SY-Pass v2.2.0

A major update focusing on streamer privacy, enhanced chat & command security, automated testing, and general quality-of-life improvements.

🎥 Streamer Mode

• Full Host & IP Masking: One-click toggle in Settings that completely masks server hostnames, IP addresses, and ports with asterisks (*) across all server cards, lists, and edit screens (e.g., mc.hypixel.net:25565 → ********************).
• Neutral Server Icons: Replaces all custom server favicons with standard, neutral Minecraft server icons (unknown_server.png) to prevent server identification by logos.
• Stream-Proof Credential Safety: Disables in-place password reveal buttons and masks password fields by default while Streamer Mode is active.
• Strictly Scoped: Operates strictly inside the SY-Pass mod GUI without modifying any vanilla screens.

🛡️ Security Hardening & Leak Protection

• Command Leak Protection: Extended the Aho-Corasick leak protection engine to intercept outgoing client commands (/msg, /tell, /w, /r, /say, etc.) on both Fabric and NeoForge.
• Smart Authentication Whitelist: Legitimate authentication commands (/login, /l, /register, /reg, /auth, /changepassword, /cp, custom server login commands, and configured registration templates) as well as internal auto-login dispatches are never blocked.
• NeoForge Anti-Spoofing: Completely eliminated auto-login prompt scanning from player chat messages (ClientChatReceivedEvent.Player). Only server system packets and action bar overlays can trigger login prompts.
• Safe Bitwarden Vault Sync: Removed permanent duplicate deletion (--permanent) during remote pulls, ensuring your Bitwarden cloud vault is never modified destructively.

🔐 Master Password Enhancements

• Configurable Auto-Lock Timeout: Added an optional inactivity timer that clears credentials from memory and locks the vault after 5, 10, 15, 30, or 60 minutes (disabled by default).
• Instant Manual Lock: Added a dedicated "Lock Vault Now" button in the Master Password menu.
• Improved Navigation: Added "Back" buttons to both the initial Master Password setup screen and the vault unlock modal.

🧪 Architecture, DevOps & Code Quality

• Automated Unit Test Suite: Introduced a 23-test JUnit 5 suite covering AES-GCM encryption/decryption, PBKDF2 key derivation, Aho-Corasick linear scanning, address masking, and multi-format CSV parsing.
• Resource Deduplication (DRY): Removed duplicate localization files from fabric/ and neoforge/; translations (en_us, uk_ua, ru_ru) are now centrally maintained in common/.
• CI/CD & Portability: Modernized GitHub Actions workflow to v4 actions running Temurin JDK 21 and added automatic local JDK detection fallback in gradlew.

🛡️ What's New in v2.1.0

🔒 Cryptographic Security & Memory Sanitation

• char[] Password In-Memory Representation: Replaced immutable String objects with character arrays across memory storage, reducing the risk of plaintext credentials lingering in JVM memory dumps.
• Proactive Memory Zeroing: Sensitive password arrays are explicitly zeroed out (Arrays.fill(..., '\0')) immediately after clipboard copies, command dispatch, or vault writes.
• Reflection-Safe Public Storage: PasswordManager.getAllData() now returns sanitized, unmodifiable copies with empty passwords (new char[0]), preventing unauthorized mods or reflection scanners from reading stored credentials.
• Direct Aho-Corasick Population: The chat leak detection trie is constructed character-by-character directly from secure buffers.

🔐 Optional Master Password / PIN Lock

• Envelope Encryption (PBKDF2 + AES-GCM): Optional startup vault protection using PBKDF2WithHmacSHA256 (100,000 iterations) to encrypt the local vault key (sypass.key.enc).
• In-Game Lock Screen: When enabled, the vault remains locked and unloaded on game launch until you enter your Master Password or PIN in the GUI.
• Fail-Safe & Bitwarden Recovery: Automatically creates backups prior to enabling lock mode, and provides an Emergency Reset button that re-syncs all passwords if Bitwarden is connected.

⚡ Enhanced Server Compatibility & Custom Prompts

• Configurable Registration Templates: Support for custom server registration commands (e.g., /register %password% %password%, /reg %password%, or custom auth commands).
• Custom Smart Auto-Login Patterns: Add custom regex patterns in Settings to support servers with non-standard chat prompts (such as [Auth] prefixes or custom minigame messages).

📥 Universal CSV Importer

• Cross-Manager Support: Automatically detects column headers and formats for Bitwarden CSV, KeePass (1.x & 2.x) CSV, 1Password CSV, and generic browser exports.

🌐 Localization & Resource Cleanup

• Audited Translation Bundles: Purged 55 obsolete and unused localization keys; added 25 new translation keys across English (en_us), Ukrainian (uk_ua), and Russian (ru_ru) for 100% feature coverage (220 active keys).