Introduces a new feature to fetch, parse, and display app release notes
and update highlights directly within the UI.
- Backend: Adds the `release-notes` module to fetch GitHub releases
and parse markdown highlight sections.
- Frontend: Adds the `WhatsNew` dialog and view, including custom
markdown rendering and an image lightbox for update media.
- Tools: Adds validation scripts (`whats-new-lint`, `whats-new-preview`)
to ensure release content parses correctly before publication.
pdf-lib cannot re-encrypt files, so saving an encrypted PDF strips its encryption but writes back still-encrypted byte streams, silently corrupting the file. Skipping the file write entirely prevents this corruption while allowing DB metadata to persist separately.
Fixes#368
Books without a row in user_book_status returned NULL and sorted differently than books explicitly marked as 'unread'. Coalescing the missing status to 'unread' ensures both explicitly and implicitly unread books are grouped and ordered consistently.
Fixes#367
The bulk rename job was incorrectly iterating over every book in the library instead of restricting the operation to books that actually require a rename. This caused unnecessary processing and logged excessive noise. We now compute the preview first and filter the list of candidate book IDs down to those with the 'will_rename' status before executing the rename loop.
Closes#361
Expand coverage across previously untested modules to close gaps identified
in the coverage audit.
BE: entity-manager strategies (inline, junction, author), koreader chapter
extractor, series and achievement repositories.
FE: reader settings/progress composables, notifications, live-scan books,
entity manager, and API wrapper modules (author, statistics, entity-manager).
* feat(metadata): add Aladin Korean book metadata provider
Add support for fetching Korean book metadata from Aladin OpenAPI.
Includes search by title/author/ISBN and lookup by ISBN-10/13.
- Add ALADIN to MetadataProviderKey in @bookorbit/types
- Add AladinProviderConfig to ProviderConfigurations
- Create AladinProvider with IdentifiableProvider interface
- Add mapper for Aladin API response to MetadataCandidate
- Register provider in MetadataFetchModule
- Add provider config merge, validation, and connection test
- Include 24 unit tests (provider + mapper)
* feat(client): add Aladin provider UI integration
* refactor(metadata): use 'Aladin' label and favicon-based icon
* feat(metadata): complete Aladin provider end-to-end wiring
Persist the Aladin ItemId across fetch, scoring, locks, and file metadata round-trip, and update the affected tests.
Co-authored-by: Kyungwook Park <288273+kyungw00k@users.noreply.github.com>
---------
Co-authored-by: neon <18559658+neonsolstice@users.noreply.github.com>
Co-authored-by: Kyungwook Park <288273+kyungw00k@users.noreply.github.com>
This introduces a many-to-many relationship between books and series, resolving the previous limitation where a book could only belong to a single series. It updates the database schema, query builders, server DTOs, and the Vue client interface to manage multiple series memberships per book.
Closes#353
String/math based extraction of floating point series index fraction parts caused floating point precision artifacts. This extracts formatting into a shared utility and uses string splitting to avoid precision issues.
Closes#360
Inject an empty JSON object for requests that have an unsupported content type but zero content length. Fastify defaults to rejecting these with a 415 error.
Closes#348
Adds a display preference to conditionally render book spines on comic
formats. The new setting is defaulted to false. Various book cover
surfaces across the application now respect this preference by checking
if the format is a comic before rendering the spine.
Closes#295
Adds the isUpNext operator to seriesStatus allowing books to be filtered by whether they are the next unread book in a series where the previous book is completed.
Closes#321
Calibre 9.x (opf3) writes provider identifiers as bare `prefix:value` text
inside `<dc:identifier>` instead of using `opf:scheme` attributes. It also
stores custom-column values like page count and subtitle in a
`calibre:user_metadata` JSON blob. This adds parsing for these fallback
formats to correctly extract metadata from Calibre-processed EPUBs.
Closes#341
Introduce devices and rating evaluators backed by a new reading_sessions.source
column, so badges can reward multi-device reading and book ratings. Wire the
source through Kobo and reading-session services and seed the new badges.
Introduces PathService.createDirectory with comprehensive path validation
to prevent directory traversal and symlink attacks. It validates parent paths
against a blocked list, ensures the parent is a real directory, and blocks
unsafe characters in folder names.
Filesystem errors like EEXIST and EACCES are mapped to standard HTTP
exceptions to provide clear feedback to the client.
Closes#332
Rank physical and ebook editions higher than audiobooks in hardcover
metadata mapping. Do not allow audiobooks to inherit page counts from
the base book to prevent incorrect metadata.
Closes#334
The upload paths saved only the aggregate book_metadata duration, leaving book_files.durationSeconds
null so the player summed to zero. Extract and aggregate per-file duration on new uploads and added
audio files, matching the scanner.
Ref #330
The previous edition matching logic often resulted in suboptimal edition assignments, tracking text books against audiobooks or selecting editions with drastically different page counts. A more rigorous matching strategy is required to ensure users get accurate edition metadata from Hardcover.
Closes#333
When a metadata provider returns a page count of 0 (e.g. unknown), the frontend would submit 0, causing a validation error (HTTP 400). This change normalizes 0 to null on both the client (before sending) and server (during validation).
Closes#329
Removes the `assertManualUpdateAllowedForLockTransition` guard that incorrectly rejected the legitimate UI flow of unlocking a field, editing its value, and re-locking it before saving.
Closes#328
* feat(metadata): add LubimyCzytac metadata provider
- Add LubimyCzytac scraper and provider implementation
- Add lubimyczytacId field across types, schema, extractors, and metadata service
- Register lubimyczytac provider in module, pipeline, repository, and config service
- Add provider icon, color, link, and UI support in book detail views
- Add migration for lubimyczytac_id column
Closes#304
* fix(books): keep cover card read button opening reader when thumbnail click prefers details
The overlay primary button should always open the reader regardless of
the thumbnailClickAction setting. That setting only controls card click
behaviour.
* fix(books): add explicit read button to hover overlay when thumbnail click prefers details
When thumbnailClickAction is 'details', a dedicated Read button now
appears in the overlay top row so users can still open the reader
directly without changing their preference.
The book dock metadata service now routes audio formats through the audio extractor to extract chapters, duration, narrators, and other embedded tags. This ensures that audiobook metadata is correctly mapped and persisted during the import process.
Closes#322
The default upload file naming patterns for single file and folder per book previously relied exclusively on the title. If multiple files lacked a title, they would map to the same path. This changes the default patterns to fall back to the original filename if the title is missing, preventing files without metadata from clumping.
Closes#308
Add server-backed jump buckets so large library, collection, and smart-scope listings can jump directly to sorted sections without loading every row up front.
Closes#163
Extract DB deletion logic into OidcCleanupService as a pure method
returning counts. Move the @Cron trigger, logging, and error handling
into a new OidcCleanupJob, matching the AuditCleanupJob pattern.
Sidecar OPF files can link to a sibling cover image, but the extractor
always passed null for the cover buffer, silently dropping the image.
Parse coverHref from three sources in priority order:
1. EPUB2 <guide><reference type="cover" href="..."/>
2. EPUB3 <manifest><item properties="cover-image" href="..."/>
3. Calibre <meta name="cover" content="id"/> resolved via manifest
Resolve the href relative to the OPF file directory and read the image
file. Fall back to null cover if the file is missing or unreadable,
so a broken cover link does not fail the import.
Closes#273
The SSRF guard was throwing a generic 'URL host is not allowed' with no
indication that the block was due to a private or local IP, or how to
resolve it. Users with a LAN-hosted OIDC provider had no way to diagnose
the failure.
Introduce PrivateAddressException extends BadRequestException in ssrf.utils
so callers can distinguish private-address blocks from other validation
errors. The OIDC connection test catches it and re-throws with a message
that names OIDC_ALLOW_LOCAL_ISSUERS=true as the fix.
Closes#264
The debug log in invalidateSnapshot did not follow the project logging
convention ([event] [phase] key=value ... - message) and logged all
reset book IDs, which could produce unbounded single-line output for
large libraries.
Fix the event name, add the [end] phase marker, add durationMs, drop
the bookIds field, and remove the no-snapshot early-return log (noisy
no-op path).
* fix(kobo): enhance kobodeviceservice to manage device snapshots
Refactor KoboDeviceService to include a syncService for invalidating user snapshots when devices are created or revoked. Update tests to verify snapshot invalidation behavior and ensure proper service instantiation. This change improves the synchronization process for user devices in the Kobo ecosystem.
* test(kobo): update device revocation tests for snapshot invalidation
Enhance the test cases for the KoboDeviceService's revokeDevice method to verify that the syncService's invalidateSnapshot is called correctly and that database deletion methods are invoked the expected number of times. This ensures accurate testing of device revocation behavior and snapshot management.
---------
Co-authored-by: Logan-Selley <logan@selleytech.com>
Co-authored-by: neon <18559658+neonsolstice@users.noreply.github.com>
* fix(series): keep startup alive when series backfill fails
The series id backfill ran inside SeriesIdentityService.onModuleInit
without any error handling, so any failure rejected the lifecycle hook
and aborted NestApplication bootstrap, leaving the app unable to start.
On databases where the book_series unique arbiter index is missing or
unusable, the backfill INSERT ... ON CONFLICT throws and bricks startup.
Wrap the backfill in a guard so failures are logged and startup
continues, and surface the underlying driver error (Drizzle hides the
real cause behind its 'Failed query' wrapper) so the root DB issue is
diagnosable from logs.
Closes#270
* fix(series): resolve series backfill timeout on large libraries
The NodePg pool has statement_timeout: 30_000 ms, which is the right
guard for API queries but too aggressive for the one-time startup
backfill. On libraries with 100k+ books the bulk UPDATE against
book_metadata hits the limit before completing, leaving series_id
NULL for all books and repeating the timeout on every subsequent
restart.
Two changes:
1. Wrap the backfill in a transaction and issue SET LOCAL
statement_timeout = 0 at the start. SET LOCAL scopes the change to
this transaction only, so the pool timeout applies to every other
query unchanged. The transaction also makes all three backfill
statements atomic: previously a successful INSERT followed by a
timed-out UPDATE left book_series populated but series_id still
NULL everywhere.
2. Add a functional B-tree index on lower(btrim(series_name)) in
book_metadata. The backfill UPDATE joins on that expression; without
an index the planner falls back to a full sequential scan and hash
join on every startup. With the index, subsequent startups use a
nested-loop index scan that short-circuits immediately when no rows
need updating.
Measured on 250k books: first migration completes without timeout;
subsequent startups finish the no-op check in ~150ms.
Closes#270
- Adds rename and delete file capabilities to Book Details > Files tab
- Automatically promotes a fallback file to primary upon deletion
- Refactors path update logic to correctly apply db folder path updates
- Ensures file type format badges in header search use global format colors
- Replaces legacy file property overrides with rename-only DTO
Closes#214
The scanner disc directory pattern previously recognized cd, disc, disk, part, and side, but not pt. This caused Pt subfolders to be treated as separate books instead of being merged into the parent audiobook. This change adds pt as an accepted disc/part folder prefix.
Closes#262
Ensure all files associated with a book are renamed or moved when the
primary file is renamed. Previously, the rename service only computed
new target paths for the primary file, abandoning companion files (e.g.,
covers, sidecars) or failing to rename them properly.
Compute new target paths for all content and secondary files, manage
batch rollbacks on failure, and handle internal naming collisions. Clean
up unused single-file rename repository and service methods.
Closes#265
* feat(kobo): handle ratebook events in koboanalyticsservice
This commit adds the BookModule to the KoboModule imports, allowing for better integration with book-related functionalities. Additionally, the KoboAnalyticsService has been updated to handle 'RateBook' events, enabling the processing of user ratings through the new bookService. Tests have been added to ensure the correct handling of these events and their interactions with the reading session service.
* test(kobo): fill ratebook testing gaps
---------
Co-authored-by: Logan-Selley <logan@selleytech.com>
Co-authored-by: neon <18559658+neonsolstice@users.noreply.github.com>
Remove invalid XML 1.0 characters from book metadata. These characters can cause lenient OPDS clients like KOReader to incorrectly parse the feed and shift entry boundaries onto the wrong acquisition link.
Closes#260
The kepubify binaries contained golang.org/x/text v0.3.6 which
triggers CVE-2021-38561 and CVE-2022-32149 in Trivy. This commit
updates the module to the latest version and rebuilds the binaries.
The previous kepubify binaries were built with an older Go version
that triggered Trivy's CVE-2026-42504 vulnerability in the standard
library. This updates the binaries to the latest Go version to resolve
the CI pipeline failure.
The metadata fetch pipeline now gathers and returns detailed diagnostics
about provider selection, candidate results, and the reason for empty
resolved fields (e.g. no active providers, throttled providers, or no
candidates). These diagnostics are logged to improve observability and
make debugging metadata fetch failures significantly easier.
Use paired Kobo open and leave analytics events to derive progress deltas and active reading time.
Format negative reading-log deltas without an extra plus sign.
KOReader progress updates were updating the database but failing to
emit the progress changed event, causing Hardcover auto-sync to be
skipped. This change adds the missing event emission to the KOReader
service so that external syncs trigger correctly, and patches a query
filter issue in the Hardcover repository.
Closes#258
Add an error event listener to the source stream when appending entries during zip patching to prevent unhandled ENOENT errors from crashing the Node process.
Closes#226
Add Kobo as a first-class metadata source so books can keep Kobo IDs across fetch, edit, import, scoring, and file-write flows. Provide the Python cloudscraper setup needed for production fetches while keeping local setup explicit.
Closes#247
* feat(kobo): integrate analytics service into kobodevicecontroller
- added analytics service to the kobodevicecontroller to handle analytics events.
- updated the analyticsevent method to process incoming events and handle errors gracefully.
- enhanced unit tests to cover new analytics functionality, including successful ingestion and error handling scenarios.
- updated module imports to include the new analytics service and resolver.
* test(architecture): add kobo analytics resolver service to architecture boundaries tests
* refactor(kobo): enhance analytics handling and improve tests
- Updated KoboDeviceController to include analyticsService in constructor and added test for handling non-Error rejections.
- Enhanced KoboAnalyticsResolverService tests to cover scenarios where book rows do not exist and when primary file IDs are set without corresponding EPUB files.
- Modified KoboAnalyticsService to integrate bookIdentityService for resolving volume IDs and added tests for various edge cases in event ingestion, including handling invalid timestamps and logging warnings for non-Error exceptions.
These changes improve the robustness of analytics processing and ensure comprehensive test coverage for new functionalities.
* fix(kobo): enhance leavecontent event validation and update tests
- Improved validation logic in KoboAnalyticsService for LeaveContent events to ensure volume ID is a non-empty string.
---------
Signed-off-by: Logan Selley <37816781+Logan-Selley@users.noreply.github.com>
Co-authored-by: Logan-Selley <logan@selleytech.com>
Co-authored-by: neon <18559658+neonsolstice@users.noreply.github.com>
neon
dependabot[bot]
Kyungwook Park
Chris Mansell
Logan Selley