release: v0.8.11 架构收敛与废弃路由清理

- 新增 flow_session.js、flow_actions_shared.js、flow_media_actions_controller.js，统一 Home / Library / Favorites 的会话状态与媒体动作编排
- 移除废弃路由 /browse、/gallery 及旧接口 /api/videos、/api/random-images
- 删除未使用模板 browse.html、favorite.html、gallery.html、index.html

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: ChanMo

docs/release_notes.md

@@ -1,7 +1,8 @@
 # Release Notes
 
 ## Unreleased
-- 待补充
+- 架构收敛：新增 `flow_session.js`、`flow_actions_shared.js`、`flow_media_actions_controller.js`，统一 Home / Library / Favorites 的会话状态与媒体动作编排。
+- 清理废弃能力：移除 `/browse`、`/gallery` 旧路由与 `/api/videos`、`/api/random-images` 旧接口，删除未使用模板 `browse.html`、`favorite.html`、`gallery.html`、`index.html`。
 
 ## v0.8.10 (2026-02-22)
 - 修复 Library/Favorites 的 Quick Viewer 关闭后页面滚动锁死问题：补齐 body 滚动状态恢复逻辑，确保关闭弹层后列表可继续滚动。

tests/test_library_upgrade.py

@@ -1,4 +1,5 @@
 import os
+from urllib.parse import quote
 
 import pytest
 
@@ -51,7 +52,12 @@ def test_library_page_has_mode_tabs_and_no_masonry_label(client):
     assert "scheduleWaterfallRelayout" in body
     assert "flow_ui_shared.js" in body
     assert "flow_state_controller.js" in body
+    assert "flow_session.js" in body
+    assert "flow_actions_shared.js" in body
+    assert "flow_media_actions_controller.js" in body
     assert "createFlowStateController(" in body
+    assert "createFlowSession(" in body
+    assert "createFlowMediaActionsController(" in body
     assert "uiShared.updateMagnifierContent({" in body
 
 
@@ -62,7 +68,12 @@ def test_home_feed_uses_unified_immersive_model(client):
     assert "body.immersive-mode .caption-panel:not(.is-hidden)" in body
     assert "flow_ui_shared.js" in body
     assert "flow_state_controller.js" in body
+    assert "flow_session.js" in body
+    assert "flow_actions_shared.js" in body
+    assert "flow_media_actions_controller.js" in body
     assert "createFlowStateController(" in body
+    assert "createFlowSession(" in body
+    assert "createFlowMediaActionsController(" in body
     assert "flowState.toggleImmersive()" in body
     assert "flowState.setMagnifying(active)" in body
     assert "uiShared.updateMagnifierContent({" in body
@@ -139,19 +150,18 @@ def test_api_library_items_dedupes_symlink_aliases(tmp_path, monkeypatch):
     assert video_items[0]["name"] in {"origin.mp4", "alias.mp4"}
 
 
-def test_legacy_browse_and_gallery_redirects(client):
-    browse = client.get("/browse", follow_redirects=False)
-    assert browse.status_code in {301, 302, 308}
-    assert browse.headers.get("Location", "").startswith("/library?mode=video_latest")
+def test_removed_legacy_routes_and_apis_return_404(client):
+    browse = client.get("/browse")
+    assert browse.status_code == 404
 
-    browse_big = client.get("/browse?filter=big&min_mb=3", follow_redirects=False)
-    assert browse_big.status_code in {301, 302, 308}
-    assert "mode=big_files" in browse_big.headers.get("Location", "")
-    assert "min_mb=3" in browse_big.headers.get("Location", "")
+    gallery = client.get("/gallery")
+    assert gallery.status_code == 404
 
-    gallery = client.get("/gallery", follow_redirects=False)
-    assert gallery.status_code in {301, 302, 308}
-    assert gallery.headers.get("Location", "").startswith("/library?mode=image_random")
+    api_videos = client.get("/api/videos")
+    assert api_videos.status_code == 404
+
+    api_random_images = client.get("/api/random-images?page=1&size=10")
+    assert api_random_images.status_code == 404
 
 
 def test_favorite_scope_and_detail_links(client):
@@ -166,3 +176,37 @@ def test_favorite_scope_and_detail_links(client):
     assert "i01.jpg" in names
     assert any(item["detail_url"] == "/detail/v01.mp4" for item in data["items"])
     assert any(item["detail_url"] == "/image?uri=i01.jpg" for item in data["items"])
+
+
+def test_special_chars_in_media_urls_are_encoded(tmp_path, monkeypatch):
+    media_root = tmp_path / "media"
+    media_root.mkdir(parents=True, exist_ok=True)
+    video_name = "v#1+.mp4"
+    image_name = "a&b.jpg"
+    (media_root / video_name).write_bytes(b"video")
+    (media_root / image_name).write_bytes(b"image")
+
+    data_root = tmp_path / "tiklocal-data"
+    monkeypatch.setenv("MEDIA_ROOT", str(media_root))
+    monkeypatch.setenv("TIKLOCAL_INSTANCE", str(data_root))
+    app = create_app({"TESTING": True, "MEDIA_ROOT": media_root})
+    local_client = app.test_client()
+
+    video_detail = local_client.get(f"/detail/{quote(video_name, safe='')}")
+    assert video_detail.status_code == 200
+    video_body = video_detail.data.decode("utf-8")
+    assert 'src="/media/v%231%2B.mp4"' in video_body
+    assert 'poster="/thumb?uri=v%231%2B.mp4"' in video_body
+    assert "const fileName = \"v#1+.mp4\";" in video_body
+
+    image_detail = local_client.get(f"/image?uri={quote(image_name, safe='')}")
+    assert image_detail.status_code == 200
+    image_body = image_detail.data.decode("utf-8")
+    assert 'src="/media?uri=a%26b.jpg"' in image_body
+    assert "const imageUri = \"a\\u0026b.jpg\";" in image_body
+    assert "const imageUriEncoded = \"a%26b.jpg\";" in image_body
+    assert "window.location.href = '/delete?uri=a%26b.jpg';" in image_body
+
+    media_res = local_client.get(f"/media?uri={quote(video_name, safe='')}", follow_redirects=False)
+    assert media_res.status_code in {301, 302, 308}
+    assert media_res.headers.get("Location", "").endswith("/media/v%231%2B.mp4")

tiklocal/app.py

@@ -418,27 +418,11 @@ def tiktok():
         """Immersive Mixed Media Feed"""
         return render_template('tiktok.html', menu='index')
 
-    @app.route('/gallery')
-    def gallery():
-        """Legacy route: image discovery now maps to Library image mode."""
-        return redirect('/library?mode=image_random')
-
     @app.route('/download')
     def download_view():
         """URL Download Center"""
         return render_template('download.html', menu='download')
 
-    @app.route('/browse')
-    def browse():
-        """Legacy route: video list now maps to Library video mode."""
-        filter_mode = str(request.args.get('filter', 'all')).strip()
-        if filter_mode == 'favorite':
-            return redirect('/favorite')
-        if filter_mode == 'big':
-            min_mb = _read_int_arg('min_mb', 50, minimum=1, maximum=10240)
-            return redirect(f'/library?mode=big_files&min_mb={min_mb}')
-        return redirect('/library?mode=video_latest')
-
     @app.route('/settings/')
     def settings_view():
         from tiklocal.paths import get_thumbnails_dir
@@ -510,6 +494,8 @@ def detail_view(name):
         if target.suffix.lower() in IMAGE_EXTENSIONS:
             return redirect(f"/image?uri={quote(name)}")
         source_meta = download_manager.resolve_source_for_file(name)
+        file_path_encoded = quote(name, safe='/')
+        file_query_encoded = quote(name, safe='')
 
         # Context navigation (prev/next)
         # Note: Re-scanning every request is inefficient for large libraries, 
@@ -523,14 +509,20 @@ def detail_view(name):
             next_item = video_names[index+1] if index < len(video_names)-1 else None
         except ValueError:
             prev_item = next_item = None
+        prev_item_path_encoded = quote(prev_item, safe='/') if prev_item else None
+        next_item_path_encoded = quote(next_item, safe='/') if next_item else None
 
         return render_template(
             'detail.html',
             file=name,
+            file_path_encoded=file_path_encoded,
+            file_query_encoded=file_query_encoded,
             mtime=datetime.datetime.fromtimestamp(target.stat().st_mtime).strftime('%Y-%m-%d %H:%M'),
             size=target.stat().st_size,
             previous_item=prev_item,
             next_item=next_item,
+            previous_item_path_encoded=prev_item_path_encoded,
+            next_item_path_encoded=next_item_path_encoded,
             source_meta=source_meta,
         )
 
@@ -542,7 +534,15 @@ def image_view():
         target = library_service.resolve_path(uri)
         if not target or not target.exists(): return "File not found", 404
         source_meta = download_manager.resolve_source_for_file(uri)
-        return render_template('image_detail.html', image=target, uri=uri, stat=target.stat(), source_meta=source_meta)
+        uri_query_encoded = quote(uri, safe='')
+        return render_template(
+            'image_detail.html',
+            image=target,
+            uri=uri,
+            uri_query_encoded=uri_query_encoded,
+            stat=target.stat(),
+            source_meta=source_meta,
+        )
 
     @app.route("/delete/<path:name>", methods=['POST', 'GET'])
     def delete_view(name):
@@ -608,7 +608,7 @@ def serve_media_legacy():
         # Legacy support for /media?uri=...
         uri = request.args.get('uri')
         if not uri: return "Missing uri", 400
-        return redirect(f"/media/{uri}")
+        return redirect(f"/media/{quote(uri, safe='/')}")
 
     @app.route('/thumb')
     def thumb_view():
@@ -622,36 +622,6 @@ def thumb_view():
 
 
     # --- API Routes ---
-    @app.route('/api/videos')
-    def api_videos():
-        # Clean JSON API
-        selected = recommend_service.get_weighted_selection(file_type='video', limit=20)
-        return json.dumps(selected)
-
-    @app.route('/api/random-images')
-    def api_random_images():
-        page = _read_int_arg('page', 1, minimum=1)
-        size = _read_int_arg('size', 30, minimum=1, maximum=100)
-        seed = request.args.get('seed') or str(random.randint(1, 999999))
-        
-        # Get recommended images (all of them, weighted)
-        # Note: RecommendService currently returns a list. For true scale, we'd paginate inside Service.
-        # For now, consistent with previous behavior, we get all and slice.
-        all_images = recommend_service.get_weighted_selection(file_type='image', limit=99999, seed=seed)
-        
-        total = len(all_images)
-        start = (page - 1) * size
-        end = start + size
-        page_images = all_images[start:end]
-        
-        return {
-            'images': page_images,
-            'page': page,
-            'total': total,
-            'has_more': end < total,
-            'seed': seed
-        }
-
     @app.route('/api/feed/mix')
     def api_feed_mix():
         page = _read_int_arg('page', 1, minimum=1)

tiklocal/static/flow_actions_shared.js

@@ -0,0 +1,69 @@
+(function (global) {
+  'use strict';
+
+  function encodeName(name) {
+    return encodeURIComponent(String(name || ''));
+  }
+
+  async function readJsonResponse(response) {
+    try {
+      return await response.json();
+    } catch (error) {
+      return null;
+    }
+  }
+
+  async function getFavoriteState(name) {
+    var encoded = encodeName(name);
+    if (!encoded) return false;
+    var response = await fetch('/api/favorite/' + encoded);
+    var data = await readJsonResponse(response);
+    return !!(data && data.favorite);
+  }
+
+  async function toggleFavorite(name) {
+    var encoded = encodeName(name);
+    if (!encoded) return false;
+    var response = await fetch('/api/favorite/' + encoded, { method: 'POST' });
+    var data = await readJsonResponse(response);
+    return !!(data && data.favorite);
+  }
+
+  async function getSourceMeta(name) {
+    var encoded = encodeName(name);
+    if (!encoded) return null;
+    var response = await fetch('/api/source?file=' + encoded);
+    var data = await readJsonResponse(response);
+    if (!response.ok || !(data && data.success)) return null;
+    return (data.data && data.data.source) || null;
+  }
+
+  async function getImageMetadata(uri) {
+    var encoded = encodeName(uri);
+    if (!encoded) return { success: false, error: 'missing uri' };
+    var response = await fetch('/api/image/metadata?uri=' + encoded);
+    var data = await readJsonResponse(response);
+    if (data && typeof data === 'object') return data;
+    return { success: false, error: 'invalid response' };
+  }
+
+  async function generateImageMetadata(uri) {
+    if (!uri) return { success: false, error: 'missing uri' };
+    var response = await fetch('/api/image/metadata', {
+      method: 'POST',
+      headers: { 'Content-Type': 'application/json' },
+      body: JSON.stringify({ uri: uri, force: true }),
+    });
+    var data = await readJsonResponse(response);
+    if (data && typeof data === 'object') return data;
+    return { success: false, error: 'invalid response' };
+  }
+
+  global.FlowActionsShared = {
+    getFavoriteState: getFavoriteState,
+    toggleFavorite: toggleFavorite,
+    getSourceMeta: getSourceMeta,
+    getImageMetadata: getImageMetadata,
+    generateImageMetadata: generateImageMetadata,
+  };
+})(window);