modwright 0.1.0

package/knowledge/cyberpunk2077/player.control.yaml

@@ -0,0 +1,918 @@
+game: cyberpunk2077
+topic: player.control
+title: How the engine transfers player control between entities - the player system's control
+  switch, the device takeover's camera-only route, the control flags, and the multiplayer puppet
+facts:
+  - id: cp2077.player.control.local-player-control-existing-object
+    claim: "PlayerSystem exposes a script-visible native that switches the local player's controlled
+      object to any existing entity: LocalPlayerControlExistingObject(entityID: EntityID), declared
+      beside GetLocalPlayerMainGameObject() (the player's main object, V) and
+      GetLocalPlayerControlledGameObject() (the object currently controlled), which can differ."
+    status: verified
+    verified_on: "2.31"
+    source: tools\redmod\scripts\core\systems\playerSystem.script:13-15
+    tags:
+      - playersystem
+      - control-transfer
+      - possession
+      - native
+  - id: cp2077.player.control.cctv-camera-is-the-worked-example
+    claim: The one vanilla caller is the prototype SimpleCCTVCamera. TakeControl(true) caches the main
+      object's id, calls LocalPlayerControlExistingObject on its own entity id, activates its own
+      camera component (m_camera.Activate) and registers input listeners on itself for CameraMouseX,
+      CameraAim and UI_Exit, which then arrive at its OnAction; TakeControl(false) unregisters,
+      deactivates the camera and calls LocalPlayerControlExistingObject with the cached puppet id.
+      So a controlled object receives the player's input through its own listeners and may own the
+      active camera.
+    status: verified
+    verified_on: "2.31"
+    source: tools\redmod\scripts\cyberpunk\devices\cameras\simpleCCTVCamera.script:34-52, :62-70
+    tags:
+      - playersystem
+      - control-transfer
+      - cctv
+      - input
+      - camera
+    related:
+      - cp2077.player.control.local-player-control-existing-object
+  - id: cp2077.player.control.takeover-system-never-switches-the-controlled-object
+    claim: The shipped quickhack device control (cameras, turrets, the sniper nest) does not use the
+      control switch. TakeOverControlSystem.RegisterAsCurrentObject keeps a weak m_controlledObject
+      of its own, registers the system on input (RegisterSystemOnInput), sets the player state
+      machine's IsControllingDevice flag (PSMSetIsPlayerControllDevice) and sends a
+      DeviceStartPlayerCameraControlEvent with the device's yaw and pitch limits; the player
+      system's controlled object stays V throughout (RegisterObjectHandle reads it as the
+      PlayerPuppet). A mod that drove the camera this way got its input under restrictions rather
+      than by ownership.
+    status: verified
+    verified_on: "2.31"
+    source: tools\redmod\scripts\core\systems\takeOverControlSystem.script:314-320, :330-352, :363-392
+    tags:
+      - takeovercontrolsystem
+      - device-control
+      - camera
+      - psm
+    related:
+      - cp2077.player.control.local-player-control-existing-object
+  - id: cp2077.player.control.control-flags-and-their-gates
+    claim: "Entity carries three control natives - IsControlledByAnyPeer, IsControlledByLocalPeer,
+      IsControlledByAnotherClient - and GameObject a fourth, IsPlayerControlled. Shipped gameplay
+      gates on IsPlayerControlled: an NPC's reaction to an instigator that is neither the player nor
+      player-controlled returns early (NPCPuppet.script:5026), the sense component refuses a
+      breacher that is not player-controlled (senseComponent.script:688), and the security area
+      controller and target tracking read it too. A puppet the engine reports as player-controlled
+      would therefore be treated as the player by those paths."
+    status: verified
+    verified_on: "2.31"
+    source: tools\redmod\scripts\core\entity\entity.script:13-15; core\entity\gameObject.script:262;
+      cyberpunk\NPC\NPCPuppet.script:5026; core\components\senseComponent.script:688
+    tags:
+      - isplayercontrolled
+      - control-flags
+      - npc-reactions
+      - senses
+  - id: cp2077.player.control.effect-on-a-scripted-puppet-unread
+    claim: "LocalPlayerControlExistingObject on a ScriptedPuppet crashes the game at once: called from
+      the CET context on a spawned android with nothing else changed, the main thread faulted with
+      an access violation nine bytes into the unnamed engine native at .text+0x102214 (address-file
+      hash 3318354421), reading a field at 0x30CD8 of a null object - the shape of a missing
+      component or controller the switch expects on a player body. No shipped source says what that
+      is; V and, by class design, the multiplayer Muppet (input-handler and locomotion components)
+      are the bodies the engine controls. The input-routing, flag and body-ownership questions are
+      therefore unanswerable through this native for a plain puppet. Decoded from the executable
+      afterwards: the null object is the player system's per-player native object, found by EntityID
+      in a container at PlayerSystem+0x58 by the switch's caller (.text+0x102DA0, hash 2188581991,
+      lookup hash 4218969667) with no null check; V's entry is created by
+      cp::PlayerSystem::OnPlayerMainObjectSpawned (hash 2050111212), which is the hash-resolved
+      routine a plugin would call to register a puppet, at the risk of displacing the main player
+      object."
+    status: verified
+    verified_on: "2.31"
+    source: "%LOCALAPPDATA%\\REDEngine\\ReportQueue\\Cyberpunk2077-20260922-150823-35088-37196
+      (stacktrace.txt, Cyberpunk2077.dmp); bin\\x64\\cyberpunk2077_addresses.json entry
+      0001:00102214"
+    tags:
+      - control-transfer
+      - scriptedpuppet
+      - open-question
+      - launch
+    related:
+      - cp2077.player.control.local-player-control-existing-object
+      - cp2077.player.control.cctv-camera-is-the-worked-example
+  - id: cp2077.player.control.muppet-is-an-input-driven-puppet-without-a-template
+    claim: The multiplayer puppet Muppet extends gamePuppetBase, answers IsPlayer() true, and resolves
+      HitRepresentation and Item_Attachment_Slot slot components; its locomotion is native -
+      gameMuppetLocomotionComponent (eight undecoded bytes on gameMuppetComponent),
+      gameMuppetInputHandlerComponent (no decoded fields) and a gameMuppetMoveState (desiredSpeed,
+      isJumping, isFalling, isDoubleJumped, moveStyle, jump and land frame ids). No shipped entity
+      template is known to carry the components and the addresses file names no Muppet symbol, so it
+      stays an investigation, not a route.
+    status: verified
+    verified_on: "2.31"
+    source: tools\redmod\scripts\cyberpunk\muppet\muppet.script:1-47; RED4ext.SDK ad72777
+      Generated/game/MuppetLocomotionComponent.hpp, MuppetInputHandlerComponent.hpp,
+      MuppetMoveState.hpp
+    tags:
+      - muppet
+      - multiplayer
+      - locomotion
+      - sdk
+  - id: cp2077.player.control.addresses-file-names-no-control-native
+    claim: The game's address file (bin\x64\cyberpunk2077_addresses.json, linker map timestamp 68af45ea)
+      has 987,479 entries and 84 with a symbol string; the only player-system symbol is
+      cp::PlayerSystem::OnPlayerMainObjectSpawned, and nothing names the control switch, the mover
+      or the muppet. Any native beyond the script-visible ones is disassembly work.
+    status: verified
+    verified_on: "2.31"
+    source: ModWright field verification
+    tags:
+      - addresses
+      - symbols
+      - red4ext
+  - id: cp2077.player.control.replacers-are-other-player-bodies
+    claim: 'The game plays V in other bodies through "replacers": PlayerPuppet-class entities spawned
+      from Character records that derive from Character.Player_Replacer_Puppet_Base (itself derived
+      from Character.Player_Puppet_Base, with an empty appearanceName, the tag Replacer and one stat
+      modifier). PlayerPuppet.IsReplacer() is GetRecord().GetID() != Character.Player_Puppet_Base;
+      IsJohnnyReplacer and IsVRReplacer test Character.johnny_replacer and
+      Character.q000_vr_replacer. Thirteen records derive from the replacer base on 2.31:
+      johnny_replacer, braindance_replacer, q000_vr_replacer, e3_v_solo_female (template
+      player_wa_fpp_replacer.ent), kurt_replacer, mq303_lina_replacer, mq304_assassin_replacer_male
+      and _female, q304_netrunner_replacer_theo, _bella and _combined, mws_se5_03_player,
+      android_replacer and android_replacer_f.'
+    status: verified
+    verified_on: "2.31"
+    source: tools\redmod\scripts\cyberpunk\player\player.script:582-605; the vanilla index record/flat
+      rows for Character.Player_Replacer_Puppet_Base and its children
+    tags:
+      - playersystem
+      - replacer
+      - playerpuppet
+      - tweakdb
+      - possession
+    related:
+      - cp2077.player.control.local-player-control-existing-object
+  - id: cp2077.player.control.android-replacer-is-v-in-the-android-app
+    claim: "Character.android_replacer (and _f for the wa body) is a shipped playable android:
+      entityTemplatePath base\\quest\\minor_quests\\mq060\\entities\\mq060_android_replacer_v2.ent,
+      attachment slots WeaponRight, WeaponLeft, RightArm, PersonalLink and Consumable, the player's
+      stat pools, savable, priority Quest. The template's entity class is PlayerPuppet with 111
+      components - V's player_ma_fpp.ent set minus the hairstyle and genitals customization
+      controllers - carrying V's player_man_skeleton.rig, the FPP deformation and shadow rigs, V's
+      arm and fist meshes, gamestateMachineComponent StateMachine, gameFPPCameraComponent camera and
+      TPPRepresentation, and thirteen appearances that point into corpo__android_ma.app (the MaxTac,
+      Arasaka, Kang Tao, Militech and NCPD droids, Kerry's five bodyguards, the mq060 Nitro Youth
+      communication droid) plus a tutorial_ma_dummy_player_fpp default. It is V's body wearing the
+      android's appearance file."
+    status: verified
+    verified_on: "2.31"
+    source: tools\redmod\tweaks\base\gameplay\static_data\database\characters\npcs\records\quest\minor_quests\mq060.tweak
+      (Character.android_replacer);
+      base\quest\minor_quests\mq060\entities\mq060_android_replacer_v2.ent
+    tags:
+      - replacer
+      - android
+      - playerpuppet
+      - template
+      - appearance
+    related:
+      - cp2077.player.control.replacers-are-other-player-bodies
+  - id: cp2077.player.control.replacer-switch-is-a-quest-node
+    claim: "The switch to a replacer body is the quest node type questReplacer_NodeType (a
+      questIGameManagerNonSignalStoppingNodeType): enable Bool, objectRef gameEntityReference,
+      audioOverrideAppearanceName CName. No script-visible function performs it - PlayerSystem's
+      script API has none and Codeware only declares the class. mq060's Yaiba showroom phase runs
+      the protocol: activate the community entry android_replacer (phase spawn, spawner
+      #mq060_communityArea), wait on questCharacterSpawned_ConditionType for it, teleport the local
+      player, then a questGameManagerNodeDefinition with questReplacer_NodeType enable 1 and
+      objectRef names [android_replacer]; the same phase adds the gameplay restrictions ForceStand,
+      NoCombat and NoJump under the source mq060_android_replacer and removes them later, and
+      deactivates the community entry at the end."
+    status: verified
+    verified_on: "2.31"
+    source: RED4ext.SDK ad72777 include/RED4ext/Scripting/Natives/Generated/quest/Replacer_NodeType.hpp;
+      base\quest\minor_quests\mq060\phases\mq060_yaiba_showroom.questphase (nodes 174, 8, 9, 7, 79,
+      94, 206); Codeware 1.20.3 Codeware.Global.reds:30446
+    tags:
+      - replacer
+      - quest-node
+      - questphase
+      - playersystem
+      - possession
+    related:
+      - cp2077.player.control.replacers-are-other-player-bodies
+      - cp2077.player.control.android-replacer-is-v-in-the-android-app
+  - id: cp2077.player.control.player-system-reacts-to-the-controlled-record
+    claim: "The player system's script reacts to the body changing rather than causing it:
+      OnLocalPlayerChanged(controlledObject) reads the controlled puppet's record id and sets
+      UI_PlayerStats.isReplacer (false for Character.Player_Puppet_Base, true for johnny_replacer,
+      kurt_replacer and anything else); OnLocalPlayerPossesionChanged takes gamedataPlayerPossesion
+      (Default, Johnny) and sets the UI theme Possessed for Johnny; OnGameRestored re-applies it
+      from the fact isPlayerPossessedByJohnny. Prereqs NotReplacerPrereq, NotJohnnyReplacerPrereq
+      and NotVRReplacerPrereq gate content on the replacer state."
+    status: verified
+    verified_on: "2.31"
+    source: tools\redmod\scripts\core\systems\playerSystem.script:27-100;
+      core\gameplay\prereqs.script:439-477; RED4ext.SDK Generated/game/data/PlayerPossesion.hpp
+    tags:
+      - playersystem
+      - replacer
+      - possession
+      - blackboard
+      - ui
+    related:
+      - cp2077.player.control.replacers-are-other-player-bodies
+  - id: cp2077.player.control.replacer-enable-stores-the-body-through-its-entity-stub
+    claim: On 2.31 the questReplacer_NodeType execute (fn_15CBD0) calls the player system's virtual at
+      slot 0x208 (fn_15CCB0) to enable and 0x210 (fn_28D8864) to disable. The enable, when no
+      replacer is active, runs a store step fn_15BD98 and then the same control switch the script
+      native LocalPlayerControlExistingObject runs, and returns true without checking the store. The
+      store fetches gameICommunitySystem and gameIEntityStubSystem by their class statics, looks the
+      body's entity id up through the stub system's virtual at 0x1D0, and only if a stub is found
+      asks the community system's virtual at 0x270 for a spawn request built from the stub's spawn
+      data (stub+0x30, its blocks at +0xB0 and +0xB8) and registers it; with no stub it returns
+      false. A body spawned by CET's exEntitySpawner and one spawned by Codeware's
+      DynamicEntitySystem both return false, and the enable then crashes on the first entity-resize
+      event exactly as the bare switch does.
+    status: verified
+    verified_on: "2.31"
+    source: ModWright field verification
+    tags:
+      - replacer
+      - playersystem
+      - entity-stub
+      - community
+      - native
+      - version-pinned
+    detail: "Observed in game (2026-09-22, 21:10), the other half: a body spawned by a mod community
+      entry has a stub, and the store alone returned true. Called alone, the store also fills the
+      player system's stored-replacer slot (+0x604D8). The next enable (slot 0x208) then returns
+      false without switching, and the community's Deactivate no longer despawns the body. The
+      disable (slot 0x210) releases it, after which the enable returns true and switches. So the
+      store belongs inside the enable only."
+    related:
+      - cp2077.player.control.replacer-switch-is-a-quest-node
+      - cp2077.player.control.vanilla-replacer-bodies-spawn-from-communities
+      - cp2077.player.control.community-replacer-body-still-crashes-on-resize
+  - id: cp2077.player.control.community-replacer-body-still-crashes-on-resize
+    claim: Switching the player to a community-spawned Character.android_replacer whose store step
+      succeeded still crashes the game within about a second, at the same site as the bare control
+      switch. The site is fn_1866ED8+0x23, a write at 0x34, reached from the entity-resize handler
+      of an entTriggerActivatorComponent whose native object is null. The crash is the same through
+      the plugin's call to the player system's enable (slot 0x208) and through the vanilla
+      questReplacer_NodeType run from a mod quest phase. The body's six
+      entTriggerActivatorComponents are identical in the replacer template and in V's
+      player_ma_fpp.ent, so the missing native object is runtime state, not template data.
+    status: verified
+    verified_on: "2.31"
+    source: ModWright field verification
+    tags:
+      - replacer
+      - crash
+      - trigger-activator
+      - community
+      - questphase
+    related:
+      - cp2077.player.control.replacer-enable-stores-the-body-through-its-entity-stub
+      - cp2077.player.control.sound-trigger-activator-object-is-gated-and-resize-is-unchecked
+  - id: cp2077.player.control.sound-trigger-activator-object-is-gated-and-resize-is-unchecked
+    claim: entTriggerActivatorComponent (type static exe+0x342D7D8, size 0x150, vtable .rdata 0x2BA8B70
+      on 2.31) keeps its physics trigger object at +0x140, just past its properties (height +0x128,
+      radius +0x12C, channels +0x130, maxContinousDistance +0x134, enableCCD +0x138).
+      fn_422FE8(component) creates the object through a system reached from the owner's runtime
+      scene. For an activator whose channels carry bit 5 (TC_SoundAmbientArea, the
+      SoundTriggerActivator bound to the camera), the component's bounds method fn_3BD58C creates
+      the object only while the id of the entity at component+0x120 equals a global id at
+      *(*(*(exe+0x342AC00)+0xA8)+0x140)+0x250, and destroys it otherwise. The component's
+      entity-resize handler fn_1866EA0 passes +0x140 to fn_1866ED8, which writes the new extents at
+      +0x28..+0x34 with no null check. So a resize that reaches a body before the body's first
+      bounds pass crashes with a write at 0x34.
+    status: verified
+    verified_on: "2.31"
+    source: ModWright field verification
+    tags:
+      - trigger-activator
+      - crash
+      - sound
+      - physics
+      - version-pinned
+    detail: >-
+      That the gate id is the audio listener is inferred from the channel alone. A cyberware mod's
+      plugin (version 0.1.6) guards the handler with a RED4ext hook and reads the gate id beside V's
+      and the body's.
+
+      Observed in game (2026-09-22, 22:13): the gate. Before the switch the gate id was V's (1).
+      After the replacer enable it was the body's (9011773), and V's three activators were disabled
+      with no object. After the disable it was V's again; V's activators were back, and the body's
+      sound object was gone.
+    related:
+      - cp2077.player.control.community-replacer-body-still-crashes-on-resize
+      - cp2077.player.control.replacer-body-walk-chain
+  - id: cp2077.player.control.replacer-body-walk-chain
+    claim: >-
+      The player can be switched into the shipped android replacer body and back, walking, looking
+      and jumping with V's own state machine animating the body's legs, by this chain on 2.31: 1. a
+      mod community entry spawns Character.android_replacer, so the
+         body has an entity stub;
+      2. the player system's replacer enable (slot 0x208) stores it and
+         switches control;
+      3. right after the enable, the body's missing sound-ambient trigger
+         object is made with fn_422FE8;
+      4. the replacer disable (slot 0x210) hands control back. Despawning the community body after
+      such a round trip crashed the game in the entity's detach (fn_1B3A1C) on a component whose
+      vtable pointer was null. The same entry had despawned cleanly when the body was never the
+      player.
+    status: verified
+    verified_on: "2.31"
+    source: ModWright field verification
+    tags:
+      - replacer
+      - control-transfer
+      - community
+      - trigger-activator
+      - crash
+    detail: The despawn crash was the caller's fault. The mod's plugin released the entity handle it had
+      already handed to the by-value enable (see
+      cp2077.player.control.replacer-enable-takes-the-handle-by-value), so the body was freed early.
+      A later plugin version (0.1.7) fixes it; not yet tested in game.
+    related:
+      - cp2077.player.control.sound-trigger-activator-object-is-gated-and-resize-is-unchecked
+      - cp2077.player.control.vanilla-replacer-bodies-spawn-from-communities
+      - cp2077.player.control.replacer-enable-takes-the-handle-by-value
+  - id: cp2077.player.control.replacer-enable-takes-the-handle-by-value
+    claim: "The player system's replacer enable (slot 0x208, fn_15CCB0 on 2.31) takes its Handle<Entity>
+      argument by value. Under the MSVC x64 ABI the caller passes a pointer to a temporary, and the
+      function itself releases it on every path (thunk_FUN_140100bc8(param_2) before it returns).
+      The quest node's execute fn_15CBD0 copies the resolved handle into a local with an explicit
+      reference increment, passes its address, and never releases that local. A native caller must
+      do the same: hand over a copy and not destruct it. Destructing it drops one reference per
+      call, and the body is later freed while still in use. The store step fn_15BD98 and the switch
+      fn_15C2A4 take the same handle by reference."
+    status: verified
+    verified_on: "2.31"
+    source: ModWright field verification
+    tags:
+      - replacer
+      - native
+      - abi
+      - handle
+      - crash
+      - version-pinned
+    related:
+      - cp2077.player.control.replacer-enable-stores-the-body-through-its-entity-stub
+  - id: cp2077.player.control.v-left-behind-under-a-replacer
+    claim: >-
+      While a replacer body is the controlled object, V's main PlayerPuppet renders as her
+      first-person entity, standing and headless. Three things were observed: - Queueing
+      ActivateTPPRepresentationEvent on her shows her third-person
+        body and head. This is the event
+        TakeOverControlSystem.EnablePlayerTPPRepresenation queues when V takes
+        over a camera or turret. Items.PlayerWaTppHead slotted in
+        AttachmentSlots.TppHead alone showed nothing.
+      - A workspot played on her (PlayInDeviceSimple) does animate her. - Her state machine does not
+      run: GetPlayerStateMachineBlackboard()
+        returns nothing, and setting the animation input 'crouch' directly
+        changes nothing.
+      So vanilla's takeover crouch cannot be reproduced on her through the state machine. That
+      crouch is the Crouch locomotion state, entered from the PSM blackboard's IsControllingDevice
+      (CrouchDecisions), with CrouchEvents setting the input 'crouch' to 1.0.
+    status: verified
+    verified_on: "2.31"
+    source: ModWright field verification
+    tags:
+      - replacer
+      - tpp
+      - representation
+      - workspot
+      - crouch
+      - psm
+    related:
+      - cp2077.player.control.replacer-body-walk-chain
+  - id: cp2077.player.control.takeover-pose-is-the-security-cam-anim-set
+    claim: "V's third-person animation sets for the security-camera takeover are
+      base\\animations\\player\\female\\body\\tpp_pwa_security_cam.anims (rig
+      base\\characters\\entities\\player\\player_woman_skeleton.rig) and
+      base\\animations\\player\\male\\body\\tpp_pma_security_cam.anims (rig
+      player_man_skeleton.rig). Each holds three clips of 12.23 s: idle_hacking, fpp_crouch_idle and
+      fpp_idle_stand."
+    status: verified
+    verified_on: "2.31"
+    source: the mod's .modwright/cache/templates/cyberpunk2077/2.31 entries
+      cp2077/anims/tpp_pwa_security_cam.anims and tpp_pma_security_cam.anims (animAnimSet
+      animations[].animation.name, duration, rig)
+    tags:
+      - animation
+      - takeover
+      - tpp
+      - workspot
+      - player
+    detail: A cyberware mod (v0.12.3) plays them on V while the replacer body is possessed, through two
+      workspots of its own (fpp_crouch_idle, idle_hacking). Which clip is the pose the game shows
+      during a takeover is not yet confirmed in game.
+    related:
+      - cp2077.player.control.v-left-behind-under-a-replacer
+  - id: cp2077.player.control.v-tpp-representation-lists-her-appearance-slots
+    claim: >-
+      V's player_ma_fpp.ent carries a gameTPPRepresentationComponent named TPPRepresentation with: -
+      affectedAppearanceSlots: AttachmentSlots.Chest, Torso, Outfit, Head,
+        Eyes and RightArm;
+      - attachedObjectInfo: Items.PlayerMaTppHead in AttachmentSlots.TppHead; - detachedObjectInfo:
+      Items.PlayerFppHead in TppHead. So activating the representation switches those slots' items
+      and the head by itself. mq060_android_replacer_v2.ent's TPPRepresentation lists no appearance
+      slots and attaches nothing. Its visible body is the appearance's own third-person garment
+      meshes: for the Arasaka droid, h0 (head), t0 (torso), a0 (arms) and l0 (legs), all bound to
+      V's skeleton. Those show in the first-person view.
+    status: verified
+    verified_on: "2.31"
+    source: ModWright field verification
+    tags:
+      - replacer
+      - tpp
+      - representation
+      - appearance
+      - fpp
+    related:
+      - cp2077.player.control.v-left-behind-under-a-replacer
+  - id: cp2077.player.control.android-replacer-loads-the-showroom-hud
+    claim: mq060_android_replacer_v2.ent's WidgetHudComponent 'hud_component' (CRUID
+      2309867932290777088) loads base\gameplay\gui\hud_yaiba_proxy.inkhud with no external material.
+      V's player_ma_fpp.ent loads base\gameplay\gui\prototype_hud.inkhud with
+      base\materials\ui_main_hud.mt. So playing as the android replacer shows mq060's showroom proxy
+      HUD overlays instead of V's HUD.
+    status: verified
+    verified_on: "2.31"
+    source: ModWright field verification
+    tags:
+      - replacer
+      - hud
+      - ui
+      - template
+  - id: cp2077.player.control.vanilla-replacer-bodies-spawn-from-communities
+    claim: "Every vanilla replacer body read so far is spawned through the community system before
+      questReplacer_NodeType runs, never placed as a plain entity: mq060 activates the community
+      entry android_replacer (questCommunityTemplate_NodeType, spawner #mq060_communityArea); q304's
+      debug replacer setup phase activates a spawn set (questSpawnSet_NodeType Activate, reference
+      #q304_replacer, entries replacer_theo / replacer_bella, phase default), waits on
+      questCharacterSpawned_ConditionType, teleports the body onto the local player
+      (questTeleportPuppetNodeDefinition, destination refLocalPlayer), hides the player
+      (questShowWorldNode_NodeType isPlayer, show 0), and only then enables the replacer. Both
+      entries sit in the always-loaded community registry with alwaysSpawned true_, one time period
+      Day, quantity 1 and one spot each, inactive on start."
+    status: verified
+    verified_on: "2.31"
+    source: ep1\quest\main_quests\q304\phases\subphases\q304_debug_replacer_setup.questphase (nodes 3,
+      4, 5, 6, 9, 14); base\quest\minor_quests\mq060\phases\mq060_yaiba_showroom.questphase (node
+      174); base\worlds\03_night_city\_compiled\default\always_loaded_1.streamingsector from
+      ep1_1_nightcity.archive (the worldCommunityRegistryNode's items for community ids
+      14864550580650116736 and 2958581958812022049)
+    tags:
+      - replacer
+      - community
+      - spawn-set
+      - questphase
+      - entity-stub
+    related:
+      - cp2077.player.control.replacer-switch-is-a-quest-node
+      - cp2077.quests.scenes.vanilla-quest-community-shape
+  - id: cp2077.player.control.replacer-take-death-guard-releases
+    claim: "While the replacer body is the player, vanilla god mode Immortal on the body
+      (GodModeSystem.AddGodMode, with the mod's own source name) plus a Health stat-pool listener
+      turns the body's death into a release: shot down in real combat, the body's health stopped at
+      1%, the listener fired, the take released on the next frame (the replacer disable), and V came
+      back with no flatline screen. An earlier run without the guard ended in the flatline screen."
+    status: verified
+    verified_on: "2.31"
+    source: ModWright field verification
+    tags:
+      - replacer
+      - death
+      - godmode
+      - immortal
+      - statpool
+      - release
+    related:
+      - cp2077.player.control.v-left-behind-under-a-replacer
+  - id: cp2077.player.control.v-crouch-idle-is-in-player-locomotion
+    claim: V's own crouch idle is the clip fpp_crouch_idle in
+      base\animations\player\female\body\player_locomotion.anims (player_woman_skeleton.rig) and
+      ...\male\body\player_locomotion.anims (player_man_skeleton.rig), 6.77 s on both. The
+      security-cam sets tpp_pwa_security_cam.anims / tpp_pma_security_cam.anims, which V's FPP
+      entity also lists, hold another clip of the same name at 12.23 s, the length of their
+      idle_hacking and fpp_idle_stand. tpp_pwa_locomotion.anims holds only idle_hacking.
+    status: verified
+    verified_on: "2.31"
+    source: basegame_1_engine.archive and basegame_4_animation.archive (the animAnimation names and
+      durations); base\characters\entities\player\player_wa_fpp.ent (its animation set list)
+    tags:
+      - player
+      - crouch
+      - animation
+      - anims
+      - workspot
+      - pose
+    detail: "The file-read claim stands. The in-game reading drawn from it earlier does not: a later
+      test showed no workspot ever played on V under the take, and the takeover pose in question is
+      vanilla's camera-takeover pose, not V's plain crouch
+      (cp2077.player.control.v-takeover-pose-is-the-device-control-state)."
+  - id: cp2077.player.control.v-takeover-pose-is-the-device-control-state
+    claim: "V's pose during a camera or turret takeover comes from her state machine's device-control
+      flags: PlayerStateMachine.IsControllingDevice and IsInteractingWithDevice on her local
+      blackboard, set the way TakeOverControlSystem.PSMSetIsPlayerControllDevice sets them. Set
+      while V is still the controlled player and followed by the replacer enable, V is left behind
+      in that pose, seen from the body."
+    status: verified
+    verified_on: "2.31"
+    source: ModWright field verification
+    tags:
+      - replacer
+      - pose
+      - psm
+      - blackboard
+      - takeover
+      - device-control
+    related:
+      - cp2077.player.control.v-left-behind-under-a-replacer
+  - id: cp2077.player.control.workspot-play-on-v-before-the-replacer-does-nothing
+    claim: "WorkspotGameSystem.PlayInDeviceSimple(device, V, ...) on V's main object, called right after
+      the replacer enable, leaves her out of any workspot: IsActorInWorkspot(V) false,
+      IsWorkspotEnabled(V) false, the extended info inactive and GetDeviceUser(device) none. The
+      q104, security-cam and stance workspots all looked the same because none played."
+    status: verified
+    verified_on: "2.31"
+    source: ModWright field verification
+    tags:
+      - replacer
+      - workspot
+      - pose
+  - id: cp2077.player.control.player-tpp-head-wrapper-gates-the-security-cam-idle
+    claim: "V's FPP entity lists tpp_pwa_security_cam.anims (tpp_pma for the male rig) at priority 199,
+      gated by the variable player_tpp_head, the friendlyName of Items.PlayerWaTppHead, the head her
+      TPPRepresentation component attaches in AttachmentSlots.TppHead. Item friendlyNames are
+      anim-wrapper keys: every weapon set is gated by its weapon's name the same way. While
+      player_tpp_head is on, V's idle clips resolve to the security-cam set: the takeover pose
+      unarmed, a crouch idle armed."
+    status: verified
+    verified_on: "2.31"
+    source: base\characters\entities\player\player_wa_fpp.ent (entAnimatedComponent root,
+      animations.gameplay); TweakDB Items.PlayerWaTppHead (friendlyName, entityName
+      player_wa_tpp_head);
+      tools\redmod\scripts\core\components\animationControllerComponent.script:178
+      (SetAnimWrapperWeight)
+    tags:
+      - player
+      - animation
+      - anim-wrapper
+      - tpp
+      - idle
+      - pose
+    detail: "After the releases in one in-game test the variable stayed on: the TppHead slot held
+      PlayerFppHead again, a second DeactivateTPPRepresentationEvent and a full show/hide cycle with
+      V controlled changed nothing. A later mod version (v0.12.9) sets the wrapper to 0
+      (AnimationControllerComponent.SetAnimWrapperWeight) after the release, and in the next test
+      V's idle was normal after the release (\"no pose or crouch, that is working correctly\")."
+  - id: cp2077.player.control.replacer-body-first-person-mesh-set
+    claim: "The android replacer body in first person shows a second body with a weapon drawn, and V's
+      own hands next to the android's. Hiding the droid head garment (h0_007_ma_droid__heavy)
+      removes the second body. Hiding V's first-person arm meshes on the body (right_arm, left_arm:
+      a0_000_pwa_fpp__full_r/l), her nails and her personal link removes her hands. The droid torso,
+      the proxy mesh and V's torso change nothing. Gun and fists both work with that set hidden."
+    status: verified
+    verified_on: "2.31"
+    source: ModWright field verification
+    tags:
+      - replacer
+      - fpp
+      - meshes
+      - garment
+      - first-person
+    related:
+      - cp2077.player.control.v-tpp-representation-lists-her-appearance-slots
+  - id: cp2077.player.control.npc-toggled-mesh-returns-when-the-player-moves
+    claim: IComponent.Toggle(false) on an NPC's visual components (garment meshes) hides them only until
+      the player moves. Then they are enabled again, even with the NPC's
+      entVisualControllerComponent toggled off. On the replacer body (the player) the same toggles
+      held.
+    status: verified
+    verified_on: "2.31"
+    source: ModWright field verification
+    tags:
+      - npc
+      - meshes
+      - visibility
+      - hide
+  - id: cp2077.player.control.spawn-set-despawn-only-its-own
+    claim: spawn::Set::DespawnObject (hash 3168866665, exe+0x65CEFC on 2.31), which CET's
+      exEntitySpawner.Despawn calls on its own set, searches that set's spawned-entity array (+0x10,
+      count +0x1C) for the entity and returns without doing anything when it isn't there. It
+      despawns only what the set spawned, never an arbitrary world NPC.
+    status: verified
+    verified_on: "2.31"
+    source: maximegmd/CyberEngineTweaks src/reverse/RTTIExtender.cpp (TEMP_Spawner::Despawn) and
+      src/reverse/Addresses.h; Cyberpunk2077.exe 2.31 at rva 0x65CEFC
+    tags:
+      - spawn
+      - despawn
+      - cet
+      - npc
+  - id: cp2077.player.control.device-pose-needs-a-lead-before-the-switch
+    claim: V's device-control flags give the camera-takeover pose only when her state machine runs with
+      them before the replacer enable. Set in the same frame as the enable, V stays in her current
+      stance. Set a second or two ahead, she moves into the pose as the take begins.
+    status: verified
+    verified_on: "2.31"
+    source: ModWright field verification
+    tags:
+      - replacer
+      - pose
+      - psm
+      - timing
+    related:
+      - cp2077.player.control.v-takeover-pose-is-the-device-control-state
+  - id: cp2077.player.control.npc-chunkmask-zero-hides-until-reregistered
+    claim: "Setting chunkMask to 0 on an NPC's skinned meshes (entSkinnedMeshComponent.chunkMask;
+      MeshComponent has its own field) hides them durably. The engine re-enables them when the
+      player moves, but they draw nothing. The reverse needs a re-register: with the original masks
+      back on enabled components the NPC stays invisible until each is toggled off and on, and then
+      shows at once."
+    status: verified
+    verified_on: "2.31"
+    source: ModWright field verification
+    tags:
+      - npc
+      - meshes
+      - visibility
+      - hide
+      - chunkmask
+    related:
+      - cp2077.player.control.npc-toggled-mesh-returns-when-the-player-moves
+  - id: cp2077.player.control.npc-weapon-and-weakspots-are-separate-objects
+    claim: "Hiding an NPC's own visual components leaves its held weapon and its weak points visible.
+      The weapon is the ItemObject in AttachmentSlots.WeaponRight or WeaponLeft (the android's
+      rifle: a gameweaponObject with 19 visual components). The weak points are WeakspotObjects
+      listed by the NPC's WeakspotComponent.GetWeakspots. Each needs the same hide. For weak points,
+      vanilla also blocks the highlight and the targeting with a WeakspotRequestAttributeChangeEvent
+      (blockHighlight, blockDamage)."
+    status: verified
+    verified_on: "2.31"
+    source: ModWright field verification
+    tags:
+      - npc
+      - weapon
+      - weakspot
+      - hide
+  - id: cp2077.player.control.v-detection-cyberware-fires-on-the-body
+    claim: "While V controls the replacer body, the body is the player: enemies that see it raise the
+      global stealth detection, and V's Synaptic Accelerator fires. The accelerator is a
+      DetectionMeterEffector applied on V: it listens to UI_Stealth.highestHostileDetectionOnPlayer
+      (or highestDetectionOnPlayer) and applies its status effect in stacks as the detection passes
+      each step."
+    status: verified
+    verified_on: "2.31"
+    source: ModWright field verification
+    tags:
+      - replacer
+      - cyberware
+      - detection
+      - stealth
+      - effector
+    detail: A mod version (v0.12.10) wraps DetectionMeterEffector.OnDetectionChanged to return early
+      while a take is active, and in a later test the body under a hostile android's detection left
+      it quiet ("no synaptic accelerator - it drew its weapon but not attacking"); it fired again
+      once V was back.
+  - id: cp2077.player.control.replacer-take-works-end-to-end
+    claim: >-
+      The replacer-body take works end to end on 2.31. Its pieces: - V's device-control flags set a
+      second or more before the enable, from
+        the quickhack's upload start or a 1 s console lead;
+      - the enable on a community-spawned replacer body; - V shown in third person; - a first-person
+      pass hiding the droid head and V's own first-person
+        arms, nails and personal link;
+      - the target's meshes, weapon-slot items and weak points hidden with
+        chunkMask 0, and the target frozen;
+      - god mode Immortal and a health-floor release; - a release that clears V's flags and the
+      player_tpp_head wrapper,
+        and restores the target with the masks back and an off-on.
+      The real quickhack starts it and ends it on the hack's timer. A player rifle preset
+      (Items.Preset_Masamune_Arasaka_2077) equipped on the body sits in the android's hands and
+      fires.
+    status: verified
+    verified_on: "2.31"
+    source: ModWright field verification
+    tags:
+      - replacer
+      - take
+      - end-to-end
+      - quickhack
+      - weapon
+    related:
+      - cp2077.player.control.device-pose-needs-a-lead-before-the-switch
+      - cp2077.player.control.npc-chunkmask-zero-hides-until-reregistered
+      - cp2077.player.control.replacer-take-death-guard-releases
+  - id: cp2077.player.control.replacer-body-cannot-be-dismembered
+    claim: "The android replacer template (mq060_android_replacer_v2.ent) carries no dismemberment
+      component: its puppet's dismembermentComponent field is null, and no DismembermentComponent is
+      listed. V's FPP templates (player_ma_fpp.ent, player_wa_fpp.ent) have none either. Only their
+      skinned meshes' acceptDismemberment flags mention it. So the body can't lose limbs, and of its
+      damage only health can carry to the NPC it stands for. Vanilla dismembers an NPC through
+      DismembermentComponent.RequestDismemberment(obj, bodyPart, woundType, …), which queues a
+      DismembermentEvent for the NPC's own component."
+    status: verified
+    verified_on: "2.31"
+    source: the mod's .modwright/cache/templates/cyberpunk2077/2.31 entries for
+      mq060_android_replacer_v2.ent and player_ma_fpp.ent;
+      base\characters\entities\player\player_wa_fpp.ent;
+      tools\redmod\scripts\core\components\dismembermentComponent.script:59-124
+    tags:
+      - replacer
+      - dismemberment
+      - damage
+      - template
+  - id: cp2077.player.control.npc-equipment-points-at-player-presets
+    claim: An NPC's equipment pools name the same item records the player uses. Character.android_guards
+      (base arasaka_android_android2_masamune_ma) has primaryEquipment pool
+      Character.ArasakaAssaultRiflePool, whose entries are Items.Preset_Masamune_Arasaka_2077,
+      Items.Preset_Kyubi_Military and Items.Preset_Masamune_Military, each equipped in
+      AttachmentSlots.WeaponRight. AIActionTransactionSystem.CalculateEquipmentItems(puppet,
+      'PrimaryEquipment', items, powerLevel) rolls the pool with a seed from the puppet's entity id,
+      so it computes the same pick the NPC got.
+    status: verified
+    verified_on: "2.31"
+    source: .modwright-cache/cyberpunk2077/vanilla.sqlite (Character.android_guards chain,
+      Character.ArasakaAssaultRiflePool and its inlines);
+      tools\redmod\scripts\core\systems\transactionSystem.script:104-200
+    tags:
+      - npc
+      - equipment
+      - weapon
+      - tweakdb
+  - id: cp2077.player.control.replacer-take-carries-health-and-weapon
+    claim: The replacer take can carry the target's state into the body and back. The target's Health
+      share set on the body right after the possess (StatPoolsSystem.RequestSettingStatPoolValue,
+      percentage) shows on the HUD. The target's own weapon record, given to the body with an
+      EquipRequest, is drawn and fires. The body's Health share set on the target at a non-floor
+      release leaves it alive at that share.
+    status: verified
+    verified_on: "2.31"
+    source: ModWright field verification
+    tags:
+      - replacer
+      - take
+      - health
+      - weapon
+      - statpool
+    related:
+      - cp2077.player.control.npc-equipment-points-at-player-presets
+      - cp2077.player.control.replacer-body-cannot-be-dismembered
+    detail: "Open: the bridge's GetStatPoolValue(bodyId, Health, true) read 100% while the HUD showed
+      the carried 60%. After a later set to 35% both agreed."
+  - id: cp2077.player.control.scaffolded-replacer-body-matches-hand-built
+    claim: A replacer body generated by ModWright's new-player-replacer scaffold (its own .ent copy of
+      the android replacer template with one appearance and V's HUD rewritten in both HUD component
+      copies, a TweakXL record deriving Character.Player_Replacer_Puppet_Base, and the community
+      sector, block and fact-gated phase) works in place of a hand-built one. ArchiveXL merges its
+      phase and block, TweakXL reads the record without error, the community spawns a PlayerPuppet
+      of the new record with IsReplacer true at the spot, the plugin's replacer enable switches
+      control to it with V's own HUD and no ArchiveXL HUD patch, and the whole hack take runs on it.
+    status: verified
+    verified_on: "2.31"
+    source: ModWright field verification
+    tags:
+      - replacer
+      - scaffold
+      - hud
+      - community
+      - acceptance
+    related:
+      - cp2077.player.control.replacer-take-works-end-to-end
+      - cp2077.player.control.android-replacer-loads-the-showroom-hud
+    detail: The bare replacer-on switch leaves V headless, as in earlier tests; the take (the mod's
+      possess command or the hack) is what shows her whole. A body that had been the player
+      despawned cleanly with body-off.
+  - id: cp2077.player.control.replacer-body-is-the-player-to-npcs
+    claim: "While a replacer body is the player, every NPC treats it as the player, whatever it looks
+      like. A hostile squad attacked the body of its own Scavenger android. A target NPC hidden
+      during the take (visuals off, collision off, AI component toggled off, its time dilated to
+      0.0001) still sensed and reacted: the body's gunfire, which comes from the player, or V
+      standing in its sight, put it into combat and onto the minimap."
+    status: verified
+    verified_on: "2.31"
+    source: ModWright field verification
+    tags:
+      - replacer
+      - player
+      - attitude
+      - senses
+      - npc
+      - take
+    related:
+      - cp2077.player.control.replacer-enable-stores-the-body-through-its-entity-stub
+    detail: A later mod version (v0.12.24) gives the body the target's attitude group, and turns the
+      hidden target's SenseComponent and ReactionManagerComponent off for the take; untested.
+  - id: cp2077.player.control.teleport-to-node-streams-a-raw-teleport-falls-through
+    claim: "TeleportationFacility.TeleportToNode(player, a fast-travel point's marker) takes V across
+      the map and the destination streams in. A raw TeleportationFacility.Teleport of V to a far
+      position, 1 m or 5 m above the target's height, fell through the not-yet-streamed ground, and
+      the game put V back. A fast-travel point is registered for this only once the save has it:
+      Arasaka Waterfront FT 03 and Dogtown's Luxor High were \"not a registered point\"."
+    status: verified
+    verified_on: "2.31"
+    source: ModWright field verification
+    tags:
+      - teleport
+      - fast-travel
+      - streaming
+      - player
+      - bridge
+  - id: cp2077.player.control.a-hustle-pin-is-found-by-its-journal-id
+    claim: "An NCPD hustle's map pin is found from script by its quest id: among
+      MappinSystem.GetAllMappins(), the PointOfInterestMappin whose
+      JournalManager.GetEntry(GetJournalPathHash()).GetId() is the id (for example ma_wat_nid_01).
+      The Repeatable NCPD Gigs mod finds hustles this way. Its GetWorldPosition is the hustle's
+      position, and the FastTravelMappin nearest it (GetPointData) is the terminal to travel to."
+    status: verified
+    verified_on: "2.31"
+    source: ModWright field verification
+    tags:
+      - journal
+      - mappin
+      - hustle
+      - ncpd
+      - bridge
+  - id: cp2077.player.control.v-left-unable-to-walk-after-a-release
+    claim: "After a take ends, V can be left able to look but not walk, though her state machine reads
+      clean (no movement restriction, not in a workspot, the device-control pose off). The recovery,
+      in a quickhack mod, is a free-V routine (an instant workspot exit if she is still in one, the
+      pose entity deleted, the device pose off, the player_tpp_head wrapper at 0), run after every
+      release: the replacer-body take has done it at 0.5 s and 2 s since v0.12.8, and the drone take
+      from v0.12.35 after the Wyvern died (at 0.1 s and 1.5 s). A separate cleanup that strips the
+      NoJump and NoRadialMenus restrictions fixes a different leftover."
+    status: verified
+    verified_on: "2.31"
+    source: ModWright field verification
+    tags:
+      - release
+      - take
+      - v
+      - movement
+      - workspot
+      - recovery
+    related:
+      - cp2077.player.control.replacer-take-death-guard-releases
+  - id: cp2077.player.control.the-game-ships-human-replacers
+    claim: "Besides the androids, the game's replacer records (deriving
+      Character.Player_Replacer_Puppet_Base) include human bodies on V's rig:
+      Character.mq304_assassin_replacer_male (ep1 assasin_ma_replacer.ent, on
+      player_man_skeleton.rig, wearing nicola_ma.app _mq304__nicola_fpp), johnny_replacer,
+      kurt_replacer, mq303_lina_replacer, q304_netrunner_replacer_bella / _theo / _combined,
+      e3_v_solo_female (player_wa_fpp_replacer.ent), mws_se5_03_player, q000_vr_replacer and
+      braindance_replacer. A male human replacer template is the base for a body that wears a male
+      NPC's look, as the android replacer is for androids."
+    status: verified
+    verified_on: "2.31"
+    source: ModWright field verification
+    tags:
+      - replacer
+      - human
+      - body
+      - template
+    related:
+      - cp2077.player.control.replacer-take-death-guard-releases
+  - id: cp2077.player.control.human-look-on-a-human-replacer-body
+    claim: "A male human NPC's look worn by a replacer body built on the game's male assassin replacer
+      template (V's rig) renders correctly and plays normally: the man_base-rig gang meshes fit
+      player_man_skeleton, the look's own cyberarm shows, and movement, behaviour and firing are
+      V's. In first person the look's head group and its neck items (a spiked choker) must be
+      hidden, before the switch or they flash."
+    status: verified
+    verified_on: "2.31"
+    source: ModWright field verification
+    tags:
+      - replacer
+      - human
+      - body
+      - look
+      - fpp
+    related:
+      - cp2077.player.control.the-game-ships-human-replacers
+      - cp2077.npc.appearance.a-human-looks-head-group
+  - id: cp2077.player.control.weapon-safe-reads-is-aiming-at-friendly
+    claim: "Out of combat the player's state machine lowers the gun (the weapon-safe state) and the
+      crosshair shows friendly when PlayerPuppet .IsAimingAtFriendly() is true. It is set on look-at
+      changes from PlayerPuppet.IsTargetFriendlyNPC: the target's attitude toward the player is
+      AIA_Friendly, unless the target carries BaseStatusEffect.IgnoreWeaponSafe. A replacer body
+      that is the player inherits this against whatever group reads Friendly toward it.
+      BaseStatusEffect.DoNotBlockShootingOnFriendlyFire is the NPC AI's friendly-fire condition, not
+      the player's."
+    status: verified
+    verified_on: "2.31"
+    source: tools\redmod\scripts\cyberpunk\player\psm\defaultTransition.script:163-170
+      (ShouldEnterSafe); crosshairTransitions.script:59; cyberpunk\player\player.script:786-821,
+      1732-1756; core\ai\actions\tweakAIConditionChecks.script:2178
+    tags:
+      - player
+      - weapon-safe
+      - attitude
+      - friendly
+      - replacer
+    detail: A quickhack mod (v0.12.66) wraps IsAimingAtFriendly to return false for the take's body
+      (untested when recorded).