Phase 12: the weapon ladder — every tin opens something nastier

Deliveries cycle BOMB -> TRIPLE -> FIRE -> GUN (G.deliveries indexes the
ladder); one tin at a time, a fresh delivery replaces unspent stock. All
weapons stay one-thumb: the serve auto-consumes, zero new inputs.

- Triple serve (x3): one real serve fans two ballistic clones +-6deg (extras[]
  in zombies.js — NOT the reverted rapid-fire: each fan costs a proper serve).
  Side balls respect variant rules (wound brutes, clank off chairs, pass the boss)
- Flame ball (x3): kills on ANY contact regardless of pow, chair ignored,
  full pierce (splatter pace tax undone), ember trail, white-hot render
- Machine gun (8s): horde auto-fire as a pickup — no serving, drag steers,
  no assist, spawner keeps running, ammo bar drains on the HUD, then the
  serve loop resumes
- HUD pips per type (black/yellow/orange) at the bomb slot; flash names the
  tin ('NEW BALLS: FIRE')

Verified: ladder cycles across 5 deliveries; triple spawns 2 extras and the
fan kills flanked targets; pow-0.1 flame ball clears shambler+shield+brute in
one pass with TRIPLE KILL chaining; GUN tin arms at changeover, blocks taps,
streams pellets (kill in 5 frames), expires back to pretoss; tennis 11/12;
no weapon-flag leaks into tennis; no console errors.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

zombies.js

@@ -13,6 +13,7 @@ export const gore = [];    // lawn decals {x, z, r, a}  — the flat ground laye
 export const piles = [];   // 3D-ish gore mounds {x, z, size 1..4, seed} — grow where kills cluster
 export const parts = [];   // splatter particles {x, y, z, vx, vy, vz, t, dark}
 export const pellets = []; // machine-gun rounds during a horde {x, y, z, vx, vz, t}
+export const extras = [];  // triple-serve side balls {x, y, z, vx, vy, vz, pow, t} — ballistic clones
 
 let spawnT = 1.5, moanT = 3;
 
@@ -135,7 +136,12 @@ export function updateZombies(dt) {
   if (G.mode === 'splatter') { // transition spawns are scripted, not timed
     G.splatT += dt;
     if (G.horde) tickHorde(dt); // horde: dense spawns + machine gun, ignores the cap
-    else if (!G.changeover) {   // changeovers are a real breather — no fresh spawns
+    else if (G.mgT > 0 && G.phase === 'rally') { // machine-gun tin: horde firepower, regular rules
+      G.mgT -= dt;
+      if ((G.mgCool -= dt) <= 0) { firePellet(); G.mgCool = 1 / TUNE.mgRate; }
+      if (G.mgT <= 0) setupPoint(); // ammo dry — the serve loop resumes
+    }
+    if (!G.horde && !G.changeover) { // changeovers are a real breather — no fresh spawns
       spawnT -= dt;
       // the spawn director: the match's age (games finished) sets both crowd size and tempo
       const cap = Math.min(TUNE.zMaxCap, TUNE.zMax + G.runGames);
@@ -166,7 +172,7 @@ export function updateZombies(dt) {
       splat(1);
       voice('game_set_massacre', 0.8);
       G.mode = 'eaten'; ball.active = false; G.flash = null; // zombies keep shambling for ambience
-      G.horde = null; pellets.length = 0;                    // the swarm stops; the eaten screen takes over
+      G.horde = null; pellets.length = 0; extras.length = 0; G.mgT = 0; // everything stops; the eaten screen takes over
       try { // the run is over — settle it against the best (games survived, sets as tiebreak)
         const b = JSON.parse(localStorage.splatterBest || 'null') || { games: 0, sets: 0 };
         if (G.runGames > b.games) { b.games = G.runGames; b.sets = G.sets[0]; localStorage.splatterBest = JSON.stringify(b); }
@@ -180,6 +186,15 @@ export function updateZombies(dt) {
           explode(ball.x, ball.z); ball.bomb = false;
           spentBall(); break; // zombies mutated — stop this frame's loop
         }
+        if (ball.flame) { // burns through anything it touches — no quality gate, no chair, no pace tax
+          if (zb.variant === 'r') { // the boss only takes a wound
+            zb.hp--; splat(0.5);
+            if (zb.hp <= 0) { splatter(i); } continue;
+          }
+          const vx0 = ball.vx, vz0 = ball.vz;
+          splatter(i); ball.vx = vx0; ball.vz = vz0; // undo splatter's pierce tax: full pace through the lane
+          continue;
+        }
         if (zb.variant === 'r') { // mini-boss: splat-quality wounds it; soft balls it rallies (racketAI)
           if ((ball.pow || 0) >= TUNE.zSplatQ) {
             zb.hp--; splat(0.5); pock(0.6, 300);
@@ -229,6 +244,27 @@ export function updateZombies(dt) {
     if (hit || pe.t <= 0) pellets.splice(i, 1);
   }
 
+  for (let i = extras.length - 1; i >= 0; i--) { // triple-serve side balls: full ballistic clones
+    const e = extras[i];
+    e.t -= dt; e.vy -= TUNE.gravity * dt;
+    e.x += e.vx * dt; e.y += e.vy * dt; e.z += e.vz * dt;
+    if (e.y <= 0 && e.vy < 0) { e.y = 0; e.vy = -e.vy * TUNE.bounceY; e.vx *= TUNE.bounceXZ; e.vz *= TUNE.bounceXZ; }
+    let dead = e.t <= 0 || Math.abs(e.x) > 7.5 || e.z < -2 || e.z > 25.5;
+    if (!dead && e.y < 1.9) for (let j = zombies.length - 1; j >= 0; j--) {
+      const zb = zombies[j];
+      if (zb.variant === 'r') continue; // side balls pass the boss — only the match ball duels it
+      if (Math.hypot(zb.x - e.x, zb.z - e.z) < (zb.variant === 'g' ? 0.75 : 0.55)) {
+        if (zb.variant === 's' && e.vz < 0 && !(zb.shieldT > 0)) { zb.shieldT = TUNE.shieldDown; pock(0.9, 1800); } // chair blocks these too
+        else if (e.pow >= TUNE.zSplatQ) {
+          if (zb.variant === 'g' && --zb.hp > 0) splat(0.4); // wounds the brute
+          else killZombie(j, !!G.horde);
+        } else { zb.z -= TUNE.zPushback; pock(0.5, 300); }
+        dead = true; break; // a side ball is spent on its first touch
+      }
+    }
+    if (dead) extras.splice(i, 1);
+  }
+
   for (let i = parts.length - 1; i >= 0; i--) {
     const p = parts[i];
     p.t -= dt; p.vy -= 14 * dt;