PEAK Map Browser

A BepInEx plugin for browsing peakmap.top community maps inside PEAK.

Usage

Press / on the main keyboard to open or close the map browser.

This is the regular slash key (Slash), not the numpad divide key (KeypadDivide).

The plugin can browse maps, open map details, download map JSON files, upload local JSON saves, and manage maps owned by the signed-in account.

Account Security

• The plugin never saves the account password.
• The access token is kept in memory only.
• The refresh token is protected with Windows DPAPI in session.json and is bound to the current Windows user.
• Tokens are refreshed automatically before expiry.
• Sign out clears the local session and attempts to call POST /api/auth/sign-out.
• The matching remote session revocation endpoint is deployed on peakmap.top and requires a valid access token.

If the local session file is copied to another Windows user account, the DPAPI-protected refresh token cannot normally be decrypted. Treat the original Windows account and its files as trusted, and sign out from the account page if the file may have been exposed.

JSON Map Requirement

Downloaded and uploaded files are TerrainCustomiser map JSON files.

To load and play these maps, use one of the following mods:

• TerrainCustomiser
• TerrainCustomiserCN

PEAK Map Browser does not load custom maps by itself.

Downloaded JSON files are saved to:

Application.persistentDataPath/TerrainCustomiser/Map Saves

Cover images use a local URL-keyed cache under:

Application.persistentDataPath/PeakMapBrowser/ImageCache

When the server returns a new image URL, the new cover is downloaded automatically.

Config

ApiBaseUrl = https://peakmap.top
Language = auto
PageSize = 12
ToggleKey = Slash

Language = auto follows the game's language. Set it to zh or en to force a language.

Changelog

0.1.1 - 2026-07-30

• Added account sign-in, sign-out, automatic access-token refresh, and account-owned map management.
• Persisted refresh tokens are protected with Windows DPAPI; access tokens remain memory-only and passwords are never saved.
• Added map editing, JSON replacement, cover replacement/removal, deletion confirmation, and upload ownership.
• Added like state synchronization, map revision metadata, and community detail dialogs.
• Added URL-keyed cover image caching to avoid downloading unchanged images repeatedly.
• Improved local map selection, description editing, cover selection, and input isolation between modal layers.
• Made minor UI adjustments for spacing, readability, and modal presentation.
• Added client support for the deployed POST /api/auth/sign-out endpoint to revoke the remote session.

0.1.0 - 2026-06-07

• Added in-game map browser for peakmap.top.
• Added JSON download and upload support.
• Added local Map Saves scanning.
• Added Chinese/English UI switching.