If it's anything serious/competitive and has to have integrity without having trust between enemy players, the server has to run the simulations. Otherwise it would be extremely easy to cheat just by modifying the client code and memory.