`, favicon, and body of `Root()` to\nmatch your app's existing `index.html`, and stamp anything else your shell\nreferences directly (images, css) with `immutableFileUrl()`.\n\n1. Create `frontend/root.tsx`:\n\n```tsx\n/** @jsxImportSource npm:hono@4/jsx */\nimport { raw } from \"npm:hono@4/html\";\nimport { immutableFileUrl } from \"https://esm.town/v/std/utils/index.ts\";\n\n// The HTML shell for the app. It is never cached, so immutableFileUrl can stamp\n// the current val version into each asset URL — the browser caches those\n// immutably, and publishing the val changes the URLs, refetching exactly once.\nexport function Root() {\n return (\n <>\n {raw(\"<!DOCTYPE html>\")}\n <html lang=\"en\">\n <head>\n <meta charSet=\"UTF-8\" />\n <meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\" />\n <title>React Hono Val Town Starter

\n 🍝\n Cerco il tavolo…\n

\n );\n }\n\n return (\n <>\n post(roomPath(\"/start\"), {})}\n onOrder={(text) => post(roomPath(\"/order\"), { player: session.playerId, orderText: text })}\n onEat={() => post(roomPath(\"/eat\"), { player: session.playerId })}\n onThrow={(target) => post(roomPath(\"/throw\"), { player: session.playerId, target })}\n onRespond={(choice) => post(roomPath(\"/respond\"), { player: session.playerId, choice })}\n onSurvive={(choice) => post(roomPath(\"/survive\"), { player: session.playerId, choice })}\n onServingDone={() => post(roomPath(\"/servingDone\"), {})}\n onLeave={() => {\n clearSession();\n setSession(null);\n }}\n />\n setSocialOpen(true)} />\n {socialOpen && (\n { saveAccount(a); setAccount(a); }}\n onLogout={() => { api.logout(); clearAccount(); setAccount(null); }}\n onJoinRoom={joinFromInvite}\n onClose={() => setSocialOpen(false)}\n />\n )}\n setInvites((prev) => prev.filter((n) => n.id !== id))}\n />\n \n );\n}\n\nfunction FloatingSocial({ onOpen }: { onOpen: () => void }) {\n return (\n \n 👥\n \n );\n}\n\nfunction SocialOverlay({\n account,\n onAuthed,\n onLogout,\n onJoinRoom,\n onClose,\n}: {\n account: Account | null;\n onAuthed: (a: Account) => void;\n onLogout: () => void;\n onJoinRoom: (roomId: string, notifId: number) => void;\n onClose: () => void;\n}) {\n if (!account) {\n return (\n

\n e.stopPropagation()}\n >\n

\n 👤 Account\n \n

\n \n

\n \n );\n }\n return (\n \n );\n}\n","label",[189,190,70],"frontend","components","pulls","branches","forks","envVars",{"_198":42,"_200":26},"connections",{"_198":26,"_199":26},"count","unfilledCount","emptyCount",{"_35":366,"_13":189,"_68":298,"_45":-5,"_37":38,"_181":42,"_182":117,"_39":367,"_41":26,"_71":292,"_185":-5,"_73":24,"_187":-5,"_228":368,"_17":369},{"_35":362,"_13":190,"_68":180,"_45":298,"_37":38,"_181":42,"_182":117,"_39":363,"_41":26,"_71":292,"_185":-5,"_73":24,"_187":-5,"_228":364,"_17":365},{"_35":179,"_13":70,"_68":69,"_45":180,"_37":38,"_181":97,"_182":117,"_39":359,"_41":184,"_71":72,"_185":186,"_73":24,"_187":-5,"_228":360,"_17":361},{"_35":350,"_13":351,"_68":352,"_45":180,"_37":38,"_181":353,"_182":117,"_39":354,"_41":355,"_71":72,"_185":356,"_73":24,"_187":-5,"_228":357,"_17":358},{"_35":342,"_13":343,"_68":344,"_45":180,"_37":38,"_181":345,"_182":117,"_39":346,"_41":252,"_71":72,"_185":347,"_73":24,"_187":-5,"_228":348,"_17":349},{"_35":334,"_13":335,"_68":336,"_45":180,"_37":38,"_181":337,"_182":117,"_39":338,"_41":26,"_71":72,"_185":339,"_73":24,"_187":-5,"_228":340,"_17":341},{"_35":326,"_13":327,"_68":328,"_45":298,"_37":38,"_181":329,"_182":117,"_39":330,"_41":252,"_71":72,"_185":331,"_73":24,"_187":-5,"_228":332,"_17":333},{"_35":318,"_13":319,"_68":320,"_45":298,"_37":38,"_181":321,"_182":117,"_39":322,"_41":26,"_71":72,"_185":323,"_73":24,"_187":-5,"_228":324,"_17":325},{"_35":311,"_13":312,"_68":313,"_45":298,"_37":38,"_181":42,"_182":117,"_39":314,"_41":26,"_71":21,"_185":315,"_73":24,"_187":-5,"_228":316,"_17":317},{"_35":304,"_13":305,"_68":306,"_45":298,"_37":38,"_181":42,"_182":117,"_39":307,"_41":26,"_71":72,"_185":308,"_73":24,"_187":-5,"_228":309,"_17":310},{"_35":295,"_13":296,"_68":297,"_45":298,"_37":38,"_181":299,"_182":117,"_39":300,"_41":42,"_71":72,"_185":301,"_73":24,"_187":-5,"_228":302,"_17":303},{"_35":290,"_13":256,"_68":249,"_45":-5,"_37":38,"_181":252,"_182":117,"_39":291,"_41":26,"_71":292,"_185":-5,"_73":24,"_187":-5,"_228":293,"_17":294},{"_35":282,"_13":283,"_68":284,"_45":249,"_37":38,"_181":285,"_182":117,"_39":286,"_41":42,"_71":72,"_185":287,"_73":24,"_187":-5,"_228":288,"_17":289},{"_35":274,"_13":275,"_68":276,"_45":249,"_37":38,"_181":277,"_182":117,"_39":278,"_41":42,"_71":72,"_185":279,"_73":24,"_187":-5,"_228":280,"_17":281},{"_35":266,"_13":267,"_68":268,"_45":249,"_37":38,"_181":269,"_182":117,"_39":270,"_41":42,"_71":72,"_185":271,"_73":24,"_187":-5,"_228":272,"_17":273},{"_35":257,"_13":258,"_68":259,"_45":249,"_37":38,"_181":260,"_182":117,"_39":261,"_41":262,"_71":72,"_185":263,"_73":24,"_187":-5,"_228":264,"_17":265},{"_35":246,"_13":247,"_68":248,"_45":249,"_37":38,"_181":250,"_182":117,"_39":251,"_41":252,"_71":72,"_185":253,"_73":24,"_187":-5,"_228":254,"_17":255},{"_35":239,"_13":240,"_68":241,"_45":-5,"_37":38,"_181":42,"_182":117,"_39":242,"_41":26,"_71":21,"_185":243,"_73":24,"_187":-5,"_228":244,"_17":245},{"_35":231,"_13":232,"_68":233,"_45":-5,"_37":38,"_181":234,"_182":117,"_39":235,"_41":42,"_71":21,"_185":236,"_73":24,"_187":-5,"_228":237,"_17":238},{"_35":221,"_13":222,"_68":115,"_45":-5,"_37":38,"_181":223,"_182":117,"_39":224,"_41":225,"_71":226,"_185":227,"_73":24,"_187":14,"_228":229,"_17":230},"676eae59-7d17-4794-be56-17797f1e1dc4","index.ts",40,["D",1787479248743],6,"http","import { parseVal, serveImmutableFile } from \"https://esm.town/v/std/utils/index.ts\";\nimport { Hono } from \"npm:hono\";\nimport { Root } from \"./frontend/root.tsx\";\nimport * as game from \"./lib/game.ts\";\nimport * as auth from \"./lib/auth.ts\";\n\nfunction bearer(c: { req: Request }): string | null {\n return c.req.header(\"Authorization\")?.replace(/^Bearer\\s+/i, \"\") ?? null;\n}\n\n/** Returns the username if the request is authenticated, else a 401 response. */\nasync function requireAuth(c: { json: (x: unknown, s?: number) => Response; req: Request }) {\n const username = await auth.currentUser(bearer(c));\n if (!username) return { username: null, denied: c.json({ error: \"Non autenticato\" }, 401) };\n return { username, denied: null };\n}\n\nconst app = new Hono();\n\n// ---- frontend -------------------------------------------------------------\n\napp.get(\"/\", (c) => c.html(Root()));\napp.get(\"/__immutable/*\", (c) => serveImmutableFile(c.req.path));\napp.get(\"/source\", (c) => c.redirect(parseVal().links.self.val));\n\n// ---- helpers ---------------------------------------------------------------\n\nasync function readJson(c: { req: Request }): Promise> {\n try {\n return await c.req.json();\n } catch {\n return {};\n }\n}\n\n/** Look up the room, run a mutator, and persist + return the freshest state. */\nasync function mutate(\n c: { json: (x: unknown, status?: number) => Response },\n roomId: string,\n fn: () => Promise,\n ok = 200,\n): Promise {\n const result = await fn();\n if (result === null || result === undefined) {\n return c.json({ error: \"Stanza non trovata o azione non consentita\" }, 404);\n }\n return c.json(result, ok);\n}\n\n// ---- API ------------------------------------------------------------------\n\napp.post(\"/api/room\", async (c) => {\n const { name } = await readJson(c);\n const user = await auth.currentUser(bearer(c));\n const state = await game.createRoom(String(name ?? \"\").slice(0, 24), user ?? undefined);\n if (user) await auth.notifyRoomInvites(user, state.id); // 🔔 avvisa gli amici\n return c.json({ state, selfId: state.players[0].id }, 201);\n});\n\napp.post(\"/api/room/join\", async (c) => {\n const { code, name } = await readJson(c);\n const user = await auth.currentUser(bearer(c));\n const state = await game.joinRoom(\n String(code ?? \"\"),\n String(name ?? \"\").slice(0, 24),\n user ?? undefined,\n );\n if (!state) return c.json({ error: \"Codice non trovato\" }, 404);\n const me = user\n ? (state.players.find((p) => p.userId === user) ?? state.players[0])\n : (state.players.filter((p) => p.name === String(name ?? \"\").trim()).at(-1) ??\n state.players[0]);\n return c.json({ state, selfId: me.id });\n});\n\n// Poll: returns snapshot + incremental events, and advances time-based phases.\napp.get(\"/api/room/:id\", async (c) => {\n const id = c.req.param(\"id\");\n const since = Number(c.req.query(\"since\") ?? 0) || 0;\n const snap = await game.tick(id, since);\n if (!snap) return c.json({ error: \"Stanza non trovata\" }, 404);\n return c.json(snap);\n});\n\n// Full plates with embedded images (for serving animation + late joiners).\napp.get(\"/api/room/:id/plates\", async (c) => {\n const id = c.req.param(\"id\");\n const state = await game.getRoom(id);\n if (!state) return c.json({ error: \"Stanza non trovata\" }, 404);\n return c.json({ plates: game.getPlates(state) });\n});\n\napp.post(\"/api/room/:id/start\", async (c) => {\n const id = c.req.param(\"id\");\n return mutate(c, id, () => game.startDinner(id));\n});\n\napp.post(\"/api/room/:id/order\", async (c) => {\n const id = c.req.param(\"id\");\n const { player, orderText } = await readJson(c);\n return mutate(c, id, () =>\n game.placeOrder(id, String(player ?? \"\"), String(orderText ?? \"\")));\n});\n\napp.post(\"/api/room/:id/eat\", async (c) => {\n const id = c.req.param(\"id\");\n const { player } = await readJson(c);\n return mutate(c, id, () => game.eat(id, String(player ?? \"\")));\n});\n\napp.post(\"/api/room/:id/throw\", async (c) => {\n const id = c.req.param(\"id\");\n const { player, target } = await readJson(c);\n const t = target as { type?: string; playerId?: string };\n const parsed =\n t?.type === \"player\" && t.playerId\n ? { type: \"player\", playerId: t.playerId } as const\n : { type: \"waiter\" } as const;\n return mutate(c, id, () => game.throwFood(id, String(player ?? \"\"), parsed));\n});\n\napp.post(\"/api/room/:id/respond\", async (c) => {\n const id = c.req.param(\"id\");\n const { player, choice } = await readJson(c);\n const ch = choice === \"retaliate\" ? \"retaliate\" : \"peace\";\n return mutate(c, id, () => game.respond(id, String(player ?? \"\"), ch));\n});\n\napp.post(\"/api/room/:id/survive\", async (c) => {\n const id = c.req.param(\"id\");\n const { player, choice } = await readJson(c);\n return mutate(c, id, () =>\n game.survive(id, String(player ?? \"\"), String(choice ?? \"\")));\n});\n\n// -- serve a \"serving done\" fast-forward (client finished the animation) ----\napp.post(\"/api/room/:id/servingDone\", async (c) => {\n const id = c.req.param(\"id\");\n return mutate(c, id, async () => {\n const state = await game.getRoom(id);\n if (!state || state.phase !== \"serving\") return state;\n state.phase = \"chill\";\n await game.addEvent(id, \"SERVING_DONE\", {});\n await game.saveRoom(state);\n return state;\n });\n});\n\napp.onError((err) => Promise.reject(err));\n\n// ============================================================ ACCOUNTS =====\n\napp.post(\"/api/auth/signup\", async (c) => {\n const body = await readJson(c);\n const res = await auth.signup({\n username: String(body.username ?? \"\"),\n email: String(body.email ?? \"\"),\n password: String(body.password ?? \"\"),\n });\n if (res.error) return c.json(res, 400);\n return c.json(res, 201);\n});\n\napp.post(\"/api/auth/login\", async (c) => {\n const body = await readJson(c);\n const res = await auth.login({\n email: String(body.email ?? \"\"),\n password: String(body.password ?? \"\"),\n });\n if (res.error) return c.json(res, 401);\n return c.json(res);\n});\n\napp.post(\"/api/auth/logout\", async (c) => {\n await auth.logout(bearer(c));\n return c.json({ ok: true });\n});\n\napp.get(\"/api/me\", async (c) => {\n const username = await auth.currentUser(bearer(c));\n if (!username) return c.json({ error: \"Non autenticato\" }, 401);\n return c.json({ username });\n});\n\n// ============================================================ FRIENDS =======\n\napp.get(\"/api/friends\", async (c) => {\n const u = await requireAuth(c);\n if (u.denied) return u.denied;\n return c.json({ friends: await auth.listFriends(u.username) });\n});\n\napp.post(\"/api/friends\", async (c) => {\n const u = await requireAuth(c);\n if (u.denied) return u.denied;\n const { identifier } = await readJson(c);\n const res = await auth.addFriend(u.username, String(identifier ?? \"\"));\n if (res.error) return c.json(res, 400);\n return c.json({ ok: true });\n});\n\napp.delete(\"/api/friends/:username\", async (c) => {\n const u = await requireAuth(c);\n if (u.denied) return u.denied;\n await auth.removeFriend(u.username, c.req.param(\"username\"));\n return c.json({ ok: true });\n});\n\n// ============================================================ CHAT ==========\n\napp.get(\"/api/chat/:friend\", async (c) => {\n const u = await requireAuth(c);\n if (u.denied) return u.denied;\n const since = Number(c.req.query(\"since\") ?? 0) || 0;\n return c.json({ messages: await auth.getMessages(u.username, c.req.param(\"friend\"), since) });\n});\n\napp.post(\"/api/chat/:friend\", async (c) => {\n const u = await requireAuth(c);\n if (u.denied) return u.denied;\n const { text } = await readJson(c);\n const msg = await auth.sendMessage(u.username, c.req.param(\"friend\"), String(text ?? \"\"));\n if (!msg) return c.json({ error: \"Messaggio vuoto\" }, 400);\n return c.json({ message: msg });\n});\n\n// ======================================================= NOTIFICATIONS ======\n\napp.get(\"/api/notifications\", async (c) => {\n const u = await requireAuth(c);\n if (u.denied) return u.denied;\n const since = Number(c.req.query(\"since\") ?? 0) || 0;\n return c.json({ notifications: await auth.getNotifications(u.username, since) });\n});\n\n/** Accept a friend's room invite → join the room without any code. */\napp.post(\"/api/invite/:roomId\", async (c) => {\n const u = await requireAuth(c);\n if (u.denied) return u.denied;\n const { notifId } = await readJson(c);\n const roomId = c.req.param(\"roomId\");\n const state = await game.joinRoomById(roomId, u.username, u.username);\n if (!state) return c.json({ error: \"Stanza non trovata\" }, 404);\n if (notifId) await auth.markAccept(u.username, Number(notifId));\n const me = state.players.find((p) => p.userId === u.username) ?? state.players[0];\n return c.json({ state, selfId: me.id });\n});\n\nexport default app.fetch;\n","children",[],[222],"2eae2d98-92b1-4a8a-90b8-1c7756f1ffe5","README.md","01a02df6-016f-774c-911b-0f8a49cdb17a",20,["D",1787477879281],"# 🍝 Chaos Diner RPG\n\nUn'innocua cena al ristorante che si trasforma in un'arena di caos **multiplayer in tempo reale**, alimentata dall'**AI Cameriere** (Gemini).\n\n👉 **Gioca subito:** \n\n## 🎮 Come si gioca\n\n1. **Lobby** — un giocatore apre la stanza e condivide il codice con gli amici (ognuno entra da un proprio tab con **\"Entra\"**).\n2. **Ordinazione** — l'**AI Cameriere** ti dà il benvenuto e raccoglie l'ordine di ogni commensale, scritto in linguaggio naturale (es. *\"Cotoletta con patatine e una bibita\"*).\n3. **Servizio** — il Cameriere va in cucina, genera **l'immagine del piatto per ogni commensale** e torna con le pietanze **impilate una sopra l'altra**, distribuendole a ognuno in base a ciò che ha ordinato.\n4. **La scelta** — a ogni giocatore compare la forchetta con **🍴 Mangia Tranquillo** oppure **🍝 Lancia il Cibo**.\n5. **Food Fight & Fuga** — lanciare il cibo fa partire lo **scratch del vinile** e la traccia Heavy Metal. Bersaglia un commensale o il Cameriere: ogni lancio alimenta la sua **rabbia (0-100)**. Sopra la soglia, il Cameriere va in **RAGE** e parte la fase di **fuga**: nasconditi, scappa, lancia una sedia… chi viene beccato è **eliminato** e passa in modalità **Spettatore**. Sopravvive solo il più scaltro.\n\n## 🔧 Architettura (Val.town)\n\n```\nindex.ts ← server Hono: HTML + API\nlib/\n game.ts ← macchina a stati (LOBBY→ORDERING→SERVING→CHILL→CHASE→ENDED), rabbia, fuga\n ai.ts ← Cameriere AI (chat) + generazione immagini piatti (Gemini)\n db.ts ← SQLite (val-scoped): stanze + log eventi\n types.ts ← tipi condivisi client/server\nfrontend/\n root.tsx ← HTML shell\n audio.ts ← motore audio (scratch/metalli via Web Audio)\n api.ts ← client API + sessione (localStorage)\n components/ ← Lobby, GameScreen (tavolo, servizio, food fight, fuga)\n```\n\n- **Real-time**: polling (~1.2s) su `GET /api/room/:id?since=…` con eventi incrementali — serverless-friendly (niente WebSocket).\n- **Immagini piatti**: embeddate come data-URL negli eventi (`SERVING`), servite a ogni client; il polling resta leggero.\n- **Audio**: scratch del vinile e riff Heavy Metal generati in Web Audio (nessun asset esterno). Se vuoi colonne reali, punta due URL in `frontend/audio.ts` → `setPlaylist(lofiUrl, metalUrl)`.\n\n## ⚙️ Configurazione\n\nLa chiave **Gemini** vive nella env var `GEMINI_API_KEY` (mai nel codice). Modelli usati:\n- **Chat** (Cameriere): `gemini-3.5-flash` — attivo.\n- **Immagini** (piatti): `gemini-2.5-flash-image` — richiede **quota** sull'account (limite 0 sul piano free). Se non disponibile, il gioco usa un piatto segnaposto SVG come fallback.\n",[],[232],"d4196661-d5a3-44a8-9acb-9c96e3e22721","CHANGELOG.md","01a02df6-016f-774c-911b-0ba924477586",["D",1787477491994],"# Changelog\n\n## 2026-07-30 — Immutable asset caching\n\nFrontend files are now served at version-addressed URLs\n(`/__immutable/45/frontend/index.tsx`) with\n`Cache-Control: public, max-age=31536000, immutable`, so repeat visits load the\nwhole client graph from the browser cache — roughly 3× faster (~665ms → ~157ms\nmeasured). Publishing your val bumps its version, which changes every URL, so\ncaches invalidate automatically. Old-version URLs return 404 after a publish\n(like Next.js build assets); a reload picks up the new version.\n\nWhat changed in the template:\n\n- `frontend/index.html` → [`frontend/root.tsx`](/frontend/root.tsx): the HTML\n shell is now JSX and stamps asset URLs with `immutableFileUrl()`\n- [`index.ts`](/index.ts): serves `Root()` at `/`, and one\n `app.get(\"/__immutable/*\", (c) => serveImmutableFile(c.req.path))` route\n serves all frontend files\n\n### Upgrading an existing remix\n\nYour copy of this template doesn't update automatically. Two options:\n\n**Minimal (most of the benefit):** point both routes at `serveImmutableFile` —\nyour existing bare URLs redirect into versioned space, the new route serves\nthem, and the whole module graph gets cached (costs one redirect per page view):\n\n```ts\nimport { serveImmutableFile } from \"https://esm.town/v/std/utils/index.ts\";\n\napp.get(\"/__immutable/*\", (c) => serveImmutableFile(c.req.path));\napp.get(\"/frontend/**/*\", (c) => serveImmutableFile(c.req.path)); // was serveFile\n```\n\n**Full upgrade (also removes the redirect):** three self-contained steps —\nno other files needed. Adjust the ``, favicon, and body of `Root()` to\nmatch your app's existing `index.html`, and stamp anything else your shell\nreferences directly (images, css) with `immutableFileUrl()`.\n\n1. Create `frontend/root.tsx`:\n\n```tsx\n/** @jsxImportSource npm:hono@4/jsx */\nimport { raw } from \"npm:hono@4/html\";\nimport { immutableFileUrl } from \"https://esm.town/v/std/utils/index.ts\";\n\n// The HTML shell for the app. It is never cached, so immutableFileUrl can stamp\n// the current val version into each asset URL — the browser caches those\n// immutably, and publishing the val changes the URLs, refetching exactly once.\nexport function Root() {\n return (\n <>\n {raw(\"<!DOCTYPE html>\")}\n <html lang=\"en\">\n <head>\n <meta charSet=\"UTF-8\" />\n <meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\" />\n <title>React Hono Val Town Starter\n

History · App.tsx