4 Commits

Include renames

Author	SHA1	Message	Date
mrleo1nidandClaude Opus 5.5	fda6ed48ab	feat: Android download page, analysis retry and a collapsible search ... - /android is a public page with the latest APK, the server address to copy and three install steps; linked from the sign-in screen and the profile menu - failed audio analysis can be retried from the library page, which also shows the most common error; the analyzer no longer burns attempts on files that are missing because the disk is not mounted - the top bar search folds into a round button and slides open on click, "/" or Ctrl+K Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-20 23:55:51 +03:00
mrleo1nidandClaude Opus 5.5	c05e523cbe	feat(api): streaming, transcoding, events, history and likes (M3) ... - tracks carry a stream_url signed for the user for 12 h and the user's reaction; /stream checks the signature, expiry and that the user is not blocked, then hands the file to nginx by X-Accel-Redirect (or serves it with Range support when X_ACCEL=false) - original by default; formats browsers can't play and explicit high/medium/low go through Opus transcoding, never upwards: a lossy source under the target bitrate stays original; transcodes are cached per file and size, deduplicated in flight, limited by TRANSCODE_CONCURRENCY and trimmed hourly by LRU to the size limit - /events takes up to 500 events with client UUIDs, drops repeats and events older than 30 days, counts plays (≥ half or 4 min, or finished), early skips and history entries (≥ 30 s) - history with clearing, likes and dislikes with cursors and totals, track reactions, playback state with last-write-wins, tracks batch Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-20 07:25:15 +03:00
mrleo1nidandClaude Opus 5.5	8b76aa3964	feat: album covers with palettes and signed links (M2) ... - covers are taken from the embedded picture of the first track or a cover/folder/front image in the album folder, converted by ffmpeg to WebP 64/300/1200 and named by content hash, so albums sharing a cover share the files; a full scan looks again for albums without one - a 3-colour palette (dominant, second, most saturated accent) from a deterministic k-means feeds placeholders, page tints and the wave - /covers/{id} is public but HMAC-signed and immutable; nginx serves the file via X-Accel-Redirect, X_ACCEL=false serves it from api - the web client picks the size by display size and pixel density - install.sh and update.sh generate STREAM_SIGNING_KEY Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-20 07:06:15 +03:00
mrleo1nidandClaude Opus 5.5	ed4a492dba	feat(api): sign-in, refresh rotation and bootstrap admin (M1) ... - users, refresh_tokens and audit_log schema (migration 00002) - argon2id passwords with rehash on login, password policy, lockout with exponential back-off and a per-IP rate limit in Redis - Ed25519 JWT access tokens with kid-based key rotation; rotating refresh tokens with reuse detection (cookie for web, body for Android) - bootstrap admin on first start; must_change_credentials and must_change_password gate every other endpoint - /auth/login, /auth/refresh, /auth/logout(-all), /me, /me/password, /me/bootstrap-credentials, /me/sessions; server-info reports bootstrap_required - role policy from docs/auth-and-roles.md with table tests - problem+json errors with field errors; ru/en translations of the codes - install.sh and update.sh generate JWT_PRIVATE_KEY Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-20 06:12:25 +03:00