Commit graph

5 commits

Author SHA1 Message Date
Erik
06dbf1cf8f docs: FA4 MF-3 REOPEN re-fix re-review -- CLOSED (04161def)
The re-fix moves the 0x00A6 re-declaration off the pre-world reset seam
and onto the post-world EnteredWorld seam, and stops the widget latch from
advancing on a dropped publish. Verified in the diff:

- SetPageVisible advances _pageVisible ONLY on RuntimeCommandStatus.Accepted
  (the widget-level root of the REOPEN); a dropped Inactive publish leaves
  the latch clear so the in-world attempt is not deduplicated.
- ResetSessionDeclaration (pre-world) now only clears the latch;
  RedeclareAfterWorldEntry (new) does the re-evaluation, wired through
  RetailUiRuntime.RedeclareSocialPanelAfterWorldEntry into
  LiveSessionRuntimeFactory's EnteredWorld RestoreLayout delegate.

Seam ordering traced and confirmed inverse of the pre-world SessionDialogs
stage: StartCore runs ResetHostBeforeStart (pre-world reset, latch clear)
at :555, then ActivateCommands :639, _inWorld=true :642, and
ApplyEnteredWorld :644 -> LiveSessionHost.ApplyEnteredWorld ->
RestoreLayout delegate -> RedeclareAfterWorldEntry. So SetPanelOpen's
requireWorld gate is Accepted and 0x00A6 publishes on the fresh server.
Idempotent and load-bearing (the social panel isn't state-managed
visibility, so RestoreLayout fires no OnShown edge).

Tests model the world gate (fake returns Accepted only when in-world) and
would fail against pre-fix behavior: the widget test's second attempt is
deduplicated if the latch advances unconditionally; the reconnect test's
DoesNotContain-after-reset fails if the pre-world declaration is
reintroduced (the coordinator's RED-verification). Binary confirmed
post-fix (new tests reference RedeclareAfterWorldEntry); 3/3 new + 58/58
touched classes green. 13,286/4/0 reconciles (+1, 0 deletions).

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-08-12 08:02:59 +02:00
Erik
8bbceff594 docs: FA4 fix-round narrow re-review -- CLOSED with one REOPEN (MUST-FIX 3)
Re-derived each disposition from the actual fix diffs (290f9b58/5499f058/
df000306/300d8189/55b17e15/1d743277/f041b09b), not the commit claims.

CLOSED (4/5 MUST-FIX, all 9 SHOULD-FIX, all 4 NIT, blast SF-1):
- MUST-FIX 1: (int)((double)pct*100.0) truncation + 6->44%/8->34% pinning
  cases + gate step corrected.
- MUST-FIX 2: intercept deleted, every type routes to the generic
  controller, type-4 dialog test added; type-1 allegiance path unaffected
  (was never intercepted).
- MUST-FIX 4: world->panel selection sync reproduces retail's found/
  fallback arms; AD-82 records the deferred generic UiTemplateListBox
  selection-model port honestly -- minimal-observable-contract, not a
  hidden gap.
- MUST-FIX 5: AD-82/AD-83 well-formed; AD-78 count corrected to 34/16.
- D6/D7/SF-8 dimming (audited from source): 34 dimmed / 16 live is
  correct, not split-the-difference. FellowshipShareLoot has NO client
  value-reader (only an editor/display surface; 0x00A2 sends shareXP
  alone; ACE authors loot server-side) -> dimmed faithful.
  FellowshipShareXP is genuinely read by the Create click -> Live right.

REOPEN (MUST-FIX 3): the 0x00A6 reconnect re-arm is placed at a pre-world
reset seam. ResetSessionTransientUi runs via the SessionDialogs reset
stage at ResetHostBeforeStart / retired-scope teardown -- both BEFORE
_inWorld=true and before command activation for the new generation -- and
SetPanelOpen requires world, so the re-declaration returns Inactive and
nothing is published, yet _pageVisible is still set true and no
post-world-entry hook re-evaluates. The new server never receives 0x00A6
and fellow vitals stay frozen -- the exact bug the fix targets. The unit
test passes only because its fake command records unconditionally.
Recommend moving the re-declaration to an in-world seam (EnteredWorld).

Totals/probe: 109/109 touched App test classes green on post-fix
binaries; live-mount probe PASS 1/1; +13/0-deletion delta and 13,285/4/0
corroborated on the touched projects and by arithmetic (not re-run
end-to-end).

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-08-12 07:48:26 +02:00
Erik
e202fbef6e docs: FA4 mechanism review -- reconcile with the concurrent pass at 6849b457
A second mechanism-lens review landed on the same path at 6849b457 while
this one was in progress and was overwritten by 913e35cd. Its text is
recoverable from git and is now cited from a new appendix, its two unique
findings are carried forward, and the two places the reviews disagree are
adjudicated from primary source.

Carried forward:
- SF-9: AD-78's register row still says "35 of 50 rows dimmed" (the D7
  addendum landed in the class doc, not the row's Where column).
- N-0: the Open/Close caption does not optimistically pre-toggle; lane B
  feature 11 records that retail's handler pre-toggles _open_fellow
  locally before sending 0x0291.

Adjudicated:
- _ftol2 vs MathF.Round: 6849b457 filed it a NIT ("round and truncation
  agree on every table value"). That holds for the DECIMAL literals, not
  the stored floats -- 0x007C91D4 = 0.44999998807907104 and 0x007E72BC =
  0.3499999940395355, so retail truncates 44.999998/34.999999 to 44/34
  while acdream rounds to 45/35. Stays MUST-FIX 1.
- D6 invite auto-response: 6849b457 passed it as verified-clean after
  confirming the code matches the plan. The binary says retail has no
  such client-side read on any confirmation path. Stays MUST-FIX 2.

The reviews agree on the reconnect D4 hole, the missing panel-level D4
conjunction test, the leader-tint register omission, and the live-DAT
probe result.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-08-12 05:03:31 +02:00
Erik
913e35cdb5 docs: FA4 mechanism review -- APPROVE-WITH-FIXES (5 MUST-FIX, 8 SHOULD-FIX)
Findings persisted before any fixer dispatch, per the campaign's §7
review protocol.

MUST-FIX, in the order they were derived:
1. D5's percentage conversion rounds where retail truncates. Byte-decoded
   0x0048ECC9..0x0048ECD8 (fld pct; fmul [0x007A5170]=100.0f; call
   _ftol2 @0x005DE394 -- the fld/fst/fistp/fild truncation dance), so a
   6-fellow roster displays 45% where retail shows 44%, and 8 fellows
   shows 35% vs 34%. The table itself IS byte-exact; only the ->int
   conversion diverges, and it is not fixable by a plain cast because
   0.45f*100f already rounds up to 45.0f in single precision.
2. D6's client-side invite intercept has no retail anchor. Read in full:
   Handle_Character__ConfirmationRequest @0x005640A0 (bare jump table),
   RecvNotice_FellowshipRequest @0x00490880, MakeFellowRequestDialog
   @0x00490620 (only guard is m_fellowRequestContext), plus a whole-file
   sweep of both option accessors -- zero reads on any confirmation path.
   The code comment cites ACE's Fellowship.cs as "retail". ACE filters
   both bits server-side, so the intercept is dead against a correct
   server and harmful against a drifting one -- and IgnoreFellowshipRequests
   defaults to TRUE client-side.
3. D4 never re-declares 0x00A6 after a generation reset: the edge-
   triggered _pageVisible latch survives reconnect, so fellow vitals stay
   frozen for the whole new session. ResetSessionTransientUi is the seam.
4. gmFellowshipUI::UpdateFellowSelection @0x0048F0F0 is not ported --
   selecting a fellow in the WORLD leaves Dismiss/Leader disabled and no
   row ever shows selected; the plan's contracted UiTemplateListBox
   selection model + 0x1000000D row instance-id were not added.
5. Three shipped deviations have no register row (invite intercept, gold
   leader tint, name-text-only row selection); the Recruit is-a-player
   gate's "inline comment, not a register row" call is also wrong.

Re-derived rather than trusted: the live-mount probe was re-run against
the installed DATs (every ledger element/string claim CONFIRMED, Bind()
warning-free), the GetEvenSplitXPPctg table was byte-read from the
PDB-paired binary, FlushPreservingScroll's shrink semantics were traced
through UiScrollablePanel/UiScrollable (sound), and the five touched
test classes pass 93/93.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-08-12 05:01:53 +02:00
Erik
6849b45771 docs: FA4 mechanism review -- APPROVE-WITH-FIXES (1 MUST-FIX, 3 SHOULD-FIX, 2 NIT)
Mechanism-faithfulness lens on 357d2032/5bdd0528/38f08314. Every
wire-touching mechanism verifies retail-faithful: the D4 0x00A6 gate
(all five in-session transitions + idempotence + no-send-while-
disconnected), the leader-quit 0x0290-before-0x00A3 hand-off routing,
the D5 byte-exact even-split table, the D6 type-4 auto-response +
Runtime mutual exclusion, the D7 four-row un-dim (35->31 conformance),
scroll preservation across a rebuild, create-flow refusal-by-enabled-
state, and the button-enable rules. Live-mount probe PASSES 1/1 against
real DATs; FA4 suites 75/75 App + 28/28 Runtime under --no-build.

MUST-FIX: the leader-gold-tint adaptation has no divergence-register row
(AD-80/AD-81 don't cover it). SHOULD-FIX: AD-78's stale 35-of-50 count;
D4 not re-armed across a reconnect while the panel stays open; no
panel-level test pins the D4 conjunction. NITs: caption pre-toggle,
_ftol2-vs-Round (both non-blocking).

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-08-12 04:59:35 +02:00