+
+        click.echo(f"Granted site admin access to {normalized_email}.")
+
+    @app.cli.command("revoke-site-admin")
+    @click.argument("email")
+    def revoke_site_admin_command(email: str) -> None:
+        if not database_extensions_available() or db is None:
+            raise click.ClickException(
+                "Database dependencies are not installed. Run pip install -r requirements.txt."
+            )
+
+        from boker.db_models import User
+
+        normalized_email = normalize_email(email)
+        with app.app_context():
+            user = User.query.filter_by(email=normalized_email).one_or_none()
+            if user is None:
+                raise click.ClickException(f"No user found for {normalized_email}.")
+            user.is_site_admin = False
+            db.session.commit()
+
+        click.echo(f"Revoked site admin access from {normalized_email}.")
+
+    return app
+
+
+app = create_app()
diff --git a/auth.py b/boker/auth.py
similarity index 96%
rename from auth.py
rename to boker/auth.py
index 86be33b..b5ad923 100644
--- a/auth.py
+++ b/boker/auth.py
@@ -72,12 +72,12 @@ def is_site_admin() -> bool:
     if not user_id:
         return False
 
-    from db import database_extensions_available
+    from boker.db import database_extensions_available
 
     if not database_extensions_available():
         return False
 
-    from db_models import User
+    from boker.db_models import User
 
     user = User.query.filter_by(id=user_id, disabled_at=None).one_or_none()
     return bool(user and user.is_site_admin)
diff --git a/charts.py b/boker/charts.py
similarity index 96%
rename from charts.py
rename to boker/charts.py
index 8f6bf09..b21fdd0 100644
--- a/charts.py
+++ b/boker/charts.py
@@ -4,8 +4,8 @@ from __future__ import annotations
 
 from typing import Any
 
-from models import SessionEntry, SessionSummary
-from utils import net_result_bucket, session_chart_label, session_sort_key
+from boker.models import SessionEntry, SessionSummary
+from boker.utils import net_result_bucket, session_chart_label, session_sort_key
 
 PLAYER_PALETTE = [
     "#9b8cf0",  # --line-1 violet
diff --git a/config.py b/boker/config.py
similarity index 97%
rename from config.py
rename to boker/config.py
index a8384a2..d90062a 100644
--- a/config.py
+++ b/boker/config.py
@@ -4,7 +4,7 @@ from __future__ import annotations
 import os
 from pathlib import Path
 
-BASE_DIR = Path(__file__).resolve().parent
+BASE_DIR = Path(__file__).resolve().parent.parent
 DATA_PATH = BASE_DIR / "data" / "entries.csv"
 DEFAULT_DATABASE_URL = f"sqlite:///{BASE_DIR / 'data' / 'boker-dev.sqlite3'}"
 DEFAULT_SECRET_KEY = "change-this-before-deploying"
diff --git a/db.py b/boker/db.py
similarity index 90%
rename from db.py
rename to boker/db.py
index 050416c..018f6a0 100644
--- a/db.py
+++ b/boker/db.py
@@ -24,7 +24,7 @@ def init_database(app: Any) -> bool:
         app.config["DATABASE_EXTENSIONS_AVAILABLE"] = False
         return False
 
-    import db_models  # noqa: F401 - registers SQLAlchemy models with metadata.
+    import boker.db_models  # noqa: F401 - registers SQLAlchemy models with metadata.
 
     db.init_app(app)
     migrate.init_app(app, db)
diff --git a/db_models.py b/boker/db_models.py
similarity index 99%
rename from db_models.py
rename to boker/db_models.py
index cf2c78a..a0da8d9 100644
--- a/db_models.py
+++ b/boker/db_models.py
@@ -4,7 +4,7 @@ from __future__ import annotations
 import uuid
 from datetime import date, datetime, timezone
 
-from db import db
+from boker.db import db
 
 if db is None:  # pragma: no cover - imported only when DB dependencies exist.
     raise RuntimeError("Database dependencies are not installed.")
diff --git a/emails.py b/boker/emails.py
similarity index 99%
rename from emails.py
rename to boker/emails.py
index 10391c3..c6874ab 100644
--- a/emails.py
+++ b/boker/emails.py
@@ -7,7 +7,7 @@ import socket
 from flask import current_app
 from flask_mail import Message
 
-from extensions import mail
+from boker.extensions import mail
 
 
 def _mail_send_suppressed() -> bool:
diff --git a/extensions.py b/boker/extensions.py
similarity index 100%
rename from extensions.py
rename to boker/extensions.py
diff --git a/league_repositories.py b/boker/league_repositories.py
similarity index 97%
rename from league_repositories.py
rename to boker/league_repositories.py
index 9f4e5ab..7536b7b 100644
--- a/league_repositories.py
+++ b/boker/league_repositories.py
@@ -5,13 +5,13 @@ import secrets
 import string
 from datetime import date
 
-from auth import hash_password, normalize_email
-from db import db
+from boker.auth import hash_password, normalize_email
+from boker.db import db
 
 if db is None:  # pragma: no cover - imported only when DB dependencies exist.
     raise RuntimeError("Database dependencies are not installed.")
 
-from db_models import (  # noqa: E402
+from boker.db_models import (  # noqa: E402
     LedgerEvent,
     League,
     LeagueMembership,
@@ -24,7 +24,7 @@ from db_models import (  # noqa: E402
     make_user,
     normalize_lookup,
 )
-from utils import slugify
+from boker.utils import slugify
 
 PUBLIC_KEY_ALPHABET = string.ascii_lowercase + string.digits
 
@@ -223,7 +223,7 @@ def set_session_status(session: PokerSession, status: str) -> PokerSession:
     if status not in {"open", "closed"}:
         raise ValueError(f"Unsupported session status: {status}")
 
-    from db_models import utc_now
+    from boker.db_models import utc_now
 
     session.status = status
     if status == "open":
@@ -323,7 +323,7 @@ def add_league_member(
 
 
 def remove_league_member(league_id: str, user_id: str) -> None:
-    from db_models import utc_now
+    from boker.db_models import utc_now
 
     membership = LeagueMembership.query.filter_by(
         league_id=league_id,
@@ -421,7 +421,7 @@ def delete_season(season: Season) -> None:
 
 
 def delete_league(league: League) -> None:
-    from db_models import LedgerEvent, LeagueMembership, Player, PokerSession, Season
+    from boker.db_models import LedgerEvent, LeagueMembership, Player, PokerSession, Season
     LedgerEvent.query.filter_by(league_id=league.id).delete(synchronize_session=False)
     PokerSession.query.filter_by(league_id=league.id).delete(synchronize_session=False)
     Player.query.filter_by(league_id=league.id).delete(synchronize_session=False)
diff --git a/ledger_repositories.py b/boker/ledger_repositories.py
similarity index 98%
rename from ledger_repositories.py
rename to boker/ledger_repositories.py
index 93cb1e2..0037160 100644
--- a/ledger_repositories.py
+++ b/boker/ledger_repositories.py
@@ -1,12 +1,12 @@
 #!/usr/bin/env python3
 from __future__ import annotations
 
-from db import db
+from boker.db import db
 
 if db is None:  # pragma: no cover - imported only when DB dependencies exist.
     raise RuntimeError("Database dependencies are not installed.")
 
-from db_models import (  # noqa: E402
+from boker.db_models import (  # noqa: E402
     CANONICAL_EVENT_TYPES,
     LedgerEvent,
     Player,
@@ -14,7 +14,7 @@ from db_models import (  # noqa: E402
     User,
     canonical_event_type,
 )
-from storage import EventRow  # noqa: E402
+from boker.storage import EventRow  # noqa: E402
 
 
 def session_event_ref(session: PokerSession) -> str:
diff --git a/models.py b/boker/models.py
similarity index 100%
rename from models.py
rename to boker/models.py
diff --git a/routes/__init__.py b/boker/routes/__init__.py
similarity index 100%
rename from routes/__init__.py
rename to boker/routes/__init__.py
diff --git a/routes/account.py b/boker/routes/account.py
similarity index 94%
rename from routes/account.py
rename to boker/routes/account.py
index 3511698..78d8cdf 100644
--- a/routes/account.py
+++ b/boker/routes/account.py
@@ -7,7 +7,7 @@ from urllib.parse import urlsplit
 
 from flask import Blueprint, flash, redirect, render_template, request, session as flask_session, url_for
 
-from auth import (
+from boker.auth import (
     current_user_id,
     generate_invite_token,
     generate_reset_token,
@@ -20,8 +20,8 @@ from auth import (
     verify_password,
     verify_reset_token,
 )
-from db import database_extensions_available, db
-from extensions import limiter
+from boker.db import database_extensions_available, db
+from boker.extensions import limiter
 
 account_bp = Blueprint("account", __name__, url_prefix="/account")
 EMAIL_VERIFICATION_TTL = timedelta(minutes=15)
@@ -64,7 +64,7 @@ def _new_verification_code() -> str:
 
 
 def _issue_verification_code(user) -> str:
-    from db_models import utc_now
+    from boker.db_models import utc_now
 
     code = _new_verification_code()
     user.email_verification_code_hash = hash_password(code)
@@ -73,7 +73,7 @@ def _issue_verification_code(user) -> str:
 
 
 def _send_verification_code(user) -> None:
-    from emails import send_email_verification_code
+    from boker.emails import send_email_verification_code
 
     code = _issue_verification_code(user)
     db.session.commit()
@@ -112,7 +112,7 @@ def register():
     }
 
     if request.method == "POST":
-        from league_repositories import create_user, find_user_by_email
+        from boker.league_repositories import create_user, find_user_by_email
 
         email = normalize_email(form["email"])
         password = request.form.get("password", "")
@@ -158,7 +158,7 @@ def login():
     }
 
     if request.method == "POST":
-        from league_repositories import find_user_by_email
+        from boker.league_repositories import find_user_by_email
 
         user = find_user_by_email(form["email"])
         password = request.form.get("password", "")
@@ -195,7 +195,7 @@ def verify_email():
         flash("Account database is not available.", "error")
         return redirect(url_for("account.login"))
 
-    from db_models import User, utc_now
+    from boker.db_models import User, utc_now
 
     user_id = flask_session.get("pending_verification_user_id")
     user = db.session.get(User, user_id) if user_id else None
@@ -245,7 +245,7 @@ def resend_verification_code():
         flash("Account database is not available.", "error")
         return redirect(url_for("account.login"))
 
-    from db_models import User
+    from boker.db_models import User
 
     user_id = flask_session.get("pending_verification_user_id")
     user = db.session.get(User, user_id) if user_id else None
@@ -275,7 +275,7 @@ def settings():
         flash("Account database is not available.", "error")
         return redirect(url_for("leagues.index"))
 
-    from db_models import User
+    from boker.db_models import User
 
     user = db.session.get(User, current_user_id())
     if user is None:
@@ -292,7 +292,7 @@ def update_email():
         flash("Account database is not available.", "error")
         return redirect(url_for("account.settings"))
 
-    from db_models import User
+    from boker.db_models import User
 
     user = db.session.get(User, current_user_id())
     if user is None:
@@ -307,7 +307,7 @@ def update_email():
     elif not verify_password(user.password_hash, current_password):
         flash("Current password is incorrect.", "error")
     else:
-        from league_repositories import find_user_by_email
+        from boker.league_repositories import find_user_by_email
 
         existing = find_user_by_email(new_email)
         if existing and existing.id != user.id:
@@ -327,7 +327,7 @@ def update_password():
         flash("Account database is not available.", "error")
         return redirect(url_for("account.settings"))
 
-    from db_models import User
+    from boker.db_models import User
 
     user = db.session.get(User, current_user_id())
     if user is None:
@@ -359,7 +359,7 @@ def disable_account():
         flash("Account database is not available.", "error")
         return redirect(url_for("account.settings"))
 
-    from db_models import League, User, utc_now
+    from boker.db_models import League, User, utc_now
 
     user = db.session.get(User, current_user_id())
     if user is None:
@@ -395,8 +395,8 @@ def delete_account():
         flash("Account database is not available.", "error")
         return redirect(url_for("account.settings"))
 
-    from db_models import League, LeagueMembership, User, utc_now
-    from league_repositories import delete_league
+    from boker.db_models import League, LeagueMembership, User, utc_now
+    from boker.league_repositories import delete_league
 
     user = db.session.get(User, current_user_id())
     if user is None:
@@ -436,9 +436,9 @@ def forgot_password():
             flash("Account database is not available.", "error")
             return redirect(url_for("account.forgot_password"))
 
-        from emails import send_password_reset
+        from boker.emails import send_password_reset
         from flask import current_app
-        from league_repositories import find_user_by_email
+        from boker.league_repositories import find_user_by_email
 
         email = normalize_email(request.form.get("email", ""))
         user = find_user_by_email(email)
@@ -472,7 +472,7 @@ def reset_password(token):
         flash("Account database is not available.", "error")
         return redirect(url_for("account.login"))
 
-    from db_models import User
+    from boker.db_models import User
 
     user = db.session.get(User, user_id)
     if user is None or user.disabled_at is not None:
@@ -507,8 +507,8 @@ def accept_invite(token):
         flash("Account database is not available.", "error")
         return redirect(url_for("leagues.index"))
 
-    from db_models import User
-    from league_repositories import add_league_member, find_league_by_id, find_membership, find_user_by_email
+    from boker.db_models import User
+    from boker.league_repositories import add_league_member, find_league_by_id, find_membership, find_user_by_email
 
     invite_email = normalize_email(data.get("email", ""))
     invite_next = url_for("account.accept_invite", token=token)
diff --git a/routes/internal.py b/boker/routes/internal.py
similarity index 98%
rename from routes/internal.py
rename to boker/routes/internal.py
index 9eacee5..339f4d5 100644
--- a/routes/internal.py
+++ b/boker/routes/internal.py
@@ -9,17 +9,17 @@ from flask import Blueprint, current_app, flash, redirect, render_template, requ
 from sqlalchemy import or_
 from sqlalchemy.exc import IntegrityError
 
-from auth import (
+from boker.auth import (
     current_user_id,
     generate_reset_token,
     hash_password,
     normalize_email,
     site_admin_required,
 )
-from db import db
-from db_models import LedgerEvent, League, LeagueMembership, Player, PokerSession, User, utc_now
-from league_repositories import delete_league, transfer_league_ownership
-from utils import slugify
+from boker.db import db
+from boker.db_models import LedgerEvent, League, LeagueMembership, Player, PokerSession, User, utc_now
+from boker.league_repositories import delete_league, transfer_league_ownership
+from boker.utils import slugify
 
 
 internal_bp = Blueprint("internal", __name__, url_prefix="/internal")
@@ -415,7 +415,7 @@ def send_user_password_reset(user_id: str):
         flash("Disabled users cannot receive password resets.", "error")
         return redirect(url_for("internal.user_detail", user_id=user.id))
 
-    from emails import send_password_reset
+    from boker.emails import send_password_reset
 
     token = generate_reset_token(user.id)
     base_url = current_app.config.get("APP_BASE_URL", "").rstrip("/")
@@ -436,7 +436,7 @@ def create_user_temporary_password(user_id: str):
         flash("Disabled users cannot receive temporary passwords.", "error")
         return redirect(url_for("internal.user_detail", user_id=user.id))
 
-    from emails import send_temporary_password
+    from boker.emails import send_temporary_password
 
     temporary_password = _temporary_password()
     user.password_hash = hash_password(temporary_password)
diff --git a/routes/leagues.py b/boker/routes/leagues.py
similarity index 92%
rename from routes/leagues.py
rename to boker/routes/leagues.py
index 804121f..ad73fb9 100644
--- a/routes/leagues.py
+++ b/boker/routes/leagues.py
@@ -9,12 +9,12 @@ from datetime import datetime, timezone
 
 from flask import Blueprint, abort, flash, make_response, redirect, render_template, request, url_for
 
-from auth import current_user_id, login_required, normalize_email
-from charts import cumulative_profit_series, player_session_series
-from db import database_extensions_available, db
-from models import SessionSummary
-from services import apply_rank_changes, build_leaderboard, build_session_summaries, session_events
-from utils import cents_to_dollars, session_label, session_sort_key
+from boker.auth import current_user_id, login_required, normalize_email
+from boker.charts import cumulative_profit_series, player_session_series
+from boker.db import database_extensions_available, db
+from boker.models import SessionSummary
+from boker.services import apply_rank_changes, build_leaderboard, build_session_summaries, session_events
+from boker.utils import cents_to_dollars, session_label, session_sort_key
 
 leagues_bp = Blueprint("leagues", __name__)
 
@@ -48,7 +48,7 @@ def split_league_ref(league_ref: str) -> tuple[str, str]:
 
 
 def require_league(league_ref: str, allowed_roles: set[str]):
-    from league_repositories import find_league_by_public_key, user_has_league_role
+    from boker.league_repositories import find_league_by_public_key, user_has_league_role
 
     _slug, public_key = split_league_ref(league_ref)
     league = find_league_by_public_key(public_key)
@@ -64,7 +64,7 @@ def require_league(league_ref: str, allowed_roles: set[str]):
 
 def get_league_with_visibility_gate(league_ref: str):
     """Load league; if private, enforce login + membership. Returns (league, None) or (None, redirect)."""
-    from league_repositories import find_league_by_public_key, user_has_league_role
+    from boker.league_repositories import find_league_by_public_key, user_has_league_role
 
     _slug, public_key = split_league_ref(league_ref)
     league = find_league_by_public_key(public_key)
@@ -99,8 +99,8 @@ def empty_session_summary(session) -> SessionSummary:
 
 
 def session_ref_map(league_id: str) -> dict[str, str]:
-    from ledger_repositories import session_event_ref
-    from league_repositories import list_sessions_for_league
+    from boker.ledger_repositories import session_event_ref
+    from boker.league_repositories import list_sessions_for_league
 
     return {session_event_ref(session): session.id for session in list_sessions_for_league(league_id)}
 
@@ -112,8 +112,8 @@ def index():
         flash("League database is not available.", "error")
         return render_template("leagues_index.html", leagues=[])
 
-    from league_repositories import list_leagues_for_user
-    from ledger_repositories import list_event_rows_for_league
+    from boker.league_repositories import list_leagues_for_user
+    from boker.ledger_repositories import list_event_rows_for_league
 
     memberships = list_leagues_for_user(current_user_id() or "")
     league_summaries = []
@@ -190,8 +190,8 @@ def new():
     }
 
     if request.method == "POST":
-        from db_models import User
-        from league_repositories import create_league, unique_league_slug
+        from boker.db_models import User
+        from boker.league_repositories import create_league, unique_league_slug
 
         owner = db.session.get(User, current_user_id())
         if owner is None:
@@ -221,8 +221,8 @@ def dashboard(league_ref: str):
         flash("League database is not available.", "error")
         return redirect(url_for("public.home"))
 
-    from league_repositories import league_counts, user_has_league_role
-    from ledger_repositories import list_event_rows_for_league
+    from boker.league_repositories import league_counts, user_has_league_role
+    from boker.ledger_repositories import list_event_rows_for_league
 
     league, resp = get_league_with_visibility_gate(league_ref)
     if resp:
@@ -289,7 +289,7 @@ def legacy_dashboard_redirect(league_id: str, league_slug: str):
         flash("League database is not available.", "error")
         return redirect(url_for("public.home"))
 
-    from league_repositories import find_league_by_id, user_has_league_role
+    from boker.league_repositories import find_league_by_id, user_has_league_role
 
     league = find_league_by_id(league_id)
     if league is None:
@@ -306,8 +306,8 @@ def leaderboard(league_ref: str):
         flash("League database is not available.", "error")
         return redirect(url_for("public.home"))
 
-    from ledger_repositories import list_event_rows_for_league
-    from league_repositories import (
+    from boker.ledger_repositories import list_event_rows_for_league
+    from boker.league_repositories import (
         list_players_for_league,
         list_seasons_for_league,
         user_has_league_role,
@@ -328,10 +328,10 @@ def leaderboard(league_ref: str):
     selected_season_id = request.args.get("season", "").strip()
     selected_season = None
     if selected_season_id:
-        from league_repositories import find_season, list_sessions_for_league
+        from boker.league_repositories import find_season, list_sessions_for_league
         selected_season = find_season(league.id, selected_season_id)
         if selected_season:
-            from ledger_repositories import session_event_ref
+            from boker.ledger_repositories import session_event_ref
             season_db_sessions = list_sessions_for_league(league.id)
             season_refs = {
                 session_event_ref(s)
@@ -442,12 +442,12 @@ def ledger(league_ref: str):
         flash("League database is not available.", "error")
         return redirect(url_for("public.home"))
 
-    from ledger_repositories import (
+    from boker.ledger_repositories import (
         append_ledger_event,
         list_all_event_rows_for_league,
         list_event_rows_for_league,
     )
-    from league_repositories import (
+    from boker.league_repositories import (
         find_player_for_league,
         find_session_for_league,
         list_players_for_league,
@@ -579,7 +579,7 @@ def void_event(league_ref: str, event_id: str):
         flash("League database is not available.", "error")
         return redirect(url_for("public.home"))
 
-    from ledger_repositories import void_ledger_event
+    from boker.ledger_repositories import void_ledger_event
 
     league = require_league(league_ref, {"owner"})
     reason = request.form.get("void_reason", "").strip()
@@ -602,8 +602,8 @@ def player_detail(league_ref: str, player_id: str):
         flash("League database is not available.", "error")
         return redirect(url_for("public.home"))
 
-    from ledger_repositories import list_event_rows_for_league
-    from league_repositories import find_player_for_league, user_has_league_role
+    from boker.ledger_repositories import list_event_rows_for_league
+    from boker.league_repositories import find_player_for_league, user_has_league_role
 
     league, resp = get_league_with_visibility_gate(league_ref)
     if resp:
@@ -661,7 +661,7 @@ def players(league_ref: str):
         flash("League database is not available.", "error")
         return redirect(url_for("public.home"))
 
-    from league_repositories import (
+    from boker.league_repositories import (
         create_player,
         list_players_for_league,
         player_name_exists,
@@ -700,7 +700,7 @@ def players(league_ref: str):
             flash("Player added.", "success")
             return redirect(url_for("leagues.players", **league_url_values(league)))
 
-    from ledger_repositories import list_event_rows_for_league
+    from boker.ledger_repositories import list_event_rows_for_league
 
     all_sessions = build_session_summaries(list_event_rows_for_league(league.id))
     board = build_leaderboard(all_sessions, league.break_even_cents)
@@ -734,7 +734,7 @@ def update_player_status(league_ref: str, player_id: str, status: str, message:
         flash("League database is not available.", "error")
         return redirect(url_for("public.home"))
 
-    from league_repositories import find_player_for_league, set_player_status
+    from boker.league_repositories import find_player_for_league, set_player_status
 
     league = require_league(league_ref, {"owner", "manager"})
     player = find_player_for_league(league.id, player_id)
@@ -754,7 +754,7 @@ def edit_player(league_ref: str, player_id: str):
         flash("League database is not available.", "error")
         return redirect(url_for("public.home"))
 
-    from league_repositories import find_player_for_league, player_name_taken, update_player
+    from boker.league_repositories import find_player_for_league, player_name_taken, update_player
 
     league = require_league(league_ref, {"owner", "manager"})
     player = find_player_for_league(league.id, player_id)
@@ -782,8 +782,8 @@ def sessions(league_ref: str):
         flash("League database is not available.", "error")
         return redirect(url_for("public.home"))
 
-    from ledger_repositories import append_ledger_event
-    from league_repositories import (
+    from boker.ledger_repositories import append_ledger_event
+    from boker.league_repositories import (
         create_poker_session,
         list_seasons_for_league,
         list_sessions_for_league,
@@ -816,10 +816,10 @@ def sessions(league_ref: str):
             status = "closed" if form["status"] == "closed" else "open"
             season_id = form["season_id"] or None
             if season_id is None:
-                from league_repositories import auto_assign_sessions_to_seasons as _auto
+                from boker.league_repositories import auto_assign_sessions_to_seasons as _auto
                 # try auto-assign: create the session first, then let the
                 # function match it; we pass a temporary session date check inline
-                from league_repositories import list_seasons_for_league as _ls
+                from boker.league_repositories import list_seasons_for_league as _ls
                 eligible = [
                     s for s in _ls(league.id, include_archived=False)
                     if s.start_date and s.end_date
@@ -836,7 +836,7 @@ def sessions(league_ref: str):
             session.label = form["label"] or None
             session.notes = form["notes"] or None
             if status == "open":
-                from league_repositories import set_session_status
+                from boker.league_repositories import set_session_status
 
                 set_session_status(session, "open")
 
@@ -854,8 +854,8 @@ def sessions(league_ref: str):
             flash(f"Created {session.display_label}.", "success")
             return redirect(url_for("leagues.sessions", **league_url_values(league)))
 
-    from db_models import LedgerEvent
-    from ledger_repositories import list_event_rows_for_league
+    from boker.db_models import LedgerEvent
+    from boker.ledger_repositories import list_event_rows_for_league
 
     all_sessions = list_sessions_for_league(league.id)
     summaries = build_session_summaries(list_event_rows_for_league(league.id))
@@ -908,8 +908,8 @@ def prune_empty_sessions(league_ref: str):
         flash("League database is not available.", "error")
         return redirect(url_for("public.home"))
 
-    from db_models import LedgerEvent, PokerSession
-    from league_repositories import list_sessions_for_league
+    from boker.db_models import LedgerEvent, PokerSession
+    from boker.league_repositories import list_sessions_for_league
 
     league = require_league(league_ref, {"owner", "manager"})
 
@@ -944,7 +944,7 @@ def delete_session(league_ref: str, session_id: str):
         flash("League database is not available.", "error")
         return redirect(url_for("public.home"))
 
-    from league_repositories import find_session_for_league
+    from boker.league_repositories import find_session_for_league
 
     league = require_league(league_ref, {"owner"})
     session = find_session_for_league(league.id, session_id)
@@ -964,7 +964,7 @@ def edit_session(league_ref: str, session_id: str):
         flash("League database is not available.", "error")
         return redirect(url_for("public.home"))
 
-    from league_repositories import find_session_for_league
+    from boker.league_repositories import find_session_for_league
 
     league = require_league(league_ref, {"owner", "manager"})
     session = find_session_for_league(league.id, session_id)
@@ -983,7 +983,7 @@ def edit_session(league_ref: str, session_id: str):
         return redirect(url_for("leagues.session_detail", league_ref=league.url_ref, session_id=session_id))
 
     if new_date != session.session_date:
-        from db_models import PokerSession as _PS
+        from boker.db_models import PokerSession as _PS
         max_seq = db.session.query(db.func.max(_PS.sequence_on_date)).filter(
             _PS.league_id == league.id,
             _PS.session_date == new_date,
@@ -993,7 +993,7 @@ def edit_session(league_ref: str, session_id: str):
         session.session_date = new_date
 
     if new_season_id is not None:
-        from league_repositories import find_season
+        from boker.league_repositories import find_season
         valid = find_season(league.id, new_season_id)
         new_season_id = valid.id if valid else None
 
@@ -1012,8 +1012,8 @@ def session_detail(league_ref: str, session_id: str):
         flash("League database is not available.", "error")
         return redirect(url_for("public.home"))
 
-    from ledger_repositories import append_ledger_event, list_all_event_rows_for_session, list_event_rows_for_session
-    from league_repositories import (
+    from boker.ledger_repositories import append_ledger_event, list_all_event_rows_for_session, list_event_rows_for_session
+    from boker.league_repositories import (
         find_session_for_league,
         list_players_for_league,
         list_seasons_for_league,
@@ -1101,9 +1101,9 @@ def session_public_view(league_ref: str, session_id: str):
         flash("League database is not available.", "error")
         return redirect(url_for("public.home"))
 
-    from charts import session_breakdown_series
-    from ledger_repositories import list_event_rows_for_league, list_event_rows_for_session
-    from league_repositories import find_league_by_public_key, find_season, find_session_for_league, list_sessions_for_league, user_has_league_role
+    from boker.charts import session_breakdown_series
+    from boker.ledger_repositories import list_event_rows_for_league, list_event_rows_for_session
+    from boker.league_repositories import find_league_by_public_key, find_season, find_session_for_league, list_sessions_for_league, user_has_league_role
 
     _slug, public_key = split_league_ref(league_ref)
     league = find_league_by_public_key(public_key)
@@ -1182,8 +1182,8 @@ def update_session_status(league_ref: str, session_id: str, status: str, message
         flash("League database is not available.", "error")
         return redirect(url_for("public.home"))
 
-    from ledger_repositories import append_ledger_event
-    from league_repositories import find_session_for_league, set_session_status
+    from boker.ledger_repositories import append_ledger_event
+    from boker.league_repositories import find_session_for_league, set_session_status
 
     league = require_league(league_ref, {"owner", "manager"})
     session = find_session_for_league(league.id, session_id)
@@ -1214,7 +1214,7 @@ def seasons(league_ref: str):
         flash("League database is not available.", "error")
         return redirect(url_for("public.home"))
 
-    from league_repositories import (
+    from boker.league_repositories import (
         create_season,
         list_seasons_for_league,
         user_has_league_role,
@@ -1283,7 +1283,7 @@ def auto_assign_seasons(league_ref: str):
         flash("League database is not available.", "error")
         return redirect(url_for("public.home"))
 
-    from league_repositories import auto_assign_sessions_to_seasons
+    from boker.league_repositories import auto_assign_sessions_to_seasons
 
     league = require_league(league_ref, {"owner", "manager"})
     count = auto_assign_sessions_to_seasons(league.id)
@@ -1302,7 +1302,7 @@ def update_season(league_ref: str, season_id: str):
         flash("League database is not available.", "error")
         return redirect(url_for("public.home"))
 
-    from league_repositories import find_season, update_season as repo_update_season
+    from boker.league_repositories import find_season, update_season as repo_update_season
 
     league = require_league(league_ref, {"owner", "manager"})
     season = find_season(league.id, season_id)
@@ -1338,7 +1338,7 @@ def archive_season(league_ref: str, season_id: str):
         flash("League database is not available.", "error")
         return redirect(url_for("public.home"))
 
-    from league_repositories import archive_season as repo_archive, find_season
+    from boker.league_repositories import archive_season as repo_archive, find_season
 
     league = require_league(league_ref, {"owner", "manager"})
     season = find_season(league.id, season_id)
@@ -1359,7 +1359,7 @@ def unarchive_season(league_ref: str, season_id: str):
         flash("League database is not available.", "error")
         return redirect(url_for("public.home"))
 
-    from league_repositories import find_season, unarchive_season as repo_unarchive
+    from boker.league_repositories import find_season, unarchive_season as repo_unarchive
 
     league = require_league(league_ref, {"owner", "manager"})
     season = find_season(league.id, season_id)
@@ -1380,7 +1380,7 @@ def delete_season(league_ref: str, season_id: str):
         flash("League database is not available.", "error")
         return redirect(url_for("public.home"))
 
-    from league_repositories import delete_season as repo_delete, find_season
+    from boker.league_repositories import delete_season as repo_delete, find_season
 
     league = require_league(league_ref, {"owner", "manager"})
     season = find_season(league.id, season_id)
@@ -1437,7 +1437,7 @@ def league_settings(league_ref: str):
             elif break_even_cents < 0 or break_even_cents > 10000:
                 flash("Break-even threshold must be between $0.00 and $100.00.", "error")
             else:
-                from utils import slugify
+                from boker.utils import slugify
 
                 league.name = form["name"]
                 league.slug = slugify(form["name"])
@@ -1449,7 +1449,7 @@ def league_settings(league_ref: str):
                 flash("League settings saved.", "success")
                 return redirect(url_for("leagues.league_settings", league_ref=league.url_ref))
 
-    from league_repositories import list_members_for_league
+    from boker.league_repositories import list_members_for_league
 
     members = list_members_for_league(league.id)
     return render_template("league_settings.html", league=league, form=form, is_owner=True, can_manage=True, members=members)
@@ -1462,11 +1462,11 @@ def invite_member(league_ref: str):
         flash("League database is not available.", "error")
         return redirect(url_for("public.home"))
 
-    from auth import generate_invite_token
-    from emails import send_league_invite
+    from boker.auth import generate_invite_token
+    from boker.emails import send_league_invite
     from flask import current_app
-    from db_models import User
-    from league_repositories import find_membership, find_user_by_email
+    from boker.db_models import User
+    from boker.league_repositories import find_membership, find_user_by_email
 
     league = require_league(league_ref, {"owner"})
     email = normalize_email(request.form.get("email", ""))
@@ -1509,7 +1509,7 @@ def remove_member(league_ref: str, user_id: str):
         flash("League database is not available.", "error")
         return redirect(url_for("public.home"))
 
-    from league_repositories import remove_league_member
+    from boker.league_repositories import remove_league_member
 
     league = require_league(league_ref, {"owner"})
 
@@ -1530,7 +1530,7 @@ def update_member_role(league_ref: str, user_id: str):
         flash("League database is not available.", "error")
         return redirect(url_for("public.home"))
 
-    from league_repositories import set_league_member_role
+    from boker.league_repositories import set_league_member_role
 
     league = require_league(league_ref, {"owner"})
     role = request.form.get("role", "").strip()
@@ -1560,7 +1560,7 @@ def transfer_ownership(league_ref: str):
         flash("League database is not available.", "error")
         return redirect(url_for("public.home"))
 
-    from league_repositories import transfer_league_ownership
+    from boker.league_repositories import transfer_league_ownership
 
     league = require_league(league_ref, {"owner"})
     new_owner_user_id = request.form.get("new_owner_user_id", "").strip()
@@ -1588,7 +1588,7 @@ def archive_league(league_ref: str):
         flash("League database is not available.", "error")
         return redirect(url_for("public.home"))
 
-    from db_models import utc_now
+    from boker.db_models import utc_now
 
     league = require_league(league_ref, {"owner"})
     confirm_name = request.form.get("confirm_name", "").strip()
@@ -1610,7 +1610,7 @@ def delete_league_route(league_ref: str):
         flash("League database is not available.", "error")
         return redirect(url_for("public.home"))
 
-    from league_repositories import delete_league
+    from boker.league_repositories import delete_league
 
     league = require_league(league_ref, {"owner"})
     confirm_name = request.form.get("confirm_name", "").strip()
@@ -1633,8 +1633,8 @@ def export_ledger_csv(league_ref: str):
         flash("League database is not available.", "error")
         return redirect(url_for("public.home"))
 
-    from ledger_repositories import list_event_rows_for_league
-    from storage import CSV_HEADERS
+    from boker.ledger_repositories import list_event_rows_for_league
+    from boker.storage import CSV_HEADERS
 
     league = require_league(league_ref, {"owner", "manager"})
     rows = list_event_rows_for_league(league.id)
@@ -1659,14 +1659,14 @@ def import_ledger_csv(league_ref: str):
         flash("League database is not available.", "error")
         return redirect(url_for("public.home"))
 
-    from db_models import CANONICAL_EVENT_TYPES, canonical_event_type
-    from ledger_repositories import (
+    from boker.db_models import CANONICAL_EVENT_TYPES, canonical_event_type
+    from boker.ledger_repositories import (
         append_ledger_event,
         list_ledger_events_for_league,
         session_event_ref,
     )
-    from league_repositories import create_player, list_players_for_league, list_sessions_for_league, unique_player_slug
-    from storage import CSV_HEADERS
+    from boker.league_repositories import create_player, list_players_for_league, list_sessions_for_league, unique_player_slug
+    from boker.storage import CSV_HEADERS
 
     league = require_league(league_ref, {"owner", "manager"})
 
@@ -1700,7 +1700,7 @@ def import_ledger_csv(league_ref: str):
         flash(f"CSV header mismatch. Expected: {', '.join(CSV_HEADERS)}", "error")
         return redirect(url_for("leagues.ledger", **league_url_values(league)))
 
-    from db_models import PokerSession, make_session
+    from boker.db_models import PokerSession, make_session
 
     sessions = list_sessions_for_league(league.id)
     session_by_ref = {session_event_ref(s): s for s in sessions}
diff --git a/routes/public.py b/boker/routes/public.py
similarity index 93%
rename from routes/public.py
rename to boker/routes/public.py
index 90ef5f8..063b7fb 100644
--- a/routes/public.py
+++ b/boker/routes/public.py
@@ -4,16 +4,16 @@ from __future__ import annotations
 from flask import Blueprint, flash, redirect, render_template, request, url_for
 from flask import current_app
 
-from charts import cumulative_profit_series, player_session_series, session_breakdown_series
-from config import ELIGIBLE_MIN_SESSIONS
-from services import (
+from boker.charts import cumulative_profit_series, player_session_series, session_breakdown_series
+from boker.config import ELIGIBLE_MIN_SESSIONS
+from boker.services import (
     apply_rank_changes,
     build_leaderboard,
     build_session_summaries,
     session_events,
 )
-from storage import load_events
-from utils import session_label, session_sort_key
+from boker.storage import load_events
+from boker.utils import session_label, session_sort_key
 
 public_bp = Blueprint("public", __name__)
 
@@ -40,9 +40,9 @@ def terms():
 
 @public_bp.get("/explore")
 def explore():
-    from auth import is_logged_in
-    from db import database_extensions_available
-    from league_repositories import league_counts, list_public_leagues
+    from boker.auth import is_logged_in
+    from boker.db import database_extensions_available
+    from boker.league_repositories import league_counts, list_public_leagues
 
     q = request.args.get("q", "").strip()
     leagues = list_public_leagues(q) if database_extensions_available() else []
diff --git a/services.py b/boker/services.py
similarity index 98%
rename from services.py
rename to boker/services.py
index 13458b0..424116c 100644
--- a/services.py
+++ b/boker/services.py
@@ -4,9 +4,9 @@ from __future__ import annotations
 
 from collections import defaultdict
 
-from models import PlayerStats, SessionEntry, SessionSummary
-from storage import EventRow
-from utils import entry_sort_key, net_result_bucket, session_sort_key
+from boker.models import PlayerStats, SessionEntry, SessionSummary
+from boker.storage import EventRow
+from boker.utils import entry_sort_key, net_result_bucket, session_sort_key
 
 SESSION_MARKER_TYPES = {"session_open", "session_close"}
 
diff --git a/storage.py b/boker/storage.py
similarity index 100%
rename from storage.py
rename to boker/storage.py
diff --git a/utils.py b/boker/utils.py
similarity index 97%
rename from utils.py
rename to boker/utils.py
index 44094f7..516aa06 100644
--- a/utils.py
+++ b/boker/utils.py
@@ -7,7 +7,7 @@ import re
 
 from markupsafe import Markup
 
-from models import SessionEntry, SessionSummary
+from boker.models import SessionEntry, SessionSummary
 
 BREAK_EVEN_TOLERANCE_CENTS = 100
 
diff --git a/tests/test_accounting.py b/tests/test_accounting.py
index 4b7c075..1d98330 100644
--- a/tests/test_accounting.py
+++ b/tests/test_accounting.py
@@ -1,13 +1,13 @@
 import unittest
 
-from charts import player_session_series
-from services import (
+from boker.charts import player_session_series
+from boker.services import (
     build_leaderboard,
     build_session_summaries,
     pending_payout_carry_items,
     prunable_empty_session_ids,
 )
-from utils import session_sort_key
+from boker.utils import session_sort_key
 
 
 def cents(amount: float) -> int:
diff --git a/tests/test_internal.py b/tests/test_internal.py
index e636a2e..2a5ef14 100644
--- a/tests/test_internal.py
+++ b/tests/test_internal.py
@@ -4,8 +4,8 @@ from datetime import datetime, timedelta, timezone
 from pathlib import Path
 
 from app import create_app
-from auth import hash_password
-from db import db
+from boker.auth import hash_password
+from boker.db import db
 
 
 class InternalAdminAccessTests(unittest.TestCase):
@@ -22,7 +22,7 @@ class InternalAdminAccessTests(unittest.TestCase):
         self.client = self.app.test_client()
 
         with self.app.app_context():
-            from db_models import League, LeagueMembership, User
+            from boker.db_models import League, LeagueMembership, User
 
             db.create_all()
             self.user = User(
@@ -118,7 +118,7 @@ class InternalAdminAccessTests(unittest.TestCase):
 
     def test_admin_users_page_is_paginated(self):
         with self.app.app_context():
-            from db_models import User
+            from boker.db_models import User
 
             users = [
                 User(email=f"bulk{i:02d}@example.com", password_hash=hash_password("password123"))
@@ -136,7 +136,7 @@ class InternalAdminAccessTests(unittest.TestCase):
 
     def test_admin_leagues_page_is_paginated(self):
         with self.app.app_context():
-            from db_models import League
+            from boker.db_models import League
 
             leagues = [
                 League(
@@ -160,8 +160,8 @@ class InternalAdminAccessTests(unittest.TestCase):
 
     def test_session_growth_uses_session_date_not_created_at(self):
         with self.app.app_context():
-            from db_models import PokerSession
-            from routes.internal import _growth_data
+            from boker.db_models import PokerSession
+            from boker.routes.internal import _growth_data
 
             now = datetime.now(timezone.utc)
             old_session = PokerSession(
@@ -196,7 +196,7 @@ class InternalAdminAccessTests(unittest.TestCase):
 
         self.assertEqual(response.status_code, 403)
         with self.app.app_context():
-            from db_models import User
+            from boker.db_models import User
 
             user = db.session.get(User, self.user_id)
             self.assertEqual(user.email, "viewer@example.com")
@@ -212,7 +212,7 @@ class InternalAdminAccessTests(unittest.TestCase):
 
         self.assertEqual(response.status_code, 200)
         with self.app.app_context():
-            from db_models import User
+            from boker.db_models import User
 
             user = db.session.get(User, self.user_id)
             self.assertEqual(user.email, "changed@example.com")
@@ -220,7 +220,7 @@ class InternalAdminAccessTests(unittest.TestCase):
     def test_admin_delete_user_blocks_owned_leagues(self):
         self.login_as(self.admin_id)
         with self.app.app_context():
-            from db_models import League, LeagueMembership
+            from boker.db_models import League, LeagueMembership
 
             owned_league = League(
                 name="Manager Owned Poker",
@@ -241,7 +241,7 @@ class InternalAdminAccessTests(unittest.TestCase):
 
         self.assertEqual(response.status_code, 302)
         with self.app.app_context():
-            from db_models import User
+            from boker.db_models import User
 
             self.assertIsNotNone(db.session.get(User, self.manager_id))
 
@@ -251,7 +251,7 @@ class InternalAdminAccessTests(unittest.TestCase):
         archive_response = self.client.post(f"/internal/leagues/{self.league_id}/archive")
         self.assertEqual(archive_response.status_code, 302)
         with self.app.app_context():
-            from db_models import League
+            from boker.db_models import League
 
             league = db.session.get(League, self.league_id)
             self.assertIsNotNone(league.archived_at)
@@ -259,7 +259,7 @@ class InternalAdminAccessTests(unittest.TestCase):
         restore_response = self.client.post(f"/internal/leagues/{self.league_id}/restore")
         self.assertEqual(restore_response.status_code, 302)
         with self.app.app_context():
-            from db_models import League
+            from boker.db_models import League
 
             league = db.session.get(League, self.league_id)
             self.assertIsNone(league.archived_at)
@@ -280,7 +280,7 @@ class InternalAdminAccessTests(unittest.TestCase):
 
         self.assertEqual(response.status_code, 302)
         with self.app.app_context():
-            from db_models import League
+            from boker.db_models import League
 
             league = db.session.get(League, self.league_id)
             self.assertEqual(league.name, "Saturday Poker")
@@ -300,7 +300,7 @@ class InternalAdminAccessTests(unittest.TestCase):
 
         self.assertEqual(response.status_code, 302)
         with self.app.app_context():
-            from db_models import League, LeagueMembership
+            from boker.db_models import League, LeagueMembership
 
             league = db.session.get(League, self.league_id)
             self.assertEqual(league.created_by_user_id, self.manager_id)
diff --git a/tests/test_stats.py b/tests/test_stats.py
index 940cdda..757b885 100644
--- a/tests/test_stats.py
+++ b/tests/test_stats.py
@@ -1,7 +1,7 @@
 import unittest
 
-from models import SessionEntry, SessionSummary
-from services import build_leaderboard
+from boker.models import SessionEntry, SessionSummary
+from boker.services import build_leaderboard
 
 
 class CashInAccountingTest(unittest.TestCase):

From adbc60bfc3b6f7a10b9352597de872f47f0d241c Mon Sep 17 00:00:00 2001
From: SowinskiBraeden <braeden@sowinski.dev>
Date: Sun, 28 Jun 2026 17:47:58 -0700
Subject: [PATCH 81/83] Add friendly crash page

---
 boker/app.py         | 19 +++++++++++++++++-
 static/css/style.css | 15 ++++++++++++++
 templates/500.html   | 20 +++++++++++++++++++
 tests/test_errors.py | 47 ++++++++++++++++++++++++++++++++++++++++++++
 4 files changed, 100 insertions(+), 1 deletion(-)
 create mode 100644 templates/500.html
 create mode 100644 tests/test_errors.py

diff --git a/boker/app.py b/boker/app.py
index 3247e99..3465e12 100644
--- a/boker/app.py
+++ b/boker/app.py
@@ -3,7 +3,10 @@ from __future__ import annotations
 
 import click
 import os
-from flask import Flask, render_template
+from uuid import uuid4
+
+from flask import Flask, render_template, request
+from werkzeug.exceptions import HTTPException
 
 from boker.auth import current_user_id, is_logged_in, is_site_admin, normalize_email
 from boker.config import DEFAULT_SECRET_KEY, Config, ProductionConfig
@@ -64,6 +67,20 @@ def create_app(config_overrides: dict | None = None) -> Flask:
     def forbidden(e):
         return render_template("403.html"), 403
 
+    @app.errorhandler(Exception)
+    def unexpected_error(error):
+        if isinstance(error, HTTPException):
+            return error
+
+        crash_id = uuid4().hex[:12]
+        app.logger.exception(
+            "Unhandled exception [%s] during %s %s",
+            crash_id,
+            request.method,
+            request.path,
+        )
+        return render_template("500.html", crash_id=crash_id), 500
+
     @app.cli.command("init-db")
     def init_db_command() -> None:
         if not database_extensions_available() or db is None:
diff --git a/static/css/style.css b/static/css/style.css
index 2aa6683..09da5f2 100644
--- a/static/css/style.css
+++ b/static/css/style.css
@@ -5925,6 +5925,9 @@ select.control { cursor: pointer; }
 .error-pg--403 .error-pg__suit {
   color: rgba(155,140,240,.06);
 }
+.error-pg--500 .error-pg__suit {
+  color: rgba(224,177,92,.07);
+}
 
 .error-pg__body {
   position: relative;
@@ -5971,6 +5974,18 @@ select.control { cursor: pointer; }
   justify-content: center;
 }
 
+.error-pg__trace {
+  margin: -12px 0 28px;
+  padding: 6px 10px;
+  border: 1px solid var(--line);
+  border-radius: 6px;
+  color: var(--faint);
+  background: var(--panel);
+  font-family: var(--font-mono);
+  font-size: 12px;
+  line-height: 1.4;
+}
+
 /* ================================================================
    LANDING — hero kicker (replaces pill eyebrow in hero only)
    ================================================================ */
diff --git a/templates/500.html b/templates/500.html
new file mode 100644
index 0000000..24ece0f
--- /dev/null
+++ b/templates/500.html
@@ -0,0 +1,20 @@
+{% extends "base.html" %}
+{% block title %}500 · Something Went Wrong · myboker.org{% endblock %}
+{% block page_class %}page--error{% endblock %}
+{% block content %}
+
+<div class="error-pg error-pg--500">
+    <div class="error-pg__suit" aria-hidden="true">♦</div>
+    <div class="error-pg__body">
+        <span class="error-pg__code">500</span>
+        <h1 class="error-pg__title">Something went wrong.</h1>
+        <p class="error-pg__sub">The app hit an unexpected error. Try again in a minute, or contact support if it keeps happening.</p>
+        <p class="error-pg__trace">Incident {{ crash_id }}</p>
+        <div class="error-pg__actions">
+            <a class="btn btn--primary btn--lg" href="{{ url_for('public.home') }}">Go home →</a>
+            <a class="btn btn--ghost btn--lg" href="{{ url_for('public.help') }}#contact">Contact support</a>
+        </div>
+    </div>
+</div>
+
+{% endblock %}
diff --git a/tests/test_errors.py b/tests/test_errors.py
new file mode 100644
index 0000000..ea0d844
--- /dev/null
+++ b/tests/test_errors.py
@@ -0,0 +1,47 @@
+import re
+import tempfile
+import unittest
+from pathlib import Path
+
+from app import create_app
+from boker.db import db
+
+
+class ErrorPageTests(unittest.TestCase):
+    def setUp(self):
+        self.tmpdir = tempfile.TemporaryDirectory()
+        db_path = Path(self.tmpdir.name) / "test.sqlite3"
+        self.app = create_app(
+            {
+                "TESTING": True,
+                "PROPAGATE_EXCEPTIONS": False,
+                "SQLALCHEMY_DATABASE_URI": f"sqlite:///{db_path}",
+                "WTF_CSRF_ENABLED": False,
+            }
+        )
+
+        @self.app.get("/explode")
+        def explode():
+            raise RuntimeError("boom")
+
+        self.client = self.app.test_client()
+
+    def tearDown(self):
+        with self.app.app_context():
+            db.session.remove()
+            db.drop_all()
+            db.engine.dispose()
+        self.tmpdir.cleanup()
+
+    def test_unexpected_errors_render_crash_page_with_incident_id(self):
+        response = self.client.get("/explode")
+
+        self.assertEqual(response.status_code, 500)
+        self.assertIn(b"Something went wrong.", response.data)
+        self.assertIn(b"Incident", response.data)
+        self.assertNotIn(b"RuntimeError", response.data)
+        self.assertRegex(response.get_data(as_text=True), re.compile(r"Incident [a-f0-9]{12}"))
+
+
+if __name__ == "__main__":
+    unittest.main()

From 593420f984d5a7de4656de5f6ece7e780f613c5f Mon Sep 17 00:00:00 2001
From: SowinskiBraeden <braeden@sowinski.dev>
Date: Sun, 28 Jun 2026 17:52:22 -0700
Subject: [PATCH 82/83] Require production database configuration

---
 README.md            |  2 +-
 boker/app.py         |  6 +++++-
 tests/test_config.py | 37 +++++++++++++++++++++++++++++++++++++
 3 files changed, 43 insertions(+), 2 deletions(-)
 create mode 100644 tests/test_config.py

diff --git a/README.md b/README.md
index 361c621..c0f974b 100644
--- a/README.md
+++ b/README.md
@@ -94,7 +94,7 @@ The app reads these from `.env`:
 - `MAIL_PASSWORD`
 - `MAIL_DEFAULT_SENDER`
 
-For public deployments, set `APP_ENV=production`. Production mode enables secure cookies and refuses to start with the development `SECRET_KEY`. Set `RATELIMIT_STORAGE_URI` to a shared backend such as Redis so login and signup limits are enforced across processes.
+For public deployments, set `APP_ENV=production`. Production mode enables secure cookies and refuses to start with the development `SECRET_KEY` or the local SQLite database. Use PostgreSQL for `DATABASE_URL`, then run `flask --app app db upgrade` during deploy. Set `RATELIMIT_STORAGE_URI` to a shared backend such as Redis so login and signup limits are enforced across processes.
 
 ## Site Admin Access
 
diff --git a/boker/app.py b/boker/app.py
index 3465e12..bd8fdce 100644
--- a/boker/app.py
+++ b/boker/app.py
@@ -9,7 +9,7 @@ from flask import Flask, render_template, request
 from werkzeug.exceptions import HTTPException
 
 from boker.auth import current_user_id, is_logged_in, is_site_admin, normalize_email
-from boker.config import DEFAULT_SECRET_KEY, Config, ProductionConfig
+from boker.config import DEFAULT_DATABASE_URL, DEFAULT_SECRET_KEY, Config, ProductionConfig
 from boker.db import database_extensions_available, db, init_database
 from boker.extensions import csrf, limiter, mail
 from boker.routes.account import account_bp
@@ -35,6 +35,10 @@ def create_app(config_overrides: dict | None = None) -> Flask:
 
     if app.config["SESSION_COOKIE_SECURE"] and app.config["SECRET_KEY"] == DEFAULT_SECRET_KEY:
         raise RuntimeError("Set SECRET_KEY before running in production.")
+    if app.config["SESSION_COOKIE_SECURE"]:
+        database_url = app.config["SQLALCHEMY_DATABASE_URI"]
+        if database_url == DEFAULT_DATABASE_URL or database_url.startswith("sqlite:"):
+            raise RuntimeError("Set DATABASE_URL to a production PostgreSQL database before running in production.")
 
     ensure_data_file(app.config["DATA_PATH"])
     init_database(app)
diff --git a/tests/test_config.py b/tests/test_config.py
new file mode 100644
index 0000000..d6c8027
--- /dev/null
+++ b/tests/test_config.py
@@ -0,0 +1,37 @@
+import os
+import unittest
+from unittest.mock import patch
+
+from app import create_app
+
+
+class ProductionConfigTests(unittest.TestCase):
+    def test_production_refuses_default_sqlite_database(self):
+        with patch.dict(
+            os.environ,
+            {"APP_ENV": "production"},
+            clear=False,
+        ):
+            with self.assertRaisesRegex(RuntimeError, "DATABASE_URL"):
+                create_app({"SECRET_KEY": "test-production-secret"})
+
+    def test_production_accepts_postgresql_database_url(self):
+        with patch.dict(
+            os.environ,
+            {"APP_ENV": "production"},
+            clear=False,
+        ):
+            app = create_app(
+                {
+                    "SECRET_KEY": "test-production-secret",
+                    "SQLALCHEMY_DATABASE_URI": "postgresql+psycopg://user:password@example.com/dbname",
+                }
+            )
+
+        self.assertTrue(app.config["SESSION_COOKIE_SECURE"])
+        self.assertEqual(app.config["SESSION_COOKIE_SAMESITE"], "Strict")
+        self.assertTrue(app.config["SQLALCHEMY_DATABASE_URI"].startswith("postgresql+psycopg://"))
+
+
+if __name__ == "__main__":
+    unittest.main()

From 8740ff31cd30dff19612acf4d9f6d250b0f94137 Mon Sep 17 00:00:00 2001
From: SowinskiBraeden <braeden@sowinski.dev>
Date: Sun, 28 Jun 2026 18:02:12 -0700
Subject: [PATCH 83/83] Finalize database deployment readiness

---
 .env.example                                  |  14 +-
 .env.production.example                       |  11 +
 README.md                                     |  12 +-
 migrations/versions/0002_league_public_key.py |  23 +-
 .../versions/0005_site_admin_accounts.py      |  18 +-
 tests/test_db_foundation.py                   | 115 ++++
 tests/test_phase2_auth_leagues.py             | 502 ++++++++++++++++++
 7 files changed, 662 insertions(+), 33 deletions(-)
 create mode 100644 .env.production.example
 create mode 100644 tests/test_db_foundation.py
 create mode 100644 tests/test_phase2_auth_leagues.py

diff --git a/.env.example b/.env.example
index f68f5c5..cf706a3 100644
--- a/.env.example
+++ b/.env.example
@@ -1,11 +1,9 @@
-SECRET_KEY=replace-this-with-a-long-random-string
-APP_ENV=production
-DATABASE_URL=postgresql+psycopg://user:password@host/dbname
-APP_BASE_URL=https://myboker.org
-RATELIMIT_STORAGE_URI=redis://localhost:6379/0
-MAIL_SERVER=smtp.sendgrid.net
+SECRET_KEY=local-dev-secret-change-me
+APP_ENV=development
+APP_BASE_URL=http://localhost:5000
+MAIL_SERVER=
 MAIL_PORT=587
 MAIL_USE_TLS=true
-MAIL_USERNAME=apikey
-MAIL_PASSWORD=your-sendgrid-api-key
+MAIL_USERNAME=
+MAIL_PASSWORD=
 MAIL_DEFAULT_SENDER=noreply@myboker.org
diff --git a/.env.production.example b/.env.production.example
new file mode 100644
index 0000000..f68f5c5
--- /dev/null
+++ b/.env.production.example
@@ -0,0 +1,11 @@
+SECRET_KEY=replace-this-with-a-long-random-string
+APP_ENV=production
+DATABASE_URL=postgresql+psycopg://user:password@host/dbname
+APP_BASE_URL=https://myboker.org
+RATELIMIT_STORAGE_URI=redis://localhost:6379/0
+MAIL_SERVER=smtp.sendgrid.net
+MAIL_PORT=587
+MAIL_USE_TLS=true
+MAIL_USERNAME=apikey
+MAIL_PASSWORD=your-sendgrid-api-key
+MAIL_DEFAULT_SENDER=noreply@myboker.org
diff --git a/README.md b/README.md
index c0f974b..bf32e32 100644
--- a/README.md
+++ b/README.md
@@ -79,7 +79,7 @@ Then open:
 
 ## Environment Values
 
-The app reads these from `.env`:
+The app reads these from `.env`. Use `.env.example` for local development and `.env.production.example` as the production checklist.
 
 - `SECRET_KEY`
 - `APP_ENV`
@@ -94,7 +94,15 @@ The app reads these from `.env`:
 - `MAIL_PASSWORD`
 - `MAIL_DEFAULT_SENDER`
 
-For public deployments, set `APP_ENV=production`. Production mode enables secure cookies and refuses to start with the development `SECRET_KEY` or the local SQLite database. Use PostgreSQL for `DATABASE_URL`, then run `flask --app app db upgrade` during deploy. Set `RATELIMIT_STORAGE_URI` to a shared backend such as Redis so login and signup limits are enforced across processes.
+For local development, omit `DATABASE_URL` to use the default SQLite database at `data/boker-dev.sqlite3`.
+
+For public deployments, set `APP_ENV=production`. Production mode enables secure cookies and refuses to start with the development `SECRET_KEY` or any SQLite database. Use PostgreSQL for `DATABASE_URL`, install dependencies from `requirements.txt`, then run:
+
+```bash
+flask --app app db upgrade
+```
+
+Set `RATELIMIT_STORAGE_URI` to a shared backend such as Redis so login and signup limits are enforced across processes.
 
 ## Site Admin Access
 
diff --git a/migrations/versions/0002_league_public_key.py b/migrations/versions/0002_league_public_key.py
index 6d8eb5b..fba7488 100644
--- a/migrations/versions/0002_league_public_key.py
+++ b/migrations/versions/0002_league_public_key.py
@@ -6,9 +6,6 @@ Create Date: 2026-06-23
 """
 from __future__ import annotations
 
-import secrets
-import string
-
 from alembic import op
 import sqlalchemy as sa
 
@@ -18,28 +15,10 @@ down_revision = "0001_public_foundation"
 branch_labels = None
 depends_on = None
 
-ALPHABET = string.ascii_lowercase + string.digits
-
-
-def _key(existing: set[str], length: int = 6) -> str:
-    while True:
-        value = "".join(secrets.choice(ALPHABET) for _ in range(length))
-        if value not in existing:
-            existing.add(value)
-            return value
-
 
 def upgrade() -> None:
     op.add_column("leagues", sa.Column("public_key", sa.String(length=12), nullable=True))
-
-    bind = op.get_bind()
-    rows = bind.execute(sa.text("SELECT id FROM leagues")).mappings().all()
-    existing: set[str] = set()
-    for row in rows:
-        bind.execute(
-            sa.text("UPDATE leagues SET public_key = :public_key WHERE id = :id"),
-            {"public_key": _key(existing), "id": row["id"]},
-        )
+    op.execute("UPDATE leagues SET public_key = substr(replace(id, '-', ''), 1, 12) WHERE public_key IS NULL")
 
     with op.batch_alter_table("leagues") as batch_op:
         batch_op.alter_column("public_key", existing_type=sa.String(length=12), nullable=False)
diff --git a/migrations/versions/0005_site_admin_accounts.py b/migrations/versions/0005_site_admin_accounts.py
index 45c745c..34674d8 100644
--- a/migrations/versions/0005_site_admin_accounts.py
+++ b/migrations/versions/0005_site_admin_accounts.py
@@ -6,7 +6,7 @@ Create Date: 2026-06-28
 """
 from __future__ import annotations
 
-from alembic import op
+from alembic import context, op
 import sqlalchemy as sa
 
 
@@ -17,6 +17,18 @@ depends_on = None
 
 
 def upgrade() -> None:
+    if context.is_offline_mode():
+        op.add_column(
+            "users",
+            sa.Column(
+                "is_site_admin",
+                sa.Boolean(),
+                nullable=False,
+                server_default=sa.false(),
+            ),
+        )
+        return
+
     columns = {column["name"] for column in sa.inspect(op.get_bind()).get_columns("users")}
     if "is_site_admin" not in columns:
         op.add_column(
@@ -31,6 +43,10 @@ def upgrade() -> None:
 
 
 def downgrade() -> None:
+    if context.is_offline_mode():
+        op.drop_column("users", "is_site_admin")
+        return
+
     columns = {column["name"] for column in sa.inspect(op.get_bind()).get_columns("users")}
     if "is_site_admin" in columns:
         op.drop_column("users", "is_site_admin")
diff --git a/tests/test_db_foundation.py b/tests/test_db_foundation.py
new file mode 100644
index 0000000..7b80337
--- /dev/null
+++ b/tests/test_db_foundation.py
@@ -0,0 +1,115 @@
+from __future__ import annotations
+
+from datetime import date
+import unittest
+
+from boker.db import database_extensions_available
+
+
+@unittest.skipUnless(
+    database_extensions_available(),
+    "Database dependencies are not installed.",
+)
+class DatabaseFoundationTests(unittest.TestCase):
+    def setUp(self):
+        from app import create_app
+        from boker.db import db
+
+        self.db = db
+        self.app = create_app(
+            {
+                "TESTING": True,
+                "SQLALCHEMY_DATABASE_URI": "sqlite:///:memory:",
+            }
+        )
+        self.ctx = self.app.app_context()
+        self.ctx.push()
+        self.db.create_all()
+
+    def tearDown(self):
+        self.db.session.remove()
+        self.db.drop_all()
+        self.db.engine.dispose()
+        self.ctx.pop()
+
+    def test_owner_league_players_sessions_season_and_events(self):
+        from boker.db_models import LedgerEvent, LeagueMembership, PokerSession
+        from boker.ledger_repositories import append_ledger_event
+        from boker.league_repositories import (
+            create_league,
+            create_player,
+            create_poker_session,
+            create_season,
+            create_user,
+            user_has_league_role,
+        )
+
+        owner = create_user("Owner@Example.com", "correct horse battery staple")
+        self.db.session.flush()
+        league = create_league(owner, "Friday Poker", "friday-poker")
+        player = create_player(league.id, "Alex", "alex")
+        season = create_season(
+            league.id,
+            "Fall 2026",
+            start_date=date(2026, 9, 1),
+            end_date=date(2026, 12, 31),
+        )
+        self.db.session.flush()
+
+        first_session = create_poker_session(
+            league.id,
+            date(2026, 10, 2),
+            season_id=season.id,
+            status="open",
+        )
+        second_session = create_poker_session(
+            league.id,
+            date(2026, 10, 2),
+            season_id=season.id,
+        )
+        self.db.session.flush()
+
+        append_ledger_event(
+            league.id,
+            first_session.id,
+            "buyin",
+            2500,
+            owner.id,
+            player_id=player.id,
+        )
+        append_ledger_event(
+            league.id,
+            first_session.id,
+            "paid",
+            1000,
+            owner.id,
+            player_id=player.id,
+        )
+        append_ledger_event(
+            league.id,
+            first_session.id,
+            "session_close",
+            9999,
+            owner.id,
+            note="Closed after payout review.",
+        )
+        self.db.session.commit()
+
+        membership = LeagueMembership.query.filter_by(
+            league_id=league.id,
+            user_id=owner.id,
+        ).one()
+        sessions = PokerSession.query.order_by(PokerSession.sequence_on_date.asc()).all()
+        events = LedgerEvent.query.order_by(LedgerEvent.created_at.asc()).all()
+
+        self.assertEqual(owner.email, "owner@example.com")
+        self.assertEqual(membership.role, "owner")
+        self.assertTrue(user_has_league_role(owner.id, league.id, {"owner"}))
+        self.assertEqual([s.sequence_on_date for s in sessions], [1, 2])
+        self.assertEqual(sessions[0].season_id, season.id)
+        self.assertEqual(events[1].event_type, "paid_out")
+        self.assertEqual(events[2].amount_cents, 0)
+
+
+if __name__ == "__main__":
+    unittest.main()
diff --git a/tests/test_phase2_auth_leagues.py b/tests/test_phase2_auth_leagues.py
new file mode 100644
index 0000000..3b2fde1
--- /dev/null
+++ b/tests/test_phase2_auth_leagues.py
@@ -0,0 +1,502 @@
+from __future__ import annotations
+
+from datetime import date
+import unittest
+
+from boker.db import database_extensions_available
+
+
+@unittest.skipUnless(
+    database_extensions_available(),
+    "Database dependencies are not installed.",
+)
+class Phase2AuthLeagueRouteTests(unittest.TestCase):
+    def setUp(self):
+        from app import create_app
+        from boker.db import db
+
+        self.db = db
+        self.app = create_app(
+            {
+                "TESTING": True,
+                "SECRET_KEY": "test-secret",
+                "SQLALCHEMY_DATABASE_URI": "sqlite:///:memory:",
+                "WTF_CSRF_ENABLED": False,
+            }
+        )
+        self.ctx = self.app.app_context()
+        self.ctx.push()
+        self.db.create_all()
+        self.client = self.app.test_client()
+
+    def tearDown(self):
+        self.db.session.remove()
+        self.db.drop_all()
+        self.db.engine.dispose()
+        self.ctx.pop()
+
+    def league_path(self, league=None) -> str:
+        if league is None:
+            from boker.db_models import League
+
+            league = League.query.one()
+        return f"/l/{league.url_ref}"
+
+    def create_verified_user(self, email="owner@example.com"):
+        from boker.db_models import utc_now
+        from boker.league_repositories import create_user
+
+        user = create_user(email, "password123")
+        self.db.session.flush()
+        user.email_verified_at = utc_now()
+        self.db.session.commit()
+        return user
+
+    def login_as(self, user):
+        with self.client.session_transaction() as flask_session:
+            flask_session["user_id"] = user.id
+
+    def create_logged_in_league(self, email="owner@example.com", name="Friday Poker"):
+        from boker.league_repositories import create_league
+
+        owner = self.create_verified_user(email)
+        league = create_league(owner, name, name.lower().replace(" ", "-"))
+        self.db.session.commit()
+        self.login_as(owner)
+        return owner, league, self.league_path(league)
+
+    def test_registration_starts_email_verification_before_login(self):
+        from boker.db_models import User
+
+        response = self.client.post(
+            "/account/register",
+            data={
+                "email": "Owner@Example.com",
+                "password": "password123",
+                "confirm_password": "password123",
+            },
+        )
+
+        self.assertEqual(response.status_code, 302)
+        self.assertEqual(response.headers["Location"], "/account/verify-email")
+
+        user = User.query.one()
+        self.assertEqual(user.email, "owner@example.com")
+        self.assertIsNone(user.email_verified_at)
+        self.assertIsNotNone(user.email_verification_code_hash)
+
+        with self.client.session_transaction() as flask_session:
+            self.assertNotIn("user_id", flask_session)
+            self.assertEqual(flask_session["pending_verification_user_id"], user.id)
+
+    def test_verified_user_can_create_league_and_owner_membership(self):
+        from boker.db_models import League, LeagueMembership, User
+
+        user = self.create_verified_user("Owner@Example.com")
+        self.login_as(user)
+
+        response = self.client.post(
+            "/leagues/new",
+            data={
+                "name": "Friday Poker",
+                "slug": "",
+                "description": "Private home league",
+            },
+        )
+        self.assertEqual(response.status_code, 302)
+
+        self.assertEqual(User.query.count(), 1)
+        league = League.query.one()
+        self.assertEqual(response.headers["Location"], self.league_path(league))
+        membership = LeagueMembership.query.one()
+        self.assertEqual(league.slug, "friday-poker")
+        self.assertEqual(membership.user_id, user.id)
+        self.assertEqual(membership.role, "owner")
+
+        dashboard = self.client.get(self.league_path(league))
+        self.assertEqual(dashboard.status_code, 200)
+        self.assertIn(b"Friday Poker", dashboard.data)
+
+    def test_legacy_admin_routes_are_not_registered_by_default(self):
+        response = self.client.get("/admin/login")
+        self.assertEqual(response.status_code, 404)
+
+    def test_duplicate_league_slug_is_allowed_because_route_uses_public_key(self):
+        owner = self.create_verified_user()
+        self.login_as(owner)
+        self.client.post("/leagues/new", data={"name": "Friday Poker"})
+        self.client.post("/leagues/new", data={"name": "Friday Poker"})
+
+        from boker.db_models import League
+
+        self.assertEqual(
+            [league.slug for league in League.query.order_by(League.slug.asc()).all()],
+            ["friday-poker", "friday-poker"],
+        )
+
+    def test_legacy_uuid_league_route_redirects_to_public_key_route(self):
+        from boker.db import db
+        from boker.league_repositories import create_league, create_user
+
+        owner = create_user("owner@example.com", "password123")
+        db.session.flush()
+        league = create_league(owner, "Private League", "private-league")
+        db.session.commit()
+
+        with self.client.session_transaction() as flask_session:
+            flask_session["user_id"] = owner.id
+
+        response = self.client.get(f"/l/{league.id}/{league.slug}")
+        self.assertEqual(response.status_code, 301)
+        self.assertEqual(response.headers["Location"], self.league_path(league))
+
+    def test_league_dashboard_requires_membership(self):
+        from boker.db import db
+        from boker.league_repositories import create_league, create_user
+
+        owner = create_user("owner@example.com", "password123")
+        other = create_user("other@example.com", "password123")
+        db.session.flush()
+        league = create_league(owner, "Private League", "private-league")
+        db.session.commit()
+
+        with self.client.session_transaction() as flask_session:
+            flask_session["user_id"] = other.id
+
+        response = self.client.get(self.league_path(league))
+        self.assertEqual(response.status_code, 403)
+
+    def test_owner_can_add_archive_and_reactivate_player(self):
+        from boker.db_models import Player
+
+        _, _, league_base = self.create_logged_in_league()
+
+        response = self.client.post(
+            f"{league_base}/players",
+            data={
+                "display_name": "Alex",
+                "slug": "",
+                "notes": "Usually hosts.",
+            },
+        )
+        self.assertEqual(response.status_code, 302)
+
+        player = Player.query.one()
+        self.assertEqual(player.display_name, "Alex")
+        self.assertEqual(player.slug, "alex")
+        self.assertEqual(player.status, "active")
+        self.assertEqual(player.notes, "Usually hosts.")
+
+        duplicate = self.client.post(
+            f"{league_base}/players",
+            data={"display_name": " alex "},
+        )
+        self.assertEqual(duplicate.status_code, 200)
+        self.assertIn(b"already exists", duplicate.data)
+        self.assertEqual(Player.query.count(), 1)
+
+        archive = self.client.post(f"{league_base}/players/{player.id}/archive")
+        self.assertEqual(archive.status_code, 302)
+        self.db.session.refresh(player)
+        self.assertEqual(player.status, "archived")
+
+        reactivate = self.client.post(f"{league_base}/players/{player.id}/reactivate")
+        self.assertEqual(reactivate.status_code, 302)
+        self.db.session.refresh(player)
+        self.assertEqual(player.status, "active")
+
+    def test_viewer_can_view_players_but_cannot_add_or_archive(self):
+        from boker.db import db
+        from boker.db_models import LeagueMembership, Player
+        from boker.league_repositories import create_league, create_player, create_user
+
+        owner = create_user("owner@example.com", "password123")
+        viewer = create_user("viewer@example.com", "password123")
+        db.session.flush()
+        league = create_league(owner, "Private League", "private-league")
+        player = create_player(league.id, "Alex", "alex")
+        db.session.flush()
+        db.session.add(
+            LeagueMembership(
+                league_id=league.id,
+                user_id=viewer.id,
+                role="viewer",
+            )
+        )
+        db.session.commit()
+
+        with self.client.session_transaction() as flask_session:
+            flask_session["user_id"] = viewer.id
+
+        league_base = self.league_path(league)
+        response = self.client.get(f"{league_base}/players")
+        self.assertEqual(response.status_code, 200)
+        self.assertIn(b"Alex", response.data)
+        self.assertNotIn(b"Add player", response.data)
+
+        add = self.client.post(
+            f"{league_base}/players",
+            data={"display_name": "Blair"},
+        )
+        self.assertEqual(add.status_code, 403)
+        self.assertEqual(Player.query.count(), 1)
+
+        archive = self.client.post(f"{league_base}/players/{player.id}/archive")
+        self.assertEqual(archive.status_code, 403)
+        self.db.session.refresh(player)
+        self.assertEqual(player.status, "active")
+
+    def test_owner_can_create_same_day_sessions_and_close_them(self):
+        from boker.db_models import LedgerEvent, PokerSession
+
+        _, _, league_base = self.create_logged_in_league()
+
+        first = self.client.post(
+            f"{league_base}/sessions",
+            data={
+                "session_date": "2026-10-02",
+                "label": "",
+                "status": "open",
+                "notes": "Main game",
+            },
+        )
+        second = self.client.post(
+            f"{league_base}/sessions",
+            data={
+                "session_date": "2026-10-02",
+                "label": "Late table",
+                "status": "open",
+            },
+        )
+
+        self.assertEqual(first.status_code, 302)
+        self.assertEqual(second.status_code, 302)
+
+        sessions = PokerSession.query.order_by(PokerSession.sequence_on_date.asc()).all()
+        self.assertEqual([session.sequence_on_date for session in sessions], [1, 2])
+        self.assertEqual(sessions[0].status, "open")
+        self.assertEqual(sessions[0].notes, "Main game")
+        self.assertEqual(sessions[1].display_label, "Late table")
+
+        events = LedgerEvent.query.order_by(LedgerEvent.created_at.asc()).all()
+        self.assertEqual([event.event_type for event in events], ["session_open", "session_open"])
+
+        close = self.client.post(f"{league_base}/sessions/{sessions[0].id}/close")
+        self.assertEqual(close.status_code, 302)
+        self.db.session.refresh(sessions[0])
+        self.assertEqual(sessions[0].status, "closed")
+        self.assertIsNotNone(sessions[0].closed_at)
+        self.assertEqual(LedgerEvent.query.count(), 3)
+        self.assertEqual(
+            LedgerEvent.query.order_by(LedgerEvent.created_at.desc()).first().event_type,
+            "session_close",
+        )
+
+    def test_closed_session_creation_does_not_append_marker_event_until_opened(self):
+        from boker.db_models import LedgerEvent, PokerSession
+
+        _, _, league_base = self.create_logged_in_league()
+        self.client.post(
+            f"{league_base}/sessions",
+            data={"session_date": "2026-10-02", "status": "closed"},
+        )
+
+        session = PokerSession.query.one()
+        self.assertEqual(session.status, "closed")
+        self.assertEqual(LedgerEvent.query.count(), 0)
+
+        open_response = self.client.post(f"{league_base}/sessions/{session.id}/open")
+        self.assertEqual(open_response.status_code, 302)
+        self.db.session.refresh(session)
+        self.assertEqual(session.status, "open")
+        self.assertIsNotNone(session.opened_at)
+        self.assertEqual(LedgerEvent.query.one().event_type, "session_open")
+
+    def test_viewer_can_view_sessions_but_cannot_create_or_close(self):
+        from boker.db import db
+        from boker.db_models import LeagueMembership, PokerSession
+        from boker.league_repositories import create_league, create_poker_session, create_user
+
+        owner = create_user("owner@example.com", "password123")
+        viewer = create_user("viewer@example.com", "password123")
+        db.session.flush()
+        league = create_league(owner, "Private League", "private-league")
+        session = create_poker_session(league.id, date(2026, 10, 2), status="open")
+        db.session.flush()
+        db.session.add(
+            LeagueMembership(
+                league_id=league.id,
+                user_id=viewer.id,
+                role="viewer",
+            )
+        )
+        db.session.commit()
+
+        with self.client.session_transaction() as flask_session:
+            flask_session["user_id"] = viewer.id
+
+        league_base = self.league_path(league)
+        response = self.client.get(f"{league_base}/sessions")
+        self.assertEqual(response.status_code, 200)
+        self.assertIn(b"2026-10-02", response.data)
+        self.assertNotIn(b"Create session", response.data)
+
+        create = self.client.post(
+            f"{league_base}/sessions",
+            data={"session_date": "2026-10-03"},
+        )
+        self.assertEqual(create.status_code, 403)
+        self.assertEqual(PokerSession.query.count(), 1)
+
+        close = self.client.post(f"{league_base}/sessions/{session.id}/close")
+        self.assertEqual(close.status_code, 403)
+        self.db.session.refresh(session)
+        self.assertEqual(session.status, "open")
+
+    def test_owner_can_append_events_and_view_db_backed_stats(self):
+        from boker.db_models import LedgerEvent, Player, PokerSession
+
+        _, _, league_base = self.create_logged_in_league()
+        self.client.post(f"{league_base}/players", data={"display_name": "Alex"})
+        self.client.post(
+            f"{league_base}/sessions",
+            data={"session_date": "2026-10-02", "status": "open"},
+        )
+
+        player = Player.query.one()
+        session = PokerSession.query.one()
+
+        buyin = self.client.post(
+            f"{league_base}/sessions/{session.id}",
+            data={
+                "player_id": player.id,
+                "event_type": "buyin",
+                "amount": "20",
+            },
+        )
+        cashout = self.client.post(
+            f"{league_base}/sessions/{session.id}",
+            data={
+                "player_id": player.id,
+                "event_type": "cashout",
+                "amount": "35",
+            },
+        )
+        paid = self.client.post(
+            f"{league_base}/sessions/{session.id}",
+            data={
+                "player_id": player.id,
+                "event_type": "paid_out",
+                "amount": "15",
+            },
+        )
+
+        self.assertEqual(buyin.status_code, 302)
+        self.assertEqual(cashout.status_code, 302)
+        self.assertEqual(paid.status_code, 302)
+        self.assertEqual(LedgerEvent.query.filter_by(player_id=player.id).count(), 3)
+
+        leaderboard = self.client.get(f"{league_base}/leaderboard")
+        self.assertEqual(leaderboard.status_code, 200)
+        self.assertIn(b"Alex", leaderboard.data)
+        self.assertIn(b"15.00", leaderboard.data)
+
+        detail = self.client.get(f"{league_base}/sessions/{session.id}")
+        self.assertEqual(detail.status_code, 200)
+        self.assertIn(b"cashout", detail.data)
+        self.assertIn(b"paid out", detail.data)
+
+        player_detail = self.client.get(f"{league_base}/players/{player.id}")
+        self.assertEqual(player_detail.status_code, 200)
+        self.assertIn(b"Total net", player_detail.data)
+        self.assertIn(b"20.00", player_detail.data)
+
+    def test_league_ledger_shows_and_resolves_player_debts(self):
+        from boker.db_models import LedgerEvent, Player, PokerSession
+
+        _, _, league_base = self.create_logged_in_league()
+        self.client.post(f"{league_base}/players", data={"display_name": "Alex"})
+        self.client.post(
+            f"{league_base}/sessions",
+            data={"session_date": "2026-10-02", "status": "open"},
+        )
+
+        player = Player.query.one()
+        session = PokerSession.query.one()
+        self.client.post(
+            f"{league_base}/sessions/{session.id}",
+            data={"player_id": player.id, "event_type": "front", "amount": "50"},
+        )
+        self.client.post(
+            f"{league_base}/sessions/{session.id}",
+            data={"player_id": player.id, "event_type": "cashout", "amount": "20"},
+        )
+
+        ledger = self.client.get(f"{league_base}/ledger")
+        self.assertEqual(ledger.status_code, 200)
+        self.assertIn(b"Debt resolution", ledger.data)
+        self.assertIn(b"Front receivables", ledger.data)
+        self.assertIn(b"30.00", ledger.data)
+
+        repayment = self.client.post(
+            f"{league_base}/ledger",
+            data={
+                "session_id": session.id,
+                "player_id": player.id,
+                "event_type": "debt_repayment",
+                "amount": "10",
+            },
+        )
+        self.assertEqual(repayment.status_code, 302)
+        self.assertEqual(
+            LedgerEvent.query.order_by(LedgerEvent.created_at.desc()).first().event_type,
+            "debt_repayment",
+        )
+
+        ledger = self.client.get(f"{league_base}/ledger")
+        self.assertEqual(ledger.status_code, 200)
+        self.assertIn(b"20.00", ledger.data)
+
+    def test_viewer_cannot_append_ledger_events(self):
+        from boker.db import db
+        from boker.db_models import LeagueMembership, LedgerEvent
+        from boker.league_repositories import (
+            create_league,
+            create_player,
+            create_poker_session,
+            create_user,
+        )
+
+        owner = create_user("owner@example.com", "password123")
+        viewer = create_user("viewer@example.com", "password123")
+        db.session.flush()
+        league = create_league(owner, "Private League", "private-league")
+        player = create_player(league.id, "Alex", "alex")
+        session = create_poker_session(league.id, date(2026, 10, 2), status="open")
+        db.session.flush()
+        db.session.add(
+            LeagueMembership(
+                league_id=league.id,
+                user_id=viewer.id,
+                role="viewer",
+            )
+        )
+        db.session.commit()
+
+        with self.client.session_transaction() as flask_session:
+            flask_session["user_id"] = viewer.id
+
+        response = self.client.post(
+            f"{self.league_path(league)}/sessions/{session.id}",
+            data={
+                "player_id": player.id,
+                "event_type": "buyin",
+                "amount": "20",
+            },
+        )
+        self.assertEqual(response.status_code, 403)
+        self.assertEqual(LedgerEvent.query.count(), 0)
+
+
+if __name__ == "__main__":
+    unittest.main()