Planet Crafter Server

All planets. Stop prevents new jobs; current deliveries finish before drones return. Drones need power and free station slots to dock. Use this control or admin chat; the game's own stop button does not stop server deliveries. A Sign within 4 metres of a station can recall drones launched from it, by tier: recall 1, recall 2, recall 3, or recall all. Clear the sign to continue; a global stop still applies.

Every world beside this one: one save file each in worlds/.

Plugins add commands, rules and reactions to the server without changing it. They live in the server's plugins folder; add one with pcds plugin install PATH. A plugin does nothing until you approve what it asks for; a folder put there is found within a few seconds, and a plugin can be approved, switched off and replaced while the world runs. A plugin that misbehaves is stopped and restarted, and switched off after five faults in a minute.

A plugin is approved for the exact files you saw. A publisher can also sign its plugins (pcds plugin sign), and you can trust the publisher's key instead: what the key vouches for needs no approval and its updates run as they come, and whatever it asks for beyond waits for you. A signature that does not match the files counts for nothing. Remove a key and the plugins that ran only because of it stop.

An out-of-process plugin registers by asking for events (POST /api/plugins/events) and leaves by saying so, or after a minute of silence. It has no capabilities of its own: it can do what its token can. Give each program a token that opens only what it needs, below, instead of the admin token.

A token opens the requests of its scopes and nothing else (everything else needs the admin token), has a rate of its own, and can be removed at any time: it is refused from its next request. The server keeps only a hash of it, so the token is shown once, when it is made. Tokens are checked by the front: after an update that adds them, pcds upgrade --restart brings them in.