Skip to content

Feature Status Register

rayswaynl edited this page Jun 21, 2026 · 471 revisions

Feature Status Register

This register separates working systems from partial, deferred or risky systems found during indexing. For revive/remove decisions on dormant feature paths, use Abandoned feature revival.

What this page is

  • Canonical risk-and-readiness map for current gameplay feature health.
  • Evidence-first patch status for active systems, partial systems and likely regressions.
  • Canonical cross-link hub so subsystem pages and playbooks route users here for current patch risk and ownership.

Where it lives

How this page runs in the workflow

  1. Read this register first for risk ranking before opening a subsystem playbook.
  2. Use [Area] rows to pick the current highest-impact lane and then open:
    • Source index / atlas pages (e.g., SQF-Code-Atlas.md, Server-Gameplay-Runtime-Atlas.md)
    • Hardening roadmap
    • DR/cross-link pages (Deep-review findings, Public-variable channel index, feature atlases)
  3. Prefer this page for the latest patch status and known open dependencies before editing source.

What depends on this page

Risk notes

  • Keep patch-risk edits in-place and one-way: add proof to canonical pages instead of repeating deep call stacks in this register.
  • Treat entries marked "patch-ready-current-source-unpatched" as live claims requiring source+vanilla validation before changing status to published.
  • If a finding is promoted or closed, update this register and the corresponding lane record in agent-feature-status.jsonl first, then mirrors and progress pages.
  • Use Developer history and upstream lessons when a risky feature overlaps upstream supply, JIP, marker, town-AI, performance or reverted-branch history.
  • Upstream-derived risk rows should name exact refs when used for implementation claims. The current local miksuu/master head checked for the 2026-06-13 P0 network refresh is b8389e74; use Community & Dev and Upstream Miksuu commit intel before turning upstream lessons into implementation claims.

Working / Active Systems

  • Core Warfare loop: towns, commanders, bases, factories, upgrades, resources and victory checks.
  • Client/server/common initialization split.
  • Generic PVF request/response system.
  • Player supply-truck missions on master.
  • Enhanced day/night cycle with server authority and client smoothing.
  • Server FPS publishing and RHUD/FPS HUD.
  • Performance audit instrumentation plus analyzer.
  • Client auto view-distance and target-FPS hotkeys; current source uses a 60 FPS default, +/-4 FPS band and map-visible guard.
  • Anti-stack module with optional mission parameter.
  • AFK kick through BattlEye publicVariable filter.
  • Mobile ambulance respawn support; MASH support is branch-sensitive and listed below.
  • ICBM/radiation module.
  • EASA aircraft loadout module.
  • Client marker blinking guarded by parameter.
  • Air Event override parameter remains live: it forces event economy/upgrade-clearance defaults and hides ICBM plus Avenger/Tunguska-style heavy AA. Canonical route: Mission parameters.
  • LoadoutManager mission copy/generation workflow.
  • Discord bot status updates from exported game data.

Partial / Deferred / Needs Review

Area Evidence Status
Client-visible indicators and state surfaces 2026-06-06 indicator scout/sharpening and indicator-surface-matrix-index passes found and routed indicator families across Rsc/Titles.hpp, Client_UpdateRHUD.sqf, updateavailableactions.fsm, client_title_capture.sqf, marker loops, Tactical/Respawn markers, support marker PVFs, Buy Units/EASA/Gear/Upgrade icons, server-FPS/status publishers and Client/Images references. Matrix seeded, per-family detail remains. Use Client UI systems atlas to pick one surface family at a time for branch/root validation, owner-page integration or pruning before redesigning indicators.
Skin selector/class swap WFBE_C_SKIN_SELECTOR defaults to 0 (Common/Init/Init_CommonConstants.sqf:601), the WF-menu shortcut is hidden (Rsc/Dialogs.hpp:1258), but current source still has join-time, WF-menu and User11 openers plus the replacement-player apply chain (Client/Module/Skill/Skill_Init.sqf:75-77; Client/GUI/GUI_Menu.sqf:211-215; Client/Init/Init_Keybind.sqf:1-14; WASP/actions/SkinSelector/SkinSelector_Apply.sqf:207-257). Source-present, default disabled, smoke pending before live-feature wording. Use Skin selector/class swap before enabling or editing class pools, ghillie role gates, handler restoration or respawn persistence.

Networking / Public-variable hardening lane (source-backed)

This lane tracks direct channels, PVF authority boundaries, and JIP semantics that are still open after the PVF dispatch trust patch lane.

  • publicVariable/publicVariableServer direct request channels are not hardened by PVF allowlisting.
  • request handlers still need explicit side/team/ownership checks even after dispatch is fixed.
  • missionNamespace/JIP handling differs by channel; some flows are request-response only and are not replay-safe.
Area Evidence Status
PVF/PVEH sender authentication (systemic) Deep-review findings DR-55: Server_HandlePVF.sqf:14 + Init_PublicVariables.sqf:50 never forward the sender, so ~18 handlers are client-forgeable (RequestVehicleLock, RequestChangeScore, RequestMHQRepair, RequestNewCommander, RequestTeamUpdate, ATTACK_WAVE_DETAILS, SupplyMissionCompleted, RequestSpecial RespawnST/repair-camp/upgrade-sync/connected-hc/update-clientfps/update-teamleader). Open — P0. One dispatcher-level authentication change + per-handler side/role/funds re-derivation closes the whole forgery surface. See agent-hardening-backlog.jsonl#pvf-handler-sender-authentication.
New source-confirmed economy/scoring/AI findings DR-49 side-supply underflow guard adds supply (Common/Server_ChangeSideSupply); DR-52 support specials no server auth; DR-53 PR#1 supply-heli forgeable amount/double-reward; DR-56 ARTY_HandleSADARM thread-leak/busy-wait. DR-57 town patrols never spawn is now historical for the old 89ae9dad path: current origin/master cf2a6d6a retires that path and adds Patrols v2 in both maintained roots. Open except DR-57 current-master route. The economy/authority/perf findings remain source-unpatched. Patrols v2 is source-present and smoke-pending; see Towns/camps/capture and Source fix propagation queue. DR-50 now has a dedicated HQ score row below.
HQ-kill score double-award (DR-50) Commander/HQ lifecycle owns the branch matrix. Branch check 2026-06-14: current docs head 8c3942d2 is source-unchanged from f82a9127 for checked HQ score paths; stable origin/master cf2a6d6a, Miksuu upstream b8389e74, origin/perf/quick-wins 0076040f, release a96fdda2 and feat/ai-commander c20ce153 all keep the same two-award shape: generic HQ building score from _points = 30000 / 100 * WFBE_C_BUILDINGS_SCORE_COEF plus a second _score = 900 HQ bounty under the non-teamkill guard. Docs/Miksuu/perf roots show Server_OnHQKilled.sqf:23,49,78,81 and constants :356; stable roots show :23,54,83,86 and constants :376; release roots show :23,54,83,86 and constants :372; feat-ai shows :23,49,78,81 with constants :364 in Chernarus and :356 in maintained Vanilla. Patch-ready, branch-unrescued scoring bug. A clean enemy HQ kill pays 1800; a friendly/teamkill HQ kill still gets the unconditional 900. Keep one non-teamkill award, make teamkills score zero, propagate maintained Vanilla and smoke enemy/friendly HQ kills plus DR-20 idempotency interactions.
Commander reassignment call-shape (DR-15) Branch check 2026-06-14: current docs head 8c3942d2 is source-unchanged from e2c9f6ed/f82a9127 for checked reassignment paths; Chernarus and maintained Vanilla still use _side = _this at Server_AssignNewCommander.sqf:3, while stable origin/master cf2a6d6a, Miksuu b8389e74, perf/quick-wins 0076040f, release a96fdda2 and feat/ai-commander c20ce153 fix helper unpacking at :4-5 in both maintained roots. Branch-split. Stable/release/helper branches resolve DR-15 helper shape, but docs head still needs the patch or port. Duplicate new-commander-assigned senders and UI visible-name selection remain open everywhere checked; use Commander vote/reassignment.
Upstream supply-run exploit/JIP regression pattern Miksuu PR #10 / merge 97dfff26 fixed remote supply-truck activation; PR #11 / 8164cc33 added a 50 m "too far" notification; PR #12 / 86ec28d6 fixed that notification firing during JIP. Confirmed historical risk. Keep supply mission start/reward hardening server-owned and test late join + remote-start behavior before merging new supply/cash-run variants.
Town-defense activation/capture-state regression pattern 4aaa814a and 6189f3c5 optimized town/camp/town-AI scans; follow-ups a20a5a0f, 84b1b684, ea0bff2e restored reliable/pre-capture activation and prevented defenders from waking enemy towns; e4be1958 adds capture-side cleanup. A 2026-06-13 ref scan found no Server_CleanupExpiredTownDefenseAssets.sqf path in docs checkout b9e80da0, stable origin/master cf2a6d6a, Miksuu b8389e74, perf/quick-wins 0076040f, release a96fdda2 or feat/ai-commander c20ce153, so older 89ae9dad persistence-helper notes are branch-historical rather than current branch truth. Historical regression lesson; current helper claim retired. Keep activation/capture-state changes smoke-gated and re-audit capture persistence before treating it as current stable behavior. Current tracked town-AI vehicle deletion risk routes to Town AI vehicle despawn safety.
Upstream marker locality/cache regression pattern 9a550b7a reverted a group-leader marker global-var experiment; 9c72a281, 951e72cb, 332874fd fixed marker tracking, disconnect staleness and side visibility leaks. Confirmed historical risk. Marker/cache changes need side-visibility and disconnect/reconnect validation.
Deep-history AntiStack/RequestJoin fragility 09131233, 841d16af, 88a2ef49, 448b1d85, b32babc7 show command typo, launch-state semantic change, RequestJoin fixes, DB type crash and an AntiStackV6 revert. Confirmed historical risk. AntiStack changes need launch/late join, teamswap, disabled-mode, DB-unavailable and monitoring-only validation.
Deep-history removed task system f61f7222 removed task system entirely; 4881e0d5 removed it from all terrains. Confirmed removed/deferred. Do not revive as a small UI toggle; rebuild as a new JIP-safe task feature if owner wants it back.
Deep-history generated map/version failure pattern 081c1dc4 added copypasted untested modded terrain files; c312b0ec added missions with copypaste method; 812e9596 removed Tasmania after clean-repo mission-load failures tied to ignored/generated version.sqf. Confirmed tooling/release risk. Generated version.sqf and clean-checkout map loads are release gates.
Deep-history branch tombstones and reverted PRs oldMasterBranch tip 3a7972a2 deletes old master contents; PR #3 HQ repair price merged then 346e3be8 reverted it; PR #9 endgame music closed unmerged; A3 test tree removed by 83298186. Confirmed negative knowledge. Do not revive old branch or PR content from name/status alone; check later reverts, branch family and OA compatibility first.
Deep-history client init/UI/marker lifecycle risk 3ff02aea moved clientInitComplete to the real end of init; c6d2539e fixed UI global action state; 95a12305 fixed UAV marker audience leakage; 9c72a281 restored marker motion after cache optimization. Confirmed historical risk. Client/UI/marker work must preserve lifecycle ordering, side audience, moving-marker position refresh and JIP behavior.
Deep-history construction/removal/runtimes 77a07bc0 reverted construction argument dedupe; 16856ae7/8b7fab95 removed guerilla barracks across FSM/HC/buy paths; 33fb2676 reverted supply performance work using wrong authority context. Confirmed historical risk. Construction/removal/performance edits need call-contract docs, full reference greps and dedicated-server/JIP smoke.
Second-wave release tooling and modded packaging risk Current ZipManager.cs packages Missions and Missions_Vanilla while Modded_Missions is commented out; 2a13ce36 requires env var 7za; 3458e714 handled locked file copies; f095e461 fixed Takistan DB map ID post-copy. Confirmed tooling/release risk. Treat release output as Chernarus + generated Vanilla/Takistan unless modded packaging is re-enabled and validated; inspect LoadoutManager logs, 7za, version.sqf, and terrain post-copy fixes.
Second-wave HQ repair and ICBM economy authority risk PR #3 / 7cd0e18d increasing HQ repair cost was reverted by 346e3be8/59a995e8; 5db438ca 75k nukes were reverted by 31d8a06d; current ICBM/HQ repair paths still have client-side action/debit authority concerns. Confirmed historical + current authority risk. Do not add HQ repair escalation or ICBM price/effect changes until server validates affordability, side/team/commander, cooldown, debit and final effect.
Second-wave marker blinking and HC routing risk Dec 2025 marker blinking chain includes 2f6ff43d, 9a550b7a, 9c1fe110 defaulting blinking off; HC upstream history adds a241ac75, 6760f1a3, 1d79ba2a, 6b90c872, f5e8fa47 and bb01ebfc for typed HC routing, side-less call hazards and generated mission-slot drift. Confirmed branch-history risk. Keep marker blinking off by default; HC changes need typed pools, server update-back, side-less HC tests, generated mission slot checks and event-handler cleanup proofs.
Second-wave score/bounty/supply-compensation coupling f17445c1, b31539b4, cc127ef4, 415615c9 changed score/bounty/teamkill handling; upstream/SkillDiffCompensation feeds side supply through ChangeSideSupply. Confirmed historical risk. Treat score awards, bounty math and skill-diff compensation as AntiStack/economy changes; harden side-supply authority before expanding compensation.
Old WarfareBE FPS comparison and AI-cap debate Old WarfareBE performance comparison compares old BennyBoy WarfareBE Takistan Lite at aeb71bb against current Wasp Chernarus and finds lower old player-AI defaults (12 player cap, fixed Soldier +6, no commander +10) but no magic old town-AI architecture: old BE still has town nearEntities, spawn/despawn, static gunners, cleanup collectors, PVF dispatch and marker loops. Confirmed docs/test lane, not a source patch. Use the old mission as an A/B baseline and run matched tests before changing gameplay: normal-role cap 8-10, Soldier/commander identity preserved deliberately, HC present/absent logged, active town/static counts split from player followers, and view distance separated from server-AI load.
Old-FPS scout easy-win harvest The returned old-warfarebe-fps-scout addendum confirmed both FPS publishers are active, SERVER_FPS_GUI is the RHUD path while WFBE_VAR_SERVER_FPS lacks an obvious source consumer, current PV/PVF surface is broader but server requests use publicVariableServer, delegated town AI avoids global per-unit init, AntiStack/PerformanceAudit are current-only A/B variables, and static-defense HC readback remains unproven. Evidence harvested into owner pages. First actions are test/config/docs: consumer-map FPS variables, pin view distance, run AntiStack/audit ON/OFF presets and avoid claiming static-defense HC as a confirmed FPS win. Source patches remain future code-owner work.
Dynamic player-AI cap and AI-source scoreboard The old-vs-current-fps-opportunity-scout and old-be-current-wasp-fps-opportunity-scout-2 reports at C:\Users\Steff\Documents\Codex\2026-06-05\wasp-old-vs-current-fps-investigation\outputs\Old-BE-vs-Current-Wasp-FPS-Opportunity-Audit.md and C:\Users\Steff\Documents\Codex\2026-06-05\wasp-old-mission-fps-opportunity-window\outputs\Old-BE-vs-Current-Wasp-FPS-Opportunity-Scout.md promote a role-aware cap design: public pilot normal roles near 10, Soldier preserved higher, commander bonus reduced from +10, and final policy driven by a server-published side AI budget. The final scout fixes the preferred test order as AI-source scoreboard, cap pilot, HC proof, low-SV town branch, static-defense HC/accounting, cleanup/object-count evidence, then PV/server-FPS/network cleanup. Owner-decision gameplay/performance lane. Not a confirmed FPS fix until the full-server FPS opportunity pack records 10/15/20/25/30-player evidence. Any implementation must keep buy menu and RHUD cap formulas aligned, enforce lower caps non-destructively for future purchases first, and treat static-defense HC accounting as a proof gate rather than a claimed FPS win.
WF menu ops-console reskin branch origin/feat/wf-menu-ops-console head 0767c0b5 is a UI-only theme branch from origin/master 2cdf5fb8: Chernarus + maintained Vanilla Rsc/GUI/HUD files, new brand_chevron.jpg, and docs/superpowers plan/spec/mockup files. Evidence: Rsc/Styles.hpp:10-40, Rsc/Ressources.hpp:117-131,274-277, Rsc/Dialogs.hpp:1057-1064,1173-1179,1240-1249, Rsc/Titles.hpp:178-179. Confirmed branch-review risk. Not gameplay logic, but not release-ready until Arma 2 OA visual smoke proves font availability, texture path/case handling, contrast, hub/menu/HUD rendering and Chernarus/Vanilla parity. Also clean branch trailing whitespace reported by git diff --check in docs/superpowers/plans/2026-06-03-wf-menu-ops-console.md:78,179. Use Client UI systems atlas and the branch-only feature smoke pack.
BuyMenu/EASA QoL branch origin/feat/buymenu-easa-qol head a66d4691 is a narrow Chernarus UI branch: unaffordable buy-unit price tint (Client_UIFillListBuyUnits.sqf:1,61-62,104), live queue counts on factory tabs (GUI_Menu_BuyUnits.sqf:201-210), selected-unit cost formula/display work (GUI_Menu_BuyUnits.sqf:280,335,388,444,487) and EASA current-loadout highlight/preselect (GUI_Menu_EASA.sqf:29-40). Full audit: BuyMenu EASA QoL branch audit. Confirmed branch-review risk, low blast radius. It is UI-only, 3 Chernarus files and git diff --check clean, but not propagated to maintained Vanilla. Needs Arma 2 OA menu smoke for affordability color versus full/crew cost, queue label refresh/no flicker, final idc 12034 price after the later write, and EASA current-loadout selection including filtered/unset cases.
GUER Insurgents playable resistance branch origin/feat/guer-insurgents-faction head 41550bd33 forks from origin/master@cf2a6d6a and is broad: 462 files changed, 25816 insertions(+), 2249 deletions(-), with 241 Chernarus mission paths and 208 maintained Vanilla paths. Chernarus adds WFBE_C_GUER_PLAYERSIDE (Rsc/Parameters.hpp:587), GUER mission metadata/slots (mission.sqm:25,27,4938+), gated reciprocal WEST/EAST hostility (Init_Server.sqf:7-13), GUER depot overlay (Root_GUE.sqf:129-130; Root_GUE_PlayerOverlay.sqf:13,34-51), stipend/tier economy (Server_GuerStipend.sqf:14,41-43,56) and GUER kill-funds hooks (RequestOnUnitKilled.sqf:82-93). Maintained Vanilla has no WFBE_C_GUER_PLAYERSIDE, Root_GUE_PlayerOverlay or Server_GuerStipend hits. Broad Chernarus-first branch-review risk. Decide Chernarus-only experiment versus maintained Vanilla propagation, clean current git diff --check whitespace/EOF failures, and smoke disabled/enabled GUER parameter states, GUER slot/JIP/no-base buy menu, stipend/tiered depot pool, kill funds, town capture/harass stats and reciprocal AI return fire. Use Gameplay systems atlas plus the branch-only feature smoke pack.
Player stats branch origin/feat/player-stats head e01e47e1 adds off-by-default SQF stat emission (WFBE_C_STATS_ENABLED = false at Init_CommonConstants.sqf:443), kill-stat hooks (RequestOnUnitKilled.sqf:51-65), Server/Stats/*, DiscordBot Stats/* RPT tailing/accumulation and DiscordBot.Tests/*. Local branch validation passed: dotnet test 13/13. Full audit: Player stats branch audit. Confirmed branch-review risk. Safe by default because the feature flag is false, but enabling it is operational/integration work: decide RPT path/state-file ownership, UID/privacy policy, log volume, corrupt stats.json recovery, deployment config, Chernarus-only vs Vanilla propagation and whether stats belong in DiscordBot or the mission extension.
Perf quick-wins branch origin/perf/quick-wins head 0076040f is a Chernarus-only fix branch with 18 files, +27/-27 and clean git diff --check. It patches known docs-backed defects including side-supply clamp shape (Common_ChangeSideSupply.sqf:25, Server_ChangeSideSupply.sqf:12,36), factory queue cleanup on crewless buys (Client_BuildUnit.sqf:365-368), paratrooper marker PV registration (Init_PublicVariables.sqf:40), mine-cleaner pair removal (mines_cleaner.sqf:17), dead-object wfbe_trashed handling (server_collector_garbage.sqf:17), fixed resource interval (updateresources.sqf:74), camp-bunker nil-code EH removal (Server_HandleSpecial.sqf:235-236) and kill-assist bounty type (RequestOnUnitKilled.sqf:92). Full audit: Perf quick wins branch audit. High-value branch-review risk. Treat as a fix candidate, not proof that stable master is fixed. It is source-Chernarus only; Missions_Vanilla has no branch diff and still shows the old clamp/EH/kill-assist/resource-loop shapes. For factory queue, it fixes the crewless counter leak only; the low-entropy varQueu token remains open. Reconcile with docs/source propagated fixes, propagate maintained Vanilla deliberately, keep DR-44 side-supply authority separate from the clamp, and smoke economy debit/no-credit inversion, factory queue counters/tokens, paratrooper marker handling, cleaner/camp/resource loops and WASP touched actions before merge/release wording.
Commander positions / modular walls branch origin/feat/commander-positions head 560db61c has merge base f5985b77, 83 changed files and broad Chernarus/Vanilla deltas. The actual WDDM commander-position runtime is source-Chernarus only: anchor classes (Structures_CO_US.sqf:168-174, Structures_CO_RU.sqf:166-172), template map (Init_Defenses.sqf:93-183), compile (Init_Server.sqf:26) and Server_ConstructPosition.sqf:1-66. No Server_ConstructPosition or WFBE_POSITION_TEMPLATE_MAP hits exist under maintained Vanilla on branch grep. Full audit: Commander positions branch audit. Broad branch-review risk. Do not describe as a clean construction-only branch or Vanilla-propagated feature. Before promotion: split or audit unrelated deltas, clean branch whitespace, re-check construction request authority (DR-6), smoke position placement at the clicked map point, HQ undeploy cleanup, CoIn UI, and decide/implement maintained Vanilla propagation.
Zargabad low-pop map branch origin/feature/zargabad-map head e9294ede adds a new maintained Vanilla Zargabad mission folder and terrain/tooling support: ZARGABAD.cs:1-13, SqfFileGenerator.cs:127-130, initJIPCompatible.sqf:121-124, Init_Boundaries.sqf:4-10, Init_Zargabad.sqf:1-125 and Guides/Zargabad-Completion-Gates.md:8-20. Branch diff is huge: 832 files, +77733/-95. The refreshed head tunes low-pop defaults across constants, generated parameters and validators: AI max 6, player AI max 8, Soldier skill cap 3, team supply cap 30000, UAV 650, town mortar/patrol 420/300, chopper/plane countermeasures 12/18, starting funds 8000, starting supply 3600, ordnance ranges 1500, Air AA/flares/thermal on, ICBM off and price multipliers 0.95/1.15/1.4/1.75/2.0/1.0. Local static branch validation passed at e9294ede with Tools\Validate-ZargabadMission.ps1: 13 towns, 19 camps, 1 airport, 9 starts, 33 defense logics, no duplicate object ids, no missing sync targets and no Takistan Zargabad-module spillover. Full audit: Zargabad branch audit. Map-release branch-review risk. Static validation is strong but runtime evidence is still open. Treat as a full terrain release candidate and low-pop balance profile, not a normal generated-mission copy. Needs generated whitespace cleanup (git diff --check reports 3542 findings), hosted/dedicated/JIP/HC runtime evidence, screenshot/RPT audit packet validation, town/base/camp/economy/air-price balance checks, edge-guard/black-market smoke and class-load verification.
Supply helicopter branch current head origin/feat/supply-helicopter is checked at head 262dc431. The PR #1 page is refreshed for current head: Air-factory upgrade 3 load/action gates (Skill_Apply.sqf:62-72, supplyMissionStart.sqf:21-29), Air upgrade 4 cash-run branch (supplyMissionCompleted.sqf:24-35), lobby toggle (Rsc/Parameters.hpp:4-10), load/unload timers and central class lists (Init_CommonConstants.sqf:168-180). Current head clears SupplyAmount/SupplyFromTown but not SupplyByHeli (supplyMissionCompleted.sqf:40-41). Closed PR #1 branch-review evidence. PR #1 is closed on the board and superseded by PR #8 for release-bundle cleanup, but the branch evidence remains useful. No maintained Vanilla SupplyByHeli/heli constant hits were found; non-supply branch baggage, branch whitespace, retained SupplyByHeli state, timer UX, Air 3/4 economy semantics and runtime smoke remain gates. Use Current supply heli PR and PR cleanup lab.
PR #8 release head delta Current origin/release/2026-06-feature-bundle head a96fdda2 has moved beyond the older 7ff18c49 delegated-AI/cleaner checkpoint. Current release Chernarus and maintained Vanilla keep delegated town-AI group registration/update-back (Client_DelegateTownAI.sqf:29-44; Server_HandleSpecial.sqf:86-115), static-defense HC update-back still commented (Client_DelegateAIStaticDefence.sqf:27-30), fallback-group locality guards (Common_CreateUnit.sqf:34-37; Common_CreateUnitForStaticDefence.sqf:67-70) and cleaner/restorer startup timer floors (crater_cleaner.sqf:3-7,50; droppeditems_cleaner.sqf:3-7,46; ruins_cleaner.sqf:3-7,30; buildings_restorer.sqf:3-6,31). Stable cf2a6d6a and release a96fdda2 also carry marker-based commander-built ARTY discovery at Construction_StationaryDefense.sqf:132-135 plus Common_GetTeamArtillery.sqf:46-78. Release-branch review risk. This is not current-source proof and does not close DR-42 static-defense update-back/failover; update-back remains design work. Smoke HC/town/static delegation, commander-built ARTY discovery and long-session cleaner/restorer behavior before release-ready wording. Use PR cleanup lab, Headless delegation/failover, Marker cleanup/restoration and Testing workflow.
Drone/recon support branch split origin/feat/drone-saturation-strike head 8ca4be90 is the latest drone tuning branch; origin/feat/recon-uav head 563418ea adds server AI-flown ReconUAV/ReconUAVRecall and removes the old UAV module, but only includes drone history through 93b47594. Drone diff from stable origin/master is 17 total files (+1133/-4), of which 15 are source-Chernarus mission files (+379/-4) and 0 are maintained Vanilla mission files. Recon diff is 25 total files (+1461/-657), of which 22 are source-Chernarus mission files (+593/-657) and 0 are maintained Vanilla mission files. Confirmed branch-review risk. Treat drone strike and recon UAV as separate support features. Before merge, resolve drone tuning drift, move paid support authority server-side, validate old-UAV replacement/recall/reveal/JIP cleanup, and either propagate generated Vanilla or keep Chernarus-only scope explicit. Use PR8 and drone upstream lesson match plus the branch-only feature smoke pack.
Direct attack-wave request trust (ATTACK_WAVE_INIT / ATTACK_WAVE_DETAILS) Attack-wave authority playbook owns the branch/root matrix. Current source Chernarus, maintained Vanilla, stable origin/master cf2a6d6a, Miksuu upstream b8389e74, origin/perf/quick-wins 0076040f, release a96fdda2, origin/feat/ai-commander c20ce153 and historical upstream/AttackWave 994150da all keep the same direct-PV trust shape: Common_AttackWaveActivate.sqf:6,8 sends ATTACK_WAVE_INIT; Server_AttackWave.sqf:5,15,27 trusts client _supply for modifier math and publishes details; AttackWave.sqf:19,23-25,40 trusts detail payload and debits side supply. P1 direct-PV authority gap, patch-ready and branch-unrescued. Treat ATTACK_WAVE_INIT as a request, re-derive requester/side/supply server-side, clamp modifier/duration, guard ATTACK_WAVE_DETAILS against forged direct payloads, propagate maintained Vanilla and smoke valid activation, forged _supply >= 70000, wrong-side payloads, duplicate active waves and JIP replay.
Direct side-supply mutation (wfbe_supply_temp_*) Branch check 2026-06-14: docs checkout f52ccee8, stable origin/master cf2a6d6a, release a96fdda2 and Miksuu upstream b8389e74 all keep _currentSupply - _amount negative floors in Common_ChangeSideSupply.sqf:25 and Server_ChangeSideSupply.sqf:12,36 across Chernarus and maintained Vanilla, plus payload-side trust in the west/east temp-channel handlers. origin/perf/quick-wins 0076040f fixes only Chernarus arithmetic to 0; Vanilla propagation and DR-44 side/channel/requester validation remain open. Patch-ready, current-source-unpatched. Use Economy authority first cut, Resistance supply scaffold and Public variable channel index; clamp arithmetic first, then validate direct-channel shape and move spend acceptance server-side flow by flow.
Direct SEND_MESSAGE compile surface Branch check 2026-06-13: current origin/master / local master cf2a6d6a, Miksuu upstream b8389e74, origin/perf/quick-wins 0076040f and release a96fdda2 all register the direct receiver at Client/FSM/updateclient.sqf:12, compile payload text in Client/Functions/Client_onEventHandler_SEND_MESSAGE.sqf:27, and repeat the helper compile/broadcast path in Common/Functions/Common_SendMessage.sqf:26,38 in both maintained roots; DR-46. P0 live + open: direct-channel RCE surface that is not covered by PVF dispatcher allowlisting. Use Public variable channel index, Pending owner decisions and Hardening roadmap.
Side-supply reason string off-by-one Branch check 2026-06-14: docs checkout f52ccee8, stable origin/master cf2a6d6a, release a96fdda2, Miksuu upstream b8389e74 and origin/perf/quick-wins 0076040f all keep Common_ChangeSideSupply.sqf:8-14 reading _reason only when count _this > 3. Three-argument AttackWave.sqf:40 calls publish the default error reason instead of the caller's audit string; four-argument supply completion preserves its reason (supplyMissionCompleted.sqf:26 on docs/Miksuu/perf, :40 on stable/release). Low-risk audit/logging defect. Use Economy authority; fix with the side-supply clamp pass by reading _reason when count _this > 2 and _includeStagnation when count _this > 3.
Resource income cap and payout/display drift Branch check 2026-06-14: docs checkout f52ccee8, stable origin/master cf2a6d6a, release a96fdda2, Miksuu upstream b8389e74 and origin/perf/quick-wins 0076040f all keep updateresources.sqf:31 wrapping side-supply growth, player paychecks and AI-commander funds in one _supply < WFBE_C_ECONOMY_SUPPLY_MAX_TEAM_LIMIT guard. Income system 4 also applies a server-side 1.5 multiplier at updateresources.sqf:42-43 that Client_GetIncome.sqf:21-28 omits from display math; perf Chernarus changes resource-loop wait cadence only. Economy correctness debt. Use Economy, towns and supply; treat resource-loop edits as balance-sensitive and verify side supply, actual paycheck, AI commander funds and RHUD/menu display together before changing income-system behavior.
Town/camp capture reward authority TownCaptured.sqf:37-81 and CampCaptured.sqf:19-40 grant funds locally and send RequestChangeScore after server-side capture broadcasts. Live mixed-authority reward path. When moving capture rewards server-side, preserve distance/assist/commander bounty semantics but derive eligible units, side and score on the server.
Auto view-distance optimizer Client/Init/Init_Client.sqf:12-13,175-176,236-240; Client/FSM/updateclient.sqf:102-107; Common/Functions/Common_AdjustViewDistance.sqf:17-69; Common/Functions/Common_AutomaticViewDistance.sqf:6-36 Working client UX/performance feature with three moving pieces. Startup defaults target FPS to 60 and auto mode off; User18 toggles auto mode while User19/User20 adjust either view distance or target FPS; the client FSM only runs the auto loop when the map is not visible, using the profile key WFBE_TARGET_FPS and a +/-4 FPS band. Historical +/-2 changelog wording is stale.
AFK enforcement policy Rsc/Parameters.hpp:44-48; Client/FSM/updateclient.sqf:28-31,117-160; Client/Init/Init_Client.sqf:256-264; Client/Module/AFKkick/monitorAFK.sqf:19-30; BattlEyeFilter/publicvariable.txt:1-2 Working but dual-path/client-local. Current parameter default is 15 minutes. The FSM path publishes kickAFK for BattlEye; the older module still runs a 30-minute AFKthresholdExceededName/failMission path. Clean up to one owner before changing policy.
Aircraft ordnance guardrails Rsc/Parameters.hpp:284-300; Common/Init/Init_Unit.sqf:118-128,207-212; Common/Functions/Common_HandleShootBombs.sqf:15-44; Common/Functions/Common_HandleIncomingMissile.sqf:9-21; Common/Functions/Common_HandleShootMissiles.sqf:95-140; Common/Init/Init_Common.sqf:10-11 Partial. Bomb distance deletion for FAB-250/Mk82 is live; incoming missile range and terrain-masking projectile deletion are live. Bomb altitude is only parameterized/commented in the handler, so do not claim active altitude enforcement. Legacy HandleATReloadVehicle / HandleBombs common compiles are commented; Common_HandleATReloadVehicle.sqf exists but is not wired, while Common_HandleBombs.sqf is absent. Treat the legacy hooks as archive/revive work, not active ordnance logic.
MASH marker relay health Docs/Miksuu/perf-shaped roots: Client/Module/Skill/Skill_Officer.sqf:25-27, Server/Module/MASH/MASHMarker.sqf:1-13, Client/Module/MASH/receiverMASHmarker.sqf:1-29, Client/Init/Init_Client.sqf:132; stable/release removal cue: Skill_Apply.sqf:43. See Respawn and death lifecycle. Branch-split. Docs head a640e722 is source-unchanged from 1f0b9018 for checked respawn/MASH paths; Miksuu b8389e74 and perf 0076040f keep source-supported local MASH respawn plus orphaned marker synchronization in maintained roots. Stable origin/master cf2a6d6a and release a96fdda2 remove the maintained-root deploy/init/module path while retaining config/classname residues. Owner decision: revive with server-held marker registry/JIP resend or finish removal/cleanup deliberately on the target branch.
Paratrooper marker registration gap Server/Support/Support_Paratroopers.sqf, Client/PVFunctions/HandleParatrooperMarkerCreation.sqf, Common/Init/Init_PublicVariables.sqf Branch-scoped / smoke pending. 2026-06-14 source check: docs checkout 1f0b9018, stable origin/master cf2a6d6a and release a96fdda2 register HandleParatrooperMarkerCreation in both maintained roots; Miksuu b8389e74 omits it in both maintained roots; perf/quick-wins 0076040f registers Chernarus only while maintained Vanilla omits it. Arma marker smoke remains pending.
Spawn/race behavior in PVF dispatchers Common/Functions/Common_SendToServer*.sqf, Server/Functions/Server_HandlePVF.sqf, Client/Functions/Client_HandlePVF.sqf Open: dispatch and execution ordering still non-deterministic for burst traffic
Area Evidence Status
Autonomous AI supply trucks AI commander autonomy audit owns the branch matrix. Current source Chernarus, maintained Vanilla and origin/master / local master cf2a6d6a now match release a96fdda2: both maintained roots keep UpdateSupplyTruck commented at Init_Server.sqf:37, initialize wfbe_ai_supplytrucks and log-disable legacy AI supply-truck logistics at :383-384, while AI_UpdateSupplyTruck.sqf:17 still references missing Server/FSM/supplytruck.fsm. Miksuu upstream b8389e74 and perf/quick-wins 0076040f still raw-spawn the missing worker; feat/ai-commander c20ce153 guards only Chernarus while Vanilla remains raw. Current master is safety-disabled, not revived. Preserve the warning/disable shape when merging branches; a real autonomous logistics feature still needs a server-owned loop/FSM design and smoke.
AI commander automation On stable origin/master, AI commander constants and side-logic state/funds exist; WFBE_SE_FNC_AI_Com_Upgrade is compiled and Server_AI_Com_Upgrade.sqf performs real upgrade/funds logic, but no live scheduler/loop starts full autonomous commander behavior. Branch origin/feat/ai-commander head c20ce153 adds a Chernarus-only supervisor, assign-types/assign-towns/produce workers and an explicit order executor; the latest fix series rewrites lazy condition blocks across those five branch scripts. Branch-review risk. Stable master remains partial/latent. feat/ai-commander is the current revival attempt, but it is source-Chernarus-only, changes AI commander default to on, still only guards old UpdateSupplyTruck, and needs dedicated/JIP/Vanilla smoke before being called revived. Use AI commander autonomy audit plus the branch-only feature smoke pack.
AI commander upgrade debit/cost lookup Branch check 2026-06-14: docs checkout d4cfef80 (unchanged from the earlier e785f1e9 upgrade anchor), Miksuu b8389e74 and perf/quick-wins 0076040f validate AI upgrade costs as [supply, funds] like the player menu (GUI_UpgradeMenu.sqf:96-97,139-140,158-159; Server_AI_Com_Upgrade.sqf:34-36) but debit AI funds with _cost select 0 and side supply with _cost select 1 at Server_AI_Com_Upgrade.sqf:47,50. Stable origin/master cf2a6d6a, release a96fdda2 and origin/feat/upgrade-queue-stacking b061c905 fix debit order in both maintained roots but keep raw (_to_upgrade select 1) cost lookup at :27; origin/feat/ai-commander c20ce153 fixes debit plus cost-level lookup only in Chernarus. Branch-split patch-ready bug. Use AI commander autonomy and Upgrades and research: port/recreate debit-order fix where still open, decide the cost-index correction, propagate maintained Vanilla and smoke AI upgrade affordability/debit before reviving the scheduler.
Town AI vehicle despawn safety Branch check 2026-06-13: docs checkout b9e80da0 Chernarus and maintained Vanilla still delete inactive tracked town-AI vehicles at server_town_ai.sqf:214 with alive _x plus !(isPlayer leader group _x) and no player crew check. Stable origin/master cf2a6d6a keeps the same guard at :207, Miksuu b8389e74 at :195, perf/quick-wins 0076040f at :219 and release a96fdda2 at :200, all in both maintained roots. No checked ref in this pass contains Server_CleanupExpiredTownDefenseAssets.sqf; older 89ae9dad helper evidence is historical. Confirmed patch-ready bug. Add a full player-occupancy guard before deleting wfbe_active_vehicles, preserve empty AI-only cleanup, propagate maintained Vanilla and smoke driver/gunner/cargo/turret occupancy plus empty AI vehicle cleanup. If a future branch reintroduces persistent town-defense cleanup, audit that as a separate cleanup surface.
Task system Docs checkout f82a9127, stable origin/master cf2a6d6a, Miksuu b8389e74, perf/quick-wins 0076040f, release a96fdda2 and feat/ai-commander c20ce153 all keep the old town TaskSystem compile and TownAddComplete spawn commented in checked maintained roots. Docs line refs are Client/Init/Init_Client.sqf:75,744; stable/perf/feat-ai use :75,759, release/Miksuu use :75,758. Stable/release reuse the commander Tasks tab for a separate Objective Ping path; that is not a revival of the old town task system. Disabled/deferred legacy UX. Re-enable only as a deliberate JIP-safe task feature, or keep/remove the residue after owner decision.
MASH marker receiver receiverMASHmarker.sqf registers the WFBE_SE_MASH_MARKER_SENT client EH, but is referenced only by the commented compile at Client/Init/Init_Client.sqf:132. Duplicate of the row above, kept as a receiver-specific pointer for dead-code searches. Use the canonical MASH split in Respawn and death lifecycle; do not launch a fresh broad MASH discovery pass unless gameplay code changes.
Paratrooper drop markers Server/Support/Support_Paratroopers.sqf:117 sends HandleParatrooperMarkerCreation; docs/source Chernarus and Vanilla register that client PVF at Common/Init/Init_PublicVariables.sqf:39, stable/release register it at :34, and the handler file exists in checked maintained roots. Miksuu omits the registration; perf registers Chernarus only. docs/source, stable and release carry the static registration in both maintained roots; Miksuu omits it; perf is Chernarus-only; Arma smoke pending. Use Paratrooper marker revival and Source fix propagation queue. Modded folders still drift: Napf/eden/lingor register the handler but lack the handler file.
PV dispatch trust boundary Branch check 2026-06-13: current origin/master / local master cf2a6d6a, Miksuu upstream b8389e74, origin/perf/quick-wins 0076040f and release a96fdda2 all keep Server_HandlePVF.sqf:14 dispatching _parameters Spawn (Call Compile _script) from payload index 0 in both maintained roots. Current master and release clients do the same at Client_HandlePVF.sqf:32 after the HC filter; Miksuu/perf clients keep :22. Init_PublicVariables.sqf already precompiles SRVFNC* / CLTFNC* but does not enforce an allowlist. P0 live-server hardening gap. Use PVF dispatch implementation to replace sender-chosen compile with allowlisted missionNamespace getVariable lookup. This closes DR-1/DR-38 only; legitimate-handler payload validation and direct PV channels remain separate.
PV legitimate-command forgery Hilbert's network pass confirmed high-trust handlers: RequestChangeScore.sqf overwrites score from payload, RequestVehicleLock.sqf locks payload vehicles, RequestTeamUpdate.sqf mutates team behavior, and RequestUpgrade.sqf forwards to upgrade processing without visible sender/cost validation in the handler. Live-server hardening gap (High). Even after replacing dispatcher Call Compile, validate sender, role, side, funds, ownership and object locality inside high-impact handlers.
Direct publicVariable channels outside PVF Direct PVEH/PV channels exist for attack waves, side supply, supply missions, MASH markers, HQ state, AntiStack compensation, server FPS, AFK, day/night and marker/message channels. DR-41 confirms ATTACK_WAVE_INIT is forgeable and can make side-wide unit prices free or negative from client-supplied _supply. A PVF dispatcher fix or WFBE_PVF_* whitelist does not cover these. Review each channel's sender, lifecycle and JIP semantics before calling networking hardened. See Networking and public variables, Server authority map and Attack-wave authority playbook.
BattlEye mitigation as shipped Claude DR-30 verified the repo footprint: only the AFK publicVariable rule is shipped in-tree; no broader filter/config bundle is present. Canonical evidence lives in External integrations. High live-server hardening gap. Use External integrations and backlog id battleye-hosting-hardening; do not treat BattlEye as shipped remediation until production BEpath files or a tested filter set are supplied.
ICBM/Nuke RequestSpecial authority Claude DR-27 traced the Tactical-menu ICBM path: client-side menu gates call Client/Module/Nuke/nukeincoming.sqf, which sends RequestSpecial ["ICBM", ...]; the server HandleSpecial ICBM case spawns NukeDammage from client payload without upgrade/commander/funds validation. Critical live-server hardening gap. One forged RequestSpecial PV can trigger server-applied map-wide damage. Use ICBM authority before patching or trusting this module publicly.
Non-ICBM RequestSpecial support effects GUI_Menu_Tactical.sqf:262-276,371-373,513-527 gates and debits paratroops, para-vehicle and para-ammo locally; Client/Module/UAV/uav.sqf:27-52 spawns/debits the old UAV locally; Server_HandleSpecial.sqf:43-64,147-170 trusts payload side/destination/team/object data for support spawns, supply-truck forced respawn, UAV cleanup and camp repair. High server-authority gap. Harden after or alongside the support authority pass, but keep it separate from the P0 ICBM playbook: server should re-derive requester, side, role/commander status, upgrade, funds, cooldown, target object and destination bounds before effects.
RequestSpecial upgrade-sync argument shape Support specials owns the compact branch matrix. Branch check 2026-06-14: docs checkpoint 6c919abf has no checked handler/caller/process-upgrade source drift from line-anchor checkpoint ff8dd884; docs Chernarus/Vanilla still keep Server_HandleSpecial.sqf:67-73 reading _side from _args but upgrade id/level from _this. Stable origin/master cf2a6d6a, release a96fdda2, Miksuu b8389e74, perf/quick-wins 0076040f and origin/feat/upgrade-queue-stacking b061c905 all keep the mixed parser; caller line drift is docs GUI_UpgradeMenu.sqf:171, stable/upgrade-queue :268, Miksuu/perf :241, release :254. Patch-ready consistency cleanup, not a P1 authority bug. Normalize the parser to one tuple source, keep RequestUpgrade authority migration separate, propagate maintained Vanilla and smoke commander upgrade completion plus non-server timer sync.
RequestSpecial track-playerobject branch Server_HandleSpecial.sqf:133-145 defines a track-playerobject case, but the 2026-06-04 RequestSpecial scout found no active Chernarus RequestSpecial caller for that tag. Likely dead/undriven bookkeeping branch. Before reviving it, validate sender identity and player-object ownership; otherwise remove or comment it during RequestSpecial hardening.
Grouped base-area cleanup and dormant group monitor Server/Init/Init_Server.sqf:565 starts Server/FSM/basearea.sqf only when WFBE_C_BASE_AREA > 0; the loop prunes invalid base-area logics and delayed orphan defenses. groupsMonitor.sqf exists but the only source start point found is commented at Init_Server.sqf:567. Base-area cleanup is live only under the parameter; groupsMonitor is dormant debug tooling. If editing basearea.sqf, add _unit to the nested private list and smoke grouped-base defense cleanup.
Construction request authority DR-6 confirms construction PVFs trust client payload authority and mostly class-existence checks. Hardening gap. Use Deep-review findings DR-6 for proof, Construction and CoIn systems atlas for flow, and Server authority migration map for migration design.
Stationary defense base-area null guard and commander artillery ownership Construction and CoIn systems owns the current branch split. Docs checkout 4bd37b98 guards the base-area weapons read at Construction_StationaryDefense.sqf:12-15 and assigns manned artillery-class defense gunners to the current commander team at :91-93, matching docs-checkout group-based Tactical discovery at Common_GetTeamArtillery.sqf:10-30; the checked construction files are unchanged from the earlier 1aa178f8 anchor snapshot. Stable origin/master cf2a6d6a and release a96fdda2 instead keep marker-based ARTY discovery (Construction_StationaryDefense.sqf:133-135; Common_GetTeamArtillery.sqf:46-78) but still read _area getVariable "weapons" before a null guard at Construction_StationaryDefense.sqf:15. Miksuu b8389e74 and perf 0076040f have neither ARTY discovery shape nor the guard. Docs/source and stable/release have static commander ARTY discovery evidence by different designs; Arma smoke pending. The base-area null-guard fix is docs-checkout-only among checked refs and does not close client CoIn guard-order issues or broader construction authority hardening.
Player purchase authority GUI_Menu_BuyUnits.sqf calls local BuildUnit and deducts funds client-side; Init_PublicVariables.sqf has no RequestBuyUnit, and no Server/PVFunctions/RequestBuyUnit.sqf exists. Legacy/client-local buy path. Add server validation before adding exploit-sensitive purchases. See Factory and purchase systems atlas.
Legacy AI TL waypoint handler Server/AI/AI_TLWPHandler.sqs:9-31 exists, but the 2026-06-04 AI scout found no static Chernarus caller or compile reference. Legacy/orphan candidate. Keep it out of working-order claims unless a dynamic caller is proven; remove or document during AI order cleanup.
Factory queue counter leak Claude DR-33 confirmed Client_BuildUnit.sqf:365 can exit an empty-vehicle purchase before the later WFBE_C_QUEUE decrement at :469. Repeated empty-vehicle buys can locally soft-lock a factory category for that player. Every post-enqueue exit path must decrement both the building unitQueu token and the relevant WFBE_C_QUEUE_<type> counter.
Factory FIFO token churn Client_BuildUnit.sqf uses a random queue token and broadcasts the building queu array on each mutation. Perf/JIP hardening gap. Use Factory queue cleanup, unique queue tokens and reduced public broadcasts before expanding factory side effects.
Factory buy authority/refund model Micro-scout 2026-06-04 confirmed there is no RequestBuyUnit/RequestBuildUnit PVF in the source mission. Branch refresh 2026-06-13 found docs checkout 8d611092, Miksuu b8389e74, perf/quick-wins 0076040f and origin/feat/buymenu-easa-qol a66d4691 still debit locally after spawning BuildUnit and leave the dead/null factory exit as queue cleanup only; stable origin/master cf2a6d6a and release a96fdda2 now pass _currentCost into BuildUnit and refund the dead/null abort at Client_BuildUnit.sqf:212-216 in both maintained roots. Player factory buys remain client-local even where the refund is fixed. Preserve/port the stable/release refund shape when targeting older roots, but decide request/acceptance/rollback semantics and server acceptance before adding expensive or exploit-sensitive factory features. See Factory and purchase systems.
Duplicate client skill init Docs checkout 719455a2 Chernarus and Vanilla have one Skill_Init.sqf call at Client/Init/Init_Client.sqf:547, followed by WFBE_SK_FNC_Apply at :571. Stable origin/master cf2a6d6a has the same one-call shape at :564 / apply :587; release a96fdda2 has :563 / apply :586 in both maintained roots. Miksuu b8389e74, perf/quick-wins 0076040f and feat/ai-commander c20ce153 still duplicate Skill_Init before apply in both maintained roots. docs/source, stable and current release carry the single-init shape; Miksuu/perf/feat-ai still duplicate; Arma smoke pending. See Client skill init idempotency.
Commander vote AI/no-commander outcome mismatch Commander vote/reassignment owns the branch scope. Current docs head 8c3942d2 is source-unchanged from the earlier commander checkpoints; docs, stable origin/master cf2a6d6a, Miksuu b8389e74, perf/quick-wins 0076040f, release a96fdda2 and feat/ai-commander c20ce153 all still count _aiVotes at Server_VoteForCommander.sqf:18,27 and then select any non-tied player candidate with the _highest >= _aiVotes OR _highest <= _aiVotes condition at :43; GUI_VoteMenu.sqf:88 still previews AI/no commander when no option has a strict majority or row 0 leads. Confirmed bug/source-unpatched everywhere checked. Decide intended AI/no-commander and tie semantics, then patch the server condition and smoke player-majority, no-commander-majority, equal-vote and tie outcomes.
Commander reassignment call shape Current docs head 8c3942d2 Chernarus and maintained Vanilla still assign _side = _this in Server_AssignNewCommander.sqf:3; RequestNewCommander.sqf:13-14 calls the helper and also sends new-commander-assigned. Stable/Miksuu/perf/release/AI-commander fix helper unpacking at Server_AssignNewCommander.sqf:4-5 in both roots but keep duplicate sender shape. Branch-split patch-ready bug. Port or recreate the helper unpacking fix on docs/source if targeting that branch, then choose one notification owner, propagate maintained Vanilla and smoke one-message reassignment.
Commander reassignment UI identity Every checked root still stores row team indexes with lnbSetValue at GUI_Commander_VoteMenu.sqf:13,63 but resolves the selected commander by visible leader-name text at :33,37. UI correctness debt. Patch with the DR-15 reassignment flow by using row value/team identity, then smoke duplicate/similar names and mid-dialog team changes. Use Commander vote/reassignment.
Commander authority and requester validation RequestNewCommander currently uses PVF wrapper cooldown logic but does not prove sender authority before mutate-eligible command-side transitions. RequestNewCommander.sqf:14 and Server_AssignNewCommander.sqf:9/10 both contain new-commander-assigned sends; stable/upstream/release make the helper sender reachable by fixing the side argument. High. Fix/port assignment call-shape in current source, choose exactly one notification owner, and keep sender/side/role checks in a follow-up owner-validation pass; do not close commander-authority until both layers are patched.
Commander vote restart/request edge GUI_Menu.sqf:75,91 sends RequestCommanderVote when wfbe_votetime <= 0; RequestCommanderVote.sqf:3-22 resets votes, spawns VoteForCommander and broadcasts commander-vote-start using the payload side/name. Useful recovery path with authority-light payload shape. Include vote restart, late join, requester identity and cooldown smoke in commander-authority work.
Commander task assignment / Objective Ping branch split Current docs head 8c3942d2 is source-unchanged from f82a9127 for checked commander-task paths; docs, Miksuu b8389e74, perf/quick-wins 0076040f and feat/ai-commander c20ce153 still build task data but leave maintained-root SetTask sends commented at GUI_Menu_Command.sqf:335,337,343 while registering SetTask (Common/Init/Init_PublicVariables.sqf:33 on docs). Stable origin/master cf2a6d6a and release a96fdda2 send targeted Objective Ping tasks at GUI_Menu_Command.sqf:336,344 and register SetTask at Common/Init/Init_PublicVariables.sqf:36 in both maintained roots. Old town TaskSystem remains commented everywhere checked. Branch-present/smoke-pending on stable/release; still partial on docs/Miksuu/perf/feat-ai. Before promotion, smoke commander menu tab, selected-team vs all-player-led targets, receiving-client task creation/completion timer, JIP, side filtering and spam behavior.
Supply mission cooldown casing DR-18 remains open in docs checkout 8a6695b8, Miksuu b8389e74 and perf/quick-wins 0076040f: Init_Town.sqf:35 seeds lowercase lastSupplyMissionRun, while isSupplyMissionActiveInTown.sqf:8 reads LastSupplyMissionRun. Stable origin/master cf2a6d6a and release a96fdda2 seed LastSupplyMissionRun and read it with default 0 in both maintained roots. Branch-split correctness bug. Port or recreate the casing/default fix where targeting docs/Miksuu/perf; keep server-owned start/reward hardening separate. Use Supply mission architecture and Supply mission authority cleanup.
Supply mission reward authority Client supply mission start sets truck SupplyFromTown and SupplyAmount; server completion trusts those truck variables. Hardening gap. Recompute reward/cooldown server-side from trusted town/truck state.
Town mortar scaffold Server_ManageTownDefenses.sqf:31-32 has a mortar-management hook shape, while Server_SpawnTownMortars.sqf:19-21 reads the wrong local variable shape and no live town init setter for wfbe_town_mortars was found in the maintained mission scan. Broken/dormant scaffold. Keep it out of working town-defense claims; revive only with explicit town anchor setup, variable fix and Arma smoke, or remove/archive it with other dead defense hooks.
Supply player-object list indexing Source Chernarus and maintained Vanilla initialize the WFBE_SE_PLAYERLIST update index before the player-list loop (playerObjectsList.sqf:17-29), but reconnect/supply smoke and stale disconnect-row pruning remain open. docs/source propagated; smoke pending. Use Player join/disconnect lifecycle, Source fix propagation queue and Testing workflow.
Supply mission player-facing reward copy Client/Module/supplyMission/supplyMissionStart.sqf:22-34 computes cargo as town supplyValue * WFBE_C_ECONOMY_SUPPLY_MISSION_MULTIPLIER * supplyUpgradeModifier; Client/Module/supplyMission/supplyMissionCompletedMessage.sqf:8,13-14 grants raw _supplyAmount. stringtable.xml:188-193 still says players receive 4 x the actual value, and WFBE_C_PLAYERS_SUPPLY_TRUCKS_DELIVERY_FUNDS_COEF = 4 at Init_CommonConstants.sqf:268 has no live consumer in this flow. Player-facing docs debt. Fix copy when supply reward authority is redesigned, or update stringtable immediately to match the live formula so players are not balancing around dead text.
Supply mission command-center scan Branch check 2026-06-14: docs checkout 8a6695b8 Chernarus and maintained Vanilla use the truck-only typed terminal scan at supplyMissionStarted.sqf:25,28, with the nearby-player scan still broad at :44. Stable origin/master cf2a6d6a and release a96fdda2 use the heli-aware typed terminal scan at supplyMissionStarted.sqf:53,59, with the nearby-player scan still broad at :81. Miksuu b8389e74 and perf/quick-wins 0076040f still enumerate nearestObjects [..., [], 80] at :28 and post-filter Base_WarfareBUAVterminal at :25. Branch-split, smoke pending. Docs/source, stable and release carry typed command-center scans in both maintained roots; Miksuu/perf do not. Truck/heli command-center delivery and unrelated-object non-completion still need Arma smoke on the target branch. See Supply mission architecture and Supply mission scan narrowing.
Upgrade request authority RequestUpgrade accepts side/id/level from clients after local UI checks, then Server_ProcessUpgrade applies progress/state transitions. High. Local checks are partial; server-side side, owner, dependency and idempotency checks are still needed before trust assumptions are raised.
Support/repair/rearm reward authority GUI_Menu_Service, GUI_Menu_EASA, GUI_BuyGearMenu, bounty handlers and WASP repair actions still mutate/announce client-funds paths in places; HQ/camp/town reward emitters are mixed. Medium. This is a shared non-isolated economy lane and should follow the upgrade/construction authority design rather than isolated local guards only.
Victory/endgame winner inversion and double-fire 2026-06-14 branch check: current docs head a0a86da2 is source-unchanged from 2f2132f8 for checked victory/endgame paths, and stable origin/master cf2a6d6a, Miksuu b8389e74, perf/quick-wins 0076040f and release a96fdda2 all keep the default detection block in both maintained roots (server_victory_threeway.sqf:23-41), including mixed elimination/all-towns winner semantics, partial !WFBE_GameOver guarding and no side-loop break. Correctness bug. Same-tick eliminations can double-fire endgame and overwrite/log the opposite winner. Route implementation through Victory/endgame atlas, Deep-review findings DR-11/DR-36, the Hardening roadmap and Source fix propagation queue.
Threeway victory mode 2026-06-14 branch check: current docs head a0a86da2 is source-unchanged from 2f2132f8 for checked victory constants/loop paths, and all checked maintained roots still read WFBE_C_VICTORY_THREEWAY and run detection only when _victory == 0; line refs drift (Init_CommonConstants.sqf:401-402 docs/Miksuu/perf, :421-422 stable, :417-418 release). Broken/abandoned mode until end conditions are implemented for non-default victory modes, or explicitly guarded/documented as unsupported. Keep implementation detail on Victory/endgame atlas.
Resistance side supply updates Common_ChangeSideSupply.sqf formats wfbe_supply_temp_<side> generically, but server handlers exist only for west/east. Resistance side supply not fully wired.
Hosted server FPS loops Branch check 2026-06-14: docs checkout db7667c9 Chernarus and maintained Vanilla keep the two-publisher guard shape (serverFpsGUI.sqf:1, monitorServerFPS.sqf:1; starts at Init_Server.sqf:578,595) and those FPS files are unchanged from the server-runtime 92c5cf05 anchor. Stable origin/master cf2a6d6a and release a96fdda2 both use one guarded serverFpsGUI.sqf:4 publisher, start it at stable Init_Server.sqf:580 / release :579, document monitor removal at stable :596-598 / release :595-597, and have no maintained-root Server/Module/serverFPS/monitorServerFPS.sqf file. Miksuu b8389e74 and perf/quick-wins 0076040f still keep the two old unguarded publisher loops in both checked roots. docs/source, stable and release are guarded but use different source shapes; Miksuu/perf remain old-loop-shaped. Arma smoke pending. Use Hosted server FPS loop sleep and Server gameplay runtime atlas.
Old map blink loop Client/Init/Init_Client.sqf:138,140,782; missing targets Client/Functions/Client_BlinkMapIcons.sqf and Client/Functions/Client_AddUnitToTrack.sqf; newer singular Client_BlinkMapIcon and bookkeeping are active. Confirmed legacy/missing-file path. Avoid resurrecting the old full-map loop without rebuilding the missing files and doing a performance review; current work should use the guarded per-unit blink path.
Supply mission dead twin compile Docs checkout 8a6695b8, Miksuu b8389e74 and perf/quick-wins 0076040f still compile WFBE_SE_FNC_SupplyMissionActive at Server/Init/Init_Server.sqf:81 while the live PVEH is registered by supplyMissionStarted.sqf. Stable origin/master cf2a6d6a and release a96fdda2 comment the removed compile at Init_Server.sqf:81 and remove supplyMissionActive.sqf / checkCCProximity.sqf in both maintained roots. Branch-split dead-code cleanup. Do not treat the second compile as proof of an autonomous supply-mission state machine; route any remaining cleanup through Supply mission architecture and the authority/cooldown lanes.
Server map blinking units Server_MapBlinkingUnits.sqf exec is commented in Init_Server.sqf. Disabled/legacy.
Old WASP init block initJIPCompatible.sqf contains a commented WASP init block marked as old and resource-heavy. Legacy/deferred removal. Individual WASP scripts still exist and may be called elsewhere.
Server FPS compile variable WFBE_CO_FNC_monitorServerFPS compile lines are commented, but Init_Server.sqf later execVMs Server/Module/serverFPS/monitorServerFPS.sqf. Not broken; document the direct exec path.
Static-defense HC update-back DR-42 verified Client_DelegateAIStaticDefence.sqf:28 comments out the update-delegation-static_defence send-back, unlike town-AI delegation (Client_DelegateTownAI.sqf:35) which reports vehicles back to Server_HandleSpecial.sqf. Follow-up source check: Common_CreateUnitForStaticDefence.sqf:69 returns only [_teams], and Server_HandleSpecial.sqf:86-96 has only the town-vehicle update-town-delegation receiver. HC upstream history also shows older static-defense HC routing churn in 6b90c872. Partial headless feature. HC-created static-defense units are not recorded by the server for cleanup/accounting/re-delegation. Do not merely uncomment the old call; restore tracking only with a deliberate static-defense payload and receiver, or explicitly accept/remove the one-way behavior. Use HC delegation/failover before patching.
HC registration owner-id miss Headless/Init/Init_HC.sqf:11-15 sends one connected-hc; Server_HandleSpecial.sqf:120-130 only appends the HC group when owner _hc != 0 and otherwise logs a warning with no retry. High reliability gap for public HC timing. Add retry/delayed registration or server reconciliation before relying on HC mode for runtime load.
HC registration duplicate risk Server_HandleSpecial.sqf:127-128 appends group _hc to WFBE_HEADLESSCLIENTS_ID without a visible dedupe guard; disconnect cleanup at Server_OnPlayerDisconnected.sqf:22-28 removes one stored group reference. HC idempotency debt. Add an explicit dedupe guard before retry/reconnect work, otherwise the retry fix can create duplicate delegation candidates.
Client-FPS delegation trust updateavailableactions.fsm:121-125 sends ["update-clientfps", getPlayerUID(player), avgFps]; Server_HandleSpecial.sqf:75-83 trusts the UID/FPS payload, and Server_FNC_Delegation.sqf:153-158 uses stored values to pick delegators. Mode 1 authority-light. Validate sender/UID/rate or keep this mode out of hostile public deployments.
Server init duplicate binds DR-43b is branch-split as of 2026-06-14: current docs head a0a86da2 is source-unchanged from 2f2132f8 for checked server-init paths, and docs/Miksuu b8389e74 keep live duplicates in both maintained roots; stable origin/master cf2a6d6a and release a96fdda2 keep one live bind per function in both maintained roots; perf 0076040f fixes Chernarus while maintained Vanilla remains old-shape. Commented AFK/FPS/MASH remnants are separate cleanup artifacts. Low-risk cleanup where still present. Use Server init bind cleanup; coordinate LogGameEnd with DR-13/DR-36 and do not re-enable commented AFK/FPS/MASH remnants as part of this lane.
MASH marker duplicate compile One MASH marker compile is active and a later duplicate is commented. Cleanup artifact covered by Server init bind cleanup and the MASH owner route in Respawn and death lifecycle; do not re-enable both.
Volumetric clouds WFBE_C_ENVIRONMENT_WEATHER_VOLUMETRIC is exposed in Rsc/Parameters.hpp:210-214, but Common/Init/Init_CommonConstants.sqf:212 and Client/Init/Init_Client.sqf:218 both force it to 0. Intentional locked-off optimization. Do not describe the lobby entry as a live weather choice until forced assignments are removed and smoke-tested.
IR-smoke parameter/runtime name split Rsc/Parameters.hpp:393-397 declares WFBE_C_MODULE_WFBE_IRS, while constants/init/upgrade gates read WFBE_C_MODULE_WFBE_IRSMOKE (Init_CommonConstants.sqf:238, Init_Common.sqf:320, Upgrades_CO_US.sqf:24-25). Config drift. Decide one variable name or add an explicit alias after parameter import; smoke lobby off/on behavior and IR-smoke upgrade availability.
Hidden upgrade-clearance switch WFBE_C_GAMEPLAY_UPGRADES_CLEARANCE is commented out in Rsc/Parameters.hpp:351-356, but constants/server init and boot fallback still consume/set it (Init_CommonConstants.sqf:225, Server/Init/Init_Server.sqf:333-349, initJIPCompatible.sqf:148,152). Operator-facing drift. Treat as internal runtime state unless owner deliberately restores it as a lobby parameter.
Orphan-looking BIS High Command parameter WFBE_C_MODULE_BIS_HC exists in Rsc/Parameters.hpp:381-385, but headless delegation uses WFBE_C_AI_DELEGATION (initJIPCompatible.sqf:151-170, Init_Server.sqf:109, server_town_ai.sqf:17), and no static Chernarus consumer was found. UI/config cleanup candidate. Do not treat it as headless-client enablement; either wire a real Arma High Command feature or hide/remove the parameter.
Modded map generator path SqfFileGenerator.cs:127-135 writes source Chernarus and maintained Takistan/Vanilla, but the modded-terrain write call is commented and ZipManager.cs:15-17 packages only Missions plus Missions_Vanilla. Verify before assuming modded mission regeneration is complete; current release output is source plus generated Vanilla/Takistan unless modded generation/packaging is deliberately re-enabled and validated.
Dangerous CRV7PG loadouts LoadoutManager has WARNING_GAME_CRASH_DO_NOT_USE_IN_LOADOUTS_* weapon/ammunition classes, and WILDCAT.cs references one. High-risk data. Keep these warnings visible when changing loadouts.
Gear menu cleanup GUI_BuyGearMenu.sqf has TODOs about securing vanilla/removing unused code, refreshing targets, vehicle target content and vehicle/backpack templates. Partial UI cleanup. See Gear, loadout and EASA atlas.
Gear profile template save/import filtering Gear template profile filter owns the branch matrix. Current docs head 3fdf1898 is source-unchanged from 8b71e2a1 for checked Chernarus and maintained Vanilla template paths; local anchors remain Client_UI_Gear_SaveTemplateProfile.sqf:33,52,75 undefined _u_upgrade plus Init_ProfileGear.sqf:17,25 six-field import guard/index-6 read. Confirmed broken profile-template persistence guard. Future code work needs both save-filter replacement and import guard/default before trusting profile templates to enforce upgrade gates.
Vehicle/backpack cargo equip loop bounds Vehicle cargo equip loop bounds owns the branch split. Current docs head 3fdf1898 is source-unchanged from 8b71e2a1 for checked cargo paths; docs/Miksuu/EASA QoL remain old-shape, stable/release fix all five loops in both maintained roots and perf fixes Chernarus only. Confirmed reliability bug where still old-shape. Preserve/port the stable/release count(_items)-1 fix for target branches that still carry inclusive loops, then smoke vehicle/backpack cargo without claiming economy authority hardening.
Gear template creation gate needs owner decision Gear template profile filter owns the creation/display/save gate matrix. Current docs head 3fdf1898 is source-unchanged from 8b71e2a1 for checked template paths; the active anchors remain Client_UI_Gear_AddTemplate.sqf:136, Client_UI_Gear_FillTemplates.sqf:17 and Client_UI_Gear_SaveTemplateProfile.sqf:33,52,75. Owner-decision consistency debt. Decide Barracks/Gear semantics before patching AddTemplate, FillTemplates and SaveTemplateProfile together.
Gear/EASA/service purchase authority GUI_BuyGearMenu.sqf applies gear and deducts funds client-side. Current docs head 3fdf1898 is source-unchanged from 8b71e2a1 for checked gear/EASA/service paths; Service menu affordability guards owns the service/EASA branch details and BuyMenu EASA QoL branch audit owns the UI-only QoL branch. Client-authoritative legacy path. DR-28 completes the economy authority class: build, buy, sell, supply, upgrade, ICBM and gear/service are all client-authoritative; use the owner pages for patch shape and smoke scope before code work.
Generated EASA/balance output LoadoutManager writes Client/Module/EASA/EASA_Init.sqf and Common/Functions/Common_BalanceInit.sqf; Common_BalanceInit.sqf exits on server while server buy code still calls BalanceInit. Generated/locality risk. Change C# data first, inspect generated diffs, and test spawn versus rearm behavior separately.
Discord sample/config hygiene DiscordBot/preferences_sample.json contains concrete sample IDs and a production-style DataSourcePath; GameData.cs:36-37 uses Preferences.Instance.DataSourcePath or C:\a2waspwarfare\Data, while DiscordBot/FileConfiguration.cs:9-42 is a secondary config helper. Preferences.cs:24-30 also reads/deserializes preferences.json without fail-fast null/parse handling before later command/status code assumes a non-null Preferences.Instance. Governance and reliability cleanup. Replace real-looking sample IDs with placeholders, document one intended config source and add explicit config preflight/fail-fast behavior. No token is committed.
DiscordBot JSON deserialization Claude DR-31 verified DiscordBot/src/ExtensionData/GameData/GameData.cs reads database.json with Newtonsoft TypeNameHandling.All on a 60-second status timer, at startup and from a command path. High local-write-gated RCE risk. Use TypeNameHandling.None for the flat GameData DTO and remove the dead .Auto deserialization helper. Secret hygiene and command auth are otherwise documented as good.
In-repo stats extension vs AntiStack DB extension a2waspwarfare_Extension only implements GLOBALGAMESTATS; AntiStack calls a separate A2WaspDatabase DLL that is absent from the repo. WFBE_C_ANTISTACK_ENABLED defaults on via the lobby/fallback constants, so the deployment choice matters before public hosting. Claude DR-29 verified GLOBALGAMESTATS is not an SQF RCE path today because output is discarded, but it has dormant deserialization and async-write risks. Deployment dependency split. Do not assume building Extension satisfies AntiStack. Either confirm/install A2WaspDatabase and harden return handling, or operate/default AntiStack disabled until the dependency is real. Add extension presence detection/circuit breaker before public deployment; remove/harden the dead TypeNameHandling.Auto load path and fix async void file writes before treating the extension as robust persistence.
WASP HQ recovery locality WASP/actions/Action_RepairMHQDepot.sqf performs funds/HQ/town-SV effects largely client-side before server repair signaling. Authority-light legacy action. Harden server-side before expanding HQ recovery, town-SV reset or commander-spend behavior.
Missing CI/reference validation Only .github/FUNDING.yml exists; no build/reference/generated-drift checks were found. Missing tooling. Add .NET builds, generated-mission drift, SQF reference scans and wiki JSON/JSONL validation when project automation is introduced.
Modded mission conflict markers `rg -l "<<<<<<< =======
Stale old upgrade dialog RscMenu_Upgrade points to missing Client/GUI/GUI_Menu_Upgrade.sqf; the live main menu opens WFBE_UpgradeMenu / GUI_UpgradeMenu.sqf instead. Branch check 2026-06-14: docs checkout d4cfef80 keeps the stale class in both maintained roots at Rsc/Dialogs.hpp:2425,2428; Miksuu b8389e74 and perf/quick-wins 0076040f keep it at :2435,:2438; stable origin/master cf2a6d6a, release a96fdda2 and origin/feat/upgrade-queue-stacking b061c905 have no checked RscMenu_Upgrade / GUI_Menu_Upgrade.sqf hits in maintained roots. Confirmed branch-split stale UI path. Do not revive by recreating the old missing controller or art. Preferred code-owner action for roots that still carry it is consistent removal or explicit aliasing across maintained roots, followed by live upgrade-menu smoke. Canonical lane: UI resource parity cleanup.
Generated version.sqf boot dependency Rechecked 2026-06-14 on docs checkout 85679dba: description.ext:39 and initJIPCompatible.sqf:4 both include version.sqf, but source Chernarus and maintained Vanilla Takistan have no present or tracked generated version.sqf; .gitignore:1,23 ignores those paths. Tools/LoadoutManager/Data/Terrains/BaseTerrain.cs:99-102,346-367 writes version outputs, and FileManager.cs:92-100 treats them as generated/special terrain files. Checked refs 85679dba, stable cf2a6d6a, Miksuu b8389e74, perf 0076040f and release a96fdda2 do not track Chernarus/Vanilla version.sqf. Generated-output/release hazard. Verify the target mission root has the right generated version.sqf before pack/test claims, especially clean checkouts, generated Vanilla and modded/stub terrain folders.
Economy dialog missing controls Branch check 2026-06-14: docs checkout d2a3f995 still writes 23004/23005/23006 at GUI_Menu_Economy.sqf:7-8 in both maintained roots, while RscMenu_Economy declares 23002, 23003 and 23008 at Rsc/Dialogs.hpp:3327,3339,3346. Miksuu b8389e74 and perf 0076040f keep the same stale writes. Stable cf2a6d6a and release a96fdda2 rewrite both maintained-root Economy controllers around dashboard 23020 at GUI_Menu_Economy.sqf:25 and declare 23020 at stable Rsc/Dialogs.hpp:3031 / release :3006. Docs-ready UI parity cleanup for docs/Miksuu/perf targets; preserve stable/release repair when merging. Use UI resource parity cleanup, then smoke Economy disabled state, income controls, sell mode and supply-truck respawn.
Duplicate UI resource IDDs Branch check 2026-06-14: current docs checkout b5219d47 keeps the 2fef1e3d UI resource line shape, and docs/Miksuu b8389e74/perf 0076040f still keep EASA/Economy both on dialog idd = 23000 in both maintained roots. Stable cf2a6d6a and release a96fdda2 move EASA to 24000 and keep Economy on 23000 in both maintained roots. RscOverlay/OptionsAvailable still both use title idd = 10200 everywhere checked; no checked maintained root has a findDisplay 23000/10200 caller. Docs/Miksuu/perf still need UI parity cleanup or a formal waiver for EASA/Economy; every checked target still needs title-IDD cleanup or a waiver. Start at UI resource parity cleanup, then use UI IDD collision repair; smoke EASA, Economy, RHUD/FPS HUD, action icons and endgame stats after any IDD/display-handle cleanup.
RHUD/endgame shared title display handle OptionsAvailable and EndOfGameStats both use GUI_SetCurrentCutDisplay.sqf / GUI_ClearCurrentCutDisplay.sqf and therefore the same uiNamespace["currentCutDisplay"]; docs/Miksuu/perf use Titles.hpp:170-171,539-540, Client_UpdateRHUD.sqf:89-92,183-190, updateavailableactions.fsm:225-230 and GUI_EndOfGameStats.sqf:34-44,86-93; stable/release line-drift to Titles.hpp:174-175,587-588 and Client_UpdateRHUD.sqf:89-92,251-258. All checked refs keep the shared-handle shape in both maintained roots. Patch-ready UI lifecycle bug. Split display variables or gate RHUD/action-icon recreation during endgame, separate from duplicate-IDD cleanup; smoke RHUD/FPS, action icons and endgame stat bars together. Canonical lane: UI IDD collision repair.
Modded missing camp helper file Napf, Eden and Lingor Common/Init/Init_Common.sqf:52-53,127-128 compile Common/Functions/Common_GetTotalCamps.sqf, but only source Chernarus and maintained Vanilla currently track that file. Additional modded-runnability blocker. Do not call those forks runnable until missing helpers, generated inputs and conflict markers are resolved or the forks are regenerated/retired.
Camp flag texture drift Towns/camps/capture owns the refreshed branch split. Docs head 5243f91d is source-unchanged from the earlier 3eefcb00 atlas checkpoint and still writes captured camp sideID to _newSID at server_town_camp.sqf:132 but flags old _side at :135; Miksuu b8389e74 still flags old _side, perf/quick-wins 0076040f fixes Chernarus only, and stable origin/master cf2a6d6a plus release a96fdda2 fix independent capture in both maintained roots. repair-camp still changes side/broadcasts without flag refresh in every checked ref; line drift lives on the owner matrix. Branch-split visual/world-state debt. Preserve the stable/release independent-capture fix when merging; patch old-owner targets where still relevant; add repair-side flag refresh in all code-owner targets; smoke independent capture and camp repair.
Camp count helper fallback Branch check refreshed 2026-06-14: docs head 5243f91d is source-unchanged from 3eefcb00 for checked helper/consumer paths, and docs, stable origin/master cf2a6d6a, Miksuu b8389e74, perf/quick-wins 0076040f and release a96fdda2 all keep Common_GetTotalCamps.sqf:10 and Common_GetTotalCampsOnSide.sqf:16 returning 1 for zero-camp towns in both maintained roots. Affected caller families are capture mode 2/capture-rate math, threeway respawn and depot infantry buys; exact branch line drift lives on Towns, camps and capture atlas. Patch-ready caller-semantics debt. Use Towns, camps and capture atlas; split real-count from safe-denominator behavior or add caller-specific zero-camp guards, then smoke capture mode 2, threeway respawn and depot infantry buys on 0/partial/all-camp towns.
Buy-menu price/key alignment Factory and purchase systems atlas owns the refreshed branch/root matrix. Docs checkout 8d611092, Miksuu b8389e74 and perf/quick-wins 0076040f keep selected-detail price drift, no level-0 UNIT_COST_MODIFIER reset and the uppercase/lowercase driver-default profile key split. Stable origin/master cf2a6d6a and release a96fdda2 fix selected-detail display in both maintained roots and mirror both driver-default keys, but still do not reset UNIT_COST_MODIFIER to 1 for level 0. origin/feat/buymenu-easa-qol a66d4691 fixes selected-detail display in Chernarus only. UI/economy correctness debt, partially fixed on stable/release. Reset/localize the modifier path, decide whether dual-key mirroring is the intended driver-default compatibility policy, then smoke list/detail/charge, funds guard, unit-cost levels 0/1/2, crew toggles, max-out and reset.
Patrols v2 current-master route Current stable origin/master cf2a6d6a Chernarus and maintained Vanilla retire the old server_town_ai patrol launch (server_town_ai.sqf:44,220), add the side-upgrade driver (server_side_patrols.sqf:24-58), compile and dispatch Common_RunSidePatrol.sqf:53-83, maintain side slots/markers through Server_HandleSpecial.sqf:215-242, and use server_patrols.sqf:26 && in both roots. The old 89ae9dad DR-57/AI1 evidence is historical branch evidence now. Source-present / smoke-pending AI lifecycle feature. Use Towns/camps/capture; smoke Patrols upgrade levels 1/2/3, HC delegate-sidepatrol, friendly marker audience, patrol death, side-slot/cooldown release and Buy Units/RHUD AI-cap text.
Hardcoded live UI help/status text GUI_Menu_BuyUnits.sqf:443-457 hardcodes English vehicle-help hints, and GUI_Menu_Tactical.sqf:604-605 hardcodes artillery ammo request status. Localization/UI polish debt. Move to stringtable keys when polishing Buy Units/Tactical; verify translated clients and no missing-key regressions.
Vote/help/WASP/main-menu UI edge cases Client UI systems atlas owns the branch/root matrix for the vote refresh loops (GUI_VoteMenu.sqf:29,49,61; GUI_Commander_VoteMenu.sqf:58), vote row-color offset (GUI_VoteMenu.sqf:80,82), help load/unload namespace mismatch (Rsc/Dialogs.hpp:3502-3503; release line drift noted there) and orphaned GPS zoom router (GUI_Menu.sqf:202,206). Current source/Vanilla, stable origin/master, Miksuu upstream, perf/quick-wins and release all keep those shapes. WASP display-54 input-lock polling is tracked separately in the WASP marker wait route. UI correctness and UX debt, patch-ready but source-unpatched. Fix vote loops plus row coloring, clean the help namespace/onUnload contract, decide remove-vs-revive for GPS 17/18, propagate Vanilla and smoke vote refresh/list coloring, help open/close and main-menu HUD/GPS behavior; smoke WASP marker dialog through its own lane.
Destroyed-factory refund branch split Branch-checked 2026-06-13: docs checkout 8d611092, Miksuu b8389e74, perf/quick-wins 0076040f and origin/feat/buymenu-easa-qol a66d4691 keep GUI_Menu_BuyUnits.sqf:154-156 local queue increment/debit plus Client_BuildUnit.sqf:211-214 dead/null factory cleanup without refund. Stable origin/master cf2a6d6a and release a96fdda2 pass _currentCost into BuildUnit and refund the real dead/null factory abort at Client_BuildUnit.sqf:212-216 in both maintained roots. Source-present on stable/release, patch-ready for older roots if they remain targets. Preserve the refund payload when merging, and smoke factory death, buyer disconnect, empty/crewless vehicle abort and normal queue completion. See Factory and purchase systems.
Latent server buy worker is not player-buy parity Stable master compiles AIBuyUnit = Server_BuyUnit.sqf (Init_Server.sqf:10) but has no static caller. Player buys use client WFBE_C_QUEUE_* / unitQueu, while Server_BuyUnit.sqf uses team wfbe_queue and always proceeds into server crew creation (Server_BuyUnit.sqf:92-214). Factory/AI production design debt. If AIBuyUnit is revived, document the intended AI production semantics and queue model instead of treating it as a server replacement for player buying.
Generated version.sqf map/profile contract description.ext:39, Rsc/Header.hpp:5,9,21 and initJIPCompatible.sqf:4,31,111-113 make generated version.sqf drive header metadata and runtime Chernarus/non-Chernarus flags. IS_NAVAL_MAP also gates boat content through IS_naval_map. Generated-output/release hazard. Use Mission config/version include graph; verify target root flags before packaging and do not confuse Missions_Vanilla with the VANILLA macro.
Visible parameter runtime-consumer drift Branch check 2026-06-05: current source/Vanilla, origin/master, miksuu/master and release all expose/default WFBE_C_AI_MAX with no active maintained-root runtime reader found; player follower caps use WFBE_C_PLAYERS_AI_MAX. The same roots expose/default WFBE_C_UNITS_CLEAN_TIMEOUT, but live cleanup reads WFBE_C_UNITS_BODIES_TIMEOUT and only references the old clean-timeout split in a comment; empty vehicles use WFBE_C_UNITS_EMPTY_TIMEOUT. Docs-ready code-owner cleanup. Use Mission parameters and Dead/stale code register; decide wire/hide/rename/historical-label policy, then smoke host parameter display, player AI cap UI/RHUD, corpse cleanup and empty vehicle cleanup.
Auto-wall construction toggle is global Construction and CoIn systems owns the refreshed branch matrix. Docs head 7d248610 is source-unchanged from 4bd37b98 for checked construction paths; docs, stable origin/master cf2a6d6a, Miksuu b8389e74, origin/perf/quick-wins 0076040f and release a96fdda2 all keep RequestAutoWallConstructinChange.sqf:3-7 writing one global isAutoWallConstructingEnabled; SmallSite/MediumSite consume that same global at :110 / :125. Stable/release initialize the global to true and add an AARadar exclusion, but no checked ref scopes it by player, side or requester. Workflow/authority risk. Key by side/requester if it is meant as a player preference, or explicitly document/smoke global behavior.
Salvage cleanup, payout typo and authority edge Construction and CoIn systems owns the refreshed branch matrix. Docs head 7d248610 is source-unchanged from 4bd37b98 for checked salvage paths; docs, stable origin/master cf2a6d6a, Miksuu b8389e74, origin/perf/quick-wins 0076040f, release a96fdda2 and historical Miksuu salvage branches all keep lowercase ChangePlayerfunds in both payout paths while Init_Client.sqf compiles ChangePlayerFunds; all checked roots keep the updatesalvage.sqf `
Empty supply trucks linger by design Marker cleanup/restoration owns the branch matrix and exact collector/handler line proof. Current docs head 7eea6b6c is source-unchanged from the earlier 634a907b marker/cleanup checkpoint for checked Chernarus and maintained Vanilla paths; stable cf2a6d6a, Miksuu b8389e74, perf 0076040f and release a96fdda2 still route through the same 24-hour supply-truck handler shape. Owner-decision logistics/cleanup behavior. Decide whether 24-hour supply-truck persistence is intended support/logistics state or should become shorter/parameterized; if patched, propagate source Chernarus plus maintained Vanilla and smoke ordinary empty vehicles, medical/repair double-timeout vehicles and supply mission/logistics use.
Malformed clickable-text sound config Client UI systems owns the current branch matrix. Docs/source b5219d47 keeps the f7bc72a8 line shape, current origin/master cf2a6d6a, Miksuu upstream/master b8389e74, origin/perf/quick-wins 0076040f, release a96fdda2 and UI theme branches all keep RscClickableText.soundPush[] = {, 0.2, 1}; at Rsc/Ressources.hpp:556 in both maintained roots; current master/release derive 14 controls from that base class, while docs/source/upstream/perf/theme branches derive 17. Patch-ready UI config cleanup. Change the base-class array to a valid value in source Chernarus plus maintained Vanilla, then smoke representative clickable controls in gear, WF menu/HUD toggles, construction/CoIn, artillery and economy before reusing the base class.
Buy gear partials GUI_BuyGearMenu.sqf includes self-documented TODOs for target refresh, vehicle target content and template scope. Partial UI cleanup; avoid expanding templates until gear/vehicle/backpack behavior is mapped.
Fast travel fee Branch check 2026-06-14: docs checkout d2a3f995, stable cf2a6d6a, release a96fdda2, Miksuu b8389e74 and perf 0076040f all keep the same maintained-root Tactical fee-mode shape: GUI_Menu_Tactical.sqf:146-147 has the policy TODO, :185-217 hides unaffordable towns and draws marker-price text, and :403-406 recalculates/debits locally on travel. Constants are docs/Miksuu/perf Init_CommonConstants.sqf:218,227-230, stable :235,244-247, release :231,240-243. Working/partial UX, docs-ready owner decision. Use Client UI systems; decide hide-vs-disabled/prompt policy, add a final local funds/context recheck if desired, propagate Vanilla and smoke modes 0/1/2, insufficient/exact/sufficient funds and HQ/town/command-center starts.
Stable low-priority TODO cluster Branch check 2026-06-06: current source Chernarus, maintained Vanilla, stable origin/master, Miksuu upstream, perf/quick-wins and release all keep the same three TODO-only shapes: side-presence logic detection followed by fixed resistance defender setup (Init_Common.sqf:273-285), CoIn border recreation tied to area-size changes but not logic-position moves (coin_interface.sqf:114,419-425) and town-attack waypoint polish comments for combat/speed/radio/camp behavior (Server_AI_SetTownAttackPath.sqf:74-78). Consolidated from three vague rows. These are not confirmed broken features by themselves. Routes: Architecture overview for common init/side presence, Construction and CoIn for border relocation, and AI runtime/HC loop map for attack-path revival/polish.

Scout-Harvest Routing / Archived Findings

The 2026-06-04 mini-scout waves are now treated as harvested source-check history. Keep exact chronology in Agent worklog, Subagent discovery swarm, agent-feature-status.jsonl, agent-events.jsonl and git history; do not repeat row-by-row scout output here after canonical owner pages carry the evidence.

Finding family Current owner route Register status
Generated version.sqf, mission config and terrain output contract Mission config/version graph, Content structure and maps, Tools/build Documented; keep release-footgun rows above when they affect current packaging.
Latent AIBuyUnit, factory queue/debit/refund and purchase semantics Factory and purchase systems atlas, Factory queue cleanup, Economy authority first cut Keep one live status row for the latent server buy worker; do not re-describe it in every scout harvest.
UI/HUD/dialog issues such as help unload state, GPS zoom routes, vote rows, service affordability, EASA exact funds, gear templates and buy-menu cost display Client UI systems atlas, Player UI workflow map, Gear/loadout/EASA atlas, Service menu affordability guards Owner pages track exact controls and smoke packs; Feature Status should only keep high-risk rows.
AI commander, autonomous flag, spawned-unit order inheritance and branch-only AI commander supervisor work AI commander autonomy audit, AI runtime/HC loop map Stable master remains partial; branch-only revival evidence must stay branch-scoped.
Headless delegation, static-defence accounting and cleanup loops Headless delegation/failover, AI/headless and performance Owner pages track payload-shape and lifecycle debt.
Construction base area, CoIn null guards, auto-wall toggle and structure logic list cleanup Construction and CoIn, Construction logic list cleanup Keep as source-unpatched construction debt; avoid duplicating implementation walkthroughs here. Branch check 2026-06-14: docs head 7d248610 is source-unchanged from 4bd37b98, and docs, stable cf2a6d6a, Miksuu b8389e74, perf 0076040f and release a96fdda2 all keep SmallSite add/add while MediumSite removes in both maintained roots.
Respawn penalties, threeway defender respawn, HandleAT handler lifecycle and respawn candidate caveats Respawn/death lifecycle, Towns/camps Owner pages carry exact conditions and smoke targets.
Supply mission completion PV/state, player-object matching, truck/heli branch scope, PR #10-#12 history and side-supply reason logging Supply mission architecture, Supply mission authority cleanup, Public variable channel index, Economy/Towns/Supply Docs checkout/Miksuu/perf remain truck-only; stable cf2a6d6a and release a96fdda2 carry the supply-heli/cash-run branch shape in both maintained roots.
Side-supply authority, reason-drop parsing, commander assign/vote and economy hardening Economy authority first cut, Server authority migration map, Hardening roadmap Keep authority risks live; route repeated fix-shape details to owner pages.
Runtime cleanup, SideMessage, dropped-item scans, tool analyzers, LoadoutManager and integration footguns Server gameplay runtime atlas, Marker cleanup/restoration atlas, Performance opportunity sweep, Tools and build workflow, External integrations Runtime/tooling pages own exact script and C# references.

Broken Feature Candidate: AI Supply Logistics

AI_UpdateSupplyTruck.sqf remains the clearest abandoned logistics feature, but current master has the safety wrapper now. Server/Init/Init_Server.sqf:382-384 keeps the truck-supply + AI-commander branch visible, initializes wfbe_ai_supplytrucks and logs that legacy AI supply-truck logistics are disabled instead of spawning UpdateSupplyTruck. The old worker still references missing Server/FSM/supplytruck.fsm, so simply restoring the compile would fail later on the missing FSM. Miksuu/perf and some branch roots still need the raw-spawn caveat from the AI commander matrix.

Canonical routes: Economy/Towns/Supply, AI commander autonomy audit, Abandoned feature revival review, Current PR #1 supply helicopters.

PR #1 Supply Killed-Handler Status

Old wording that called PR #1 a confirmed unguarded handler-stacking defect is stale for current origin/feat/supply-helicopter / release-branch source checks. Current PR #1 docs and source review show supplyMissionStarted.sqf setting wfbe_supply_killed_eh_set before adding the Killed handler, so repeated reloads do not stack handlers by source shape.

Still open before release-ready wording: repeated load/deliver/destroy runtime smoke, persistent guard behavior, handler-ID/removal or re-arm policy, cash-run semantics, JIP cooldown behavior and clear branch wording that docs/Miksuu/perf remain truck-only while stable/release carry the heli shape. Canonical routes: Current PR #1 supply helicopters, Supply mission architecture, Supply mission authority cleanup.

Missing Feature Candidates

  • Autonomous AI supply trucks/helicopters.
  • Formal generated docs from LoadoutManager data classes into mission docs.
  • Automated validation that generated Takistan/modded missions match Chernarus source after docs/code changes.
  • Automated SQF syntax or reference validation in CI.

Continue Reading

Previous: External integrations | Next: Hardening roadmap

Main map: Home | Fast path: Quickstart | Agent file: agent-context.json

Sidebar

Clone this wiki locally