29 KiB
29 KiB
Rehost Queue
Working rule:
- Do not stop after commits.
- After each commit, check this queue and continue.
- Only stop if the queue is empty, the remaining work cannot be advanced by any further non-hook work without guessing, or you need approval.
- Before any final response, state which stop condition is true. If none is true, continue.
Next
- Use the higher-layer probes as the standard entry point for the current blocked frontier instead
of generic save scans:
runtime inspect-periodic-company-service-trace <save.gms>,runtime inspect-region-service-trace <save.gms>, andruntime inspect-infrastructure-asset-trace <save.gms>. - Follow the new higher-layer probe outputs instead of another blind save scan:
runtime inspect-infrastructure-asset-trace <save.gms>now shows that the0x38a5infrastructure-asset seam is grounded and the old alias hypothesis is disproved onq.gms, so the next placed-structure slice should target the consumer mapping above that seam rather than more collection discovery; the same trace now also carries atlas-backed candidate consumers (0x0048a1e0,0x0048dd50,0x00490a3c,0x004559d0,0x00455870,0x00455930,0x00448a70/0x00493660/0x0048b660,0x004133b0) plus bridge/tunnel/track-cap name-family counts, so the next pass can start at those concrete owners instead of the whole placed-structure family. - Rehost or bound the next concrete
Infrastructureconsumer above0x38a5instead of treating “consumer mapping missing” as a stop: start with the checked-in candidate strip0x0048a1e0,0x0048dd50,0x00490a3c,0x004559d0,0x00455870,0x00455930,0x00448a70/0x00493660/0x0048b660,0x004133b0, and narrow that list to the first true shellless owner that consumes the side-buffer seam. The infrastructure trace now ranks the current best hypothesis as the child attach/rebuild strip (0x0048a1e0,0x0048dd50,0x00490a3c), with the serializer/load companions next and the route/local-runtime follow-on family explicitly secondary. - For that top-ranked infrastructure strip, treat the next pass as three exact owner questions
rather than a general “map the consumer” task: whether the
0x38a5compact-prefix/name-pair groups feed the first-child triplet clone lane, the caller-supplied payload-stem lane, or only a later route/local-runtime refresh lane; whether cached primary-child slot[this+0x248]is the first owner-visible bridge from the side-buffer seam into route-entry rebuild; and which child fields or grouped rows absorb the side-buffer payload before0x00448a70/0x00493660/0x0048b660become relevant. - Targeted disassembly now tightens that strip further:
0x0048a1e0clones the first child through0x0052e880/0x0052e720, destroys the prior child, seeds a literalInfrastructurechild through0x00455b70with payload seed0x005c87a8, and republishes the two sampled bands through0x0052e8b0/0x00530720after attaching through0x005395d0; the non-clone branch attaches through0x0053a5d0. So the next unknown is no longer whether this strip owns the child/rebuild seam, but which0x38a5compact-prefix groups drive the clone-vs-payload choice. - The outer rebuild owner is tighter now too:
0x0048dcf0reads a child count plus optional primary-child ordinal from the tagged stream through0x00531150, zeroes[this+0x08], dispatches each fresh child through0x00455a50 -> vtable slot +0x40, culls ordinals above5, and restores cached primary-child slot[this+0x248]from the saved ordinal. That means the child/rebuild loop is consuming an already-materialized child stream rather than parsing the0x38a5compact-prefix seam directly. - The upstream handoff is grounded now too:
0x00493be0is the tagged collection load owner over0x38a5/0x38a6/0x38a7, and it feeds each live infrastructure record straight into0x0048dcf0after restoring one shared owner-local dword into the0x90/0x94lane. So the remaining infrastructure question is no longer whether0x38a5reaches the child-stream restore path at all. Direct disassembly now also shows0x00518140resolving a non-direct live entry by tombstone bitset and then returning the first dword of a12-byte row from[collection+0x3c], while0x00518680loads that non-direct table family before0x00493be0starts iterating, and0x00493be0itself now reads as an ordinal-to-live-id-to-payload-pointer walk through0x00518380(ordinal, 0)then0x00518140(live_id). So the next infrastructure question is no longer “which row owns the payload pointer?”. Direct disassembly of0x005181f0/0x00518260now also treats those12-byte rows as a live-entry directory with(payload pointer, previous live id, next live id), so the next infrastructure question is only how those payload streams align with the embedded0x55f1name-pair groups and compact-prefix regimes, and which tagged values inside each payload stream become the child count, optional primary-child ordinal, and per-child callback sequence that0x0048dcf0consumes. Direct disassembly now also shows the shared child payload callback0x00455fc0opening0x55f1 -> 0x55f2 -> 0x55f3, parsing three0x55f1strings through0x00531380, seeding the child through0x00455b70, and then dispatching slot+0x48; the widened save-side probe currently sees0third0x55f1strings on groundedq.gms. That now looks less like a probe failure and more like an ordinary fallback path, because direct disassembly of0x00455b70stores the three payload strings into[this+0x206/+0x20a/+0x20e], defaulting the second lane through a fixed literal when absent and defaulting the third lane back to the first string when absent. So the next pass should stay focused on payload-stream grouping and tagged value roles, not on rediscovering a missing third-string encoding. - The child loader identity is closed now too: local
.rdataat0x005cfd00proves theInfrastructurechild vtable uses the shared tagged callback strip directly, with+0x40 = 0x00455fc0,+0x48 = 0x00455870, and+0x4c = 0x00455930. So the remaining infrastructure frontier is row-to-record mapping inside0x38a5, not “which loader family does this child use?”. - The smaller helper
0x00490a3cis narrower now too: it allocates one literalInfrastructurechild, seeds it through0x00455b70with caller-provided stem input, attaches it through0x005395d0, seeds position lanes through0x00539530/0x0053a5b0, and optionally caches it as the primary child. So the next concrete infrastructure question is which upstream owner maps the direct0x38a5rows into the child count, primary-child ordinal, and per-child payload callbacks consumed by0x0048dcf0, and which restored child fields still retain those embedded name-pair semantics before route/local-runtime follow-ons take over. - The save-side
0x38a5probe is now tighter at the payload-envelope level too: groundedq.gmsshows all138embedded0x55f1rows already live inside complete0x55f1 -> 0x55f2 -> 0x55f3envelopes before the next name row, every embedded0x55f2chunk is the fixed0x1abytes that0x00455fc0expects, and the dominant embedded0x55f3payload-to-next-name span is the short0x06-byte form across72rows. So the next infrastructure pass should stop asking whether the shared tagged callback sequence is present at all and instead decode the short0x55f3payload role and its relation to the compact-prefix regimes and primary-child restore path. - That short trailing lane is tighter now too: direct disassembly of
0x0052ebd0/0x0052ec50shows the post-+0x48helper pair loading and serializing two single-byte lanes that fold into bits0x20and0x40of[this+0x20], and the save-side probe now shows the dominant0x06-byte rows all carrying the same grounded flag pair0x00/0x00onq.gms. So the next concrete infrastructure question is no longer “is there a short trailing flag lane?”; it is how the compact-prefix regimes and those flag-byte pairs feed the child-count / primary-child restore state above0x0048dcf0. - The fixed
0x55f2lane is tighter now too: direct disassembly of0x00455870/0x00455930shows the+0x48/+0x4cstrip loading and serializing sixu32lanes from the fixed0x1achunk, forwarding them through0x00530720and0x0052e8b0. Groundedq.gmsprobes now show every embedded0x55f2row using the same trailing word0x0101while those six dword lanes vary by asset row. So the next infrastructure question is no longer whether0x55f2is a fixed-format child lane; it is which of those two dword triplets correspond to child-count / primary-child restore state and which only seed published anchor or position bands. - Reconstruct the save-side region record body on top of the newly corrected non-direct tagged
region seam (
0x5209/0x520a/0x520b, stride hint0x06,Marker09record stems) now that the0x55f3payload is known to be fully consumed by the embedded profile collection on grounded real saves: the remaining blocker is no longer a hidden trailing payload tail, but finding the separate save-owner seam for the pending bonus lane[region+0x276], completion latch[region+0x302], one-shot notice latch[region+0x316], severity/source lane[region+0x25e], and any stable region-id or class discriminator that can drive shellless city-connection service. The newly grounded queue-node probe for the atlas-backed kind-7notice records is a negative result onq.gms,p.gms, andAutosave.gms, so the next region pass should not assume that the transient[world+0x66a6]queue family is persisted in ordinary saves; the region trace now also carries the concrete queued/service owners (0x00422100,0x004337c0,0x00437c00,0x004c7520,0x004358d0,0x00438710,0x00420030/0x00420280,0x0047efe0) so the next pass can focus on the missing saved latches and stable region id/class rather than on rediscovering the outer service family. - Rehost or bound the next concrete region owner above the missing latches instead of treating the
absent persisted queue as a stop: start with the checked-in owner strip
0x00422100,0x004337c0,0x00437c00,0x004c7520,0x004358d0,0x00438710,0x00420030/0x00420280,0x0047efe0, and reduce it to the first true save-owned or rebuild owner that can explain[region+0x25e/+0x276/+0x302/+0x316]plus a stable region id/class. The region trace now ranks the current best hypothesis as the pending bonus service owner (0x004358d0) plus the peer/linkage strip (0x00420030/0x00420280,0x0047efe0), with the transient producer/queue family explicitly secondary and the queued kind-7modal dispatch kept as shell-adjacent reference only. - For that top-ranked region strip, treat the next pass as three exact owner questions too: which
persisted owner seam restores or rebuilds
[region+0x25e/+0x276/+0x302/+0x316], which stable region id or class discriminator survives save/load strongly enough to drive0x004358d0, and how far the grounded city-connection peer/linkage helpers (0x00420030/0x00420280,0x0047efe0) can be reused directly before the transient queued-notice family matters again. - Targeted disassembly now tightens that strip too:
0x004358d0calls0x00420030twice plus0x00420280, then resolves the linked company through0x0047efe0, posts company stat slot4on success, and stamps[region+0x302]or[region+0x316]while clearing[region+0x276].0x00420030itself now reads as the real peer gate over collection0x006cec20, combining0x0042b2d0, the optional company filter through0x0047efe0, the station-or-transit gate0x0047fd50, and the status branch0x0047de00 -> 0x0040c990;0x00420280is the same scan returning the first matching site id. So the remaining unknown is the persisted latch/id seam, not the live peer/service logic. - The checked-in constructor owner
0x00421200world_region_construct_entry_with_id_class_and_default_marker09_profile_seednow also grounds the initialization side of this family: it clears[region+0x276],[region+0x302],[region+0x316], and neighboring cached bands at construction time while seeding[region+0x25a/+0x25e] = 100.0fand[region+0x31b] = 1.0f. That means the remaining queue item is specifically post-construction restore or rebuild of the same latches, not their basic field identity. - The next restore-side target is explicit now too: the checked-in function map already grounds
0x00421510as the tagged region-collection load owner that dispatches each live region through vtable slot+0x40, and0x0041f5c0as the per-record load slot that reloads the tagged payload through0x00455fc0before rebuilding profile collection[region+0x37f]. So the next region pass should ask whether[region+0x276/+0x302/+0x316]are restored directly inside that payload load or rebuilt immediately after it, rather than treating “restore seam” as a generic unknown. - Direct disassembly now closes that callback identity too:
0x0041f590/0x0041f5b0prove the world-region vtable root is0x005c9a28, so the0x00455fc0dispatch at slot+0x48lands on0x00455870and the serializer sibling at+0x4clands on0x00455930. Those two callbacks only restore and serialize two triplet-like three-lane scalar bands through0x00531150/0x00531030plus0x00530720/0x0052e8b0; they still do not touch[region+0x276/+0x302/+0x316]. That means the remaining region restore target is now the later owner that rebuilds those latches or the separate tagged body seam that persists them. - The widened real-save region trace rules out one more false lead too: on grounded saves the
0x55f2fixed-policy chunk keeps all three reserved dwords at0x00000000and the trailing word at invariant0x0001, so that fixed chunk is not currently carrying the missing latch or stable region id/class discriminator either. - Reconstruct the save-side placed-structure collection body on top of the newly grounded
0x36b1/0x36b2/0x36b3header seam so the blocked city-connection / linked-transit branch can stop depending on atlas-only placed-structure and local-runtime refresh notes, especially the semantics of the now-grounded compact0x55f3footer dword/status lane and the newly exposed separate tagged side-buffer seam candidates, especially the exact0x38a5/0x38a6/0x38a7family whose compact6-byte header pattern and embedded placed-structure-style0x55f1name rows now make it the grounded placed-structure dynamic side-buffer owner; the remaining blocker is semantic closure of the compact prefix regimes now summarized in real saves as seven stable patterns onq.gmsand their relation to the embedded0x55f1/0x55f2/0x55f3row subset, especially now that the side-buffer name-pair corpus is proven disjoint from the grounded0x36b1triplet name-pair corpus onq.gms; the next pass should treat0x38a5as a separate infrastructure-asset owner seam, not a compact alias over the triplet records. - Extend shellless clock advancement so more periodic-company service branches consume owned runtime time state directly instead of only the explicit periodic service command.
- Keep widening selected-year world-owner state only when a full owning reader/rebuild family is grounded strongly enough to avoid one-off leaf guesses.
In Progress
- Widen shellless simulation from explicit service commands toward “advance the runtime clock and the simulation-owned services advance with it.”
Queued
- Rehost additional periodic finance/service branches that still depend on frozen world restore fields instead of advanced runtime-owned time state.
- Reduce remaining company/chairman save-native gaps that still block standalone simulation quality, especially controller-kind closure and any deeper finance/state fields that still rely on conservative defaults.
- Rehost bounded live economy owner state beyond selector/catalog/override surfaces when a concrete non-shell-owned seam is grounded.
- Keep tightening shell-owned parity families only when that directly supports later rehosting.
Blocked
- Full shell/dialog ownership remains intentionally out of scope.
- Any candidate slice that requires guessing rather than rehosting owning state or real reader/setter families stays blocked until a better owner seam is grounded.
- Missing owner seams or dispatch mappings are not by themselves a stop condition when a targeted static-mapping pass or a higher-layer rehosted trace/evaluator surface can still narrow them further without guessing.
- The city-connection announcement / linked-transit roster-maintenance branch is still blocked at the record-body level, not the collection-identity level: the runtime now has a corrected non-direct tagged region seam, a tagged train header-plus-directory seam, and a tagged placed-structure header seam, but it does not yet reconstruct the live region or placed-structure record bodies those service owners need.
Recently Done
rrt-runtimenow exposes three higher-layer probe surfaces and matching CLI inspectors:runtime inspect-periodic-company-service-trace <save.gms>,runtime inspect-region-service-trace <save.gms>, andruntime inspect-infrastructure-asset-trace <save.gms>. These reports separate grounded outer owner inputs, runnable shellless branches, and explicit missing owner seams instead of leaving the current city-connection / linked-transit frontier as an opaque blocker.- Those same probes now also sharpen the next queue choice on grounded real saves: the periodic
company outer owner shows annual finance and route-preference override as grounded shellless
branches while city-connection and linked-transit stay blocked on region/infrastructure owner
seams; the region trace keeps the queued kind-
7notice family on the transient side; and the infrastructure trace now makes the0x38a5consumer-mapping blocker first-class after disproving any alias to the0x36b1placed-structure triplet corpus. - The infrastructure trace now also carries one small atlas-backed static-analysis layer above that
seam: bridge/tunnel/track-cap name-family counts from the real side-buffer corpus plus concrete
consumer candidates rooted at the
Infrastructurechild attach/rebuild/serializer helpers and the later route/local-runtime follow-on owners. That means the next0x38a5pass can be targeted static mapping instead of another generic scan. - The same
0x38a5probe now also exports payload-envelope summaries directly instead of only flat name rows: policy/profile tag presence, dominant embedded0x55f2and0x55f3span lengths, and sampled row boundaries. That means the next pass can decode the short embedded0x55f3payload lane on top of already grounded row boundaries instead of rediscovering the same envelopes again. - That same probe now also exports the grounded short trailing flag-byte pair summary for the
dominant
0x06-byte rows, while the infrastructure trace carries the matching0x0052ebd0/0x0052ec50helper seam. That means the next pass can aim directly at how those flags combine with compact-prefix regimes and primary-child restore state instead of treating the short lane as anonymous payload. - That same probe now also exports the fixed
0x55f2six-dword policy samples and the grounded shared trailing word0x0101for all embedded rows, while the infrastructure trace carries the matching0x00455870/0x00455930helper seam. That means the next pass can focus on which of the two restored dword triplets actually bridge into child-count / primary-child state instead of rediscovering the fixed0x55f2row shape. - That same trace now also ranks those consumers into explicit hypotheses, so the next infrastructure pass should start with the attach/rebuild strip instead of treating all candidate owners as equally likely.
- The region trace now also carries the corresponding atlas-backed candidate owner strip above the
unresolved save latches, so the region frontier is now explicitly “missing persisted owner seam
for
[region+0x25e/+0x276/+0x302/+0x316]and stable region id/class,” not “unknown service family.” - That same trace now also ranks those owners into explicit hypotheses, so the next region pass should start with the pending bonus service owner and peer/linkage strip rather than the queued modal family.
- Save inspection now splits the shared
0x5209/0x520a/0x520bfamily correctly: the smaller direct0x1d5collection is the live train family and now exposes a live-entry directory rooted at metadata dword16, while the actual region family is the larger non-directMarker09collection with live_id/count0x96/0x91; the tagged placed-structure header (0x36b1/0x36b2/0x36b3) remains grounded alongside them. - That same corrected region seam now also exposes repeated
0x55f1/0x55f2/0x55f3serialized record triplets with len-prefixed names plus fixed policy/profile chunk lengths, so the next city-connection pass can target the real record envelope instead of another blind scan. - The fixed
0x55f2row inside each region triplet is now decoded structurally as three leadingf32lanes, three reservedu32lanes, and a trailingu16word, so the next save-region slice can focus on the larger0x55f3payload where the pending/completion/one-shot latches are most likely to live. - The larger
0x55f3payload now also exposes an embedded direct profile collection with grounded live-id/count headers, fixed0x22-byte rows, profile names, and trailing weight scalars, so the remaining region work is on the unresolved payload fields above that collection rather than on the profile subcollection itself. - Grounded real saves now also show that the region-side
0x55f3payload has zero trailing padding beyond that embedded profile collection, so the remaining region blocker has shifted from “find the hidden tail inside this payload” to “find the separate owner seam that backs the runtime latches the city-connection branch still reads.” - Save inspection now also exports a generic low-tag unclassified collection scan over plausible indexed-collection headers, now through a lightweight CLI path that does not require full bundle inspection and now filters out candidates nested inside already-grounded company/chairman/train/ region/placed-structure spans.
- That lightweight scan now also narrows the real save frontier to a much smaller stable candidate
set across
p.gms,q.gms, andAutosave.gms, with the exact0x38a5/0x38a6/0x38a7family standing out as the strongest current placed-structure dynamic side-buffer candidate. - The
0x38a5/0x38a6/0x38a7family now also has a first dedicated parser scaffold inrrt-runtime: its synthetic regression is grounded, its header shape is checked in, and the parser now expects a compact 6-byte prefix plus separator byte before an embedded placed-structure-style dual-name row rather than treating the family as anonymous residue. - That exact
0x38a5/0x38a6/0x38a7parser is now also wired through a lightweight CLI inspector and the normal save company/chairman analysis output, and grounded real saves now prove the same seam directly:q.gmsexposeslive_record_count=3865, prefix0x0005d368/0x0001/0xff, and first embedded namesTrackCapST_Cap.3dp/Infrastructure;p.gmsexposes the same structure withlive_record_count=2467. - That same direct
0x38a5probe now also samples multiple embedded name rows with their preceding compact prefixes, showing that the seam is not a one-off wrapper: groundedq.gmssamples include repeatedTunnelSTBrick_*names underInfrastructurewith compact leading dwords like0x000055f3and0xff0000ff, so the next pass can target the semantics of those compact prefix patterns instead of hunting the owner seam itself. - The
0x38a5probe now also summarizes all embedded compact prefix regimes instead of just the first few samples: groundedq.gmscurrently exposes seven stable pattern groups across 138 embedded rows, with the dominant0xff000000/0x0001/0xffgroup carrying 62 bridge-section rows, the0xff0000ff/0x0001/0xffand0xf3010100/0x0055/0x00groups concentrating cap-like rows, and a smaller0x000055f3/0x0001/0xffgroup carrying 17 tunnel-section / cap rows whose leading dword matches the embedded placed-structure profile tag directly. - The save-company/chairman analysis path now also compares that grounded
0x38a5side-buffer name-pair corpus against the grounded0x36b1triplet name-pair corpus directly; onq.gmsthe overlap is currently zero (0/138decoded side-buffer rows and0/5unique side-buffer name pairs match the 56-triplet corpus), which shifts the remaining placed-structure work away from “prove these are aliases” toward “find how the separate infrastructure-asset owner seam is consumed by city-connection / linked-transit service.” - Save inspection now also has a dedicated probe for the atlas-backed region queued-notice node
shape (
payload seed 0x005c87a8, kind7, zero promotion latch, region id, amount,-1/-1tails), plus a matching lightweight CLI inspector. Groundedq.gms,p.gms, andAutosave.gmsall currently returnnull, which is useful negative evidence: the transient region notice queue is not obviously persisted in these ordinary saves. - The placed-structure tagged save stream now also exposes repeated
0x55f1/0x55f2/0x55f3triplets with dual name stems, a fixed five-f32policy row, and a compact0x5dc1...0x5dc2footer carrying one rawu32payload lane plus one livei32status lane, so the remaining placed-structure work is semantic closure of those owned fields rather than envelope discovery. - That compact placed-structure
i32footer status lane is now partially grounded as owned semantics too: observed non-farm families stay at-1, while farm families use nonnegative0..11buckets that are now exported as farm growth-stage indices instead of opaque raw status residue. - Stepped calendar progression now also refreshes save-world owner time fields, including packed year, packed tuple words, absolute counter, and the derived selected-year gap scalar.
- Automatic year-rollover calendar stepping now invokes periodic-boundary service.
- Save-native world locomotive policy owner state now flows through runtime restore state,
summaries, and keyed world-flag execution for the grounded
All Steam/Diesel/Electric Locos Avail.descriptor strip plus the cached available-locomotive rating. - The selected-year bucket ladder rooted in
0x00433bd0is now checked in as a static artifact, and runtime restore state now derives both the selected-year bucket scalar and the[world+0x0bde]economic-tuning mirror from owner-family inputs instead of preserving stale load-time residue. - That same selected-year owner family now also rebuilds the direct bucket trio
[world+0x65/+0x69/+0x6d], the complement trio[world+0x71/+0x75/+0x79], and the scaled companion trio[world+0x7d/+0x81/+0x85]from the checked-in0x00433bd0artifact instead of preserving stale save-time residue. - The save-native company direct-record seam now also carries the full outer periodic-company
side-latch trio rooted at
0x0d17/0x0d18/0x0d56, including the preferred-locomotive engine-type chooser byte beside the city-connection and linked-transit finance gates. - That same side-latch trio now also has a runtime-owned service-state map and summary surface, so later periodic company-service work can stop reading those lanes directly from imported market/cache residue.
- The periodic-boundary owner now also clears the transient preferred-locomotive side latch every cycle and reseeds the finance latches from market state where present, while preserving side-latch-only company context when no market projection exists.
- The outer periodic-company seam now also has a first-class runtime reader:
selected-company summaries and finance readers can resolve the base
[world+0x4c74]route-preference byte, the effective electric-only override fed by0x0d17, and the matching1.4xversus1.8xroute-quality multiplier through owned periodic-service state instead of leaving that bridge in atlas notes. - That same periodic-company seam now also owns a first-class route-preference apply/restore
mutation lane: runtime service state tracks the active and last electric override, beginning the
override rewrites
[world+0x4c74]to the effective route preference for the selected company service pass, and ending the override restores the base world byte instead of leaving the seam as a pure reader bridge. - The same route-preference mutation seam now also carries explicit apply/restore service counters through runtime service state and summaries, so later periodic-company branches can assert that override activity happened even before the missing city-connection / linked-transit service owners are fully rehosted.
- Company cash, confiscation, and major governance effects now write through owner state instead of drifting from market/cache readers.
- Company credit rating, prime rate, book value per share, investor confidence, and management attitude now refresh from grounded owner-state readers.
- Annual finance service persists structured news events and grounded debt/share flow totals.