SuperAPI AI Directory
Partner with us中文AI newsFavorites
Skillsfivem-development

fivem-development

Coding & development

View repository

Updated 10-16 03:48

About this skill

FiveM Development — Best Practices

Framework-agnostic orchestrator. One skill — load reference files on demand (do not load all).

Language rule: Internal reasoning is in compact English. All messages and output displayed to the user must be in the user's language.

Philosophy

  1. Fetch, don't memorize — When unsure about a native or API, verify from authoritative sources
  2. Framework-agnostic thinking — Understand patterns, adapt to the active framework
  3. Performance-first — FiveM has strict tick budgets
  4. Security-aware — Server-side validation is non-negotiable
  5. Clean, readable Lua over abstraction — Monolith-first (server.lua / client.lua), minimal comments, extract local function only when reused (2+ call sites; §3.11). Do not componentize Lua like React or invent event roundtrips when Tunnel/return fits.
  6. Project memory — reference.mdc = lean global map (alwaysApply); .fxmind/memory/<topic>.md = shared compact recipe. Run /fxmind learn before rescanning; /fxmind memory health; /fxmind graph; /fxmind query.
  7. Audit assertiveness — /fxmind audit follows performance.md §1.6.1–§1.6.2 + audit-passes.md §2.3–§2.5 (Pass 2b E-a…E-g, Pass NUI N-a…N-d when ui_page) + security.md §5.1.
  8. Quality gates (task mode) — implementing or refactoring code follows quality-gates.md: design review at Gate A, self-review loop before Gate V.

Reference router (load only what you need)

Topic File Key sections
Tunnel / events / _ prefix / same-side calls / response budget communication.md §1.1–§1.3, §1.7
Loops, dynamic sleep, payloads, tunnel_res, broadcast, StateBags, cache (server + client §2.1.1), view cache, client data seeding / bootstrap §2.2.1 performance.md §1.4–§1.6.2, §2.1–§2.2.1, §4.1–4.2, §4.5
Audit only — Pass 0–7, matrices V/E/N, report gates audit-passes.md §2.3–§2.5
Monolith layout, globals vs fake modules, state placement architecture.md §3.5–§3.6, §3.8
Lookup tables, nil, comments, single-use helpers, checklist, anti-patterns style.md §3.1–3.4, §3.7, §3.9–§3.11
SafeEvent, SetCooldown, endpoint auth, server resolution, input validation security.md §4.6–4.8, §5.1–§5.3
cerberus export signatures & examples api.md §4.3–4.4
Implement / refactor (task mode DoD) quality-gates.md Gate A QUALITY + self-review loop
NUI / React UI (CEF fill, Vite hash) fivem-react-nui/SKILL.md · ui-guide.md §2, §6
Index of all § links best-practices.md TOC only
Props / vehicles / peds asset-discovery.md —
Detect vRP / QB / Qbox / ESX framework-detection.md —

Principle IDs → sections (IDs from .fxmind/policy/fivem-principles.md; open only the row you need):

ID Rule Details
N1 recipient scope performance §1.6.1, §4.2
N2 minimal payload performance §1.6, §2.2
N3 big data in pieces performance §1.6, §2.2.1, §4.1–4.2 (cerberus SendFullSync)
N4 no periodic fan-out performance §1.4, §1.6.1, §4.2
N5 client-side sync / statebags performance §1.6.2, §2.1.1
N6 anti-flood security §4.6–§4.8, §5.1
N7 seed client data by server push performance §2.2.1
D1 no DB in hot paths performance §2.1, §2.1.1
D2 one round-trip, no N+1 performance §1.4
D3 server owns truth security §5.2–§5.3
T1/T2 event-driven, dynamic sleep performance §1.5
C1 minimal code, no single-use helpers style §3.11–§3.12, communication §1.3
C2 readable flow, no globals architecture §3.5–§3.6, §3.8; style §3.1–§3.4
C3/C4 validate once; clean diff security §5.3; style §3.7, §3.9
C5 lexical locals / callee before caller style §3.11; architecture §3.8

Corrections backlog (.fxmind/corrections/) categories map 1:1 to these files — promote rules into the matching file, not into a new skill.

CRITICAL: No Hallucination Policy

NEVER invent or guess native functions, framework APIs, or parameters.

  1. If unsure about a native → MUST fetch from https://docs.fivem.net/natives/
  2. If unsure about framework API → MUST fetch from official docs or read the framework skill
  3. If function doesn't exist → Tell user honestly, suggest alternatives
  4. If parameters unknown → Fetch documentation, don't guess

Before writing any native or API call: verify name, parameters, and client/server availability.

Dynamic Documentation Fetching

Use local skills first. Fetch online only when information is missing, outdated, or uncertain.

If user asks about... Action
Native function FETCH https://docs.fivem.net/natives/
Framework API READ framework skill; FETCH if uncertain
ox_lib FETCH https://overextended.dev/ox_lib
GTA V asset READ asset-discovery.md
Communication / Tunnel READ communication.md
Cache / sleep / broadcast / cerberus sync / client cache / seeding client data (§2.2.1) READ performance.md
/fxmind audit READ audit-passes.md
New resource / monolith READ architecture.md + style.md
Security / SafeEvent / endpoint auth / input validation READ security.md
cerberus export API READ api.md

Request Router

Rule Triggers Action
Native Detection PascalCase native, 0x... Fetch docs.fivem.net/natives
Framework API vRP.*, QBCore.*, exports.qbx_core, ESX.* Read framework skill
ox_lib lib.* Fetch overextended.dev/ox_lib
Asset Discovery prop / vehicle / ped model Read asset-discovery.md
Communication Tunnel, callback, _ prefix, same-side TriggerEvent, response budget Read communication.md
Performance Wait(0), loops, payload, tunnel_res, broadcast, cache, client cache Read performance.md (§1.4–§1.6.2, §2.1–§2.2.1)
Audit /fxmind audit, refactor input Read audit-passes.md (§2.3–§2.5)
Architecture new resource, server.lua, refactor layout Read architecture.md §3.5–3.6 first
Style comments, if/else cleanup, local function extract vs inline Read style.md (§3.11)
Security exploit, SafeEvent, endpoint auth, input validation, webhook Read security.md
Implement / refactor / new endpoint / NUI new func.*, RegisterNetEvent, RegisterNUICallback, refactor resource Read quality-gates.md
Project memory /fxmind learn, craft/item/loja Read .fxmind/memory/<topic>.md or suggest learn/query

Before Writing Lua

  1. READ architecture.md §3.5–3.6 and style.md §3.7–3.11
  2. Task mode: read quality-gates.md — fill Gate A QUALITY plan; run self-review loop before Gate V
  3. Default to one server.lua and one client.lua unless split is clearly justified
  4. Prefer Tunnel/return over event roundtrips — communication.md §1.1

Critical Performance Rules

  1. Callback vs Event: Use TriggerServerEvent/TriggerClientEvent when you do NOT need a return. Use callbacks/Tunnel only when you NEED a return.
  2. Dynamic Sleep: NEVER fixed Wait(0). Adjust based on state.
  3. Same environment: Call functions directly — never TriggerEvent() same-side.
  4. No remote calls in loops < 5s — batch or delta.
  5. Small payloads — ~8KB limit; send deltas.
  6. Cache: exports["cacheaside"]:Get() for repeated DB queries.
  7. Large sync: cerberus SendFullSync / SendDeltaSync when ensured; otherwise chunks split once (performance.md §2.2.1).
  8. SafeEvent + server validation for money/items/XP/vehicles.
  9. SetCooldown on client before spammy TriggerServerEvent.
  10. Server security: never trust client/NUI; resolve derived data on server (§5.2).
  11. Tables > if/else for 3+ conditions; protect nil.
  12. Consolidate network: one Tunnel call with return (§1.1).
  13. Seed client data by server push: cache + view built once at resource start (seed -1), player-loaded hook sends the cached view to source, CRUD patches one key + delta. Never a client requestSync on start (performance.md §2.2.1).

Framework Skills

Framework Skill
vRP Creative Network vrp-framework
QBCore qbcore-framework
Qbox (qbx_core) qbox-framework
ESX Legacy esx-framework
NUI (React + Vite) fivem-react-nui

See framework-detection.md.

Resource Structure

Prefer monolith — architecture.md §3.5.

resource_name/
├── fxmanifest.lua
├── shared/config.lua
├── server/server.lua
└── client/client.lua

Anti-Patterns (short)

Don't Do
Split every feature into its own Lua file Monolith unless justified (§3.5)
Comment every line Comment only non-obvious rules (§3.7)
Extract local function for one call site Inline in the handler/thread (§3.11)
Rewrite the file to fix one bug Minimal diff; keep user-approved patterns (§3.11)
Fake LoadResourceFile imports Global or same-file helper (§3.6)
Event roundtrip for a return value Tunnel/return (§1.1)
Trust client / rebuild payload every send Server auth + view cache (§5, §2.2)
Client asks for initial data on start (requestSync) Server push at start + player-loaded hook (§2.2.1)
Reload whole cache after one CRUD Patch one key + delta (§2.2.1)
Invent natives/APIs Verify first

Full tables: style.md §3.10–§3.11, architecture.md §3.6.

External Resources

  • cacheaside: git@github.com:proelias7/cacheaside.git
  • cerberus: git@github.com:proelias7/cerberus.git

Natives