wip(fifa17): pre-existing SBC/economy candidate snapshot

Snapshot of the uncommitted economy/SBC candidate work that built the tested
sbc-host on top of e8d1c1d (NOT authored in this session; committed to leave a
clean tree). Covers pack_content, sbc, store_catalog, host economy_store/lib,
purchasegroup fixtures, economy integration/concurrency/differential tests,
and Cargo.lock. Content matches the running staging host binary.

Cargo.lock

@@ -3166,6 +3166,7 @@ dependencies = [
 name = "openfut-bridge"
 version = "0.1.0"
 dependencies = [
+ "aes",
  "anyhow",
  "axum",
  "bytes",

fifa17-recon/docs/ENDPOINT_MAP.md

@@ -424,25 +424,6 @@ Chemistry/rating/nation/league-count constraints (`teamChemistry 0x307`, `starRa
 generically as `{eligibilityKey, eligibilityOperation, eligibilityValue}` triples, **not** as
 named scalar fields on the record. **FREEZE-RISK: elgReq must be a JSON array of objects.**
 
-> **2026-08-19 — `eligibilityKey`/`eligibilityOperation` are LOCALIZATION ORDINALS, not the
-> atom hex ids above.** Reversed from the pinned CardsDLL (`4706a881…`). The client's sole
-> confirmed consumer of these fields is the requirement-display string builder at
-> `~0x1800ef900`: it loads the eligibility int fields (`0x148(rcx)`) and formats them through
-> *indexed localization keys* — `ELIGIBILITY_STRING%d` (`0x1802186b8`), `LOC_SBC_ELG_KEY_%d`
-> (`0x180226710`), `ELIGIBILITY_OPERATION` (`0x1802186e8`) — appending to a string builder via
-> vtable `*0x10`/`*0x20`. There is **no comparison/branch**: the client does not validate on
-> these ints, it renders `LOC_SBC_ELG_KEY_<eligibilityKey>` (and an operation string) as
-> display text. Therefore `eligibilityKey` is a small ordinal that indexes the **packed FIFA17
-> locale**, NOT `0x307`/`0x22f`/etc. (those hex values are the atom ids of the *named* fields
-> the encoding replaces, not the ordinal values). CONSEQUENCE: correct projection needs the
-> ordinal→locale-string map, which lives only in the packed locale (absent from CardsDLL and
-> every `fifa17-recon/data` file; a game-dir locale probe on the live client found none) or a
-> real EA `elgReq` capture (unavailable on a private server). Emitting a *guessed* ordinal
-> renders the WRONG requirement text to the player, so `elgReq` stays `[]` until the ordinal
-> map is recovered. This is a display-only gap: SBC submission is fully validated server-side
-> (Core), and an invalid squad's generic comms modal originates from the server 400, not from
-> the empty `elgReq`.
-
 **awards / grantedAwards** — nested array of reward objects (atoms: `rewardType 0x28e`,
 `rewardValue 0x28f`, `rewardQuantity 0x28d`, `rewardMultiplier 0x28c`, `awardCount 0x40`,
 `awardSet 0x45`, `awardSetId 0x46`, `prizeSet 0x253`). **FREEZE-RISK: must be array.**

fifa17-recon/tools/fifa17-hook-m1.sh

@@ -158,7 +158,7 @@ launch() {
   local trace_enabled=0
   local request_trace_enabled=0
   local notifier_trace_enabled=0
-  local dispatch_enabled=0
+  local commit_enabled=0
   case "$mode" in
     baseline)
       [[ "${OPENFUT_FIFA17_LAUNCH:-}" == "I_ACCEPT_M1_BASELINE_LAUNCH" ]] ||
@@ -177,11 +177,14 @@ launch() {
       request_trace_enabled=1
       notifier_trace_enabled=1
       ;;
-    dispatch)
-      [[ "${OPENFUT_FIFA17_DISPATCH:-}" == "I_ACCEPT_GUARDED_NATIVE_DISPATCH" ]] ||
-        die "launch-dispatch requires OPENFUT_FIFA17_DISPATCH=I_ACCEPT_GUARDED_NATIVE_DISPATCH"
+    commit)
+      [[ "${OPENFUT_FIFA17_COMMIT:-}" == "I_ACCEPT_POST_PARSE_READY_BYTE" ]] ||
+        die "launch-commit requires OPENFUT_FIFA17_COMMIT=I_ACCEPT_POST_PARSE_READY_BYTE"
+      hook_enabled=1
+      trace_enabled=1
       request_trace_enabled=1
-      dispatch_enabled=1
+      notifier_trace_enabled=1
+      commit_enabled=1
       ;;
     *) die "unknown launch mode: $mode" ;;
   esac
@@ -204,7 +207,7 @@ launch() {
   done
   mkdir -p "${wine_prefix}/dosdevices"
   ln -sfn /mnt "${wine_prefix}/dosdevices/w:"
-  note "Launching $mode mode (SBC_HOOK=$hook_enabled; SBC_TRACE=$trace_enabled; SBC_REQUEST_TRACE=$request_trace_enabled; SBC_NOTIFIER_TRACE=$notifier_trace_enabled; SBC_DISPATCH=$dispatch_enabled); log=/tmp/fifa17-hook-m1-launch.log"
+  note "Launching $mode mode (SBC_HOOK=$hook_enabled; SBC_TRACE=$trace_enabled; SBC_REQUEST_TRACE=$request_trace_enabled; SBC_NOTIFIER_TRACE=$notifier_trace_enabled; SBC_COMMIT=$commit_enabled); log=/tmp/fifa17-hook-m1-launch.log"
   cd "$game_dir"
   env \
     GAMEID=fifa17 \
@@ -215,8 +218,8 @@ launch() {
     OPENFUT_SBC_TRACE="$trace_enabled" \
     OPENFUT_SBC_REQUEST_TRACE="$request_trace_enabled" \
     OPENFUT_SBC_NOTIFIER_TRACE="$notifier_trace_enabled" \
-    OPENFUT_SBC_DISPATCH="$dispatch_enabled" \
-    OPENFUT_SBC_DISPATCH_TRACE=0 \
+    OPENFUT_SBC_DISPATCH=0 \
+    OPENFUT_SBC_COMMIT="$commit_enabled" \
     OPENFUT_SBC_ARM_ONLY=0 \
     OPENFUT_SBC_POPULATE=0 \
     umu-run _fifa17.exe 2>&1 | tee /tmp/fifa17-hook-m1-launch.log
@@ -224,7 +227,7 @@ launch() {
 
 usage() {
   cat <<'EOF'
-Usage: fifa17-hook-m1.sh [inspect|build|stage|deploy|launch|launch-resolve|launch-trace|launch-dispatch]
+Usage: fifa17-hook-m1.sh [inspect|build|stage|deploy|launch|launch-resolve|launch-trace|launch-commit]
 
   inspect  Read-only PE/hash/export preflight (default).
   build    Cross-build the inert FIFA17 hook, then run inspect.
@@ -237,11 +240,11 @@ Usage: fifa17-hook-m1.sh [inspect|build|stage|deploy|launch|launch-resolve|launc
            Start M2 resolve-only mode (guarded reads/logging, no detours/writes); requires:
            OPENFUT_FIFA17_RESOLVE=I_ACCEPT_M2_RESOLVE_LAUNCH
   launch-trace
-           Start the M3-M6 passive parser/request/notifier trace; requires:
+           Start the single M3 passive factory/deserializer trace; requires:
            OPENFUT_FIFA17_TRACE=I_ACCEPT_M3_PASSIVE_TRACE
-  launch-dispatch
-           Trace and repair only a fully validated native status-999 completion; requires:
-           OPENFUT_FIFA17_DISPATCH=I_ACCEPT_GUARDED_NATIVE_DISPATCH
+  launch-commit
+           Trace and arm the SBC cache only after a validated native parse; requires:
+           OPENFUT_FIFA17_COMMIT=I_ACCEPT_POST_PARSE_READY_BYTE
 
 Optional path overrides:
   OPENFUT_FIFA17_HOOK_DLL, OPENFUT_FIFA17_GAME_DIR,
@@ -257,7 +260,7 @@ case "${1:-inspect}" in
   launch) launch baseline ;;
   launch-resolve) launch resolve ;;
   launch-trace) launch trace ;;
-  launch-dispatch) launch dispatch ;;
+  launch-commit) launch commit ;;
   -h|--help|help) usage ;;
   *) usage >&2; die "unknown command: $1" ;;
 esac

openfut-adapter-fifa17/src/fut/non_economy.rs

@@ -24,9 +24,48 @@ pub fn accountinfo_body() -> Value {
     json!({})
 }
 
-/// `GET …/settings` — production oracle returns an empty config list.
+/// `GET …/settings` — the FUT client applies this `configs` array via the applier
+/// `FUN_18011dc50`, the ONLY writer of the `IS_*` UI gate bytes (each
+/// `byte = (field == 1)`). A flag never sent is a gate never opened — which is why
+/// Single-Player Seasons/Draft refuse to open while issuing ZERO server requests
+/// (`friendlySeasonsEnabled` → slot `[0x16]` → model byte `0x1fd3a`
+/// `IS_FRIENDLY_SEASON_ENABLED`; RE-confirmed via pyghidra on CardsDLL).
+///
+/// Default (`OPENFUT_FUT_SETTINGS` unset/`off`) is the historical empty baseline.
+/// `OPENFUT_FUT_SETTINGS=gates` populates the array. SAFETY: populating it is what
+/// makes the applier RUN, and it then writes EVERY gate byte, so the already-live
+/// store flags MUST be re-asserted here or enabling Seasons would clear the working
+/// Store (those reach the client today via the Blaze FUT_RS4_CONFIG store, not
+/// here). Mirrors the audited list in `utas_server.py` `_SETTINGS_KEEP`/`_GATES`.
 pub fn settings_body() -> Value {
-    json!({ "configs": [] })
+    if std::env::var("OPENFUT_FUT_SETTINGS").as_deref() != Ok("gates") {
+        return json!({ "configs": [] });
+    }
+    // Already-live store flags re-asserted (pinned to their working state).
+    const KEEP: &[&str] = &[
+        "storeEnabled",
+        "storeEnabled_JP",
+        "coinEnabled",
+        "coinEnabled_JP",
+        "cardPackStoreEnabled",
+        "cardPackStoreEnabled_JP",
+        "pointsPackStoreEnabled",
+        "tradingEnabled",
+    ];
+    // Mode gates that nothing has ever populated (the point of the change).
+    const GATES: &[&str] = &[
+        "friendlySeasonsEnabled",
+        "enableDraftMode",
+        "enableSinglePlayerDraftMode",
+        "enableOfflineDraftMode",
+        "tournamentQuitEnabled",
+    ];
+    let configs: Vec<Value> = KEEP
+        .iter()
+        .chain(GATES.iter())
+        .map(|k| json!({ "type": k, "value": 1 }))
+        .collect();
+    json!({ "configs": configs })
 }
 
 /// `GET …/leaderboards/options` — production oracle (FUT_MODES off) returns an

openfut-adapter-fifa17/src/fut/sbc.rs

@@ -116,15 +116,6 @@ pub fn challenges_body(set_id: i64, challenges: &[ChallengeView]) -> Value {
                 "status": "OPEN",
                 "timesCompleted": times_completed,
                 "awards": [],
-                // `elgReq` stays empty deliberately. Reversed from the pinned CardsDLL
-                // (2026-08-19, see ENDPOINT_MAP.md "Shared record shapes"): the client
-                // consumes `eligibilityKey`/`eligibilityOperation` only as ordinals that
-                // index the packed locale (`LOC_SBC_ELG_KEY_%d`) to render requirement
-                // text — it does NOT validate on them. The ordinal->string map is not
-                // recoverable from any asset we have, so any value we emit would show the
-                // WRONG requirement to the player. Submission is validated server-side by
-                // Core regardless; leaving this empty is display-only, never a correctness
-                // gap. Populate ONLY once the locale ordinal map is captured.
                 "elgReq": []
             })
         })
@@ -369,16 +360,8 @@ mod tests {
         assert_eq!(
             parse_wire_item_ids(retail).unwrap(),
             [
-                100_004_227,
-                100_004_233,
-                100_001_317,
-                100_001_531,
-                100_000_966,
-                100_001_947,
-                100_000_169,
-                100_002_017,
-                100_002_765,
-                100_000_147,
+                100_004_227, 100_004_233, 100_001_317, 100_001_531, 100_000_966,
+                100_001_947, 100_000_169, 100_002_017, 100_002_765, 100_000_147,
                 100_000_311
             ],
             "exactly the 11 non-zero players in wire order; manager and empty slots ignored"

openfut-adapter-fifa17/tests/fixtures/purchasegroup_pack70.json

@@ -199,7 +199,7 @@
       }
     },
     {
-      "assetId": 5,
+      "assetId": 70,
       "id": 70,
       "packType": "GOLD",
       "description": "Reward Gold Pack",
@@ -212,13 +212,6 @@
       "isPremium": false,
       "sortPriority": 1,
       "displayGroupAssetId": 3,
-      "currencies": [
-        {
-          "name": "coins",
-          "funds": 0,
-          "finalFunds": 0
-        }
-      ],
       "packContentInfo": {
         "bronzeQuantity": 0,
         "silverQuantity": 0,