Harden client and WebSocket proxy

package.json

@@ -10,36 +10,37 @@
     "preview": "vite preview",
     "check": "svelte-kit sync && svelte-check --tsconfig ./tsconfig.json",
     "check:watch": "svelte-kit sync && svelte-check --tsconfig ./tsconfig.json --watch",
+    "test": "vitest run",
+    "test:unit": "vitest run",
+    "test:integration": "vitest run src/**/*.integration.test.*",
     "start": "node run-production.js",
     "generate-icons": "node generate-icons.js"
   },
   "dependencies": {
-    "@types/node": "^22.14.1",
+    "@types/node": "^22.20.1",
     "@types/ws": "^8.18.1",
-    "ansi-to-html": "^0.7.2",
-    "events": "^3.3.0",
-    "express": "^4.18.2",
     "howler": "^2.2.4",
-    "net": "^1.0.2",
     "split.js": "^1.6.5",
-    "ws": "^8.18.1"
+    "ws": "^8.21.3"
   },
   "devDependencies": {
-    "@sveltejs/adapter-auto": "^3.1.1",
-    "@sveltejs/adapter-node": "^5.2.12",
-    "@sveltejs/kit": "^2.5.0",
-    "@sveltejs/vite-plugin-svelte": "^3.0.1",
+    "@sveltejs/adapter-node": "^5.5.7",
+    "@sveltejs/kit": "^2.70.3",
+    "@sveltejs/vite-plugin-svelte": "^7.3.0",
     "@types/howler": "^2.2.11",
     "autoprefixer": "^10.4.16",
     "postcss": "^8.4.32",
-    "sharp": "^0.33.2",
-    "svelte": "^4.2.8",
-    "svelte-check": "^3.6.2",
+    "sharp": "^0.35.4",
+    "svelte": "^5.57.0",
+    "svelte-check": "^4.7.6",
     "tailwindcss": "^3.3.6",
     "tslib": "^2.6.2",
-    "typescript": "^5.3.3",
-    "vite": "^5.0.10",
-    "vite-plugin-node-polyfills": "^0.19.0",
-    "vite-plugin-pwa": "^0.19.4"
+    "typescript": "^5.9.3",
+    "vite": "^8.2.2",
+    "vite-plugin-pwa": "^1.3.0",
+    "vitest": "^4.1.11"
+  },
+  "overrides": {
+    "cookie": "^0.7.2"
   }
 }