`, favicon, and body of `Root()` to\nmatch your app's existing `index.html`, and stamp anything else your shell\nreferences directly (images, css) with `immutableFileUrl()`.\n\n1. Create `frontend/root.tsx`:\n\n```tsx\n/** @jsxImportSource npm:hono@4/jsx */\nimport { raw } from \"npm:hono@4/html\";\nimport { immutableFileUrl } from \"https://esm.town/v/std/utils/index.ts\";\n\n// The HTML shell for the app. It is never cached, so immutableFileUrl can stamp\n// the current val version into each asset URL — the browser caches those\n// immutably, and publishing the val changes the URLs, refetching exactly once.\nexport function Root() {\n return (\n <>\n {raw(\"<!DOCTYPE html>\")}\n <html lang=\"en\">\n <head>\n <meta charSet=\"UTF-8\" />\n <meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\" />\n <title>React Hono Val Town Starter

[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_383":384,"_385":386},"routes/_app.x.$handle.$name",{"_11":12,"_13":14,"_15":-7,"_18":19,"_17":-7,"_289":-5,"_20":290,"_22":291,"_292":293,"_294":295,"_26":296,"_24":297,"_298":-5,"_299":-5,"_300":51,"_301":302,"_303":43,"_304":-5,"_305":-5,"_306":307},"routes/_app.x.$handle.$name.code.$",{"_11":12,"_13":14,"_15":16,"_17":-7,"_18":19,"_20":21,"_22":23,"_24":25,"_26":27,"_28":-5,"_29":-5,"_30":-5,"_31":-5,"_32":-5},"handle","boh","name","chaos-diner","branchName","main","version","path","README.md","project",{"_33":230,"_13":14,"_44":231,"_232":-5,"_233":51,"_234":235,"_236":235,"_237":238,"_239":-5,"_240":241,"_242":61,"_243":43,"_244":-5,"_245":-5,"_246":77,"_247":248,"_249":250,"_251":252,"_253":254,"_255":-5,"_256":257,"_258":257,"_259":260,"_261":260,"_262":260,"_263":257,"_264":257,"_265":266,"_267":268,"_269":270,"_271":51},"tree",[54,55,56,57,58],"file",{"_33":34,"_13":19,"_35":36,"_37":-5,"_38":39,"_40":41,"_42":43,"_44":45,"_17":46,"_47":24,"_48":49,"_50":51,"_52":-5,"_18":53},"contents",[],"upstream","pull","ahead","behind","envVars","id","2eae2d98-92b1-4a8a-90b8-1c7756f1ffe5","fileId","01a02df6-016f-774c-911b-0f8a49cdb17a","parentId","branchId","d37ffabd-ddb0-472a-8701-c0eef966a563","branchVersion",20,"latest",true,"createdAt",["D",1787477879281],1,"fileType","content","# 🍝 Chaos Diner RPG\n\nUn'innocua cena al ristorante che si trasforma in un'arena di caos **multiplayer in tempo reale**, alimentata dall'**AI Cameriere** (Gemini).\n\n👉 **Gioca subito:** \n\n## 🎮 Come si gioca\n\n1. **Lobby** — un giocatore apre la stanza e condivide il codice con gli amici (ognuno entra da un proprio tab con **\"Entra\"**).\n2. **Ordinazione** — l'**AI Cameriere** ti dà il benvenuto e raccoglie l'ordine di ogni commensale, scritto in linguaggio naturale (es. *\"Cotoletta con patatine e una bibita\"*).\n3. **Servizio** — il Cameriere va in cucina, genera **l'immagine del piatto per ogni commensale** e torna con le pietanze **impilate una sopra l'altra**, distribuendole a ognuno in base a ciò che ha ordinato.\n4. **La scelta** — a ogni giocatore compare la forchetta con **🍴 Mangia Tranquillo** oppure **🍝 Lancia il Cibo**.\n5. **Food Fight & Fuga** — lanciare il cibo fa partire lo **scratch del vinile** e la traccia Heavy Metal. Bersaglia un commensale o il Cameriere: ogni lancio alimenta la sua **rabbia (0-100)**. Sopra la soglia, il Cameriere va in **RAGE** e parte la fase di **fuga**: nasconditi, scappa, lancia una sedia… chi viene beccato è **eliminato** e passa in modalità **Spettatore**. Sopravvive solo il più scaltro.\n\n## 🔧 Architettura (Val.town)\n\n```\nindex.ts ← server Hono: HTML + API\nlib/\n game.ts ← macchina a stati (LOBBY→ORDERING→SERVING→CHILL→CHASE→ENDED), rabbia, fuga\n ai.ts ← Cameriere AI (chat) + generazione immagini piatti (Gemini)\n db.ts ← SQLite (val-scoped): stanze + log eventi\n types.ts ← tipi condivisi client/server\nfrontend/\n root.tsx ← HTML shell\n audio.ts ← motore audio (scratch/metalli via Web Audio)\n api.ts ← client API + sessione (localStorage)\n components/ ← Lobby, GameScreen (tavolo, servizio, food fight, fuga)\n```\n\n- **Real-time**: polling (~1.2s) su `GET /api/room/:id?since=…` con eventi incrementali — serverless-friendly (niente WebSocket).\n- **Immagini piatti**: embeddate come data-URL negli eventi (`SERVING`), servite a ogni client; il polling resta leggero.\n- **Audio**: scratch del vinile e riff Heavy Metal generati in Web Audio (nessun asset esterno). Se vuoi colonne reali, punta due URL in `frontend/audio.ts` → `setPlaylist(lofiUrl, metalUrl)`.\n\n## ⚙️ Configurazione\n\nLa chiave **Gemini** vive nella env var `GEMINI_API_KEY` (mai nel codice). Modelli usati:\n- **Chat** (Cameriere): `gemini-3.5-flash` — attivo.\n- **Immagini** (piatti): `gemini-2.5-flash-image` — richiede **quota** sull'account (limite 0 sul piano free). Se non disponibile, il gioco usa un piatto segnaposto SVG come fallback.\n","deleted",false,"label",[19],{"_33":136,"_13":137,"_35":138,"_37":-5,"_38":39,"_40":46,"_42":43,"_44":139,"_17":77,"_47":86,"_48":-5,"_50":51,"_52":-5,"_67":140,"_18":141},{"_33":81,"_13":82,"_35":83,"_37":-5,"_38":39,"_40":84,"_42":43,"_44":85,"_17":77,"_47":86,"_48":-5,"_50":51,"_52":-5,"_67":87,"_18":88},{"_33":73,"_13":74,"_35":75,"_37":-5,"_38":39,"_40":46,"_42":43,"_44":76,"_17":77,"_47":24,"_48":78,"_50":51,"_52":-5,"_67":79,"_18":80},{"_33":34,"_13":19,"_35":36,"_37":-5,"_38":39,"_40":41,"_42":43,"_44":70,"_17":46,"_47":24,"_48":49,"_50":51,"_52":-5,"_67":71,"_18":72},{"_33":59,"_13":60,"_35":61,"_37":-5,"_38":39,"_40":62,"_42":43,"_44":63,"_17":64,"_47":65,"_48":66,"_50":51,"_52":14,"_67":68,"_18":69},"676eae59-7d17-4794-be56-17797f1e1dc4","index.ts","01a02df6-016f-774c-911b-10e7600604d6",40,["D",1787479248743],6,"http","import { parseVal, serveImmutableFile } from \"https://esm.town/v/std/utils/index.ts\";\nimport { Hono } from \"npm:hono\";\nimport { Root } from \"./frontend/root.tsx\";\nimport * as game from \"./lib/game.ts\";\nimport * as auth from \"./lib/auth.ts\";\n\nfunction bearer(c: { req: Request }): string | null {\n return c.req.header(\"Authorization\")?.replace(/^Bearer\\s+/i, \"\") ?? null;\n}\n\n/** Returns the username if the request is authenticated, else a 401 response. */\nasync function requireAuth(c: { json: (x: unknown, s?: number) => Response; req: Request }) {\n const username = await auth.currentUser(bearer(c));\n if (!username) return { username: null, denied: c.json({ error: \"Non autenticato\" }, 401) };\n return { username, denied: null };\n}\n\nconst app = new Hono();\n\n// ---- frontend -------------------------------------------------------------\n\napp.get(\"/\", (c) => c.html(Root()));\napp.get(\"/__immutable/*\", (c) => serveImmutableFile(c.req.path));\napp.get(\"/source\", (c) => c.redirect(parseVal().links.self.val));\n\n// ---- helpers ---------------------------------------------------------------\n\nasync function readJson(c: { req: Request }): Promise> {\n try {\n return await c.req.json();\n } catch {\n return {};\n }\n}\n\n/** Look up the room, run a mutator, and persist + return the freshest state. */\nasync function mutate(\n c: { json: (x: unknown, status?: number) => Response },\n roomId: string,\n fn: () => Promise,\n ok = 200,\n): Promise {\n const result = await fn();\n if (result === null || result === undefined) {\n return c.json({ error: \"Stanza non trovata o azione non consentita\" }, 404);\n }\n return c.json(result, ok);\n}\n\n// ---- API ------------------------------------------------------------------\n\napp.post(\"/api/room\", async (c) => {\n const { name } = await readJson(c);\n const user = await auth.currentUser(bearer(c));\n const state = await game.createRoom(String(name ?? \"\").slice(0, 24), user ?? undefined);\n if (user) await auth.notifyRoomInvites(user, state.id); // 🔔 avvisa gli amici\n return c.json({ state, selfId: state.players[0].id }, 201);\n});\n\napp.post(\"/api/room/join\", async (c) => {\n const { code, name } = await readJson(c);\n const user = await auth.currentUser(bearer(c));\n const state = await game.joinRoom(\n String(code ?? \"\"),\n String(name ?? \"\").slice(0, 24),\n user ?? undefined,\n );\n if (!state) return c.json({ error: \"Codice non trovato\" }, 404);\n const me = user\n ? (state.players.find((p) => p.userId === user) ?? state.players[0])\n : (state.players.filter((p) => p.name === String(name ?? \"\").trim()).at(-1) ??\n state.players[0]);\n return c.json({ state, selfId: me.id });\n});\n\n// Poll: returns snapshot + incremental events, and advances time-based phases.\napp.get(\"/api/room/:id\", async (c) => {\n const id = c.req.param(\"id\");\n const since = Number(c.req.query(\"since\") ?? 0) || 0;\n const snap = await game.tick(id, since);\n if (!snap) return c.json({ error: \"Stanza non trovata\" }, 404);\n return c.json(snap);\n});\n\n// Full plates with embedded images (for serving animation + late joiners).\napp.get(\"/api/room/:id/plates\", async (c) => {\n const id = c.req.param(\"id\");\n const state = await game.getRoom(id);\n if (!state) return c.json({ error: \"Stanza non trovata\" }, 404);\n return c.json({ plates: game.getPlates(state) });\n});\n\napp.post(\"/api/room/:id/start\", async (c) => {\n const id = c.req.param(\"id\");\n return mutate(c, id, () => game.startDinner(id));\n});\n\napp.post(\"/api/room/:id/order\", async (c) => {\n const id = c.req.param(\"id\");\n const { player, orderText } = await readJson(c);\n return mutate(c, id, () =>\n game.placeOrder(id, String(player ?? \"\"), String(orderText ?? \"\")));\n});\n\napp.post(\"/api/room/:id/eat\", async (c) => {\n const id = c.req.param(\"id\");\n const { player } = await readJson(c);\n return mutate(c, id, () => game.eat(id, String(player ?? \"\")));\n});\n\napp.post(\"/api/room/:id/throw\", async (c) => {\n const id = c.req.param(\"id\");\n const { player, target } = await readJson(c);\n const t = target as { type?: string; playerId?: string };\n const parsed =\n t?.type === \"player\" && t.playerId\n ? { type: \"player\", playerId: t.playerId } as const\n : { type: \"waiter\" } as const;\n return mutate(c, id, () => game.throwFood(id, String(player ?? \"\"), parsed));\n});\n\napp.post(\"/api/room/:id/respond\", async (c) => {\n const id = c.req.param(\"id\");\n const { player, choice } = await readJson(c);\n const ch = choice === \"retaliate\" ? \"retaliate\" : \"peace\";\n return mutate(c, id, () => game.respond(id, String(player ?? \"\"), ch));\n});\n\napp.post(\"/api/room/:id/survive\", async (c) => {\n const id = c.req.param(\"id\");\n const { player, choice } = await readJson(c);\n return mutate(c, id, () =>\n game.survive(id, String(player ?? \"\"), String(choice ?? \"\")));\n});\n\n// -- serve a \"serving done\" fast-forward (client finished the animation) ----\napp.post(\"/api/room/:id/servingDone\", async (c) => {\n const id = c.req.param(\"id\");\n return mutate(c, id, async () => {\n const state = await game.getRoom(id);\n if (!state || state.phase !== \"serving\") return state;\n state.phase = \"chill\";\n await game.addEvent(id, \"SERVING_DONE\", {});\n await game.saveRoom(state);\n return state;\n });\n});\n\napp.onError((err) => Promise.reject(err));\n\n// ============================================================ ACCOUNTS =====\n\napp.post(\"/api/auth/signup\", async (c) => {\n const body = await readJson(c);\n const res = await auth.signup({\n username: String(body.username ?? \"\"),\n email: String(body.email ?? \"\"),\n password: String(body.password ?? \"\"),\n });\n if (res.error) return c.json(res, 400);\n return c.json(res, 201);\n});\n\napp.post(\"/api/auth/login\", async (c) => {\n const body = await readJson(c);\n const res = await auth.login({\n email: String(body.email ?? \"\"),\n password: String(body.password ?? \"\"),\n });\n if (res.error) return c.json(res, 401);\n return c.json(res);\n});\n\napp.post(\"/api/auth/logout\", async (c) => {\n await auth.logout(bearer(c));\n return c.json({ ok: true });\n});\n\napp.get(\"/api/me\", async (c) => {\n const username = await auth.currentUser(bearer(c));\n if (!username) return c.json({ error: \"Non autenticato\" }, 401);\n return c.json({ username });\n});\n\n// ============================================================ FRIENDS =======\n\napp.get(\"/api/friends\", async (c) => {\n const u = await requireAuth(c);\n if (u.denied) return u.denied;\n return c.json({ friends: await auth.listFriends(u.username) });\n});\n\napp.post(\"/api/friends\", async (c) => {\n const u = await requireAuth(c);\n if (u.denied) return u.denied;\n const { identifier } = await readJson(c);\n const res = await auth.addFriend(u.username, String(identifier ?? \"\"));\n if (res.error) return c.json(res, 400);\n return c.json({ ok: true });\n});\n\napp.delete(\"/api/friends/:username\", async (c) => {\n const u = await requireAuth(c);\n if (u.denied) return u.denied;\n await auth.removeFriend(u.username, c.req.param(\"username\"));\n return c.json({ ok: true });\n});\n\n// ============================================================ CHAT ==========\n\napp.get(\"/api/chat/:friend\", async (c) => {\n const u = await requireAuth(c);\n if (u.denied) return u.denied;\n const since = Number(c.req.query(\"since\") ?? 0) || 0;\n return c.json({ messages: await auth.getMessages(u.username, c.req.param(\"friend\"), since) });\n});\n\napp.post(\"/api/chat/:friend\", async (c) => {\n const u = await requireAuth(c);\n if (u.denied) return u.denied;\n const { text } = await readJson(c);\n const msg = await auth.sendMessage(u.username, c.req.param(\"friend\"), String(text ?? \"\"));\n if (!msg) return c.json({ error: \"Messaggio vuoto\" }, 400);\n return c.json({ message: msg });\n});\n\n// ======================================================= NOTIFICATIONS ======\n\napp.get(\"/api/notifications\", async (c) => {\n const u = await requireAuth(c);\n if (u.denied) return u.denied;\n const since = Number(c.req.query(\"since\") ?? 0) || 0;\n return c.json({ notifications: await auth.getNotifications(u.username, since) });\n});\n\n/** Accept a friend's room invite → join the room without any code. */\napp.post(\"/api/invite/:roomId\", async (c) => {\n const u = await requireAuth(c);\n if (u.denied) return u.denied;\n const { notifId } = await readJson(c);\n const roomId = c.req.param(\"roomId\");\n const state = await game.joinRoomById(roomId, u.username, u.username);\n if (!state) return c.json({ error: \"Stanza non trovata\" }, 404);\n if (notifId) await auth.markAccept(u.username, Number(notifId));\n const me = state.players.find((p) => p.userId === u.username) ?? state.players[0];\n return c.json({ state, selfId: me.id });\n});\n\nexport default app.fetch;\n","children",[],[60],["D",1787477879281],[],[19],"d4196661-d5a3-44a8-9acb-9c96e3e22721","CHANGELOG.md","01a02df6-016f-774c-911b-0ba924477586",["D",1787477491994],0,"# Changelog\n\n## 2026-07-30 — Immutable asset caching\n\nFrontend files are now served at version-addressed URLs\n(`/__immutable/45/frontend/index.tsx`) with\n`Cache-Control: public, max-age=31536000, immutable`, so repeat visits load the\nwhole client graph from the browser cache — roughly 3× faster (~665ms → ~157ms\nmeasured). Publishing your val bumps its version, which changes every URL, so\ncaches invalidate automatically. Old-version URLs return 404 after a publish\n(like Next.js build assets); a reload picks up the new version.\n\nWhat changed in the template:\n\n- `frontend/index.html` → [`frontend/root.tsx`](/frontend/root.tsx): the HTML\n shell is now JSX and stamps asset URLs with `immutableFileUrl()`\n- [`index.ts`](/index.ts): serves `Root()` at `/`, and one\n `app.get(\"/__immutable/*\", (c) => serveImmutableFile(c.req.path))` route\n serves all frontend files\n\n### Upgrading an existing remix\n\nYour copy of this template doesn't update automatically. Two options:\n\n**Minimal (most of the benefit):** point both routes at `serveImmutableFile` —\nyour existing bare URLs redirect into versioned space, the new route serves\nthem, and the whole module graph gets cached (costs one redirect per page view):\n\n```ts\nimport { serveImmutableFile } from \"https://esm.town/v/std/utils/index.ts\";\n\napp.get(\"/__immutable/*\", (c) => serveImmutableFile(c.req.path));\napp.get(\"/frontend/**/*\", (c) => serveImmutableFile(c.req.path)); // was serveFile\n```\n\n**Full upgrade (also removes the redirect):** three self-contained steps —\nno other files needed. Adjust the ``, favicon, and body of `Root()` to\nmatch your app's existing `index.html`, and stamp anything else your shell\nreferences directly (images, css) with `immutableFileUrl()`.\n\n1. Create `frontend/root.tsx`:\n\n```tsx\n/** @jsxImportSource npm:hono@4/jsx */\nimport { raw } from \"npm:hono@4/html\";\nimport { immutableFileUrl } from \"https://esm.town/v/std/utils/index.ts\";\n\n// The HTML shell for the app. It is never cached, so immutableFileUrl can stamp\n// the current val version into each asset URL — the browser caches those\n// immutably, and publishing the val changes the URLs, refetching exactly once.\nexport function Root() {\n return (\n <>\n {raw(\"<!DOCTYPE html>\")}\n <html lang=\"en\">\n <head>\n <meta charSet=\"UTF-8\" />\n <meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\" />\n <title>React Hono Val Town Starter\n