3 releases, newest first.
Honest players now see the world they are standing in. Every version before this hid a listed block whether or not it was in plain sight, and nothing put it back until somebody broke a block next to it. Ore on a cave wall, spawners in dungeons and every anti-ESP container were stone for a player who simply walked in.
A block is now hidden only while all six of its neighbours block vision - only while it is genuinely buried. This is the rule Paper's own obfuscation and Orebfuscator apply.
Everything else is unchanged: the world is still never modified, reveals are still remembered per player for the session, and bypass still shows the true world.
Two defects that let an X-Ray client see real ore blocks.
Join-time chunks were sent unfiltered. The packet engine identified the receiving player by the Bukkit Player object, which PacketEvents only binds to a connection while PlayerJoinEvent runs. Every chunk sent before that event failed the check and went out with its real ores in it, which is exactly the terrain a player loads into on join. It also made the connection-view fallback, written precisely to cover that window, unreachable. The player is now identified by the packet's own User, so the path never needs the Bukkit object it never actually used.
Writes into uniform chunk sections were silently dropped. PacketEvents stores a section holding a single block state without any storage, and writing into one returns without changing anything and without reporting a failure. The palette rebuild collapses a section to that shape whenever the rewrite leaves one distinct state behind (an all-stone section is the common case) and the decoy pass runs after it, so every decoy aimed at those sections was lost while /antixray stats still counted it. A section made entirely of a hidden block failed the same way on the hiding path. Both writers now expand the palette before writing.
First stable release.
Per-player, packet-level anti X-Ray and anti ESP for Paper and Folia. Your world is never modified. Only what each player is sent changes, so two players in the same cave can be shown different terrain while the server keeps one true world.
SnDevelopmentsnantixray.bypass permission makes all three layers skip.Released at 9.30/10 on the Sn audit rubric, above the 9.0 threshold. Three audit cycles, each run by 8 independent auditors reading the code from zero, followed by an adversarial verifier instructed to refute rather than confirm findings.
Full documentation: https://github.com/ValentinTarnovsky/Sn-Releases/tree/main/docs/gitbook/snantixray