`, favicon, and body of `Root()` to\nmatch your app's existing `index.html`, and stamp anything else your shell\nreferences directly (images, css) with `immutableFileUrl()`.\n\n1. Create `frontend/root.tsx`:\n\n```tsx\n/** @jsxImportSource npm:hono@4/jsx */\nimport { raw } from \"npm:hono@4/html\";\nimport { immutableFileUrl } from \"https://esm.town/v/std/utils/index.ts\";\n\n// The HTML shell for the app. It is never cached, so immutableFileUrl can stamp\n// the current val version into each asset URL — the browser caches those\n// immutably, and publishing the val changes the URLs, refetching exactly once.\nexport function Root() {\n return (\n <>\n {raw(\"<!DOCTYPE html>\")}\n <html lang=\"en\">\n <head>\n <meta charSet=\"UTF-8\" />\n <meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\" />\n <title>React Hono Val Town Starter

[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_348":349,"_350":351},"routes/_app.x.$handle.$name",{"_105":104,"_38":51,"_114":95,"_33":115,"_13":14,"_116":-5,"_11":117,"_118":119,"_120":121,"_122":123,"_124":125,"_26":-5,"_126":-5,"_127":-5,"_128":55,"_129":130,"_131":31,"_132":-5,"_133":-5,"_134":135},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":18,"_19":-5},"project",{"_49":50,"_38":51,"_44":52,"_53":-5,"_54":55,"_56":57,"_58":57,"_59":60,"_61":-5,"_19":62,"_63":64,"_65":31,"_66":-5,"_67":-5,"_68":69,"_70":71,"_72":73,"_74":75,"_76":77,"_78":-5,"_79":80,"_81":80,"_82":83,"_84":83,"_85":83,"_86":80,"_87":80,"_88":89,"_90":91,"_92":93,"_94":55},"version",48,"changes",[25],"aiChatInfo",{"_20":21,"_22":-5,"_23":-5,"_24":-5},"userId","aiChatMessageId","41faa52e-ea9a-4362-8bee-a59b9ac9db85","aiChatThreadId","aiChatThreadUserId","aiChatThreadTitle",{"_26":27,"_28":29,"_30":31,"_32":31,"_33":34,"_35":34},"file",{"_36":37,"_38":39,"_40":41,"_42":43,"_44":45,"_46":14,"_47":48,"_30":31},"previous",{"_36":37,"_38":39,"_40":41,"_42":43},"deleted",true,"deletedHere","path","lib/selftest2.ts","latestPath","fileId","d004455c-9ed9-11f1-94ad-1607ee4eb77e","name","selftest2.ts","fileType","script","content","import * as a from \"./auth.ts\";\n\nconst out: string[] = [];\nconst u1 = await a.signup({ username: \"anna_test\", email: \"anna@test.it\", password: \"segreto1\" });\nout.push(`signup anna ${u1.ok ? \"ok\" : u1.error}`);\nconst u2 = await a.signup({ username: \"bruno_test\", email: \"bruno@test.it\", password: \"segreto2\" });\nout.push(`signup bruno ${u2.ok ? \"ok\" : u2.error}`);\n\nconst add = await a.addFriend(\"anna_test\", \"bruno_test\");\nout.push(`friend add: ${JSON.stringify(add)}`);\nout.push(`friends(${JSON.stringify(await a.listFriends(\"anna_test\")).slice(0, 80)}`);\n\nconst msg = await a.sendMessage(\"anna_test\", \"bruno_test\", \"Ciao! Apri una stanza? :D\");\nout.push(`msg sent id=${msg?.id}`);\nconst msgs = await a.getMessages(\"bruno_test\", \"anna_test\", 0);\nout.push(`bruno sees ${msgs.length} msg: \"${msgs[0]?.text}\"`);\n\nawait a.notifyRoomInvites(\"bruno_test\", \"room123\");\nconst notifs = await a.getNotifications(\"anna_test\", 0);\nout.push(`anna got ${notifs.length} notif from=${notifs[0]?.data?.from} room=${notifs[0]?.data?.roomId}`);\n\nconsole.log(out.join(\"\\n\"));\n","createdAt",["D",1787479385386],"branchVersion","branchId","d37ffabd-ddb0-472a-8701-c0eef966a563","id","f7417c8d-2e35-43cf-b2d5-043eaf93137e","chaos-diner",["D",1787477491994],"deletedAt","legacyEnvVars",false,"privacy","public","httpPrivacy","description","Chaos Diner RPG – AI waiter, food fights & survival multiplayer","imageUrl","86c0904a-df90-4b28-8be9-0d0cd34688de","pinnedFileId","01a02df6-016f-774c-911b-10e7600604d6","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","01a02515-3428-7129-a58d-ee30dee1111b","tursoName","f7417c8d2e3543cfb2d5043eaf93137e","tursoHostname","f7417c8d2e3543cfb2d5043eaf93137e-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789476648181],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_105":104,"_113":109},"org",{"_105":104,"_106":107,"_108":109,"_19":62,"_110":111,"_112":55},"branch",{"_13":14,"_38":95,"_49":48,"_96":50,"_97":-5,"_98":-5,"_99":-5,"_100":-5,"_101":-5,"_102":51,"_103":104},"isOwned","main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","boh","handle","displayName","BCG Collaborazioni","avatar","https://lh3.googleusercontent.com/a/ACg8ocK88V05YV8HsO4yAaG3hTsa_rYvYnQ7JithXHAoBkrpvT9HmN8=s96-c","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_49":50,"_38":51,"_44":343,"_53":-5,"_54":55,"_56":57,"_58":57,"_59":60,"_61":-5,"_19":62,"_63":64,"_65":31,"_66":-5,"_67":-5,"_68":69,"_70":71,"_72":73,"_74":75,"_76":344,"_78":-5,"_79":80,"_81":80,"_82":83,"_84":83,"_85":83,"_86":80,"_87":80,"_88":345,"_90":346,"_92":347,"_94":55},"tree",[188,199,205,206,207],"files",[188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207],"counts",{"_178":69,"_179":157,"_180":69,"_181":182,"_183":184},"contents",[136,137,138,139,140],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_49":173,"_38":174,"_36":175,"_143":-5,"_47":48,"_46":157,"_145":31,"_44":176,"_13":69,"_40":171,"_42":-5,"_30":55,"_150":-5,"_33":177},{"_49":166,"_38":167,"_36":168,"_143":-5,"_47":48,"_46":169,"_145":31,"_44":170,"_13":69,"_40":171,"_42":-5,"_30":55,"_150":-5,"_33":172},{"_49":160,"_38":161,"_36":162,"_143":-5,"_47":48,"_46":157,"_145":31,"_44":163,"_13":69,"_40":26,"_42":164,"_30":55,"_150":-5,"_33":165},{"_49":152,"_38":153,"_36":154,"_143":-5,"_47":48,"_46":155,"_145":31,"_44":156,"_13":157,"_40":26,"_42":158,"_30":55,"_150":-5,"_33":159},{"_49":141,"_38":142,"_36":64,"_143":-5,"_47":48,"_46":144,"_145":31,"_44":146,"_13":147,"_40":148,"_42":149,"_30":55,"_150":51,"_33":151},"676eae59-7d17-4794-be56-17797f1e1dc4","index.ts","parentId",40,"latest",["D",1787479248743],6,"http","import { parseVal, serveImmutableFile } from \"https://esm.town/v/std/utils/index.ts\";\nimport { Hono } from \"npm:hono\";\nimport { Root } from \"./frontend/root.tsx\";\nimport * as game from \"./lib/game.ts\";\nimport * as auth from \"./lib/auth.ts\";\n\nfunction bearer(c: { req: Request }): string | null {\n return c.req.header(\"Authorization\")?.replace(/^Bearer\\s+/i, \"\") ?? null;\n}\n\n/** Returns the username if the request is authenticated, else a 401 response. */\nasync function requireAuth(c: { json: (x: unknown, s?: number) => Response; req: Request }) {\n const username = await auth.currentUser(bearer(c));\n if (!username) return { username: null, denied: c.json({ error: \"Non autenticato\" }, 401) };\n return { username, denied: null };\n}\n\nconst app = new Hono();\n\n// ---- frontend -------------------------------------------------------------\n\napp.get(\"/\", (c) => c.html(Root()));\napp.get(\"/__immutable/*\", (c) => serveImmutableFile(c.req.path));\napp.get(\"/source\", (c) => c.redirect(parseVal().links.self.val));\n\n// ---- helpers ---------------------------------------------------------------\n\nasync function readJson(c: { req: Request }): Promise> {\n try {\n return await c.req.json();\n } catch {\n return {};\n }\n}\n\n/** Look up the room, run a mutator, and persist + return the freshest state. */\nasync function mutate(\n c: { json: (x: unknown, status?: number) => Response },\n roomId: string,\n fn: () => Promise,\n ok = 200,\n): Promise {\n const result = await fn();\n if (result === null || result === undefined) {\n return c.json({ error: \"Stanza non trovata o azione non consentita\" }, 404);\n }\n return c.json(result, ok);\n}\n\n// ---- API ------------------------------------------------------------------\n\napp.post(\"/api/room\", async (c) => {\n const { name } = await readJson(c);\n const user = await auth.currentUser(bearer(c));\n const state = await game.createRoom(String(name ?? \"\").slice(0, 24), user ?? undefined);\n if (user) await auth.notifyRoomInvites(user, state.id); // 🔔 avvisa gli amici\n return c.json({ state, selfId: state.players[0].id }, 201);\n});\n\napp.post(\"/api/room/join\", async (c) => {\n const { code, name } = await readJson(c);\n const user = await auth.currentUser(bearer(c));\n const state = await game.joinRoom(\n String(code ?? \"\"),\n String(name ?? \"\").slice(0, 24),\n user ?? undefined,\n );\n if (!state) return c.json({ error: \"Codice non trovato\" }, 404);\n const me = user\n ? (state.players.find((p) => p.userId === user) ?? state.players[0])\n : (state.players.filter((p) => p.name === String(name ?? \"\").trim()).at(-1) ??\n state.players[0]);\n return c.json({ state, selfId: me.id });\n});\n\n// Poll: returns snapshot + incremental events, and advances time-based phases.\napp.get(\"/api/room/:id\", async (c) => {\n const id = c.req.param(\"id\");\n const since = Number(c.req.query(\"since\") ?? 0) || 0;\n const snap = await game.tick(id, since);\n if (!snap) return c.json({ error: \"Stanza non trovata\" }, 404);\n return c.json(snap);\n});\n\n// Full plates with embedded images (for serving animation + late joiners).\napp.get(\"/api/room/:id/plates\", async (c) => {\n const id = c.req.param(\"id\");\n const state = await game.getRoom(id);\n if (!state) return c.json({ error: \"Stanza non trovata\" }, 404);\n return c.json({ plates: game.getPlates(state) });\n});\n\napp.post(\"/api/room/:id/start\", async (c) => {\n const id = c.req.param(\"id\");\n return mutate(c, id, () => game.startDinner(id));\n});\n\napp.post(\"/api/room/:id/order\", async (c) => {\n const id = c.req.param(\"id\");\n const { player, orderText } = await readJson(c);\n return mutate(c, id, () =>\n game.placeOrder(id, String(player ?? \"\"), String(orderText ?? \"\")));\n});\n\napp.post(\"/api/room/:id/eat\", async (c) => {\n const id = c.req.param(\"id\");\n const { player } = await readJson(c);\n return mutate(c, id, () => game.eat(id, String(player ?? \"\")));\n});\n\napp.post(\"/api/room/:id/throw\", async (c) => {\n const id = c.req.param(\"id\");\n const { player, target } = await readJson(c);\n const t = target as { type?: string; playerId?: string };\n const parsed =\n t?.type === \"player\" && t.playerId\n ? { type: \"player\", playerId: t.playerId } as const\n : { type: \"waiter\" } as const;\n return mutate(c, id, () => game.throwFood(id, String(player ?? \"\"), parsed));\n});\n\napp.post(\"/api/room/:id/respond\", async (c) => {\n const id = c.req.param(\"id\");\n const { player, choice } = await readJson(c);\n const ch = choice === \"retaliate\" ? \"retaliate\" : \"peace\";\n return mutate(c, id, () => game.respond(id, String(player ?? \"\"), ch));\n});\n\napp.post(\"/api/room/:id/survive\", async (c) => {\n const id = c.req.param(\"id\");\n const { player, choice } = await readJson(c);\n return mutate(c, id, () =>\n game.survive(id, String(player ?? \"\"), String(choice ?? \"\")));\n});\n\n// -- serve a \"serving done\" fast-forward (client finished the animation) ----\napp.post(\"/api/room/:id/servingDone\", async (c) => {\n const id = c.req.param(\"id\");\n return mutate(c, id, async () => {\n const state = await game.getRoom(id);\n if (!state || state.phase !== \"serving\") return state;\n state.phase = \"chill\";\n await game.addEvent(id, \"SERVING_DONE\", {});\n await game.saveRoom(state);\n return state;\n });\n});\n\napp.onError((err) => Promise.reject(err));\n\n// ============================================================ ACCOUNTS =====\n\napp.post(\"/api/auth/signup\", async (c) => {\n const body = await readJson(c);\n const res = await auth.signup({\n username: String(body.username ?? \"\"),\n email: String(body.email ?? \"\"),\n password: String(body.password ?? \"\"),\n });\n if (res.error) return c.json(res, 400);\n return c.json(res, 201);\n});\n\napp.post(\"/api/auth/login\", async (c) => {\n const body = await readJson(c);\n const res = await auth.login({\n email: String(body.email ?? \"\"),\n password: String(body.password ?? \"\"),\n });\n if (res.error) return c.json(res, 401);\n return c.json(res);\n});\n\napp.post(\"/api/auth/logout\", async (c) => {\n await auth.logout(bearer(c));\n return c.json({ ok: true });\n});\n\napp.get(\"/api/me\", async (c) => {\n const username = await auth.currentUser(bearer(c));\n if (!username) return c.json({ error: \"Non autenticato\" }, 401);\n return c.json({ username });\n});\n\n// ============================================================ FRIENDS =======\n\napp.get(\"/api/friends\", async (c) => {\n const u = await requireAuth(c);\n if (u.denied) return u.denied;\n return c.json({ friends: await auth.listFriends(u.username) });\n});\n\napp.post(\"/api/friends\", async (c) => {\n const u = await requireAuth(c);\n if (u.denied) return u.denied;\n const { identifier } = await readJson(c);\n const res = await auth.addFriend(u.username, String(identifier ?? \"\"));\n if (res.error) return c.json(res, 400);\n return c.json({ ok: true });\n});\n\napp.delete(\"/api/friends/:username\", async (c) => {\n const u = await requireAuth(c);\n if (u.denied) return u.denied;\n await auth.removeFriend(u.username, c.req.param(\"username\"));\n return c.json({ ok: true });\n});\n\n// ============================================================ CHAT ==========\n\napp.get(\"/api/chat/:friend\", async (c) => {\n const u = await requireAuth(c);\n if (u.denied) return u.denied;\n const since = Number(c.req.query(\"since\") ?? 0) || 0;\n return c.json({ messages: await auth.getMessages(u.username, c.req.param(\"friend\"), since) });\n});\n\napp.post(\"/api/chat/:friend\", async (c) => {\n const u = await requireAuth(c);\n if (u.denied) return u.denied;\n const { text } = await readJson(c);\n const msg = await auth.sendMessage(u.username, c.req.param(\"friend\"), String(text ?? \"\"));\n if (!msg) return c.json({ error: \"Messaggio vuoto\" }, 400);\n return c.json({ message: msg });\n});\n\n// ======================================================= NOTIFICATIONS ======\n\napp.get(\"/api/notifications\", async (c) => {\n const u = await requireAuth(c);\n if (u.denied) return u.denied;\n const since = Number(c.req.query(\"since\") ?? 0) || 0;\n return c.json({ notifications: await auth.getNotifications(u.username, since) });\n});\n\n/** Accept a friend's room invite → join the room without any code. */\napp.post(\"/api/invite/:roomId\", async (c) => {\n const u = await requireAuth(c);\n if (u.denied) return u.denied;\n const { notifId } = await readJson(c);\n const roomId = c.req.param(\"roomId\");\n const state = await game.joinRoomById(roomId, u.username, u.username);\n if (!state) return c.json({ error: \"Stanza non trovata\" }, 404);\n if (notifId) await auth.markAccept(u.username, Number(notifId));\n const me = state.players.find((p) => p.userId === u.username) ?? state.players[0];\n return c.json({ state, selfId: me.id });\n});\n\nexport default app.fetch;\n","label",[142],"2eae2d98-92b1-4a8a-90b8-1c7756f1ffe5","README.md","01a02df6-016f-774c-911b-0f8a49cdb17a",20,["D",1787477879281],1,"# 🍝 Chaos Diner RPG\n\nUn'innocua cena al ristorante che si trasforma in un'arena di caos **multiplayer in tempo reale**, alimentata dall'**AI Cameriere** (Gemini).\n\n👉 **Gioca subito:** \n\n## 🎮 Come si gioca\n\n1. **Lobby** — un giocatore apre la stanza e condivide il codice con gli amici (ognuno entra da un proprio tab con **\"Entra\"**).\n2. **Ordinazione** — l'**AI Cameriere** ti dà il benvenuto e raccoglie l'ordine di ogni commensale, scritto in linguaggio naturale (es. *\"Cotoletta con patatine e una bibita\"*).\n3. **Servizio** — il Cameriere va in cucina, genera **l'immagine del piatto per ogni commensale** e torna con le pietanze **impilate una sopra l'altra**, distribuendole a ognuno in base a ciò che ha ordinato.\n4. **La scelta** — a ogni giocatore compare la forchetta con **🍴 Mangia Tranquillo** oppure **🍝 Lancia il Cibo**.\n5. **Food Fight & Fuga** — lanciare il cibo fa partire lo **scratch del vinile** e la traccia Heavy Metal. Bersaglia un commensale o il Cameriere: ogni lancio alimenta la sua **rabbia (0-100)**. Sopra la soglia, il Cameriere va in **RAGE** e parte la fase di **fuga**: nasconditi, scappa, lancia una sedia… chi viene beccato è **eliminato** e passa in modalità **Spettatore**. Sopravvive solo il più scaltro.\n\n## 🔧 Architettura (Val.town)\n\n```\nindex.ts ← server Hono: HTML + API\nlib/\n game.ts ← macchina a stati (LOBBY→ORDERING→SERVING→CHILL→CHASE→ENDED), rabbia, fuga\n ai.ts ← Cameriere AI (chat) + generazione immagini piatti (Gemini)\n db.ts ← SQLite (val-scoped): stanze + log eventi\n types.ts ← tipi condivisi client/server\nfrontend/\n root.tsx ← HTML shell\n audio.ts ← motore audio (scratch/metalli via Web Audio)\n api.ts ← client API + sessione (localStorage)\n components/ ← Lobby, GameScreen (tavolo, servizio, food fight, fuga)\n```\n\n- **Real-time**: polling (~1.2s) su `GET /api/room/:id?since=…` con eventi incrementali — serverless-friendly (niente WebSocket).\n- **Immagini piatti**: embeddate come data-URL negli eventi (`SERVING`), servite a ogni client; il polling resta leggero.\n- **Audio**: scratch del vinile e riff Heavy Metal generati in Web Audio (nessun asset esterno). Se vuoi colonne reali, punta due URL in `frontend/audio.ts` → `setPlaylist(lofiUrl, metalUrl)`.\n\n## ⚙️ Configurazione\n\nLa chiave **Gemini** vive nella env var `GEMINI_API_KEY` (mai nel codice). Modelli usati:\n- **Chat** (Cameriere): `gemini-3.5-flash` — attivo.\n- **Immagini** (piatti): `gemini-2.5-flash-image` — richiede **quota** sull'account (limite 0 sul piano free). Se non disponibile, il gioco usa un piatto segnaposto SVG come fallback.\n",[153],"d4196661-d5a3-44a8-9acb-9c96e3e22721","CHANGELOG.md","01a02df6-016f-774c-911b-0ba924477586",["D",1787477491994],"# Changelog\n\n## 2026-07-30 — Immutable asset caching\n\nFrontend files are now served at version-addressed URLs\n(`/__immutable/45/frontend/index.tsx`) with\n`Cache-Control: public, max-age=31536000, immutable`, so repeat visits load the\nwhole client graph from the browser cache — roughly 3× faster (~665ms → ~157ms\nmeasured). Publishing your val bumps its version, which changes every URL, so\ncaches invalidate automatically. Old-version URLs return 404 after a publish\n(like Next.js build assets); a reload picks up the new version.\n\nWhat changed in the template:\n\n- `frontend/index.html` → [`frontend/root.tsx`](/frontend/root.tsx): the HTML\n shell is now JSX and stamps asset URLs with `immutableFileUrl()`\n- [`index.ts`](/index.ts): serves `Root()` at `/`, and one\n `app.get(\"/__immutable/*\", (c) => serveImmutableFile(c.req.path))` route\n serves all frontend files\n\n### Upgrading an existing remix\n\nYour copy of this template doesn't update automatically. Two options:\n\n**Minimal (most of the benefit):** point both routes at `serveImmutableFile` —\nyour existing bare URLs redirect into versioned space, the new route serves\nthem, and the whole module graph gets cached (costs one redirect per page view):\n\n```ts\nimport { serveImmutableFile } from \"https://esm.town/v/std/utils/index.ts\";\n\napp.get(\"/__immutable/*\", (c) => serveImmutableFile(c.req.path));\napp.get(\"/frontend/**/*\", (c) => serveImmutableFile(c.req.path)); // was serveFile\n```\n\n**Full upgrade (also removes the redirect):** three self-contained steps —\nno other files needed. Adjust the ``, favicon, and body of `Root()` to\nmatch your app's existing `index.html`, and stamp anything else your shell\nreferences directly (images, css) with `immutableFileUrl()`.\n\n1. Create `frontend/root.tsx`:\n\n```tsx\n/** @jsxImportSource npm:hono@4/jsx */\nimport { raw } from \"npm:hono@4/html\";\nimport { immutableFileUrl } from \"https://esm.town/v/std/utils/index.ts\";\n\n// The HTML shell for the app. It is never cached, so immutableFileUrl can stamp\n// the current val version into each asset URL — the browser caches those\n// immutably, and publishing the val changes the URLs, refetching exactly once.\nexport function Root() {\n return (\n <>\n {raw(\"<!DOCTYPE html>\")}\n <html lang=\"en\">\n <head>\n <meta charSet=\"UTF-8\" />\n <meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\" />\n <title>React Hono Val Town Starter\n

Diff · v48