SnPlayerBounty changelog

Changes

• Runtime-key string protection on the bounty service, the command tree and the menus: their string literals are decrypted only with the per-build key the license backend delivers after authentication. 1.0.0 shipped without it.
• No gameplay, configuration, command, permission or placeholder change. Drop-in replacement for 1.0.0.

First stable release of SnPlayerBounty: kill-streak and player-placed bounties in any currency (Vault, SnElementalGems, placeholder), most-wanted and tops menus, four leaderboards, PlaceholderAPI expansion. Final audit gate: PASSED WITH ACCEPTED RISKS (1 critical found and verified fixed, close pass clean).

Upgrading: existing installs keep the old Back button line of guis/top.yml; change [open] main to [bounty-main] (or delete the file) and reload.

Known limitations:

• Delete-before-pay window: a crash between removing a claimed bounty and paying it loses that payout.
• Server-funded kill-streak bounties can be farmed by cooperating players; tune anti-abuse and kill-streak.per-kill.
• One MySQL database shared by several servers can double-claim a bounty (the index is per server).
• Offline players are found only through the server's offline-player cache; players who never joined since install cannot be targeted.
• Bundle license gate: bootstrap-only delay in the worst case of a slow license backend (template-owned, tracked upstream in /sn-license).