QuickandClaude Opus 5 8e0d310a03 fix(settings): reject raw invalid UTF-8, not just escaped surrogates ...

The previous commit hoisted the lone-surrogate check to cover every value
type, but that only closes the escaped path. A raw 0xff byte inside a
quoted string — what an HTTP body carries when a client encodes text in the
wrong charset — is not an escape, so the surrogate scan never sees it, while
encoding/json still substitutes U+FFFD and reports success. NormalizeValue
then stores the original bytes, which SQLite's json_valid accepts and
Postgres jsonb refuses: the same backend divergence, reached the other way.

Found by the Codex review bot on the previous commit's own diff.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

2026-07-27 18:28:29 +00:00

..

access

feat(settings): add canonical typed storage for the settings contract

2026-07-27 01:22:23 +00:00

activitylog

feat(playback): improve web subtitles and track selection (#362)

2026-07-10 08:21:26 -04:00

adminjob

fix(metadata): prevent stale cross-provider IDs (#480)

2026-07-26 11:19:33 -04:00

ai

feat(observability): OpenTelemetry logs+traces with secret redaction and slog standardization (#290)

2026-07-09 08:53:52 -04:00

api

fix(settings): clear the remaining review findings

2026-07-27 00:40:04 +00:00

artworkkey

fix(metadata): publish artwork revisions atomically (#399)

2026-07-16 17:33:21 -04:00

audiobooks

fix(settings): clear the remaining review findings

2026-07-27 00:40:04 +00:00

auth

test(auth): stop TestJWT_TamperedToken passing a valid signature

2026-07-27 18:12:47 +00:00

autoscan

fix(autoscan): preserve trailing separator through path rewrites

2026-07-23 11:40:38 -04:00

branding

feat(activity): refine play-method tags and add a Jellyfin-client pill (#387)

2026-07-18 17:12:36 -04:00

buildinfo

Initial Silo migration

2026-05-22 23:26:56 -04:00

cache

feat(policy): access groups + embedded OPA policy engine with decision audit log (#282)

2026-07-05 17:38:19 -04:00

catalog

feat(metadata): improve match accuracy and localized titles (#461)

2026-07-24 12:02:52 -04:00

catalogseed

test(catalogseed): cover unknown color range

2026-07-21 13:03:53 -04:00

chapterthumbs

feat(observability): OpenTelemetry logs+traces with secret redaction and slog standardization (#290)

2026-07-09 08:53:52 -04:00

clientip

feat(clientip): expose trusted proxy CIDRs in the Admin UI and via SILO_TRUSTED_PROXIES (#310)

2026-07-05 16:44:36 -04:00

collage

Initial Silo migration

2026-05-22 23:26:56 -04:00

collections/templates

fix(collections): repair broken builtin collection templates (#331)

2026-07-07 10:46:50 -04:00

collectionutil

fix(collections): repair broken builtin collection templates (#331)

2026-07-07 10:46:50 -04:00

compat/zishang520-webtransport-go

build(deps): bump quic-go to 0.60.0 via webtransport-go compat shim (#121)

2026-06-09 20:08:30 -04:00

config

fix(admin): address settings contract review findings

2026-07-23 15:14:52 -04:00

contentid

fix(metadata): prevent stale cross-provider IDs (#480)

2026-07-26 11:19:33 -04:00

database

Increase default migration timeout

2026-06-15 16:20:50 -04:00

diagnostics

fix(diagnostics): address PR #450 review findings

2026-07-21 14:53:47 -04:00

discord

feat(notifications): Discord bot DM channel with account linking

2026-06-11 19:51:03 -04:00

downloads

feat(observability): OpenTelemetry logs+traces with secret redaction and slog standardization (#290)

2026-07-09 08:53:52 -04:00

ebookconvert

Server-side Kindle→EPUB conversion (mobi/azw/azw3) for in-app reading (#171)

2026-06-17 13:09:55 -04:00

ebooks

fix(ebooks): keep legacy-lane rows in their lane until terminal outcomes

2026-07-23 11:10:31 -04:00

embeddingvectors

feat(search): model-filtered embed-eligible coverage counts

2026-06-25 22:43:23 -04:00

events

fix(scanner): stop hiding media when a library root is offline (#472)

2026-07-25 14:47:12 -04:00

historyimport

fix(history-import): import Emby favorites (#378)

2026-07-16 14:34:35 -04:00

httpstream

feat(playback): formalize resumable direct streams and stall observability (#464)

2026-07-24 14:22:12 -04:00

idgen

Initial Silo migration

2026-05-22 23:26:56 -04:00

imagecache

feat(metadata): local NFO metadata and sidecar artwork (builtin chain provider) (#390)

2026-07-16 17:55:36 -04:00

imageutil

Reduce metadata image cache R2 churn (#249)

2026-07-01 17:37:06 -04:00

intromarkers

feat(observability): OpenTelemetry logs+traces with secret redaction and slog standardization (#290)

2026-07-09 08:53:52 -04:00

jellycompat

feat(settings): add canonical typed storage for the settings contract

2026-07-27 01:22:23 +00:00

lang

Initial Silo migration

2026-05-22 23:26:56 -04:00

libraryingest

fix(ebooks): isolate scans and bound queue claims

2026-07-22 13:43:57 +02:00

librarykind

feat(notifications): announce new audiobooks and ebooks on server channels (#260)

2026-07-02 11:42:28 -04:00

literaryworks

perf(literaryworks): cut Postgres load on ebook↔audiobook auto-linking (#253)

2026-07-01 23:21:25 -04:00

logfilter

fix(admin): enforce settings contracts end to end

2026-07-23 11:24:55 -04:00

logredact

feat(observability): OpenTelemetry logs+traces with secret redaction and slog standardization (#290)

2026-07-09 08:53:52 -04:00

logstream

Initial Silo migration

2026-05-22 23:26:56 -04:00

mail

feat(notifications): branded HTML email templates

2026-06-11 21:34:19 -04:00

manga

fix(metadata): publish artwork revisions atomically (#399)

2026-07-16 17:33:21 -04:00

markers

feat(observability): OpenTelemetry logs+traces with secret redaction and slog standardization (#290)

2026-07-09 08:53:52 -04:00

mdblist

fix(admin): enforce settings contracts end to end

2026-07-23 11:24:55 -04:00

metadata

fix(metadata): prevent stale cross-provider IDs (#480)

2026-07-26 11:19:33 -04:00

models

fix(settings): make the settings contract enforceable and fix the appearance cache

2026-07-26 15:24:33 +00:00

naming

feat(metadata): improve match accuracy and localized titles (#461)

2026-07-24 12:02:52 -04:00

nodeconfig

feat(observability): OpenTelemetry logs+traces with secret redaction and slog standardization (#290)

2026-07-09 08:53:52 -04:00

nodepool

feat(playback): plan v3 routes from pooled node capabilities (#408)

2026-07-14 12:13:16 -04:00

noderecipe

feat(observability): OpenTelemetry logs+traces with secret redaction and slog standardization (#290)

2026-07-09 08:53:52 -04:00

nodesessions

feat(observability): OpenTelemetry logs+traces with secret redaction and slog standardization (#290)

2026-07-09 08:53:52 -04:00

notifications

fix(admin): enforce settings contracts end to end

2026-07-23 11:24:55 -04:00

opslog

feat(observability): OpenTelemetry logs+traces with secret redaction and slog standardization (#290)

2026-07-09 08:53:52 -04:00

overlays

fix(overlays): derive dynamic-range badges from Dolby Vision metadata (#365)

2026-07-16 10:53:30 -04:00

partman

fix(partman): self-heal default-partition conflicts instead of crash-looping (#139)

2026-06-12 15:04:31 -04:00

pathscope

fix(scanner): never purge files under unreachable library roots (#372)

2026-07-16 13:58:44 -04:00

playback

fix(jellycompat): scan the parent directory when a sidecar changes

2026-07-27 00:23:02 +00:00

pluginhost

feat(plugins): add image resolver registry

2026-06-25 14:47:48 -04:00

plugins

feat(metadata): add resilient match queue diagnostics (#463)

2026-07-24 12:18:49 -04:00

policy

feat(playback): add per-user transcoding controls (#375)

2026-07-10 22:30:04 -04:00

providerid

feat(metadata): improve match accuracy and localized titles (#461)

2026-07-24 12:02:52 -04:00

proxy

feat(playback): add protocol v3 planning and recovery (#398)

2026-07-14 11:51:27 -04:00

ratelimit

fix(admin): enforce settings contracts end to end

2026-07-23 11:24:55 -04:00

recommendations

feat(observability): OpenTelemetry logs+traces with secret redaction and slog standardization (#290)

2026-07-09 08:53:52 -04:00

requests

fix(requests): retire stalled targets when presence confirms the media (#470)

2026-07-25 02:54:30 -04:00

rootcheck

fix(scanner): never purge files under unreachable library roots (#372)

2026-07-16 13:58:44 -04:00

s3client

fix(s3client): upload unsized streams via multipart manager for R2 compatibility

2026-07-21 08:16:53 -04:00

scanner

fix(playback): trust the server's media runtime end to end (#482)

2026-07-26 00:12:29 -04:00

scanqueue

fix(scanner): stop hiding media when a library root is offline (#472)

2026-07-25 14:47:12 -04:00

scantrigger

ci: gate Go lint on the lines a branch changes

2026-07-27 00:32:15 +00:00

secret

feat(security): encrypt server-owned credentials at rest (#45) (#95)

2026-06-08 15:25:48 -04:00

sections

feat(observability): OpenTelemetry logs+traces with secret redaction and slog standardization (#290)

2026-07-09 08:53:52 -04:00

server

fix(server): return 404 for missing content-hashed assets

2026-07-22 13:43:57 +02:00

settingscontract

fix(settings): reject raw invalid UTF-8, not just escaped surrogates

2026-07-27 18:28:29 +00:00

streamtoken

fix(playback): preserve remux copy on seek (#422)

2026-07-20 13:25:46 -04:00

subtitles

fix(admin): enforce settings contracts end to end

2026-07-23 11:24:55 -04:00

taskmanager

feat(metadata): improve match accuracy and localized titles (#461)

2026-07-24 12:02:52 -04:00

telemetry

feat(observability): OpenTelemetry logs+traces with secret redaction and slog standardization (#290)

2026-07-09 08:53:52 -04:00

titleutil

Initial Silo migration

2026-05-22 23:26:56 -04:00

transcodenode

fix(playback): preserve remux copy on seek (#422)

2026-07-20 13:25:46 -04:00

uploads

feat(plugins): chunked plugin uploads with progress

2026-06-06 00:05:04 -04:00

usercollections

feat(observability): OpenTelemetry logs+traces with secret redaction and slog standardization (#290)

2026-07-09 08:53:52 -04:00

userdb

test(settings): pin the settings-value schema constraints in both backends

2026-07-27 15:15:01 +00:00

userstore

test(settings): pin the settings-value schema constraints in both backends

2026-07-27 15:15:01 +00:00

watchlist

feat(observability): OpenTelemetry logs+traces with secret redaction and slog standardization (#290)

2026-07-09 08:53:52 -04:00

watchstate

fix(watchsync): correct Trakt TV episode sync payload (#254)

2026-07-01 17:36:47 -04:00

watchsync

fix(jellycompat): confirm authoritative watch stops

2026-07-23 09:15:19 -04:00

watchtogether

fix(watchtogether): harden realtime sync, room lifecycle, and lobby UX (#273)

2026-07-02 11:34:02 -04:00

webhooksync

feat(observability): OpenTelemetry logs+traces with secret redaction and slog standardization (#290)

2026-07-09 08:53:52 -04:00

worker

feat(observability): OpenTelemetry logs+traces with secret redaction and slog standardization (#290)

2026-07-09 08:53:52 -04:00