@typetorch/framework 0.3.2 → 0.3.4

package/README.md

@@ -120,6 +120,17 @@ export class CoinService extends Module implements OnStart {
   logs (server, own client, other players' clients), client and server dex, network stats, module state, a branch and
   build picker (Server > Branch) and a Claude prompt. Prod-channel servers are read-only. The window can be dragged by
   its header and resized from its corner (double-tap the header to reset).
+- **Panes and windows (dev menu):** every page shows in a pane with a small header: tap the title to pick another
+  page, or use Split right, Split down, Open in new window and Close. Drag the line between two panes to resize them.
+  The sidebar opens pages in the focused pane (the highlighted one; tap a pane to focus it). Floating windows move by
+  their title bar and resize from their corner (double-tap the title bar to maximise); their title bar also has
+  Minimise, Dock (back into the main panel) and Close. Windows can be split too. The layout, the windows and each
+  pane's own settings (for example the open nodes of two Modules > State panes) survive swaps; a fresh join starts
+  with one pane. Claude, Server > Branch and the Manage pages open once (picking them again focuses their pane); every
+  other page can be open several times. Panes nobody sees (menu closed, window minimised) stop refreshing, and panes
+  on the same data share one request (Status, Overview, Assets, Network > Stats, server Logs, Packets); State panes
+  share one query budget. On phones and small screens panes only stack (two at most), and windows open maximised with
+  one pane each.
 - **State explorer (Modules > State, Server | Client):** every live module of the running generation (services on the
   server, controllers on the client) and the persist store. Tap a row to open it: the module's own fields (not its
   methods), then tables, arrays, Maps and Sets, 100 entries per page (Prev / Next). Each value has a short preview:
@@ -297,7 +308,9 @@ const variant = analytics.experiment("onboarding", ["short", "long"]); // same a
   and the next generation sends them. In edit mode (UI Labs) it is inert.
 - **Server calls take the player first** (`track(player, ...)`); without one an event is server-only (no player id).
   Client calls are always about the local player and are marked `src = "client"` (a client can lie). The server
-  checks their shape, size (props at most 4 KB) and rate.
+  checks their shape, size (props at most 4 KB) and rate. `purchase` and `currency` are server-only (revenue and the
+  economy are server-authoritative): on the client they warn once and send nothing, and the server refuses them from
+  clients.
 - **Options** (all on by default): `sessions` (joins, leaves, device, join source, account age bucket, Premium,
   country, friends in the server, first-ever vs returning, days since the last visit), `tech` (FPS, ping, memory, load
   time, client and server errors, swaps and rollbacks, leaves within 60 s of a swap), `zones` (parts or models tagged
@@ -328,6 +341,16 @@ const variant = analytics.experiment("onboarding", ["short", "long"]); // same a
   `flushSeconds` (15) or at 500 rows, at most ~10 HttpService requests a minute, retries with backoff, and a last
   flush on shutdown (kernel 0.3.2). Delivery is at least once (a swap mid-request sends that batch again).
   `analytics.stats()` (server) has the counters; `flush()` sends soon.
+- **The cloud test sends nothing.** `typetorch test --cloud` boots the payload headless in a Luau Execution task where
+  HttpService works; there the engine (stub kernel `test = true`, or `workspace:GetAttribute("TypeTorchTest")`) collects
+  as usual but never uploads: no event rows, no identity rows, no HTTP request, so a prod deploy never puts a fake
+  server session into your analytics.
+- **Bounds on what a client can cause:** at most 32 experiments per session (each is stamped on every later row), and
+  a client's `exp` messages count against its event budget (120 a minute, 5,000 a session). Clients can't send
+  `purchase` or `currency` rows; the analytics server's ingest also refuses client-marked ones (older engines) and its
+  revenue queries count `purchase` rows the server sent.
+- **Friends in the server** (the join's `friends`): one `Players:GetFriendsAsync` per join (at most 10 pages, none
+  when the player is alone) intersected with the players there, not a web call per player.
 
 **Settings** (server only, never sent to clients): the ConfigService key `TypeTorchAnalytics`, written with
 `writeSettings()` from `@typetorch/analytics` (Open Cloud, universe:write) or in Creator Hub (Configs); no CLI command
@@ -367,6 +390,8 @@ bun run build   # rbxtsc --type package -> out/
   `scripts/test-state-inspect.luau` checks the state explorer's core (previews, raw reads only, cycles, paging,
   Maps/Sets with Instance keys, the depth limit, filters, request validation) and that `src/version.ts` matches
   package.json.
+  `scripts/test-layout.luau` checks the dev menu's pane layout core (`devtools/layout.ts`: splits and their limits,
+  closing, pop out and dock, singleton pages, ratios, focus, and cleaning a remembered layout).
   `scripts/test-analytics.luau` checks the analytics engine's pure parts (experiment assignment, settings, the queue
   and HTTP budget, tt-rec-1, the sink request bodies); `test-analytics-server.luau` and `test-analytics-client.luau`
   run the compiled server and client cores against mocked services (sessions, intake, retries, a swap with a request

package/out/analytics/SCHEMA.md

@@ -31,7 +31,7 @@ Integers are written with every digit (never exponent notation).
 | `state` | string | The player's state **after** this event: `zone:<z>\|screen:<s>\|activity:<a>`, empty parts left out (`""` when nothing is known). Server-only events: `activity:<server activity>` or `""` |
 | `exp` | string | JSON object of the player's active experiments, `{"onboarding":"short"}`; `{}` when none |
 | `sexp` | string | The server's experiment: the artifact id of a kernel A/B experiment pin, or `""` |
-| `src` | string | `server`, or `client` (sent by a client: it can lie; the server checked shapes and rate) |
+| `src` | string | `server`, or `client` (sent by a client: it can lie; the server checked shapes and rate). Never `client` on `purchase` or `currency` rows |
 | `props` | string | JSON object text, at most 4096 bytes. Too large: `{"_trunc":<bytes>}`; not encodable: `{"_err":"encode"}`; a non-object value `x`: `{"value":x}` |
 
 ### recordings
@@ -57,7 +57,7 @@ First-ever-session detail, one row per packed chunk.
 
 | kind | name | props |
 |---|---|---|
-| session | `join` | `from`: `direct` (Home, search, sorts: Roblox doesn't say), `teleport` (same game), `teleport_game` (another game), `referral` (invite/referral link), `share` (launch data), `follow` (followed someone); `ctx?` (GameJoinContext.JoinSource name); `tp?` (had teleport data); `party?` (players teleported along); `age` (account age: `<1d`, `1-7d`, `7-30d`, `30-90d`, `90-365d`, `1-3y`, `3y+`); `prem` (Premium); `country?` (ISO code); `friends` (friends in the server, at most 30 checked); `ret` (days since the last visit, `-1` first visit or unknown); `late?` (the engine started over 60 s after the join). `t` is the join time |
+| session | `join` | `from`: `direct` (Home, search, sorts: Roblox doesn't say), `teleport` (same game), `teleport_game` (another game), `referral` (invite/referral link), `share` (launch data), `follow` (followed someone); `ctx?` (GameJoinContext.JoinSource name); `tp?` (had teleport data); `party?` (players teleported along); `age` (account age: `<1d`, `1-7d`, `7-30d`, `30-90d`, `90-365d`, `1-3y`, `3y+`); `prem` (Premium); `country?` (ISO code); `friends` (how many of the player's friends are in the server: one friend-list lookup per join, at most 10 pages, `0` when it fails); `ret` (days since the last visit, `-1` first visit or unknown); `late?` (the engine started over 60 s after the join). `t` is the join time |
 | session | `device` (src client) | `input` (`kbm`, `touch`, `gamepad`, `vr`, `unknown`), `w`, `h` (viewport points), `touch`, `kb`, `mouse`, `pad`, `vr`. Once per session |
 | session | `leave` | `secs` (session length), `why`: `left`, `shutdown`, `gone` (left while no generation ran the engine), `swap60?` (left within 60 s of a hot swap) |
 | tech | `server` | Every `techEvery` s: `fps` (physics), `hb` (Heartbeat rate), `mem` (MB, 10s), `players`, `ping50?`, `ping90?` (ms), `q`, `qr` (queued events, recordings), `dropped`, `sent`, `fails`, `health?`, `errors?` (kernel 0.3.2 health) |
@@ -71,17 +71,21 @@ First-ever-session detail, one row per packed chunk.
 | zone | `leave` | `zone`, `to?`, `secs` |
 | state | `activity` | `to`, `from` (server or client src) |
 | state | `screen` | `to`, `from` (`""` = none). Client: ScreenGuis in PlayerGui (Enabled), GuiObjects tagged `TTScreen` (Visible), `screen()` |
-| experiment | `<experiment>` | `variant`, `variants` (count), `forced?`. Once per session when assigned or changed |
+| experiment | `<experiment>` | `variant`, `variants` (count), `forced?`. Once per session when assigned or changed. At most 32 experiments per session: a 33rd `experiment()` returns the control (the first variant) and warns. A client's experiment calls count against its event budget (below) |
 | recording_meta | `start` | `share` (the recorded share then) |
 | recording_meta | `end` | `chunks`, `bytes`, `why`: `window` (60 s after the first input), `cap` (10 min, or the server's 256 KB / 80 chunks), `left`, `end` |
 | fleet | `heartbeat` | The kernel's `fleetStatus()` (kernel 0.3.2+), every 60 ± 10 s and once at each generation start. pid `""` |
 | fleet | `deploy_report` | One kernel deploy report `{s, b, a, j, r, e?, d?, t, g, k, p}` (r: `swapped`, `failed`, `rolled_back`, `skipped`, `booted`), once per (s, j, r) per server, across generations. pid `""` |
 | custom | `<name>` | `track(name, props)`: the game's props |
 | funnel | `<funnel>` | `step(funnel, index, name?)`: `i`, `step?` |
-| purchase | `<kind>` | `purchase({product, robux, where?, kind?})`: name = `kind` (default `product`); `product`, `robux`, `where?` |
-| currency | `<currency>` | `currency(name, delta, reason)`: `delta`, `reason` |
+| purchase | `<kind>` | Server only. `purchase(player?, {product, robux, where?, kind?})`: name = `kind` (default `product`); `product`, `robux`, `where?` |
+| currency | `<currency>` | Server only. `currency(player?, name, delta, reason)`: `delta`, `reason` |
 
-Client-sent kinds are limited to `custom`, `funnel`, `purchase`, `currency`, `state`, `tech`.
+Client-sent kinds are limited to `custom`, `funnel`, `state`, `tech`, within a budget of 120 a minute and 5,000 a
+session per player. `purchase` and `currency` are server-only (revenue and the economy are server-authoritative): on
+the client `purchase()` and `currency()` warn once and send nothing, the server refuses those kinds from clients, and
+the analytics server's ingest refuses such rows marked `src = client` (older engines let clients send them). Revenue
+counts only server-sent `purchase` rows; rows from before `src` existed (no `src`) still count.
 
 ## tt-rec-1
 
@@ -174,6 +178,9 @@ Unknown fields are ignored. Settings errors are warned once (never with the toke
   other 4xx drop the batch (counted as rejected).
 - **Delivery is at least once:** a hot swap during a request sends its rows again. Readers may drop exact duplicate
   rows.
+- **The cloud test sends nothing:** inside `typetorch test --cloud` (the stub kernel's `test = true`, or the workspace
+  attribute `TypeTorchTest`) rows are collected as usual but dropped at each flush: no event, recording or identity
+  rows and no HTTP request, so a deploy never puts a fake server session into the analytics.
 - **Queue:** 10,000 events (1,000 while no settings are known), 2,000 fleet rows, 300 recording chunks; over a cap the
   oldest are dropped and counted (`tech/server` `dropped`). The queue lives in the kernel's persist store across hot
   swaps and is flushed on shutdown (kernel 0.3.2 onClose; older kernels: one BindToClose relay).

package/out/analytics/engine.d.ts

@@ -15,10 +15,16 @@ export declare class AnalyticsEngine {
     /** A funnel step, e.g. `step("onboarding", 3, "opened_shop")`. Indexes start at 1 by convention. */
     step(funnel: string, index: number, name?: string): void;
     step(player: Player, funnel: string, index: number, name?: string): void;
-    /** A Robux purchase (log it once the receipt is granted). The event name is `kind` ("product" by default). */
+    /**
+     * A Robux purchase (log it once the receipt is granted). The event name is `kind` ("product" by default). Server
+     * only: revenue is server-authoritative, so on the client this warns once and sends nothing.
+     */
     purchase(purchase: AnalyticsPurchase): void;
     purchase(player: Player, purchase: AnalyticsPurchase): void;
-    /** Currency in (+) or out (-), e.g. `currency("coins", 50, "round_reward")`. */
+    /**
+     * Currency in (+) or out (-), e.g. `currency(player, "coins", 50, "round_reward")`. Server only: the economy is
+     * server-authoritative, so on the client this warns once and sends nothing.
+     */
     currency(name: string, delta: number, reason: string): void;
     currency(player: Player, name: string, delta: number, reason: string): void;
     /**

package/out/analytics/engine.luau

@@ -26,6 +26,17 @@ local function isPlayer(value)
 	end
 	return _condition
 end
+--* Server-only calls made on the client: warned once each per generation; the server refuses these kinds from clients. 
+local warnedServerOnly = {}
+local function serverOnly(call)
+	local _call = call
+	if warnedServerOnly[_call] ~= nil then
+		return nil
+	end
+	local _call_1 = call
+	warnedServerOnly[_call_1] = true
+	warn("[src/analytics/engine.ts:31]", `[analytics] {call}() is server-only (revenue and currency are server-authoritative): the client sends nothing`)
+end
 local function currentServer(options)
 	if serverCore then
 		return serverCore
@@ -87,11 +98,11 @@ do
 			local existing = serverCore ~= nil
 			self.server = currentServer(options)
 			if existing and options.settings ~= nil then
-				warn("[src/analytics/engine.ts:67]", "[analytics] an engine already runs: its settings stay")
+				warn("[src/analytics/engine.ts:75]", "[analytics] an engine already runs: its settings stay")
 			end
 		else
 			if options.settings ~= nil then
-				warn("[src/analytics/engine.ts:69]", "[analytics] settings are read on the server only; the client ignores them")
+				warn("[src/analytics/engine.ts:77]", "[analytics] settings are read on the server only; the client ignores them")
 			end
 			self.client = currentClient(options)
 		end
@@ -150,6 +161,10 @@ do
 		end
 	end
 	function AnalyticsEngine:purchase(first, second)
+		if self.client then
+			serverOnly("purchase")
+			return nil
+		end
 		local player = if isPlayer(first) then first else nil
 		local info = (if player then second else first)
 		local _condition = not info
@@ -162,7 +177,7 @@ do
 			end
 		end
 		if _condition then
-			warn("[src/analytics/engine.ts:114]", "[analytics] purchase({ product, robux }) needs numbers")
+			warn("[src/analytics/engine.ts:129]", "[analytics] purchase({ product, robux }) needs numbers")
 			return nil
 		end
 		local _kind = info.kind
@@ -180,37 +195,27 @@ do
 		if _result ~= nil then
 			_result:track(player, "purchase", kind, props)
 		end
-		local _result_1 = self.client
-		if _result_1 ~= nil then
-			_result_1:track("purchase", kind, props)
-		end
 	end
 	function AnalyticsEngine:currency(first, second, third, fourth)
+		if self.client then
+			serverOnly("currency")
+			return nil
+		end
 		if isPlayer(first) then
-			local props = {
-				delta = third,
-				reason = fourth,
-			}
 			local _result = self.server
 			if _result ~= nil then
-				_result:track(first, "currency", second, props)
-			end
-			local _result_1 = self.client
-			if _result_1 ~= nil then
-				_result_1:track("currency", second, props)
+				_result:track(first, "currency", second, {
+					delta = third,
+					reason = fourth,
+				})
 			end
 		else
-			local props = {
-				delta = second,
-				reason = third,
-			}
 			local _result = self.server
 			if _result ~= nil then
-				_result:track(nil, "currency", first, props)
-			end
-			local _result_1 = self.client
-			if _result_1 ~= nil then
-				_result_1:track("currency", first, props)
+				_result:track(nil, "currency", first, {
+					delta = second,
+					reason = third,
+				})
 			end
 		end
 	end
@@ -281,7 +286,7 @@ do
 			return self.client:experiment(first, variants)
 		end
 		if self.server then
-			warn("[src/analytics/engine.ts:187]", `[analytics] experiment("{first}") on the server needs the player: experiment(player, name, variants)`)
+			warn("[src/analytics/engine.ts:204]", `[analytics] experiment("{first}") on the server needs the player: experiment(player, name, variants)`)
 		end
 		local _condition = variants[1]
 		if _condition == nil then

package/out/analytics/protocol.d.ts

@@ -52,7 +52,10 @@ export interface ServerHello {
     /** Live experiment overrides by name. */
     exps: Record<string, ExperimentOverride>;
 }
-/** Kinds a client may send in "ev". */
+/**
+ * Kinds a client may send in "ev". Never `purchase` or `currency`: revenue and the economy are server-authoritative
+ * (a client could otherwise add fake payers and Robux), so the server refuses them from clients.
+ */
 export declare const CLIENT_KINDS: Set<string>;
 /** A client's hello, checked field by field (it comes from an untrusted client). */
 export declare function cleanHello(value: unknown): HelloInfo | undefined;

package/out/analytics/protocol.luau

@@ -38,12 +38,15 @@ local INPUTS = {
 	["vr"] = true,
 	["unknown"] = true,
 }
---* Kinds a client may send in "ev". 
+--[[
+	*
+	 * Kinds a client may send in "ev". Never `purchase` or `currency`: revenue and the economy are server-authoritative
+	 * (a client could otherwise add fake payers and Robux), so the server refuses them from clients.
+	 
+]]
 local CLIENT_KINDS = {
 	["custom"] = true,
 	["funnel"] = true,
-	["purchase"] = true,
-	["currency"] = true,
 	["state"] = true,
 	["tech"] = true,
 }

package/out/analytics/server.d.ts

@@ -74,6 +74,12 @@ export declare class ServerAnalytics {
     private readonly identity;
     private sexp;
     private stopped;
+    /**
+     * `typetorch test --cloud`: the payload boots headless in a Luau Execution task, where HttpService works. The engine
+     * then collects as usual but sends nothing (no rows, no identity rows, no HTTP), or every prod deploy would put a
+     * fake server session into the owner's analytics. Set by the stub kernel's `test` or the TypeTorchTest attribute.
+     */
+    private readonly testMode;
     constructor(options: AnalyticsOptions, scope: GenerationScope, trove: Trove);
     private serverExperiment;
     private stateOf;
@@ -109,6 +115,12 @@ export declare class ServerAnalytics {
      */
     private resolve;
     private joinSource;
+    /**
+     * How many of the player's friends are in this server: one `GetFriendsAsync` per join (at most FRIEND_PAGES_MAX
+     * pages) intersected with the players here, instead of an IsFriendsWith call per player. Stops early once every
+     * other player was found; after each yield it stops with the count so far if the player left or the generation
+     * stopped. No call when the player is alone; a failed call counts what it read (0 at first).
+     */
     private friendsHere;
     private emitJoin;
     private onPlayer;
@@ -117,6 +129,8 @@ export declare class ServerAnalytics {
     private recordingAllowed;
     private sendHello;
     private onHello;
+    /** One client-sent event (or an "exp" message, which may add a row): within the player's budget and the session cap. */
+    private takeClientEvent;
     private onEvents;
     private onChunk;
     private startIntake;

package/out/analytics/server.luau

@@ -88,6 +88,16 @@ local PENDING_MAX = 200
 local CLIENT_BURST = 120
 local CLIENT_PER_MINUTE = 120
 local CLIENT_SESSION_MAX = 5000
+--[[
+	*
+	 * Distinct experiments one session may hold. Each one is re-encoded into `exp` and stamped on every later row, and a
+	 * client can name experiments ("exp" messages), so without a cap one player could grow `exp` past the ingest limit
+	 * (1 KB) and have every row of theirs dropped, or spend the server's time re-encoding it.
+	 
+]]
+local EXPERIMENTS_MAX = 32
+--* Friend-list pages read per join for the join's `friends` (one web call each; most players fit on the first). 
+local FRIEND_PAGES_MAX = 10
 --* A recording: at most this many bytes, chunks and seconds after the join. 
 local RECORDING_MAX_BYTES = 262144
 local RECORDING_MAX_CHUNKS = 80
@@ -131,6 +141,20 @@ local function ageBucket(days)
 	end
 	return "3y+"
 end
+--* Whether this generation runs inside `typetorch test --cloud` (cli/src/cloudtest.ts: stub kernel `test = true`, attribute). 
+local function isCloudTest(kernel)
+	local _result = kernel
+	if _result ~= nil then
+		_result = _result.test
+	end
+	if _result == true then
+		return true
+	end
+	local ok, flag = pcall(function()
+		return Workspace:GetAttribute("TypeTorchTest")
+	end)
+	return ok and flag == true
+end
 local function newSession()
 	return {
 		pid = "",
@@ -214,6 +238,7 @@ do
 		self.sexp = ""
 		self.stopped = false
 		self.kernel = scope.server
+		self.testMode = isCloudTest(scope.server)
 		self.store = TypeTorch:persist(PERSIST_KEY, newStore)
 		self.events = RowQueue.new(self.store.events, EVENTS_CAP_UNCONFIGURED)
 		self.recordings = RowQueue.new(self.store.recordings, RECORDINGS_CAP)
@@ -256,6 +281,9 @@ do
 		trove:add(function()
 			self.stopped = true
 		end)
+		if self.testMode then
+			print("[analytics] cloud test: rows are collected but nothing is sent (no uploads, no identity rows)")
+		end
 		self:startSettings()
 		self:startIntake()
 		self:startSessions()
@@ -456,7 +484,7 @@ do
 	end
 	function ServerAnalytics:track(player, kind, name, props)
 		if not isEventName(name) then
-			warn("[src/analytics/server.ts:435]", `[analytics] {kind} event name must be 1-64 characters: {string.sub(tostring(name), 1, 80)}`)
+			warn("[src/analytics/server.ts:458]", `[analytics] {kind} event name must be 1-64 characters: {string.sub(tostring(name), 1, 80)}`)
 			return nil
 		end
 		local session = if player then self:sessionOf(player) else nil
@@ -564,7 +592,7 @@ do
 		end
 		local control = _condition
 		if not isExperimentName(name) or not isVariantList(variants) then
-			warn("[src/analytics/server.ts:486]", `[analytics] experiment("{string.sub(tostring(name), 1, 64)}"): bad name or variants (1-16 distinct names)`)
+			warn("[src/analytics/server.ts:509]", `[analytics] experiment("{string.sub(tostring(name), 1, 64)}"): bad name or variants (1-16 distinct names)`)
 			return control
 		end
 		local session = self:sessionOf(player)
@@ -578,24 +606,40 @@ do
 		if not session.ready then
 			return control
 		end
-		local _exp = session.pid
-		local _exp_1 = name
-		local _exp_2 = variants
+		local _exp = session.exp
+		local _name = name
+		local _condition_1 = not (_exp[_name] ~= nil)
+		if _condition_1 then
+			-- ▼ ReadonlyMap.size ▼
+			local _size = 0
+			for _ in session.exp do
+				_size += 1
+			end
+			-- ▲ ReadonlyMap.size ▲
+			_condition_1 = _size >= EXPERIMENTS_MAX
+		end
+		if _condition_1 then
+			self:warn(`experiment("{name}") not assigned: a session holds at most {EXPERIMENTS_MAX} experiments`)
+			return control
+		end
+		local _exp_1 = session.pid
+		local _exp_2 = name
+		local _exp_3 = variants
 		local _result = self.settings
 		if _result ~= nil then
 			local _experiments_1 = _result.experiments
-			local _name = name
-			_result = _experiments_1[_name]
+			local _name_1 = name
+			_result = _experiments_1[_name_1]
 		end
-		local assignment = assignVariant(_exp, _exp_1, _exp_2, _result)
-		local _exp_3 = session.exp
-		local _name = name
-		local current = _exp_3[_name]
+		local assignment = assignVariant(_exp_1, _exp_2, _exp_3, _result)
+		local _exp_4 = session.exp
+		local _name_1 = name
+		local current = _exp_4[_name_1]
 		if assignment.active and current ~= assignment.variant then
-			local _exp_4 = session.exp
-			local _name_1 = name
+			local _exp_5 = session.exp
+			local _name_2 = name
 			local _variant = assignment.variant
-			_exp_4[_name_1] = _variant
+			_exp_5[_name_2] = _variant
 			session.expJson = encodeProps(session.exp)
 			self:emit(session, "experiment", name, encodeProps({
 				variant = assignment.variant,
@@ -603,9 +647,9 @@ do
 				forced = assignment.forced or nil,
 			}))
 		elseif not assignment.active and current ~= nil then
-			local _exp_4 = session.exp
-			local _name_1 = name
-			_exp_4[_name_1] = nil
+			local _exp_5 = session.exp
+			local _name_2 = name
+			_exp_5[_name_2] = nil
 			session.expJson = encodeProps(session.exp)
 		end
 		return assignment.variant
@@ -613,7 +657,7 @@ do
 	function ServerAnalytics:applySettings(parsed)
 		local errorsText = table.concat(parsed.errors, "; ")
 		if errorsText ~= table.concat(self.settingsErrors, "; ") and errorsText ~= "" then
-			warn("[src/analytics/server.ts:517]", `[analytics] {SETTINGS_KEY}: {errorsText}`)
+			warn("[src/analytics/server.ts:544]", `[analytics] {SETTINGS_KEY}: {errorsText}`)
 		end
 		self.settingsErrors = parsed.errors
 		local hadSettings = self.settings ~= nil
@@ -690,7 +734,7 @@ do
 						snapshot = result
 					else
 						if attempt == 1 then
-							warn("[src/analytics/server.ts:563]", `[analytics] ConfigService unavailable: {string.sub(tostring(result), 1, 120)}`)
+							warn("[src/analytics/server.ts:590]", `[analytics] ConfigService unavailable: {string.sub(tostring(result), 1, 120)}`)
 						end
 						task.wait(delay)
 						delay = math.min(delay * 2, 30)
@@ -930,21 +974,71 @@ do
 		return info
 	end
 	function ServerAnalytics:friendsHere(player)
-		local count = 0
-		local checked = 0
+		local others = {}
 		for _, other in Players:GetPlayers() do
-			if other == player then
-				continue
+			if other ~= player then
+				local _userId = other.UserId
+				others[_userId] = true
+			end
+		end
+		-- ▼ ReadonlySet.size ▼
+		local _size = 0
+		for _ in others do
+			_size += 1
+		end
+		-- ▲ ReadonlySet.size ▲
+		if _size == 0 then
+			return 0
+		end
+		local ok, pages = pcall(function()
+			return Players:GetFriendsAsync(player.UserId)
+		end)
+		if not ok or pages == nil then
+			return 0
+		end
+		local count = 0
+		for page = 1, FRIEND_PAGES_MAX do
+			if self.stopped or player.Parent == nil then
+				break
+			end
+			local pageOk, entries = pcall(function()
+				return pages:GetCurrentPage()
+			end)
+			if not pageOk or not (type(entries) == "table") then
+				break
+			end
+			for _, entry in entries do
+				local _condition = type(entry) == "table"
+				if _condition then
+					local _id = entry.Id
+					-- ▼ Set.delete ▼
+					local _valueExisted = others[_id] ~= nil
+					others[_id] = nil
+					-- ▲ Set.delete ▲
+					_condition = _valueExisted
+				end
+				if _condition then
+					count += 1
+				end
+			end
+			-- ▼ ReadonlySet.size ▼
+			local _size_1 = 0
+			for _ in others do
+				_size_1 += 1
+			end
+			-- ▲ ReadonlySet.size ▲
+			local _condition = _size_1 == 0
+			if not _condition then
+				_condition = pages.IsFinished or page == FRIEND_PAGES_MAX
 			end
-			if checked >= 30 then
+			if _condition then
 				break
 			end
-			checked += 1
-			local ok, friends = pcall(function()
-				return player:IsFriendsWith(other.UserId)
+			local nextOk = pcall(function()
+				return pages:AdvanceToNextPageAsync()
 			end)
-			if ok and friends then
-				count += 1
+			if not nextOk then
+				break
 			end
 		end
 		return count
@@ -1203,14 +1297,9 @@ do
 			_helloWaiting[_player] = true
 		end
 	end
-	function ServerAnalytics:onEvents(player, session, batch)
-		local _batch = batch
-		if not (type(_batch) == "table") then
-			return nil
-		end
-		local list = batch
-		if #list > CLIENT_BATCH_MAX then
-			return nil
+	function ServerAnalytics:takeClientEvent(player, session)
+		if session.clientEvents >= CLIENT_SESSION_MAX then
+			return false
 		end
 		local _clientBudgets = self.clientBudgets
 		local _player = player
@@ -1225,15 +1314,24 @@ do
 			local _budget = budget
 			_clientBudgets_1[_player_1] = _budget
 		end
+		if not takeToken(budget, os.clock(), CLIENT_BURST, CLIENT_PER_MINUTE) then
+			return false
+		end
+		session.clientEvents += 1
+		return true
+	end
+	function ServerAnalytics:onEvents(player, session, batch)
+		local _batch = batch
+		if not (type(_batch) == "table") then
+			return nil
+		end
+		local list = batch
+		if #list > CLIENT_BATCH_MAX then
+			return nil
+		end
 		local now = nowMs()
 		local halfPing = math.floor(math.clamp(player:GetNetworkPing(), 0, 2) * 500)
 		for _, raw in list do
-			if session.clientEvents >= CLIENT_SESSION_MAX then
-				return nil
-			end
-			if not takeToken(budget, os.clock(), CLIENT_BURST, CLIENT_PER_MINUTE) then
-				return nil
-			end
 			local event = cleanClientEvent(raw)
 			if not event then
 				continue
@@ -1247,7 +1345,9 @@ do
 			if not ok or not (type(decoded) == "table") then
 				continue
 			end
-			session.clientEvents += 1
+			if not self:takeClientEvent(player, session) then
+				return nil
+			end
 			local t = now - age - halfPing
 			if kind == "state" then
 				local to = decoded.to
@@ -1367,8 +1467,9 @@ do
 					local _binding = args
 					local name = _binding[1]
 					local variants = _binding[2]
+					-- A client names an experiment: within its event budget (it may add an "experiment" row and grows `exp`).
 					-- experiment() may wait for the pid: not on the kernel's message thread.
-					if isExperimentName(name) and isVariantList(variants) then
+					if isExperimentName(name) and isVariantList(variants) and self:takeClientEvent(player, session) then
 						task.spawn(function()
 							return self:experiment(player, name, variants)
 						end)
@@ -1380,7 +1481,7 @@ do
 				end
 			end)
 			if not ok then
-				warn("[src/analytics/server.ts:1008]", `[analytics] client message failed: {string.sub(tostring(err), 1, 200)}`)
+				warn("[src/analytics/server.ts:1058]", `[analytics] client message failed: {string.sub(tostring(err), 1, 200)}`)
 			end
 		end)
 		self.trove:add(function()
@@ -1660,7 +1761,7 @@ do
 			return nil
 		end
 		self.lastWarnAt = now
-		warn("[src/analytics/server.ts:1197]", `[analytics] {message}`)
+		warn("[src/analytics/server.ts:1247]", `[analytics] {message}`)
 	end
 	function ServerAnalytics:post(request)
 		local ok, response = pcall(function()
@@ -1682,6 +1783,14 @@ do
 		return response.StatusCode
 	end
 	function ServerAnalytics:flushOnce(final)
+		if self.testMode then
+			-- The cloud test: drop what was collected instead of sending it (the task's rows are not real play).
+			table.clear(self.store.events.rows)
+			table.clear(self.store.fleet.rows)
+			table.clear(self.store.recordings.rows)
+			self.store.identities = {}
+			return nil
+		end
 		local settings = self.settings
 		if not settings or self.flushing then
 			return nil
@@ -1850,7 +1959,7 @@ do
 		self.nextFlushAt = 0
 	end
 	function ServerAnalytics:close()
-		if self.closing or self.stopped then
+		if self.closing or self.stopped or self.testMode then
 			return nil
 		end
 		self.closing = true

package/out/devtools/admin-server.d.ts

@@ -85,7 +85,10 @@ export interface AdminServer {
     kernel?: string;
     /** Its kernel takes pin messages (0.2.3+); undefined when unknown. */
     ab?: boolean;
-    /** Kernel 0.3.2+: "ok" | "failed" (nothing runs) | "unverified" | "degraded" (a deploy failed or rolled back there). */
+    /**
+     * Kernel 0.3.2+: "ok" | "failed" (nothing runs) | "unverified" | "degraded" (a deploy failed or rolled back there);
+     * 0.3.6: "backup" (the backup build baked into the place runs).
+     */
     health?: string;
     /** Kernel 0.3.2+: its applied deploy seq. */
     seq?: number;