Bastion ORP

Offline raid protection for dedicated Palworld servers. A native server plugin for the PalApi framework: nothing to install for your players, no game file modified.

Pre-release (0.6.0-dev). The plugin runs and has been tested in game, but the final validation pass is not finished. Try it on a test server first. Report anything odd in Issues.

The problem it solves

On a PVP server, a guild that logs off gets its base flattened overnight, and those players never come back. The native answers (full PVE, no structure damage) kill PVP for everyone. Bastion ORP protects players who are offline, and only them.

What it does

Three protection modes, combinable, all reloadable without restarting the server:

• ORP — a base becomes invulnerable while the whole guild is offline. Anti-abuse built in: activation delay after logout, raid timer (no escaping a fight by disconnecting), logout penalty during a raid, expiry after N days of absence.
• Sanctuary — each guild designates ONE permanently untouchable base. Full PVP, but nobody loses their main base.
• PVE — every base protected, at all times.

Around them: new-player protection with anti-exploit memory, scheduled raid windows (everything attackable on Saturday night) with advance announcements, degressive protection based on how many members are online, base pal protection, PVP chest lock, admin Discord alerts, in-game commands answered privately to the asker, admin commands over RCON and chat, raid journal and statistics, and a live JSON feed for external tools.

Safety

• Read-only world scans on a background thread. The damage hot path only compares pointers and runs two binary searches.
• The hit is cancelled before the engine handles it — no game state written, so no save corruption is possible.
• Fair exemptions: your own guild's hits and monster (NPC) raids are never blocked.
• dry_run mode: the server logs what it would have blocked, changing nothing. The safe way to try it on a live server.

Requirements

• Palworld dedicated server, Windows x64
• PalApi 0.5.0 or newer for the full feature set. The plugin still loads on 0.1.1+ and protects bases, but stays silent in game there. Version 0.4.0 is refused by name (it reports the same interface number as 0.4.1 with a different memory layout).
• For admin commands over RCON: rcon_intercept=true in palapi.cfg.

Install

Two ways. Both give you the same plugin.

Manually (no launcher needed)

See docs/install.md for the step-by-step version. Short form:

1. Install PalApi in <server>\Pal\Binaries\Win64\ and start your server through PalApiLoader.exe.
2. Download the archive from Releases and unzip it into <server>\Pal\Binaries\Win64\PalApi\Plugins\BastionORP\.
3. Copy orp.example.json to orp.json and edit what you need.
4. Restart the server.

With the Bastion Palworld launcher

The launcher installs PalApi if it is missing, deploys the plugin, prepares orp.json, enables admin commands, and shows the protection live (guilds, protected bases, ongoing raids, raid journal). One click, nothing to copy by hand.

Documentation

• Installation — manual install, step by step
• Configuration — every setting, what it does, what it defaults to
• Commands — player and admin commands
• Live feed — the JSON file, for bot and tool authors

Editions

• Free — classic ORP: protection on/off plus the core timings (activation delay, raid timer, logout penalty, expiry). Everything a small server needs.
• Full — everything on this page: sanctuary, PVE mode, raid windows, new-player protection, degressive protection, pal protection, chest lock, Discord alerts, live feed.

License and support

The plugin is distributed as a compiled binary; the source code is not public. Bug reports and questions are welcome in Issues.