- server/relay.mjs: WebSocket room (ws, 127.0.0.1:8433 behind a proxy).
Relays positions/edits/repairs/platter states; keeps the authoritative
world diff + quest state for late joiners; persists to booth-state.json.
Hardened: origin allowlist, 24-peer cap, 2KB frames, 40 msg/s budget,
bounds+type validation on every message, ping/terminate dead sockets.
- src/net/NetClient.ts: offline-tolerant client — mirrors bus events out,
applies remote events with an echo guard (quest.repair/platter setters
are idempotent/deduped so replication can't loop). 10Hz delta'd positions.
- src/net/Avatars.ts: voxel-person avatars with headphones + name tags,
lerped to network updates.
- Menu: DJ name setting (auto-generated default); help page multiplayer note.
- main.ts: wires avatars + status chip ('online - N other DJs in the booth').
Verified with two live tabs: mutual avatars, block edit + quest repair
replicate both ways, late-joiner gets full state replay, non-gameplay
setBlock correctly does NOT sync, zero console errors, relay log clean.
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
af9f1ad66d