MechaCat02 61669aac3f fix: don't mark private-mode blobs as publicly cacheable ...

The immutable Cache-Control added for the reader preload work was
`public` unconditionally. Under PRIVATE_MODE, /files is auth-gated, so a
shared cache/CDN would store the blob and serve it to unauthenticated
clients, defeating the gate. Emit `private, ...` when private_mode is on,
`public, ...` otherwise.

Found in the security audit; regression from 0.124.3. Bump to 0.124.9.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-07-07 21:39:20 +02:00

..

common

fix(upload): stream chapter pages to storage instead of buffering the whole chapter

2026-07-03 21:33:47 +02:00

fixtures/target

bugfix: chapter source key uses chapter id, not /pg-1/ (0.23.1)

2026-05-22 23:15:36 +02:00

admin_metrics_series.rs

feat(admin): time-series trend charts on the metrics tabs (0.87.0)

2026-06-19 11:48:56 +02:00

analysis_ocr.rs

fix: enforce the analysis image cap while reading, not after

2026-07-07 21:10:29 +02:00

analysis_readiness.rs

feat(analysis): gate page leasing on a vision readiness probe

2026-06-14 14:57:48 +02:00

analysis_worker.rs

test(analysis): assert Cancelled event is published; correct cron-test rationale (0.87.21)

2026-06-23 20:46:08 +02:00

api_admin_analysis.rs

fix(admin): make force-reanalyze audit transactional; document storage exception

2026-07-01 07:16:08 +02:00

api_admin_audit.rs

feat(admin): audit-log viewer

2026-06-19 11:26:09 +02:00

api_admin_crawler.rs

fix(admin-security): close the bearer-cookie ride; require session for admin gate (0.87.10)

2026-06-22 22:28:16 +02:00

api_admin_health.rs

fix(admin-security): SSRF defence + CSRF fail-closed + analysis .no_proxy() (0.87.2)

2026-06-22 21:04:50 +02:00

api_admin_mangas.rs

fix(admin): security-audit findings — paginate chapters, lock down unchecked helper (0.41.2)

2026-05-30 22:23:55 +02:00

api_admin_overview.rs

feat(admin): overview dashboard sections + system temperature/load sensors (0.85.0) (#11)

2026-06-16 18:46:28 +00:00

api_admin_resync.rs

feat: cover retry backfill + admin force-resync for manga & chapter (0.50.0)

2026-06-01 22:00:09 +02:00

api_admin_role.rs

fix(tests): update api_admin_role AppState to post-0.80 fields

2026-06-14 16:01:09 +02:00

api_admin_settings.rs

fix(admin-security): SSRF defence + CSRF fail-closed + analysis .no_proxy() (0.87.2)

2026-06-22 21:04:50 +02:00

api_admin_storage.rs

refactor(clippy): fix the never-loop error and clear all lint warnings

2026-07-02 20:45:37 +02:00

api_admin_system.rs

feat(admin): overview dashboard sections + system temperature/load sensors (0.85.0) (#11)

2026-06-16 18:46:28 +00:00

api_admin_users.rs

refactor(clippy): fix the never-loop error and clear all lint warnings

2026-07-02 20:45:37 +02:00

api_auth.rs

feat(auth): support optional expiry for bot API tokens

2026-07-01 07:22:57 +02:00

api_authors.rs

feat: author pages with /authors/:id route (0.16.0)

2026-05-17 14:39:11 +02:00

api_bookmarks.rs

feat: bookmark create enqueues SyncChapterContent jobs (0.29.0)

2026-05-25 20:59:14 +02:00

api_chapters.rs

test(chapters): lock open-contribution upload contract + document intent

2026-07-01 07:19:04 +02:00

api_collection_pages.rs

feat(search): tag-based page search surface + per-page tags & collections

2026-06-13 15:51:38 +02:00

api_collections.rs

feat: manga collections (0.17.0)

2026-05-17 17:43:06 +02:00

api_genres.rs

feat: manga metadata with status, authors, genres, tags, and search filters (0.15.0)

2026-05-17 14:32:03 +02:00

api_history.rs

fix(home): keep finished series off the Continue-reading shelf

2026-07-04 21:52:58 +02:00

api_manga_warnings.rs

feat(mangas): content-warning filter on search + deduped banner on detail

2026-06-13 19:03:26 +02:00

api_mangas_cover.rs

bugfix: security & correctness bundle (0.34.1)

2026-05-28 20:24:51 +02:00

api_mangas_metadata.rs

test(authz): bearer-authed admin cannot edit/cover NULL-uploader mangas (0.87.19)

2026-06-23 20:36:50 +02:00

api_mangas.rs

fix: compute the /mangas total only on the first page

2026-07-07 21:14:15 +02:00

api_page_analysis.rs

feat(analysis): position-aware OCR seam dedup for sliced pages

2026-06-13 23:17:55 +02:00

api_page_search.rs

feat(analysis): position-aware OCR seam dedup for sliced pages

2026-06-13 23:17:55 +02:00

api_page_tags.rs

feat(analysis): add ocrs OCR backend and OCR-driven page text search

2026-06-30 19:52:43 +02:00

api_preferences.rs

feat: continuous reader mode with persisted preference

2026-05-17 13:15:03 +02:00

api_private_mode.rs

fix: don't mark private-mode blobs as publicly cacheable

2026-07-07 21:39:20 +02:00

api_reactions.rs

feat(reactions): per-user like/dislike on mangas

2026-07-05 16:54:11 +02:00

api_recommendations.rs

feat(recommendations): content-based "Recommended for you" endpoint

2026-07-05 17:42:05 +02:00

api_tags.rs

refactor(clippy): fix the never-loop error and clear all lint warnings

2026-07-02 20:45:37 +02:00

api_uploads.rs

fix: cache immutable blobs served from /files

2026-07-07 20:30:03 +02:00

crawl_metrics.rs

feat(admin): observability — job history, live now-analyzing, durations & metrics (0.84.0) (#6)

2026-06-16 12:21:13 +00:00

crawler_browser_smoke.rs

fix(tests): add user_agent field to crawler_browser_smoke LaunchOptions

2026-06-14 21:49:22 +02:00

crawler_daemon.rs

test(analysis): assert Cancelled event is published; correct cron-test rationale (0.87.21)

2026-06-23 20:46:08 +02:00

crawler_dead_jobs.rs

feat(crawler): reconcile pass to enqueue mangas missing from the DB (0.85.0)

2026-06-19 11:15:11 +02:00

crawler_jobs.rs

fix(crawler): reap dead jobs alongside done ones

2026-07-03 21:16:56 +02:00

crawler_reconcile.rs

feat(crawler): reconcile pass to enqueue mangas missing from the DB (0.85.0)

2026-06-19 11:15:11 +02:00

crawler_recovery_flag.rs

feat(crawler): single-mode walker gated by recovery flag (0.36.0)

2026-05-29 23:49:28 +02:00

crawler_sync.rs

test(crawler): deflake sync serialization concurrency test (#7)

2026-06-16 13:38:15 +00:00

health.rs

feat: nest API under /api/v1, structured error envelope, paged lists

2026-05-16 21:41:20 +02:00

repo_chapter.rs

feat(admin): crawler observability dashboard + reliability hardening (0.55.0)

2026-06-06 18:49:56 +02:00