SnStaff changelog

Changes

• Vanish: reverted the 1.2.3 TAB delay. An unvanish shows you to other players at once again, like 1.2.2 and EssentialsX. With TAB, your nametag can appear for a moment without its rank prefix until TAB's next vanish check.

Changes

• Vanish: with TAB installed, an unvanish now shows you to other players about 2 seconds later, once TAB has restored your nametag team. Before, the body appeared in the same tick and TAB (which checks the vanish state about once a second) left the nametag without its rank prefix for a moment. Without TAB the show stays instant.

Changes

• Vanish: back to exactly one hide/show per change, like EssentialsX, SuperVanish and SnDungeons. The resync and settle passes of 1.2.0/1.2.1 and the vanish.visibility-resync key are removed (a leftover key is ignored).
• Vanish on join: the joiner is hidden at spawn-location time, before entering the world, so nobody sees a single frame of them. A player who left vanished no longer flashes on rejoin.
• Leaving a follow no longer re-syncs the follower.
• UniverseSpigot: SnStaff warns at startup when disableBukkitVanishAPI is true in universespigot.yml; that option switches off the visibility API every vanish plugin relies on and must be false.

Changes

• Vanish: new vanish.visibility-resync (default true). A moment after you vanish, the hide is re-sent to every nearby player; a moment after you unvanish, every nearby player who may see you is re-paired. Fixes servers with an asynchronous entity tracker (UniverseSpigot, Leaf...) where older clients through ViaBackwards kept seeing a vanished staff member as a body without a TAB entry, or stopped seeing them after the unvanish.
• PIN keypad: new default heads for the digits 1-9. Existing servers keep their guis/pin-keypad.yml: delete it to get the new heads.
• Staff notices: staff mode and freeze notices now reach every holder of snstaff.staffmode (the /staff permission) or snstaff.notify.see, even though entering staff mode vanishes the actor.
• snstaff.notify.hidden counts only as an explicit grant: an owner holding * is no longer left out of every notice.

Changes

• PIN keypad: a 3x3 dropper with the digits 1-9 (new guis/pin-keypad.yml). The title shows the digits typed so far and the 4th digit submits.
• Staff notices: staff with snstaff.notify.see are told, network-wide, when someone enters or leaves staff mode and who froze or unfroze whom (notify.staff-mode, notify.freeze). A vanished actor or target is named only to snstaff.vanish.see holders.
• Staff mode: blocks PvP (direct and projectile, staff-mode.protections.block-pvp) and every placement (blocks, item frames, paintings, armor stands, boats, minecarts). Entering is refused while frozen, or when the cursor or crafting grid items have no room (they would drop).
• Inventory safety: the staff mode backup is also kept in the player data (snstaff:staff-backup). At join it is given back at once. A database backup without it is only marked consumed, so a crash can neither duplicate items nor overwrite items gathered after leaving staff mode.
• Vanish: hidden from the locator bar on 1.21.6+. Nearby players re-render you after unvanish, with no teleport needed.
• EssentialsX hand-over removed: /vanish and /invsee are always SnStaff's (snstaff.vanish / snstaff.invsee). vanish.aliases now defaults to [], so /v stays with EssentialsX.
• New /follow [player] (snstaff.follow, child of snstaff.admin): spectate a player. Outside staff mode you return to your gamemode and location when it ends, even after a crash. A bare /follow stops.
• Freeze: /freeze toggles, and /unfreeze is removed. Each freeze has a chat room. The freezer starts in talk mode, and a bare /fc toggles it. /fc <player> joins a room, /fc <player> <msg> joins and sends once, and only members talk. The # and @ staff chat prefixes still work in talk mode.
• Defaults: freeze.allowed-commands: [r, reply, m, msg]. allow-minimessage: true in staff-chat.style and admin-chat.style.

Upgrading from 1.1.x

• PINs that contain a 0 must be reset with /staff admin pin reset <player>, because the keypad has only the digits 1-9.
• Existing servers keep their old config values (SnLib only adds new keys). To get the new defaults, edit by hand:
  • vanish.aliases: [] (was [v])
  • freeze.allowed-commands: [r, reply, m, msg]
  • allow-minimessage: true under both staff-chat.style and admin-chat.style
• /unfreeze, freeze.unfreeze-aliases, the integrations: block and webhooks.events.essentials are gone. Leftover keys are ignored.
• The old guis/pin.yml can be deleted.
• Public API unchanged (API version 1.0.0). PlayerUnfreezeEvent still fires when /freeze or the tool unfreezes.

Known limits

• Inventory-sync plugins that replace the player data (or its persistent data) on join defeat the backup mirror.
• On 1.20.x and 1.21 before 1.21.6, vanished players still show on the locator bar. Staff with snstaff.vanish.see do not see them there either.
• Running /staff ends a /follow started outside staff mode, even if staff mode then refuses to enable.
• Not yet boot-tested on a live server.

Changes

• SnStaff now uses the Sn bundle license: the key is read from the shared plugins/.Sn-License/license.yml, the same file every Sn bundle plugin on the server uses.
• SnStaff no longer creates or reads plugins/SnStaff/license.yml; an old copy from v1.0.0/v1.1.0 can be deleted.
• The developer API is unchanged (API_VERSION 1.0.0).

Changes

• New public developer API, API_VERSION 1.0.0, in the com.sn.staff.api package of this jar.
  • SnStaffProvider.get() -> SnStaffAPI (read-only): staff mode, vanish, freeze and its owner, staff check, staff rank, PIN unlock, server name, network mode, staff statistics (async).
  • Cancellable events fired before the change: StaffModeEnterEvent, StaffVanishToggleEvent, PlayerFreezeEvent, PlayerUnfreezeEvent, StaffChatSendEvent, StaffRankChangeEvent.
  • New config key api-events.enabled (default true) switches every API event off.
• The vanish and freeze toggles (command and staff-mode tools) now act on the real resulting state, so a cancelled change is never logged or shown as done.
• New lang key messages.ranks.cancelled.

Known limitations

Unchanged from v1.0.0 (see the v1.0.0 release notes): staff-mode inventory overwrite on exit with the documented opt-outs, unique data/server-id.yml per backend, shared MySQL for the ranks module with remove-unregistered, grant snstaff.pin.required to every staff group.

First stable release of SnStaff (Paper 1.20.x and 1.21.x, SnLib consumer, licensed standalone).

Final audit gate: PASSED. 6 criticals verified fixed (CB2 and CB5 contained), 0 accepted, 1 upstream (license template), close pass run. WL15, WL37, WL39, WL40 and the last docs edits are fixed but not blind-verified.

Known limitations

• FIRST (contained criticals CB2/CB5): the staff-mode inventory is overwritten from a snapshot on exit, so any item path the protections do not seal is destroyed or minted. Block interactions (chiseled bookshelf, flower pots, decorated pot, lectern), entity holders, frames, stands and the crash-recovery container window are sealed unconditionally. The remaining paths are operator opt-outs documented in config.yml and the README: staff-mode.protections.block-item-pickup: false (items and XP picked up are lost on exit) and silent-containers: false (real containers open, items cross the overwrite). Another plugin can still force-open an inventory or hand items to a staff member; the seal cannot see that.
• Teardown (WL14): the consume keeps a 500 ms floor after the shared deadline (up to about 5.5 s on a stalled DB, stop path only); an entry write that outlives the budget can land after consumeAll and leave an unconsumed backup that the next join gives back again.
• Retry spam during a DB outage while the 40-tick revalidation retries a failed exit (WL34).
• Stale crash-backup re-application after a compound failure (crash or quit in staff mode AND a DB fault in the same window): WL3, no fix without a redesign.
• Original inventory lost if the JVM or host dies inside the async backup-write window at staff mode entry (WL7).
• Registered-rank staff without snstaff.pin.required can join PIN-unlocked when the rank preload fails during a DB outage (WL9). Grant snstaff.pin.required to every staff group.
• Staff-mode quit and shutdown restore the inventory from memory before the async backup consume (WL3).
• Never copy data/server-id.yml to a second backend sharing the MySQL database; give every backend a unique network.server-id (WL5).
• Ranks module on the default per-server SQLite with ranks.remove-unregistered: true on a shared LuckPerms strips staff groups on backends lacking the local row (WL44): use a shared MySQL database for ranks on a network.
• A PIN lock that arrives while a staff member is following a player does not end the running follow (WL42).
• Obfuscated jar pending runtime confirmation: boot test on a dev server recommended (license gate and runtime-key decrypt untested on a server).