VonixGuardian/Reference/Action types

Action types#

Every row in the audit log has an action type. The type determines the token you use in a: filters, the database id it is stored under, and which direction (+ / -) the row carries.

a: accepts three shapes: exact tokens, family umbrellas, and CoreProtect aliases.

Family umbrellas#

A bare category name expands to every action in that category.

Family	Contains
`block`	`+block` `-block` `burn` `ignite` `fade` `form` `spread` `dispense` `+piston` `-piston` `+bucket` `-bucket` `decay` `entityblock` `fluid` `trample` `transform`
`container`	`+container` `-container` `+inventory` `-inventory` `+hopper` `-hopper`
`item`	`-item` `+item` `craft`
`entity`	`kill` `spawn` `einteract` `+hanging` `-hanging`
`world`	`explosion` `grow` `portal` `populate`
`message`	`chat` `command` `sign`
`session`	`+session` `-session` `username`
`interact`	`click` `redstone`

/vg lookup a:block            ← all block-category actions
/vg lookup a:container        ← all container and inventory movement
/vg lookup a:message          ← chat, commands, and signs together

CoreProtect aliases#

Three aliases exist so muscle memory from /co keeps working.

Alias	Expands to
`a:login`	`+session`
`a:logout`	`-session`
`a:inventory`	`+inventory` and `-inventory`

Full token reference#

Direction column: + is a placement/deposit-type action, - a removal/break type, and neutral actions carry no direction.

Blocks#

Token	DB id	Family	Dir	Records
`+block`	1	block	+	Block placed by a player or entity.
`-block`	2	block	−	Block broken.
`burn`	15	block	−	Block destroyed by fire.
`ignite`	16	block	+	Fire lit on a block.
`fade`	17	block	−	Block faded (ice melting, coral dying, snow melting).
`form`	18	block	+	Block formed naturally (snow, ice, basalt, obsidian from lava+water).
`spread`	19	block	+	Block spread (grass, mycelium, sculk).
`dispense`	20	block	·	Dispenser or dropper emitted an item or placed a block.
`+piston`	21	block	+	Piston extended into a position.
`-piston`	22	block	−	Piston retracted from a position.
`+bucket`	23	block	+	Bucket emptied (placing water or lava).
`-bucket`	24	block	−	Bucket filled (removing water, lava, powder snow, or a fish).
`decay`	25	block	−	Leaves decayed.
`entityblock`	26	block	·	An entity changed a block — the modded mob-griefing path.
`fluid`	40	block	+	Water or lava flowed into an adjacent cell.
`trample`	41	block	−	Farmland trampled to dirt by a landing entity. Rollback restores the farmland.
`transform`	42	block	·	A block re-shaped in place: dyed, waxed, stripped, scraped, hoed, or any other non-air to non-air replacement. The recorded target is the block that was there, so rollback puts the original shape back.

Containers and inventory#

Token	DB id	Family	Dir	Records
`+container`	3	container	+	Player put items into a container.
`-container`	4	container	−	Player took items out of a container.
`+inventory`	27	container	+	Player inventory deposit.
`-inventory`	28	container	−	Player inventory withdrawal.
`+hopper`	29	container	+	Hopper moved items into a container.
`-hopper`	30	container	−	Hopper pulled items out of a container.

Items#

Token	DB id	Family	Dir	Records
`-item`	5	item	−	Item dropped by a player.
`+item`	6	item	+	Item picked up.
`craft`	31	item	·	Item crafted.

Entities#

Token	DB id	Family	Dir	Records
`kill`	7	entity	·	Entity killed.
`spawn`	32	entity	+	Entity spawned.
`einteract`	33	entity	·	Player interacted with an entity (leash, breed, shear, mount, …).
`+hanging`	34	entity	+	Hanging entity placed (painting, item frame).
`-hanging`	35	entity	−	Hanging entity broken.

World#

Token	DB id	Family	Dir	Records
`explosion`	8	world	−	Explosion. Destroys blocks and records the blast centre.
`grow`	36	world	+	Structure grew (tree, mushroom, vine, kelp).
`portal`	37	world	+	Portal frame was completed or lit.
`populate`	38	world	+	Chunk population placed blocks.

Messages#

Token	DB id	Family	Dir	Records
`chat`	9	message	·	Chat message sent.
`command`	10	message	·	Command executed.
`sign`	11	message	·	Sign edited. On 1.20+ the row also carries the face, dye colour, and waxed state.

Sessions and identity#

Token	DB id	Family	Dir	Records
`+session`	12	session	+	Player joined.
`-session`	13	session	−	Player left.
`username`	14	session	·	Player changed their username.

Interaction#

Token	DB id	Family	Dir	Records
`click`	39	interact	·	Player interacted with a block (button, lever, door, trapdoor, …).
`redstone`	43	interact	·	Redstone component actuated: lever, button, repeater, comparator, daylight detector, pressure plate, tripwire. Recorded as evidence only — not rollback-able, because flipping a lever back can start the machine an operator is trying to stop.

Rows that can be rolled back#

Not every action is reversible. Rollback and restore act on world state; message and session rows are recorded for investigation only.

Category	Reversible
block, container, item, entity, world	Yes, for the state-changing members
message (`chat`, `command`, `sign`)	No — stored for evidence and search
session (`+session`, `-session`, `username`)	No

A rollback whose filter matches only non-reversible rows reports zero applied steps with no error; the rows remain in the log.

Choosing a filter#

You want	Use
Everything a player touched	`u:Steve`
Blocks only, both directions	`a:block`
Only what they broke	`a:-block`
Only what they placed	`a:+block`
Container theft	`a:-container`
Everything a modded mob broke	`a:entityblock`
All explosion damage	`a:explosion`
Natural fire damage	`a:burn`
Lava or water griefing	`a:fluid` plus `u:#lava` or `u:#water`
Player-caused block changes only	`a:block` with `u:` naming players, excluding `u:#mob:*`