Capture the post-v1.9 idea backlog

[NeverEndingCode]

Fifteen ideas from 2026-08-08, captured so they are not lost. Docs only — no code changes.

Deliberately a backlog rather than a plan: the process that works here is brainstorming → spec → plan → implementation → whole-branch review, and jumping to a plan is how ideas acquire accidental requirements.

Three things came out of checking rather than assuming:

• The leaderboard item is a bug, and I found the line. server/leaderboardService.js filters every board with .filter((r) => r.value > 0), so a player whose legacyCores reset to 0 in a Singularity vanishes from the board instead of showing 0. The filter isn't gratuitous — it keeps never-played accounts off every board — so the fix has to distinguish "reset" from "never started". lifetimeFlopsAllTime survives every prestige and can do that.
• Multi-provider linking needs no migration. identities is keyed on (provider, provider_id) with a user_id FK and an index on it — two rows pointing at one users.id is already the intended shape, which is why v1.7 split identities out of users. It's a flow problem, not a schema one.
• Timed hazards already have a precedent. scheduleAnomaly picks the moment ahead and stores it, letting lazy evaluation notice it passed. Anything rolled live can't reconcile against offline progress — and offline progress is a headline feature.

Two ideas are flagged as needing a different shape, both for safety rather than taste:

• Event custom CSS would hand event_coordinator — deliberately the lowest role — a data-exfiltration primitive (attribute selectors + url()) against every player including the owner. A named effect registry gives the same snow and falling money without shipping a stylesheet.
• Joining accounts on matching email is the account-takeover vector already documented in docs/authentication-methods.md. Linking should be an authenticated act proven by a live session, never a string match.

Nothing here is approved or scheduled. Edit freely — it's a capture doc.

🤖 Generated with Claude Code