Performance: RCON pooling, route caching, parallel status probe

Server:
- lib/cache.ts: tiny TTL memo for hot paths.
- lib/rcon.ts: pooled connection with 30s idle close and one-shot retry;
  was opening a fresh TCP per RCON call.
- /api/status: race protocol-ping + RCON with Promise.any (was sequential
  with 5s timeouts) and memo 3s; adds Cache-Control.
- /api/players: memo 10s, invalidated on mutations.
- /api/mods: getModDetails memo 10s (invalidated on install/remove) —
  eliminates per-request readdirSync/statSync/AdmZip parse.
- /api/analytics: reverse-scan JSONL to window cutoff (O(window) vs O(file))
  and memo 30s.
- /api/logs: memo 2s to throttle journalctl spawns during Live mode.

Client:
- StatusCard + ServerControls: staleTime 5s, both poll every 10s, dedup
  via shared query key.
- Analytics: staleTime 30s; memoize sparkline SVG paths.
- Modrinth search icons + mc-heads avatars: width/height + loading=lazy +
  decoding=async.
- next.config.ts: images.remotePatterns for future next/image migration,
  explicit compress=true.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

app/api/players/route.ts

@@ -2,6 +2,7 @@ import { NextRequest, NextResponse } from "next/server";
 import { readFileSync } from "fs";
 import { auth } from "@/lib/auth";
 import { sendCommand } from "@/lib/rcon";
+import { memo, invalidate } from "@/lib/cache";
 
 export const dynamic = "force-dynamic";
 
@@ -28,24 +29,27 @@ export async function GET() {
     return NextResponse.json({ error: "Unauthorized" }, { status: 403 });
   }
 
-  const ops = readJson<OpsEntry>(OPS_FILE).map((e) => ({
-    name: e.name,
-    uuid: e.uuid,
-    level: e.level,
-  }));
+  const data = memo("players", 10_000, () => {
+    const ops = readJson<OpsEntry>(OPS_FILE).map((e) => ({
+      name: e.name,
+      uuid: e.uuid,
+      level: e.level,
+    }));
+    const whitelist = readJson<WhitelistEntry>(WHITELIST_FILE).map((e) => ({
+      name: e.name,
+      uuid: e.uuid,
+    }));
+    const banned = readJson<BannedEntry>(BANNED_FILE).map((e) => ({
+      name: e.name,
+      uuid: e.uuid,
+      reason: e.reason,
+    }));
+    return { ops, whitelist, banned };
+  });
 
-  const whitelist = readJson<WhitelistEntry>(WHITELIST_FILE).map((e) => ({
-    name: e.name,
-    uuid: e.uuid,
-  }));
-
-  const banned = readJson<BannedEntry>(BANNED_FILE).map((e) => ({
-    name: e.name,
-    uuid: e.uuid,
-    reason: e.reason,
-  }));
-
-  return NextResponse.json({ ops, whitelist, banned });
+  return NextResponse.json(data, {
+    headers: { "Cache-Control": "private, max-age=5" },
+  });
 }
 
 // POST — execute a player management command
@@ -87,6 +91,7 @@ export async function POST(req: NextRequest) {
 
     // Wait for server to write JSON files to disk
     await new Promise((r) => setTimeout(r, 500));
+    invalidate("players");
 
     return NextResponse.json({ ok: true, response });
   } catch (e) {