Main app
- No backdrop-filter over the live map, animated sky, or sticky headings (it re-blurs every
frame; on iPhone that is a classic stutter/lock-up); top/bottom bars keep a light 8px blur
- Sky effect only draws while the hero is on screen and the Now tab is active, ~30fps cap,
fewer particles on phones; fixed a stale animation-frame id that could stop restarts
Dashboard
- Charts are built only when the Charts tab is opened (was ~11 charts on every page load),
and the 2-minute refresh no longer rebuilds them in the background
- On phones: max 360 points per chart (was 720), no entry animation, device pixel ratio capped at 2
- Lighter header blur, none on small buttons/cards
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
- Resolves ZIP (default 24550) to the nearest NWS observation station; logs every observation
(normalised imperial values + raw METAR), back-fills ~7 days, snapshots the hourly forecast
every 3h, and logs alerts for that point
- Chart overlay (temp, humidity/dew point, wind, pressure) with an NWS toggle in the History bar
- 'Official NWS observation' card on the Now tab comparing against your station
- Settings: change the reference ZIP and see logging status
- Exact-unit conversions for NWS values (verified against known conversions)
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
- overscroll-behavior moved from <body> to <html>: with html+body both overflow-x:hidden,
body is a scroll container and the rule blocked wheel scrolling from reaching the page
- sunTimes returned the neighbouring day's sunrise/sunset (julian-day rounding), so midday
looked like night; align results to the requested local day
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
- data/users.json store; existing single account migrates to first admin
- Roles: admin (settings, import, users) and viewer (read-only, own password)
- Live role/disabled lookup; per-user session epoch so password changes,
resets and disabling sign that user out everywhere
- Login brute-force lockout (5 fails -> 5 min), constant-time unknown-user check
- /api/users CRUD with last-admin and self-lockout safeguards
- Account page (own password + admin user management); role-aware header
- Min password length 8; recovery token resets the primary admin and clears lockouts
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
Nate EmmertandClaude Sonnet 5.5