AudioCheck - Releases

Changed

• Library folders UX — folder rows are a single clear line (name, path, track count, Remove). Content type and nested-folder settings live under collapsed Folder options.
• Add folder flow — no content-type modal; Music / Audiobook / Auto-detect shortcuts, path-based type guessing, and automatic scan after add.
• Store listing copy — README and info.xml descriptions clarified (free AGPL web app, formats, get-started steps).
• Nextcloud — max-version remains 34 (current stable 34.0.2).

Tests

• Journey + axe WCAG 2.1 AA coverage for the simplified Library surface (library-folders-ux / nested-scan e2e and PHPUnit contracts).

Changed

• Packaging release: version bump for App Store / GitHub republish; confirmed Nextcloud max-version 34 against latest stable 34.0.2.

Fixed

• Nested audiobook folders skipped during scan (issue #9) — recursive walks no longer drop a book folder that sorts last (or alone) under its author. Layouts like /Audiobooks/Author/Book/*.mp3 and /Audiobooks/Author/Book/CD 1/*.mp3 are indexed completely.
• Scan cursor size on deep trees — walk position is stored in a compact path+offsets form so deep Author/Book/Chapter stacks stay within the varchar(4000) cursor column across resumes.
• Multi-disc grouping — untagged files in CD n / Disc n / Chapter n / Kapitel n folders group under the parent book and keep disc order.
• Same-second scan prune — a new full scan picks a generation strictly newer than any existing last_seen_at, so tracks indexed by a file event in the same second are still pruned when the file becomes inaccessible (e.g. share revoke).
• Batch-boundary infinite rescan — finishing a library root on an exact SCAN_BATCH_SIZE boundary no longer persists an empty walk cursor that restarted the same root forever and skipped prune; pause only while the current root still has work (or before starting the next root).

Changed

• Library UX — clearer “All nested folders” scope, an Author/Book layout tip, and Settings copy that names the nested audiobook pattern.
• Walk depth cap — recursive scans stop descending after 32 folder levels (files at that depth still index) to bound pathological nesting.
• Nextcloud — max-version remains 34 (current stable).

Unreleased

Added

• Mini player ±30 — jump back/forward 30 seconds on the mini transport (same contract as Now Playing, keyboard, and MediaSession).
• Hide mini on Now Playing — the dock is hidden on Aktuelle Wiedergabe (SSR + SPA) so the full player is the only transport strip.

Fixed

• Mini jump aria-labels — PHP t() cannot substitute JS {seconds} placeholders; labels use fixed strings plus client hydrate from SEEK_JUMP_SEC.
• Focus / inert when dock hides — keyboard focus leaves the mini player before it becomes hidden; inert blocks interaction while Now Playing is open.
• No-op relative seek pending — clearing pending immediately when −/+ does not move currentTime (e.g. −30 already at 0) so sticky pending cannot skew the next jump.

Changed

• Responsive mini transport — five-button row stays usable at 320px with ≥44px touch targets for jump controls.

Unreleased

Added

• Jump back / forward 30 seconds on Now Playing — podcast-style −30 / +30 beside play (issue #6). Mini player stays simple; open Now Playing for jumps. Keyboard ←/→ and MediaSession seek use 30 seconds.

Fixed

• Rapid ±30 seek race (web + mobile) — relative seeks accumulate against a pending target so double-taps cannot both read a stale clock and land on the same position; absolute scrub / track change cancels in-flight relative seeks.
• MediaSession seek offset — OS/browser often advertises 10s; product hard-locks seekbackward/seekforward to 30s to match on-screen controls.

Fixed

• Fatal on every file move/rename (issue #7) — NodeEventListener called the non-existent NodeRenamedEvent::getNode(). Rename events expose getSource() / getTarget() only; the listener now routes through ScanService::handleRename(), updates audio index paths in place, purges cross-storage source ids, and never lets indexing exceptions abort DAV MOVE (copy-without-delete).
• Folder move index drift — renaming/moving a folder now rewrites descendant ac_tracks.rel_path and matching ac_libraries.folder_path prefixes (Nextcloud only emits one event for the folder), then assigns library_id immediately from the new paths (no waiting on a background scan). Previously unindexed audio that entered a library is discovered with a bounded synchronous walk; only overflow queues a scan.
• Copied audio never indexed — NodeCopiedEvent is registered; file copies upsert immediately; folder copies use the same bounded index-into-libraries path.
• include_subfolders on path resolve — library matching for node events now honours non-recursive library roots.
• User/group delete listeners — cleanup failures are logged and no longer bubble into the core delete event bus.

Fixed

• Queue-wide listening speed — changing speed on Now playing now sticks for the whole queue. The HTML media load() algorithm was resetting playbackRate to 1× on every track change because only playbackRate (not defaultPlaybackRate) was set before src/load(). Both rates are kept in sync and re-applied after load/play; the UI reads the session speed via getSpeed() instead of the audio element.
• Keyboard speed shortcuts — [ / ] now persist the new rate with the queue/session (same as the speed control).
• Settings default speed — saving the default no longer overrides an active listening session mid-queue.

Changed

• Now playing speed control — clearer “Listening speed” label with − / select / + controls, hint that speed applies to the whole queue, 44px touch targets, and WCAG-focused labels/descriptions.

Fixed

• Favorites listing regression test — unit and integration tests lock in hardened loadFavoriteFileIds() behavior (issue #3).
• Native widget scheme on forced themes (issue #4 follow-up) — color-scheme is now bound to the applied Nextcloud theme (body[data-theme-*]) instead of a blanket light dark, so select dropdowns, spinners, and other browser-drawn widgets no longer render white on a forced dark theme when the OS prefers light (and vice versa). Modals and toasts, which portal onto <body>, get the same binding.
• Active sort chip contrast — active filter chips paired --color-primary-element-light backgrounds with --color-primary-element-text ink, which is tuned for the solid primary color and became dark-on-dark (illegible) on dark themes; they now use --color-primary-element-light-text.
• Stale theme-bind.css after upgrades — the late-loaded theme re-binding stylesheet is now versioned (?v=<app version>) so browsers pick up theming fixes on upgrade instead of serving a months-old cached copy.

Changed

• Nextcloud 34 — raised max-version to 34 for the current stable server release.

Fixed

• Scan memory — library scans walk folders depth-first in batches instead of loading every audio file into memory before indexing; cursor now stores a walkStack for resume.
• Concurrent scans — only one worker can claim RUNNING per user via an atomic DB update; lease heartbeats prevent stale takeover mid-batch.
• Playlist integrity — reorder and delete run inside DB transactions so partial failures cannot leave inconsistent sort orders or orphan headers.
• Mini player volume (mobile) — volume icon opens an accessible popover with slider and mute on small screens; desktop keeps inline controls (WCAG 2.1 AA).
• API error logging — safe() and service catch blocks now pass the exception object (['exception' => $e]) to the logger instead of a message context key, which the Nextcloud logger's PSR-3 interpolation silently discarded. Internal errors now log the full class, message, and stack trace.
• Favorites listing 500 — ITags::getFavorites() may return false on transient DB errors; LibraryService now degrades to "no favorites" instead of throwing a TypeError that broke /api/tracks?favorite=1 and all views built on it.
• SQL portability — count queries no longer inherit ORDER BY on non-aggregated columns (rejected by PostgreSQL and MySQL 8 with ONLY_FULL_GROUP_BY); MAX() aggregates use selectAlias() so library sync revisions and playlist sort orders are read correctly; internal Doctrine ArrayParameterType replaced with the public IQueryBuilder::PARAM_INT_ARRAY.
• Upsert races — concurrent progress saves, listened-flag writes, queue creation, and track scanning no longer 500 on unique-constraint violations; the losing writer retries as an update.
• Playlist integrity — duplicate-name detection only maps genuine unique-constraint violations to a validation error (other DB errors surface as server errors); playlist items get a stable secondary sort key; defaultSpeed is clamped on update.
• Favorites shuffle truncation — the client paged past the server's 100-per-page clamp instead of silently shuffling only the first 100 favorites; removed a misleading 500-track request limit from facet browsing.
• User-facing error messages — machine codes like internal_error are translated to human-readable, localized messages in toasts; network failures get a dedicated "could not reach the server" message; fixed "1 items" pluralization on the Playlists page.
• Dark / high-contrast theming — theme-derived --ac-* tokens are re-bound on body, #content[class*="app-audiocheck"], and #app-content.ac-app; css/theme-bind.css loads after Nextcloud theme stylesheets so backgrounds and ink stay paired on every theme (fixes light text on white backgrounds in dark mode). Added --ac-surface and corrected --ac-muted-strong mixing. Guard script scripts/check-theme-tokens.sh enforces token scope in CI.

Fixed

• Scan memory — library scans walk folders depth-first in batches instead of loading every audio file into memory before indexing; cursor now stores a walkStack for resume.
• Concurrent scans — only one worker can claim RUNNING per user via an atomic DB update; lease heartbeats prevent stale takeover mid-batch.
• Playlist integrity — reorder and delete run inside DB transactions so partial failures cannot leave inconsistent sort orders or orphan headers.
• Mini player volume (mobile) — volume icon opens an accessible popover with slider and mute on small screens; desktop keeps inline controls (WCAG 2.1 AA).
• API error logging — safe() and service catch blocks now pass the exception object (['exception' => $e]) to the logger instead of a message context key, which the Nextcloud logger's PSR-3 interpolation silently discarded. Internal errors now log the full class, message, and stack trace.
• Favorites listing 500 — ITags::getFavorites() may return false on transient DB errors; LibraryService now degrades to "no favorites" instead of throwing a TypeError that broke /api/tracks?favorite=1 and all views built on it.
• SQL portability — count queries no longer inherit ORDER BY on non-aggregated columns (rejected by PostgreSQL and MySQL 8 with ONLY_FULL_GROUP_BY); MAX() aggregates use selectAlias() so library sync revisions and playlist sort orders are read correctly; internal Doctrine ArrayParameterType replaced with the public IQueryBuilder::PARAM_INT_ARRAY.
• Upsert races — concurrent progress saves, listened-flag writes, queue creation, and track scanning no longer 500 on unique-constraint violations; the losing writer retries as an update.
• Playlist integrity — duplicate-name detection only maps genuine unique-constraint violations to a validation error (other DB errors surface as server errors); playlist items get a stable secondary sort key; defaultSpeed is clamped on update.
• Favorites shuffle truncation — the client paged past the server's 100-per-page clamp instead of silently shuffling only the first 100 favorites; removed a misleading 500-track request limit from facet browsing.
• User-facing error messages — machine codes like internal_error are translated to human-readable, localized messages in toasts; network failures get a dedicated "could not reach the server" message; fixed "1 items" pluralization on the Playlists page.
• Dark / high-contrast theming — theme-derived --ac-* tokens are re-bound on body, #content[class*="app-audiocheck"], and #app-content.ac-app; css/theme-bind.css loads after Nextcloud theme stylesheets so backgrounds and ink stay paired on every theme (fixes light text on white backgrounds in dark mode). Added --ac-surface and corrected --ac-muted-strong mixing. Guard script scripts/check-theme-tokens.sh enforces token scope in CI.

Added

• Global search — shell search filters Home, Browse, Music, Audiobooks, and Playlists with debounced query sync.
• Sleep timer — duration, end-of-chapter, and end-of-track stops on Now playing.
• Playback start choice — Play all / collection actions offer start from beginning vs continue when saved progress exists.
• Accent-insensitive search — normalized shadow columns (*_norm) and migration backfill library search across web and mobile.

Changed

• App shell — persistent page chrome (breadcrumb, icon header, scope strip, grouped nav hints) aligned with BudgetCheck and MobilityCheck across all routes.
• Section cards — Settings, App settings, Library, Browse, Music/Audiobooks, Playlists, and collection detail use shared sectionCard / collapsibleSectionCard layout.
• Track lists (mobile) — library browse rows render as bordered cards at ≤767px; collection detail tracks match the same pattern.
• Playlist detail actions — secondary header actions collapse into a More actions menu on narrow viewports; Play stays visible.
• Messaging — polite/assertive live regions and toast stack for status feedback.

Fixed

• Browse page — removed duplicate inline page header after shell migration.
• Play all — header action only on Tracks (Music/Audiobooks) and Favorites (Browse) tabs.
• Integration test runner — run-docker-tests.sh resolves the Nextcloud root correctly from the app directory.

Added

• Paginated library APIs — collection, facet, and playlist track endpoints accept page and limit so large libraries stay responsive in the web app and mobile clients.
• Load more in the web UI — Browse collections/facets, Music/Audiobooks browse, and Playlists use server-side pagination with Load more instead of loading entire track lists at once.
• Play now / shuffle on full lists — playlist actions fetch all pages before queuing so Play now and Shuffle play cover the complete list (with the existing 2000-track cap).

Added

• AJAX cron scan ticks — when Nextcloud uses AJAX/webcron instead of system cron, queued library scans advance via /api/scan/ajax-cron while you stay in AudioCheck (library polling and app-wide heartbeat). “Scan now” still runs an initial in-process batch; remaining batches no longer stall until a full server cron run.
• Stale scan lock recovery — abandoned running scan rows older than 10 minutes are treated as resumable so large libraries cannot deadlock after a crash.

Changed

• Library cron callout — explains that scans continue while using AudioCheck on AJAX cron hosts (system cron remains recommended for large libraries).
• AJAX scan tick rate limit — 120 requests per minute per user on /api/scan/ajax-cron.

Fixed

• App Store screenshots — screenshot URLs in info.xml are now single-line (whitespace in the URL text prevented the store from loading images).
• MP4 podcasts missed during scan — recursive library scans only searched *.mp4 when no audio/* files were found; MP4/M4A/M4B files tagged as video/mp4 are now always merged into scan results.

Added

• MP4 audio container support — .mp4, .m4a, and .m4b files tagged as video/mp4 are accepted at the file gate, indexed, and offered in the Files app (extension-filtered for video/mp4).

Changed

• App Store copy (EN + DE) — accurate format list, clarified server-side resume, removed unverifiable WCAG certification wording; accessibility described as design goals.

Fixed

• Queue destroyed on reload / app switch while playing. When restoring a queue that was playing, the browser's autoplay policy rejects audio.play() with NotAllowedError on any fresh document (reload, returning from another Nextcloud app, or a deep-link landing). The player misread that benign rejection as a media failure, marked the track unavailable, skipped through the rest, and then cleared the durable server queue — losing it on every device. loadTrack() now distinguishes autoplay/abort rejections (keep the track loaded and paused, ready to resume with one tap) from genuine media errors. The cross-device queue is preserved and recoverable.
• Durable queue no longer discarded on a real playback error. A track that cannot be decoded in the current browser is treated as "unplayable here", not "deleted by the user"; the curated queue stays recoverable on reload or on another device. Only explicit user actions (clear queue / remove last item) wipe the persisted queue.

Changed

• Library folders UX — folder rows are a single clear line (name, path, track count, Remove). Content type and nested-folder settings live under collapsed Folder options.
• Add folder flow — no content-type modal; Music / Audiobook / Auto-detect shortcuts, path-based type guessing, and automatic scan after add.
• Store listing copy — README and info.xml descriptions clarified (free AGPL web app, formats, get-started steps).
• Nextcloud — max-version remains 34 (current stable 34.0.2).

Tests

• Journey + axe WCAG 2.1 AA coverage for the simplified Library surface (library-folders-ux / nested-scan e2e and PHPUnit contracts).

Changed

• Packaging release: version bump for App Store / GitHub republish; confirmed Nextcloud max-version 34 against latest stable 34.0.2.

Fixed

• Nested audiobook folders skipped during scan (issue #9) — recursive walks no longer drop a book folder that sorts last (or alone) under its author. Layouts like /Audiobooks/Author/Book/*.mp3 and /Audiobooks/Author/Book/CD 1/*.mp3 are indexed completely.
• Scan cursor size on deep trees — walk position is stored in a compact path+offsets form so deep Author/Book/Chapter stacks stay within the varchar(4000) cursor column across resumes.
• Multi-disc grouping — untagged files in CD n / Disc n / Chapter n / Kapitel n folders group under the parent book and keep disc order.
• Same-second scan prune — a new full scan picks a generation strictly newer than any existing last_seen_at, so tracks indexed by a file event in the same second are still pruned when the file becomes inaccessible (e.g. share revoke).
• Batch-boundary infinite rescan — finishing a library root on an exact SCAN_BATCH_SIZE boundary no longer persists an empty walk cursor that restarted the same root forever and skipped prune; pause only while the current root still has work (or before starting the next root).

Changed

• Library UX — clearer “All nested folders” scope, an Author/Book layout tip, and Settings copy that names the nested audiobook pattern.
• Walk depth cap — recursive scans stop descending after 32 folder levels (files at that depth still index) to bound pathological nesting.
• Nextcloud — max-version remains 34 (current stable).

Unreleased

Added

• Mini player ±30 — jump back/forward 30 seconds on the mini transport (same contract as Now Playing, keyboard, and MediaSession).
• Hide mini on Now Playing — the dock is hidden on Aktuelle Wiedergabe (SSR + SPA) so the full player is the only transport strip.

Fixed

• Mini jump aria-labels — PHP t() cannot substitute JS {seconds} placeholders; labels use fixed strings plus client hydrate from SEEK_JUMP_SEC.
• Focus / inert when dock hides — keyboard focus leaves the mini player before it becomes hidden; inert blocks interaction while Now Playing is open.
• No-op relative seek pending — clearing pending immediately when −/+ does not move currentTime (e.g. −30 already at 0) so sticky pending cannot skew the next jump.

Changed

• Responsive mini transport — five-button row stays usable at 320px with ≥44px touch targets for jump controls.

Unreleased

Added

• Jump back / forward 30 seconds on Now Playing — podcast-style −30 / +30 beside play (issue #6). Mini player stays simple; open Now Playing for jumps. Keyboard ←/→ and MediaSession seek use 30 seconds.

Fixed

• Rapid ±30 seek race (web + mobile) — relative seeks accumulate against a pending target so double-taps cannot both read a stale clock and land on the same position; absolute scrub / track change cancels in-flight relative seeks.
• MediaSession seek offset — OS/browser often advertises 10s; product hard-locks seekbackward/seekforward to 30s to match on-screen controls.

Fixed

• Fatal on every file move/rename (issue #7) — NodeEventListener called the non-existent NodeRenamedEvent::getNode(). Rename events expose getSource() / getTarget() only; the listener now routes through ScanService::handleRename(), updates audio index paths in place, purges cross-storage source ids, and never lets indexing exceptions abort DAV MOVE (copy-without-delete).
• Folder move index drift — renaming/moving a folder now rewrites descendant ac_tracks.rel_path and matching ac_libraries.folder_path prefixes (Nextcloud only emits one event for the folder), then assigns library_id immediately from the new paths (no waiting on a background scan). Previously unindexed audio that entered a library is discovered with a bounded synchronous walk; only overflow queues a scan.
• Copied audio never indexed — NodeCopiedEvent is registered; file copies upsert immediately; folder copies use the same bounded index-into-libraries path.
• include_subfolders on path resolve — library matching for node events now honours non-recursive library roots.
• User/group delete listeners — cleanup failures are logged and no longer bubble into the core delete event bus.

Fixed

• Queue-wide listening speed — changing speed on Now playing now sticks for the whole queue. The HTML media load() algorithm was resetting playbackRate to 1× on every track change because only playbackRate (not defaultPlaybackRate) was set before src/load(). Both rates are kept in sync and re-applied after load/play; the UI reads the session speed via getSpeed() instead of the audio element.
• Keyboard speed shortcuts — [ / ] now persist the new rate with the queue/session (same as the speed control).
• Settings default speed — saving the default no longer overrides an active listening session mid-queue.

Changed

• Now playing speed control — clearer “Listening speed” label with − / select / + controls, hint that speed applies to the whole queue, 44px touch targets, and WCAG-focused labels/descriptions.

Fixed

• Favorites listing regression test — unit and integration tests lock in hardened loadFavoriteFileIds() behavior (issue #3).
• Native widget scheme on forced themes (issue #4 follow-up) — color-scheme is now bound to the applied Nextcloud theme (body[data-theme-*]) instead of a blanket light dark, so select dropdowns, spinners, and other browser-drawn widgets no longer render white on a forced dark theme when the OS prefers light (and vice versa). Modals and toasts, which portal onto <body>, get the same binding.
• Active sort chip contrast — active filter chips paired --color-primary-element-light backgrounds with --color-primary-element-text ink, which is tuned for the solid primary color and became dark-on-dark (illegible) on dark themes; they now use --color-primary-element-light-text.
• Stale theme-bind.css after upgrades — the late-loaded theme re-binding stylesheet is now versioned (?v=<app version>) so browsers pick up theming fixes on upgrade instead of serving a months-old cached copy.

Changed

• Nextcloud 34 — raised max-version to 34 for the current stable server release.

Fixed

• Scan memory — library scans walk folders depth-first in batches instead of loading every audio file into memory before indexing; cursor now stores a walkStack for resume.
• Concurrent scans — only one worker can claim RUNNING per user via an atomic DB update; lease heartbeats prevent stale takeover mid-batch.
• Playlist integrity — reorder and delete run inside DB transactions so partial failures cannot leave inconsistent sort orders or orphan headers.
• Mini player volume (mobile) — volume icon opens an accessible popover with slider and mute on small screens; desktop keeps inline controls (WCAG 2.1 AA).
• API error logging — safe() and service catch blocks now pass the exception object (['exception' => $e]) to the logger instead of a message context key, which the Nextcloud logger's PSR-3 interpolation silently discarded. Internal errors now log the full class, message, and stack trace.
• Favorites listing 500 — ITags::getFavorites() may return false on transient DB errors; LibraryService now degrades to "no favorites" instead of throwing a TypeError that broke /api/tracks?favorite=1 and all views built on it.
• SQL portability — count queries no longer inherit ORDER BY on non-aggregated columns (rejected by PostgreSQL and MySQL 8 with ONLY_FULL_GROUP_BY); MAX() aggregates use selectAlias() so library sync revisions and playlist sort orders are read correctly; internal Doctrine ArrayParameterType replaced with the public IQueryBuilder::PARAM_INT_ARRAY.
• Upsert races — concurrent progress saves, listened-flag writes, queue creation, and track scanning no longer 500 on unique-constraint violations; the losing writer retries as an update.
• Playlist integrity — duplicate-name detection only maps genuine unique-constraint violations to a validation error (other DB errors surface as server errors); playlist items get a stable secondary sort key; defaultSpeed is clamped on update.
• Favorites shuffle truncation — the client paged past the server's 100-per-page clamp instead of silently shuffling only the first 100 favorites; removed a misleading 500-track request limit from facet browsing.
• User-facing error messages — machine codes like internal_error are translated to human-readable, localized messages in toasts; network failures get a dedicated "could not reach the server" message; fixed "1 items" pluralization on the Playlists page.
• Dark / high-contrast theming — theme-derived --ac-* tokens are re-bound on body, #content[class*="app-audiocheck"], and #app-content.ac-app; css/theme-bind.css loads after Nextcloud theme stylesheets so backgrounds and ink stay paired on every theme (fixes light text on white backgrounds in dark mode). Added --ac-surface and corrected --ac-muted-strong mixing. Guard script scripts/check-theme-tokens.sh enforces token scope in CI.

Fixed

• Scan memory — library scans walk folders depth-first in batches instead of loading every audio file into memory before indexing; cursor now stores a walkStack for resume.
• Concurrent scans — only one worker can claim RUNNING per user via an atomic DB update; lease heartbeats prevent stale takeover mid-batch.
• Playlist integrity — reorder and delete run inside DB transactions so partial failures cannot leave inconsistent sort orders or orphan headers.
• Mini player volume (mobile) — volume icon opens an accessible popover with slider and mute on small screens; desktop keeps inline controls (WCAG 2.1 AA).
• API error logging — safe() and service catch blocks now pass the exception object (['exception' => $e]) to the logger instead of a message context key, which the Nextcloud logger's PSR-3 interpolation silently discarded. Internal errors now log the full class, message, and stack trace.
• Favorites listing 500 — ITags::getFavorites() may return false on transient DB errors; LibraryService now degrades to "no favorites" instead of throwing a TypeError that broke /api/tracks?favorite=1 and all views built on it.
• SQL portability — count queries no longer inherit ORDER BY on non-aggregated columns (rejected by PostgreSQL and MySQL 8 with ONLY_FULL_GROUP_BY); MAX() aggregates use selectAlias() so library sync revisions and playlist sort orders are read correctly; internal Doctrine ArrayParameterType replaced with the public IQueryBuilder::PARAM_INT_ARRAY.
• Upsert races — concurrent progress saves, listened-flag writes, queue creation, and track scanning no longer 500 on unique-constraint violations; the losing writer retries as an update.
• Playlist integrity — duplicate-name detection only maps genuine unique-constraint violations to a validation error (other DB errors surface as server errors); playlist items get a stable secondary sort key; defaultSpeed is clamped on update.
• Favorites shuffle truncation — the client paged past the server's 100-per-page clamp instead of silently shuffling only the first 100 favorites; removed a misleading 500-track request limit from facet browsing.
• User-facing error messages — machine codes like internal_error are translated to human-readable, localized messages in toasts; network failures get a dedicated "could not reach the server" message; fixed "1 items" pluralization on the Playlists page.
• Dark / high-contrast theming — theme-derived --ac-* tokens are re-bound on body, #content[class*="app-audiocheck"], and #app-content.ac-app; css/theme-bind.css loads after Nextcloud theme stylesheets so backgrounds and ink stay paired on every theme (fixes light text on white backgrounds in dark mode). Added --ac-surface and corrected --ac-muted-strong mixing. Guard script scripts/check-theme-tokens.sh enforces token scope in CI.

Added

• Global search — shell search filters Home, Browse, Music, Audiobooks, and Playlists with debounced query sync.
• Sleep timer — duration, end-of-chapter, and end-of-track stops on Now playing.
• Playback start choice — Play all / collection actions offer start from beginning vs continue when saved progress exists.
• Accent-insensitive search — normalized shadow columns (*_norm) and migration backfill library search across web and mobile.

Changed

• App shell — persistent page chrome (breadcrumb, icon header, scope strip, grouped nav hints) aligned with BudgetCheck and MobilityCheck across all routes.
• Section cards — Settings, App settings, Library, Browse, Music/Audiobooks, Playlists, and collection detail use shared sectionCard / collapsibleSectionCard layout.
• Track lists (mobile) — library browse rows render as bordered cards at ≤767px; collection detail tracks match the same pattern.
• Playlist detail actions — secondary header actions collapse into a More actions menu on narrow viewports; Play stays visible.
• Messaging — polite/assertive live regions and toast stack for status feedback.

Fixed

• Browse page — removed duplicate inline page header after shell migration.
• Play all — header action only on Tracks (Music/Audiobooks) and Favorites (Browse) tabs.
• Integration test runner — run-docker-tests.sh resolves the Nextcloud root correctly from the app directory.

Added

• Paginated library APIs — collection, facet, and playlist track endpoints accept page and limit so large libraries stay responsive in the web app and mobile clients.
• Load more in the web UI — Browse collections/facets, Music/Audiobooks browse, and Playlists use server-side pagination with Load more instead of loading entire track lists at once.
• Play now / shuffle on full lists — playlist actions fetch all pages before queuing so Play now and Shuffle play cover the complete list (with the existing 2000-track cap).

Added

• AJAX cron scan ticks — when Nextcloud uses AJAX/webcron instead of system cron, queued library scans advance via /api/scan/ajax-cron while you stay in AudioCheck (library polling and app-wide heartbeat). “Scan now” still runs an initial in-process batch; remaining batches no longer stall until a full server cron run.
• Stale scan lock recovery — abandoned running scan rows older than 10 minutes are treated as resumable so large libraries cannot deadlock after a crash.

Changed

• Library cron callout — explains that scans continue while using AudioCheck on AJAX cron hosts (system cron remains recommended for large libraries).
• AJAX scan tick rate limit — 120 requests per minute per user on /api/scan/ajax-cron.

Fixed

• App Store screenshots — screenshot URLs in info.xml are now single-line (whitespace in the URL text prevented the store from loading images).
• MP4 podcasts missed during scan — recursive library scans only searched *.mp4 when no audio/* files were found; MP4/M4A/M4B files tagged as video/mp4 are now always merged into scan results.

Added

• MP4 audio container support — .mp4, .m4a, and .m4b files tagged as video/mp4 are accepted at the file gate, indexed, and offered in the Files app (extension-filtered for video/mp4).

Changed

• App Store copy (EN + DE) — accurate format list, clarified server-side resume, removed unverifiable WCAG certification wording; accessibility described as design goals.

Fixed

• Queue destroyed on reload / app switch while playing. When restoring a queue that was playing, the browser's autoplay policy rejects audio.play() with NotAllowedError on any fresh document (reload, returning from another Nextcloud app, or a deep-link landing). The player misread that benign rejection as a media failure, marked the track unavailable, skipped through the rest, and then cleared the durable server queue — losing it on every device. loadTrack() now distinguishes autoplay/abort rejections (keep the track loaded and paused, ready to resume with one tap) from genuine media errors. The cross-device queue is preserved and recoverable.
• Durable queue no longer discarded on a real playback error. A track that cannot be decoded in the current browser is treated as "unplayable here", not "deleted by the user"; the curated queue stays recoverable on reload or on another device. Only explicit user actions (clear queue / remove last item) wipe the persisted queue.