Agency-Admin

✨ New

• Web panel: Available at companion.agencyg.de/app/admin; no port, reverse proxy, or HTTPS setup is needed.
• Sign-in: Use Web Panel > Open in browser in the admin menu or /webpanel for one-click sign-in.
• Sign-in: On another PC, enter the 6-digit code from the Web Panel tab; it is valid for 5 minutes.
• Offline access: Admins who have been in-game once can continue using the panel and companion app while offline.
• Permissions: Offline access also supports ACE, QBCore permissions, and ESX groups.
• Multi-server: Connect and switch between multiple servers in one panel.

🔧 Improved

• Remembered rights: Refresh every two minutes while playing and when leaving; rights are removed after three minutes online without panel access.
• Permissions: Panel permissions and rank assignments take priority.
• Paired devices: Each connection is a paired device you can sign out in-game under Settings > Companion.
• Security: Every click is checked live against the admin's rank and permissions, using the in-game rate limit and action log.
• Legacy address: admin.agencyg.de forwards to the new panel.

📦 Update notes

• Copy the new files over your Agency-Admin folder; keep web/images/custom.
• Replace Config.WebPanelHttp with Config.Companion.WebPanel and WebPanelCommand; use Config.WebPanelFiles for the file manager.
• Keep Config.Companion.EnableRemote enabled because sign-in uses the Agency relay.
• You can delete server/webhttp.lua and the webpanel folder.
• You can remove any reverse proxy or agency_admin_public_url and agency_admin_trust_proxy lines configured for the panel.

✨ New

• Pictures: Included images for 161 vehicles, 58 peds, 229 objects and 88 weapons.
• Pictures: Super admins can capture missing images in game, retake one or a list, and identify invalid model names.
• Branding: Show your server name and logo in the panel.
• Player profiles: Show Cfx.re forum pictures for linked accounts and initials avatars for others.
• Dashboard: Admins can arrange, resize, hide, show and reset tiles; layouts are saved per admin.
• Global search: Ctrl + K searches players, vehicles, weapons, objects and pages, with categories, highlighted matches and quick actions limited by permissions.
• System Performance: Show live main-thread tick time, uptime and started resources using server-published metrics; the port is detected automatically.
• Object spawner: Includes 229 props in 13 categories, checked against game files.
• Hotkeys: Give duty, noclip, godmode and other tools their own keys, subject to server-side permission checks.

🔧 Improved

• Design: Adds gold accents, raised tiles, pill buttons and an animated gold sidebar highlight that follows page changes or mouse movement.
• Player info: Give or take money in a small window.
• Safety: Teleport All and Kick All ask for confirmation.
• Settings: Shows the version at the bottom.
• Object spawner: Adds a render distance slider for placed objects.
• Noclip: Set speed with the mouse wheel.

🐛 Fixed

• Search: Player names can no longer inject code and break the menu.
• Dashboard: No longer shows CPU and RAM as available metrics; FiveM has no native for them.
• Player profiles: Fixes real avatar display using the available Cfx.re pictures instead of the unavailable avatar service and incorrect Steam address.
• Noclip: Opening the pause menu or map no longer spins the camera or breaks controls.
• Dashboard: Stops saving tile order on every refresh and rebuilding several times when the panel reopens.
• Design: Changing the accent colour no longer leaves over 100 gold details behind.

⚙️ Config

• Branding: Configure the server name and logo with Config.Branding.
• Noclip: Configure mouse wheel speed with Config.Noclip.
• Hotkeys: Configure tool keys with Config.Hotkeys.
• Configuration: config.lua has new blocks for branding, player avatars, pictures, metrics, noclip, hotkeys and the object spawner.

📦 Update notes

• Back up your existing values, install the new config.lua, then set your values again. Do not copy your old file over the new one.
• Replace the object list in config/objects.lua with the renewed list.
• screenshot-basic is only required to capture your own pictures.
• Custom pictures are saved in web/images/custom; keep this folder when updating.
• Ranks, permissions, bans, spawned objects and dashboard layouts survive the update. No import is needed.
• The manifest changed. Run refresh before restarting the resource, or restart the server.
• config.lua, config lists, translations and the menu remain editable.

✨ New

• Agency Companion: Pair staff devices with /aaconnect or /aac, then scan the QR code or enter the 6-digit code.
• Agency Companion: Manage players, bans and ranks; kick, ban, freeze, spectate, goto, bring, heal and revive; log out paired devices.
• Agency Companion: View the live server console and run commands as your own client, with localized autocomplete for scanned and framework commands.
• Agency Companion: The free app is available on iOS and Android. Setup guide: companion.agencyg.de.
• Agency Companion: One app links to Agency-Admin, Phone, Pad, Elevator, Reports and more.

🔧 Improved

• Localization: Translated new app, pairing, console and UI text into all 13 supported languages: EN, DE, CS, ES, FR, IT, NL, PL, PT, RO, RU, SV and TR.
• Security: Pairing is staff-only. Tokens grant no rights, and each action is checked against live permissions, including ACE, framework, rank and per-player overrides for online players.
• Security: Offline permission checks use identifiers and live rank tables; pure ACE-only admins must be online.
• Security: Companion requests are checked at both the companion layer and the panel action pipe, with remote-action rate limiting.
• Pairing: The 6-digit code remains visible while a device is linked, allowing additional phones to pair.

🐛 Fixed

• Server events: Give-weapon, spawn-object, edit-object and claim-vehicle-ownership now require panel access and the matching action permission, checked server-side.
• Pairing: The 6-digit code now always appears under the QR code.
• Panel: Improved companion panel open and close behaviour, with additional NUI polish.

⚙️ Config

• Set Config.Companion.Enable = false to disable the optional companion integration.
• Pairing codes expire after Config.Companion.TokenTTL, which defaults to 5 minutes.

📦 Update notes

• Existing ranks, permissions, bans and panel settings remain unchanged. No migration or data loss.
• Pairing tables are created automatically on first start; no manual SQL changes are needed.
• Requires oxmysql, which is already required. Restart the resource via txAdmin or ensure Agency-Admin.
• Replace these files: fxmanifest.lua, config.lua, client/main.lua, client/companion.lua, server/db.lua, server/main.lua, server/companion.lua, server/companion_relay.lua, web/index.html, web/style.css, web/app.js, web/companion.js, web/qrcode.min.js, shared/locale.lua, all files in locales/. Review the Config.Companion block when keeping your own config.lua.

✨ New

• Ban opens a modal with a required reason of up to 200 characters and duration options: Permanent, 1h, 6h, 24h, 48h, 7d, or 30d.
• Ban kick messages show the reason and timed ban expiry; the banned players list shows expiry dates.
• Direct commands use the same rank permissions as panel buttons and are blocked without permission.
• /agoto [id] uses goto_player to teleport to a player; /abring [id] uses bring_player to bring a player to you.
• /arevive [id] uses revive_player to revive a player; /aheal [id] uses heal_player to heal a player.
• /aslay [id] and /akill [id] use slay_player to kill a player; /akill is an alias.
• /aclothing [id] uses open_clothing_menu to open a player's clothing menu.
• /akick [id] [reason] uses kick_player to kick a player.
• /aban [id] [reason] uses ban_player for a permanent ban; /aban [id] 1h/6h/24h/7d/30d [reason] creates a timed ban.
• /anoclip uses tool_noclip to toggle noclip for yourself; /atpm uses goto_player to teleport to your map waypoint.
• Vehicles can now be spawned by name.

🐛 Fixed

• Tabs now respect explicit false denials for tab_server and tab_vehicles, even when implied action permissions exist.
• Clothing, teleport, and other action commands are now registered and use the same permission checks as their panel buttons.
• Open Inventory now detects ox_inventory first, then qs-inventory, then esx_inventoryhud as a fallback.
• Ban modal overlays and elements now use pointer-events: all, allowing clicks and keyboard input.
• saveBanState and loadBanState now persist the expires field in banned_players.json, allowing timed bans to auto-expire after a restart.
• Revive now clears QBCore and ESX server-side death state before client resurrection.

📦 Update notes

• Overwrite your existing Agency-Admin folder with this version; no database changes are required.
• On ESX, Open Inventory works automatically with ox_inventory or qs-inventory, without config changes.

✨ New

• Agency Admin: Integrated the reports module into the admin panel.
• Agency Admin: Added a Discord webhook for admin actions, including bans, kicks, and money changes.
• Agency Reports V2: Added a return button to send a brought player back to their original position with one click.

📦 Update notes

• Version: 1.2.0

✨ New

• Added a draggable in-game console window, opened from a dashboard tile.
• Added per-client persistent command history.
• Added a configurable server_console permission in the Permissions panel.

🔧 Improved

• All admin data now uses a single agency_admin_data table via oxmysql.
• Admin data uses triple-redundant storage and survives folder deletion, clean reinstalls, and overwrites.
• Object Spawner: Spawned objects are persisted server-side via SQL, JSON, and KVP.
• UI: Reworked card-in animations and removed content-swap flicker when changing tabs.
• UI: Player counts, performance, and bans refresh silently without rebuilding the visible tab.

📦 Update notes

• Overwrite files to update. Do not delete the existing folder; SQL keeps your data safe.

✨ New

• Object Spawner: Added search, placement, and persistent storage for spawned objects.
• Admin Duty: Added an interactive clothing menu with spinner controls.
• Admin Duty: Added separate male and female outfit presets per rank.
• Admin Duty: Added per-rank nametags with customizable text, color, and scale.

🔧 Improved

• Permissions: Reworked rank and permission management, now handled in-game through the Settings panel.
• Permissions: Rank assignments, permissions, clothing presets, and nametags are stored server-side in JSON, without config editing.
• Permissions: Added per-player rank assignments with optional permission overrides.
• Permissions: Changes apply instantly to online staff members.

🐛 Fixed

• Fixed a server crash that prevented players from joining.
• Improved error handling for ban checks and data loading.
• Fixed a green hair color bug.
• Fixed multiple UI bugs.

📦 Update notes

• Only server admins with global ACE can manage ranks and permissions, preventing privilege escalation.
• Spawned objects are saved server-side, synced across all players, and persist through resource restarts and server reboots.