Combat Persistence 🛡️

Combat Persistence is a professional-grade, 100% server-side Fabric mod for competitive Minecraft servers. It kills combat logging by spawning a vulnerable NPC whenever a player disconnects mid-fight — so closing the game is never an escape. It also ships a hardened, built-in authentication system to lock down offline-mode and cracked servers.

No client install required. Your players just connect and play.

---

⚔️ Combat Logging Protection

• Smart Combat Tagging — Players are tagged only on genuine PvP damage. Configurable duration with live action-bar feedback.
• Persistent NPCs — Disconnecting while tagged spawns a Mannequin NPC at your exact location that mirrors your skin, armor, and held items.
• Survives Anything — NPCs are backed by NBT data, so they persist through chunk unloads and full server restarts.
• Reliable Offline Deaths — If your NPC is slain while you're away, you rejoin straight to the death screen. No ghost items, no survival glitches.
• Advanced Dupe Protection — Clears both the inventory and the cursor stack the instant you disconnect, closing the duplication exploits that plague other combat-log mods.
• Command Blocking — Stop players escaping a fight with /tp, /home, /spawn, /warp, /back, and any custom commands you add.

🔐 Built-in Secure Authentication

• BCrypt password hashing — Passwords are never stored in plaintext.
• Inventory & coordinate hiding — Until a player logs in, their inventory and location are concealed, so nobody joining under their name (a real risk in offline mode) can peek at their items or position.
• Brute-force lockout — Accounts lock after too many failed /login attempts for a configurable cooldown.
• Operator account reset — /authreset <player> lets staff wipe a forgotten/compromised account so the player can re-register.
• Conservative IP auto-login — Optional and off by default (IP auto-login is weak behind shared NAT / BungeeCord / Velocity proxies). Enable only on trusted direct-connect servers.
• Safe limbo — Unauthenticated players are held in a lobby with hidden coordinates to prevent world-leaking.

🪓 Arena / SMP Extras

• Ender chest toggle — Optionally disable ender chests server-wide (reliably blocked via mixin) so players can't stash loot mid-fight on arena/SMP setups.

---

🆕 What's New in 1.7.0

• ✅ Updated for Minecraft 26.2 (Java 25).
• 🔒 Patched offline-mode identity exploits (premium-name bypass, inventory exposure, login-fall).
• 🔑 Added operator account reset (/authreset) and hardened IP auto-login.
• 🪓 Added a toggle to disable ender chests for arena/SMP servers, now reliably blocked via mixin.
• 🛡️ Combat tags now trigger only on real player damage; skin identifiers are validated and Mojang fetches isolated from the common thread pool.
• 🔐 Added brute-force login lockout.

⌨️ Commands

Command	Description
/register <password> <confirm>	Register your account.
/login <password>	Log in to your account.
/skin <name>	Apply a skin from a Mojang account name.
/authreset <player>	(Operator) Reset a player's account so they must register again.

🔧 Configuration

Everything lives in config/combatpersistence.json and generates on first launch. Highlights:

Setting	Default	What it does
combatTagDurationSeconds	15	Length of the combat tag.
blockedCommands	/spawn, /home, /tp, /tpa, /warp, /back	Commands disabled while tagged.
disableEnderChests	false	Block ender chests server-wide (arena/SMP).
enableAuth	true	Toggle the whole authentication system.
forceAuthInOfflineMode	true	Require auth even in offline mode.
enableIpAutoLogin	false	Optional IP-based auto-login (use only on trusted servers).
maxLoginAttempts / loginLockoutSeconds	5 / 300	Brute-force lockout threshold and cooldown.
sessionDurationHours	24	How long an auto-login session lasts.
hideInventoryBeforeAuth	true	Conceal inventory until login.
hideCoordinatesBeforeAuth	true	Conceal coordinates until login.

All in-game messages are fully customizable (color codes supported).

📦 Requirements

• Fabric Loader + Fabric API
• Minecraft 26.2
• Java 25+

💎 Why Combat Persistence?

Built with an exploit-first mindset. We've manually patched duplication glitches (cursor stacks, inventory ghosting), offline-mode identity spoofing, and authentication bypasses that affect other similar mods. It uses ReentrantLock and background saving to stay thread-safe and lag-free under load.

❤️ Support

If this mod helps your server, you can support development here: ko-fi.com/pottersgame

---

Source Code · Issue Tracker · GPL-3.0 License