Authoritative economy
Pack openings, sales, trade-ups, deck writes, and scheduled prices are committed by the server with retry-safe receipts.
Administrator sign in
Protected by password and TOTP
This console is also restricted to the configured management network.
Live control plane
Server overview
Appliance recovery
Boot supervision, delayed Ethernet recovery, worker reconstruction, and nightly database/content backups remain automatic.
Administrative boundary
Every mutation requires a reason and unique operation ID, and is committed with an append-only audit record.
Profiles & access
Player management
Network and device access bans
Authoritative Duels
Recent matches
Versioned pricing
Booster catalog
Schedule a price immediately or at a future ISO date/time. Player purchases always use the server-effective price.
Immutable releases
Cards & expansions
Signed distribution
Client releases
Stage immutable metadata, upload one Windows ZIP, Linux ZIP, macOS ZIP, and Android APK, then publish the signed release manifest.
Seasons & progression
Season calendar
Activate a season config (2026-S1 Pioneer Orbit ships with the release), preview the rollover math for an ended season, then execute it. Rollover is crash-safe and idempotent.
Ended seasons appear here; preview the conversion math, then execute. Re-runs archive nothing (per-profile idempotency key).
No ended seasons.
| Season | Name | Starts | Ends | Rolled over |
|---|
Automatic scaling
Match workers
Generate a one-time, 15-minute enrollment code, then run the displayed command on a fresh Debian 13 system. Enrolled workers reconnect automatically after reboot.
No active join command.
Append-only history