PanludiaCandy Box: HP Bar Unlock
DefaultFind the HP Bar. It is randomized by default; turning Randomise HP Bar off places it here as a fixed reward.
COMMUNITY INTEGRATION
Candy Box 2Archipelago randomizer mod
Explore an ASCII adventure where equipment, resources and access to the world arrive through your multiworld. Purchases, puzzles and quests send checks, with optional shuffled entrances and several selectable goals.
Maintained by Victor Tran, Aren Merzoian
GAME MECHANICS
Explore game mechanics
Browse possible checks, rewards and settings. What appears in your game depends on your World options.
The release defines 361 unique check addresses. Default settings select 81 checks: 80 randomized item copies plus the fixed Talking Candy reward. One Progressive World Map is requested early by the generator; it is not precollected. The 280 farm and Sea-distance milestones are optional filler candidates. Individual Spells adds four locations, each Font Trap adds one, and disabling the PLAY Stones goal reduces the filler-location count by one.
Actions and milestones that can send a check to your multiworld.
361 locationsDefault marks checks from configurations selected by standard options; the generated set can still vary with logic and seed.
Candy Box: Throw 1630 candies
DefaultReach the 1,630-candy throwing milestone.
Shop: Top Lollipop
DefaultPurchase or collect Top Lollipop at the village shop.
Shop: Centre Lollipop
DefaultPurchase or collect Centre Lollipop at the village shop.
Shop: Bottom Lollipop
DefaultPurchase or collect Bottom Lollipop at the village shop.
Shop: Chocolate Bar
DefaultPurchase or collect Chocolate Bar at the village shop.
Shop: Time Ring
DefaultPurchase or collect Time Ring at the village shop.
Shop: Candy Merchant's Hat
DefaultPurchase or collect Candy Merchant's Hat at the village shop.
Shop: Leather Gloves
DefaultPurchase or collect Leather Gloves at the village shop.
Shop: Leather Boots
DefaultPurchase or collect Leather Boots at the village shop.
Fifth House: Lollipop on bookshelf
DefaultFind the hidden lollipop: Lollipop on bookshelf.
Fifth House: Lollipop in bookshelf
DefaultFind the hidden lollipop: Lollipop in bookshelf.
Fifth House: Lollipop under rug
DefaultFind the hidden lollipop: Lollipop under rug.
Cellar Quest: Quest Cleared
DefaultComplete the Cellar Quest quest.
The Mountains: Pogo Stick
DefaultComplete the named activity in The Mountains to send this check.
Desert Quest: Quest Cleared
DefaultComplete the Desert Quest quest.
Desert Quest: Get Desert Bird Feather
DefaultFind Desert Bird Feather at Desert Quest.
Bridge Quest: Troll Defeated
DefaultDefeat Troll to send this check.
Bridge Quest: Get Troll's Bludgeon
DefaultFind Troll's Bludgeon at Bridge Quest.
Cave: Exit
DefaultComplete the named activity in Cave to send this check.
Playing with others
Each player runs a separate browser adventure connected to the same Archipelago multiworld. Optional gifting, EnergyLink and DeathLink exchange additional effects; this does not create a shared game map.
Known scope and limitations
- Install candybox2.apworld from the linked 20260822-1 release on the Archipelago generator, generate a Candy Box 2 YAML template and create the room. Open the versioned browser client and enter the room address, exact slot name and optional password. The maintainer reports testing with Archipelago 0.6.7; independent compatibility testing was not performed.
- The World and browser client must use matching versions. The release is dated 23 August 2026 even though its tag is 20260822-1. The browser source reviewed here is commit a328fd7171338a859ab445a007219155631ab59d.
- The reviewed client inserts some room-provided recipient names into HTML without escaping and accepts insufficiently constrained server-directed version redirects. These are source-level input-handling findings; connecting only to a familiar room does not remove the code limitations.
- A room password can be included in launch and redirect URLs. Avoid sharing connection URLs or browser-history exports containing credentials.
- Connection loss requires reloading the page. Local saves are associated with a generated slot UUID, and the UI can offer an Archipelago-stored backup, but there is no verified durable queue for checks interrupted during transmission.
- The manual paste/import path does not apply the supplied backup text in the reviewed revision. This is distinct from local-save loading and the server-backup restore route. Save writes also lack complete interruption and concurrency guarantees.
- Gifting and EnergyLink operations do not consistently couple local inventory changes to confirmed server updates. Interrupted operations and repeated gift processing have unresolved static recovery risks.
- Code and ASCII-art redistribution permissions are documented separately under GPL and CC BY-SA. Complete dependency-notice coverage, a reconstructed browser build and runtime behavior remain unverified. Downloads and the game client remain hosted by the maintainer.