Candy Box 2Archipelago randomizer mod

Compatibility notes

• Install candybox2.apworld from the linked 20260822-1 release on the Archipelago generator, generate a Candy Box 2 YAML template and create the room. Open the versioned browser client and enter the room address, exact slot name and optional password. The maintainer reports testing with Archipelago 0.6.7; independent compatibility testing was not performed.
• The World and browser client must use matching versions. The release is dated 23 August 2026 even though its tag is 20260822-1. The browser source reviewed here is commit a328fd7171338a859ab445a007219155631ab59d.
• The reviewed client inserts some room-provided recipient names into HTML without escaping and accepts insufficiently constrained server-directed version redirects. These are source-level input-handling findings; connecting only to a familiar room does not remove the code limitations.
• A room password can be included in launch and redirect URLs. Avoid sharing connection URLs or browser-history exports containing credentials.
• Connection loss requires reloading the page. Local saves are associated with a generated slot UUID, and the UI can offer an Archipelago-stored backup, but there is no verified durable queue for checks interrupted during transmission.
• The manual paste/import path does not apply the supplied backup text in the reviewed revision. This is distinct from local-save loading and the server-backup restore route. Save writes also lack complete interruption and concurrency guarantees.
• Gifting and EnergyLink operations do not consistently couple local inventory changes to confirmed server updates. Interrupted operations and repeated gift processing have unresolved static recovery risks.
• Code and ASCII-art redistribution permissions are documented separately under GPL and CC BY-SA. Complete dependency-notice coverage, a reconstructed browser build and runtime behavior remain unverified. Downloads and the game client remain hosted by the maintainer.