qvm: recover add-filter client and kick routing

docs/FINDINGS.md

@@ -1839,3 +1839,5 @@ RE-951: Rust matches80 original duration/usage command fixtures, preserving wrap
 RE-952: Twenty-four actual export/reload compositions transfer captured file bytes through explicit native replies. Empty-table export leaves the prior file intact, whereas all-hole export truncates. Reload loses masks, converts the original INT_MIN formatter punctuation to metadata0, routes duplicate updates to the first match and grows retained tables. Source formatter/parser/load bodies execute; actual filesystem acceptance and unlimited reload/capacity remain open. [Evidence](research/QVM_FILTER_ROUNDTRIP.md).
 
 RE-953: Rust matches24 original export/reload compositions, retaining stale prior files when export is absent, all-hole truncation, wildcard-mask loss, INT_MIN metadata reload as0, duplicate routing and retained-table growth. The staged loader rejects unsupported domains without mutation. Unit tests cover these losses, duplicate growth and atomic unsupported prior-file rejection. Captured write bytes are supplied as read replies; actual filesystem acceptance remains open. [Evidence](research/RUST_FILTER_ROUNDTRIP.md).
+
+RE-954: Ninety-six actual253100 wrappers recover length-under3 client-number routing, active-slot gating, supplied1024-byte userinfo and actual70503 ip lookup, insertion and exact usage/kick formatting. Non-numeric short input can select slot0. A clientkick command is queued even after missing-ip insertion failure. Selector and formatter wraps, invalid slots and direct masks are verified; exports and native effects remain captured. [Evidence](research/QVM_FILTER_ADD_COMMAND.md).

docs/PROVISIONAL_TODO.md

@@ -1889,3 +1889,5 @@ RE-934–943 completed bounded filter export/removal/metadata and insertion/remo
 - [x] RE-953 Rust export reload composition and persistence-loss regressions ([evidence](research/RUST_FILTER_ROUNDTRIP.md)).
 
 RE-944–953 completed bounded time/expiry/loading/duration and export/reload contracts. RE-954 tracks remaining commands/callers, native ownership and runtime acceptance. [Batch and next work](research/QVM_FILTER_LOADING_BATCH.md).
+
+- [x] RE-954 Original add-filter client lookup and queued kick command ([evidence](research/QVM_FILTER_ADD_COMMAND.md)).

docs/RESEARCH_LEDGER.md

@@ -2481,3 +2481,7 @@ Twenty-four actual export/reload compositions transfer captured file bytes throu
 Rust matches24 original export/reload compositions, retaining stale prior files when export is absent, all-hole truncation, wildcard-mask loss, INT_MIN metadata reload as0, duplicate routing and retained-table growth. The staged loader rejects unsupported domains without mutation. Unit tests cover these losses, duplicate growth and atomic unsupported prior-file rejection. Captured write bytes are supplied as read replies; actual filesystem acceptance remains open. Focused `cargo xtask test-group rust-filter-roundtrip` passes with deterministic report regeneration, relevant regressions and storage/documentation/whitespace checks. Full suite deferred to the tenth-commit boundary. Original assets unchanged; native IO effects remain captured.
 
 Batch RE-944–953 boundary: the single `cargo xtask test-full --since ed9db0e6` run after commit ten passed with the flake-declared Nix Python: 1,838 Python tests, 249 Rust tests (assets10, gameplay209, xtask30), 96 deterministic report producers, storage policy, 524 documentation files and whitespace guards. No generated report drift. Focused dependency-selection regression covers all five new source/Rust pairs and shared loading/lifecycle/native-policy/formatter inputs, including gameplay test-count metadata. Validation notes were amended into task ten; original assets unchanged. See [batch findings and next work](research/QVM_FILTER_LOADING_BATCH.md).
+
+## 2026-10-28 — RE-954 Original add-filter client lookup and queued kick command
+
+Ninety-six actual253100 wrappers recover length-under3 client-number routing, active-slot gating, supplied1024-byte userinfo and actual70503 ip lookup, insertion and exact usage/kick formatting. Non-numeric short input can select slot0. A clientkick command is queued even after missing-ip insertion failure. Selector and formatter wraps, invalid slots and direct masks are verified; exports and native effects remain captured. Focused `cargo xtask test-group qvm-filter-add-command` passes with deterministic report regeneration, relevant regressions and storage/documentation/whitespace checks. Full suite deferred to the tenth-commit boundary. Original assets unchanged; native IO effects remain captured.

docs/REVERSE_ENGINEERING_TODO.md

@@ -1926,3 +1926,5 @@ RE-944–953 recover bounded time, expiry, loading, duration and persistence rou
 - [x] RE-953 Rust export reload composition and persistence-loss regressions ([evidence](research/RUST_FILTER_ROUNDTRIP.md)).
 
 - [ ] RE-954 Recover remaining filter commands/callers and native time/file/network ownership, bot setup/userinfo and full Rust/Bevy/Solari acceptance ([next work](research/QVM_FILTER_LOADING_BATCH.md)).
+
+- [x] RE-954 Original add-filter client lookup and queued kick command ([evidence](research/QVM_FILTER_ADD_COMMAND.md)).

docs/research/QVM_FILTER_ADD_COMMAND.md

@@ -0,0 +1,5 @@
+# Original add-filter client lookup and queued kick command
+
+RE-954. Focused validation: `cargo xtask test-group qvm-filter-add-command`. [Machine report](qvm-filter-add-command.json).
+
+Ninety-six actual253100 wrappers recover length-under3 client-number routing, active-slot gating, supplied1024-byte userinfo and actual70503 ip lookup, insertion and exact usage/kick formatting. Non-numeric short input can select slot0. A clientkick command is queued even after missing-ip insertion failure. Selector and formatter wraps, invalid slots and direct masks are verified; exports and native effects remain captured.

docs/research/README.md

@@ -1461,3 +1461,5 @@ The extension collector adds five focused tests for native tail calls, command-r
 - [RE-953: Rust export reload composition and persistence-loss regressions](RUST_FILTER_ROUNDTRIP.md).
 
 - [RE-944–953 filter loading batch and RE-954 next work](QVM_FILTER_LOADING_BATCH.md).
+
+- [RE-954: Original add-filter client lookup and queued kick command](QVM_FILTER_ADD_COMMAND.md).

scripts/analyze_qvm_filter_add_command.py

@@ -0,0 +1,12 @@
+"""Actual253100 with recovered length/integer/userinfo/insert/format children."""
+from pathlib import Path
+from analyze_qvm import write_json
+from qvm_research_support import source
+from qvm_filter_commands_support import environment,add_fixtures,command,SPARE,COUNT,snapshot
+
+def main():
+ q,raw,h,ins=source();probes=[]
+ for a in add_fixtures():
+  m,b=environment(raw,h,[SPARE]*8);m[COUNT]=0;m,p,b=command(ins,m,b,a,'add');p.update(input=a,rows=snapshot(m,8));probes.append(p)
+ write_json(Path('docs/research/qvm-filter-add-command.json'),dict(source=q['source'],sha256=q['sha256'],root=253100,probes=probes,limits='96 original wrappers execute actual36038/37159/70503/252829/70458/37914. Text length<3 selects numeric client lookup; active slot userinfo is supplied and ip lookup toggles selector. Kick is queued even after insertion parse failure. Native console/network/userinfo/enqueue effects and export requests remain captured.'))
+if __name__=='__main__':main()

scripts/qvm_filter_commands_oracle.py

@@ -0,0 +1,27 @@
+"""Independent wrapper decisions composed with reviewed table/parser semantics."""
+from qvm_filter_loading_oracle import integer
+from qvm_filter_insert_oracle import parse
+from qvm_filter_loading_support import SPARE
+from qvm_filter_persistence_support import mutation_oracle
+
+def command(a,kind):
+ text=bytes.fromhex(a['text']).split(b'\0')[0];records=[list(SPARE) for _ in range(8)] if kind=='add' else [list(r) for r in a['rows']];count=0 if kind=='add' else len(records);events=[];children=[];ring=0xffffffff;selector=0
+ if not text:
+  message=(b'Usage: addip <ip-mask>\n' if kind=='add' else b'Usage: removeip <ip-mask>\n') if a['issuer']==-1 else (b'chat "^5[rcon] ^7Usage: /addip <ip-mask>"' if kind=='add' else b'chat "^5[rcon] ^7Usage: /removeip <ip-mask>"')
+  events=[dict(op='console',text=message.hex())] if a['issuer']==-1 else [dict(op='send',recipient=a['issuer'],text=message.hex())]
+  if a['issuer']!=-1:ring=0
+ elif kind=='remove':
+  events.append(dict(op='remove',text=text.hex()));p=mutation_oracle(dict(rows=records,text=text.hex(),metadata=0,save=0,handle=7),'remove');records=p['rows'];children=[{k:p[k] for k in ['result','diagnostics','exports']}]
+ else:
+  client=None;ip=text
+  if len(text)<3:
+   slot=integer(text);slot=slot if slot<2**31 else slot-2**32
+   if 0<=slot<64 and a['active']:
+    client=slot;selector=1;events.append(dict(op='userinfo',slot=slot));data=bytes.fromhex(a['userinfo']).split(b'\0')[0][:1023];parts=data.lstrip(b'\\').split(b'\\');ip=next((parts[j+1] for j in range(0,len(parts)-1,2) if parts[j].lower()==b'ip'),b'')
+   else:return dict(events=events,children=children,ring=ring,selector=selector,count=count,rows=records)
+  events.append(dict(op='insert',text=ip.hex(),save=1));pair,remaining=parse(ip);diagnostics=[]
+  if pair is None:records[0][1]=0xffffffff;diagnostics=[dict(op='bad-address',text=remaining.hex())]
+  else:records[0]=[*pair,0xffffffff]
+  count=1;children=[dict(result=1,diagnostics=diagnostics,exports=[252500])]
+  if client is not None:events.append(dict(op='enqueue',mode=1,text=f'clientkick {client}\n'.encode().hex()));ring=0
+ return dict(events=events,children=children,ring=ring,selector=selector,count=count,rows=records)

scripts/qvm_filter_commands_support.py

@@ -0,0 +1,41 @@
+"""Original add/remove filter wrappers and bounded native-effect compositions."""
+from qvm_camera_world_support import B,run,string,POOL
+from qvm_filter_loading_support import environment,SPARE
+from qvm_exit_rules_support import CPOOL
+from qvm_string_memory_support import cstring,strlen
+from qvm_filter_update_support import insert,COUNT,snapshot
+from qvm_filter_persistence_support import mutate
+from qvm_persistence_support import info_lookup
+from qvm_formatter_support import formatter
+from qvm_scoreboard_wire_support import final_format
+ROOT=B+0x210000
+
+def add_fixtures():
+ from itertools import product
+ return [dict(text=t.hex(),issuer=issuer,active=active,userinfo=u.hex()) for t,issuer,active,u in product([b'',b'0',b'x',b'1x',b'3',b'63',b'64',b'-1',b'1.2',b'bad',b'255.255.255.255',b'1.2.3.4'],[-1,2],[0,1],[b'\\ip\\1.2.3.4:27960',b'\\name\\noip'])]
+
+def command(ins,m,b,a,kind):
+ text=bytes.fromhex(a['text']);string(m,b,ROOT+0x4000,text);
+ from qvm_byte_memory_support import write_bytes
+ write_bytes(m,b,{ROOT+0x4000+len(text)+j:0 for j in range(1,9)});
+ m[23708]=0xffffffff;m[23712]=0;events=[];children=[]
+ entity=0 if a['issuer']==-1 else POOL+880*a['issuer'];m[34992496]=CPOOL
+ if entity:m[entity+520]=CPOOL+6336*a['issuer']
+ for j in range(64):m[34091900+880*j]=a.get('active',0)
+ def console(i,m,args,bs):events.append(dict(op='console',text=cstring(m,bs,args[8]).hex()));return m,0,{'console_captured':True}
+ def fmt(i,m,args,bs):return final_format(i,m,args,dict(bs),formatter)
+ def send(i,m,args,bs):events.append(dict(op='send',recipient=args[8],text=cstring(m,bs,args[12]).hex()));return m,0,{'network_send_captured':True}
+ def number(i,m,args,bs):
+  m,v,p,b=run(i,m,37159,37277,36,args,dict(bs),base=ROOT+0x10000);return m,v,{'actual_source_child':37159}
+ def get(i,m,args,bs):
+  events.append(dict(op='userinfo',slot=args[8]));data=bytes.fromhex(a['userinfo']).split(b'\0')[0][:args[16]-1];return m,0,{'native_userinfo_supplied':True,'child_memory_bytes':{args[12]+j:v for j,v in enumerate((data+b'\0').ljust(args[16],b'\0'))}}
+ def lookup(i,m,args,bs):
+  m,v,p,b=info_lookup(i,m,dict(bs),args);return m,v,{'actual_source_child':70503,'child_memory_bytes':{v+j:x for j,x in enumerate(cstring(m,b,v)+b'\0')}}
+ def add(i,m,args,bs):
+  t=cstring(m,bs,args[8]);events.append(dict(op='insert',text=t.hex(),save=args[12]));m,p,b=insert(i,m,dict(bs),t,args[12]);children.append({k:p[k] for k in ['result','diagnostics','exports']});return m,p['result'],{'actual_source_child':252829}
+ def remove(i,m,args,bs):
+  t=cstring(m,bs,args[8]);events.append(dict(op='remove',text=t.hex()));m,p,b=mutate(i,m,dict(bs),t,'remove');children.append({k:p[k] for k in ['result','diagnostics','exports']});return m,p['result'],{'actual_source_child':253296}
+ def enqueue(i,m,args,bs):events.append(dict(op='enqueue',mode=args[8],text=cstring(m,bs,args[12]).hex()));return m,0,{'console_command_captured':True}
+ start,stop,frame=(253100,253243,1072) if kind=='add' else (253245,253294,20)
+ m,v,p,b=run(ins,m,start,stop,frame,{8:entity,12:ROOT+0x4000},b,{2294:console,70458:fmt,-18:send,36038:strlen,37159:number,-21:get,70503:lookup,252829:add,253296:remove,-15:enqueue},base=ROOT)
+ p.update(events=events,children=children,ring=m[23708]&0xffffffff,selector=m[23712]&0xffffffff,count=m[COUNT]);return m,p,b

scripts/test_qvm_filter_add_command.py

@@ -0,0 +1,11 @@
+import json,unittest
+from pathlib import Path
+from qvm_filter_commands_oracle import command
+class AddTests(unittest.TestCase):
+ def test_original_wrapper(self):
+  rows=json.loads(Path('docs/research/qvm-filter-add-command.json').read_text())['probes'];self.assertEqual(len(rows),96)
+  for p in rows:
+   for k,v in command(p['input'],'add').items():self.assertEqual(p[k],v)
+ def test_missing_ip_still_enqueues_kick(self):
+  p=command(dict(text=b'x'.hex(),issuer=-1,active=1,userinfo=b'\\name\\noip'.hex()),'add');self.assertEqual(p['events'][-1]['op'],'enqueue');self.assertEqual(p['selector'],1);self.assertTrue(p['children'][0]['diagnostics'])
+if __name__=='__main__':unittest.main()

xtask/checks.tsv

@@ -3304,3 +3304,7 @@ edge	crates/urt-gameplay/src/qvm_format.rs	scripts/analyze_rust_filter_roundtrip
 edge	docs/research/qvm-filter-roundtrip.json	scripts/analyze_rust_filter_roundtrip.py
 group	rust-filter-roundtrip	scripts/analyze_rust_health_impulse.py
 group	gameplay	scripts/analyze_rust_filter_roundtrip.py
+report	scripts/analyze_qvm_filter_add_command.py	docs/research/qvm-filter-add-command.json
+edge	docs/research/qvm-filter-add-command.json	scripts/test_qvm_filter_add_command.py
+group	qvm-filter-add-command	scripts/analyze_qvm_filter_add_command.py
+edge	scripts/analyze_qvm_filter_add_command.py	scripts/analyze_qvm_resumer_audit.py