fix: outstanding-stake ledger, owner backpressure, editor state preservation

1 files changed, 14 insertions, 0 deletions

diff --git a/internal/game/core_login_account.go b/internal/game/core_login_account.go
index a846f4d..fbd9e3a 100644
--- a/internal/game/core_login_account.go
+++ b/internal/game/core_login_account.go
@@ -2,6 +2,7 @@ package game
 
 import (
 	"fmt"
+	"log"
 	"strings"
 
 	"thehouseoficarus/internal/color"
@@ -62,6 +63,19 @@ func (g *Game) handlePassword(sess *net.Session, input string) {
 		sess.Write("Account name: ")
 		return
 	}
+	// Transparent upgrade: legacy single-pass SHA-256 hashes rehash to
+	// Argon2id after a successful verification. A failed save keeps the
+	// legacy hash and retries on the next login.
+	if player.NeedsRehash(acc.PasswordHash) {
+		if hash, hashErr := player.HashPassword(input); hashErr == nil {
+			acc.PasswordHash = hash
+			if err := g.AccountStore.SaveAccount(acc); err != nil {
+				log.Printf("login: password rehash save for %s: %v", acc.Name, err)
+			}
+		} else {
+			log.Printf("login: password rehash for %s: %v", acc.Name, hashErr)
+		}
+	}
 	sess.Conn.SetEcho(true)
 	sess.Account = &player.Account{
 		Name:         acc.Name,