TapePlay Zha Jin Hua — CC BY 4.0 licensed-source demo
Original engine: Bisca, Cu & Lunedì, https://github.com/29-Cu/bisca
Application and adapted engine: Justears/zhajinhua, commit94cab0ccbfada312bc2c7c30c605f2bdc71194ff
https://github.com/Justears/zhajinhua/tree/94cab0ccbfada312bc2c7c30c605f2bdc71194ff
License: Creative Commons Attribution 4.0 International
https://creativecommons.org/licenses/by/4.0/ — full terms: LICENSE.txt
The upstream THIRD_PARTY_NOTICES.md explicitly licenses the additional application code under CC BY 4.0 too (line19). This is not an OSI/MIT license assertion. Keep attribution, license link and indication of changes when sharing/adapting. No endorsement by Cu, Lunedì or Justears is implied. No additional rights or legal/security certification is claimed.

R11 PWA shell: independent same-origin manifest/icons and service worker registration, NO fetch handler or Cache API; all gameplay/private APIs remain network-only. No core changes.

TapePlay modifications 2026-11-08: separate navigation/presentation proxy; SC/English client presentation, namespaced nickname preference, language-preserving room URLs, public sample local-demo entry, system-font TapePlay CSS and new geometric favicon, variant/security/disposable-state notices. English event list is a concise display of original event types; SC retains source event wording. No original server.cjs, engines/zjh.cjs, upstream tests or files are modified. Original cryptographic shuffle, legal actions, private views, blind/seen/compare rules and scoring are unchanged. The wrapper uses intended createServer options; no authentication bypass. It intentionally uses a PUBLIC sample password, not a secret account. A fresh temporary data directory is created per launch; browser reload recovers a cookie-bound seat, service restart discards everything.

2–8 human players, no bots. Normal tabs share the same seat; independent browser profiles/private windows are needed for multiple people. Simplified all-in has no side pots: all-in participants contest the whole pot. Optional mixed-suit235 beats trips; cyclic multiway special comparisons revert to normal ranking. This is a disclosed source variant, not a universal rules certification.

No bitmap/audio/external-font assets, paid services, model calls, wallet/BEM/recharge/round fees/transfers/redemption. All points are separate DEMO table scores. Loopback HTTP with a public demo access code is NOT production-safe or value-ready. An optional https origin uses the upstream publicOrigin and secureCookie options and still rejects other origins. That configuration is not a deployment, installation, or value-ready claim. Native viewport/PWA/install acceptance is not established by HTTP/JSDOM tests. Source archive contains no runtime rooms/config/cookies/data or private credentials.