bvandeusenandClaude Opus 5.5 a8a2d20307 feat: stored credentials are sealed at rest, so a copy of the database alone reveals none of them (#6767) ...

Minstrel keeps credentials it has to read back: indexer, Prowlarr and
download-client keys and passwords, the AcoustID key, cover-art and tag
provider keys, the SMTP password, and each user's ListenBrainz token and
Subsonic password. They were stored in the clear; they are now sealed with
AES-256-GCM under a per-column HKDF key derived from the stream secret, each
value bound to its row.

- internal/secret: Seal/Open/Reveal, and Columns, the one list of sealed
  columns (a backup will leave them out). Install takes the master key at
  startup; SealStored seals any value still in the clear, so an existing
  database is brought over in place on the first boot.
- Every write seals and every read opens: acquire (one read path, getService
  / usableServices), acoustid settings, SMTP, ListenBrainz, Subsonic auth and
  password generation, cover-art and tag provider settings.
- A value that does not open (the stream secret changed) is logged and reads
  as unset, to be entered again in Settings. docs/security.md says so.
- Tests: secret unit tests (wrong owner/purpose/key, malformed, no key), a
  SealStored integration test over all eight columns plus a schema check that
  each listed column exists, and the existing tests now assert sealed storage.
  dbtest installs a test key for integration tests.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-11-02 13:23:19 -05:00

..

admin_acoustid.go

docs: api comments say what the endpoints do, not how they came to be (#6277)

2026-10-23 12:23:58 -04:00

admin_acquisition.go

docs: api comments say what the endpoints do, not how they came to be (#6277)

2026-10-23 12:23:58 -04:00

admin_cover_sources_test.go

docs: api comments say what the endpoints do, not how they came to be (#6277)

2026-10-23 12:23:58 -04:00

admin_cover_sources.go

docs: api comments say what the endpoints do, not how they came to be (#6277)

2026-10-23 12:23:58 -04:00

admin_coverage_test.go

docs: api comments say what the endpoints do, not how they came to be (#6277)

2026-10-23 12:23:58 -04:00

admin_coverage.go

docs: api comments say what the endpoints do, not how they came to be (#6277)

2026-10-23 12:23:58 -04:00

admin_coverart_research_test.go

feat(server/web/coverart): manual Re-search missing art button

2026-05-07 07:59:40 -04:00

admin_coverart_research.go

fix(server/api): preserve 500-class messages via apierror.InternalMsg

2026-05-07 20:10:18 -04:00

admin_covers_test.go

feat(coverart): #388 remove global cover-art backfill cap

2026-05-16 18:41:21 -04:00

admin_covers.go

docs: api comments say what the endpoints do, not how they came to be (#6277)

2026-10-23 12:23:58 -04:00

admin_duplicates_test.go

docs: api comments say what the endpoints do, not how they came to be (#6277)

2026-10-23 12:23:58 -04:00

admin_duplicates.go

docs: api comments say what the endpoints do, not how they came to be (#6277)

2026-10-23 12:23:58 -04:00

admin_fingerprint_settings_test.go

feat: duplicates resolve themselves where Lidarr says it is safe (M498)

2026-10-08 21:49:37 -04:00

admin_fingerprint_settings.go

docs: api comments say what the endpoints do, not how they came to be (#6277)

2026-10-23 12:23:58 -04:00

admin_import.go

docs: api comments say what the endpoints do, not how they came to be (#6277)

2026-10-23 12:23:58 -04:00

admin_invites_test.go

feat(server/m7-user-mgmt): admin endpoints (invites, users, promote/demote)

2026-05-07 12:01:16 -04:00

admin_invites.go

fix(server): repair go vet failures from A1+A2 cleanup (orphan imports + needle deref)

2026-05-08 10:46:43 -04:00

admin_library_folders.go

docs: api comments say what the endpoints do, not how they came to be (#6277)

2026-10-23 12:23:58 -04:00

admin_library_missing_test.go

feat(api): admin surface for files the library has lost — #2527

2026-08-16 11:48:45 -04:00

admin_library_missing_wants_test.go

docs: api comments say what the endpoints do, not how they came to be (#6277)

2026-10-23 12:23:58 -04:00

admin_library_missing.go

docs: api comments say what the endpoints do, not how they came to be (#6277)

2026-10-23 12:23:58 -04:00

admin_loudness.go

docs: api comments say what the endpoints do, not how they came to be (#6277)

2026-10-23 12:23:58 -04:00

admin_network.go

docs: api comments say what the endpoints do, not how they came to be (#6277)

2026-10-23 12:23:58 -04:00

admin_notification_email_test.go

feat(notifications): grouped email digest, new music as a daily summary (#5346)

2026-10-08 07:48:22 -04:00

admin_notification_email.go

docs: api comments say what the endpoints do, not how they came to be (#6277)

2026-10-23 12:23:58 -04:00

admin_quarantine_test.go

feat: Minstrel no longer talks to Lidarr: its connection, Delete via Lidarr and the unmonitor options are gone, and the track reports are plain quarantine (M502 #5525)

2026-10-11 13:48:20 -04:00

admin_quarantine.go

docs: api comments say what the endpoints do, not how they came to be (#6277)

2026-10-23 12:23:58 -04:00

admin_reacquisition.go

docs: api comments say what the endpoints do, not how they came to be (#6277)

2026-10-23 12:23:58 -04:00

admin_recommendation_trends_test.go

feat(tuning): weekly trend view — per-surface series + knob-turn markers

2026-07-03 09:29:33 -04:00

admin_recommendation_trends.go

docs: api comments say what the endpoints do, not how they came to be (#6277)

2026-10-23 12:23:58 -04:00

admin_recommendation_tuning_test.go

feat(tuning): scoring weights → DB-backed admin tuning lab

2026-07-03 09:22:03 -04:00

admin_recommendation_tuning.go

docs: api comments say what the endpoints do, not how they came to be (#6277)

2026-10-23 12:23:58 -04:00

admin_requests_test.go

docs: api comments say what the endpoints do, not how they came to be (#6277)

2026-10-23 12:23:58 -04:00

admin_requests.go

docs: api comments say what the endpoints do, not how they came to be (#6277)

2026-10-23 12:23:58 -04:00

admin_scan_test.go

feat(server/m7-381): admin scan-status + manual trigger endpoints

2026-05-04 20:13:31 -04:00

admin_scan.go

docs: api comments say what the endpoints do, not how they came to be (#6277)

2026-10-23 12:23:58 -04:00

admin_search.go

docs: api comments say what the endpoints do, not how they came to be (#6277)

2026-10-23 12:23:58 -04:00

admin_smtp_test.go

feat(server/m7-user-mgmt): mailer package + SMTP config endpoints (U3)

2026-05-07 12:43:44 -04:00

admin_smtp.go

feat: stored credentials are sealed at rest, so a copy of the database alone reveals none of them (#6767)

2026-11-02 13:23:19 -05:00

admin_status_test.go

docs: api comments say what the endpoints do, not how they came to be (#6277)

2026-10-23 12:23:58 -04:00

admin_status.go

docs: api comments say what the endpoints do, not how they came to be (#6277)

2026-10-23 12:23:58 -04:00

admin_summary_test.go

docs: api comments say what the endpoints do, not how they came to be (#6277)

2026-10-23 12:23:58 -04:00

admin_summary.go

docs: api comments say what the endpoints do, not how they came to be (#6277)

2026-10-23 12:23:58 -04:00

admin_suspect_sources_test.go

feat: duplicates resolve themselves where Lidarr says it is safe (M498)

2026-10-08 21:49:37 -04:00

admin_suspect_sources.go

docs: api comments say what the endpoints do, not how they came to be (#6277)

2026-10-23 12:23:58 -04:00

admin_tag_sources_test.go

feat(api): admin tag-sources endpoints (#1490 Step 4 backend)

2026-07-13 22:24:28 -04:00

admin_tag_sources.go

docs: api comments say what the endpoints do, not how they came to be (#6277)

2026-10-23 12:23:58 -04:00

admin_tracks_test.go

docs: api comments say what the endpoints do, not how they came to be (#6277)

2026-10-23 12:23:58 -04:00

admin_tracks.go

docs: api comments say what the endpoints do, not how they came to be (#6277)

2026-10-23 12:23:58 -04:00

admin_users_test.go

fix: A2 (relax art-source CHECK) + D + E integration residual

2026-05-17 20:22:30 -04:00

admin_users.go

feat(auth): store Subsonic API keys hashed; a new key is shown once (M462 #4983)

2026-10-06 09:42:35 -04:00

admin_wanted_test.go

docs: api comments say what the endpoints do, not how they came to be (#6277)

2026-10-23 12:23:58 -04:00

admin_wanted.go

docs: api comments say what the endpoints do, not how they came to be (#6277)

2026-10-23 12:23:58 -04:00

api.go

docs: api comments say what the endpoints do, not how they came to be (#6277)

2026-10-23 12:23:58 -04:00

auth_forgot_test.go

fix(auth): build password-reset links from an operator-set public address, never the Host header (M462 #4981)

2026-10-06 09:32:10 -04:00

auth_forgot.go

docs: api comments say what the endpoints do, not how they came to be (#6277)

2026-10-23 12:23:58 -04:00

auth_register_test.go

docs: api comments say what the endpoints do, not how they came to be (#6277)

2026-10-23 12:23:58 -04:00

auth_register.go

docs: api comments say what the endpoints do, not how they came to be (#6277)

2026-10-23 12:23:58 -04:00

auth_reset_test.go

feat(server/m7-user-mgmt): forgot + reset password endpoints (U3)

2026-05-07 12:49:30 -04:00

auth_reset.go

feat(auth): sessions expire server-side; password change and reset end other sessions (M462 #4978)

2026-10-06 08:32:39 -04:00

auth_test.go

docs: api comments say what the endpoints do, not how they came to be (#6277)

2026-10-23 12:23:58 -04:00

auth.go

docs: api comments say what the endpoints do, not how they came to be (#6277)

2026-10-23 12:23:58 -04:00

cast_token_test.go

docs: api comments say what the endpoints do, not how they came to be (#6277)

2026-10-23 12:23:58 -04:00

cast_token.go

docs: api comments say what the endpoints do, not how they came to be (#6277)

2026-10-23 12:23:58 -04:00

catalogue_test.go

docs: api comments say what the endpoints do, not how they came to be (#6277)

2026-10-23 12:23:58 -04:00

catalogue.go

docs: api comments say what the endpoints do, not how they came to be (#6277)

2026-10-23 12:23:58 -04:00

client_assets_test.go

feat: a newer app is told in a snackbar on Home and installed from a sheet holding Settings' card, fetched ahead on Wi-Fi (#6452)

2026-10-26 07:46:01 -04:00

client_assets.go

feat: a newer app is told in a snackbar on Home and installed from a sheet holding Settings' card, fetched ahead on Wi-Fi (#6452)

2026-10-26 07:46:01 -04:00

convert_test.go

style: gofmt fixes across api package

2026-04-21 23:02:20 -04:00

convert.go

docs: api comments say what the endpoints do, not how they came to be (#6277)

2026-10-23 12:23:58 -04:00

diagnostics.go

feat(diagnostics): 'playback' kind, newest-first sort, fix active-route subtitle

2026-06-30 16:33:01 -04:00

errors_test.go

refactor(server/api): writeErr accepts error; migrate admin handlers (1/3)

2026-05-07 19:48:25 -04:00

errors.go

docs: api comments say what the endpoints do, not how they came to be (#6277)

2026-10-23 12:23:58 -04:00

events_publish.go

docs: api comments say what the endpoints do, not how they came to be (#6277)

2026-10-23 12:23:58 -04:00

events_stream.go

docs: api comments say what the endpoints do, not how they came to be (#6277)

2026-10-23 12:23:58 -04:00

events_test.go

fix(server/api/test): drop unused 'context' imports A3 sed left behind

2026-05-08 11:29:36 -04:00

events.go

docs: api comments say what the endpoints do, not how they came to be (#6277)

2026-10-23 12:23:58 -04:00

file_remove_error_test.go

docs: api comments say what the endpoints do, not how they came to be (#6277)

2026-10-23 12:23:58 -04:00

file_remove_error.go

docs: api comments say what the endpoints do, not how they came to be (#6277)

2026-10-23 12:23:58 -04:00

home_test.go

feat(api): GET /api/home/index for per-item rendering (Slice B)

2026-05-13 20:41:44 -04:00

home.go

docs: api comments say what the endpoints do, not how they came to be (#6277)

2026-10-23 12:23:58 -04:00

leveled_stream_test.go

feat: leveled FLAC stream for Sonos/UPnP speakers (M464 #5001)

2026-10-06 19:31:07 -04:00

leveled_stream.go

docs: api comments say what the endpoints do, not how they came to be (#6277)

2026-10-23 12:23:58 -04:00

library_albums_test.go

feat(api): add GET /api/library/albums handler

2026-05-01 18:00:59 -04:00

library_albums.go

docs: api comments say what the endpoints do, not how they came to be (#6277)

2026-10-23 12:23:58 -04:00

library_browse_test.go

docs: api comments say what the endpoints do, not how they came to be (#6277)

2026-10-23 12:23:58 -04:00

library_browse.go

docs: api comments say what the endpoints do, not how they came to be (#6277)

2026-10-23 12:23:58 -04:00

library_fixtures_test.go

feat(api): add GET/PUT /api/me/listenbrainz endpoints

2026-04-28 09:27:06 -04:00

library_sync_test.go

docs: plan-era "v1", "Task N" and "Phase N" wording restated as facts (#6277)

2026-10-23 13:05:03 -04:00

library_sync_views_test.go

docs: api comments say what the endpoints do, not how they came to be (#6277)

2026-10-23 12:23:58 -04:00

library_sync_views.go

docs: api comments say what the endpoints do, not how they came to be (#6277)

2026-10-23 12:23:58 -04:00

library_sync.go

feat(api): deliver loudness gains to every client (M464 #4997)

2026-10-06 13:54:05 -04:00

library_test.go

docs: api comments say what the endpoints do, not how they came to be (#6277)

2026-10-23 12:23:58 -04:00

library.go

docs: api comments say what the endpoints do, not how they came to be (#6277)

2026-10-23 12:23:58 -04:00

likes_test.go

refactor(server/api/test): withUser helper; migrate 51 context-value sites (A3)

2026-05-08 10:40:03 -04:00

likes.go

docs: api comments say what the endpoints do, not how they came to be (#6277)

2026-10-23 12:23:58 -04:00

listenbrainz_test.go

feat(api): add GET/PUT /api/me/listenbrainz endpoints

2026-04-28 09:27:06 -04:00

listenbrainz.go

feat: stored credentials are sealed at rest, so a copy of the database alone reveals none of them (#6767)

2026-11-02 13:23:19 -05:00

me_history_test.go

feat: Minstrel no longer talks to Lidarr: its connection, Delete via Lidarr and the unmonitor options are gone, and the track reports are plain quarantine (M502 #5525)

2026-10-11 13:48:20 -04:00

me_history.go

refactor(server/api): migrate me/* + events preludes (A2 5/N)

2026-05-08 08:44:50 -04:00

me_normalization_test.go

feat: per-user volume leveling preference, synced across devices (M464 #4998)

2026-10-06 14:29:40 -04:00

me_normalization.go

docs: api comments say what the endpoints do, not how they came to be (#6277)

2026-10-23 12:23:58 -04:00

me_notifications_test.go

feat(api): read-all takes an optional up_to cutoff (M489)

2026-10-08 07:27:29 -04:00

me_notifications.go

docs: api comments say what the endpoints do, not how they came to be (#6277)

2026-10-23 12:23:58 -04:00

me_password_test.go

feat(server/m7-user-mgmt): self-service /me endpoints (U3)

2026-05-07 12:38:48 -04:00

me_password.go

feat(auth): sessions expire server-side; password change and reset end other sessions (M462 #4978)

2026-10-06 08:32:39 -04:00

me_profile_test.go

feat(server/m7-user-mgmt): self-service /me endpoints (U3)

2026-05-07 12:38:48 -04:00

me_profile.go

docs: plan-era "v1", "Task N" and "Phase N" wording restated as facts (#6277)

2026-10-23 13:05:03 -04:00

me_recommendation_metrics_test.go

docs: api comments say what the endpoints do, not how they came to be (#6277)

2026-10-23 12:23:58 -04:00

me_recommendation_metrics.go

docs: api comments say what the endpoints do, not how they came to be (#6277)

2026-10-23 12:23:58 -04:00

me_sessions_test.go

docs: api comments say what the endpoints do, not how they came to be (#6277)

2026-10-23 12:23:58 -04:00

me_sessions.go

feat(auth): active sessions API with origin/current IP — #370

2026-08-05 09:17:40 -04:00

me_subsonic_password_test.go

feat: stored credentials are sealed at rest, so a copy of the database alone reveals none of them (#6767)

2026-11-02 13:23:19 -05:00

me_subsonic_password.go

feat: stored credentials are sealed at rest, so a copy of the database alone reveals none of them (#6767)

2026-11-02 13:23:19 -05:00

me_system_playlists_test.go

feat(server/m7-352): GET /api/me/system-playlists-status for home placeholders

2026-05-04 18:13:13 -04:00

me_system_playlists.go

docs: api comments say what the endpoints do, not how they came to be (#6277)

2026-10-23 12:23:58 -04:00

me_test.go

docs: api comments say what the endpoints do, not how they came to be (#6277)

2026-10-23 12:23:58 -04:00

me_timezone_test.go

fix: A2 (relax art-source CHECK) + D + E integration residual

2026-05-17 20:22:30 -04:00

me_timezone.go

docs: api comments say what the endpoints do, not how they came to be (#6277)

2026-10-23 12:23:58 -04:00

me_token_test.go

feat(auth): store Subsonic API keys hashed; a new key is shown once (M462 #4983)

2026-10-06 09:42:35 -04:00

me_token.go

feat(auth): store Subsonic API keys hashed; a new key is shown once (M462 #4983)

2026-10-06 09:42:35 -04:00

me.go

docs: api comments say what the endpoints do, not how they came to be (#6277)

2026-10-23 12:23:58 -04:00

media_test.go

fix(server,web/m7-353): post-review fixes (test compilation, AlbumRef field, bulk handler, design system)

2026-05-04 15:21:24 -04:00

media.go

docs: api comments say what the endpoints do, not how they came to be (#6277)

2026-10-23 12:23:58 -04:00

metrics_significance_test.go

docs: api comments say what the endpoints do, not how they came to be (#6277)

2026-10-23 12:23:58 -04:00

metrics_significance.go

docs: api comments say what the endpoints do, not how they came to be (#6277)

2026-10-23 12:23:58 -04:00

notify_producers_test.go

docs: api comments say what the endpoints do, not how they came to be (#6277)

2026-10-23 12:23:58 -04:00

notify_producers.go

docs: api comments say what the endpoints do, not how they came to be (#6277)

2026-10-23 12:23:58 -04:00

playback_errors.go

feat: notifications say what changed and alert once: a grouped notice names the tracks, grows without re-alerting, and a phone pile lists its titles (M542 #6146-#6151)

2026-10-19 22:44:19 -04:00

playlists_system_shuffle.go

docs: api comments say what the endpoints do, not how they came to be (#6277)

2026-10-23 12:23:58 -04:00

playlists_system_test.go

docs: api comments say what the endpoints do, not how they came to be (#6277)

2026-10-23 12:23:58 -04:00

playlists_test.go

docs: api comments say what the endpoints do, not how they came to be (#6277)

2026-10-23 12:23:58 -04:00

playlists.go

docs: api comments say what the endpoints do, not how they came to be (#6277)

2026-10-23 12:23:58 -04:00

prelude.go

fix: A2 (relax art-source CHECK) + D + E integration residual

2026-05-17 20:22:30 -04:00

quarantine_test.go

feat(api): /api/quarantine user + admin endpoints + Service wiring

2026-04-30 20:19:39 -04:00

quarantine.go

docs: api comments say what the endpoints do, not how they came to be (#6277)

2026-10-23 12:23:58 -04:00

radio_test.go

fix(server/api/test): retype callRadio user param to dbq.User for withUser helper

2026-05-08 11:05:25 -04:00

radio.go

docs: api comments say what the endpoints do, not how they came to be (#6277)

2026-10-23 12:23:58 -04:00

replay_gain_test.go

feat(api): deliver loudness gains to every client (M464 #4997)

2026-10-06 13:54:05 -04:00

replay_gain.go

docs: api comments say what the endpoints do, not how they came to be (#6277)

2026-10-23 12:23:58 -04:00

requests_test.go

docs: api comments say what the endpoints do, not how they came to be (#6277)

2026-10-23 12:23:58 -04:00

requests.go

docs: api comments say what the endpoints do, not how they came to be (#6277)

2026-10-23 12:23:58 -04:00

reset_test.go

feat: Minstrel no longer talks to Lidarr: its connection, Delete via Lidarr and the unmonitor options are gone, and the track reports are plain quarantine (M502 #5525)

2026-10-11 13:48:20 -04:00

resolve_test.go

fix(server/api): silence unused-parameter lint in resolve_test fakes

2026-05-07 22:18:40 -04:00

resolve.go

refactor(server/api): resolveByID helper for parseUUID->fetch->404 (T4)

2026-05-07 21:28:20 -04:00

search_test.go

feat(api): GET /api/search with three paged facets

2026-04-21 08:29:28 -04:00

search.go

docs: api comments say what the endpoints do, not how they came to be (#6277)

2026-10-23 12:23:58 -04:00

session_lifecycle_test.go

feat(auth): sessions expire server-side; password change and reset end other sessions (M462 #4978)

2026-10-06 08:32:39 -04:00

stream_token_test.go

feat(server): HMAC stream token auth path (UPnP slice 1/6)

2026-06-03 11:34:02 -04:00

stream_token.go

docs: api comments say what the endpoints do, not how they came to be (#6277)

2026-10-23 12:23:58 -04:00

suggestions_test.go

feat(api): /api/discover/suggestions handler

2026-05-01 06:23:08 -04:00

suggestions.go

docs: api comments say what the endpoints do, not how they came to be (#6277)

2026-10-23 12:23:58 -04:00

types.go

docs: api comments say what the endpoints do, not how they came to be (#6277)

2026-10-23 12:23:58 -04:00