Configuration — ns-illegal

Editable under escrow: config.lua, data/*.lua (server-only content), locales/*.lua, bridge/*.lua. The configuration is validated on every start (/illegal validate re-runs it); errors name the exact key and keep the system disabled (err_not_ready) until fixed.

config.lua

data/activities.lua — rewards and gameplay

Config.Activities[id] = { minLevel, minRep?, xp, rep, failRep, cooldown, dailyCap, minPolice, tierMultiplier? } is the only source of XP / reputation per completion. cooldown (seconds) and dailyCap are per character and survive relogs: a completion inside them is recorded but awards nothing. failRep is applied only when a started activity runs out of time. tierMultiplier = { [label] = number 0..2 } scales the XP of completions reported with a tier label (house_robbery: low 1.0 / mid 1.5 / high 2.0; vehicle_hotwire: easy 0.75 … expert 2.0; vehicle_theft: the ns-carthief vehicle tier, easy 0.8 … expert 1.6). Unknown label = 1; the final multiplier is capped at 2.

Activities reported by the NullSect resources: vehicle_hotwire (a street theft with ns-carthief: 40 XP, cooldown 120 s, 20 per day — over the cap the theft still happens, it just gives no XP) and house_safe (the member who cracked a safe in an ns-houserobbery contract: 60 XP, 12 per day). ns-houserobbery contracts count as house_robbery, so missions that list house_robbery keep counting. ns-storerobbery reports store_robbery (every robber who got cash: 110 XP × store tier low 1.0 / mid 1.4 / high 1.8, cooldown 600 s, 10 per day) and store_safe (the one who emptied the safe: 70 XP, 10 per day).

Gameplay blocks: Config.VehicleTheft (models, spots, drop-offs, payout, lockpick), Config.Dismantle (parts), Config.HouseRobbery (interiors, houses, loot, cash, buckets), Config.Cultivation (seed, yield, grow time).

Config.VehicleTheft.locksmithSpots ('add'): also use the vehicle spots recorded in ns-locksmith (/lslocations, its data/locations.json) as parking spots; 'replace' = only those while the file has any, false = never. spotClearRadius (3.0): a parking spot is skipped while a vehicle or a player is this close to it.

Every position in these files is a default: /illegal locations moves, adds and switches points off in game and stores that in ns_illegal_points. Empty spots / dropoffs / houses lists are allowed (a start warning) when you add them in game.

Location editor (/illegal locations)

Admins only (same permission as /illegal). The panel lists every point on a map and a list:

Placing: pick a kind (or Move a point), walk / drive to the spot, a live preview follows you, E saves, Backspace cancels. The direction you face (the car's heading on parking spots) is the point's heading. The server only accepts a position within Editor.range of the admin. Reset removes the in-game change of a configured point. A drop point an open delivery contract uses cannot be switched off or deleted. Running jobs keep the positions they started with. Every change is written to ns_illegal_audit (point_add, point_move, …). World view draws markers, labels and ghosts for nearby points; Map blips shows every point on the pause map.

Add an activity module

1. Add my_activity = { minLevel = 10, xp = 100, rep = 2, cooldown = 300, dailyCap = 10 } and the locale key act_my_activity (EN + TR).
2. Validate the gameplay server-side (state, distance, timing, items) and then call Career.RecordActivity(src, 'my_activity', { uid = <server-generated unique id>, units = n, money = paid }). Never take an amount from the client. Objectives and contracts update automatically.
3. From another resource use the export instead (see below) and allow it in Config.Integrations.activityReporters.

data/locations.lua — hidden contacts

{
    id = 'my_buyer', tier = 2, codename = 'loc_my_buyer', hint = 'loc_my_buyer_hint',   -- locale keys or text
    minLevel = 12, minRep = 20, price = 9000, currency = 'cash',
    coords = vector4(0.0, 0.0, 0.0, 0.0), radius = 2.0, ped = 's_m_y_dealer_01',
    hours = { from = 20, to = 4 },          -- optional
    permanentAccess = false,                -- true: reputation is not re-checked after buying
    services = {
        sell = { categories = { 'vehicle_parts' }, prices = { car_door = 140 }, maxPerSale = 10,
                 dailyUnits = 60, cooldown = 30, activity = 'parts_sale' },
    },
},

Services: theft, house, chop, grow, sell, shop = { items = { [item] = { price, max } } }. autoUnlock = true makes a contact known for free once its requirements are met; visibleFrom shows the blurred card before the requirement level. Every sell price must belong to one of the buyer's categories.

data/objectives.lua — automatic missions

{ id = 'my_goal', title = 'obj_my_goal', description = 'obj_my_goal_desc', minLevel = 10, minRep = nil,
  activities = { 'vehicle_dismantle' }, required = 10, measure = 'completions', cycle = 'weekly',
  reward = { xp = 500, rep = 2, money = 2500, item = { name = 'lockpick', count = 2 } } },

measure = 'units' counts units (e.g. items sold). cycle: once, daily, weekly. Progress only counts while the player meets minLevel / minRep, and only for rewarded completions.

Anonymous contracts

Admins open the tablet → Anonymous → Post contract: title, description, type (activity: complete N of an activity after publishing; delivery: hand in N of an item at a drop point), requirements, duration and rewards (within Contracts.limits). The first eligible player wins; others see it as taken. Manage with /illegal contracts, /illegal cancel <id>, /illegal retry <id> (re-delivers a failed / pending reward without paying a part twice). Every create / cancel / retry is written to ns_illegal_audit.

Admin commands (/illegal, ACE ns-illegal.admin, framework admin or console)

profile <id> · setxp <id> <xp> · setrep <id> <rep> · clearname <id> · contracts · cancel <contract> · retry <contract> · testarrest <id> (only with Config.Debug = true, applies a real audited penalty) · validate · locations (the location editor, in game). Players can cancel their own job with /illegalcancel.

Integration API (server exports)

Hook: AddEventHandler('ns-illegal:hook:securityFlag', function(src, reason, detail) end) — suspicious requests.