Allium v0.2.16a

Wiki: https://github.com/castledking/Allium/wiki

Highlights

• /time pause freezes a world's day-night cycle — A world can be pinned to a single tick and persisted there across restarts. Two layers cooperate: doDaylightCycle is disabled while paused, and a per-tick task re-asserts the saved tick in case any plugin (including /time set) tries to move the clock.
• Essentials-style player matching across the command suite — A shared PlayerMatcher now resolves partial names, nicknames, and prefixes the same way Essentials does. It is rolled out to /tp, /msg, mail, /seen, /fly, /god, /balance, /cheque, /home, /locator, and /core (restore/dialog), and it is vanish-aware: a hidden player is never matched by someone who cannot see them.
• First-time players who open with a bot probe are punished — A brand-new player whose very first command is /plugins, /pl, or /version (all bot tells) is banned by default via a configurable punishment command. Legitimate players never run these as their opening command; bot clients do it immediately after spawning.
• The ModGuard translation probe is now a three-mode, multi-check system — Up to three checks are packed onto a single ghost sign, a key.forward control line detects sign-spoofing/exploit-preventer mods, and each check runs in one of three modes (translate, keybind, meteor). The rewrite also kills the false positives from clients that echo the raw key padded with a letter.
• Allium's vanish and party isolation now drive EssentialsX's canSee — A new visibility bridge (AlliumVisibilityApi) is exposed to EssentialsX's AlliumVisibilityBridge over reflection, so vanishing and party-only isolation survive Essentials' own visibility decisions instead of being undecided.
• Offline home limits resolve through LuckPerms — HomeLimits can now answer how many homes an offline player's permissions grant, so /core sethomes no longer reports "unknown (offline)" when LuckPerms is installed. Covered by new unit tests.
• Auto-restart speaks through Discord — Restart schedules, countdowns, and the final shutdown are relayed to Discord via DiscordSRV as colored embeds, and three placeholder names (%allium_restart_time%, %allium_restart_seconds%, %allium_restart_scheduled%) expose the restart state to chat formats. A placeholder-delegation bug that silently emptied these placeholders is fixed.

Technical Details

/time pause: the day-night cycle, frozen

TimePauseManager owns the feature. Pausing a world captures the current tick and stores it; from then on two layers keep the clock pinned:

The pause is durable. State lives in a new paused_worlds database table (world primary key, paused_tick, paused_by, paused_at); storage migrates the database from version 8 to 9. On startup restorePersisted() replays every recorded pause, and a WorldLoadEvent hook applies the same pin to worlds that load later in the session (e.g. a lazily-loaded Nether), so a paused dimension cannot silently drift between loads.

Feedback is wired through lang (time.pause.enabled / time.pause.disabled), the commands are:

The permission is allium.time.pause (default: op). /time usage strings now advertise the pause subcommand.

Essentials-style player matching everywhere

PlayerMatcher centralizes the resolution that commands previously did with bare Bukkit.getPlayer. It mirrors Essentials' matchUser order:

1. Exact UUID (when the term parses as one)
2. Exact real name, case-insensitive
3. Real-name prefix — closest match wins (shortest name, then alphabetical, so j prefers joe over joey)
4. Nickname prefix
5. Nickname contains (Essentials' display-name fallback)

Two vanish rules apply: a player hidden from the sender is never a candidate, and console matches everyone. PlayerMatcher.tabComplete returns real in-game names sorted best-first, with nickname-only matches ranked after direct name matches, and also respect visibility.

The roll-out replaced Bukkit.getPlayer/getServer().getPlayer/tab-complete filtering in /tp (every path), /msg and mail recipients, /seen, /fly, /god, /balance, /cheque, /home, /locator bar show|hide|reset, and /core (restore, dialog show, sethomes, homebyplayer). /seen also dropped its player-only restriction: it now runs from console and reports to CommandSender instead of a Player, with sounds/particles skipped for console users.

Anti-bot

AntiBotListener tracks players currently in their first-ever session (from PlayerJoinEvent when hasPlayedBefore() is false). If their very first chat command is one of anti-bot.commands-to-punish (default plugins, pl, version), the command is cancelled and every line of anti-bot.punishment-command is dispatched from console with %player% substituted:

anti-bot:
  commands-to-punish:
    - plugins
    - pl
    - version
  punishment-command:
    - "ban %player% -s [SC] Bots aren't allowed on this server"

Root-command extraction strips the leading / and any namespace: prefix, so minecraft:plugins triggers too. A player holding allium.antibot.bypass is skipped. The guard fires only once per player (the set entry is consumed by the first command), and leaving the server clears it.

ModGuard translation probe: three modes and a control line

The probe still works through the MC-265322 ghost-sign trick, but the plumbing is different:

• Multi-probe signs. Up to CHECKS_PER_SIGN (3) checks are packed onto one sign, one per line, and the echoed lines are evaluated as a batch before the next sign is queued. Fewer sign round-trips means faster full sweeps and less disruption to the victim's screen.
• Control line. The fourth line always carries the vanilla key.forward keybind. If it comes back as the raw key.forward, a sign-spoofing/exploit-preventer mod is intercepting the probe and the batch is marked as such — coincident hits are treated as lower-confidence rather than certain.
• Three evaluation modes (per-check mode: in modguard/config.yml):

• Key-plus-letter immunity. Vanilla and many clients resolve an unknown key by echoing the raw key as-is; some report-playing clients instead append a single character (the dead key can land as key.forwardX-style padding). isKeyPlusLetter treats key + exactly one letter as a clean echo, which removes the WaylandCraft-style false positive while still catching real keybind resolutions.
• Layer 1 expanded. banned-mods now covers the hackops client ids (Meteor, Wurst, LiquidBounce, Autism, Baritone, ...), the CheckHacks list (Freecam, XRay, ChestESP, KillAura, BleachHack, Aristois, Coffee, ...), the IPN inventory family, and misc utilities (Tweakeroo, Litematica, Xaero's, seed-crackers, world downloaders, ...). Brand, plugin-channel, and FML-handshake checks are individually toggleable (check-brand, check-channels, check-fml-handshake). LiquidBounce stays as a documented disabled entry: current builds load their language files into their own ClientLanguage, so the vanilla resolver never sees a liquidbounce.* key and the sign probe cannot reach them.

EssentialsX visibility bridge

PluginStart.getVisibilityApi() returns an AlliumVisibilityApi. EssentialsX's AlliumVisibilityBridge looks the object up by reflection and calls getVisibility(viewer, target); the returned decision maps to Essentials' behavior:

This stops the "Essentials could not query AlliumVisibilityApi" warning and makes the two plugins agree on who sees whom. Initialization is ordered after both VanishManager and PartyManager so the bridge can delegate to them.

Home limits for offline players

HomeLimits.getOfflinePermissionMaxHomes(OfflinePlayer) returns an OfflinePermissionResult(resolved, maxHomes). Online players resolve normally; offline players fall back to LuckPerms, pulled reflectively exactly the way the rest of the plugin talks to it (LuckPermsProvider.get() + getUserManager(), getUser then loadUser(...).join(), resolveInheritedNodes with non-contextual query options). resolved() is false when LuckPerms is absent or the player has no user record, so callers can tell "they genuinely have no homes" from "nobody knows". An allium.sethome.unlimited node still wins, a negated base (!allium.sethome) yields zero, and the staff /core sethomes override is untouched.

/core sethomes <player> now shows the resolved permission value even while the player is offline instead of unknown (offline). HomeLimitsOfflinePermissionTest covers the whole matrix with LuckPerms users delivered through Java proxies.

Auto-restart announces on Discord, and a placeholder fix

With auto-restart.relay-to-discord: true (default), DiscordRestartRelay posts embeds for the schedule, each countdown tick, the vote start/pass/fail, and the final shutdown — colored from autorestart.discord-stopped-message-embed-color, footered with the stripped server-stopped-message. Channel resolution prefers DiscordSRV's main text channel, then the configured global channel, then a raw parse of DiscordSRV's own config. send-final-server-stopped-message broadcasts the closing line in-game before shutdown. /ar now no longer announces "Server will restart in 0s." — an instant restart skips the scheduled/embeds entirely.

The three restart placeholders (restart_time, restart_seconds, restart_scheduled) delegate to the auto-restart command's live state. They were unprintable at first because of a delegation-chain bug: the master %allium_% expansion asks each inner expansion in order and stops at the first non-null reply, and CommandPlaceholder returned "" (not null) for any parameter it did not handle. Because it ran before RestartPlaceholder, every restart placeholder was swallowed as an empty string. It now returns null for unhandled parameters, and LocationPlaceholder's database-unavailable path got the same fix.

Other fixes

• §x§R§R§G§G§B§B legacy hex in chat no longer crashes the formatter. FormatChatListener.convertLegacyToMiniMessage now rewrites the six-section-code form to <#RRGGBB> before the single-code replacements run.
• Per-gamemode inventories are upserted. CreativeManager now persists the PlayerInventories snapshot through Database.savePlayerInventories (a MERGE INTO player_inventories upsert) when a game-mode inventory is saved, so the creative/survival swap is durable rather than shuttle-only.
• /gc gained an uptime alias.
• player-only-command lang key added for commands that pivoted to accepting console senders.

Verification

• Maven suite: 175 tests, 0 failures, 0 errors — mvn test green, including the new HomeLimitsOfflinePermissionTest (offline LuckPerms resolution), the existing CommandVisibilityRulesTest, and the harvest suite.
• Placeholder chain: %allium_restart_time% / %allium_restart_seconds% / %allium_restart_scheduled% now resolve through to RestartPlaceholder; the earlier delegated placeholders (fly, world_time, spawn_location, ...) are unaffected.
• Time pause: /time pause holds the tick across ticks and survives a restart via the paused_worlds table; /time set on a paused world is immediately undone by the re-assert task.