Panludia
COMMUNITY INTEGRATION
Candy Box 2Archipelago randomizer mod
Explore an ASCII adventure where equipment, resources and access to the world arrive through your multiworld. Purchases, puzzles and quests send checks, with optional shuffled entrances and several selectable goals.
Maintained by Victor Tran, Aren Merzoian
- Reviewed build
- 20260822-1
- OS
- Browser
- Last reviewed
- 22 Sept 2026
- Installation
- Manual installation
How the game changes
- Inventory items and one-time resource rewards are randomized. Progressive world maps unlock access to the adventure; equipment, jumping upgrades and grimoires can use progressive configurations.
- The source defines 361 possible location IDs and 75 item types. Each generated game selects its applicable checks; these totals are not the number of checks in every seed. Additional filler locations use planted-lollipop and sea-distance milestones.
- Choose a nonempty combination of goals: obtain the PLAY stones, die in the Castle Trap Room, or swim 3000 metres. The locked candy box and Talking Candy provide the goal interaction and progress view.
- Quest and entrance randomization are optional. Integrated scouting, item notifications, chat, hints and a tracker entry point help follow the multiworld.
- Optional features include DeathLink, potion gifting, EnergyLink and up to 20 font traps. Font traps temporarily change the display; EnergyLink exchanges have a documented efficiency penalty.
Before you start
- Install candybox2.apworld from the linked 20260822-1 release on the Archipelago generator, generate a Candy Box 2 YAML template and create the room. Open the versioned browser client and enter the room address, exact slot name and optional password. The maintainer reports testing with Archipelago 0.6.7; independent compatibility testing was not performed.
- The World and browser client must use matching versions. The release is dated 23 August 2026 even though its tag is 20260822-1. The browser source reviewed here is commit a328fd7171338a859ab445a007219155631ab59d.
- The reviewed client inserts some room-provided recipient names into HTML without escaping and accepts insufficiently constrained server-directed version redirects. These are source-level input-handling findings; connecting only to a familiar room does not remove the code limitations.
- A room password can be included in launch and redirect URLs. Avoid sharing connection URLs or browser-history exports containing credentials.
- Connection loss requires reloading the page. Local saves are associated with a generated slot UUID, and the UI can offer an Archipelago-stored backup, but there is no verified durable queue for checks interrupted during transmission.
- The manual paste/import path does not apply the supplied backup text in the reviewed revision. This is distinct from local-save loading and the server-backup restore route. Save writes also lack complete interruption and concurrency guarantees.
- Gifting and EnergyLink operations do not consistently couple local inventory changes to confirmed server updates. Interrupted operations and repeated gift processing have unresolved static recovery risks.
- Code and ASCII-art redistribution permissions are documented separately under GPL and CC BY-SA. Complete dependency-notice coverage, a reconstructed browser build and runtime behavior remain unverified. Downloads and the game client remain hosted by the maintainer.