@nano133/nanoterra 0.4.0 → 0.6.0

package/dist/looks/look.d.ts

@@ -1,6 +1,12 @@
 /** The hats that the starter's character can wear. */
 export declare const HATS: readonly ["cap", "beanie", "crown", "tophat"];
 export type Hat = (typeof HATS)[number];
+/** What an outfit changes: the body's colour, and a hat in its colour. */
+export type Change = {
+    body: string;
+    hat?: Hat;
+    hatColor?: string;
+};
 export type Look = {
     /** 1 to 40 lowercase letters, digits or dashes: "mint-cap". Never change the id of a look that someone owns. */
     id: string;
@@ -8,11 +14,14 @@ export type Look = {
     name: string;
     /** The price in US dollars with at most 2 decimals, for example 0.25. 0 means free for everyone. */
     priceUsd: number;
-    change: {
-        body: string;
-        hat?: Hat;
-        hatColor?: string;
-    };
+    /**
+     * The wear slot that the look fills: none (or "outfit") for an outfit, or a slot of the game's own ("shovel", "charm"): 1 to 24 lowercase letters, digits
+     * or dashes, starting with a letter. A player wears one look in each slot. Never change the slot of a look that someone owns. `checkLooks` leaves it out
+     * for an outfit.
+     */
+    wear?: string;
+    /** What an outfit changes (an outfit must have it; an item of another slot must not: `isOutfit`). */
+    change?: Change;
     /**
      * What a game defines for itself: up to 8 slots, each a name and a value, that the game's own code reads ("wings": "ember", "trail": "#ffcf5a"). A name is 1 to 24
      * lowercase letters, digits or dashes, starting with a letter; a value is a word (1 to 40 lowercase letters, digits or dashes) or a colour ("#rrggbb"). Optional: a look
@@ -23,6 +32,8 @@ export type Look = {
 /** The slots of a look: names and values, words or colours. */
 export type Slots = Record<string, string>;
 export declare const ID_PATTERN: RegExp;
+/** The wear slot of an outfit (the character's own look). A look with no `wear` is an outfit too. */
+export declare const OUTFIT = "outfit";
 export declare const COLOR_PATTERN: RegExp;
 /** At most this many slots on a look. */
 export declare const SLOTS_MAX = 8;
@@ -38,7 +49,10 @@ export declare const PRICE_MAX_USD = 1000;
 export type Problem = {
     /** The place of the look in the list, from 1, or null for a mistake of the whole list. */
     look: number | null;
-    /** The field: "list", "id", "name", "priceUsd", "change.body", "change.hat", "change.hatColor", "slots", "slots.<name>" or "free". (The change rules also use "slots" for a slot that changed on a look that players own.) */
+    /**
+     * The field: "list", "id", "name", "priceUsd", "wear", "change", "change.body", "change.hat", "change.hatColor", "slots", "slots.<name>" or "free". (The change
+     * rules also use "slots" and "wear" for a slot or a wear slot that changed on a look that players own.)
+     */
     field: string;
     message: string;
 };
@@ -60,3 +74,9 @@ export declare function cleanSlots(slots: Slots | undefined): Slots | undefined;
 export declare function checkLooks(rawInput: unknown): Look[];
 /** "$0.25" */
 export declare const usdText: (usd: number) => string;
+/** The wear slot that a look fills: OUTFIT for an outfit (no `wear`), or the game's own slot. */
+export declare const wearOf: (l: Pick<Look, "wear">) => string;
+/** Whether a look is an outfit (the character's own look, with its `change`), not an item of another wear slot. */
+export declare const isOutfit: (l: Look) => l is Look & {
+    change: Change;
+};

package/dist/looks/look.js

@@ -1,8 +1,14 @@
 // The look: one thing a player can buy to change how their character looks. The rules are the game starter's (looks.json): a look only
 // changes how the character looks, it is never random and it never changes a score, a speed or a rule.
+//
+// A look fills one WEAR SLOT. An outfit (no `wear`, or "outfit") is the character's own look: its body colour and its hat (`change`); a player wears one
+// outfit. Every other wear slot is the game's own (a tool's skin, a charm, a trail: "shovel", "charm"): an item there has no `change` (the game reads what
+// it is from its id or its `slots`), and a player wears one item in each slot, beside the outfit.
 /** The hats that the starter's character can wear. */
 export const HATS = ["cap", "beanie", "crown", "tophat"];
 export const ID_PATTERN = /^[a-z0-9-]{1,40}$/;
+/** The wear slot of an outfit (the character's own look). A look with no `wear` is an outfit too. */
+export const OUTFIT = "outfit";
 export const COLOR_PATTERN = /^#[0-9a-f]{6}$/i;
 /** At most this many slots on a look. */
 export const SLOTS_MAX = 8;
@@ -27,7 +33,7 @@ export function lookProblems(raw) {
     if (!Array.isArray(raw) || raw.length === 0)
         return [{ look: null, field: "list", message: "looks.json must be a list with at least one look" }];
     const seen = new Set();
-    let free = false;
+    let freeOutfit = false;
     raw.forEach((l, i) => {
         const where = `looks.json, look ${i + 1}`;
         const v = (l ?? {});
@@ -44,19 +50,32 @@ export function lookProblems(raw) {
             add("priceUsd", '"priceUsd" must be a number from 0 to 1000');
         else if (!wholeCents(v.priceUsd))
             add("priceUsd", '"priceUsd" can have at most 2 decimals (cents)');
-        else if (v.priceUsd === 0)
-            free = true;
-        if (typeof v.change?.body !== "string" || !COLOR_PATTERN.test(v.change.body))
-            add("change.body", '"change.body" must be a colour like "#4aa8ff"');
-        if (v.change?.hat !== undefined && !HATS.includes(v.change.hat))
-            add("change.hat", `"change.hat" must be one of ${HATS.join(", ")}`);
-        if (v.change?.hatColor !== undefined && (typeof v.change.hatColor !== "string" || !COLOR_PATTERN.test(v.change.hatColor)))
-            add("change.hatColor", '"change.hatColor" must be a colour like "#1c6e4f"');
+        const wearOk = v.wear === undefined || (typeof v.wear === "string" && SLOT_NAME_PATTERN.test(v.wear) && !RESERVED_SLOT_NAMES.includes(v.wear));
+        if (!wearOk)
+            add("wear", `"wear" must be "${OUTFIT}" or the name of a wear slot: 1 to 24 lowercase letters, digits or dashes, starting with a letter ("shovel")`);
+        const outfit = v.wear === undefined || v.wear === OUTFIT;
+        if (outfit) {
+            if (typeof v.change?.body !== "string" || !COLOR_PATTERN.test(v.change.body))
+                add("change.body", '"change.body" must be a colour like "#4aa8ff"');
+            if (v.change?.hat !== undefined && !HATS.includes(v.change.hat))
+                add("change.hat", `"change.hat" must be one of ${HATS.join(", ")}`);
+            if (v.change?.hatColor !== undefined && (typeof v.change.hatColor !== "string" || !COLOR_PATTERN.test(v.change.hatColor)))
+                add("change.hatColor", '"change.hatColor" must be a colour like "#1c6e4f"');
+            if (v.priceUsd === 0)
+                freeOutfit = true;
+        }
+        else if (wearOk && v.change !== undefined)
+            add("change", `"change" is only for an outfit: a look worn in the "${v.wear}" slot does not change the body (remove "change")`);
         if (v.slots !== undefined)
             slotProblems(v.slots).forEach((s) => add(s.field, s.message));
     });
-    if (!out.length && !free)
-        out.push({ look: null, field: "free", message: "looks.json needs at least one free look (priceUsd 0): every player starts with it" });
+    // the starter's words for a list of outfits only; a list with items says that an item does not count
+    const items = raw.some((l) => {
+        const w = l?.wear;
+        return w !== undefined && w !== OUTFIT;
+    });
+    if (!out.length && !freeOutfit)
+        out.push({ look: null, field: "free", message: items ? 'looks.json needs at least one free outfit (priceUsd 0, and no "wear"): every player starts with it' : "looks.json needs at least one free look (priceUsd 0): every player starts with it" });
     return out;
 }
 /** Whether `v` is a plain object (not null, not a list, not a class instance). */
@@ -106,8 +125,14 @@ export function checkLooks(rawInput) {
         throw new Error(first.message);
     return raw.map((l) => {
         const slots = cleanSlots(l.slots);
-        return { id: l.id, name: l.name, priceUsd: l.priceUsd, change: { body: l.change.body, hat: l.change.hat, hatColor: l.change.hatColor }, ...(slots ? { slots } : {}) };
+        const wear = wearOf(l);
+        const change = isOutfit(l) ? { change: { body: l.change.body, hat: l.change.hat, hatColor: l.change.hatColor } } : {};
+        return { id: l.id, name: l.name, priceUsd: l.priceUsd, ...(wear === OUTFIT ? {} : { wear }), ...change, ...(slots ? { slots } : {}) };
     });
 }
 /** "$0.25" */
 export const usdText = (usd) => `$${usd.toFixed(2)}`;
+/** The wear slot that a look fills: OUTFIT for an outfit (no `wear`), or the game's own slot. */
+export const wearOf = (l) => l.wear ?? OUTFIT;
+/** Whether a look is an outfit (the character's own look, with its `change`), not an item of another wear slot. */
+export const isOutfit = (l) => wearOf(l) === OUTFIT && l.change !== undefined;

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@nano133/nanoterra",
-  "version": "0.4.0",
-  "description": "Nanoterra for a creator's game, in one package: the player's sign-in ticket, the player's character (a toon body on the island's skeleton) and the looks ladder.",
+  "version": "0.6.0",
+  "description": "Nanoterra for a creator's game, in one package: the player's sign-in ticket, the player's character (a toon body on the island's skeleton), the looks ladder, the admin and the friends list.",
   "type": "module",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -18,7 +18,14 @@
     "./admin/d1": { "types": "./dist/admin/adapters/d1.d.ts", "import": "./dist/admin/adapters/d1.js" },
     "./admin/firestore": { "types": "./dist/admin/adapters/firestore.d.ts", "import": "./dist/admin/adapters/firestore.js" },
     "./admin/panel": { "types": "./dist/admin/panel/index.d.ts", "import": "./dist/admin/panel/index.js" },
-    "./admin/style.css": "./src/admin/panel/style.css"
+    "./admin/style.css": "./src/admin/panel/style.css",
+    "./friends": { "types": "./dist/friends/index.d.ts", "import": "./dist/friends/index.js" },
+    "./friends/conformance": { "types": "./dist/friends/conformance.d.ts", "import": "./dist/friends/conformance.js" },
+    "./friends/d1": { "types": "./dist/friends/adapters/d1.d.ts", "import": "./dist/friends/adapters/d1.js" },
+    "./friends/d1.sql": "./src/friends/adapters/d1.sql",
+    "./friends/firestore": { "types": "./dist/friends/adapters/firestore.d.ts", "import": "./dist/friends/adapters/firestore.js" },
+    "./friends/panel": { "types": "./dist/friends/panel/index.d.ts", "import": "./dist/friends/panel/index.js" },
+    "./friends/style.css": "./src/friends/panel/style.css"
   },
   "sideEffects": false,
   "files": ["dist", "src", "README.md", "CHANGELOG.md", "LICENSE", "ai"],
@@ -46,5 +53,5 @@
   },
   "homepage": "https://nano133.com/build/nanoterra",
   "license": "MIT",
-  "keywords": ["nano", "gltf", "glb", "model check", "xno", "nanoterra", "sign in", "ticket", "character", "avatar", "three", "three.js", "toon", "looks", "cosmetics"]
+  "keywords": ["nano", "gltf", "glb", "model check", "xno", "nanoterra", "sign in", "ticket", "character", "avatar", "three", "three.js", "toon", "looks", "cosmetics", "friends", "friends list"]
 }

package/src/admin/adapters/d1.ts

@@ -1,5 +1,5 @@
 // The admin store for a game on Cloudflare D1, with the tables of the game starter (migrations/0001_init.sql): `meta`, `orders` and `owned`.
-// It writes ONLY the two settings (`setting:character`, `setting:signin` in `meta`); everything else it does is a read, except when the game turns the sign-in list on
+// It writes ONLY the three settings (`setting:character`, `setting:signin`, `setting:friends` in `meta`); everything else it does is a read, except when the game turns the sign-in list on
 // (`logins: true`): then the one other write is `DELETE FROM sessions WHERE scope = 'admin'` ("sign out everywhere").
 //
 //   import { createD1Store } from "@nano133/nanoterra/admin/d1";
@@ -21,7 +21,7 @@ export interface D1Like {
   batch(statements: D1StatementLike[]): Promise<unknown[]>;
 }
 
-export const D1_KEYS = { character: "setting:character", signin: "setting:signin" } as const;
+export const D1_KEYS = { character: "setting:character", signin: "setting:signin", friends: "setting:friends" } as const;
 
 type Row = { id: string; player: string; look_id: string; usd: string; amount: string; status: string; created_at: number; expires_at: number; paid_at: number | null; payer: string | null; hash: string | null };
 
@@ -34,9 +34,9 @@ type Row = { id: string; player: string; look_id: string; usd: string; amount: s
 export function createD1Store(db: D1Like, options: { logins?: boolean } = {}): AdminStore {
   const store: AdminStore = {
     async readSettings() {
-      const rows = (await db.prepare("SELECT key, value FROM meta WHERE key IN (?, ?)").bind(D1_KEYS.character, D1_KEYS.signin).all<{ key: string; value: string }>()).results;
+      const rows = (await db.prepare("SELECT key, value FROM meta WHERE key IN (?, ?, ?)").bind(D1_KEYS.character, D1_KEYS.signin, D1_KEYS.friends).all<{ key: string; value: string }>()).results;
       const row = (key: string) => rows.find((r) => r.key === key)?.value;
-      return { character: row(D1_KEYS.character), signin: row(D1_KEYS.signin) };
+      return { character: row(D1_KEYS.character), signin: row(D1_KEYS.signin), friends: row(D1_KEYS.friends) };
     },
 
     async saveSettings(patch: GamePatch, now: number) {
@@ -45,6 +45,7 @@ export function createD1Store(db: D1Like, options: { logins?: boolean } = {}): A
       const batch = [];
       if (patch.character) batch.push(write(D1_KEYS.character, patch.character));
       if (patch.signin) batch.push(write(D1_KEYS.signin, patch.signin));
+      if (patch.friends) batch.push(write(D1_KEYS.friends, patch.friends));
       if (batch.length) await db.batch(batch);
     },
 

package/src/admin/adapters/firestore.ts

@@ -1,8 +1,8 @@
 // The admin store for a game on Firestore (the Admin SDK). The package has no Firebase dependency: the adapter uses the small interface below, which the
-// Admin SDK's `Firestore` fits. It writes ONLY the two settings; everything else it does is a read.
+// Admin SDK's `Firestore` fits. It writes ONLY the three settings; everything else it does is a read.
 //
 // The data model (the names a game must have; only the three collection names can be changed):
-//   meta/{key}          { value: string, at: number }          keys "setting:character", "setting:signin", "rate" (value is JSON { usd, sources })
+//   meta/{key}          { value: string, at: number }          keys "setting:character", "setting:signin", "setting:friends", "rate" (value is JSON { usd, sources })
 //   orders/{id}         { player, lookId, usd, amount, status, createdAt, expiresAt, paidAt, payer, hash }   `amount` is the raw amount as text
 //   owned/{player__lookId}  { player, lookId, orderId, grantedAt }
 //
@@ -33,7 +33,7 @@ export interface FirestoreLike {
 }
 
 export const FIRESTORE_SCAN_LIMIT = 5000;
-export const FIRESTORE_KEYS = { character: "setting:character", signin: "setting:signin" } as const;
+export const FIRESTORE_KEYS = { character: "setting:character", signin: "setting:signin", friends: "setting:friends" } as const;
 
 const text = (v: unknown, fallback = ""): string => (typeof v === "string" ? v : fallback);
 const num = (v: unknown, fallback = 0): number => (typeof v === "number" && Number.isFinite(v) ? v : fallback);
@@ -49,8 +49,8 @@ export function createFirestoreStore(db: FirestoreLike, collections: { meta?: st
   };
   return {
     async readSettings() {
-      const [character, signin] = await Promise.all([valueOf(FIRESTORE_KEYS.character), valueOf(FIRESTORE_KEYS.signin)]);
-      return { character: character?.value, signin: signin?.value };
+      const [character, signin, friends] = await Promise.all([valueOf(FIRESTORE_KEYS.character), valueOf(FIRESTORE_KEYS.signin), valueOf(FIRESTORE_KEYS.friends)]);
+      return { character: character?.value, signin: signin?.value, friends: friends?.value };
     },
 
     async saveSettings(patch: GamePatch, now: number) {
@@ -58,6 +58,7 @@ export function createFirestoreStore(db: FirestoreLike, collections: { meta?: st
       let n = 0;
       if (patch.character) (batch.set(db.collection(meta).doc(FIRESTORE_KEYS.character), { value: patch.character, at: now }), n++);
       if (patch.signin) (batch.set(db.collection(meta).doc(FIRESTORE_KEYS.signin), { value: patch.signin, at: now }), n++);
+      if (patch.friends) (batch.set(db.collection(meta).doc(FIRESTORE_KEYS.friends), { value: patch.friends, at: now }), n++);
       if (n) await batch.commit();
     },
 

package/src/admin/conformance.ts

@@ -97,7 +97,7 @@ async function read(res: Response): Promise<{ status: number; text: string; json
 const REFUSAL_KEYS = new Set(["error", "reason", "signedInAs"]);
 
 /** Words of the game's data that a refusal or an answer to a visitor must never hold. */
-const DATA_WORDS = /"orders"|"players"|"totals"|"counts"|"character"|"signin"|"warnings"/;
+const DATA_WORDS = /"orders"|"players"|"totals"|"counts"|"character"|"signin"|"friends"|"warnings"/;
 
 export function adminConformance(host: ConformanceHost): ConformanceCase[] {
   const cases: ConformanceCase[] = [];
@@ -332,7 +332,7 @@ export function adminConformance(host: ConformanceHost): ConformanceCase[] {
 export type StoreHarness = {
   store: AdminStore;
   seed(data: { orders?: OrderRow[]; owned?: { player: string; lookId: string; at: number }[]; rate?: { value: string; at: number } }): Promise<void>;
-  /** Every row that the store could change by mistake, as one text: the orders, the owned looks and the meta rows that are NOT the two settings. Same rows, same text. */
+  /** Every row that the store could change by mistake, as one text: the orders, the owned looks and the meta rows that are NOT the three settings. Same rows, same text. */
   snapshot(): Promise<string>;
   /** Only for a store with `recentLogins` and `signOutEverywhere`: put admin sign-ins in the game's database (the store only reads them). */
   seedLogins?(rows: { at: number; country: string | null; browser: string }[]): Promise<void>;
@@ -358,7 +358,16 @@ export function adminStoreConformance(make: () => Promise<StoreHarness>): Confor
 
   add("a new store has no settings of its own", async ({ store }) => {
     const s = await store.readSettings();
-    check(s.character === undefined && s.signin === undefined, `expected no settings, got ${JSON.stringify(s)}`);
+    check(s.character === undefined && s.signin === undefined && s.friends === undefined, `expected no settings, got ${JSON.stringify(s)}`);
+  });
+
+  add("the friends list is kept as its own setting: each of its three words, and a patch of it leaves the other two", async ({ store }) => {
+    await store.saveSettings({ signin: "none", character: "own" }, NOW);
+    for (const [i, friends] of (["own", "off", "nanoterra"] as const).entries()) {
+      await store.saveSettings({ friends }, NOW + 1 + i);
+      const s = await store.readSettings();
+      check(s.friends === friends && s.signin === "none" && s.character === "own", `after friends ${friends}: ${JSON.stringify(s)}`);
+    }
   });
 
   add("a patch saves only what it names; the next patch keeps the rest", async ({ store }) => {
@@ -376,13 +385,13 @@ export function adminStoreConformance(make: () => Promise<StoreHarness>): Confor
   add("an empty patch writes nothing and does not fail", async ({ store }) => {
     await store.saveSettings({}, NOW);
     const s = await store.readSettings();
-    check(s.character === undefined && s.signin === undefined, "an empty patch must save nothing");
+    check(s.character === undefined && s.signin === undefined && s.friends === undefined, "an empty patch must save nothing");
   });
 
-  add("saving changes nothing but the two settings: no order, no owned look, no other meta row", async (h) => {
+  add("saving changes nothing but the settings: no order, no owned look, no other meta row", async (h) => {
     await h.seed({ orders: [order("1", {}), order("2", { status: "open" })], owned: [{ player: A, lookId: "mint-cap", at: NOW }], rate: { value: JSON.stringify({ usd: 1.2, sources: ["x"] }), at: NOW } });
     const before = await h.snapshot();
-    await h.store.saveSettings({ character: "own", signin: "none" }, NOW + 5);
+    await h.store.saveSettings({ character: "own", signin: "none", friends: "off" }, NOW + 5);
     check((await h.snapshot()) === before, "the rows of the game changed after saving the settings");
   });
 

package/src/admin/handler.ts

@@ -1,8 +1,8 @@
 // The admin handler: the routes of /admin on the Web `Request` and `Response` types, so it fits a Worker, Firebase Functions and Node.
 //
 //   GET  {base}/summary   the numbers: status, orders, the looks that players own
-//   GET  {base}/game      the two switches
-//   POST {base}/game      a press: { character } or { signin } (only the two known words)
+//   GET  {base}/game      the game switches
+//   POST {base}/game      a press: { character }, { signin } or { friends } (only the known words)
 //   POST {base}/check     the payment check, when the game gives one
 //
 // EVERY request under the base goes through `adminAccess` first, before the route is even looked up: a visitor who is not the owner gets 401 or 403
@@ -190,7 +190,7 @@ export function createAdminHandler(options: AdminHandlerOptions): AdminHandler {
   return { routes, basePath: options.basePath ?? "/api/admin", handle };
 }
 
-/** The settings as the game's own routes need them (the listing file, the character): the stored words, or the game's defaults. A fault in the store gives the defaults. */
+/** The settings as the game's own routes need them (the listing file, the character, the friends list): the stored words, or the game's defaults. A fault in the store gives the defaults. */
 export async function loadGameSettings(store: Pick<AdminStore, "readSettings">, defaults: GameSettings): Promise<GameState> {
   try {
     return mergeSettings(await store.readSettings(), defaults);

package/src/admin/index.ts

@@ -2,7 +2,7 @@
 //
 //   adminAccess            the guard: one pure function, who may open /admin
 //   createAdminHandler     the routes, on Request and Response
-//   loadGameSettings       the two switches for the game's own routes
+//   loadGameSettings       the game switches for the game's own routes
 //   createMemoryStore      a store in memory, for tests
 //   (the conformance suite is its own path: "@nano133/nanoterra/admin/conformance"; the adapters are "/admin/d1" and "/admin/firestore")
 
@@ -17,5 +17,5 @@ export type { AdminLogin, AdminOrder, AdminPlayer, AdminStatus, AdminStore, Admi
 export { ORDERS_SHOWN, moneyOf, parseRate, shapeOrders, shapePlayers, statusOf, summarize } from "./summary.js";
 export type { OrderRow } from "./summary.js";
 export { RAW_PER_XNO, xnoText } from "./amount.js";
-export { CHARACTER_NEEDS_SIGNIN, CHARACTER_SIGNIN_OFF, REVIEW_LINK, REVIEW_NOTE, SWITCHES, isCharacter, isSignin, isSigninChoice, mergeSettings, parsePatch, pressOf, signinOn, stateOf } from "./switches.js";
-export type { Character, GamePatch, GameSettings, GameState, Signin, SwitchId } from "./switches.js";
+export { CHARACTER_NEEDS_SIGNIN, CHARACTER_SIGNIN_OFF, DEFAULT_FRIENDS, FRIENDS_CHOICES, FRIENDS_TITLE, REVIEW_LINK, REVIEW_NOTE, SWITCHES, isCharacter, isFriends, isSignin, isSigninChoice, mergeSettings, parsePatch, pressOf, signinOn, stateOf } from "./switches.js";
+export type { Character, Friends, GamePatch, GameSettings, GameState, Signin, SwitchId } from "./switches.js";

package/src/admin/memory.ts

@@ -35,11 +35,12 @@ export function createMemoryStore(seed: { orders?: OrderRow[]; owned?: { player:
     pendingAdminRequests: 0,
     pendingGameRequests: 0,
     async readSettings() {
-      return { character: store.rows.get("setting:character"), signin: store.rows.get("setting:signin") };
+      return { character: store.rows.get("setting:character"), signin: store.rows.get("setting:signin"), friends: store.rows.get("setting:friends") };
     },
     async saveSettings(patch: GamePatch) {
       if (patch.character) store.rows.set("setting:character", patch.character);
       if (patch.signin) store.rows.set("setting:signin", patch.signin);
+      if (patch.friends) store.rows.set("setting:friends", patch.friends);
       store.writes++;
     },
     async summary(now: number): Promise<StoreSummary> {

package/src/admin/panel/gameCard.ts

@@ -1,14 +1,15 @@
-// The "Game" card of /admin: two switches, "Players can play as their Nanoterra character" and "Players can sign in with Nanoterra". A press saves at once
-// (POST {api}/game, behind the same admin guard as every admin call) and the game reads the setting at run time, so the creator pushes and deploys
-// nothing. The words are in ../switches.ts. The card changes ONLY these two settings: never a look, a price or an order.
+// The "Game" card of /admin: two switches, "Players can play as their Nanoterra character" and "Players can sign in with Nanoterra", and one three-way
+// choice, "Friends list: Nanoterra / The game's own / Off". A press saves at once (POST {api}/game, behind the same admin guard as every admin call) and
+// the game reads the setting at run time, so the creator pushes and deploys nothing. The words are in ../switches.ts. The card changes ONLY these three
+// settings: never a look, a price or an order.
 
-import { CHARACTER_NEEDS_SIGNIN, CHARACTER_SIGNIN_OFF, REVIEW_LINK, REVIEW_NOTE, SWITCHES, pressOf, signinOn, stateOf, type GameState, type SwitchId } from "../switches.js";
+import { CHARACTER_NEEDS_SIGNIN, CHARACTER_SIGNIN_OFF, FRIENDS_CHOICES, FRIENDS_TITLE, REVIEW_LINK, REVIEW_NOTE, SWITCHES, pressOf, signinOn, stateOf, type Friends, type GameState, type SwitchId } from "../switches.js";
 import { ApiError, type Api } from "./api.js";
 import { h } from "./dom.js";
 
 /**
  * The card for the settings `initial`. It keeps its own state: a press shows "Saving…", then "Saved." or the server's words. `defaultsFile` is where the game's defaults are
- * written ("game.config.json"). `onChange` hears each saved state (the panel's Overview shows the two switches too).
+ * written ("game.config.json"). `onChange` hears each saved state (the panel's Overview shows the switches too).
  */
 export function gameCard(api: Api, initial: GameState, defaultsFile = "the game's own settings", onChange?: (state: GameState) => void): HTMLElement {
   let state = initial;
@@ -16,7 +17,11 @@ export function gameCard(api: Api, initial: GameState, defaultsFile = "the game'
   /** Under the character switch: it works only through sign-in, so it says so, and says what a player gets while sign-in is Off. */
   const needs = h("p", { class: "fine switch-needs" });
   const card = h("section", { class: "admin-card game-card", "aria-labelledby": "game-title" }, h("div", { class: "card-head" }, h("h2", { id: "game-title" }, "Game")));
-  card.append(h("p", { class: "fine card-intro" }, `Two choices about your game. A press saves at once: you push nothing and deploy nothing. They start from ${defaultsFile}, and a press here wins.`));
+  card.append(h("p", { class: "fine card-intro" }, `Three choices about your game. A press saves at once: you push nothing and deploy nothing. They start from ${defaultsFile}, and a press here wins.`));
+  /** The friends choice: a radio group of three keys (arrow keys move between them, as a radio group does). */
+  const friendsKeys = new Map<Friends, HTMLButtonElement>();
+  const friendsNote = h("p", { class: "switch-note", id: "switch-friends-note" });
+  const friendsStatus = h("span", { class: "fine", role: "status", "aria-live": "polite" });
 
   const draw = () => {
     for (const [id, row] of rows) {
@@ -28,6 +33,29 @@ export function gameCard(api: Api, initial: GameState, defaultsFile = "the game'
     }
     needs.hidden = !stateOf("character", state);
     needs.textContent = signinOn(state.signin) ? CHARACTER_NEEDS_SIGNIN : CHARACTER_SIGNIN_OFF;
+    for (const [id, key] of friendsKeys) {
+      const on = state.friends === id;
+      key.setAttribute("aria-checked", on ? "true" : "false");
+      key.tabIndex = on ? 0 : -1;
+      key.classList.toggle("is-on", on);
+    }
+    friendsNote.textContent = FRIENDS_CHOICES[state.friends]?.note ?? "";
+  };
+
+  const choose = async (id: Friends) => {
+    if (state.friends === id) return;
+    for (const key of friendsKeys.values()) key.disabled = true;
+    friendsStatus.textContent = "Saving…";
+    try {
+      state = await api.post<GameState>("/game", { friends: id });
+      friendsStatus.textContent = "Saved.";
+      draw();
+      onChange?.(state);
+    } catch (e) {
+      friendsStatus.textContent = e instanceof ApiError ? e.message : "The game's server did not answer. Nothing was changed.";
+    } finally {
+      for (const key of friendsKeys.values()) key.disabled = false;
+    }
   };
 
   const press = async (id: SwitchId) => {
@@ -62,6 +90,24 @@ export function gameCard(api: Api, initial: GameState, defaultsFile = "the game'
     // The sign-in word is part of the listing file: Nanoterra's review decides what Nanoterra shows. This page cannot see that review.
     if (id === "signin") card.append(h("p", { class: "fine switch-review" }, REVIEW_NOTE, " ", h("a", { href: REVIEW_LINK, target: "_blank", rel: "noopener noreferrer" }, "Open the launch page")));
   }
+
+  const order = Object.keys(FRIENDS_CHOICES) as Friends[];
+  const group = h("div", { class: "seg friends-choice", role: "radiogroup", "aria-labelledby": "switch-friends-label", "aria-describedby": "switch-friends-note" });
+  for (const id of order) {
+    const key = h("button", { class: "seg-btn", type: "button", role: "radio", "aria-checked": "false", "data-friends": id }, FRIENDS_CHOICES[id].name);
+    key.addEventListener("click", () => void choose(id));
+    key.addEventListener("keydown", (e) => {
+      const step = e.key === "ArrowRight" || e.key === "ArrowDown" ? 1 : e.key === "ArrowLeft" || e.key === "ArrowUp" ? -1 : 0;
+      if (!step) return;
+      e.preventDefault();
+      const next = order[(order.indexOf(id) + step + order.length) % order.length];
+      friendsKeys.get(next)!.focus();
+      void choose(next);
+    });
+    friendsKeys.set(id, key);
+    group.append(key);
+  }
+  card.append(h("div", { class: "switch-row friends-row" }, h("div", { class: "switch-head" }, h("span", { class: "switch-title", id: "switch-friends-label" }, FRIENDS_TITLE), group), friendsNote, friendsStatus));
   draw();
   return card;
 }

package/src/admin/panel/mount.ts

@@ -69,7 +69,7 @@ export function mountAdmin(root: HTMLElement, options: MountOptions): MountedAdm
   let gameState: GameState | null = null;
   let dash: Dashboard | null = null;
 
-  /** The card, made once. A fault in reading the two switches must not hide the orders: the card is left out and the rest still shows. */
+  /** The card, made once. A fault in reading the game switches must not hide the orders: the card is left out and the rest still shows. */
   async function gameSection(): Promise<HTMLElement | null> {
     if (game) return game;
     try {
@@ -156,8 +156,8 @@ export function mountAdmin(root: HTMLElement, options: MountOptions): MountedAdm
     return shelf.el;
   }
 
-  /** A look's body colour, while the game still has the look (for the dots in the lists). */
-  const colourOf = (id: string): string | null => options.looks.find((l) => l.id === id)?.change.body ?? null;
+  /** An outfit's body colour, while the game still has the look (for the dots in the lists); none for an item of another wear slot. */
+  const colourOf = (id: string): string | null => options.looks.find((l) => l.id === id)?.change?.body ?? null;
 
   function build(): Dashboard {
     const tabs = tabBar("overview");

package/src/admin/panel/overview.ts

@@ -4,7 +4,7 @@
 import type { Look } from "../../looks/look.js";
 import { priceText } from "../../looks/ladder.js";
 import type { AdminSummary } from "../store.js";
-import { SWITCHES, stateOf, type GameState } from "../switches.js";
+import { FRIENDS_CHOICES, FRIENDS_TITLE, SWITCHES, stateOf, type GameState } from "../switches.js";
 import { dollars, h, plural } from "./dom.js";
 import { icon } from "./icons.js";
 import { orderRow, type OrderFilter } from "./orders.js";
@@ -29,7 +29,7 @@ export function bestSellers(s: Pick<AdminSummary, "orders" | "players">, looks:
 export type OverviewView = {
   el: HTMLElement;
   update(s: AdminSummary): void;
-  /** The two switches as they are now (null: they could not be read). */
+  /** The game switches as they are now (null: they could not be read). */
   setGame(state: GameState | null): void;
 };
 
@@ -51,9 +51,10 @@ export function overviewView(looks: readonly Look[], colourOf: (lookId: string)
       const on = game ? stateOf(id, game) : null;
       return h("li", {}, h("span", {}, SWITCHES[id].title), on === null ? h("span", { class: "pill" }, "Unknown") : h("span", { class: `pill ${on ? "pill-on" : "pill-off"}` }, on ? "On" : "Off"));
     });
+    if (game) rows.push(h("li", {}, h("span", {}, FRIENDS_TITLE), h("span", { class: `pill ${game.friends === "off" ? "pill-off" : "pill-on"}` }, FRIENDS_CHOICES[game.friends]?.name ?? "Unknown")));
     gameBox.replaceChildren(
       h("div", { class: "card-head" }, h("h2", { id: "n133-glance-game" }, "Game switches"), linkKey("Change", () => go("settings"))),
-      game ? h("ul", { class: "glance-list" }, ...rows) : h("p", { class: "fine" }, "The two switches could not be read. Reload the page to try again."),
+      game ? h("ul", { class: "glance-list" }, ...rows) : h("p", { class: "fine" }, "The game switches could not be read. Reload the page to try again."),
     );
   }