12 KiB
Server-First Item Architecture Refactor Plan
Goal
Make the server the only source of truth for item definitions, schema, defaults, options, validation rules, and editable behavior. The client should consume server definitions and provide UX/rendering/audio only.
This plan removes client fallback definitions and introduces a repeatable, consistent item authoring structure so adding new item types is low-risk and uniform.
Target End State
1) Source of truth
- Server owns, for each item type:
- Type id, label, tooltip
- Full property schema (value type, required/optional, min/max/step, maxLength, enum options)
- Defaults (global + per-item initial params)
- Editability and read-only behavior
- Validation, normalization, migration policy (if any)
- Runtime actions (
use, optional custom actions) - Capability list
- Server sends this as canonical
uiDefinitions+ schema metadata onwelcome(or equivalent bootstrap).
2) Client model
- Client has no static fallback item definitions.
- If schema payload is missing/invalid, item features are unavailable (explicit error/status), not silently guessed.
- Client property editor and item menus are metadata-driven.
- Client runtime behavior modules remain for UX/audio only (e.g., piano local mode), keyed by server type ids.
3) Repeatable item authoring
Adding an item type uses one standard server folder/template and a short checklist, with auto-discovery on server boot (no manual registry edits).
Proposed Architecture
A) Server: Item Type Package Contract (Auto-Discovered)
Create/standardize per-item server packages under something like:
server/app/items/types/<item_type>/
Each item type package exports the same contract:
definition.pytype_id,label,tooltipschema(properties + metadata)defaultseditable_propertiescapabilities
validator.pyvalidate_create(params) -> normalized_paramsvalidate_update(existing, patch) -> normalized_params- Must drop unknown keys by default.
actions.pyuse(context, item, client, payload?) -> result- optional
custom_actionshandlers
ui.py(optional if definition is enough)- transforms schema ->
uiDefinitionspayload fragments
- transforms schema ->
A central loader in server scans server/app/items/types/* at boot and imports one plugin entrypoint per folder (for example plugin.py with ITEM_TYPE_PLUGIN export).
The discovered plugins are then assembled into an in-memory registry object exposing:
- validation hooks
- defaults
- ui definitions
- capabilities
- action dispatch
This means:
- adding a new item folder + plugin file is sufficient for server registration
- no hand-edited master list is required
B) Server: Strict Params Hygiene
In update flow:
- Build next params by applying patch into current params.
- Run through type validator that:
- strips unknown keys
- normalizes known keys
- enforces types/ranges/options
- Persist only validated output.
No raw client params should persist.
C) Server: Save Strategy
Replace synchronous save_state() every mutation with coalesced writes:
- mark dirty on mutation
- debounce write (e.g., 100-300ms)
- cap max delay (e.g., 1-2s)
- flush on shutdown/signal
This preserves durability while reducing event-loop blocking.
D) Client: Schema-Driven UI Runtime
Refactor client item registry/editor to consume server schema only.
Client keeps:
- Presentation helpers
- Generic item behavior path driven only by schema/metadata
- Optional per-item UX runtime modules only where needed (example: piano key mode)
Client removes:
- static defaults/options/editability lists as authority
- fallback-driven assumptions
- requirement for per-item client modules when behavior is generic
Property editor logic becomes generic:
valueType: boolean-> togglevalueType: list+options-> list selectvalueType: number+range-> numeric editor/steppervalueType: text/sound+maxLength-> text editorreadonly-> blocked edit with status
Special-case handlers only for UX extras (e.g., live preview for certain fields).
D.1) Dependent Property Rules
Add dependency metadata to server schema so client can hide dependent fields generically.
Recommended metadata fields per property:
visibleWhen: simple predicate (for example{ directional: true })
Example:
facinghasvisibleWhen: { directional: true }- when
directionalisfalse,facingis hidden - when a controlling property changes, the property menu is recomputed immediately so visibility updates live
E) Protocol Shape (Recommended)
Ensure welcome.uiDefinitions includes enough to be complete:
itemTypes[]type,label,tooltipeditableProperties[]propertyMetadata{ key -> { valueType, tooltip, range, maxLength, options?, readonly?, visibleWhen? } }globalPropertiescapabilities
itemTypeOrder[]
Optional future:
schemaVersionfor compatibility checks.
Phased Implementation Plan
Phase 0: Preconditions and guardrails
- Document canonical schema contract in
docs/item-schema.md. - Add tests asserting unknown keys are rejected/stripped per type.
- Add tests asserting
uiDefinitionscompleteness for all registered types.
Deliverable:
- Locked schema contract and tests before heavy refactor.
Phase 1: Server type package standardization + auto-discovery
- Standardize all existing item types to same package contract.
- Move any remaining type-specific logic out of generic server paths into per-type packages.
- Add auto-discovery loader APIs:
get_type_definition(type_id)validate_update(type_id, existing, patch)build_ui_definitions()
- Loader scans item folders at startup and registers plugins automatically.
Deliverable:
- Uniform server-side item modules for all current item types.
Phase 2: Strict validation and unknown-key stripping
- Enforce strict allowed-key filtering in per-type validators.
- Fail/strip behavior decision:
- recommended: strip unknown keys on load/update, optionally log at debug level.
- Backfill tests for each type.
Deliverable:
- No unsupported params can persist.
Phase 3: Client removes authority/fallback definitions
- Remove client hardcoded item defaults/options as authoritative data.
- Keep only bootstrap guards:
- if schema missing/invalid, fail item UX with explicit status (no fallback behavior).
- Refactor
itemRegistryto be a runtime cache of server definitions.
Deliverable:
- Client item UI driven entirely by server payload.
Phase 4: Metadata-driven property editor + visibility dependencies
- Replace key-specific submit/toggle/list branches with generic metadata-based handlers.
- Keep a small optional hook map:
onPropertyPreviewChange(type,key,value)for UX preview.
- Implement
visibleWhensemantics with live menu recompute when controlling values change. - Verify all current item properties work with generic editor.
Deliverable:
- Adding a new field usually requires server changes only.
Phase 5: Behavior registry completion (optional modules)
- Keep one generic behavior path that works for items with no special runtime.
- Keep per-item behavior modules only when UX/audio runtime is truly custom.
- Ensure all runtime hooks are accessed via registry interfaces.
- Remove any remaining type checks in
main.tsand shared handlers.
Deliverable:
main.tsstays orchestration-only.
Phase 6: Coalesced persistence
- Implement debounced save queue in server item service.
- Add durability tests (flush on shutdown).
- Add config knobs (debounce ms, max delay).
Deliverable:
- lower save overhead under bursty updates.
Repeatable New Item Template
When adding a new item type:
- Server
- Create
server/app/items/types/<new_type>/ - Implement:
definition.pyvalidator.pyactions.pyplugin.py(entrypoint export for auto-discovery)
- Add tests:
- create defaults
- update validation (valid + invalid + unknown keys)
usebehavioruiDefinitionsfields present
- Client
- Add
client/src/items/types/<newType>/behavior.tsonly if custom UX runtime exists. - Prefer zero client type-specific code for generic items.
- If behavior module is needed, register via behavior loader pattern.
- No hardcoded property logic in editor.
- Docs
- Update
docs/item-types.md - Update
docs/item-schema.md - Update controls docs if keybindings changed.
Risks and Mitigations
- Risk: temporary client breakage when fallback removed.
- Mitigation: explicit schema-required startup check and clear status error.
- Risk: inconsistent schema during deploy rollover.
- Mitigation: include
schemaVersionand reject incompatible client/server combinations with clear reconnect message.
- Risk: over-generalized editor misses edge-case UX.
- Mitigation: keep small per-item preview hooks while generic editor handles core commit logic.
- Risk: debounced persistence data loss on crash.
- Mitigation: short debounce + max-delay + flush on shutdown.
Suggested Execution Order for Your Repo (Practical)
- Implement strict unknown-key stripping on server (highest impact, lowest UX risk).
- Implement server plugin auto-discovery for item type folders.
- Convert client item registry to require server schema payload (remove fallback authority).
- Make item property editor fully metadata-driven with dependency rules.
- Finalize optional client behavior modules (only for custom UX items like piano).
- Add coalesced persistence.
Definition of Done
- Server item validators fully define accepted params and drop unknowns.
- Server item types are boot-loaded from folder plugins (no manual master registry edits).
uiDefinitionsis complete and authoritative for all item UI config.- Client contains no authoritative item defaults/options/editability outside server payload.
- Client has no fallback schema path.
- New item addition follows one template with predictable files/tests.
main.tshas no item-type-specific runtime branches.
Implementation Update (2026-02-24)
Completed
- Phase 0:
- Added server-side contract coverage for
uiDefinitionscompleteness. - Added/kept tests for unknown-key stripping and validation behavior.
- Added server-side contract coverage for
- Phase 1:
- Server item plugins are auto-discovered from
server/app/items/types/*/plugin.py. - Registry now builds type order/modules from discovered plugins.
- Server item plugins are auto-discovered from
- Phase 2:
- Unknown params are stripped by validators and use-path updates are revalidated before persist.
- Phase 3:
- Client item registry now requires server
uiDefinitions; no fallback item-definition authority. - Missing/invalid schema now disables item menus with explicit status.
- Client item registry now requires server
- Phase 4:
- Property editor behavior is metadata-driven by
valueType/range/options/maxLength. visibleWhenis supported and item property rows recompute live after updates.
- Property editor behavior is metadata-driven by
- Phase 5:
- Client runtime behavior remains modular per item via behavior registry;
main.tsorchestration no longer carries item-specific business branches.
- Client runtime behavior remains modular per item via behavior registry;
- Phase 6:
- Coalesced/debounced state saving implemented.
- Flush-on-shutdown implemented.
- Save timing now configurable via:
storage.state_save_debounce_msstorage.state_save_max_delay_ms
Notes
- Client item-specific runtime is now reduced to only
piano; simple items (dice,wheel,clock,radio_station,widget) run through generic client flows with no custom behavior module. - Server item implementations now live inside per-type folders (
server/app/items/types/*/module.py) and plugins point directly to those modules. - Remaining optional future work:
- split server type modules into
definition.py/validator.py/actions.pyfiles per type if we want finer-grained plugin internals.
- split server type modules into