I found TokenLock, which is great... But the trouble is, it also prevents ME from moving them.
Basically I want to make it so the players can only control their tokens during combat, and outside of that, I can lock them. But I still need to be able to move them myself as the GM.
Does any such thing exist?
With all things API I usually start by asking 'why' for any given problem.
Why do you want/need to lock the players tokens? Are they being disruptive or metagaming, rather than iron fist I'd adopt a social approach and talk to them about it... extreme case, kick the offenders.
Next up is the simple solution, move the player ribbon to a splash page in-between encounters.
Next up is the low tech solution, draw a DL box around them out of combat, they won't be able to go anywhere.
Finally you get into the API solutions, TokenLock is the only currently 'released' one that I know of, could likely tweak that to allow GM control still? Failing that you'd need something bespoke I reckon.
The only alternative to the way TokenLock is right now is to remove player control from the token/character. Currently, the API does not receive information about who is changing a token when a move or similar occurs. TokenLock does its best to infer that by allowing the GM to move things that have no assigned controllers (because we know it has to be the GM then), but can't tell who is doing the moving if anyone is assigned control.