Roblox systems for production combat.

Hit validation rules

Hitbox-Plus server excerpt for authoritative combat validation.

if request.attackerPosition ~= nil then
    local distance = SpatialMath.distance(
        request.attackerPosition,
        candidate.position
    )

    if distance > self.maxDistance then
        return false, Types.RejectReason.MaxDistance, {
            distance = distance,
        }
    end
end

if self.targetCooldownSeconds > 0 then
    local key = string.format(
        '%s::%s',
        tostring(request.attackerId),
        tostring(candidate.id)
    )
    local lastAcceptedAt = self.targetHitTimes[key]

    if lastAcceptedAt ~= nil
        and request.serverTime - lastAcceptedAt <= self.targetCooldownSeconds
    then
        return false,
            Types.RejectReason.TargetCooldown,
            { lastAcceptedAt = lastAcceptedAt }
    end
end

NPC Coordination Model

Pathfinding-Plus excerpt for throttled NPC path requests across registered navigators.

function Coordinator:_ensureLoop()
    if self._loopRunning or self._destroyed then
        return
    end

    self._loopRunning = true

    task.spawn(function()
        while not self._destroyed do
            local now = os.clock()

            if now >= self._nextGlobalIssueAt then
                local request = self._queue:PopReady(now)
                if request ~= nil then
                    self._nextGlobalIssueAt = now + self._requestInterval
                    local ok, result = pcall(request.execute)
                    request.callback(ok, result)
                elseif self._queue:GetSize() == 0 then
                    self._loopRunning = false
                    return
                end
            end

            task.wait(self._pollInterval)
        end
    end)
end

Authoritative Combat Validation Flow

Shows how responsive client input becomes a server-owned combat result without trusting raw client state.