Get a track's embedding from the database.

Get user information. Requires `read_users` permission. Never exposes password hashes or JWT tokens.

Check if a blob exists locally.

Get the track health manager for failure tracking and auto-repair.

Install a theme from a git repository URL. The full installation flow: 1. Validate git URL 2. Clone repo to temp directory 3. Parse and validate `the

Check whether a file extension is in the allowed list.

Returns `true` if the domain looks like a local/unreachable address.

Load a plugin by its database ID.

Load a single plugin from its DB model.

* Log a listen event with behavioral signals to `POST /history`. * * Sends the track's `duration_listened`, whether it `completed` naturally, * and

Returns the path for storing metadata files (covers). Falls back to `base_path` if no separate metadata path is configured.

Check whether the given extension is an AIFF format that needs conversion.

Get the node address (includes relay URL and direct addresses).

Publish a track's audio data to the local blob store. Returns the content hash (BLAKE3) that identifies the blob.

Publish a newly uploaded track to the P2P blob store and broadcast an announcement to all connected peers. This is best-effort: failures are logged b

Quality score for ranking track copies across peers. Higher score = better quality / more desirable copy.

Read HTTP response with body size limit.

Rebuild the local Bloom filter from the database using paginated queries. Instead of loading all tracks into memory at once, this fetches pages of `R

Get the relay URL this node is connected to (if any). By default, iroh connects to n0.computer production relay servers.

Remove a peer's index (when peer is removed from registry).

Resolve a relative media URL to an absolute one.

Save the listing token to instance settings.

Get the search index.

Seed algorithm: artist-based radio. Builds a mix from two phases, each fetching up to `count * 2` candidates then truncating to its quota before merg

Seed algorithm: genre-based radio. Single-phase: fetches up to `count * 3` (capped at 200) tracks matching the given genre, shuffles them, and return

Seed algorithm: personal mix. Draws from listen history and favorites across three phases, each fetching up to `count * 2` candidates then truncating

Seed algorithm: similarity-based radio using vector embeddings. Uses pgvector cosine distance to find tracks with similar audio characteristics to th

Send a DELETE request to the listing server to immediately remove this instance. Requires a valid listing token. If no token is available, the instan

Send a heartbeat to the listing server. Handles the 409 "domain already registered" case by attempting to verify ownership via the listing server's h

Set a config value for this plugin. Requires `config_access` permission.

Set lyrics on a track. Requires `write_tracks` permission. Since the tracks table does not have a dedicated lyrics column, lyrics are stored in plugi

Gracefully shutdown the P2P node.

Simple deterministic hash for strings (FNV-1a inspired).

Fetch a cover art blob from a peer, write it to the local audio storage, and update the album's `cover_url` in the database.

SECURITY: Resolve a media file path, ensuring it stays within the base directory. Returns `None` if the file doesn't exist or would escape the base.

Swap the page favicon to the track's cover art, or restore the default.

Store a track embedding in the database. Uses `INSERT ... ON CONFLICT` to upsert — if the track already has an embedding, it is updated.

SECURITY: Validate audio file magic bytes to prevent disguised file uploads

Validate a version string as semver.

Walk a directory and ensure all files have allowed extensions. Rejects any .js, .html, or other disallowed files.

Validate WASM imports against the allowed namespace list.

Internal config write — bypasses permission check.

Internal: accept incoming connections in a loop.

Backfill `content_hash` for local tracks that were imported before P2P was enabled. Reads each file, publishes it to the blob store (BLAKE3), and upda

Generate and store embeddings for all tracks that don't have one yet. This is meant to be called as a background task on startup or after new tracks

Get a reference to the blob cache.

Broadcast a track announcement to all online peers concurrently. Called after a track is published to the local blob store. Uses a semaphore to limit

Broadcast our Bloom filter to all online peers for search routing.

Helper: build a tsquery string from user input. Splits on whitespace, wraps each word with `:*` for prefix matching, and joins with `&` for AND semant

Check if safe mode is requested via URL param or localStorage.

Check if our domain appears in the listing server's public node list.

Clear all records.

Returns a reference to the sandbox configuration.

Connect to the database and return a connection pool

Connect to a list of seed peers by EndpointId. Pings each one and registers it in the registry.

Recursively copy a directory and its contents.

Get all tracks that are in a degraded state (need recovery).

Get all dereferenced tracks.

Detect the best locale from the browser

Whether DHT discovery is enabled for this node.

Get the number of direct addresses the endpoint is listening on.

Disable a plugin: unload it and set status to "disabled" in DB.

Download cover image bytes from URL.

Enable a plugin: set status to "enabled" in DB and load it.

Encode audio quality into 4 dimensions.

Encode popularity (play count) into 4 dimensions using log scaling.

Run metadata enrichment as a background task, updating the tracker with progress. ## Flow 1. Queries all tracks without a `musicbrainz_id` (not yet

Batch-fetch artist and album data for a set of tracks and build enriched `TrackResponse` objects. Reuses the same pattern as `list_tracks` and `list_r

Evict the oldest entry to make room.

Send our peer list to a remote peer and receive theirs.

Fetch artist bio and image from MusicBrainz relations → Wikipedia. Falls back to searching Wikipedia by artist name if no direct link. Returns (bio, i

Fetch cover art from Cover Art Archive for a release MBID.

Find a local track matching the given criteria.

Generate and store the embedding for a single track. Called when a new track is added to the library.