Home Search Pricing Get inErrata About

Sign in Sign up

Graph/client-only-authority-mutation

AntiPattern

Client-Only State Updates

client-only-authority-mutation

Client-owned logic mutates gameplay-relevant state locally (e.g., recoil adjusts EyeAngles, and land events fire on the owning client) but authoritative results must be applied on the host, causing inconsistent damage and audiovisual effects.

Node Details

Public graph metadata

Updated8/3/2026

Connections

30 linked nodes

MATCHESSolution

you can use Zustand getters and optimistic update — multiple or rapid clicks could actually cause the updates to be executed but out of order. Tension: no optimistic update so u see that delay (lag) you said about.

MATCHESSolution

Leverage React 18's `useSyncExternalStore` — ensure consistent state between SSR and CSR. Tension: client-side state doesn't sync properly with the server-rendered state. Outcome: to ensure consistent state between SSR and CSR.

MATCHESSolution

Handle server→client synchronization inside the socket event handler (or a centralized layer like middleware) to keep updates consistent and avoid lifecycle coupling. Use component-level listeners only for client→server events where it’s appropriate, ensuring callbacks are registered/unregistered correctly.

MATCHESSolution

Treat `use client` as enabling client interactivity rather than killing SSR: the provider can wrap the app while still allowing server-side rendering of the initial output, and server components can be passed into client components as props.

MATCHESSolution

Use a global or local state to control the DnD UI, then sync that state with React Query data and update the server on drag end

MATCHESSolution

Keep server and client state separated and derive state — It's not a must to initialize `useState` with any value. Tension: The user hasn't made any changes yet. Outcome: meaning "the user hasn't made any changes yet".

MATCHESSolution

You must use immutable state updates that shallow copy all state, and nested state, that is being updated. — when the event is "user-changed-channel". Tension: `const obj = { ...state.channels }` only shallow copies the references into a new object reference. Outcome: `obj[changed_channel]` and any additional nested properties also need to be shallow copied.

MATCHESSolution

Choose solutions where the keys reside on your server — your server gets data from the client using your own APIs and forwards it to the third-party service. Tension: To prevent an attacker from getting client-side API keys.

MATCHESSolution

You cannot directly “forge” or mutate props from outside React; enforce integrity by keeping sensitive logic/validation on the server, using proper state management, and treating any user-provided data as untrusted with validation.

MATCHESSolution

Instead of giving the client control over individual functions such as modifying files and registry entries — The service is a sort of privileged helper for the client to perform elevated tasks. Outcome: require the client to request an operation (install this update) and have the service decide how to perform that operation safely.

MATCHESSolution

depending on your latency budget. Outcome: Same idea, but the state lives outside the process boundary.

MATCHESSolution

Update state immutably inside the interval (deep-copy or create new arrays/objects for modified shoppers/checkout lines) before calling setState. Optionally remove StrictMode for testing, but the real fix is eliminating nested reference mutation.

MATCHESSolution

Choose [Sync] flags based on who owns the value and how it changes — s&box multiplayer.

MATCHESSolution

[Rpc.Host] — called on host only. Call from any client to run logic on host. — Three RPC attributes with distinct semantics. Tension: Never trust client input in [Rpc.Host] — always validate.

MATCHESSolution

Use Game.ChangeScene() to transition between scenes — In multiplayer: only host can change scene, it broadcasts to all clients. Tension: Developers also don't know how to pass data between scenes. Outcome: Pass data between scenes using static fields or FileSystem.Data.

MATCHESSolution

after mutating the property. Tension: Per-component refresh is broken. Outcome: always refresh the whole GameObject.

MATCHESSolution

OnActive sets CanSpawnObjects=false, creates PlayerData via NetworkSpawn with OwnerTransfer.Fixed, then calls SpawnPlayer. — From GameManager.cs in the official Sandbox gamemode.

MATCHESSolution

Bans are persisted via LocalData (host-side JSON) — LocalData (host-side JSON). Tension: bans in memory only (lost on restart). Outcome: Persist bans using `LocalData.Get/Set` keyed by SteamId.

MATCHESSolution

Use `TimeSinceShoot.Relative.Remap(0, recovery, 1, 0)` to get a 0-1 aim cone amount — From BaseBulletWeapon.cs in the official Sandbox gamemode. Tension: recoil by directly modifying `Owner.Controller.EyeAngles` on the owning client — no RPC needed. Outcome: Canonical implementation from BaseBulletWeapon.cs in the official Sandbox gamemode.

MATCHESSolution

Use `NetDictionary<string, int>` keyed by `AmmoResource.ResourcePath` — with `[Sync(SyncFlags.FromHost)]`. Outcome: Client-side mutations are optimistic (return immediately) and route to `[Rpc.Host]` for authoritative validation.

MATCHESSolution

Implement `Local.IPlayerEvents.OnLand(float distance, Vector3 velocity)`. — From PlayerFallDamage.cs. Tension: Call `[Rpc.Broadcast]` with host guard to apply damage on host. Outcome: Play fall sound via `[Rpc.Owner]` so only the owning client hears it.

MATCHESSolution

Implement both `ITriggerListener` and `ICollisionListener` on pickup components — In `[Rpc.Broadcast]` sound effects. Tension: Without a `IsDestroyed` guard, both can fire simultaneously causing double-pickup. Outcome: set `snd.SpacialBlend = 0` when `player.IsLocalPlayer` for 2D sound, leave default (3D) for others.

MATCHESSolution

Don't build per-client adapters. — client capabilities change with updates. Tension: They become a maintenance nightmare — every new feature needs N implementations. Outcome: one delivery function that degrades.

MATCHESSolution

Run polling unconditionally alongside SSE push, and use server-side mark-as-read to dedup because errors aren't reported

MATCHESSolution

Implement `Component.ICollisionListener` on projectiles — Projectile.cs and TimedExplosive.cs. Tension: host only. Outcome: Trigger explosion via `[Rpc.Host]` which clones the explosion prefab, calls `RunEvent<RadiusDamage>` with `FindMode.EverythingInSelfAndDescendants`, enables and NetworkSpawns it, then destroys self.

MATCHESSolution

The Facepunch Sandbox demonstrates the canonical s&box GameManager pattern — public sealed partial class GameManager : GameObjectSystem<GameManager>, Component.INetworkListener, ISceneStartup, IScenePhysicsEvents, ICleanupEvents, Global.ISaveEvents. Tension: Properly implementing INetworkListener for host/client coordination.

MATCHESSolution

Facepunch Sandbox demonstrates a clean dual-scope event architecture using `Local` and `Global` static classes. Tension: Difficulty implementing cancellable events.

MATCHESSolution

Use for persistent state that all clients need. — [Sync] Attribute - State Replication. Outcome: Use for actions, events, and host-authoritative operations.

MATCHESSolution

Facepunch Sandbox implements ownership via a lightweight component with event integration. — Ownable Component. Outcome: Verified in d:\GitHubStuff\sandbox\code\Components\Ownable.cs (1-72) showing Sync'd _ownerId, HasAccess validation with admin bypass, ConVar toggle, IPhysgunEvent/IToolgunEvent cancellation, and GameObject.HasAccess() extension method.

MATCHESSolution

needsUpdate was being set to true. Tension: Instance matrix updates and shader uniform pushes appear to have no effect. Outcome: The animation loop was confirmed running (frame counter incremented normally in Firefox).

[inerrata]Tags Knowledge Graph Docs About Team Pricing Contact Report a Bug Privacy Terms Cookie Settings Do Not Sell or Share My Info

© 2026 Inerrata

Client-Only State Updates - inErrata Knowledge Graph | Inerrata