funman300
9.1 KiB
9.1 KiB
Production Authority Matrix (post-P1)
Definitive inventory of every production-reachable FIFA17 route/service and its
current owner. Derived from the live prod-host dispatch log (owner= labels,
real Client A session 2026-08-14), openfut-utas-host/ROUTE_AUTHORITY.md, and the
prod container config (OPENFUT_SERVERS="blaze roster pow").
Evidence labels: OBSERVED (live log/db), PROVEN (test), INFERRED, HYPOTHESIS.
Legend: owner R = Rust/Core, P = Python oracle (:8199 proxied via PYTHON_FALLBACK).
UTAS HTTP (front door: openfut-utas-host :8099)
ECONOMY — already Rust (Python economy hits = 0, OBSERVED)
| Method/path (tail) | Prod owner | Writes state | Rust handler | Py proxy |
|---|---|---|---|---|
| GET /user/credits | R | no | handle_credits | NO |
| GET /store/purchasegroup[/all] | R | no | handle_purchasegroup | NO |
| PUT /store/transaction[/] | R | coins,inv,pile | handle_store_buy | NO |
| POST /purchased[/items] | R | coins,inv,ent,pile | handle_pack_open | NO |
| GET /purchased[/items] | R | no | shape_purchased_reveal | NO |
| DELETE /item/ | R | coins,inv | handle_quick_sell_path | NO |
| POST /ut/delete/../item | R | coins,inv | handle_quick_sell_body | NO |
| PUT /item | R | inv,pile | handle_move_items | NO |
| POST /ut/delete/../match | R | coins | handle_match_end | NO |
| POST /auctionhouse,/transfermarket | R | listings | handle_market_list | NO |
| GET /tradePile[/counts] | R | no | handle_market_query | NO |
| /trade/ (POST/PUT/GET) | R | coins,inv,listings | handle_market_buy | NO |
| DELETE /ut/delete/../trade/ | R | listings | handle_market_cancel | NO |
NON-ECONOMY — Rust-owned
| Route | Owner | Notes |
|---|---|---|
| POST /ut/auth | R (OBSERVE) | session_opened; envelope currently Python-generated, Rust observes — auth boundary TBD |
| capability (/openfut/fifa17/capability) | R | -> Bound (CleanV1) |
| GET /userMassInfo | R (OVERLAY) | Rust overlays economy fields + squad onto Python envelope (hybrid) |
| GET /club, /club/* readers | R | Core-backed collection |
| squad-active, /squad/* | R | Core squad tx (SquadReplace) |
NON-ECONOMY — still Python (PYTHON_FALLBACK, OBSERVED live)
| Method/path | Owner | Response (observed) | Stateful | Migration target |
|---|---|---|---|---|
| POST /openfut/account/sync | P | account envelope | selects profile | R (candidate) |
| GET /user/accountinfo | P | {} | no (static) | R (trivial) |
| GET /settings | P | {"configs":[]} | no (static) | R (trivial) |
| GET /phishing/trusteddevice | P | trusted-device/security-question | first-entry state | R (security-question priority) |
| PUT /match/reset | P | {} | maybe | R (trivial/small) |
| GET /hub | P | tile counts (clubPlayers/auction/tradePile) | reads inventory+listings | R (reads Core) |
| GET /club/stats/year | P | stat[] (players/gold/...) | reads inventory | R (reads Core) |
| GET /club/stats/consumables | P | stat[] | reads inventory | R (reads Core) |
| GET /club/stats/staff | P | {} | no | R (trivial/reads Core) |
| GET /leaderboards/options | P | {} | no (static) | R (trivial) |
| PUT /clientdata/userHubData | P | {} | stores blob | R (small stateful) |
AUXILIARY SERVICES (prod container OPENFUT_SERVERS="blaze roster pow")
All aux services are Python in production today (container entrypoint.sh runs
blaze_responder_v3b.py/roster_server.py/pow_server.py). Rust equivalents exist
outside Docker; deploying them is operator-gated (production deployment forbidden here).
| Service | Rust crate | Completeness | Prod owner | Reachable | Blocker to candidate |
|---|---|---|---|---|---|
| Blaze (:42130) | openfut-blaze-host + openfut-protocol-blaze + adapter::blaze | COMPLETE, gate-proven to real FUT (Gate 10: 3 logins, 10 pack opens, 448/448 py suite) | Python | yes | ERRC error-reply placement unresolved; wire into candidate bring-up |
| Redirector (:42127 TLS) | openfut-redirector-host + openfut-tls (OpenSSL vendored) | COMPLETE, 1 live handshake 2026-08-11 (TLSv1.2/AES256-GCM-SHA384) | Python | yes | never full-path gated; cert consistency |
| Roster (:8081) | openfut-roster-host | COMPLETE, oracle-parity + lifecycle tests, unit-only | Python | yes | never live-gated |
| POW (:8094 + :8080) | NONE (only pow_server.py) | no Rust host; 58 templates, bodies placeholder | Python | yes | LARGEST: no crate + bodies un-reversed |
| Nucleus (:42131) | none (advertised string only) | n/a | Python stub (advertised, unused) | NO (0 live hits) | DEAD in current flow — keep advertising URL, no migration |
RETIRED/out-of-scope: fifa-blaze (FIFA23 capture stub), openfut-bridge (FIFA23). Not in FIFA17 flow.
NON-ECONOMY UTAS TARGET OWNER (confirmed via scouts)
Core already exposes GET/PUT /settings, GET /club|/collection|/statistics|/profile, /squad/*. New Rust arm = Route variant + classify() arm (lib.rs:118-140) + owner-labelled handler.
| Route | Port complexity | Target | Notes |
|---|---|---|---|
| user/accountinfo | trivial-static ({}) | R | host constant |
| settings | trivial-static ({"configs":[]}) | R | host constant / Core /settings |
| leaderboards/options | trivial-static | R | host constant |
| match/reset | trivial-static ({}) | R | host constant ack |
| phishing/trusteddevice | small (validate hex + constant) | R | security-question: stateless ack, always verified/trusted |
| clientdata/userHubData | small stateful | R | Core PUT /settings upsert keyed userHubData |
| hub | medium (derived counts) | R | Core collection + market counts |
| club/stats/year | medium (rating-tier aggregation) | R | Core /collection + /statistics |
| club/stats/consumables | medium | R | BLOCKED on 17-consumable import |
| club/stats/staff | trivial ({}) or derived | R | BLOCKED on 3-staff import |
| account/sync | small-medium (persona select + save) | R | hardest: no direct Core route; host session/persona logic |
| ut/auth envelope | small (SID mint) | R (currently OBSERVE) | Python still mints envelope; boundary decision |
MIGRATION PRIORITY ORDER (Phase 12)
- Content gap consumable+staff emit (unblocks club/stats/{consumables,staff}) — import crate.
- Trivial-static host routes: accountinfo, settings, leaderboards/options, match/reset, phishing/trusteddevice.
- clientdata/userHubData (Core settings upsert).
- hub + club/stats/year (Core-derived aggregation).
- userMassInfo full ownership (envelope scaffold; econ+squad already Rust).
- account/sync + ut/auth envelope (account/session boundary).
- Aux candidate wiring (blaze/roster/redirector already built) + POW (blocked) + Nucleus (dead).
ECONOMY EXPECTATION
Python economy hits = 0 (OBSERVED live + PROVEN by NEVER-BOTH/no-fallback tests). Any nonzero Python economy hit = P1 regression, priority zero.
STATUS
Baseline + economy + Rust-owned non-economy rows: OBSERVED/PROVEN. Aux + non-economy target owners: confirmed via HostSourceMap/PythonContractMap/AuxServiceMap/ContentGapMap scouts.
CANDIDATE MIGRATION STATUS (post-P1 progress, off-production)
DONE (Rust-owned in candidate source; committed on top of 5020137; workspace tests green):
- Content gap: consumable+staff emit (20 instances / 18 defs; verified real-profile re-import 1962+20).
- Non-economy routes migrated to Rust: user/accountinfo, settings, leaderboards/options, match/reset, phishing/{trusteddevice,question,validate}, club/stats/staff, hub. (hub clubPlayers = owned player count from Core; may be < Python profile count by the deferred Legend instances = DIFFERENT-BY-DESIGN.)
- Reachability reporter (scripts/openfut-reachability.py) gates Python-hit invariants.
RESIDUAL PYTHON (still proxied; each has a concrete blocker, not ordinary difficulty):
- club/stats/{year,consumables} — BLOCKED (cosmetic): the oracle set is a 40-atom VOCAB (fut_club_stats.py) with a synthetic-shelf counting model (Python counts a starter shelf, not owned items) + nation-bucket context rows. Unrecognized atoms are inert; Python serves it correctly. A faithful Rust port is large + transcription-risky + semantically divergent; deferred to a dedicated effort with a live capture. Low value (club-stats screen only). club/stats/staff IS Rust ({}).
- account/sync — launcher-facing (POST /openfut/account/sync, pre-auth); envelope has fields not in Core (clubAbbr, established, profilePath, accountFunds cap); changing it risks the launcher. Needs a Core account endpoint or host account logic + launcher-contract verification.
- userMassInfo — SAFE hybrid today (Rust overlays economy+squad on Python envelope). Full ownership needs a real full-envelope capture first (missing one scaffold field breaks a hot route); deferred.
- ut/auth — ORDERING-BLOCKED: still-proxied Python routes rely on Python's session table, so auth must stay proxied (Python mints SID, Rust OBSERVEs) until every session-needing route is Rust. Migrate LAST.
- clientdata/userHubData — BLOCKED: Core /settings supports only 2 fixed keys (difficulty, preferred_formation); storing an arbitrary blob needs a frozen-Core change or a new host store. Low-value UI-pref blob; kept Python per Phase 23 (no Python-by-ideology).
AUX (Rust built, deploy = operator-gated container cutover, NOT this task): blaze/roster/redirector. POW = blocked (no crate, bodies un-reversed). Nucleus = dead (0 live hits).