?
Host a server
Modrinth App
Sign in
ModsPluginsData PacksShadersResource PacksModpacksServers
Settings
NeoEssentials

NeoEssentials

A comprehensive server-side essentials mod for Minecraft NeoForge servers, inspired by EssentialsX for Bukkit/Spigot.

8.9Kdownloads
14followers
8.9Kdownloads
14followers

Links

Report issues View source Visit wiki Join Discord server

Tags

Creators

Details

Licensed MIT
Published last year
All versions

1.0.2.6

Release
NeoEssentials 1.0.2.62 weeks ago 306
Uploaded by
Download

Compatibility

Minecraft: Java Edition
1.21.1–1.21.8
Platform
NeoForge
Supported environments
Dedicated servers only

Changes

NeoEssentials — Changelog

Minecraft 1.21.1 – 1.21.11 · NeoForge 21.1.179+

1.0.2.6+build.480 — 2026-07-10

🐛 Bug Fixes

  • ChestShop double chests: Buy/sell, stock checks, and dynamic pricing only read one half of a double chest, so filling/emptying one side could block transactions even with space/stock free on the other side. Now reads the full combined 54-slot inventory.
  • ChestShop admin shop holograms: /chestshop hologram enable|disable|move could never be used on admin shops (the ownership check required a player-owner UUID that admin shops don't have). Now authorized via neoessentials.shop.create.admin.

✨ Improvements

  • Command feedback messages now show a small [NE] tag and use softer, vanilla-matching colors instead of harsh neon ones, so they're both more recognizable and easier on the eyes.
  • NPC Shops: Selling now actually works (previously configuring a sell price did nothing — only buying was implemented). Added a permission check (neoessentials.shop.use) before opening the shop menu. Added /npcshop respawn <shopId> to re-summon a shop's NPC if it's ever lost (e.g. void damage) without losing its configured listings.

🔧 Maintenance

  • Build version string now includes the target Minecraft version (1.0.2.6-mc1.21.1+build.N), matching the 26.1.x port branch.

The entries below (build.~225 – build.~460) reconstruct work done between build.214 and build.480 that was never logged at the time. Build numbers are approximate — dates and content are accurate to the commit history.

1.0.2.6+build.~460 — 2026-07-08

🐛 Bug Fixes

  • /invseeedit, /ecedit: Fixed the edit lock never releasing — the first use against any target permanently locked it out for every future editor (including yourself) until a server restart. Now releases on GUI close or disconnect.
  • /pay: Fixed the amount and player name showing in swapped positions (e.g. "Paid <player>$ to 1000.0" instead of "Paid 1000.00$ to <player>"), plus a decimal-formatting mismatch between the amount and fee/net values in the same message.
  • /eco give|take|set|reset: The admin's own confirmation message was missing the currency symbol. /eco take also never notified the target player that money was taken — now it does, matching give/set/reset.
  • Localization: fixed a localize() overload ambiguity that silently shifted {n} message placeholders across jail/ban/freeze/etc. messages. Also fixed swapped/missing arguments in several moderation messages, and a duplicate-broadcast bug where staff saw every moderation action twice.
  • /jail was completely broken — every attempt threw an internal error before jailing the player, due to a null being passed where it wasn't allowed. Fixed.
  • Tablist: fixed prefix/suffix silently reverting to blank after the first refresh cycle following a reload.

✨ Features

  • Added cuboid/sphere jail regions via a configurable jail wand or WorldEdit soft-integration, with region-wide block protection.
  • Added an above-head nametag prefix/suffix system for the tablist.

🧪 Attempted (Reverted)

  • Briefly tried widening Minecraft version compatibility to include 26.1.x, but reverted after confirming it crashes on load — a real port needs more work and is tracked separately on its own branch.

1.0.2.6+build.~400 — 2026-07-06

🐛 Bug Fixes

  • Fixed group permission precedence and a permission-lookup race condition.
  • Closed freeze/jail/vanish/mute enforcement gaps across chat, teleportation, and combat.
  • Fixed a kit permanent-lockout bug, a double-claim race condition, and item data loss on reload.
  • Fixed an Auction House item-duplication exploit and a named-item price bypass on /sell.
  • Fixed jail bounds checking ignoring dimension.

🔒 Security

  • Required an admin role on web dashboard endpoints that were previously reachable by any non-admin account.
  • Replaced unsalted password hashing with salted PBKDF2 (120k iterations); the default admin account now gets a random temporary password instead of a hardcoded one.

1.0.2.6+build.~330 — 2026-07-04

✨ Features

  • Added tablist short-tokens/animations usable directly in chat, and #-prefixed hex gradient stops.
  • ChestShop items now preserve full item data (enchantments, custom names, modded NBT) instead of just a bare item ID.
  • Permission group prefix/suffix now render as rich text instead of raw color codes.

🐛 Bug Fixes

  • Fixed /flyspeed not actually applying to player flight.
  • Fixed a pending-shop autofill ordering bug.

1.0.2.6+build.~300 — 2026-07-03

🐛 Bug Fixes

  • Fixed unclosed <gradient> chat tags corrupting trailing legacy color codes.
  • Fixed ChestShop click-spam and NBT-sensitive item stock matching.

✨ Features

  • Added custom skins for fake tablist entries, plus a BTLP-style column-grid tablist layout.

1.0.2.6+build.~260 — 2026-07-02

✨ Features

  • Added a configurable movement-distance threshold for AFK detection.
  • Landed the initial web dashboard implementation.

🐛 Bug Fixes

  • Hardened enchantment-compatibility checks to tolerate cross-version differences instead of crashing.

1.0.2.6+build.~225 — 2026-07-01

✨ Features

  • Added localization.preserveCustomTranslations config option to protect hand-edited translations from the automatic merge system.
  • Added web dashboard configuration groundwork.

1.0.2.6+build.214 — 2026-07-01

🐛 Bug Fixes

Inventory / Ender Chest Duplication Exploit Closed

  • /invsee, /inv, /ec, /enderchest (read-only): Opening a read-only view used a snapshot container via a standard ChestMenu, which allowed items to be freely dragged out — duplicating them while the originals stayed in the target's inventory. Fixed by switching to a custom menu with locked slots (mayPickup → false, mayPlace → false) so the snapshot is purely display-only.
  • Edit mode (/invseeedit, /ecedit): The editable inventory menu now also registers the viewer's own inventory and hotbar as proper slots, eliminating a server-client desync that could occur when transferring items between the target's and viewer's inventory.

Shop Hologram Orphan / Stale Entity Fixes

  • Breaking a shop sign now removes the shop and its hologram atomically (new BlockEvent.BreakEvent handler in ShopSignHandler).
  • Shop holograms left over after manually removing entries from shops.json are purged by the new ShopHologramManager.cleanOrphanedShopHolograms() routine, which runs on server start and on /chestshop reload.

✨ Feature — Named Animation System ({animation:NAME})

Define text animations in config/neoessentials/animations.json and use them anywhere in the tablist (header/footer) via {animation:NAME}.

Each animation has:

  • name — identifier for the placeholder (case-insensitive)
  • frames — list of text frames supporting &-codes, &#RRGGBB hex, <gradient:…>, <rainbow>, etc.
  • frameDuration — milliseconds per frame (minimum 50 ms)

Example — the Rainbow animation from the bundled default config:

{ "name": "Rainbow", "frames": ["&cR&6a&eo&6b&cn&6w", "..."], "frameDuration": 500 }

Use in tablist: "&7Server: {animation:Rainbow} &8| &e{online}&8/&e{max}"

Bundled animations: Rainbow, PulseStar, StatusDot, LoadingDots, GoldBanner, Spinner, HeartBeat

Timing: frames advance on wall-clock time (accurate to ~50 ms) independent of the tablist refreshInterval. Reload with /tablist reload.

New command: /tablist animations list — shows all loaded animations with frame count and duration.

Files changed: AnimationManager.java (new), animations.json (new resource), TablistManager.java, TablistCommand.java, ConfigManager.java, tablist.json

1.0.2.6+build.157 — 2026-05-25

🐛 Bug Fix — TPA Request Confirmation Message Shows "to you" Instead of Seconds

/tpa displayed "Teleport request sent to Xtron. Expires in to you second(s)." — the direction phrase "to you" was mistakenly passed as the timeout-seconds argument to the sender's confirmation message. Fixed: the sender now sees the correct expiry countdown (e.g. "Expires in 30 second(s)."), and the target-side message receives the direction phrase as intended.

Files changed: TeleportRequestManager.java

1.0.2.6+build.156 — 2026-05-25

🧹 Code Quality — Warning Audit Pass (Part 3)

Continued IDE-warning audit: Arrays.asList → List.of / Set.of, .get(0) → .getFirst(), and handler cleanup.

  • 13 files — Global Arrays.asList(...) → List.of(...) / Set.of(...) sweep: all static final immutable lists now use List.of or Set.of; removed now-unused Arrays imports where applicable.
  • 7 files — Global .get(0) → .getFirst() modernisation (Java 21) in WarnManager, JailCommand, NpcShopCommand, RealnameCommand, DiscordPermissionSync, ProxyIntegration, TaskScheduler.
  • ProxyIntegration — Collections.addAll for runtime array-to-collection copy; @SuppressWarnings("unused") on API constants, onPluginMessage(), and isShowNetworkPlayers().
  • CommandExecutionHandler — @SuppressWarnings("unused") on class; @SuppressWarnings("MismatchedQueryAndUpdateOfCollection") on commandOutputs; removeFirst() modernisation.
  • FileManagementHandler — //noinspection resource on p.serverLevel() (lifecycle managed by server).

Files changed: 19 Java files

1.0.2.6+build.155 — 2026-05-25

🧹 Code Quality — Warning Audit Pass (Part 2)

Continued IDE-warning audit across inventory/, items/, integrations/, api/, core/, shop/ sub-packages, vault/, and webdashboard/ packages.

  • PermissionScanner — List.of() for static final pattern lists; removed dead null-check (Paths.get() never returns null); removed throws IOException (caught internally); fixed peek().count() optimization warning (collect + forEach); renamed unused param source → ignoredSource; @SuppressWarnings("unused") on three public API methods.
  • ExternalPermissionProvider — @SuppressWarnings("unused") on getPermissionsStartingWith() and exportForPermissionsEX().
  • PermissionValidator / BaltopCommand — Removed unused Collectors import.
  • PermissionManager — Inline collect(Collectors.toList()) → .toList().
  • 22 files — Global collect(Collectors.toList()) → .toList() modernisation (Java 21) across moderation, economy, kits, shop, util, and webdashboard packages; removed now-unused Collectors imports where applicable.

Files changed: 23 Java files

1.0.2.6+build.154 — 2026-05-20

🧹 Code Quality — Warning & Bug Fix Pass

  • IgnoreManager / MuteManager — Removed always-false IGNORE_FILE/MUTE_FILE null checks; log mkdirs() failures; removed unused sender-parameter overloads from MuteManager (mute(ServerPlayer, String) / unmute(ServerPlayer, String)).
  • MessageUtil — Replaced e.printStackTrace() with LOGGER.error(); merged duplicate catch branches; fixed File.delete() result ignored; removed dead private methods (getLanguageVersion, escapeNamedPlaceholders); added @SuppressWarnings("unused") to intentional API-surface public methods.
  • PlayerChatFormatManager / ShopManager — Log mkdirs() failures; modernised collect(Collectors.toList()) → .toList().
  • PlayerJoinQuitHandler — Removed always-true if (config != null) guard; guarded player.getServer().getPlayerList() with null checks.
  • LocalizationManager — Wrapped Files.list() in try-with-resources (resource leak fix); added isLanguageUnsupported() inverse method; updated TranslationHandler callers.
  • TaskManager — addFirst() / removeLast() modernisation; simplified time-range if-block to a single boolean expression.
  • BanManager — Used Optional.orElse(null) instead of .get() (NPE risk); removed always-true null checks on entry.getReason() / entry.getSource().
  • Web dashboard (HTML accessibility) — Added for / aria-label to all form inputs missing label associations across index.html, shop.html, permissions.html, kits.html, moderation.html, users.html, cloud.html, discord.html, holograms.html; fixed unresolvable #players / #performance / #worlds / #events nav anchors.

Files changed: 12 Java files, 9 HTML files

1.0.2.6+build.153 — 2026-05-19

🐛 Bug Fix — ResourcePackManager main-thread sleep

  • ResourcePackManager Thread.sleep on server tick thread — server.execute() + Thread.sleep(1000) blocked the server main thread for 1 second on every player login, causing rubber-banding and Can't keep up! warnings. Fixed: sleep moved to a background daemon thread.

Files changed: ResourcePackManager.java

1.0.2.6+build.152 — 2026-05-19

🐛 Bug Fix — Runtime Data in Wrong Directory

  • ShopManager / PlayerChatFormatManager wrong storage dir — Player-created shops (shops.json) and per-player chat format overrides (player_chat_formats.json) were stored in config/neoessentials/ instead of neoessentials/. A config reset would silently wipe all shops and chat format assignments. Fixed to use ResourceUtil.getDataPath().

Files changed: ShopManager.java, PlayerChatFormatManager.java

1.0.2.6+build.151 — 2026-05-19

🐛 Bug Fix — i18n/Language System Raw Paths

  • LocalizationManager / LanguageCommand / MessageUtil raw paths — Three i18n/language files used hardcoded Paths.get("neoessentials", ...) / new File("neoessentials/...") instead of ResourceUtil, causing all language/translation files to be mislocated on some hosting environments. Fixed to use ResourceUtil.getDataPath() / ResourceUtil.getDataFile().

Files changed: LocalizationManager.java, LanguageCommand.java, MessageUtil.java

1.0.2.6+build.150 — 2026-05-19

🐛 Bug Fix — Scheduler Path Consistency

  • TaskManager raw paths — Scheduler data files (tasks.json, execution_history.json) were resolved via raw Paths.get("neoessentials", "scheduler") instead of ResourceUtil.getDataPath(). Fixed.

Files changed: TaskManager.java

1.0.2.6+build.149 — 2026-05-19

🐛 Bug Fix — Economy & Teleport System

  • EconomyManager lastActivityFile raw path — balances_activity.json was resolved from the JVM working directory instead of the server root, causing the inactive-account cleanup scheduler to misread activity data and potentially purge live balances on some hosts. Fixed to use ResourceUtil.getDataFile().
  • TeleportRequestManager dead code removed — sendTpaRequest() was an unreachable duplicate of sendTeleportRequest() that silently omitted the request cooldown, allowMultipleRequests, and tptoggle checks. Removed.

Files changed: EconomyManager.java, TeleportRequestManager.java

1.0.2.6+build.148 — 2026-05-19

🐛 Bug Fix — BanManager: Temp IP Ban Cleanup & Expiry Checks

  • Scheduler never swept IP bans — cleanupExpiredTempBans() only cleaned player bans. Expired temp IP bans accumulated in memory and on disk, remaining visible in /ipbanlist until a manual unban. Fixed by adding an ipBans sweep that mirrors the existing player-ban loop.
  • isIPBanned() ignored expiry — returned true for any stored IP ban entry, including expired ones. Expired temp IP bans acted as permanent until the next server restart. Fixed to call IPBanEntry.isExpired() and auto-remove on lookup.

Files changed: BanManager.java

1.0.2.6+build.147 — 2026-05-18

🎨 Dashboard — Hologram Icon Visual Consistency

Updated hologram-related navigation icons across all admin dashboard pages for visual consistency. No behaviour changes.

1.0.2.6+build.135 — 2026-05-18

🔧 Dashboard — Navigation & UI Cleanup

  • Navigation sidebar links are now hidden for non-operator sessions
  • Active-link highlighting fixed on all sub-pages
  • dashboard.js authentication guard simplified; dead-code paths removed
  • Responsive layout tweaks in styles.css

1.0.2.6+build.133 — 2026-05-18

✨ Feature — WebSocket Real-Time Dashboard Updates

  • WebSocketEventBroadcaster pushes live events to all connected dashboard sessions (player_join/leave, server_stats, chat_message, shop_transaction, hologram_update)
  • POST /api/admin/broadcast — send server announcements directly from the dashboard
  • Dashboard stat cards and player list update live without page refresh
  • New Shop Management dashboard page (shop.html / shop.js) — view shops, edit prices, view transactions, manage holograms

Files changed: WebSocketEventBroadcaster.java, AdminEndpoint.java, PlayerEndpoint.java, DashboardAPI.java, dashboard.js, index.html, shop.html, shop.js

1.0.2.6+build.131 — 2026-05-18

✨ Feature — Shop Hologram Management Commands

New /shop hologram subcommands:

  • /shop hologram enable <shopId> — spawn/re-enable the shop hologram
  • /shop hologram disable <shopId> — hide the hologram without deleting the shop
  • /shop hologram move <shopId> — snap hologram to the sign's current position

Hologram is automatically created/destroyed with the shop. Fixed right-click-hologram purchase detection.

Files changed: ShopHologramManager.java, ShopManager.java, ShopCommand.java, ShopInteractHandler.java, ShopSignHandler.java, ShopData.java

1.0.2.6+build.129 — 2026-05-18

🎨 Improvement — Hologram & Discord Dashboard UI Rework

Hologram dashboard:

  • Responsive card-based redesign with live preview panel
  • Inline editors for scale, lineSpacing, textShadow, textOpacity, backgroundColorArgb
  • Frame animation editor per line; billboard/spin/hover controls exposed

Hologram renderer fixes:

  • Background panel colour applied correctly; scale/spacing applied at spawn; reduced animation flicker

Discord dashboard:

  • Redesigned account-link table with live status badges and one-click unlink

Files changed: HologramRenderer.java, HologramCommand.java, holograms.html, holograms.js, discord.html

1.0.2.6+build.127 — 2026-05-13

✨ Feature — In-Game Discord OAuth2 Registration

Complete in-game Discord OAuth2 integration:

  • /dashboard register discord opens an OAuth2 authorization flow — no manual token copy-paste
  • New DiscordEndpoint routes: auth/start, auth/callback, link, unlink, linked
  • New Discord dashboard page (discord.html) for managing linked accounts
  • discord_auth.json config format updated

Files changed: DashboardRegisterCommand.java, AuthenticationHandler.java, DiscordEndpoint.java, discord.html, discord_auth.json

1.0.2.6+build.125 — 2026-05-13

✨ Feature — Discord-Linked Dashboard Registration

  • /dashboard register discord — starts a Discord OAuth2 link flow
  • DashboardRegistrationManager — manages one-time Discord registration tokens and associates Discord user IDs with Minecraft UUIDs

Files changed: DashboardRegisterCommand.java, DashboardRegistrationManager.java

1.0.2.6+build.124 — 2026-05-13

✨ Feature — /dashboard update Smart File Comparison

/dashboard update now does per-file MD5 checksum comparison instead of overwriting everything.

New subcommands:

  • /dashboard update — smart update (only changed files)
  • /dashboard update check — dry-run preview
  • /dashboard update force — unconditional overwrite (old behaviour)

/dashboard status now shows installed vs. bundled dashboard version.

Files changed: DashboardFileManager.java, DashboardCommand.java

1.0.2.6+build.122 — 2026-05-11

🐛 Bug Fix — LuckPerms Default Permissions Not Applied When Adapter Is Unhealthy

Two root causes fixed in PermissionAPI.hasPermission():

  1. Registry-default block was skipped when adapter unhealthy — the registry-default fallback was inside if (externalAvailable). When LuckPerms reached ≥ 5 consecutive failures, non-OP players in the default group lost all NeoEssentials registered default permissions. Fixed by removing the guard — registry defaults now always apply.
  2. queryTristate called twice per check, doubling failure count — doubled consecutiveFailures on every cache-miss, flipping to unhealthy at half the intended threshold. Fixed by caching isExplicitlyDenied() after the first call.

Files changed: PermissionAPI.java

🐛 Bug Fix — AFK Kick Not Respecting Exempt Permission

Players holding neoessentials.afk.kickexempt were being kicked by the AFK system. Fixed by adding a permission check before the kick. Also improved AfkManager config reading and MessageUtil placeholder resolution.

Files changed: AfkManager.java, MiscTeleportManager.java, MessageUtil.java, ConfigManager.java

1.0.2.6+build.123 — 2026-05-13

✨ Added — Hologram System Improvements

New visual properties: scale, lineSpacing, textShadow, textOpacity, backgroundColorArgb

New commands:

  • /hologram copy <id> <newid> — clone a hologram
  • /hologram movehere <id> — move hologram to your position
  • /hologram near [radius] — list nearby holograms
  • /hologram insertline <id> <index> <text> — insert a line at any position
  • /hologram addframes <id> <lineIndex> <intervalTicks> <frame1|frame2|...> — frame animation
  • /hologram removeframes <id> <lineIndex> — clear frame animation
  • /hologram scale <id> <scale> | linespacing | shadow | opacity | background — visual tweaks

Dashboard REST API now returns all billboard/animation/visual fields for holograms. New wiki page: HologramSystem.md

1.0.2.6+build.120 — 2026-05-11

Fixed

  • /help 2 and higher pages now resolve correctly.
  • Fixed Brigadier command shadowing where vanilla /help <command> intercepted numeric input before NeoEssentials pagination.
  • NeoEssentials now takes ownership of /help and /? command registration so page parsing is reliable for players and console.

Touched file: HelpCommand.java

1.0.2.6+build.119 — 2026-05-08

🐛 Bug Fix — /tpa Nether Roof / Underwater Cave Landings

Fixed two player-reported /tpa landing regressions:

  • Nether teleports could resolve to the bedrock roof.
  • Ocean/boat teleports could resolve to caves under the seafloor.

Fixes:

  • TeleportLocation.scanColumnTopDown() now starts at min(maxBuildHeight-2, logicalHeight-1) to avoid scanning above logical dimension space (notably Nether roof space).
  • /tpa now teleports to the target player's live location (findSafe=false) instead of remapping to distant "safe" spots.
  • findSafeLocation() now prefers a ±16 Y local search around the destination before full column fallback.

Files changed: TeleportLocation.java, TeleportRequestManager.java

1.0.2.6+build.115 — 2026-05-08

✨ Feature — Interactive Shop Holograms

Players can now click the hologram above a sign shop directly:

  • Right-click hologram → buy
  • Left-click hologram → sell
  • Owner click → show shop info

This uses the same permission and transaction pipeline as sign interaction for consistent behavior.

Files changed: ShopHologramManager.java

1.0.2.6+build.113 — 2026-05-08

✨ Feature — Hologram Billboard, Spin & Hover

Added per-hologram orientation and animation controls:

  • Billboard modes: fixed, vertical, horizontal, center
  • Optional spin animation (speed + axis)
  • Optional hover/bob animation (amplitude + speed)

New commands:

  • /hologram billboard <id> <fixed|vertical|horizontal|center>
  • /hologram spin <id> on [speed] [axis]
  • /hologram spin <id> off
  • /hologram hover <id> on [amplitude] [speed]
  • /hologram hover <id> off

/hologram info <id> now includes billboard/spin/hover settings.

Files changed: HologramData.java, HologramRenderer.java, HologramScheduler.java, HologramCommand.java

1.0.2.6+build.112 — 2026-05-04

🐛 Bug Fix — /back Returns "No Previous Location" After Death

After dying, /back consistently reported "No previous location to return to" even though the player's death location should have been captured.

Root causes fixed:

  • MiscTeleportManager's @EventBusSubscriber now explicitly declares bus = Bus.GAME, matching the project-wide pattern and eliminating any bus-selection ambiguity.
  • The death handler is now @SubscribeEvent(receiveCanceled = true). Previously, if any mod cancelled LivingDeathEvent at a higher priority (keep-inventory plugins, god-mode, etc.), our handler was never called and the death position was silently dropped. Now the location is always captured when a ServerPlayer is the dying entity.
  • PlayerDataStore.flush() now creates the data directory if it doesn't exist before writing, preventing silent I/O failures that would leave death positions un-persisted across server restarts.
  • Added teleportation.backSettings to config.json with explicit enableDeathBack, enableTeleportBack, teleportDelay, backCooldown keys.

Diagnostic: The server log now shows an INFO line every time a player death is captured (coordinates + cancellation flag), so you can confirm the event is being received.

🐛 Bug Fix — Chat Format Strings Corrupted on Save (HTML Escaping)

Gson was converting <, >, and & to Unicode escapes (\u003c etc.) every time a JSON file was written to disk. This silently corrupted chat format strings — e.g. <{prefix} {name}> {MESSAGE} would become \u003c{prefix} {name}\u003e {MESSAGE} and display as literal escape codes in chat.

Fix: .disableHtmlEscaping() added to every GsonBuilder instance across the mod (30+ files) — config files, player data, moderation records, language files, web-dashboard writers, and more.

1.0.2.6+build.107 — 2026-05-04

🐛 Bug Fix — chat.json Not Being Loaded (Chat Format Reverts to Default)

Reported error: Failed to read config file chat: config/neoessentials/chat (No such file or directory)

Even with chat.json present in config/neoessentials/, the chat format would fall back to {neoessentials_displayname}: {MESSAGE} instead of the configured value.

Root cause: The config cache could hold a stale merged view of the main config that was built before chat.json existed (e.g. right after running /neoe config split without reloading). The section-extraction path returned an empty object without ever trying the file directly.

What's fixed:

  • ConfigManager.getConfig("chat") now falls back to reading chat.json directly and correctly unwraps the "chat" sub-object before returning it to callers.
  • ConfigSplitter.migrateToSplitConfigs() now clears the config cache immediately after migration — no manual /neoe reload needed for the new split files to take effect.

Files changed: ConfigManager.java, ConfigSplitter.java

1.0.2.6+build.102 — 2026-05-04

🐛 Bug Fix — Shop NPC Kicks All Players on Join

Error: The server sent registries with unknown keys: ResourceKey[minecraft:entity_type / neoessentials:shop_npc]

NeoForge syncs entity-type registries to clients at login. Because the shop_npc type only existed server-side, every player was disconnected the moment they tried to join.

Fix: Shop NPCs now use vanilla ArmorStand entities with a hidden NBT tag (NeoEssentials_ShopId). The interaction is caught by PlayerInteractEvent.EntityInteract on the server — zero changes on the client, no custom entity registration.

Files changed: ShopEntityRegistry.java, ShopNpcEntity.java, NpcShopCommand.java, NeoEssentials.java

🐛 Bug Fix — Hologram Source Files Failing to Compile (BOM Characters)

Six hologram files were saved with a UTF-8 BOM, causing error: illegal character: '\ufeff' on the very first character of each file. BOM removed from all six files.

Files: HologramEventHandler.java, HologramScheduler.java, HologramTextProcessor.java, HologramCommand.java, ShopHologramManager.java, HologramEndpoint.java

🐛 Bug Fix — Permission Validator Warns About Other Mods' Permissions

Any permission node not starting with neoessentials. (WorldEdit, FTB Ranks, LuckPerms groups, etc.) was incorrectly logged as an "unknown NeoEssentials permission". The validator now silently skips external nodes and counts them separately.

🐛 Bug Fix — Missing Permission Nodes Causing Validator Warnings

neoessentials.compass, neoessentials.compass.others, and neoessentials.chat.msgtoggle.bypass were used in command checks but absent from PermissionRegistry. All three are now registered with the correct default values.

1.0.2.6+build.91 — 2026-04-27

✨ Web Dashboard — Backup & Restore

First piece of the Web-Dashboard improvements track:

  • Create named ZIP snapshots of configs, mod data, and player data
  • Browse all snapshots with size, date, and target info
  • One-click restore with automatic pre-restore safety backup
  • Download ZIP archives from the browser
  • Delete snapshots with confirmation
  • Auto-prune when limit exceeded (max 20)
  • New 💾 Backup & Restore dashboard page with stat cards and confirm modals

1.0.2.6+build.86 — 2026-04-27

🐛 Bug Fix — /nick Nickname Not Working (Tab List, Chat, Placeholders)

Players were getting "Nickname set" confirmation but their nickname was invisible everywhere — the tab list showed the real username and chat showed the real name.

What was wrong: The code was calling player.setCustomName(), the entity cosmetic API used for mob name tags. On player entities this adds a second floating label above the head; it has no effect on the tab list or chat.

What's fixed:

  • Tab list entry — nickname now shown in the player list for all viewers immediately on /nick, and restored on every relog.
  • Chat display — {neoessentials_displayname} placeholder now returns the nickname. Works in all chat format strings and SocialSpy.
  • Hover/click names — nickname shown in the hover popup when chat.clickablePlayerNames is enabled.
  • Tab header/footer — {displayname} in tablist layouts now reflects the nickname.

Files changed: NickCommand.java, DefaultPlaceholderExpansion.java, ChatFormatter.java, TablistManager.java, TablistEventHandler.java

🐛 Bug Fix — NPC Shop Compile Errors

Fixed 11 compile errors in the entity shop layer that prevented the mod from building:

  • NpcShopMenu: clicked() return type corrected to void (MC 1.21.1); quickMoveStack() abstract override added.
  • ShopNpcEntity: removed damageSources() override with incompatible return type.
  • ShopTransaction: resolveItem(), giveItems(), hasSpaceInContainer() made public.

1.0.2.6+build.77 — 2026-04-27

✨ Feature — BungeeTabListPlus-Inspired Tablist

Completely reimagined tablist system taking direct inspiration from BungeeTabListPlus.

Highlights:

  • Independent mode (default) — NeoEssentials manages the entire tab overlay on its own. No proxy plugin needed.
  • 20+ placeholder tokens — including proxy-aware tokens: {network_online}, {server_online:NAME}, {current_server}, {rank_weight}, {session_minutes}, {health}, {afk}, and more.
  • Fake player entries (BTLP fakePlayers) — decorative separator rows, section headers, and padding in the player list.
  • Group-weight sorting — admins shown first, then by group weight, then alphabetically. Uses scoreboard teams as client-side sort keys.
  • Configurable layout — columns (1–4), groupSections, playersByServer, excludeServers, hiddenServers.
  • Optional proxy integration — BungeeCord channel bridge for {network_online} / {server_online:X} data. Off by default; enable with proxy.enabled=true in tablist.json.
  • New /tablist commands: proxy status, fakeplayer list/add/remove/refresh, layout info, independent on/off.
  • tablist.json config version 2→3.

Bug fixes: Resolved duplicate class compile error in TablistCommand; fixed ClientboundPlayerInfoUpdatePacket API incompatibility in FakePlayerManager; fixed CustomPacketPayload override error in ProxyIntegration.

1.0.2.6+build.73 — 2026-04-27

✨ Feature — Messaging & SocialSpy Improvements

Full enhancement pass on /msg, /reply, and SocialSpy formatting.

What's new:

  • MessageUtil.resolveTemplate() — new centralized resolution helper used by /msg, /reply, and SocialSpy. Applies named vars first (case-insensitive), then runs PlaceholderAPI, then logs any still-unresolved {TOKEN} tokens in debug mode.
  • Named placeholders in all message templates — {message} / {MESSAGE}, {sender}, {receiver}, {sender_displayname}, {receiver_displayname}, and all {neoessentials_*} tokens are now supported universally.
  • Safe fallback — if PlaceholderAPI throws, the un-resolved template is returned instead of an error.
  • Debug logging — enable logging.enableDebugLogging to see per-template unresolved token warnings and SocialSpy format resolution trace.
  • Config-based format overrides — new chat.messaging section in config.json:
    "socialspyFormat":  "&8[&eSocialSpy&8] &b{sender} &7→ &b{receiver}&7: &f{message}"
"msgFormatTo":      "&7[&aTo &f{neoessentials_displayname}&7] &f{message}"
"msgFormatFrom":    "&7[&bFrom &f{neoessentials_displayname}&7] &f{message}"
"replyFormatTo":    "" (uses lang default)
"replyFormatFrom":  "" (uses lang default)
    Leave blank to use language-file defaults. Config takes priority when set.
  • SocialSpy lang key updated — neoessentials.socialspy.format moved from positional {0}/{1}/{2} to named {sender}/{receiver}/{message} vars. _langVersion → 15, auto-merges on next start.
  • SocialSpy display-name lookup now runs once per broadcast not once per spy player.

1.0.2.6+build.72 — 2026-04-27

🐛 Bug Fix — FTB Ranks Adapter: Permission Checks Failing

FTB Ranks permissions were silently returning false for every check because the adapter was calling methods that do not exist in ftb-ranks-neoforge-2101.1.3, resulting in NoSuchMethodException at runtime.

What's fixed:

  • Correct API method now used — FTBRanksAPI.getPermissionValue(ServerPlayer, String) is the actual static method exposed by FTB Ranks 2101.1.x. The adapter now resolves this as Strategy 1 and interprets the returned PermissionValue with asBooleanOrFalse().
  • Improved fallback chain — five strategies now cover 2101.1.x (confirmed), RankManager path, two legacy naming variants, and the oldest UUID-based builds.
  • "MISSING" added to the boolean deny-list for PermissionValue.MISSING edge case.

1.0.2.6+build.70 — 2026-04-27

🐛 Bug Fix — /msg & /reply Formatting + Missing SocialSpy Key

What's fixed:

  • /msg and /reply showed raw template text — java.text.MessageFormat was applied to templates containing {placeholder} tokens, throwing IllegalArgumentException on every message send. Non-numeric placeholders are now escaped before format processing.
  • neoessentials.socialspy.format key missing — SocialSpy intercept threw a missing-key error; key added to en_us.json.
  • _langVersion → 14.

1.0.2.6+build.69 — 2026-04-24

✨ Feature — Custom Player Tablist: Refinements

Follow-up pass on the tablist system from build.67.

What's new:

  • RichTextFormatter.processTablistText() — dedicated tablist text processor that strips hover/click events (which tab-list packets cannot display) while running the full gradient → rainbow → named-color → format-tag → hex-color pipeline. Enabled unconditionally regardless of the enableChatEnhancements flag.
  • Hex colors and gradients in player prefix/suffix column — updatePlayerTeam() now routes prefix/suffix through processTablistText() so group prefixes like &#FF5500[Admin] or <gradient:FF0000-FF8C00>[Mod] </gradient> render as actual colored text in the player list column.
  • Color deferral fix — applyPlaceholders() no longer pre-converts & → §; the full color pass is deferred to processTablistText() so &#RRGGBB tokens and <gradient:…> tags survive placeholder substitution intact.

1.0.2.6+build.67 — 2026-04-24

✨ Feature — Custom Player Tablist

Complete rewrite of the tablist with full rich-text support, per-group/per-player customisation, animated frames, and extended placeholders. Inspired by: TAB, BungeeTabListPlus, Simple TabList.

What's new:

  • Hex colors & gradients — header, footer, and player prefix/suffix support &#RRGGBB, <gradient:FF0000-0000FF>text</gradient>, <rainbow>text</rainbow>, named color/format tags, and legacy &X codes
  • Animated header/footer — header/footer in tablist.json accept arrays; each refresh tick advances one frame for smooth animations
  • Per-group header/footer — "groups" section in tablist.json lets you give each permission group its own header/footer frames (e.g. an admin-only panel)
  • Per-player header/footer — "players" UUID section in tablist.json + new runtime commands:
    • /tablist player <name> header <text> — set custom header
    • /tablist player <name> footer <text> — set custom footer
    • /tablist player <name> reset — clear overrides
  • Per-group runtime commands — /tablist group <group> header|footer|reset
  • Extended placeholders — {displayname}, {server_name}, {x}/{y}/{z}, {balance}, {time}, {bar} added alongside existing {player}, {online}, {max}, {ping}, {world}, {tps}, {prefix}, {suffix}, {group}, {newline}
  • groupColors map — per-group color override applied to {displayname} in headers
  • Vanish + AFK integration — vanished players excluded from {online} for non-staff; configurable AFK suffix appended to player rows
  • tablist.json template updated with gradient example, group/player sections, and syntax reference

1.0.2.6+build.66 — 2026-04-24

🐛 Bug Fix — Tablist prefix, Warn console logging, WarnManager compile error

What's fixed:

  • Tablist prefix not showing — Group prefix/suffix was silently returning "" for players whose user entry had not yet been explicitly loaded in the permission manager. getPermissionPrefix/Suffix/Group now use the null-safe PermissionAPI.getManager() and fall back to the configured default group so freshly-joined players also show the correct prefix in the tab list.
  • Warn command not logging to console — /warn <player> <reason> lacked an explicit LOGGER.info() call; on some server setups the op-broadcast feedback wasn't routed to the log file. Warn actions now always appear in the server console.
  • Compile error: duplicate getInstance() in WarnManager — Two identical getInstance() declarations were present, causing a build failure. Duplicate removed.

1.0.2.6+build.64 — 2026-04-24

🌐 Improvement — Localization Audit & Admin Tooling

Full audit of all in-game translation key usage, 54 missing keys added, and a new /language tooling suite for server admins.

What's new / fixed:

  • 54 missing translation keys added to en_us.json — TPA/teleport-request flow (request.sent, request.received, request.denied, request.expired, request.failed, etc.), misc teleport (/jumpto, /back info), spawn/warp coordinate errors, moderation (unfrozen_message, reason_too_long), and several general/utility messages
  • Human-readable fallbacks — if a translation key is missing at runtime, players now see a readable English phrase (e.g. Home not found) instead of the raw key string (commands.neoessentials.home.not_found)
  • /language validate <code> — compare any language file against en_us.json, get coverage % and lists of missing/extra keys
  • /language regenerate <code> — refresh a language file from the bundled JAR copy, merge user translations, auto-backup to .bak
  • /language override — override individual message keys in-game; persisted to overrides.json and take priority over all language files (set, get, remove, list, clear, reload sub-commands)
  • _langVersion bumped 12 → 13 — new keys auto-merged into existing deployments at next server start

1.0.2.6+build.59 — 2026-04-24

🐛 Bug Fix — Chat: Unresolved {neoessentials_username_hover} & duplicate server log

Two related chat-formatting bugs fixed:

  1. {neoessentials_username_hover} appearing literally — When "clickable player names" was enabled, ChatFormatter substituted {neoessentials_username} with {neoessentials_username_hover}, which was never registered as a placeholder. The token was never resolved and appeared as raw text in chat.

  2. Duplicate vanilla log line — ChatHandler called server.sendSystemMessage(formattedMessage) after already logging via its own logger. This caused vanilla's MinecraftServer logger to emit a second line: <{neoessentials_username_hover}> message.

Fixes:

  • Replaced placeholder-swap with §HNAME§name§/HNAME§ internal markup tokens resolved in buildComponentFromMarkup() to real hover+click Components
  • Added username_hover / displayname_hover as plain-text fallback aliases in DefaultPlaceholderExpansion
  • Removed the redundant server.sendSystemMessage() call

1.0.2.6+build.58 — 2026-04-24

🔌 Feature — API & Placeholder System

Exposes the NeoEssentials placeholder system as a fully public Java API for external mods, adds in-game admin tooling, REST endpoints, and rewrites developer documentation.

What's new:

  • PlaceholderProvider and PlaceholderExpansion are now public top-level types — external mods can implement/extend them to register custom placeholders
  • NeoEssentialsAPI.getPlaceholderManager() — new entry-point to the thread-safe PlaceholderManager (API version bumped to 1.2.0)
  • /api/placeholders/list, /api/placeholders/resolve, /api/placeholders/stats — new authenticated REST endpoints
  • /api/docs now serves the built-in documentation system (was implemented but never wired)
  • /placeholder in-game command — list, info <id>, test <text>, stats sub-commands (permission: neoessentials.admin.placeholders)
  • neoessentials.admin.placeholders permission node registered
  • APISystem.md completely rewritten with full placeholder table, code examples for PlaceholderProvider/PlaceholderExpansion, REST endpoint reference, versioning contract

1.0.2.6+build.57 — 2026-04-24

✨ Feature — Chat Formatting: Per-Player Overrides Now Applied

Per-player format overrides set via /chatformat set <player> <format> were stored correctly but never actually applied — ChatHandler always resolved the chat format from the group/world lookup, silently ignoring any stored per-player override. PlayerChatFormatManager.getFormat() is now called first, making it the highest-priority step in the chain (per-player → group+world → group → world → default).

All rich-text features were already implemented (RichTextFormatter, ChatFormatter) and remain unchanged: hex colors (&#RRGGBB), gradients (<gradient:FF0000-0000FF>), rainbow, hover tooltips, click events, bold/italic, and legacy & codes. ChatSystem.md has been fully rewritten with a format priority diagram, /chatformat command table, complete tag reference with examples, placeholder list, and config key reference.

1.0.2.6+build.56 — 2026-04-24

✨ Feature — Inventory Management & Security Improvements

Config flags for /invsee, /inv, /invseeedit, /enderchest, /ec, /enderchestedit, /ecedit existed in config.json but were never read — the commands were always available regardless of the flag. All requires() predicates now check the corresponding isCommandEnabled() flag.

Added a concurrent-edit lock: only one staff member can hold an editable view of a player's inventory or ender chest at a time (second attempt is blocked with an informational message; lock releases on viewer disconnect). Added InventoryAuditLogger writing every view/edit open to neoessentials/inventory_audit.log (7 action types, controlled by new items.inventoryAuditLog config key). Added 4 new language keys for disabled and concurrent-edit error messages.

1.0.2.6+build.55 — 2026-04-24

🔧 Improvement — Per-Command Teleport Bypass Perms & Chunk Loading Docs

8 per-command bypass permission nodes (neoessentials.teleport.home.bypass.cooldown/warmup, warp.*, spawn.*, back.*) were already checked in code but absent from PermissionRegistry, so the dashboard and permission tools couldn't discover them. All 8 are now registered. Added a "Chunk Loading & Safety Interaction" section to TeleportationSystem.md explaining the 3×3 chunk preload and safety-scan order of operations.

1.0.2.6+build.50 — 2026-04-24

✨ Teleportation Improvements — Dashboard Settings Page, Language Keys & Permission Docs

Added a live teleport settings page to the web dashboard, fixed missing /back language keys, and documented all bypass permission nodes.

  • New Teleport Settings page in the dashboard — edit cooldowns, warmup delays, safety flags, and home/warp limits without restarting. Saves instantly reload all teleport managers.
  • Fixed /back warmup and cooldown messages that showed raw key names instead of text (keys were used in Java but not defined in the language file).
  • Documented 10 cooldown/warmup bypass permission nodes in permissions_nodes.txt.
  • Added MiscTeleportManager.reload() for dashboard live-reload support.

1.0.2.6+build.46 — 2026-04-24

🐛 Bug Fix — Web Dashboard Admin Controls & Permissions Page Blank

Admin Controls and Permissions pages showed a blank screen after login. F5 briefly revealed the content before it disappeared.

Three root causes: (1) showLoginScreen() hid dashboardWrapper without redirecting — on these pages there is no login form, so the result was a blank page with no way forward. Fixed to redirect to index.html. (2) permissions.js never called initPermissionSystem() because its init guard checked window.location.hash / [data-page="permissions"].active, which never match on the standalone permissions.html page. Fixed with a reliable element check. (3) Nine fetchWithAuth() calls in permissions.js were missing .json(), so all modal actions (group edit, permission add/remove, etc.) silently failed by checking .success on a raw Response object. All fixed. Also fixed username not showing in the sub-page topbars.

1.0.2.6+build.44 — 2026-04-24

🐛 Bug Fix — Home Confirmation Buttons Append "confirm" to Name

Clicking [Confirm] on a /sethome overwrite or /delhome deletion prompt failed with "Invalid home name: Colony confirm". Each subsequent click appended another " confirm", making it impossible to confirm the action.

Root cause: confirm/deny literals were Brigadier children of the <name> word-argument. In Minecraft 1.21+, RUN_COMMAND click events re-validate against the client-side command tree; the nested literal structure was not preserved, so "Colony confirm" was consumed as the full name value.

Fixed by promoting confirm and deny to top-level literal siblings of <name> (Brigadier literals always take priority over argument nodes). Confirm/deny handlers now read the pending home name from the server-side pending map — no name is embedded in the button command. Also fixed {HOME}/{home} placeholders in message keys (were never substituted) to {0} and added missing message keys. Lang version 11 → 12.

1.0.2.6+build.42 — 2026-04-24

🐛 Bug Fix — /back Fails in Unloaded Chunks

/back failed with "No safe teleport location found" whenever the death point or previous location was in an unloaded chunk — even though the destination was perfectly safe.

Root causes: (1) TeleportUtil only force-loaded the single target chunk, but findSafeLocation() scans up to ±16 blocks in X/Z, which can cross chunk boundaries. Neighbouring unloaded chunks caused every candidate to fail isSafe()'s level.isLoaded() check. (2) MiscTeleportManager.teleportDelay was hardcoded to 3 — the field was never populated from config, so the configured warm-up delay was silently ignored.

Fixed by adding preloadChunksForTeleport() (3×3 chunk grid loaded with PORTAL tickets before any safety check) and a new loadConfig() method in MiscTeleportManager that reads teleportDelay, enableDeathBack, and enableTeleportBack from ConfigManager.

1.0.2.6+build.41 — 2026-04-24

🐛 Bug Fix — Vanish Module Cannot Be Disabled

Setting moderation.vanishSettings.enableVanishSystem: false in config had no effect. Commands remained registered and players who were already vanished couldn't break/place blocks or interact, because the config flag was silently ignored.

Root causes: (1) isVanishSystemEnabled() read from the wrong JSON path — always returned true; (2) interaction-prevention guards never checked isVanishSystemEnabled(); (3) VanishManager.onPlayerJoin() was defined but never called, breaking vanish-state restoration on reconnect. All three issues fixed.

🔒 Security Fix — /inv and /ec Permission Bypass

/inv and /ec were registered as Brigadier redirect() nodes with no requires() predicate. Since Brigadier only evaluates the alias node's own predicate (not the target's), every player bypassed permission checks and could open any other player's inventory or ender chest.

Fixed by replacing redirect-based aliases with full command registrations that each carry their own requires() predicate. Also fixed a typo that prevented /ecedit from working, added neoessentials.invsee + neoessentials.enderchest to the moderator group, and added missing translation keys.

1.0.2.6+build.38 — 2026-04-24

🐛 Fix — Teleportation Messages & Cooldown/Warmup System

Missing localisation keys — All commands.neoessentials.teleport.spawn.* message keys were missing from en_us.json, causing raw key strings (e.g. commands.neoessentials.teleport.spawn.fallback_success) to appear in chat. Added all spawn, warmup, cooldown, and warp/home warmup keys. Lang version bumped to 11 — auto-merges into existing server language files on next startup.

Cooldowns not enforced — Multiple root causes fixed:

  • HomeManager now reads teleportDelay from config and enforces homeTeleportCooldown on each /home use.
  • WarpManager now reads and enforces warpCooldown (use cooldown) before each /warp use.
  • SpawnManager now reads and enforces spawnCooldown before each /spawn use; teleportDelay moved from spawn.json override to generalSettings.teleportDelay in config.json.
  • All TP managers now display a warmup countdown message to players when teleportDelay > 0 and enableTeleportWarmup=true.

✨ Feature — Permissions GUI, External Systems & Fine-Grained Control

Web Dashboard REST API (extended) — /api/permissions now handles context overrides, temp permissions, and aliases via REST. New endpoints: POST /reload, GET|POST|DELETE /group/{name}/context, GET|POST /group/{name}/temp, DELETE /group/{name}/temp/{node}, same for users, plus GET|POST|DELETE /aliases. Enhanced /system/status includes emergency mode, adapter health, failures, and alias count.

External System Integration — Documented the full 5-step fallback chain, adapter health tracking (5 failures → UNHEALTHY → auto-fallback), LuckPerms context via QueryOptions, FTB Ranks 4-API probe, startup compatibility report, and a compatibility table covering all major permission mods.

Fine-Grained Command Control — Every subcommand has its own node (/home set vs /home delete, /warp vs /setwarp, etc.). Documented comprehensive tables for Home, Warp, Kit, Economy, Moderation, and Permission system commands. Negative permission deny patterns documented.

1.0.2.6+build.28 — 2026-04-01

✨ Feature — Permissions System Improvements

Contextual Permissions — Permissions can now be world-specific, time-of-day specific, or gamemode-specific. New /permissions group <group> context and /permissions user <player> context subcommands let admins add/remove/list contextual overrides with tab-completion for all supported context keys.

Permission Conditions — Optional condition expressions (e.g. gamemode:survival AND time:day, health:above:10, op:true) can be attached to permission nodes. The permission is only granted when the condition passes.

Permission Aliases — config/neoessentials/permission_aliases.json maps legacy or short node names to canonical NeoEssentials nodes. Resolved transparently in every permission check.

Mod Interop API — NeoEssentialsAPI.getPermissionsService() returns a PermissionsService interface that other mods can use to check permissions (with context), register their own nodes and aliases, and query group info without importing NeoEssentials internals.

Storage & Audit — Contextual permissions and conditions persist across restarts. New audit log entries: *_CONTEXT_PERM_ADDED/REMOVED, *_CONDITION_SET/REMOVED.

1.0.2.6+build.26 — 2026-04-01

🔧 Improvement — Utility Systems Audit & Polish

  • /nick / /nickname — Data file path uses centralised ResourceUtil.getConfigPath(). /nickname alias now registered as a proper Brigadier redirect (was a metadata-only entry with no actual command).
  • /seen — Data file path uses ResourceUtil.getConfigPath().
  • Duplicate registrations removed — Stale duplicate registerCommand() metadata in NeoEssentials.java cleaned up; every player-info command is now registered exactly once.
  • Permission registry de-duped — Multiple permission nodes were registered twice with conflicting values; notably neoessentials.whois (was ADMIN/false, silently overridden to MISC/true) and neoessentials.ping.others (was PLAYER/true, overridden to MISC/false). Correct values now authoritative; unique sub-nodes (whois.detailed, rules.admin, motd.*) preserved.
  • All core utility commands verified functional: /nick /nickname /setnick /near /nearby /ping /depth /helpop /motd /rules /suicide /seen /whois /realname /msgtoggle.

1.0.2.6+build.25 — 2026-04-01

⏳ New — Temporary Permissions

  • Permissions — Time-limited permissions for players and groups that expire automatically. Supports durations like 30m, 12h, 1d, 7d, 1d12h30m. New commands: addtemp, removetemp, listtemp for both /permissions user and /permissions group. Expiry runs every 30 s server-side; online players are notified when a temp perm expires. Temp perms survive restarts (stored in playerdata.json / permissions.json, expired entries stripped on load). Six new audit events: USER_TEMP_PERM_ADDED/REMOVED/EXPIRED and GROUP_TEMP_PERM_ADDED/REMOVED/EXPIRED. Two new permission nodes: neoessentials.permissions.user.temp, neoessentials.permissions.group.temp.

1.0.2.6+build.23 — 2026-04-01

📋 New — Permission Audit Logging

  • Permissions — New PermissionAuditLogger writes every permission change to neoessentials/permissions_audit.log (append-only, timestamped UTC). 17 action types tracked: user group/perm changes, group create/delete/rename/clone/perm/inherit/prefix/suffix/priority changes, and reload events. Executor name logged for player commands, "CONSOLE" for server-side.
  • Config — New permissions.auditLogging key (default true). Set false to disable.

1.0.2.6+build.22 — 2026-04-01

⚖️ Improvement — Group Priorities + Permission Suggestions

  • Permissions — New priority field on permission groups (default 0). Higher priority parents are consulted first in the inheritance walk — deterministic grant/deny ordering when multiple parents conflict. Set with /permissions group <name> setpriority <value> (−999 to 999).
  • Permissions — priority persisted in permissions.json (backwards-compatible).
  • Permissions — Denial messages now show the node's registered description: §8(e.g. "Ban a player from the server") — staff know immediately what capability they need without checking the wiki.
  • Docs — New "Group Priorities" section in PermissionSystem.md; example groups.json updated with priority values; CommandsReference.md updated.

1.0.2.6+build.21 — 2026-04-01

🔍 New — Permission Debugging Tools

  • Permissions — New /permissions debug <player> command (requires neoessentials.permissions.debug). Shows system mode, adapter health/version, config flags, OP status, direct user permissions, group chain with inheritance, and a numbered resolution summary — diagnose permission issues in-game without touching logs.
  • Permissions — New neoessentials.permissions.debug permission node registered.
  • Fixed — /permissions user check now uses the full 5-step resolution chain (was bypassing external adapter, opsBypassPermissions, and vanillaOpFallback by calling the internal manager directly).

1.0.2.6+build.19 — 2026-04-01

📖 Documentation — allowUnsafeCommands & Security Config

  • Docs — Fixed wrong allowUnsafeCommands description in SplitConfigs.md (previously said "enchantments/item operations" — that's items.unsafe-enchantments).
  • Docs — Full security.json reference added: all six keys, blocked-pattern list, character allowlist, tables of commands that work vs. those needing allowUnsafeCommands: true.
  • Docs — Key insight documented: tilde ~ (relative coordinates) is blocked by default — the most common source of the "dangerous operations" error in powertools.
  • Docs — "Command Safety Filter" section added to ItemManagement.md under Powertool; warning note added to CommandsReference.md /powertool row; security.json added to Home.md getting-started list.

1.0.2.6+build.18 — 2026-04-01

🛡️ New — Fallback to Vanilla OP Permissions

  • Permissions — New permissions.vanillaOpFallback (default true): OPs get access as a last resort after all permission systems return false. Prevents admin lockouts from corrupted configs or crashing external perm mods.
  • Permissions — Permission system init failure no longer crashes the server — activates emergency OP-only mode with a clear console error. /neoe reload exits emergency mode without a restart.
  • Docs — PermissionSystem.md updated with new config option, bypass-vs-fallback comparison, and updated permission-check flow.

1.0.2.6+build.17 — 2026-04-01

🔌 Improved — External Permissions Integration

  • Permissions — FTB Ranks and LuckPerms adapters now detect mod version at startup and log it; a boxed WARN fires when the installed FTB Ranks version is newer than last tested.
  • Permissions — New AdapterCompatibilityChecker prints a formatted compatibility table at startup listing every detected permission mod, its version, and ✓/⚠ status.
  • Permissions — FTB Ranks adapter probes four API signatures so it survives version bumps without breaking.
  • Permissions — Both adapters track consecutive failures; after 5 failures they are marked unhealthy and PermissionAPI falls back to the internal permissions.json manager and then OP-bypass — no player lockouts from a broken external perm mod.

1.0.2.6+build.16 — 2026-04-01

✨ New Features — Rules Command

  • Rules — Console now logs a detailed boxed error with file path and fix steps when rules_data.json is corrupt or missing. Auto-generated defaults are logged with their exact path and edit instructions.
  • Rules — /neoe reload now reloads server rules.
  • Rules — Dashboard API /api/rules for full CRUD on server rules (list, add, edit, delete, replace all, reload from disk).
  • Docs — Full /rules section added to UtilitySystems.md; fixed stray /rules, /helpop, /suicide rows in the MOTD API table.

1.0.2.6+build.15 — 2026-04-01

🐛 Bug Fixes

  • Split Configs — Fixed split files never being created on fresh installs (JAR source was wrong).
  • Split Configs — Fixed main.json being overwritten with only one section.
  • Split Configs — Added missing economy section to main.json.

✨ New Features

  • /neoe config validate — validate all split config files.
  • /neoe config repair — auto-fix missing or incomplete split config files.
  • /neoe config status — visual overview of config file health.
  • Clear boxed startup errors when split files are missing with /neoe config repair hint.
  • New SplitConfigs.md wiki documentation.

1.0.2.6+build.12 — 2026-04-01

✨ New Features

  • MOTD – Multi-Profile Support — Multiple named MOTD profiles with /motd profile list|create|delete|switch|info. Each profile persists independently in config/neoessentials/motd_data.json.
  • MOTD – Auto-Rotation — Cycle profiles automatically: /motd rotation enable <minutes>|disable|next.
  • MOTD – Dashboard API — REST endpoint /api/motd for full profile & rotation management from the web dashboard.
  • MOTD – Error Feedback — In-game error messages on save/load failures; /motd reload shows the exact problem.

🔒 New Permissions

  • neoessentials.motd.profile (default: off)
  • neoessentials.motd.rotation (default: off)

1.0.2.6+build.5 — 2026-04-01

🐛 Bug Fixes

  • Config – Fixed ClassCastException crash in all kit commands when split configs are enabled. Also fixed getConfig("chat") throwing FileNotFoundException, which broke chat formatting across the mod.
  • Permissions – Fixed OPs being denied commands when an external permission mod (FTB Ranks, LuckPerms) is installed. OP bypass is now checked before any external adapter.
  • Permissions – Fixed FTB Ranks adapter NoSuchMethodException on FTB Ranks 2101.1.x (new API getPermission(ServerPlayer, String, boolean) now probed automatically).
  • ChestShop – Fixed Admin Shops with ? item — any admin with neoessentials.shop.create.admin can now right-click to assign the item.
  • Help – Fixed /help 2 and other page numbers showing "No command found" (conflict with vanilla /help resolved).
  • Moderation – Fixed /unban not detecting vanilla-issued bans; NeoEssentials now syncs with banned-players.json in both directions.
  • Rules – Fixed /rules ignoring existing rules.json from older builds; auto-migrates to rules_data.json.
  • MOTD – Fixed MOTD resetting on restart due to an inconsistent save path.

1.0.2.6+build.1 — 2026-03-06

🔁 Starting fresh from 1.0.2.6

This is the first build of the 1.0.2.6 release series. Build number reset to 1.

Included from 1.0.2.5 series:

  • Sign-based ChestShop system with admin shops, auto-fill item (?), and buy/sell via right/left-click
  • Vault API (Economy, Chat, Permission providers)
  • Dedicated tablist.json config file with group colours, placeholders, and animation support
  • 50+ new commands across Player Info, World/Fun, Teleport, Item/Misc, Utility, Admin, and Player State systems
  • Random teleport (/tpr) — even distribution, nether-aware, async cache, named zones, biome exclusions
  • Timed jails with auto-release, full event enforcement (respawn, teleport, interact, attack)
  • Offline pay, async baltop with pagination and total wealth, percent eco amounts
  • 8 new languages (FR, DE, ES, PT-BR, ZH-CN, NL, PL, RU) — auto-deployed and merged on start
  • 50+ permission nodes registered, new MODERATION category, denial messages show required node
  • Teleportation safe-location detection fully rewritten (slabs, stairs, glass, etc. now safe)
  • AFK system fully wired to config, score thresholds fixed, broadcasts and personal feedback working
  • Chat messages now appear in server console
  • PowerTool fixes — fires on block right-clicks, /powertooltoggle now works correctly
  • Rich text (gradients/rainbow) rendering fixed
  • Dashboard offline login, register command, and file auto-update fixed
  • ~120 missing translation keys added and auto-merged on load