- Add JWT Bearer token validation to Rust API via OIDC provider JWKS
with automatic key rotation and 1-hour cache
- Remove x-api-key auth support and built-in web UI from furumi-web-player,
leaving it as a pure API server
- Add /auth/token endpoint to Node player server to expose OIDC access
tokens to the frontend
- Move Node player auth endpoints from /api/* to /auth/* to avoid
path conflicts with Rust API
- Add static file serving to Node Express server for production
single-container deployment
- Fix SameSite=Strict cookie issue breaking OIDC redirect flow (use Lax)
- Add Dockerfile.node-player with multi-stage Node.js build
- Add CI workflows for node-player Docker image (dev + release)
- Optimize Rust Dockerfiles with dependency caching layer
- Update docker-compose with OIDC env vars and OLLAMA_MODEL support
- Cherry-pick agent LLM client fixes from DEV branch
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
- Replace /api/chat with /v1/chat/completions endpoint
- Use json_schema response_format (LM Studio does not support json_object)
- Make schema parameter optional in call_ollama to support different schemas per use case
- Add dedicated normalize schema (normalized_metadata) with release_kind field
instead of release_type to avoid model repetition loops
- Add dedicated merge schema (artist_merge) so model no longer confuses
normalize and merge response structures
- Add retry with frequency_penalty=1.5 on parse failure to suppress repetition
- Add id3 crate as fallback metadata reader for MP3 files with large embedded
cover art that exceed Symphonia probe limit of 1MB
Co-Authored-By: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>
ab
Ultradesu