Coder

Coder v2.4.1

The most powerful scripting engine for Minecraft. Run Java, Lua, and Python natively on your server with real-time web editing.

🚀 What's New in v2.4.1

• Fixed GWI Editor Sessions:

  • Now sessions expire after 30 minutes or more based on how many times the extend button at the editor is clicked

• 26.1.2 - 26.2 Support:

  • Added plugin version for 26.1.2-26.2
  • Plugin built using Java 25

🛠 Features

• Native Multi-Language Support: Write and execute scripts in Java, Python, and Lua directly on your Minecraft server.
• Unified Workspace: Keep all your automation files organized in a single, dedicated folder.
• In-Memory Java Execution: Load Java code directly into server memory to keep active listeners and background processes running.
• Clean Cache Directory: Compiled .class files are cleanly separated:
  • Temporary runtime files: Coder/JavaClass/Runtime/
  • Loaded persistent files: Coder/JavaClass/Loaded/
• User Execution Control (UEC): An active security layer that intercepts unauthorized scripts. Regardless of the language used, nothing runs without UEC verification.
• Dual Backup Systems: Automated scheduled backups paired with instant manual snapshots.
• Graphical Web Interface (GWI): Securely manage, edit, and delete files on your server using a remote web browser window.
• Virtual Console Interface (VCI): Lets you securely run commands via https://coder-gwieditor.firesmasher.workers.dev/mc-console?=YOUR_TOKEN_HERE.
• Java 25 Support: Download the java-25 version of Coder.

🛡 GWI Editor Security

The remote GWI Editor is highly secure. Session connections leverage SHA-256 tokens which are mathematically impossible to brute-force or guess. Additionally, every session token automatically expires after 30 minutes of inactivity.

🛡 Virtual Console Interface Security

The custom minecraft console panel blocks /op commands and is secured by SHA-256 Server Password tokens, to disable this feature, you can go to /plugins/Coder/.gwi/secure/serverPassword.env and remove the value of serverPassword=.

📖 Quick Start

Workspace Directories

Drop your scripts and check execution logs in the following directories:

Command Reference

Script Management

• /coder run <filename> – Executes a specified script.
• /coder load <filename> – Loads and compiles a script directly into Server Memory.
• /coder unload <filename> – Unloads an active script from Server Memory.
• /coder reload <filename> – Reloads a specific script's configuration.

Security & UEC

• /coder confirm – Manually permits a script flagged by the User Execution Control.
• /coder cancel – Blocks and cancels a script caught by the UEC.

GWI Web Editor

• /coder editor start – Spawns a secure SHA-256 link to access the GWI Web Editor.
• /coder editor trust <username> – Grants access to a pending connection request.
• /coder editor do-not-trust <username> – Denies access to a connection request.
• /coder editor stop – Terminates the active GWI Web Editor session immediately.

Virtual Console Interface

• /coder gen-pass - Generates a unique SHA-256 server password to access /mc-console/.

System & Maintenance

• /coder backup – Triggers an immediate manual backup of your script directory.
• /coder auto-backup-start – Starts the automated scheduler for background backups.
• /coder auto-backup-stop – Halts the background backup scheduler.
• /coder reload-config – Hot-reloads the main config.yml file.
• /coder update – Checks for updates and retrieves a download link.
• /coder update-jar – Automatically downloads and replaces the plugin JAR file.
• /coder enable-activity-logging – Enables activity logging.
• /coder disable-activity-logging – Disables activity logging.

📋 Console Session Example

Here is a typical session workflow demonstrating how to generate a server password:

coder gen-pass
[12:38:39 INFO]: [Coder] Server password regenerated and saved to .gwi/secure/serverPassword.env
[12:38:40 INFO]: [Coder] Server password generated!
[12:38:40 INFO]: Copy this hash into the MC Console auth form:
[12:38:40 INFO]: 857a675a14c2e8b19eeb838d28d16a91128262417c23e4fdb08e078ffdef211f
[12:38:40 INFO]: Saved to: plugins/Coder/.gwi/secure/serverPassword.env