@caisual/cli 0.1.0 → 0.3.0

package/dist/caisual.mjs

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 
 // src/caisual.ts
-import { createHash } from "node:crypto";
-import { createReadStream, promises as fs } from "node:fs";
-import { basename, extname, join, resolve } from "node:path";
+import { createHash as createHash3 } from "node:crypto";
+import { createReadStream, promises as fs2 } from "node:fs";
+import { basename, extname as extname2, join as join2, resolve as resolve2 } from "node:path";
 
 // ../contracts/src/slug.ts
 var NOMI_RISERVATI = [
@@ -229,166 +229,3130 @@ function validaManifest(valore) {
       }
     }
   }
-  let lobby = false;
-  if (dati.lobby !== void 0) {
-    if (typeof dati.lobby !== "boolean") errori.push("lobby: must be a boolean.");
-    else lobby = dati.lobby;
+  let lobby = false;
+  if (dati.lobby !== void 0) {
+    if (typeof dati.lobby !== "boolean") errori.push("lobby: must be a boolean.");
+    else lobby = dati.lobby;
+  }
+  const roles = [];
+  if (dati.roles !== void 0) {
+    if (!Array.isArray(dati.roles)) errori.push("roles: must be an array.");
+    else {
+      const ids = /* @__PURE__ */ new Set();
+      for (const [indice, raw] of dati.roles.entries()) {
+        const value = oggetto(raw);
+        if (value === null) {
+          errori.push(`roles[${indice}]: must be an object.`);
+          continue;
+        }
+        for (const campo of Object.keys(value)) {
+          if (!["id", "min", "max"].includes(campo)) errori.push(`roles[${indice}].${campo}: unknown field.`);
+        }
+        const idRuolo = value.id;
+        const min = value.min;
+        const max = value.max;
+        let valido = true;
+        if (typeof idRuolo !== "string" || idRuolo.length > 32 || !ID_INTERNO.test(idRuolo)) {
+          errori.push(`roles[${indice}].id: must be 1-32 lowercase letters, digits, or internal hyphens.`);
+          valido = false;
+        } else if (ids.has(idRuolo)) {
+          errori.push(`roles[${indice}].id: duplicate role ${idRuolo}.`);
+          valido = false;
+        } else ids.add(idRuolo);
+        if (!interoTra(min, 0, 16)) {
+          errori.push(`roles[${indice}].min: must be an integer from 0 to 16.`);
+          valido = false;
+        }
+        if (max !== void 0 && !interoTra(max, 0, 16)) {
+          errori.push(`roles[${indice}].max: must be an integer from 0 to 16 when present.`);
+          valido = false;
+        }
+        if (typeof min === "number" && typeof max === "number" && min > max) {
+          errori.push(`roles[${indice}].max: must be greater than or equal to min.`);
+          valido = false;
+        }
+        if (valido) roles.push(max === void 0 ? { id: idRuolo, min } : { id: idRuolo, min, max });
+      }
+    }
+  }
+  let teams = null;
+  if (dati.teams !== void 0 && dati.teams !== null) {
+    const value = oggetto(dati.teams);
+    if (value === null) errori.push("teams: must be null or an object with min and max.");
+    else {
+      for (const campo of Object.keys(value)) {
+        if (campo !== "min" && campo !== "max") errori.push(`teams.${campo}: unknown field.`);
+      }
+      if (!interoTra(value.min, 2, 16)) errori.push("teams.min: must be an integer from 2 to 16.");
+      if (!interoTra(value.max, 2, 16)) errori.push("teams.max: must be an integer from 2 to 16.");
+      if (interoTra(value.min, 2, 16) && interoTra(value.max, 2, 16)) {
+        if (value.min > value.max) errori.push("teams.max: must be greater than or equal to teams.min.");
+        else teams = { min: value.min, max: value.max };
+      }
+    }
+  }
+  let voice = "none";
+  if (dati.voice !== void 0) {
+    if (typeof dati.voice !== "string" || !VOICE.has(dati.voice)) {
+      errori.push("voice: must be none, room, team, or proximity.");
+    } else voice = dati.voice;
+  }
+  const modes = [];
+  if (dati.modes !== void 0) {
+    if (!Array.isArray(dati.modes)) errori.push("modes: must be an array.");
+    else {
+      const ids = /* @__PURE__ */ new Set();
+      for (const [indice, raw] of dati.modes.entries()) {
+        const value = oggetto(raw);
+        if (value === null) {
+          errori.push(`modes[${indice}]: must be an object.`);
+          continue;
+        }
+        for (const campo of Object.keys(value)) {
+          if (campo !== "id" && campo !== "matchmaking") errori.push(`modes[${indice}].${campo}: unknown field.`);
+        }
+        if (typeof value.id !== "string" || value.id.length > 32 || !ID_INTERNO.test(value.id)) {
+          errori.push(`modes[${indice}].id: must be 1-32 lowercase letters, digits, or internal hyphens.`);
+          continue;
+        }
+        if (ids.has(value.id)) {
+          errori.push(`modes[${indice}].id: duplicate mode ${value.id}.`);
+          continue;
+        }
+        ids.add(value.id);
+        if (value.matchmaking === void 0) {
+          modes.push({ id: value.id });
+          continue;
+        }
+        const matchmaking = oggetto(value.matchmaking);
+        if (matchmaking === null) {
+          errori.push(`modes[${indice}].matchmaking: must be an object.`);
+          continue;
+        }
+        for (const campo of Object.keys(matchmaking)) {
+          if (!["key", "timeoutMs", "fallback"].includes(campo)) {
+            errori.push(`modes[${indice}].matchmaking.${campo}: unknown field.`);
+          }
+        }
+        let valido = true;
+        const key = [];
+        if (!Array.isArray(matchmaking.key) || matchmaking.key.length === 0) {
+          errori.push(`modes[${indice}].matchmaking.key: must be a non-empty array.`);
+          valido = false;
+        } else for (const [keyIndice, item] of matchmaking.key.entries()) {
+          if (typeof item !== "string" || item.length > 32 || !ID_INTERNO.test(item)) {
+            errori.push(`modes[${indice}].matchmaking.key[${keyIndice}]: must be 1-32 lowercase letters, digits, or internal hyphens.`);
+            valido = false;
+          } else key.push(item);
+        }
+        if (!Number.isSafeInteger(matchmaking.timeoutMs) || matchmaking.timeoutMs < 1) {
+          errori.push(`modes[${indice}].matchmaking.timeoutMs: must be a positive integer.`);
+          valido = false;
+        }
+        if (matchmaking.fallback !== "ghost" && matchmaking.fallback !== "bot") {
+          errori.push(`modes[${indice}].matchmaking.fallback: must be ghost or bot.`);
+          valido = false;
+        }
+        if (valido) modes.push({ id: value.id, matchmaking: {
+          key,
+          timeoutMs: matchmaking.timeoutMs,
+          fallback: matchmaking.fallback
+        } });
+      }
+    }
+  }
+  if (errori.length > 0) return { ok: false, errori };
+  return { ok: true, manifest: {
+    manifest: 1,
+    id,
+    name,
+    description,
+    cover,
+    screenshots,
+    tags,
+    language,
+    platform,
+    orientation,
+    input,
+    visibility,
+    network,
+    isolated,
+    players,
+    lobby,
+    roles,
+    teams,
+    voice,
+    modes
+  } };
+}
+
+// ../contracts/src/server-js.ts
+var MASSIMO_BYTE_SERVER_JS = 1e6;
+var IMPORT_KIT = /\bimport\s+(?:(?:[$A-Z_a-z][$\w]*\s*,\s*)?(?:\*\s+as\s+[$A-Z_a-z][$\w]*|\{[^{}]*\})|[$A-Z_a-z][$\w]*)\s+from\s+(['"])@caisual\/kit\/server\1\s*;?/g;
+function spaziCome(value) {
+  return value.replace(/[^\n]/g, " ");
+}
+function mascheraTestiECommenti(sorgente) {
+  const risultato = [...sorgente].map((carattere) => carattere === "\n" ? "\n" : " ");
+  function copiaCodice(inizio, chiudiSuGraffa) {
+    let profonditaGraffe = chiudiSuGraffa ? 1 : 0;
+    for (let indice = inizio; indice < sorgente.length; indice += 1) {
+      const carattere = sorgente[indice];
+      const prossimo = sorgente[indice + 1];
+      if (carattere === "/" && prossimo === "/") {
+        indice += 2;
+        while (indice < sorgente.length && sorgente[indice] !== "\n") indice += 1;
+        if (sorgente[indice] === "\n") risultato[indice] = "\n";
+        continue;
+      }
+      if (carattere === "/" && prossimo === "*") {
+        indice += 2;
+        while (indice < sorgente.length) {
+          if (sorgente[indice] === "\n") risultato[indice] = "\n";
+          if (sorgente[indice] === "*" && sorgente[indice + 1] === "/") {
+            indice += 1;
+            break;
+          }
+          indice += 1;
+        }
+        continue;
+      }
+      if (carattere === "'" || carattere === '"') {
+        const delimitatore = carattere;
+        for (indice += 1; indice < sorgente.length; indice += 1) {
+          const interno = sorgente[indice];
+          if (interno === "\n") risultato[indice] = "\n";
+          if (interno === "\\") indice += 1;
+          else if (interno === delimitatore) break;
+        }
+        continue;
+      }
+      if (carattere === "`") {
+        indice += 1;
+        while (indice < sorgente.length) {
+          const interno = sorgente[indice];
+          const dopo = sorgente[indice + 1];
+          if (interno === "\n") risultato[indice] = "\n";
+          if (interno === "\\") indice += 2;
+          else if (interno === "`") break;
+          else if (interno === "$" && dopo === "{") {
+            indice = copiaCodice(indice + 2, true);
+          } else indice += 1;
+        }
+        continue;
+      }
+      if (chiudiSuGraffa && carattere === "{") profonditaGraffe += 1;
+      if (chiudiSuGraffa && carattere === "}") {
+        profonditaGraffe -= 1;
+        if (profonditaGraffe === 0) return indice;
+      }
+      risultato[indice] = carattere;
+    }
+    return sorgente.length;
+  }
+  copiaCodice(0, false);
+  return risultato.join("");
+}
+function validaServerJs(sorgente) {
+  const errori = [];
+  if (new TextEncoder().encode(sorgente).byteLength > MASSIMO_BYTE_SERVER_JS) {
+    errori.push("server.js must be at most 1 MB.");
+  }
+  const senzaImportKit = sorgente.replace(IMPORT_KIT, (importazione) => spaziCome(importazione));
+  const codice = mascheraTestiECommenti(senzaImportKit);
+  if (/\bmodule\s*\.\s*exports\b|\bexports\s*\./.test(codice)) {
+    errori.push("server.js must use ESM and cannot use CommonJS exports.");
+  }
+  if (/\brequire\s*\(/.test(codice)) {
+    errori.push("server.js must not use require().");
+  }
+  if (/\bimport\s*\(/.test(codice)) {
+    errori.push("server.js must not use dynamic import().");
+  }
+  const senzaImportMeta = codice.replace(/\bimport\s*\.\s*meta\b/g, "");
+  const riesportaDipendenza = /\bexport\s+(?:\*\s*(?:as\s+[$A-Z_a-z][$\w]*\s*)?|\{[^}]*\})\s+from\b/.test(codice);
+  if (/\bimport\b/.test(senzaImportMeta) || riesportaDipendenza) {
+    errori.push("server.js may only import from '@caisual/kit/server'.");
+  }
+  if (!/\bexport\s+default\b/.test(codice)) {
+    errori.push("server.js must have an export default.");
+  }
+  return errori.length === 0 ? { ok: true } : { ok: false, errori };
+}
+
+// ../../docs/publish.md
+var publish_default = '# Publish a game on Caisual\n\nCaisual hosts browser games supplied as folders. Each publish creates an immutable version and moves the game\'s stable link to that version.\nThe publishing flow supports both single-player and multiplayer games and does not require changes in the Caisual dashboard. Player identity, rooms, cloud saves, leaderboards, and the daily challenge come from the game kit, documented in [kit.md](./kit.md).\n\n## Game folder\n\nUse this structure:\n\n```text\nmy-game/\n  caisual.json\n  server.js        # optional, required only for multiplayer rooms\n  client/\n    index.html\n    ...\n```\n\n`caisual.json` and `client/index.html` are required. Put every file used by the game under `client/`.\n\nRun `npx @caisual/cli init my-game` to create a minimal single-player folder. Run `npx @caisual/cli init --multiplayer my-game` to include a four-player lobby, a relay server, and a room client example.\n\n## caisual.json\n\nThe file must contain one JSON object. Unknown fields are rejected. This is a complete single-player example:\n\n```json\n{\n  "manifest": 1,\n  "id": "my-game",\n  "name": "My Game",\n  "description": "A short description of the game.",\n  "cover": "cover.png",\n  "screenshots": ["screenshots/level-one.png"],\n  "tags": ["puzzle"],\n  "language": "en",\n  "platform": "both",\n  "orientation": "landscape",\n  "input": ["keyboard", "mouse", "touch"],\n  "visibility": "public",\n  "network": [],\n  "isolated": false,\n  "players": { "min": 1, "max": 1 },\n  "lobby": false,\n  "roles": [],\n  "teams": null,\n  "voice": "none",\n  "modes": []\n}\n```\n\n- `manifest` is required and must be `1`.\n- `id` is required. Use 3 to 32 lowercase ASCII letters or digits, with single hyphens only between groups. The ID becomes the URL slug. Choose it carefully because it cannot be renamed or reused after deletion.\n- `name` is required and must contain 1 to 60 characters.\n- `description` is optional, defaults to an empty string, and can contain at most 500 characters.\n- `cover` is optional. Use a relative path inside `client/`, or `null`. Do not include a query, fragment, empty segment, or parent segment.\n- `screenshots` is optional and defaults to `[]`. It accepts up to 8 relative paths inside `client/`.\n- `tags` is optional and defaults to `[]`. It accepts up to 10 values. Each value uses 1 to 24 lowercase letters, digits, or hyphens.\n- `language` is optional and defaults to `en`. Use a BCP 47 language tag such as `en`, `it`, or `pt-BR`.\n- `platform` is required. Use `desktop` when the game needs a keyboard, mouse, large display, or desktop performance. Use `mobile` when it is designed only for touch and small screens. Use `both` only after checking that layout, performance, and controls work on both.\n- `orientation` is optional and defaults to `landscape`. Use `landscape` or `portrait` to describe the intended mobile layout. The device may not honor an orientation request.\n- `input` is optional and defaults to `[]`. Include every supported input from `keyboard`, `mouse`, `touch`, and `gamepad`. Do not claim an input until the game is usable with it.\n- `visibility` is optional and defaults to `public`. Use `public` for catalog eligibility or `unlisted` for access by direct link only.\n- `network` is optional and defaults to `[]`. List every external host contacted or loaded by the game, without scheme, port, path, query, or fragment, for example `api.example.com`. If an external host is missing, the browser blocks the request. Keep the array empty when the game uses only its own files and Caisual services.\n- `isolated` is optional and defaults to `false`. Use `true` only when the game requires shared memory or threaded WebAssembly. Every external host in `network` must then send headers compatible with cross-origin isolation.\n- `players` is optional and defaults to `{ "min": 1, "max": 1 }`. Both values are integers from 1 to 16 and `max` must be at least `min`. Set the range that a room needs before play can start.\n- `lobby` is optional and defaults to `false`. Use `true` when players must choose roles or teams, mark themselves ready, and wait for the host to start. With `false`, play starts when the first player enters and later players may join in progress.\n- `roles` is optional and defaults to `[]`. Each entry has an `id` of 1 to 32 lowercase letters, digits, or internal hyphens, a `min` integer from 0 to 16, and an optional `max` in the same range. Rooms enforce these capacities in the lobby.\n- `teams` is optional and defaults to `null`. An object has `min` and `max` integers from 2 to 16, with `max` at least `min`. Rooms balance players who do not choose a team.\n- `voice` is optional and defaults to `none`. Use `room` so everyone in the room can hear each other, `team` to restrict voice to teammates, or `proximity` when `server.js` sets the gain between player pairs. Use `none` to disable voice.\n- `modes` is optional and defaults to `[]`. A mode has a unique `id` using 1 to 32 lowercase letters, digits, or internal hyphens. It may have `matchmaking` with a non-empty `key` array using the same format, a positive integer `timeoutMs`, and `fallback` set to `ghost` or `bot`.\n\nThe CLI prints every manifest error in one run. Fix every listed field and rule before retrying.\n\n## client/index.html\n\n`index.html` must be at the root of `client/`. Use relative URLs such as `./game.js` or `assets/sprite.png`. Do not use root-relative URLs such as `/game.js`, and do not use parent paths that leave the published `client/` tree.\n\nTo use player identity, saves, and leaderboards, import the kit from `/__caisual/kit/v1.js` as shown in [kit.md](./kit.md). The path `/__caisual/` is reserved: do not put game files under it.\n\nDo not register a service worker. The game runs in an iframe on its own origin inside `caisual.com`. Test it without assuming access to the parent page, parent cookies, or files outside `client/`.\n\nWhen `voice` is not `none`, the portal grants microphone access to the game iframe. The browser still asks the player for permission when the game calls `room.voice.join()`. Call it from a button click or another user gesture, not automatically when the page loads.\n\n## Multiplayer server\n\nAdd `server.js` beside `caisual.json` when the game uses rooms. It must be one ESM file with an `export default`. Its only permitted dependency is `@caisual/kit/server`, imported with either single or double quotes. Static imports from any other path, dynamic `import()`, `require()`, and CommonJS exports are rejected.\n\nA minimal relay server looks like this:\n\n```js\nimport { defineGame } from \'@caisual/kit/server\';\n\nexport default defineGame({\n  onMessage(room, player, message) {\n    room.broadcast(message);\n  },\n});\n```\n\nThe file may define the optional room callbacks documented in [kit.md](./kit.md). Server code cannot make outbound network requests. The `network` field in `caisual.json` controls only requests made by the browser client.\n\nThe source file may be at most 1,000,000 bytes. Room state must remain plain JSON and may be at most 256 KB when serialized. Each incoming player message may be at most 16 KB, and each connection may send at most 20 messages per second. Room save values may be at most 128 KB.\n\nPublish a multiplayer game with the same `npx @caisual/cli publish` command. The CLI validates `server.js`, declares its size and SHA-256 digest, and uploads it separately from browser files. The portal validates the stored source again before making the new game version current.\n\nIf the portal finds an invalid `server.js`, the command prints `The multiplayer server could not be published.` followed by diagnostic hints. The failed version is kept for diagnosis but never becomes current. If the game already has a working version, players continue to receive that version. Fix the reported problem and publish again to create a new version.\n\n## Test locally\n\nRun the local preview from the game folder before publishing:\n\n```sh\nnpx @caisual/cli dev\n```\n\nYou can pass a game folder and choose another port:\n\n```sh\nnpx @caisual/cli dev ./my-game --port 8790\n```\n\nThe command prints a portal URL and a game URL. Open the portal URL. It loads the game in an iframe with the same handshake used after publishing, so `c.connected` is `true`. Player identity, saves, leaderboards, daily data, invitations, and rooms all use local data. Each new browser tab gets a different guest identity, while reloading one tab keeps that tab\'s identity.\n\nWhen `server.js` exists, room data is stored as JSON under `.caisual-dev/` in the game folder. Without `server.js`, the game remains single player and attempts to create a room return `no_server`.\n\nPress Ctrl+C in the terminal to stop the preview. No account or publish key is required.\n\n## Limits\n\n- At most 2,000 files per version.\n- At most 50,000,000 bytes per file.\n- At most 200,000,000 bytes for all files in one version.\n- At most 1,000,000 bytes for `server.js`.\n- Dotfiles, dot-directories, and directories named `node_modules` are ignored.\n- Symbolic links and other non-regular files are rejected.\n\nReduce or split files that exceed the per-file limit. Remove generated files that the browser does not need.\n\n## Publish\n\nUse the key supplied by the creator. Set it in the environment so it does not enter shell history as a command-line flag:\n\n```sh\nexport CAISUAL_KEY=\'ck_...\'\nnpx @caisual/cli publish\n```\n\nRun the command from the game folder, or pass the folder path after `publish`. For local portal development only, set `CAISUAL_ORIGIN` to the local HTTP origin.\n\nThe CLI validates the folder, computes every file size and SHA-256 digest, creates a new version, uploads the files, completes the version, and prints the game URL. The stable URL is `https://caisual.com/g/<id>`.\n\nThe first games from a new creator are reviewed before they can appear in the public catalog. Their stable links still work while review is pending.\n\n## Update, unlist, or delete\n\nTo update a game, change its files without changing `id`, then run `npx @caisual/cli publish` again. This creates a new version and keeps the same stable game URL.\n\nTo remove a game from the catalog, set `visibility` to `unlisted` and publish, or change visibility from the dashboard. To delete a game, use the dashboard. Deletion is permanent and its ID cannot be reused.\n\n## Common errors\n\n- `CAISUAL_KEY is required`: export the creator\'s key in the same shell before publishing.\n- `The publish API key is not valid`: create a new key in the account dashboard if the old key expired or was revoked.\n- `caisual.json is not valid`: read every reported field and rule, fix all of them, then retry.\n- `client/index.html: file not found`: place `index.html` directly under `client/`, not in a nested build folder.\n- `referenced file not found`: make sure `cover` and every screenshot path match a file under `client/`, including letter case.\n- `file is larger than 50 MB`: compress, reduce, or split the asset and update its references.\n- `upload failed` or a temporary portal error: keep the files unchanged and retry the same publish command. The CLI retries temporary upload failures automatically.\n- `The multiplayer server could not be published`: read every diagnostic hint, fix `server.js`, and publish again. The failed version does not replace the current one.\n- An external browser request works locally but fails after publishing: add its host to `network` and publish a new version. Server code cannot make outbound network requests.\n- A threaded WebAssembly game fails to start: set `isolated` to `true` and verify that every declared external host supports cross-origin isolation.\n';
+
+// ../../docs/kit.md
+var kit_default = "# Caisual game kit\n\nThe kit gives a published game a stable player identity, cloud saves, leaderboards, a daily challenge seed, and multiplayer rooms with server-owned state.\n\nThe kit is a single JavaScript module with no dependencies. It never touches the page: the game keeps its own rendering, input, and UI.\n\n## Load the kit\n\nEvery published game can import the kit from its own origin, without a bundler and without an npm install:\n\n```html\n<script type=\"module\">\n  import { caisual } from '/__caisual/kit/v1.js';\n\n  const c = await caisual.connect();\n  console.log(c.player.name);\n</script>\n```\n\nGames built with a bundler can install the same module from npm:\n\n```sh\nnpm install @caisual/kit\n```\n\n```js\nimport { caisual } from '@caisual/kit';\n```\n\nBoth forms expose the same API. The module also sets `globalThis.caisual` for classic scripts that load it first.\n\nThe path `/__caisual/` is reserved on every game origin. Do not put game files under it.\n\n## Connect\n\n```js\nconst c = await caisual.connect();\n```\n\n`connect()` completes when the game is running inside caisual.com and has received its player identity, or after a short timeout when it is not. Calling it again returns the same promise.\n\n- `c.connected` is `true` inside caisual.com and `false` when the game runs on its own, for example from a local folder during development or when its files are copied elsewhere.\n- `c.player` is `{ id, name, guest }`. `id` is stable for the player across sessions and across every version of the game. `name` is the account username, or `\"Guest\"`. `guest` is `true` for players without an account. When a guest later signs in, saves and scores stay attached to the same `id`.\n- When not connected, `c.player` is `{ id: \"local\", name: \"Guest\", guest: true }`.\n\nDo not store the ticket or reimplement the handshake. The kit handles identity, renewal, and retries.\n\n## Daily challenge\n\n```js\nc.daily.day;       // \"2026-09-04\", the current UTC day\nc.daily.seed;      // unsigned 32-bit integer, identical for every player on that day\nconst r = c.daily.random();   // number in [0, 1), deterministic from the seed\n```\n\n`c.daily.random()` is a deterministic generator initialized from `c.daily.seed`. Every `connect()` starts the sequence from the beginning, so two players who call it the same number of times get the same values. Use it to build the level of the day.\n\n`c.time.now()` returns milliseconds aligned with the portal clock. Prefer it to `Date.now()` for anything that must agree with the current day.\n\nWhen not connected, `day` comes from the local clock and `seed` from the local hostname, so a game copied elsewhere still runs.\n\n## Saves\n\nEach player has up to 32 saves per game. A save is any JSON value up to 256 KB when serialized.\n\n```js\nawait c.save.set('slot1', { level: 3, coins: 120 });   // -> { key, bytes, updatedAt }\nconst data = await c.save.get('slot1');                 // -> the value, or null\nawait c.save.remove('slot1');\nconst saves = await c.save.list();                      // -> [{ key, bytes, updatedAt }]\n```\n\n- Keys use 1 to 32 characters: lowercase letters, digits, `_` or `-`, starting with a letter or digit.\n- `updatedAt` is a millisecond timestamp.\n- Saves are per player and per game. Another game cannot read them.\n- When not connected, saves go to the browser's local storage on the game origin.\n\nErrors reject the promise with an `Error` whose `code` is one of `invalid_request`, `not_found`, `save_limit`, `payload_too_large`, `rate_limited`, `invalid_ticket`, `internal_error`, or `offline`.\n\n## Leaderboards\n\nA leaderboard is identified by a board id chosen by the game. Scores are non-negative integers and higher is better. Each player keeps one entry per board, and one per board per day for daily boards: the best score is kept.\n\n```js\nconst result = await c.board.submit('main', 1234);\n// -> { accepted: true, best: 1234, rank: 7, day: null }\n\nconst daily = await c.board.submit('main', 1234, { daily: true });\n// -> { accepted: true, best: 1234, rank: 7, day: \"2026-09-04\" }\n\nconst top = await c.board.top('main', { daily: true, limit: 10 });\n// -> { day: \"2026-09-04\", entries: [{ rank, name, score, guest, me }], me: { rank, score } | null }\n```\n\n- Board ids use the same format as save keys.\n- `submit` never rejects because of connectivity. When the game is not connected it resolves `{ accepted: false, reason: \"offline\" }`.\n- `best` is the score kept for this player after the submission, which can be higher than the submitted one.\n- `rank` counts players with a strictly higher score. Ties are ordered by who reached the score first.\n- Accounts and guests are ranked separately. `top()` returns account players by default; pass `guests: true` to list guests instead. `me` always refers to the current player within their own category, even beyond `limit`.\n- `limit` is 1 to 100 and defaults to 10.\n- Scores submitted from the browser are recorded as unverified. A room server can submit verified scores.\n\n## Rooms\n\nA room brings players into the same running game. Creating and joining require a published `server.js`; single-player games can ignore `c.room`.\n\n```js\nconst c = await caisual.connect();\n\nc.room.invited; // invitation code from the game page, or null\n\nconst room = await c.room.create({ mode: null });\n// Or join the invitation that opened the game:\nconst invitedRoom = await c.room.join();\n// Or enter a code supplied by the player:\nconst codedRoom = await c.room.join('ABC234');\n\nroom.code;\nroom.invite(); // { code: \"ABC234\", url: \"https://caisual.com/r/ABC234\" }\n```\n\nPass a mode id from the manifest to `create({ mode })`, or `null` when the game has no modes. `join()` uses `c.room.invited`; without an invitation, pass the six-character code explicitly. Show the URL returned by `invite()` in a share button or copy action.\n\nRoom status is one of:\n\n- `lobby`: players are joining and choosing their setup.\n- `countdown`: the lobby has accepted `start()` and play begins at the announced server time.\n- `playing`: the game server is running the match.\n- `ended`: the match or connection has ended. `room.result` contains the result last reported by the room. A definitive connection closure uses `{ closed: 4003 }`, `{ closed: 4004 }`, `{ closed: 4005 }`, or `{ closed: 4006 }`.\n\nThe current lobby data is available directly:\n\n```js\nroom.players; // [{ id, name, guest, role, team, ready, connected }]\nroom.you;     // this player's id\nroom.host;    // the current host's id, or null\n\nroom.ready(true);\nroom.setRole('captain');\nroom.setTeam(1);\n\nif (room.you === room.host) room.start();\n```\n\n`ready`, role, team, and `start()` are lobby actions. Starting requires the host, every connected player to be ready, and the player, role, and team minimums from the manifest. Calling `start()` begins a three-second countdown. A role or team change clears that player's ready state. The built-in `spectator` role receives state but cannot send game input.\n\nThe server owns room state. Read it and react to updates, but do not assign to it or mutate nested values from the browser:\n\n```js\ndraw(room.state);\n\nconst stopState = room.onState((state, tick, serverTime) => {\n  draw(state);\n});\n\nconst stopPlayers = room.onPlayers((players) => updateLobby(players));\nconst stopStatus = room.onStatus((status, result, at) => showStatus(status, result, at));\n\nstopState();\nstopPlayers();\nstopStatus();\n```\n\n`room.tick` identifies the latest state. The kit applies structural updates in order and requests a full state automatically if an update does not match the current tick. `room.serverTime()` returns milliseconds aligned with the room clock and is kept current by a ping every five seconds.\n\nSend JSON input to `onMessage` in the server definition, and receive JSON sent or broadcast by the server:\n\n```js\nroom.send({ type: 'fire', target: 3 });\n\nconst stopMessages = room.onMessage((message) => {\n  showEvent(message);\n});\n```\n\nThe kit numbers outgoing inputs in increasing order. It automatically reconnects temporary failures with delays of 1, 2, 4, then 8 seconds, for at most the room's 60-second grace period. Each attempt gets a fresh room token. A successful reconnect replaces local state with a full server state. Inputs sent while reconnecting throw an error with `code: \"offline\"`.\n\nCall `room.leave()` for an intentional departure. The kit does not reconnect after leaving, being kicked, the room ending, the published version closing, or the same player opening the room in another tab.\n\nRoom creation and joining reject with an `Error` carrying a stable `code`. Common codes are `invalid_request`, `no_server`, `room_not_found`, `room_full`, `room_playing`, `room_ended`, `rate_limited`, `invalid_ticket`, `internal_error`, and `offline`. `no_server` means the published game has no multiplayer server. When `c.connected` is `false`, both `create` and `join` reject with `offline`.\n\nEvery `onState`, `onPlayers`, `onStatus`, and `onMessage` call returns a function that removes that listener.\n\n## Voice\n\nEvery room has a `room.voice` object. Voice is disabled by default and is enabled with the manifest's `voice` field. A game should offer an explicit control because `join()` must be called from a click or another user gesture so the browser can request microphone permission and start audio.\n\n```js\nconst micButton = document.querySelector('#mic');\nconst voiceList = document.querySelector('#voice-list');\n\nfunction renderVoice(peers = room.voice.peers) {\n  voiceList.replaceChildren(...peers.map((peer) => {\n    const item = document.createElement('li');\n    const player = room.players.find((entry) => entry.id === peer.id);\n    item.textContent = `${player?.name ?? peer.id}: ${\n      peer.speaking ? 'speaking' : peer.muted ? 'muted' : 'quiet'\n    }`;\n    return item;\n  }));\n  micButton.textContent = room.voice.state === 'off'\n    ? 'Join voice'\n    : room.voice.muted ? 'Unmute' : 'Mute';\n}\n\nmicButton.addEventListener('click', async () => {\n  if (room.voice.state === 'off') await room.voice.join();\n  else room.voice.mute(!room.voice.muted);\n  renderVoice();\n});\n\nroom.voice.onPeers(renderVoice);\nroom.voice.onState(() => renderVoice());\nrenderVoice();\n```\n\n`room.voice.mode` is `none`, `room`, `team`, or `proximity`. In `room` mode, every participant in voice can hear every other participant. In `team` mode, players hear only their team. In `proximity` mode, the room server controls the gain between each pair. Spectators cannot publish audio, and `join()` rejects for them.\n\n`room.voice.state` is `off`, `joining`, `on`, or `reconnecting`. `room.voice.muted` and `room.voice.speaking` describe the local microphone. `room.voice.peers` contains the other voice participants as `{ id, muted, speaking, volume, gain }`. `volume` is the local setting and `gain` is the proximity value from the room server. Use `room.voice.setVolume(playerId, volume)` with a value from 0 to 1 to change only local playback.\n\n`room.voice.onPeers(listener)` runs when participants, mute state, speaking state, volume, or proximity gain changes. `room.voice.onState(listener)` reports connection state changes. Both return a function that removes the listener.\n\nCall `room.voice.leave()` to stop the microphone and leave voice without leaving the room. `room.leave()` and the end of the room stop voice automatically.\n\n`join()` rejects with an `Error` carrying one of these stable codes: `voice_disabled`, `permission_denied`, `unsupported`, `spectator`, `offline`, or `voice_error`. Voice can reconnect after a temporary room or media connection failure. The state becomes `reconnecting` while the kit retries.\n\n## Server\n\nPut `server.js` next to `caisual.json` and publish it with the game. See [publish.md](./publish.md#multiplayer-server) for the file rules, validation, and publishing flow.\n\n```js\nimport { defineGame } from '@caisual/kit/server';\n\nexport default defineGame({\n  tickRate: 20, // 0 runs only in response to events\n  onCreate(room) {},\n  onStart(room) {},\n  onJoin(room, player) {},\n  onLeave(room, player, reason) {}, // \"left\", \"timeout\", or \"kicked\"\n  onMessage(room, player, message) {},\n  onTick(room, deltaSeconds) {},\n  onEnd(room) {},\n});\n```\n\nAll callbacks are optional. A player is `{ id, name, guest, role, team, connected }`. The room object provides:\n\n```js\nroom.id;\nroom.mode;\nroom.status;\nroom.tick;\nroom.state;\nroom.players;\nroom.host;\n\nroom.broadcast(message);\nroom.send(playerOrId, message);\nroom.kick(playerOrId);\nroom.end(result);\n\nawait room.save('round', value);\nawait room.load('round');\nroom.schedule(milliseconds, 'methodName', payload);\nroom.board.submit(playerOrId, 'main', score, { daily: true });\n\nroom.daily.day;\nroom.daily.seed;\nroom.time.now();\n\nroom.voice.mode;\nroom.voice.setProximity(playerA, playerB, 0.5);\n```\n\nSet `room.state` in `onCreate`, then mutate it only in server callbacks. It must remain plain JSON and may be at most 256 KB when serialized. `broadcast` sends a JSON message to everyone; `send` targets one player. `end` records a JSON result and ends the room. Room saves use keys with the same format as player save keys and values up to 128 KB. `schedule` names a method on the definition so it can run even after a quiet room resumes. Scores submitted through `room.board` are verified.\n\nFor a room using `\"voice\": \"proximity\"`, update the symmetric gain between players from server-owned positions. The value is limited to the range from 0 to 1. Calls in other voice modes have no effect.\n\n```js\nexport default defineGame({\n  tickRate: 20,\n  onTick(room) {\n    for (const a of room.players) {\n      for (const b of room.players) {\n        if (a.id >= b.id) continue;\n        const pa = room.state.positions[a.id];\n        const pb = room.state.positions[b.id];\n        const distance = Math.hypot(pa.x - pb.x, pa.y - pb.y);\n        room.voice.setProximity(a, b, Math.max(0, 1 - distance / 20));\n      }\n    }\n  },\n});\n```\n\n### Sleeping and cost\n\nPrefer `tickRate: 0` for turn based and party games. A room with a tick loop sleeps automatically after 30 seconds without player input or state changes and wakes on the next game message or player joining. Automatic ping and resync messages do not count as player input. A match with no player input for 10 minutes ends with `{ error: 'idle' }`. Timers set with `schedule` and the countdown keep working while the room sleeps.\n\n## Limits\n\n- 120 requests per minute per player. Beyond that the kit rejects with `rate_limited`; wait and retry.\n- Saves: 32 keys per player per game, 256 KB per value.\n- Scores: safe integers from 0 upward.\n- Room state: 256 KB of plain JSON.\n- Room messages: 16 KB each and 20 messages per second per connection.\n- Voice supports audio only and one voice channel per room.\n- Voice control messages: 64 KB each and 30 operations per 10 seconds per connection. Voice traffic is not counted against the room's message limits.\n- Room save values: 128 KB each.\n\n## Development\n\nRun `npx @caisual/cli dev` from the game folder, then open the printed portal URL. The preview supplies the normal handshake, so `c.connected` is `true` and the game receives a local guest identity. Saves, leaderboards, daily data, invitations, and rooms work locally. Opening the portal URL in more browser tabs creates more local players, which makes multiplayer testing possible without publishing.\n\nIf the game has `server.js`, room state is handled locally and stored under `.caisual-dev/` in the game folder. If it has no `server.js`, room creation rejects with `no_server` and the single-player APIs still work.\n\nOpening `client/index.html` from a plain static server still uses standalone mode: `c.connected` is `false`, saves use local storage, `submit` returns `accepted: false`, leaderboards are empty, the daily seed is local, and room creation and joining reject with `offline`. The rest of the game logic does not need a different code path.\n\nAfter publishing with `npx @caisual/cli publish`, open the game from its caisual.com page: `c.connected` becomes `true` and every call goes to the portal.\n\n## Manifest\n\nNo manifest field is required for identity, saves, leaderboards, or the daily challenge. For rooms, set `players` to the supported range and use `lobby`, `roles`, `teams`, and `modes` to describe the setup enforced before play starts. Set `voice` to `room`, `team`, or `proximity` to enable the corresponding voice mode, or omit it for `none`. A single-player game can keep `players` at `{ \"min\": 1, \"max\": 1 }`, `lobby` at `false`, and omit `server.js`. See [publish.md](./publish.md#caisualjson) for every field and the publishing steps.\n";
+
+// src/dev.ts
+import { createHash as createHash2, createHmac, randomBytes, timingSafeEqual } from "node:crypto";
+import { promises as fs } from "node:fs";
+import { createServer } from "node:http";
+import { extname, join, relative, resolve, sep } from "node:path";
+
+// ../kit/dist/node.js
+import { randomUUID } from "node:crypto";
+import { mkdir, readFile, rename, rm, writeFile } from "node:fs/promises";
+import { dirname } from "node:path";
+import { performance } from "node:perf_hooks";
+import { createHash } from "node:crypto";
+import { EventEmitter } from "node:events";
+function isPlainObject(value) {
+  const prototype = Object.getPrototypeOf(value);
+  return prototype === Object.prototype || prototype === null;
+}
+function verificaValore(value, visitati) {
+  if (value === null || typeof value === "string" || typeof value === "boolean") return true;
+  if (typeof value === "number") return Number.isFinite(value);
+  if (typeof value !== "object") return false;
+  if (visitati.has(value)) return false;
+  visitati.add(value);
+  let valido = true;
+  if (Array.isArray(value)) {
+    const chiavi = Reflect.ownKeys(value);
+    if (chiavi.some((key) => {
+      if (key === "length") return false;
+      if (typeof key !== "string" || !/^(0|[1-9][0-9]*)$/.test(key)) return true;
+      const indice = Number(key);
+      return !Number.isSafeInteger(indice) || indice >= value.length;
+    })) valido = false;
+    for (let indice = 0; indice < value.length; indice++) {
+      const descriptor = Object.getOwnPropertyDescriptor(value, String(indice));
+      if (!valido || descriptor === void 0 || !descriptor.enumerable || !("value" in descriptor) || !verificaValore(descriptor.value, visitati)) {
+        valido = false;
+        break;
+      }
+    }
+  } else if (isPlainObject(value)) {
+    for (const key of Reflect.ownKeys(value)) {
+      const descriptor = Object.getOwnPropertyDescriptor(value, key);
+      if (typeof key !== "string" || descriptor === void 0 || !descriptor.enumerable || !("value" in descriptor) || !verificaValore(descriptor.value, visitati)) {
+        valido = false;
+        break;
+      }
+    }
+  } else {
+    valido = false;
+  }
+  visitati.delete(value);
+  return valido;
+}
+function analizzaJson(value) {
+  if (!verificaValore(value, /* @__PURE__ */ new Set())) return { ok: false, code: "state_invalid" };
+  const testo = JSON.stringify(value);
+  return {
+    ok: true,
+    testo,
+    valore: JSON.parse(testo),
+    bytes: new TextEncoder().encode(testo).byteLength
+  };
+}
+function isObject(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function visitaDiff(prima, dopo, path, patch) {
+  if (Array.isArray(prima) && Array.isArray(dopo)) {
+    if (prima.length !== dopo.length) {
+      patch.push({ op: "set", path, value: dopo });
+      return;
+    }
+    for (let indice = 0; indice < dopo.length; indice++) {
+      visitaDiff(prima[indice], dopo[indice], [...path, indice], patch);
+    }
+    return;
+  }
+  if (isObject(prima) && isObject(dopo)) {
+    for (const key of Object.keys(prima)) {
+      if (!(key in dopo)) patch.push({ op: "del", path: [...path, key] });
+    }
+    for (const [key, value] of Object.entries(dopo)) {
+      if (!(key in prima)) patch.push({ op: "set", path: [...path, key], value });
+      else visitaDiff(prima[key], value, [...path, key], patch);
+    }
+    return;
+  }
+  if (!Object.is(prima, dopo)) patch.push({ op: "set", path, value: dopo });
+}
+function creaDiff(prima, dopo) {
+  const patch = [];
+  visitaDiff(prima, dopo, [], patch);
+  return patch;
+}
+function giornoUtc(ora) {
+  return new Date(ora).toISOString().slice(0, 10);
+}
+var COSTANTI_SHA256 = [
+  1116352408,
+  1899447441,
+  3049323471,
+  3921009573,
+  961987163,
+  1508970993,
+  2453635748,
+  2870763221,
+  3624381080,
+  310598401,
+  607225278,
+  1426881987,
+  1925078388,
+  2162078206,
+  2614888103,
+  3248222580,
+  3835390401,
+  4022224774,
+  264347078,
+  604807628,
+  770255983,
+  1249150122,
+  1555081692,
+  1996064986,
+  2554220882,
+  2821834349,
+  2952996808,
+  3210313671,
+  3336571891,
+  3584528711,
+  113926993,
+  338241895,
+  666307205,
+  773529912,
+  1294757372,
+  1396182291,
+  1695183700,
+  1986661051,
+  2177026350,
+  2456956037,
+  2730485921,
+  2820302411,
+  3259730800,
+  3345764771,
+  3516065817,
+  3600352804,
+  4094571909,
+  275423344,
+  430227734,
+  506948616,
+  659060556,
+  883997877,
+  958139571,
+  1322822218,
+  1537002063,
+  1747873779,
+  1955562222,
+  2024104815,
+  2227730452,
+  2361852424,
+  2428436474,
+  2756734187,
+  3204031479,
+  3329325298
+];
+function ruotaDestra(value, bits) {
+  return value >>> bits | value << 32 - bits;
+}
+function seedGiornata(slug, day) {
+  const testo = `caisual:${slug}:${day}`;
+  const bytes = Array.from(testo, (carattere) => carattere.charCodeAt(0));
+  const bitLength = bytes.length * 8;
+  bytes.push(128);
+  while (bytes.length % 64 !== 56) bytes.push(0);
+  for (let indice = 7; indice >= 0; indice--) {
+    bytes.push(indice < 4 ? bitLength >>> indice * 8 & 255 : 0);
+  }
+  let h0 = 1779033703;
+  let h1 = 3144134277;
+  let h2 = 1013904242;
+  let h3 = 2773480762;
+  let h4 = 1359893119;
+  let h5 = 2600822924;
+  let h6 = 528734635;
+  let h7 = 1541459225;
+  const parole = new Uint32Array(64);
+  for (let blocco = 0; blocco < bytes.length; blocco += 64) {
+    for (let indice = 0; indice < 16; indice++) {
+      const offset = blocco + indice * 4;
+      parole[indice] = ((bytes[offset] ?? 0) << 24 | (bytes[offset + 1] ?? 0) << 16 | (bytes[offset + 2] ?? 0) << 8 | (bytes[offset + 3] ?? 0)) >>> 0;
+    }
+    for (let indice = 16; indice < 64; indice++) {
+      const x = parole[indice - 15] ?? 0;
+      const y = parole[indice - 2] ?? 0;
+      const s0 = ruotaDestra(x, 7) ^ ruotaDestra(x, 18) ^ x >>> 3;
+      const s1 = ruotaDestra(y, 17) ^ ruotaDestra(y, 19) ^ y >>> 10;
+      parole[indice] = (parole[indice - 16] ?? 0) + s0 + (parole[indice - 7] ?? 0) + s1 >>> 0;
+    }
+    let a = h0;
+    let b = h1;
+    let c = h2;
+    let d = h3;
+    let e = h4;
+    let f = h5;
+    let g = h6;
+    let h = h7;
+    for (let indice = 0; indice < 64; indice++) {
+      const s1 = ruotaDestra(e, 6) ^ ruotaDestra(e, 11) ^ ruotaDestra(e, 25);
+      const scelta = e & f ^ ~e & g;
+      const temp1 = h + s1 + scelta + (COSTANTI_SHA256[indice] ?? 0) + (parole[indice] ?? 0) >>> 0;
+      const s0 = ruotaDestra(a, 2) ^ ruotaDestra(a, 13) ^ ruotaDestra(a, 22);
+      const maggioranza = a & b ^ a & c ^ b & c;
+      const temp2 = s0 + maggioranza >>> 0;
+      h = g;
+      g = f;
+      f = e;
+      e = d + temp1 >>> 0;
+      d = c;
+      c = b;
+      b = a;
+      a = temp1 + temp2 >>> 0;
+    }
+    h0 = h0 + a >>> 0;
+    h1 = h1 + b >>> 0;
+    h2 = h2 + c >>> 0;
+    h3 = h3 + d >>> 0;
+    h4 = h4 + e >>> 0;
+    h5 = h5 + f >>> 0;
+    h6 = h6 + g >>> 0;
+    h7 = h7 + h >>> 0;
+  }
+  return h0 >>> 0;
+}
+var CHIAVE_NUCLEO = "nucleo";
+var PREFISSO_SAVE = "save:";
+var LIMITE_FRAME = 16 * 1024;
+var LIMITE_STATO = 256 * 1024;
+var LIMITE_SAVE = 128 * 1024;
+var GRAZIA_MS = 6e4;
+var STANZA_VUOTA_MS = 5 * 6e4;
+var COUNTDOWN_MS = 3e3;
+var RIPOSO_TICK_MS = 3e4;
+var INATTIVITA_MS = 10 * 6e4;
+var CHIAVE = /^[a-z0-9][a-z0-9_-]{0,31}$/;
+var GAME_DEFINITION = /* @__PURE__ */ Symbol.for("@caisual/kit/game-definition");
+function record(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value) ? value : null;
+}
+function definizioneValida(value) {
+  return record(value)?.[GAME_DEFINITION] === true;
+}
+function idGiocatore(player) {
+  return typeof player === "string" ? player : player.id;
+}
+function copiaGiocatore(player) {
+  return {
+    id: player.id,
+    name: player.name,
+    guest: player.guest,
+    role: player.role,
+    team: player.team,
+    connected: player.connected
+  };
+}
+function copiaJson(value) {
+  return JSON.parse(JSON.stringify(value));
+}
+function codiceIngresso(code) {
+  if (code === "room_not_found") return 4001;
+  if (code === "room_full") return 4e3;
+  return 4004;
+}
+var NucleoStanza = class _NucleoStanza {
+  constructor(definizione, manifest, adattatore) {
+    this.definizione = definizione;
+    this.manifest = manifest;
+    this.adattatore = adattatore;
+    this.dati = null;
+    this.frequenza = /* @__PURE__ */ new Map();
+    this.kickRichiesti = /* @__PURE__ */ new Set();
+    this.voceGuadagniCambiati = /* @__PURE__ */ new Map();
+    this.fineRichiesta = null;
+    this.applicandoAzioni = false;
+    this.ultimoStatoOsservato = "";
+    this.voceDaPersistire = false;
+    const nucleo = this;
+    const daily = {
+      get day() {
+        return giornoUtc(nucleo.adattatore.ora());
+      },
+      get seed() {
+        return seedGiornata(nucleo.manifest.id, giornoUtc(nucleo.adattatore.ora()));
+      }
+    };
+    this.room = {
+      get id() {
+        return nucleo.richiediDati().id;
+      },
+      get mode() {
+        return nucleo.richiediDati().mode;
+      },
+      get status() {
+        return nucleo.richiediDati().status;
+      },
+      get tick() {
+        return nucleo.richiediDati().tick;
+      },
+      get state() {
+        return nucleo.richiediDati().state;
+      },
+      set state(value) {
+        nucleo.richiediDati().state = value;
+      },
+      get players() {
+        return nucleo.richiediDati().giocatori.map(copiaGiocatore);
+      },
+      get host() {
+        const dati = nucleo.richiediDati();
+        const host = dati.giocatori.find((player) => player.id === dati.hostId);
+        return host === void 0 ? null : copiaGiocatore(host);
+      },
+      broadcast(message) {
+        nucleo.broadcastCreatore(message);
+      },
+      send(player, message) {
+        nucleo.inviaCreatore(idGiocatore(player), message);
+      },
+      kick(player) {
+        nucleo.kickRichiesti.add(idGiocatore(player));
+      },
+      end(result) {
+        nucleo.richiediFine(result);
+      },
+      save(key, value) {
+        return nucleo.salva(key, value);
+      },
+      load(key) {
+        return nucleo.caricaSave(key);
+      },
+      schedule(milliseconds, handler, payload) {
+        nucleo.pianifica(milliseconds, handler, payload);
+      },
+      board: {
+        submit(player, board, score, options = {}) {
+          nucleo.accodaPunteggio(idGiocatore(player), board, score, options.daily === true);
+        }
+      },
+      daily,
+      time: { now: () => nucleo.adattatore.ora() },
+      voice: {
+        get mode() {
+          return nucleo.manifest.voice ?? "none";
+        },
+        setProximity(a, b, gain) {
+          nucleo.impostaProssimita(idGiocatore(a), idGiocatore(b), gain);
+        }
+      }
+    };
+  }
+  static async apri(definizione, manifest, adattatore) {
+    if (!definizioneValida(definizione)) {
+      throw new TypeError("The game server must export a definition created with defineGame.");
+    }
+    _NucleoStanza.verificaManifest(manifest);
+    const nucleo = new _NucleoStanza(definizione, manifest, adattatore);
+    const salvato = await adattatore.storage.get(CHIAVE_NUCLEO);
+    if (salvato !== void 0) {
+      nucleo.dati = salvato;
+      const daAggiornare = salvato.ultimoInputAt === void 0 || salvato.ultimoCambioStatoAt === void 0;
+      salvato.ultimoInputAt ??= adattatore.ora();
+      salvato.ultimoCambioStatoAt ??= salvato.ultimoInputAt;
+      nucleo.ultimoStatoOsservato = JSON.stringify(salvato.state);
+      await nucleo.riconciliaConnessioni();
+      if (daAggiornare) await nucleo.persisti();
+    }
+    await nucleo.aggiornaProgrammazione();
+    return nucleo;
+  }
+  static verificaManifest(manifest) {
+    if (typeof manifest?.id !== "string" || !Number.isInteger(manifest.players?.min) || !Number.isInteger(manifest.players?.max) || manifest.players.min < 1 || manifest.players.max < manifest.players.min || typeof manifest.lobby !== "boolean" || !Array.isArray(manifest.roles) || !Array.isArray(manifest.modes) || manifest.voice !== void 0 && !["none", "room", "team", "proximity"].includes(manifest.voice)) {
+      throw new TypeError("The room manifest is invalid.");
+    }
+  }
+  richiediDati() {
+    if (this.dati === null) throw new Error("The room has not been created.");
+    return this.dati;
+  }
+  stanzaTerminata() {
+    return this.dati?.status === "ended";
+  }
+  get esiste() {
+    return this.dati !== null;
+  }
+  async crea(id, mode, _creator) {
+    if (this.dati !== null) return false;
+    if (mode !== null && !this.manifest.modes.some((item) => item.id === mode)) {
+      throw new Error("The selected game mode does not exist.");
+    }
+    const ora = this.adattatore.ora();
+    this.dati = {
+      versione: 1,
+      id,
+      mode,
+      status: "lobby",
+      tick: 0,
+      tickRate: this.definizione.tickRate,
+      ultimoInputAt: ora,
+      ultimoCambioStatoAt: ora,
+      state: {},
+      giocatori: [],
+      hostId: null,
+      result: null,
+      resultAt: null,
+      countdownAt: null,
+      timer: [],
+      prossimoTimerId: 1,
+      punteggi: [],
+      fineInCoda: null,
+      vuotaDa: ora,
+      cancellaDopoFlush: false,
+      tickSincronizzato: 0,
+      statoSincronizzato: {},
+      durateCpu: [],
+      cpuOltreCento: 0,
+      voceGuadagni: {}
+    };
+    await this.chiama(this.definizione.onCreate, this.room);
+    await this.applicaAzioni();
+    this.inviaGuadagniCambiati();
+    if (this.dati.status !== "ended") {
+      const stato = analizzaJson(this.dati.state);
+      if (!stato.ok || stato.bytes > LIMITE_STATO) {
+        await this.terminaPerStato(stato.ok ? "state_too_large" : "state_invalid");
+      } else {
+        this.dati.state = stato.valore;
+        this.dati.statoSincronizzato = copiaJson(stato.valore);
+        this.ultimoStatoOsservato = stato.testo;
+      }
+    }
+    await this.persistiEProgramma();
+    return true;
+  }
+  info() {
+    if (this.dati === null) return null;
+    return {
+      roomId: this.dati.id,
+      status: this.dati.status,
+      players: this.dati.giocatori.filter(
+        (player) => player.connected || player.graziaFinoA !== null
+      ).length,
+      max: this.manifest.players.max,
+      mode: this.dati.mode
+    };
+  }
+  giocatoreConnesso(connessione) {
+    const player = this.dati?.giocatori.find(
+      (item) => item.connected && item.connessione === connessione
+    );
+    return player === void 0 ? null : copiaGiocatore(player);
+  }
+  puoEntrare(identity) {
+    if (this.dati === null) return { ok: false, code: "room_not_found" };
+    if (this.dati.status === "ended") return { ok: false, code: "room_ended" };
+    const esistente = this.dati.giocatori.find((player) => player.id === identity.id);
+    if (esistente !== void 0) return { ok: true };
+    if (this.manifest.lobby && this.dati.status !== "lobby") {
+      return { ok: false, code: "room_playing" };
+    }
+    if (this.dati.giocatori.length >= this.manifest.players.max) {
+      return { ok: false, code: "room_full" };
+    }
+    return { ok: true };
+  }
+  async entra(identity, connessione) {
+    await this.terminaSeInattiva();
+    const permesso = this.puoEntrare(identity);
+    if (!permesso.ok) {
+      this.adattatore.chiudi(connessione, codiceIngresso(permesso.code), permesso.code);
+      return permesso;
+    }
+    const dati = this.richiediDati();
+    const ora = this.adattatore.ora();
+    let player = dati.giocatori.find((item) => item.id === identity.id);
+    const nuovo = player === void 0;
+    if (player === void 0) {
+      player = {
+        ...identity,
+        role: this.ruoloAutomatico(),
+        team: this.squadraAutomatica(),
+        ready: false,
+        connected: true,
+        entratoAt: ora,
+        graziaFinoA: null,
+        connessione,
+        seq: 0
+      };
+      dati.giocatori.push(player);
+      dati.hostId ??= player.id;
+    } else {
+      if (player.connected && player.connessione !== null && player.connessione !== connessione) {
+        this.adattatore.chiudi(player.connessione, 4006, "replaced");
+      }
+      player.name = identity.name;
+      player.guest = identity.guest;
+      player.connected = true;
+      player.graziaFinoA = null;
+      player.connessione = connessione;
+      player.seq = 0;
+    }
+    dati.vuotaDa = null;
+    dati.ultimoInputAt = ora;
+    const primaConnessione = !this.manifest.lobby && dati.status === "lobby";
+    if (primaConnessione) dati.status = "playing";
+    if (nuovo) {
+      await this.chiama(
+        this.definizione.onJoin,
+        this.room,
+        copiaGiocatore(player)
+      );
+    }
+    if (primaConnessione) {
+      await this.chiama(this.definizione.onStart, this.room);
+      this.inviaStatus(ora);
+    }
+    await this.concludiEvento();
+    if (dati.status !== "ended") {
+      this.inviaWelcome(player);
+      this.inviaSnapshotTutti();
+      this.inviaGiocatori();
+    }
+    await this.persistiEProgramma();
+    return { ok: true };
+  }
+  async disconnetti(connessione) {
+    if (this.dati === null || this.dati.status === "ended") return;
+    const player = this.dati.giocatori.find(
+      (item) => item.connected && item.connessione === connessione
+    );
+    if (player === void 0) return;
+    player.connected = false;
+    player.connessione = null;
+    player.graziaFinoA = this.adattatore.ora() + GRAZIA_MS;
+    this.frequenza.delete(connessione);
+    if (this.dati.hostId === player.id) this.assegnaHost();
+    this.verificaCountdown();
+    this.inviaGiocatori();
+    await this.persistiEProgramma();
+  }
+  async ricevi(connessione, frame) {
+    if (this.dati === null || this.dati.status === "ended") return;
+    if (await this.terminaSeInattiva()) return;
+    const player = this.dati.giocatori.find(
+      (item) => item.connected && item.connessione === connessione
+    );
+    if (player === void 0) return;
+    if (new TextEncoder().encode(frame).byteLength > LIMITE_FRAME) {
+      await this.chiudiConnessione(player, 4009, "bad_message");
+      return;
+    }
+    const ora = this.adattatore.ora();
+    const recenti = (this.frequenza.get(connessione) ?? []).filter((at) => ora - at < 1e3);
+    if (recenti.length >= 20) {
+      await this.chiudiConnessione(player, 4008, "rate_limited");
+      return;
+    }
+    recenti.push(ora);
+    this.frequenza.set(connessione, recenti);
+    let message = null;
+    try {
+      message = record(JSON.parse(frame));
+    } catch {
+    }
+    if (message === null || typeof message.t !== "string") {
+      await this.chiudiConnessione(player, 4009, "bad_message");
+      return;
+    }
+    if (message.t === "ping") {
+      if (typeof message.c !== "number" || !Number.isFinite(message.c)) {
+        await this.chiudiConnessione(player, 4009, "bad_message");
+        return;
+      }
+      this.adattatore.invia(connessione, { t: "pong", c: message.c, s: ora });
+      return;
+    }
+    if (message.t === "resync") {
+      this.inviaSnapshotTutti();
+      await this.persistiEProgramma();
+      return;
+    }
+    if (message.t === "leave") {
+      this.dati.ultimoInputAt = ora;
+      await this.rimuoviGiocatore(player, "left");
+      this.adattatore.chiudi(connessione, 1e3, "left");
+      await this.concludiEvento();
+      this.inviaGiocatori();
+      await this.persistiEProgramma();
+      return;
+    }
+    if (message.t === "ready") {
+      if (typeof message.ready !== "boolean") return this.messaggioErrato(player);
+      if (!this.inLobby(player)) return;
+      this.dati.ultimoInputAt = ora;
+      player.ready = message.ready;
+      this.inviaGiocatori();
+      await this.persistiEProgramma();
+      return;
+    }
+    if (message.t === "role") {
+      if (typeof message.role !== "string") return this.messaggioErrato(player);
+      if (!this.inLobby(player)) return;
+      this.dati.ultimoInputAt = ora;
+      this.scegliRuolo(player, message.role);
+      await this.persistiEProgramma();
+      return;
+    }
+    if (message.t === "team") {
+      if (!Number.isInteger(message.team)) return this.messaggioErrato(player);
+      if (!this.inLobby(player)) return;
+      this.dati.ultimoInputAt = ora;
+      this.scegliSquadra(player, message.team);
+      await this.persistiEProgramma();
+      return;
+    }
+    if (message.t === "start") {
+      if (!this.inLobby(player)) return;
+      this.dati.ultimoInputAt = ora;
+      await this.avviaCountdown(player);
+      return;
+    }
+    if (message.t === "msg") {
+      if (!Number.isSafeInteger(message.seq) || message.seq < 1) {
+        await this.messaggioErrato(player);
+        return;
+      }
+      const seq = message.seq;
+      if (seq <= player.seq) return;
+      const contenuto = analizzaJson(message.m);
+      if (!contenuto.ok) {
+        await this.messaggioErrato(player);
+        return;
+      }
+      player.seq = seq;
+      if (player.role === "spectator") {
+        this.inviaErrore(player, "spectator", "Spectators cannot send game input.");
+        await this.persistiEProgramma();
+        return;
+      }
+      this.dati.ultimoInputAt = ora;
+      await this.chiama(
+        this.definizione.onMessage,
+        this.room,
+        copiaGiocatore(player),
+        contenuto.valore
+      );
+      await this.concludiEvento();
+      await this.persistiEProgramma();
+      return;
+    }
+    await this.messaggioErrato(player);
+  }
+  async eseguiTick() {
+    if (this.dati === null || this.dati.status !== "playing" || this.dati.tickRate === 0) return;
+    if (await this.terminaSeInattiva()) return;
+    if (!this.serveTick()) {
+      await this.persistiEProgramma();
+      return;
+    }
+    const dati = this.dati;
+    dati.tick++;
+    const inizio = this.adattatore.misuraCpu();
+    await this.chiama(
+      this.definizione.onTick,
+      this.room,
+      1 / dati.tickRate
+    );
+    const durata = Math.max(0, this.adattatore.misuraCpu() - inizio);
+    this.registraCpu(durata);
+    await this.applicaAzioni();
+    if (dati.status === "ended") return;
+    this.inviaGuadagniCambiati();
+    const stato = await this.verificaStato();
+    if (stato === null || this.stanzaTerminata()) return;
+    const cambiato = stato.testo !== JSON.stringify(dati.statoSincronizzato);
+    if (dati.tick % 100 === 0) {
+      dati.state = stato.valore;
+      this.inviaSnapshotTutti();
+    } else if (cambiato) {
+      const base = dati.tickSincronizzato;
+      this.broadcast({
+        t: "state",
+        tick: dati.tick,
+        serverTime: this.adattatore.ora(),
+        base,
+        patch: creaDiff(dati.statoSincronizzato, stato.valore)
+      });
+      dati.state = stato.valore;
+      dati.statoSincronizzato = copiaJson(stato.valore);
+      dati.tickSincronizzato = dati.tick;
+    }
+    if (dati.tick % 100 === 0 || this.voceDaPersistire) await this.persisti();
+    await this.aggiornaProgrammazione();
+  }
+  async sveglia() {
+    if (this.dati === null || this.dati.status === "ended") return;
+    if (await this.terminaSeInattiva()) return;
+    const ora = this.adattatore.ora();
+    const scaduti = this.dati.giocatori.filter(
+      (player) => !player.connected && player.graziaFinoA !== null && player.graziaFinoA <= ora
+    );
+    for (const player of scaduti) await this.rimuoviGiocatore(player, "timeout");
+    if (this.dati.status === "countdown" && this.dati.countdownAt !== null && this.dati.countdownAt <= ora) {
+      const errore = this.erroreMinimi();
+      if (errore !== null) {
+        this.dati.status = "lobby";
+        this.dati.countdownAt = null;
+        this.broadcast({ t: "error", code: errore.code, message: errore.message });
+        this.inviaStatus(ora);
+      } else {
+        this.dati.status = "playing";
+        this.dati.ultimoInputAt = ora;
+        this.dati.countdownAt = null;
+        await this.chiama(this.definizione.onStart, this.room);
+        this.inviaStatus(ora);
+      }
+    }
+    const dovuti = this.dati.timer.filter((timer) => timer.at <= ora).sort((a, b) => a.at - b.at || a.id - b.id);
+    if (dovuti.length > 0) {
+      const ids = new Set(dovuti.map((timer) => timer.id));
+      this.dati.timer = this.dati.timer.filter((timer) => !ids.has(timer.id));
+      for (const timer of dovuti) await this.eseguiTimer(timer);
+    }
+    await this.concludiEvento();
+    if (!this.stanzaTerminata() && this.dati.giocatori.length === 0 && this.dati.vuotaDa !== null && this.dati.vuotaDa + STANZA_VUOTA_MS <= ora) {
+      this.dati.cancellaDopoFlush = true;
+      await this.terminaInterna(null);
+    }
+    if (scaduti.length > 0) this.inviaGiocatori();
+    await this.concludiEvento();
+    await this.persistiEProgramma();
+  }
+  async flush() {
+    const dati = this.richiediDati();
+    const esito = {
+      scores: dati.punteggi.map((score) => ({ ...score })),
+      ended: dati.fineInCoda === null ? null : { result: dati.fineInCoda.result, at: dati.fineInCoda.at }
+    };
+    dati.punteggi = [];
+    dati.fineInCoda = null;
+    if (dati.cancellaDopoFlush && dati.status === "ended") {
+      const chiavi = await this.adattatore.storage.list();
+      for (const key of chiavi.keys()) await this.adattatore.storage.delete(key);
+      this.dati = null;
+      this.adattatore.programmaTick(null);
+      await this.adattatore.programmaSveglia(null);
+    } else {
+      await this.persistiEProgramma();
+    }
+    return esito;
+  }
+  async riconciliaConnessioni() {
+    const dati = this.richiediDati();
+    const attive = new Set(this.adattatore.connessioniAttive());
+    const ora = this.adattatore.ora();
+    let cambiato = false;
+    for (const player of dati.giocatori) {
+      if (player.connected && (player.connessione === null || !attive.has(player.connessione))) {
+        player.connected = false;
+        player.connessione = null;
+        player.graziaFinoA = ora + GRAZIA_MS;
+        cambiato = true;
+      }
+    }
+    if (cambiato) {
+      this.assegnaHost();
+      await this.persisti();
+    }
+  }
+  ruoloAutomatico() {
+    if (this.manifest.roles.length === 0) return null;
+    const dati = this.richiediDati();
+    const candidati = this.manifest.roles.filter((role) => {
+      const count = dati.giocatori.filter((player) => player.role === role.id).length;
+      return role.max === void 0 || count < role.max;
+    });
+    candidati.sort((a, b) => {
+      const countA = dati.giocatori.filter((player) => player.role === a.id).length;
+      const countB = dati.giocatori.filter((player) => player.role === b.id).length;
+      const mancaA = countA < a.min ? 0 : 1;
+      const mancaB = countB < b.min ? 0 : 1;
+      return mancaA - mancaB || countA - countB;
+    });
+    return candidati[0]?.id ?? "spectator";
+  }
+  squadraAutomatica() {
+    if (this.manifest.teams === null) return null;
+    const dati = this.richiediDati();
+    let scelta = 1;
+    let minimo = Number.POSITIVE_INFINITY;
+    for (let team = 1; team <= this.manifest.teams.min; team++) {
+      const count = dati.giocatori.filter((player) => player.team === team).length;
+      if (count < minimo) {
+        minimo = count;
+        scelta = team;
+      }
+    }
+    return scelta;
+  }
+  inLobby(player) {
+    if (this.richiediDati().status === "lobby") return true;
+    this.inviaErrore(player, "not_in_lobby", "This action is only available in the lobby.");
+    return false;
+  }
+  scegliRuolo(player, roleId) {
+    const ruolo = this.manifest.roles.find((item) => item.id === roleId);
+    if (ruolo === void 0 && roleId !== "spectator") {
+      this.inviaErrore(player, "invalid_role", "This role does not exist.");
+      return;
+    }
+    const occupati = this.richiediDati().giocatori.filter(
+      (item) => item.id !== player.id && item.role === roleId
+    ).length;
+    if (ruolo?.max !== void 0 && occupati >= ruolo.max) {
+      this.inviaErrore(player, "role_full", "This role is full.");
+      return;
+    }
+    player.role = roleId;
+    if (roleId === "spectator") player.team = null;
+    else if (player.team === null) player.team = this.squadraAutomatica();
+    player.ready = false;
+    this.inviaGiocatori();
+  }
+  scegliSquadra(player, team) {
+    if (this.manifest.teams === null || team < 1 || team > this.manifest.teams.max) {
+      this.inviaErrore(player, "invalid_team", "This team does not exist.");
+      return;
+    }
+    if (player.role === "spectator") {
+      this.inviaErrore(player, "spectator", "Spectators cannot join a team.");
+      return;
+    }
+    player.team = team;
+    player.ready = false;
+    this.inviaGiocatori();
+  }
+  erroreMinimi() {
+    const connessi = this.richiediDati().giocatori.filter((player) => player.connected);
+    const attivi = connessi.filter((player) => player.role !== "spectator");
+    if (attivi.length < this.manifest.players.min) {
+      return { code: "not_enough_players", message: "The room does not have enough players." };
+    }
+    if (connessi.some((player) => !player.ready)) {
+      return { code: "players_not_ready", message: "Every connected player must be ready." };
+    }
+    for (const role of this.manifest.roles) {
+      if (attivi.filter((player) => player.role === role.id).length < role.min) {
+        return { code: "role_minimum", message: `Role ${role.id} does not meet its minimum.` };
+      }
+    }
+    if (this.manifest.teams !== null) {
+      const squadre = new Set(attivi.map((player) => player.team).filter((team) => team !== null));
+      if (attivi.some((player) => player.team === null) || squadre.size < this.manifest.teams.min) {
+        return { code: "team_minimum", message: "The room does not have enough teams." };
+      }
+    }
+    return null;
+  }
+  async avviaCountdown(player) {
+    const dati = this.richiediDati();
+    if (dati.hostId !== player.id) {
+      this.inviaErrore(player, "not_host", "Only the host can start the game.");
+      return;
+    }
+    const errore = this.erroreMinimi();
+    if (errore !== null) {
+      this.inviaErrore(player, errore.code, errore.message);
+      return;
+    }
+    dati.status = "countdown";
+    dati.countdownAt = this.adattatore.ora() + COUNTDOWN_MS;
+    this.inviaStatus(dati.countdownAt);
+    await this.persistiEProgramma();
+  }
+  verificaCountdown() {
+    const dati = this.richiediDati();
+    if (dati.status !== "countdown" || this.erroreMinimi() === null) return;
+    dati.status = "lobby";
+    dati.countdownAt = null;
+    this.inviaStatus(this.adattatore.ora());
+  }
+  async messaggioErrato(player) {
+    await this.chiudiConnessione(player, 4009, "bad_message");
+  }
+  async chiudiConnessione(player, codice, motivo) {
+    const connessione = player.connessione;
+    if (connessione !== null) this.adattatore.chiudi(connessione, codice, motivo);
+    await this.disconnetti(connessione ?? "");
+  }
+  async rimuoviGiocatore(player, reason) {
+    const dati = this.richiediDati();
+    const indice = dati.giocatori.findIndex((item) => item.id === player.id);
+    if (indice < 0) return;
+    dati.giocatori.splice(indice, 1);
+    this.pulisciGuadagni(player.id);
+    if (dati.hostId === player.id) this.assegnaHost();
+    if (dati.giocatori.length === 0) dati.vuotaDa = this.adattatore.ora();
+    await this.chiama(
+      this.definizione.onLeave,
+      this.room,
+      copiaGiocatore({ ...player, connected: false, connessione: null }),
+      reason
+    );
+    this.verificaCountdown();
+  }
+  assegnaHost() {
+    const dati = this.richiediDati();
+    const host = dati.giocatori.filter((player) => player.connected).sort((a, b) => a.entratoAt - b.entratoAt)[0];
+    dati.hostId = host?.id ?? null;
+  }
+  async eseguiTimer(timer) {
+    const value = this.definizione[timer.handler];
+    await this.chiama(
+      typeof value === "function" ? value : void 0,
+      this.room,
+      timer.payload
+    );
+  }
+  pianifica(milliseconds, handler, payload) {
+    if (!Number.isSafeInteger(milliseconds) || milliseconds < 0) {
+      throw new TypeError("Schedule delay must be a non-negative integer.");
+    }
+    if (!/^[A-Za-z_$][A-Za-z0-9_$]*$/.test(handler)) {
+      throw new TypeError("Schedule handler must be a method name.");
+    }
+    const callback = this.definizione[handler];
+    if (typeof callback !== "function") {
+      throw new TypeError(`Schedule handler ${handler} is not defined.`);
+    }
+    const json = analizzaJson(payload);
+    if (!json.ok) throw new TypeError("Schedule payload must be valid JSON.");
+    const dati = this.richiediDati();
+    dati.timer.push({
+      id: dati.prossimoTimerId++,
+      at: this.adattatore.ora() + milliseconds,
+      handler,
+      payload: json.valore
+    });
+  }
+  accodaPunteggio(playerId, board, score, daily) {
+    if (!this.richiediDati().giocatori.some((player) => player.id === playerId)) {
+      throw new Error("Player not found.");
+    }
+    if (!CHIAVE.test(board)) {
+      throw new TypeError("Board names must use lowercase letters, numbers, underscores, or hyphens.");
+    }
+    if (!Number.isSafeInteger(score) || score < 0) {
+      throw new TypeError("Score must be a non-negative safe integer.");
+    }
+    this.richiediDati().punteggi.push({ playerId, board, score, daily });
+    this.broadcast({ t: "flush" });
+  }
+  richiediFine(result) {
+    const json = analizzaJson(result);
+    if (!json.ok) throw new TypeError("Game result must be valid JSON.");
+    this.fineRichiesta = json.valore;
+  }
+  async salva(key, value) {
+    if (!CHIAVE.test(key)) {
+      throw new TypeError("Save keys must use lowercase letters, numbers, underscores, or hyphens.");
+    }
+    const json = analizzaJson(value);
+    if (!json.ok) throw new TypeError("Saved values must be valid JSON.");
+    if (json.bytes > LIMITE_SAVE) {
+      throw new RangeError("Saved values must be at most 131072 bytes.");
+    }
+    await this.adattatore.storage.put(PREFISSO_SAVE + key, json.valore);
+  }
+  async caricaSave(key) {
+    if (!CHIAVE.test(key)) {
+      throw new TypeError("Save keys must use lowercase letters, numbers, underscores, or hyphens.");
+    }
+    const value = await this.adattatore.storage.get(PREFISSO_SAVE + key);
+    if (value === void 0) return null;
+    const json = analizzaJson(value);
+    if (!json.ok) throw new Error("The saved value is invalid.");
+    return json.valore;
+  }
+  broadcastCreatore(message) {
+    const json = analizzaJson(message);
+    if (!json.ok) throw new TypeError("Messages must be valid JSON.");
+    this.broadcast({ t: "msg", m: json.valore });
+  }
+  inviaCreatore(playerId, message) {
+    const json = analizzaJson(message);
+    if (!json.ok) throw new TypeError("Messages must be valid JSON.");
+    const player = this.richiediDati().giocatori.find((item) => item.id === playerId);
+    if (player === void 0) throw new Error("Player not found.");
+    if (player.connected && player.connessione !== null) {
+      this.adattatore.invia(player.connessione, { t: "msg", m: json.valore });
+    }
+  }
+  broadcast(message) {
+    for (const player of this.richiediDati().giocatori) {
+      if (player.connected && player.connessione !== null) {
+        this.adattatore.invia(player.connessione, message);
+      }
+    }
+  }
+  inviaErrore(player, code, message) {
+    if (player.connected && player.connessione !== null) {
+      this.adattatore.invia(player.connessione, { t: "error", code, message });
+    }
+  }
+  giocatoriProtocollo() {
+    return this.richiediDati().giocatori.map((player) => ({
+      id: player.id,
+      name: player.name,
+      guest: player.guest,
+      role: player.role,
+      team: player.team,
+      ready: player.ready,
+      connected: player.connected
+    }));
+  }
+  inviaWelcome(player) {
+    if (!player.connected || player.connessione === null) return;
+    const dati = this.richiediDati();
+    this.adattatore.invia(player.connessione, {
+      t: "welcome",
+      you: player.id,
+      room: {
+        id: dati.id,
+        status: dati.status,
+        mode: dati.mode,
+        tick: dati.tick,
+        tickRate: dati.tickRate,
+        serverTime: this.adattatore.ora(),
+        host: dati.hostId
+      },
+      players: this.giocatoriProtocollo(),
+      state: dati.state
+    });
+    const gains = dati.voceGuadagni?.[player.id];
+    if (gains !== void 0 && Object.keys(gains).length > 0) {
+      this.adattatore.invia(player.connessione, { t: "voice", op: "gain", gains: { ...gains } });
+    }
+  }
+  inviaGiocatori() {
+    this.broadcast({ t: "players", players: this.giocatoriProtocollo() });
+  }
+  inviaStatus(at) {
+    const dati = this.richiediDati();
+    this.broadcast({
+      t: "status",
+      status: dati.status,
+      at,
+      result: dati.status === "ended" ? dati.result : null
+    });
+  }
+  inviaSnapshotTutti() {
+    const dati = this.richiediDati();
+    const stato = analizzaJson(dati.state);
+    if (!stato.ok || stato.bytes > LIMITE_STATO) return;
+    dati.state = stato.valore;
+    dati.statoSincronizzato = copiaJson(stato.valore);
+    dati.tickSincronizzato = dati.tick;
+    this.broadcast({
+      t: "snapshot",
+      tick: dati.tick,
+      serverTime: this.adattatore.ora(),
+      state: stato.valore
+    });
+  }
+  async chiama(callback, ...args) {
+    if (callback === void 0 || this.dati?.status === "ended") return;
+    try {
+      await callback(...args);
+    } catch {
+      this.fineRichiesta = { error: "callback_error" };
+    }
+  }
+  async applicaAzioni() {
+    if (this.applicandoAzioni || this.dati === null) return;
+    this.applicandoAzioni = true;
+    try {
+      while (this.kickRichiesti.size > 0 && this.dati.status !== "ended") {
+        const playerId = this.kickRichiesti.values().next().value;
+        if (playerId === void 0) break;
+        this.kickRichiesti.delete(playerId);
+        const player = this.dati.giocatori.find((item) => item.id === playerId);
+        if (player === void 0) continue;
+        if (player.connessione !== null) this.adattatore.chiudi(player.connessione, 4003, "kicked");
+        await this.rimuoviGiocatore(player, "kicked");
+      }
+      if (this.fineRichiesta !== null && this.dati.status !== "ended") {
+        const result = this.fineRichiesta;
+        this.fineRichiesta = null;
+        await this.terminaInterna(result);
+      }
+    } finally {
+      this.applicandoAzioni = false;
+    }
+  }
+  async concludiEvento() {
+    await this.applicaAzioni();
+    if (this.dati === null || this.dati.status === "ended") return;
+    this.inviaGuadagniCambiati();
+    const stato = await this.verificaStato();
+    if (stato === null || this.stanzaTerminata()) return;
+    const precedente = JSON.stringify(this.dati.statoSincronizzato);
+    this.dati.state = stato.valore;
+    if ((this.dati.tickRate === 0 || this.dati.status !== "playing") && stato.testo !== precedente) {
+      this.dati.tick++;
+      this.inviaSnapshotTutti();
+    }
+  }
+  async verificaStato() {
+    const stato = analizzaJson(this.richiediDati().state);
+    if (!stato.ok) {
+      await this.terminaPerStato("state_invalid");
+      return null;
+    }
+    if (stato.bytes > LIMITE_STATO) {
+      await this.terminaPerStato("state_too_large");
+      return null;
+    }
+    if (stato.testo !== this.ultimoStatoOsservato) {
+      this.richiediDati().ultimoCambioStatoAt = this.adattatore.ora();
+      this.ultimoStatoOsservato = stato.testo;
+    }
+    return stato;
+  }
+  impostaProssimita(a, b, gain) {
+    if ((this.manifest.voice ?? "none") !== "proximity") return;
+    const dati = this.richiediDati();
+    if (!dati.giocatori.some((player) => player.id === a) || !dati.giocatori.some((player) => player.id === b)) throw new Error("Player not found.");
+    if (Number.isNaN(gain)) throw new TypeError("Voice gain must be a number.");
+    if (a === b) return;
+    const valore = Math.round(Math.min(1, Math.max(0, gain)) * 100) / 100;
+    dati.voceGuadagni ??= {};
+    this.salvaGuadagno(a, b, valore);
+    this.salvaGuadagno(b, a, valore);
+  }
+  salvaGuadagno(playerId, altroId, valore) {
+    const dati = this.richiediDati();
+    dati.voceGuadagni ??= {};
+    const precedente = dati.voceGuadagni[playerId]?.[altroId] ?? 1;
+    if (precedente === valore) return;
+    this.voceDaPersistire = true;
+    if (valore === 1) {
+      const riga = dati.voceGuadagni[playerId];
+      if (riga !== void 0) {
+        delete riga[altroId];
+        if (Object.keys(riga).length === 0) delete dati.voceGuadagni[playerId];
+      }
+    } else {
+      (dati.voceGuadagni[playerId] ??= {})[altroId] = valore;
+    }
+    (this.voceGuadagniCambiati.get(playerId) ?? this.creaCambiVoce(playerId))[altroId] = valore;
+  }
+  creaCambiVoce(playerId) {
+    const cambi = {};
+    this.voceGuadagniCambiati.set(playerId, cambi);
+    return cambi;
+  }
+  inviaGuadagniCambiati() {
+    if (this.dati === null || this.voceGuadagniCambiati.size === 0) return;
+    for (const [playerId, gains] of this.voceGuadagniCambiati) {
+      const player = this.dati.giocatori.find((item) => item.id === playerId);
+      if (player?.connected && player.connessione !== null) {
+        this.adattatore.invia(player.connessione, { t: "voice", op: "gain", gains: { ...gains } });
+      }
+    }
+    this.voceGuadagniCambiati.clear();
+  }
+  pulisciGuadagni(playerId) {
+    const guadagni = this.richiediDati().voceGuadagni;
+    if (guadagni === void 0) return;
+    let cambiato = Object.hasOwn(guadagni, playerId);
+    delete guadagni[playerId];
+    this.voceGuadagniCambiati.delete(playerId);
+    for (const [altroId, riga] of Object.entries(guadagni)) {
+      cambiato = Object.hasOwn(riga, playerId) || cambiato;
+      delete riga[playerId];
+      if (Object.keys(riga).length === 0) delete guadagni[altroId];
+    }
+    if (cambiato) this.voceDaPersistire = true;
+  }
+  async terminaPerStato(code) {
+    const dati = this.richiediDati();
+    dati.state = dati.statoSincronizzato;
+    await this.terminaInterna({ error: code });
+  }
+  async terminaInterna(result) {
+    const dati = this.richiediDati();
+    if (dati.status === "ended") return;
+    dati.status = "ended";
+    dati.countdownAt = null;
+    dati.result = result;
+    dati.resultAt = this.adattatore.ora();
+    try {
+      await this.definizione.onEnd?.(this.room);
+    } catch {
+      if (record(result)?.error === void 0) dati.result = { error: "callback_error" };
+    }
+    const stato = analizzaJson(dati.state);
+    if (!stato.ok || stato.bytes > LIMITE_STATO) {
+      dati.state = dati.statoSincronizzato;
+      dati.result = { error: stato.ok ? "state_too_large" : "state_invalid" };
+    } else if (stato.testo !== JSON.stringify(dati.statoSincronizzato)) {
+      dati.tick++;
+      dati.state = stato.valore;
+      this.inviaSnapshotTutti();
+    }
+    const fine = { result: dati.result, at: dati.resultAt };
+    dati.fineInCoda = fine;
+    this.inviaStatus(dati.resultAt);
+    this.broadcast({ t: "flush" });
+    for (const player of dati.giocatori) {
+      if (player.connected && player.connessione !== null) {
+        this.adattatore.chiudi(player.connessione, 4004, "room_ended");
+        player.connected = false;
+        player.connessione = null;
+        player.graziaFinoA = null;
+      }
+    }
+    await this.persistiEProgramma();
+  }
+  registraCpu(durata) {
+    const dati = this.richiediDati();
+    dati.durateCpu.push(durata);
+    if (dati.durateCpu.length > 50) dati.durateCpu.shift();
+    dati.cpuOltreCento = durata > 100 ? dati.cpuOltreCento + 1 : 0;
+    if (dati.cpuOltreCento >= 20) {
+      this.fineRichiesta = { error: "cpu_budget" };
+      return;
+    }
+    if (dati.durateCpu.length === 50) {
+      const media = dati.durateCpu.reduce((somma, value) => somma + value, 0) / 50;
+      if (media > 20 && dati.tickRate > 5) {
+        dati.tickRate = Math.max(5, Math.floor(dati.tickRate / 2));
+        dati.durateCpu = [];
+        this.broadcast({
+          t: "error",
+          code: "tick_rate_reduced",
+          message: `Tick rate reduced to ${dati.tickRate} because the game exceeded its CPU budget.`
+        });
+      }
+    }
+  }
+  async persisti() {
+    if (this.dati !== null) {
+      await this.adattatore.storage.put(CHIAVE_NUCLEO, this.dati);
+      this.voceDaPersistire = false;
+    }
+  }
+  async persistiEProgramma() {
+    await this.persisti();
+    await this.aggiornaProgrammazione();
+  }
+  serveTick() {
+    const dati = this.dati;
+    return dati !== null && dati.status === "playing" && dati.tickRate > 0 && dati.giocatori.some((player) => player.connected) && this.adattatore.ora() - Math.max(dati.ultimoInputAt, dati.ultimoCambioStatoAt) < RIPOSO_TICK_MS;
+  }
+  async terminaSeInattiva() {
+    if (this.dati?.status !== "playing" || this.adattatore.ora() < this.dati.ultimoInputAt + INATTIVITA_MS) return false;
+    await this.terminaInterna({ error: "idle" });
+    return true;
+  }
+  async aggiornaProgrammazione() {
+    if (this.dati === null || this.dati.status === "ended") {
+      this.adattatore.programmaTick(null);
+      await this.adattatore.programmaSveglia(null);
+      return;
+    }
+    this.adattatore.programmaTick(
+      this.serveTick() ? 1e3 / this.dati.tickRate : null
+    );
+    const prossime = [];
+    if (this.dati.status === "playing") prossime.push(this.dati.ultimoInputAt + INATTIVITA_MS);
+    if (this.dati.countdownAt !== null) prossime.push(this.dati.countdownAt);
+    for (const player of this.dati.giocatori) {
+      if (!player.connected && player.graziaFinoA !== null) prossime.push(player.graziaFinoA);
+    }
+    for (const timer of this.dati.timer) prossime.push(timer.at);
+    if (this.dati.giocatori.length === 0 && this.dati.vuotaDa !== null) {
+      prossime.push(this.dati.vuotaDa + STANZA_VUOTA_MS);
+    }
+    await this.adattatore.programmaSveglia(prossime.length === 0 ? null : Math.min(...prossime));
+  }
+};
+var GUID_WEBSOCKET = "258EAFA5-E914-47DA-95CA-C5AB0DC85B11";
+var MASSIMO_MESSAGGIO = 1e6;
+function contieneToken(value, token) {
+  return value?.split(",").some((parte) => parte.trim().toLowerCase() === token) === true;
+}
+function chiaveValida(value) {
+  if (value === void 0 || !/^[A-Za-z0-9+/]{22}==$/.test(value)) return false;
+  return Buffer.from(value, "base64").byteLength === 16;
+}
+function creaFrame(opcode, payload) {
+  const primo = Buffer.from([128 | opcode]);
+  if (payload.byteLength < 126) {
+    return Buffer.concat([primo, Buffer.from([payload.byteLength]), payload]);
+  }
+  if (payload.byteLength <= 65535) {
+    const header2 = Buffer.allocUnsafe(3);
+    header2[0] = 126;
+    header2.writeUInt16BE(payload.byteLength, 1);
+    return Buffer.concat([primo, header2, payload]);
+  }
+  const header = Buffer.allocUnsafe(9);
+  header[0] = 127;
+  header.writeBigUInt64BE(BigInt(payload.byteLength), 1);
+  return Buffer.concat([primo, header, payload]);
+}
+function testoUtf8(payload) {
+  try {
+    return new TextDecoder("utf-8", { fatal: true }).decode(payload);
+  } catch {
+    return null;
+  }
+}
+var NodeWebSocket = class extends EventEmitter {
+  constructor(socket, head, massimoMessaggio = MASSIMO_MESSAGGIO) {
+    super();
+    this.socket = socket;
+    this.massimoMessaggio = massimoMessaggio;
+    this.buffer = Buffer.alloc(0);
+    this.frammenti = [];
+    this.byteFrammenti = 0;
+    this.frammentando = false;
+    this.chiusuraInviata = false;
+    this.terminato = false;
+    socket.on("data", (chunk) => this.aggiungi(chunk));
+    socket.on("end", () => this.termina());
+    socket.on("close", () => this.termina());
+    socket.on("error", () => this.termina());
+    if (head.byteLength > 0) queueMicrotask(() => this.aggiungi(head));
+  }
+  send(message) {
+    if (this.chiusuraInviata || this.terminato) return;
+    this.socket.write(creaFrame(1, Buffer.from(message, "utf8")));
+  }
+  close(code = 1e3, reason = "") {
+    if (this.chiusuraInviata || this.terminato) return;
+    const motivo = Buffer.from(reason, "utf8");
+    if (motivo.byteLength > 123) throw new RangeError("WebSocket close reasons must be at most 123 bytes.");
+    const payload = Buffer.allocUnsafe(2 + motivo.byteLength);
+    payload.writeUInt16BE(code, 0);
+    motivo.copy(payload, 2);
+    this.chiusuraInviata = true;
+    this.socket.write(creaFrame(8, payload), () => this.socket.end());
+  }
+  termina() {
+    if (this.terminato) return;
+    this.terminato = true;
+    this.emit("close");
+  }
+  erroreProtocollo(code, reason) {
+    this.close(code, reason);
+  }
+  aggiungi(chunk) {
+    if (this.terminato) return;
+    this.buffer = this.buffer.byteLength === 0 ? chunk : Buffer.concat([this.buffer, chunk]);
+    this.leggiFrame();
+  }
+  leggiFrame() {
+    while (!this.terminato && this.buffer.byteLength >= 2) {
+      const primo = this.buffer[0] ?? 0;
+      const secondo = this.buffer[1] ?? 0;
+      const fin = (primo & 128) !== 0;
+      const opcode = primo & 15;
+      const controllo = opcode >= 8;
+      if ((primo & 112) !== 0 || ![0, 1, 8, 9, 10].includes(opcode)) {
+        this.erroreProtocollo(1002, "protocol_error");
+        return;
+      }
+      if ((secondo & 128) === 0 || controllo && !fin) {
+        this.erroreProtocollo(1002, "protocol_error");
+        return;
+      }
+      let lunghezza = secondo & 127;
+      let offset = 2;
+      if (lunghezza === 126) {
+        if (this.buffer.byteLength < 4) return;
+        lunghezza = this.buffer.readUInt16BE(2);
+        offset = 4;
+      } else if (lunghezza === 127) {
+        if (this.buffer.byteLength < 10) return;
+        const grande = this.buffer.readBigUInt64BE(2);
+        if (grande > BigInt(Number.MAX_SAFE_INTEGER)) {
+          this.erroreProtocollo(1009, "message_too_large");
+          return;
+        }
+        lunghezza = Number(grande);
+        offset = 10;
+      }
+      if (controllo && lunghezza > 125) {
+        this.erroreProtocollo(1002, "protocol_error");
+        return;
+      }
+      if (this.buffer.byteLength < offset + 4 + lunghezza) return;
+      const maschera = this.buffer.subarray(offset, offset + 4);
+      const payload = Buffer.from(this.buffer.subarray(offset + 4, offset + 4 + lunghezza));
+      this.buffer = this.buffer.subarray(offset + 4 + lunghezza);
+      for (let indice = 0; indice < payload.byteLength; indice += 1) {
+        payload[indice] = (payload[indice] ?? 0) ^ (maschera[indice % 4] ?? 0);
+      }
+      if (controllo) {
+        this.gestisciControllo(opcode, payload);
+        continue;
+      }
+      this.gestisciDati(opcode, fin, payload);
+    }
+  }
+  gestisciControllo(opcode, payload) {
+    if (opcode === 9) {
+      if (!this.chiusuraInviata) this.socket.write(creaFrame(10, payload));
+      return;
+    }
+    if (opcode === 10) return;
+    if (payload.byteLength === 1) {
+      this.erroreProtocollo(1002, "protocol_error");
+      return;
+    }
+    if (!this.chiusuraInviata) {
+      this.chiusuraInviata = true;
+      this.socket.write(creaFrame(8, payload), () => this.socket.end());
+    } else {
+      this.socket.end();
+    }
+  }
+  gestisciDati(opcode, fin, payload) {
+    if (opcode === 1 && this.frammentando) {
+      this.erroreProtocollo(1002, "protocol_error");
+      return;
+    }
+    if (opcode === 0 && !this.frammentando) {
+      this.erroreProtocollo(1002, "protocol_error");
+      return;
+    }
+    if (opcode === 1 && !fin) this.frammentando = true;
+    this.frammenti.push(payload);
+    this.byteFrammenti += payload.byteLength;
+    if (this.byteFrammenti > this.massimoMessaggio) {
+      this.erroreProtocollo(1009, "message_too_large");
+      return;
+    }
+    if (!fin) return;
+    const completo = this.frammenti.length === 1 ? this.frammenti[0] ?? Buffer.alloc(0) : Buffer.concat(this.frammenti, this.byteFrammenti);
+    this.frammenti = [];
+    this.byteFrammenti = 0;
+    this.frammentando = false;
+    const testo = testoUtf8(completo);
+    if (testo === null) {
+      this.erroreProtocollo(1007, "invalid_utf8");
+      return;
+    }
+    this.emit("message", testo);
+  }
+};
+function acceptNodeWebSocket(request, socket, head = Buffer.alloc(0)) {
+  const key = request.headers["sec-websocket-key"];
+  if (request.method !== "GET" || request.headers.upgrade?.toLowerCase() !== "websocket" || !contieneToken(request.headers.connection, "upgrade") || request.headers["sec-websocket-version"] !== "13" || !chiaveValida(key)) {
+    throw new TypeError("The WebSocket upgrade request is invalid.");
+  }
+  const accept = createHash("sha1").update(key + GUID_WEBSOCKET).digest("base64");
+  socket.write(
+    `HTTP/1.1 101 Switching Protocols\r
+Upgrade: websocket\r
+Connection: Upgrade\r
+Sec-WebSocket-Accept: ${accept}\r
+\r
+`
+  );
+  return new NodeWebSocket(socket, head);
+}
+function acceptNodeWebSocket2(request, socket, head = Buffer.alloc(0)) {
+  return acceptNodeWebSocket(request, socket, head);
+}
+function documentoValido(value) {
+  if (typeof value !== "object" || value === null || Array.isArray(value)) return false;
+  const dati = value;
+  return dati.version === 1 && typeof dati.values === "object" && dati.values !== null && !Array.isArray(dati.values);
+}
+var ArchivioNode = class _ArchivioNode {
+  constructor(file) {
+    this.file = file;
+    this.valori = /* @__PURE__ */ new Map();
+    this.scritture = Promise.resolve();
+  }
+  static async apri(file) {
+    const archivio = new _ArchivioNode(file);
+    if (file === null) return archivio;
+    let source;
+    try {
+      source = await readFile(file, "utf8");
+    } catch (cause) {
+      if (cause.code === "ENOENT") return archivio;
+      throw cause;
+    }
+    let parsed;
+    try {
+      parsed = JSON.parse(source);
+    } catch {
+      throw new Error(`The room storage file is not valid JSON: ${file}`);
+    }
+    if (!documentoValido(parsed)) throw new Error(`The room storage file is invalid: ${file}`);
+    for (const [key, value] of Object.entries(parsed.values)) {
+      archivio.valori.set(key, structuredClone(value));
+    }
+    return archivio;
+  }
+  async get(key) {
+    const value = this.valori.get(key);
+    return value === void 0 ? void 0 : structuredClone(value);
+  }
+  async put(key, value) {
+    this.valori.set(key, structuredClone(value));
+    await this.persisti();
+  }
+  async delete(key) {
+    this.valori.delete(key);
+    await this.persisti();
+  }
+  async list(prefix = "") {
+    return new Map([...this.valori].flatMap(
+      ([key, value]) => key.startsWith(prefix) ? [[key, structuredClone(value)]] : []
+    ));
+  }
+  persisti() {
+    if (this.file === null) return Promise.resolve();
+    const file = this.file;
+    const documento = {
+      version: 1,
+      values: Object.fromEntries([...this.valori].map(([key, value]) => [key, structuredClone(value)]))
+    };
+    const operazione = this.scritture.then(async () => {
+      await mkdir(dirname(file), { recursive: true });
+      const temporaneo = `${file}.${process.pid}.${randomUUID()}.tmp`;
+      try {
+        await writeFile(temporaneo, `${JSON.stringify(documento, null, 2)}
+`, "utf8");
+        await rename(temporaneo, file);
+      } finally {
+        await rm(temporaneo, { force: true });
+      }
+    });
+    this.scritture = operazione.catch(() => void 0);
+    return operazione;
+  }
+};
+var AdattatoreNode = class {
+  constructor(storage) {
+    this.storage = storage;
+    this.connessioni = /* @__PURE__ */ new Map();
+    this.tickTimer = null;
+    this.tickIntervallo = null;
+    this.tickGenerazione = 0;
+    this.svegliaTimer = null;
+    this.svegliaAt = null;
+    this.eseguiTick = async () => void 0;
+    this.eseguiSveglia = async () => void 0;
+  }
+  collega(input) {
+    this.eseguiTick = input.tick;
+    this.eseguiSveglia = input.sveglia;
+  }
+  aggiungi(id, socket) {
+    this.connessioni.set(id, socket);
+  }
+  rimuovi(id) {
+    this.connessioni.delete(id);
+  }
+  elencoConnessioni() {
+    return [...this.connessioni];
+  }
+  invia(connessione, messaggio) {
+    this.connessioni.get(connessione)?.send(JSON.stringify(messaggio));
+  }
+  chiudi(connessione, codice, motivo) {
+    this.connessioni.get(connessione)?.close(codice, motivo);
+  }
+  connessioniAttive() {
+    return [...this.connessioni.keys()];
+  }
+  ora() {
+    return Date.now();
+  }
+  misuraCpu() {
+    return performance.now();
+  }
+  programmaTick(intervalloMs) {
+    if (this.tickIntervallo === intervalloMs) return;
+    this.tickIntervallo = intervalloMs;
+    this.tickGenerazione += 1;
+    if (this.tickTimer !== null) clearTimeout(this.tickTimer);
+    this.tickTimer = null;
+    if (intervalloMs !== null) this.pianificaTick(this.tickGenerazione);
+  }
+  async programmaSveglia(ora) {
+    this.svegliaAt = ora;
+    if (this.svegliaTimer !== null) clearTimeout(this.svegliaTimer);
+    this.svegliaTimer = null;
+    if (ora !== null) this.pianificaSveglia();
+  }
+  fermaTimer() {
+    this.tickIntervallo = null;
+    this.svegliaAt = null;
+    this.tickGenerazione += 1;
+    if (this.tickTimer !== null) clearTimeout(this.tickTimer);
+    if (this.svegliaTimer !== null) clearTimeout(this.svegliaTimer);
+    this.tickTimer = null;
+    this.svegliaTimer = null;
+  }
+  pianificaTick(generazione) {
+    const intervallo = this.tickIntervallo;
+    if (intervallo === null) return;
+    this.tickTimer = setTimeout(() => {
+      this.tickTimer = null;
+      void this.eseguiTick().finally(() => {
+        if (this.tickGenerazione === generazione && this.tickIntervallo !== null) {
+          this.pianificaTick(generazione);
+        }
+      });
+    }, intervallo);
+    this.tickTimer.unref();
+  }
+  pianificaSveglia() {
+    const ora = this.svegliaAt;
+    if (ora === null) return;
+    const attesa = Math.min(Math.max(0, ora - Date.now()), 2147483647);
+    this.svegliaTimer = setTimeout(() => {
+      this.svegliaTimer = null;
+      if (this.svegliaAt !== null && this.svegliaAt > Date.now()) {
+        this.pianificaSveglia();
+        return;
+      }
+      void this.eseguiSveglia();
+    }, attesa);
+    this.svegliaTimer.unref();
+  }
+};
+var StanzaNode = class {
+  constructor(nucleo, adattatore, manifest) {
+    this.nucleo = nucleo;
+    this.adattatore = adattatore;
+    this.manifest = manifest;
+    this.coda = Promise.resolve();
+    this.voceRoster = /* @__PURE__ */ new Map();
+    this.voceFrequenza = /* @__PURE__ */ new Map();
+    this.voceUltimaRichiesta = /* @__PURE__ */ new Map();
+    this.frameFrequenza = /* @__PURE__ */ new Map();
+    this.connessioniGiocatori = /* @__PURE__ */ new Map();
+    this.giocatoriConnessioni = /* @__PURE__ */ new Map();
+    adattatore.collega({
+      tick: () => this.serializza(() => nucleo.eseguiTick()),
+      sveglia: () => this.serializza(() => nucleo.sveglia())
+    });
+  }
+  create(roomId, mode, creator) {
+    return this.serializza(() => this.nucleo.crea(roomId, mode, creator));
+  }
+  info() {
+    return this.serializza(() => Promise.resolve(this.nucleo.info()));
+  }
+  canJoin(identity) {
+    return this.serializza(() => Promise.resolve(this.nucleo.puoEntrare(identity)));
+  }
+  async connect(socket, identity) {
+    const connessione = randomUUID();
+    this.adattatore.aggiungi(connessione, socket);
+    this.connessioniGiocatori.set(connessione, identity.id);
+    socket.on("message", (message) => {
+      void this.serializza(() => this.ricevi(connessione, message));
+    });
+    socket.on("close", () => {
+      this.adattatore.rimuovi(connessione);
+      void this.serializza(async () => {
+        this.rimuoviConnessione(connessione);
+        await this.nucleo.disconnetti(connessione);
+      });
+    });
+    try {
+      return await this.serializza(async () => {
+        const precedente = this.giocatoriConnessioni.get(identity.id);
+        if (precedente !== void 0 && precedente !== connessione) this.rimuoviConnessione(precedente);
+        this.giocatoriConnessioni.set(identity.id, connessione);
+        const esito = await this.nucleo.entra(identity, connessione);
+        if (esito.ok) this.inviaRoster(connessione);
+        return esito;
+      });
+    } catch (cause) {
+      this.adattatore.rimuovi(connessione);
+      this.rimuoviConnessione(connessione);
+      socket.close(1011, "room_error");
+      throw cause;
+    }
+  }
+  flush() {
+    return this.serializza(() => this.nucleo.flush());
+  }
+  wake() {
+    return this.serializza(() => this.nucleo.sveglia());
+  }
+  async close() {
+    this.adattatore.fermaTimer();
+    for (const [connessione, socket] of this.adattatore.elencoConnessioni()) {
+      this.adattatore.rimuovi(connessione);
+      this.rimuoviConnessione(connessione);
+      socket.close(1001, "server_shutdown");
+      await this.serializza(() => this.nucleo.disconnetti(connessione));
+    }
+  }
+  serializza(operazione) {
+    const risultato = this.coda.then(operazione);
+    this.coda = risultato.then(() => void 0, () => void 0);
+    return risultato;
+  }
+  async ricevi(connessione, frame) {
+    const player = this.nucleo.giocatoreConnesso(connessione);
+    if (player === null) return;
+    const ora = Date.now();
+    const frames = (this.frameFrequenza.get(connessione) ?? []).filter((at) => ora - at < 1e3);
+    if (frames.length >= 20) {
+      this.adattatore.chiudi(connessione, 4008, "rate_limited");
+      this.rimuoviConnessione(connessione);
+      await this.nucleo.disconnetti(connessione);
+      return;
+    }
+    frames.push(ora);
+    this.frameFrequenza.set(connessione, frames);
+    let value;
+    try {
+      value = JSON.parse(frame);
+    } catch {
+      await this.nucleo.ricevi(connessione, frame);
+      return;
+    }
+    const message = typeof value === "object" && value !== null && !Array.isArray(value) ? value : null;
+    if (message?.t !== "voice") {
+      await this.nucleo.ricevi(connessione, frame);
+      this.riconciliaRoster();
+      return;
+    }
+    if (Buffer.byteLength(frame, "utf8") > 64 * 1024) {
+      this.adattatore.chiudi(connessione, 4009, "bad_message");
+      this.rimuoviConnessione(connessione);
+      await this.nucleo.disconnetti(connessione);
+      return;
+    }
+    await this.riceviVoce(connessione, player.id, player.role, message);
+  }
+  async riceviVoce(connessione, playerId, role, value) {
+    const richiesta = this.richiestaVoce(value);
+    if (richiesta === null) {
+      this.inviaErroreVoce(connessione, value, "invalid_request", "The voice request is invalid.");
+      return;
+    }
+    const ultima = this.voceUltimaRichiesta.get(connessione) ?? 0;
+    if (richiesta.r <= ultima) {
+      this.inviaErroreVoce(
+        connessione,
+        richiesta,
+        "invalid_request",
+        "Voice request numbers must increase."
+      );
+      return;
+    }
+    this.voceUltimaRichiesta.set(connessione, richiesta.r);
+    const ora = Date.now();
+    const recenti = (this.voceFrequenza.get(connessione) ?? []).filter((at) => ora - at < 1e4);
+    if (recenti.length >= 30) {
+      this.inviaErroreVoce(
+        connessione,
+        richiesta,
+        "rate_limited",
+        "Too many voice requests. Try again later."
+      );
+      return;
+    }
+    recenti.push(ora);
+    this.voceFrequenza.set(connessione, recenti);
+    const mode = this.modoVoce();
+    if (mode === "none") {
+      this.inviaErroreVoce(connessione, richiesta, "voice_disabled", "Voice is disabled for this room.");
+      return;
+    }
+    if (richiesta.op === "ice") {
+      this.adattatore.invia(connessione, {
+        t: "voice",
+        op: "ice",
+        r: richiesta.r,
+        transport: "mesh",
+        mode,
+        iceServers: []
+      });
+      return;
+    }
+    if (richiesta.op === "publish") {
+      if (role === "spectator") {
+        this.inviaErroreVoce(connessione, richiesta, "spectator", "Spectators cannot join voice.");
+        return;
+      }
+      this.voceRoster.set(playerId, {
+        id: playerId,
+        session: "mesh",
+        track: "mic",
+        muted: false,
+        connessione
+      });
+      this.adattatore.invia(connessione, { t: "voice", op: "publish", r: richiesta.r });
+      this.broadcastRoster();
+      return;
+    }
+    if (richiesta.op === "signal") {
+      const destinazione = this.giocatoriConnessioni.get(richiesta.to);
+      if (destinazione !== void 0) {
+        this.adattatore.invia(destinazione, {
+          t: "voice",
+          op: "signal",
+          from: playerId,
+          data: richiesta.data
+        });
+      }
+      this.adattatore.invia(connessione, { t: "voice", op: "signal", r: richiesta.r });
+      return;
+    }
+    if (richiesta.op === "mute") {
+      const peer = this.voceRoster.get(playerId);
+      if (peer === void 0 || peer.connessione !== connessione) {
+        this.inviaErroreVoce(
+          connessione,
+          richiesta,
+          "not_publishing",
+          "Join voice before changing mute."
+        );
+        return;
+      }
+      peer.muted = richiesta.muted;
+      this.adattatore.invia(connessione, { t: "voice", op: "mute", r: richiesta.r });
+      this.broadcastRoster();
+      return;
+    }
+    if (richiesta.op === "stop") {
+      const peer = this.voceRoster.get(playerId);
+      const rimossa = peer?.connessione === connessione && this.voceRoster.delete(playerId);
+      this.adattatore.invia(connessione, { t: "voice", op: "stop", r: richiesta.r });
+      if (rimossa) this.broadcastRoster();
+      return;
+    }
+    this.inviaErroreVoce(connessione, richiesta, "invalid_request", "The voice request is invalid.");
+  }
+  richiestaVoce(value) {
+    if (!Number.isSafeInteger(value.r) || value.r < 1 || typeof value.op !== "string") {
+      return null;
+    }
+    const base = { t: "voice", r: value.r };
+    if (value.op === "ice" || value.op === "publish" || value.op === "stop") {
+      return { ...base, op: value.op };
+    }
+    if (value.op === "mute" && typeof value.muted === "boolean") {
+      return { ...base, op: "mute", muted: value.muted };
+    }
+    if (value.op === "signal" && typeof value.to === "string" && Object.hasOwn(value, "data")) {
+      return { ...base, op: "signal", to: value.to, data: value.data };
+    }
+    if (["session", "subscribe", "answer", "close"].includes(value.op)) {
+      return value;
+    }
+    return null;
+  }
+  modoVoce() {
+    return this.manifest.voice ?? "none";
+  }
+  rosterPubblico() {
+    return [...this.voceRoster.values()].map(({ connessione: _connessione, ...peer }) => peer);
+  }
+  inviaRoster(connessione) {
+    this.adattatore.invia(connessione, {
+      t: "voice",
+      op: "roster",
+      mode: this.modoVoce(),
+      peers: this.rosterPubblico()
+    });
+  }
+  broadcastRoster() {
+    for (const connessione of this.adattatore.connessioniAttive()) this.inviaRoster(connessione);
+  }
+  riconciliaRoster() {
+    let cambiato = false;
+    for (const [playerId, peer] of this.voceRoster) {
+      const player = this.nucleo.giocatoreConnesso(peer.connessione);
+      if (player?.id === playerId && player.role !== "spectator") continue;
+      this.voceRoster.delete(playerId);
+      cambiato = true;
+    }
+    if (cambiato) this.broadcastRoster();
+  }
+  rimuoviConnessione(connessione) {
+    const playerId = this.connessioniGiocatori.get(connessione);
+    this.connessioniGiocatori.delete(connessione);
+    this.voceFrequenza.delete(connessione);
+    this.voceUltimaRichiesta.delete(connessione);
+    this.frameFrequenza.delete(connessione);
+    if (playerId === void 0) return;
+    if (this.giocatoriConnessioni.get(playerId) === connessione) {
+      this.giocatoriConnessioni.delete(playerId);
+    }
+    if (this.voceRoster.get(playerId)?.connessione === connessione) {
+      this.voceRoster.delete(playerId);
+      this.broadcastRoster();
+    }
+  }
+  inviaErroreVoce(connessione, richiesta, code, message) {
+    const op = typeof richiesta.op === "string" ? richiesta.op : "ice";
+    const r = Number.isSafeInteger(richiesta.r) && richiesta.r >= 1 ? richiesta.r : 1;
+    this.adattatore.invia(connessione, { t: "voice", op, r, error: { code, message } });
+  }
+};
+async function createNodeRoom(definition, manifest, options = {}) {
+  const storage = await ArchivioNode.apri(options.storageFile ?? null);
+  const adattatore = new AdattatoreNode(storage);
+  const nucleo = await NucleoStanza.apri(definition, manifest, adattatore);
+  return new StanzaNode(nucleo, adattatore, manifest);
+}
+
+// src/dev.ts
+var DURATA_BIGLIETTO = 120;
+var DURATA_INGRESSO = 60;
+var CHIAVE_SAVE = /^[a-z0-9][a-z0-9_-]{0,31}$/;
+var CHIAVE_BOARD = CHIAVE_SAVE;
+var FORMA_SESSIONE = /^[A-Za-z0-9_-]{8,128}$/;
+var FORMA_CODICE = /^[ABCDEFGHJKLMNPQRSTUVWXYZ23456789]{6}$/;
+var ALFABETO_CODICE = "ABCDEFGHJKLMNPQRSTUVWXYZ23456789";
+var MASSIMO_CORPO = 262144;
+var DevHttpError = class extends Error {
+  constructor(status, code, message, hints = []) {
+    super(message);
+    this.status = status;
+    this.code = code;
+    this.hints = hints;
+    this.name = "DevHttpError";
+  }
+  status;
+  code;
+  hints;
+};
+function object(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value) ? value : null;
+}
+function base64Url(value) {
+  return Buffer.from(value).toString("base64url");
+}
+function signJwt(payload, secret) {
+  const header = base64Url(JSON.stringify({ alg: "HS256", typ: "JWT" }));
+  const body = base64Url(JSON.stringify(payload));
+  const signed = `${header}.${body}`;
+  return `${signed}.${createHmac("sha256", secret).update(signed).digest("base64url")}`;
+}
+function verifyJwt(token, secret) {
+  const parts = token.split(".");
+  if (parts.length !== 3) return null;
+  const [header, body, signature] = parts;
+  if (header === void 0 || body === void 0 || signature === void 0) return null;
+  const expected = createHmac("sha256", secret).update(`${header}.${body}`).digest();
+  let actual;
+  try {
+    actual = Buffer.from(signature, "base64url");
+  } catch {
+    return null;
+  }
+  if (actual.byteLength !== expected.byteLength || !timingSafeEqual(actual, expected)) return null;
+  try {
+    const headerValue = object(JSON.parse(Buffer.from(header, "base64url").toString("utf8")));
+    const payload = object(JSON.parse(Buffer.from(body, "base64url").toString("utf8")));
+    if (headerValue?.alg !== "HS256" || headerValue.typ !== "JWT") return null;
+    return payload;
+  } catch {
+    return null;
+  }
+}
+function currentSeconds() {
+  return Math.floor(Date.now() / 1e3);
+}
+function serviceTicket(player, game, aud, secret) {
+  const iat = currentSeconds();
+  return signJwt({
+    sub: player.id,
+    game,
+    name: player.name,
+    guest: player.guest,
+    aud,
+    iat,
+    exp: iat + DURATA_BIGLIETTO
+  }, secret);
+}
+function joinTicket(player, room, secret) {
+  const iat = currentSeconds();
+  return signJwt({
+    sub: player.id,
+    name: player.name,
+    guest: player.guest,
+    room,
+    aud: "room",
+    iat,
+    exp: iat + DURATA_INGRESSO
+  }, secret);
+}
+function validTimes(payload, duration) {
+  const now = currentSeconds();
+  return typeof payload.iat === "number" && Number.isInteger(payload.iat) && typeof payload.exp === "number" && Number.isInteger(payload.exp) && payload.exp === payload.iat + duration && payload.iat <= now + 5 && payload.exp > now;
+}
+function readServiceTicket(request, game, aud, secret) {
+  const found = request.headers.authorization?.match(/^Bearer ([^\s]+)$/i);
+  const payload = found === null || found === void 0 ? null : verifyJwt(found[1] ?? "", secret);
+  if (payload === null || payload.aud !== aud || payload.game !== game || typeof payload.sub !== "string" || payload.sub === "" || typeof payload.name !== "string" || payload.name === "" || typeof payload.guest !== "boolean" || !validTimes(payload, DURATA_BIGLIETTO)) {
+    throw new DevHttpError(401, "invalid_ticket", "The game ticket is missing, expired, or invalid.", [
+      "Ask the portal for a fresh ticket and retry."
+    ]);
+  }
+  return payload;
+}
+function readJoinTicket(token, room, secret) {
+  const payload = verifyJwt(token, secret);
+  if (payload === null || payload.aud !== "room" || payload.room !== room || typeof payload.sub !== "string" || payload.sub === "" || typeof payload.name !== "string" || payload.name === "" || typeof payload.guest !== "boolean" || !validTimes(payload, DURATA_INGRESSO)) return null;
+  return payload;
+}
+function playerFromTicket(ticket) {
+  return { id: ticket.sub, name: ticket.name, guest: ticket.guest };
+}
+function utcDay(now = Date.now()) {
+  return new Date(now).toISOString().slice(0, 10);
+}
+function dailySeed(game, day) {
+  return createHash2("sha256").update(`caisual:${game}:${day}`).digest().readUInt32BE(0);
+}
+function randomUniform(alphabet, length) {
+  const limit = Math.floor(256 / alphabet.length) * alphabet.length;
+  let result = "";
+  while (result.length < length) {
+    for (const byte of randomBytes(Math.max(16, length - result.length))) {
+      if (byte >= limit) continue;
+      result += alphabet[byte % alphabet.length];
+      if (result.length === length) break;
+    }
+  }
+  return result;
+}
+function contentType(path) {
+  const types = {
+    ".avif": "image/avif",
+    ".css": "text/css; charset=utf-8",
+    ".gif": "image/gif",
+    ".glb": "model/gltf-binary",
+    ".gltf": "model/gltf+json",
+    ".html": "text/html; charset=utf-8",
+    ".ico": "image/x-icon",
+    ".jpeg": "image/jpeg",
+    ".jpg": "image/jpeg",
+    ".js": "text/javascript; charset=utf-8",
+    ".json": "application/json; charset=utf-8",
+    ".mjs": "text/javascript; charset=utf-8",
+    ".mp3": "audio/mpeg",
+    ".mp4": "video/mp4",
+    ".ogg": "audio/ogg",
+    ".opus": "audio/ogg",
+    ".png": "image/png",
+    ".svg": "image/svg+xml",
+    ".ttf": "font/ttf",
+    ".txt": "text/plain; charset=utf-8",
+    ".wasm": "application/wasm",
+    ".wav": "audio/wav",
+    ".webm": "video/webm",
+    ".webp": "image/webp",
+    ".woff": "font/woff",
+    ".woff2": "font/woff2"
+  };
+  return types[extname(path).toLowerCase()] ?? "application/octet-stream";
+}
+function injectAppMeta(html, portalOrigin2) {
+  const meta = `<meta name="caisual-app" content="${portalOrigin2}">`;
+  const head = /<head(?:\s[^>]*)?>/i;
+  if (head.test(html)) return html.replace(head, (tag) => `${tag}
+  ${meta}`);
+  return `${meta}
+${html}`;
+}
+function sendJson(response, value, status = 200, origin = null) {
+  const body = JSON.stringify(value);
+  response.statusCode = status;
+  response.setHeader("Content-Type", "application/json; charset=utf-8");
+  response.setHeader("Content-Length", Buffer.byteLength(body));
+  response.setHeader("Cache-Control", "private, no-store");
+  response.setHeader("X-Content-Type-Options", "nosniff");
+  if (origin !== null) {
+    response.setHeader("Access-Control-Allow-Origin", origin);
+    response.setHeader("Access-Control-Expose-Headers", "Retry-After");
+    response.setHeader("Vary", "Origin");
+  }
+  response.end(body);
+}
+function sendError(response, error, origin = null) {
+  const known = error instanceof DevHttpError ? error : new DevHttpError(500, "internal_error", "The local game service failed.");
+  if (known.code === "rate_limited") response.setHeader("Retry-After", "10");
+  sendJson(response, { error: {
+    code: known.code,
+    message: known.message,
+    hints: known.hints
+  } }, known.status, origin);
+}
+function sendPreflight(response, origin) {
+  response.statusCode = 204;
+  response.setHeader("Cache-Control", "private, no-store");
+  response.setHeader("Access-Control-Allow-Origin", origin);
+  response.setHeader("Access-Control-Allow-Methods", "GET, PUT, POST, DELETE, OPTIONS");
+  response.setHeader("Access-Control-Allow-Headers", "Authorization, Content-Type");
+  response.setHeader("Access-Control-Max-Age", "86400");
+  response.setHeader("Access-Control-Expose-Headers", "Retry-After");
+  response.setHeader("Vary", "Origin");
+  response.end();
+}
+async function readBody(request, maximum = MASSIMO_CORPO) {
+  const declared = request.headers["content-length"];
+  if (declared !== void 0 && /^\d+$/.test(declared) && Number(declared) > maximum) {
+    throw new DevHttpError(413, "payload_too_large", `The request body cannot exceed ${maximum} bytes.`);
+  }
+  const chunks = [];
+  let bytes = 0;
+  for await (const chunk of request) {
+    const buffer = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
+    bytes += buffer.byteLength;
+    if (bytes > maximum) {
+      throw new DevHttpError(413, "payload_too_large", `The request body cannot exceed ${maximum} bytes.`);
+    }
+    chunks.push(buffer);
+  }
+  try {
+    return JSON.parse(Buffer.concat(chunks).toString("utf8"));
+  } catch {
+    throw new DevHttpError(400, "invalid_request", "The request body must be valid JSON.");
+  }
+}
+function parentPage(input) {
+  return `<!doctype html>
+<html lang="en">
+<head>
+  <meta charset="utf-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1">
+  <title>Local preview: ${input.slug}</title>
+  <style>
+    html, body, iframe { width: 100%; height: 100%; margin: 0; border: 0; }
+    body { background: #111; }
+  </style>
+</head>
+<body>
+  <iframe id="game" title="${input.slug}" src="${input.gameOrigin}/" allow="${input.allow}"></iframe>
+  <script type="module">
+    const gameOrigin = ${JSON.stringify(input.gameOrigin)};
+    const portalOrigin = ${JSON.stringify(input.portalOrigin)};
+    const frame = document.getElementById('game');
+    const storageKey = 'caisual:dev:player';
+    let sessionId = sessionStorage.getItem(storageKey);
+    if (!sessionId) {
+      sessionId = crypto.randomUUID();
+      sessionStorage.setItem(storageKey, sessionId);
+    }
+    const getSession = async () => {
+      const response = await fetch('/__caisual/session?id=' + encodeURIComponent(sessionId));
+      if (!response.ok) throw new Error('Local player session is unavailable.');
+      return response.json();
+    };
+    let session = await getSession();
+    const rawInvite = new URL(location.href).searchParams.get('invite');
+    const normalizedInvite = rawInvite?.toUpperCase().replace(/[\\s-]/g, '') ?? null;
+    const invite = normalizedInvite && /^[ABCDEFGHJKLMNPQRSTUVWXYZ23456789]{6}$/.test(normalizedInvite)
+      ? normalizedInvite
+      : null;
+    let ready = false;
+    let timer = null;
+    const askReady = () => {
+      if (!ready) frame.contentWindow?.postMessage({ type: 'caisual:ready?' }, gameOrigin);
+    };
+    const listen = (event) => {
+      if (event.source !== frame.contentWindow || event.origin !== gameOrigin) return;
+      if (event.data?.type !== 'caisual:ready' || ready) return;
+      ready = true;
+      if (timer !== null) clearInterval(timer);
+      const channel = new MessageChannel();
+      channel.port1.onmessage = async (message) => {
+        if (message.data?.type !== 'caisual:ticket') return;
+        const aud = message.data.aud === 'live' ? 'live' : 'portal';
+        session = await getSession();
+        channel.port1.postMessage({ type: 'caisual:ticket', aud, ticket: session[aud] });
+      };
+      channel.port1.start();
+      frame.contentWindow?.postMessage({
+        type: 'caisual:hello',
+        ticket: session.portal,
+        live: portalOrigin,
+        invite,
+      }, gameOrigin, [channel.port2]);
+    };
+    addEventListener('message', listen);
+    timer = setInterval(askReady, 500);
+    setTimeout(() => { if (timer !== null) clearInterval(timer); }, 10_000);
+    askReady();
+  </script>
+</body>
+</html>
+`;
+}
+async function readGame(root) {
+  const manifestPath = join(root, "caisual.json");
+  let parsed;
+  try {
+    parsed = JSON.parse(await fs.readFile(manifestPath, "utf8"));
+  } catch {
+    throw new Error("caisual.json: file not found, unreadable, or invalid JSON.");
+  }
+  const result = validaManifest(parsed);
+  if (!result.ok) {
+    throw new Error(`caisual.json is not valid:
+${result.errori.map((error) => `- ${error}`).join("\n")}`);
+  }
+  const clientRoot = await fs.realpath(join(root, "client")).catch(() => null);
+  if (clientRoot === null) throw new Error("client/: folder not found.");
+  const stat = await fs.stat(clientRoot);
+  if (!stat.isDirectory()) throw new Error("client/: must be a folder.");
+  const index = await fs.stat(join(clientRoot, "index.html")).catch(() => null);
+  if (index === null || !index.isFile()) throw new Error("client/index.html: file not found.");
+  return { manifest: result.manifest, clientRoot };
+}
+async function loadDefinition(root) {
+  const path = join(root, "server.js");
+  let source;
+  try {
+    source = await fs.readFile(path, "utf8");
+  } catch (cause) {
+    if (cause.code === "ENOENT") return null;
+    throw new Error("server.js: file not readable.");
+  }
+  const result = validaServerJs(source);
+  if (!result.ok) {
+    throw new Error(`server.js is not valid:
+${result.errori.map((error) => `- ${error}`).join("\n")}`);
+  }
+  const kitUrl = `data:text/javascript;base64,${Buffer.from('// src/server/index.ts\nvar GAME_DEFINITION = /* @__PURE__ */ Symbol.for("@caisual/kit/game-definition");\nvar CALLBACKS = [\n  "onCreate",\n  "onStart",\n  "onJoin",\n  "onLeave",\n  "onMessage",\n  "onTick",\n  "onEnd"\n];\nfunction isRecord(value) {\n  return typeof value === "object" && value !== null && !Array.isArray(value);\n}\nfunction defineGame(definition) {\n  if (!isRecord(definition)) {\n    throw new TypeError("Game definition must be an object.");\n  }\n  if (typeof definition.tickRate !== "number" || !Number.isInteger(definition.tickRate) || definition.tickRate < 0 || definition.tickRate > 60) {\n    throw new TypeError("Game definition tickRate must be an integer from 0 to 60.");\n  }\n  for (const callback of CALLBACKS) {\n    const value = definition[callback];\n    if (value !== void 0 && typeof value !== "function") {\n      throw new TypeError(`Game definition ${callback} must be a function.`);\n    }\n  }\n  Object.defineProperty(definition, GAME_DEFINITION, {\n    configurable: false,\n    enumerable: false,\n    value: true,\n    writable: false\n  });\n  return definition;\n}\nexport {\n  defineGame\n};\n').toString("base64")}`;
+  const rewritten = source.replace(
+    /(\bfrom\s*)(['"])@caisual\/kit\/server\2/g,
+    (_match, prefix) => `${prefix}${JSON.stringify(kitUrl)}`
+  );
+  const sourceUrl = `data:text/javascript;base64,${Buffer.from(rewritten).toString("base64")}`;
+  const loaded = await import(sourceUrl);
+  if (loaded.default === void 0) throw new Error("server.js must have an export default.");
+  return loaded.default;
+}
+var DevService = class {
+  constructor(root, clientRoot, manifest, definition, port) {
+    this.root = root;
+    this.clientRoot = clientRoot;
+    this.manifest = manifest;
+    this.definition = definition;
+    this.port = port;
+  }
+  root;
+  clientRoot;
+  manifest;
+  definition;
+  port;
+  secret = randomBytes(32);
+  playersBySession = /* @__PURE__ */ new Map();
+  playersById = /* @__PURE__ */ new Map();
+  saves = /* @__PURE__ */ new Map();
+  scores = /* @__PURE__ */ new Map();
+  rooms = /* @__PURE__ */ new Map();
+  roomByCode = /* @__PURE__ */ new Map();
+  kitRequests = /* @__PURE__ */ new Map();
+  liveRequests = /* @__PURE__ */ new Map();
+  playerNumber = 0;
+  get portalOrigin() {
+    return `http://localhost:${this.port}`;
+  }
+  get gameOrigin() {
+    return `http://${this.manifest.id}.localhost:${this.port}`;
+  }
+  async handle(request, response) {
+    const url = new URL(request.url ?? "/", this.portalOrigin);
+    const hostname = (request.headers.host ?? "").split(":")[0]?.toLowerCase();
+    if (hostname === `${this.manifest.id}.localhost`) {
+      await this.handleGame(request, response, url);
+      return;
+    }
+    if (hostname === "localhost" || hostname === "127.0.0.1" || hostname === "::1") {
+      await this.handlePortal(request, response, url);
+      return;
+    }
+    sendError(response, new DevHttpError(404, "not_found", "The local game page was not found."));
+  }
+  async handleUpgrade(request, socket, head) {
+    const url = new URL(request.url ?? "/", this.portalOrigin);
+    const match = /^\/rooms\/(g1-1\.[a-z0-9]{16})$/.exec(url.pathname);
+    if (match === null || match[1] === void 0) {
+      this.rejectUpgrade(socket, 404, "room_not_found", "The room was not found.");
+      return;
+    }
+    const localRoom = this.rooms.get(match[1]);
+    if (localRoom === void 0) {
+      this.rejectUpgrade(socket, 404, "room_not_found", "The room was not found.");
+      return;
+    }
+    const token = url.searchParams.get("j");
+    const joined = token === null ? null : readJoinTicket(token, match[1], this.secret);
+    const origin = request.headers.origin;
+    const nodeClient = origin === void 0 && request.headers["user-agent"] === "node";
+    if (joined === null || origin !== this.gameOrigin && !nodeClient) {
+      this.rejectUpgrade(socket, 401, "unauthorized", "The room connection is not authorized.");
+      return;
+    }
+    const identity = playerFromTicket(joined);
+    const permission = await localRoom.room.canJoin(identity);
+    if (!permission.ok) {
+      const status = permission.code === "room_not_found" ? 404 : 409;
+      this.rejectUpgrade(socket, status, permission.code, this.roomErrorMessage(permission.code));
+      return;
+    }
+    try {
+      const websocket = acceptNodeWebSocket2(request, socket, head);
+      await localRoom.room.connect(websocket, identity);
+    } catch {
+      if (!socket.destroyed) this.rejectUpgrade(socket, 400, "invalid_request", "The WebSocket request is invalid.");
+    }
+  }
+  async close() {
+    await Promise.all([...this.rooms.values()].map((entry) => entry.room.close()));
+  }
+  async handleGame(request, response, url) {
+    if (request.method !== "GET" && request.method !== "HEAD") {
+      sendError(response, new DevHttpError(404, "not_found", "The game file was not found."));
+      return;
+    }
+    if (url.pathname === "/__caisual/kit/v1.js") {
+      response.statusCode = 200;
+      response.setHeader("Content-Type", "text/javascript; charset=utf-8");
+      response.setHeader("Cache-Control", "no-store");
+      response.setHeader("X-Content-Type-Options", "nosniff");
+      response.end(request.method === "HEAD" ? void 0 : '// Caisual game kit v0.3.0\n\n// src/errors.ts\nfunction creaErrore(code, message) {\n  return Object.assign(new Error(message), { name: "CaisualError", code });\n}\nfunction erroreOffline() {\n  return creaErrore("offline", "Caisual services are unavailable.");\n}\nfunction codiceErrore(valore) {\n  return typeof valore === "object" && valore !== null && "code" in valore ? valore.code : null;\n}\n\n// src/http.ts\nasync function leggiErrore(response) {\n  let corpo = {};\n  try {\n    corpo = await response.json();\n  } catch {\n  }\n  return creaErrore(\n    typeof corpo.error?.code === "string" ? corpo.error.code : response.status === 401 ? "invalid_ticket" : "internal_error",\n    typeof corpo.error?.message === "string" ? corpo.error.message : `The request failed with status ${response.status}.`\n  );\n}\nfunction creaRichiedente(origin, prefix, fetcher, biglietto) {\n  async function manda(path, metodo, ticket, corpo) {\n    const headers = new Headers({ Authorization: `Bearer ${ticket}` });\n    let body;\n    if (corpo !== void 0) {\n      headers.set("Content-Type", "application/json");\n      try {\n        body = JSON.stringify(corpo);\n      } catch {\n        throw creaErrore("invalid_request", "The value must be valid JSON.");\n      }\n    }\n    try {\n      return await fetcher(new URL(prefix + path, origin), {\n        method: metodo,\n        headers,\n        body,\n        credentials: "omit"\n      });\n    } catch {\n      throw erroreOffline();\n    }\n  }\n  return async function richiesta(path, metodo, corpo, forzaRinnovo = false) {\n    let ticket;\n    try {\n      ticket = forzaRinnovo ? await biglietto.rinnova() : await biglietto.ottieni();\n    } catch {\n      throw erroreOffline();\n    }\n    let response = await manda(path, metodo, ticket, corpo);\n    if (response.status === 401) {\n      try {\n        ticket = await biglietto.rinnova();\n      } catch {\n        throw erroreOffline();\n      }\n      response = await manda(path, metodo, ticket, corpo);\n    }\n    if (!response.ok) throw await leggiErrore(response);\n    try {\n      return await response.json();\n    } catch {\n      throw creaErrore("internal_error", "The service returned an invalid response.");\n    }\n  };\n}\n\n// src/api.ts\nfunction creaClienteApi(appOrigin, fetcher, biglietto) {\n  const richiesta = creaRichiedente(appOrigin, "/api/kit", fetcher, biglietto);\n  return {\n    me: () => richiesta("/me", "GET"),\n    saveSet: (key, value) => richiesta(`/saves/${encodeURIComponent(key)}`, "PUT", { value }),\n    async saveGet(key) {\n      try {\n        return (await richiesta(`/saves/${encodeURIComponent(key)}`, "GET")).value;\n      } catch (errore) {\n        if (codiceErrore(errore) === "not_found") return null;\n        throw errore;\n      }\n    },\n    async saveRemove(key) {\n      await richiesta(`/saves/${encodeURIComponent(key)}`, "DELETE");\n    },\n    async saveList() {\n      return (await richiesta("/saves", "GET")).saves;\n    },\n    async boardSubmit(board, score, daily) {\n      const risultato = await richiesta("/scores", "POST", { board, score, daily });\n      return { accepted: true, best: risultato.best, rank: risultato.rank, day: risultato.day };\n    },\n    async boardTop(board, opzioni) {\n      const query = new URLSearchParams();\n      if (opzioni.daily) query.set("daily", "1");\n      if (opzioni.limit !== void 0) query.set("limit", String(opzioni.limit));\n      if (opzioni.guests) query.set("guests", "1");\n      const suffisso = query.size === 0 ? "" : `?${query.toString()}`;\n      const { day, entries, me } = await richiesta(\n        `/scores/${encodeURIComponent(board)}${suffisso}`,\n        "GET"\n      );\n      return { day, entries, me };\n    }\n  };\n}\n\n// src/daily.ts\nvar DIVISORE_UINT32 = 4294967296;\nfunction giornoUtc(ora) {\n  return new Date(ora).toISOString().slice(0, 10);\n}\nasync function calcolaSeed(gioco, giorno, subtle) {\n  const dati = new TextEncoder().encode(`caisual:${gioco}:${giorno}`);\n  const digest = new Uint8Array(await subtle.digest("SHA-256", dati));\n  return (digest[0] ?? 0) * 16777216 + ((digest[1] ?? 0) << 16) + ((digest[2] ?? 0) << 8) + (digest[3] ?? 0) >>> 0;\n}\nfunction creaMulberry32(seed) {\n  let stato = seed >>> 0;\n  return () => {\n    stato = stato + 1831565813 >>> 0;\n    let valore = stato;\n    valore = Math.imul(valore ^ valore >>> 15, valore | 1);\n    valore ^= valore + Math.imul(valore ^ valore >>> 7, valore | 61);\n    return ((valore ^ valore >>> 14) >>> 0) / DIVISORE_UINT32;\n  };\n}\n\n// src/handshake.ts\nfunction record(valore) {\n  return typeof valore === "object" && valore !== null && !Array.isArray(valore) ? valore : null;\n}\nfunction eTipo(valore, tipo) {\n  return record(valore)?.type === tipo;\n}\nfunction leggiOrigine(valore) {\n  if (typeof valore !== "string") return null;\n  try {\n    const url = new URL(valore);\n    return url.origin === valore && (url.protocol === "https:" || url.protocol === "http:") ? valore : null;\n  } catch {\n    return null;\n  }\n}\nfunction attendiHandshake(finestra, appOrigin, timeoutMs = 3e3) {\n  return new Promise((resolve) => {\n    let concluso = false;\n    const termina = (esito) => {\n      if (concluso) return;\n      concluso = true;\n      finestra.removeEventListener("message", ascolta);\n      finestra.clearTimeout(scadenza);\n      resolve(esito);\n    };\n    const segnalaPronto = () => {\n      finestra.parent.postMessage({ type: "caisual:ready" }, appOrigin);\n    };\n    const ascolta = (evento) => {\n      if (evento.origin !== appOrigin || evento.source !== finestra.parent) return;\n      if (eTipo(evento.data, "caisual:ready?")) {\n        segnalaPronto();\n        return;\n      }\n      if (!eTipo(evento.data, "caisual:hello")) return;\n      const dati = record(evento.data);\n      const porta = evento.ports[0];\n      if (typeof dati?.ticket !== "string" || porta === void 0) return;\n      porta.start();\n      termina({\n        ticket: dati.ticket,\n        live: leggiOrigine(dati.live),\n        invite: typeof dati.invite === "string" ? dati.invite : null,\n        porta\n      });\n    };\n    finestra.addEventListener("message", ascolta);\n    const scadenza = finestra.setTimeout(() => termina(null), timeoutMs);\n    segnalaPronto();\n  });\n}\nfunction scadenzaJwt(ticket) {\n  const parte = ticket.split(".")[1];\n  if (parte === void 0) return null;\n  const base64 = parte.replace(/-/g, "+").replace(/_/g, "/").padEnd(\n    Math.ceil(parte.length / 4) * 4,\n    "="\n  );\n  try {\n    const payload = record(JSON.parse(globalThis.atob(base64)));\n    return typeof payload?.exp === "number" && Number.isFinite(payload.exp) ? payload.exp * 1e3 : null;\n  } catch {\n    return null;\n  }\n}\nfunction chiediBiglietto(porta, finestra, timeoutMs, aud) {\n  return new Promise((resolve, reject) => {\n    let concluso = false;\n    const termina = (ticket) => {\n      if (concluso) return;\n      concluso = true;\n      porta.removeEventListener("message", ascolta);\n      finestra.clearTimeout(scadenza);\n      if (ticket === null) reject(new Error("Ticket refresh timed out."));\n      else resolve(ticket);\n    };\n    const ascolta = (evento) => {\n      const dati = record(evento.data);\n      const destinatario = dati?.aud === void 0 ? "portal" : dati.aud;\n      if (dati?.type === "caisual:ticket" && destinatario === aud && typeof dati.ticket === "string") {\n        termina(dati.ticket);\n      }\n    };\n    porta.addEventListener("message", ascolta);\n    const scadenza = finestra.setTimeout(() => termina(null), timeoutMs);\n    try {\n      porta.postMessage(aud === "live" ? { type: "caisual:ticket", aud: "live" } : { type: "caisual:ticket" });\n    } catch {\n      termina(null);\n    }\n  });\n}\nfunction creaGestoreBiglietto(ticketIniziale, porta, finestra, ora, timeoutMs = 3e3, aud = "portal") {\n  let ticket = ticketIniziale;\n  let rinnovo = null;\n  const rinnova = () => {\n    if (rinnovo !== null) return rinnovo;\n    const richiesta = chiediBiglietto(porta, finestra, timeoutMs, aud).then((nuovo) => {\n      ticket = nuovo;\n      return nuovo;\n    });\n    const completa = richiesta.finally(() => {\n      if (rinnovo === completa) rinnovo = null;\n    });\n    rinnovo = completa;\n    return completa;\n  };\n  return {\n    async ottieni() {\n      if (ticket === null) return rinnova();\n      const scadenza = scadenzaJwt(ticket);\n      return scadenza !== null && scadenza - ora() < 3e4 ? rinnova() : ticket;\n    },\n    rinnova\n  };\n}\n\n// src/voce/index.ts\nvar SOGLIA_AUDIO = 0.02;\nvar DURATA_PARLANTE = 300;\nvar INTERVALLO_AUDIO = 200;\nvar DURATA_ZERO = 3e3;\nvar TIMEOUT_CONNESSIONE = 1e4;\nvar RITARDI_RICONNESSIONE = [1e3, 2e3, 4e3];\nfunction limita(value) {\n  return Number.isNaN(value) ? 1 : Math.min(1, Math.max(0, value));\n}\nfunction dipendenzeReali(input) {\n  const globali = globalThis;\n  const AudioContextClass = globali.AudioContext ?? globali.webkitAudioContext;\n  if (typeof RTCPeerConnection === "undefined" || typeof MediaStream === "undefined" || AudioContextClass === void 0 || typeof navigator === "undefined" || navigator.mediaDevices?.getUserMedia === void 0 || typeof document === "undefined") return null;\n  return {\n    ...input,\n    creaPeerConnection: (configuration) => new RTCPeerConnection(configuration),\n    getUserMedia: (constraints) => navigator.mediaDevices.getUserMedia(constraints),\n    creaAudioContext: () => new AudioContextClass(),\n    creaAudioElement: () => document.createElement("audio"),\n    creaMediaStream: (tracks) => new MediaStream(tracks)\n  };\n}\nvar VoceClient = class {\n  constructor(contesto, timer, dipendenze) {\n    this.contesto = contesto;\n    this.modeCorrente = "none";\n    this.stateCorrente = "off";\n    this.mutedCorrente = false;\n    this.speakingCorrente = false;\n    this.roster = [];\n    this.gains = /* @__PURE__ */ new Map();\n    this.volumi = /* @__PURE__ */ new Map();\n    this.speakingPeers = /* @__PURE__ */ new Map();\n    this.ultimoAudio = /* @__PURE__ */ new Map();\n    this.zeroDa = /* @__PURE__ */ new Map();\n    this.timerZero = /* @__PURE__ */ new Map();\n    this.ascoltatoriPeers = /* @__PURE__ */ new Set();\n    this.ascoltatoriState = /* @__PURE__ */ new Set();\n    this.richieste = /* @__PURE__ */ new Map();\n    this.riproduzioni = /* @__PURE__ */ new Map();\n    this.sfuAttive = /* @__PURE__ */ new Map();\n    this.midGiocatori = /* @__PURE__ */ new Map();\n    this.mesh = /* @__PURE__ */ new Map();\n    this.stream = null;\n    this.mic = null;\n    this.audioContext = null;\n    this.analyser = null;\n    this.peerSfu = null;\n    this.sessioneSfu = null;\n    this.trasporto = null;\n    this.intervalloAudio = null;\n    this.timerConnessione = null;\n    this.cancellaAttesaConnessione = null;\n    this.timerRiconnessione = null;\n    this.ultimoAudioMic = Number.NEGATIVE_INFINITY;\n    this.sequenzaRichieste = 0;\n    this.generazione = 0;\n    this.tentativoRiconnessione = 0;\n    this.desiderata = false;\n    this.promessaIngresso = null;\n    this.negoziazione = Promise.resolve();\n    this.dipendenze = dipendenze ?? dipendenzeReali(timer);\n  }\n  get mode() {\n    return this.modeCorrente;\n  }\n  get state() {\n    return this.stateCorrente;\n  }\n  get muted() {\n    return this.mutedCorrente;\n  }\n  get speaking() {\n    return this.speakingCorrente;\n  }\n  get peers() {\n    return this.copiaPeers();\n  }\n  async join() {\n    if (this.stateCorrente === "on") return;\n    if (this.stateCorrente === "joining") {\n      if (this.promessaIngresso !== null) await this.promessaIngresso;\n      return;\n    }\n    if (this.stateCorrente === "reconnecting" && this.desiderata) return;\n    this.verificaIngresso();\n    this.desiderata = true;\n    this.tentativoRiconnessione = 0;\n    this.aggiornaState("joining");\n    const generazione = ++this.generazione;\n    const promessa = this.completaIngresso(generazione);\n    this.promessaIngresso = promessa;\n    try {\n      await promessa;\n    } finally {\n      if (this.promessaIngresso === promessa) this.promessaIngresso = null;\n    }\n  }\n  async completaIngresso(generazione) {\n    try {\n      await this.entra(generazione);\n    } catch (cause) {\n      if (generazione !== this.generazione) return;\n      this.desiderata = false;\n      this.chiudiRisorse();\n      this.aggiornaState("off");\n      throw this.mappaErrore(cause);\n    }\n  }\n  leave() {\n    const deveFermare = this.desiderata || this.stateCorrente !== "off";\n    this.desiderata = false;\n    this.generazione++;\n    this.fermaRiconnessione();\n    if (deveFermare && this.contesto.connessa()) {\n      void this.richiedi({ t: "voice", op: "stop" }).catch(() => void 0);\n    }\n    this.rifiutaRichieste(creaErrore("offline", "Voice has stopped."));\n    this.chiudiRisorse();\n    this.aggiornaState("off");\n  }\n  mute(muted = true) {\n    if (this.stateCorrente !== "on" || this.mic === null) {\n      throw creaErrore("not_publishing", "Join voice before changing mute.");\n    }\n    this.mutedCorrente = muted;\n    this.mic.enabled = !muted;\n    void this.richiedi({ t: "voice", op: "mute", muted }).catch(() => void 0);\n  }\n  setVolume(playerId, volume) {\n    const valore = limita(volume);\n    this.volumi.set(playerId, valore);\n    this.aggiornaGuadagno(playerId);\n    this.notificaPeers();\n  }\n  onPeers(listener) {\n    this.ascoltatoriPeers.add(listener);\n    return () => {\n      this.ascoltatoriPeers.delete(listener);\n    };\n  }\n  onState(listener) {\n    this.ascoltatoriState.add(listener);\n    return () => {\n      this.ascoltatoriState.delete(listener);\n    };\n  }\n  ricevi(message) {\n    if ("r" in message) {\n      const pending = this.richieste.get(message.r);\n      if (pending !== void 0) {\n        this.richieste.delete(message.r);\n        if ("error" in message) {\n          pending.reject(creaErrore(message.error.code, message.error.message));\n        } else pending.resolve(message);\n      }\n      return;\n    }\n    if (message.op === "roster") {\n      this.modeCorrente = message.mode;\n      this.roster = message.peers.map((peer) => ({ ...peer }));\n      for (const peer of this.roster) {\n        if (peer.muted) this.speakingPeers.set(peer.id, false);\n      }\n      this.pulisciPeerAssenti();\n      this.contesto.rosterPronto();\n      this.notificaPeers();\n      this.accodaRiconciliazione();\n      return;\n    }\n    if (message.op === "gain") {\n      for (const [playerId, gain] of Object.entries(message.gains)) {\n        this.gains.set(playerId, limita(gain));\n        this.aggiornaZero(playerId);\n        this.aggiornaGuadagno(playerId);\n      }\n      this.notificaPeers();\n      this.accodaRiconciliazione();\n      return;\n    }\n    if (message.op === "signal") void this.riceviSegnale(message.from, message.data);\n  }\n  giocatoriCambiati() {\n    const presenti = new Set(this.contesto.giocatori().map((player) => player.id));\n    for (const playerId of this.gains.keys()) {\n      if (presenti.has(playerId)) continue;\n      this.gains.delete(playerId);\n      this.zeroDa.delete(playerId);\n      const timer = this.timerZero.get(playerId);\n      if (timer !== void 0) this.dipendenze?.clearTimeout(timer);\n      this.timerZero.delete(playerId);\n      this.aggiornaGuadagno(playerId);\n    }\n    this.notificaPeers();\n    this.accodaRiconciliazione();\n  }\n  socketDisconnesso() {\n    this.sequenzaRichieste = 0;\n    this.rifiutaRichieste(creaErrore("offline", "The room is reconnecting."));\n    if (!this.desiderata) return;\n    this.generazione++;\n    this.chiudiRisorse();\n    this.tentativoRiconnessione = 0;\n    this.aggiornaState("reconnecting");\n  }\n  socketRiconnesso() {\n    this.sequenzaRichieste = 0;\n    if (this.desiderata && this.stateCorrente === "reconnecting") this.programmaRiconnessione();\n  }\n  termina() {\n    this.desiderata = false;\n    this.generazione++;\n    this.fermaRiconnessione();\n    this.rifiutaRichieste(creaErrore("offline", "The room connection ended."));\n    this.chiudiRisorse();\n    this.aggiornaState("off");\n  }\n  verificaIngresso() {\n    if (!this.contesto.connessa()) throw creaErrore("offline", "The room is not connected.");\n    if (this.modeCorrente === "none") {\n      throw creaErrore("voice_disabled", "Voice is disabled for this room.");\n    }\n    const you = this.contesto.giocatori().find((player) => player.id === this.contesto.you());\n    if (you?.role === "spectator") {\n      throw creaErrore("spectator", "Spectators cannot join voice.");\n    }\n    if (this.dipendenze === null) {\n      throw creaErrore("unsupported", "Voice is not supported in this browser.");\n    }\n  }\n  async entra(generazione) {\n    this.verificaIngresso();\n    const dipendenze = this.richiediDipendenze();\n    const audioContext = dipendenze.creaAudioContext();\n    this.audioContext = audioContext;\n    try {\n      await audioContext.resume();\n    } catch {\n    }\n    let stream;\n    try {\n      stream = await dipendenze.getUserMedia({ audio: true });\n    } catch (cause) {\n      if (this.permessoNegato(cause)) {\n        throw creaErrore("permission_denied", "Microphone permission was denied.");\n      }\n      throw creaErrore("voice_error", "The microphone could not be opened.");\n    }\n    try {\n      this.controllaGenerazione(generazione);\n    } catch (cause) {\n      for (const track of stream.getTracks()) track.stop();\n      throw cause;\n    }\n    const mic = stream.getAudioTracks()[0];\n    if (mic === void 0) throw creaErrore("voice_error", "The microphone has no audio track.");\n    this.stream = stream;\n    this.mic = mic;\n    mic.enabled = !this.mutedCorrente;\n    this.preparaAnalizzatore(stream);\n    const risposta = await this.richiedi({ t: "voice", op: "ice" });\n    this.controllaGenerazione(generazione);\n    if (risposta.op !== "ice") throw creaErrore("voice_error", "The voice service returned an invalid response.");\n    this.modeCorrente = risposta.mode;\n    if (risposta.mode === "none") throw creaErrore("voice_disabled", "Voice is disabled for this room.");\n    this.trasporto = risposta.transport;\n    if (risposta.transport === "sfu") {\n      await this.entraSfu(risposta.iceServers, generazione);\n    } else {\n      await this.richiedi({ t: "voice", op: "publish" });\n    }\n    if (this.mutedCorrente) await this.richiedi({ t: "voice", op: "mute", muted: true });\n    this.controllaGenerazione(generazione);\n    this.tentativoRiconnessione = 0;\n    this.aggiornaState("on");\n    this.avviaMisuraAudio();\n    for (const playerId of this.gains.keys()) this.aggiornaZero(playerId);\n    this.accodaRiconciliazione();\n  }\n  async entraSfu(iceServers, generazione) {\n    const pc = this.richiediDipendenze().creaPeerConnection({\n      iceServers,\n      bundlePolicy: "max-bundle"\n    });\n    this.peerSfu = pc;\n    pc.ontrack = (event) => {\n      const mid2 = event.transceiver.mid;\n      const playerId = mid2 === null ? void 0 : this.midGiocatori.get(mid2);\n      if (playerId !== void 0) this.collegaTraccia(playerId, event.track, event.receiver);\n    };\n    this.osservaCaduta(pc);\n    const transceiver = pc.addTransceiver(this.richiediMic(), { direction: "sendonly" });\n    const offer = await pc.createOffer();\n    await pc.setLocalDescription(offer);\n    this.controllaGenerazione(generazione);\n    const mid = transceiver.mid;\n    const sdp = pc.localDescription?.sdp;\n    if (mid === null || sdp === void 0) {\n      throw creaErrore("voice_error", "The voice connection could not create an offer.");\n    }\n    const risposta = await this.richiedi({ t: "voice", op: "session", sdp, mid });\n    if (risposta.op !== "session") {\n      throw creaErrore("voice_error", "The voice service returned an invalid response.");\n    }\n    this.sessioneSfu = risposta.session;\n    await pc.setRemoteDescription({ type: "answer", sdp: risposta.sdp });\n    await this.attendiConnessione(pc, generazione);\n  }\n  attendiConnessione(pc, generazione) {\n    if (pc.connectionState === "connected") return Promise.resolve();\n    const dipendenze = this.richiediDipendenze();\n    return new Promise((resolve, reject) => {\n      const pulisci = () => {\n        pc.removeEventListener("connectionstatechange", cambiata);\n        if (this.timerConnessione !== null) dipendenze.clearTimeout(this.timerConnessione);\n        this.timerConnessione = null;\n        this.cancellaAttesaConnessione = null;\n      };\n      const cambiata = () => {\n        if (generazione !== this.generazione) {\n          pulisci();\n          reject(creaErrore("offline", "Voice was stopped."));\n        } else if (pc.connectionState === "connected") {\n          pulisci();\n          resolve();\n        } else if (pc.connectionState === "failed" || pc.connectionState === "closed") {\n          pulisci();\n          reject(creaErrore("voice_error", "The voice connection failed."));\n        }\n      };\n      pc.addEventListener("connectionstatechange", cambiata);\n      this.cancellaAttesaConnessione = () => {\n        pulisci();\n        reject(creaErrore("offline", "Voice was stopped."));\n      };\n      this.timerConnessione = dipendenze.setTimeout(() => {\n        pulisci();\n        reject(creaErrore("voice_error", "The voice connection timed out."));\n      }, TIMEOUT_CONNESSIONE);\n    });\n  }\n  accodaRiconciliazione() {\n    if (this.stateCorrente !== "on") return;\n    this.negoziazione = this.negoziazione.then(async () => {\n      if (this.stateCorrente !== "on") return;\n      if (this.trasporto === "sfu") await this.riconciliaSfu();\n      else if (this.trasporto === "mesh") this.riconciliaMesh();\n    }).catch(() => this.avviaRiconnessione());\n  }\n  async riconciliaSfu() {\n    const sessione = this.sessioneSfu;\n    const pc = this.peerSfu;\n    if (sessione === null || pc === null) return;\n    const desiderati = new Map(this.peerDesiderati().map((peer) => [peer.id, peer]));\n    const daChiudere = [];\n    for (const [playerId, attiva] of this.sfuAttive) {\n      const peer = desiderati.get(playerId);\n      if (peer !== void 0 && peer.session === attiva.session && peer.track === attiva.track) continue;\n      daChiudere.push(attiva);\n      if (!this.riproduzioni.has(playerId)) attiva.receiver?.track.stop();\n      this.sfuAttive.delete(playerId);\n      this.midGiocatori.delete(attiva.mid);\n      this.scollegaTraccia(playerId);\n    }\n    if (daChiudere.length > 0) {\n      await this.richiedi({\n        t: "voice",\n        op: "close",\n        session: sessione,\n        mids: daChiudere.map((item) => item.mid)\n      });\n    }\n    const nuove = [...desiderati.values()].filter((peer) => !this.sfuAttive.has(peer.id));\n    if (nuove.length === 0) return;\n    const risposta = await this.richiedi({\n      t: "voice",\n      op: "subscribe",\n      session: sessione,\n      tracks: nuove.map((peer) => ({ session: peer.session, track: peer.track }))\n    });\n    if (risposta.op !== "subscribe") {\n      throw creaErrore("voice_error", "The voice service returned an invalid response.");\n    }\n    for (const risultato of risposta.tracks) {\n      const peer = nuove.find(\n        (item) => item.session === risultato.session && item.track === risultato.track\n      );\n      if (risultato?.mid === null || risultato?.mid === void 0 || risultato.error !== null || peer === void 0) continue;\n      this.midGiocatori.set(risultato.mid, peer.id);\n      this.sfuAttive.set(peer.id, {\n        session: peer.session,\n        track: peer.track,\n        mid: risultato.mid,\n        receiver: null\n      });\n    }\n    await pc.setRemoteDescription({ type: "offer", sdp: risposta.sdp });\n    const answer = await pc.createAnswer();\n    await pc.setLocalDescription(answer);\n    const sdp = pc.localDescription?.sdp;\n    if (sdp === void 0) throw creaErrore("voice_error", "The voice answer is missing.");\n    await this.richiedi({ t: "voice", op: "answer", session: sessione, sdp });\n  }\n  riconciliaMesh() {\n    const desiderati = new Map(this.peerDesiderati().map((peer) => [peer.id, peer]));\n    for (const [playerId, item] of this.mesh) {\n      if (desiderati.has(playerId)) continue;\n      item.pc.close();\n      this.mesh.delete(playerId);\n      this.scollegaTraccia(playerId);\n    }\n    for (const peer of desiderati.values()) {\n      if (!this.mesh.has(peer.id)) this.creaMesh(peer.id);\n    }\n  }\n  creaMesh(playerId) {\n    const pc = this.richiediDipendenze().creaPeerConnection();\n    const item = {\n      pc,\n      makingOffer: false,\n      ignoreOffer: false,\n      settingRemoteAnswer: false,\n      polite: this.contesto.you() > playerId,\n      receiver: null\n    };\n    this.mesh.set(playerId, item);\n    pc.onicecandidate = (event) => {\n      if (event.candidate === null) return;\n      void this.inviaSegnale(playerId, { kind: "candidate", candidate: event.candidate.toJSON() });\n    };\n    if (!item.polite) pc.onnegotiationneeded = () => {\n      void this.offriMesh(playerId, item);\n    };\n    pc.ontrack = (event) => {\n      item.receiver = event.receiver;\n      this.collegaTraccia(playerId, event.track, event.receiver);\n    };\n    this.osservaCaduta(pc);\n    pc.addTrack(this.richiediMic(), this.richiediStream());\n  }\n  async offriMesh(playerId, item) {\n    try {\n      item.makingOffer = true;\n      const offer = await item.pc.createOffer();\n      await item.pc.setLocalDescription(offer);\n      const sdp = item.pc.localDescription?.sdp;\n      if (sdp !== void 0) await this.inviaSegnale(playerId, { kind: "offer", sdp });\n    } finally {\n      item.makingOffer = false;\n    }\n  }\n  async riceviSegnale(from, data) {\n    if (this.trasporto !== "mesh" || this.stateCorrente !== "on") return;\n    if (!this.peerDesiderati().some((peer) => peer.id === from)) return;\n    if (!this.mesh.has(from)) this.creaMesh(from);\n    const item = this.mesh.get(from);\n    if (item === void 0 || typeof data !== "object" || data === null || Array.isArray(data)) return;\n    const segnale = data;\n    try {\n      if (segnale.kind === "candidate") {\n        if (!item.ignoreOffer) await item.pc.addIceCandidate(segnale.candidate);\n        return;\n      }\n      if (segnale.kind !== "offer" && segnale.kind !== "answer" || typeof segnale.sdp !== "string") return;\n      const pronta = !item.makingOffer && (item.pc.signalingState === "stable" || item.settingRemoteAnswer);\n      const collisione = segnale.kind === "offer" && !pronta;\n      item.ignoreOffer = !item.polite && collisione;\n      if (item.ignoreOffer) return;\n      item.settingRemoteAnswer = segnale.kind === "answer";\n      await item.pc.setRemoteDescription({ type: segnale.kind, sdp: segnale.sdp });\n      item.settingRemoteAnswer = false;\n      if (segnale.kind === "offer") {\n        const answer = await item.pc.createAnswer();\n        await item.pc.setLocalDescription(answer);\n        const sdp = item.pc.localDescription?.sdp;\n        if (sdp !== void 0) await this.inviaSegnale(from, { kind: "answer", sdp });\n      }\n    } catch {\n      this.avviaRiconnessione();\n    }\n  }\n  inviaSegnale(to, data) {\n    return this.richiedi({ t: "voice", op: "signal", to, data });\n  }\n  peerDesiderati() {\n    const you = this.contesto.you();\n    const giocatori = this.contesto.giocatori();\n    const player = giocatori.find((item) => item.id === you);\n    return this.roster.filter((peer) => {\n      if (peer.id === you) return false;\n      if (this.modeCorrente === "team") {\n        const altro = giocatori.find((item) => item.id === peer.id);\n        if (player?.role !== "spectator" && altro?.team !== player?.team) return false;\n      }\n      const zeroAt = this.zeroDa.get(peer.id);\n      return zeroAt === void 0 || this.richiediDipendenze().ora() - zeroAt < DURATA_ZERO;\n    });\n  }\n  aggiornaZero(playerId) {\n    const dipendenze = this.dipendenze;\n    if (dipendenze === null) return;\n    const precedente = this.timerZero.get(playerId);\n    if (precedente !== void 0) dipendenze.clearTimeout(precedente);\n    this.timerZero.delete(playerId);\n    if ((this.gains.get(playerId) ?? 1) > 0) {\n      this.zeroDa.delete(playerId);\n      return;\n    }\n    if (!this.zeroDa.has(playerId)) this.zeroDa.set(playerId, dipendenze.ora());\n    const trascorso = dipendenze.ora() - (this.zeroDa.get(playerId) ?? dipendenze.ora());\n    const timer = dipendenze.setTimeout(() => {\n      this.timerZero.delete(playerId);\n      this.accodaRiconciliazione();\n    }, Math.max(0, DURATA_ZERO - trascorso));\n    this.timerZero.set(playerId, timer);\n  }\n  collegaTraccia(playerId, track, receiver) {\n    this.scollegaTraccia(playerId);\n    const dipendenze = this.richiediDipendenze();\n    const media = dipendenze.creaMediaStream([track]);\n    const source = this.richiediAudioContext().createMediaStreamSource(media);\n    const gain = this.richiediAudioContext().createGain();\n    source.connect(gain);\n    gain.connect(this.richiediAudioContext().destination);\n    let analyser = null;\n    try {\n      analyser = this.richiediAudioContext().createAnalyser();\n      analyser.fftSize = 256;\n      source.connect(analyser);\n    } catch {\n      analyser = null;\n    }\n    const audio = dipendenze.creaAudioElement();\n    audio.srcObject = media;\n    audio.muted = true;\n    audio.playsInline = true;\n    void audio.play().catch(() => void 0);\n    this.riproduzioni.set(playerId, { source, gain, analyser, audio, track, receiver });\n    const attiva = this.sfuAttive.get(playerId);\n    if (attiva !== void 0) attiva.receiver = receiver;\n    this.aggiornaGuadagno(playerId);\n  }\n  scollegaTraccia(playerId) {\n    const riproduzione = this.riproduzioni.get(playerId);\n    if (riproduzione === void 0) return;\n    riproduzione.source.disconnect();\n    riproduzione.gain.disconnect();\n    riproduzione.analyser?.disconnect();\n    riproduzione.track.stop();\n    riproduzione.audio.pause();\n    riproduzione.audio.srcObject = null;\n    this.riproduzioni.delete(playerId);\n    this.speakingPeers.delete(playerId);\n    this.ultimoAudio.delete(playerId);\n  }\n  aggiornaGuadagno(playerId) {\n    const riproduzione = this.riproduzioni.get(playerId);\n    if (riproduzione !== void 0) {\n      riproduzione.gain.gain.value = (this.volumi.get(playerId) ?? 1) * (this.gains.get(playerId) ?? 1);\n    }\n  }\n  preparaAnalizzatore(stream) {\n    const context = this.richiediAudioContext();\n    const analyser = context.createAnalyser();\n    analyser.fftSize = 256;\n    context.createMediaStreamSource(stream).connect(analyser);\n    this.analyser = analyser;\n  }\n  avviaMisuraAudio() {\n    const dipendenze = this.richiediDipendenze();\n    if (this.intervalloAudio !== null) dipendenze.clearInterval(this.intervalloAudio);\n    this.intervalloAudio = dipendenze.setInterval(() => this.misuraAudio(), INTERVALLO_AUDIO);\n  }\n  misuraAudio() {\n    const dipendenze = this.dipendenze;\n    if (dipendenze === null) return;\n    let sopraSoglia = false;\n    if (this.analyser !== null) sopraSoglia = this.livelloAnalizzatore(this.analyser) > SOGLIA_AUDIO;\n    if (sopraSoglia) this.ultimoAudioMic = dipendenze.ora();\n    const parlando = !this.mutedCorrente && dipendenze.ora() - this.ultimoAudioMic <= DURATA_PARLANTE;\n    if (parlando !== this.speakingCorrente) {\n      this.speakingCorrente = parlando;\n      this.notificaPeers();\n    }\n    let cambiato = false;\n    for (const peer of this.copiaPeers()) {\n      const riproduzione = this.riproduzioni.get(peer.id);\n      if (this.livelloAnalizzatore(riproduzione?.analyser ?? null) > SOGLIA_AUDIO) {\n        this.ultimoAudio.set(peer.id, dipendenze.ora());\n      } else if (riproduzione?.analyser === null || riproduzione?.analyser === void 0) {\n        const sources = riproduzione?.receiver?.getSynchronizationSources?.() ?? [];\n        if (sources.some((source) => (source.audioLevel ?? 0) > SOGLIA_AUDIO)) {\n          this.ultimoAudio.set(peer.id, dipendenze.ora());\n        }\n      }\n      const speaking = !peer.muted && dipendenze.ora() - (this.ultimoAudio.get(peer.id) ?? 0) <= DURATA_PARLANTE;\n      if ((this.speakingPeers.get(peer.id) ?? false) !== speaking) {\n        this.speakingPeers.set(peer.id, speaking);\n        cambiato = true;\n      }\n    }\n    if (cambiato) this.notificaPeers();\n  }\n  livelloAnalizzatore(analyser) {\n    const nodo = analyser;\n    if (nodo?.getFloatTimeDomainData === void 0) return 0;\n    const campioni = new Float32Array(nodo.fftSize);\n    nodo.getFloatTimeDomainData(campioni);\n    return Math.sqrt(campioni.reduce((somma, valore) => somma + valore * valore, 0) / Math.max(1, campioni.length));\n  }\n  copiaPeers() {\n    const you = this.contesto.you();\n    const giocatori = this.contesto.giocatori();\n    const player = giocatori.find((item) => item.id === you);\n    return this.roster.flatMap((peer) => {\n      if (peer.id === you) return [];\n      if (this.modeCorrente === "team") {\n        const altro = giocatori.find((item) => item.id === peer.id);\n        if (player?.role !== "spectator" && altro?.team !== player?.team) return [];\n      }\n      return [{\n        id: peer.id,\n        muted: peer.muted,\n        speaking: !peer.muted && (this.speakingPeers.get(peer.id) ?? false),\n        volume: this.volumi.get(peer.id) ?? 1,\n        gain: this.gains.get(peer.id) ?? 1\n      }];\n    });\n  }\n  pulisciPeerAssenti() {\n    const presenti = new Set(this.roster.map((peer) => peer.id));\n    for (const playerId of this.speakingPeers.keys()) {\n      if (!presenti.has(playerId)) this.speakingPeers.delete(playerId);\n    }\n    for (const playerId of this.zeroDa.keys()) {\n      if (presenti.has(playerId)) continue;\n      this.zeroDa.delete(playerId);\n      const timer = this.timerZero.get(playerId);\n      if (timer !== void 0) this.dipendenze?.clearTimeout(timer);\n      this.timerZero.delete(playerId);\n    }\n  }\n  osservaCaduta(pc) {\n    pc.addEventListener("connectionstatechange", () => {\n      if (this.stateCorrente === "on" && (pc.connectionState === "failed" || pc.connectionState === "disconnected")) this.avviaRiconnessione();\n    });\n  }\n  avviaRiconnessione() {\n    if (!this.desiderata || this.stateCorrente === "reconnecting") return;\n    this.generazione++;\n    this.rifiutaRichieste(creaErrore("voice_error", "The voice connection was restarted."));\n    this.chiudiRisorse();\n    this.tentativoRiconnessione = 0;\n    this.aggiornaState("reconnecting");\n    this.programmaRiconnessione();\n  }\n  programmaRiconnessione() {\n    if (!this.desiderata || !this.contesto.connessa() || this.timerRiconnessione !== null || this.stateCorrente !== "reconnecting") return;\n    const ritardo = RITARDI_RICONNESSIONE[this.tentativoRiconnessione];\n    if (ritardo === void 0) {\n      this.desiderata = false;\n      this.aggiornaState("off");\n      return;\n    }\n    this.tentativoRiconnessione++;\n    this.timerRiconnessione = this.richiediDipendenze().setTimeout(() => {\n      this.timerRiconnessione = null;\n      const generazione = ++this.generazione;\n      void this.entra(generazione).catch(() => {\n        if (generazione !== this.generazione || !this.desiderata) return;\n        this.chiudiRisorse();\n        this.aggiornaState("reconnecting");\n        this.programmaRiconnessione();\n      });\n    }, ritardo);\n  }\n  fermaRiconnessione() {\n    if (this.timerRiconnessione === null || this.dipendenze === null) return;\n    this.dipendenze.clearTimeout(this.timerRiconnessione);\n    this.timerRiconnessione = null;\n  }\n  chiudiRisorse() {\n    const dipendenze = this.dipendenze;\n    this.cancellaAttesaConnessione?.();\n    this.cancellaAttesaConnessione = null;\n    if (dipendenze !== null) {\n      if (this.intervalloAudio !== null) dipendenze.clearInterval(this.intervalloAudio);\n      if (this.timerConnessione !== null) dipendenze.clearTimeout(this.timerConnessione);\n      for (const timer of this.timerZero.values()) dipendenze.clearTimeout(timer);\n    }\n    this.intervalloAudio = null;\n    this.timerConnessione = null;\n    this.timerZero.clear();\n    for (const playerId of [...this.riproduzioni.keys()]) this.scollegaTraccia(playerId);\n    this.peerSfu?.close();\n    this.peerSfu = null;\n    for (const item of this.mesh.values()) item.pc.close();\n    this.mesh.clear();\n    this.sfuAttive.clear();\n    this.midGiocatori.clear();\n    for (const track of this.stream?.getTracks() ?? []) track.stop();\n    this.stream = null;\n    this.mic = null;\n    this.analyser = null;\n    void this.audioContext?.close().catch(() => void 0);\n    this.audioContext = null;\n    this.sessioneSfu = null;\n    this.trasporto = null;\n    this.speakingCorrente = false;\n    this.ultimoAudioMic = Number.NEGATIVE_INFINITY;\n    this.speakingPeers.clear();\n    this.ultimoAudio.clear();\n    this.negoziazione = Promise.resolve();\n  }\n  richiedi(message) {\n    if (!this.contesto.connessa()) return Promise.reject(creaErrore("offline", "The room is reconnecting."));\n    const r = ++this.sequenzaRichieste;\n    return new Promise((resolve, reject) => {\n      this.richieste.set(r, { resolve, reject });\n      try {\n        this.contesto.invia({ ...message, r });\n      } catch (cause) {\n        this.richieste.delete(r);\n        reject(cause);\n      }\n    });\n  }\n  rifiutaRichieste(reason) {\n    for (const richiesta of this.richieste.values()) richiesta.reject(reason);\n    this.richieste.clear();\n  }\n  aggiornaState(state) {\n    if (state === this.stateCorrente) return;\n    this.stateCorrente = state;\n    for (const listener of this.ascoltatoriState) {\n      try {\n        listener(state);\n      } catch {\n      }\n    }\n  }\n  notificaPeers() {\n    const peers = this.copiaPeers();\n    for (const listener of this.ascoltatoriPeers) {\n      try {\n        listener(peers);\n      } catch {\n      }\n    }\n  }\n  controllaGenerazione(generazione) {\n    if (generazione !== this.generazione || !this.desiderata) {\n      throw creaErrore("offline", "Voice was stopped.");\n    }\n  }\n  richiediDipendenze() {\n    if (this.dipendenze === null) throw creaErrore("unsupported", "Voice is not supported.");\n    return this.dipendenze;\n  }\n  richiediMic() {\n    if (this.mic === null) throw creaErrore("voice_error", "The microphone is not ready.");\n    return this.mic;\n  }\n  richiediStream() {\n    if (this.stream === null) throw creaErrore("voice_error", "The microphone is not ready.");\n    return this.stream;\n  }\n  richiediAudioContext() {\n    if (this.audioContext === null) throw creaErrore("voice_error", "Audio is not ready.");\n    return this.audioContext;\n  }\n  permessoNegato(cause) {\n    return typeof cause === "object" && cause !== null && "name" in cause && (cause.name === "NotAllowedError" || cause.name === "SecurityError");\n  }\n  mappaErrore(cause) {\n    if (typeof cause === "object" && cause !== null && "code" in cause) {\n      const code = cause.code;\n      if (code === "voice_disabled" || code === "permission_denied" || code === "unsupported" || code === "spectator" || code === "offline" || code === "voice_error") return cause;\n      return creaErrore("voice_error", "Voice could not be started.");\n    }\n    return creaErrore("voice_error", "Voice could not be started.");\n  }\n};\n\n// src/stanza-client/index.ts\nvar APERTO = 1;\nvar RITARDI_RICONNESSIONE2 = [1e3, 2e3, 4e3, 8e3];\nvar GRAZIA_RICONNESSIONE = 6e4;\nvar INTERVALLO_PING = 5e3;\nvar RITARDO_FLUSH = 500;\nvar ATTESA_ROSTER = 2e3;\nvar CHIUSURE_DEFINITIVE = /* @__PURE__ */ new Set([4003, 4004, 4005, 4006]);\nfunction record2(value) {\n  return typeof value === "object" && value !== null && !Array.isArray(value) ? value : null;\n}\nfunction copiaJson(value) {\n  return JSON.parse(JSON.stringify(value));\n}\nfunction applicaPatch(state, value) {\n  let risultato = copiaJson(state);\n  for (const operazione of value) {\n    if (operazione.path.length === 0) {\n      if (operazione.op !== "set") return { ok: false };\n      risultato = copiaJson(operazione.value);\n      continue;\n    }\n    let contenitore = risultato;\n    const percorso = operazione.path;\n    for (let indice = 0; indice < percorso.length - 1; indice++) {\n      const parte = percorso[indice];\n      if (Array.isArray(contenitore)) {\n        if (typeof parte !== "number" || parte >= contenitore.length) return { ok: false };\n        contenitore = contenitore[parte];\n      } else {\n        const oggetto = record2(contenitore);\n        if (oggetto === null || typeof parte !== "string" || !Object.hasOwn(oggetto, parte)) {\n          return { ok: false };\n        }\n        contenitore = oggetto[parte];\n      }\n    }\n    const ultima = percorso.at(-1);\n    if (Array.isArray(contenitore)) {\n      if (operazione.op !== "set" || typeof ultima !== "number" || ultima >= contenitore.length) return { ok: false };\n      contenitore[ultima] = copiaJson(operazione.value);\n    } else {\n      const oggetto = record2(contenitore);\n      if (oggetto === null || typeof ultima !== "string") return { ok: false };\n      if (operazione.op === "del") {\n        if (!Object.hasOwn(oggetto, ultima)) return { ok: false };\n        delete oggetto[ultima];\n      } else {\n        Object.defineProperty(oggetto, ultima, {\n          configurable: true,\n          enumerable: true,\n          value: copiaJson(operazione.value),\n          writable: true\n        });\n      }\n    }\n  }\n  return { ok: true, state: risultato };\n}\nfunction creaApiLive(input) {\n  const richiesta = creaRichiedente(input.liveOrigin, "", input.fetcher, input.biglietto);\n  function ingressoValido(value) {\n    const dati = record2(value);\n    return dati !== null && typeof dati.roomId === "string" && typeof dati.code === "string" && typeof dati.join === "string" && typeof dati.url === "string";\n  }\n  async function ingresso(path, body, rinnova = false) {\n    const value = await richiesta(path, "POST", body, rinnova);\n    if (!ingressoValido(value)) {\n      throw creaErrore("internal_error", "The room service returned an invalid response.");\n    }\n    return value;\n  }\n  return {\n    create: (mode) => ingresso("/rooms", { mode }),\n    joinCode: (code) => ingresso("/rooms/join", { code }),\n    joinRoom: (roomId) => ingresso("/rooms/join", { roomId }, true),\n    flush: (roomId) => richiesta(\n      `/rooms/${encodeURIComponent(roomId)}/flush`,\n      "POST"\n    )\n  };\n}\nvar StanzaClient = class {\n  constructor(roomId, codice, url, input, api) {\n    this.roomId = roomId;\n    this.codice = codice;\n    this.input = input;\n    this.api = api;\n    this.statoPubblico = null;\n    this.statoSincronizzato = null;\n    this.tickCorrente = 0;\n    this.statusCorrente = "lobby";\n    this.giocatoriCorrenti = [];\n    this.youCorrente = "";\n    this.hostCorrente = null;\n    this.resultCorrente = null;\n    this.socket = null;\n    this.seq = 0;\n    this.scartoOrario = 0;\n    this.timerPing = null;\n    this.timerRiconnessione = null;\n    this.timerFlush = null;\n    this.flushInCorso = false;\n    this.flushRichiesto = false;\n    this.ritardoIndice = 0;\n    this.tempoRiconnessione = 0;\n    this.resyncRichiesto = false;\n    this.terminata = false;\n    this.lasciata = false;\n    this.prontaRisolta = false;\n    this.welcomeRicevuto = false;\n    this.rosterRicevuto = false;\n    this.timerRoster = null;\n    this.risolviPronta = () => void 0;\n    this.rifiutaPronta = () => void 0;\n    this.ascoltatoriStato = /* @__PURE__ */ new Set();\n    this.ascoltatoriGiocatori = /* @__PURE__ */ new Set();\n    this.ascoltatoriStatus = /* @__PURE__ */ new Set();\n    this.ascoltatoriMessaggi = /* @__PURE__ */ new Set();\n    this.promessaPronta = new Promise((resolve, reject) => {\n      this.risolviPronta = resolve;\n      this.rifiutaPronta = reject;\n    });\n    this.voice = new VoceClient({\n      invia: (message) => this.invia(message),\n      connessa: () => this.socket?.readyState === APERTO && this.welcomeRicevuto && !this.terminata && !this.lasciata,\n      you: () => this.youCorrente,\n      giocatori: () => this.copiaGiocatori(),\n      rosterPronto: () => {\n        this.rosterRicevuto = true;\n        this.risolviProntaSePossibile();\n      }\n    }, input, input.voce);\n    this.apri(url);\n  }\n  get state() {\n    return this.statoPubblico;\n  }\n  get tick() {\n    return this.tickCorrente;\n  }\n  get status() {\n    return this.statusCorrente;\n  }\n  get players() {\n    return this.copiaGiocatori();\n  }\n  get you() {\n    return this.youCorrente;\n  }\n  get host() {\n    return this.hostCorrente;\n  }\n  get code() {\n    return this.codice;\n  }\n  get result() {\n    return this.resultCorrente;\n  }\n  pronta() {\n    return this.promessaPronta;\n  }\n  invite() {\n    return { code: this.codice, url: new URL(`/r/${this.codice}`, this.input.appOrigin).href };\n  }\n  onState(listener) {\n    this.ascoltatoriStato.add(listener);\n    return () => {\n      this.ascoltatoriStato.delete(listener);\n    };\n  }\n  onPlayers(listener) {\n    this.ascoltatoriGiocatori.add(listener);\n    return () => {\n      this.ascoltatoriGiocatori.delete(listener);\n    };\n  }\n  onStatus(listener) {\n    this.ascoltatoriStatus.add(listener);\n    return () => {\n      this.ascoltatoriStatus.delete(listener);\n    };\n  }\n  onMessage(listener) {\n    this.ascoltatoriMessaggi.add(listener);\n    return () => {\n      this.ascoltatoriMessaggi.delete(listener);\n    };\n  }\n  send(message) {\n    const prossimo = this.seq + 1;\n    this.invia({ t: "msg", seq: prossimo, m: message });\n    this.seq = prossimo;\n  }\n  ready(ready) {\n    this.invia({ t: "ready", ready });\n  }\n  setRole(role) {\n    this.invia({ t: "role", role });\n  }\n  setTeam(team) {\n    this.invia({ t: "team", team });\n  }\n  start() {\n    this.invia({ t: "start" });\n  }\n  leave() {\n    if (this.lasciata) return;\n    this.voice.leave();\n    this.lasciata = true;\n    if (this.socket?.readyState === APERTO) this.invia({ t: "leave" });\n    this.termina(1e3);\n  }\n  serverTime() {\n    return this.input.ora() + this.scartoOrario;\n  }\n  copiaGiocatori() {\n    return this.giocatoriCorrenti.map((player) => ({ ...player }));\n  }\n  notifica(listeners, ...args) {\n    for (const listener of listeners) {\n      try {\n        listener(...args);\n      } catch {\n      }\n    }\n  }\n  invia(message) {\n    if (this.socket?.readyState !== APERTO) {\n      throw creaErrore("offline", "The room is reconnecting.");\n    }\n    let frame;\n    try {\n      frame = JSON.stringify(message);\n    } catch {\n      throw creaErrore("invalid_request", "Room messages must be valid JSON.");\n    }\n    this.socket.send(frame);\n  }\n  apri(url) {\n    let socket;\n    try {\n      socket = this.input.apriSocket(url);\n    } catch {\n      this.programmaRiconnessione();\n      return;\n    }\n    this.socket = socket;\n    socket.addEventListener("open", () => {\n      if (this.socket === socket) this.avviaPing();\n    });\n    socket.addEventListener("message", (evento) => {\n      if (this.socket === socket && typeof evento.data === "string") this.ricevi(evento.data);\n    });\n    socket.addEventListener("close", (evento) => {\n      if (this.socket === socket) this.chiuso(evento.code);\n    });\n  }\n  avviaPing() {\n    if (this.timerPing !== null) this.input.clearInterval(this.timerPing);\n    this.timerPing = this.input.setInterval(() => {\n      if (this.socket?.readyState !== APERTO) return;\n      try {\n        this.invia({ t: "ping", c: this.input.ora() });\n      } catch {\n      }\n    }, INTERVALLO_PING);\n  }\n  fermaPing() {\n    if (this.timerPing === null) return;\n    this.input.clearInterval(this.timerPing);\n    this.timerPing = null;\n  }\n  ricevi(frame) {\n    let dati;\n    try {\n      const value = JSON.parse(frame);\n      const oggetto = record2(value);\n      if (oggetto === null || typeof oggetto.t !== "string") return;\n      dati = oggetto;\n    } catch {\n      return;\n    }\n    try {\n      if (dati.t === "welcome") this.riceviWelcome(dati);\n      else if (dati.t === "players") this.riceviGiocatori(dati.players);\n      else if (dati.t === "status") this.riceviStatus(dati);\n      else if (dati.t === "state") this.riceviDiff(dati);\n      else if (dati.t === "snapshot") this.riceviSnapshot(dati);\n      else if (dati.t === "msg") this.notifica(this.ascoltatoriMessaggi, copiaJson(dati.m));\n      else if (dati.t === "pong") this.riceviPong(dati);\n      else if (dati.t === "flush") this.richiediFlush();\n      else if (dati.t === "voice") this.voice.ricevi(dati);\n    } catch {\n      if (dati.t === "state" || dati.t === "snapshot") this.chiediResync();\n    }\n  }\n  riceviWelcome(dati) {\n    const room = dati.room;\n    if (room.id !== this.roomId) return;\n    this.youCorrente = dati.you;\n    this.hostCorrente = room.host;\n    this.statusCorrente = room.status;\n    this.giocatoriCorrenti = dati.players.map((player) => ({ ...player }));\n    this.aggiornaStato(dati.state, room.tick, room.serverTime);\n    this.scartoOrario = room.serverTime - this.input.ora();\n    this.resyncRichiesto = false;\n    this.welcomeRicevuto = true;\n    if (!this.rosterRicevuto && this.timerRoster === null) {\n      this.timerRoster = this.input.setTimeout(() => {\n        this.timerRoster = null;\n        this.rosterRicevuto = true;\n        this.risolviProntaSePossibile();\n      }, ATTESA_ROSTER);\n    }\n    this.ritardoIndice = 0;\n    this.tempoRiconnessione = 0;\n    this.notifica(this.ascoltatoriGiocatori, this.copiaGiocatori());\n    this.voice.giocatoriCambiati();\n    this.voice.socketRiconnesso();\n    this.notifica(\n      this.ascoltatoriStatus,\n      this.statusCorrente,\n      this.resultCorrente,\n      room.serverTime\n    );\n    this.risolviProntaSePossibile();\n  }\n  riceviGiocatori(value) {\n    this.giocatoriCorrenti = value.map((player) => ({ ...player }));\n    if (!this.giocatoriCorrenti.some(\n      (player) => player.id === this.hostCorrente && player.connected\n    )) {\n      this.hostCorrente = this.giocatoriCorrenti.find((player) => player.connected)?.id ?? null;\n    }\n    this.notifica(this.ascoltatoriGiocatori, this.copiaGiocatori());\n    this.voice.giocatoriCambiati();\n  }\n  riceviStatus(dati) {\n    this.statusCorrente = dati.status;\n    this.resultCorrente = copiaJson(dati.result);\n    if (dati.status === "ended") {\n      this.terminata = true;\n      this.voice.termina();\n      this.fermaPing();\n      this.fermaRiconnessione();\n    }\n    this.notifica(this.ascoltatoriStatus, this.statusCorrente, this.resultCorrente, dati.at);\n  }\n  riceviDiff(dati) {\n    if (dati.base !== this.tickCorrente) {\n      this.chiediResync();\n      return;\n    }\n    const risultato = applicaPatch(this.statoSincronizzato, dati.patch);\n    if (!risultato.ok) {\n      this.chiediResync();\n      return;\n    }\n    this.resyncRichiesto = false;\n    this.aggiornaStato(risultato.state, dati.tick, dati.serverTime);\n  }\n  riceviSnapshot(dati) {\n    if (dati.tick < this.tickCorrente) return;\n    this.resyncRichiesto = false;\n    this.aggiornaStato(dati.state, dati.tick, dati.serverTime);\n  }\n  aggiornaStato(state, tick, serverTime) {\n    this.statoSincronizzato = copiaJson(state);\n    this.statoPubblico = copiaJson(state);\n    this.tickCorrente = tick;\n    this.notifica(this.ascoltatoriStato, this.statoPubblico, tick, serverTime);\n  }\n  chiediResync() {\n    if (this.resyncRichiesto || this.socket?.readyState !== APERTO) return;\n    this.resyncRichiesto = true;\n    try {\n      this.invia({ t: "resync" });\n    } catch {\n      this.resyncRichiesto = false;\n    }\n  }\n  riceviPong(dati) {\n    this.scartoOrario = dati.s - (dati.c + this.input.ora()) / 2;\n  }\n  chiuso(code) {\n    this.socket = null;\n    this.welcomeRicevuto = false;\n    this.fermaPing();\n    if (CHIUSURE_DEFINITIVE.has(code)) {\n      this.termina(code);\n      return;\n    }\n    if (this.lasciata || this.terminata) return;\n    this.voice.socketDisconnesso();\n    this.programmaRiconnessione();\n  }\n  programmaRiconnessione() {\n    if (this.terminata || this.lasciata || this.timerRiconnessione !== null) return;\n    const indice = Math.min(this.ritardoIndice, RITARDI_RICONNESSIONE2.length - 1);\n    const ritardo = RITARDI_RICONNESSIONE2[indice];\n    if (this.tempoRiconnessione + ritardo > GRAZIA_RICONNESSIONE) {\n      this.termina("timeout");\n      return;\n    }\n    this.ritardoIndice++;\n    this.tempoRiconnessione += ritardo;\n    this.timerRiconnessione = this.input.setTimeout(() => {\n      this.timerRiconnessione = null;\n      void this.riconnetti();\n    }, ritardo);\n  }\n  async riconnetti() {\n    if (this.terminata || this.lasciata) return;\n    try {\n      const ingresso = await this.api.joinRoom(this.roomId);\n      this.codice = ingresso.code;\n      this.apri(ingresso.url);\n    } catch {\n      this.programmaRiconnessione();\n    }\n  }\n  fermaRiconnessione() {\n    if (this.timerRiconnessione === null) return;\n    this.input.clearTimeout(this.timerRiconnessione);\n    this.timerRiconnessione = null;\n  }\n  termina(code) {\n    const risultato = { closed: code };\n    const cambiato = this.statusCorrente !== "ended" || JSON.stringify(this.resultCorrente) !== JSON.stringify(risultato);\n    this.terminata = true;\n    this.statusCorrente = "ended";\n    this.resultCorrente = risultato;\n    this.voice.termina();\n    this.fermaPing();\n    this.fermaRiconnessione();\n    if (cambiato) this.notifica(this.ascoltatoriStatus, "ended", risultato, this.serverTime());\n    if (!this.prontaRisolta) {\n      this.prontaRisolta = true;\n      const codici = {\n        4003: "kicked",\n        4004: "room_ended",\n        4005: "version_closed",\n        4006: "replaced"\n      };\n      const erroreCode = typeof code === "number" ? codici[code] ?? "offline" : "offline";\n      this.rifiutaPronta(creaErrore(erroreCode, "The room connection ended."));\n    }\n  }\n  risolviProntaSePossibile() {\n    if (this.prontaRisolta || !this.welcomeRicevuto || !this.rosterRicevuto) return;\n    if (this.timerRoster !== null) {\n      this.input.clearTimeout(this.timerRoster);\n      this.timerRoster = null;\n    }\n    this.prontaRisolta = true;\n    this.risolviPronta();\n  }\n  richiediFlush() {\n    this.flushRichiesto = true;\n    if (this.flushInCorso || this.timerFlush !== null) return;\n    this.timerFlush = this.input.setTimeout(() => {\n      this.timerFlush = null;\n      void this.eseguiFlush();\n    }, RITARDO_FLUSH);\n  }\n  async eseguiFlush() {\n    if (this.flushInCorso || !this.flushRichiesto) return;\n    this.flushInCorso = true;\n    this.flushRichiesto = false;\n    try {\n      await this.api.flush(this.roomId);\n    } catch {\n    } finally {\n      this.flushInCorso = false;\n      if (this.flushRichiesto) this.richiediFlush();\n    }\n  }\n};\nfunction creaStanzeOffline(invited = null) {\n  return {\n    invited,\n    async create() {\n      throw erroreOffline();\n    },\n    async join() {\n      throw erroreOffline();\n    }\n  };\n}\nfunction creaGestoreStanze(input, invited) {\n  const api = creaApiLive(input);\n  const collega = async (ingresso) => {\n    const stanza = new StanzaClient(ingresso.roomId, ingresso.code, ingresso.url, input, api);\n    await stanza.pronta();\n    return stanza;\n  };\n  return {\n    invited,\n    async create(options) {\n      return collega(await api.create(options.mode));\n    },\n    async join(code) {\n      const scelto = code ?? invited;\n      if (scelto === null || scelto === void 0 || scelto.length === 0) {\n        throw creaErrore("invalid_request", "A room invitation code is required.");\n      }\n      return collega(await api.joinCode(scelto));\n    }\n  };\n}\n\n// src/standalone.ts\nvar PREFISSO = "caisual:save:";\nvar CHIAVE_VALIDA = /^[a-z0-9][a-z0-9_-]{0,31}$/;\nfunction verificaChiave(key) {\n  if (!CHIAVE_VALIDA.test(key)) {\n    throw creaErrore("invalid_request", "Save keys must use lowercase letters, numbers, underscores, or hyphens.");\n  }\n}\nfunction leggiSalvataggio(testo) {\n  if (testo === null) return null;\n  try {\n    return JSON.parse(testo);\n  } catch {\n    return null;\n  }\n}\nfunction chiavi(archivio) {\n  const risultato = [];\n  for (let indice = 0; indice < archivio.length; indice++) {\n    const key = archivio.key(indice);\n    if (key?.startsWith(PREFISSO)) risultato.push(key.slice(PREFISSO.length));\n  }\n  return risultato;\n}\nfunction creaSave(archivio, ora) {\n  const disponibile = () => {\n    if (archivio === null) throw erroreOffline();\n    return archivio;\n  };\n  return {\n    async set(key, value) {\n      verificaChiave(key);\n      const locale = disponibile();\n      const corpo = JSON.stringify({ value });\n      const bytes = new TextEncoder().encode(corpo).byteLength;\n      if (bytes > 262144) {\n        throw creaErrore("payload_too_large", "The save is larger than 262144 bytes.");\n      }\n      if (locale.getItem(PREFISSO + key) === null && chiavi(locale).length >= 32) {\n        throw creaErrore("save_limit", "A game can store at most 32 save keys.");\n      }\n      const voce = { value, bytes, updatedAt: ora() };\n      locale.setItem(PREFISSO + key, JSON.stringify(voce));\n      return { key, bytes, updatedAt: voce.updatedAt };\n    },\n    async get(key) {\n      verificaChiave(key);\n      return leggiSalvataggio(disponibile().getItem(PREFISSO + key))?.value ?? null;\n    },\n    async remove(key) {\n      verificaChiave(key);\n      disponibile().removeItem(PREFISSO + key);\n    },\n    async list() {\n      const locale = disponibile();\n      return chiavi(locale).flatMap((key) => {\n        const voce = leggiSalvataggio(locale.getItem(PREFISSO + key));\n        return voce === null ? [] : [{ key, bytes: voce.bytes, updatedAt: voce.updatedAt }];\n      }).sort((a, b) => a.key.localeCompare(b.key));\n    }\n  };\n}\nasync function creaStandalone(input, invited = null) {\n  const day = giornoUtc(input.ora());\n  const seed = await calcolaSeed(input.hostname, day, input.subtle);\n  return {\n    connected: false,\n    player: { id: "local", name: "Guest", guest: true },\n    daily: { day, seed, random: creaMulberry32(seed) },\n    time: { now: input.ora },\n    save: creaSave(input.archivio, input.ora),\n    board: {\n      async submit() {\n        return { accepted: false, reason: "offline" };\n      },\n      async top(_board, opzioni = {}) {\n        return { day: opzioni.daily ? day : null, entries: [], me: null };\n      }\n    },\n    room: creaStanzeOffline(invited)\n  };\n}\n\n// src/kit.ts\nfunction leggiAppOrigin(documento) {\n  const valore = documento?.querySelector(\'meta[name="caisual-app"]\')?.getAttribute("content");\n  if (valore === null || valore === void 0) return null;\n  try {\n    const url = new URL(valore);\n    return url.origin === valore && (url.protocol === "https:" || url.protocol === "http:") ? valore : null;\n  } catch {\n    return null;\n  }\n}\nfunction archivioReale() {\n  try {\n    return typeof localStorage === "undefined" ? null : localStorage;\n  } catch {\n    return null;\n  }\n}\nfunction dipendenzeReali2() {\n  return {\n    finestra: typeof window === "undefined" ? null : window,\n    documento: typeof document === "undefined" ? null : document,\n    fetcher: (input, init) => globalThis.fetch(input, init),\n    archivio: archivioReale(),\n    hostname: typeof location === "undefined" ? "" : location.hostname,\n    subtle: globalThis.crypto.subtle,\n    ora: Date.now\n  };\n}\nasync function connetti(input) {\n  const appOrigin = leggiAppOrigin(input.documento);\n  const senzaPadre = input.finestra === null || input.finestra.parent === input.finestra;\n  if (appOrigin === null || senzaPadre) {\n    return creaStandalone(input);\n  }\n  const handshake = await attendiHandshake(\n    input.finestra,\n    appOrigin,\n    input.timeoutHandshake\n  );\n  if (handshake === null) return creaStandalone(input);\n  const biglietto = creaGestoreBiglietto(\n    handshake.ticket,\n    handshake.porta,\n    input.finestra,\n    input.ora,\n    input.timeoutRinnovo,\n    "portal"\n  );\n  const api = creaClienteApi(appOrigin, input.fetcher, biglietto);\n  const prima = input.ora();\n  let me;\n  try {\n    me = await api.me();\n  } catch {\n    return creaStandalone(input, handshake.invite);\n  }\n  const dopo = input.ora();\n  const scartoOrario = me.serverTime - (prima + dopo) / 2;\n  const room = handshake.live === null ? creaStanzeOffline(handshake.invite) : creaGestoreStanze({\n    appOrigin,\n    liveOrigin: handshake.live,\n    fetcher: input.fetcher,\n    biglietto: creaGestoreBiglietto(\n      null,\n      handshake.porta,\n      input.finestra,\n      input.ora,\n      input.timeoutRinnovo,\n      "live"\n    ),\n    apriSocket(url) {\n      if (input.apriSocket !== void 0) return input.apriSocket(url);\n      if (typeof WebSocket === "undefined") throw erroreOffline();\n      return new WebSocket(url);\n    },\n    ora: input.ora,\n    setTimeout: (handler, timeout) => globalThis.setTimeout(handler, timeout),\n    clearTimeout: (id) => globalThis.clearTimeout(id),\n    setInterval: (handler, timeout) => globalThis.setInterval(handler, timeout),\n    clearInterval: (id) => globalThis.clearInterval(id),\n    voce: input.voce\n  }, handshake.invite);\n  return {\n    connected: true,\n    player: me.player,\n    daily: { day: me.day, seed: me.seed, random: creaMulberry32(me.seed) },\n    time: { now: () => input.ora() + scartoOrario },\n    save: {\n      set: (key, value) => api.saveSet(key, value),\n      get: (key) => api.saveGet(key),\n      remove: (key) => api.saveRemove(key),\n      list: () => api.saveList()\n    },\n    board: {\n      async submit(board, score, opzioni = {}) {\n        try {\n          return await api.boardSubmit(board, score, opzioni.daily === true);\n        } catch (errore) {\n          if (typeof errore === "object" && errore !== null && "code" in errore && errore.code === "offline") return { accepted: false, reason: "offline" };\n          throw errore;\n        }\n      },\n      top: (board, opzioni = {}) => api.boardTop(board, opzioni)\n    },\n    room\n  };\n}\nfunction creaKit(input = dipendenzeReali2()) {\n  let promessa = null;\n  return {\n    connect() {\n      promessa ?? (promessa = connetti(input));\n      return promessa;\n    }\n  };\n}\n\n// src/index.ts\nvar caisual = creaKit();\nglobalThis.caisual = caisual;\nvar index_default = caisual;\nexport {\n  caisual,\n  index_default as default\n};\n');
+      return;
+    }
+    let decoded;
+    try {
+      decoded = decodeURIComponent(url.pathname);
+    } catch {
+      sendError(response, new DevHttpError(404, "not_found", "The game file was not found."));
+      return;
+    }
+    const relativePath = decoded === "/" ? "index.html" : decoded.replace(/^\/+/, "");
+    const candidate = resolve(this.clientRoot, relativePath);
+    if (relative(this.clientRoot, candidate).startsWith(`..${sep}`) || candidate === this.clientRoot) {
+      sendError(response, new DevHttpError(404, "not_found", "The game file was not found."));
+      return;
+    }
+    const real = await fs.realpath(candidate).catch(() => null);
+    if (real === null || real !== this.clientRoot && !real.startsWith(`${this.clientRoot}${sep}`)) {
+      sendError(response, new DevHttpError(404, "not_found", "The game file was not found."));
+      return;
+    }
+    const stat = await fs.stat(real);
+    if (!stat.isFile()) {
+      sendError(response, new DevHttpError(404, "not_found", "The game file was not found."));
+      return;
+    }
+    const html = extname(real).toLowerCase() === ".html";
+    const body = html ? Buffer.from(injectAppMeta(await fs.readFile(real, "utf8"), this.portalOrigin)) : await fs.readFile(real);
+    response.statusCode = 200;
+    response.setHeader("Content-Type", contentType(real));
+    response.setHeader("Content-Length", body.byteLength);
+    response.setHeader("Cache-Control", "no-store");
+    response.setHeader("X-Content-Type-Options", "nosniff");
+    response.end(request.method === "HEAD" ? void 0 : body);
+  }
+  async handlePortal(request, response, url) {
+    if (url.pathname === "/" && (request.method === "GET" || request.method === "HEAD")) {
+      const voceAttiva = this.manifest.voice !== "none";
+      const body = parentPage({
+        allow: [
+          "fullscreen",
+          "autoplay",
+          "pointer-lock",
+          ...this.manifest.input.includes("gamepad") ? ["gamepad"] : [],
+          ...voceAttiva ? ["microphone"] : [],
+          ...this.manifest.isolated ? ["cross-origin-isolated"] : []
+        ].join("; "),
+        gameOrigin: this.gameOrigin,
+        portalOrigin: this.portalOrigin,
+        slug: this.manifest.id
+      });
+      response.statusCode = 200;
+      response.setHeader("Content-Type", "text/html; charset=utf-8");
+      response.setHeader("Cache-Control", "no-store");
+      response.setHeader(
+        "Permissions-Policy",
+        voceAttiva ? `microphone=(self "${this.gameOrigin}")` : "microphone=()"
+      );
+      response.end(request.method === "HEAD" ? void 0 : body);
+      return;
+    }
+    const invitation = /^\/r\/([ABCDEFGHJKLMNPQRSTUVWXYZ23456789]{6})$/.exec(url.pathname);
+    if (invitation !== null && invitation[1] !== void 0 && request.method === "GET") {
+      response.statusCode = 302;
+      response.setHeader("Location", `/?invite=${invitation[1]}`);
+      response.setHeader("Cache-Control", "no-store");
+      response.end();
+      return;
+    }
+    if (url.pathname === "/__caisual/session" && request.method === "GET") {
+      this.handleSession(response, url);
+      return;
+    }
+    if (url.pathname.startsWith("/api/kit/")) {
+      await this.handleKit(request, response, url);
+      return;
+    }
+    if (url.pathname === "/rooms" || url.pathname === "/rooms/join" || /^\/rooms\/[^/]+(?:\/flush)?$/.test(url.pathname)) {
+      await this.handleLive(request, response, url);
+      return;
+    }
+    sendError(response, new DevHttpError(404, "not_found", "The local endpoint was not found."));
+  }
+  handleSession(response, url) {
+    const sessionId = url.searchParams.get("id");
+    if (sessionId === null || !FORMA_SESSIONE.test(sessionId)) {
+      sendError(response, new DevHttpError(400, "invalid_request", "The local player session is invalid."));
+      return;
+    }
+    let player = this.playersBySession.get(sessionId);
+    if (player === void 0) {
+      this.playerNumber += 1;
+      player = {
+        sessionId,
+        id: `dev_${createHash2("sha256").update(sessionId).digest("hex").slice(0, 24)}`,
+        name: `Guest ${this.playerNumber}`,
+        guest: true
+      };
+      this.playersBySession.set(sessionId, player);
+      this.playersById.set(player.id, player);
+    }
+    sendJson(response, {
+      player: playerFromTicket({
+        sub: player.id,
+        name: player.name,
+        guest: player.guest,
+        room: "",
+        aud: "room",
+        iat: 0,
+        exp: 0
+      }),
+      portal: serviceTicket(player, this.manifest.id, "portal", this.secret),
+      live: serviceTicket(player, this.manifest.id, "live", this.secret)
+    });
+  }
+  validOrigin(request) {
+    if (request.headers.origin !== this.gameOrigin) {
+      throw new DevHttpError(403, "forbidden_origin", "This origin is not allowed to use the game API.");
+    }
+    return this.gameOrigin;
+  }
+  async handleKit(request, response, url) {
+    let origin = null;
+    try {
+      origin = this.validOrigin(request);
+      if (request.method === "OPTIONS") {
+        sendPreflight(response, origin);
+        return;
+      }
+      const ticket = readServiceTicket(request, this.manifest.id, "portal", this.secret);
+      this.checkRate(this.kitRequests, ticket.sub);
+      if (url.pathname === "/api/kit/me" && request.method === "GET") {
+        const day = utcDay();
+        sendJson(response, {
+          player: playerFromTicket(ticket),
+          game: { slug: this.manifest.id },
+          day,
+          seed: dailySeed(this.manifest.id, day),
+          serverTime: Date.now()
+        }, 200, origin);
+        return;
+      }
+      if (url.pathname === "/api/kit/saves" && request.method === "GET") {
+        const saves = [...this.playerSaves(ticket).entries()].map(([key, record2]) => ({
+          key,
+          bytes: record2.bytes,
+          updatedAt: record2.updatedAt
+        })).sort((left, right) => left.key.localeCompare(right.key));
+        sendJson(response, { saves }, 200, origin);
+        return;
+      }
+      const saveMatch = /^\/api\/kit\/saves\/([^/]+)$/.exec(url.pathname);
+      if (saveMatch !== null && saveMatch[1] !== void 0) {
+        await this.handleSave(request, response, decodeURIComponent(saveMatch[1]), ticket, origin);
+        return;
+      }
+      if (url.pathname === "/api/kit/scores" && request.method === "POST") {
+        await this.submitScore(request, response, ticket, origin);
+        return;
+      }
+      const scoreMatch = /^\/api\/kit\/scores\/([^/]+)$/.exec(url.pathname);
+      if (scoreMatch !== null && scoreMatch[1] !== void 0 && request.method === "GET") {
+        this.topScores(response, decodeURIComponent(scoreMatch[1]), url, ticket, origin);
+        return;
+      }
+      throw new DevHttpError(404, "not_found", "The game API endpoint was not found.");
+    } catch (cause) {
+      sendError(response, cause, origin);
+    }
+  }
+  playerSaves(ticket) {
+    const id = `${ticket.game}\0${ticket.sub}`;
+    let records = this.saves.get(id);
+    if (records === void 0) {
+      records = /* @__PURE__ */ new Map();
+      this.saves.set(id, records);
+    }
+    return records;
   }
-  const roles = [];
-  if (dati.roles !== void 0) {
-    if (!Array.isArray(dati.roles)) errori.push("roles: must be an array.");
-    else {
-      const ids = /* @__PURE__ */ new Set();
-      for (const [indice, raw] of dati.roles.entries()) {
-        const value = oggetto(raw);
-        if (value === null) {
-          errori.push(`roles[${indice}]: must be an object.`);
-          continue;
-        }
-        for (const campo of Object.keys(value)) {
-          if (!["id", "min", "max"].includes(campo)) errori.push(`roles[${indice}].${campo}: unknown field.`);
-        }
-        const idRuolo = value.id;
-        const min = value.min;
-        const max = value.max;
-        let valido = true;
-        if (typeof idRuolo !== "string" || idRuolo.length > 32 || !ID_INTERNO.test(idRuolo)) {
-          errori.push(`roles[${indice}].id: must be 1-32 lowercase letters, digits, or internal hyphens.`);
-          valido = false;
-        } else if (ids.has(idRuolo)) {
-          errori.push(`roles[${indice}].id: duplicate role ${idRuolo}.`);
-          valido = false;
-        } else ids.add(idRuolo);
-        if (!interoTra(min, 0, 16)) {
-          errori.push(`roles[${indice}].min: must be an integer from 0 to 16.`);
-          valido = false;
-        }
-        if (max !== void 0 && !interoTra(max, 0, 16)) {
-          errori.push(`roles[${indice}].max: must be an integer from 0 to 16 when present.`);
-          valido = false;
-        }
-        if (typeof min === "number" && typeof max === "number" && min > max) {
-          errori.push(`roles[${indice}].max: must be greater than or equal to min.`);
-          valido = false;
-        }
-        if (valido) roles.push(max === void 0 ? { id: idRuolo, min } : { id: idRuolo, min, max });
-      }
+  async handleSave(request, response, key, ticket, origin) {
+    if (!CHIAVE_SAVE.test(key)) {
+      throw new DevHttpError(400, "invalid_request", "The save key is not valid.", [
+        "Use 1-32 lowercase letters, digits, underscores, or hyphens."
+      ]);
+    }
+    const saves = this.playerSaves(ticket);
+    if (request.method === "GET") {
+      const record2 = saves.get(key);
+      if (record2 === void 0) throw new DevHttpError(404, "not_found", "The save was not found.");
+      sendJson(response, { key, value: record2.value, updatedAt: record2.updatedAt }, 200, origin);
+      return;
+    }
+    if (request.method === "DELETE") {
+      saves.delete(key);
+      sendJson(response, { deleted: true }, 200, origin);
+      return;
     }
+    if (request.method !== "PUT") {
+      throw new DevHttpError(400, "invalid_request", "This method is not supported for this endpoint.");
+    }
+    const body = object(await readBody(request));
+    if (body === null || !Object.hasOwn(body, "value")) {
+      throw new DevHttpError(400, "invalid_request", "The request body must contain value.");
+    }
+    if (!saves.has(key) && saves.size >= 32) {
+      throw new DevHttpError(409, "save_limit", "This player already has 32 saves for this game.", [
+        "Remove an existing save before creating a new key."
+      ]);
+    }
+    let serialized;
+    try {
+      serialized = JSON.stringify(body.value);
+    } catch {
+      throw new DevHttpError(400, "invalid_request", "The save value must be valid JSON.");
+    }
+    if (serialized === void 0) {
+      throw new DevHttpError(400, "invalid_request", "The save value must be valid JSON.");
+    }
+    const updatedAt = Date.now();
+    const bytes = Buffer.byteLength(serialized);
+    saves.set(key, { value: structuredClone(body.value), bytes, updatedAt });
+    sendJson(response, { key, bytes, updatedAt }, 200, origin);
   }
-  let teams = null;
-  if (dati.teams !== void 0 && dati.teams !== null) {
-    const value = oggetto(dati.teams);
-    if (value === null) errori.push("teams: must be null or an object with min and max.");
-    else {
-      for (const campo of Object.keys(value)) {
-        if (campo !== "min" && campo !== "max") errori.push(`teams.${campo}: unknown field.`);
-      }
-      if (!interoTra(value.min, 2, 16)) errori.push("teams.min: must be an integer from 2 to 16.");
-      if (!interoTra(value.max, 2, 16)) errori.push("teams.max: must be an integer from 2 to 16.");
-      if (interoTra(value.min, 2, 16) && interoTra(value.max, 2, 16)) {
-        if (value.min > value.max) errori.push("teams.max: must be greater than or equal to teams.min.");
-        else teams = { min: value.min, max: value.max };
-      }
+  scoreKey(playerId, game, board, day) {
+    return `${playerId}\0${game}\0${board}\0${day ?? ""}`;
+  }
+  putScore(input, now = Date.now()) {
+    const key = this.scoreKey(input.playerId, input.game, input.board, input.day);
+    const existing = this.scores.get(key);
+    if (existing !== void 0 && existing.score >= input.score) return existing;
+    const record2 = { ...input, createdAt: now };
+    this.scores.set(key, record2);
+    return record2;
+  }
+  scoreRank(record2) {
+    return 1 + [...this.scores.values()].filter(
+      (other) => other.game === record2.game && other.board === record2.board && other.day === record2.day && other.guest === record2.guest && other.score > record2.score
+    ).length;
+  }
+  async submitScore(request, response, ticket, origin) {
+    const body = object(await readBody(request));
+    if (body === null || typeof body.board !== "string" || !CHIAVE_BOARD.test(body.board)) {
+      throw new DevHttpError(400, "invalid_request", "The board name is not valid.");
+    }
+    if (typeof body.score !== "number" || !Number.isSafeInteger(body.score) || body.score < 0) {
+      throw new DevHttpError(400, "invalid_request", "score must be a non-negative safe integer.");
     }
+    if (typeof body.daily !== "boolean") {
+      throw new DevHttpError(400, "invalid_request", "daily must be true or false.");
+    }
+    const record2 = this.putScore({
+      playerId: ticket.sub,
+      name: ticket.name,
+      guest: ticket.guest,
+      game: ticket.game,
+      board: body.board,
+      day: body.daily ? utcDay() : null,
+      score: body.score,
+      verified: false
+    });
+    sendJson(response, {
+      board: record2.board,
+      day: record2.day,
+      best: record2.score,
+      rank: this.scoreRank(record2),
+      verified: false
+    }, 200, origin);
   }
-  let voice = "none";
-  if (dati.voice !== void 0) {
-    if (typeof dati.voice !== "string" || !VOICE.has(dati.voice)) {
-      errori.push("voice: must be none, room, team, or proximity.");
-    } else voice = dati.voice;
+  topScores(response, board, url, ticket, origin) {
+    if (!CHIAVE_BOARD.test(board)) {
+      throw new DevHttpError(400, "invalid_request", "The board name is not valid.");
+    }
+    const dailyValue = url.searchParams.get("daily");
+    const guestsValue = url.searchParams.get("guests");
+    if (dailyValue !== null && dailyValue !== "1") {
+      throw new DevHttpError(400, "invalid_request", "daily must be 1 when present.");
+    }
+    if (guestsValue !== null && guestsValue !== "1") {
+      throw new DevHttpError(400, "invalid_request", "guests must be 1 when present.");
+    }
+    const limitRaw = url.searchParams.get("limit") ?? "10";
+    if (!/^\d+$/.test(limitRaw) || Number(limitRaw) < 1 || Number(limitRaw) > 100) {
+      throw new DevHttpError(400, "invalid_request", "limit must be an integer from 1 to 100.");
+    }
+    const day = dailyValue === "1" ? utcDay() : null;
+    const guests = guestsValue === "1";
+    const category = [...this.scores.values()].filter(
+      (record2) => record2.game === ticket.game && record2.board === board && record2.day === day && record2.guest === guests
+    ).sort((left, right) => right.score - left.score || left.createdAt - right.createdAt);
+    const entries = category.slice(0, Number(limitRaw)).map((record2) => ({
+      rank: this.scoreRank(record2),
+      name: record2.guest ? "Guest" : record2.name,
+      score: record2.score,
+      guest: record2.guest,
+      me: record2.playerId === ticket.sub
+    }));
+    const own = this.scores.get(this.scoreKey(ticket.sub, ticket.game, board, day));
+    sendJson(response, {
+      board,
+      day,
+      entries,
+      me: own === void 0 ? null : { rank: this.scoreRank(own), score: own.score }
+    }, 200, origin);
   }
-  const modes = [];
-  if (dati.modes !== void 0) {
-    if (!Array.isArray(dati.modes)) errori.push("modes: must be an array.");
-    else {
-      const ids = /* @__PURE__ */ new Set();
-      for (const [indice, raw] of dati.modes.entries()) {
-        const value = oggetto(raw);
-        if (value === null) {
-          errori.push(`modes[${indice}]: must be an object.`);
-          continue;
-        }
-        for (const campo of Object.keys(value)) {
-          if (campo !== "id" && campo !== "matchmaking") errori.push(`modes[${indice}].${campo}: unknown field.`);
-        }
-        if (typeof value.id !== "string" || value.id.length > 32 || !ID_INTERNO.test(value.id)) {
-          errori.push(`modes[${indice}].id: must be 1-32 lowercase letters, digits, or internal hyphens.`);
-          continue;
-        }
-        if (ids.has(value.id)) {
-          errori.push(`modes[${indice}].id: duplicate mode ${value.id}.`);
-          continue;
-        }
-        ids.add(value.id);
-        if (value.matchmaking === void 0) {
-          modes.push({ id: value.id });
-          continue;
-        }
-        const matchmaking = oggetto(value.matchmaking);
-        if (matchmaking === null) {
-          errori.push(`modes[${indice}].matchmaking: must be an object.`);
-          continue;
+  async handleLive(request, response, url) {
+    let origin = null;
+    try {
+      origin = this.validOrigin(request);
+      if (request.method === "OPTIONS") {
+        sendPreflight(response, origin);
+        return;
+      }
+      const ticket = readServiceTicket(request, this.manifest.id, "live", this.secret);
+      this.checkRate(this.liveRequests, ticket.sub);
+      if (url.pathname === "/rooms" && request.method === "POST") {
+        await this.createRoom(request, response, ticket, origin);
+        return;
+      }
+      if (url.pathname === "/rooms/join" && request.method === "POST") {
+        await this.joinRoom(request, response, ticket, origin);
+        return;
+      }
+      const match = /^\/rooms\/(g1-1\.[a-z0-9]{16})(?:\/(flush))?$/.exec(url.pathname);
+      if (match !== null && match[1] !== void 0) {
+        const localRoom = this.rooms.get(match[1]);
+        if (localRoom === void 0 || localRoom.game !== ticket.game) {
+          throw new DevHttpError(404, "room_not_found", "The room was not found.");
         }
-        for (const campo of Object.keys(matchmaking)) {
-          if (!["key", "timeoutMs", "fallback"].includes(campo)) {
-            errori.push(`modes[${indice}].matchmaking.${campo}: unknown field.`);
+        if (match[2] === "flush" && request.method === "POST") {
+          const flushed = await localRoom.room.flush();
+          for (const score of flushed.scores) {
+            const player = this.playersById.get(score.playerId);
+            this.putScore({
+              playerId: score.playerId,
+              name: player?.name ?? "Guest",
+              guest: player?.guest ?? true,
+              game: ticket.game,
+              board: score.board,
+              day: score.daily ? utcDay() : null,
+              score: score.score,
+              verified: true
+            });
           }
+          sendJson(response, {
+            scores: flushed.scores.length,
+            ended: flushed.ended !== null
+          }, 200, origin);
+          return;
         }
-        let valido = true;
-        const key = [];
-        if (!Array.isArray(matchmaking.key) || matchmaking.key.length === 0) {
-          errori.push(`modes[${indice}].matchmaking.key: must be a non-empty array.`);
-          valido = false;
-        } else for (const [keyIndice, item] of matchmaking.key.entries()) {
-          if (typeof item !== "string" || item.length > 32 || !ID_INTERNO.test(item)) {
-            errori.push(`modes[${indice}].matchmaking.key[${keyIndice}]: must be 1-32 lowercase letters, digits, or internal hyphens.`);
-            valido = false;
-          } else key.push(item);
-        }
-        if (!Number.isSafeInteger(matchmaking.timeoutMs) || matchmaking.timeoutMs < 1) {
-          errori.push(`modes[${indice}].matchmaking.timeoutMs: must be a positive integer.`);
-          valido = false;
-        }
-        if (matchmaking.fallback !== "ghost" && matchmaking.fallback !== "bot") {
-          errori.push(`modes[${indice}].matchmaking.fallback: must be ghost or bot.`);
-          valido = false;
+        if (match[2] === void 0 && request.method === "GET") {
+          const info = await localRoom.room.info();
+          if (info === null) throw new DevHttpError(404, "room_not_found", "The room was not found.");
+          sendJson(response, info, 200, origin);
+          return;
         }
-        if (valido) modes.push({ id: value.id, matchmaking: {
-          key,
-          timeoutMs: matchmaking.timeoutMs,
-          fallback: matchmaking.fallback
-        } });
       }
+      throw new DevHttpError(404, "room_not_found", "The room was not found.");
+    } catch (cause) {
+      sendError(response, cause, origin);
     }
   }
-  if (errori.length > 0) return { ok: false, errori };
-  return { ok: true, manifest: {
-    manifest: 1,
-    id,
-    name,
-    description,
-    cover,
-    screenshots,
-    tags,
-    language,
-    platform,
-    orientation,
-    input,
-    visibility,
-    network,
-    isolated,
-    players,
-    lobby,
-    roles,
-    teams,
-    voice,
-    modes
-  } };
+  async createRoom(request, response, ticket, origin) {
+    if (this.definition === null) {
+      throw new DevHttpError(409, "no_server", "This game has no multiplayer server.");
+    }
+    const body = object(await readBody(request));
+    if (body === null || !Object.hasOwn(body, "mode") || body.mode !== null && typeof body.mode !== "string") {
+      throw new DevHttpError(400, "invalid_request", "mode must be null or a valid mode name.");
+    }
+    const roomId = `g1-1.${randomUniform("abcdefghijklmnopqrstuvwxyz0123456789", 16)}`;
+    const roomManifest = {
+      id: this.manifest.id,
+      players: this.manifest.players,
+      lobby: this.manifest.lobby,
+      roles: this.manifest.roles,
+      teams: this.manifest.teams,
+      modes: this.manifest.modes,
+      voice: this.manifest.voice
+    };
+    const room = await createNodeRoom(
+      this.definition,
+      roomManifest,
+      { storageFile: join(this.root, ".caisual-dev", "rooms", `${roomId}.json`) }
+    );
+    try {
+      await room.create(roomId, body.mode, playerFromTicket(ticket));
+    } catch (cause) {
+      await room.close();
+      throw new DevHttpError(
+        400,
+        "invalid_request",
+        cause instanceof Error ? cause.message : "The room request is invalid."
+      );
+    }
+    const code = this.uniqueCode();
+    this.rooms.set(roomId, { code, game: ticket.game, room });
+    this.roomByCode.set(code, roomId);
+    sendJson(response, this.joinResponse(roomId, code, playerFromTicket(ticket)), 201, origin);
+  }
+  async joinRoom(request, response, ticket, origin) {
+    const body = object(await readBody(request));
+    const hasCode = body !== null && typeof body.code === "string";
+    const hasRoomId = body !== null && typeof body.roomId === "string";
+    if (body === null || hasCode === hasRoomId) {
+      throw new DevHttpError(400, "invalid_request", "Provide either code or roomId.");
+    }
+    const codeInput = hasCode ? body.code.toUpperCase().replace(/[\s-]/g, "") : null;
+    if (codeInput !== null && !FORMA_CODICE.test(codeInput)) {
+      throw new DevHttpError(404, "room_not_found", "The room was not found.");
+    }
+    const roomId = codeInput === null ? body.roomId : this.roomByCode.get(codeInput);
+    const localRoom = roomId === void 0 ? void 0 : this.rooms.get(roomId);
+    if (roomId === void 0 || localRoom === void 0 || localRoom.game !== ticket.game) {
+      throw new DevHttpError(404, "room_not_found", "The room was not found.");
+    }
+    const permission = await localRoom.room.canJoin(playerFromTicket(ticket));
+    if (!permission.ok) {
+      throw new DevHttpError(
+        permission.code === "room_not_found" ? 404 : 409,
+        permission.code,
+        this.roomErrorMessage(permission.code)
+      );
+    }
+    sendJson(response, this.joinResponse(roomId, localRoom.code, playerFromTicket(ticket)), 200, origin);
+  }
+  joinResponse(roomId, code, player) {
+    const join3 = joinTicket(player, roomId, this.secret);
+    return {
+      roomId,
+      code,
+      join: join3,
+      url: `ws://localhost:${this.port}/rooms/${roomId}?j=${encodeURIComponent(join3)}`
+    };
+  }
+  uniqueCode() {
+    for (let attempt = 0; attempt < 20; attempt += 1) {
+      const code = randomUniform(ALFABETO_CODICE, 6);
+      if (!this.roomByCode.has(code)) return code;
+    }
+    throw new Error("Unable to allocate a local room code.");
+  }
+  checkRate(requests, playerId) {
+    const now = Date.now();
+    const recent = (requests.get(playerId) ?? []).filter((time) => now - time < 6e4);
+    if (recent.length >= 120) {
+      throw new DevHttpError(429, "rate_limited", "Too many game API requests were sent.", [
+        "Wait 10 seconds and retry."
+      ]);
+    }
+    recent.push(now);
+    requests.set(playerId, recent);
+  }
+  roomErrorMessage(code) {
+    if (code === "room_full") return "Room is full.";
+    if (code === "room_playing") return "The game has already started.";
+    if (code === "room_ended") return "Room has ended.";
+    return "Room not found.";
+  }
+  rejectUpgrade(socket, status, code, message) {
+    const body = JSON.stringify({ error: { code, message, hints: [] } });
+    const names = {
+      400: "Bad Request",
+      401: "Unauthorized",
+      404: "Not Found",
+      409: "Conflict"
+    };
+    socket.end(
+      `HTTP/1.1 ${status} ${names[status] ?? "Error"}\r
+Content-Type: application/json; charset=utf-8\r
+Content-Length: ${Buffer.byteLength(body)}\r
+Cache-Control: private, no-store\r
+Connection: close\r
+\r
+` + body
+    );
+  }
+};
+async function runDev(options) {
+  const root = resolve(process.cwd(), options.folder);
+  const stat = await fs.stat(root).catch(() => null);
+  if (stat === null || !stat.isDirectory()) throw new Error(`The game folder was not found: ${root}`);
+  const [{ manifest, clientRoot }, definition] = await Promise.all([
+    readGame(root),
+    loadDefinition(root)
+  ]);
+  const server = createServer();
+  let service;
+  await new Promise((resolveListen, rejectListen) => {
+    const onError = (cause) => rejectListen(cause);
+    server.once("error", onError);
+    server.listen(options.port, "127.0.0.1", () => {
+      server.off("error", onError);
+      resolveListen();
+    });
+  }).catch((cause) => {
+    const detail = cause instanceof Error ? cause.message : String(cause);
+    throw new Error(`The local server could not start: ${detail}`);
+  });
+  const address = server.address();
+  if (address === null || typeof address === "string") throw new Error("The local server address is unavailable.");
+  service = new DevService(root, clientRoot, manifest, definition, address.port);
+  server.on("request", (request, response) => {
+    void service.handle(request, response).catch((cause) => sendError(response, cause));
+  });
+  server.on("upgrade", (request, socket, head) => {
+    void service.handleUpgrade(request, socket, head);
+  });
+  process.stdout.write(`Game:   ${service.gameOrigin}/
+`);
+  process.stdout.write(`Portal: ${service.portalOrigin}/
+`);
+  process.stdout.write("ctrl+c to stop\n");
+  await new Promise((resolveStop) => {
+    const stop = () => resolveStop();
+    process.once("SIGINT", stop);
+    process.once("SIGTERM", stop);
+  });
+  await service.close();
+  await new Promise((resolveClose, rejectClose) => {
+    server.close((cause) => cause ? rejectClose(cause) : resolveClose());
+  });
 }
 
-// ../../docs/publish.md
-var publish_default = '# Publish a game on Caisual\n\nCaisual hosts browser games supplied as folders. Each publish creates an immutable version and moves the game\'s stable link to that version.\nThe current publishing flow is for single-player games and does not require changes in the Caisual dashboard.\n\n## Game folder\n\nUse this structure:\n\n```text\nmy-game/\n  caisual.json\n  client/\n    index.html\n    ...\n```\n\n`caisual.json` and `client/index.html` are required. Put every file used by the game under `client/`.\n\nRun `npx @caisual/cli init my-game` to create a minimal folder, or create these files yourself.\n\n## caisual.json\n\nThe file must contain one JSON object. Unknown fields are rejected. This is a complete example for the current single-player release:\n\n```json\n{\n  "manifest": 1,\n  "id": "my-game",\n  "name": "My Game",\n  "description": "A short description of the game.",\n  "cover": "cover.png",\n  "screenshots": ["screenshots/level-one.png"],\n  "tags": ["puzzle"],\n  "language": "en",\n  "platform": "both",\n  "orientation": "landscape",\n  "input": ["keyboard", "mouse", "touch"],\n  "visibility": "public",\n  "network": [],\n  "isolated": false,\n  "players": { "min": 1, "max": 1 },\n  "lobby": false,\n  "roles": [],\n  "teams": null,\n  "voice": "none",\n  "modes": []\n}\n```\n\n- `manifest` is required and must be `1`.\n- `id` is required. Use 3 to 32 lowercase ASCII letters or digits, with single hyphens only between groups. The ID becomes the URL slug. Choose it carefully because it cannot be renamed or reused after deletion.\n- `name` is required and must contain 1 to 60 characters.\n- `description` is optional, defaults to an empty string, and can contain at most 500 characters.\n- `cover` is optional. Use a relative path inside `client/`, or `null`. Do not include a query, fragment, empty segment, or parent segment.\n- `screenshots` is optional and defaults to `[]`. It accepts up to 8 relative paths inside `client/`.\n- `tags` is optional and defaults to `[]`. It accepts up to 10 values. Each value uses 1 to 24 lowercase letters, digits, or hyphens.\n- `language` is optional and defaults to `en`. Use a BCP 47 language tag such as `en`, `it`, or `pt-BR`.\n- `platform` is required. Use `desktop` when the game needs a keyboard, mouse, large display, or desktop performance. Use `mobile` when it is designed only for touch and small screens. Use `both` only after checking that layout, performance, and controls work on both.\n- `orientation` is optional and defaults to `landscape`. Use `landscape` or `portrait` to describe the intended mobile layout. The device may not honor an orientation request.\n- `input` is optional and defaults to `[]`. Include every supported input from `keyboard`, `mouse`, `touch`, and `gamepad`. Do not claim an input until the game is usable with it.\n- `visibility` is optional and defaults to `public`. Use `public` for catalog eligibility or `unlisted` for access by direct link only.\n- `network` is optional and defaults to `[]`. List every external host contacted or loaded by the game, without scheme, port, path, query, or fragment, for example `api.example.com`. If an external host is missing, the browser blocks the request. Keep the array empty when the game uses only its own files and Caisual services.\n- `isolated` is optional and defaults to `false`. Use `true` only when the game requires shared memory or threaded WebAssembly. Every external host in `network` must then send headers compatible with cross-origin isolation.\n- `players` is optional and defaults to `{ "min": 1, "max": 1 }`. Both values are integers from 1 to 16 and `max` must be at least `min`. Keep both at `1` in the current release.\n- `lobby` is optional and defaults to `false`. Keep it `false` in the current release.\n- `roles` is optional and defaults to `[]`. Each future entry has an `id` of 1 to 32 lowercase letters, digits, or internal hyphens, a `min` integer from 0 to 16, and an optional `max` in the same range. Keep it empty in the current release.\n- `teams` is optional and defaults to `null`. A future object has `min` and `max` integers from 2 to 16, with `max` at least `min`. Keep it `null` in the current release.\n- `voice` is optional and defaults to `none`. The accepted values are `none`, `room`, `team`, and `proximity`. Use `none` in the current release.\n- `modes` is optional and defaults to `[]`. A future mode has a unique `id` using 1 to 32 lowercase letters, digits, or internal hyphens. It may have `matchmaking` with a non-empty `key` array using the same format, a positive integer `timeoutMs`, and `fallback` set to `ghost` or `bot`. Keep it empty in the current release.\n\nThe CLI prints every manifest error in one run. Fix every listed field and rule before retrying.\n\n## client/index.html\n\n`index.html` must be at the root of `client/`. Use relative URLs such as `./game.js` or `assets/sprite.png`. Do not use root-relative URLs such as `/game.js`, and do not use parent paths that leave the published `client/` tree.\n\nDo not register a service worker. The game runs in an iframe on its own origin inside `caisual.com`. Test it without assuming access to the parent page, parent cookies, or files outside `client/`.\n\n## Limits\n\n- At most 2,000 files per version.\n- At most 50,000,000 bytes per file.\n- At most 200,000,000 bytes for all files in one version.\n- Dotfiles, dot-directories, and directories named `node_modules` are ignored.\n- Symbolic links and other non-regular files are rejected.\n\nReduce or split files that exceed the per-file limit. Remove generated files that the browser does not need.\n\n## Publish\n\nUse the key supplied by the creator. Set it in the environment so it does not enter shell history as a command-line flag:\n\n```sh\nexport CAISUAL_KEY=\'ck_...\'\nnpx @caisual/cli publish\n```\n\nRun the command from the game folder, or pass the folder path after `publish`. For local portal development only, set `CAISUAL_ORIGIN` to the local HTTP origin.\n\nThe CLI validates the folder, computes every file size and SHA-256 digest, creates a new version, uploads the files, completes the version, and prints the game URL. The stable URL is `https://caisual.com/g/<id>`.\n\nThe first games from a new creator are reviewed before they can appear in the public catalog. Their stable links still work while review is pending.\n\n## Update, unlist, or delete\n\nTo update a game, change its files without changing `id`, then run `npx @caisual/cli publish` again. This creates a new version and keeps the same stable game URL.\n\nTo remove a game from the catalog, set `visibility` to `unlisted` and publish, or change visibility from the dashboard. To delete a game, use the dashboard. Deletion is permanent and its ID cannot be reused.\n\n## Common errors\n\n- `CAISUAL_KEY is required`: export the creator\'s key in the same shell before publishing.\n- `The publish API key is not valid`: create a new key in the account dashboard if the old key expired or was revoked.\n- `caisual.json is not valid`: read every reported field and rule, fix all of them, then retry.\n- `client/index.html: file not found`: place `index.html` directly under `client/`, not in a nested build folder.\n- `referenced file not found`: make sure `cover` and every screenshot path match a file under `client/`, including letter case.\n- `file is larger than 50 MB`: compress, reduce, or split the asset and update its references.\n- `upload failed` or a temporary portal error: keep the files unchanged and retry the same publish command. The CLI retries temporary upload failures automatically.\n- An external request works locally but fails after publishing: add its host to `network` and publish a new version.\n- A threaded WebAssembly game fails to start: set `isolated` to `true` and verify that every declared external host supports cross-origin isolation.\n\nMultiplayer rooms arrive with the kit; the same folder and command will publish them.\n';
-
 // src/caisual.ts
 var DEFAULT_ORIGIN = "https://caisual.com";
 var MAX_FILE_BYTES = 5e7;
@@ -396,7 +3360,6 @@ var MAX_VERSION_BYTES = 2e8;
 var MAX_FILES = 2e3;
 var UPLOAD_CONCURRENCY = 4;
 var MAX_RETRIES = 3;
-var SERVER_MESSAGE = "Multiplayer servers arrive in the next kit version. Remove server.js to publish this game as single player.";
 var CliError = class extends Error {
   constructor(exitCode, message) {
     super(message);
@@ -418,10 +3381,11 @@ var ApiError = class extends Error {
   hints;
 };
 function help() {
-  return `Caisual ${"0.1.0"}
+  return `Caisual ${"0.3.0"}
 
 Usage:
-  caisual init [folder]
+  caisual init [--multiplayer] [folder]
+  caisual dev [folder] [--port 8790]
   caisual publish [folder]
   caisual skill
   caisual --help
@@ -442,28 +3406,19 @@ function displayName(folderName) {
   const name = folderName.replace(/[-_]+/g, " ").replace(/\s+/g, " ").trim();
   return (name === "" ? "My Game" : name).slice(0, 60);
 }
-async function exists(path) {
-  try {
-    await fs.lstat(path);
-    return true;
-  } catch (error) {
-    if (error.code === "ENOENT") return false;
-    throw error;
-  }
-}
 async function writeNewFile(path, content) {
   try {
-    await fs.writeFile(path, content, { encoding: "utf8", flag: "wx" });
+    await fs2.writeFile(path, content, { encoding: "utf8", flag: "wx" });
     return true;
   } catch (error) {
     if (error.code === "EEXIST") return false;
     throw error;
   }
 }
-async function init(folderArgument) {
-  const root = resolve(process.cwd(), folderArgument);
+async function init(folderArgument, multiplayer) {
+  const root = resolve2(process.cwd(), folderArgument);
   try {
-    await fs.mkdir(join(root, "client"), { recursive: true });
+    await fs2.mkdir(join2(root, "client"), { recursive: true });
   } catch {
     throw new CliError(2, `The game folder could not be created: ${root}`);
   }
@@ -472,11 +3427,12 @@ async function init(folderArgument) {
     manifest: 1,
     id: slugFromFolder(folderName),
     name: displayName(folderName),
-    platform: "both"
+    platform: "both",
+    ...multiplayer ? { players: { min: 1, max: 4 }, lobby: true, voice: "room" } : {}
   };
-  const manifestPath = join(root, "caisual.json");
-  const indexPath = join(root, "client", "index.html");
-  const index = `<!doctype html>
+  const manifestPath = join2(root, "caisual.json");
+  const indexPath = join2(root, "client", "index.html");
+  const singlePlayerIndex = `<!doctype html>
 <html lang="en">
 <head>
   <meta charset="utf-8">
@@ -484,21 +3440,126 @@ async function init(folderArgument) {
   <title>Hello</title>
 </head>
 <body>
-  <main>Hello</main>
-  <!-- Add the Caisual kit here when it becomes available. -->
+  <main>Hello, <span id="player">player</span>. Today's seed is <span id="seed">?</span>.</main>
+  <script type="module">
+    // The Caisual kit: player identity, cloud saves, leaderboards, daily seed.
+    // API reference: https://caisual.com/kit.md
+    import { caisual } from '/__caisual/kit/v1.js';
+
+    const c = await caisual.connect();
+    document.getElementById('player').textContent = c.player.name;
+    document.getElementById('seed').textContent = String(c.daily.seed);
+  </script>
+</body>
+</html>
+`;
+  const multiplayerIndex = `<!doctype html>
+<html lang="en">
+<head>
+  <meta charset="utf-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1">
+  <title>Multiplayer game</title>
+</head>
+<body>
+  <main>
+    <p id="status">Connecting...</p>
+    <p id="invite"></p>
+    <ul id="players"></ul>
+    <button id="mic" type="button">Mic</button>
+    <ul id="voice-peers" aria-label="Voice participants"></ul>
+    <button id="start" type="button" hidden>Start</button>
+    <button id="send" type="button">Send a message</button>
+    <pre id="messages"></pre>
+  </main>
+  <script type="module">
+    // The Caisual kit: identity, rooms, invites. API reference: https://caisual.com/kit.md
+    import { caisual } from '/__caisual/kit/v1.js';
+
+    const c = await caisual.connect();
+    const room = c.room.invited
+      ? await c.room.join()
+      : await c.room.create({ mode: null });
+    globalThis.room = room;
+    const invite = room.invite();
+    document.getElementById('invite').textContent = \`Invite: \${invite.url}\`;
+
+    const show = () => {
+      document.getElementById('status').textContent = \`Room \${room.code}: \${room.status}\`;
+      document.getElementById('players').innerHTML = room.players
+        .map((p) => \`<li>\${p.name}\${p.id === room.host ? ' (host)' : ''}\${p.ready ? ' ready' : ''}</li>\`)
+        .join('');
+      document.getElementById('start').hidden = !(room.status === 'lobby' && room.you === room.host);
+    };
+    show();
+    room.onPlayers(show);
+    room.onStatus(show);
+    room.ready(true);
+    const mic = document.getElementById('mic');
+    const showVoice = () => {
+      mic.textContent = room.voice.state === 'off'
+        ? 'Mic'
+        : room.voice.muted ? 'Unmute' : 'Mute';
+      mic.disabled = room.voice.state === 'joining' || room.voice.state === 'reconnecting';
+      document.getElementById('voice-peers').innerHTML = room.voice.peers
+        .map((peer) => {
+          const player = room.players.find((item) => item.id === peer.id);
+          const name = player?.name ?? peer.id;
+          return \`<li>\${name}: \${peer.speaking ? 'speaking' : peer.muted ? 'muted' : 'quiet'}</li>\`;
+        })
+        .join('');
+    };
+    showVoice();
+    room.voice.onState(showVoice);
+    room.voice.onPeers(showVoice);
+    mic.addEventListener('click', async () => {
+      try {
+        if (room.voice.state === 'off') await room.voice.join();
+        else room.voice.mute(!room.voice.muted);
+      } catch (error) {
+        document.getElementById('messages').textContent +=
+          'Voice: ' + (error instanceof Error ? error.message : String(error)) + '\\n';
+      }
+      showVoice();
+    });
+    document.getElementById('start').addEventListener('click', () => room.start());
+    room.onMessage((message) => {
+      document.getElementById('messages').textContent += JSON.stringify(message) + '\\n';
+    });
+    document.getElementById('send').addEventListener('click', () => {
+      room.send({ text: 'Hello from ' + c.player.name });
+    });
+  </script>
 </body>
 </html>
+`;
+  const server = `import { defineGame } from '@caisual/kit/server';
+
+export default defineGame({
+  tickRate: 0,
+  onMessage(room, _player, message) {
+    room.broadcast(message);
+  },
+});
 `;
   const manifestCreated = await writeNewFile(manifestPath, `${JSON.stringify(manifest, null, 2)}
 `);
-  const indexCreated = await writeNewFile(indexPath, index);
+  const indexCreated = await writeNewFile(
+    indexPath,
+    multiplayer ? multiplayerIndex : singlePlayerIndex
+  );
   process.stdout.write(`${manifestCreated ? "Created" : "Kept"} ${manifestPath}
 `);
   process.stdout.write(`${indexCreated ? "Created" : "Kept"} ${indexPath}
 `);
+  if (multiplayer) {
+    const serverPath = join2(root, "server.js");
+    const serverCreated = await writeNewFile(serverPath, server);
+    process.stdout.write(`${serverCreated ? "Created" : "Kept"} ${serverPath}
+`);
+  }
 }
 async function sha256(path) {
-  const hash = createHash("sha256");
+  const hash = createHash3("sha256");
   for await (const chunk of createReadStream(path)) hash.update(chunk);
   return hash.digest("hex");
 }
@@ -522,19 +3583,19 @@ async function mapLimited(items, limit, operation) {
 async function listClientFiles(clientRoot) {
   let rootStat;
   try {
-    rootStat = await fs.stat(clientRoot);
+    rootStat = await fs2.stat(clientRoot);
   } catch {
     throw new CliError(2, "client/: folder not found.");
   }
   if (!rootStat.isDirectory()) throw new CliError(2, "client/: must be a folder.");
   const found = [];
   async function visit(folder, prefix) {
-    const entries = await fs.readdir(folder, { withFileTypes: true });
+    const entries = await fs2.readdir(folder, { withFileTypes: true });
     entries.sort((left, right) => left.name < right.name ? -1 : left.name > right.name ? 1 : 0);
     for (const entry of entries) {
       if (entry.name.startsWith(".") || entry.name === "node_modules") continue;
       const relativePath = prefix === "" ? entry.name : `${prefix}/${entry.name}`;
-      const absolutePath = join(folder, entry.name);
+      const absolutePath = join2(folder, entry.name);
       if (entry.isDirectory()) {
         await visit(absolutePath, relativePath);
         continue;
@@ -542,7 +3603,7 @@ async function listClientFiles(clientRoot) {
       if (!entry.isFile()) {
         throw new CliError(2, `${relativePath}: only regular files are supported.`);
       }
-      const fileStat = await fs.stat(absolutePath);
+      const fileStat = await fs2.stat(absolutePath);
       if (fileStat.size > MAX_FILE_BYTES) {
         throw new CliError(2, `${relativePath}: file is larger than 50 MB (${fileStat.size} bytes).`);
       }
@@ -565,6 +3626,34 @@ async function listClientFiles(clientRoot) {
     sha256: await sha256(file.absolutePath)
   }));
 }
+async function readServerFile(root) {
+  const absolutePath = join2(root, "server.js");
+  let stat;
+  try {
+    stat = await fs2.lstat(absolutePath);
+  } catch (error) {
+    if (error.code === "ENOENT") return null;
+    throw new CliError(2, "server.js: file not readable.");
+  }
+  if (!stat.isFile()) throw new CliError(2, "server.js: must be a regular file.");
+  let source;
+  try {
+    source = await fs2.readFile(absolutePath, "utf8");
+  } catch {
+    throw new CliError(2, "server.js: file not readable.");
+  }
+  const result = validaServerJs(source);
+  if (!result.ok) {
+    throw new CliError(2, `server.js is not valid:
+${result.errori.map((error) => `- ${error}`).join("\n")}`);
+  }
+  return {
+    path: "server.js",
+    absolutePath,
+    bytes: stat.size,
+    sha256: await sha256(absolutePath)
+  };
+}
 function portalOrigin() {
   const raw = process.env.CAISUAL_ORIGIN?.trim() || DEFAULT_ORIGIN;
   let url;
@@ -578,7 +3667,7 @@ function portalOrigin() {
   }
   return url.origin;
 }
-function object(value) {
+function object2(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value) ? value : null;
 }
 async function apiError(response) {
@@ -588,8 +3677,8 @@ async function apiError(response) {
   } catch {
     payload = null;
   }
-  const envelope = object(payload);
-  const detail = object(envelope?.error);
+  const envelope = object2(payload);
+  const detail = object2(envelope?.error);
   const message = typeof detail?.message === "string" ? detail.message : `The portal returned HTTP ${response.status}.`;
   const code = typeof detail?.code === "string" ? detail.code : "http_error";
   const hints = Array.isArray(detail?.hints) ? detail.hints.filter((hint) => typeof hint === "string") : [];
@@ -610,11 +3699,11 @@ async function requestJson(url, init2) {
   } catch {
     throw new CliError(1, "The portal returned an invalid JSON response.");
   }
-  const result = object(payload);
+  const result = object2(payload);
   if (result === null) throw new CliError(1, "The portal returned an invalid JSON response.");
   return result;
 }
-function contentType(path) {
+function contentType2(path) {
   const types = {
     ".aac": "audio/aac",
     ".avif": "image/avif",
@@ -653,7 +3742,7 @@ function contentType(path) {
     ".xml": "application/xml; charset=utf-8",
     ".zip": "application/zip"
   };
-  return types[extname(path).toLowerCase()] ?? "application/octet-stream";
+  return types[extname2(path).toLowerCase()] ?? "application/octet-stream";
 }
 function progressLine(path, sent, total, retry) {
   const percentage = total === 0 ? 100 : Math.min(100, Math.floor(sent / total * 100));
@@ -697,7 +3786,7 @@ async function uploadFile(file, target, key, origin) {
         method: "PUT",
         headers: {
           Authorization: `Bearer ${key}`,
-          "Content-Type": contentType(file.path),
+          "Content-Type": contentType2(file.path),
           "Content-Length": String(file.bytes)
         },
         body: uploadBody(file, retry),
@@ -722,14 +3811,14 @@ async function uploadFile(file, target, key, origin) {
     await sleep(100 * 2 ** retry);
   }
 }
-function parseUploads(payload, files) {
+function parseUploads(payload, files, server) {
   const versionId = payload.versionId;
   if (!Number.isSafeInteger(versionId) || versionId <= 0 || !Array.isArray(payload.uploads)) {
     throw new CliError(1, "The portal returned an invalid version response.");
   }
   const byPath = /* @__PURE__ */ new Map();
   for (const raw of payload.uploads) {
-    const target = object(raw);
+    const target = object2(raw);
     if (typeof target?.path !== "string" || typeof target.url !== "string" || target.method !== "PUT") {
       throw new CliError(1, "The portal returned an invalid upload target.");
     }
@@ -742,17 +3831,28 @@ function parseUploads(payload, files) {
     return target;
   });
   if (byPath.size !== files.length) throw new CliError(1, "The portal returned an upload URL for an unknown file.");
+  const rawServerTarget = object2(payload.serverUpload);
+  let serverTarget = null;
+  if (server !== null) {
+    if (typeof rawServerTarget?.url !== "string" || rawServerTarget.method !== "PUT") {
+      throw new CliError(1, "The portal did not return an upload URL for server.js.");
+    }
+    serverTarget = { url: rawServerTarget.url, method: "PUT" };
+  } else if (payload.serverUpload !== void 0 && payload.serverUpload !== null) {
+    throw new CliError(1, "The portal returned an unexpected upload URL for server.js.");
+  }
   return {
     versionId,
     n: Number.isSafeInteger(payload.n) ? payload.n : null,
-    targets
+    targets,
+    serverTarget
   };
 }
 async function readManifest(root) {
-  const path = join(root, "caisual.json");
+  const path = join2(root, "caisual.json");
   let source;
   try {
-    source = await fs.readFile(path, "utf8");
+    source = await fs2.readFile(path, "utf8");
   } catch {
     throw new CliError(2, "caisual.json: file not found or unreadable.");
   }
@@ -770,17 +3870,19 @@ ${result.errori.map((error) => `- ${error}`).join("\n")}`);
   return result.manifest;
 }
 async function publish(folderArgument) {
-  const root = resolve(process.cwd(), folderArgument);
+  const root = resolve2(process.cwd(), folderArgument);
   let rootStat;
   try {
-    rootStat = await fs.stat(root);
+    rootStat = await fs2.stat(root);
   } catch {
     throw new CliError(2, `The game folder was not found: ${root}`);
   }
   if (!rootStat.isDirectory()) throw new CliError(2, `The game path is not a folder: ${root}`);
-  if (await exists(join(root, "server.js"))) throw new CliError(2, SERVER_MESSAGE);
   const manifest = await readManifest(root);
-  const files = await listClientFiles(join(root, "client"));
+  const [files, server] = await Promise.all([
+    listClientFiles(join2(root, "client")),
+    readServerFile(root)
+  ]);
   const filePaths = new Set(files.map((file) => file.path));
   for (const required of [manifest.cover, ...manifest.screenshots]) {
     if (required !== null && !filePaths.has(required)) {
@@ -797,19 +3899,37 @@ async function publish(folderArgument) {
     bytes,
     sha256: digest
   }));
-  process.stdout.write(`Preparing ${files.length} file${files.length === 1 ? "" : "s"}.
-`);
+  process.stdout.write(
+    `Preparing ${files.length} client file${files.length === 1 ? "" : "s"}${server === null ? "" : " and server.js"}.
+`
+  );
   const opened = await requestJson(`${origin}/api/versions`, {
     method: "POST",
     headers: {
       Authorization: `Bearer ${key}`,
       "Content-Type": "application/json; charset=utf-8"
     },
-    body: JSON.stringify({ manifest, files: declared })
+    body: JSON.stringify({
+      manifest,
+      files: declared,
+      ...server === null ? {} : {
+        server: { bytes: server.bytes, sha256: server.sha256 }
+      }
+    })
   });
-  const version = parseUploads(opened, files);
-  await mapLimited(files, UPLOAD_CONCURRENCY, async (file, index) => {
-    await uploadFile(file, version.targets[index], key, origin);
+  const version = parseUploads(opened, files, server);
+  const caricamenti = files.map((file, index) => ({
+    file,
+    target: version.targets[index]
+  }));
+  if (server !== null && version.serverTarget !== null) {
+    caricamenti.push({
+      file: server,
+      target: { path: "server.js", ...version.serverTarget }
+    });
+  }
+  await mapLimited(caricamenti, UPLOAD_CONCURRENCY, async ({ file, target }) => {
+    await uploadFile(file, target, key, origin);
   });
   const completed = await requestJson(`${origin}/api/versions/${version.versionId}/complete`, {
     method: "POST",
@@ -825,33 +3945,35 @@ async function publish(folderArgument) {
 }
 async function installSkill() {
   const root = process.cwd();
-  const skillPath = join(root, ".claude", "skills", "caisual", "SKILL.md");
+  const skillPath = join2(root, ".claude", "skills", "caisual", "SKILL.md");
   const skill = `---
 name: caisual
-description: Create and publish a browser game on Caisual.
+description: Create and publish a browser game on Caisual, with player identity, cloud saves, leaderboards and a daily challenge.
 ---
 
 ${publish_default.trim()}
+
+${kit_default.trim()}
 `;
-  await fs.mkdir(join(root, ".claude", "skills", "caisual"), { recursive: true });
+  await fs2.mkdir(join2(root, ".claude", "skills", "caisual"), { recursive: true });
   let currentSkill = null;
   try {
-    currentSkill = await fs.readFile(skillPath, "utf8");
+    currentSkill = await fs2.readFile(skillPath, "utf8");
   } catch (error) {
     if (error.code !== "ENOENT") throw error;
   }
-  if (currentSkill !== skill) await fs.writeFile(skillPath, skill, "utf8");
-  const agentsPath = join(root, "AGENTS.md");
+  if (currentSkill !== skill) await fs2.writeFile(skillPath, skill, "utf8");
+  const agentsPath = join2(root, "AGENTS.md");
   let agents = "";
   try {
-    agents = await fs.readFile(agentsPath, "utf8");
+    agents = await fs2.readFile(agentsPath, "utf8");
   } catch (error) {
     if (error.code !== "ENOENT") throw error;
   }
   if (!/^## Caisual\s*$/m.test(agents)) {
-    const section = "## Caisual\nRead `.claude/skills/caisual/SKILL.md` before creating or publishing a Caisual game.\nUse the current guide at https://caisual.com/publish.md.\n";
+    const section = "## Caisual\nRead `.claude/skills/caisual/SKILL.md` before creating or publishing a Caisual game.\nUse the current guides at https://caisual.com/publish.md and https://caisual.com/kit.md.\n";
     const separator = agents === "" ? "" : agents.endsWith("\n\n") ? "" : agents.endsWith("\n") ? "\n" : "\n\n";
-    await fs.writeFile(agentsPath, `${agents}${separator}${section}`, "utf8");
+    await fs2.writeFile(agentsPath, `${agents}${separator}${section}`, "utf8");
   }
   process.stdout.write(`Installed ${skillPath}
 `);
@@ -863,13 +3985,17 @@ async function run(argumentsList) {
     return;
   }
   if (command === "--version" || command === "-V") {
-    process.stdout.write(`${"0.1.0"}
+    process.stdout.write(`${"0.3.0"}
 `);
     return;
   }
   if (command === "init") {
-    if (argumentsAfterCommand.length > 1) throw new CliError(1, "Usage: caisual init [folder]");
-    await init(argumentsAfterCommand[0] ?? ".");
+    const multiplayer = argumentsAfterCommand.includes("--multiplayer");
+    const cartelle = argumentsAfterCommand.filter((value) => value !== "--multiplayer");
+    if (cartelle.length > 1 || cartelle.some((value) => value.startsWith("-"))) {
+      throw new CliError(1, "Usage: caisual init [--multiplayer] [folder]");
+    }
+    await init(cartelle[0] ?? ".", multiplayer);
     return;
   }
   if (command === "publish") {
@@ -877,6 +4003,35 @@ async function run(argumentsList) {
     await publish(argumentsAfterCommand[0] ?? ".");
     return;
   }
+  if (command === "dev") {
+    let folder = ".";
+    let port = 8790;
+    let folderSeen = false;
+    for (let index = 0; index < argumentsAfterCommand.length; index += 1) {
+      const argument = argumentsAfterCommand[index];
+      if (argument === "--port") {
+        const value = argumentsAfterCommand[index + 1];
+        if (value === void 0) throw new CliError(1, "Usage: caisual dev [folder] [--port 8790]");
+        port = Number(value);
+        index += 1;
+        continue;
+      }
+      if (argument.startsWith("--port=")) {
+        port = Number(argument.slice("--port=".length));
+        continue;
+      }
+      if (argument.startsWith("-") || folderSeen) {
+        throw new CliError(1, "Usage: caisual dev [folder] [--port 8790]");
+      }
+      folder = argument;
+      folderSeen = true;
+    }
+    if (!Number.isInteger(port) || port < 1 || port > 65535) {
+      throw new CliError(1, "--port must be an integer from 1 to 65535.");
+    }
+    await runDev({ folder, port });
+    return;
+  }
   if (command === "skill") {
     if (argumentsAfterCommand.length > 0) throw new CliError(1, "Usage: caisual skill");
     await installSkill();