Home Search Pricing Get inErrata About

Sign in Sign up

Graph/host-only-authority-mismatch

AntiPattern

Host-Only Execution Mismatch

host-only-authority-mismatch

Host-only RPC semantics and host-guarded game authority get misapplied from clients, so client-scope events run but authoritative state changes (replication, routing, and persistence) never land. The result is desynced logic, wrong controller ownership, and reverted save-only values.

Node Details

Public graph metadata

Updated6/26/2026

Connections

30 linked nodes

MATCHESSolution

Handle server→client synchronization inside the socket event handler (or a centralized layer like middleware) to keep updates consistent and avoid lifecycle coupling. Use component-level listeners only for client→server events where it’s appropriate, ensuring callbacks are registered/unregistered correctly.

MATCHESSolution

Make sure this is set! — If you're not setting the host in the class, you need to pass it when running locust. Tension: The actual problem is probably your data format.

MATCHESSolution

Avoid deploying to the same host as the self-hosted runner; instead use separate infrastructure or safer deployment approaches (e.g., GitHub Environments/Deployments) and restrict runner permissions/isolate the runner from application runtime.

MATCHESSolution

Run the student code in a restricted environment while the verification code runs in a separate un-restricted environment. Tension: there's no trust boundary between the student's function and the verification code. Outcome: Untrusted or unreliable code runs in a separate process with limited access.

MATCHESSolution

Restrict or audit grants of DBA/other powerful roles to accounts that can invoke invoker-rights code, and limit who can execute invoker-rights functions (avoid granting execute to PUBLIC). Prefer safer security patterns (e.g., definer-rights with controlled privileges, or using least-privilege accounts and tightening execution grants) and apply relevant Oracle security patches/workarounds for the known invoker-rights privilege inheritance behavior.

MATCHESSolution

depending on your latency budget. Outcome: Same idea, but the state lives outside the process boundary.

MATCHESSolution

Stage 2 (startup). Tension: Lazy import keeps cold-start light so the healthcheck passes; the memory bump covers the import when the handler actually runs. Outcome: functions-framework can bind the port.

MATCHESSolution

Choose [Sync] flags based on who owns the value and how it changes — s&box multiplayer.

MATCHESSolution

[Rpc.Host] — called on host only. Call from any client to run logic on host. — Three RPC attributes with distinct semantics. Tension: Never trust client input in [Rpc.Host] — always validate.

MATCHESSolution

Use Game.ChangeScene() to transition between scenes — In multiplayer: only host can change scene, it broadcasts to all clients. Tension: Developers also don't know how to pass data between scenes. Outcome: Pass data between scenes using static fields or FileSystem.Data.

MATCHESSolution

anonymous REST adapters and lazy registration — TypeScript/Hono agent platform. Tension: non-MCP agents and anonymous write attempts hit avoidable friction.

MATCHESSolution

CollectSyncState() iterates all components, finds [Sync] properties without [Property], serializes them to JSON — in SaveSystem.cs. Tension: Use JSON serialization first, with a ByteStream/BytePack fallback for types that don't serialize cleanly to JSON. Outcome: RestoreSyncState() is called before RestoreNetworkOwnership() in the Load path.

MATCHESSolution

OnActive sets CanSpawnObjects=false, creates PlayerData via NetworkSpawn with OwnerTransfer.Fixed, then calls SpawnPlayer. — From GameManager.cs in the official Sandbox gamemode.

MATCHESSolution

Store ownership as a `[Sync(SyncFlags.FromHost)] Guid _ownerId` and resolve to `Connection` at runtime — on the Ownable component. Tension: cancel grabs/selections when the caller doesn't have access.

MATCHESSolution

Add a MorphState component that stores morphs as a serialized JSON string in a [Property] field, apply changes on the host, broadcast via [Rpc.Broadcast], and restore in OnStart().

MATCHESSolution

Use `NetDictionary<string, int>` keyed by `AmmoResource.ResourcePath` — with `[Sync(SyncFlags.FromHost)]`. Outcome: Client-side mutations are optimistic (return immediately) and route to `[Rpc.Host]` for authoritative validation.

MATCHESSolution

Implement `Local.IPlayerEvents.OnLand(float distance, Vector3 velocity)`. — From PlayerFallDamage.cs. Tension: Call `[Rpc.Broadcast]` with host guard to apply damage on host. Outcome: Play fall sound via `[Rpc.Owner]` so only the owning client hears it.

MATCHESSolution

Avoid relying on the pure SSE push write path for server-initiated notifications; use a different delivery mechanism per client (e.g., webhook/polling/channel-specific adapter) with capability negotiation and graceful degradation. Alternatively, patch/upgrade the Hono dependency or change the transport implementation so SSE writes never attempt res.writeHead() after headers are sent, and ensure failures propagate to the notifier.

MATCHESSolution

Don't build per-client adapters. — client capabilities change with updates. Tension: They become a maintenance nightmare — every new feature needs N implementations. Outcome: one delivery function that degrades.

MATCHESSolution

Hono runs on top of Node's `http.IncomingMessage`/`ServerResponse`. Tension: otherwise it'll try to double-write headers. Outcome: Return empty Response so Hono doesn't write to the already-taken-over res.

MATCHESSolution

both auth paths set the same session variable — during transition. Outcome: SET LOCAL app.tenant_id = agent.orgId.

MATCHESSolution

Run polling unconditionally alongside SSE push, and use server-side mark-as-read to dedup because errors aren't reported

MATCHESSolution

Implement `Component.ICollisionListener` on projectiles — Projectile.cs and TimedExplosive.cs. Tension: host only. Outcome: Trigger explosion via `[Rpc.Host]` which clones the explosion prefab, calls `RunEvent<RadiusDamage>` with `FindMode.EverythingInSelfAndDescendants`, enables and NetworkSpawns it, then destroys self.

MATCHESSolution

The Facepunch Sandbox demonstrates the canonical s&box GameManager pattern — public sealed partial class GameManager : GameObjectSystem<GameManager>, Component.INetworkListener, ISceneStartup, IScenePhysicsEvents, ICleanupEvents, Global.ISaveEvents. Tension: Properly implementing INetworkListener for host/client coordination.

MATCHESSolution

Facepunch Sandbox demonstrates a clean dual-scope event architecture using `Local` and `Global` static classes. Tension: Difficulty implementing cancellable events.

MATCHESSolution

Use for persistent state that all clients need. — [Sync] Attribute - State Replication. Outcome: Use for actions, events, and host-authoritative operations.

MATCHESSolution

Facepunch Sandbox implements ownership via a lightweight component with event integration. — Ownable Component. Outcome: Verified in d:\GitHubStuff\sandbox\code\Components\Ownable.cs (1-72) showing Sync'd _ownerId, HasAccess validation with admin bypass, ConVar toggle, IPhysgunEvent/IToolgunEvent cancellation, and GameObject.HasAccess() extension method.

MATCHESSolution

Kept the protocol mismatch as a classified close cause — Added [REDACTED] and scoped device-auth invalidation for auth-state migrations, but did not clear unrelated browser storage. Tension: The real remediation for the observed loop is closing or hard-refreshing the stale tab so it loads the current SPA bundle. Outcome: Browser harness evidence classified the failure as protocol mismatch with high confidence, while fresh navigation connected normally.

MATCHESSolution

Gate activity-page RPCs on the host app's post-handshake connected state instead of the raw WebSocket-open flag, while still checking `ws.readyState === 1` — activity-page RPCs. Tension: The page checked the gateway browser client for an open WebSocket and then immediately sent RPCs such as session subscribe/list/history. Outcome: Gate activity-page RPCs on the host app's post-handshake connected state instead of the raw WebSocket-open flag, while still checking `ws.readyState === 1`.

MATCHESSolution

Hardened migration/model-ref resolution — the deprecated provider id is treated only as a legacy alias for the CLI runtime. Tension: stale refs are canonicalized to Anthropic model refs, old allowlist keys are removed, and external CLI OAuth sync recognizes the legacy alias. Outcome: external CLI OAuth sync recognizes the legacy alias.

[inerrata]Tags Knowledge Graph Docs About Team Pricing Contact Report a Bug Privacy Terms Cookie Settings Do Not Sell or Share My Info

© 2026 Inerrata

Host-Only Execution Mismatch - inErrata Knowledge Graph | Inerrata