Shun Mod Sync

Synchronize administrator-managed mods before joining a Minecraft Forge server. Version 1.0.0 uses per-mod acquisition rules for both first installation and later updates.

Three acquisition methods

• SERVER: download from the server only for your own mods or files whose redistribution permission the administrator has verified.
• OFFICIAL: the client downloads directly from a configured official HTTPS source.
• MANUAL: the player opens the official page, downloads the specified version, and places it in the dedicated imports folder.

OFFICIAL and MANUAL files are not newly copied into the server distribution cache or exposed through its download API. Failure to obtain an official file does not fall back to server redistribution.

Features

• Synchronizes managed MOD IDs using exact file sizes and SHA-256 hashes.
• Verifies signed manifests, JAR contents, required dependencies, and compatible versions before changing installed mods.
• Uses Minecraft account identity and the current whitelist when the server whitelist is enabled.
• Applies a validated update after shutdown, restarts once, and reconnects.
• Leaves unmanaged mods, personal settings, saves, and map data outside the synchronization scope.

Requirements and migration

Minecraft Java 1.20.1 / Forge 47.4.10 or later in the 47.x series / Java 17. Install Shun Mod Sync manually on both clients and server. It does not install or update Minecraft, Forge, or Java. No additional mod is required.

Older clients may not understand the new acquisition rules. If an older client cannot continue, close Minecraft and manually replace Shun Mod Sync with 1.0.0 before reconnecting.

Server setup

1. Back up and stop the server, place the JAR in mods, and start once.
2. Stop the server and edit config/shun-mod-sync-server.json. Defaults are enabled=false and an empty managed list.
3. Configure managedModIds, optional blockedModIds, and per-ID sources. A source uses mode, pageUrl, downloadUrl, and permission.
4. SERVER requires verified redistribution rights. OFFICIAL requires an approved HTTPS download host and a recorded permission basis. MANUAL requires an official HTTPS pageUrl and an empty downloadUrl. The permission field records your verification; it does not grant permission.
5. Server-compatible managed JARs go in mods; client-only managed JARs go in shun-mod-sync/client-mods. Originals are retained to identify the expected versions and hashes, even for OFFICIAL/MANUAL. Include required dependencies in the managed configuration.
6. Keep enable-status=true. Make the separate HTTPS distribution port reachable (default TCP 48272); no firewall or router ports are opened automatically. Restart after changing files or configuration. No live reload command is provided.

If sources is omitted, this build recognizes four project-owned IDs for SERVER and includes exact-hash acquisition metadata for 18 external files. Known projects with unknown file hashes use MANUAL; unknown projects without a source page stop distribution until sources is configured. Explicit administrator sources take precedence. Blocked IDs remain excluded.

The advertisedEndpoint setting supports a different public host or port. Server distribution uses a pinned public key and its own TLS service; ordinary TLS-termination proxies are unsupported. Official downloads use separate HTTPS connections with standard certificate and hostname verification.

Client setup and manual imports

1. Install this mod, launch Minecraft, and connect.
2. On first connection, compare the server public-key fingerprint with one independently supplied by the administrator before trusting it. Only trust administrators whose programs you intend to run.
3. If manual acquisition is required, use the file button to open the official page after confirmation. Download the exact version and put it in shun-mod-sync/imports/ inside the game folder.
4. While that screen is open, matching files are checked about every two seconds. Exact size/hash matches resume synchronization automatically; Recheck and Cancel are also available.

The entire browser Downloads folder is not searched. Wrong versions, incomplete files, and symbolic links are not applied. Website authentication and manual-download restrictions are not bypassed.

Limitations

Managed copies may be downgraded to the server-specified version. Removing a server JAR alone does not instruct clients to delete it. Missing dependencies are not searched for automatically. Distribution routes do not guarantee compliance with every license or API condition; administrators must verify each source. Proxy compatibility is untested. With whitelist enabled, offline-mode identity cannot be verified and access is rejected.

日本語

接続前に管理対象MODを揃えます。1.0.0では初回導入・更新ともにSERVER（再配布許可確認済み）、OFFICIAL（公式HTTPSから直接取得）、MANUAL（公式ページから本人が取得）を使い分けます。公式取得失敗時にサーバー配布へ切り替えません。手動取得のJARはゲーム内の案内に従いshun-mod-sync/imports/へ保存してください。旧クライアントが対応できない場合、本MODを先に手動で1.0.0へ更新します。

License: All Rights Reserved.