$ USD
  • $ USD
  • € EUR
  • Britse pond (£ GBP)
  • $ AUD
  • R$ BRL
  • CHF CHF
  • ¥ JPY
Hoe Schrijf Je FiveM Scripts Met AI: Complete Ontwikkelaar&#…

Hoe FiveM Scripts te schrijven met AI

Het schrijven van FiveM scripts vereiste traditioneel diepgaande kennis van Lua, JavaScript en de FiveM API. Tegenwoordig veranderen AI-tools zoals Claude Code, GitHub Copilot en ChatGPT hoe ontwikkelaars alles creëren, van ESX scripts tot complexe standalone systemen. Deze uitgebreide gids laat je precies zien hoe je AI kunt inzetten voor FiveM-ontwikkeling, met concrete voorbeelden en bewezen workflows.

Waarom AI-ondersteunde FiveM Ontwikkeling Alles Verandert

Traditionele FiveM-scriptontwikkeling vereist het gelijktijdig beheersen van meerdere technologieën: Lua voor server-side logica, JavaScript voor NUI-interfaces, SQL voor databasebewerkingen en de uitgebreide FiveM native functies bibliotheek. AI tools can speed up routine drafting and debugging, but they do not replace learning the FiveM runtime, framework APIs or security boundaries.

Echte impact voor servereigenaren:

  • Draft routine boilerplate faster when requirements and dependencies are explicit
  • Genereer direct standaardcode voor veelvoorkomende patronen
  • Debug complexe synchronisatieproblemen tussen client en server
  • Converteer ideeën direct in werkende prototypes

Essentiële AI-tools voor FiveM-ontwikkeling

Claude Code (Anthropic)

Claude Code can review context across multiple files. Installation methods change, so follow the current official Claude Code documentation linked above instead of copying an unverified third-party package command.

FiveM-specifieke voordelen:

  • Genereert volledige fxmanifest.lua-configuraties
  • Begrijpt ESX-, QBCore- en VRP-frameworks
  • Creëert automatisch overeenkomende client/server-event handlers

GitHub Copilot

Integreert direct in VS Code en biedt realtime suggesties terwijl u typt. Bijzonder effectief voor:

  • Aanvullen van native functieaanroepen
  • Genereren van event handler-patronen
  • Automatisch aanvullen van database queries

ChatGPT met aangepaste instructies

Configureer ChatGPT specifiek voor FiveM door aangepaste instructies in te stellen:

You are a FiveM script developer. Always use:
- Lua 5.4 syntax for server scripts
- Modern JavaScript for client scripts
- FiveM natives from the latest game build
- Proper event security with server-side validation

Stap-voor-stap: Je eerste AI-gegenereerde script maken

Laten we een compleet voertuigshop-script bouwen met Claude Code, waarbij de volledige workflow van concept tot implementatie wordt gedemonstreerd.

Stap 1: Definieer Duidelijke Vereisten

Maak een requirements.md bestand:

## Vehicle Shop Script Requirements
- Framework: ESX Legacy 1.9.0+
- Database: MySQL with oxmysql
- Features:
 - Browse vehicles by category
 - Test drive system with time limit
 - Finance options with weekly payments
 - Admin commands for adding vehicles
- UI: Modern NUI with React

Stap 2: Genereer de Resource Structuur

Commando aan Claude Code:

claude-code generate "Create a complete FiveM vehicle shop resource based on requirements.md"

Dit genereert:

vehicle_shop/
├── fxmanifest.lua
├── config.lua
├── server/
│ ├── main.lua
│ ├── database.lua
│ └── commands.lua
├── client/
│ ├── main.lua
│ ├── showroom.lua
│ └── testdrive.lua
├── ui/
│ ├── index.html
│ ├── style.css
│ └── script.js
└── sql/
 └── vehicle_shop.sql

Stap 3: AI-gegenereerde fxmanifest.lua

fx_version 'cerulean'
game 'gta5'

author 'YourName'
description 'AI-Generated Vehicle Shop'
version '1.0.0'

shared_scripts {
 '@es_extended/imports.lua',
 '@ox_lib/init.lua',
 'config.lua'
}

client_scripts {
 'client/*.lua'
}

server_scripts {
 '@oxmysql/lib/MySQL.lua',
 'server/*.lua'
}

ui_page 'ui/index.html'

files {
 'ui/index.html',
 'ui/style.css',
 'ui/script.js'
}

dependencies {
 'es_extended',
 'oxmysql',
 'ox_lib'
}

Stap 4: Implementeer Kernfunctionaliteit met AI

Prompt voor Server-Side Voertuig Laden:

-- AI-Generated: server/database.lua
local vehicles = {}

CreateThread(function()
 local result = MySQL.query.await('SELECT * FROM vehicle_shop WHERE stock > 0')
 
 for i = 1, #result do
 local vehicle = result[i]
 vehicles[vehicle.model] = {
 model = vehicle.model,
 name = vehicle.name,
 price = vehicle.price,
 category = vehicle.category,
 stock = vehicle.stock
 }
 end
 
 print(('[^2INFO^7] Loaded %d vehicles from database'):format(#result))
end)

-- Secure server event for purchasing
RegisterNetEvent('vehicle_shop:server:purchaseVehicle', function(vehicleModel, paymentMethod)
 local src = source
 local xPlayer = ESX.GetPlayerFromId(src)
 
 -- Security check
 if not vehicles[vehicleModel] then
 return TriggerClientEvent('ox_lib:notify', src, {
 title = 'Error',
 description = 'Invalid vehicle model',
 type = 'error'
 })
 end
 
 local vehicleData = vehicles[vehicleModel]
 
 -- Payment processing
 if paymentMethod == 'cash' then
 if xPlayer.getMoney() >= vehicleData.price then
 xPlayer.removeMoney(vehicleData.price)
 -- Generate plate and spawn vehicle
 local plate = GeneratePlate()
 
 MySQL.insert('INSERT INTO owned_vehicles (owner, plate, vehicle) VALUES (?, ?, ?)', {
 xPlayer.identifier,
 plate,
 json.encode({model = vehicleModel, plate = plate})
 })
 
 TriggerClientEvent('vehicle_shop:client:spawnVehicle', src, vehicleModel, plate)
 else
 TriggerClientEvent('ox_lib:notify', src, {
 title = 'Insufficient Funds',
 description = ('You need $%d'):format(vehicleData.price),
 type = 'error'
 })
 end
 end
end)

Stap 5: Client-Side Implementatie

AI Prompt: “Creëer een client-side showroom met camerabediening en voertuigvoorbeeld”

-- AI-Generated: client/showroom.lua
local currentVehicle = nil
local cam = nil
local inShowroom = false

local showroomCoords = vector3(-42.34, -1097.35, 26.42)
local vehicleSpawnCoords = vector4(-47.52, -1097.29, 26.42, 340.0)

function OpenShowroom(category)
 inShowroom = true
 DoScreenFadeOut(500)
 Wait(500)
 
 -- Setup camera
 cam = CreateCam('DEFAULT_SCRIPTED_CAMERA', true)
 SetCamCoord(cam, -54.31, -1097.29, 28.42)
 PointCamAtCoord(cam, vehicleSpawnCoords.x, vehicleSpawnCoords.y, vehicleSpawnCoords.z)
 SetCamActive(cam, true)
 RenderScriptCams(true, false, 0, true, false)
 
 -- Request vehicles from server
 ESX.TriggerServerCallback('vehicle_shop:getVehicles', function(vehicles)
 SendNUIMessage({
 action = 'showVehicles',
 vehicles = vehicles,
 category = category
 })
 SetNuiFocus(true, true)
 end, category)
 
 DoScreenFadeIn(500)
end

RegisterNUICallback('previewVehicle', function(data, cb)
 if currentVehicle then
 DeleteEntity(currentVehicle)
 end
 
 local model = GetHashKey(data.model)
 RequestModel(model)
 
 while not HasModelLoaded(model) do
 Wait(10)
 end
 
 currentVehicle = CreateVehicle(model, vehicleSpawnCoords.x, vehicleSpawnCoords.y, 
 vehicleSpawnCoords.z, vehicleSpawnCoords.w, false, false)
 SetEntityAsMissionEntity(currentVehicle, true, true)
 SetVehicleOnGroundProperly(currentVehicle)
 SetVehicleDoorsLocked(currentVehicle, 2)
 
 cb('ok')
end)

Geavanceerde AI-technieken voor complexe systemen

Multi-File Context Management

Bij het ontwikkelen van onderling verbonden systemen zoals telefoon scripts, geef AI volledige context:

# Feed multiple files to Claude Code
claude-code analyze --files "server/*.lua,client/*.lua,config.lua" 
 --prompt "Add a garage system that integrates with the existing vehicle shop"

Framework-Specifieke Prompting

Verschillende frameworks vereisen verschillende benaderingen. Hier is hoe je AI-prompts voor elk kunt optimaliseren:

Voor ESX:

Generate an ESX job script with:
- Grades/ranks system using ESX.Jobs
- Salary payments via ESX.GetJobs()
- Boss menu with society funds
- Use esx_society patterns

Voor QBCore:

Create a QBCore gang system with:
- Gang territories using PolyZone
- Reputation system with QB.Shared.Gangs
- Stash/storage using qb-inventory
- Gang management via qb-gangmenu patterns

Voor VRP Scripts:

Build a VRP business system using:
- vRP.getUserId for player identification
- vRP permissions system
- vRP money methods (giveMoney, tryPayment)
- vRPclient tunnel for client callbacks

Database Schema Generatie

AI blinkt uit in het creëren van geoptimaliseerde database-structuren:

-- AI Prompt: "Create MySQL schema for advanced vehicle shop with financing"
-- Generated Result:

CREATE TABLE IF NOT EXISTS `vehicle_shop_catalog` (
 `id` int(11) NOT NULL AUTO_INCREMENT,
 `model` varchar(60) NOT NULL,
 `name` varchar(60) NOT NULL,
 `manufacturer` varchar(60) DEFAULT NULL,
 `category` varchar(60) DEFAULT NULL,
 `price` int(11) NOT NULL,
 `stock` int(11) DEFAULT 10,
 `max_speed` int(11) DEFAULT NULL,
 `acceleration` float DEFAULT NULL,
 `braking` float DEFAULT NULL,
 `handling` float DEFAULT NULL,
 PRIMARY KEY (`id`),
 UNIQUE KEY `model` (`model`),
 KEY `idx_category` (`category`),
 KEY `idx_price` (`price`)
) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4;

CREATE TABLE IF NOT EXISTS `vehicle_financing` (
 `id` int(11) NOT NULL AUTO_INCREMENT,
 `identifier` varchar(60) NOT NULL,
 `vehicle_id` int(11) NOT NULL,
 `down_payment` int(11) NOT NULL,
 `weekly_payment` int(11) NOT NULL,
 `weeks_remaining` int(11) NOT NULL,
 `last_payment` timestamp DEFAULT CURRENT_TIMESTAMP,
 `repo_warning_sent` boolean DEFAULT FALSE,
 PRIMARY KEY (`id`),
 KEY `idx_identifier` (`identifier`),
 FOREIGN KEY (`vehicle_id`) REFERENCES `owned_vehicles`(`id`) ON DELETE CASCADE
) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4;

Debuggen en Optimaliseren met AI

Prestatieprofileringsprompts

-- Prompt: "Add performance monitoring to this resource"
-- AI generates:

local performanceStats = {
 events = {},
 queries = {}
}

local function profileEvent(eventName, func)
 return function(...)
 local startTime = GetGameTimer()
 local result = {func(...)}
 local executionTime = GetGameTimer() - startTime
 
 performanceStats.events[eventName] = performanceStats.events[eventName] or {}
 table.insert(performanceStats.events[eventName], executionTime)
 
 if executionTime > 50 then
 print(('[^3WARNING^7] Event %s took %dms'):format(eventName, executionTime))
 end
 
 return table.unpack(result)
 end
end

-- Wrap existing events
RegisterNetEvent('vehicle_shop:server:purchaseVehicle', 
 profileEvent('purchaseVehicle', purchaseVehicleHandler))

Beveiligingsvalidatie

AI kan beveiligingskwetsbaarheden identificeren en oplossen:

-- Prompt: "Add security validation to this client-to-server event"
-- Before (vulnerable):
RegisterNetEvent('giveWeapon', function(weapon)
 local src = source
 GiveWeaponToPed(GetPlayerPed(src), weapon, 250, false, true)
end)

-- After (AI-secured):
local allowedWeapons = {
 ['WEAPON_PISTOL'] = true,
 ['WEAPON_COMBATPISTOL'] = true
}

RegisterNetEvent('giveWeapon', function(weapon)
 local src = source
 local xPlayer = ESX.GetPlayerFromId(src)
 
 -- Multiple validation layers
 if not xPlayer then return end
 if not allowedWeapons[weapon] then
 return DropPlayer(src, 'Attempted to spawn invalid weapon')
 end
 if not xPlayer.hasPermission('weapons.spawn') then
 return TriggerClientEvent('ox_lib:notify', src, {
 title = 'Access Denied',
 type = 'error'
 })
 end
 
 -- Log the action
 print(('[^3WEAPON^7] %s spawned %s'):format(xPlayer.getName(), weapon))
 
 xPlayer.addWeapon(weapon, 250)
end)

NUI Ontwikkeling met AI

Het creëren van moderne interfaces voor FiveM vereist HTML/CSS/JavaScript-expertise. AI stroomlijnt dit proces:

React Component Generatie

// Prompt: "Create a React vehicle shop UI with category filtering"
// AI generates:

import React, { useState, useEffect } from 'react';
import './VehicleShop.css';

const VehicleShop = () => {
 const [vehicles, setVehicles] = useState([]);
 const [selectedCategory, setSelectedCategory] = useState('all');
 const [selectedVehicle, setSelectedVehicle] = useState(null);
 const [searchTerm, setSearchTerm] = useState('');

 useEffect(() => {
 window.addEventListener('message', handleMessage);
 return () => window.removeEventListener('message', handleMessage);
 }, []);

 const handleMessage = (event) => {
 const { action, data } = event.data;
 
 switch(action) {
 case 'showVehicles':
 setVehicles(data.vehicles);
 break;
 case 'updateStock':
 updateVehicleStock(data.model, data.stock);
 break;
 }
 };

 const filteredVehicles = vehicles.filter(vehicle => {
 const matchesCategory = selectedCategory === 'all' || 
 vehicle.category === selectedCategory;
 const matchesSearch = vehicle.name.toLowerCase()
 .includes(searchTerm.toLowerCase());
 return matchesCategory && matchesSearch;
 });

 const purchaseVehicle = (vehicle, paymentMethod) => {
 fetch(`https://${GetParentResourceName()}/purchaseVehicle`, {
 method: 'POST',
 headers: { 'Content-Type': 'application/json' },
 body: JSON.stringify({
 model: vehicle.model,
 paymentMethod: paymentMethod
 })
 });
 };

 return (
 <div className="vehicle-shop-container">
 <div className="shop-header">
 <h1>Premium Deluxe Motorsport</h1>
 <input 
 type="text"
 placeholder="Search vehicles..."
 value={searchTerm}
 onChange={(e) => setSearchTerm(e.target.value)}
 className="search-input"
 />
 </div>

 <div className="category-filters">
 {['all', 'sports', 'super', 'sedan', 'suv', 'motorcycle'].map(cat => (
 <button
 key={cat}
 className={`category-btn ${selectedCategory === cat ? 'active' : ''}`}
 onClick={() => setSelectedCategory(cat)}
 >
 {cat.toUpperCase()}
 </button>
 ))}
 </div>

 <div className="vehicles-grid">
 {filteredVehicles.map(vehicle => (
 <VehicleCard 
 key={vehicle.model}
 vehicle={vehicle}
 onSelect={() => setSelectedVehicle(vehicle)}
 />
 ))}
 </div>

 {selectedVehicle && (
 <VehicleDetails 
 vehicle={selectedVehicle}
 onPurchase={purchaseVehicle}
 onClose={() => setSelectedVehicle(null)}
 />
 )}
 </div>
 );
};

Veelvoorkomende AI-valkuilen en Oplossingen

Probleem 1: Verouderde Native Functies

Probleem: AI suggereert verouderde FiveM natives Oplossing: Specificeer altijd de game build in je prompt:

Use only FiveM natives compatible with game build 3095+
Replace deprecated natives like GetPlayerPed(-1) with PlayerPedId()

Probleem 2: Geheugenlekken in Loops

Probleem: AI creëert oneindige loops zonder correcte opschoning Oplossing: Vraag garbage collection patronen aan:

-- AI-improved version with cleanup
local activeThreads = {}

local function createManagedThread(id, func)
 if activeThreads[id] then
 -- Kill existing thread
 activeThreads[id] = false
 end
 
 activeThreads[id] = true
 
 CreateThread(function()
 while activeThreads[id] do
 func()
 Wait(0)
 end
 end)
end

-- Cleanup on resource stop
AddEventHandler('onResourceStop', function(resourceName)
 if GetCurrentResourceName() == resourceName then
 for id, _ in pairs(activeThreads) do
 activeThreads[id] = false
 end
 end
end)

Probleem 3: Synchronisatieproblemen

Probleem: Client-server statusverschillen Oplossing: Gebruik AI om state management te genereren:

-- Prompt: "Create a synchronized state manager for client-server data"
-- AI generates:

-- Server-side state manager
local StateManager = {}
StateManager.states = {}

function StateManager:set(key, value)
 self.states[key] = value
 TriggerClientEvent('stateManager:sync', -1, key, value)
end

function StateManager:get(key)
 return self.states[key]
end

RegisterNetEvent('stateManager:requestSync', function()
 local src = source
 TriggerClientEvent('stateManager:fullSync', src, StateManager.states)
end)

-- Client-side state manager
local ClientState = {}

RegisterNetEvent('stateManager:sync', function(key, value)
 ClientState[key] = value
end)

RegisterNetEvent('stateManager:fullSync', function(states)
 ClientState = states
end)

-- Request initial sync
CreateThread(function()
 Wait(1000)
 TriggerServerEvent('stateManager:requestSync')
end)

Test- en Implementatiestrategieën

Geautomatiseerd Testen met AI

Genereer uitgebreide testsuites:

-- Prompt: "Create unit tests for the vehicle shop purchase function"
-- AI generates:

local function runTests()
 local testResults = {
 passed = 0,
 failed = 0,
 tests = {}
 }

 -- Test 1: Valid purchase with sufficient funds
 local function testValidPurchase()
 local mockPlayer = {
 identifier = 'test_player_1',
 money = 50000,
 getMoney = function() return 50000 end,
 removeMoney = function(amount) 
 mockPlayer.money = mockPlayer.money - amount
 return true
 end
 }
 
 local result = attemptPurchase(mockPlayer, 'adder', 45000)
 assert(result.success == true, 'Valid purchase should succeed')
 assert(mockPlayer.money == 5000, 'Money should be deducted correctly')
 
 return true
 end

 -- Test 2: Purchase with insufficient funds
 local function testInsufficientFunds()
 local mockPlayer = {
 identifier = 'test_player_2',
 money = 1000,
 getMoney = function() return 1000 end
 }
 
 local result = attemptPurchase(mockPlayer, 'adder', 45000)
 assert(result.success == false, 'Purchase should fail with insufficient funds')
 assert(result.error == 'insufficient_funds', 'Should return correct error code')
 
 return true
 end

 -- Run all tests
 local tests = {
 {name = 'Valid Purchase', func = testValidPurchase},
 {name = 'Insufficient Funds', func = testInsufficientFunds}
 }

 for _, test in ipairs(tests) do
 local success, error = pcall(test.func)
 if success then
 testResults.passed = testResults.passed + 1
 print(('[^2✓^7] %s passed'):format(test.name))
 else
 testResults.failed = testResults.failed + 1
 print(('[^1✗^7] %s failed: %s'):format(test.name, error))
 end
 
 table.insert(testResults.tests, {
 name = test.name,
 passed = success,
 error = error
 })
 end

 return testResults
end

-- Run tests on resource start in development mode
if Config.Debug then
 CreateThread(function()
 Wait(1000)
 local results = runTests()
 print(('Tests completed: %d passed, %d failed'):format(
 results.passed, results.failed
 ))
 end)
end

Prestatiebewaking

-- Prompt: "Add performance monitoring for production deployment"
-- AI generates:

local Monitor = {
 metrics = {
 eventCalls = {},
 dbQueries = {},
 memoryUsage = {}
 }
}

function Monitor:trackEvent(eventName)
 self.metrics.eventCalls[eventName] = (self.metrics.eventCalls[eventName] or 0) + 1
end

function Monitor:trackQuery(queryType, duration)
 table.insert(self.metrics.dbQueries, {
 type = queryType,
 duration = duration,
 timestamp = os.time()
 })
end

function Monitor:getReport()
 local report = {
 uptime = GetGameTimer() / 1000,
 totalEvents = 0,
 averageQueryTime = 0,
 memoryUsage = collectgarbage('count')
 }
 
 for _, count in pairs(self.metrics.eventCalls) do
 report.totalEvents = report.totalEvents + count
 end
 
 if #self.metrics.dbQueries > 0 then
 local totalTime = 0
 for _, query in ipairs(self.metrics.dbQueries) do
 totalTime = totalTime + query.duration
 end
 report.averageQueryTime = totalTime / #self.metrics.dbQueries
 end
 
 return report
end

-- Export metrics endpoint
RegisterCommand('metrics', function(source)
 if source == 0 or IsPlayerAceAllowed(source, 'admin.metrics') then
 print(json.encode(Monitor:getReport(), {indent = true}))
 end
end, true)

Integratie met bestaande resources

Bij het toevoegen van AI-gegenereerde scripts aan bestaande servers met ESX scripts of standalone scripts, volg deze integratiepatronen:

Resource Afhankelijkheden

-- config.lua - AI-generated configuration for compatibility
Config = {}

-- Framework detection
Config.Framework = nil

CreateThread(function()
 if GetResourceState('es_extended') == 'started' then
 Config.Framework = 'esx'
 ESX = exports['es_extended']:getSharedObject()
 elseif GetResourceState('qb-core') == 'started' then
 Config.Framework = 'qbcore'
 QBCore = exports['qb-core']:GetCoreObject()
 else
 Config.Framework = 'standalone'
 end
 
 print(('[^2INFO^7] Detected framework: %s'):format(Config.Framework))
end)

-- Framework-agnostic money functions
function GetPlayerMoney(source)
 if Config.Framework == 'esx' then
 local xPlayer = ESX.GetPlayerFromId(source)
 return xPlayer.getMoney()
 elseif Config.Framework == 'qbcore' then
 local Player = QBCore.Functions.GetPlayer(source)
 return Player.PlayerData.money.cash
 else
 -- Standalone implementation
 return exports['your_economy']:GetMoney(source)
 end
end

Best practices-checklist

Voordat u AI-gegenereerde scripts implementeert:

  • [ ] Beveiligingsvalidatie: Alle client-to-server events gevalideerd
  • [ ] Prestatietesten: Geen loops zonder Wait()
  • [ ] Geheugenbeheer: Correcte opschoning bij resource stop
  • [ ] Database-indexen: Indexen op vaak opgevraagde kolommen
  • [ ] Fout Afhandeling: Try-catch blokken rond kritieke bewerkingen
  • [ ] Logging: Gestructureerd loggen voor debugging
  • [ ] Configuratie: Geëxternaliseerde config-waarden
  • [ ] Documentatie: README met installatiestappen
  • [ ] Versiebeheer: Semantische versiebeheer in fxmanifest
  • [ ] Licentie: Bijgevoegd juist licentiebestand

Geoptimaliseerde Prompt voor een FiveM Developer Agent

You are an expert FiveM developer with 5+ years of production experience managing high-population servers. Your expertise spans all major frameworks and you prioritize secure, performant code.

Conclusie

AI-tools zoals Claude Code transformeren FiveM-ontwikkeling van een leerproces van maanden naar productief scripten binnen uren, waardoor snelle prototyping en ontwikkeling van complexe systemen mogelijk wordt, terwijl beveiligings- en prestatiestandaarden behouden blijven.


Klaar om je server te verbeteren? Ontdek onze samengestelde collectie van premium scripts of beoordeel standalone oplossingen die uw AI-gegenereerde resources aanvullen.

Give AI the right context without exposing secrets

State whether the resource uses ESX, QBCore, QBOX, ox_lib, oxmysql, NUI or standalone code, and ask the tool to list every dependency it assumes. Do not paste licence keys, database passwords, webhook URLs, customer data or private server code into a service unless its data-handling terms and your permission to share that code are clear.

Review generated event handlers, callbacks, player-supplied values, permission checks, reward logic and database writes manually. Test changes on staging with normal-player permissions as well as admin permissions, inspect client and server logs, and keep a rollback copy before production deployment.

Editorial review and source policy

AI can draft code but cannot establish that an event is authorized or a dependency API exists. Require primary-source links, review every network event server-side, run lint/tests, and inspect the diff before staging. Never paste secrets or private player data into a model.