v0.1.9.9.1 — folder structure, silent scan drops, ghost thumbnails, view-triggered rescan

Three user-reported bugs fixed, one new feature, and a three-round adversarial audit of the whole change.

Fixed

• Category pages flattened your folder structure. Grouping was computed during the scan and then thrown away. Category pages now show one section per folder, with numbered files (01 - …) in their intended sequence — for every "single titles" category, not just Education. Existing libraries heal on their next scan.
• Files silently missing after a scan. Six causes closed: symlinked files and folders were invisible to the scanner (external symlinks are now followed — internal aliases are deliberately skipped so the real path stays canonical); .m2ts/.mts weren't scanned; the sample filter dropped (and even retro-deleted) sub-2-minute numbered lessons and SxxEyy episodes; S00 specials collided with season 1 and vanished; one unreadable file aborted the rest of the scan; skipped inserts still counted as "added". Every remaining skip now logs its reason.
• Thumbnails from a deleted category appearing on new media. Thumbnails were keyed by database row id, which SQLite recycles after a delete. They're now keyed by the file's path — a recycled id cannot resolve to another file's image — old-format thumbnails are cleaned up at boot, and the browser revalidates instead of caching blindly for a day.

New

• View-triggered rescan. Opening a category quietly rescans exactly that category's folders in the background and updates the page when new files land. At most once per folder per cooldown window (VLMP_AUTO_RESCAN_COOLDOWN_SECONDS, default 300, 0 disables); folders scan sequentially, never in a burst; hidden folders stay invisible to non-admin viewers on every new surface. The manual Scan button in Settings is unchanged.

Versioning note

First five-part release: the trailing .1 is a hotfix on the published 0.1.9.9 build. Five-part tags are immutable exactly like four-part ones; the moving image pointers remain 0.1.9, 0.1, and latest (all three move to this release). See CONTRIBUTING § Versioning.

Windows

vlmp-setup-0.1.9.9.1-win-x64.exe below (bundled Node 22 + NSSM service install). Verify with Get-FileHash against the .sha256 asset.

Audit

The entire change ran a three-round adversarial audit (two scoped reviewers, then a fix-the-fix round, then verdict verification). Five critical defects were caught before release — all introduced and fixed within this same change set, none shipped in any published version. Details in docs/AUDIT-2026-07-19.md.