Wardstone | Dupe & Exploit Guard v1.0.0

Wardstone Wardstone stops the exploits and dupes that hurt an economy, without locking down redstone your builders actually need. It ships six checks split into two groups: security checks that stay on everywhere, and configurable checks you can turn on or off per world. Built for admins who want real protection they can actually tune. Built for: Survival, SMP, Skyblock, Factions. How it works Every check has a global switch in config.yml. The three dupe-vector checks (item frame rate, merchant rate, piston container move) can also be set per world with /wardstone world or the in-game toggle GUI, so you can allow piston-moved shulker boxes on one world and block them on another. The three security checks (book limit, anvil limit, creative NBT limit) stay global, since a crash exploit should never be allowed anywhere. When a check fires, it logs an alert with the player, world, and detail, and optionally broadcasts it to staff with the wardstone.alerts permission. Dupe alerts that carry a real item can be rolled back with one command, pulling the duped item straight out of the offending player's inventory. Checks

• Item Frame Rate - rate-limits item frame interactions to stop frame-dupe macros. Configurable per world, default 8 per second.
• Merchant Rate - rate-limits collecting villager trade results to stop trade-dupe macros. Configurable per world, default 10 per second.
• Piston Container Move - stops pistons from pushing or pulling shulker boxes. Off by default since it changes redstone behavior, configurable per world.
• Book Limit - trims oversized written books before they can crash or chunk-ban a client. Global security check.
• Anvil Name Limit - caps anvil rename length to stop client lag and crash attempts. Global security check.
• Creative NBT Limit - strips abusive NBT (huge lore, oversized names, deeply nested containers) from creative-placed items. Global security check, survival play is untouched.

Alerts and rollback Every fired check is logged with the player, world, and what happened. Staff with wardstone.alerts see it live in chat, and the full log is browsable with /wardstone alerts or the in-game Alert Log GUI. Dupe alerts that captured a real item show a chest icon; click one, or run /wardstone rollback <id>, and Wardstone removes the recorded amount straight from the offending player's inventory if they are still online. Features

• Six checks covering the most common dupe and crash-exploit vectors.
• Per-world toggles for the three configurable checks, in chat or through a GUI.
• Persistent alert log (default 100 entries) with a cooldown so macro spam does not flood it.
• One-click rollback that pulls a duped item back out of the offending player's inventory.
• Two in-game GUIs: an alert log and a per-world toggle panel.
• Optional Discord webhook relay for alerts.
• Full permission split for use, admin actions, and staff alert broadcasts.
• Tab completion on every subcommand, world name, check id, and alert id.
• /wardstone reload applies config and message changes with no restart.
• Config auto-migration keeps your settings when the plugin updates.

Commands

• /wardstone - opens the Alert Log GUI for admins, shows help otherwise. Aliases: /ward, /ws.
• /wardstone status - lists every check, its on/off state, and its scope.
• /wardstone alerts [page] - lists recent alerts in chat, 8 per page.
• /wardstone gui - opens the Alert Log GUI.
• /wardstone worlds - opens the per-world toggle GUI.
• /wardstone world <world> <check> <on|off|toggle> - sets a configurable check for one world.
• /wardstone rollback <id> - recovers the item tied to a dupe alert.
• /wardstone clear - clears the stored alert log.
• /wardstone reload - reloads config and messages live.

Permissions

• wardstone.use - view status, help, and the alert list. Default: everyone.
• wardstone.admin - open the GUIs, change toggles, rollback, clear, and reload. Default: op.
• wardstone.alerts - receive live staff alert broadcasts. Default: op.

Configuration config.yml is fully commented and covers:

• Per-check enable switch and thresholds (max-per-second, max-pages, max-name-length, and so on).
• The list of protected materials for the piston check.
• Per-world overrides for the three configurable checks.
• Alert log size, staff broadcast toggle, and per-type alert cooldown.
• An optional Discord webhook URL for the alert relay.
• The alert log save interval.

messages.yml holds every player-facing line with MiniMessage formatting, so you can restyle or translate all of it. Requirements

• Minecraft 1.21 to 26.1.2.
• Paper, Spigot, or Bukkit.
• Java 21.

Installation

1. Drop Wardstone-1.0.0.jar into your plugins folder.
2. Start the server once to generate the config.
3. Edit config.yml to taste, then run /wardstone reload.

Try it first Wardstone is live on our test server, hosted here on BuiltByBit. Use the test server link on this page to connect and try the checks and GUIs yourself. Support Questions and bug reports are welcome. Join the No Click Studios Discord at https://discord.gg/drBwA958bn.