qvm: recover early client routing gates

docs/FINDINGS.md

@@ -1879,3 +1879,5 @@ RE-971: Rust matches16 whole original timer cases, composing the shared residual
 RE-972: Ninety-six original154089-prefix cases recover connection-word gating, original command timestamp copies, command-time bounds, signed delta calculation/cap and the word3108==2 exception for nonpositive deltas. Optional8ms rounding occurs after the delta and does not recompute it. Execution stops at154210 or the verified early-return boundary155716; intervening caller processing and dispatch155714 are not skipped or claimed recovered. [Evidence](research/QVM_CLIENT_TIMER_PREPARE.md).
 
 RE-973: Rust matches96 original caller-prefix cases, preserving connection-word gating, pre-clamp timestamp copies, signed wrapping bounds, the nonpositive-delta exception,200ms cap and post-delta8ms rounding. Unit tests cover unchanged disconnected state, retained pre-round delta, negative exception deltas and sequential bounds at signed wrap. The remaining caller body and actual timer dispatch are explicitly unrecovered. [Evidence](research/RUST_CLIENT_TIMER_PREPARE.md).
+
+RE-974: Sixteen source154210-prefix paths recover intermission precedence, team3/follow gates and spectator-word3 callback suppression. Normal paths stop at154256; routed paths stop at the original early return155716. Callback151133/149671 effects remain captured, with their client/command inputs recorded. Later command and movement processing are outside this first contract. [Evidence](research/QVM_CLIENT_ROUTING.md).

docs/PROVISIONAL_TODO.md

@@ -1933,3 +1933,5 @@ RE-954–963 completed add/remove wrappers, resolved duration export, full-capac
 - [x] RE-973 Rust caller timestamp preparation and delta semantics ([evidence](research/RUST_CLIENT_TIMER_PREPARE.md)).
 
 RE-964–973 completed timer deadline/phase/recovery contracts, whole-body composition and caller timing preparation. RE-974 tracks remaining caller paths, damage feedback and native/runtime integration. [Batch and next work](research/QVM_CLIENT_TIMER_BATCH.md).
+
+- [x] RE-974 Original client intermission and spectator routing ([evidence](research/QVM_CLIENT_ROUTING.md)).

docs/RESEARCH_LEDGER.md

@@ -2565,3 +2565,7 @@ Ninety-six original154089-prefix cases recover connection-word gating, original
 Rust matches96 original caller-prefix cases, preserving connection-word gating, pre-clamp timestamp copies, signed wrapping bounds, the nonpositive-delta exception,200ms cap and post-delta8ms rounding. Unit tests cover unchanged disconnected state, retained pre-round delta, negative exception deltas and sequential bounds at signed wrap. The remaining caller body and actual timer dispatch are explicitly unrecovered. Focused `cargo xtask test-group rust-client-timer-prepare` passes with deterministic report regeneration, relevant regressions and storage/documentation/whitespace checks. Full suite deferred to the tenth-commit boundary. Original assets unchanged; native IO effects remain captured.
 
 Batch RE-964–973 boundary: the single `cargo xtask test-full --since c1e91e2e` run after commit ten passed with the flake-declared Nix Python: 1,878 Python tests, 270 Rust tests (assets10, gameplay230, xtask30), 106 deterministic report producers, storage policy, 546 documentation files and whitespace guards. No generated report drift. Focused dependency-selection regression covers all five new source/Rust pairs and shared timer/command/loading/lifecycle/native-policy/formatter inputs, including scoped gameplay test-count metadata. Validation notes were amended into task ten; original assets unchanged. See [batch findings and next work](research/QVM_CLIENT_TIMER_BATCH.md).
+
+## 2026-10-28 — RE-974 Original client intermission and spectator routing
+
+Sixteen source154210-prefix paths recover intermission precedence, team3/follow gates and spectator-word3 callback suppression. Normal paths stop at154256; routed paths stop at the original early return155716. Callback151133/149671 effects remain captured, with their client/command inputs recorded. Later command and movement processing are outside this first contract. Focused `cargo xtask test-group qvm-client-routing` passes with deterministic report regeneration, relevant regressions and storage/documentation/whitespace checks. Full suite deferred to the tenth-commit boundary. Original assets unchanged; native IO effects remain captured.

docs/REVERSE_ENGINEERING_TODO.md

@@ -1970,3 +1970,5 @@ RE-964–973 recover the complete bounded timer body and its caller timing prefi
 - [x] RE-973 Rust caller timestamp preparation and delta semantics ([evidence](research/RUST_CLIENT_TIMER_PREPARE.md)).
 
 - [ ] RE-974 Recover the remaining timer caller, damage feedback, initialization/native ownership and full Rust/Bevy/Solari acceptance ([next work](research/QVM_CLIENT_TIMER_BATCH.md)).
+
+- [x] RE-974 Original client intermission and spectator routing ([evidence](research/QVM_CLIENT_ROUTING.md)).

docs/research/QVM_CLIENT_ROUTING.md

@@ -0,0 +1,5 @@
+# Original client intermission and spectator routing
+
+RE-974. Focused validation: `cargo xtask test-group qvm-client-routing`. [Machine report](qvm-client-routing.json).
+
+Sixteen source154210-prefix paths recover intermission precedence, team3/follow gates and spectator-word3 callback suppression. Normal paths stop at154256; routed paths stop at the original early return155716. Callback151133/149671 effects remain captured, with their client/command inputs recorded. Later command and movement processing are outside this first contract.

docs/research/README.md

@@ -1505,3 +1505,5 @@ The extension collector adds five focused tests for native tail calls, command-r
 - [RE-973: Rust caller timestamp preparation and delta semantics](RUST_CLIENT_TIMER_PREPARE.md).
 
 - [RE-964–973 client timer batch and RE-974 next work](QVM_CLIENT_TIMER_BATCH.md).
+
+- [RE-974: Original client intermission and spectator routing](QVM_CLIENT_ROUTING.md).

docs/research/qvm-client-routing.json

@@ -0,0 +1,355 @@
+{
+  "limits": "16 original154210..154256 paths cover intermission precedence, team3/follow routing and spectator-word3 suppression. Source callbacks151133/149671 are captured; explicit boundaries stop before command rewriting or at original early return155716.",
+  "probes": [
+    {
+      "events": [],
+      "execution": {
+        "stop": 154256,
+        "trace_length": 18,
+        "trace_sha256": "8e9022982fa3dd6aa13e253ae059eff18c6e4b1ff81523026d430e48b163cae2"
+      },
+      "input": {
+        "follow": 0,
+        "intermission": 0,
+        "msec": 50,
+        "spectator": 0,
+        "team": 0
+      },
+      "proceed": true
+    },
+    {
+      "events": [],
+      "execution": {
+        "stop": 154256,
+        "trace_length": 18,
+        "trace_sha256": "8e9022982fa3dd6aa13e253ae059eff18c6e4b1ff81523026d430e48b163cae2"
+      },
+      "input": {
+        "follow": 0,
+        "intermission": 0,
+        "msec": 50,
+        "spectator": 3,
+        "team": 0
+      },
+      "proceed": true
+    },
+    {
+      "events": [
+        {
+          "command_time": 12345,
+          "op": "spectator",
+          "slot": 2
+        }
+      ],
+      "execution": {
+        "stop": 155716,
+        "trace_length": 36,
+        "trace_sha256": "b226bba7418f8d3639834da0178c08b0fe7f999ad00b8f4b87cb0f2bd6181491"
+      },
+      "input": {
+        "follow": 1,
+        "intermission": 0,
+        "msec": 50,
+        "spectator": 0,
+        "team": 0
+      },
+      "proceed": false
+    },
+    {
+      "events": [],
+      "execution": {
+        "stop": 155716,
+        "trace_length": 27,
+        "trace_sha256": "f703c4f57ae46c84d1db7dd6e8da1ca68c9a6bd950184159933e88b082e8387e"
+      },
+      "input": {
+        "follow": 1,
+        "intermission": 0,
+        "msec": 50,
+        "spectator": 3,
+        "team": 0
+      },
+      "proceed": false
+    },
+    {
+      "events": [
+        {
+          "command_time": 12345,
+          "op": "spectator",
+          "slot": 2
+        }
+      ],
+      "execution": {
+        "stop": 155716,
+        "trace_length": 29,
+        "trace_sha256": "d8eb4b97d39918d2a78a4d7f3d920eea0bd4cf9a9a1c30a45b9bfe3b08e35476"
+      },
+      "input": {
+        "follow": 0,
+        "intermission": 0,
+        "msec": 50,
+        "spectator": 0,
+        "team": 3
+      },
+      "proceed": false
+    },
+    {
+      "events": [],
+      "execution": {
+        "stop": 155716,
+        "trace_length": 20,
+        "trace_sha256": "732bbdfda2cdf56ad02d1e32f7c6604edf0a87b892fba7370cd6d52f69350b69"
+      },
+      "input": {
+        "follow": 0,
+        "intermission": 0,
+        "msec": 50,
+        "spectator": 3,
+        "team": 3
+      },
+      "proceed": false
+    },
+    {
+      "events": [
+        {
+          "command_time": 12345,
+          "op": "spectator",
+          "slot": 2
+        }
+      ],
+      "execution": {
+        "stop": 155716,
+        "trace_length": 29,
+        "trace_sha256": "d8eb4b97d39918d2a78a4d7f3d920eea0bd4cf9a9a1c30a45b9bfe3b08e35476"
+      },
+      "input": {
+        "follow": 1,
+        "intermission": 0,
+        "msec": 50,
+        "spectator": 0,
+        "team": 3
+      },
+      "proceed": false
+    },
+    {
+      "events": [],
+      "execution": {
+        "stop": 155716,
+        "trace_length": 20,
+        "trace_sha256": "732bbdfda2cdf56ad02d1e32f7c6604edf0a87b892fba7370cd6d52f69350b69"
+      },
+      "input": {
+        "follow": 1,
+        "intermission": 0,
+        "msec": 50,
+        "spectator": 3,
+        "team": 3
+      },
+      "proceed": false
+    },
+    {
+      "events": [
+        {
+          "op": "intermission",
+          "slot": 2
+        }
+      ],
+      "execution": {
+        "stop": 155716,
+        "trace_length": 12,
+        "trace_sha256": "7e20e5dcf116c97ca51f04063ad22303a8c80ffff614d5a80b92c9fc4bd67d32"
+      },
+      "input": {
+        "follow": 0,
+        "intermission": 1,
+        "msec": 50,
+        "spectator": 0,
+        "team": 0
+      },
+      "proceed": false
+    },
+    {
+      "events": [
+        {
+          "op": "intermission",
+          "slot": 2
+        }
+      ],
+      "execution": {
+        "stop": 155716,
+        "trace_length": 12,
+        "trace_sha256": "7e20e5dcf116c97ca51f04063ad22303a8c80ffff614d5a80b92c9fc4bd67d32"
+      },
+      "input": {
+        "follow": 0,
+        "intermission": 1,
+        "msec": 50,
+        "spectator": 3,
+        "team": 0
+      },
+      "proceed": false
+    },
+    {
+      "events": [
+        {
+          "op": "intermission",
+          "slot": 2
+        }
+      ],
+      "execution": {
+        "stop": 155716,
+        "trace_length": 12,
+        "trace_sha256": "7e20e5dcf116c97ca51f04063ad22303a8c80ffff614d5a80b92c9fc4bd67d32"
+      },
+      "input": {
+        "follow": 1,
+        "intermission": 1,
+        "msec": 50,
+        "spectator": 0,
+        "team": 0
+      },
+      "proceed": false
+    },
+    {
+      "events": [
+        {
+          "op": "intermission",
+          "slot": 2
+        }
+      ],
+      "execution": {
+        "stop": 155716,
+        "trace_length": 12,
+        "trace_sha256": "7e20e5dcf116c97ca51f04063ad22303a8c80ffff614d5a80b92c9fc4bd67d32"
+      },
+      "input": {
+        "follow": 1,
+        "intermission": 1,
+        "msec": 50,
+        "spectator": 3,
+        "team": 0
+      },
+      "proceed": false
+    },
+    {
+      "events": [
+        {
+          "op": "intermission",
+          "slot": 2
+        }
+      ],
+      "execution": {
+        "stop": 155716,
+        "trace_length": 12,
+        "trace_sha256": "7e20e5dcf116c97ca51f04063ad22303a8c80ffff614d5a80b92c9fc4bd67d32"
+      },
+      "input": {
+        "follow": 0,
+        "intermission": 1,
+        "msec": 50,
+        "spectator": 0,
+        "team": 3
+      },
+      "proceed": false
+    },
+    {
+      "events": [
+        {
+          "op": "intermission",
+          "slot": 2
+        }
+      ],
+      "execution": {
+        "stop": 155716,
+        "trace_length": 12,
+        "trace_sha256": "7e20e5dcf116c97ca51f04063ad22303a8c80ffff614d5a80b92c9fc4bd67d32"
+      },
+      "input": {
+        "follow": 0,
+        "intermission": 1,
+        "msec": 50,
+        "spectator": 3,
+        "team": 3
+      },
+      "proceed": false
+    },
+    {
+      "events": [
+        {
+          "op": "intermission",
+          "slot": 2
+        }
+      ],
+      "execution": {
+        "stop": 155716,
+        "trace_length": 12,
+        "trace_sha256": "7e20e5dcf116c97ca51f04063ad22303a8c80ffff614d5a80b92c9fc4bd67d32"
+      },
+      "input": {
+        "follow": 1,
+        "intermission": 1,
+        "msec": 50,
+        "spectator": 0,
+        "team": 3
+      },
+      "proceed": false
+    },
+    {
+      "events": [
+        {
+          "op": "intermission",
+          "slot": 2
+        }
+      ],
+      "execution": {
+        "stop": 155716,
+        "trace_length": 12,
+        "trace_sha256": "7e20e5dcf116c97ca51f04063ad22303a8c80ffff614d5a80b92c9fc4bd67d32"
+      },
+      "input": {
+        "follow": 1,
+        "intermission": 1,
+        "msec": 50,
+        "spectator": 3,
+        "team": 3
+      },
+      "proceed": false
+    }
+  ],
+  "sha256": "a589351dfe517470a1b121dd2164714987d9e4577bf00c6486e1540035d7a79d",
+  "source": {
+    "archive": "zUrT43_qvm.pk3",
+    "archive_sha256": "b59bf0c5bedf11d50e0edd220da7eade96de40601e98ae14c54c819047df0796",
+    "member": {
+      "bytes": 983300,
+      "comment_hex": "",
+      "compressed_bytes": 246560,
+      "compression": 8,
+      "crc32": "98ea1768",
+      "create_system": 0,
+      "create_version": 63,
+      "date_time": [
+        2018,
+        6,
+        18,
+        22,
+        11,
+        50
+      ],
+      "directory": false,
+      "entry_index": 2,
+      "external_attr": 32,
+      "extra_hex": "0a0020000000000001001800d1e24e974007d40116dcbf962f1fd20116dcbf962f1fd201",
+      "extract_version": 20,
+      "flags": 0,
+      "header_offset": 221309,
+      "internal_attr": 0,
+      "occurrence": 0,
+      "output": "assets/extracted/zUrT43_qvm.pk3/members/000002/vm/qagame.qvm",
+      "path": "vm/qagame.qvm",
+      "sha256": "a589351dfe517470a1b121dd2164714987d9e4577bf00c6486e1540035d7a79d",
+      "type": "member",
+      "volume": 0
+    }
+  }
+}

docs/research/qvm-resumer-audit.json

@@ -8598,6 +8598,17 @@
       "repeated_calls_opt_in": true,
       "repeated_calls_setting": "literal_true"
     },
+    {
+      "backward_conditional_branches": [],
+      "calls": [],
+      "explicit_result_offsets": null,
+      "helper": "qvm_trace_support.resume",
+      "line": 20,
+      "literal_range": null,
+      "path": "scripts/qvm_client_processing_support.py",
+      "repeated_calls_opt_in": true,
+      "repeated_calls_setting": "literal_true"
+    },
     {
       "backward_conditional_branches": [],
       "calls": [
@@ -10307,10 +10318,10 @@
     }
   },
   "summary": {
-    "call_expressions": 207,
-    "files": 159,
+    "call_expressions": 208,
+    "files": 160,
     "legacy_expressions": 158,
-    "nonliteral_ranges": 28,
+    "nonliteral_ranges": 29,
     "unresolved_mode_expressions": 3
   }
 }

scripts/analyze_qvm_client_routing.py

@@ -0,0 +1,12 @@
+"""Verified original client-processing source contract."""
+from pathlib import Path
+from analyze_qvm import write_json
+from qvm_research_support import source
+from qvm_client_processing_support import seed,gate,gate_fixtures
+
+def main():
+ q,raw,h,ins=source();probes=[]
+ for a in gate_fixtures():
+  m,b=seed(raw,h,a);m,p,b=gate(ins,m,b,a);p['input']=a;probes.append(p)
+ write_json(Path('docs/research/qvm-client-routing.json'),dict(source=q['source'],sha256=q['sha256'],probes=probes,limits='16 original154210..154256 paths cover intermission precedence, team3/follow routing and spectator-word3 suppression. Source callbacks151133/149671 are captured; explicit boundaries stop before command rewriting or at original early return155716.'))
+if __name__=='__main__':main()

scripts/qvm_client_processing_oracle.py

@@ -0,0 +1,8 @@
+"""Independent client routing, command, inactivity and movement expectations."""
+def signed(v):v&=0xffffffff;return v if v<2**31 else v-2**32
+
+def gate(a):
+ if a['intermission']:return dict(events=[dict(op='intermission',slot=2)],proceed=False)
+ if a['team']==3 or a['follow']:
+  return dict(events=[] if a['spectator']==3 else [dict(op='spectator',slot=2,command_time=12345)],proceed=False)
+ return dict(events=[],proceed=True)

scripts/qvm_client_processing_support.py

@@ -0,0 +1,37 @@
+"""Original client-processing fragments and composed pre-movement paths."""
+from qvm_camera_world_support import B,POOL,run
+from qvm_exit_rules_support import CPOOL
+from qvm_byte_memory_support import write_bytes,read_bytes
+from qvm_string_memory_support import cstring,frame_args
+from qvm_trace_support import resume
+from qvm_filter_loading_support import environment
+ROOT=B+0x3b0000
+ENTITY=POOL+880*2
+CLIENT=CPOOL+6336*2
+CONTROL=ROOT+0x10000
+
+def seed(raw,h,a):
+ m,b=environment(raw,h,[]);m[ENTITY+520]=CLIENT;m[ROOT+52]=CLIENT;m[ROOT+324]=CLIENT+472;m[ROOT+328]=a.get('msec',50);m[34992496]=CPOOL
+ write_bytes(m,b,{p:raw[h['data_offset']+p] for p in range(63148,63380)})
+ return m,b
+
+def execute(ins,m,b,start,stop,handlers=None,boundaries=()):
+ m,b=frame_args(m,b,{ROOT+444:ENTITY})
+ m,e=resume(ins,start,stop,m,ROOT,handlers=handlers or {},boundaries=boundaries,byte_inputs=b,repeated_calls=True,sync_child_words=True,coherent_memory=True,byte_handlers=True,capture_byte_memory=True,limit=32768)
+ return m,e,e['byte_memory']
+
+def gate_fixtures():
+ from itertools import product
+ return [dict(intermission=i,team=t,follow=f,spectator=s,msec=50) for i,t,f,s in product([0,1],[0,3],[0,1],[0,3])]
+
+def gate_handlers(events):
+ def intermission(i,m,a,bs):events.append(dict(op='intermission',slot=(a[8]-CPOOL)//6336));return m,0,{'callback151133_captured':True}
+ def spectator(i,m,a,bs):events.append(dict(op='spectator',slot=(a[8]-POOL)//880,command_time=m[a[12]]&0xffffffff));return m,0,{'callback149671_captured':True}
+ return {151133:intermission,149671:spectator}
+
+def gate_seed(m,a):
+ m.update({34999596:a['intermission'],CLIENT+3096:a['team'],CLIENT+4324:a['follow'],CLIENT+3108:a['spectator'],CLIENT+472:12345})
+
+def gate(ins,m,b,a):
+ gate_seed(m,a);events=[];m,e,b=execute(ins,m,b,154210,155717,gate_handlers(events),(154256,155716))
+ return m,dict(events=events,proceed=e['stop']==154256,execution={k:e[k] for k in ['stop','trace_length','trace_sha256']}),b

scripts/test_qvm_client_routing.py

@@ -0,0 +1,12 @@
+import json,unittest
+from pathlib import Path
+from qvm_client_processing_oracle import gate
+class OriginalTests(unittest.TestCase):
+ def test_original_contract(self):
+  rows=json.loads(Path('docs/research/qvm-client-routing.json').read_text())['probes'];self.assertEqual(len(rows),16)
+  for p in rows:
+   for k,v in gate(p['input']).items():self.assertEqual(p[k],v)
+ def test_fixture_identity_and_trace(self):
+  r=json.loads(Path('docs/research/qvm-client-routing.json').read_text());self.assertEqual(len(r['sha256']),64)
+  self.assertTrue(all(p['execution']['trace_length']>0 for p in r['probes']))
+if __name__=='__main__':unittest.main()

xtask/checks.tsv

@@ -3538,3 +3538,7 @@ edge	crates/urt-gameplay/src/filter_commands.rs	scripts/analyze_rust_client_time
 edge	crates/urt-gameplay/src/bin/urt-filter-commands.rs	scripts/analyze_rust_client_timer_prepare.py
 edge	crates/urt-gameplay/src/client_timer.rs	scripts/analyze_rust_client_timer_prepare.py
 edge	crates/urt-gameplay/src/bin/urt-client-timer.rs	scripts/analyze_rust_client_timer_prepare.py
+report	scripts/analyze_qvm_client_routing.py	docs/research/qvm-client-routing.json
+edge	docs/research/qvm-client-routing.json	scripts/test_qvm_client_routing.py
+group	qvm-client-routing	scripts/analyze_qvm_client_routing.py
+edge	scripts/analyze_qvm_client_routing.py	scripts/analyze_qvm_resumer_audit.py