v1.1.22 — Inventory Weight Accuracy, DB Performance, TOTP Login & Security Hardening

A maintenance-and-accuracy release. The headline work is a top-to-bottom pass on AMS/spool weight tracking, a sweep of composite database indexes that removes temp-b-tree sorts from the hottest queries, TOTP two-factor at the login screen, and a security/dependency hardening pass that clears all open npm audit advisories. Also fixes the per-printer settings that wouldn't save (#12).

Filament inventory & AMS accuracy

• AMS 2 Pro / H2D load-cell weight is read directly instead of estimated from percent
• Recalibrate remaining weight from print history, from live AMS signals, or both combined — with new UI
• Sensor-floor guard: extrusion tracking is trusted when the load cell drops below ~20 g (it loses resolution near empty)
• used_weight_g capped at the initial spool weight; existing over-counted rows repaired (migration v142)
• Non-Bambu spools (Elegoo, Polymaker, generic) auto-detected; auto-created profiles named from the tray hex

Printers & connectivity

• Per-printer settings now persist (#12) — LAN Developer Mode, Camera Resolution, and every other type-specific field round-trip through a new config_json column and survive a restart. Camera Resolution actually drives the stream (1080p / 720p / 480p)
• Per-brand credentials are masked in the API response and restored from storage on unchanged edits
• ffmpeg exit code 8 maps to an actionable "enable LAN Live View" hint instead of a generic camera error

Authentication & security

• TOTP two-factor prompt wired into the login UI, with two silent-failure bugs closed
• Second-pass NIST/CVE audit fixes and hardened security headers
• Dependency security upgrades clear all open npm audit advisories
• .env-based secret handling and HTTP response compression

Performance

• Composite database indexes remove temp-b-tree sorts from the hottest queries