@zaisma/game-server 1.7.0 → 1.9.0

package/bench/glass.js

@@ -6255,6 +6255,7 @@ var ERROR_CODES = {
   bad_values: { httpStatus: 400, meaning: "values isn't a list of text, numbers, null and { blob_base64 } for the SQL's ?s." },
   bad_player_id: { httpStatus: 400, meaning: "player_id isn't a player ID (player_\u2026)." },
   too_many_rows: { httpStatus: 400, meaning: "A statement answered more than 10,000 rows." },
+  integer_too_large: { httpStatus: 400, meaning: "A statement answered a whole number past 2^53, which JavaScript can't hold exactly." },
   answer_too_big: { httpStatus: 400, meaning: "The rows answered come to more than 8 MB." },
   database_full: { httpStatus: 403, meaning: "The statement would grow the game's storage (its database and kept rooms) past the 10 GB a game can keep." },
   database_unavailable: { httpStatus: 503, meaning: "The game's database didn't answer." },
@@ -7634,6 +7635,30 @@ var MAXIMUM_DATABASE_SIZE_BYTES = 10 * 1024 ** 3;
 
 // ../core/src/hosting.ts
 var DAY_MS = 24 * 36e5;
+var USAGE_FIELDS = {
+  room_play_duration_sec: "roomPlayDurationSec",
+  room_awake_duration_sec: "roomAwakeDurationSec",
+  message_count: "inboundMessageCount",
+  room_connection_count: "roomConnectionCount",
+  object_request_count: "objectRequestCount",
+  bookkeeping_written_row_count: "bookkeepingWrittenRowCount",
+  relayed_size_bytes: "relayedSizeBytes",
+  game_server_cpu_duration_ms: "roomCpuDurationMs",
+  outside_room_cpu_duration_ms: "outsideRoomCpuDurationMs",
+  game_server_startup_cpu_duration_ms: "startupCpuDurationMs",
+  outside_call_count: "outsideCallCount",
+  game_server_session_count: "gameServerSessionCount",
+  log_file_count: "logFileCount",
+  game_server_request_count: "requestCount",
+  game_server_scheduled_run_count: "scheduledRunCount",
+  object_awake_duration_sec: "objectAwakeDurationSec",
+  database_written_row_count: "writtenRowCount",
+  database_read_row_count: "readRowCount",
+  database_call_count: "databaseCallCount",
+  database_awake_duration_sec: "databaseAwakeDurationSec",
+  adult_chat_check_count: "adultChatCheckCount"
+};
+var USAGE_COLUMNS = Object.keys(USAGE_FIELDS);
 
 // ../core/src/forum.ts
 var FORUM_SECTIONS = [
@@ -7714,12 +7739,16 @@ var OUTSIDE_CALL_LIMITS = {
 
 // src/database.ts
 var DATABASE_LIMITS = {
-  /** One statement's SQL. */
+  /** One statement's SQL, in characters. */
   maximumSqlCharacterCount: 1e5,
+  /** One statement's SQL, in UTF-8 bytes: Cloudflare's SQLite takes 100 KB, so text in other scripts is held to it too. */
+  maximumSqlSizeBytes: 1e5,
   /** Values for one statement's ?s. */
   maximumValueCount: 100,
-  /** One text or blob value, in a query and in the database. */
+  /** One text or blob value a game server or query binds. */
   maximumValueSizeBytes: 1024 * 1024,
+  /** One text or blob value in an import, which brings back every row an export wrote: what the database holds in a value. */
+  maximumImportValueSizeBytes: 2 * 1024 * 1024,
   /** Statements in one batch. */
   maximumStatementCount: 100,
   /** Rows one statement may answer; past it, page with LIMIT and OFFSET or a WHERE. */
@@ -8117,6 +8146,7 @@ var GAME_SERVER_OPTIONS = [
   "onRefund",
   "onTick",
   "onEnding",
+  "onEndingCancelled",
   "onRestored",
   "stateView",
   "onVersionUpdate",
@@ -10499,7 +10529,7 @@ var LIGHT_GLASS = `color-scheme: light;
   --divider: 1px solid var(--line);
   --toggle-off: rgba(60, 72, 94, 0.2); --check-press: rgba(60, 72, 94, 0.16); --row-hover: rgba(255, 255, 255, 0.24); --row-press: rgba(20, 23, 28, 0.05); --tag-new: rgba(34, 160, 90, 0.26); --tag-new-ink: #0A5A2C; --tag-warning: rgba(217, 165, 28, 0.3); --tag-warning-ink: var(--warning); --tag-plain: rgba(60, 72, 94, 0.1); --tag-carve: inset 0 1px 2px rgba(20, 30, 50, 0.22), inset 0 -1px 0 rgba(255, 255, 255, 0.75); --face-ring: rgba(255, 255, 255, 0.85); --presence-ring: #fff; --online: #3BB273; --picture-shadow: rgba(20, 23, 28, 0.3);
   /* Data: a table's header row over the rows scrolling under it, a chart's fill under its line, a meter's fill and its amber past 80%. */
-  --table-head: rgba(250, 252, 255, 0.9); --table-row-head: rgba(244, 246, 250, 0.97); --chart-fill: rgba(20, 23, 28, 0.07); --chart-bar: rgba(60, 72, 94, 0.26); --chart-ring: rgba(250, 252, 255, 0.9); --chart-tip: rgba(250, 252, 255, 0.94); --meter-fill: rgba(60, 72, 94, 0.42); --meter-near: #D9A51C; --meter-full: #A87C0E; --meter-full-ink: var(--warning);
+  --table-head: rgba(250, 252, 255, 0.9); --table-row-head: rgba(244, 246, 250, 0.97); --chart-fill: rgba(20, 23, 28, 0.07); --chart-bar: rgba(60, 72, 94, 0.26); --chart-ring: rgba(250, 252, 255, 0.9); --chart-tip: rgba(250, 252, 255, 0.94); --meter-fill: rgba(60, 72, 94, 0.42); --meter-near: #D9A51C; --meter-full: #A87C0E; --meter-full-ink: var(--warning); --part-0: #3E6FD8; --part-1: #7B5BD6; --part-2: #1E9C87; --part-3: #5E8C2E; --part-4: #D2577F; --part-5: #2A8FB8;
   /* A file drop's dashed outline, waiting for a file. */
   --drop-dash: rgba(20, 23, 28, 0.3);
   --rail-line: rgba(20, 23, 28, 0.2); --rail-thumb: rgba(24, 28, 36, 0.55); --rail-edge: rgba(255, 255, 255, 0.55); --rail-mark: rgba(20, 23, 28, 0.45);
@@ -10535,7 +10565,7 @@ var SMOKED_GLASS = `color-scheme: dark;
   --glass-btn-lift: inset 0 -12px 18px -12px rgba(0, 0, 0, 0.5), inset 0 1px 0 rgba(255, 255, 255, 0.22); --glass-btn-hair: rgba(26, 44, 80, 0.16); --glass-btn-hair-rest: rgba(26, 44, 80, 0.28);
   --clear-hover: rgba(255, 255, 255, 0.08); --clear-press: rgba(255, 255, 255, 0.04); --clear-glass-mark: #fff; --on-light: none; --on-smoked: inline; --divider: 1px solid var(--line);
   --toggle-off: rgba(0, 0, 0, 0.34); --check-press: rgba(0, 0, 0, 0.3); --row-hover: rgba(255, 255, 255, 0.1); --row-press: rgba(255, 255, 255, 0.22); --tag-new: rgba(30, 150, 80, 0.32); --tag-new-ink: #A6F0C6; --tag-warning: rgba(230, 181, 58, 0.24); --tag-warning-ink: var(--warning); --tag-plain: rgba(0, 0, 0, 0.34); --tag-carve: inset 0 1.5px 3px rgba(0, 0, 0, 0.8), inset 0 -1px 0 rgba(255, 255, 255, 0.24); --face-ring: rgba(6, 8, 12, 0.55); --presence-ring: #1A1D24; --online: #3BB273; --picture-shadow: rgba(0, 0, 0, 0.55);
-  --table-head: rgba(14, 17, 24, 0.9); --table-row-head: rgba(24, 28, 36, 0.97); --chart-fill: rgba(255, 255, 255, 0.08); --chart-bar: rgba(255, 255, 255, 0.3); --chart-ring: rgba(20, 23, 30, 0.9); --chart-tip: rgba(28, 32, 40, 0.94); --meter-fill: rgba(255, 255, 255, 0.6); --meter-near: #E6B53A; --meter-full: #A9811C; --meter-full-ink: var(--warning); --drop-dash: rgba(255, 255, 255, 0.34);
+  --table-head: rgba(14, 17, 24, 0.9); --table-row-head: rgba(24, 28, 36, 0.97); --chart-fill: rgba(255, 255, 255, 0.08); --chart-bar: rgba(255, 255, 255, 0.3); --chart-ring: rgba(20, 23, 30, 0.9); --chart-tip: rgba(28, 32, 40, 0.94); --meter-fill: rgba(255, 255, 255, 0.6); --meter-near: #E6B53A; --meter-full: #A9811C; --meter-full-ink: var(--warning); --part-0: #6E97F0; --part-1: #A08AF0; --part-2: #3CC4AC; --part-3: #8DBA55; --part-4: #EC7FA3; --part-5: #5BC0E3; --drop-dash: rgba(255, 255, 255, 0.34);
   --rail-line: rgba(255, 255, 255, 0.2); --rail-thumb: rgba(255, 255, 255, 0.55); --rail-edge: rgba(255, 255, 255, 0.35); --rail-mark: rgba(255, 255, 255, 0.5);
   /* A light rim on dark glass stands out far more than on light glass, so smoked glass draws it fainter than light glass's. It has no caustics:
      on light glass they're light on light and only round the edge off, but on dark glass they read as a glow fanning in from the rim, which
@@ -15947,17 +15977,24 @@ function meterState(options) {
 }
 function usageTrack(options) {
   const { sharePct, tone } = meterState(options);
-  return html`<span class="usage${tone}">${meterTrack(options, sharePct)}</span>`;
+  return html`<span class="usage${tone}">${meterTrack(options, sharePct)}${usageKey(options)}</span>`;
 }
 function meterTrack(options, sharePct) {
-  return html`<div class="usage-track cut-carved" data-cut-line="6" role="meter" aria-label="${options.label}" aria-valuemin="0" aria-valuemax="${options.limitNumber}" aria-valuenow="${Math.min(options.usedNumber, options.limitNumber)}">${CUT_LINE}<span class="usage-fill" data-cut-line="4" style="width:${sharePct.toFixed(2)}%"></span></div>`;
+  const parts2 = options.parts?.filter((part) => part.sharePct > 0) ?? [];
+  const fill = parts2.length ? html`<span class="usage-fill has-parts" data-cut-line="4" style="width:${sharePct.toFixed(2)}%">${parts2.map((part) => html`<span class="usage-part" data-part="${String(part.partColorIndex)}" style="flex-grow:${String(part.sharePct)}"></span>`)}</span>` : html`<span class="usage-fill" data-cut-line="4" style="width:${sharePct.toFixed(2)}%"></span>`;
+  return html`<div class="usage-track cut-carved" data-cut-line="6" role="meter" aria-label="${options.label}" aria-valuemin="0" aria-valuemax="${options.limitNumber}" aria-valuenow="${Math.min(options.usedNumber, options.limitNumber)}">${CUT_LINE}${fill}</div>`;
+}
+function usageKey(options) {
+  const parts2 = options.parts?.filter((part) => part.sharePct > 0) ?? [];
+  if (!parts2.length) return "";
+  return html`<ul class="usage-key" aria-label="What used ${options.label}">${parts2.map((part) => html`<li data-part="${String(part.partColorIndex)}"><span class="usage-swatch" aria-hidden="true"></span>${part.label}<b>${String(part.sharePct)}%</b></li>`)}</ul>`;
 }
 function usageMeter(options) {
   const { sharePct, isAllUsed, tone } = meterState(options);
   const overNumber = options.usedNumber - options.limitNumber;
   const allUsedWords = overNumber > 0 ? `, ${chartWords(overNumber)} ${options.unit} over` : ", all used";
   const resetWords = options.resetDate ? `Resets ${(/* @__PURE__ */ new Date(`${options.resetDate}T00:00:00Z`)).toLocaleDateString("en-US", { month: "short", day: "numeric", timeZone: "UTC" })}.` : "";
-  return html`<div class="usage${tone}"><span class="usage-label">${isAllUsed ? icon("warning") : ""}${options.label}</span><p class="usage-numbers"><span class="usage-fact">${options.shownWords ?? html`${chartWords(options.usedNumber)} of ${chartWords(options.limitNumber)}\u00a0${options.unit}`}${isAllUsed ? html`<b>${allUsedWords}</b>` : ""}${resetWords ? "\xA0\xB7" : ""}</span>${resetWords ? html` <span class="usage-fact">${resetWords}</span>` : ""}</p>${meterTrack(options, sharePct)}</div>`;
+  return html`<div class="usage${tone}"><span class="usage-label">${isAllUsed ? icon("warning") : ""}${options.label}</span><p class="usage-numbers"><span class="usage-fact">${options.shownWords ?? html`${chartWords(options.usedNumber)} of ${chartWords(options.limitNumber)}\u00a0${options.unit}`}${isAllUsed ? html`<b>${allUsedWords}</b>` : ""}${resetWords ? "\xA0\xB7" : ""}</span>${resetWords ? html` <span class="usage-fact">${resetWords}</span>` : ""}</p>${usageKey(options)}${meterTrack(options, sharePct)}</div>`;
 }
 var meterPane = (options) => glassPane({ paneWidth: "fit", body: usageMeter(options) });
 component({
@@ -15981,6 +16018,24 @@ component({
 .usage:is(.is-used, .is-near) .usage-fill { min-width: 6px; }
 .usage.is-near .usage-fill { background: var(--meter-near); }
 .usage.is-full .usage-fill { background: repeating-linear-gradient(-45deg, var(--meter-near) 0 6px, var(--meter-full) 6px 12px); }
+/* With parts, the fill is what used it, side by side in each part's color, a hairline of the track between them; past 80% the colors
+   stay and the numbers say so, and all used, amber stripes run across them. The key names each part with its share: over the track on a
+   meter of its own, so the track stays its foot, and under it in a list row or another plate, where the row's lines are over it. Each
+   swatch hangs before its words, so the words keep the margin. */
+.usage-fill.has-parts, .usage:is(.is-near, .is-full) .usage-fill.has-parts { display: flex; gap: var(--gap-control-row); background: none; }
+.usage-part { display: block; min-width: 3px; background: var(--part-color); }
+.usage.is-full .usage-part { background: repeating-linear-gradient(-45deg, var(--part-color) 0 6px, var(--meter-full) 6px 12px); }
+.usage [data-part="0"] { --part-color: var(--part-0); }
+.usage [data-part="1"] { --part-color: var(--part-1); }
+.usage [data-part="2"] { --part-color: var(--part-2); }
+.usage [data-part="3"] { --part-color: var(--part-3); }
+.usage [data-part="4"] { --part-color: var(--part-4); }
+.usage [data-part="5"] { --part-color: var(--part-5); }
+.usage-key { display: flex; flex-wrap: wrap; gap: var(--gap-words-words) var(--gap-block-block); list-style: none; margin: 0; padding: 0 var(--pad-words); }
+.usage-key li { position: relative; display: inline-flex; align-items: center; gap: var(--gap-words-words); font: var(--type-facts); color: var(--ink-2); }
+.usage-key .usage-swatch { position: absolute; left: calc(-10px - var(--gap-words-words)); top: calc(50% - 5px); }
+.usage-key b { font-weight: 600; color: var(--ink); font-variant-numeric: tabular-nums; }
+.usage-swatch { width: 10px; height: 10px; background: var(--part-color); }
 `,
   render: usageMeter,
   examples: [
@@ -15991,7 +16046,30 @@ component({
     { label: "A little used: still a sliver", markup: meterPane({ label: "Requests this month", usedNumber: 140, limitNumber: 1e5, unit: "requests", resetDate: "2026-11-01" }) },
     { label: "None used", markup: meterPane({ label: "Database rows", usedNumber: 0, limitNumber: 5e4, unit: "rows" }) },
     { label: "In its own words: a share of a free allowance", markup: meterPane({ label: "Starfall", usedNumber: 62, limitNumber: 100, unit: "%", resetDate: "2026-11-01", shownWords: "62% of this month's free hosting" }) },
-    { label: "Two allowances on one track: free, then a budget the game lives on (used up is not a warning until the budget is)", markup: meterPane({ label: "Starfall", usedNumber: 100 + 2 * 45, limitNumber: 300, warnFromNumber: 260, isFullFine: true, unit: "", resetDate: "2026-11-01", shownWords: "Free part used. $18 of $40 budget" }) }
+    { label: "Two allowances on one track: free, then a budget the game lives on (used up is not a warning until the budget is)", markup: meterPane({ label: "Starfall", usedNumber: 100 + 2 * 45, limitNumber: 300, warnFromNumber: 260, isFullFine: true, unit: "", resetDate: "2026-11-01", shownWords: "Free part used. $18 of $40 budget" }) },
+    { label: "Split by what used it: a color for each part, with its share in the key", markup: meterPane({ label: "Starfall", usedNumber: 62, limitNumber: 100, unit: "%", resetDate: "2026-11-01", shownWords: "62% of this month's free hosting", parts: [{ label: "Rooms", sharePct: 48, partColorIndex: 0 }, { label: "Game server", sharePct: 27, partColorIndex: 1 }, { label: "Database", sharePct: 15, partColorIndex: 3 }, { label: "Requests", sharePct: 10, partColorIndex: 4 }] }) },
+    { label: "Split, past 80%", markup: meterPane({ label: "Kestrel", usedNumber: 86, limitNumber: 100, unit: "%", resetDate: "2026-11-01", shownWords: "86% of this month's free hosting", parts: [{ label: "Relay", sharePct: 75, partColorIndex: 2 }, { label: "Rooms", sharePct: 25, partColorIndex: 0 }] }) },
+    { label: "Split, all used", markup: meterPane({ label: "Ashen Crown", usedNumber: 100, limitNumber: 100, unit: "%", resetDate: "2026-11-01", shownWords: "100% of this month's free hosting", parts: [{ label: "Rooms", sharePct: 100, partColorIndex: 0 }] }) }
+  ]
+});
+component({
+  name: "Usage track",
+  slug: "usage-track",
+  group: "data",
+  summary: "A usage meter's track and its parts' key alone, for a list row or a plate whose own lines say the numbers: a game's hosting in developer settings and on its dashboard.",
+  styles: "",
+  render: usageTrack,
+  examples: [
+    {
+      label: "Split by what used it, its key under the track, in a list row whose lines say the numbers",
+      markup: glassPane({
+        paneWidth: "fit",
+        body: listRows({
+          whenEmpty: html``,
+          rows: [{ title: "Starfall", detail: "62% of this month's free hosting \xB7 Resets Nov 1", meter: { label: "Starfall", usedNumber: 62, limitNumber: 100, unit: "%", parts: [{ label: "Rooms", sharePct: 48, partColorIndex: 0 }, { label: "Game server", sharePct: 27, partColorIndex: 1 }, { label: "Database", sharePct: 15, partColorIndex: 3 }, { label: "Requests", sharePct: 10, partColorIndex: 4 }] } }]
+        })
+      })
+    }
   ]
 });
 
@@ -23796,24 +23874,63 @@ var SAVES_SCRIPT = pageScript("saves", `
   let applying = null;    // a developer's change while the game domain puts it in place under the running game
   let isRestoringCopy = false; // the game is going back to an earlier version (Zaisma.saves.restoreCopy)
   let versionId = null;   // the game version the game domain says it was served from (its last hello or save), a label on each save
+  let clockOffsetMs = 0;  // Zaisma's clock minus this device's, from the last answer's Date header
+  let retryTimer = null;  // a failed save waiting to be sent again
+  let retryDelayMs = 0;   // how long the last wait was: 30 seconds, doubling to 5 minutes
+  let isAwaitingSignIn = false; // saving paused after a 401 or another account signing in, until the player is signed in
   // A save with nothing in it, exactly as canonicalSave in packages/core/src/saves.ts writes it.
   const EMPTY_SAVE_TEXT = ${JSON.stringify(EMPTY_SAVE_TEXT)};
 
   // A save as one text, the same as canonicalSave on the server: all three keys in this order, localStorage keys sorted.
   const canonical = (save) => {
+    if (!save || !save.local_storage_items) return null;
     const items = {};
     Object.keys(save.local_storage_items).sort().forEach((k) => Object.defineProperty(items, k, { value: save.local_storage_items[k], enumerable: true, writable: true, configurable: true }));
     return JSON.stringify({ save_format_version_number: 1, local_storage_items: items, indexeddb_databases: save.indexeddb_databases });
   };
   const sha = async (text) => Array.from(new Uint8Array(await crypto.subtle.digest("SHA-256", new TextEncoder().encode(text))), (b) => b.toString(16).padStart(2, "0")).join("");
+  // Which save of an account this device last had: { version_number, sha256, slug, marked_at_ms }, per account tag.
   const marker = (tag, value) => {
     try {
       if (value === undefined) return JSON.parse(localStorage.getItem("zaisma:save:" + tag) || "null");
-      localStorage.setItem("zaisma:save:" + tag, JSON.stringify(value));
+      localStorage.setItem("zaisma:save:" + tag, JSON.stringify({ ...value, slug: SAVES.slug, marked_at_ms: serverNow() }));
+    } catch { return null; }
+  };
+  // Every account's marker for this game in this browser, with its tag (markers from before slug was kept are left out).
+  const markersHere = () => {
+    const found = [];
+    try {
+      for (let i = 0; i < localStorage.length; i++) {
+        const key = localStorage.key(i);
+        if (!key || !key.startsWith("zaisma:save:")) continue;
+        const value = JSON.parse(localStorage.getItem(key) || "null");
+        if (value && value.slug === SAVES.slug) found.push({ tag: key.slice("zaisma:save:".length), ...value });
+      }
+    } catch {}
+    return found;
+  };
+  // Another account's progress, moved aside on a shared computer until that account signs in here again: { text, played_at_ms }.
+  const asideKey = (tag) => "zaisma:unsynced:" + tag;
+  const putAside = (tag, value) => {
+    try { localStorage.setItem(asideKey(tag), JSON.stringify(value)); return true; } catch { return false; }
+  };
+  const takeAside = (tag) => {
+    try {
+      const value = JSON.parse(localStorage.getItem(asideKey(tag)) || "null");
+      localStorage.removeItem(asideKey(tag));
+      return value && typeof value.text === "string" ? value : null;
     } catch { return null; }
   };
+  // Zaisma's clock: this device's, put right by the offset each answer's Date header shows.
+  const serverNow = () => Date.now() + clockOffsetMs;
+  // Every call to the account: learns Zaisma's clock from the answer.
+  const ask = (path, init = {}) => fetch(path, { credentials: "same-origin", ...init }).then((res) => {
+    const answeredAtMs = Date.parse((res.headers && res.headers.get && res.headers.get("date")) || "");
+    if (answeredAtMs) clockOffsetMs = answeredAtMs - Date.now();
+    return res;
+  });
   const ago = (savedAt) => {
-    const m = Math.round((Date.now() - Date.parse(savedAt)) / 60000);
+    const m = Math.round((serverNow() - Date.parse(savedAt)) / 60000);
     return m < 1 ? "just now" : m < 60 ? m + " min ago" : m < 1440 ? Math.round(m / 60) + " h ago" : Math.round(m / 1440) + " days ago";
   };
   // Where progress goes, in the Keep your progress card.
@@ -23832,11 +23949,10 @@ var SAVES_SCRIPT = pageScript("saves", `
   }
   // The account's progress wins: keep this device's as an earlier version on the account, dated when this device
   // last played it (played_at; null when that isn't known). Answers the copy's ID, or null.
-  const keepDevice = (text) => {
-    if (!text || text === EMPTY_SAVE_TEXT) return Promise.resolve(null);
-    const p = played();
-    const body = { keep: true, save_json: text, version_id: versionId, played_at: p && p.played_at_ms ? new Date(p.played_at_ms).toISOString() : null };
-    return fetch(SAVES.api, { method: "PUT", body: JSON.stringify(body), credentials: "same-origin" })
+  const keepDevice = (text, playedAtMs = (played() || {}).played_at_ms) => {
+    if (!text || text === EMPTY_SAVE_TEXT || !cloud || cloud instanceof Promise) return Promise.resolve(null);
+    const body = { tag: cloud.tag, keep: true, save_json: text, version_id: versionId, played_at: playedAtMs ? new Date(playedAtMs).toISOString() : null };
+    return ask(SAVES.api, { method: "PUT", body: JSON.stringify(body) })
       .then((r) => (r.ok ? r.json() : null))
       .then((out) => (out && out.save_copy_id) || null)
       .catch(() => null);
@@ -23848,25 +23964,22 @@ var SAVES_SCRIPT = pageScript("saves", `
       localStorage.setItem(playedKey, JSON.stringify(value));
     } catch { return null; }
   };
-  // The game sent its save: if it changed, this device played just now.
+  // The game sent its save: if it changed, this device played just now (on Zaisma's clock).
   async function notePlayed(text) {
     const hash = await sha(text);
     const was = played();
     if (!was) played({ sha256: hash, played_at_ms: null });
-    else if (was.sha256 !== hash) played({ sha256: hash, played_at_ms: Date.now() });
+    else if (was.sha256 !== hash) played({ sha256: hash, played_at_ms: serverNow() });
   }
   // Whether this device's progress was played after the account's was saved. Not known: the account's wins.
-  const deviceIsNewer = (savedAt) => {
-    const p = played();
-    return Boolean(p && p.played_at_ms && savedAt && p.played_at_ms > Date.parse(savedAt));
-  };
+  const deviceIsNewer = (savedAt, playedAtMs = (played() || {}).played_at_ms) => Boolean(playedAtMs && savedAt && playedAtMs > Date.parse(savedAt));
   const tell = (msg) => frame && frame.contentWindow && frame.contentWindow.postMessage({ type: "zaisma:saves", ...msg }, SAVES.frameOrigin);
   // To the game itself (the SDK), not the game domain's saves script.
   const toGame = (msg) => frame && frame.contentWindow && frame.contentWindow.postMessage(msg, SAVES.frameOrigin);
   const copyFields = (copy) => ({ id: copy.id, savedAt: copy.saved_at, copyReason: copy.copy_reason, sizeBytes: copy.size_bytes, isCurrentSave: copy.is_current_save, versionId: copy.version_id ?? null });
   async function copyById(saveCopyId) {
     if (!saveCopyId) return null;
-    const res = await fetch(SAVES.api + "/copies", { credentials: "same-origin" }).catch(() => null);
+    const res = await ask(SAVES.api + "/copies").catch(() => null);
     const out = res && res.ok ? await res.json().catch(() => null) : null;
     const copy = out && Array.isArray(out.save_copies) ? out.save_copies.find((each) => each.id === saveCopyId) : null;
     return copy ? copyFields(copy) : null;
@@ -23887,7 +24000,7 @@ var SAVES_SCRIPT = pageScript("saves", `
   // One retry for a passing hiccup; a signed-out player or a game without saves just plays.
   async function load(retry = true) {
     try {
-      const res = await fetch(SAVES.api, { credentials: "same-origin" });
+      const res = await ask(SAVES.api);
       if (res.ok) return await res.json();
       if (res.status === 401 || res.status === 404 || !retry) return null;
     } catch { if (!retry) return null; }
@@ -23907,6 +24020,9 @@ var SAVES_SCRIPT = pageScript("saves", `
     pendingConflict = null; // A conflict from this reload comes after it (conflicted).
     if (applying) { clearTimeout(applying.timer); applying = null; }
     queued = null; // From the game as it was; the reloaded game sends its own.
+    clearTimeout(retryTimer);
+    retryTimer = null;
+    retryDelayMs = 0;
     cloud = load();
     openAt("_zaisma/restore#" + encodeURIComponent(SAVES.query));
     clearTimeout(fallback);
@@ -24017,8 +24133,8 @@ var SAVES_SCRIPT = pageScript("saves", `
     const c = await load();
     if (!c) return say("Couldn't reach your saved progress, so this visit won't save to your account.");
     cloud = c;
-    if (!c.version_number) {
-      // A new account: whatever this device has becomes the account's save.
+    if (!c.version_number || !c.save_data) {
+      // A new account (or one whose save has no data): whatever this device has becomes the account's save.
       paused = false;
       synced = null;
       welcome = true;
@@ -24031,6 +24147,10 @@ var SAVES_SCRIPT = pageScript("saves", `
       tell({ step: "sync", text: guestText });
       say("Progress saves to your account.");
       pop("Your progress now saves to your account.");
+    } else if (!guestText || guestText === EMPTY_SAVE_TEXT) {
+      // Nothing on this device: the game reopens with the account's progress.
+      forceCloud = true;
+      openThroughRestore();
     } else if (deviceIsNewer(c.saved_at)) {
       // Both have progress, and this device's was played more recently: it replaces the account's, which is kept
       // as an earlier version (the game hears the conflict once that save is stored).
@@ -24049,9 +24169,37 @@ var SAVES_SCRIPT = pageScript("saves", `
       pop("You're signed in. Your account's progress in this game is newer, so the game reloaded with it.");
     }
   }
-  addEventListener("focus", joined);
-  document.addEventListener("visibilitychange", joined);
-  try { new BroadcastChannel("zaisma").onmessage = (e) => e.data === "signed-in" && joined(); } catch {}
+  // Saving paused after a 401 or another account signing in: once the account answers again, the game reopens
+  // through the restore page as whoever is signed in now, which checks whose progress is on this device.
+  async function signedInAgain() {
+    if (!isAwaitingSignIn || guest || !signedIn()) return;
+    const res = await ask(SAVES.api + "?version").catch(() => null);
+    if (!isAwaitingSignIn || !res || !res.ok) return;
+    isAwaitingSignIn = false;
+    openThroughRestore();
+  }
+  function awaitSignIn(isOtherAccount) {
+    paused = true;
+    queued = null;
+    tell({ step: "pause" });
+    isAwaitingSignIn = true;
+    if (isOtherAccount) signedInAgain();
+    else say("Sign in again to keep saving to your account.");
+  }
+  const heardSignIn = () => { joined(); signedInAgain(); };
+  addEventListener("focus", heardSignIn);
+  document.addEventListener("visibilitychange", heardSignIn);
+  try { new BroadcastChannel("zaisma").onmessage = (e) => e.data === "signed-in" && heardSignIn(); } catch {}
+
+  // Whose this device's progress is, when it isn't this account's (tag): another account's synced save (isSynced),
+  // or progress never synced, which belongs to the account that played here last. Null: this account's, or no one's.
+  function progressOwner(localHash, tag) {
+    const markers = markersHere();
+    const synced = markers.find((each) => each.tag !== tag && each.sha256 === localHash);
+    if (synced) return { tag: synced.tag, isSynced: true };
+    const last = markers.reduce((newest, each) => (!newest || (each.marked_at_ms || 0) > (newest.marked_at_ms || 0) ? each : newest), null);
+    return last && last.tag !== tag ? { tag: last.tag, isSynced: false } : null;
+  }
 
   async function restore(text, broken) {
     clearTimeout(fallback);
@@ -24066,63 +24214,98 @@ var SAVES_SCRIPT = pageScript("saves", `
       say("Couldn't reach your saved progress, so this visit won't save to your account.");
       return tell({ step: "restore", action: "keep" });
     }
-    const localHash = await sha(text);
-    const empty = text === EMPTY_SAVE_TEXT;
+    // An answer without its data counts as no save on the account; the next save still starts from its version.
+    const hasCloudSave = Boolean(c.version_number && c.save_data);
+    let localHash = await sha(text);
     // The first time this page sees this device's save: from now on a change to it counts as playing.
     if (!played()) played({ sha256: localHash, played_at_ms: null });
     // A marker from before version_number and sha256 matches neither, so the most recently played wins.
     const mark = marker(c.tag);
+    // A shared computer: progress here that's another account's stays that account's, and this account starts from its own.
+    let deviceText = text;
+    let isStorageOthers = false;
+    if (text !== EMPTY_SAVE_TEXT && localHash !== c.sha256 && !(mark && mark.sha256 === localHash)) {
+      const owner = progressOwner(localHash, c.tag);
+      if (owner) {
+        if (!owner.isSynced && !putAside(owner.tag, { text, played_at_ms: (played() || {}).played_at_ms || null })) {
+          say("Another account's progress is on this device, so this visit won't save to your account.");
+          return tell({ step: "restore", action: "keep" });
+        }
+        isStorageOthers = true;
+        deviceText = EMPTY_SAVE_TEXT;
+      }
+    }
+    // This account's own progress, moved aside while another account played here: it's this device's progress again.
+    const aside = takeAside(c.tag);
+    let devicePlayedAtMs = (played() || {}).played_at_ms;
+    if (aside) {
+      deviceText = aside.text;
+      devicePlayedAtMs = aside.played_at_ms;
+      localHash = await sha(aside.text);
+    }
+    const empty = deviceText === EMPTY_SAVE_TEXT;
     let use;
-    if (forceCloud && c.version_number) {
+    if (forceCloud && hasCloudSave) {
       use = "cloud";
       // This device's progress since its last save (the account keeps one copy of each progress).
       // Unchanged since it last synced, it was the account's own save, so there's nothing to keep; nor when it was kept before the reload.
-      if (!empty && localHash !== c.sha256 && !(mark && mark.sha256 === localHash) && text !== keptBeforeReload) keepDevice(text);
+      if (!empty && localHash !== c.sha256 && !(mark && mark.sha256 === localHash) && deviceText !== keptBeforeReload) keepDevice(deviceText, devicePlayedAtMs);
     }
-    else if (!c.version_number) use = "local";
+    else if (!hasCloudSave) use = "local";
     else if (empty || localHash === c.sha256) use = "cloud";
     else if (mark && mark.version_number === c.version_number) use = "local";
     else if (mark && mark.sha256 === localHash) use = "cloud";
     else {
       // Both played on since they last matched: the progress played most recently wins, the other is kept.
-      use = deviceIsNewer(c.saved_at) ? "local" : "cloud";
-      if (use === "cloud") conflicted("account", keepDevice(text));
+      use = deviceIsNewer(c.saved_at, devicePlayedAtMs) ? "local" : "cloud";
+      if (use === "cloud") conflicted("account", keepDevice(deviceText, devicePlayedAtMs));
       else replacing = true; // The game hears the conflict once its save replaced the account's (store).
     }
     forceCloud = false;
     keptBeforeReload = null;
-    if (use === "cloud" && c.version_number) {
-      restoring = c;
-      tell({ step: "restore", action: "use-cloud", data: c.save_data });
+    // What goes in the game's storage: the account's save, this account's moved-aside progress, or nothing in place of another's.
+    const putting = use === "cloud" && hasCloudSave ? { saveData: c.save_data } : aside && !empty ? { saveData: JSON.parse(deviceText), isDeviceProgress: true, aside } : isStorageOthers ? { saveData: JSON.parse(EMPTY_SAVE_TEXT) } : null;
+    if (putting) {
+      restoring = { c, ...putting };
+      tell({ step: "restore", action: "use-cloud", data: putting.saveData });
     } else {
       paused = false;
       // Keep this device's save; the game sends it as soon as it starts.
-      synced = empty && !c.version_number ? text : null;
+      synced = empty && !hasCloudSave ? text : null;
       tell({ step: "restore", action: "keep" });
       say("Progress saves to your account.");
     }
   }
 
-  // The game domain put the account's save in place (or couldn't). Only then does saving start.
+  // The game domain put a save in place (or couldn't). Only then does saving start.
   function restored(ok) {
-    const c = restoring;
+    const r = restoring;
     restoring = null;
+    if (!r) return;
     if (!ok) {
+      if (r.aside) putAside(r.c.tag, r.aside);
       say("Couldn't put your account's progress on this device, so this visit won't save to your account.");
       return;
     }
-    synced = canonical(c.save_data);
-    marker(c.tag, { version_number: c.version_number, sha256: c.sha256 });
-    played({ sha256: c.sha256, played_at_ms: Date.parse(c.saved_at) || null });
+    const c = r.c;
+    const isAccountSave = r.saveData === c.save_data;
+    // This account's own moved-aside progress back in place: the game sends it, and it saves from the account's version.
+    synced = r.isDeviceProgress ? null : canonical(r.saveData);
     paused = false;
-    say("Progress saves to your account. Last saved " + ago(c.saved_at) + ".");
+    if (isAccountSave) {
+      marker(c.tag, { version_number: c.version_number, sha256: c.sha256 });
+      played({ sha256: c.sha256, played_at_ms: Date.parse(c.saved_at) || null });
+    } else {
+      sha(canonical(r.saveData)).then((hash) => played({ sha256: hash, played_at_ms: r.isDeviceProgress ? r.aside.played_at_ms || null : null }));
+    }
+    say(isAccountSave ? "Progress saves to your account. Last saved " + ago(c.saved_at) + "." : "Progress saves to your account.");
   }
 
   async function store(text) {
     if (paused) return;
-    if (saving) { queued = text; return; }
-    const body = JSON.stringify({ base_version_number: cloud.version_number, save_json: text, version_id: versionId, ...(replacing ? { replace: true } : {}) });
-    saving = fetch(SAVES.api, { method: "PUT", body, credentials: "same-origin", keepalive: body.length < 60000 }).catch(() => null);
+    if (saving || retryTimer) { queued = text; return; }
+    const body = JSON.stringify({ tag: cloud.tag, base_version_number: cloud.version_number, save_json: text, version_id: versionId, ...(replacing ? { replace: true } : {}) });
+    saving = ask(SAVES.api, { method: "PUT", body, keepalive: body.length < 60000 }).catch(() => null);
     const opened = openCount;
     const res = await saving;
     saving = null;
@@ -24131,9 +24314,13 @@ var SAVES_SCRIPT = pageScript("saves", `
     // Going back to an earlier version: a save that went through still moved the account on; anything else waits for that.
     if (isRestoringCopy && !(res && res.ok)) return;
     const out = res ? await res.json().catch(() => ({})) : {};
-    if (res && res.ok) {
-      if (replacing) conflicted("this_device", Promise.resolve(out.kept_save_copy_id));
+    // A 409 for exactly this save: it landed before (its answer was lost), so it's saved.
+    const isSavedBefore = res && res.status === 409 && out.error !== "account_changed" && out.sha256 && out.sha256 === (await sha(text));
+    if (opened !== openCount) return;
+    if (res && (res.ok || isSavedBefore)) {
+      if (replacing && res.ok) conflicted("this_device", Promise.resolve(out.kept_save_copy_id));
       replacing = false;
+      retryDelayMs = 0;
       cloud.version_number = out.version_number;
       cloud.sha256 = out.sha256;
       synced = text;
@@ -24141,17 +24328,23 @@ var SAVES_SCRIPT = pageScript("saves", `
       say("Progress saves to your account. Last saved just now.");
       if (welcome) pop("Your progress now saves to your account.");
       welcome = false;
+    } else if (res && res.status === 409 && out.error === "account_changed") {
+      // Another account signed in on this browser: this page's progress never goes to it.
+      return awaitSignIn(true);
     } else if (res && res.status === 409) {
       paused = true;
       tell({ step: "pause" });
+      // The newest progress this device has; a save waiting behind this one is from before whatever happens next.
+      const newest = queued ?? text;
+      queued = null;
       // The developer's change always wins, and so does another device's progress played after this device's:
       // reload the game with it, keeping this device's progress. Otherwise this device's, played just now, replaces it.
       // A developer's change is never a conflict, and a game that listens for it takes it in place.
       if (out.changed_by_kind === "developer" && listening.has("developerChange")) {
-        takeDeveloperChange(text);
+        takeDeveloperChange(newest);
       } else if (out.changed_by_kind === "developer" || !deviceIsNewer(out.saved_at)) {
-        const keeping = keepDevice(text);
-        keptBeforeReload = text;
+        const keeping = keepDevice(newest);
+        keptBeforeReload = newest;
         forceCloud = true;
         openThroughRestore();
         if (out.changed_by_kind !== "developer") conflicted("account", keeping);
@@ -24166,14 +24359,27 @@ var SAVES_SCRIPT = pageScript("saves", `
       overLimit();
       return;
     } else if (res && res.status === 401) {
+      return awaitSignIn(false);
+    } else if (res && res.status === 404) {
+      // The game stopped saving to accounts (or isn't live): nothing more goes for this visit.
       paused = true;
+      queued = null;
       tell({ step: "pause" });
-      say("Sign in again to keep saving to your account.");
+      say("This game doesn't save to your account right now, so its progress stays on this device.");
       return;
     } else {
-      // Let the game send this save again on its next check.
+      // Offline, too often or Zaisma had a problem: send the newest save again later, waiting longer each time.
+      queued = queued ?? text;
+      retryDelayMs = Math.min(retryDelayMs ? retryDelayMs * 2 : 30000, 300000);
+      const retryAfterMs = res && res.status === 429 ? Number((res.headers && res.headers.get && res.headers.get("retry-after")) || 0) * 1000 : 0;
       say("Couldn't save to your account. Trying again soon.");
-      tell({ step: "sync", text: synced });
+      retryTimer = setTimeout(() => {
+        retryTimer = null;
+        const next = queued;
+        queued = null;
+        if (next !== null && opened === openCount) store(next);
+      }, Math.max(retryDelayMs, retryAfterMs || 0));
+      return;
     }
     if (queued !== null) { const next = queued; queued = null; store(next); }
   }
@@ -24183,7 +24389,7 @@ var SAVES_SCRIPT = pageScript("saves", `
   // asked for, so this costs one small read.
   document.addEventListener("visibilitychange", async () => {
     if (guest || paused || saving || document.visibilityState !== "visible" || !cloud || cloud instanceof Promise) return;
-    const res = await fetch(SAVES.api + "?version", { credentials: "same-origin" }).catch(() => null);
+    const res = await ask(SAVES.api + "?version").catch(() => null);
     const out = res && res.ok ? await res.json().catch(() => null) : null;
     if (!out || out.version_number === cloud.version_number || paused || saving) return;
     if (out.changed_by_kind !== "developer" && deviceIsNewer(out.saved_at)) return;
@@ -24200,6 +24406,7 @@ var SAVES_SCRIPT = pageScript("saves", `
   // text is this device's progress since its last save, kept as an earlier version (null: nothing to keep).
   async function takeDeveloperChange(text) {
     const opened = openCount;
+    queued = null;
     const keeping = keepDevice(text);
     const reload = () => {
       keptBeforeReload = text;
@@ -24216,6 +24423,7 @@ var SAVES_SCRIPT = pageScript("saves", `
     const taking = applying;
     if (!taking) return;
     applying = null;
+    queued = null; // From the game before the change: the game sends its own after it.
     clearTimeout(taking.timer);
     if (!ok) return taking.reload();
     const c = taking.c;
@@ -24253,7 +24461,7 @@ var SAVES_SCRIPT = pageScript("saves", `
     reply({ status: "asking" });
     if (guest || !signedIn()) return fail("account_needed", "Earlier versions are kept for players signed in to Zaisma: a guest's progress stays in this browser. Ask the player to sign in first (Zaisma.player.signIn).");
     if (m.request === "list_copies") {
-      const res = await fetch(SAVES.api + "/copies", { credentials: "same-origin" }).catch(() => null);
+      const res = await ask(SAVES.api + "/copies").catch(() => null);
       const out = res && res.ok ? await res.json().catch(() => null) : null;
       if (!out || !Array.isArray(out.save_copies)) return failed();
       return reply({ answer: out.save_copies.map(copyFields) });
@@ -24262,7 +24470,7 @@ var SAVES_SCRIPT = pageScript("saves", `
     const copyPath = SAVES.api + "/copies/" + m.saveCopyId;
     const noCopy = () => fail("no_save_copy", "The player has no earlier version " + m.saveCopyId + " in this game: Zaisma.saves.listCopies() lists the ones kept.");
     if (m.request === "get_copy") {
-      const res = await fetch(copyPath, { credentials: "same-origin" }).catch(() => null);
+      const res = await ask(copyPath).catch(() => null);
       if (res && res.status === 404) return noCopy();
       const out = res && res.ok ? await res.json().catch(() => null) : null;
       if (!out || !out.save_copy) return failed();
@@ -24274,7 +24482,7 @@ var SAVES_SCRIPT = pageScript("saves", `
     isRestoringCopy = true;
     queued = null;
     tell({ step: "pause" });
-    const res = await fetch(copyPath + "/restore", { method: "POST", credentials: "same-origin" }).catch(() => null);
+    const res = await ask(copyPath + "/restore", { method: "POST", body: JSON.stringify({ tag: cloud && !(cloud instanceof Promise) ? cloud.tag : null }) }).catch(() => null);
     isRestoringCopy = false;
     if (res && res.ok) {
       reply({ answer: null });
@@ -24283,6 +24491,11 @@ var SAVES_SCRIPT = pageScript("saves", `
       openThroughRestore();
       return;
     }
+    // Another account signed in on this browser: the game reopens as that account.
+    if (res && res.status === 409) {
+      awaitSignIn(true);
+      return failed();
+    }
     paused = wasPaused;
     if (!wasPaused) tell({ step: "sync", text: synced });
     if (res && res.status === 404) return noCopy();
@@ -43446,6 +43659,9 @@ function isLocalPreview(env2) {
   return siteHost === "localhost" || siteHost === "127.0.0.1" || siteHost.endsWith(".ts.net");
 }
 
+// ../../apps/site/src/credit-api.ts
+var PENDING_REFUND_FIRST_RETRY_MS = 5 * 6e4;
+
 // ../../apps/site/src/stripe-account-api.ts
 var CONNECT_STATE_DURATION_MS = 10 * 6e4;