Repository navigation
World
·
201 commits
to main
since this release
Client UI & Frontend**
- Injection Settings: Added a dedicated Injection section in the settings menu for managing how the client attaches to the game.
- Selectable Injection Methods: Added the ability to manually select the preferred injection API from the UI:
- Auto (Recommended): Fetches the most up-to-date, compatible API automatically.
- External: Standalone process injection for maximum reliability and crash recovery.
- Internal: Direct process integration for the tightest performance.
- Settings Layout: Relocated the injection delay slider and auto-inject toggle to the new Injection section for better organization.
- Bootstrapper Picker: Added a custom popup UI that allows users to choose and launch via detected third-party bootstrappers (Bloxstrap, Fishstrap, or Froststrap) if a standard installation is not found.
- Script Hub Providers: Integrated support for additional script providers.
- Multi-Provider Filtering: Updated provider selection to use checkboxes instead of radio buttons, enabling users to search and view scripts from multiple providers simultaneously.
- Advanced Filters: Introduced new sidebar filters to sort scripts by patched status, mobile support, and key systems.
- Universal Script Detection: Improved the logic for identifying universal scripts across different naming conventions and game IDs.
Core API & Backend
- Dynamic API Loading: Updated initialization logic to read the user's chosen injection method directly from saved preferences instead of always forcing a default remote fetch.
- Smart Workspace Folders: Made the workspace directory naming dynamic so it adapts automatically based on the currently active injection API.
- Installation Searching: Rewrote the installation search logic to strictly prioritize official game installations in a specific order (Program Files, Xbox/UWP, then AppData).
- Bootstrapper Support: Implemented backend detection for third-party bootstrappers to serve as fallbacks when official game installations are missing.
WorldAPI Update — Xeno & Velocity
Xeno
- Removed the blanket loadstring block and recursive request hook.
- Improved HTTP body validation and error reporting.
- Fixed request aliases and repeated initialization.
- Removed misleading compatibility stubs while preserving native functions.
- Preserved loadstring compilation and runtime errors.
Velocity
- Added ordered execution queues with capacity limits.
- Replaced thread-per-message pipe writes with asynchronous communication.
- Added connection timeouts and cancellation.
- Improved attachment checks and stale-client cleanup.
- Added automatic helper recovery with limited retries.
Reliability
- Separated backend implementations.
- Added structured execution results and safer backend switching.
- Added staged updates, binary validation, rollback, and interrupted-update recovery.
- Added cancellable async APIs and compatibility diagnostics.
Security & Logging
- Added session authentication to the local bridge.
- Restricted bridge file operations to
Workspace. - Disabled bridge command execution and process-exit endpoints.
- Added log redaction, size-based rotation, and bounded log queues.
- Made external log translation opt-in.
Validation
- Passed 14 runtime checks, 12 Lua checks, and PID concurrency testing.
- Release build passed with one existing compiler warning.
- Live Xeno and Velocity testing passed.
Note: “Sent” confirms transport submission, not successful script execution.