Harden login and make personal-best records self-correct

Login: add an in-memory per-IP throttle (8 failed attempts -> 15-min lockout, 429 + Retry-After), raise the change-password minimum to 8 with a 72-char cap, and apply the same minimum on the StartOS Set Login Password action.

Records: add a record_floor column for manually-pinned bests plus recomputeRecord(); the live record is now the direction-aware best of the best logged value and the floor, recomputed on entry edit/delete so it can drop again (never below the floor). Settings exposes the floor as an override and shows the live best as a placeholder.

Bump package 0.1.6:0 -> 0.1.7:0 and the service-worker cache to v7.

This commit is contained in:

Keysat

2026-06-15 13:22:41 -05:00

parent bbddebc3d6

commit fe66575ffe

13 changed files with 125 additions and 28 deletions

									
										public/sw.js
									
		+1
		-1
	
												View File
												
				@@ -1,4 +1,4 @@

				const CACHE = 'premier-gunner-v6';

				const CACHE = 'premier-gunner-v7';

				const SHELL = [

				  '/', '/index.html', '/login.html',

				  '/css/styles.css',