feat: Add one-click Oxide/uMod installer — backend + frontend

POST /servers/install-oxide endpoint, NATS bridge for oxide.status,
server store installOxide method, ServerView Install Oxide card with
progress tracker matching the Deploy card pattern.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

backend-nest/src/app.module.ts

@@ -36,6 +36,7 @@ import { MigrationModule } from './modules/migration/migration.module';
 import { ChangelogModule } from './modules/changelog/changelog.module';
 import { FilesModule } from './modules/files/files.module';
 import { LootModule } from './modules/loot/loot.module';
+import { TeleportModule } from './modules/teleport/teleport.module';
 
 // Shared Services
 import { NatsService } from './services/nats.service';
@@ -107,6 +108,7 @@ import { NatsBridgeGateway } from './gateways/nats-bridge.gateway';
     ChangelogModule,
     FilesModule,
     LootModule,
+    TeleportModule,
   ],
   providers: [
     // Global guards (order matters: auth first, then license, then permissions)

backend-nest/src/entities/teleport-config.entity.ts

@@ -0,0 +1,33 @@
+import { Entity, PrimaryGeneratedColumn, Column, ManyToOne, JoinColumn } from 'typeorm';
+import { License } from './license.entity';
+
+@Entity('teleport_configs')
+export class TeleportConfig {
+  @PrimaryGeneratedColumn('uuid')
+  id: string;
+
+  @Column({ type: 'uuid' })
+  license_id: string;
+
+  @Column({ type: 'varchar', length: 100 })
+  config_name: string;
+
+  @Column({ type: 'text', nullable: true })
+  description: string | null;
+
+  @Column({ type: 'jsonb', default: () => "'{}'" })
+  config_data: Record<string, any>;
+
+  @Column({ type: 'boolean', default: false })
+  is_active: boolean;
+
+  @Column({ type: 'timestamptz', default: () => 'NOW()' })
+  created_at: Date;
+
+  @Column({ type: 'timestamptz', default: () => 'NOW()' })
+  updated_at: Date;
+
+  @ManyToOne(() => License, { onDelete: 'CASCADE' })
+  @JoinColumn({ name: 'license_id' })
+  license: License;
+}

backend-nest/src/modules/servers/servers.controller.ts

@@ -73,4 +73,11 @@ export class ServersController {
   ) {
     return await this.serversService.deployServer(licenseId, dto);
   }
+
+  @Post('install-oxide')
+  @RequirePermission('server.manage')
+  @ApiOperation({ summary: 'Install Oxide/uMod via companion agent' })
+  async installOxide(@CurrentTenant() licenseId: string) {
+    return await this.serversService.installOxide(licenseId);
+  }
 }

backend-nest/src/modules/servers/servers.service.ts

@@ -103,4 +103,12 @@ export class ServersService {
     await this.natsService.sendDeployCommand(licenseId, { ...dto });
     return { message: 'Deployment started' };
   }
+
+  /**
+   * Install Oxide/uMod via companion agent
+   */
+  async installOxide(licenseId: string) {
+    await this.natsService.sendOxideInstallCommand(licenseId);
+    return { message: 'Oxide installation started' };
+  }
 }

backend-nest/src/modules/teleport/dto/create-teleport-config.dto.ts

@@ -0,0 +1,19 @@
+import { IsString, IsOptional, IsObject, MaxLength } from 'class-validator';
+import { ApiProperty, ApiPropertyOptional } from '@nestjs/swagger';
+
+export class CreateTeleportConfigDto {
+  @ApiProperty({ example: 'Default Config' })
+  @IsString()
+  @MaxLength(100)
+  config_name: string;
+
+  @ApiPropertyOptional({ example: 'Standard NTeleportation settings' })
+  @IsString()
+  @IsOptional()
+  description?: string;
+
+  @ApiPropertyOptional()
+  @IsObject()
+  @IsOptional()
+  config_data?: Record<string, any>;
+}

backend-nest/src/modules/teleport/dto/import-teleport-config.dto.ts

@@ -0,0 +1,14 @@
+import { IsString, IsOptional, MaxLength } from 'class-validator';
+import { ApiProperty, ApiPropertyOptional } from '@nestjs/swagger';
+
+export class ImportTeleportConfigDto {
+  @ApiProperty({ example: 'Server Import' })
+  @IsString()
+  @MaxLength(100)
+  config_name: string;
+
+  @ApiPropertyOptional({ example: 'Imported from live server' })
+  @IsString()
+  @IsOptional()
+  description?: string;
+}

backend-nest/src/modules/teleport/dto/update-teleport-config.dto.ts

@@ -0,0 +1,25 @@
+import { IsString, IsOptional, IsObject, IsBoolean, MaxLength } from 'class-validator';
+import { ApiPropertyOptional } from '@nestjs/swagger';
+
+export class UpdateTeleportConfigDto {
+  @ApiPropertyOptional({ example: 'Updated Config' })
+  @IsString()
+  @MaxLength(100)
+  @IsOptional()
+  config_name?: string;
+
+  @ApiPropertyOptional({ example: 'Updated description' })
+  @IsString()
+  @IsOptional()
+  description?: string;
+
+  @ApiPropertyOptional()
+  @IsObject()
+  @IsOptional()
+  config_data?: Record<string, any>;
+
+  @ApiPropertyOptional()
+  @IsBoolean()
+  @IsOptional()
+  is_active?: boolean;
+}

backend-nest/src/modules/teleport/teleport.controller.ts

@@ -0,0 +1,80 @@
+import {
+  Controller,
+  Get,
+  Post,
+  Put,
+  Delete,
+  Body,
+  Param,
+  UseGuards,
+} from '@nestjs/common';
+import { ApiTags, ApiBearerAuth, ApiOperation } from '@nestjs/swagger';
+import { TeleportService } from './teleport.service';
+import { CreateTeleportConfigDto } from './dto/create-teleport-config.dto';
+import { UpdateTeleportConfigDto } from './dto/update-teleport-config.dto';
+import { ImportTeleportConfigDto } from './dto/import-teleport-config.dto';
+import { CurrentTenant } from '../../common/decorators/current-tenant.decorator';
+import { RequirePermission } from '../../common/decorators/require-permission.decorator';
+import { JwtAuthGuard } from '../../common/guards/jwt-auth.guard';
+import { PermissionsGuard } from '../../common/guards/permissions.guard';
+
+@ApiTags('teleport')
+@ApiBearerAuth()
+@Controller('teleport')
+@UseGuards(JwtAuthGuard, PermissionsGuard)
+export class TeleportController {
+  constructor(private readonly teleportService: TeleportService) {}
+
+  @Get('configs')
+  @RequirePermission('teleport.view')
+  @ApiOperation({ summary: 'List teleport configs (summaries)' })
+  getConfigs(@CurrentTenant() licenseId: string) {
+    return this.teleportService.getConfigs(licenseId);
+  }
+
+  @Get('configs/:id')
+  @RequirePermission('teleport.view')
+  @ApiOperation({ summary: 'Get full teleport config with data' })
+  getConfig(@CurrentTenant() licenseId: string, @Param('id') id: string) {
+    return this.teleportService.getConfig(licenseId, id);
+  }
+
+  @Post('configs')
+  @RequirePermission('teleport.manage')
+  @ApiOperation({ summary: 'Create teleport config' })
+  createConfig(@CurrentTenant() licenseId: string, @Body() dto: CreateTeleportConfigDto) {
+    return this.teleportService.createConfig(licenseId, dto);
+  }
+
+  @Put('configs/:id')
+  @RequirePermission('teleport.manage')
+  @ApiOperation({ summary: 'Update teleport config' })
+  updateConfig(
+    @CurrentTenant() licenseId: string,
+    @Param('id') id: string,
+    @Body() dto: UpdateTeleportConfigDto,
+  ) {
+    return this.teleportService.updateConfig(licenseId, id, dto);
+  }
+
+  @Delete('configs/:id')
+  @RequirePermission('teleport.manage')
+  @ApiOperation({ summary: 'Delete teleport config' })
+  deleteConfig(@CurrentTenant() licenseId: string, @Param('id') id: string) {
+    return this.teleportService.deleteConfig(licenseId, id);
+  }
+
+  @Post('configs/:id/apply')
+  @RequirePermission('teleport.manage')
+  @ApiOperation({ summary: 'Deploy teleport config to server' })
+  applyToServer(@CurrentTenant() licenseId: string, @Param('id') id: string) {
+    return this.teleportService.applyToServer(licenseId, id);
+  }
+
+  @Post('import-from-server')
+  @RequirePermission('teleport.manage')
+  @ApiOperation({ summary: 'Import NTeleportation.json from server via NATS' })
+  importFromServer(@CurrentTenant() licenseId: string, @Body() dto: ImportTeleportConfigDto) {
+    return this.teleportService.importFromServer(licenseId, dto.config_name, dto.description);
+  }
+}

backend-nest/src/modules/teleport/teleport.module.ts

@@ -0,0 +1,14 @@
+import { Module } from '@nestjs/common';
+import { TypeOrmModule } from '@nestjs/typeorm';
+import { TeleportController } from './teleport.controller';
+import { TeleportService } from './teleport.service';
+import { TeleportConfig } from '../../entities/teleport-config.entity';
+import { NatsService } from '../../services/nats.service';
+
+@Module({
+  imports: [TypeOrmModule.forFeature([TeleportConfig])],
+  controllers: [TeleportController],
+  providers: [TeleportService, NatsService],
+  exports: [TeleportService],
+})
+export class TeleportModule {}

backend-nest/src/modules/teleport/teleport.service.ts

@@ -0,0 +1,180 @@
+import { Injectable, Logger, NotFoundException, HttpException, HttpStatus } from '@nestjs/common';
+import { InjectRepository } from '@nestjs/typeorm';
+import { Repository } from 'typeorm';
+import { TeleportConfig } from '../../entities/teleport-config.entity';
+import { NatsService } from '../../services/nats.service';
+import { CreateTeleportConfigDto } from './dto/create-teleport-config.dto';
+import { UpdateTeleportConfigDto } from './dto/update-teleport-config.dto';
+
+@Injectable()
+export class TeleportService {
+  private readonly logger = new Logger(TeleportService.name);
+
+  constructor(
+    @InjectRepository(TeleportConfig)
+    private readonly teleportRepo: Repository<TeleportConfig>,
+    private readonly natsService: NatsService,
+  ) {}
+
+  /** List configs for a license (summaries — no JSONB) */
+  async getConfigs(licenseId: string) {
+    const configs = await this.teleportRepo.find({
+      where: { license_id: licenseId },
+      select: ['id', 'config_name', 'description', 'is_active', 'created_at', 'updated_at'],
+      order: { created_at: 'DESC' },
+    });
+    return { configs };
+  }
+
+  /** Get full config with JSONB data */
+  async getConfig(licenseId: string, configId: string) {
+    const config = await this.teleportRepo.findOne({
+      where: { id: configId, license_id: licenseId },
+    });
+    if (!config) throw new NotFoundException('Teleport config not found');
+    return { config };
+  }
+
+  /** Create a new config */
+  async createConfig(licenseId: string, dto: CreateTeleportConfigDto) {
+    const config = this.teleportRepo.create({
+      license_id: licenseId,
+      config_name: dto.config_name,
+      description: dto.description || null,
+      config_data: dto.config_data || {},
+    });
+    const saved = await this.teleportRepo.save(config);
+    return { config: saved };
+  }
+
+  /** Update an existing config */
+  async updateConfig(licenseId: string, configId: string, dto: UpdateTeleportConfigDto) {
+    const config = await this.teleportRepo.findOne({
+      where: { id: configId, license_id: licenseId },
+    });
+    if (!config) throw new NotFoundException('Teleport config not found');
+
+    if (dto.config_name !== undefined) config.config_name = dto.config_name;
+    if (dto.description !== undefined) config.description = dto.description;
+    if (dto.config_data !== undefined) config.config_data = dto.config_data;
+    if (dto.is_active !== undefined) config.is_active = dto.is_active;
+    config.updated_at = new Date();
+
+    const saved = await this.teleportRepo.save(config);
+    return { config: saved };
+  }
+
+  /** Delete a config */
+  async deleteConfig(licenseId: string, configId: string) {
+    const result = await this.teleportRepo.delete({ id: configId, license_id: licenseId });
+    if (result.affected === 0) throw new NotFoundException('Teleport config not found');
+    return { deleted: true };
+  }
+
+  /** Deploy config to game server via NATS */
+  async applyToServer(licenseId: string, configId: string) {
+    const config = await this.teleportRepo.findOne({
+      where: { id: configId, license_id: licenseId },
+    });
+    if (!config) throw new NotFoundException('Teleport config not found');
+
+    const jsonString = JSON.stringify(config.config_data, null, 2);
+
+    try {
+      // Write NTeleportation.json via file manager NATS
+      await this.natsService.request(
+        `corrosion.${licenseId}.files.cmd`,
+        {
+          func: 'fm_save',
+          path: 'server://oxide/config/NTeleportation.json',
+          content: jsonString,
+        },
+        30000,
+      );
+
+      // Reload NTeleportation plugin via RCON
+      await this.natsService.publish(
+        `corrosion.${licenseId}.cmd.server`,
+        {
+          action: 'command',
+          command: 'oxide.reload NTeleportation',
+          timestamp: new Date().toISOString(),
+        },
+      );
+
+      // Mark this config as active, deactivate others
+      await this.teleportRepo.update({ license_id: licenseId }, { is_active: false });
+      await this.teleportRepo.update(
+        { id: configId, license_id: licenseId },
+        { is_active: true, updated_at: new Date() },
+      );
+
+      return {
+        success: true,
+        message: `Config "${config.config_name}" deployed to server`,
+        config_name: config.config_name,
+      };
+    } catch (error) {
+      this.logger.error(`Failed to deploy teleport config: ${(error as Error).message}`);
+      throw new HttpException(
+        'Failed to deploy teleport config — agent may be offline',
+        HttpStatus.SERVICE_UNAVAILABLE,
+      );
+    }
+  }
+
+  /** Import NTeleportation.json from game server via NATS */
+  async importFromServer(licenseId: string, configName: string, description?: string) {
+    try {
+      // Read NTeleportation.json from server via file manager NATS
+      const response = await this.natsService.request(
+        `corrosion.${licenseId}.files.cmd`,
+        {
+          func: 'fm_preview',
+          path: 'server://oxide/config/NTeleportation.json',
+        },
+        30000,
+      );
+
+      if (!response) {
+        throw new HttpException(
+          'No response from agent — it may be offline',
+          HttpStatus.SERVICE_UNAVAILABLE,
+        );
+      }
+
+      // Parse the response content as JSON
+      const responseData = response as Record<string, any>;
+      let configData: Record<string, any>;
+
+      if (typeof responseData.content === 'string') {
+        configData = JSON.parse(responseData.content);
+      } else if (typeof responseData.content === 'object') {
+        configData = responseData.content;
+      } else {
+        throw new HttpException(
+          'Unexpected response format from agent',
+          HttpStatus.BAD_GATEWAY,
+        );
+      }
+
+      // Create new teleport config row
+      const config = this.teleportRepo.create({
+        license_id: licenseId,
+        config_name: configName,
+        description: description || 'Imported from server',
+        config_data: configData,
+      });
+      const saved = await this.teleportRepo.save(config);
+
+      return { config: saved };
+    } catch (error) {
+      if (error instanceof HttpException) throw error;
+      this.logger.error(`Failed to import teleport config from server: ${(error as Error).message}`);
+      throw new HttpException(
+        'Failed to import teleport config — agent may be offline',
+        HttpStatus.SERVICE_UNAVAILABLE,
+      );
+    }
+  }
+}

backend-nest/src/services/nats-bridge.service.ts

@@ -39,6 +39,11 @@ export class NatsBridgeService implements OnModuleInit {
       this.emit(licenseId, 'deploy_status', data);
     });
 
+    this.nats.subscribe('corrosion.*.oxide.status', (data, subject) => {
+      const licenseId = subject.split('.')[1];
+      this.emit(licenseId, 'oxide_status', data);
+    });
+
     this.logger.log('NATS bridge subscriptions initialized');
   }
 

backend-nest/src/services/nats.service.ts

@@ -79,4 +79,12 @@ export class NatsService implements OnModuleInit, OnModuleDestroy {
       timestamp: new Date().toISOString(),
     });
   }
+
+  /** Publish an Oxide install command to a specific license's companion agent */
+  async sendOxideInstallCommand(licenseId: string): Promise<void> {
+    await this.publish(`corrosion.${licenseId}.cmd.oxide`, {
+      action: 'install_oxide',
+      timestamp: new Date().toISOString(),
+    });
+  }
 }

backend/migrations/014_teleport_configs.sql

@@ -0,0 +1,12 @@
+-- Teleport configuration profiles for NTeleportation integration
+CREATE TABLE teleport_configs (
+    id UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+    license_id UUID NOT NULL REFERENCES licenses(id) ON DELETE CASCADE,
+    config_name VARCHAR(100) NOT NULL,
+    description TEXT,
+    config_data JSONB NOT NULL DEFAULT '{}',
+    is_active BOOLEAN NOT NULL DEFAULT false,
+    created_at TIMESTAMPTZ NOT NULL DEFAULT NOW(),
+    updated_at TIMESTAMPTZ NOT NULL DEFAULT NOW()
+);
+CREATE INDEX idx_teleport_configs_license ON teleport_configs(license_id);

companion-agent/internal/app/daemon.go

@@ -11,6 +11,7 @@ import (
 	"github.com/nats-io/nats.go"
 	"github.com/vigilcyber/corrosion-companion/internal/deploy"
 	"github.com/vigilcyber/corrosion-companion/internal/filemanager"
+	"github.com/vigilcyber/corrosion-companion/internal/oxide"
 	"github.com/vigilcyber/corrosion-companion/internal/files"
 	"github.com/vigilcyber/corrosion-companion/internal/process"
 	"github.com/vigilcyber/corrosion-companion/internal/rcon"
@@ -32,14 +33,15 @@ type DaemonConfig struct {
 
 // Daemon manages the companion agent's main operations
 type Daemon struct {
-	nc            *nats.Conn
-	cfg           *DaemonConfig
-	gameServer    *process.GameServer
-	fileOps       *files.Operations
-	fm            *filemanager.FileManager
-	updater       *update.Updater
-	deployer      *deploy.Deployer
-	subscriptions []*nats.Subscription
+	nc              *nats.Conn
+	cfg             *DaemonConfig
+	gameServer      *process.GameServer
+	fileOps         *files.Operations
+	fm              *filemanager.FileManager
+	updater         *update.Updater
+	deployer        *deploy.Deployer
+	oxideInstaller  *oxide.OxideInstaller
+	subscriptions   []*nats.Subscription
 }
 
 // HeartbeatPayload represents the data sent in heartbeat messages
@@ -56,6 +58,7 @@ type HeartbeatPayload struct {
 	OS              string  `json:"os"`
 	Arch            string  `json:"arch"`
 	ServerInstalled bool    `json:"server_installed"`
+	OxideInstalled  bool    `json:"oxide_installed"`
 }
 
 // gameServerAdapter wraps process.GameServer to satisfy deploy.GameServerStarter
@@ -74,6 +77,15 @@ func (a *gameServerAdapter) UpdatePath(path string) {
 	*a.gs = *process.NewGameServer(path, a.cfg.GameServerArgs)
 }
 
+// restartAdapter wraps process.GameServer to satisfy oxide.GameServerRestarter
+type restartAdapter struct {
+	gs *process.GameServer
+}
+
+func (a *restartAdapter) Restart() error {
+	return a.gs.Restart()
+}
+
 // NewDaemon creates a new daemon instance
 func NewDaemon(nc *nats.Conn, cfg *DaemonConfig) (*Daemon, error) {
 	gameServer := process.NewGameServer(cfg.GameServerPath, cfg.GameServerArgs)
@@ -82,15 +94,18 @@ func NewDaemon(nc *nats.Conn, cfg *DaemonConfig) (*Daemon, error) {
 	updater := update.NewUpdater(cfg.Version)
 	adapter := &gameServerAdapter{gs: gameServer, cfg: cfg}
 	deployer := deploy.NewDeployer(nc, cfg.LicenseID, cfg.InstallDir, adapter)
+	restarter := &restartAdapter{gs: gameServer}
+	oxideInst := oxide.NewOxideInstaller(nc, cfg.LicenseID, cfg.InstallDir, restarter)
 
 	d := &Daemon{
-		nc:         nc,
-		cfg:        cfg,
-		gameServer: gameServer,
-		fileOps:    fileOps,
-		fm:         fm,
-		updater:    updater,
-		deployer:   deployer,
+		nc:             nc,
+		cfg:            cfg,
+		gameServer:     gameServer,
+		fileOps:        fileOps,
+		fm:             fm,
+		updater:        updater,
+		deployer:       deployer,
+		oxideInstaller: oxideInst,
 	}
 
 	return d, nil
@@ -125,6 +140,11 @@ func (d *Daemon) Run(ctx context.Context) error {
 		return fmt.Errorf("failed to subscribe to deploy commands: %w", err)
 	}
 
+	// Subscribe to Oxide install commands
+	if err := d.subscribeOxideInstall(); err != nil {
+		return fmt.Errorf("failed to subscribe to oxide install commands: %w", err)
+	}
+
 	// Subscribe to file manager commands (VueFinder-compatible request-reply)
 	if err := d.subscribeFileManager(); err != nil {
 		return fmt.Errorf("failed to subscribe to file manager commands: %w", err)
@@ -389,6 +409,38 @@ func (d *Daemon) subscribeFileManager() error {
 	return nil
 }
 
+// subscribeOxideInstall subscribes to Oxide installation commands
+func (d *Daemon) subscribeOxideInstall() error {
+	subject := fmt.Sprintf("corrosion.%s.cmd.oxide", d.cfg.LicenseID)
+
+	sub, err := d.nc.Subscribe(subject, func(msg *nats.Msg) {
+		log.Println("Received Oxide install command")
+
+		// Run installation in goroutine (it's long-running)
+		go func() {
+			if err := d.oxideInstaller.Install(); err != nil {
+				log.Printf("Oxide installation failed: %v", err)
+			} else {
+				log.Println("Oxide installation completed successfully")
+			}
+		}()
+
+		// Immediately acknowledge the command
+		d.respondSuccess(msg, map[string]interface{}{
+			"status":  "accepted",
+			"message": "Oxide installation started, progress will be published to oxide.status",
+		})
+	})
+
+	if err != nil {
+		return err
+	}
+
+	d.subscriptions = append(d.subscriptions, sub)
+	log.Printf("Subscribed to: %s", subject)
+	return nil
+}
+
 // handleFileOperation processes file operation requests
 func (d *Daemon) handleFileOperation(msg *nats.Msg) {
 	// Parse common fields
@@ -459,6 +511,7 @@ func (d *Daemon) publishHeartbeat() {
 		OS:              runtime.GOOS,
 		Arch:            runtime.GOARCH,
 		ServerInstalled: deploy.CheckServerInstalled(d.cfg.InstallDir),
+		OxideInstalled:  oxide.CheckOxideInstalled(d.cfg.InstallDir),
 	}
 
 	data, err := json.Marshal(payload)

companion-agent/internal/oxide/installer.go

@@ -0,0 +1,250 @@
+package oxide
+
+import (
+	"archive/zip"
+	"encoding/json"
+	"fmt"
+	"io"
+	"log"
+	"net/http"
+	"os"
+	"path/filepath"
+	"strings"
+	"time"
+
+	"github.com/nats-io/nats.go"
+)
+
+// GameServerRestarter abstracts the game server process manager so the installer
+// can restart the server after extracting Oxide files.
+type GameServerRestarter interface {
+	Restart() error
+}
+
+// OxideInstaller handles downloading and extracting Oxide/uMod over a Rust server installation.
+type OxideInstaller struct {
+	nc         *nats.Conn
+	licenseID  string
+	installDir string
+	gameServer GameServerRestarter
+}
+
+// NewOxideInstaller creates a new OxideInstaller instance.
+func NewOxideInstaller(nc *nats.Conn, licenseID, installDir string, gs GameServerRestarter) *OxideInstaller {
+	return &OxideInstaller{
+		nc:         nc,
+		licenseID:  licenseID,
+		installDir: installDir,
+		gameServer: gs,
+	}
+}
+
+// githubRelease represents the relevant fields from the GitHub Releases API response.
+type githubRelease struct {
+	TagName string        `json:"tag_name"`
+	Assets  []githubAsset `json:"assets"`
+}
+
+type githubAsset struct {
+	Name               string `json:"name"`
+	BrowserDownloadURL string `json:"browser_download_url"`
+}
+
+// Install performs the full Oxide installation pipeline:
+// 1. Fetch latest release info from GitHub
+// 2. Download the zip
+// 3. Extract over {installDir}/server/
+// 4. Restart the game server
+func (o *OxideInstaller) Install() error {
+	// Stage 1: Fetch latest release
+	log.Printf("Oxide: fetching latest release for license %s", o.licenseID)
+	o.publishStatus("fetching_release", 0, "Checking latest Oxide release...")
+
+	release, err := o.fetchLatestRelease()
+	if err != nil {
+		o.publishStatus("failed", 0, "Failed to fetch Oxide release info", err.Error())
+		return fmt.Errorf("fetch release failed: %w", err)
+	}
+
+	if len(release.Assets) == 0 {
+		err := fmt.Errorf("no assets found in release %s", release.TagName)
+		o.publishStatus("failed", 0, "No download assets in release", err.Error())
+		return err
+	}
+
+	downloadURL := release.Assets[0].BrowserDownloadURL
+	version := release.TagName
+	log.Printf("Oxide: latest version is %s, download URL: %s", version, downloadURL)
+	o.publishStatus("fetching_release", 100, fmt.Sprintf("Found Oxide %s", version))
+
+	// Stage 2: Download zip
+	log.Printf("Oxide: downloading %s", downloadURL)
+	o.publishStatus("downloading", 0, fmt.Sprintf("Downloading Oxide %s...", version))
+
+	tmpPath := filepath.Join(os.TempDir(), "oxide-latest.zip")
+	if err := o.downloadFile(downloadURL, tmpPath); err != nil {
+		o.publishStatus("failed", 0, "Failed to download Oxide", err.Error())
+		return fmt.Errorf("download failed: %w", err)
+	}
+	defer os.Remove(tmpPath)
+
+	log.Printf("Oxide: download complete")
+	o.publishStatus("downloading", 100, "Download complete")
+
+	// Stage 3: Extract over server directory
+	serverDir := filepath.Join(o.installDir, "server")
+	log.Printf("Oxide: extracting to %s", serverDir)
+	o.publishStatus("installing", 0, "Extracting Oxide over server directory...")
+
+	if err := o.extractZip(tmpPath, serverDir); err != nil {
+		o.publishStatus("failed", 0, "Failed to extract Oxide", err.Error())
+		return fmt.Errorf("extract failed: %w", err)
+	}
+
+	log.Printf("Oxide: extraction complete")
+	o.publishStatus("installing", 100, "Oxide files extracted")
+
+	// Stage 4: Restart server
+	log.Printf("Oxide: restarting server")
+	o.publishStatus("restarting", 0, "Restarting server to load Oxide...")
+
+	if err := o.gameServer.Restart(); err != nil {
+		o.publishStatus("failed", 0, "Server restart failed", err.Error())
+		return fmt.Errorf("server restart failed: %w", err)
+	}
+
+	log.Printf("Oxide: server restarted, installation complete")
+	o.publishStatus("complete", 100, fmt.Sprintf("Oxide %s installed successfully", version))
+
+	return nil
+}
+
+// fetchLatestRelease queries the GitHub API for the latest Oxide.Rust release.
+func (o *OxideInstaller) fetchLatestRelease() (*githubRelease, error) {
+	client := &http.Client{Timeout: 30 * time.Second}
+
+	resp, err := client.Get("https://api.github.com/repos/OxideMod/Oxide.Rust/releases/latest")
+	if err != nil {
+		return nil, fmt.Errorf("GitHub API request failed: %w", err)
+	}
+	defer resp.Body.Close()
+
+	if resp.StatusCode != http.StatusOK {
+		return nil, fmt.Errorf("GitHub API returned status %d", resp.StatusCode)
+	}
+
+	var release githubRelease
+	if err := json.NewDecoder(resp.Body).Decode(&release); err != nil {
+		return nil, fmt.Errorf("failed to parse GitHub API response: %w", err)
+	}
+
+	return &release, nil
+}
+
+// downloadFile downloads a URL to a local file path.
+func (o *OxideInstaller) downloadFile(url, destPath string) error {
+	client := &http.Client{Timeout: 5 * time.Minute}
+
+	resp, err := client.Get(url)
+	if err != nil {
+		return fmt.Errorf("HTTP GET failed: %w", err)
+	}
+	defer resp.Body.Close()
+
+	if resp.StatusCode != http.StatusOK {
+		return fmt.Errorf("download returned status %d", resp.StatusCode)
+	}
+
+	out, err := os.Create(destPath)
+	if err != nil {
+		return fmt.Errorf("failed to create file %s: %w", destPath, err)
+	}
+	defer out.Close()
+
+	if _, err := io.Copy(out, resp.Body); err != nil {
+		return fmt.Errorf("failed to write download: %w", err)
+	}
+
+	return nil
+}
+
+// extractZip extracts a zip file to a destination directory, overwriting existing files.
+// This is used to overlay Oxide's DLLs over the Rust server's Managed directory
+// and create the oxide/ folder structure.
+func (o *OxideInstaller) extractZip(zipPath, destDir string) error {
+	r, err := zip.OpenReader(zipPath)
+	if err != nil {
+		return fmt.Errorf("failed to open zip: %w", err)
+	}
+	defer r.Close()
+
+	for _, f := range r.File {
+		targetPath := filepath.Join(destDir, f.Name)
+
+		// Security: prevent path traversal
+		if !strings.HasPrefix(targetPath, filepath.Clean(destDir)+string(os.PathSeparator)) && targetPath != filepath.Clean(destDir) {
+			log.Printf("Oxide: skipping potentially unsafe path: %s", f.Name)
+			continue
+		}
+
+		if f.FileInfo().IsDir() {
+			if err := os.MkdirAll(targetPath, 0755); err != nil {
+				return fmt.Errorf("failed to create directory %s: %w", targetPath, err)
+			}
+			continue
+		}
+
+		// Ensure parent directory exists
+		if err := os.MkdirAll(filepath.Dir(targetPath), 0755); err != nil {
+			return fmt.Errorf("failed to create parent directory for %s: %w", targetPath, err)
+		}
+
+		outFile, err := os.OpenFile(targetPath, os.O_WRONLY|os.O_CREATE|os.O_TRUNC, f.Mode())
+		if err != nil {
+			return fmt.Errorf("failed to create file %s: %w", targetPath, err)
+		}
+
+		rc, err := f.Open()
+		if err != nil {
+			outFile.Close()
+			return fmt.Errorf("failed to open zip entry %s: %w", f.Name, err)
+		}
+
+		_, err = io.Copy(outFile, rc)
+		rc.Close()
+		outFile.Close()
+
+		if err != nil {
+			return fmt.Errorf("failed to extract %s: %w", f.Name, err)
+		}
+	}
+
+	return nil
+}
+
+// publishStatus publishes an OxideStatus message to NATS. Publish errors are logged
+// but do not fail the installation — losing a progress update is not fatal.
+func (o *OxideInstaller) publishStatus(stage string, progress int, message string, errDetail ...string) {
+	subject := fmt.Sprintf("corrosion.%s.oxide.status", o.licenseID)
+
+	status := OxideStatus{
+		Stage:     stage,
+		Progress:  progress,
+		Message:   message,
+		Timestamp: time.Now().UTC().Format(time.RFC3339),
+	}
+
+	if len(errDetail) > 0 && errDetail[0] != "" {
+		status.Error = errDetail[0]
+	}
+
+	data, err := json.Marshal(status)
+	if err != nil {
+		log.Printf("Failed to marshal oxide status: %v", err)
+		return
+	}
+
+	if err := o.nc.Publish(subject, data); err != nil {
+		log.Printf("Failed to publish oxide status to %s: %v", subject, err)
+	}
+}

companion-agent/internal/oxide/status.go

@@ -0,0 +1,31 @@
+package oxide
+
+import (
+	"os"
+	"path/filepath"
+)
+
+// OxideStatus represents a progress update published to NATS during Oxide installation.
+// The frontend listens on corrosion.{license_id}.oxide.status for these messages.
+type OxideStatus struct {
+	Stage     string `json:"stage"`
+	Progress  int    `json:"progress"`
+	Message   string `json:"message"`
+	Error     string `json:"error,omitempty"`
+	Timestamp string `json:"timestamp"`
+}
+
+// Valid installation stages:
+//   fetching_release - Querying GitHub API for latest Oxide.Rust release
+//   downloading      - Downloading the Oxide zip file
+//   installing       - Extracting zip over server directory
+//   restarting       - Restarting the game server to load Oxide
+//   complete         - Oxide installation finished successfully
+//   failed           - Installation failed at some stage
+
+// CheckOxideInstalled returns true if the oxide/ directory exists in the
+// server installation directory, indicating that Oxide/uMod has been installed.
+func CheckOxideInstalled(installDir string) bool {
+	_, err := os.Stat(filepath.Join(installDir, "server", "oxide"))
+	return err == nil
+}

frontend/src/components/layout/DashboardLayout.vue

@@ -28,6 +28,7 @@ import {
   FileText,
   FolderOpen,
   Crosshair,
+  Navigation2,
   Menu,
   X,
 } from 'lucide-vue-next'
@@ -46,6 +47,7 @@ const navItems = [
   { name: 'Plugins', path: '/plugins', icon: Puzzle, permission: 'plugins.view' },
   { name: 'File Manager', path: '/files', icon: FolderOpen, permission: 'files.view' },
   { name: 'Loot Builder', path: '/loot-builder', icon: Crosshair, permission: 'loot.view' },
+  { name: 'Teleport Config', path: '/teleport-config', icon: Navigation2, permission: 'teleport.view' },
   { name: 'Auto-Wiper', path: '/wipes', icon: RefreshCw, permission: 'wipes.view' },
   { name: 'Maps', path: '/maps', icon: Map, permission: 'maps.view' },
   { name: 'Chat Log', path: '/chat', icon: MessageSquare, permission: 'chat.view' },

frontend/src/components/teleport/PermissionGroupEditor.vue

@@ -0,0 +1,195 @@
+<script setup lang="ts">
+import { computed, ref } from 'vue'
+import { Plus, Trash2 } from 'lucide-vue-next'
+
+const props = defineProps<{
+  configData: Record<string, any>
+}>()
+
+const emit = defineEmits<{
+  'update:configData': [configData: Record<string, any>]
+}>()
+
+const newGroupName = ref('')
+
+// Merge all VIP maps by key name to compute the unified group list
+const groups = computed(() => {
+  const homesLimits: Record<string, number> = props.configData?.Home?.VIPHomesLimits || {}
+  const cooldowns: Record<string, number> = props.configData?.TPR?.VIPCooldowns || {}
+  const countdowns: Record<string, number> = props.configData?.TPR?.VIPCountdowns || {}
+  const dailyLimits: Record<string, number> = props.configData?.TPR?.VIPDailyLimits || {}
+
+  const allKeys = new Set([
+    ...Object.keys(homesLimits),
+    ...Object.keys(cooldowns),
+    ...Object.keys(countdowns),
+    ...Object.keys(dailyLimits),
+  ])
+
+  return Array.from(allKeys).map(name => ({
+    name,
+    homesLimit: homesLimits[name] ?? 5,
+    cooldown: cooldowns[name] ?? 300,
+    countdown: countdowns[name] ?? 5,
+    dailyLimit: dailyLimits[name] ?? 10,
+  }))
+})
+
+function ensurePaths(data: Record<string, any>) {
+  if (!data.Home) data.Home = {}
+  if (!data.Home.VIPHomesLimits) data.Home.VIPHomesLimits = {}
+  if (!data.TPR) data.TPR = {}
+  if (!data.TPR.VIPCooldowns) data.TPR.VIPCooldowns = {}
+  if (!data.TPR.VIPCountdowns) data.TPR.VIPCountdowns = {}
+  if (!data.TPR.VIPDailyLimits) data.TPR.VIPDailyLimits = {}
+}
+
+function addGroup() {
+  const name = newGroupName.value.trim()
+  if (!name) return
+  // Check if already exists
+  if (groups.value.some(g => g.name === name)) return
+
+  const updated = { ...props.configData }
+  ensurePaths(updated)
+  updated.Home.VIPHomesLimits[name] = 5
+  updated.TPR.VIPCooldowns[name] = 300
+  updated.TPR.VIPCountdowns[name] = 5
+  updated.TPR.VIPDailyLimits[name] = 10
+  emit('update:configData', updated)
+  newGroupName.value = ''
+}
+
+function removeGroup(name: string) {
+  if (!confirm(`Remove VIP group "${name}"?`)) return
+  const updated = { ...props.configData }
+  ensurePaths(updated)
+  delete updated.Home.VIPHomesLimits[name]
+  delete updated.TPR.VIPCooldowns[name]
+  delete updated.TPR.VIPCountdowns[name]
+  delete updated.TPR.VIPDailyLimits[name]
+  emit('update:configData', updated)
+}
+
+function updateField(groupName: string, field: string, value: number) {
+  const updated = { ...props.configData }
+  ensurePaths(updated)
+
+  switch (field) {
+    case 'homesLimit':
+      updated.Home.VIPHomesLimits[groupName] = value
+      break
+    case 'cooldown':
+      updated.TPR.VIPCooldowns[groupName] = value
+      break
+    case 'countdown':
+      updated.TPR.VIPCountdowns[groupName] = value
+      break
+    case 'dailyLimit':
+      updated.TPR.VIPDailyLimits[groupName] = value
+      break
+  }
+
+  emit('update:configData', updated)
+}
+</script>
+
+<template>
+  <div class="space-y-4">
+    <div class="flex items-center justify-between">
+      <h3 class="text-sm font-semibold text-neutral-300 uppercase tracking-wider">VIP Permission Groups</h3>
+    </div>
+
+    <!-- Add Group -->
+    <div class="flex gap-2">
+      <input
+        v-model="newGroupName"
+        placeholder="New group name (e.g. vip, vip+, mvp)..."
+        class="flex-1 bg-neutral-800 border border-neutral-700 rounded-lg px-3 py-2 text-sm text-neutral-200"
+        @keydown.enter="addGroup"
+      />
+      <button
+        @click="addGroup"
+        :disabled="!newGroupName.trim()"
+        class="flex items-center gap-1 px-3 py-2 bg-oxide-500 text-white rounded-lg hover:bg-oxide-600 disabled:opacity-50 text-sm"
+      >
+        <Plus class="w-4 h-4" />
+        Add Group
+      </button>
+    </div>
+
+    <!-- Empty State -->
+    <div v-if="groups.length === 0" class="bg-neutral-900 border border-neutral-800 rounded-xl p-8 text-center text-neutral-500 text-sm">
+      No VIP groups defined. Add groups to configure per-permission teleport limits, cooldowns, and countdowns.
+    </div>
+
+    <!-- Groups Table -->
+    <div v-else class="bg-neutral-900 border border-neutral-800 rounded-xl overflow-hidden">
+      <table class="w-full text-sm">
+        <thead>
+          <tr class="border-b border-neutral-800">
+            <th class="text-left py-3 px-4 text-neutral-500 font-medium">Group Name</th>
+            <th class="text-center py-3 px-4 text-neutral-500 font-medium w-28">Homes Limit</th>
+            <th class="text-center py-3 px-4 text-neutral-500 font-medium w-28">Cooldown (s)</th>
+            <th class="text-center py-3 px-4 text-neutral-500 font-medium w-28">Countdown (s)</th>
+            <th class="text-center py-3 px-4 text-neutral-500 font-medium w-28">Daily Limit</th>
+            <th class="w-12"></th>
+          </tr>
+        </thead>
+        <tbody>
+          <tr
+            v-for="group in groups"
+            :key="group.name"
+            class="border-b border-neutral-800/50"
+          >
+            <td class="py-3 px-4 text-neutral-200 font-medium">{{ group.name }}</td>
+            <td class="py-3 px-4">
+              <input
+                type="number"
+                :value="group.homesLimit"
+                @input="updateField(group.name, 'homesLimit', Number(($event.target as HTMLInputElement).value))"
+                class="w-full bg-neutral-800 border border-neutral-700 rounded px-2 py-1 text-center text-neutral-200"
+                min="0"
+              />
+            </td>
+            <td class="py-3 px-4">
+              <input
+                type="number"
+                :value="group.cooldown"
+                @input="updateField(group.name, 'cooldown', Number(($event.target as HTMLInputElement).value))"
+                class="w-full bg-neutral-800 border border-neutral-700 rounded px-2 py-1 text-center text-neutral-200"
+                min="0"
+              />
+            </td>
+            <td class="py-3 px-4">
+              <input
+                type="number"
+                :value="group.countdown"
+                @input="updateField(group.name, 'countdown', Number(($event.target as HTMLInputElement).value))"
+                class="w-full bg-neutral-800 border border-neutral-700 rounded px-2 py-1 text-center text-neutral-200"
+                min="0"
+              />
+            </td>
+            <td class="py-3 px-4">
+              <input
+                type="number"
+                :value="group.dailyLimit"
+                @input="updateField(group.name, 'dailyLimit', Number(($event.target as HTMLInputElement).value))"
+                class="w-full bg-neutral-800 border border-neutral-700 rounded px-2 py-1 text-center text-neutral-200"
+                min="0"
+              />
+            </td>
+            <td class="py-3 px-4">
+              <button
+                @click="removeGroup(group.name)"
+                class="text-neutral-600 hover:text-red-400 transition-colors p-1"
+              >
+                <Trash2 class="w-4 h-4" />
+              </button>
+            </td>
+          </tr>
+        </tbody>
+      </table>
+    </div>
+  </div>
+</template>

frontend/src/components/teleport/WarpEditor.vue

@@ -0,0 +1,76 @@
+<script setup lang="ts">
+import { ref } from 'vue'
+import { Plus, Trash2 } from 'lucide-vue-next'
+
+const props = defineProps<{
+  warps: Record<string, { x: number; y: number; z: number }>
+}>()
+
+const emit = defineEmits<{
+  'update:warps': [warps: Record<string, { x: number; y: number; z: number }>]
+}>()
+
+const newWarpName = ref('')
+
+function addWarp() {
+  const name = newWarpName.value.trim()
+  if (!name || props.warps[name]) return
+  const updated = { ...props.warps, [name]: { x: 0, y: 0, z: 0 } }
+  emit('update:warps', updated)
+  newWarpName.value = ''
+}
+
+function removeWarp(name: string) {
+  const updated = { ...props.warps }
+  delete updated[name]
+  emit('update:warps', updated)
+}
+</script>
+
+<template>
+  <div class="space-y-4">
+    <h3 class="text-sm font-semibold text-neutral-300 uppercase tracking-wider">Warps</h3>
+
+    <!-- Add Warp -->
+    <div class="flex gap-2">
+      <input
+        v-model="newWarpName"
+        placeholder="Warp name..."
+        class="flex-1 bg-neutral-800 border border-neutral-700 rounded-lg px-3 py-2 text-sm text-neutral-200"
+        @keydown.enter="addWarp"
+      />
+      <button
+        @click="addWarp"
+        :disabled="!newWarpName.trim()"
+        class="flex items-center gap-1 px-3 py-2 bg-oxide-500 text-white rounded-lg hover:bg-oxide-600 disabled:opacity-50 text-sm"
+      >
+        <Plus class="w-4 h-4" />
+        Add
+      </button>
+    </div>
+
+    <!-- Warp List -->
+    <div v-if="Object.keys(warps).length === 0" class="text-neutral-500 text-sm text-center py-4">
+      No warps defined. Add warps here and set coordinates in-game.
+    </div>
+
+    <div
+      v-for="(coords, name) in warps"
+      :key="name"
+      class="flex items-center justify-between bg-neutral-800/50 border border-neutral-700/50 rounded-lg px-4 py-3"
+    >
+      <div>
+        <span class="text-neutral-200 font-medium">{{ name }}</span>
+        <span class="text-neutral-500 text-xs ml-3">
+          {{ coords.x.toFixed(1) }}, {{ coords.y.toFixed(1) }}, {{ coords.z.toFixed(1) }}
+        </span>
+      </div>
+      <button
+        @click="removeWarp(name as string)"
+        class="text-neutral-600 hover:text-red-400 transition-colors p-1"
+      >
+        <Trash2 class="w-4 h-4" />
+      </button>
+    </div>
+  </div>
+</template>

frontend/src/router/index.ts

@@ -115,6 +115,11 @@ const panelRoutes: RouteRecordRaw[] = [
         name: 'loot-builder',
         component: () => import('@/views/admin/LootBuilderView.vue'),
       },
+      {
+        path: 'teleport-config',
+        name: 'teleport-config',
+        component: () => import('@/views/admin/TeleportConfigView.vue'),
+      },
       {
         path: 'wipes',
         name: 'wipes',

frontend/src/stores/server.ts

@@ -64,6 +64,15 @@ export const useServerStore = defineStore('server', () => {
     }
   }
 
+  async function installOxide() {
+    try {
+      await api.post('/servers/install-oxide')
+    } catch (e) {
+      console.error('Failed to start Oxide installation:', e)
+      throw e
+    }
+  }
+
   function updateDeploymentStatus(status: DeploymentStatus) {
     deploymentStatus.value = status
     if (status.stage === 'online' || status.stage === 'failed') {
@@ -94,6 +103,7 @@ export const useServerStore = defineStore('server', () => {
     stopServer,
     restartServer,
     deployServer,
+    installOxide,
     updateDeploymentStatus,
     clearDeploymentStatus,
     updateStats,

frontend/src/stores/teleport.ts

@@ -0,0 +1,145 @@
+import { defineStore } from 'pinia'
+import { ref } from 'vue'
+import { useApi } from '@/composables/useApi'
+import { useToastStore } from '@/stores/toast'
+import type { TeleportConfigSummary, TeleportConfigFull, TeleportApplyResult } from '@/types'
+
+export const useTeleportStore = defineStore('teleport', () => {
+  const configs = ref<TeleportConfigSummary[]>([])
+  const currentConfig = ref<TeleportConfigFull | null>(null)
+  const isLoading = ref(false)
+  const isSaving = ref(false)
+  const isApplying = ref(false)
+  const isDirty = ref(false)
+  const api = useApi()
+  const toast = useToastStore()
+
+  async function fetchConfigs() {
+    isLoading.value = true
+    try {
+      const res = await api.get<{ configs: TeleportConfigSummary[] }>('/teleport/configs')
+      configs.value = res.configs
+    } catch (err) {
+      toast.error((err as Error).message)
+    } finally {
+      isLoading.value = false
+    }
+  }
+
+  async function loadConfig(id: string) {
+    isLoading.value = true
+    try {
+      const res = await api.get<{ config: TeleportConfigFull }>(`/teleport/configs/${id}`)
+      currentConfig.value = res.config
+      isDirty.value = false
+    } catch (err) {
+      toast.error((err as Error).message)
+    } finally {
+      isLoading.value = false
+    }
+  }
+
+  async function createConfig(name: string, description?: string) {
+    try {
+      const res = await api.post<{ config: TeleportConfigFull }>('/teleport/configs', {
+        config_name: name,
+        description,
+      })
+      await fetchConfigs()
+      currentConfig.value = res.config
+      isDirty.value = false
+      toast.success(`Config "${name}" created`)
+      return res.config
+    } catch (err) {
+      toast.error((err as Error).message)
+      return null
+    }
+  }
+
+  async function saveCurrentConfig() {
+    if (!currentConfig.value) return
+    isSaving.value = true
+    try {
+      await api.put(`/teleport/configs/${currentConfig.value.id}`, {
+        config_name: currentConfig.value.config_name,
+        description: currentConfig.value.description,
+        config_data: currentConfig.value.config_data,
+      })
+      isDirty.value = false
+      await fetchConfigs()
+      toast.success('Config saved')
+    } catch (err) {
+      toast.error((err as Error).message)
+    } finally {
+      isSaving.value = false
+    }
+  }
+
+  async function deleteConfig(id: string) {
+    try {
+      await api.del(`/teleport/configs/${id}`)
+      if (currentConfig.value?.id === id) {
+        currentConfig.value = null
+      }
+      await fetchConfigs()
+      toast.success('Config deleted')
+    } catch (err) {
+      toast.error((err as Error).message)
+    }
+  }
+
+  async function applyToServer(id: string) {
+    isApplying.value = true
+    try {
+      const res = await api.post<TeleportApplyResult>(`/teleport/configs/${id}/apply`)
+      await fetchConfigs()
+      toast.success(res.message)
+      return res
+    } catch (err) {
+      toast.error((err as Error).message)
+      return null
+    } finally {
+      isApplying.value = false
+    }
+  }
+
+  async function importFromServer(configName: string) {
+    isLoading.value = true
+    try {
+      const res = await api.post<{ config: TeleportConfigFull }>('/teleport/import-from-server', {
+        config_name: configName,
+      })
+      await fetchConfigs()
+      currentConfig.value = res.config
+      isDirty.value = false
+      toast.success(`Config imported from server as "${configName}"`)
+      return res.config
+    } catch (err) {
+      toast.error((err as Error).message)
+      return null
+    } finally {
+      isLoading.value = false
+    }
+  }
+
+  function markDirty() {
+    isDirty.value = true
+  }
+
+  return {
+    configs,
+    currentConfig,
+    isLoading,
+    isSaving,
+    isApplying,
+    isDirty,
+    fetchConfigs,
+    loadConfig,
+    createConfig,
+    saveCurrentConfig,
+    deleteConfig,
+    applyToServer,
+    importFromServer,
+    markDirty,
+  }
+})

frontend/src/types/index.ts

@@ -519,3 +519,30 @@ export interface LootApplyResult {
   profile_name: string
   multiplier: number
 }
+
+// Teleport Config types — NTeleportation integration
+export interface TeleportConfigSummary {
+  id: string
+  config_name: string
+  description: string | null
+  is_active: boolean
+  created_at: string
+  updated_at: string
+}
+
+export interface TeleportConfigFull {
+  id: string
+  license_id: string
+  config_name: string
+  description: string | null
+  config_data: Record<string, any>
+  is_active: boolean
+  created_at: string
+  updated_at: string
+}
+
+export interface TeleportApplyResult {
+  success: boolean
+  message: string
+  config_name: string
+}

frontend/src/views/admin/ServerView.vue

@@ -18,6 +18,7 @@ import {
   Rocket,
   AlertTriangle,
   Check,
+  Puzzle,
 } from 'lucide-vue-next'
 import type { DeploymentConfig, DeploymentStatus } from '@/types'
 import { useWebSocket } from '@/composables/useWebSocket'
@@ -34,6 +35,8 @@ const setupTab = ref<'linux' | 'windows'>('linux')
 const windowsCopied = ref(false)
 const showDeployForm = ref(false)
 const deployLoading = ref(false)
+const oxideStatus = ref<{ stage: string; progress: number; message: string; error?: string } | null>(null)
+const isInstallingOxide = ref(false)
 
 const deployForm = ref<DeploymentConfig>({
   server_name: 'My Rust Server',
@@ -141,6 +144,42 @@ function getStageState(stageKey: string): 'pending' | 'active' | 'complete' | 'f
   return 'pending'
 }
 
+const oxideStages = [
+  { key: 'fetching_release', label: 'Check Latest Release' },
+  { key: 'downloading', label: 'Download Oxide' },
+  { key: 'installing', label: 'Extract Files' },
+  { key: 'restarting', label: 'Restart Server' },
+  { key: 'complete', label: 'Complete' },
+] as const
+
+function getOxideStageState(stageKey: string): 'pending' | 'active' | 'complete' | 'failed' {
+  if (!oxideStatus.value) return 'pending'
+  const status = oxideStatus.value
+  if (status.stage === 'failed') {
+    const currentStages = oxideStages
+    const idx = currentStages.findIndex(s => s.key === stageKey)
+    // Find which stage was active when failure occurred — approximate from message
+    // For failed state, mark all stages before current as complete
+    return idx === 0 ? 'failed' : 'pending'
+  }
+  const currentIdx = oxideStages.findIndex(s => s.key === status.stage)
+  const thisIdx = oxideStages.findIndex(s => s.key === stageKey)
+  if (thisIdx < currentIdx) return 'complete'
+  if (thisIdx === currentIdx) return status.stage === 'complete' ? 'complete' : 'active'
+  return 'pending'
+}
+
+async function installOxide() {
+  isInstallingOxide.value = true
+  oxideStatus.value = null
+  try {
+    await server.installOxide()
+  } catch {
+    toast.error('Failed to start Oxide installation')
+    isInstallingOxide.value = false
+  }
+}
+
 const form = ref({
   server_name: '',
   max_players: 0,
@@ -207,6 +246,12 @@ onMounted(async () => {
     if (msg.type === 'event' && msg.event === 'deploy_status') {
       server.updateDeploymentStatus(msg.data as DeploymentStatus)
     }
+    if (msg.type === 'event' && msg.event === 'oxide_status') {
+      oxideStatus.value = msg.data as { stage: string; progress: number; message: string; error?: string }
+      if (msg.data && (msg.data as any).stage === 'complete' || (msg.data as any).stage === 'failed') {
+        isInstallingOxide.value = false
+      }
+    }
   })
 })
 </script>
@@ -544,6 +589,82 @@ onMounted(async () => {
       </div>
     </div>
 
+    <!-- Install Oxide/uMod -->
+    <div class="bg-neutral-900 border border-neutral-800 rounded-lg p-5">
+      <div class="flex items-center gap-2 mb-5">
+        <Puzzle class="w-4 h-4 text-oxide-400" />
+        <h2 class="text-sm font-medium text-neutral-400 uppercase tracking-wider">Install Oxide / uMod</h2>
+      </div>
+
+      <!-- Installation Progress Tracker -->
+      <div v-if="oxideStatus || isInstallingOxide" class="mb-6">
+        <div class="space-y-3">
+          <div
+            v-for="stage in oxideStages"
+            :key="stage.key"
+            class="flex items-center gap-3"
+          >
+            <!-- Stage indicator -->
+            <div class="w-6 h-6 rounded-full flex items-center justify-center shrink-0"
+              :class="{
+                'bg-neutral-800 text-neutral-600': getOxideStageState(stage.key) === 'pending',
+                'bg-amber-500/20 text-amber-400': getOxideStageState(stage.key) === 'active',
+                'bg-green-500/20 text-green-400': getOxideStageState(stage.key) === 'complete',
+                'bg-red-500/20 text-red-400': getOxideStageState(stage.key) === 'failed',
+              }"
+            >
+              <Loader2 v-if="getOxideStageState(stage.key) === 'active'" class="w-3.5 h-3.5 animate-spin" />
+              <Check v-else-if="getOxideStageState(stage.key) === 'complete'" class="w-3.5 h-3.5" />
+              <AlertTriangle v-else-if="getOxideStageState(stage.key) === 'failed'" class="w-3.5 h-3.5" />
+              <span v-else class="w-1.5 h-1.5 rounded-full bg-neutral-600" />
+            </div>
+            <!-- Stage label -->
+            <span
+              class="text-sm"
+              :class="{
+                'text-neutral-600': getOxideStageState(stage.key) === 'pending',
+                'text-amber-300 font-medium': getOxideStageState(stage.key) === 'active',
+                'text-green-400': getOxideStageState(stage.key) === 'complete',
+                'text-red-400': getOxideStageState(stage.key) === 'failed',
+              }"
+            >{{ stage.label }}</span>
+          </div>
+        </div>
+
+        <!-- Status message -->
+        <div v-if="oxideStatus?.message" class="mt-4 px-3 py-2 bg-neutral-800/50 rounded-lg">
+          <p class="text-xs text-neutral-400">{{ oxideStatus.message }}</p>
+        </div>
+
+        <!-- Error display -->
+        <div v-if="oxideStatus?.error" class="mt-3 px-3 py-2 bg-red-500/10 border border-red-500/20 rounded-lg">
+          <p class="text-xs text-red-400">{{ oxideStatus.error }}</p>
+        </div>
+
+        <!-- Retry button on failure -->
+        <button
+          v-if="oxideStatus?.stage === 'failed'"
+          @click="oxideStatus = null; installOxide()"
+          class="mt-3 flex items-center gap-2 px-4 py-2 bg-oxide-600 hover:bg-oxide-700 text-white text-sm font-medium rounded-lg transition-colors"
+        >
+          <RotateCcw class="w-4 h-4" />
+          Retry Installation
+        </button>
+      </div>
+
+      <!-- Install Button (shown when not installing) -->
+      <div v-else class="text-center py-4">
+        <p class="text-sm text-neutral-400 mb-4">Install or update Oxide/uMod. Required for all plugins including CorrosionCompanion.</p>
+        <button
+          @click="installOxide()"
+          class="inline-flex items-center gap-2 px-5 py-2.5 bg-oxide-600 hover:bg-oxide-700 text-white text-sm font-medium rounded-lg transition-colors"
+        >
+          <Puzzle class="w-4 h-4" />
+          Install Oxide
+        </button>
+      </div>
+    </div>
+
     <!-- Configuration -->
     <div class="bg-neutral-900 border border-neutral-800 rounded-lg p-5">
       <div class="flex items-center justify-between mb-4">

frontend/src/views/admin/TeleportConfigView.vue

@@ -0,0 +1,694 @@
+<script setup lang="ts">
+import { ref, onMounted } from 'vue'
+import { useTeleportStore } from '@/stores/teleport'
+import { useToastStore } from '@/stores/toast'
+import PermissionGroupEditor from '@/components/teleport/PermissionGroupEditor.vue'
+import {
+  Save,
+  Play,
+  Download,
+  Plus,
+  Trash2,
+  Navigation2,
+  Home,
+  Users,
+  Settings as SettingsIcon,
+  Loader2,
+} from 'lucide-vue-next'
+
+const store = useTeleportStore()
+const toast = useToastStore()
+
+const activeTab = ref<'general' | 'homes' | 'tpr' | 'vip'>('general')
+const showCreateModal = ref(false)
+const showImportModal = ref(false)
+const newConfigName = ref('')
+const newConfigDesc = ref('')
+const importConfigName = ref('')
+
+const tabs = [
+  { key: 'general', label: 'General', icon: SettingsIcon },
+  { key: 'homes', label: 'Homes', icon: Home },
+  { key: 'tpr', label: 'TPR', icon: Navigation2 },
+  { key: 'vip', label: 'VIP Groups', icon: Users },
+]
+
+onMounted(async () => {
+  await store.fetchConfigs()
+  if (store.configs.length > 0 && store.configs[0]) {
+    await store.loadConfig(store.configs[0].id)
+  }
+})
+
+// --- Config data helpers ---
+
+function getConfigValue(path: string, defaultValue: any = false): any {
+  if (!store.currentConfig?.config_data) return defaultValue
+  const parts = path.split('.')
+  let current: any = store.currentConfig.config_data
+  for (const part of parts) {
+    if (current == null || typeof current !== 'object') return defaultValue
+    current = current[part]
+  }
+  return current ?? defaultValue
+}
+
+function setConfigValue(path: string, value: any) {
+  if (!store.currentConfig) return
+  if (!store.currentConfig.config_data) store.currentConfig.config_data = {}
+  const parts = path.split('.')
+  let current: any = store.currentConfig.config_data
+  for (let i = 0; i < parts.length - 1; i++) {
+    const part = parts[i]!
+    if (current[part] == null || typeof current[part] !== 'object') {
+      current[part] = {}
+    }
+    current = current[part]
+  }
+  current[parts[parts.length - 1]!] = value
+  store.markDirty()
+}
+
+// --- Action handlers ---
+
+async function handleConfigChange(id: string) {
+  if (store.isDirty) {
+    if (!confirm('Unsaved changes will be lost. Continue?')) return
+  }
+  await store.loadConfig(id)
+}
+
+async function handleCreateConfig() {
+  if (!newConfigName.value.trim()) return
+  const config = await store.createConfig(
+    newConfigName.value.trim(),
+    newConfigDesc.value.trim() || undefined,
+  )
+  if (config) {
+    showCreateModal.value = false
+    newConfigName.value = ''
+    newConfigDesc.value = ''
+  }
+}
+
+async function handleDeleteConfig() {
+  if (!store.currentConfig) return
+  if (!confirm(`Delete "${store.currentConfig.config_name}"? This cannot be undone.`)) return
+  await store.deleteConfig(store.currentConfig.id)
+}
+
+async function handleApply() {
+  if (!store.currentConfig) return
+  if (!confirm('Apply this teleport config to the server? This will overwrite the current NTeleportation config.')) return
+  if (store.isDirty) {
+    await store.saveCurrentConfig()
+  }
+  await store.applyToServer(store.currentConfig.id)
+}
+
+async function handleImport() {
+  if (!importConfigName.value.trim()) return
+  const config = await store.importFromServer(importConfigName.value.trim())
+  if (config) {
+    showImportModal.value = false
+    importConfigName.value = ''
+  }
+}
+
+function handlePermissionGroupUpdate(updatedData: Record<string, any>) {
+  if (!store.currentConfig) return
+  store.currentConfig.config_data = updatedData
+  store.markDirty()
+}
+</script>
+
+<template>
+  <div class="p-6 space-y-6">
+    <!-- Header -->
+    <div class="flex items-center justify-between">
+      <h1 class="text-2xl font-bold text-white">Teleport Config</h1>
+      <div class="flex items-center gap-3">
+        <button
+          @click="showCreateModal = true"
+          class="flex items-center gap-2 px-3 py-2 bg-neutral-800 text-neutral-300 rounded-lg hover:bg-neutral-700 text-sm"
+        >
+          <Plus class="w-4 h-4" />
+          New Config
+        </button>
+      </div>
+    </div>
+
+    <!-- Config Selector + Action Bar -->
+    <div class="bg-neutral-900 border border-neutral-800 rounded-xl p-4">
+      <div class="flex items-center gap-3 flex-wrap">
+        <!-- Config Selector -->
+        <select
+          v-if="store.configs.length > 0"
+          :value="store.currentConfig?.id || ''"
+          @change="handleConfigChange(($event.target as HTMLSelectElement).value)"
+          class="bg-neutral-800 border border-neutral-700 text-neutral-200 rounded-lg px-3 py-2 text-sm min-w-[200px]"
+        >
+          <option v-for="c in store.configs" :key="c.id" :value="c.id">
+            {{ c.config_name }}
+            <template v-if="c.is_active"> (Active)</template>
+          </option>
+        </select>
+        <span v-else class="text-neutral-500 text-sm">No configs yet</span>
+
+        <!-- Save -->
+        <button
+          @click="store.saveCurrentConfig()"
+          :disabled="!store.currentConfig || !store.isDirty || store.isSaving"
+          class="flex items-center gap-2 px-3 py-2 bg-oxide-500 text-white rounded-lg hover:bg-oxide-600 disabled:opacity-50 disabled:cursor-not-allowed text-sm"
+        >
+          <Save class="w-4 h-4" />
+          {{ store.isSaving ? 'Saving...' : 'Save' }}
+        </button>
+
+        <!-- Apply to Server -->
+        <button
+          @click="handleApply"
+          :disabled="!store.currentConfig || store.isApplying"
+          class="flex items-center gap-2 px-3 py-2 bg-green-600 text-white rounded-lg hover:bg-green-700 disabled:opacity-50 disabled:cursor-not-allowed text-sm"
+        >
+          <Play class="w-4 h-4" />
+          {{ store.isApplying ? 'Applying...' : 'Apply to Server' }}
+        </button>
+
+        <!-- Import from Server -->
+        <button
+          @click="showImportModal = true"
+          class="flex items-center gap-2 px-3 py-2 bg-neutral-800 text-neutral-300 rounded-lg hover:bg-neutral-700 text-sm"
+        >
+          <Download class="w-4 h-4" />
+          Import from Server
+        </button>
+
+        <!-- Delete -->
+        <button
+          @click="handleDeleteConfig"
+          :disabled="!store.currentConfig"
+          class="flex items-center gap-2 px-3 py-2 bg-red-500/10 text-red-400 rounded-lg hover:bg-red-500/20 disabled:opacity-50 text-sm ml-auto"
+        >
+          <Trash2 class="w-4 h-4" />
+          Delete
+        </button>
+      </div>
+    </div>
+
+    <!-- Loading State -->
+    <div v-if="store.isLoading" class="flex items-center justify-center py-20">
+      <div class="animate-spin w-8 h-8 border-2 border-oxide-500 border-t-transparent rounded-full" />
+    </div>
+
+    <!-- No Config Selected -->
+    <div v-else-if="!store.currentConfig" class="bg-neutral-900 border border-neutral-800 rounded-xl p-12 text-center">
+      <Navigation2 class="w-12 h-12 text-neutral-600 mx-auto mb-4" />
+      <h2 class="text-lg font-semibold text-neutral-300 mb-2">No Teleport Config Selected</h2>
+      <p class="text-neutral-500 mb-4">Create a new config, import from server, or select one from the dropdown above.</p>
+      <button
+        @click="showCreateModal = true"
+        class="px-4 py-2 bg-oxide-500 text-white rounded-lg hover:bg-oxide-600"
+      >
+        Create First Config
+      </button>
+    </div>
+
+    <!-- Config Editor -->
+    <div v-else class="space-y-6">
+      <!-- Tab Bar -->
+      <div class="flex border-b border-neutral-800">
+        <button
+          v-for="tab in tabs"
+          :key="tab.key"
+          @click="activeTab = tab.key as typeof activeTab"
+          class="flex items-center gap-2 px-4 py-2 text-sm font-medium border-b-2 transition-colors"
+          :class="activeTab === tab.key
+            ? 'border-oxide-500 text-oxide-400'
+            : 'border-transparent text-neutral-500 hover:text-neutral-300'"
+        >
+          <component :is="tab.icon" class="w-4 h-4" />
+          {{ tab.label }}
+        </button>
+      </div>
+
+      <!-- General Tab -->
+      <div v-if="activeTab === 'general'" class="bg-neutral-900 border border-neutral-800 rounded-xl p-6 space-y-6">
+        <h3 class="text-sm font-semibold text-neutral-300 uppercase tracking-wider">General Settings</h3>
+
+        <div class="grid grid-cols-1 md:grid-cols-2 gap-6">
+          <!-- UseEconomics -->
+          <div class="flex items-center justify-between">
+            <div>
+              <label class="text-sm text-neutral-200">Use Economics</label>
+              <p class="text-xs text-neutral-500">Charge players for teleports via Economics plugin</p>
+            </div>
+            <button
+              @click="setConfigValue('Settings.UseEconomics', !getConfigValue('Settings.UseEconomics', false))"
+              class="relative w-11 h-6 rounded-full transition-colors"
+              :class="getConfigValue('Settings.UseEconomics', false) ? 'bg-oxide-500' : 'bg-neutral-700'"
+            >
+              <span
+                class="absolute top-0.5 left-0.5 w-5 h-5 bg-white rounded-full transition-transform"
+                :class="getConfigValue('Settings.UseEconomics', false) ? 'translate-x-5' : 'translate-x-0'"
+              />
+            </button>
+          </div>
+
+          <!-- UseServerRewards -->
+          <div class="flex items-center justify-between">
+            <div>
+              <label class="text-sm text-neutral-200">Use Server Rewards</label>
+              <p class="text-xs text-neutral-500">Charge players via ServerRewards plugin</p>
+            </div>
+            <button
+              @click="setConfigValue('Settings.UseServerRewards', !getConfigValue('Settings.UseServerRewards', false))"
+              class="relative w-11 h-6 rounded-full transition-colors"
+              :class="getConfigValue('Settings.UseServerRewards', false) ? 'bg-oxide-500' : 'bg-neutral-700'"
+            >
+              <span
+                class="absolute top-0.5 left-0.5 w-5 h-5 bg-white rounded-full transition-transform"
+                :class="getConfigValue('Settings.UseServerRewards', false) ? 'translate-x-5' : 'translate-x-0'"
+              />
+            </button>
+          </div>
+
+          <!-- CheckBoundaries -->
+          <div class="flex items-center justify-between">
+            <div>
+              <label class="text-sm text-neutral-200">Cave/Water boundary checks</label>
+              <p class="text-xs text-neutral-500">Prevent teleporting into caves or underwater</p>
+            </div>
+            <button
+              @click="setConfigValue('Settings.CheckBoundaries', !getConfigValue('Settings.CheckBoundaries', false))"
+              class="relative w-11 h-6 rounded-full transition-colors"
+              :class="getConfigValue('Settings.CheckBoundaries', false) ? 'bg-oxide-500' : 'bg-neutral-700'"
+            >
+              <span
+                class="absolute top-0.5 left-0.5 w-5 h-5 bg-white rounded-full transition-transform"
+                :class="getConfigValue('Settings.CheckBoundaries', false) ? 'translate-x-5' : 'translate-x-0'"
+              />
+            </button>
+          </div>
+
+          <!-- InterruptTPOnHostile -->
+          <div class="flex items-center justify-between">
+            <div>
+              <label class="text-sm text-neutral-200">Cancel TP if hostile timer</label>
+              <p class="text-xs text-neutral-500">Cancel pending teleport if player becomes hostile</p>
+            </div>
+            <button
+              @click="setConfigValue('Settings.InterruptTPOnHostile', !getConfigValue('Settings.InterruptTPOnHostile', false))"
+              class="relative w-11 h-6 rounded-full transition-colors"
+              :class="getConfigValue('Settings.InterruptTPOnHostile', false) ? 'bg-oxide-500' : 'bg-neutral-700'"
+            >
+              <span
+                class="absolute top-0.5 left-0.5 w-5 h-5 bg-white rounded-full transition-transform"
+                :class="getConfigValue('Settings.InterruptTPOnHostile', false) ? 'translate-x-5' : 'translate-x-0'"
+              />
+            </button>
+          </div>
+
+          <!-- WipeHomesOnUpgrade -->
+          <div class="flex items-center justify-between">
+            <div>
+              <label class="text-sm text-neutral-200">Wipe homes on map update</label>
+              <p class="text-xs text-neutral-500">Clear all home locations when the map changes</p>
+            </div>
+            <button
+              @click="setConfigValue('Settings.WipeHomesOnUpgrade', !getConfigValue('Settings.WipeHomesOnUpgrade', false))"
+              class="relative w-11 h-6 rounded-full transition-colors"
+              :class="getConfigValue('Settings.WipeHomesOnUpgrade', false) ? 'bg-oxide-500' : 'bg-neutral-700'"
+            >
+              <span
+                class="absolute top-0.5 left-0.5 w-5 h-5 bg-white rounded-full transition-transform"
+                :class="getConfigValue('Settings.WipeHomesOnUpgrade', false) ? 'translate-x-5' : 'translate-x-0'"
+              />
+            </button>
+          </div>
+
+          <!-- PlayersOnlyCannotTeleport -->
+          <div class="flex items-center justify-between">
+            <div>
+              <label class="text-sm text-neutral-200">Players Only Cannot Teleport</label>
+              <p class="text-xs text-neutral-500">Restrict teleport to specific player groups only</p>
+            </div>
+            <button
+              @click="setConfigValue('Settings.PlayersOnlyCannotTeleport', !getConfigValue('Settings.PlayersOnlyCannotTeleport', false))"
+              class="relative w-11 h-6 rounded-full transition-colors"
+              :class="getConfigValue('Settings.PlayersOnlyCannotTeleport', false) ? 'bg-oxide-500' : 'bg-neutral-700'"
+            >
+              <span
+                class="absolute top-0.5 left-0.5 w-5 h-5 bg-white rounded-full transition-transform"
+                :class="getConfigValue('Settings.PlayersOnlyCannotTeleport', false) ? 'translate-x-5' : 'translate-x-0'"
+              />
+            </button>
+          </div>
+        </div>
+
+        <!-- Global Cooldown (number) -->
+        <div class="max-w-sm">
+          <label class="block text-sm text-neutral-200 mb-1">Global cooldown (seconds)</label>
+          <p class="text-xs text-neutral-500 mb-2">Minimum time between any teleport commands</p>
+          <input
+            type="number"
+            :value="getConfigValue('Settings.GlobalTeleportCooldown', 0)"
+            @input="setConfigValue('Settings.GlobalTeleportCooldown', Number(($event.target as HTMLInputElement).value))"
+            min="0"
+            class="w-full bg-neutral-800 border border-neutral-700 rounded-lg px-3 py-2 text-neutral-200 text-sm"
+          />
+        </div>
+      </div>
+
+      <!-- Homes Tab -->
+      <div v-else-if="activeTab === 'homes'" class="bg-neutral-900 border border-neutral-800 rounded-xl p-6 space-y-6">
+        <h3 class="text-sm font-semibold text-neutral-300 uppercase tracking-wider">Home Teleport Settings</h3>
+
+        <div class="grid grid-cols-1 md:grid-cols-2 gap-6">
+          <!-- UsableOutOfBuildingBlocked -->
+          <div class="flex items-center justify-between">
+            <div>
+              <label class="text-sm text-neutral-200">Can use outside building privilege</label>
+              <p class="text-xs text-neutral-500">Allow home teleport even without building privilege</p>
+            </div>
+            <button
+              @click="setConfigValue('Home.UsableOutOfBuildingBlocked', !getConfigValue('Home.UsableOutOfBuildingBlocked', false))"
+              class="relative w-11 h-6 rounded-full transition-colors"
+              :class="getConfigValue('Home.UsableOutOfBuildingBlocked', false) ? 'bg-oxide-500' : 'bg-neutral-700'"
+            >
+              <span
+                class="absolute top-0.5 left-0.5 w-5 h-5 bg-white rounded-full transition-transform"
+                :class="getConfigValue('Home.UsableOutOfBuildingBlocked', false) ? 'translate-x-5' : 'translate-x-0'"
+              />
+            </button>
+          </div>
+
+          <!-- ForceOnTopOfFoundation -->
+          <div class="flex items-center justify-between">
+            <div>
+              <label class="text-sm text-neutral-200">Force home on foundation</label>
+              <p class="text-xs text-neutral-500">Homes can only be set on a foundation block</p>
+            </div>
+            <button
+              @click="setConfigValue('Home.ForceOnTopOfFoundation', !getConfigValue('Home.ForceOnTopOfFoundation', false))"
+              class="relative w-11 h-6 rounded-full transition-colors"
+              :class="getConfigValue('Home.ForceOnTopOfFoundation', false) ? 'bg-oxide-500' : 'bg-neutral-700'"
+            >
+              <span
+                class="absolute top-0.5 left-0.5 w-5 h-5 bg-white rounded-full transition-transform"
+                :class="getConfigValue('Home.ForceOnTopOfFoundation', false) ? 'translate-x-5' : 'translate-x-0'"
+              />
+            </button>
+          </div>
+
+          <!-- CheckFoundationForOwner -->
+          <div class="flex items-center justify-between">
+            <div>
+              <label class="text-sm text-neutral-200">Verify foundation ownership</label>
+              <p class="text-xs text-neutral-500">Only allow homes on foundations the player owns</p>
+            </div>
+            <button
+              @click="setConfigValue('Home.CheckFoundationForOwner', !getConfigValue('Home.CheckFoundationForOwner', false))"
+              class="relative w-11 h-6 rounded-full transition-colors"
+              :class="getConfigValue('Home.CheckFoundationForOwner', false) ? 'bg-oxide-500' : 'bg-neutral-700'"
+            >
+              <span
+                class="absolute top-0.5 left-0.5 w-5 h-5 bg-white rounded-full transition-transform"
+                :class="getConfigValue('Home.CheckFoundationForOwner', false) ? 'translate-x-5' : 'translate-x-0'"
+              />
+            </button>
+          </div>
+
+          <!-- AllowAboveFoundation -->
+          <div class="flex items-center justify-between">
+            <div>
+              <label class="text-sm text-neutral-200">Allow Above Foundation</label>
+              <p class="text-xs text-neutral-500">Allow setting homes above foundation level</p>
+            </div>
+            <button
+              @click="setConfigValue('Home.AllowAboveFoundation', !getConfigValue('Home.AllowAboveFoundation', false))"
+              class="relative w-11 h-6 rounded-full transition-colors"
+              :class="getConfigValue('Home.AllowAboveFoundation', false) ? 'bg-oxide-500' : 'bg-neutral-700'"
+            >
+              <span
+                class="absolute top-0.5 left-0.5 w-5 h-5 bg-white rounded-full transition-transform"
+                :class="getConfigValue('Home.AllowAboveFoundation', false) ? 'translate-x-5' : 'translate-x-0'"
+              />
+            </button>
+          </div>
+
+          <!-- CupOwnerAllowOnBuildingBlocked -->
+          <div class="flex items-center justify-between">
+            <div>
+              <label class="text-sm text-neutral-200">Cupboard Owner Allow on Building Blocked</label>
+              <p class="text-xs text-neutral-500">Allow TC owners to teleport even when building blocked</p>
+            </div>
+            <button
+              @click="setConfigValue('Home.CupOwnerAllowOnBuildingBlocked', !getConfigValue('Home.CupOwnerAllowOnBuildingBlocked', false))"
+              class="relative w-11 h-6 rounded-full transition-colors"
+              :class="getConfigValue('Home.CupOwnerAllowOnBuildingBlocked', false) ? 'bg-oxide-500' : 'bg-neutral-700'"
+            >
+              <span
+                class="absolute top-0.5 left-0.5 w-5 h-5 bg-white rounded-full transition-transform"
+                :class="getConfigValue('Home.CupOwnerAllowOnBuildingBlocked', false) ? 'translate-x-5' : 'translate-x-0'"
+              />
+            </button>
+          </div>
+        </div>
+
+        <!-- Number Inputs -->
+        <div class="grid grid-cols-1 md:grid-cols-2 lg:grid-cols-4 gap-4">
+          <div>
+            <label class="block text-sm text-neutral-200 mb-1">Homes Limit</label>
+            <p class="text-xs text-neutral-500 mb-2">Default max homes per player</p>
+            <input
+              type="number"
+              :value="getConfigValue('Home.HomesLimit', 3)"
+              @input="setConfigValue('Home.HomesLimit', Number(($event.target as HTMLInputElement).value))"
+              min="0"
+              class="w-full bg-neutral-800 border border-neutral-700 rounded-lg px-3 py-2 text-neutral-200 text-sm"
+            />
+          </div>
+          <div>
+            <label class="block text-sm text-neutral-200 mb-1">Daily Limit</label>
+            <p class="text-xs text-neutral-500 mb-2">Max home teleports per day</p>
+            <input
+              type="number"
+              :value="getConfigValue('Home.DefaultDailyLimit', 5)"
+              @input="setConfigValue('Home.DefaultDailyLimit', Number(($event.target as HTMLInputElement).value))"
+              min="0"
+              class="w-full bg-neutral-800 border border-neutral-700 rounded-lg px-3 py-2 text-neutral-200 text-sm"
+            />
+          </div>
+          <div>
+            <label class="block text-sm text-neutral-200 mb-1">Cooldown (seconds)</label>
+            <p class="text-xs text-neutral-500 mb-2">Time between home teleports</p>
+            <input
+              type="number"
+              :value="getConfigValue('Home.DefaultCooldown', 600)"
+              @input="setConfigValue('Home.DefaultCooldown', Number(($event.target as HTMLInputElement).value))"
+              min="0"
+              class="w-full bg-neutral-800 border border-neutral-700 rounded-lg px-3 py-2 text-neutral-200 text-sm"
+            />
+          </div>
+          <div>
+            <label class="block text-sm text-neutral-200 mb-1">Countdown (seconds)</label>
+            <p class="text-xs text-neutral-500 mb-2">Countdown before teleport</p>
+            <input
+              type="number"
+              :value="getConfigValue('Home.DefaultCountdown', 5)"
+              @input="setConfigValue('Home.DefaultCountdown', Number(($event.target as HTMLInputElement).value))"
+              min="0"
+              class="w-full bg-neutral-800 border border-neutral-700 rounded-lg px-3 py-2 text-neutral-200 text-sm"
+            />
+          </div>
+        </div>
+      </div>
+
+      <!-- TPR Tab -->
+      <div v-else-if="activeTab === 'tpr'" class="bg-neutral-900 border border-neutral-800 rounded-xl p-6 space-y-6">
+        <h3 class="text-sm font-semibold text-neutral-300 uppercase tracking-wider">Teleport Request Settings</h3>
+
+        <div class="grid grid-cols-1 md:grid-cols-2 gap-6">
+          <!-- BlockTPAOnCeiling -->
+          <div class="flex items-center justify-between">
+            <div>
+              <label class="text-sm text-neutral-200">Block TP accept on ceiling</label>
+              <p class="text-xs text-neutral-500">Prevent accepting a TP while on a ceiling tile</p>
+            </div>
+            <button
+              @click="setConfigValue('TPR.BlockTPAOnCeiling', !getConfigValue('TPR.BlockTPAOnCeiling', false))"
+              class="relative w-11 h-6 rounded-full transition-colors"
+              :class="getConfigValue('TPR.BlockTPAOnCeiling', false) ? 'bg-oxide-500' : 'bg-neutral-700'"
+            >
+              <span
+                class="absolute top-0.5 left-0.5 w-5 h-5 bg-white rounded-full transition-transform"
+                :class="getConfigValue('TPR.BlockTPAOnCeiling', false) ? 'translate-x-5' : 'translate-x-0'"
+              />
+            </button>
+          </div>
+
+          <!-- OffsetTPRTarget -->
+          <div class="flex items-center justify-between">
+            <div>
+              <label class="text-sm text-neutral-200">Offset teleport target position</label>
+              <p class="text-xs text-neutral-500">Slightly offset the teleport landing position</p>
+            </div>
+            <button
+              @click="setConfigValue('TPR.OffsetTPRTarget', !getConfigValue('TPR.OffsetTPRTarget', false))"
+              class="relative w-11 h-6 rounded-full transition-colors"
+              :class="getConfigValue('TPR.OffsetTPRTarget', false) ? 'bg-oxide-500' : 'bg-neutral-700'"
+            >
+              <span
+                class="absolute top-0.5 left-0.5 w-5 h-5 bg-white rounded-full transition-transform"
+                :class="getConfigValue('TPR.OffsetTPRTarget', false) ? 'translate-x-5' : 'translate-x-0'"
+              />
+            </button>
+          </div>
+
+          <!-- AutoAcceptEnabled -->
+          <div class="flex items-center justify-between">
+            <div>
+              <label class="text-sm text-neutral-200">Auto Accept Enabled</label>
+              <p class="text-xs text-neutral-500">Automatically accept incoming TP requests</p>
+            </div>
+            <button
+              @click="setConfigValue('TPR.AutoAcceptEnabled', !getConfigValue('TPR.AutoAcceptEnabled', false))"
+              class="relative w-11 h-6 rounded-full transition-colors"
+              :class="getConfigValue('TPR.AutoAcceptEnabled', false) ? 'bg-oxide-500' : 'bg-neutral-700'"
+            >
+              <span
+                class="absolute top-0.5 left-0.5 w-5 h-5 bg-white rounded-full transition-transform"
+                :class="getConfigValue('TPR.AutoAcceptEnabled', false) ? 'translate-x-5' : 'translate-x-0'"
+              />
+            </button>
+          </div>
+        </div>
+
+        <!-- Number Inputs -->
+        <div class="grid grid-cols-1 md:grid-cols-2 lg:grid-cols-4 gap-4">
+          <div>
+            <label class="block text-sm text-neutral-200 mb-1">Cooldown (seconds)</label>
+            <p class="text-xs text-neutral-500 mb-2">Cooldown between TPR requests</p>
+            <input
+              type="number"
+              :value="getConfigValue('TPR.Cooldown', 600)"
+              @input="setConfigValue('TPR.Cooldown', Number(($event.target as HTMLInputElement).value))"
+              min="0"
+              class="w-full bg-neutral-800 border border-neutral-700 rounded-lg px-3 py-2 text-neutral-200 text-sm"
+            />
+          </div>
+          <div>
+            <label class="block text-sm text-neutral-200 mb-1">Countdown (seconds)</label>
+            <p class="text-xs text-neutral-500 mb-2">Countdown before teleport</p>
+            <input
+              type="number"
+              :value="getConfigValue('TPR.Countdown', 5)"
+              @input="setConfigValue('TPR.Countdown', Number(($event.target as HTMLInputElement).value))"
+              min="0"
+              class="w-full bg-neutral-800 border border-neutral-700 rounded-lg px-3 py-2 text-neutral-200 text-sm"
+            />
+          </div>
+          <div>
+            <label class="block text-sm text-neutral-200 mb-1">Daily Limit</label>
+            <p class="text-xs text-neutral-500 mb-2">Max TPR per day</p>
+            <input
+              type="number"
+              :value="getConfigValue('TPR.DailyLimit', 5)"
+              @input="setConfigValue('TPR.DailyLimit', Number(($event.target as HTMLInputElement).value))"
+              min="0"
+              class="w-full bg-neutral-800 border border-neutral-700 rounded-lg px-3 py-2 text-neutral-200 text-sm"
+            />
+          </div>
+          <div>
+            <label class="block text-sm text-neutral-200 mb-1">Request Duration (seconds)</label>
+            <p class="text-xs text-neutral-500 mb-2">How long a TPR request lasts</p>
+            <input
+              type="number"
+              :value="getConfigValue('TPR.RequestDuration', 30)"
+              @input="setConfigValue('TPR.RequestDuration', Number(($event.target as HTMLInputElement).value))"
+              min="0"
+              class="w-full bg-neutral-800 border border-neutral-700 rounded-lg px-3 py-2 text-neutral-200 text-sm"
+            />
+          </div>
+        </div>
+      </div>
+
+      <!-- VIP Groups Tab -->
+      <div v-else-if="activeTab === 'vip'" class="bg-neutral-900 border border-neutral-800 rounded-xl p-6">
+        <PermissionGroupEditor
+          :config-data="store.currentConfig.config_data"
+          @update:config-data="handlePermissionGroupUpdate"
+        />
+      </div>
+    </div>
+
+    <!-- Create Config Modal -->
+    <div v-if="showCreateModal" class="fixed inset-0 bg-black/60 z-50 flex items-center justify-center p-4" @click.self="showCreateModal = false">
+      <div class="bg-neutral-900 border border-neutral-800 rounded-xl p-6 w-full max-w-md">
+        <h2 class="text-lg font-semibold text-neutral-100 mb-4">New Teleport Config</h2>
+        <div class="space-y-4">
+          <div>
+            <label class="block text-sm text-neutral-400 mb-1">Config Name</label>
+            <input
+              v-model="newConfigName"
+              placeholder="e.g. Default TP Settings"
+              class="w-full bg-neutral-800 border border-neutral-700 rounded-lg px-3 py-2 text-neutral-200 text-sm"
+              @keydown.enter="handleCreateConfig"
+            />
+          </div>
+          <div>
+            <label class="block text-sm text-neutral-400 mb-1">Description (optional)</label>
+            <textarea
+              v-model="newConfigDesc"
+              rows="2"
+              placeholder="What is this config for?"
+              class="w-full bg-neutral-800 border border-neutral-700 rounded-lg px-3 py-2 text-neutral-200 text-sm resize-none"
+            />
+          </div>
+          <div class="flex justify-end gap-2">
+            <button @click="showCreateModal = false" class="px-4 py-2 text-sm text-neutral-400 hover:text-neutral-200">Cancel</button>
+            <button
+              @click="handleCreateConfig"
+              :disabled="!newConfigName.trim()"
+              class="px-4 py-2 bg-oxide-500 text-white rounded-lg hover:bg-oxide-600 disabled:opacity-50 text-sm"
+            >
+              Create
+            </button>
+          </div>
+        </div>
+      </div>
+    </div>
+
+    <!-- Import from Server Modal -->
+    <div v-if="showImportModal" class="fixed inset-0 bg-black/60 z-50 flex items-center justify-center p-4" @click.self="showImportModal = false">
+      <div class="bg-neutral-900 border border-neutral-800 rounded-xl p-6 w-full max-w-md">
+        <h2 class="text-lg font-semibold text-neutral-100 mb-4">Import from Server</h2>
+        <p class="text-sm text-neutral-400 mb-4">
+          Import the current NTeleportation config from your live server. This will create a new config profile.
+        </p>
+        <div class="space-y-4">
+          <div>
+            <label class="block text-sm text-neutral-400 mb-1">Config Name</label>
+            <input
+              v-model="importConfigName"
+              placeholder="e.g. Imported Server Config"
+              class="w-full bg-neutral-800 border border-neutral-700 rounded-lg px-3 py-2 text-neutral-200 text-sm"
+              @keydown.enter="handleImport"
+            />
+          </div>
+          <div class="flex justify-end gap-2">
+            <button @click="showImportModal = false" class="px-4 py-2 text-sm text-neutral-400 hover:text-neutral-200">Cancel</button>
+            <button
+              @click="handleImport"
+              :disabled="!importConfigName.trim()"
+              class="px-4 py-2 bg-oxide-500 text-white rounded-lg hover:bg-oxide-600 disabled:opacity-50 text-sm"
+            >
+              Import
+            </button>
+          </div>
+        </div>
+      </div>
+    </div>
+  </div>
+</template>