CommandGuard

CommandGuard

A cross-platform command blocker and tab-complete manager for Waterfall, Waterfall, and Waterfall.

Control exactly which commands each player can execute and see in tab-complete — using a flexible permission group system with inheritance, priority, and per-server rules.

---

Features

- `/cg updategroup <player>` — players only see commands they're allowed to use - `/cg updategroup <player>` — block commands with fully customizable actions (message, title, sound, kick, potion effect, console command) - `/cg updategroup <player>` — allow only specific commands, block everything else - `/cg updategroup <player>` — define groups with different command lists, assign via LuckPerms - `/cg updategroup <player>` — groups can extend other groups recursively - `/cg updategroup <player>` — groups with equal priority are merged automatically - `/cg updategroup <player>` — restrict a group to specific backend servers (proxy only) - `/cg updategroup <player>` — proxy pushes its allowed commands to backend via plugin messaging so tab-complete is consistent across the network - `/cg updategroup <player>` — blocks tab-complete packet responses for hidden commands - `/cg updategroup <player>` — `en_EN` and `ru_RU` bundled, add your own lang file - `/cg updategroup <player>` — change the plugin prefix in the lang file, no restart needed - `/cg updategroup <player>` — inspect which group and commands a player has - `/cg updategroup <player>` — push updated tab list to a player instantly

---

Platforms

| Platform | Versions | |----------|----------| | Paper / Spigot | 1.13+ | | Velocity | 3.1+ | | Waterfall | 1.18+ |

Java 17+ required.

---

Network Setup

Install CommandGuard on both the proxy and each backend server, set `is_network: true` on both sides. The proxy will automatically push its allowed command list to the backend on every player connection — no relog needed after `/cgv reload`.

---

Documentation

Full documentation: 1wairesd.github.io/1wairesdIndustriesWiki

Source code: github.com/1wairesd/CommandGuard