🔒 Security / Dupe Fix

This release closes an item-duplication exploit that relied on client-side inventory desync mods (e.g. UI Utils "desync" + "save/load" + closing the GUI without sending a packet). All servers should update.

Changed

• The Ender Chest GUI is now fully re-synced from the server on open, on close, and after every click or drag. Any snapshot a desync mod tries to "load" into the client is immediately overwritten with the server's real contents, so faked items can never be acted on or saved.
• Reopening a chest now force-closes and flushes any lingering/phantom view first, so a GUI that was closed "without a packet" can't be left untracked.
• The plugin no longer trusts save requests from an inventory view the server isn't actively tracking.
• The default enderchest size is now 54. to change either change it in the plugin.yml or with luckperms.

Notes

• No config changes required — just drop in the new jar and restart.
• No data-format changes; existing YAML/MySQL chest data is fully compatible.