feat(leaderboard): remote score sync client (PHP score API)

[PipFoweraker]

What

Client side of the settled PHP score API (docs/strategy/BACKEND_AND_DATA_ARCHITECTURE.md, server/leaderboard/score_api.php). A downloaded build can now upload a run's score on game-over and view the global (online) board, keyed by (seed, game_version) per ADR-0002 #5.

Files

• godot/autoload/leaderboard_sync.gd (new) -- LeaderboardSync autoload over Godot HTTPRequest:
  • submit_score(entry, seed, version) -> fire-and-forget POST, submit_completed signal.
  • fetch_board(seed, version, limit, callback) -> async GET, parsed into ScoreEntry objects.
  • Pure static helpers (build_post_body / build_endpoint / build_get_url / parse_submit_response / parse_board_entries) -- where the contract bugs hide; unit-tested.
• godot/data/leaderboard_config.json (new) -- committed config: base_url, token, enabled. Default enabled=false + placeholder host so an unconfigured build never touches the network and never errors. Pip sets base_url + token here (then flip enabled to true) before building.
• godot/project.godot -- registers the LeaderboardSync autoload.
• godot/scripts/ui/game_over_screen.gd -- after the existing local save, submits remotely when enabled+configured+opted-in; tiny non-blocking status blip: submitting... -> submitted (rank N) / offline -- saved locally.
• godot/scripts/ui/leaderboard_screen.gd -- Local/Global toggle (only shown when sync is configured); fetches the remote board for the current (seed, version); falls back to local silently on any failure.
• godot/autoload/game_config.gd -- submit_scores_global opt-out (default ON), persisted under [leaderboard].
• godot/scripts/ui/settings_menu.gd -- "Submit Scores to Global Leaderboard" toggle.
• godot/tests/unit/test_leaderboard_sync.gd (new) -- POST-body build, GET-url encoding, response parsing (incl. malformed/error), and the enabled=false / opt-out no-op gating.

Where Pip configures it

godot/data/leaderboard_config.json: set base_url (host base; endpoint = <base>/score_api.php) + token (the X-PDoom-Token shared secret), then set enabled: true.

Determinism / replay is untouched (ADR-0006)

All network I/O is a pure view side-effect invoked ONLY from the game-over screen and the leaderboard screen (both UI). It never touches the simulation, the seeded RNG, turn logic, or replay, and is never called from any deterministic code path. Every HTTP call is async with an 8s timeout; unreachable/unconfigured/timeout/malformed -> the game plays normally, local leaderboard works, quiet status at most. Only the fields already in ScoreEntry (+ seed/version) go up; opt-out honored.

Verification

• Fast gate: run_godot_tests.py --quick --ci-mode --min-tests 300 -> 431 tests, 0 failures (45/45 files, incl. the new test).
• Simulation/determinism tier: --simulation -> 93 tests, 0 failures (proves determinism untouched).
• godot --headless --path godot --import -> clean (no parse errors).

Do NOT merge -- Pip reviews first.

🤖 Generated with Claude Code

[chatgpt-codex-connector]

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.