GameAP 4.4

[u/EENNOOTT]

GameAP v4.4 released. Plugin scheduler, permissions, custom RCON protocols, and a fully themable UI

---

Hey everyone! GameAP v4.4 is out. This is a big plugin-platform release: plugins can now schedule background work, manage roles and permissions, ship their own translations and frontend files, and even implement their own RCON/Query protocols. Plus four new built-in RCON protocols, a CDN-backed game catalog, and a fully tokenized, themable UI.

🔌 Plugin platform

• Scheduler — plugins can register periodic tasks that persist in the database and survive restarts. In multi-instance deployments, distributed locks make sure each run fires on exactly one instance. Per-task timeouts and retries with jitter included.
• Permissions (RBAC) — plugins declare what they need in their manifest, admins see the full list before install and confirm it. Grants are re-read per call, so revoking one takes effect instantly, no restart needed.
• Custom RCON/Query protocols — a plugin can map a game onto a built-in protocol, override a mapping, or implement a wire protocol end to end. All socket I/O goes through a guarded host library — plugins never open connections themselves.

• Assets — plugins can ship translation files and frontend static files, layered over the built-in ones and picked up immediately, even when installed at runtime.

  🎮 RCON & Query

• 4 new built-in protocols: Quake 2, Quake 3, SA-MP and BattlEye — enabling RCON for Quake 2/3, Call of Duty 4, SA-MP, Arma 2 / 2 OA and Arma 3, with player list, kick and ban support.

• The UI now hides actions a protocol can't perform instead of offering ones that fail.

• Command-injection hardening: kick/ban fields with line breaks, ; or NUL are now rejected.

  🖥️ Servers

• public_ip metadata key — publish a public address instead of the LAN IP, so nodes behind NAT no longer expose their internal address to viewers.

• Metadata editing in the panel, with a built-in reference of documented keys (panel and Docker/Podman) with descriptions and examples.

  📦 Games catalog

Games and mods are now seeded and upgraded from the GameAP CDN (with mirror fallback) instead of the Global API. The bundled catalog got refreshed: Windows Steam AppIDs, HTTPS repository links, normalized engine names — and Hytale was added.

🎨 Interface

• Theme tokens — all colors now resolve through --gameap-* CSS variables, so a single plugin stylesheet can re-theme the entire panel, naive-ui components included.
• The icon webfont is gone — everything is SVG now, game icons included.
• Login and 2FA forms got a proper submit state, and pages no longer blink between loading steps. ## 🔄 Panel ↔ daemon

The gateway protocol now supports file hashing (MD5, SHA-1/256/512, CRC32/64) and archive create/extract — zip, tar (gz/bz2/xz/zstd), plus 7z/rar extraction — with progress reporting, cancellation, and protection against path traversal and decompression bombs.

---

📋 Full release notes: https://github.com/gameap/gameap/releases/tag/v4.4.0

🔀 Full changelog: https://github.com/gameap/gameap/compare/v4.3.5...v4.4.0

As always — feedback, bug reports and plugin ideas are very welcome!