CobblemonQuests

[1.4.5] — 2026-04-17

Fixed — Server Quest completion bugs

• Server quests could be completed infinitely by clicking +500 after the target was reached — rewards granted every click. Fixed: setProgress() now returns immediately if already completed.
• onGoalComplete() double-call guard added.
• Boss bar now updates to 100% on completion.
• Boost button shows gray "Goal completed" when done.
• Server quest boss bar now auto-removes 10 seconds after completion instead of staying on screen permanently.

Security — Pre-deployment hardening

• All 27 admin GUI classes now have an internal requiresAdmin() guard checked on every open() call. Non-admin players get rejected even if a code path bypasses the normal entry point.
• PlayerDetailGui re-checks admin permission on every click. A demoted admin loses power immediately while the GUI is open.
• BaseGui.open() now calls an overridable requiresAdmin() hook before building the inventory (defense-in-depth).