fix(database): respect Workers PBKDF2 iteration limit

scripts/build.mjs

@@ -8,7 +8,7 @@ const meta = new URL("../dist/.openai/", import.meta.url);
 await rm(dist, { recursive: true, force: true });
 await Promise.all([mkdir(server, { recursive: true }), mkdir(meta, { recursive: true })]);
 const [rawIndexHtml, addonsJs, bootGuardJs, i18nJs, tasksJs, calendarJs, i18nRenderersJs, desktopPersonalizationJs, desktopWidgetsJs, browserAppJs, dataActionsJs, terminalAppJs, dbAdminJs, manifest, serviceWorker, icon, localeEn, localeZh] = await Promise.all([text("index.html"), text("addons.js"), text("boot-guard.js"), text("i18n.js"), text("tasks.js"), text("calendar.js"), text("i18n-renderers.js"), text("desktop-personalization.js"), text("desktop-widgets.js"), text("browser-app.js"), text("data-actions.js"), text("terminal-app.js"), text("db-admin.js"), text("manifest.webmanifest"), text("service-worker.js"), text("life-os-icon.svg"), readFile(new URL("../public/locales/en.json", import.meta.url), "utf8"), readFile(new URL("../public/locales/zh-CN.json", import.meta.url), "utf8")]);
-const release = "1.14.1";
+const release = "1.14.2";
 const localeEnJs = `window.LifeOSLocales=window.LifeOSLocales||{};window.LifeOSLocales.en=${localeEn};`;
 const localeZhJs = `window.LifeOSLocales=window.LifeOSLocales||{};window.LifeOSLocales['zh-CN']=${localeZh};`;
 let indexHtml = rawIndexHtml.replace('src="addons.js"', `src="addons.js?v=${release}"`).replace('src="tasks.js"', `src="tasks.js?v=${release}"`).replace('src="calendar.js"', `src="calendar.js?v=${release}"`);

scripts/test-cloud.mjs

@@ -111,6 +111,8 @@ const setup = await call("/api/db-admin/setup", "POST", {
   username: "lifeos-admin", password: "local test password with 28 chars", acknowledged: true
 });
 assert.equal(setup.status, 200);
+assert.equal(sqlite.prepare("SELECT iterations FROM lifeos_admin_credentials WHERE user_id = ?").get("alice").iterations, 100_000,
+  "password hashing stays within the deployed Workers PBKDF2 limit");
 assert.equal((await call("/api/db-admin/config")).body.configured, true);
 assert.equal((await call("/api/db-admin/setup", "POST", { username: "lifeos-admin", password: "replacement password 123", acknowledged: true })).status, 409);
 assert.equal((await call("/api/db-admin/tables/tasks/rows", "GET", undefined, { ...headers, "x-lifeos-admin-session": setup.body.token })).status, 200);

scripts/validate.mjs

@@ -186,7 +186,7 @@ assert.ok(command('date').message.length > 8);
 assert.ok(command('time').message.includes(':'));
 assert.ok(command('datetime').message.length > 12);
 assert.equal(command('uptime').message, 'terminal.uptime');
-assert.equal(command('version').message, 'Life OS v1.14.1');
+assert.equal(command('version').message, 'Life OS v1.14.2');
 assert.equal(command('status').message, 'terminal.status');
 assert.match(command('apps').message, /calendar/);
 assert.equal(command('echo "hello Life OS"').message, 'hello Life OS');