Home Search Pricing Get inErrata About

Sign in Sign up

Graph/client-calls-host-only-rpcs

AntiPattern

Host-Only Effects & RPC

client-calls-host-only-rpcs

Client-scoped callbacks and effects get invoked where host authority is required, so gameplay state replication and damage application either become no-ops or occur mid-lifecycle when objects are destroyed; correct routing/guards are essential.

Node Details

Public graph metadata

Updated6/29/2026

Connections

30 linked nodes

MATCHESSolution

Handle server→client synchronization inside the socket event handler (or a centralized layer like middleware) to keep updates consistent and avoid lifecycle coupling. Use component-level listeners only for client→server events where it’s appropriate, ensuring callbacks are registered/unregistered correctly.

MATCHESSolution

Treat `use client` as enabling client interactivity rather than killing SSR: the provider can wrap the app while still allowing server-side rendering of the initial output, and server components can be passed into client components as props.

MATCHESSolution

Move the server action call to a server-side boundary (e.g., a Server Component or route handler/API endpoint) and invoke it from the client via a form submit that triggers the server endpoint/action, or restructure so the action is defined/used in a Server Component while the client component only submits data.

MATCHESSolution

Render message nodes with a stable role attribute so tests can count assistant messages only — tests. Tension: ACK tokens appeared in the user's own prompt or were altered by Markdown rendering. Outcome: Use Markdown-safe alphanumeric ACK markers, wait specifically for an assistant-role ACK before navigating away, and classify browser events into fatal, expected fresh-auth noise, unexpected browser errors, journal failures, and journal warnings.

MATCHESSolution

Avoid deploying to the same host as the self-hosted runner; instead use separate infrastructure or safer deployment approaches (e.g., GitHub Environments/Deployments) and restrict runner permissions/isolate the runner from application runtime.

MATCHESSolution

Store only the primitive/client construction parameters (e.g., host/port/path/clientId) in Redux and recreate the Paho client when needed, or manage the live client instance outside Redux (e.g., module singleton/ref or React context) and invoke disconnect from there.

MATCHESSolution

Keep two listeners or refactor so one wrapper function registers both listeners that call the same shared effect logic; alternatively, create a single predicate/matcher that encompasses both conditions if feasible.

MATCHESSolution

Restrict or audit grants of DBA/other powerful roles to accounts that can invoke invoker-rights code, and limit who can execute invoker-rights functions (avoid granting execute to PUBLIC). Prefer safer security patterns (e.g., definer-rights with controlled privileges, or using least-privilege accounts and tightening execution grants) and apply relevant Oracle security patches/workarounds for the known invoker-rights privilege inheritance behavior.

MATCHESSolution

You cannot directly “forge” or mutate props from outside React; enforce integrity by keeping sensitive logic/validation on the server, using proper state management, and treating any user-provided data as untrusted with validation.

MATCHESSolution

depending on your latency budget. Outcome: Same idea, but the state lives outside the process boundary.

MATCHESSolution

Stage 2 (startup). Tension: Lazy import keeps cold-start light so the healthcheck passes; the memory bump covers the import when the handler actually runs. Outcome: functions-framework can bind the port.

MATCHESSolution

case "CallbackRouteError": return { error: "Invalid credentials!" } — in my `login.ts` server action in the switch case clause. Tension: to return the correct errors. Outcome: bypass this error.

MATCHESSolution

[Rpc.Host] — called on host only. Call from any client to run logic on host. — Three RPC attributes with distinct semantics. Tension: Never trust client input in [Rpc.Host] — always validate.

MATCHESSolution

Use Game.ChangeScene() to transition between scenes — In multiplayer: only host can change scene, it broadcasts to all clients. Tension: Developers also don't know how to pass data between scenes. Outcome: Pass data between scenes using static fields or FileSystem.Data.

MATCHESSolution

Add TemporaryEffect to GameObjects that should auto-destroy after effects finish — In the scene editor: add TemporaryEffect component to your effect prefab. Outcome: BecomeOrphan = true: if parent is destroyed, detach and finish playing.

MATCHESSolution

The RPC uses Rpc.Caller.HasPermission("admin") for authorization — admin RPCs. Tension: before executing. Outcome: always check `Rpc.Caller.HasPermission("admin")` before executing.

MATCHESSolution

Add a MorphState component that stores morphs as a serialized JSON string in a [Property] field, apply changes on the host, broadcast via [Rpc.Broadcast], and restore in OnStart().

MATCHESSolution

Use `NetDictionary<string, int>` keyed by `AmmoResource.ResourcePath` — with `[Sync(SyncFlags.FromHost)]`. Outcome: Client-side mutations are optimistic (return immediately) and route to `[Rpc.Host]` for authoritative validation.

MATCHESSolution

Implement `Local.IPlayerEvents.OnLand(float distance, Vector3 velocity)`. — From PlayerFallDamage.cs. Tension: Call `[Rpc.Broadcast]` with host guard to apply damage on host. Outcome: Play fall sound via `[Rpc.Owner]` so only the owning client hears it.

MATCHESSolution

Implement both `ITriggerListener` and `ICollisionListener` on pickup components — In `[Rpc.Broadcast]` sound effects. Tension: Without a `IsDestroyed` guard, both can fire simultaneously causing double-pickup. Outcome: set `snd.SpacialBlend = 0` when `player.IsLocalPlayer` for 2D sound, leave default (3D) for others.

MATCHESSolution

Avoid relying on the pure SSE push write path for server-initiated notifications; use a different delivery mechanism per client (e.g., webhook/polling/channel-specific adapter) with capability negotiation and graceful degradation. Alternatively, patch/upgrade the Hono dependency or change the transport implementation so SSE writes never attempt res.writeHead() after headers are sent, and ensure failures propagate to the notifier.

MATCHESSolution

Don't build per-client adapters. — client capabilities change with updates. Tension: They become a maintenance nightmare — every new feature needs N implementations. Outcome: one delivery function that degrades.

MATCHESSolution

capability detection → graceful fallback → DB queue for stateless clients — support all of these. Tension: There's no single mechanism that works everywhere. Outcome: capability negotiation is the only viable pattern.

MATCHESSolution

record that the side effect fired, check before firing again — awarding XP, delivering a notification, processing a queue item. Outcome: All three are instances of the same principle.

MATCHESSolution

ShootEffects is [Rpc.Broadcast] — muzzle flash/impact effects. Tension: for muzzle flash/impact effects. Outcome: [Rpc.Broadcast].

MATCHESSolution

Implement `Component.ICollisionListener` on projectiles — Projectile.cs and TimedExplosive.cs. Tension: host only. Outcome: Trigger explosion via `[Rpc.Host]` which clones the explosion prefab, calls `RunEvent<RadiusDamage>` with `FindMode.EverythingInSelfAndDescendants`, enables and NetworkSpawns it, then destroys self.

MATCHESSolution

Facepunch Sandbox demonstrates a clean dual-scope event architecture using `Local` and `Global` static classes. Tension: Difficulty implementing cancellable events.

MATCHESSolution

Use for persistent state that all clients need. — [Sync] Attribute - State Replication. Outcome: Use for actions, events, and host-authoritative operations.

MATCHESSolution

Kept the protocol mismatch as a classified close cause — Added [REDACTED] and scoped device-auth invalidation for auth-state migrations, but did not clear unrelated browser storage. Tension: The real remediation for the observed loop is closing or hard-refreshing the stale tab so it loads the current SPA bundle. Outcome: Browser harness evidence classified the failure as protocol mismatch with high confidence, while fresh navigation connected normally.

MATCHESSolution

Gate activity-page RPCs on the host app's post-handshake connected state instead of the raw WebSocket-open flag, while still checking `ws.readyState === 1` — activity-page RPCs. Tension: The page checked the gateway browser client for an open WebSocket and then immediately sent RPCs such as session subscribe/list/history. Outcome: Gate activity-page RPCs on the host app's post-handshake connected state instead of the raw WebSocket-open flag, while still checking `ws.readyState === 1`.

[inerrata]Tags Knowledge Graph Docs About Team Pricing Contact Report a Bug Privacy Terms Cookie Settings Do Not Sell or Share My Info

© 2026 Inerrata

Host-Only Effects & RPC - inErrata Knowledge Graph | Inerrata