diff --git a/.github/workflows/phpunit.yml b/.github/workflows/phpunit.yml
new file mode 100644
index 0000000..44eb499
--- /dev/null
+++ b/.github/workflows/phpunit.yml
@@ -0,0 +1,62 @@
+name: PHPUnit
+
+on:
+  push:
+    branches:
+      - main
+  pull_request:
+
+permissions:
+  contents: read
+
+jobs:
+  php-matrix:
+    name: PHP matrix
+    runs-on: ubuntu-latest
+    outputs:
+      versions: ${{ steps.php-matrix.outputs.versions }}
+    steps:
+      - uses: actions/checkout@v5
+
+      - uses: typisttech/php-matrix-action@0545a7d54db2c7be158b615b1e7f458ae6e99ad3 # v3.0.2
+        id: php-matrix
+
+  phpunit:
+    name: PHPUnit (PHP ${{ matrix.php }})
+    needs: php-matrix
+    runs-on: ubuntu-latest
+    strategy:
+      fail-fast: false
+      matrix:
+        php: ${{ fromJSON(needs.php-matrix.outputs.versions) }}
+    services:
+      mariadb:
+        image: mariadb:11
+        env:
+          MARIADB_ROOT_PASSWORD: root
+          MARIADB_DATABASE: wordpress_test
+        ports:
+          - 3306:3306
+        options: >-
+          --health-cmd="healthcheck.sh --connect --innodb_initialized"
+          --health-interval=5s
+          --health-timeout=5s
+          --health-retries=10
+    env:
+      WP_TESTS_DB_HOST: 127.0.0.1
+      WP_TESTS_DB_NAME: wordpress_test
+      WP_TESTS_DB_USER: root
+      WP_TESTS_DB_PASSWORD: root
+    steps:
+      - uses: actions/checkout@v5
+
+      - uses: shivammathur/setup-php@f3e473d116dcccaddc5834248c87452386958240 # 2.37.2
+        with:
+          php-version: ${{ matrix.php }}
+          extensions: mysqli
+          coverage: none
+          tools: composer
+
+      - uses: ramsey/composer-install@a8d0d959dab41457692a5e2041bd9b757a119e3f # 3.2.1
+
+      - run: composer test
diff --git a/.gitignore b/.gitignore
index 0ce65c8..7479820 100644
--- a/.gitignore
+++ b/.gitignore
@@ -2,4 +2,5 @@
 languages/*.mo
 /vendor/
 /vendor-bin/*/vendor/
+/.phpunit.result.cache
 /node_modules/
diff --git a/composer.json b/composer.json
index 78612b8..44c3d60 100644
--- a/composer.json
+++ b/composer.json
@@ -3,24 +3,55 @@
     "description": "WordPress theme for the LibreSign SaaS",
     "type": "wordpress-theme",
     "license": "GPL-2.0-or-later",
+    "repositories": [
+        {
+            "type": "composer",
+            "url": "https://wpackagist.org",
+            "only": [
+                "wpackagist-plugin/*"
+            ]
+        }
+    ],
     "require": {
         "php": ">=8.3 <8.6"
     },
     "require-dev": {
-        "bamarni/composer-bin-plugin": "^1.8"
+        "bamarni/composer-bin-plugin": "^1.8",
+        "composer/installers": "^2.3",
+        "roots/wordpress": "^7.0",
+        "wp-phpunit/wp-phpunit": "^7.0",
+        "wpackagist-plugin/woocommerce": "^11.0"
+    },
+    "autoload": {
+        "psr-4": {
+            "LibreSign\\WordPressTheme\\": "src/"
+        }
+    },
+    "autoload-dev": {
+        "psr-4": {
+            "LibreSign\\WordPressTheme\\Tests\\": "tests/"
+        }
     },
     "config": {
         "platform": {
             "php": "8.3"
         },
         "allow-plugins": {
-            "bamarni/composer-bin-plugin": true
+            "bamarni/composer-bin-plugin": true,
+            "composer/installers": true,
+            "roots/wordpress-core-installer": true
         }
     },
     "extra": {
         "bamarni-bin": {
             "bin-links": true,
             "forward-command": true
+        },
+        "wordpress-install-dir": "vendor/wordpress",
+        "installer-paths": {
+            "vendor/test-plugins/{$name}/": [
+                "type:wordpress-plugin"
+            ]
         }
     },
     "scripts": {
@@ -28,10 +59,17 @@
         "cs": "phpcs",
         "cs:fix": "phpcbf",
         "stan": "phpstan analyse --memory-limit=2G",
+        "test": [
+            "@test:unit",
+            "@test:integration"
+        ],
+        "test:unit": "phpunit",
+        "test:integration": "phpunit -c phpunit-integration.xml.dist",
         "ci": [
             "@lint",
             "@cs",
-            "@stan"
+            "@stan",
+            "@test"
         ]
     }
 }
diff --git a/composer.lock b/composer.lock
index 8a4e2b4..740387a 100644
--- a/composer.lock
+++ b/composer.lock
@@ -4,7 +4,7 @@
         "Read more about it at https://getcomposer.org/doc/01-basic-usage.md#installing-dependencies",
         "This file is @generated automatically"
     ],
-    "content-hash": "b7e5f17d904a4977efb85dde5d48edf0",
+    "content-hash": "100daeaa732ad02c2952242d18b7d8f1",
     "packages": [],
     "packages-dev": [
         {
@@ -63,6 +63,399 @@
                 "source": "https://github.com/bamarni/composer-bin-plugin/tree/1.9.1"
             },
             "time": "2026-02-04T10:18:12+00:00"
+        },
+        {
+            "name": "composer/installers",
+            "version": "v2.3.0",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/composer/installers.git",
+                "reference": "12fb2dfe5e16183de69e784a7b84046c43d97e8e"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/composer/installers/zipball/12fb2dfe5e16183de69e784a7b84046c43d97e8e",
+                "reference": "12fb2dfe5e16183de69e784a7b84046c43d97e8e",
+                "shasum": ""
+            },
+            "require": {
+                "composer-plugin-api": "^1.0 || ^2.0",
+                "php": "^7.2 || ^8.0"
+            },
+            "require-dev": {
+                "composer/composer": "^1.10.27 || ^2.7",
+                "composer/semver": "^1.7.2 || ^3.4.0",
+                "phpstan/phpstan": "^1.11",
+                "phpstan/phpstan-phpunit": "^1",
+                "symfony/phpunit-bridge": "^7.1.1",
+                "symfony/process": "^5 || ^6 || ^7"
+            },
+            "type": "composer-plugin",
+            "extra": {
+                "class": "Composer\\Installers\\Plugin",
+                "branch-alias": {
+                    "dev-main": "2.x-dev"
+                },
+                "plugin-modifies-install-path": true
+            },
+            "autoload": {
+                "psr-4": {
+                    "Composer\\Installers\\": "src/Composer/Installers"
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Kyle Robinson Young",
+                    "email": "kyle@dontkry.com",
+                    "homepage": "https://github.com/shama"
+                }
+            ],
+            "description": "A multi-framework Composer library installer",
+            "homepage": "https://composer.github.io/installers/",
+            "keywords": [
+                "Dolibarr",
+                "Eliasis",
+                "Hurad",
+                "ImageCMS",
+                "Kanboard",
+                "Lan Management System",
+                "MODX Evo",
+                "MantisBT",
+                "Mautic",
+                "Maya",
+                "OXID",
+                "Plentymarkets",
+                "Porto",
+                "RadPHP",
+                "SMF",
+                "Starbug",
+                "Thelia",
+                "Whmcs",
+                "WolfCMS",
+                "agl",
+                "annotatecms",
+                "attogram",
+                "bitrix",
+                "cakephp",
+                "chef",
+                "cockpit",
+                "codeigniter",
+                "concrete5",
+                "concreteCMS",
+                "croogo",
+                "dokuwiki",
+                "drupal",
+                "eZ Platform",
+                "elgg",
+                "expressionengine",
+                "fuelphp",
+                "grav",
+                "installer",
+                "itop",
+                "known",
+                "kohana",
+                "laravel",
+                "lavalite",
+                "lithium",
+                "magento",
+                "majima",
+                "mako",
+                "matomo",
+                "mediawiki",
+                "miaoxing",
+                "modulework",
+                "modx",
+                "moodle",
+                "osclass",
+                "pantheon",
+                "phpbb",
+                "piwik",
+                "ppi",
+                "processwire",
+                "puppet",
+                "pxcms",
+                "reindex",
+                "roundcube",
+                "shopware",
+                "silverstripe",
+                "sydes",
+                "sylius",
+                "tastyigniter",
+                "wordpress",
+                "yawik",
+                "zend",
+                "zikula"
+            ],
+            "support": {
+                "issues": "https://github.com/composer/installers/issues",
+                "source": "https://github.com/composer/installers/tree/v2.3.0"
+            },
+            "funding": [
+                {
+                    "url": "https://packagist.com",
+                    "type": "custom"
+                },
+                {
+                    "url": "https://github.com/composer",
+                    "type": "github"
+                },
+                {
+                    "url": "https://tidelift.com/funding/github/packagist/composer/composer",
+                    "type": "tidelift"
+                }
+            ],
+            "time": "2024-06-24T20:46:46+00:00"
+        },
+        {
+            "name": "roots/wordpress",
+            "version": "7.1.2",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/roots/wordpress.git",
+                "reference": "eb3d108f216618a858dcaed691e00e68f0ccff9f"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/roots/wordpress/zipball/eb3d108f216618a858dcaed691e00e68f0ccff9f",
+                "reference": "eb3d108f216618a858dcaed691e00e68f0ccff9f",
+                "shasum": ""
+            },
+            "require": {
+                "roots/wordpress-core-installer": "^4.0",
+                "roots/wordpress-no-content": "self.version"
+            },
+            "type": "metapackage",
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT",
+                "GPL-2.0-or-later"
+            ],
+            "description": "WordPress is open source software you can use to create a beautiful website, blog, or app.",
+            "homepage": "https://wordpress.org/",
+            "keywords": [
+                "blog",
+                "cms",
+                "wordpress"
+            ],
+            "support": {
+                "issues": "https://github.com/roots/wordpress/issues",
+                "source": "https://github.com/roots/wordpress/tree/7.1.2"
+            },
+            "funding": [
+                {
+                    "url": "https://github.com/roots",
+                    "type": "github"
+                }
+            ],
+            "time": "2026-03-22T13:26:54+00:00"
+        },
+        {
+            "name": "roots/wordpress-core-installer",
+            "version": "v4.0.0",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/roots/wordpress-core-installer.git",
+                "reference": "85d3589252eb93eee836facf33b54ce30c565bea"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/roots/wordpress-core-installer/zipball/85d3589252eb93eee836facf33b54ce30c565bea",
+                "reference": "85d3589252eb93eee836facf33b54ce30c565bea",
+                "shasum": ""
+            },
+            "require": {
+                "composer-plugin-api": "^2.0",
+                "php": ">=7.2.24"
+            },
+            "conflict": {
+                "composer/installers": "<1.0.6"
+            },
+            "replace": {
+                "johnpbloch/wordpress-core-installer": "*"
+            },
+            "require-dev": {
+                "composer/composer": "^2.0",
+                "phpunit/phpunit": "^8.5"
+            },
+            "type": "composer-plugin",
+            "extra": {
+                "class": "Roots\\Composer\\WordPressCorePlugin"
+            },
+            "autoload": {
+                "psr-4": {
+                    "Roots\\Composer\\": "src/"
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "GPL-2.0-or-later"
+            ],
+            "authors": [
+                {
+                    "name": "John P. Bloch",
+                    "email": "me@johnpbloch.com"
+                },
+                {
+                    "name": "Roots",
+                    "email": "team@roots.io"
+                }
+            ],
+            "description": "A Composer custom installer to handle installing WordPress as a dependency",
+            "keywords": [
+                "wordpress"
+            ],
+            "support": {
+                "issues": "https://github.com/roots/wordpress-core-installer/issues",
+                "source": "https://github.com/roots/wordpress-core-installer/tree/v4.0.0"
+            },
+            "funding": [
+                {
+                    "url": "https://github.com/roots",
+                    "type": "github"
+                }
+            ],
+            "time": "2026-03-22T03:17:23+00:00"
+        },
+        {
+            "name": "roots/wordpress-no-content",
+            "version": "7.1.2",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/WordPress/WordPress.git",
+                "reference": "7.1.2"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://downloads.wordpress.org/release/wordpress-7.1.2-no-content.zip",
+                "reference": "7.1.2",
+                "shasum": "52c0250854a52621dc024651b63d1e088287ee16"
+            },
+            "require": {
+                "php": ">= 7.4"
+            },
+            "provide": {
+                "wordpress/core-implementation": "7.1.2"
+            },
+            "suggest": {
+                "ext-curl": "Performs remote request operations.",
+                "ext-dom": "Used to validate Text Widget content and to automatically configuring IIS7+.",
+                "ext-exif": "Works with metadata stored in images.",
+                "ext-fileinfo": "Used to detect mimetype of file uploads.",
+                "ext-hash": "Used for hashing, including passwords and update packages.",
+                "ext-imagick": "Provides better image quality for media uploads.",
+                "ext-json": "Used for communications with other servers.",
+                "ext-libsodium": "Validates Signatures and provides securely random bytes.",
+                "ext-mbstring": "Used to properly handle UTF8 text.",
+                "ext-mysqli": "Connects to MySQL for database interactions.",
+                "ext-openssl": "Permits SSL-based connections to other hosts.",
+                "ext-pcre": "Increases performance of pattern matching in code searches.",
+                "ext-xml": "Used for XML parsing, such as from a third-party site.",
+                "ext-zip": "Used for decompressing Plugins, Themes, and WordPress update packages."
+            },
+            "type": "wordpress-core",
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "GPL-2.0-or-later"
+            ],
+            "authors": [
+                {
+                    "name": "WordPress Community",
+                    "homepage": "https://wordpress.org/about/"
+                }
+            ],
+            "description": "WordPress is open source software you can use to create a beautiful website, blog, or app.",
+            "homepage": "https://wordpress.org/",
+            "keywords": [
+                "blog",
+                "cms",
+                "wordpress"
+            ],
+            "support": {
+                "docs": "https://developer.wordpress.org/",
+                "forum": "https://wordpress.org/support/",
+                "irc": "irc://irc.freenode.net/wordpress",
+                "issues": "https://core.trac.wordpress.org/",
+                "rss": "https://wordpress.org/news/feed/",
+                "source": "https://core.trac.wordpress.org/browser",
+                "wiki": "https://codex.wordpress.org/"
+            },
+            "funding": [
+                {
+                    "url": "https://wordpressfoundation.org/donate/",
+                    "type": "other"
+                }
+            ],
+            "time": "2026-09-22T13:36:10+00:00"
+        },
+        {
+            "name": "wp-phpunit/wp-phpunit",
+            "version": "7.1.1",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/wp-phpunit/wp-phpunit.git",
+                "reference": "797edc710afc958854852d859c93d9aa1de6447d"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/wp-phpunit/wp-phpunit/zipball/797edc710afc958854852d859c93d9aa1de6447d",
+                "reference": "797edc710afc958854852d859c93d9aa1de6447d",
+                "shasum": ""
+            },
+            "type": "library",
+            "autoload": {
+                "files": [
+                    "__loaded.php"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "GPL-2.0-or-later"
+            ],
+            "authors": [
+                {
+                    "name": "Evan Mattson",
+                    "email": "me@aaemnnost.tv"
+                },
+                {
+                    "name": "WordPress Community",
+                    "homepage": "https://wordpress.org/about/"
+                }
+            ],
+            "description": "WordPress core PHPUnit library",
+            "homepage": "https://github.com/wp-phpunit",
+            "keywords": [
+                "phpunit",
+                "test",
+                "wordpress"
+            ],
+            "support": {
+                "docs": "https://github.com/wp-phpunit/docs",
+                "issues": "https://github.com/wp-phpunit/issues",
+                "source": "https://github.com/wp-phpunit/wp-phpunit"
+            },
+            "time": "2026-08-20T00:59:59+00:00"
+        },
+        {
+            "name": "wpackagist-plugin/woocommerce",
+            "version": "11.1.2",
+            "source": {
+                "type": "svn",
+                "url": "https://plugins.svn.wordpress.org/woocommerce/",
+                "reference": "tags/11.1.2"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://downloads.wordpress.org/plugin/woocommerce.11.1.2.zip"
+            },
+            "require": {
+                "composer/installers": "^1.0 || ^2.0"
+            },
+            "type": "wordpress-plugin",
+            "homepage": "https://wordpress.org/plugins/woocommerce/"
         }
     ],
     "aliases": [],
diff --git a/inc/account.php b/inc/account.php
index d4c06b9..d779e97 100644
--- a/inc/account.php
+++ b/inc/account.php
@@ -34,7 +34,7 @@ function libresign_theme_get_account_url() {
 function libresign_theme_get_purchase_redirect_target() {
 	$redirect_to = '';
 
-	if ( isset( $_REQUEST['redirect_to'] ) ) { // phpcs:ignore WordPress.Security.NonceVerification.Recommended
+	if ( isset( $_REQUEST['redirect_to'] ) && is_string( $_REQUEST['redirect_to'] ) ) { // phpcs:ignore WordPress.Security.NonceVerification.Recommended
 		$redirect_to = wp_sanitize_redirect( wp_unslash( $_REQUEST['redirect_to'] ) ); // phpcs:ignore WordPress.Security.NonceVerification.Recommended
 	}
 
diff --git a/inc/cpf-cnpj.php b/inc/cpf-cnpj.php
index 23353f6..31dee7e 100644
--- a/inc/cpf-cnpj.php
+++ b/inc/cpf-cnpj.php
@@ -10,12 +10,16 @@
  * @package libresign
  */
 
+use LibreSign\WordPressTheme\TaxId;
+
 defined( 'ABSPATH' ) || exit;
 
+require_once dirname( __DIR__ ) . '/src/TaxId.php';
+
 /**
  * Register the CPF/CNPJ field in the checkout address section.
  */
-add_action( 'woocommerce_init', function () {
+function libresign_theme_register_cpf_cnpj_field() {
 	if ( ! function_exists( 'woocommerce_register_additional_checkout_field' ) ) {
 		return;
 	}
@@ -29,94 +33,11 @@
 			'type'       => 'text',
 			'attributes' => array(
 				'autocomplete' => 'off',
-				'placeholder'  => __( 'Required for customers in Brazil', 'libresign' ),
 			),
 		)
 	);
-} );
-
-/**
- * Validate CPF — 11-digit Brazilian individual taxpayer ID.
- *
- * Uses the standard Módulo 11 algorithm with decreasing weights 10..2 / 11..2.
- *
- * @param string $cpf Raw or formatted CPF (dots and dash are stripped).
- * @return bool
- */
-function libresign_theme_validate_cpf( string $cpf ): bool {
-	$cpf = preg_replace( '/[^0-9]/', '', $cpf );
-	if ( strlen( $cpf ) !== 11 ) {
-		return false;
-	}
-	// All identical digits (e.g. 000.000.000-00) are never valid.
-	if ( preg_match( '/^(\d)\1{10}$/', $cpf ) ) {
-		return false;
-	}
-
-	$mod11 = function ( string $str, int $start_weight ): int {
-		$sum = 0;
-		$w   = $start_weight;
-		for ( $i = 0; $i < strlen( $str ); $i++ ) {
-			$sum += (int) $str[ $i ] * $w--;
-		}
-		$rem = $sum % 11;
-		return $rem < 2 ? 0 : 11 - $rem;
-	};
-
-	$dv1 = $mod11( substr( $cpf, 0, 9 ), 10 );
-	if ( $dv1 !== (int) $cpf[9] ) {
-		return false;
-	}
-	return $mod11( substr( $cpf, 0, 10 ), 11 ) === (int) $cpf[10];
-}
-
-/**
- * Validate CNPJ — 14-character Brazilian company taxpayer ID.
- *
- * Handles both the legacy numeric format and the new alphanumeric format
- * introduced by Instrução Normativa RFB nº 2.119/2022 (Anexo Único):
- *  - Positions  1–12: alphanumeric  (root 8 chars + order 4 chars)
- *  - Positions 13–14: numeric check digits
- *
- * Algorithm: Módulo 11 with weights 2–9 assigned right-to-left, cycling
- * back to 2 after reaching 9. Character value = ord(char) − 48, which gives
- * the digit value for '0'–'9' (ASCII 48–57) and 17–42 for 'A'–'Z'
- * (ASCII 65–90), exactly as specified in the Receita Federal table.
- *
- * @param string $cnpj Raw or formatted CNPJ (dots, slash, dash are stripped).
- * @return bool
- */
-function libresign_theme_validate_cnpj( string $cnpj ): bool {
-	$cnpj = strtoupper( preg_replace( '/[\.\-\/]/', '', $cnpj ) );
-	if ( strlen( $cnpj ) !== 14 ) {
-		return false;
-	}
-	// All identical digits — applies to legacy numeric CNPJs.
-	if ( preg_match( '/^(\d)\1{13}$/', $cnpj ) ) {
-		return false;
-	}
-	// Positions 1–12: uppercase letters or digits; positions 13–14: digits.
-	if ( ! preg_match( '/^[A-Z0-9]{12}\d{2}$/', $cnpj ) ) {
-		return false;
-	}
-
-	$mod11 = function ( string $str ): int {
-		$sum = 0;
-		$w   = 2;
-		for ( $i = strlen( $str ) - 1; $i >= 0; $i-- ) {
-			$sum += ( ord( $str[ $i ] ) - 48 ) * $w;
-			$w    = 9 === $w ? 2 : $w + 1;
-		}
-		$rem = $sum % 11;
-		return $rem < 2 ? 0 : 11 - $rem;
-	};
-
-	$dv1 = $mod11( substr( $cnpj, 0, 12 ) );
-	if ( $dv1 !== (int) $cnpj[12] ) {
-		return false;
-	}
-	return $mod11( substr( $cnpj, 0, 13 ) ) === (int) $cnpj[13];
 }
+add_action( 'woocommerce_init', 'libresign_theme_register_cpf_cnpj_field' );
 
 /**
  * Server-side enforcement via the address-location validation hook.
@@ -135,25 +56,16 @@ function libresign_theme_validate_cnpj( string $cnpj ): bool {
 		return;
 	}
 
-	$value = isset( $fields['libresign/cpf-cnpj'] ) ? trim( (string) $fields['libresign/cpf-cnpj'] ) : '';
-	if ( '' === $value ) {
-		$errors->add( 'libresign_cpf_cnpj_required', __( 'Please enter your CPF or CNPJ.', 'libresign' ) );
-		return;
-	}
-
-	$digits_only = preg_replace( '/[^0-9]/', '', $value );
-	$stripped    = strtoupper( preg_replace( '/[\.\-\/]/', '', $value ) );
+	$messages = array(
+		'libresign_cpf_cnpj_required' => __( 'Please enter your CPF or CNPJ.', 'libresign' ),
+		'invalid_cnpj'                => __( 'Please enter a valid CNPJ.', 'libresign' ),
+		'invalid_cpf'                 => __( 'Please enter a valid CPF.', 'libresign' ),
+		'invalid_cpf_cnpj'            => __( 'Please enter a valid CPF (11 digits) or CNPJ (14 characters).', 'libresign' ),
+	);
 
-	if ( 14 === strlen( $stripped ) ) {
-		if ( ! libresign_theme_validate_cnpj( $value ) ) {
-			$errors->add( 'invalid_cnpj', __( 'Please enter a valid CNPJ.', 'libresign' ) );
-		}
-	} elseif ( 11 === strlen( $digits_only ) ) {
-		if ( ! libresign_theme_validate_cpf( $value ) ) {
-			$errors->add( 'invalid_cpf', __( 'Please enter a valid CPF.', 'libresign' ) );
-		}
-	} else {
-		$errors->add( 'invalid_cpf_cnpj', __( 'Please enter a valid CPF (11 digits) or CNPJ (14 characters).', 'libresign' ) );
+	$error_code = TaxId::error_code( isset( $fields['libresign/cpf-cnpj'] ) ? (string) $fields['libresign/cpf-cnpj'] : '' );
+	if ( '' !== $error_code ) {
+		$errors->add( $error_code, $messages[ $error_code ] );
 	}
 }, 10, 3 );
 
@@ -190,7 +102,7 @@ function libresign_theme_strip_irrelevant_cpf_cnpj( $wc_object ) {
  *  1. Visibility — hides the field for non-BR customers and reveals it when
  *     the billing country is Brazil, surviving React re-renders via a
  *     MutationObserver.
- *  2. Validation — mirrors the PHP Módulo 11 algorithms above so the user
+ *  2. Validation — mirrors the Módulo 11 algorithms of src/TaxId.php so the user
  *     gets native WooCommerce Blocks error feedback (red border + message
  *     below the field) without a server round-trip. A re-entrancy guard
  *     prevents the wp.data subscriber from triggering itself in an infinite
@@ -249,7 +161,7 @@ function updateVisibility() {
 		}
 
 		// -----------------------------------------------------------------------
-		// Módulo 11 validation — mirrors the PHP functions in this file.
+		// Módulo 11 validation — mirrors src/TaxId.php.
 		// -----------------------------------------------------------------------
 
 		/**
diff --git a/inc/footer-fragment.php b/inc/footer-fragment.php
index 749f217..c93a3c8 100644
--- a/inc/footer-fragment.php
+++ b/inc/footer-fragment.php
@@ -7,9 +7,11 @@
  * only the GitHub deploy webhook triggers a background refresh.
  */
 
+use LibreSign\WordPressTheme\SiteFragment;
+
 defined( 'ABSPATH' ) || exit;
 
-const LIBRESIGN_THEME_SITE_FRAGMENT_DEFAULT_LOCALE_KEY = 'default';
+require_once dirname( __DIR__ ) . '/src/SiteFragment.php';
 
 /**
  * Return the supported fragment types.
@@ -30,69 +32,6 @@ function libresign_theme_site_fragment_storage_directory_name( $fragment_type )
 	return 'header' === $fragment_type ? 'libresign-header' : 'libresign-footer';
 }
 
-/**
- * Normalize a site origin string.
- *
- * @param string $site_origin Raw site origin.
- * @return string
- */
-function libresign_theme_site_fragment_normalize_site_origin( $site_origin ) {
-	return rtrim( trim( (string) $site_origin ), '/' );
-}
-
-/**
- * Normalize a locale/tag into a path-friendly BCP47-style value.
- *
- * @param string $locale Raw locale/tag.
- * @return string
- */
-function libresign_theme_site_fragment_normalize_locale_tag( $locale ) {
-	$locale = trim( str_replace( '_', '-', (string) $locale ) );
-
-	if ( '' === $locale ) {
-		return '';
-	}
-
-	$parts = array_values( array_filter( explode( '-', $locale ), static fn ( $part ) => '' !== $part ) );
-	if ( empty( $parts ) ) {
-		return '';
-	}
-
-	$parts[0] = strtolower( $parts[0] );
-
-	foreach ( $parts as $index => $part ) {
-		if ( 0 === $index ) {
-			continue;
-		}
-
-		if ( 2 === strlen( $part ) || 3 === strlen( $part ) ) {
-			$parts[ $index ] = strtoupper( $part );
-			continue;
-		}
-
-		if ( 4 === strlen( $part ) ) {
-			$parts[ $index ] = ucfirst( strtolower( $part ) );
-			continue;
-		}
-
-		$parts[ $index ] = $part;
-	}
-
-	return implode( '-', $parts );
-}
-
-/**
- * Convert locale to storage key.
- *
- * @param string $locale Locale.
- * @return string
- */
-function libresign_theme_site_fragment_storage_key( $locale ) {
-	$locale = libresign_theme_site_fragment_normalize_locale_tag( $locale );
-
-	return '' === $locale ? LIBRESIGN_THEME_SITE_FRAGMENT_DEFAULT_LOCALE_KEY : $locale;
-}
-
 /**
  * Get the storage base dir for a fragment type.
  *
@@ -117,28 +56,6 @@ function libresign_theme_site_fragment_storage_base_url( $fragment_type ) {
 	return trailingslashit( $uploads['baseurl'] ) . libresign_theme_site_fragment_storage_directory_name( $fragment_type );
 }
 
-/**
- * Build the published fragment URL.
- *
- * @param string $site_origin   Static site origin.
- * @param string $fragment_type Fragment type.
- * @param string $locale        Locale.
- * @return string
- */
-function libresign_theme_site_fragment_url( $site_origin, $fragment_type, $locale ) {
-	$site_origin = libresign_theme_site_fragment_normalize_site_origin( $site_origin );
-	$locale      = libresign_theme_site_fragment_normalize_locale_tag( $locale );
-	$path        = '/fragments/';
-
-	if ( '' !== $locale ) {
-		$path .= rawurlencode( $locale ) . '/';
-	}
-
-	$path .= $fragment_type;
-
-	return $site_origin . $path;
-}
-
 /**
  * Fetch a remote URL and return the HTTP code/body.
  *
@@ -198,50 +115,6 @@ function libresign_theme_site_fragment_is_optional_http_error( $error ) {
 	return is_array( $data ) && isset( $data['status'] ) && 404 === (int) $data['status'];
 }
 
-/**
- * Extract CSS/JS fragment asset URLs from fragment HTML.
- *
- * @param string $html Fragment HTML.
- * @return array<string, string>|WP_Error
- */
-function libresign_theme_site_fragment_extract_asset_urls( $html ) {
-	if (
-		! preg_match( '/\bdata-fragment-css=("|\')([^"\']+)\1/i', $html, $css_matches )
-		|| ! preg_match( '/\bdata-fragment-js=("|\')([^"\']+)\1/i', $html, $js_matches )
-	) {
-		return new WP_Error(
-			'libresign_theme_site_fragment_missing_assets',
-			__( 'Fragment HTML is missing the expected CSS/JS references.', 'libresign' )
-		);
-	}
-
-	return array(
-		'css' => (string) $css_matches[2],
-		'js'  => (string) $js_matches[2],
-	);
-}
-
-/**
- * Extract discovered locales from the default header fragment HTML.
- *
- * @param string $html Header fragment HTML.
- * @return array<int, string>
- */
-function libresign_theme_site_fragment_extract_locales_from_header_html( $html ) {
-	$locales = array();
-
-	if ( preg_match_all( '~\/fragments(?:\/([^\/#?"\']+))?\/header(?:[\/#?"\']|$)~i', $html, $matches ) ) {
-		foreach ( $matches[1] as $locale ) {
-			$locale = libresign_theme_site_fragment_normalize_locale_tag( rawurldecode( (string) $locale ) );
-			$locales[] = $locale;
-		}
-	}
-
-	$locales[] = '';
-
-	return array_values( array_unique( array_filter( $locales, 'is_string' ) ) );
-}
-
 /**
  * Build fallback locales from the local WordPress language context.
  *
@@ -266,55 +139,11 @@ function libresign_theme_site_fragment_fallback_locales() {
 	$candidates[] = get_locale();
 	$candidates[] = '';
 
-	$candidates = array_map( 'libresign_theme_site_fragment_normalize_locale_tag', $candidates );
+	$candidates = array_map( array( SiteFragment::class, 'language_tag' ), $candidates );
 
 	return array_values( array_unique( array_filter( $candidates, 'is_string' ) ) );
 }
 
-/**
- * Remove fragment asset data attributes after syncing.
- *
- * @param string $html Fragment HTML.
- * @return string
- */
-function libresign_theme_site_fragment_strip_runtime_asset_attributes( $html ) {
-	$html = preg_replace( '/\s+data-fragment-css=("|\')[^"\']+\1/i', '', $html ) ?? $html;
-	$html = preg_replace( '/\s+data-fragment-js=("|\')[^"\']+\1/i', '', $html ) ?? $html;
-
-	return $html;
-}
-
-/**
- * Rewrite root-relative URLs so stored artifacts continue pointing at the static site.
- *
- * @param string $content     Content to rewrite.
- * @param string $site_origin Static site origin.
- * @return string
- */
-function libresign_theme_site_fragment_rewrite_root_relative_urls( $content, $site_origin ) {
-	$site_origin = libresign_theme_site_fragment_normalize_site_origin( $site_origin );
-
-	$content = preg_replace_callback(
-		'/\b(href|src|action|poster)=("|\')(\/(?!\/)[^"\']*)\2/i',
-		static function ( $matches ) use ( $site_origin ) {
-			return $matches[1] . '=' . $matches[2] . $site_origin . $matches[3] . $matches[2];
-		},
-		$content
-	) ?? $content;
-
-	$content = preg_replace_callback(
-		'~url\(\s*(?:("|\')\s*)?(\/(?!\/)[^)"\']+)(?:\s*\1)?\s*\)~i',
-		static function ( $matches ) use ( $site_origin ) {
-			$quote = $matches[1];
-
-			return 'url(' . $quote . $site_origin . $matches[2] . $quote . ')';
-		},
-		$content
-	) ?? $content;
-
-	return $content;
-}
-
 /**
  * Collect all fragment artifacts from the static site.
  *
@@ -324,7 +153,7 @@ static function ( $matches ) use ( $site_origin ) {
  * @return array<string, mixed>|WP_Error
  */
 function libresign_theme_site_fragment_collect_artifacts( $site_origin, $fragment_types, $context = array() ) {
-	$site_origin = libresign_theme_site_fragment_normalize_site_origin( $site_origin );
+	$site_origin = SiteFragment::origin( $site_origin );
 	if ( '' === $site_origin ) {
 		return new WP_Error(
 			'libresign_theme_site_fragment_origin_missing',
@@ -332,7 +161,7 @@ function libresign_theme_site_fragment_collect_artifacts( $site_origin, $fragmen
 		);
 	}
 
-	$default_header_url      = libresign_theme_site_fragment_url( $site_origin, 'header', '' );
+	$default_header_url      = SiteFragment::url( $site_origin, 'header', '' );
 	$default_header_response = libresign_theme_site_fragment_fetch_url( $default_header_url );
 	if ( is_wp_error( $default_header_response ) ) {
 		return $default_header_response;
@@ -340,7 +169,7 @@ function libresign_theme_site_fragment_collect_artifacts( $site_origin, $fragmen
 
 	$locales = array_merge(
 		array( '' ),
-		libresign_theme_site_fragment_extract_locales_from_header_html( (string) $default_header_response['body'] ),
+		SiteFragment::linked_locales( (string) $default_header_response['body'] ),
 		libresign_theme_site_fragment_fallback_locales()
 	);
 	$locales = array_values( array_unique( $locales ) );
@@ -353,7 +182,7 @@ function libresign_theme_site_fragment_collect_artifacts( $site_origin, $fragmen
 		$summary[ $fragment_type ] = array();
 
 		foreach ( $locales as $locale ) {
-			$fragment_url = libresign_theme_site_fragment_url( $site_origin, $fragment_type, $locale );
+			$fragment_url = SiteFragment::url( $site_origin, $fragment_type, $locale );
 
 			if ( 'header' === $fragment_type && '' === $locale ) {
 				$fragment_response = $default_header_response;
@@ -369,13 +198,16 @@ function libresign_theme_site_fragment_collect_artifacts( $site_origin, $fragmen
 				return $fragment_response;
 			}
 
-			$asset_urls = libresign_theme_site_fragment_extract_asset_urls( (string) $fragment_response['body'] );
-			if ( is_wp_error( $asset_urls ) ) {
+			$asset_urls = SiteFragment::asset_urls( (string) $fragment_response['body'] );
+			if ( null === $asset_urls ) {
 				if ( '' !== $locale ) {
 					continue;
 				}
 
-				return $asset_urls;
+				return new WP_Error(
+					'libresign_theme_site_fragment_missing_assets',
+					__( 'Fragment HTML is missing the expected CSS/JS references.', 'libresign' )
+				);
 			}
 
 			foreach ( array( 'css', 'js' ) as $asset_type ) {
@@ -390,15 +222,15 @@ function libresign_theme_site_fragment_collect_artifacts( $site_origin, $fragmen
 				}
 			}
 
-			$html = libresign_theme_site_fragment_strip_runtime_asset_attributes( (string) $fragment_response['body'] );
-			$html = libresign_theme_site_fragment_rewrite_root_relative_urls( $html, $site_origin );
-			$css  = libresign_theme_site_fragment_rewrite_root_relative_urls( (string) $asset_cache[ $asset_urls['css'] ], $site_origin );
-			$js   = libresign_theme_site_fragment_rewrite_root_relative_urls( (string) $asset_cache[ $asset_urls['js'] ], $site_origin );
+			$html = SiteFragment::without_asset_attributes( (string) $fragment_response['body'] );
+			$html = SiteFragment::with_absolute_urls( $html, $site_origin );
+			$css  = SiteFragment::with_absolute_urls( (string) $asset_cache[ $asset_urls['css'] ], $site_origin );
+			$js   = SiteFragment::with_absolute_urls( (string) $asset_cache[ $asset_urls['js'] ], $site_origin );
 
 			$artifact = array(
 				'fragment_type' => $fragment_type,
-				'locale'        => libresign_theme_site_fragment_normalize_locale_tag( $locale ),
-				'locale_key'    => libresign_theme_site_fragment_storage_key( $locale ),
+				'locale'        => SiteFragment::language_tag( $locale ),
+				'locale_key'    => SiteFragment::storage_key( $locale ),
 				'fragment_url'  => $fragment_url,
 				'css_url'       => (string) $asset_urls['css'],
 				'js_url'        => (string) $asset_urls['js'],
@@ -516,7 +348,7 @@ function libresign_theme_sync_site_fragments_from_origin( $site_origin, $fragmen
 	}
 
 	return array(
-		'origin'  => libresign_theme_site_fragment_normalize_site_origin( $site_origin ),
+		'origin'  => SiteFragment::origin( $site_origin ),
 		'synced'  => $persisted,
 		'locales' => $collected['locales'],
 	);
@@ -538,20 +370,7 @@ function libresign_theme_site_fragment_locale_lookup_keys() {
 	$candidates[] = (string) determine_locale();
 	$candidates[] = (string) get_locale();
 
-	$keys = array();
-	foreach ( $candidates as $candidate ) {
-		$normalized = libresign_theme_site_fragment_normalize_locale_tag( $candidate );
-		if ( '' === $normalized ) {
-			continue;
-		}
-
-		$keys[] = $normalized;
-		$keys[] = strtolower( strtok( $normalized, '-' ) );
-	}
-
-	$keys[] = LIBRESIGN_THEME_SITE_FRAGMENT_DEFAULT_LOCALE_KEY;
-
-	return array_values( array_unique( $keys ) );
+	return SiteFragment::lookup_keys( $candidates );
 }
 
 /**
diff --git a/inc/github-site-webhook.php b/inc/github-site-webhook.php
index d4aad5f..b51b89c 100644
--- a/inc/github-site-webhook.php
+++ b/inc/github-site-webhook.php
@@ -3,8 +3,14 @@
  * GitHub webhook receiver for production site fragment synchronization.
  */
 
+use LibreSign\WordPressTheme\SiteDeploy;
+use LibreSign\WordPressTheme\SiteFragment;
+
 defined( 'ABSPATH' ) || exit;
 
+require_once dirname( __DIR__ ) . '/src/SiteDeploy.php';
+require_once dirname( __DIR__ ) . '/src/SiteFragment.php';
+
 const LIBRESIGN_THEME_GITHUB_SITE_WEBHOOK_NAMESPACE = 'libresign/v1';
 const LIBRESIGN_THEME_GITHUB_SITE_WEBHOOK_ROUTE     = '/site-deploy-webhook';
 
@@ -199,7 +205,7 @@ function libresign_theme_site_origin() {
 	);
 
 	foreach ( $values as $value ) {
-		$value = libresign_theme_site_fragment_normalize_site_origin( $value );
+		$value = SiteFragment::origin( $value );
 		if ( '' !== $value ) {
 			return $value;
 		}
@@ -226,7 +232,7 @@ function libresign_theme_site_deploy_workflow_name() {
 		}
 	}
 
-	return 'Deploy';
+	return 'pages build and deployment';
 }
 
 /**
@@ -285,92 +291,6 @@ function libresign_theme_github_site_webhook_ignored_response( $data = array(),
 	return $response;
 }
 
-/**
- * Verify the GitHub webhook HMAC signature.
- *
- * @param string $body      Raw request body.
- * @param string $signature Signature header value.
- * @param string $secret    Shared secret.
- * @return bool
- */
-function libresign_theme_verify_github_webhook_signature( $body, $signature, $secret ) {
-	$secret    = trim( (string) $secret );
-	$signature = trim( (string) $signature );
-
-	if ( '' === $body || '' === $secret || '' === $signature ) {
-		return false;
-	}
-
-	if ( 0 === stripos( $signature, 'sha256=' ) ) {
-		$signature = substr( $signature, 7 );
-	}
-
-	if ( ! ctype_xdigit( $signature ) ) {
-		return false;
-	}
-
-	$expected = hash_hmac( 'sha256', $body, $secret );
-
-	return hash_equals( $expected, strtolower( $signature ) );
-}
-
-/**
- * Check whether the webhook user agent looks like GitHub Hookshot.
- *
- * @param string $user_agent User agent header.
- * @return bool
- */
-function libresign_theme_is_github_hookshot_user_agent( $user_agent ) {
-	return 0 === strpos( trim( (string) $user_agent ), 'GitHub-Hookshot/' );
-}
-
-/**
- * Extract the workflow name from the payload.
- *
- * @param array<string, mixed> $payload Parsed payload.
- * @return string
- */
-function libresign_theme_site_deploy_workflow_name_from_payload( $payload ) {
-	$workflow_run_name = isset( $payload['workflow_run']['name'] ) ? trim( (string) $payload['workflow_run']['name'] ) : '';
-	if ( '' !== $workflow_run_name ) {
-		return $workflow_run_name;
-	}
-
-	return isset( $payload['workflow']['name'] ) ? trim( (string) $payload['workflow']['name'] ) : '';
-}
-
-/**
- * Determine whether the payload represents the production site deploy event.
- *
- * @param array<string, mixed> $payload Parsed payload.
- * @return bool
- */
-function libresign_theme_is_production_site_deploy_workflow_run( $payload ) {
-	$repository    = isset( $payload['repository']['full_name'] ) ? trim( (string) $payload['repository']['full_name'] ) : '';
-	$action        = isset( $payload['action'] ) ? trim( (string) $payload['action'] ) : '';
-	$conclusion    = isset( $payload['workflow_run']['conclusion'] ) ? trim( (string) $payload['workflow_run']['conclusion'] ) : '';
-	$head_branch   = isset( $payload['workflow_run']['head_branch'] ) ? trim( (string) $payload['workflow_run']['head_branch'] ) : '';
-	$workflow_name = libresign_theme_site_deploy_workflow_name_from_payload( $payload );
-
-	if ( libresign_theme_site_deploy_repository_name() !== $repository ) {
-		return false;
-	}
-
-	if ( 'completed' !== $action ) {
-		return false;
-	}
-
-	if ( 'success' !== $conclusion ) {
-		return false;
-	}
-
-	if ( libresign_theme_site_deploy_branch_name() !== $head_branch ) {
-		return false;
-	}
-
-	return libresign_theme_site_deploy_workflow_name() === $workflow_name;
-}
-
 /**
  * Mark a webhook delivery as processed, returning false when duplicated.
  *
@@ -429,7 +349,7 @@ function libresign_theme_receive_github_site_deploy_webhook( $request ) {
 	}
 
 	$user_agent = (string) $request->get_header( 'user-agent' );
-	if ( ! libresign_theme_is_github_hookshot_user_agent( $user_agent ) ) {
+	if ( ! SiteDeploy::is_github_delivery( $user_agent ) ) {
 		return new WP_Error(
 			'libresign_theme_github_webhook_invalid_agent',
 			__( 'The webhook request does not look like a GitHub delivery.', 'libresign' ),
@@ -439,7 +359,7 @@ function libresign_theme_receive_github_site_deploy_webhook( $request ) {
 
 	$body      = (string) $request->get_body();
 	$signature = (string) $request->get_header( 'x-hub-signature-256' );
-	if ( ! libresign_theme_verify_github_webhook_signature( $body, $signature, $secret ) ) {
+	if ( ! SiteDeploy::signature_matches( $body, $signature, $secret ) ) {
 		return new WP_Error(
 			'libresign_theme_github_webhook_invalid_signature',
 			__( 'Invalid GitHub webhook signature.', 'libresign' ),
@@ -476,7 +396,7 @@ function libresign_theme_receive_github_site_deploy_webhook( $request ) {
 	}
 
 	// Deploy workflow started: post "starting" comment on the PR.
-	if ( libresign_theme_is_site_deploy_starting( $payload ) ) {
+	if ( SiteDeploy::is_deploy_starting( $payload, libresign_theme_site_deploy_repository_name() ) ) {
 		$delivery_id = (string) $request->get_header( 'x-github-delivery' );
 		if ( ! libresign_theme_mark_github_delivery_once( $delivery_id ) ) {
 			return libresign_theme_github_site_webhook_ignored_response(
@@ -487,12 +407,18 @@ function libresign_theme_receive_github_site_deploy_webhook( $request ) {
 		return rest_ensure_response( array( 'status' => 'acknowledged', 'action' => 'deploy_starting' ) );
 	}
 
-	if ( ! libresign_theme_is_production_site_deploy_workflow_run( $payload ) ) {
+	$is_production_deploy = SiteDeploy::is_production_deploy(
+		$payload,
+		libresign_theme_site_deploy_repository_name(),
+		libresign_theme_site_deploy_branch_name(),
+		libresign_theme_site_deploy_workflow_name()
+	);
+	if ( ! $is_production_deploy ) {
 		return libresign_theme_github_site_webhook_ignored_response(
 			array(
 				'reason'        => 'not_production_deploy',
 				'repository'    => isset( $payload['repository']['full_name'] ) ? (string) $payload['repository']['full_name'] : '',
-				'workflow_name' => libresign_theme_site_deploy_workflow_name_from_payload( $payload ),
+				'workflow_name' => SiteDeploy::workflow_name( $payload ),
 				'head_branch'   => isset( $payload['workflow_run']['head_branch'] ) ? (string) $payload['workflow_run']['head_branch'] : '',
 				'conclusion'    => isset( $payload['workflow_run']['conclusion'] ) ? (string) $payload['workflow_run']['conclusion'] : '',
 			)
@@ -537,7 +463,7 @@ function libresign_theme_receive_github_site_deploy_webhook( $request ) {
 		array(
 			'delivery_id' => $delivery_id,
 			'repository'  => libresign_theme_site_deploy_repository_name(),
-			'workflow'    => libresign_theme_site_deploy_workflow_name_from_payload( $payload ),
+			'workflow'    => SiteDeploy::workflow_name( $payload ),
 			'head_branch' => isset( $workflow_run['head_branch'] ) ? (string) $workflow_run['head_branch'] : '',
 			'source_sha'  => isset( $workflow_run['head_sha'] ) ? (string) $workflow_run['head_sha'] : '',
 			'source_url'  => isset( $workflow_run['html_url'] ) ? (string) $workflow_run['html_url'] : '',
@@ -552,7 +478,7 @@ function libresign_theme_receive_github_site_deploy_webhook( $request ) {
 			'status'      => 'synced',
 			'delivery_id' => $delivery_id,
 			'repository'  => libresign_theme_site_deploy_repository_name(),
-			'workflow'    => libresign_theme_site_deploy_workflow_name_from_payload( $payload ),
+			'workflow'    => SiteDeploy::workflow_name( $payload ),
 			'origin'      => $sync_result['origin'],
 			'synced'      => $sync_result['synced'],
 		)
@@ -612,16 +538,7 @@ function libresign_theme_post_pr_sync_comment( string $site_origin, array $sync_
 		return;
 	}
 
-	$synced      = $sync_result['synced'] ?? array();
-	$header_list = implode( ', ', (array) ( $synced['header'] ?? array() ) );
-	$footer_list = implode( ', ', (array) ( $synced['footer'] ?? array() ) );
-
-	$body = "✅ **Header and footer fragments updated in production!**\n\n" .
-			"| Fragment | Synced locales |\n" .
-			"|----------|----------------|\n" .
-			"| Header | `{$header_list}` |\n" .
-			"| Footer | `{$footer_list}` |\n\n" .
-			"Source: {$site_origin}";
+	$body = SiteDeploy::sync_comment( $sync_result['synced'] ?? array(), $site_origin );
 
 	$parts = explode( '/', $repository, 2 );
 	if ( count( $parts ) !== 2 || '' === $parts[0] || '' === $parts[1] ) {
@@ -643,24 +560,6 @@ function libresign_theme_post_pr_sync_comment( string $site_origin, array $sync_
 	);
 }
 
-/**
- * Determine whether the payload represents the Deploy workflow starting on main.
- *
- * @param array<string, mixed> $payload Parsed payload.
- * @return bool
- */
-function libresign_theme_is_site_deploy_starting( array $payload ): bool {
-	$repository  = isset( $payload['repository']['full_name'] ) ? trim( (string) $payload['repository']['full_name'] ) : '';
-	$action      = isset( $payload['action'] ) ? trim( (string) $payload['action'] ) : '';
-	$head_branch = isset( $payload['workflow_run']['head_branch'] ) ? trim( (string) $payload['workflow_run']['head_branch'] ) : '';
-	$wf_name     = libresign_theme_site_deploy_workflow_name_from_payload( $payload );
-
-	return libresign_theme_site_deploy_repository_name() === $repository
-		&& 'in_progress' === $action
-		&& 'main' === $head_branch
-		&& 'Deploy' === $wf_name;
-}
-
 /**
  * Handle the Deploy workflow starting: find the merged PR and post a "starting" comment.
  *
@@ -731,16 +630,5 @@ function libresign_theme_find_pr_for_commit( string $repository, string $sha, st
 		return 0;
 	}
 
-	$pulls = json_decode( wp_remote_retrieve_body( $response ), true );
-	if ( ! is_array( $pulls ) ) {
-		return 0;
-	}
-
-	foreach ( $pulls as $pr ) {
-		if ( ! empty( $pr['merged_at'] ) ) {
-			return (int) $pr['number'];
-		}
-	}
-
-	return 0;
+	return SiteDeploy::merged_pull_request( json_decode( wp_remote_retrieve_body( $response ), true ) );
 }
\ No newline at end of file
diff --git a/inc/logo.php b/inc/logo.php
index 91a1775..1377832 100644
--- a/inc/logo.php
+++ b/inc/logo.php
@@ -14,8 +14,12 @@
  * @package libresign
  */
 
+use LibreSign\WordPressTheme\Logo;
+
 defined( 'ABSPATH' ) || exit;
 
+require_once dirname( __DIR__ ) . '/src/Logo.php';
+
 /**
  * Return the LibreSign logo URL for the given display context.
  *
@@ -41,31 +45,7 @@ function libresign_theme_get_theme_logo_url( string $variant = 'light' ): string
  * device pixel ratio.
  */
 function libresign_theme_custom_logo_needs_fallback( $custom_logo_html ) {
-	if ( '' === trim( (string) $custom_logo_html ) ) {
-		return true;
-	}
-
-	if ( ! preg_match( '/<img[^>]+>/', (string) $custom_logo_html, $tag_matches ) ) {
-		return true;
-	}
-
-	$img_tag = $tag_matches[0];
-
-	// Collect every image URL from src and srcset.
-	$urls = array();
-
-	if ( preg_match( '/src=["\']([^"\']+)["\']/', $img_tag, $m ) ) {
-		$urls[] = html_entity_decode( $m[1] );
-	}
-
-	if ( preg_match( '/srcset=["\']([^"\']+)["\']/', $img_tag, $m ) ) {
-		foreach ( explode( ',', html_entity_decode( $m[1] ) ) as $part ) {
-			$candidate = trim( explode( ' ', trim( $part ) )[0] );
-			if ( $candidate ) {
-				$urls[] = $candidate;
-			}
-		}
-	}
+	$urls = Logo::image_urls( (string) $custom_logo_html );
 
 	if ( empty( $urls ) ) {
 		return true;
@@ -117,29 +97,10 @@ function libresign_theme_filter_custom_logo( $custom_logo_html, $blog_id ) {
 		return $custom_logo_html;
 	}
 
-	$logo_light = esc_url( libresign_theme_get_theme_logo_url( 'light' ) );
-	$logo_dark  = esc_url( libresign_theme_get_theme_logo_url( 'dark' ) );
-
-	// Remove srcset/sizes and set src to the light-background logo.
-	$patched = preg_replace( '/\ssrcset=["\'][^"\']*["\']/', '', $custom_logo_html );
-	$patched = preg_replace( '/\ssizes=["\'][^"\']*["\']/', '', $patched );
-	$patched = preg_replace(
-		'/(<img[^>]+)src=["\'][^"\']*["\']/',
-		'$1src="' . $logo_light . '"',
-		$patched
-	);
-
-	// Wrap <img> in <picture> for automatic dark/light switching.
-	$patched = preg_replace(
-		'/(<img[^>]+>)/',
-		'<picture>'
-			. '<source media="(prefers-color-scheme: dark)" srcset="' . $logo_dark . '">' 
-			. '<source media="(prefers-color-scheme: light)" srcset="' . $logo_light . '">'
-			. '$1'
-			. '</picture>',
-		$patched
+	return Logo::with_fallback(
+		(string) $custom_logo_html,
+		esc_url( libresign_theme_get_theme_logo_url( 'light' ) ),
+		esc_url( libresign_theme_get_theme_logo_url( 'dark' ) )
 	);
-
-	return $patched ?: $custom_logo_html;
 }
 add_filter( 'get_custom_logo', 'libresign_theme_filter_custom_logo', 10, 2 );
diff --git a/phpcs.xml.dist b/phpcs.xml.dist
index 0bfeb29..705cb92 100644
--- a/phpcs.xml.dist
+++ b/phpcs.xml.dist
@@ -36,9 +36,11 @@
         <properties>
             <property name="prefixes" type="array">
                 <element value="libresign_theme"/>
+                <element value="LibreSign\WordPressTheme"/>
             </property>
         </properties>
         <exclude-pattern>/woocommerce/*</exclude-pattern>
+        <exclude-pattern>/tests/*</exclude-pattern>
     </rule>
 
     <rule ref="Generic.PHP.DisallowShortOpenTag"/>
diff --git a/phpstan.neon.dist b/phpstan.neon.dist
index cfa98c4..4480303 100644
--- a/phpstan.neon.dist
+++ b/phpstan.neon.dist
@@ -1,23 +1,29 @@
 includes:
     - vendor-bin/phpstan/vendor/szepeviktor/phpstan-wordpress/extension.neon
+    - vendor-bin/phpstan/vendor/phpstan/phpstan-phpunit/extension.neon
+    - vendor-bin/phpstan/vendor/phpstan/phpstan-phpunit/rules.neon
 
 parameters:
     level: 5
     paths:
         - functions.php
         - inc
+        - src
         - patterns
         - woocommerce
+        - tests
     bootstrapFiles:
         - vendor-bin/phpstan/vendor/php-stubs/woocommerce-stubs/woocommerce-stubs.php
+        - vendor-bin/phpunit/vendor/autoload.php
+    scanDirectories:
+        - vendor/wp-phpunit/wp-phpunit/includes
     ignoreErrors:
-        -
-            identifier: constant.notFound
-            message: '#^Constant (AUTH_KEY|SECURE_AUTH_SALT|NONCE_SALT) not found\.$#'
-            path: inc/github-site-webhook.php
         -
             identifier: isset.property
             path: inc/registration.php
         -
             identifier: booleanAnd.rightAlwaysTrue
             path: inc/registration.php
+        -
+            identifier: assign.propertyType
+            path: tests/Integration/Inc/RegistrationTest.php
diff --git a/phpunit-integration.xml.dist b/phpunit-integration.xml.dist
new file mode 100644
index 0000000..aaa3a56
--- /dev/null
+++ b/phpunit-integration.xml.dist
@@ -0,0 +1,24 @@
+<?xml version="1.0"?>
+<phpunit xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+         xsi:noNamespaceSchemaLocation="vendor-bin/phpunit/vendor/phpunit/phpunit/phpunit.xsd"
+         bootstrap="tests/bootstrap-integration.php"
+         colors="true"
+         failOnWarning="true"
+         failOnRisky="true"
+         beStrictAboutOutputDuringTests="true"
+         beStrictAboutTestsThatDoNotTestAnything="true"
+         convertDeprecationsToExceptions="false">
+    <testsuites>
+        <testsuite name="integration">
+            <directory suffix="Test.php">tests/Integration</directory>
+        </testsuite>
+    </testsuites>
+    <coverage>
+        <include>
+            <file>functions.php</file>
+            <directory suffix=".php">inc</directory>
+            <directory suffix=".php">src</directory>
+            <directory suffix=".php">woocommerce</directory>
+        </include>
+    </coverage>
+</phpunit>
diff --git a/phpunit.xml.dist b/phpunit.xml.dist
new file mode 100644
index 0000000..2f71cdd
--- /dev/null
+++ b/phpunit.xml.dist
@@ -0,0 +1,21 @@
+<?xml version="1.0"?>
+<phpunit xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+         xsi:noNamespaceSchemaLocation="vendor-bin/phpunit/vendor/phpunit/phpunit/phpunit.xsd"
+         bootstrap="vendor/autoload.php"
+         colors="true"
+         failOnWarning="true"
+         failOnRisky="true"
+         beStrictAboutOutputDuringTests="true"
+         beStrictAboutTestsThatDoNotTestAnything="true"
+         convertDeprecationsToExceptions="false">
+    <testsuites>
+        <testsuite name="unit">
+            <directory suffix="Test.php">tests/Unit</directory>
+        </testsuite>
+    </testsuites>
+    <coverage>
+        <include>
+            <directory suffix=".php">src</directory>
+        </include>
+    </coverage>
+</phpunit>
diff --git a/readme.txt b/readme.txt
index 486e55a..1cf7b36 100644
--- a/readme.txt
+++ b/readme.txt
@@ -56,8 +56,23 @@ Every check is a Composer script:
 - `composer lint`: php -l on every file
 - `composer cs`: PHPCS
 - `composer stan`: PHPStan
+- `composer test`: PHPUnit
 - `composer ci`: all of the above, in this order
 
+`composer install` brings in WordPress, the WordPress test suite and WooCommerce,
+so the tests only need a MySQL/MariaDB database they are allowed to wipe on every
+run. The connection comes from `WP_TESTS_DB_NAME` (`wordpress_test`),
+`WP_TESTS_DB_USER` (`root`), `WP_TESTS_DB_PASSWORD` (`root`), `WP_TESTS_DB_HOST`
+(`mariadb`) and `WP_TESTS_TABLE_PREFIX` (`wptests_`).
+
+On the local SaaS stack:
+
+    docker exec wordpress-docker-mariadb-1 \
+      mariadb -uroot -proot -e 'CREATE DATABASE IF NOT EXISTS wordpress_test;'
+
+    docker exec -w /var/www/html/wp-content/themes/libresign \
+      wordpress-docker-wordpress-1 composer test
+
 == Development notes ==
 
 - Site fragment sync/render bootstrap: `inc/footer-fragment.php`
diff --git a/src/Logo.php b/src/Logo.php
new file mode 100644
index 0000000..4ca61ec
--- /dev/null
+++ b/src/Logo.php
@@ -0,0 +1,48 @@
+<?php
+
+namespace LibreSign\WordPressTheme;
+
+final class Logo {
+
+	/**
+	 * @return string[]
+	 */
+	public static function image_urls( string $html ): array {
+		if ( ! preg_match( '/<img[^>]+>/', $html, $tag_matches ) ) {
+			return array();
+		}
+
+		$urls = array();
+
+		if ( preg_match( '/src=["\']([^"\']+)["\']/', $tag_matches[0], $matches ) ) {
+			$urls[] = html_entity_decode( $matches[1] );
+		}
+
+		if ( preg_match( '/srcset=["\']([^"\']+)["\']/', $tag_matches[0], $matches ) ) {
+			foreach ( explode( ',', html_entity_decode( $matches[1] ) ) as $candidate ) {
+				$url = trim( explode( ' ', trim( $candidate ) )[0] );
+				if ( $url ) {
+					$urls[] = $url;
+				}
+			}
+		}
+
+		return $urls;
+	}
+
+	public static function with_fallback( string $html, string $light_logo_url, string $dark_logo_url ): string {
+		$patched = preg_replace( '/\ssrcset=["\'][^"\']*["\']/', '', $html ) ?? $html;
+		$patched = preg_replace( '/\ssizes=["\'][^"\']*["\']/', '', $patched ) ?? $patched;
+		$patched = preg_replace( '/(<img[^>]+)src=["\'][^"\']*["\']/', '$1src="' . $light_logo_url . '"', $patched ) ?? $patched;
+
+		return preg_replace(
+			'/(<img[^>]+>)/',
+			'<picture>'
+				. '<source media="(prefers-color-scheme: dark)" srcset="' . $dark_logo_url . '">'
+				. '<source media="(prefers-color-scheme: light)" srcset="' . $light_logo_url . '">'
+				. '$1'
+				. '</picture>',
+			$patched
+		) ?? $patched;
+	}
+}
diff --git a/src/SiteDeploy.php b/src/SiteDeploy.php
new file mode 100644
index 0000000..ba75e35
--- /dev/null
+++ b/src/SiteDeploy.php
@@ -0,0 +1,101 @@
+<?php
+
+namespace LibreSign\WordPressTheme;
+
+final class SiteDeploy {
+
+	public static function signature_matches( string $body, string $signature, string $secret ): bool {
+		$secret    = trim( $secret );
+		$signature = trim( $signature );
+
+		if ( '' === $body || '' === $secret || '' === $signature ) {
+			return false;
+		}
+
+		if ( 0 === stripos( $signature, 'sha256=' ) ) {
+			$signature = substr( $signature, 7 );
+		}
+
+		if ( ! ctype_xdigit( $signature ) ) {
+			return false;
+		}
+
+		return hash_equals( hash_hmac( 'sha256', $body, $secret ), strtolower( $signature ) );
+	}
+
+	public static function is_github_delivery( string $user_agent ): bool {
+		return str_starts_with( trim( $user_agent ), 'GitHub-Hookshot/' );
+	}
+
+	/**
+	 * @param array<string, mixed> $payload
+	 */
+	public static function workflow_name( array $payload ): string {
+		$run_name = self::text( $payload, 'workflow_run', 'name' );
+
+		return '' !== $run_name ? $run_name : self::text( $payload, 'workflow', 'name' );
+	}
+
+	/**
+	 * @param array<string, mixed> $payload
+	 */
+	public static function is_production_deploy( array $payload, string $repository, string $branch, string $workflow ): bool {
+		return self::text( $payload, 'repository', 'full_name' ) === $repository
+			&& self::text( $payload, 'action' ) === 'completed'
+			&& self::text( $payload, 'workflow_run', 'conclusion' ) === 'success'
+			&& self::text( $payload, 'workflow_run', 'head_branch' ) === $branch
+			&& self::workflow_name( $payload ) === $workflow;
+	}
+
+	/**
+	 * @param array<string, mixed> $payload
+	 */
+	public static function is_deploy_starting( array $payload, string $repository ): bool {
+		return self::text( $payload, 'repository', 'full_name' ) === $repository
+			&& self::text( $payload, 'action' ) === 'in_progress'
+			&& self::text( $payload, 'workflow_run', 'head_branch' ) === 'main'
+			&& self::workflow_name( $payload ) === 'Deploy';
+	}
+
+	public static function merged_pull_request( mixed $pull_requests ): int {
+		if ( ! is_array( $pull_requests ) ) {
+			return 0;
+		}
+
+		foreach ( $pull_requests as $pull_request ) {
+			if ( ! empty( $pull_request['merged_at'] ) ) {
+				return (int) $pull_request['number'];
+			}
+		}
+
+		return 0;
+	}
+
+	/**
+	 * @param array<string, string[]> $synced
+	 */
+	public static function sync_comment( array $synced, string $origin ): string {
+		$header_locales = implode( ', ', (array) ( $synced['header'] ?? array() ) );
+		$footer_locales = implode( ', ', (array) ( $synced['footer'] ?? array() ) );
+
+		return "✅ **Header and footer fragments updated in production!**\n\n" .
+			"| Fragment | Synced locales |\n" .
+			"|----------|----------------|\n" .
+			"| Header | `{$header_locales}` |\n" .
+			"| Footer | `{$footer_locales}` |\n\n" .
+			"Source: {$origin}";
+	}
+
+	/**
+	 * @param array<string, mixed> $payload
+	 */
+	private static function text( array $payload, string $key, string $subkey = '' ): string {
+		$value = $payload[ $key ] ?? '';
+
+		if ( '' !== $subkey ) {
+			$value = is_array( $value ) ? ( $value[ $subkey ] ?? '' ) : '';
+		}
+
+		return is_scalar( $value ) ? trim( (string) $value ) : '';
+	}
+}
diff --git a/src/SiteFragment.php b/src/SiteFragment.php
new file mode 100644
index 0000000..d9a4f2a
--- /dev/null
+++ b/src/SiteFragment.php
@@ -0,0 +1,125 @@
+<?php
+
+namespace LibreSign\WordPressTheme;
+
+final class SiteFragment {
+
+	public const DEFAULT_LOCALE_KEY = 'default';
+
+	public static function origin( string $origin ): string {
+		return rtrim( trim( $origin ), '/' );
+	}
+
+	public static function language_tag( string $locale ): string {
+		$parts = array_values( array_filter( explode( '-', trim( str_replace( '_', '-', $locale ) ) ), static fn ( $part ) => '' !== $part ) );
+		if ( empty( $parts ) ) {
+			return '';
+		}
+
+		$parts[0] = strtolower( $parts[0] );
+
+		foreach ( $parts as $index => $part ) {
+			if ( 0 === $index ) {
+				continue;
+			}
+
+			if ( 2 === strlen( $part ) || 3 === strlen( $part ) ) {
+				$parts[ $index ] = strtoupper( $part );
+			} elseif ( 4 === strlen( $part ) ) {
+				$parts[ $index ] = ucfirst( strtolower( $part ) );
+			}
+		}
+
+		return implode( '-', $parts );
+	}
+
+	public static function storage_key( string $locale ): string {
+		$tag = self::language_tag( $locale );
+
+		return '' === $tag ? self::DEFAULT_LOCALE_KEY : $tag;
+	}
+
+	public static function url( string $origin, string $fragment_type, string $locale ): string {
+		$tag = self::language_tag( $locale );
+
+		return self::origin( $origin ) . '/fragments/' . ( '' === $tag ? '' : rawurlencode( $tag ) . '/' ) . $fragment_type;
+	}
+
+	/**
+	 * @return array{css: string, js: string}|null
+	 */
+	public static function asset_urls( string $html ): ?array {
+		if (
+			! preg_match( '/\bdata-fragment-css=("|\')([^"\']+)\1/i', $html, $css_matches )
+			|| ! preg_match( '/\bdata-fragment-js=("|\')([^"\']+)\1/i', $html, $js_matches )
+		) {
+			return null;
+		}
+
+		return array(
+			'css' => $css_matches[2],
+			'js'  => $js_matches[2],
+		);
+	}
+
+	/**
+	 * @return string[]
+	 */
+	public static function linked_locales( string $header_html ): array {
+		$locales = array();
+
+		if ( preg_match_all( '~\/fragments(?:\/([^\/#?"\']+))?\/header(?:[\/#?"\']|$)~i', $header_html, $matches ) ) {
+			foreach ( $matches[1] as $locale ) {
+				$locales[] = self::language_tag( rawurldecode( $locale ) );
+			}
+		}
+
+		$locales[] = '';
+
+		return array_values( array_unique( $locales ) );
+	}
+
+	/**
+	 * @param string[] $candidates
+	 * @return string[]
+	 */
+	public static function lookup_keys( array $candidates ): array {
+		$keys = array();
+
+		foreach ( $candidates as $candidate ) {
+			$tag = self::language_tag( $candidate );
+			if ( '' === $tag ) {
+				continue;
+			}
+
+			$keys[] = $tag;
+			$keys[] = strtolower( (string) strtok( $tag, '-' ) );
+		}
+
+		$keys[] = self::DEFAULT_LOCALE_KEY;
+
+		return array_values( array_unique( $keys ) );
+	}
+
+	public static function without_asset_attributes( string $html ): string {
+		$html = preg_replace( '/\s+data-fragment-css=("|\')[^"\']+\1/i', '', $html ) ?? $html;
+
+		return preg_replace( '/\s+data-fragment-js=("|\')[^"\']+\1/i', '', $html ) ?? $html;
+	}
+
+	public static function with_absolute_urls( string $content, string $origin ): string {
+		$origin = self::origin( $origin );
+
+		$content = preg_replace_callback(
+			'/\b(href|src|action|poster)=("|\')(\/(?!\/)[^"\']*)\2/i',
+			static fn ( $matches ) => $matches[1] . '=' . $matches[2] . $origin . $matches[3] . $matches[2],
+			$content
+		) ?? $content;
+
+		return preg_replace_callback(
+			'~url\(\s*(?:("|\')\s*)?(\/(?!\/)[^)"\']+)(?:\s*\1)?\s*\)~i',
+			static fn ( $matches ) => 'url(' . $matches[1] . $origin . $matches[2] . $matches[1] . ')',
+			$content
+		) ?? $content;
+	}
+}
diff --git a/src/TaxId.php b/src/TaxId.php
new file mode 100644
index 0000000..8bacf4f
--- /dev/null
+++ b/src/TaxId.php
@@ -0,0 +1,74 @@
+<?php
+
+namespace LibreSign\WordPressTheme;
+
+final class TaxId {
+
+	public static function error_code( string $value ): string {
+		$value = trim( $value );
+
+		if ( '' === $value ) {
+			return 'libresign_cpf_cnpj_required';
+		}
+
+		if ( 14 === strlen( self::without_formatting( $value ) ) ) {
+			return self::valid_cnpj( $value ) ? '' : 'invalid_cnpj';
+		}
+
+		if ( 11 === strlen( self::digits( $value ) ) ) {
+			return self::valid_cpf( $value ) ? '' : 'invalid_cpf';
+		}
+
+		return 'invalid_cpf_cnpj';
+	}
+
+	public static function valid_cpf( string $cpf ): bool {
+		$cpf = self::digits( $cpf );
+		if ( strlen( $cpf ) !== 11 || preg_match( '/^(\d)\1{10}$/', $cpf ) ) {
+			return false;
+		}
+
+		$check_digit = static function ( string $digits, int $weight ): int {
+			$sum = 0;
+			for ( $position = 0; $position < strlen( $digits ); $position++ ) {
+				$sum += (int) $digits[ $position ] * $weight--;
+			}
+			$remainder = $sum % 11;
+
+			return $remainder < 2 ? 0 : 11 - $remainder;
+		};
+
+		return $check_digit( substr( $cpf, 0, 9 ), 10 ) === (int) $cpf[9]
+			&& $check_digit( substr( $cpf, 0, 10 ), 11 ) === (int) $cpf[10];
+	}
+
+	public static function valid_cnpj( string $cnpj ): bool {
+		$cnpj = self::without_formatting( $cnpj );
+		if ( strlen( $cnpj ) !== 14 || preg_match( '/^(\d)\1{13}$/', $cnpj ) || ! preg_match( '/^[A-Z0-9]{12}\d{2}$/', $cnpj ) ) {
+			return false;
+		}
+
+		$check_digit = static function ( string $characters ): int {
+			$sum    = 0;
+			$weight = 2;
+			for ( $position = strlen( $characters ) - 1; $position >= 0; $position-- ) {
+				$sum   += ( ord( $characters[ $position ] ) - 48 ) * $weight;
+				$weight = 9 === $weight ? 2 : $weight + 1;
+			}
+			$remainder = $sum % 11;
+
+			return $remainder < 2 ? 0 : 11 - $remainder;
+		};
+
+		return $check_digit( substr( $cnpj, 0, 12 ) ) === (int) $cnpj[12]
+			&& $check_digit( substr( $cnpj, 0, 13 ) ) === (int) $cnpj[13];
+	}
+
+	private static function digits( string $value ): string {
+		return (string) preg_replace( '/[^0-9]/', '', $value );
+	}
+
+	private static function without_formatting( string $value ): string {
+		return strtoupper( (string) preg_replace( '/[\.\-\/]/', '', $value ) );
+	}
+}
diff --git a/tests/Integration/Inc/AccountTest.php b/tests/Integration/Inc/AccountTest.php
new file mode 100644
index 0000000..2be5d3f
--- /dev/null
+++ b/tests/Integration/Inc/AccountTest.php
@@ -0,0 +1,216 @@
+<?php
+
+namespace LibreSign\WordPressTheme\Tests\Integration\Inc;
+
+use LibreSign\WordPressTheme\Tests\Support\StoreFactory;
+use WP_UnitTestCase;
+
+final class AccountTest extends WP_UnitTestCase {
+
+	private $store;
+
+	public function set_up() {
+		parent::set_up();
+
+		$this->store = new StoreFactory();
+	}
+
+	public function tear_down() {
+		$_GET     = array();
+		$_REQUEST = array();
+		$_SERVER['REQUEST_URI'] = '';
+		unset( $GLOBALS['wp']->query_vars['lost-password'] );
+		$this->store->empty_cart();
+		add_filter( 'the_content', 'wpautop' );
+		add_filter( 'the_content', 'shortcode_unautop' );
+		set_current_screen( 'front' );
+
+		parent::tear_down();
+	}
+
+	public function test_the_account_is_the_woocommerce_my_account_page() {
+		$this->assertSame( wc_get_page_permalink( 'myaccount' ), libresign_theme_get_account_url() );
+	}
+
+	public function test_goes_back_to_the_page_asked_for() {
+		$_REQUEST['redirect_to'] = '/store/';
+
+		$this->assertSame( '/store/', libresign_theme_get_purchase_redirect_target() );
+	}
+
+	public function test_never_sends_to_another_site() {
+		$_REQUEST['redirect_to'] = 'https://evil.example/';
+
+		$this->assertSame( libresign_theme_get_account_url(), libresign_theme_get_purchase_redirect_target() );
+	}
+
+	public function test_ignores_a_redirect_that_is_not_a_single_url() {
+		$_REQUEST['redirect_to'] = array( '/store/' );
+
+		$this->assertSame( libresign_theme_get_account_url(), libresign_theme_get_purchase_redirect_target() );
+	}
+
+	public function test_goes_to_checkout_while_buying() {
+		$this->store->add_to_cart( $this->store->plan() );
+
+		$this->assertSame( wc_get_checkout_url(), libresign_theme_get_purchase_redirect_target() );
+	}
+
+	public function test_goes_to_the_account_otherwise() {
+		wc_load_cart();
+
+		$this->assertSame( libresign_theme_get_account_url(), libresign_theme_get_purchase_redirect_target() );
+	}
+
+	/**
+	 * @dataProvider provide_lost_password_actions
+	 */
+	public function test_recognizes_the_lost_password_action( $action, $expected ) {
+		$_GET['action'] = $action;
+
+		$this->assertSame( $expected, libresign_theme_is_lost_password_request() );
+	}
+
+	public static function provide_lost_password_actions() {
+		yield 'lost password'          => array( 'lostpassword', true );
+		yield 'in another letter case' => array( 'LostPassword', true );
+		yield 'another action'         => array( 'login', false );
+	}
+
+	public function test_recognizes_the_woocommerce_lost_password_endpoint() {
+		$GLOBALS['wp']->query_vars['lost-password'] = '';
+
+		$this->assertTrue( libresign_theme_is_lost_password_request() );
+	}
+
+	public function test_a_plain_request_is_not_a_lost_password_request() {
+		$this->assertFalse( libresign_theme_is_lost_password_request() );
+	}
+
+	/**
+	 * @dataProvider provide_request_uris
+	 */
+	public function test_recognizes_the_direct_lost_password_route( $request_uri, $expected ) {
+		unset( $_SERVER['REQUEST_URI'] );
+		if ( null !== $request_uri ) {
+			$_SERVER['REQUEST_URI'] = $request_uri;
+		}
+
+		$this->assertSame( $expected, libresign_theme_is_direct_lost_password_route() );
+	}
+
+	public static function provide_request_uris() {
+		yield 'with the trailing slash'    => array( '/lost-password/', true );
+		yield 'without the trailing slash' => array( '/lost-password', true );
+		yield 'with a query string'        => array( '/lost-password/?reset-link-sent=true', true );
+		yield 'under the account page'     => array( '/account/lost-password/', false );
+		yield 'the home page'              => array( '/', false );
+		yield 'no request uri'             => array( null, false );
+	}
+
+	/**
+	 * @dataProvider provide_reset_confirmations
+	 */
+	public function test_recognizes_a_password_reset_confirmation( $query, $expected ) {
+		$_GET = $query;
+
+		$this->assertSame( $expected, libresign_theme_is_password_reset_confirmation() );
+	}
+
+	public static function provide_reset_confirmations() {
+		yield 'a reset link with the user id'    => array( array( 'key' => 'abc', 'id' => '7' ), true );
+		yield 'a reset link with the user login' => array( array( 'key' => 'abc', 'login' => 'ana' ), true );
+		yield 'the set new password step'        => array( array( 'show-reset-form' => 'true' ), true );
+		yield 'the link sent step'               => array( array( 'reset-link-sent' => 'true' ), true );
+		yield 'a key without its user'           => array( array( 'key' => 'abc' ), false );
+		yield 'nothing'                          => array( array(), false );
+	}
+
+	public function test_the_lost_password_form_posts_to_woocommerce() {
+		$_SERVER['REQUEST_URI'] = '/lost-password/';
+
+		ob_start();
+		libresign_theme_render_lost_password_form();
+		$form = (string) ob_get_clean();
+
+		$this->assertStringContainsString( '<input type="hidden" name="wc_reset_password" value="true" />', $form );
+		$this->assertStringContainsString( 'name="woocommerce-lost-password-nonce"', $form );
+		$this->assertStringContainsString( '<input type="text" name="user_login" id="user_login"', $form );
+		$this->assertStringContainsString( '<a href="' . esc_url( libresign_theme_get_account_url() ) . '">Back to sign in</a>', $form );
+	}
+
+	public function test_the_account_page_renders_the_woocommerce_account() {
+		$content = $this->account_page_content();
+
+		$this->assertStringContainsString( 'woocommerce-form-login', $content );
+		$this->assertFalse( has_filter( 'the_content', 'wpautop' ) );
+	}
+
+	public function test_the_account_page_renders_the_lost_password_form() {
+		$this->assertStringContainsString( 'libresign-lost-password__card', $this->account_page_content( array( 'action' => 'lostpassword' ) ) );
+	}
+
+	public function test_the_account_page_leaves_the_reset_confirmation_to_woocommerce() {
+		$content = $this->account_page_content(
+			array(
+				'action'          => 'lostpassword',
+				'show-reset-form' => 'true',
+			)
+		);
+
+		$this->assertStringNotContainsString( 'libresign-lost-password__card', $content );
+		$this->assertStringContainsString( 'woocommerce', $content );
+	}
+
+	public function test_keeps_the_content_of_other_pages() {
+		$this->in_the_loop_of( home_url() );
+
+		$this->assertSame( '<p>Page</p>', libresign_theme_prepend_saas_onboarding_to_content( '<p>Page</p>' ) );
+	}
+
+	public function test_keeps_the_content_outside_the_loop() {
+		add_filter( 'woocommerce_is_account_page', '__return_true' );
+		$this->go_to( home_url() );
+
+		$this->assertSame( '<p>Page</p>', libresign_theme_prepend_saas_onboarding_to_content( '<p>Page</p>' ) );
+	}
+
+	public function test_keeps_the_content_in_the_admin() {
+		add_filter( 'woocommerce_is_account_page', '__return_true' );
+		$this->in_the_loop_of( home_url() );
+		set_current_screen( 'dashboard' );
+
+		$this->assertSame( '<p>Page</p>', libresign_theme_prepend_saas_onboarding_to_content( '<p>Page</p>' ) );
+	}
+
+	/**
+	 * @dataProvider provide_requests_the_direct_route_leaves_alone
+	 */
+	public function test_the_direct_lost_password_route_leaves_other_requests_alone( $request_uri, $query, $account_page ) {
+		$_SERVER['REQUEST_URI'] = $request_uri;
+		$_GET                   = $query;
+		add_filter( 'woocommerce_is_account_page', $account_page ? '__return_true' : '__return_false' );
+
+		$this->expectOutputString( '' );
+
+		libresign_theme_render_direct_lost_password_route();
+	}
+
+	public static function provide_requests_the_direct_route_leaves_alone() {
+		yield 'another route'               => array( '/store/', array(), false );
+		yield 'a reset confirmation'        => array( '/lost-password/', array( 'show-reset-form' => 'true' ), false );
+		yield 'the route of the account'    => array( '/lost-password/', array(), true );
+	}
+
+	private function account_page_content( $query = array() ) {
+		add_filter( 'woocommerce_is_account_page', '__return_true' );
+		$this->in_the_loop_of( add_query_arg( $query, home_url( '/' ) ) );
+
+		return libresign_theme_prepend_saas_onboarding_to_content( '' );
+	}
+
+	private function in_the_loop_of( $url ) {
+		$this->go_to( $url );
+		$GLOBALS['wp_query']->in_the_loop = true;
+	}
+}
diff --git a/tests/Integration/Inc/AssetsTest.php b/tests/Integration/Inc/AssetsTest.php
new file mode 100644
index 0000000..8a7d7a6
--- /dev/null
+++ b/tests/Integration/Inc/AssetsTest.php
@@ -0,0 +1,67 @@
+<?php
+
+namespace LibreSign\WordPressTheme\Tests\Integration\Inc;
+
+use WP_UnitTestCase;
+
+final class AssetsTest extends WP_UnitTestCase {
+
+	public function set_up() {
+		parent::set_up();
+
+		foreach ( array( 'libresign-saas', 'bootstrap-css', 'lineicons', 'libresign-header-footer' ) as $handle ) {
+			wp_dequeue_style( $handle );
+			wp_deregister_style( $handle );
+		}
+		remove_action( 'wp_enqueue_scripts', 'libresign_theme_site_fragment_enqueue_assets', 30 );
+	}
+
+	public function tear_down() {
+		add_action( 'wp_enqueue_scripts', 'libresign_theme_site_fragment_enqueue_assets', 30 );
+
+		parent::tear_down();
+	}
+
+	private function enqueue() {
+		do_action( 'wp_enqueue_scripts' );
+
+		return wp_styles();
+	}
+
+	public function test_the_saas_stylesheet_follows_the_woocommerce_styles() {
+		$style = $this->enqueue()->registered['libresign-saas'];
+
+		$this->assertSame( get_theme_file_uri( 'assets/css/saas.css' ), $style->src );
+		$this->assertSame( array( 'woocommerce-general' ), $style->deps );
+		$this->assertSame( (string) filemtime( get_theme_file_path( 'assets/css/saas.css' ) ), $style->ver );
+	}
+
+	public function test_the_saas_stylesheet_stands_alone_without_the_woocommerce_styles() {
+		$woocommerce_general = wp_styles()->registered['woocommerce-general'] ?? null;
+		remove_action( 'wp_enqueue_scripts', array( 'WC_Frontend_Scripts', 'load_scripts' ) );
+		wp_deregister_style( 'woocommerce-general' );
+
+		$deps = $this->enqueue()->registered['libresign-saas']->deps;
+
+		if ( null !== $woocommerce_general ) {
+			wp_styles()->registered['woocommerce-general'] = $woocommerce_general;
+		}
+
+		$this->assertSame( array(), $deps );
+	}
+
+	public function test_loads_the_assets_the_site_header_and_footer_use() {
+		$styles = $this->enqueue();
+
+		$this->assertSame( get_theme_file_uri( 'assets/vendor/bootstrap/bootstrap-grid.min.css' ), $styles->registered['bootstrap-css']->src );
+		$this->assertSame( get_theme_file_uri( 'assets/vendor/lineicons/lineicons.css' ), $styles->registered['lineicons']->src );
+		$this->assertSame( get_theme_file_uri( 'assets/css/header-footer.css' ), $styles->registered['libresign-header-footer']->src );
+		$this->assertContains( 'libresign-header-footer', $styles->queue );
+	}
+
+	public function test_the_header_and_footer_styles_come_after_the_other_stylesheets() {
+		$queue = $this->enqueue()->queue;
+
+		$this->assertSame( 'libresign-header-footer', end( $queue ) );
+	}
+}
diff --git a/tests/Integration/Inc/CheckoutTest.php b/tests/Integration/Inc/CheckoutTest.php
new file mode 100644
index 0000000..a306fe7
--- /dev/null
+++ b/tests/Integration/Inc/CheckoutTest.php
@@ -0,0 +1,35 @@
+<?php
+
+namespace LibreSign\WordPressTheme\Tests\Integration\Inc;
+
+use WP_Error;
+use WP_UnitTestCase;
+
+final class CheckoutTest extends WP_UnitTestCase {
+
+	private function checkout_errors( $data ) {
+		$errors = new WP_Error();
+		do_action( 'woocommerce_after_checkout_validation', $data, $errors );
+
+		return $errors;
+	}
+
+	public function test_the_terms_checkbox_links_to_the_policy_in_a_new_tab() {
+		$this->assertSame(
+			'I agree to the <a href="https://libresign.coop/privacy-policy" target="_blank" rel="noopener noreferrer">terms and privacy policy</a> before placing the order.',
+			apply_filters( 'woocommerce_get_terms_and_conditions_checkbox_text', '' )
+		);
+	}
+
+	public function test_refuses_an_order_without_the_policy_consent() {
+		$errors = $this->checkout_errors( array( 'terms' => 0 ) );
+
+		$this->assertContains( 'libresign_policy_consent', $errors->get_error_codes() );
+	}
+
+	public function test_accepts_an_order_with_the_policy_consent() {
+		$errors = $this->checkout_errors( array( 'terms' => 1 ) );
+
+		$this->assertNotContains( 'libresign_policy_consent', $errors->get_error_codes() );
+	}
+}
diff --git a/tests/Integration/Inc/CpfCnpjTest.php b/tests/Integration/Inc/CpfCnpjTest.php
new file mode 100644
index 0000000..6a8db00
--- /dev/null
+++ b/tests/Integration/Inc/CpfCnpjTest.php
@@ -0,0 +1,119 @@
+<?php
+
+namespace LibreSign\WordPressTheme\Tests\Integration\Inc;
+
+use Automattic\WooCommerce\Blocks\Domain\Services\CheckoutFields;
+use Automattic\WooCommerce\Blocks\Package;
+use WC_Customer;
+use WC_Order;
+use WP_Error;
+use WP_REST_Request;
+use WP_UnitTestCase;
+
+final class CpfCnpjTest extends WP_UnitTestCase {
+
+	public function test_registers_the_field_in_the_address_form() {
+		__internal_woocommerce_blocks_deregister_checkout_field( 'libresign/cpf-cnpj' );
+
+		libresign_theme_register_cpf_cnpj_field();
+
+		$field = Package::container()->get( CheckoutFields::class )->get_additional_fields()['libresign/cpf-cnpj'];
+
+		$this->assertSame( 'CPF or CNPJ', $field['label'] );
+		$this->assertSame( 'address', $field['location'] );
+		$this->assertFalse( $field['required'] );
+		$this->assertSame( array( 'autocomplete' => 'off' ), $field['attributes'] );
+	}
+
+	/**
+	 * @dataProvider provide_addresses
+	 */
+	public function test_validates_the_field_of_a_brazilian_billing_address( $group, $fields, $errors ) {
+		$validation = new WP_Error();
+
+		do_action( 'woocommerce_blocks_validate_location_address_fields', $validation, $fields, $group );
+
+		$this->assertSame( $errors, $validation->get_error_codes() );
+	}
+
+	public static function provide_addresses() {
+		yield 'a shipping address is not checked'   => array( 'shipping', array( 'country' => 'BR' ), array() );
+		yield 'another country is not checked'      => array( 'billing', array( 'country' => 'US' ), array() );
+		yield 'an address without fields'           => array( 'billing', null, array() );
+		yield 'missing in Brazil'                   => array( 'billing', array( 'country' => 'BR' ), array( 'libresign_cpf_cnpj_required' ) );
+		yield 'blank in Brazil'                     => array( 'billing', array( 'country' => 'BR', 'libresign/cpf-cnpj' => '  ' ), array( 'libresign_cpf_cnpj_required' ) );
+		yield 'a valid cpf'                         => array( 'billing', array( 'country' => 'BR', 'libresign/cpf-cnpj' => '529.982.247-25' ), array() );
+		yield 'an invalid cpf'                      => array( 'billing', array( 'country' => 'BR', 'libresign/cpf-cnpj' => '529.982.247-24' ), array( 'invalid_cpf' ) );
+		yield 'a valid cnpj'                        => array( 'billing', array( 'country' => 'BR', 'libresign/cpf-cnpj' => '11.222.333/0001-81' ), array() );
+		yield 'a valid alphanumeric cnpj'           => array( 'billing', array( 'country' => 'BR', 'libresign/cpf-cnpj' => '12.ABC.345/01DE-35' ), array() );
+		yield 'an invalid cnpj'                     => array( 'billing', array( 'country' => 'BR', 'libresign/cpf-cnpj' => '11.222.333/0001-80' ), array( 'invalid_cnpj' ) );
+		yield 'neither a cpf nor a cnpj in length'  => array( 'billing', array( 'country' => 'BR', 'libresign/cpf-cnpj' => '123456789' ), array( 'invalid_cpf_cnpj' ) );
+	}
+
+	public function test_drops_the_field_from_the_shipping_address_and_keeps_it_on_a_brazilian_billing() {
+		$order = $this->order_with_cpf_cnpj( 'BR' );
+
+		do_action( 'woocommerce_store_api_checkout_update_order_from_request', $order, new WP_REST_Request() );
+
+		$this->assertSame( '', $order->get_meta( '_wc_shipping/libresign/cpf-cnpj' ) );
+		$this->assertSame( '529.982.247-25', $order->get_meta( '_wc_billing/libresign/cpf-cnpj' ) );
+	}
+
+	public function test_drops_the_field_from_an_order_billed_outside_brazil() {
+		$order = $this->order_with_cpf_cnpj( 'US' );
+
+		do_action( 'woocommerce_store_api_checkout_update_order_from_request', $order, new WP_REST_Request() );
+
+		$this->assertSame( '', $order->get_meta( '_wc_shipping/libresign/cpf-cnpj' ) );
+		$this->assertSame( '', $order->get_meta( '_wc_billing/libresign/cpf-cnpj' ) );
+	}
+
+	public function test_drops_the_field_from_a_customer_billed_outside_brazil() {
+		$customer = new WC_Customer();
+		$customer->set_billing_country( 'US' );
+		$customer->update_meta_data( '_wc_billing/libresign/cpf-cnpj', '529.982.247-25' );
+
+		do_action( 'woocommerce_store_api_checkout_update_customer_from_request', $customer, new WP_REST_Request() );
+
+		$this->assertSame( '', $customer->get_meta( '_wc_billing/libresign/cpf-cnpj' ) );
+	}
+
+	public function test_ignores_what_is_not_a_woocommerce_object() {
+		$this->expectNotToPerformAssertions();
+
+		libresign_theme_strip_irrelevant_cpf_cnpj( 'not an order' );
+	}
+
+	public function test_prints_the_field_script_on_the_checkout() {
+		add_filter( 'woocommerce_is_checkout', '__return_true' );
+
+		$footer = $this->footer();
+
+		$this->assertStringContainsString( "var FIELD_KEY         = 'billing_libresign/cpf-cnpj';", $footer );
+		$this->assertStringContainsString( 'var ERROR_MSG         = "Please enter your CPF or CNPJ.";', $footer );
+	}
+
+	public function test_prints_no_field_script_outside_the_checkout() {
+		$this->go_to( home_url() );
+
+		$this->assertStringNotContainsString( 'billing_libresign/cpf-cnpj', $this->footer() );
+	}
+
+	private function footer() {
+		$this->setExpectedDeprecated( 'the_block_template_skip_link' );
+
+		ob_start();
+		do_action( 'wp_footer' );
+
+		return (string) ob_get_clean();
+	}
+
+	private function order_with_cpf_cnpj( $country ) {
+		$order = new WC_Order();
+		$order->set_billing_country( $country );
+		$order->update_meta_data( '_wc_billing/libresign/cpf-cnpj', '529.982.247-25' );
+		$order->update_meta_data( '_wc_shipping/libresign/cpf-cnpj', '529.982.247-25' );
+
+		return $order;
+	}
+}
diff --git a/tests/Integration/Inc/FooterFragmentTest.php b/tests/Integration/Inc/FooterFragmentTest.php
new file mode 100644
index 0000000..c2b1d41
--- /dev/null
+++ b/tests/Integration/Inc/FooterFragmentTest.php
@@ -0,0 +1,257 @@
+<?php
+
+namespace LibreSign\WordPressTheme\Tests\Integration\Inc;
+
+use LibreSign\WordPressTheme\Tests\Support\StaticSite;
+use WP_Error;
+use WP_UnitTestCase;
+
+final class FooterFragmentTest extends WP_UnitTestCase {
+
+	private $site;
+
+	public function set_up() {
+		parent::set_up();
+
+		$this->site = new StaticSite();
+	}
+
+	public function tear_down() {
+		foreach ( array( 'header', 'footer' ) as $fragment_type ) {
+			libresign_theme_site_fragment_recursive_delete( libresign_theme_site_fragment_storage_base_dir( $fragment_type ) );
+		}
+
+		parent::tear_down();
+	}
+
+	public function test_stores_each_fragment_type_in_its_own_folder() {
+		$this->assertSame( array( 'header', 'footer' ), libresign_theme_site_fragment_supported_types() );
+		$this->assertStringEndsWith( '/libresign-header', libresign_theme_site_fragment_storage_base_dir( 'header' ) );
+		$this->assertStringEndsWith( '/libresign-footer', libresign_theme_site_fragment_storage_base_url( 'footer' ) );
+	}
+
+	public function test_falls_back_to_the_site_locale() {
+		$this->assertSame( array( 'en-US', '' ), libresign_theme_site_fragment_fallback_locales() );
+	}
+
+	public function test_looks_the_locale_up_from_the_most_specific_to_the_default() {
+		$this->assertSame( array( 'en-US', 'en', 'default' ), libresign_theme_site_fragment_locale_lookup_keys() );
+	}
+
+	public function test_only_a_not_found_is_an_optional_error() {
+		$this->assertTrue( libresign_theme_site_fragment_is_optional_http_error( new WP_Error( 'x', 'x', array( 'status' => 404 ) ) ) );
+		$this->assertFalse( libresign_theme_site_fragment_is_optional_http_error( new WP_Error( 'x', 'x', array( 'status' => 500 ) ) ) );
+		$this->assertFalse( libresign_theme_site_fragment_is_optional_http_error( new WP_Error( 'x', 'x' ) ) );
+	}
+
+	public function test_fetches_a_url() {
+		$this->site->serve( '/fragments/header', '<header></header>' );
+
+		$this->assertSame(
+			array(
+				'code' => 200,
+				'body' => '<header></header>',
+			),
+			libresign_theme_site_fragment_fetch_url( $this->site->origin() . '/fragments/header' )
+		);
+	}
+
+	public function test_a_failing_status_is_an_error_with_the_status() {
+		$error = libresign_theme_site_fragment_fetch_url( $this->site->origin() . '/fragments/header' );
+
+		$this->assertWPError( $error );
+		$this->assertSame( 'libresign_theme_site_fragment_http_status', $error->get_error_code() );
+		$this->assertSame( 404, $error->get_error_data()['status'] );
+	}
+
+	public function test_a_transport_failure_is_an_error() {
+		$this->assertWPError( libresign_theme_site_fragment_fetch_url( 'https://libresign.coop/fragments/header' ) );
+	}
+
+	public function test_syncing_needs_an_origin() {
+		$error = libresign_theme_sync_site_fragments_from_origin( ' ' );
+
+		$this->assertWPError( $error );
+		$this->assertSame( 'libresign_theme_site_fragment_origin_missing', $error->get_error_code() );
+	}
+
+	public function test_collects_every_fragment_in_every_locale_the_site_publishes() {
+		$this->publish_site();
+
+		$collected = libresign_theme_site_fragment_collect_artifacts( $this->site->origin(), array( 'header', 'footer' ), array( 'source_sha' => 'abc123' ) );
+
+		$this->assertSame( array( '', 'pt-BR', 'en-US' ), $collected['locales'] );
+		$this->assertSame(
+			array(
+				'header' => array( 'default', 'pt-BR' ),
+				'footer' => array( 'default', 'pt-BR' ),
+			),
+			$collected['summary']
+		);
+		$this->assertSame(
+			array(
+				'/fragments/header',
+				'/assets/header.css',
+				'/assets/header.js',
+				'/fragments/pt-BR/header',
+				'/fragments/en-US/header',
+				'/fragments/footer',
+				'/assets/footer.css',
+				'/assets/footer.js',
+				'/fragments/pt-BR/footer',
+				'/fragments/en-US/footer',
+			),
+			$this->site->paths()
+		);
+
+		$header = $collected['artifacts'][0];
+		$this->assertSame( '<header><a href="' . $this->site->origin() . '/fragments/pt-BR/header">pt</a><img src="' . $this->site->origin() . '/logo.svg"></header>', $header['html'] );
+		$this->assertSame( 'a{background:url(' . $this->site->origin() . '/bg.png)}', $header['css'] );
+		$this->assertSame( 'console.log("header");', $header['js'] );
+		$this->assertSame( 'abc123', $header['source_sha'] );
+		$this->assertSame( hash( 'sha256', $header['html'] . "\n" . $header['css'] . "\n" . $header['js'] ), $header['version'] );
+	}
+
+	public function test_a_missing_default_header_stops_the_sync() {
+		$error = libresign_theme_site_fragment_collect_artifacts( $this->site->origin(), array( 'header' ) );
+
+		$this->assertWPError( $error );
+		$this->assertSame( 404, $error->get_error_data()['status'] );
+	}
+
+	public function test_a_default_fragment_without_assets_stops_the_sync() {
+		$this->publish_site();
+		$this->site->serve( '/fragments/footer', '<footer></footer>' );
+
+		$error = libresign_theme_site_fragment_collect_artifacts( $this->site->origin(), array( 'header', 'footer' ) );
+
+		$this->assertSame( 'libresign_theme_site_fragment_missing_assets', $error->get_error_code() );
+	}
+
+	public function test_skips_a_locale_whose_fragment_has_no_assets() {
+		$this->publish_site();
+		$this->site->serve( '/fragments/pt-BR/footer', '<footer></footer>' );
+
+		$collected = libresign_theme_site_fragment_collect_artifacts( $this->site->origin(), array( 'footer' ) );
+
+		$this->assertSame( array( 'footer' => array( 'default' ) ), $collected['summary'] );
+	}
+
+	public function test_a_locale_that_fails_for_another_reason_stops_the_sync() {
+		$this->publish_site();
+		$this->site->serve( '/fragments/pt-BR/footer', 'error', 500 );
+
+		$error = libresign_theme_site_fragment_collect_artifacts( $this->site->origin(), array( 'footer' ) );
+
+		$this->assertSame( 500, $error->get_error_data()['status'] );
+	}
+
+	public function test_a_missing_asset_stops_the_sync() {
+		$this->publish_site();
+		$this->site->serve( '/assets/footer.js', 'gone', 404 );
+
+		$error = libresign_theme_site_fragment_collect_artifacts( $this->site->origin(), array( 'footer' ) );
+
+		$this->assertSame( 404, $error->get_error_data()['status'] );
+	}
+
+	public function test_stores_the_synced_fragments_with_their_manifest() {
+		$this->publish_site();
+
+		$result = libresign_theme_sync_site_fragments_from_origin( $this->site->origin() . '/', array(), array( 'source_url' => 'https://github.com/run/1' ) );
+
+		$this->assertSame( $this->site->origin(), $result['origin'] );
+		$this->assertSame( array( 'default', 'pt-BR' ), $result['synced']['footer'] );
+
+		$folder   = libresign_theme_site_fragment_storage_base_dir( 'footer' ) . '/pt-BR';
+		$manifest = json_decode( (string) file_get_contents( $folder . '/manifest.json' ), true );
+
+		$this->assertSame( '<footer lang="pt-BR"></footer>', file_get_contents( $folder . '/footer.html' ) );
+		$this->assertSame( 'footer{}', file_get_contents( $folder . '/footer.css' ) );
+		$this->assertSame( 'console.log("footer");', file_get_contents( $folder . '/footer.js' ) );
+		$this->assertSame( 'pt-BR', $manifest['locale_key'] );
+		$this->assertSame( 'https://github.com/run/1', $manifest['source_url'] );
+		$this->assertSame( libresign_theme_site_fragment_storage_base_url( 'footer' ) . '/pt-BR', $manifest['base_url'] );
+	}
+
+	public function test_a_new_sync_replaces_the_locales_stored_before() {
+		wp_mkdir_p( libresign_theme_site_fragment_storage_base_dir( 'header' ) . '/fr' );
+		$this->publish_site();
+
+		libresign_theme_sync_site_fragments_from_origin( $this->site->origin() );
+
+		$this->assertDirectoryDoesNotExist( libresign_theme_site_fragment_storage_base_dir( 'header' ) . '/fr' );
+		$this->assertDirectoryExists( libresign_theme_site_fragment_storage_base_dir( 'header' ) . '/default' );
+	}
+
+	public function test_a_failed_sync_keeps_the_stored_fragments() {
+		wp_mkdir_p( libresign_theme_site_fragment_storage_base_dir( 'header' ) . '/fr' );
+
+		$this->assertWPError( libresign_theme_sync_site_fragments_from_origin( $this->site->origin() ) );
+		$this->assertDirectoryExists( libresign_theme_site_fragment_storage_base_dir( 'header' ) . '/fr' );
+	}
+
+	public function test_renders_and_enqueues_the_stored_fragments_in_place_of_the_template_parts() {
+		$this->store(
+			array(
+				array( 'header', 'default', '<header>stored</header>' ),
+				array( 'footer', 'default', '<footer>en</footer>' ),
+				array( 'footer', 'en', '<footer>en-generic</footer>' ),
+				array( 'footer', 'en-US', '<footer>en-US</footer>' ),
+			)
+		);
+
+		do_action( 'wp_enqueue_scripts' );
+
+		$this->assertSame( '<header>stored</header>', apply_filters( 'render_block_core/template-part', '<header>theme</header>', array( 'attrs' => array( 'slug' => 'header' ) ) ) );
+		$this->assertSame( '<footer>en-US</footer>', apply_filters( 'render_block_core/template-part', '<footer>theme</footer>', array( 'attrs' => array( 'slug' => 'footer' ) ) ) );
+		$this->assertSame( '<aside>theme</aside>', apply_filters( 'render_block_core/template-part', '<aside>theme</aside>', array( 'attrs' => array( 'slug' => 'sidebar' ) ) ) );
+		$this->assertSame( libresign_theme_site_fragment_storage_base_url( 'header' ) . '/default/header.css', wp_styles()->registered['libresign-site-header-fragment']->src );
+		$this->assertSame( libresign_theme_site_fragment_storage_base_url( 'footer' ) . '/en-US/footer.js', wp_scripts()->registered['libresign-site-footer-fragment']->src );
+		$this->assertSame( 'module', wp_scripts()->get_data( 'libresign-site-header-fragment', 'type' ) );
+	}
+
+	private function store( $fragments ) {
+		$artifacts = array();
+
+		foreach ( $fragments as list( $fragment_type, $locale_key, $html ) ) {
+			$artifacts[] = array(
+				'fragment_type' => $fragment_type,
+				'locale'        => 'default' === $locale_key ? '' : $locale_key,
+				'locale_key'    => $locale_key,
+				'fragment_url'  => '',
+				'css_url'       => '',
+				'js_url'        => '',
+				'generated_at'  => '',
+				'source_sha'    => '',
+				'source_url'    => '',
+				'html'          => $html,
+				'css'           => '',
+				'js'            => '',
+				'version'       => '1',
+			);
+		}
+
+		libresign_theme_site_fragment_persist_artifacts(
+			array(
+				'artifacts' => $artifacts,
+				'summary'   => array(),
+			)
+		);
+	}
+
+	private function publish_site() {
+		$origin = $this->site->origin();
+		$header = '<header data-fragment-css="' . $origin . '/assets/header.css" data-fragment-js="' . $origin . '/assets/header.js"><a href="/fragments/pt-BR/header">pt</a><img src="/logo.svg"></header>';
+		$footer = '<footer data-fragment-css="' . $origin . '/assets/footer.css" data-fragment-js="' . $origin . '/assets/footer.js"></footer>';
+
+		$this->site->serve( '/fragments/header', $header );
+		$this->site->serve( '/fragments/pt-BR/header', $header );
+		$this->site->serve( '/fragments/footer', $footer );
+		$this->site->serve( '/fragments/pt-BR/footer', str_replace( '<footer ', '<footer lang="pt-BR" ', $footer ) );
+		$this->site->serve( '/assets/header.css', 'a{background:url(/bg.png)}' );
+		$this->site->serve( '/assets/header.js', 'console.log("header");' );
+		$this->site->serve( '/assets/footer.css', 'footer{}' );
+		$this->site->serve( '/assets/footer.js', 'console.log("footer");' );
+	}
+}
diff --git a/tests/Integration/Inc/GithubSiteWebhookTest.php b/tests/Integration/Inc/GithubSiteWebhookTest.php
new file mode 100644
index 0000000..f2fdfe4
--- /dev/null
+++ b/tests/Integration/Inc/GithubSiteWebhookTest.php
@@ -0,0 +1,472 @@
+<?php
+
+namespace LibreSign\WordPressTheme\Tests\Integration\Inc;
+
+use LibreSign\WordPressTheme\Tests\Support\GithubApi;
+use LibreSign\WordPressTheme\Tests\Support\StaticSite;
+use WP_Customize_Manager;
+use WP_REST_Request;
+use WP_UnitTestCase;
+
+final class GithubSiteWebhookTest extends WP_UnitTestCase {
+
+	private const SECRET = 'webhook-secret';
+
+	private const ENVIRONMENT = array(
+		'LIBRESIGN_GITHUB_WEBHOOK_SECRET',
+		'LIBRESIGN_FOOTER_WEBHOOK_SECRET',
+		'LIBRESIGN_SITE_ORIGIN',
+		'LIBRESIGN_SITE_DEPLOY_WORKFLOW_NAME',
+		'LIBRESIGN_SITE_DEPLOY_REPOSITORY_NAME',
+		'LIBRESIGN_SITE_DEPLOY_BRANCH_NAME',
+	);
+
+	private $site;
+
+	private $github;
+
+	public function set_up() {
+		parent::set_up();
+
+		$this->clear_environment();
+		$this->site   = new StaticSite();
+		$this->github = new GithubApi();
+		set_theme_mod( 'libresign_github_webhook_secret', self::SECRET );
+		set_theme_mod( 'libresign_site_origin', $this->site->origin() );
+	}
+
+	public function tear_down() {
+		$this->clear_environment();
+
+		foreach ( array( 'header', 'footer' ) as $fragment_type ) {
+			libresign_theme_site_fragment_recursive_delete( libresign_theme_site_fragment_storage_base_dir( $fragment_type ) );
+		}
+
+		parent::tear_down();
+	}
+
+	public function test_the_endpoint_is_under_the_rest_api() {
+		$this->assertSame( rest_url( 'libresign/v1/site-deploy-webhook' ), libresign_theme_github_site_webhook_endpoint_url() );
+	}
+
+	public function test_registers_the_settings_in_the_customizer() {
+		require_once ABSPATH . 'wp-includes/class-wp-customize-manager.php';
+		$manager = new WP_Customize_Manager();
+
+		libresign_theme_site_fragment_customize_register( $manager );
+
+		$this->assertNotNull( $manager->get_section( 'libresign_site_fragment' ) );
+		$this->assertSame( 'password', $manager->get_control( 'libresign_github_webhook_secret' )->type );
+		$this->assertSame( 'https://libresign.coop', $manager->get_setting( 'libresign_site_origin' )->default );
+		$this->assertSame( 'pages build and deployment', $manager->get_setting( 'libresign_site_deploy_workflow_name' )->default );
+		$this->assertSame( 'gh-pages', $manager->get_setting( 'libresign_site_deploy_branch_name' )->default );
+	}
+
+	/**
+	 * @dataProvider provide_origins
+	 */
+	public function test_sanitizes_the_site_origin( $value, $origin ) {
+		$this->assertSame( $origin, libresign_theme_site_fragment_sanitize_origin( $value ) );
+	}
+
+	public static function provide_origins() {
+		yield 'an origin'                => array( 'https://libresign.coop', 'https://libresign.coop' );
+		yield 'the trailing slash'       => array( ' https://staging.libresign.coop/ ', 'https://staging.libresign.coop' );
+		yield 'empty uses the default'   => array( '', 'https://libresign.coop' );
+		yield 'a javascript url'         => array( 'javascript:alert(1)', 'https://libresign.coop' );
+	}
+
+	public function test_the_secret_comes_from_the_theme_setting_first() {
+		putenv( 'LIBRESIGN_GITHUB_WEBHOOK_SECRET=from-environment' );
+
+		$this->assertSame( self::SECRET, libresign_theme_github_webhook_secret() );
+	}
+
+	/**
+	 * @dataProvider provide_secret_sources
+	 */
+	public function test_falls_back_through_the_secret_sources( $theme_mods, $environment, $secret ) {
+		remove_theme_mod( 'libresign_github_webhook_secret' );
+		foreach ( $theme_mods as $name => $value ) {
+			set_theme_mod( $name, $value );
+		}
+		foreach ( $environment as $name => $value ) {
+			putenv( $name . '=' . $value );
+		}
+
+		$this->assertSame( $secret, libresign_theme_github_webhook_secret() );
+	}
+
+	public static function provide_secret_sources() {
+		yield 'the environment'                => array( array(), array( 'LIBRESIGN_GITHUB_WEBHOOK_SECRET' => ' env ' ), 'env' );
+		yield 'the old footer setting'         => array( array( 'libresign_footer_webhook_secret' => 'footer' ), array(), 'footer' );
+		yield 'the old footer environment'     => array( array(), array( 'LIBRESIGN_FOOTER_WEBHOOK_SECRET' => 'footer-env' ), 'footer-env' );
+		yield 'nothing configured'             => array( array(), array(), '' );
+	}
+
+	/**
+	 * @dataProvider provide_deploy_settings
+	 */
+	public function test_reads_the_deploy_settings_from_the_theme_then_the_environment_then_the_default( $setting, $variable, $default, $function ) {
+		remove_theme_mod( $setting );
+		$this->assertSame( $default, $function() );
+
+		putenv( $variable . '=from-environment' );
+		$this->assertStringEndsWith( 'from-environment', $function() );
+
+		set_theme_mod( $setting, 'from-theme' );
+		$this->assertStringEndsWith( 'from-theme', $function() );
+	}
+
+	public static function provide_deploy_settings() {
+		yield 'site origin'      => array( 'libresign_site_origin', 'LIBRESIGN_SITE_ORIGIN', 'https://libresign.coop', 'libresign_theme_site_origin' );
+		yield 'workflow name'    => array( 'libresign_site_deploy_workflow_name', 'LIBRESIGN_SITE_DEPLOY_WORKFLOW_NAME', 'pages build and deployment', 'libresign_theme_site_deploy_workflow_name' );
+		yield 'repository name'  => array( 'libresign_site_deploy_repository_name', 'LIBRESIGN_SITE_DEPLOY_REPOSITORY_NAME', 'LibreSign/site', 'libresign_theme_site_deploy_repository_name' );
+		yield 'branch name'      => array( 'libresign_site_deploy_branch_name', 'LIBRESIGN_SITE_DEPLOY_BRANCH_NAME', 'gh-pages', 'libresign_theme_site_deploy_branch_name' );
+	}
+
+	public function test_syncs_a_deploy_of_the_configured_branch() {
+		set_theme_mod( 'libresign_site_deploy_branch_name', 'production' );
+
+		$response = $this->deliver( 'workflow_run', $this->production_deploy( array( 'workflow_run' => array( 'head_branch' => 'production' ) ) ) );
+
+		$this->assertSame( 'libresign_theme_site_fragment_http_status', $response->get_data()['code'] );
+	}
+
+	public function test_handles_each_delivery_once() {
+		$this->assertTrue( libresign_theme_mark_github_delivery_once( 'delivery-1' ) );
+		$this->assertFalse( libresign_theme_mark_github_delivery_once( 'delivery-1' ) );
+		$this->assertTrue( libresign_theme_mark_github_delivery_once( 'delivery-2' ) );
+	}
+
+	public function test_a_delivery_without_id_is_always_handled() {
+		$this->assertTrue( libresign_theme_mark_github_delivery_once( '' ) );
+		$this->assertTrue( libresign_theme_mark_github_delivery_once( '' ) );
+	}
+
+	public function test_refuses_deliveries_while_the_secret_is_missing() {
+		remove_theme_mod( 'libresign_github_webhook_secret' );
+
+		$response = $this->deliver( 'ping', array() );
+
+		$this->assertSame( 503, $response->get_status() );
+		$this->assertSame( 'libresign_theme_github_webhook_secret_missing', $response->get_data()['code'] );
+	}
+
+	public function test_refuses_a_request_that_is_not_from_github() {
+		$response = $this->deliver( 'ping', array(), array( 'user-agent' => 'curl/8.0' ) );
+
+		$this->assertSame( 403, $response->get_status() );
+		$this->assertSame( 'libresign_theme_github_webhook_invalid_agent', $response->get_data()['code'] );
+	}
+
+	public function test_refuses_a_wrong_signature() {
+		$response = $this->deliver( 'ping', array(), array( 'x-hub-signature-256' => 'sha256=' . str_repeat( '0', 64 ) ) );
+
+		$this->assertSame( 403, $response->get_status() );
+		$this->assertSame( 'libresign_theme_github_webhook_invalid_signature', $response->get_data()['code'] );
+	}
+
+	public function test_answers_the_ping() {
+		$response = $this->deliver( 'ping', array( 'zen' => 'Design for failure.' ) );
+
+		$this->assertSame( 200, $response->get_status() );
+		$this->assertSame(
+			array(
+				'status'   => 'pong',
+				'endpoint' => libresign_theme_github_site_webhook_endpoint_url(),
+			),
+			$response->get_data()
+		);
+	}
+
+	public function test_ignores_other_events() {
+		$response = $this->deliver( 'push', array() );
+
+		$this->assertSame( 202, $response->get_status() );
+		$this->assertSame(
+			array(
+				'status' => 'ignored',
+				'reason' => 'unsupported_event',
+				'event'  => 'push',
+			),
+			$response->get_data()
+		);
+	}
+
+	public function test_refuses_a_body_that_is_not_json() {
+		$response = $this->deliver( 'workflow_run', 'not json' );
+
+		$this->assertSame( 400, $response->get_status() );
+		$this->assertSame( 'libresign_theme_github_webhook_invalid_payload', $response->get_data()['code'] );
+	}
+
+	public function test_ignores_a_run_that_is_not_the_production_deploy() {
+		$response = $this->deliver( 'workflow_run', $this->production_deploy( array( 'workflow_run' => array( 'conclusion' => 'failure' ) ) ) );
+
+		$this->assertSame( 202, $response->get_status() );
+		$this->assertSame(
+			array(
+				'status'        => 'ignored',
+				'reason'        => 'not_production_deploy',
+				'repository'    => 'LibreSign/site',
+				'workflow_name' => 'pages build and deployment',
+				'head_branch'   => 'gh-pages',
+				'conclusion'    => 'failure',
+			),
+			$response->get_data()
+		);
+		$this->assertSame( array(), $this->site->paths() );
+	}
+
+	public function test_syncs_the_fragments_after_the_production_deploy() {
+		$this->publish_site();
+
+		$response = $this->deliver( 'workflow_run', $this->production_deploy(), array( 'x-github-delivery' => 'delivery-1' ) );
+
+		$this->assertSame( 200, $response->get_status() );
+		$this->assertSame(
+			array(
+				'status'      => 'synced',
+				'delivery_id' => 'delivery-1',
+				'repository'  => 'LibreSign/site',
+				'workflow'    => 'pages build and deployment',
+				'origin'      => $this->site->origin(),
+				'synced'      => array(
+					'header' => array( 'default' ),
+					'footer' => array( 'default' ),
+				),
+			),
+			$response->get_data()
+		);
+		$this->assertSame( '<header></header>', file_get_contents( libresign_theme_site_fragment_storage_base_dir( 'header' ) . '/default/header.html' ) );
+		$this->assertSame( 'synced', get_option( 'libresign_site_fragment_last_sync' )['status'] );
+		$this->assertSame( 'abc123', get_option( 'libresign_site_fragment_last_sync' )['details']['source_sha'] );
+	}
+
+	public function test_ignores_a_delivery_it_already_handled() {
+		$this->publish_site();
+		$this->deliver( 'workflow_run', $this->production_deploy(), array( 'x-github-delivery' => 'delivery-1' ) );
+
+		$response = $this->deliver( 'workflow_run', $this->production_deploy(), array( 'x-github-delivery' => 'delivery-1' ) );
+
+		$this->assertSame( 202, $response->get_status() );
+		$this->assertSame( 'duplicate_delivery', $response->get_data()['reason'] );
+	}
+
+	public function test_reports_and_records_a_failed_sync() {
+		$response = $this->deliver( 'workflow_run', $this->production_deploy() );
+
+		$this->assertSame( 404, $response->get_status() );
+		$this->assertSame( 'libresign_theme_site_fragment_http_status', $response->get_data()['code'] );
+		$this->assertSame( 'error', get_option( 'libresign_site_fragment_last_sync' )['status'] );
+		$this->assertSame( 'libresign_theme_site_fragment_http_status', get_option( 'libresign_site_fragment_last_sync' )['details']['code'] );
+	}
+
+	public function test_comments_on_the_deployed_pull_request_after_the_sync() {
+		$this->publish_site();
+		$this->site->serve( '/_deployment-info.json', '{"pr_number":42,"repository":"LibreSign/site"}' );
+		update_option( 'libresign_github_deploy_token', $this->encrypted( 'ghp_token' ) );
+
+		$this->deliver( 'workflow_run', $this->production_deploy() );
+
+		$comment = $this->github->requests()[0];
+		$this->assertSame( 'POST', $comment['method'] );
+		$this->assertSame( '/repos/LibreSign/site/issues/42/comments', $comment['path'] );
+		$this->assertSame( 'Bearer ghp_token', $comment['headers']['Authorization'] );
+		$this->assertSame(
+			"✅ **Header and footer fragments updated in production!**\n\n| Fragment | Synced locales |\n|----------|----------------|\n| Header | `default` |\n| Footer | `default` |\n\nSource: " . $this->site->origin(),
+			json_decode( $comment['body'], true )['body']
+		);
+	}
+
+	/**
+	 * @dataProvider provide_deployments_without_comment
+	 */
+	public function test_does_not_comment_without_a_pull_request_or_a_token( $deployment_info, $token ) {
+		$this->publish_site();
+		if ( null !== $deployment_info ) {
+			$this->site->serve( '/_deployment-info.json', $deployment_info );
+		}
+		if ( null !== $token ) {
+			update_option( 'libresign_github_deploy_token', $this->encrypted( $token ) );
+		}
+
+		$this->deliver( 'workflow_run', $this->production_deploy() );
+
+		$this->assertSame( array(), $this->github->requests() );
+	}
+
+	public static function provide_deployments_without_comment() {
+		yield 'no deployment info'             => array( null, 'ghp_token' );
+		yield 'a deployment without a pr'      => array( '{"repository":"LibreSign/site"}', 'ghp_token' );
+		yield 'a repository without an owner'  => array( '{"pr_number":42,"repository":"site"}', 'ghp_token' );
+		yield 'no token'                       => array( '{"pr_number":42}', null );
+	}
+
+	public function test_comments_on_the_merged_pull_request_when_the_deploy_starts() {
+		update_option( 'libresign_github_deploy_token', $this->encrypted( 'ghp_token' ) );
+		$this->github->answer_with( '/repos/LibreSign/site/commits/abc123/pulls', '[{"number":41,"merged_at":null},{"number":42,"merged_at":"2026-09-01T00:00:00Z"}]' );
+
+		$response = $this->deliver( 'workflow_run', $this->deploy_starting() );
+
+		$this->assertSame(
+			array(
+				'status' => 'acknowledged',
+				'action' => 'deploy_starting',
+			),
+			$response->get_data()
+		);
+		$this->assertSame( array( '/repos/LibreSign/site/commits/abc123/pulls', '/repos/LibreSign/site/issues/42/comments' ), $this->github->paths() );
+		$this->assertSame(
+			'🚀 Starting production deploy of header and footer fragments...',
+			json_decode( $this->github->requests()[1]['body'], true )['body']
+		);
+	}
+
+	public function test_does_not_comment_when_the_commit_has_no_merged_pull_request() {
+		update_option( 'libresign_github_deploy_token', $this->encrypted( 'ghp_token' ) );
+		$this->github->answer_with( '/repos/LibreSign/site/commits/abc123/pulls', '[{"number":41,"merged_at":null}]' );
+
+		$this->deliver( 'workflow_run', $this->deploy_starting() );
+
+		$this->assertSame( array( '/repos/LibreSign/site/commits/abc123/pulls' ), $this->github->paths() );
+	}
+
+	public function test_does_not_look_for_the_pull_request_without_a_token() {
+		$this->deliver( 'workflow_run', $this->deploy_starting() );
+
+		$this->assertSame( array(), $this->github->requests() );
+	}
+
+	public function test_acknowledges_the_deploy_start_once() {
+		$this->deliver( 'workflow_run', $this->deploy_starting(), array( 'x-github-delivery' => 'delivery-1' ) );
+
+		$response = $this->deliver( 'workflow_run', $this->deploy_starting(), array( 'x-github-delivery' => 'delivery-1' ) );
+
+		$this->assertSame( 'duplicate_delivery', $response->get_data()['reason'] );
+	}
+
+	/**
+	 * @dataProvider provide_pull_request_lookups
+	 */
+	public function test_finds_the_merged_pull_request_of_a_commit( $repository, $response, $pull_request ) {
+		if ( null !== $response ) {
+			$this->github->answer_with( '/repos/LibreSign/site/commits/abc123/pulls', $response );
+		}
+
+		$this->assertSame( $pull_request, libresign_theme_find_pr_for_commit( $repository, 'abc123', 'ghp_token' ) );
+	}
+
+	public static function provide_pull_request_lookups() {
+		yield 'the merged one'               => array( 'LibreSign/site', '[{"number":7,"merged_at":"2026-09-01T00:00:00Z"}]', 7 );
+		yield 'none merged'                  => array( 'LibreSign/site', '[{"number":7,"merged_at":null}]', 0 );
+		yield 'an answer that is not a list' => array( 'LibreSign/site', 'oops', 0 );
+		yield 'the api answers not found'    => array( 'LibreSign/site', null, 0 );
+		yield 'a repository without owner'   => array( 'site', '[]', 0 );
+	}
+
+	public function test_the_pull_request_lookup_survives_a_transport_failure() {
+		remove_filter( 'pre_http_request', array( $this->github, 'answer' ) );
+
+		$this->assertSame( 0, libresign_theme_find_pr_for_commit( 'LibreSign/site', 'abc123', 'ghp_token' ) );
+	}
+
+	public function test_decrypts_the_token_the_plugin_stores() {
+		update_option( 'libresign_github_deploy_token', $this->encrypted( ' ghp_token ' ) );
+
+		$this->assertSame( 'ghp_token', libresign_theme_github_deploy_token() );
+	}
+
+	public function test_has_no_token_until_the_plugin_stores_one() {
+		$this->assertSame( '', libresign_theme_github_deploy_token() );
+	}
+
+	public function test_has_no_token_when_it_cannot_be_decrypted() {
+		update_option( 'libresign_github_deploy_token', base64_encode( 'not encrypted' ) );
+
+		$this->assertSame( '', libresign_theme_github_deploy_token() );
+	}
+
+	private function clear_environment() {
+		foreach ( self::ENVIRONMENT as $variable ) {
+			putenv( $variable );
+		}
+	}
+
+	private function deliver( $event, $payload, $headers = array() ) {
+		$body    = is_string( $payload ) ? $payload : (string) wp_json_encode( $payload );
+		$request = new WP_REST_Request( 'POST', '/libresign/v1/site-deploy-webhook' );
+		$request->set_body( $body );
+
+		$headers = array_merge(
+			array(
+				'user-agent'          => 'GitHub-Hookshot/044aadd',
+				'x-github-event'      => $event,
+				'x-github-delivery'   => wp_generate_uuid4(),
+				'x-hub-signature-256' => 'sha256=' . hash_hmac( 'sha256', $body, self::SECRET ),
+			),
+			$headers
+		);
+		foreach ( $headers as $name => $value ) {
+			$request->set_header( $name, $value );
+		}
+
+		return rest_get_server()->dispatch( $request );
+	}
+
+	private function production_deploy( $changes = array() ) {
+		return array_replace_recursive(
+			array(
+				'action'       => 'completed',
+				'repository'   => array( 'full_name' => 'LibreSign/site' ),
+				'workflow_run' => array(
+					'name'        => 'pages build and deployment',
+					'conclusion'  => 'success',
+					'head_branch' => 'gh-pages',
+					'head_sha'    => 'abc123',
+					'html_url'    => 'https://github.com/LibreSign/site/actions/runs/1',
+					'updated_at'  => '2026-09-01T00:00:00Z',
+				),
+			),
+			$changes
+		);
+	}
+
+	private function deploy_starting( $changes = array() ) {
+		return array_replace_recursive(
+			array(
+				'action'       => 'in_progress',
+				'repository'   => array( 'full_name' => 'LibreSign/site' ),
+				'workflow_run' => array(
+					'name'        => 'Deploy',
+					'head_branch' => 'main',
+					'head_sha'    => 'abc123',
+				),
+			),
+			$changes
+		);
+	}
+
+	private function encrypted( $token ) {
+		return base64_encode(
+			(string) openssl_encrypt(
+				$token,
+				'AES-256-CBC',
+				hash( 'sha256', AUTH_KEY . SECURE_AUTH_SALT ),
+				0,
+				substr( hash( 'sha256', NONCE_SALT ), 0, 16 )
+			)
+		);
+	}
+
+	private function publish_site() {
+		$origin = $this->site->origin();
+
+		$this->site->serve( '/fragments/header', '<header data-fragment-css="' . $origin . '/header.css" data-fragment-js="' . $origin . '/header.js"></header>' );
+		$this->site->serve( '/fragments/footer', '<footer data-fragment-css="' . $origin . '/footer.css" data-fragment-js="' . $origin . '/footer.js"></footer>' );
+		foreach ( array( '/header.css', '/header.js', '/footer.css', '/footer.js' ) as $asset ) {
+			$this->site->serve( $asset, '' );
+		}
+	}
+}
diff --git a/tests/Integration/Inc/LogoTest.php b/tests/Integration/Inc/LogoTest.php
new file mode 100644
index 0000000..7b21b58
--- /dev/null
+++ b/tests/Integration/Inc/LogoTest.php
@@ -0,0 +1,67 @@
+<?php
+
+namespace LibreSign\WordPressTheme\Tests\Integration\Inc;
+
+use WP_UnitTestCase;
+
+final class LogoTest extends WP_UnitTestCase {
+
+	private const UPLOADED_LOGO = 'http://example.org/wp-content/uploads/libresign-logo-test/logo.png';
+
+	private const LIGHT_LOGO = 'https://github.com/LibreSign/site/raw/refs/heads/main/source/assets/images/logo/logo.svg';
+
+	private const DARK_LOGO = 'https://github.com/LibreSign/site/raw/refs/heads/main/source/assets/images/logo/logo-2.svg';
+
+	public function set_up() {
+		parent::set_up();
+
+		wp_mkdir_p( ABSPATH . 'wp-content/uploads/libresign-logo-test' );
+		file_put_contents( ABSPATH . 'wp-content/uploads/libresign-logo-test/logo.png', 'png' );
+	}
+
+	public function tear_down() {
+		unlink( ABSPATH . 'wp-content/uploads/libresign-logo-test/logo.png' );
+		rmdir( ABSPATH . 'wp-content/uploads/libresign-logo-test' );
+
+		parent::tear_down();
+	}
+
+	/**
+	 * @dataProvider provide_logos
+	 */
+	public function test_decides_when_the_logo_needs_the_fallback( $html, $needs_fallback ) {
+		$this->assertSame( $needs_fallback, libresign_theme_custom_logo_needs_fallback( $html ) );
+	}
+
+	public static function provide_logos() {
+		yield 'no logo'                                  => array( '', true );
+		yield 'markup without an image'                  => array( '<a href="/">LibreSign</a>', true );
+		yield 'an image without sources'                 => array( '<img alt="LibreSign">', true );
+		yield 'an uploaded logo that exists'             => array( '<img src="' . self::UPLOADED_LOGO . '">', false );
+		yield 'an uploaded logo that is missing'         => array( '<img src="http://example.org/wp-content/uploads/missing.png">', true );
+		yield 'a missing size among the srcset'          => array( '<img src="' . self::UPLOADED_LOGO . '" srcset="' . self::UPLOADED_LOGO . ' 1x, http://example.org/wp-content/uploads/missing.png 2x">', true );
+		yield 'every srcset size exists'                 => array( '<img src="' . self::UPLOADED_LOGO . '" srcset="' . self::UPLOADED_LOGO . ' 1x, ' . self::UPLOADED_LOGO . ' 2x">', false );
+		yield 'a logo on another host'                   => array( '<img src="https://cdn.example.com/wp-content/uploads/missing.png">', false );
+		yield 'a logo outside the uploads folder'        => array( '<img src="http://example.org/wp-content/themes/missing.png">', false );
+		yield 'a relative logo url'                      => array( '<img src="/wp-content/uploads/missing.png">', false );
+	}
+
+	public function test_keeps_a_logo_whose_files_exist() {
+		$html = '<a href="http://example.org/" class="custom-logo-link"><img src="' . self::UPLOADED_LOGO . '" class="custom-logo"></a>';
+
+		$this->assertSame( $html, apply_filters( 'get_custom_logo', $html, 1 ) );
+	}
+
+	public function test_replaces_a_missing_logo_with_the_libresign_logo_for_each_color_scheme() {
+		$html = '<a href="http://example.org/" class="custom-logo-link"><img src="http://example.org/wp-content/uploads/missing.png" srcset="http://example.org/wp-content/uploads/missing-2x.png 2x" sizes="100px" class="custom-logo"></a>';
+
+		$this->assertSame(
+			'<a href="http://example.org/" class="custom-logo-link"><picture><source media="(prefers-color-scheme: dark)" srcset="' . self::DARK_LOGO . '"><source media="(prefers-color-scheme: light)" srcset="' . self::LIGHT_LOGO . '"><img src="' . self::LIGHT_LOGO . '" class="custom-logo"></picture></a>',
+			apply_filters( 'get_custom_logo', $html, 1 )
+		);
+	}
+
+	public function test_keeps_markup_the_fallback_cannot_patch() {
+		$this->assertSame( '', apply_filters( 'get_custom_logo', '', 1 ) );
+	}
+}
diff --git a/tests/Integration/Inc/PlansTest.php b/tests/Integration/Inc/PlansTest.php
new file mode 100644
index 0000000..e40d4f6
--- /dev/null
+++ b/tests/Integration/Inc/PlansTest.php
@@ -0,0 +1,41 @@
+<?php
+
+namespace LibreSign\WordPressTheme\Tests\Integration\Inc;
+
+use WP_UnitTestCase;
+
+final class PlansTest extends WP_UnitTestCase {
+
+	public function test_falls_back_to_the_shop_when_there_is_no_plans_page() {
+		$this->assertSame( wc_get_page_permalink( 'shop' ), libresign_theme_get_plans_url() );
+	}
+
+	public function test_links_to_the_published_plans_page() {
+		$plans = self::factory()->post->create(
+			array(
+				'post_type' => 'page',
+				'post_name' => 'plans',
+			)
+		);
+
+		$this->assertSame( get_permalink( $plans ), libresign_theme_get_plans_url() );
+	}
+
+	public function test_ignores_a_plans_page_that_is_not_published() {
+		self::factory()->post->create(
+			array(
+				'post_type'   => 'page',
+				'post_name'   => 'plans',
+				'post_status' => 'draft',
+			)
+		);
+
+		$this->assertSame( wc_get_page_permalink( 'shop' ), libresign_theme_get_plans_url() );
+	}
+
+	public function test_falls_back_to_the_home_page_without_a_shop_page() {
+		update_option( 'woocommerce_shop_page_id', 0 );
+
+		$this->assertSame( home_url(), libresign_theme_get_plans_url() );
+	}
+}
diff --git a/tests/Integration/Inc/ProductTest.php b/tests/Integration/Inc/ProductTest.php
new file mode 100644
index 0000000..5869c63
--- /dev/null
+++ b/tests/Integration/Inc/ProductTest.php
@@ -0,0 +1,32 @@
+<?php
+
+namespace LibreSign\WordPressTheme\Tests\Integration\Inc;
+
+use LibreSign\WordPressTheme\Tests\Support\StoreFactory;
+use WP_UnitTestCase;
+
+final class ProductTest extends WP_UnitTestCase {
+
+	private function additional_information( $product ) {
+		ob_start();
+		wc_display_product_attributes( $product );
+
+		return (string) ob_get_clean();
+	}
+
+	public function test_hides_the_attributes_already_offered_as_variations() {
+		$information = $this->additional_information( ( new StoreFactory() )->plan_with_seats() );
+
+		$this->assertStringContainsString( 'Support', $information );
+		$this->assertStringNotContainsString( 'Seats', $information );
+	}
+
+	public function test_keeps_the_attributes_of_a_product_without_variations() {
+		$attributes = array( 'attribute_seats' => array( 'label' => 'Seats' ) );
+
+		$this->assertSame(
+			$attributes,
+			apply_filters( 'woocommerce_display_product_attributes', $attributes, ( new StoreFactory() )->plan() )
+		);
+	}
+}
diff --git a/tests/Integration/Inc/RegistrationTest.php b/tests/Integration/Inc/RegistrationTest.php
new file mode 100644
index 0000000..5222494
--- /dev/null
+++ b/tests/Integration/Inc/RegistrationTest.php
@@ -0,0 +1,103 @@
+<?php
+
+namespace LibreSign\WordPressTheme\Tests\Integration\Inc;
+
+use LibreSign\WordPressTheme\Tests\Support\StoreFactory;
+use WP_Error;
+use WP_UnitTestCase;
+
+final class RegistrationTest extends WP_UnitTestCase {
+
+	private $store;
+
+	public function set_up() {
+		parent::set_up();
+
+		$this->store = new StoreFactory();
+	}
+
+	public function tear_down() {
+		unset( $_POST['libresign_workspace_terms'] );
+		$this->store->empty_cart();
+
+		parent::tear_down();
+	}
+
+	private function registration_errors() {
+		return apply_filters( 'woocommerce_process_registration_errors', new WP_Error(), 'ana', 'secret', 'ana@example.org' );
+	}
+
+	public function test_the_policy_is_the_one_the_footer_links_to() {
+		$this->assertSame( 'https://libresign.coop/privacy-policy', libresign_theme_get_policy_url() );
+	}
+
+	public function test_an_empty_cart_has_no_purchase_in_progress() {
+		wc_load_cart();
+
+		$this->assertFalse( libresign_theme_cart_has_items() );
+	}
+
+	public function test_a_cart_with_a_plan_is_a_purchase_in_progress() {
+		$this->store->add_to_cart( $this->store->plan() );
+
+		$this->assertTrue( libresign_theme_cart_has_items() );
+	}
+
+	public function test_a_cart_that_was_not_loaded_has_no_purchase_in_progress() {
+		WC()->cart = null;
+
+		$this->assertFalse( libresign_theme_cart_has_items() );
+	}
+
+	public function test_refuses_a_workspace_without_the_terms_consent() {
+		$this->assertContains( 'libresign_workspace_terms', $this->registration_errors()->get_error_codes() );
+	}
+
+	public function test_accepts_a_workspace_with_the_terms_consent() {
+		$_POST['libresign_workspace_terms'] = '1';
+
+		$this->assertFalse( $this->registration_errors()->has_errors() );
+	}
+
+	public function test_the_checkout_account_creation_does_not_ask_for_the_workspace_terms() {
+		$errors = apply_filters( 'woocommerce_registration_errors', new WP_Error(), 'ana', 'ana@example.org' );
+
+		$this->assertNotContains( 'libresign_workspace_terms', $errors->get_error_codes() );
+	}
+
+	public function test_records_when_the_customer_agreed_to_the_terms() {
+		$_POST['libresign_workspace_terms'] = '1';
+		$customer                           = self::factory()->user->create();
+
+		do_action( 'woocommerce_created_customer', $customer, array(), false );
+
+		$this->assertSame( 'yes', get_user_meta( $customer, 'libresign_workspace_terms', true ) );
+		$this->assertEqualsWithDelta(
+			strtotime( current_time( 'mysql' ) ),
+			strtotime( get_user_meta( $customer, 'libresign_workspace_terms_date', true ) ),
+			5
+		);
+	}
+
+	public function test_records_nothing_for_a_customer_created_without_the_consent() {
+		$customer = self::factory()->user->create();
+
+		do_action( 'woocommerce_created_customer', $customer, array(), false );
+
+		$this->assertSame( '', get_user_meta( $customer, 'libresign_workspace_terms', true ) );
+	}
+
+	public function test_login_and_registration_lead_to_checkout_while_buying() {
+		$this->store->add_to_cart( $this->store->plan() );
+
+		$this->assertSame( wc_get_checkout_url(), apply_filters( 'woocommerce_login_redirect', home_url(), null ) );
+		$this->assertSame( wc_get_checkout_url(), apply_filters( 'woocommerce_registration_redirect', home_url() ) );
+	}
+
+	public function test_login_and_registration_lead_to_the_account_otherwise() {
+		wc_load_cart();
+
+		$this->assertSame( wc_get_page_permalink( 'myaccount' ), apply_filters( 'woocommerce_login_redirect', home_url(), null ) );
+		$this->assertSame( wc_get_page_permalink( 'myaccount' ), apply_filters( 'woocommerce_registration_redirect', home_url() ) );
+	}
+}
diff --git a/tests/Integration/Inc/ThemeSetupTest.php b/tests/Integration/Inc/ThemeSetupTest.php
new file mode 100644
index 0000000..670365e
--- /dev/null
+++ b/tests/Integration/Inc/ThemeSetupTest.php
@@ -0,0 +1,21 @@
+<?php
+
+namespace LibreSign\WordPressTheme\Tests\Integration\Inc;
+
+use WP_UnitTestCase;
+
+final class ThemeSetupTest extends WP_UnitTestCase {
+
+	public function test_the_theme_is_active() {
+		$this->assertSame( basename( dirname( __DIR__, 3 ) ), get_stylesheet() );
+	}
+
+	public function test_translations_are_read_from_the_theme_languages_folder() {
+		global $wp_textdomain_registry;
+
+		$this->assertSame(
+			trailingslashit( get_template_directory() . '/languages' ),
+			$wp_textdomain_registry->get( 'libresign', 'pt_BR' )
+		);
+	}
+}
diff --git a/tests/Integration/Woocommerce/Myaccount/FormLoginTest.php b/tests/Integration/Woocommerce/Myaccount/FormLoginTest.php
new file mode 100644
index 0000000..5bad5a1
--- /dev/null
+++ b/tests/Integration/Woocommerce/Myaccount/FormLoginTest.php
@@ -0,0 +1,127 @@
+<?php
+
+namespace LibreSign\WordPressTheme\Tests\Integration\Woocommerce\Myaccount;
+
+use LibreSign\WordPressTheme\Tests\Support\StoreFactory;
+use WP_UnitTestCase;
+
+final class FormLoginTest extends WP_UnitTestCase {
+
+	private $store;
+
+	public function set_up() {
+		parent::set_up();
+
+		$this->store = new StoreFactory();
+		wc_load_cart();
+		update_option( 'woocommerce_enable_myaccount_registration', 'yes' );
+		update_option( 'woocommerce_registration_generate_username', 'yes' );
+		update_option( 'woocommerce_registration_generate_password', 'yes' );
+	}
+
+	public function tear_down() {
+		unset( $_POST['username'], $_POST['email'] );
+		$this->store->empty_cart();
+
+		parent::tear_down();
+	}
+
+	private function form() {
+		ob_start();
+		wc_get_template( 'myaccount/form-login.php' );
+
+		return (string) ob_get_clean();
+	}
+
+	private function buying() {
+		$this->store->add_to_cart( $this->store->plan() );
+	}
+
+	public function test_offers_the_plans_to_a_visitor_who_is_not_buying() {
+		$form = $this->form();
+
+		$this->assertStringContainsString( 'id="customer_login"', $form );
+		$this->assertStringContainsString( 'New to LibreSign?', $form );
+		$this->assertStringContainsString( 'href="' . esc_url( libresign_theme_get_plans_url() ) . '">Choose a plan</a>', $form );
+		$this->assertStringNotContainsString( 'woocommerce-form-register', $form );
+	}
+
+	public function test_login_leads_to_the_account_when_not_buying() {
+		$this->assertStringContainsString(
+			'<input type="hidden" name="redirect" value="' . esc_url( libresign_theme_get_account_url() ) . '" />',
+			$this->form()
+		);
+	}
+
+	public function test_creates_the_workspace_while_buying() {
+		$this->buying();
+
+		$form = $this->form();
+
+		$this->assertStringContainsString( 'Create your workspace', $form );
+		$this->assertStringContainsString( 'name="libresign_workspace_terms"', $form );
+		$this->assertStringContainsString( '<a href="https://libresign.coop/privacy-policy" target="_blank" rel="noopener noreferrer">', $form );
+		$this->assertStringContainsString( '>Continue to checkout</button>', $form );
+		$this->assertStringNotContainsString( 'New to LibreSign?', $form );
+	}
+
+	public function test_both_forms_lead_to_checkout_while_buying() {
+		$this->buying();
+
+		$this->assertSame(
+			2,
+			substr_count( $this->form(), '<input type="hidden" name="redirect" value="' . esc_url( wc_get_checkout_url() ) . '" />' )
+		);
+	}
+
+	public function test_shows_only_the_login_while_buying_when_registration_is_off() {
+		$this->buying();
+		update_option( 'woocommerce_enable_myaccount_registration', 'no' );
+
+		$form = $this->form();
+
+		$this->assertStringNotContainsString( 'id="customer_login"', $form );
+		$this->assertStringNotContainsString( 'woocommerce-form-register', $form );
+		$this->assertStringNotContainsString( 'New to LibreSign?', $form );
+	}
+
+	public function test_asks_for_a_password_when_woocommerce_does_not_generate_one() {
+		$this->buying();
+		update_option( 'woocommerce_registration_generate_password', 'no' );
+
+		$form = $this->form();
+
+		$this->assertStringContainsString( 'Set the email and password of your workspace to continue to checkout.', $form );
+		$this->assertStringContainsString( 'id="reg_password"', $form );
+	}
+
+	public function test_sends_a_password_link_when_woocommerce_generates_the_password() {
+		$this->buying();
+
+		$form = $this->form();
+
+		$this->assertStringContainsString( 'Set the email of your workspace to continue to checkout.', $form );
+		$this->assertStringContainsString( 'A link to set a new password will be sent to your email address.', $form );
+		$this->assertStringNotContainsString( 'id="reg_password"', $form );
+	}
+
+	public function test_asks_for_a_username_when_woocommerce_does_not_generate_one() {
+		$this->buying();
+		update_option( 'woocommerce_registration_generate_username', 'no' );
+
+		$this->assertStringContainsString( 'id="reg_username"', $this->form() );
+	}
+
+	public function test_keeps_what_was_typed_escaped() {
+		$this->buying();
+		update_option( 'woocommerce_registration_generate_username', 'no' );
+		$_POST['username'] = 'ana"><b>';
+		$_POST['email']    = 'ana@example.org';
+
+		$form = $this->form();
+
+		$this->assertStringContainsString( 'id="username" autocomplete="username" value="ana&quot;&gt;&lt;b&gt;"', $form );
+		$this->assertStringContainsString( 'id="reg_username" autocomplete="username" value="ana&quot;&gt;&lt;b&gt;"', $form );
+		$this->assertStringContainsString( 'id="reg_email" autocomplete="email" value="ana@example.org"', $form );
+	}
+}
diff --git a/tests/Support/GithubApi.php b/tests/Support/GithubApi.php
new file mode 100644
index 0000000..9895b03
--- /dev/null
+++ b/tests/Support/GithubApi.php
@@ -0,0 +1,53 @@
+<?php
+
+namespace LibreSign\WordPressTheme\Tests\Support;
+
+final class GithubApi {
+
+	private $responses = array();
+
+	private $requests = array();
+
+	public function __construct() {
+		add_filter( 'pre_http_request', array( $this, 'answer' ), 10, 3 );
+	}
+
+	public function answer_with( $path, $body, $status = 200 ) {
+		$this->responses[ $path ] = array( $status, $body );
+	}
+
+	public function answer( $preempt, $args, $url ) {
+		if ( 'api.github.com' !== wp_parse_url( $url, PHP_URL_HOST ) ) {
+			return $preempt;
+		}
+
+		$path             = (string) wp_parse_url( $url, PHP_URL_PATH );
+		$this->requests[] = array(
+			'method'  => $args['method'],
+			'path'    => $path,
+			'headers' => $args['headers'],
+			'body'    => $args['body'] ?? null,
+		);
+
+		list( $status, $body ) = $this->responses[ $path ] ?? array( 404, '{"message":"Not Found"}' );
+
+		return array(
+			'headers'  => array(),
+			'body'     => $body,
+			'response' => array(
+				'code'    => $status,
+				'message' => '',
+			),
+			'cookies'  => array(),
+			'filename' => null,
+		);
+	}
+
+	public function requests() {
+		return $this->requests;
+	}
+
+	public function paths() {
+		return array_column( $this->requests, 'path' );
+	}
+}
diff --git a/tests/Support/StaticSite.php b/tests/Support/StaticSite.php
new file mode 100644
index 0000000..8b47ff3
--- /dev/null
+++ b/tests/Support/StaticSite.php
@@ -0,0 +1,62 @@
+<?php
+
+namespace LibreSign\WordPressTheme\Tests\Support;
+
+use donatj\MockWebServer\MockWebServer;
+use donatj\MockWebServer\RequestInfo;
+use donatj\MockWebServer\Response;
+use donatj\MockWebServer\Responses\NotFoundResponse;
+
+final class StaticSite {
+
+	private static $server;
+
+	private static $sites = 0;
+
+	private $prefix;
+
+	private $offset;
+
+	public function __construct() {
+		++self::$sites;
+		$this->prefix = '/site-' . self::$sites;
+		$this->offset = count( $this->received() );
+	}
+
+	public function origin() {
+		return self::server()->getServerRoot() . $this->prefix;
+	}
+
+	public function serve( $path, $body, $status = 200 ) {
+		self::server()->setResponseOfPath( $this->prefix . $path, new Response( $body, array(), $status ) );
+	}
+
+	public function paths() {
+		return array_map(
+			fn ( RequestInfo $request ) => substr( $request->getRequestUri(), strlen( $this->prefix ) ),
+			array_slice( $this->received(), $this->offset )
+		);
+	}
+
+	private function received() {
+		$requests = array();
+		$request  = self::server()->getRequestByOffset( 0 );
+
+		while ( null !== $request ) {
+			$requests[] = $request;
+			$request    = self::server()->getRequestByOffset( count( $requests ) );
+		}
+
+		return $requests;
+	}
+
+	private static function server() {
+		if ( null === self::$server ) {
+			self::$server = new MockWebServer();
+			self::$server->start();
+			self::$server->setDefaultResponse( new NotFoundResponse() );
+		}
+
+		return self::$server;
+	}
+}
diff --git a/tests/Support/StoreFactory.php b/tests/Support/StoreFactory.php
new file mode 100644
index 0000000..d16fb63
--- /dev/null
+++ b/tests/Support/StoreFactory.php
@@ -0,0 +1,53 @@
+<?php
+
+namespace LibreSign\WordPressTheme\Tests\Support;
+
+use WC_Product_Attribute;
+use WC_Product_Simple;
+use WC_Product_Variable;
+
+final class StoreFactory {
+
+	public function plan( $price = '10' ) {
+		$plan = new WC_Product_Simple();
+		$plan->set_name( 'LibreSign plan' );
+		$plan->set_regular_price( $price );
+		$plan->save();
+
+		return $plan;
+	}
+
+	public function plan_with_seats() {
+		$plan = new WC_Product_Variable();
+		$plan->set_name( 'LibreSign plan with seats' );
+		$plan->set_attributes(
+			array(
+				$this->attribute( 'Seats', array( '5', '10' ), true ),
+				$this->attribute( 'Support', array( 'Email' ), false ),
+			)
+		);
+		$plan->save();
+
+		return $plan;
+	}
+
+	public function add_to_cart( $product ) {
+		wc_load_cart();
+		WC()->cart->add_to_cart( $product->get_id() );
+	}
+
+	public function empty_cart() {
+		wc_load_cart();
+		WC()->cart->empty_cart();
+	}
+
+	private function attribute( $name, $options, $used_for_variations ) {
+		$attribute = new WC_Product_Attribute();
+		$attribute->set_name( $name );
+		$attribute->set_options( $options );
+		$attribute->set_visible( true );
+		$attribute->set_variation( $used_for_variations );
+
+		return $attribute;
+	}
+}
diff --git a/tests/Unit/LogoTest.php b/tests/Unit/LogoTest.php
new file mode 100644
index 0000000..17b52d6
--- /dev/null
+++ b/tests/Unit/LogoTest.php
@@ -0,0 +1,42 @@
+<?php
+
+namespace LibreSign\WordPressTheme\Tests\Unit;
+
+use LibreSign\WordPressTheme\Logo;
+use PHPUnit\Framework\TestCase;
+
+final class LogoTest extends TestCase {
+
+	/**
+	 * @dataProvider provide_logo_markup
+	 */
+	public function test_reads_every_url_the_browser_may_load( $html, $urls ) {
+		$this->assertSame( $urls, Logo::image_urls( $html ) );
+	}
+
+	public static function provide_logo_markup() {
+		yield 'no markup'                   => array( '', array() );
+		yield 'no image'                    => array( '<a href="/">LibreSign</a>', array() );
+		yield 'an image without sources'    => array( '<img alt="LibreSign">', array() );
+		yield 'only src'                    => array( '<img src="/logo.png">', array( '/logo.png' ) );
+		yield 'src and srcset'              => array( '<img src="/logo.png" srcset="/logo.png 1x, /logo-2x.png 2x">', array( '/logo.png', '/logo.png', '/logo-2x.png' ) );
+		yield 'width descriptors'           => array( "<img srcset='/a.png 100w,/b.png 200w'>", array( '/a.png', '/b.png' ) );
+		yield 'encoded entities'            => array( '<img src="/logo.png?a=1&amp;b=2">', array( '/logo.png?a=1&b=2' ) );
+		yield 'only the first image counts' => array( '<img src="/a.png"><img src="/b.png">', array( '/a.png' ) );
+	}
+
+	public function test_replaces_the_image_with_a_logo_for_each_color_scheme() {
+		$this->assertSame(
+			'<a href="/"><picture><source media="(prefers-color-scheme: dark)" srcset="https://example.org/dark.svg"><source media="(prefers-color-scheme: light)" srcset="https://example.org/light.svg"><img src="https://example.org/light.svg" class="custom-logo"></picture></a>',
+			Logo::with_fallback(
+				'<a href="/"><img src="/missing.png" srcset="/missing-2x.png 2x" sizes="100px" class="custom-logo"></a>',
+				'https://example.org/light.svg',
+				'https://example.org/dark.svg'
+			)
+		);
+	}
+
+	public function test_leaves_markup_without_an_image_alone() {
+		$this->assertSame( '<a href="/">LibreSign</a>', Logo::with_fallback( '<a href="/">LibreSign</a>', 'light.svg', 'dark.svg' ) );
+	}
+}
diff --git a/tests/Unit/SiteDeployTest.php b/tests/Unit/SiteDeployTest.php
new file mode 100644
index 0000000..b9221c2
--- /dev/null
+++ b/tests/Unit/SiteDeployTest.php
@@ -0,0 +1,143 @@
+<?php
+
+namespace LibreSign\WordPressTheme\Tests\Unit;
+
+use LibreSign\WordPressTheme\SiteDeploy;
+use PHPUnit\Framework\TestCase;
+
+final class SiteDeployTest extends TestCase {
+
+	private const SECRET = 'webhook-secret';
+
+	/**
+	 * @dataProvider provide_signatures
+	 */
+	public function test_verifies_the_signature( $body, $signature, $secret, $valid ) {
+		$this->assertSame( $valid, SiteDeploy::signature_matches( $body, $signature, $secret ) );
+	}
+
+	public static function provide_signatures() {
+		$body      = '{"zen":"Keep it logically awesome."}';
+		$signature = hash_hmac( 'sha256', $body, self::SECRET );
+
+		yield 'with the sha256 prefix'      => array( $body, 'sha256=' . $signature, self::SECRET, true );
+		yield 'without the prefix'          => array( $body, $signature, self::SECRET, true );
+		yield 'in upper case'               => array( $body, 'SHA256=' . strtoupper( $signature ), self::SECRET, true );
+		yield 'another secret'              => array( $body, 'sha256=' . $signature, 'other', false );
+		yield 'another body'                => array( '{}', 'sha256=' . $signature, self::SECRET, false );
+		yield 'not hexadecimal'             => array( $body, 'sha256=zz', self::SECRET, false );
+		yield 'no signature'                => array( $body, '', self::SECRET, false );
+		yield 'no secret'                   => array( $body, 'sha256=' . $signature, ' ', false );
+		yield 'no body'                     => array( '', 'sha256=' . $signature, self::SECRET, false );
+	}
+
+	/**
+	 * @dataProvider provide_user_agents
+	 */
+	public function test_recognizes_the_github_user_agent( $user_agent, $expected ) {
+		$this->assertSame( $expected, SiteDeploy::is_github_delivery( $user_agent ) );
+	}
+
+	public static function provide_user_agents() {
+		yield 'github'                  => array( 'GitHub-Hookshot/044aadd', true );
+		yield 'github with whitespace'  => array( ' GitHub-Hookshot/044aadd ', true );
+		yield 'a browser'               => array( 'Mozilla/5.0', false );
+		yield 'github in the middle'    => array( 'curl GitHub-Hookshot/1', false );
+	}
+
+	/**
+	 * @dataProvider provide_workflow_names
+	 */
+	public function test_reads_the_workflow_name( $payload, $name ) {
+		$this->assertSame( $name, SiteDeploy::workflow_name( $payload ) );
+	}
+
+	public static function provide_workflow_names() {
+		yield 'from the run'                    => array( array( 'workflow_run' => array( 'name' => ' Deploy ' ) ), 'Deploy' );
+		yield 'from the workflow'               => array( array( 'workflow' => array( 'name' => 'Deploy' ) ), 'Deploy' );
+		yield 'the run wins over the workflow'  => array( array( 'workflow_run' => array( 'name' => 'Run' ), 'workflow' => array( 'name' => 'Workflow' ) ), 'Run' );
+		yield 'none'                            => array( array(), '' );
+		yield 'a name that is not text'         => array( array( 'workflow_run' => array( 'name' => array( 'Deploy' ) ) ), '' );
+	}
+
+	/**
+	 * @dataProvider provide_deploy_runs
+	 */
+	public function test_recognizes_the_production_deploy( $changes, $expected ) {
+		$this->assertSame( $expected, SiteDeploy::is_production_deploy( $this->production_deploy( $changes ), 'LibreSign/site', 'gh-pages', 'pages build and deployment' ) );
+	}
+
+	public static function provide_deploy_runs() {
+		yield 'the production deploy'   => array( array(), true );
+		yield 'another repository'      => array( array( 'repository' => array( 'full_name' => 'LibreSign/other' ) ), false );
+		yield 'still running'           => array( array( 'action' => 'in_progress' ), false );
+		yield 'failed'                  => array( array( 'workflow_run' => array( 'conclusion' => 'failure' ) ), false );
+		yield 'another branch'          => array( array( 'workflow_run' => array( 'head_branch' => 'main' ) ), false );
+		yield 'another workflow'        => array( array( 'workflow_run' => array( 'name' => 'Tests' ) ), false );
+	}
+
+	/**
+	 * @dataProvider provide_deploy_starts
+	 */
+	public function test_recognizes_the_deploy_starting( $changes, $expected ) {
+		$this->assertSame( $expected, SiteDeploy::is_deploy_starting( $this->deploy_starting( $changes ), 'LibreSign/site' ) );
+	}
+
+	public static function provide_deploy_starts() {
+		yield 'the deploy starting on main'  => array( array(), true );
+		yield 'another repository'           => array( array( 'repository' => array( 'full_name' => 'LibreSign/other' ) ), false );
+		yield 'completed'                    => array( array( 'action' => 'completed' ), false );
+		yield 'another branch'               => array( array( 'workflow_run' => array( 'head_branch' => 'gh-pages' ) ), false );
+		yield 'another workflow'             => array( array( 'workflow_run' => array( 'name' => 'Tests' ) ), false );
+	}
+
+	/**
+	 * @dataProvider provide_pull_requests
+	 */
+	public function test_finds_the_merged_pull_request( $pull_requests, $number ) {
+		$this->assertSame( $number, SiteDeploy::merged_pull_request( $pull_requests ) );
+	}
+
+	public static function provide_pull_requests() {
+		yield 'the merged one among others' => array( array( array( 'number' => 41, 'merged_at' => null ), array( 'number' => 42, 'merged_at' => '2026-09-01T00:00:00Z' ) ), 42 );
+		yield 'none merged'                 => array( array( array( 'number' => 41, 'merged_at' => null ) ), 0 );
+		yield 'no pull requests'            => array( array(), 0 );
+		yield 'not a list'                  => array( null, 0 );
+	}
+
+	public function test_lists_the_synced_locales_in_the_comment() {
+		$this->assertSame(
+			"✅ **Header and footer fragments updated in production!**\n\n| Fragment | Synced locales |\n|----------|----------------|\n| Header | `default, pt-BR` |\n| Footer | `` |\n\nSource: https://libresign.coop",
+			SiteDeploy::sync_comment( array( 'header' => array( 'default', 'pt-BR' ) ), 'https://libresign.coop' )
+		);
+	}
+
+	private function production_deploy( $changes = array() ) {
+		return array_replace_recursive(
+			array(
+				'action'       => 'completed',
+				'repository'   => array( 'full_name' => 'LibreSign/site' ),
+				'workflow_run' => array(
+					'name'        => 'pages build and deployment',
+					'conclusion'  => 'success',
+					'head_branch' => 'gh-pages',
+				),
+			),
+			$changes
+		);
+	}
+
+	private function deploy_starting( $changes = array() ) {
+		return array_replace_recursive(
+			array(
+				'action'       => 'in_progress',
+				'repository'   => array( 'full_name' => 'LibreSign/site' ),
+				'workflow_run' => array(
+					'name'        => 'Deploy',
+					'head_branch' => 'main',
+				),
+			),
+			$changes
+		);
+	}
+}
diff --git a/tests/Unit/SiteFragmentTest.php b/tests/Unit/SiteFragmentTest.php
new file mode 100644
index 0000000..9491f35
--- /dev/null
+++ b/tests/Unit/SiteFragmentTest.php
@@ -0,0 +1,116 @@
+<?php
+
+namespace LibreSign\WordPressTheme\Tests\Unit;
+
+use LibreSign\WordPressTheme\SiteFragment;
+use PHPUnit\Framework\TestCase;
+
+final class SiteFragmentTest extends TestCase {
+
+	/**
+	 * @dataProvider provide_locales
+	 */
+	public function test_normalizes_a_locale_into_a_language_tag( $locale, $tag, $storage_key ) {
+		$this->assertSame( $tag, SiteFragment::language_tag( $locale ) );
+		$this->assertSame( $storage_key, SiteFragment::storage_key( $locale ) );
+	}
+
+	public static function provide_locales() {
+		yield 'a wordpress locale'           => array( 'pt_BR', 'pt-BR', 'pt-BR' );
+		yield 'a language alone'             => array( 'FR', 'fr', 'fr' );
+		yield 'a script subtag'              => array( 'zh_hant_tw', 'zh-Hant-TW', 'zh-Hant-TW' );
+		yield 'a numeric region'             => array( 'es-419', 'es-419', 'es-419' );
+		yield 'a long variant stays as is'   => array( 'de-DE-1901x', 'de-DE-1901x', 'de-DE-1901x' );
+		yield 'repeated separators'          => array( 'en--us', 'en-US', 'en-US' );
+		yield 'surrounding whitespace'       => array( ' nb_NO ', 'nb-NO', 'nb-NO' );
+		yield 'only separators'              => array( '-_', '', 'default' );
+		yield 'empty'                        => array( '', '', 'default' );
+	}
+
+	/**
+	 * @dataProvider provide_fragment_urls
+	 */
+	public function test_builds_the_fragment_url( $origin, $fragment_type, $locale, $url ) {
+		$this->assertSame( $url, SiteFragment::url( $origin, $fragment_type, $locale ) );
+	}
+
+	public static function provide_fragment_urls() {
+		yield 'the default header'          => array( 'https://libresign.coop', 'header', '', 'https://libresign.coop/fragments/header' );
+		yield 'a localized footer'          => array( 'https://libresign.coop/', 'footer', 'pt_BR', 'https://libresign.coop/fragments/pt-BR/footer' );
+		yield 'an origin with whitespace'   => array( ' https://libresign.coop/ ', 'header', 'fr', 'https://libresign.coop/fragments/fr/header' );
+	}
+
+	public function test_reads_the_asset_urls_of_a_fragment() {
+		$this->assertSame(
+			array(
+				'css' => 'https://libresign.coop/header.css',
+				'js'  => 'https://libresign.coop/header.js',
+			),
+			SiteFragment::asset_urls( "<header data-fragment-css='https://libresign.coop/header.css' data-fragment-js=\"https://libresign.coop/header.js\"></header>" )
+		);
+	}
+
+	public function test_a_fragment_without_both_asset_urls_has_none() {
+		$this->assertNull( SiteFragment::asset_urls( '<header data-fragment-css="/header.css"></header>' ) );
+	}
+
+	public function test_reads_the_locales_the_header_links_to() {
+		$this->assertSame(
+			array( 'pt-BR', 'fr', '' ),
+			SiteFragment::linked_locales(
+				'<a href="/fragments/pt_BR/header">pt</a><a href="https://libresign.coop/fragments/fr/header#top">fr</a><a href="/fragments/header?x=1">en</a><a href="/fragments/footer">footer</a>'
+			)
+		);
+	}
+
+	public function test_drops_the_asset_attributes_after_syncing() {
+		$this->assertSame(
+			'<header class="site">x</header>',
+			SiteFragment::without_asset_attributes( '<header data-fragment-css="/a.css" class="site" data-fragment-js=\'/a.js\'>x</header>' )
+		);
+	}
+
+	/**
+	 * @dataProvider provide_root_relative_urls
+	 */
+	public function test_points_root_relative_urls_to_the_static_site( $content, $rewritten ) {
+		$this->assertSame( $rewritten, SiteFragment::with_absolute_urls( $content, 'https://libresign.coop/' ) );
+	}
+
+	public static function provide_root_relative_urls() {
+		yield 'a link'                          => array( '<a href="/pricing/">', '<a href="https://libresign.coop/pricing/">' );
+		yield 'an image with single quotes'     => array( "<img src='/logo.svg'>", "<img src='https://libresign.coop/logo.svg'>" );
+		yield 'a form and a video poster'       => array( '<form action="/s"><video poster="/p.png">', '<form action="https://libresign.coop/s"><video poster="https://libresign.coop/p.png">' );
+		yield 'a css url without quotes'        => array( 'a{background:url(/bg.png)}', 'a{background:url(https://libresign.coop/bg.png)}' );
+		yield 'a css url with quotes'           => array( 'a{background:url( "/bg.png" )}', 'a{background:url("https://libresign.coop/bg.png")}' );
+		yield 'a protocol relative url'         => array( '<img src="//cdn.example.com/a.png">', '<img src="//cdn.example.com/a.png">' );
+		yield 'an absolute url'                 => array( '<a href="https://github.com/">', '<a href="https://github.com/">' );
+		yield 'a relative path'                 => array( '<a href="pricing/">', '<a href="pricing/">' );
+	}
+
+	/**
+	 * @dataProvider provide_origins
+	 */
+	public function test_normalizes_an_origin( $origin, $normalized ) {
+		$this->assertSame( $normalized, SiteFragment::origin( $origin ) );
+	}
+
+	public static function provide_origins() {
+		yield 'already normalized'   => array( 'https://libresign.coop', 'https://libresign.coop' );
+		yield 'the trailing slashes' => array( ' https://libresign.coop// ', 'https://libresign.coop' );
+		yield 'empty'                => array( '', '' );
+	}
+
+	/**
+	 * @dataProvider provide_locale_candidates
+	 */
+	public function test_looks_the_locale_up_from_the_most_specific_to_the_default( $candidates, $keys ) {
+		$this->assertSame( $keys, SiteFragment::lookup_keys( $candidates ) );
+	}
+
+	public static function provide_locale_candidates() {
+		yield 'a polylang slug and locale'     => array( array( 'pt', 'pt_BR', 'en_US', 'en_US' ), array( 'pt', 'pt-BR', 'en-US', 'en', 'default' ) );
+		yield 'a script subtag'                => array( array( 'zh_Hant_TW' ), array( 'zh-Hant-TW', 'zh', 'default' ) );
+		yield 'nothing usable'                 => array( array( '', '-' ), array( 'default' ) );
+	}
+}
diff --git a/tests/Unit/TaxIdTest.php b/tests/Unit/TaxIdTest.php
new file mode 100644
index 0000000..19ff5be
--- /dev/null
+++ b/tests/Unit/TaxIdTest.php
@@ -0,0 +1,69 @@
+<?php
+
+namespace LibreSign\WordPressTheme\Tests\Unit;
+
+use LibreSign\WordPressTheme\TaxId;
+use PHPUnit\Framework\TestCase;
+
+final class TaxIdTest extends TestCase {
+
+	/**
+	 * @dataProvider provide_cpfs
+	 */
+	public function test_validates_a_cpf( $cpf, $valid ) {
+		$this->assertSame( $valid, TaxId::valid_cpf( $cpf ) );
+	}
+
+	public static function provide_cpfs() {
+		yield 'digits only'                  => array( '52998224725', true );
+		yield 'formatted'                    => array( '529.982.247-25', true );
+		yield 'another valid one'            => array( '123.456.789-09', true );
+		yield 'wrong first check digit'      => array( '529.982.247-35', false );
+		yield 'wrong second check digit'     => array( '529.982.247-24', false );
+		yield 'every digit the same'         => array( '111.111.111-11', false );
+		yield 'too short'                    => array( '5299822472', false );
+		yield 'too long'                     => array( '529982247250', false );
+		yield 'empty'                        => array( '', false );
+	}
+
+	/**
+	 * @dataProvider provide_cnpjs
+	 */
+	public function test_validates_a_cnpj( $cnpj, $valid ) {
+		$this->assertSame( $valid, TaxId::valid_cnpj( $cnpj ) );
+	}
+
+	public static function provide_cnpjs() {
+		yield 'digits only'                           => array( '11222333000181', true );
+		yield 'formatted'                             => array( '11.222.333/0001-81', true );
+		yield 'alphanumeric'                          => array( '12.ABC.345/01DE-35', true );
+		yield 'alphanumeric in lowercase'             => array( '12.abc.345/01de-35', true );
+		yield 'wrong second check digit'              => array( '11.222.333/0001-80', false );
+		yield 'wrong alphanumeric check digit'        => array( '12.ABC.345/01DE-34', false );
+		yield 'letters in the check digits'           => array( '12.ABC.345/01DE-3A', false );
+		yield 'every digit the same'                  => array( '00.000.000/0000-00', false );
+		yield 'symbols other than the formatting'     => array( '12.ABC.345/01D*-35', false );
+		yield 'too short'                             => array( '1122233300018', false );
+		yield 'empty'                                 => array( '', false );
+	}
+
+	/**
+	 * @dataProvider provide_values
+	 */
+	public function test_names_the_problem_of_a_value( $value, $error_code ) {
+		$this->assertSame( $error_code, TaxId::error_code( $value ) );
+	}
+
+	public static function provide_values() {
+		yield 'empty'                                   => array( '', 'libresign_cpf_cnpj_required' );
+		yield 'blank'                                   => array( '   ', 'libresign_cpf_cnpj_required' );
+		yield 'a valid cpf'                             => array( '529.982.247-25', '' );
+		yield 'a valid cpf with surrounding spaces'     => array( ' 529.982.247-25 ', '' );
+		yield 'an invalid cpf'                          => array( '529.982.247-24', 'invalid_cpf' );
+		yield 'a valid cnpj'                            => array( '11.222.333/0001-81', '' );
+		yield 'a valid alphanumeric cnpj'               => array( '12.abc.345/01de-35', '' );
+		yield 'an invalid cnpj'                         => array( '11.222.333/0001-80', 'invalid_cnpj' );
+		yield 'fourteen characters decide for cnpj'     => array( '529 982 247 25', 'invalid_cnpj' );
+		yield 'neither length'                          => array( '123456789', 'invalid_cpf_cnpj' );
+	}
+}
diff --git a/tests/bootstrap-integration.php b/tests/bootstrap-integration.php
new file mode 100644
index 0000000..8663c88
--- /dev/null
+++ b/tests/bootstrap-integration.php
@@ -0,0 +1,76 @@
+<?php
+
+if ( 'cli' !== PHP_SAPI && 'phpdbg' !== PHP_SAPI ) {
+	exit;
+}
+
+$composer_autoload = dirname( __DIR__ ) . '/vendor/autoload.php';
+
+if ( ! file_exists( $composer_autoload ) ) {
+	echo 'Error: run `composer install` before running the tests.' . PHP_EOL;
+	exit( 1 );
+}
+
+require_once $composer_autoload;
+
+define( 'WP_TESTS_PHPUNIT_POLYFILLS_PATH', dirname( __DIR__ ) . '/vendor-bin/phpunit/vendor/yoast/phpunit-polyfills' );
+
+putenv( 'WP_PHPUNIT__TESTS_CONFIG=' . __DIR__ . '/wp-tests-config.php' );
+
+$wp_phpunit_dir = getenv( 'WP_PHPUNIT__DIR' );
+
+if ( false === $wp_phpunit_dir || '' === $wp_phpunit_dir ) {
+	$wp_phpunit_dir = dirname( __DIR__ ) . '/vendor/wp-phpunit/wp-phpunit';
+}
+
+$test_plugins_dir = dirname( __DIR__ ) . '/vendor/test-plugins';
+$theme_slug       = basename( dirname( __DIR__ ) );
+
+require_once $wp_phpunit_dir . '/includes/functions.php';
+
+tests_add_filter(
+	'muplugins_loaded',
+	static function () use ( $test_plugins_dir ) {
+		require $test_plugins_dir . '/woocommerce/woocommerce.php';
+		register_theme_directory( dirname( __DIR__, 2 ) );
+	}
+);
+
+tests_add_filter(
+	'pre_option_active_plugins',
+	static function () {
+		return array( 'woocommerce/woocommerce.php' );
+	}
+);
+
+tests_add_filter( 'stylesheet', static fn () => $theme_slug );
+tests_add_filter( 'template', static fn () => $theme_slug );
+
+tests_add_filter(
+	'setup_theme',
+	static function () {
+		WC_Install::install();
+	}
+);
+
+tests_add_filter(
+	'pre_http_request',
+	static function ( $preempt, $args, $url ) {
+		if ( false !== $preempt ) {
+			return $preempt;
+		}
+
+		if ( '127.0.0.1' === wp_parse_url( $url, PHP_URL_HOST ) ) {
+			return $preempt;
+		}
+
+		return new WP_Error(
+			'libresign_theme_tests_http_blocked',
+			sprintf( 'Unexpected HTTP request to %s. Stub it with the pre_http_request filter.', $url )
+		);
+	},
+	PHP_INT_MAX,
+	3
+);
+
+require $wp_phpunit_dir . '/includes/bootstrap.php';
diff --git a/tests/wp-tests-config.php b/tests/wp-tests-config.php
new file mode 100644
index 0000000..55caadd
--- /dev/null
+++ b/tests/wp-tests-config.php
@@ -0,0 +1,40 @@
+<?php
+
+if ( 'cli' !== PHP_SAPI && 'phpdbg' !== PHP_SAPI ) {
+	exit;
+}
+
+function env_or_default( $name, $default ) {
+	$value = getenv( $name );
+
+	return false === $value || '' === $value ? $default : $value;
+}
+
+define( 'ABSPATH', rtrim( env_or_default( 'WP_CORE_DIR', dirname( __DIR__ ) . '/vendor/wordpress' ), '/' ) . '/' );
+
+define( 'DB_NAME', env_or_default( 'WP_TESTS_DB_NAME', 'wordpress_test' ) );
+define( 'DB_USER', env_or_default( 'WP_TESTS_DB_USER', 'root' ) );
+define( 'DB_PASSWORD', env_or_default( 'WP_TESTS_DB_PASSWORD', 'root' ) );
+define( 'DB_HOST', env_or_default( 'WP_TESTS_DB_HOST', 'mariadb' ) );
+define( 'DB_CHARSET', 'utf8' );
+define( 'DB_COLLATE', '' );
+
+// phpcs:ignore WordPress.WP.GlobalVariablesOverride.Prohibited -- the WordPress test suite reads this global.
+$table_prefix = env_or_default( 'WP_TESTS_TABLE_PREFIX', 'wptests_' );
+
+define( 'WP_TESTS_DOMAIN', 'example.org' );
+define( 'WP_TESTS_EMAIL', 'admin@example.org' );
+define( 'WP_TESTS_TITLE', 'LibreSign Test Site' );
+define( 'WP_PHP_BINARY', 'php' );
+define( 'WPLANG', '' );
+
+define( 'WP_DEBUG', true );
+
+define( 'AUTH_KEY', 'libresign-theme-tests-auth-key' );
+define( 'SECURE_AUTH_KEY', 'libresign-theme-tests-secure-auth-key' );
+define( 'LOGGED_IN_KEY', 'libresign-theme-tests-logged-in-key' );
+define( 'NONCE_KEY', 'libresign-theme-tests-nonce-key' );
+define( 'AUTH_SALT', 'libresign-theme-tests-auth-salt' );
+define( 'SECURE_AUTH_SALT', 'libresign-theme-tests-secure-auth-salt' );
+define( 'LOGGED_IN_SALT', 'libresign-theme-tests-logged-in-salt' );
+define( 'NONCE_SALT', 'libresign-theme-tests-nonce-salt' );
diff --git a/vendor-bin/phpstan/composer.json b/vendor-bin/phpstan/composer.json
index 02fea08..2788e45 100644
--- a/vendor-bin/phpstan/composer.json
+++ b/vendor-bin/phpstan/composer.json
@@ -2,6 +2,7 @@
     "require-dev": {
         "php-stubs/woocommerce-stubs": "^11.1",
         "phpstan/phpstan": "^2.1",
+        "phpstan/phpstan-phpunit": "^2.0",
         "szepeviktor/phpstan-wordpress": "^2.0"
     },
     "config": {
diff --git a/vendor-bin/phpstan/composer.lock b/vendor-bin/phpstan/composer.lock
index b95eaf8..2a19e98 100644
--- a/vendor-bin/phpstan/composer.lock
+++ b/vendor-bin/phpstan/composer.lock
@@ -4,9 +4,60 @@
         "Read more about it at https://getcomposer.org/doc/01-basic-usage.md#installing-dependencies",
         "This file is @generated automatically"
     ],
-    "content-hash": "a3479c2b5b3a0fc3ce103f1766b67945",
+    "content-hash": "aa062fdfb7c5ae6c6ee505174af098c3",
     "packages": [],
     "packages-dev": [
+        {
+            "name": "phar-io/version",
+            "version": "3.2.1",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/phar-io/version.git",
+                "reference": "4f7fd7836c6f332bb2933569e566a0d6c4cbed74"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/phar-io/version/zipball/4f7fd7836c6f332bb2933569e566a0d6c4cbed74",
+                "reference": "4f7fd7836c6f332bb2933569e566a0d6c4cbed74",
+                "shasum": ""
+            },
+            "require": {
+                "php": "^7.2 || ^8.0"
+            },
+            "type": "library",
+            "autoload": {
+                "classmap": [
+                    "src/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "BSD-3-Clause"
+            ],
+            "authors": [
+                {
+                    "name": "Arne Blankerts",
+                    "email": "arne@blankerts.de",
+                    "role": "Developer"
+                },
+                {
+                    "name": "Sebastian Heuer",
+                    "email": "sebastian@phpeople.de",
+                    "role": "Developer"
+                },
+                {
+                    "name": "Sebastian Bergmann",
+                    "email": "sebastian@phpunit.de",
+                    "role": "Developer"
+                }
+            ],
+            "description": "Library for handling version information and constraints",
+            "support": {
+                "issues": "https://github.com/phar-io/version/issues",
+                "source": "https://github.com/phar-io/version/tree/3.2.1"
+            },
+            "time": "2022-02-21T01:04:05+00:00"
+        },
         {
             "name": "php-stubs/woocommerce-stubs",
             "version": "v11.1.2",
@@ -167,6 +218,64 @@
             ],
             "time": "2026-09-25T09:31:51+00:00"
         },
+        {
+            "name": "phpstan/phpstan-phpunit",
+            "version": "2.0.19",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/phpstan/phpstan-phpunit.git",
+                "reference": "33a190a5e8e69fd18308443a80d4f43f42d43604"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/phpstan/phpstan-phpunit/zipball/33a190a5e8e69fd18308443a80d4f43f42d43604",
+                "reference": "33a190a5e8e69fd18308443a80d4f43f42d43604",
+                "shasum": ""
+            },
+            "require": {
+                "phar-io/version": "^3.2",
+                "php": "^7.4 || ^8.0",
+                "phpstan/phpstan": "^2.2.6"
+            },
+            "conflict": {
+                "phpunit/phpunit": "<7.0"
+            },
+            "require-dev": {
+                "nikic/php-parser": "^5",
+                "php-parallel-lint/php-parallel-lint": "^1.2",
+                "phpstan/phpstan-deprecation-rules": "^2.0",
+                "phpstan/phpstan-strict-rules": "^2.0",
+                "phpunit/phpunit": "^9.6",
+                "shipmonk/name-collision-detector": "^2.1"
+            },
+            "type": "phpstan-extension",
+            "extra": {
+                "phpstan": {
+                    "includes": [
+                        "extension.neon",
+                        "rules.neon"
+                    ]
+                }
+            },
+            "autoload": {
+                "psr-4": {
+                    "PHPStan\\": "src/"
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "description": "PHPUnit extensions and rules for PHPStan",
+            "keywords": [
+                "static analysis"
+            ],
+            "support": {
+                "issues": "https://github.com/phpstan/phpstan-phpunit/issues",
+                "source": "https://github.com/phpstan/phpstan-phpunit/tree/2.0.19"
+            },
+            "time": "2026-09-26T17:07:06+00:00"
+        },
         {
             "name": "szepeviktor/phpstan-wordpress",
             "version": "v2.0.4",
diff --git a/vendor-bin/phpunit/composer.json b/vendor-bin/phpunit/composer.json
new file mode 100644
index 0000000..eaad749
--- /dev/null
+++ b/vendor-bin/phpunit/composer.json
@@ -0,0 +1,13 @@
+{
+    "require-dev": {
+        "donatj/mock-webserver": "^2.7",
+        "phpunit/phpunit": "^9.6",
+        "yoast/phpunit-polyfills": "^4.0"
+    },
+    "config": {
+        "platform": {
+            "php": "8.3"
+        },
+        "sort-packages": true
+    }
+}
diff --git a/vendor-bin/phpunit/composer.lock b/vendor-bin/phpunit/composer.lock
new file mode 100644
index 0000000..0b64a2d
--- /dev/null
+++ b/vendor-bin/phpunit/composer.lock
@@ -0,0 +1,1985 @@
+{
+    "_readme": [
+        "This file locks the dependencies of your project to a known state",
+        "Read more about it at https://getcomposer.org/doc/01-basic-usage.md#installing-dependencies",
+        "This file is @generated automatically"
+    ],
+    "content-hash": "87353b315b460f275eb01bd22133e528",
+    "packages": [],
+    "packages-dev": [
+        {
+            "name": "doctrine/instantiator",
+            "version": "2.0.0",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/doctrine/instantiator.git",
+                "reference": "c6222283fa3f4ac679f8b9ced9a4e23f163e80d0"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/doctrine/instantiator/zipball/c6222283fa3f4ac679f8b9ced9a4e23f163e80d0",
+                "reference": "c6222283fa3f4ac679f8b9ced9a4e23f163e80d0",
+                "shasum": ""
+            },
+            "require": {
+                "php": "^8.1"
+            },
+            "require-dev": {
+                "doctrine/coding-standard": "^11",
+                "ext-pdo": "*",
+                "ext-phar": "*",
+                "phpbench/phpbench": "^1.2",
+                "phpstan/phpstan": "^1.9.4",
+                "phpstan/phpstan-phpunit": "^1.3",
+                "phpunit/phpunit": "^9.5.27",
+                "vimeo/psalm": "^5.4"
+            },
+            "type": "library",
+            "autoload": {
+                "psr-4": {
+                    "Doctrine\\Instantiator\\": "src/Doctrine/Instantiator/"
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Marco Pivetta",
+                    "email": "ocramius@gmail.com",
+                    "homepage": "https://ocramius.github.io/"
+                }
+            ],
+            "description": "A small, lightweight utility to instantiate objects in PHP without invoking their constructors",
+            "homepage": "https://www.doctrine-project.org/projects/instantiator.html",
+            "keywords": [
+                "constructor",
+                "instantiate"
+            ],
+            "support": {
+                "issues": "https://github.com/doctrine/instantiator/issues",
+                "source": "https://github.com/doctrine/instantiator/tree/2.0.0"
+            },
+            "funding": [
+                {
+                    "url": "https://www.doctrine-project.org/sponsorship.html",
+                    "type": "custom"
+                },
+                {
+                    "url": "https://www.patreon.com/phpdoctrine",
+                    "type": "patreon"
+                },
+                {
+                    "url": "https://tidelift.com/funding/github/packagist/doctrine%2Finstantiator",
+                    "type": "tidelift"
+                }
+            ],
+            "time": "2022-12-30T00:23:10+00:00"
+        },
+        {
+            "name": "donatj/mock-webserver",
+            "version": "v2.10.0",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/donatj/mock-webserver.git",
+                "reference": "5074522d25f4e83953b1c5417a884c995d0dfa91"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/donatj/mock-webserver/zipball/5074522d25f4e83953b1c5417a884c995d0dfa91",
+                "reference": "5074522d25f4e83953b1c5417a884c995d0dfa91",
+                "shasum": ""
+            },
+            "require": {
+                "ext-json": "*",
+                "ext-sockets": "*",
+                "php": ">=7.2",
+                "ralouphie/getallheaders": "~2.0 || ~3.0"
+            },
+            "require-dev": {
+                "corpus/coding-standard": "^0.6.0 || ^0.9.0",
+                "donatj/drop": "^1.0",
+                "ext-curl": "*",
+                "friendsofphp/php-cs-fixer": "^3.1",
+                "phpunit/phpunit": "~8|~9",
+                "squizlabs/php_codesniffer": "^3.6"
+            },
+            "type": "library",
+            "autoload": {
+                "psr-4": {
+                    "donatj\\MockWebServer\\": "src/"
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Jesse G. Donat",
+                    "email": "donatj@gmail.com",
+                    "homepage": "https://donatstudios.com",
+                    "role": "Lead"
+                }
+            ],
+            "description": "Simple mock web server for unit testing",
+            "keywords": [
+                "dev",
+                "http",
+                "mock",
+                "phpunit",
+                "testing",
+                "unit testing",
+                "webserver"
+            ],
+            "support": {
+                "issues": "https://github.com/donatj/mock-webserver/issues",
+                "source": "https://github.com/donatj/mock-webserver/tree/v2.10.0"
+            },
+            "funding": [
+                {
+                    "url": "https://www.paypal.me/donatj/15",
+                    "type": "custom"
+                },
+                {
+                    "url": "https://github.com/donatj",
+                    "type": "github"
+                },
+                {
+                    "url": "https://ko-fi.com/donatj",
+                    "type": "ko_fi"
+                }
+            ],
+            "time": "2026-02-20T18:53:16+00:00"
+        },
+        {
+            "name": "myclabs/deep-copy",
+            "version": "1.14.0",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/myclabs/DeepCopy.git",
+                "reference": "8680aa248f8e07bc8fb43f56f0f5fc77a0c96aae"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/myclabs/DeepCopy/zipball/8680aa248f8e07bc8fb43f56f0f5fc77a0c96aae",
+                "reference": "8680aa248f8e07bc8fb43f56f0f5fc77a0c96aae",
+                "shasum": ""
+            },
+            "require": {
+                "php": "^8.0"
+            },
+            "conflict": {
+                "doctrine/collections": "<1.6.8",
+                "doctrine/common": "<2.13.3 || >=3 <3.2.2"
+            },
+            "require-dev": {
+                "doctrine/collections": "^1.6.8",
+                "doctrine/common": "^2.13.3 || ^3.2.2",
+                "phpspec/prophecy": "^1.10",
+                "phpunit/phpunit": "^7.5.20 || ^8.5.23 || ^9.5.13"
+            },
+            "type": "library",
+            "autoload": {
+                "files": [
+                    "src/DeepCopy/deep_copy.php"
+                ],
+                "psr-4": {
+                    "DeepCopy\\": "src/DeepCopy/"
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "description": "Create deep copies (clones) of your objects",
+            "keywords": [
+                "clone",
+                "copy",
+                "duplicate",
+                "object",
+                "object graph"
+            ],
+            "support": {
+                "issues": "https://github.com/myclabs/DeepCopy/issues",
+                "source": "https://github.com/myclabs/DeepCopy/tree/1.14.0"
+            },
+            "funding": [
+                {
+                    "url": "https://github.com/mnapoli",
+                    "type": "github"
+                }
+            ],
+            "time": "2026-08-11T10:17:44+00:00"
+        },
+        {
+            "name": "nikic/php-parser",
+            "version": "v5.9.0",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/nikic/PHP-Parser.git",
+                "reference": "9e33da9553fe7786f0962b35f4e4ecf01be89def"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/nikic/PHP-Parser/zipball/9e33da9553fe7786f0962b35f4e4ecf01be89def",
+                "reference": "9e33da9553fe7786f0962b35f4e4ecf01be89def",
+                "shasum": ""
+            },
+            "require": {
+                "ext-json": "*",
+                "ext-tokenizer": "*",
+                "php": ">=7.4"
+            },
+            "require-dev": {
+                "ircmaxell/php-yacc": "^0.0.7",
+                "phpunit/phpunit": "^9.0"
+            },
+            "bin": [
+                "bin/php-parse"
+            ],
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-master": "5.x-dev"
+                }
+            },
+            "autoload": {
+                "psr-4": {
+                    "PhpParser\\": "lib/PhpParser"
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "BSD-3-Clause"
+            ],
+            "authors": [
+                {
+                    "name": "Nikita Popov"
+                }
+            ],
+            "description": "A PHP parser written in PHP",
+            "keywords": [
+                "parser",
+                "php"
+            ],
+            "support": {
+                "issues": "https://github.com/nikic/PHP-Parser/issues",
+                "source": "https://github.com/nikic/PHP-Parser/tree/v5.9.0"
+            },
+            "time": "2026-09-13T18:51:52+00:00"
+        },
+        {
+            "name": "phar-io/manifest",
+            "version": "2.0.4",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/phar-io/manifest.git",
+                "reference": "54750ef60c58e43759730615a392c31c80e23176"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/phar-io/manifest/zipball/54750ef60c58e43759730615a392c31c80e23176",
+                "reference": "54750ef60c58e43759730615a392c31c80e23176",
+                "shasum": ""
+            },
+            "require": {
+                "ext-dom": "*",
+                "ext-libxml": "*",
+                "ext-phar": "*",
+                "ext-xmlwriter": "*",
+                "phar-io/version": "^3.0.1",
+                "php": "^7.2 || ^8.0"
+            },
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-master": "2.0.x-dev"
+                }
+            },
+            "autoload": {
+                "classmap": [
+                    "src/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "BSD-3-Clause"
+            ],
+            "authors": [
+                {
+                    "name": "Arne Blankerts",
+                    "email": "arne@blankerts.de",
+                    "role": "Developer"
+                },
+                {
+                    "name": "Sebastian Heuer",
+                    "email": "sebastian@phpeople.de",
+                    "role": "Developer"
+                },
+                {
+                    "name": "Sebastian Bergmann",
+                    "email": "sebastian@phpunit.de",
+                    "role": "Developer"
+                }
+            ],
+            "description": "Component for reading phar.io manifest information from a PHP Archive (PHAR)",
+            "support": {
+                "issues": "https://github.com/phar-io/manifest/issues",
+                "source": "https://github.com/phar-io/manifest/tree/2.0.4"
+            },
+            "funding": [
+                {
+                    "url": "https://github.com/theseer",
+                    "type": "github"
+                }
+            ],
+            "time": "2024-03-03T12:33:53+00:00"
+        },
+        {
+            "name": "phar-io/version",
+            "version": "3.2.1",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/phar-io/version.git",
+                "reference": "4f7fd7836c6f332bb2933569e566a0d6c4cbed74"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/phar-io/version/zipball/4f7fd7836c6f332bb2933569e566a0d6c4cbed74",
+                "reference": "4f7fd7836c6f332bb2933569e566a0d6c4cbed74",
+                "shasum": ""
+            },
+            "require": {
+                "php": "^7.2 || ^8.0"
+            },
+            "type": "library",
+            "autoload": {
+                "classmap": [
+                    "src/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "BSD-3-Clause"
+            ],
+            "authors": [
+                {
+                    "name": "Arne Blankerts",
+                    "email": "arne@blankerts.de",
+                    "role": "Developer"
+                },
+                {
+                    "name": "Sebastian Heuer",
+                    "email": "sebastian@phpeople.de",
+                    "role": "Developer"
+                },
+                {
+                    "name": "Sebastian Bergmann",
+                    "email": "sebastian@phpunit.de",
+                    "role": "Developer"
+                }
+            ],
+            "description": "Library for handling version information and constraints",
+            "support": {
+                "issues": "https://github.com/phar-io/version/issues",
+                "source": "https://github.com/phar-io/version/tree/3.2.1"
+            },
+            "time": "2022-02-21T01:04:05+00:00"
+        },
+        {
+            "name": "phpunit/php-code-coverage",
+            "version": "9.2.32",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/sebastianbergmann/php-code-coverage.git",
+                "reference": "85402a822d1ecf1db1096959413d35e1c37cf1a5"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/sebastianbergmann/php-code-coverage/zipball/85402a822d1ecf1db1096959413d35e1c37cf1a5",
+                "reference": "85402a822d1ecf1db1096959413d35e1c37cf1a5",
+                "shasum": ""
+            },
+            "require": {
+                "ext-dom": "*",
+                "ext-libxml": "*",
+                "ext-xmlwriter": "*",
+                "nikic/php-parser": "^4.19.1 || ^5.1.0",
+                "php": ">=7.3",
+                "phpunit/php-file-iterator": "^3.0.6",
+                "phpunit/php-text-template": "^2.0.4",
+                "sebastian/code-unit-reverse-lookup": "^2.0.3",
+                "sebastian/complexity": "^2.0.3",
+                "sebastian/environment": "^5.1.5",
+                "sebastian/lines-of-code": "^1.0.4",
+                "sebastian/version": "^3.0.2",
+                "theseer/tokenizer": "^1.2.3"
+            },
+            "require-dev": {
+                "phpunit/phpunit": "^9.6"
+            },
+            "suggest": {
+                "ext-pcov": "PHP extension that provides line coverage",
+                "ext-xdebug": "PHP extension that provides line coverage as well as branch and path coverage"
+            },
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-main": "9.2.x-dev"
+                }
+            },
+            "autoload": {
+                "classmap": [
+                    "src/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "BSD-3-Clause"
+            ],
+            "authors": [
+                {
+                    "name": "Sebastian Bergmann",
+                    "email": "sebastian@phpunit.de",
+                    "role": "lead"
+                }
+            ],
+            "description": "Library that provides collection, processing, and rendering functionality for PHP code coverage information.",
+            "homepage": "https://github.com/sebastianbergmann/php-code-coverage",
+            "keywords": [
+                "coverage",
+                "testing",
+                "xunit"
+            ],
+            "support": {
+                "issues": "https://github.com/sebastianbergmann/php-code-coverage/issues",
+                "security": "https://github.com/sebastianbergmann/php-code-coverage/security/policy",
+                "source": "https://github.com/sebastianbergmann/php-code-coverage/tree/9.2.32"
+            },
+            "funding": [
+                {
+                    "url": "https://github.com/sebastianbergmann",
+                    "type": "github"
+                }
+            ],
+            "time": "2024-08-22T04:23:01+00:00"
+        },
+        {
+            "name": "phpunit/php-file-iterator",
+            "version": "3.0.6",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/sebastianbergmann/php-file-iterator.git",
+                "reference": "cf1c2e7c203ac650e352f4cc675a7021e7d1b3cf"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/sebastianbergmann/php-file-iterator/zipball/cf1c2e7c203ac650e352f4cc675a7021e7d1b3cf",
+                "reference": "cf1c2e7c203ac650e352f4cc675a7021e7d1b3cf",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=7.3"
+            },
+            "require-dev": {
+                "phpunit/phpunit": "^9.3"
+            },
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-master": "3.0-dev"
+                }
+            },
+            "autoload": {
+                "classmap": [
+                    "src/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "BSD-3-Clause"
+            ],
+            "authors": [
+                {
+                    "name": "Sebastian Bergmann",
+                    "email": "sebastian@phpunit.de",
+                    "role": "lead"
+                }
+            ],
+            "description": "FilterIterator implementation that filters files based on a list of suffixes.",
+            "homepage": "https://github.com/sebastianbergmann/php-file-iterator/",
+            "keywords": [
+                "filesystem",
+                "iterator"
+            ],
+            "support": {
+                "issues": "https://github.com/sebastianbergmann/php-file-iterator/issues",
+                "source": "https://github.com/sebastianbergmann/php-file-iterator/tree/3.0.6"
+            },
+            "funding": [
+                {
+                    "url": "https://github.com/sebastianbergmann",
+                    "type": "github"
+                }
+            ],
+            "time": "2021-12-02T12:48:52+00:00"
+        },
+        {
+            "name": "phpunit/php-invoker",
+            "version": "3.1.1",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/sebastianbergmann/php-invoker.git",
+                "reference": "5a10147d0aaf65b58940a0b72f71c9ac0423cc67"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/sebastianbergmann/php-invoker/zipball/5a10147d0aaf65b58940a0b72f71c9ac0423cc67",
+                "reference": "5a10147d0aaf65b58940a0b72f71c9ac0423cc67",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=7.3"
+            },
+            "require-dev": {
+                "ext-pcntl": "*",
+                "phpunit/phpunit": "^9.3"
+            },
+            "suggest": {
+                "ext-pcntl": "*"
+            },
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-master": "3.1-dev"
+                }
+            },
+            "autoload": {
+                "classmap": [
+                    "src/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "BSD-3-Clause"
+            ],
+            "authors": [
+                {
+                    "name": "Sebastian Bergmann",
+                    "email": "sebastian@phpunit.de",
+                    "role": "lead"
+                }
+            ],
+            "description": "Invoke callables with a timeout",
+            "homepage": "https://github.com/sebastianbergmann/php-invoker/",
+            "keywords": [
+                "process"
+            ],
+            "support": {
+                "issues": "https://github.com/sebastianbergmann/php-invoker/issues",
+                "source": "https://github.com/sebastianbergmann/php-invoker/tree/3.1.1"
+            },
+            "funding": [
+                {
+                    "url": "https://github.com/sebastianbergmann",
+                    "type": "github"
+                }
+            ],
+            "time": "2020-09-28T05:58:55+00:00"
+        },
+        {
+            "name": "phpunit/php-text-template",
+            "version": "2.0.4",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/sebastianbergmann/php-text-template.git",
+                "reference": "5da5f67fc95621df9ff4c4e5a84d6a8a2acf7c28"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/sebastianbergmann/php-text-template/zipball/5da5f67fc95621df9ff4c4e5a84d6a8a2acf7c28",
+                "reference": "5da5f67fc95621df9ff4c4e5a84d6a8a2acf7c28",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=7.3"
+            },
+            "require-dev": {
+                "phpunit/phpunit": "^9.3"
+            },
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-master": "2.0-dev"
+                }
+            },
+            "autoload": {
+                "classmap": [
+                    "src/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "BSD-3-Clause"
+            ],
+            "authors": [
+                {
+                    "name": "Sebastian Bergmann",
+                    "email": "sebastian@phpunit.de",
+                    "role": "lead"
+                }
+            ],
+            "description": "Simple template engine.",
+            "homepage": "https://github.com/sebastianbergmann/php-text-template/",
+            "keywords": [
+                "template"
+            ],
+            "support": {
+                "issues": "https://github.com/sebastianbergmann/php-text-template/issues",
+                "source": "https://github.com/sebastianbergmann/php-text-template/tree/2.0.4"
+            },
+            "funding": [
+                {
+                    "url": "https://github.com/sebastianbergmann",
+                    "type": "github"
+                }
+            ],
+            "time": "2020-10-26T05:33:50+00:00"
+        },
+        {
+            "name": "phpunit/php-timer",
+            "version": "5.0.3",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/sebastianbergmann/php-timer.git",
+                "reference": "5a63ce20ed1b5bf577850e2c4e87f4aa902afbd2"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/sebastianbergmann/php-timer/zipball/5a63ce20ed1b5bf577850e2c4e87f4aa902afbd2",
+                "reference": "5a63ce20ed1b5bf577850e2c4e87f4aa902afbd2",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=7.3"
+            },
+            "require-dev": {
+                "phpunit/phpunit": "^9.3"
+            },
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-master": "5.0-dev"
+                }
+            },
+            "autoload": {
+                "classmap": [
+                    "src/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "BSD-3-Clause"
+            ],
+            "authors": [
+                {
+                    "name": "Sebastian Bergmann",
+                    "email": "sebastian@phpunit.de",
+                    "role": "lead"
+                }
+            ],
+            "description": "Utility class for timing",
+            "homepage": "https://github.com/sebastianbergmann/php-timer/",
+            "keywords": [
+                "timer"
+            ],
+            "support": {
+                "issues": "https://github.com/sebastianbergmann/php-timer/issues",
+                "source": "https://github.com/sebastianbergmann/php-timer/tree/5.0.3"
+            },
+            "funding": [
+                {
+                    "url": "https://github.com/sebastianbergmann",
+                    "type": "github"
+                }
+            ],
+            "time": "2020-10-26T13:16:10+00:00"
+        },
+        {
+            "name": "phpunit/phpunit",
+            "version": "9.6.37",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/sebastianbergmann/phpunit.git",
+                "reference": "aceaa623912caf8e80bffea22fc4103a0a01565f"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/sebastianbergmann/phpunit/zipball/aceaa623912caf8e80bffea22fc4103a0a01565f",
+                "reference": "aceaa623912caf8e80bffea22fc4103a0a01565f",
+                "shasum": ""
+            },
+            "require": {
+                "doctrine/instantiator": "^1.5.0 || ^2",
+                "ext-dom": "*",
+                "ext-filter": "*",
+                "ext-json": "*",
+                "ext-libxml": "*",
+                "ext-mbstring": "*",
+                "ext-xmlwriter": "*",
+                "myclabs/deep-copy": "^1.13.4",
+                "phar-io/manifest": "^2.0.4",
+                "phar-io/version": "^3.2.1",
+                "php": ">=7.3",
+                "phpunit/php-code-coverage": "^9.2.32",
+                "phpunit/php-file-iterator": "^3.0.6",
+                "phpunit/php-invoker": "^3.1.1",
+                "phpunit/php-text-template": "^2.0.4",
+                "phpunit/php-timer": "^5.0.3",
+                "sebastian/cli-parser": "^1.0.2",
+                "sebastian/code-unit": "^1.0.8",
+                "sebastian/comparator": "^4.0.10",
+                "sebastian/diff": "^4.0.6",
+                "sebastian/environment": "^5.1.5",
+                "sebastian/exporter": "^4.0.9",
+                "sebastian/global-state": "^5.0.8",
+                "sebastian/object-enumerator": "^4.0.4",
+                "sebastian/resource-operations": "^3.0.4",
+                "sebastian/type": "^3.2.1",
+                "sebastian/version": "^3.0.2"
+            },
+            "suggest": {
+                "ext-soap": "To be able to generate mocks based on WSDL files",
+                "ext-xdebug": "PHP extension that provides line coverage as well as branch and path coverage"
+            },
+            "bin": [
+                "phpunit"
+            ],
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-master": "9.6-dev"
+                }
+            },
+            "autoload": {
+                "files": [
+                    "src/Framework/Assert/Functions.php"
+                ],
+                "classmap": [
+                    "src/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "BSD-3-Clause"
+            ],
+            "authors": [
+                {
+                    "name": "Sebastian Bergmann",
+                    "email": "sebastian@phpunit.de",
+                    "role": "lead"
+                }
+            ],
+            "description": "The PHP Unit Testing framework.",
+            "homepage": "https://phpunit.de/",
+            "keywords": [
+                "phpunit",
+                "testing",
+                "xunit"
+            ],
+            "support": {
+                "issues": "https://github.com/sebastianbergmann/phpunit/issues",
+                "security": "https://github.com/sebastianbergmann/phpunit/security/policy",
+                "source": "https://github.com/sebastianbergmann/phpunit/tree/9.6.37"
+            },
+            "funding": [
+                {
+                    "url": "https://phpunit.de/sponsoring.html",
+                    "type": "other"
+                }
+            ],
+            "time": "2026-09-23T09:59:59+00:00"
+        },
+        {
+            "name": "ralouphie/getallheaders",
+            "version": "3.0.3",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/ralouphie/getallheaders.git",
+                "reference": "120b605dfeb996808c31b6477290a714d356e822"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/ralouphie/getallheaders/zipball/120b605dfeb996808c31b6477290a714d356e822",
+                "reference": "120b605dfeb996808c31b6477290a714d356e822",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=5.6"
+            },
+            "require-dev": {
+                "php-coveralls/php-coveralls": "^2.1",
+                "phpunit/phpunit": "^5 || ^6.5"
+            },
+            "type": "library",
+            "autoload": {
+                "files": [
+                    "src/getallheaders.php"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Ralph Khattar",
+                    "email": "ralph.khattar@gmail.com"
+                }
+            ],
+            "description": "A polyfill for getallheaders.",
+            "support": {
+                "issues": "https://github.com/ralouphie/getallheaders/issues",
+                "source": "https://github.com/ralouphie/getallheaders/tree/develop"
+            },
+            "time": "2019-03-08T08:55:37+00:00"
+        },
+        {
+            "name": "sebastian/cli-parser",
+            "version": "1.0.2",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/sebastianbergmann/cli-parser.git",
+                "reference": "2b56bea83a09de3ac06bb18b92f068e60cc6f50b"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/sebastianbergmann/cli-parser/zipball/2b56bea83a09de3ac06bb18b92f068e60cc6f50b",
+                "reference": "2b56bea83a09de3ac06bb18b92f068e60cc6f50b",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=7.3"
+            },
+            "require-dev": {
+                "phpunit/phpunit": "^9.3"
+            },
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-master": "1.0-dev"
+                }
+            },
+            "autoload": {
+                "classmap": [
+                    "src/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "BSD-3-Clause"
+            ],
+            "authors": [
+                {
+                    "name": "Sebastian Bergmann",
+                    "email": "sebastian@phpunit.de",
+                    "role": "lead"
+                }
+            ],
+            "description": "Library for parsing CLI options",
+            "homepage": "https://github.com/sebastianbergmann/cli-parser",
+            "support": {
+                "issues": "https://github.com/sebastianbergmann/cli-parser/issues",
+                "source": "https://github.com/sebastianbergmann/cli-parser/tree/1.0.2"
+            },
+            "funding": [
+                {
+                    "url": "https://github.com/sebastianbergmann",
+                    "type": "github"
+                }
+            ],
+            "time": "2024-03-02T06:27:43+00:00"
+        },
+        {
+            "name": "sebastian/code-unit",
+            "version": "1.0.8",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/sebastianbergmann/code-unit.git",
+                "reference": "1fc9f64c0927627ef78ba436c9b17d967e68e120"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/sebastianbergmann/code-unit/zipball/1fc9f64c0927627ef78ba436c9b17d967e68e120",
+                "reference": "1fc9f64c0927627ef78ba436c9b17d967e68e120",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=7.3"
+            },
+            "require-dev": {
+                "phpunit/phpunit": "^9.3"
+            },
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-master": "1.0-dev"
+                }
+            },
+            "autoload": {
+                "classmap": [
+                    "src/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "BSD-3-Clause"
+            ],
+            "authors": [
+                {
+                    "name": "Sebastian Bergmann",
+                    "email": "sebastian@phpunit.de",
+                    "role": "lead"
+                }
+            ],
+            "description": "Collection of value objects that represent the PHP code units",
+            "homepage": "https://github.com/sebastianbergmann/code-unit",
+            "support": {
+                "issues": "https://github.com/sebastianbergmann/code-unit/issues",
+                "source": "https://github.com/sebastianbergmann/code-unit/tree/1.0.8"
+            },
+            "funding": [
+                {
+                    "url": "https://github.com/sebastianbergmann",
+                    "type": "github"
+                }
+            ],
+            "time": "2020-10-26T13:08:54+00:00"
+        },
+        {
+            "name": "sebastian/code-unit-reverse-lookup",
+            "version": "2.0.3",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/sebastianbergmann/code-unit-reverse-lookup.git",
+                "reference": "ac91f01ccec49fb77bdc6fd1e548bc70f7faa3e5"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/sebastianbergmann/code-unit-reverse-lookup/zipball/ac91f01ccec49fb77bdc6fd1e548bc70f7faa3e5",
+                "reference": "ac91f01ccec49fb77bdc6fd1e548bc70f7faa3e5",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=7.3"
+            },
+            "require-dev": {
+                "phpunit/phpunit": "^9.3"
+            },
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-master": "2.0-dev"
+                }
+            },
+            "autoload": {
+                "classmap": [
+                    "src/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "BSD-3-Clause"
+            ],
+            "authors": [
+                {
+                    "name": "Sebastian Bergmann",
+                    "email": "sebastian@phpunit.de"
+                }
+            ],
+            "description": "Looks up which function or method a line of code belongs to",
+            "homepage": "https://github.com/sebastianbergmann/code-unit-reverse-lookup/",
+            "support": {
+                "issues": "https://github.com/sebastianbergmann/code-unit-reverse-lookup/issues",
+                "source": "https://github.com/sebastianbergmann/code-unit-reverse-lookup/tree/2.0.3"
+            },
+            "funding": [
+                {
+                    "url": "https://github.com/sebastianbergmann",
+                    "type": "github"
+                }
+            ],
+            "time": "2020-09-28T05:30:19+00:00"
+        },
+        {
+            "name": "sebastian/comparator",
+            "version": "4.0.10",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/sebastianbergmann/comparator.git",
+                "reference": "e4df00b9b3571187db2831ae9aada2c6efbd715d"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/sebastianbergmann/comparator/zipball/e4df00b9b3571187db2831ae9aada2c6efbd715d",
+                "reference": "e4df00b9b3571187db2831ae9aada2c6efbd715d",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=7.3",
+                "sebastian/diff": "^4.0",
+                "sebastian/exporter": "^4.0"
+            },
+            "require-dev": {
+                "phpunit/phpunit": "^9.3"
+            },
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-master": "4.0-dev"
+                }
+            },
+            "autoload": {
+                "classmap": [
+                    "src/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "BSD-3-Clause"
+            ],
+            "authors": [
+                {
+                    "name": "Sebastian Bergmann",
+                    "email": "sebastian@phpunit.de"
+                },
+                {
+                    "name": "Jeff Welch",
+                    "email": "whatthejeff@gmail.com"
+                },
+                {
+                    "name": "Volker Dusch",
+                    "email": "github@wallbash.com"
+                },
+                {
+                    "name": "Bernhard Schussek",
+                    "email": "bschussek@2bepublished.at"
+                }
+            ],
+            "description": "Provides the functionality to compare PHP values for equality",
+            "homepage": "https://github.com/sebastianbergmann/comparator",
+            "keywords": [
+                "comparator",
+                "compare",
+                "equality"
+            ],
+            "support": {
+                "issues": "https://github.com/sebastianbergmann/comparator/issues",
+                "source": "https://github.com/sebastianbergmann/comparator/tree/4.0.10"
+            },
+            "funding": [
+                {
+                    "url": "https://github.com/sebastianbergmann",
+                    "type": "github"
+                },
+                {
+                    "url": "https://liberapay.com/sebastianbergmann",
+                    "type": "liberapay"
+                },
+                {
+                    "url": "https://thanks.dev/u/gh/sebastianbergmann",
+                    "type": "thanks_dev"
+                },
+                {
+                    "url": "https://tidelift.com/funding/github/packagist/sebastian/comparator",
+                    "type": "tidelift"
+                }
+            ],
+            "time": "2026-01-24T09:22:56+00:00"
+        },
+        {
+            "name": "sebastian/complexity",
+            "version": "2.0.3",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/sebastianbergmann/complexity.git",
+                "reference": "25f207c40d62b8b7aa32f5ab026c53561964053a"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/sebastianbergmann/complexity/zipball/25f207c40d62b8b7aa32f5ab026c53561964053a",
+                "reference": "25f207c40d62b8b7aa32f5ab026c53561964053a",
+                "shasum": ""
+            },
+            "require": {
+                "nikic/php-parser": "^4.18 || ^5.0",
+                "php": ">=7.3"
+            },
+            "require-dev": {
+                "phpunit/phpunit": "^9.3"
+            },
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-master": "2.0-dev"
+                }
+            },
+            "autoload": {
+                "classmap": [
+                    "src/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "BSD-3-Clause"
+            ],
+            "authors": [
+                {
+                    "name": "Sebastian Bergmann",
+                    "email": "sebastian@phpunit.de",
+                    "role": "lead"
+                }
+            ],
+            "description": "Library for calculating the complexity of PHP code units",
+            "homepage": "https://github.com/sebastianbergmann/complexity",
+            "support": {
+                "issues": "https://github.com/sebastianbergmann/complexity/issues",
+                "source": "https://github.com/sebastianbergmann/complexity/tree/2.0.3"
+            },
+            "funding": [
+                {
+                    "url": "https://github.com/sebastianbergmann",
+                    "type": "github"
+                }
+            ],
+            "time": "2023-12-22T06:19:30+00:00"
+        },
+        {
+            "name": "sebastian/diff",
+            "version": "4.0.6",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/sebastianbergmann/diff.git",
+                "reference": "ba01945089c3a293b01ba9badc29ad55b106b0bc"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/sebastianbergmann/diff/zipball/ba01945089c3a293b01ba9badc29ad55b106b0bc",
+                "reference": "ba01945089c3a293b01ba9badc29ad55b106b0bc",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=7.3"
+            },
+            "require-dev": {
+                "phpunit/phpunit": "^9.3",
+                "symfony/process": "^4.2 || ^5"
+            },
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-master": "4.0-dev"
+                }
+            },
+            "autoload": {
+                "classmap": [
+                    "src/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "BSD-3-Clause"
+            ],
+            "authors": [
+                {
+                    "name": "Sebastian Bergmann",
+                    "email": "sebastian@phpunit.de"
+                },
+                {
+                    "name": "Kore Nordmann",
+                    "email": "mail@kore-nordmann.de"
+                }
+            ],
+            "description": "Diff implementation",
+            "homepage": "https://github.com/sebastianbergmann/diff",
+            "keywords": [
+                "diff",
+                "udiff",
+                "unidiff",
+                "unified diff"
+            ],
+            "support": {
+                "issues": "https://github.com/sebastianbergmann/diff/issues",
+                "source": "https://github.com/sebastianbergmann/diff/tree/4.0.6"
+            },
+            "funding": [
+                {
+                    "url": "https://github.com/sebastianbergmann",
+                    "type": "github"
+                }
+            ],
+            "time": "2024-03-02T06:30:58+00:00"
+        },
+        {
+            "name": "sebastian/environment",
+            "version": "5.1.5",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/sebastianbergmann/environment.git",
+                "reference": "830c43a844f1f8d5b7a1f6d6076b784454d8b7ed"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/sebastianbergmann/environment/zipball/830c43a844f1f8d5b7a1f6d6076b784454d8b7ed",
+                "reference": "830c43a844f1f8d5b7a1f6d6076b784454d8b7ed",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=7.3"
+            },
+            "require-dev": {
+                "phpunit/phpunit": "^9.3"
+            },
+            "suggest": {
+                "ext-posix": "*"
+            },
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-master": "5.1-dev"
+                }
+            },
+            "autoload": {
+                "classmap": [
+                    "src/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "BSD-3-Clause"
+            ],
+            "authors": [
+                {
+                    "name": "Sebastian Bergmann",
+                    "email": "sebastian@phpunit.de"
+                }
+            ],
+            "description": "Provides functionality to handle HHVM/PHP environments",
+            "homepage": "http://www.github.com/sebastianbergmann/environment",
+            "keywords": [
+                "Xdebug",
+                "environment",
+                "hhvm"
+            ],
+            "support": {
+                "issues": "https://github.com/sebastianbergmann/environment/issues",
+                "source": "https://github.com/sebastianbergmann/environment/tree/5.1.5"
+            },
+            "funding": [
+                {
+                    "url": "https://github.com/sebastianbergmann",
+                    "type": "github"
+                }
+            ],
+            "time": "2023-02-03T06:03:51+00:00"
+        },
+        {
+            "name": "sebastian/exporter",
+            "version": "4.0.9",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/sebastianbergmann/exporter.git",
+                "reference": "4352c1a3df741a7ba9e61af6fed51d1fee41cbf7"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/sebastianbergmann/exporter/zipball/4352c1a3df741a7ba9e61af6fed51d1fee41cbf7",
+                "reference": "4352c1a3df741a7ba9e61af6fed51d1fee41cbf7",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=7.3",
+                "sebastian/recursion-context": "^4.0"
+            },
+            "require-dev": {
+                "ext-mbstring": "*",
+                "phpunit/phpunit": "^9.3"
+            },
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-master": "4.0-dev"
+                }
+            },
+            "autoload": {
+                "classmap": [
+                    "src/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "BSD-3-Clause"
+            ],
+            "authors": [
+                {
+                    "name": "Sebastian Bergmann",
+                    "email": "sebastian@phpunit.de"
+                },
+                {
+                    "name": "Jeff Welch",
+                    "email": "whatthejeff@gmail.com"
+                },
+                {
+                    "name": "Volker Dusch",
+                    "email": "github@wallbash.com"
+                },
+                {
+                    "name": "Adam Harvey",
+                    "email": "aharvey@php.net"
+                },
+                {
+                    "name": "Bernhard Schussek",
+                    "email": "bschussek@gmail.com"
+                }
+            ],
+            "description": "Provides the functionality to export PHP variables for visualization",
+            "homepage": "https://www.github.com/sebastianbergmann/exporter",
+            "keywords": [
+                "export",
+                "exporter"
+            ],
+            "support": {
+                "issues": "https://github.com/sebastianbergmann/exporter/issues",
+                "source": "https://github.com/sebastianbergmann/exporter/tree/4.0.9"
+            },
+            "funding": [
+                {
+                    "url": "https://github.com/sebastianbergmann",
+                    "type": "github"
+                },
+                {
+                    "url": "https://liberapay.com/sebastianbergmann",
+                    "type": "liberapay"
+                },
+                {
+                    "url": "https://thanks.dev/u/gh/sebastianbergmann",
+                    "type": "thanks_dev"
+                },
+                {
+                    "url": "https://tidelift.com/funding/github/packagist/sebastian/exporter",
+                    "type": "tidelift"
+                }
+            ],
+            "time": "2026-08-11T04:55:59+00:00"
+        },
+        {
+            "name": "sebastian/global-state",
+            "version": "5.0.8",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/sebastianbergmann/global-state.git",
+                "reference": "b6781316bdcd28260904e7cc18ec983d0d2ef4f6"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/sebastianbergmann/global-state/zipball/b6781316bdcd28260904e7cc18ec983d0d2ef4f6",
+                "reference": "b6781316bdcd28260904e7cc18ec983d0d2ef4f6",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=7.3",
+                "sebastian/object-reflector": "^2.0",
+                "sebastian/recursion-context": "^4.0"
+            },
+            "require-dev": {
+                "ext-dom": "*",
+                "phpunit/phpunit": "^9.3"
+            },
+            "suggest": {
+                "ext-uopz": "*"
+            },
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-master": "5.0-dev"
+                }
+            },
+            "autoload": {
+                "classmap": [
+                    "src/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "BSD-3-Clause"
+            ],
+            "authors": [
+                {
+                    "name": "Sebastian Bergmann",
+                    "email": "sebastian@phpunit.de"
+                }
+            ],
+            "description": "Snapshotting of global state",
+            "homepage": "http://www.github.com/sebastianbergmann/global-state",
+            "keywords": [
+                "global state"
+            ],
+            "support": {
+                "issues": "https://github.com/sebastianbergmann/global-state/issues",
+                "source": "https://github.com/sebastianbergmann/global-state/tree/5.0.8"
+            },
+            "funding": [
+                {
+                    "url": "https://github.com/sebastianbergmann",
+                    "type": "github"
+                },
+                {
+                    "url": "https://liberapay.com/sebastianbergmann",
+                    "type": "liberapay"
+                },
+                {
+                    "url": "https://thanks.dev/u/gh/sebastianbergmann",
+                    "type": "thanks_dev"
+                },
+                {
+                    "url": "https://tidelift.com/funding/github/packagist/sebastian/global-state",
+                    "type": "tidelift"
+                }
+            ],
+            "time": "2025-08-10T07:10:35+00:00"
+        },
+        {
+            "name": "sebastian/lines-of-code",
+            "version": "1.0.4",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/sebastianbergmann/lines-of-code.git",
+                "reference": "e1e4a170560925c26d424b6a03aed157e7dcc5c5"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/sebastianbergmann/lines-of-code/zipball/e1e4a170560925c26d424b6a03aed157e7dcc5c5",
+                "reference": "e1e4a170560925c26d424b6a03aed157e7dcc5c5",
+                "shasum": ""
+            },
+            "require": {
+                "nikic/php-parser": "^4.18 || ^5.0",
+                "php": ">=7.3"
+            },
+            "require-dev": {
+                "phpunit/phpunit": "^9.3"
+            },
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-master": "1.0-dev"
+                }
+            },
+            "autoload": {
+                "classmap": [
+                    "src/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "BSD-3-Clause"
+            ],
+            "authors": [
+                {
+                    "name": "Sebastian Bergmann",
+                    "email": "sebastian@phpunit.de",
+                    "role": "lead"
+                }
+            ],
+            "description": "Library for counting the lines of code in PHP source code",
+            "homepage": "https://github.com/sebastianbergmann/lines-of-code",
+            "support": {
+                "issues": "https://github.com/sebastianbergmann/lines-of-code/issues",
+                "source": "https://github.com/sebastianbergmann/lines-of-code/tree/1.0.4"
+            },
+            "funding": [
+                {
+                    "url": "https://github.com/sebastianbergmann",
+                    "type": "github"
+                }
+            ],
+            "time": "2023-12-22T06:20:34+00:00"
+        },
+        {
+            "name": "sebastian/object-enumerator",
+            "version": "4.0.4",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/sebastianbergmann/object-enumerator.git",
+                "reference": "5c9eeac41b290a3712d88851518825ad78f45c71"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/sebastianbergmann/object-enumerator/zipball/5c9eeac41b290a3712d88851518825ad78f45c71",
+                "reference": "5c9eeac41b290a3712d88851518825ad78f45c71",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=7.3",
+                "sebastian/object-reflector": "^2.0",
+                "sebastian/recursion-context": "^4.0"
+            },
+            "require-dev": {
+                "phpunit/phpunit": "^9.3"
+            },
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-master": "4.0-dev"
+                }
+            },
+            "autoload": {
+                "classmap": [
+                    "src/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "BSD-3-Clause"
+            ],
+            "authors": [
+                {
+                    "name": "Sebastian Bergmann",
+                    "email": "sebastian@phpunit.de"
+                }
+            ],
+            "description": "Traverses array structures and object graphs to enumerate all referenced objects",
+            "homepage": "https://github.com/sebastianbergmann/object-enumerator/",
+            "support": {
+                "issues": "https://github.com/sebastianbergmann/object-enumerator/issues",
+                "source": "https://github.com/sebastianbergmann/object-enumerator/tree/4.0.4"
+            },
+            "funding": [
+                {
+                    "url": "https://github.com/sebastianbergmann",
+                    "type": "github"
+                }
+            ],
+            "time": "2020-10-26T13:12:34+00:00"
+        },
+        {
+            "name": "sebastian/object-reflector",
+            "version": "2.0.4",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/sebastianbergmann/object-reflector.git",
+                "reference": "b4f479ebdbf63ac605d183ece17d8d7fe49c15c7"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/sebastianbergmann/object-reflector/zipball/b4f479ebdbf63ac605d183ece17d8d7fe49c15c7",
+                "reference": "b4f479ebdbf63ac605d183ece17d8d7fe49c15c7",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=7.3"
+            },
+            "require-dev": {
+                "phpunit/phpunit": "^9.3"
+            },
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-master": "2.0-dev"
+                }
+            },
+            "autoload": {
+                "classmap": [
+                    "src/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "BSD-3-Clause"
+            ],
+            "authors": [
+                {
+                    "name": "Sebastian Bergmann",
+                    "email": "sebastian@phpunit.de"
+                }
+            ],
+            "description": "Allows reflection of object attributes, including inherited and non-public ones",
+            "homepage": "https://github.com/sebastianbergmann/object-reflector/",
+            "support": {
+                "issues": "https://github.com/sebastianbergmann/object-reflector/issues",
+                "source": "https://github.com/sebastianbergmann/object-reflector/tree/2.0.4"
+            },
+            "funding": [
+                {
+                    "url": "https://github.com/sebastianbergmann",
+                    "type": "github"
+                }
+            ],
+            "time": "2020-10-26T13:14:26+00:00"
+        },
+        {
+            "name": "sebastian/recursion-context",
+            "version": "4.0.7",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/sebastianbergmann/recursion-context.git",
+                "reference": "c85be6922b7fd365942b986b9a50397d65407611"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/sebastianbergmann/recursion-context/zipball/c85be6922b7fd365942b986b9a50397d65407611",
+                "reference": "c85be6922b7fd365942b986b9a50397d65407611",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=7.3"
+            },
+            "require-dev": {
+                "phpunit/phpunit": "^9.3"
+            },
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-master": "4.0-dev"
+                }
+            },
+            "autoload": {
+                "classmap": [
+                    "src/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "BSD-3-Clause"
+            ],
+            "authors": [
+                {
+                    "name": "Sebastian Bergmann",
+                    "email": "sebastian@phpunit.de"
+                },
+                {
+                    "name": "Jeff Welch",
+                    "email": "whatthejeff@gmail.com"
+                },
+                {
+                    "name": "Adam Harvey",
+                    "email": "aharvey@php.net"
+                }
+            ],
+            "description": "Provides functionality to recursively process PHP variables",
+            "homepage": "https://github.com/sebastianbergmann/recursion-context",
+            "support": {
+                "issues": "https://github.com/sebastianbergmann/recursion-context/issues",
+                "source": "https://github.com/sebastianbergmann/recursion-context/tree/4.0.7"
+            },
+            "funding": [
+                {
+                    "url": "https://github.com/sebastianbergmann",
+                    "type": "github"
+                },
+                {
+                    "url": "https://liberapay.com/sebastianbergmann",
+                    "type": "liberapay"
+                },
+                {
+                    "url": "https://thanks.dev/u/gh/sebastianbergmann",
+                    "type": "thanks_dev"
+                },
+                {
+                    "url": "https://tidelift.com/funding/github/packagist/sebastian/recursion-context",
+                    "type": "tidelift"
+                }
+            ],
+            "time": "2026-08-11T05:25:24+00:00"
+        },
+        {
+            "name": "sebastian/resource-operations",
+            "version": "3.0.4",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/sebastianbergmann/resource-operations.git",
+                "reference": "05d5692a7993ecccd56a03e40cd7e5b09b1d404e"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/sebastianbergmann/resource-operations/zipball/05d5692a7993ecccd56a03e40cd7e5b09b1d404e",
+                "reference": "05d5692a7993ecccd56a03e40cd7e5b09b1d404e",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=7.3"
+            },
+            "require-dev": {
+                "phpunit/phpunit": "^9.0"
+            },
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-main": "3.0-dev"
+                }
+            },
+            "autoload": {
+                "classmap": [
+                    "src/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "BSD-3-Clause"
+            ],
+            "authors": [
+                {
+                    "name": "Sebastian Bergmann",
+                    "email": "sebastian@phpunit.de"
+                }
+            ],
+            "description": "Provides a list of PHP built-in functions that operate on resources",
+            "homepage": "https://www.github.com/sebastianbergmann/resource-operations",
+            "support": {
+                "source": "https://github.com/sebastianbergmann/resource-operations/tree/3.0.4"
+            },
+            "funding": [
+                {
+                    "url": "https://github.com/sebastianbergmann",
+                    "type": "github"
+                }
+            ],
+            "time": "2024-03-14T16:00:52+00:00"
+        },
+        {
+            "name": "sebastian/type",
+            "version": "3.2.1",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/sebastianbergmann/type.git",
+                "reference": "75e2c2a32f5e0b3aef905b9ed0b179b953b3d7c7"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/sebastianbergmann/type/zipball/75e2c2a32f5e0b3aef905b9ed0b179b953b3d7c7",
+                "reference": "75e2c2a32f5e0b3aef905b9ed0b179b953b3d7c7",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=7.3"
+            },
+            "require-dev": {
+                "phpunit/phpunit": "^9.5"
+            },
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-master": "3.2-dev"
+                }
+            },
+            "autoload": {
+                "classmap": [
+                    "src/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "BSD-3-Clause"
+            ],
+            "authors": [
+                {
+                    "name": "Sebastian Bergmann",
+                    "email": "sebastian@phpunit.de",
+                    "role": "lead"
+                }
+            ],
+            "description": "Collection of value objects that represent the types of the PHP type system",
+            "homepage": "https://github.com/sebastianbergmann/type",
+            "support": {
+                "issues": "https://github.com/sebastianbergmann/type/issues",
+                "source": "https://github.com/sebastianbergmann/type/tree/3.2.1"
+            },
+            "funding": [
+                {
+                    "url": "https://github.com/sebastianbergmann",
+                    "type": "github"
+                }
+            ],
+            "time": "2023-02-03T06:13:03+00:00"
+        },
+        {
+            "name": "sebastian/version",
+            "version": "3.0.2",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/sebastianbergmann/version.git",
+                "reference": "c6c1022351a901512170118436c764e473f6de8c"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/sebastianbergmann/version/zipball/c6c1022351a901512170118436c764e473f6de8c",
+                "reference": "c6c1022351a901512170118436c764e473f6de8c",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=7.3"
+            },
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-master": "3.0-dev"
+                }
+            },
+            "autoload": {
+                "classmap": [
+                    "src/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "BSD-3-Clause"
+            ],
+            "authors": [
+                {
+                    "name": "Sebastian Bergmann",
+                    "email": "sebastian@phpunit.de",
+                    "role": "lead"
+                }
+            ],
+            "description": "Library that helps with managing the version number of Git-hosted PHP projects",
+            "homepage": "https://github.com/sebastianbergmann/version",
+            "support": {
+                "issues": "https://github.com/sebastianbergmann/version/issues",
+                "source": "https://github.com/sebastianbergmann/version/tree/3.0.2"
+            },
+            "funding": [
+                {
+                    "url": "https://github.com/sebastianbergmann",
+                    "type": "github"
+                }
+            ],
+            "time": "2020-09-28T06:39:44+00:00"
+        },
+        {
+            "name": "theseer/tokenizer",
+            "version": "1.3.1",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/theseer/tokenizer.git",
+                "reference": "b7489ce515e168639d17feec34b8847c326b0b3c"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/theseer/tokenizer/zipball/b7489ce515e168639d17feec34b8847c326b0b3c",
+                "reference": "b7489ce515e168639d17feec34b8847c326b0b3c",
+                "shasum": ""
+            },
+            "require": {
+                "ext-dom": "*",
+                "ext-tokenizer": "*",
+                "ext-xmlwriter": "*",
+                "php": "^7.2 || ^8.0"
+            },
+            "type": "library",
+            "autoload": {
+                "classmap": [
+                    "src/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "BSD-3-Clause"
+            ],
+            "authors": [
+                {
+                    "name": "Arne Blankerts",
+                    "email": "arne@blankerts.de",
+                    "role": "Developer"
+                }
+            ],
+            "description": "A small library for converting tokenized PHP source code into XML and potentially other formats",
+            "support": {
+                "issues": "https://github.com/theseer/tokenizer/issues",
+                "source": "https://github.com/theseer/tokenizer/tree/1.3.1"
+            },
+            "funding": [
+                {
+                    "url": "https://github.com/theseer",
+                    "type": "github"
+                }
+            ],
+            "time": "2025-11-17T20:03:58+00:00"
+        },
+        {
+            "name": "yoast/phpunit-polyfills",
+            "version": "4.0.0",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/Yoast/PHPUnit-Polyfills.git",
+                "reference": "134921bfca9b02d8f374c48381451da1d98402f9"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/Yoast/PHPUnit-Polyfills/zipball/134921bfca9b02d8f374c48381451da1d98402f9",
+                "reference": "134921bfca9b02d8f374c48381451da1d98402f9",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=7.1",
+                "phpunit/phpunit": "^7.5 || ^8.0 || ^9.0 || ^11.0 || ^12.0"
+            },
+            "require-dev": {
+                "php-parallel-lint/php-console-highlighter": "^1.0.0",
+                "php-parallel-lint/php-parallel-lint": "^1.4.0",
+                "yoast/yoastcs": "^3.1.0"
+            },
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-main": "4.x-dev"
+                }
+            },
+            "autoload": {
+                "files": [
+                    "phpunitpolyfills-autoload.php"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "BSD-3-Clause"
+            ],
+            "authors": [
+                {
+                    "name": "Team Yoast",
+                    "email": "support@yoast.com",
+                    "homepage": "https://yoast.com"
+                },
+                {
+                    "name": "Contributors",
+                    "homepage": "https://github.com/Yoast/PHPUnit-Polyfills/graphs/contributors"
+                }
+            ],
+            "description": "Set of polyfills for changed PHPUnit functionality to allow for creating PHPUnit cross-version compatible tests",
+            "homepage": "https://github.com/Yoast/PHPUnit-Polyfills",
+            "keywords": [
+                "phpunit",
+                "polyfill",
+                "testing"
+            ],
+            "support": {
+                "issues": "https://github.com/Yoast/PHPUnit-Polyfills/issues",
+                "security": "https://github.com/Yoast/PHPUnit-Polyfills/security/policy",
+                "source": "https://github.com/Yoast/PHPUnit-Polyfills"
+            },
+            "time": "2025-02-09T18:58:54+00:00"
+        }
+    ],
+    "aliases": [],
+    "minimum-stability": "stable",
+    "stability-flags": {},
+    "prefer-stable": false,
+    "prefer-lowest": false,
+    "platform": {},
+    "platform-dev": {},
+    "platform-overrides": {
+        "php": "8.3"
+    },
+    "plugin-api-version": "2.9.0"
+}