Download File

# NeoEssentials — Changelog **Minecraft 1.21.1 – 1.21.11 · NeoForge 21.1.179+** --- ## 1.0.2.6+build.480 — 2026-07-10 ### 🐛 Bug Fixes - **ChestShop double chests:** Buy/sell, stock checks, and dynamic pricing only read one half of a double chest, so filling/emptying one side could block transactions even with space/stock free on the other side. Now reads the full combined 54-slot inventory. - **ChestShop admin shop holograms:** `/chestshop hologram enable|disable|move` could never be used on admin shops (the ownership check required a player-owner UUID that admin shops don't have). Now authorized via `neoessentials.shop.create.admin`. ### ✨ Improvements - **Command feedback messages** now show a small `[NE]` tag and use softer, vanilla-matching colors instead of harsh neon ones, so they're both more recognizable and easier on the eyes. - **NPC Shops:** Selling now actually works (previously configuring a sell price did nothing — only buying was implemented). Added a permission check (`neoessentials.shop.use`) before opening the shop menu. Added `/npcshop respawn <shopId>` to re-summon a shop's NPC if it's ever lost (e.g. void damage) without losing its configured listings. ### 🔧 Maintenance - Build version string now includes the target Minecraft version (`1.0.2.6-mc1.21.1+build.N`), matching the 26.1.x port branch. --- > The entries below (build.~225 – build.~460) reconstruct work done between > build.214 and build.480 that was never logged at the time. Build numbers are > **approximate** — dates and content are accurate to the commit history. ## 1.0.2.6+build.~460 — 2026-07-08 ### 🐛 Bug Fixes - **`/invseeedit`, `/ecedit`:** Fixed the edit lock never releasing — the first use against any target permanently locked it out for every future editor (including yourself) until a server restart. Now releases on GUI close or disconnect. - **`/pay`:** Fixed the amount and player name showing in swapped positions (e.g. "Paid `<player>$` to `1000.0`" instead of "Paid `1000.00$` to `<player>`"), plus a decimal-formatting mismatch between the amount and fee/net values in the same message. - **`/eco give|take|set|reset`:** The admin's own confirmation message was missing the currency symbol. `/eco take` also never notified the target player that money was taken — now it does, matching `give`/`set`/`reset`. - **Localization:** fixed a `localize()` overload ambiguity that silently shifted `{n}` message placeholders across jail/ban/freeze/etc. messages. Also fixed swapped/missing arguments in several moderation messages, and a duplicate-broadcast bug where staff saw every moderation action twice. - **`/jail` was completely broken** — every attempt threw an internal error before jailing the player, due to a `null` being passed where it wasn't allowed. Fixed. - **Tablist:** fixed prefix/suffix silently reverting to blank after the first refresh cycle following a reload. ### ✨ Features - Added cuboid/sphere jail regions via a configurable jail wand or WorldEdit soft-integration, with region-wide block protection. - Added an above-head nametag prefix/suffix system for the tablist. ### 🧪 Attempted (Reverted) - Briefly tried widening Minecraft version compatibility to include 26.1.x, but reverted after confirming it crashes on load — a real port needs more work and is tracked separately on its own branch. --- ## 1.0.2.6+build.~400 — 2026-07-06 ### 🐛 Bug Fixes - Fixed group permission precedence and a permission-lookup race condition. - Closed freeze/jail/vanish/mute enforcement gaps across chat, teleportation, and combat. - Fixed a kit permanent-lockout bug, a double-claim race condition, and item data loss on reload. - Fixed an Auction House item-duplication exploit and a named-item price bypass on `/sell`. - Fixed jail bounds checking ignoring dimension. ### 🔒 Security - Required an admin role on web dashboard endpoints that were previously reachable by any non-admin account. - Replaced unsalted password hashing with salted PBKDF2 (120k iterations); the default admin account now gets a random temporary password instead of a hardcoded one. --- ## 1.0.2.6+build.~330 — 2026-07-04 ### ✨ Features - Added tablist short-tokens/animations usable directly in chat, and `#`-prefixed hex gradient stops. - ChestShop items now preserve full item data (enchantments, custom names, modded NBT) instead of just a bare item ID. - Permission group prefix/suffix now render as rich text instead of raw color codes. ### 🐛 Bug Fixes - Fixed `/flyspeed` not actually applying to player flight. - Fixed a pending-shop autofill ordering bug. --- ## 1.0.2.6+build.~300 — 2026-07-03 ### 🐛 Bug Fixes - Fixed unclosed `<gradient>` chat tags corrupting trailing legacy color codes. - Fixed ChestShop click-spam and NBT-sensitive item stock matching. ### ✨ Features - Added custom skins for fake tablist entries, plus a BTLP-style column-grid tablist layout. --- ## 1.0.2.6+build.~260 — 2026-07-02 ### ✨ Features - Added a configurable movement-distance threshold for AFK detection. - Landed the initial web dashboard implementation. ### 🐛 Bug Fixes - Hardened enchantment-compatibility checks to tolerate cross-version differences instead of crashing. --- ## 1.0.2.6+build.~225 — 2026-07-01 ### ✨ Features - Added `localization.preserveCustomTranslations` config option to protect hand-edited translations from the automatic merge system. - Added web dashboard configuration groundwork. --- ## 1.0.2.6+build.214 — 2026-07-01 ### 🐛 Bug Fixes #### Inventory / Ender Chest Duplication Exploit Closed - **`/invsee`, `/inv`, `/ec`, `/enderchest` (read-only):** Opening a read-only view used a snapshot container via a standard `ChestMenu`, which allowed items to be freely dragged out — duplicating them while the originals stayed in the target's inventory. Fixed by switching to a custom menu with **locked slots** (`mayPickup` → `false`, `mayPlace` → `false`) so the snapshot is purely display-only. - **Edit mode (`/invseeedit`, `/ecedit`):** The editable inventory menu now also registers the viewer's own inventory and hotbar as proper slots, eliminating a server-client desync that could occur when transferring items between the target's and viewer's inventory. #### Shop Hologram Orphan / Stale Entity Fixes - Breaking a shop sign now removes the shop **and** its hologram atomically (new `BlockEvent.BreakEvent` handler in `ShopSignHandler`). - Shop holograms left over after manually removing entries from `shops.json` are purged by the new `ShopHologramManager.cleanOrphanedShopHolograms()` routine, which runs on server start and on `/chestshop reload`. ### ✨ Feature — Named Animation System (`{animation:NAME}`) Define text animations in `config/neoessentials/animations.json` and use them anywhere in the tablist (header/footer) via `{animation:NAME}`. **Each animation has:** - `name` — identifier for the placeholder (case-insensitive) - `frames` — list of text frames supporting `&`-codes, `&#RRGGBB` hex, `<gradient:…>`, `<rainbow>`, etc. - `frameDuration` — milliseconds per frame (minimum 50 ms) **Example** — the `Rainbow` animation from the bundled default config: ```json { "name": "Rainbow", "frames": ["&cR&6a&eo&6b&cn&6w", "..."], "frameDuration": 500 } ``` Use in tablist: `"&7Server: {animation:Rainbow} &8| &e{online}&8/&e{max}"` **Bundled animations:** `Rainbow`, `PulseStar`, `StatusDot`, `LoadingDots`, `GoldBanner`, `Spinner`, `HeartBeat` **Timing:** frames advance on wall-clock time (accurate to ~50 ms) independent of the tablist `refreshInterval`. Reload with `/tablist reload`. **New command:** `/tablist animations list` — shows all loaded animations with frame count and duration. **Files changed:** `AnimationManager.java` *(new)*, `animations.json` *(new resource)*, `TablistManager.java`, `TablistCommand.java`, `ConfigManager.java`, `tablist.json` --- ## 1.0.2.6+build.157 — 2026-05-25 ### 🐛 Bug Fix — TPA Request Confirmation Message Shows "to you" Instead of Seconds `/tpa` displayed **"Teleport request sent to Xtron. Expires in to you second(s)."** — the direction phrase `"to you"` was mistakenly passed as the timeout-seconds argument to the sender's confirmation message. Fixed: the sender now sees the correct expiry countdown (e.g. `"Expires in 30 second(s)."`), and the target-side message receives the direction phrase as intended. **Files changed:** `TeleportRequestManager.java` --- ## 1.0.2.6+build.156 — 2026-05-25 ### 🧹 Code Quality — Warning Audit Pass (Part 3) Continued IDE-warning audit: `Arrays.asList` → `List.of` / `Set.of`, `.get(0)` → `.getFirst()`, and handler cleanup. - **13 files** — Global `Arrays.asList(...)` → `List.of(...)` / `Set.of(...)` sweep: all static final immutable lists now use `List.of` or `Set.of`; removed now-unused `Arrays` imports where applicable. - **7 files** — Global `.get(0)` → `.getFirst()` modernisation (Java 21) in `WarnManager`, `JailCommand`, `NpcShopCommand`, `RealnameCommand`, `DiscordPermissionSync`, `ProxyIntegration`, `TaskScheduler`. - **`ProxyIntegration`** — `Collections.addAll` for runtime array-to-collection copy; `@SuppressWarnings("unused")` on API constants, `onPluginMessage()`, and `isShowNetworkPlayers()`. - **`CommandExecutionHandler`** — `@SuppressWarnings("unused")` on class; `@SuppressWarnings("MismatchedQueryAndUpdateOfCollection")` on `commandOutputs`; `removeFirst()` modernisation. - **`FileManagementHandler`** — `//noinspection resource` on `p.serverLevel()` (lifecycle managed by server). **Files changed:** 19 Java files --- ## 1.0.2.6+build.155 — 2026-05-25 ### 🧹 Code Quality — Warning Audit Pass (Part 2) Continued IDE-warning audit across `inventory/`, `items/`, `integrations/`, `api/`, `core/`, `shop/` sub-packages, `vault/`, and `webdashboard/` packages. - **`PermissionScanner`** — `List.of()` for static final pattern lists; removed dead null-check (`Paths.get()` never returns null); removed `throws IOException` (caught internally); fixed `peek().count()` optimization warning (collect + forEach); renamed unused param `source` → `ignoredSource`; `@SuppressWarnings("unused")` on three public API methods. - **`ExternalPermissionProvider`** — `@SuppressWarnings("unused")` on `getPermissionsStartingWith()` and `exportForPermissionsEX()`. - **`PermissionValidator` / `BaltopCommand`** — Removed unused `Collectors` import. - **`PermissionManager`** — Inline `collect(Collectors.toList())` → `.toList()`. - **22 files** — Global `collect(Collectors.toList())` → `.toList()` modernisation (Java 21) across moderation, economy, kits, shop, util, and webdashboard packages; removed now-unused `Collectors` imports where applicable. **Files changed:** 23 Java files --- ## 1.0.2.6+build.154 — 2026-05-20 ### 🧹 Code Quality — Warning & Bug Fix Pass - **IgnoreManager / MuteManager** — Removed always-false IGNORE_FILE/MUTE_FILE null checks; log `mkdirs()` failures; removed unused `sender`-parameter overloads from MuteManager (`mute(ServerPlayer, String)` / `unmute(ServerPlayer, String)`). - **MessageUtil** — Replaced `e.printStackTrace()` with `LOGGER.error()`; merged duplicate catch branches; fixed `File.delete()` result ignored; removed dead private methods (`getLanguageVersion`, `escapeNamedPlaceholders`); added `@SuppressWarnings("unused")` to intentional API-surface public methods. - **PlayerChatFormatManager / ShopManager** — Log `mkdirs()` failures; modernised `collect(Collectors.toList())` → `.toList()`. - **PlayerJoinQuitHandler** — Removed always-true `if (config != null)` guard; guarded `player.getServer().getPlayerList()` with null checks. - **LocalizationManager** — Wrapped `Files.list()` in try-with-resources (resource leak fix); added `isLanguageUnsupported()` inverse method; updated `TranslationHandler` callers. - **TaskManager** — `addFirst()` / `removeLast()` modernisation; simplified time-range if-block to a single boolean expression. - **BanManager** — Used `Optional.orElse(null)` instead of `.get()` (NPE risk); removed always-true null checks on `entry.getReason()` / `entry.getSource()`. - **Web dashboard (HTML accessibility)** — Added `for` / `aria-label` to all form inputs missing label associations across `index.html`, `shop.html`, `permissions.html`, `kits.html`, `moderation.html`, `users.html`, `cloud.html`, `discord.html`, `holograms.html`; fixed unresolvable `#players` / `#performance` / `#worlds` / `#events` nav anchors. **Files changed:** 12 Java files, 9 HTML files --- ## 1.0.2.6+build.153 — 2026-05-19 ### 🐛 Bug Fix — `ResourcePackManager` main-thread sleep - **ResourcePackManager `Thread.sleep` on server tick thread** — `server.execute()` + `Thread.sleep(1000)` blocked the server main thread for 1 second on every player login, causing rubber-banding and `Can't keep up!` warnings. Fixed: sleep moved to a background daemon thread. **Files changed:** `ResourcePackManager.java` --- ## 1.0.2.6+build.152 — 2026-05-19 ### 🐛 Bug Fix — Runtime Data in Wrong Directory - **ShopManager / PlayerChatFormatManager wrong storage dir** — Player-created shops (`shops.json`) and per-player chat format overrides (`player_chat_formats.json`) were stored in `config/neoessentials/` instead of `neoessentials/`. A config reset would silently wipe all shops and chat format assignments. Fixed to use `ResourceUtil.getDataPath()`. **Files changed:** `ShopManager.java`, `PlayerChatFormatManager.java` --- ## 1.0.2.6+build.151 — 2026-05-19 ### 🐛 Bug Fix — i18n/Language System Raw Paths - **LocalizationManager / LanguageCommand / MessageUtil raw paths** — Three i18n/language files used hardcoded `Paths.get("neoessentials", ...)` / `new File("neoessentials/...")` instead of `ResourceUtil`, causing all language/translation files to be mislocated on some hosting environments. Fixed to use `ResourceUtil.getDataPath()` / `ResourceUtil.getDataFile()`. **Files changed:** `LocalizationManager.java`, `LanguageCommand.java`, `MessageUtil.java` --- ## 1.0.2.6+build.150 — 2026-05-19 ### 🐛 Bug Fix — Scheduler Path Consistency - **TaskManager raw paths** — Scheduler data files (`tasks.json`, `execution_history.json`) were resolved via raw `Paths.get("neoessentials", "scheduler")` instead of `ResourceUtil.getDataPath()`. Fixed. **Files changed:** `TaskManager.java` --- ## 1.0.2.6+build.149 — 2026-05-19 ### 🐛 Bug Fix — Economy & Teleport System - **EconomyManager `lastActivityFile` raw path** — `balances_activity.json` was resolved from the JVM working directory instead of the server root, causing the inactive-account cleanup scheduler to misread activity data and potentially purge live balances on some hosts. Fixed to use `ResourceUtil.getDataFile()`. - **TeleportRequestManager dead code removed** — `sendTpaRequest()` was an unreachable duplicate of `sendTeleportRequest()` that silently omitted the request cooldown, `allowMultipleRequests`, and tptoggle checks. Removed. **Files changed:** `EconomyManager.java`, `TeleportRequestManager.java` --- ## 1.0.2.6+build.148 — 2026-05-19 ### 🐛 Bug Fix — BanManager: Temp IP Ban Cleanup & Expiry Checks - **Scheduler never swept IP bans** — `cleanupExpiredTempBans()` only cleaned player bans. Expired temp IP bans accumulated in memory and on disk, remaining visible in `/ipbanlist` until a manual unban. Fixed by adding an `ipBans` sweep that mirrors the existing player-ban loop. - **`isIPBanned()` ignored expiry** — returned `true` for any stored IP ban entry, including expired ones. Expired temp IP bans acted as permanent until the next server restart. Fixed to call `IPBanEntry.isExpired()` and auto-remove on lookup. **Files changed:** `BanManager.java` --- ## 1.0.2.6+build.147 — 2026-05-18 ### 🎨 Dashboard — Hologram Icon Visual Consistency Updated hologram-related navigation icons across all admin dashboard pages for visual consistency. No behaviour changes. --- ## 1.0.2.6+build.135 — 2026-05-18 ### 🔧 Dashboard — Navigation & UI Cleanup - Navigation sidebar links are now hidden for non-operator sessions - Active-link highlighting fixed on all sub-pages - `dashboard.js` authentication guard simplified; dead-code paths removed - Responsive layout tweaks in `styles.css` --- ## 1.0.2.6+build.133 — 2026-05-18 ### ✨ Feature — WebSocket Real-Time Dashboard Updates - `WebSocketEventBroadcaster` pushes live events to all connected dashboard sessions (`player_join/leave`, `server_stats`, `chat_message`, `shop_transaction`, `hologram_update`) - `POST /api/admin/broadcast` — send server announcements directly from the dashboard - Dashboard stat cards and player list update live without page refresh - New **Shop Management** dashboard page (`shop.html` / `shop.js`) — view shops, edit prices, view transactions, manage holograms **Files changed:** `WebSocketEventBroadcaster.java`, `AdminEndpoint.java`, `PlayerEndpoint.java`, `DashboardAPI.java`, `dashboard.js`, `index.html`, `shop.html`, `shop.js` --- ## 1.0.2.6+build.131 — 2026-05-18 ### ✨ Feature — Shop Hologram Management Commands New `/shop hologram` subcommands: - `/shop hologram enable <shopId>` — spawn/re-enable the shop hologram - `/shop hologram disable <shopId>` — hide the hologram without deleting the shop - `/shop hologram move <shopId>` — snap hologram to the sign's current position Hologram is automatically created/destroyed with the shop. Fixed right-click-hologram purchase detection. **Files changed:** `ShopHologramManager.java`, `ShopManager.java`, `ShopCommand.java`, `ShopInteractHandler.java`, `ShopSignHandler.java`, `ShopData.java` --- ## 1.0.2.6+build.129 — 2026-05-18 ### 🎨 Improvement — Hologram & Discord Dashboard UI Rework **Hologram dashboard:** - Responsive card-based redesign with live preview panel - Inline editors for `scale`, `lineSpacing`, `textShadow`, `textOpacity`, `backgroundColorArgb` - Frame animation editor per line; billboard/spin/hover controls exposed **Hologram renderer fixes:** - Background panel colour applied correctly; scale/spacing applied at spawn; reduced animation flicker **Discord dashboard:** - Redesigned account-link table with live status badges and one-click unlink **Files changed:** `HologramRenderer.java`, `HologramCommand.java`, `holograms.html`, `holograms.js`, `discord.html` --- ## 1.0.2.6+build.127 — 2026-05-13 ### ✨ Feature — In-Game Discord OAuth2 Registration Complete in-game Discord OAuth2 integration: - `/dashboard register discord` opens an OAuth2 authorization flow — no manual token copy-paste - New `DiscordEndpoint` routes: `auth/start`, `auth/callback`, `link`, `unlink`, `linked` - New **Discord dashboard page** (`discord.html`) for managing linked accounts - `discord_auth.json` config format updated **Files changed:** `DashboardRegisterCommand.java`, `AuthenticationHandler.java`, `DiscordEndpoint.java`, `discord.html`, `discord_auth.json` --- ## 1.0.2.6+build.125 — 2026-05-13 ### ✨ Feature — Discord-Linked Dashboard Registration - `/dashboard register discord` — starts a Discord OAuth2 link flow - `DashboardRegistrationManager` — manages one-time Discord registration tokens and associates Discord user IDs with Minecraft UUIDs **Files changed:** `DashboardRegisterCommand.java`, `DashboardRegistrationManager.java` --- ## 1.0.2.6+build.124 — 2026-05-13 ### ✨ Feature — `/dashboard update` Smart File Comparison `/dashboard update` now does per-file MD5 checksum comparison instead of overwriting everything. New subcommands: - `/dashboard update` — smart update (only changed files) - `/dashboard update check` — dry-run preview - `/dashboard update force` — unconditional overwrite (old behaviour) `/dashboard status` now shows installed vs. bundled dashboard version. **Files changed:** `DashboardFileManager.java`, `DashboardCommand.java` --- ## 1.0.2.6+build.122 — 2026-05-11 ### 🐛 Bug Fix — LuckPerms Default Permissions Not Applied When Adapter Is Unhealthy Two root causes fixed in `PermissionAPI.hasPermission()`: 1. **Registry-default block was skipped when adapter unhealthy** — the registry-default fallback was inside `if (externalAvailable)`. When LuckPerms reached ≥ 5 consecutive failures, non-OP players in the default group lost all NeoEssentials registered default permissions. Fixed by removing the guard — registry defaults now always apply. 2. **`queryTristate` called twice per check, doubling failure count** — doubled `consecutiveFailures` on every cache-miss, flipping to unhealthy at half the intended threshold. Fixed by caching `isExplicitlyDenied()` after the first call. **Files changed:** `PermissionAPI.java` --- ### 🐛 Bug Fix — AFK Kick Not Respecting Exempt Permission Players holding `neoessentials.afk.kickexempt` were being kicked by the AFK system. Fixed by adding a permission check before the kick. Also improved `AfkManager` config reading and `MessageUtil` placeholder resolution. **Files changed:** `AfkManager.java`, `MiscTeleportManager.java`, `MessageUtil.java`, `ConfigManager.java` --- ## 1.0.2.6+build.123 — 2026-05-13 ### ✨ Added — Hologram System Improvements New visual properties: `scale`, `lineSpacing`, `textShadow`, `textOpacity`, `backgroundColorArgb` New commands: - `/hologram copy <id> <newid>` — clone a hologram - `/hologram movehere <id>` — move hologram to your position - `/hologram near [radius]` — list nearby holograms - `/hologram insertline <id> <index> <text>` — insert a line at any position - `/hologram addframes <id> <lineIndex> <intervalTicks> <frame1|frame2|...>` — frame animation - `/hologram removeframes <id> <lineIndex>` — clear frame animation - `/hologram scale <id> <scale>` | `linespacing` | `shadow` | `opacity` | `background` — visual tweaks Dashboard REST API now returns all billboard/animation/visual fields for holograms. New wiki page: `HologramSystem.md` --- ## 1.0.2.6+build.120 — 2026-05-11 ### Fixed - `/help 2` and higher pages now resolve correctly. - Fixed Brigadier command shadowing where vanilla `/help <command>` intercepted numeric input before NeoEssentials pagination. - NeoEssentials now takes ownership of `/help` and `/?` command registration so page parsing is reliable for players and console. **Touched file:** `HelpCommand.java` --- ## 1.0.2.6+build.119 — 2026-05-08 ### 🐛 Bug Fix — `/tpa` Nether Roof / Underwater Cave Landings Fixed two player-reported `/tpa` landing regressions: - Nether teleports could resolve to the bedrock roof. - Ocean/boat teleports could resolve to caves under the seafloor. **Fixes:** - `TeleportLocation.scanColumnTopDown()` now starts at `min(maxBuildHeight-2, logicalHeight-1)` to avoid scanning above logical dimension space (notably Nether roof space). - `/tpa` now teleports to the target player's live location (`findSafe=false`) instead of remapping to distant "safe" spots. - `findSafeLocation()` now prefers a ±16 Y local search around the destination before full column fallback. **Files changed:** `TeleportLocation.java`, `TeleportRequestManager.java` --- ## 1.0.2.6+build.115 — 2026-05-08 ### ✨ Feature — Interactive Shop Holograms Players can now click the hologram above a sign shop directly: - **Right-click hologram** → buy - **Left-click hologram** → sell - **Owner click** → show shop info This uses the same permission and transaction pipeline as sign interaction for consistent behavior. **Files changed:** `ShopHologramManager.java` --- ## 1.0.2.6+build.113 — 2026-05-08 ### ✨ Feature — Hologram Billboard, Spin & Hover Added per-hologram orientation and animation controls: - Billboard modes: `fixed`, `vertical`, `horizontal`, `center` - Optional spin animation (speed + axis) - Optional hover/bob animation (amplitude + speed) **New commands:** - `/hologram billboard <id> <fixed|vertical|horizontal|center>` - `/hologram spin <id> on [speed] [axis]` - `/hologram spin <id> off` - `/hologram hover <id> on [amplitude] [speed]` - `/hologram hover <id> off` `/hologram info <id>` now includes billboard/spin/hover settings. **Files changed:** `HologramData.java`, `HologramRenderer.java`, `HologramScheduler.java`, `HologramCommand.java` --- ## 1.0.2.6+build.112 — 2026-05-04 ### 🐛 Bug Fix — `/back` Returns "No Previous Location" After Death After dying, `/back` consistently reported *"No previous location to return to"* even though the player's death location should have been captured. **Root causes fixed:** - `MiscTeleportManager`'s `@EventBusSubscriber` now explicitly declares `bus = Bus.GAME`, matching the project-wide pattern and eliminating any bus-selection ambiguity. - The death handler is now `@SubscribeEvent(receiveCanceled = true)`. Previously, if any mod cancelled `LivingDeathEvent` at a higher priority (keep-inventory plugins, god-mode, etc.), our handler was never called and the death position was silently dropped. Now the location is always captured when a `ServerPlayer` is the dying entity. - `PlayerDataStore.flush()` now creates the data directory if it doesn't exist before writing, preventing silent I/O failures that would leave death positions un-persisted across server restarts. - Added `teleportation.backSettings` to `config.json` with explicit `enableDeathBack`, `enableTeleportBack`, `teleportDelay`, `backCooldown` keys. **Diagnostic:** The server log now shows an INFO line every time a player death is captured (coordinates + cancellation flag), so you can confirm the event is being received. --- ### 🐛 Bug Fix — Chat Format Strings Corrupted on Save (HTML Escaping) Gson was converting `<`, `>`, and `&` to Unicode escapes (`\u003c` etc.) every time a JSON file was written to disk. This silently corrupted chat format strings — e.g. `<{prefix} {name}> {MESSAGE}` would become `\u003c{prefix} {name}\u003e {MESSAGE}` and display as literal escape codes in chat. **Fix:** `.disableHtmlEscaping()` added to every `GsonBuilder` instance across the mod (30+ files) — config files, player data, moderation records, language files, web-dashboard writers, and more. --- ## 1.0.2.6+build.107 — 2026-05-04 ### 🐛 Bug Fix — `chat.json` Not Being Loaded (Chat Format Reverts to Default) **Reported error:** `Failed to read config file chat: config/neoessentials/chat (No such file or directory)` Even with `chat.json` present in `config/neoessentials/`, the chat format would fall back to `{neoessentials_displayname}: {MESSAGE}` instead of the configured value. **Root cause:** The config cache could hold a stale merged view of the main config that was built before `chat.json` existed (e.g. right after running `/neoe config split` without reloading). The section-extraction path returned an empty object without ever trying the file directly. **What's fixed:** - `ConfigManager.getConfig("chat")` now falls back to reading `chat.json` directly and correctly unwraps the `"chat"` sub-object before returning it to callers. - `ConfigSplitter.migrateToSplitConfigs()` now clears the config cache immediately after migration — no manual `/neoe reload` needed for the new split files to take effect. **Files changed:** `ConfigManager.java`, `ConfigSplitter.java` --- ## 1.0.2.6+build.102 — 2026-05-04 ### 🐛 Bug Fix — Shop NPC Kicks All Players on Join **Error:** `The server sent registries with unknown keys: ResourceKey[minecraft:entity_type / neoessentials:shop_npc]` NeoForge syncs entity-type registries to clients at login. Because the `shop_npc` type only existed server-side, every player was disconnected the moment they tried to join. **Fix:** Shop NPCs now use vanilla `ArmorStand` entities with a hidden NBT tag (`NeoEssentials_ShopId`). The interaction is caught by `PlayerInteractEvent.EntityInteract` on the server — zero changes on the client, no custom entity registration. **Files changed:** `ShopEntityRegistry.java`, `ShopNpcEntity.java`, `NpcShopCommand.java`, `NeoEssentials.java` ### 🐛 Bug Fix — Hologram Source Files Failing to Compile (BOM Characters) Six hologram files were saved with a UTF-8 BOM, causing `error: illegal character: '\ufeff'` on the very first character of each file. BOM removed from all six files. **Files:** `HologramEventHandler.java`, `HologramScheduler.java`, `HologramTextProcessor.java`, `HologramCommand.java`, `ShopHologramManager.java`, `HologramEndpoint.java` ### 🐛 Bug Fix — Permission Validator Warns About Other Mods' Permissions Any permission node not starting with `neoessentials.` (WorldEdit, FTB Ranks, LuckPerms groups, etc.) was incorrectly logged as an "unknown NeoEssentials permission". The validator now silently skips external nodes and counts them separately. ### 🐛 Bug Fix — Missing Permission Nodes Causing Validator Warnings `neoessentials.compass`, `neoessentials.compass.others`, and `neoessentials.chat.msgtoggle.bypass` were used in command checks but absent from `PermissionRegistry`. All three are now registered with the correct default values. --- ## 1.0.2.6+build.91 — 2026-04-27 ### ✨ Web Dashboard — Backup & Restore First piece of the Web-Dashboard improvements track: - Create named ZIP snapshots of configs, mod data, and player data - Browse all snapshots with size, date, and target info - One-click restore with automatic pre-restore safety backup - Download ZIP archives from the browser - Delete snapshots with confirmation - Auto-prune when limit exceeded (max 20) - New `💾 Backup & Restore` dashboard page with stat cards and confirm modals --- ## 1.0.2.6+build.86 — 2026-04-27 ### 🐛 Bug Fix — `/nick` Nickname Not Working (Tab List, Chat, Placeholders) Players were getting "Nickname set" confirmation but their nickname was invisible everywhere — the tab list showed the real username and chat showed the real name. **What was wrong:** The code was calling `player.setCustomName()`, the entity cosmetic API used for mob name tags. On player entities this adds a second floating label above the head; it has no effect on the tab list or chat. **What's fixed:** - **Tab list entry** — nickname now shown in the player list for all viewers immediately on `/nick`, and restored on every relog. - **Chat display** — `{neoessentials_displayname}` placeholder now returns the nickname. Works in all chat format strings and SocialSpy. - **Hover/click names** — nickname shown in the hover popup when `chat.clickablePlayerNames` is enabled. - **Tab header/footer** — `{displayname}` in tablist layouts now reflects the nickname. **Files changed:** `NickCommand.java`, `DefaultPlaceholderExpansion.java`, `ChatFormatter.java`, `TablistManager.java`, `TablistEventHandler.java` --- ### 🐛 Bug Fix — NPC Shop Compile Errors Fixed 11 compile errors in the entity shop layer that prevented the mod from building: - `NpcShopMenu`: `clicked()` return type corrected to `void` (MC 1.21.1); `quickMoveStack()` abstract override added. - `ShopNpcEntity`: removed `damageSources()` override with incompatible return type. - `ShopTransaction`: `resolveItem()`, `giveItems()`, `hasSpaceInContainer()` made `public`. --- ## 1.0.2.6+build.77 — 2026-04-27 ### ✨ Feature — BungeeTabListPlus-Inspired Tablist Completely reimagined tablist system taking direct inspiration from **BungeeTabListPlus**. **Highlights:** - **Independent mode (default)** — NeoEssentials manages the entire tab overlay on its own. No proxy plugin needed. - **20+ placeholder tokens** — including proxy-aware tokens: `{network_online}`, `{server_online:NAME}`, `{current_server}`, `{rank_weight}`, `{session_minutes}`, `{health}`, `{afk}`, and more. - **Fake player entries** (BTLP `fakePlayers`) — decorative separator rows, section headers, and padding in the player list. - **Group-weight sorting** — admins shown first, then by group weight, then alphabetically. Uses scoreboard teams as client-side sort keys. - **Configurable layout** — columns (1–4), `groupSections`, `playersByServer`, `excludeServers`, `hiddenServers`. - **Optional proxy integration** — BungeeCord channel bridge for `{network_online}` / `{server_online:X}` data. Off by default; enable with `proxy.enabled=true` in `tablist.json`. - **New `/tablist` commands**: `proxy status`, `fakeplayer list/add/remove/refresh`, `layout info`, `independent on/off`. - `tablist.json` config version **2→3**. **Bug fixes:** Resolved duplicate class compile error in `TablistCommand`; fixed `ClientboundPlayerInfoUpdatePacket` API incompatibility in `FakePlayerManager`; fixed `CustomPacketPayload` override error in `ProxyIntegration`. --- ## 1.0.2.6+build.73 — 2026-04-27 ### ✨ Feature — Messaging & SocialSpy Improvements Full enhancement pass on `/msg`, `/reply`, and SocialSpy formatting. **What's new:** - **`MessageUtil.resolveTemplate()`** — new centralized resolution helper used by `/msg`, `/reply`, and SocialSpy. Applies named vars first (case-insensitive), then runs PlaceholderAPI, then logs any still-unresolved `{TOKEN}` tokens in debug mode. - **Named placeholders in all message templates** — `{message}` / `{MESSAGE}`, `{sender}`, `{receiver}`, `{sender_displayname}`, `{receiver_displayname}`, and all `{neoessentials_*}` tokens are now supported universally. - **Safe fallback** — if PlaceholderAPI throws, the un-resolved template is returned instead of an error. - **Debug logging** — enable `logging.enableDebugLogging` to see per-template unresolved token warnings and SocialSpy format resolution trace. - **Config-based format overrides** — new `chat.messaging` section in `config.json`: ```json "socialspyFormat": "&8[&eSocialSpy&8] &b{sender} &7→ &b{receiver}&7: &f{message}" "msgFormatTo": "&7[&aTo &f{neoessentials_displayname}&7] &f{message}" "msgFormatFrom": "&7[&bFrom &f{neoessentials_displayname}&7] &f{message}" "replyFormatTo": "" (uses lang default) "replyFormatFrom": "" (uses lang default) ``` Leave blank to use language-file defaults. Config takes priority when set. - **SocialSpy lang key updated** — `neoessentials.socialspy.format` moved from positional `{0}/{1}/{2}` to named `{sender}/{receiver}/{message}` vars. `_langVersion` → 15, auto-merges on next start. - SocialSpy display-name lookup now runs **once per broadcast** not once per spy player. --- ## 1.0.2.6+build.72 — 2026-04-27 ### 🐛 Bug Fix — FTB Ranks Adapter: Permission Checks Failing FTB Ranks permissions were silently returning `false` for every check because the adapter was calling methods that do not exist in `ftb-ranks-neoforge-2101.1.3`, resulting in `NoSuchMethodException` at runtime. **What's fixed:** - **Correct API method now used** — `FTBRanksAPI.getPermissionValue(ServerPlayer, String)` is the actual static method exposed by FTB Ranks 2101.1.x. The adapter now resolves this as Strategy 1 and interprets the returned `PermissionValue` with `asBooleanOrFalse()`. - **Improved fallback chain** — five strategies now cover 2101.1.x (confirmed), RankManager path, two legacy naming variants, and the oldest UUID-based builds. - `"MISSING"` added to the boolean deny-list for `PermissionValue.MISSING` edge case. --- ## 1.0.2.6+build.70 — 2026-04-27 ### 🐛 Bug Fix — `/msg` & `/reply` Formatting + Missing SocialSpy Key **What's fixed:** - **`/msg` and `/reply` showed raw template text** — `java.text.MessageFormat` was applied to templates containing `{placeholder}` tokens, throwing `IllegalArgumentException` on every message send. Non-numeric placeholders are now escaped before format processing. - **`neoessentials.socialspy.format` key missing** — SocialSpy intercept threw a missing-key error; key added to `en_us.json`. - `_langVersion` → 14. --- ## 1.0.2.6+build.69 — 2026-04-24 ### ✨ Feature — Custom Player Tablist: Refinements Follow-up pass on the tablist system from build.67. **What's new:** - **`RichTextFormatter.processTablistText()`** — dedicated tablist text processor that strips hover/click events (which tab-list packets cannot display) while running the full gradient → rainbow → named-color → format-tag → hex-color pipeline. Enabled unconditionally regardless of the `enableChatEnhancements` flag. - **Hex colors and gradients in player prefix/suffix column** — `updatePlayerTeam()` now routes prefix/suffix through `processTablistText()` so group prefixes like `&#FF5500[Admin] ` or `<gradient:FF0000-FF8C00>[Mod] </gradient>` render as actual colored text in the player list column. - **Color deferral fix** — `applyPlaceholders()` no longer pre-converts `&` → `§`; the full color pass is deferred to `processTablistText()` so `&#RRGGBB` tokens and `<gradient:…>` tags survive placeholder substitution intact. --- ## 1.0.2.6+build.67 — 2026-04-24 ### ✨ Feature — Custom Player Tablist Complete rewrite of the tablist with full rich-text support, per-group/per-player customisation, animated frames, and extended placeholders. **Inspired by: TAB, BungeeTabListPlus, Simple TabList.** **What's new:** - **Hex colors & gradients** — header, footer, and player prefix/suffix support `&#RRGGBB`, `<gradient:FF0000-0000FF>text</gradient>`, `<rainbow>text</rainbow>`, named color/format tags, and legacy `&X` codes - **Animated header/footer** — `header`/`footer` in `tablist.json` accept arrays; each refresh tick advances one frame for smooth animations - **Per-group header/footer** — `"groups"` section in `tablist.json` lets you give each permission group its own header/footer frames (e.g. an admin-only panel) - **Per-player header/footer** — `"players"` UUID section in `tablist.json` + new runtime commands: - `/tablist player <name> header <text>` — set custom header - `/tablist player <name> footer <text>` — set custom footer - `/tablist player <name> reset` — clear overrides - **Per-group runtime commands** — `/tablist group <group> header|footer|reset` - **Extended placeholders** — `{displayname}`, `{server_name}`, `{x}/{y}/{z}`, `{balance}`, `{time}`, `{bar}` added alongside existing `{player}`, `{online}`, `{max}`, `{ping}`, `{world}`, `{tps}`, `{prefix}`, `{suffix}`, `{group}`, `{newline}` - **groupColors map** — per-group color override applied to `{displayname}` in headers - **Vanish + AFK integration** — vanished players excluded from `{online}` for non-staff; configurable AFK suffix appended to player rows - **`tablist.json` template** updated with gradient example, group/player sections, and syntax reference --- ## 1.0.2.6+build.66 — 2026-04-24 ### 🐛 Bug Fix — Tablist prefix, Warn console logging, WarnManager compile error **What's fixed:** - **Tablist prefix not showing** — Group prefix/suffix was silently returning `""` for players whose user entry had not yet been explicitly loaded in the permission manager. `getPermissionPrefix/Suffix/Group` now use the null-safe `PermissionAPI.getManager()` and fall back to the configured default group so freshly-joined players also show the correct prefix in the tab list. - **Warn command not logging to console** — `/warn <player> <reason>` lacked an explicit `LOGGER.info()` call; on some server setups the op-broadcast feedback wasn't routed to the log file. Warn actions now always appear in the server console. - **Compile error: duplicate `getInstance()` in `WarnManager`** — Two identical `getInstance()` declarations were present, causing a build failure. Duplicate removed. --- ## 1.0.2.6+build.64 — 2026-04-24 ### 🌐 Improvement — Localization Audit & Admin Tooling Full audit of all in-game translation key usage, 54 missing keys added, and a new `/language` tooling suite for server admins. **What's new / fixed:** - **54 missing translation keys** added to `en_us.json` — TPA/teleport-request flow (`request.sent`, `request.received`, `request.denied`, `request.expired`, `request.failed`, etc.), misc teleport (`/jumpto`, `/back` info), spawn/warp coordinate errors, moderation (`unfrozen_message`, `reason_too_long`), and several general/utility messages - **Human-readable fallbacks** — if a translation key is missing at runtime, players now see a readable English phrase (e.g. `Home not found`) instead of the raw key string (`commands.neoessentials.home.not_found`) - **`/language validate <code>`** — compare any language file against `en_us.json`, get coverage % and lists of missing/extra keys - **`/language regenerate <code>`** — refresh a language file from the bundled JAR copy, merge user translations, auto-backup to `.bak` - **`/language override`** — override individual message keys in-game; persisted to `overrides.json` and take priority over all language files (`set`, `get`, `remove`, `list`, `clear`, `reload` sub-commands) - `_langVersion` bumped **12 → 13** — new keys auto-merged into existing deployments at next server start --- ## 1.0.2.6+build.59 — 2026-04-24 ### 🐛 Bug Fix — Chat: Unresolved `{neoessentials_username_hover}` & duplicate server log Two related chat-formatting bugs fixed: 1. **`{neoessentials_username_hover}` appearing literally** — When "clickable player names" was enabled, `ChatFormatter` substituted `{neoessentials_username}` with `{neoessentials_username_hover}`, which was never registered as a placeholder. The token was never resolved and appeared as raw text in chat. 2. **Duplicate vanilla log line** — `ChatHandler` called `server.sendSystemMessage(formattedMessage)` after already logging via its own logger. This caused vanilla's `MinecraftServer` logger to emit a second line: `<{neoessentials_username_hover}> message`. **Fixes:** - Replaced placeholder-swap with `§HNAME§name§/HNAME§` internal markup tokens resolved in `buildComponentFromMarkup()` to real hover+click Components - Added `username_hover` / `displayname_hover` as plain-text fallback aliases in `DefaultPlaceholderExpansion` - Removed the redundant `server.sendSystemMessage()` call --- ## 1.0.2.6+build.58 — 2026-04-24 ### 🔌 Feature — API & Placeholder System Exposes the NeoEssentials placeholder system as a fully public Java API for external mods, adds in-game admin tooling, REST endpoints, and rewrites developer documentation. **What's new:** - **`PlaceholderProvider`** and **`PlaceholderExpansion`** are now `public` top-level types — external mods can implement/extend them to register custom placeholders - **`NeoEssentialsAPI.getPlaceholderManager()`** — new entry-point to the thread-safe `PlaceholderManager` (API version bumped to `1.2.0`) - **`/api/placeholders/list`**, **`/api/placeholders/resolve`**, **`/api/placeholders/stats`** — new authenticated REST endpoints - **`/api/docs`** now serves the built-in documentation system (was implemented but never wired) - **`/placeholder`** in-game command — `list`, `info <id>`, `test <text>`, `stats` sub-commands (permission: `neoessentials.admin.placeholders`) - **`neoessentials.admin.placeholders`** permission node registered - **`APISystem.md`** completely rewritten with full placeholder table, code examples for `PlaceholderProvider`/`PlaceholderExpansion`, REST endpoint reference, versioning contract --- ## 1.0.2.6+build.57 — 2026-04-24 ### ✨ Feature — Chat Formatting: Per-Player Overrides Now Applied Per-player format overrides set via `/chatformat set <player> <format>` were stored correctly but **never actually applied** — `ChatHandler` always resolved the chat format from the group/world lookup, silently ignoring any stored per-player override. `PlayerChatFormatManager.getFormat()` is now called first, making it the highest-priority step in the chain (per-player → group+world → group → world → default). All rich-text features were already implemented (`RichTextFormatter`, `ChatFormatter`) and remain unchanged: hex colors (`&#RRGGBB`), gradients (`<gradient:FF0000-0000FF>`), rainbow, hover tooltips, click events, bold/italic, and legacy `&` codes. `ChatSystem.md` has been fully rewritten with a format priority diagram, `/chatformat` command table, complete tag reference with examples, placeholder list, and config key reference. --- ## 1.0.2.6+build.56 — 2026-04-24 ### ✨ Feature — Inventory Management & Security Improvements Config flags for `/invsee`, `/inv`, `/invseeedit`, `/enderchest`, `/ec`, `/enderchestedit`, `/ecedit` existed in `config.json` but were never read — the commands were always available regardless of the flag. All `requires()` predicates now check the corresponding `isCommandEnabled()` flag. Added a concurrent-edit lock: only one staff member can hold an editable view of a player's inventory or ender chest at a time (second attempt is blocked with an informational message; lock releases on viewer disconnect). Added `InventoryAuditLogger` writing every view/edit open to `neoessentials/inventory_audit.log` (7 action types, controlled by new `items.inventoryAuditLog` config key). Added 4 new language keys for disabled and concurrent-edit error messages. --- ## 1.0.2.6+build.55 — 2026-04-24 ### 🔧 Improvement — Per-Command Teleport Bypass Perms & Chunk Loading Docs 8 per-command bypass permission nodes (`neoessentials.teleport.home.bypass.cooldown/warmup`, `warp.*`, `spawn.*`, `back.*`) were already checked in code but absent from `PermissionRegistry`, so the dashboard and permission tools couldn't discover them. All 8 are now registered. Added a "Chunk Loading & Safety Interaction" section to `TeleportationSystem.md` explaining the 3×3 chunk preload and safety-scan order of operations. --- ## 1.0.2.6+build.50 — 2026-04-24 ### ✨ Teleportation Improvements — Dashboard Settings Page, Language Keys & Permission Docs Added a live teleport settings page to the web dashboard, fixed missing `/back` language keys, and documented all bypass permission nodes. - New **Teleport Settings** page in the dashboard — edit cooldowns, warmup delays, safety flags, and home/warp limits without restarting. Saves instantly reload all teleport managers. - Fixed `/back` warmup and cooldown messages that showed raw key names instead of text (keys were used in Java but not defined in the language file). - Documented 10 cooldown/warmup bypass permission nodes in `permissions_nodes.txt`. - Added `MiscTeleportManager.reload()` for dashboard live-reload support. --- ## 1.0.2.6+build.46 — 2026-04-24 ### 🐛 Bug Fix — Web Dashboard Admin Controls & Permissions Page Blank Admin Controls and Permissions pages showed a blank screen after login. F5 briefly revealed the content before it disappeared. Three root causes: (1) `showLoginScreen()` hid `dashboardWrapper` without redirecting — on these pages there is no login form, so the result was a blank page with no way forward. Fixed to redirect to `index.html`. (2) `permissions.js` never called `initPermissionSystem()` because its init guard checked `window.location.hash` / `[data-page="permissions"].active`, which never match on the standalone `permissions.html` page. Fixed with a reliable element check. (3) Nine `fetchWithAuth()` calls in `permissions.js` were missing `.json()`, so all modal actions (group edit, permission add/remove, etc.) silently failed by checking `.success` on a raw `Response` object. All fixed. Also fixed username not showing in the sub-page topbars. --- ## 1.0.2.6+build.44 — 2026-04-24 ### 🐛 Bug Fix — Home Confirmation Buttons Append "confirm" to Name Clicking `[Confirm]` on a `/sethome` overwrite or `/delhome` deletion prompt failed with *"Invalid home name: Colony confirm"*. Each subsequent click appended another `" confirm"`, making it impossible to confirm the action. Root cause: `confirm`/`deny` literals were Brigadier children of the `<name>` word-argument. In Minecraft 1.21+, `RUN_COMMAND` click events re-validate against the client-side command tree; the nested literal structure was not preserved, so `"Colony confirm"` was consumed as the full name value. Fixed by promoting `confirm` and `deny` to top-level literal siblings of `<name>` (Brigadier literals always take priority over argument nodes). Confirm/deny handlers now read the pending home name from the server-side pending map — no name is embedded in the button command. Also fixed `{HOME}`/`{home}` placeholders in message keys (were never substituted) to `{0}` and added missing message keys. Lang version `11 → 12`. --- ## 1.0.2.6+build.42 — 2026-04-24 ### 🐛 Bug Fix — `/back` Fails in Unloaded Chunks `/back` failed with *"No safe teleport location found"* whenever the death point or previous location was in an unloaded chunk — even though the destination was perfectly safe. Root causes: (1) `TeleportUtil` only force-loaded the single target chunk, but `findSafeLocation()` scans up to ±16 blocks in X/Z, which can cross chunk boundaries. Neighbouring unloaded chunks caused every candidate to fail `isSafe()`'s `level.isLoaded()` check. (2) `MiscTeleportManager.teleportDelay` was hardcoded to `3` — the field was never populated from config, so the configured warm-up delay was silently ignored. Fixed by adding `preloadChunksForTeleport()` (3×3 chunk grid loaded with `PORTAL` tickets before any safety check) and a new `loadConfig()` method in `MiscTeleportManager` that reads `teleportDelay`, `enableDeathBack`, and `enableTeleportBack` from `ConfigManager`. --- ## 1.0.2.6+build.41 — 2026-04-24 ### 🐛 Bug Fix — Vanish Module Cannot Be Disabled Setting `moderation.vanishSettings.enableVanishSystem: false` in config had no effect. Commands remained registered and players who were already vanished couldn't break/place blocks or interact, because the config flag was silently ignored. Root causes: (1) `isVanishSystemEnabled()` read from the wrong JSON path — always returned `true`; (2) interaction-prevention guards never checked `isVanishSystemEnabled()`; (3) `VanishManager.onPlayerJoin()` was defined but never called, breaking vanish-state restoration on reconnect. All three issues fixed. --- ### 🔒 Security Fix — `/inv` and `/ec` Permission Bypass `/inv` and `/ec` were registered as Brigadier `redirect()` nodes with no `requires()` predicate. Since Brigadier only evaluates the alias node's own predicate (not the target's), every player bypassed permission checks and could open any other player's inventory or ender chest. Fixed by replacing redirect-based aliases with full command registrations that each carry their own `requires()` predicate. Also fixed a typo that prevented `/ecedit` from working, added `neoessentials.invsee` + `neoessentials.enderchest` to the moderator group, and added missing translation keys. --- ## 1.0.2.6+build.38 — 2026-04-24 ### 🐛 Fix — Teleportation Messages & Cooldown/Warmup System **Missing localisation keys** — All `commands.neoessentials.teleport.spawn.*` message keys were missing from `en_us.json`, causing raw key strings (e.g. `commands.neoessentials.teleport.spawn.fallback_success`) to appear in chat. Added all spawn, warmup, cooldown, and warp/home warmup keys. Lang version bumped to `11` — auto-merges into existing server language files on next startup. **Cooldowns not enforced** — Multiple root causes fixed: - `HomeManager` now reads `teleportDelay` from config and enforces `homeTeleportCooldown` on each `/home` use. - `WarpManager` now reads and enforces `warpCooldown` (use cooldown) before each `/warp` use. - `SpawnManager` now reads and enforces `spawnCooldown` before each `/spawn` use; `teleportDelay` moved from spawn.json override to `generalSettings.teleportDelay` in config.json. - All TP managers now display a warmup countdown message to players when `teleportDelay > 0` and `enableTeleportWarmup=true`. --- ### ✨ Feature — Permissions GUI, External Systems & Fine-Grained Control **Web Dashboard REST API (extended)** — `/api/permissions` now handles context overrides, temp permissions, and aliases via REST. New endpoints: `POST /reload`, `GET|POST|DELETE /group/{name}/context`, `GET|POST /group/{name}/temp`, `DELETE /group/{name}/temp/{node}`, same for users, plus `GET|POST|DELETE /aliases`. Enhanced `/system/status` includes emergency mode, adapter health, failures, and alias count. **External System Integration** — Documented the full 5-step fallback chain, adapter health tracking (5 failures → UNHEALTHY → auto-fallback), LuckPerms context via QueryOptions, FTB Ranks 4-API probe, startup compatibility report, and a compatibility table covering all major permission mods. **Fine-Grained Command Control** — Every subcommand has its own node (`/home set` vs `/home delete`, `/warp` vs `/setwarp`, etc.). Documented comprehensive tables for Home, Warp, Kit, Economy, Moderation, and Permission system commands. Negative permission deny patterns documented. --- ## 1.0.2.6+build.28 — 2026-04-01 ### ✨ Feature — Permissions System Improvements **Contextual Permissions** — Permissions can now be world-specific, time-of-day specific, or gamemode-specific. New `/permissions group <group> context` and `/permissions user <player> context` subcommands let admins add/remove/list contextual overrides with tab-completion for all supported context keys. **Permission Conditions** — Optional condition expressions (e.g. `gamemode:survival AND time:day`, `health:above:10`, `op:true`) can be attached to permission nodes. The permission is only granted when the condition passes. **Permission Aliases** — `config/neoessentials/permission_aliases.json` maps legacy or short node names to canonical NeoEssentials nodes. Resolved transparently in every permission check. **Mod Interop API** — `NeoEssentialsAPI.getPermissionsService()` returns a `PermissionsService` interface that other mods can use to check permissions (with context), register their own nodes and aliases, and query group info without importing NeoEssentials internals. **Storage & Audit** — Contextual permissions and conditions persist across restarts. New audit log entries: `*_CONTEXT_PERM_ADDED/REMOVED`, `*_CONDITION_SET/REMOVED`. --- ## 1.0.2.6+build.26 — 2026-04-01 ### 🔧 Improvement — Utility Systems Audit & Polish - **`/nick` / `/nickname`** — Data file path uses centralised `ResourceUtil.getConfigPath()`. `/nickname` alias now registered as a proper Brigadier redirect (was a metadata-only entry with no actual command). - **`/seen`** — Data file path uses `ResourceUtil.getConfigPath()`. - **Duplicate registrations removed** — Stale duplicate `registerCommand()` metadata in `NeoEssentials.java` cleaned up; every player-info command is now registered exactly once. - **Permission registry de-duped** — Multiple permission nodes were registered twice with conflicting values; notably `neoessentials.whois` (was `ADMIN/false`, silently overridden to `MISC/true`) and `neoessentials.ping.others` (was `PLAYER/true`, overridden to `MISC/false`). Correct values now authoritative; unique sub-nodes (`whois.detailed`, `rules.admin`, `motd.*`) preserved. - All core utility commands verified functional: `/nick` `/nickname` `/setnick` `/near` `/nearby` `/ping` `/depth` `/helpop` `/motd` `/rules` `/suicide` `/seen` `/whois` `/realname` `/msgtoggle`. --- ## 1.0.2.6+build.25 — 2026-04-01 ### ⏳ New — Temporary Permissions - **Permissions** — Time-limited permissions for players and groups that expire automatically. Supports durations like `30m`, `12h`, `1d`, `7d`, `1d12h30m`. New commands: `addtemp`, `removetemp`, `listtemp` for both `/permissions user` and `/permissions group`. Expiry runs every 30 s server-side; online players are notified when a temp perm expires. Temp perms survive restarts (stored in `playerdata.json` / `permissions.json`, expired entries stripped on load). Six new audit events: `USER_TEMP_PERM_ADDED/REMOVED/EXPIRED` and `GROUP_TEMP_PERM_ADDED/REMOVED/EXPIRED`. Two new permission nodes: `neoessentials.permissions.user.temp`, `neoessentials.permissions.group.temp`. --- ## 1.0.2.6+build.23 — 2026-04-01 ### 📋 New — Permission Audit Logging - **Permissions** — New `PermissionAuditLogger` writes every permission change to `neoessentials/permissions_audit.log` (append-only, timestamped UTC). 17 action types tracked: user group/perm changes, group create/delete/rename/clone/perm/inherit/prefix/suffix/priority changes, and reload events. Executor name logged for player commands, "CONSOLE" for server-side. - **Config** — New `permissions.auditLogging` key (default `true`). Set `false` to disable. --- ## 1.0.2.6+build.22 — 2026-04-01 ### ⚖️ Improvement — Group Priorities + Permission Suggestions - **Permissions** — New `priority` field on permission groups (default 0). Higher priority parents are consulted first in the inheritance walk — deterministic grant/deny ordering when multiple parents conflict. Set with `/permissions group <name> setpriority <value>` (−999 to 999). - **Permissions** — `priority` persisted in `permissions.json` (backwards-compatible). - **Permissions** — Denial messages now show the node's registered description: `§8(e.g. "Ban a player from the server")` — staff know immediately what capability they need without checking the wiki. - **Docs** — New "Group Priorities" section in `PermissionSystem.md`; example `groups.json` updated with priority values; `CommandsReference.md` updated. --- ## 1.0.2.6+build.21 — 2026-04-01 ### 🔍 New — Permission Debugging Tools - **Permissions** — New `/permissions debug <player>` command (requires `neoessentials.permissions.debug`). Shows system mode, adapter health/version, config flags, OP status, direct user permissions, group chain with inheritance, and a numbered resolution summary — diagnose permission issues in-game without touching logs. - **Permissions** — New `neoessentials.permissions.debug` permission node registered. - **Fixed** — `/permissions user check` now uses the full 5-step resolution chain (was bypassing external adapter, `opsBypassPermissions`, and `vanillaOpFallback` by calling the internal manager directly). --- ## 1.0.2.6+build.19 — 2026-04-01 ### 📖 Documentation — `allowUnsafeCommands` & Security Config - **Docs** — Fixed wrong `allowUnsafeCommands` description in `SplitConfigs.md` (previously said "enchantments/item operations" — that's `items.unsafe-enchantments`). - **Docs** — Full `security.json` reference added: all six keys, blocked-pattern list, character allowlist, tables of commands that work vs. those needing `allowUnsafeCommands: true`. - **Docs** — Key insight documented: tilde `~` (relative coordinates) is blocked by default — the most common source of the "dangerous operations" error in powertools. - **Docs** — "Command Safety Filter" section added to `ItemManagement.md` under Powertool; warning note added to `CommandsReference.md` `/powertool` row; `security.json` added to `Home.md` getting-started list. --- ## 1.0.2.6+build.18 — 2026-04-01 ### 🛡️ New — Fallback to Vanilla OP Permissions - **Permissions** — New `permissions.vanillaOpFallback` (default `true`): OPs get access as a last resort after all permission systems return false. Prevents admin lockouts from corrupted configs or crashing external perm mods. - **Permissions** — Permission system init failure no longer crashes the server — activates emergency OP-only mode with a clear console error. `/neoe reload` exits emergency mode without a restart. - **Docs** — `PermissionSystem.md` updated with new config option, bypass-vs-fallback comparison, and updated permission-check flow. --- ## 1.0.2.6+build.17 — 2026-04-01 ### 🔌 Improved — External Permissions Integration - **Permissions** — FTB Ranks and LuckPerms adapters now detect mod version at startup and log it; a boxed `WARN` fires when the installed FTB Ranks version is newer than last tested. - **Permissions** — New `AdapterCompatibilityChecker` prints a formatted compatibility table at startup listing every detected permission mod, its version, and ✓/⚠ status. - **Permissions** — FTB Ranks adapter probes four API signatures so it survives version bumps without breaking. - **Permissions** — Both adapters track consecutive failures; after 5 failures they are marked unhealthy and `PermissionAPI` falls back to the internal `permissions.json` manager and then OP-bypass — no player lockouts from a broken external perm mod. --- ## 1.0.2.6+build.16 — 2026-04-01 ### ✨ New Features — Rules Command - **Rules** — Console now logs a detailed boxed error with file path and fix steps when `rules_data.json` is corrupt or missing. Auto-generated defaults are logged with their exact path and edit instructions. - **Rules** — `/neoe reload` now reloads server rules. - **Rules** — Dashboard API `/api/rules` for full CRUD on server rules (list, add, edit, delete, replace all, reload from disk). - **Docs** — Full `/rules` section added to `UtilitySystems.md`; fixed stray `/rules`, `/helpop`, `/suicide` rows in the MOTD API table. --- ## 1.0.2.6+build.15 — 2026-04-01 ### 🐛 Bug Fixes - **Split Configs** — Fixed split files never being created on fresh installs (JAR source was wrong). - **Split Configs** — Fixed `main.json` being overwritten with only one section. - **Split Configs** — Added missing `economy` section to `main.json`. ### ✨ New Features - `/neoe config validate` — validate all split config files. - `/neoe config repair` — auto-fix missing or incomplete split config files. - `/neoe config status` — visual overview of config file health. - Clear boxed startup errors when split files are missing with `/neoe config repair` hint. - New `SplitConfigs.md` wiki documentation. --- ## 1.0.2.6+build.12 — 2026-04-01 ### ✨ New Features - **MOTD – Multi-Profile Support** — Multiple named MOTD profiles with `/motd profile list|create|delete|switch|info`. Each profile persists independently in `config/neoessentials/motd_data.json`. - **MOTD – Auto-Rotation** — Cycle profiles automatically: `/motd rotation enable <minutes>|disable|next`. - **MOTD – Dashboard API** — REST endpoint `/api/motd` for full profile & rotation management from the web dashboard. - **MOTD – Error Feedback** — In-game error messages on save/load failures; `/motd reload` shows the exact problem. ### 🔒 New Permissions - `neoessentials.motd.profile` (default: off) - `neoessentials.motd.rotation` (default: off) --- ## 1.0.2.6+build.5 — 2026-04-01 ### 🐛 Bug Fixes - **Config** – Fixed `ClassCastException` crash in all kit commands when split configs are enabled. Also fixed `getConfig("chat")` throwing `FileNotFoundException`, which broke chat formatting across the mod. - **Permissions** – Fixed OPs being denied commands when an external permission mod (FTB Ranks, LuckPerms) is installed. OP bypass is now checked before any external adapter. - **Permissions** – Fixed FTB Ranks adapter `NoSuchMethodException` on FTB Ranks 2101.1.x (new API `getPermission(ServerPlayer, String, boolean)` now probed automatically). - **ChestShop** – Fixed Admin Shops with `?` item — any admin with `neoessentials.shop.create.admin` can now right-click to assign the item. - **Help** – Fixed `/help 2` and other page numbers showing "No command found" (conflict with vanilla `/help` resolved). - **Moderation** – Fixed `/unban` not detecting vanilla-issued bans; NeoEssentials now syncs with `banned-players.json` in both directions. - **Rules** – Fixed `/rules` ignoring existing `rules.json` from older builds; auto-migrates to `rules_data.json`. - **MOTD** – Fixed MOTD resetting on restart due to an inconsistent save path. --- ## 1.0.2.6+build.1 — 2026-03-06 ### 🔁 Starting fresh from 1.0.2.6 This is the first build of the `1.0.2.6` release series. Build number reset to 1. **Included from 1.0.2.5 series:** - Sign-based ChestShop system with admin shops, auto-fill item (`?`), and buy/sell via right/left-click - Vault API (Economy, Chat, Permission providers) - Dedicated `tablist.json` config file with group colours, placeholders, and animation support - 50+ new commands across Player Info, World/Fun, Teleport, Item/Misc, Utility, Admin, and Player State systems - Random teleport (`/tpr`) — even distribution, nether-aware, async cache, named zones, biome exclusions - Timed jails with auto-release, full event enforcement (respawn, teleport, interact, attack) - Offline pay, async baltop with pagination and total wealth, percent eco amounts - 8 new languages (FR, DE, ES, PT-BR, ZH-CN, NL, PL, RU) — auto-deployed and merged on start - 50+ permission nodes registered, new MODERATION category, denial messages show required node - Teleportation safe-location detection fully rewritten (slabs, stairs, glass, etc. now safe) - AFK system fully wired to config, score thresholds fixed, broadcasts and personal feedback working - Chat messages now appear in server console - PowerTool fixes — fires on block right-clicks, `/powertooltoggle` now works correctly - Rich text (gradients/rainbow) rendering fixed - Dashboard offline login, register command, and file auto-update fixed - ~120 missing translation keys added and auto-merged on load