feat: provider platform with multiple accounts and a provider store

.github/ISSUE_TEMPLATE/bug.yml

@@ -1,5 +1,5 @@
 name: Bug report
-description: Report a reproducible Spool for Jellyfin defect
+description: Report a reproducible Spool defect
 title: "[Bug]: "
 labels: [bug]
 body:

.github/workflows/build-artifacts.yml

@@ -305,10 +305,10 @@ jobs:
 
 
       - name: Lint compiled QML
-        run: nix develop .#native -c cmake --build build/linux-release/app --target jellyfin-native_qmllint_strict
+        run: nix develop .#native -c cmake --build build/linux-release/app --target spool_qmllint_strict
 
       - name: Launch-test host app UI
-        run: nix develop .#native -c bash tools/launch-native-app.sh build/linux-release/install/bin/jellyfin-native
+        run: nix develop .#native -c bash tools/launch-native-app.sh build/linux-release/install/bin/spool
 
       # A page switch is meant to cost one frame. That is a number, so it is
       # measured every commit rather than noticed once it has got bad.
@@ -327,15 +327,15 @@ jobs:
             SPOOL_BENCH=routes \
             SPOOL_BENCH_OUT="$PWD/dist/render-benchmark/warm.json" \
             SPOOL_BENCH_ITERATIONS=4 \
-            bash tools/launch-native-app.sh build/linux-release/install/bin/jellyfin-native
+            bash tools/launch-native-app.sh build/linux-release/install/bin/spool
           # The same walk with every page dropped between switches: what a
           # memory-starved device pays, tracked but not gated.
           nix develop .#native -c env \
             SPOOL_BENCH=routes \
             SPOOL_BENCH_COLD=1 \
             SPOOL_BENCH_OUT="$PWD/dist/render-benchmark/cold.json" \
             SPOOL_BENCH_ITERATIONS=4 \
-            bash tools/launch-native-app.sh build/linux-release/install/bin/jellyfin-native
+            bash tools/launch-native-app.sh build/linux-release/install/bin/spool
 
       - name: Report render latency
         run: |
@@ -394,17 +394,17 @@ jobs:
             echo 'error: extracted AppImage contains qmltypes metadata' >&2
             exit 1
           fi
-          elf_args=(elf "$extracted" --root usr/bin/jellyfin-native)
-          test ! -f "$extracted/usr/bin/secret-tool" || elf_args+=(--root usr/bin/secret-tool)
+          elf_args=(elf "$extracted" --root usr/bin/spool)
+          test ! -f "$extracted/usr/libexec/secret-tool" || elf_args+=(--root usr/libexec/secret-tool)
           while IFS= read -r elf; do elf_args+=(--root "${elf#"$extracted/"}"); done \
             < <(find "$extracted/usr/lib" -type f -name 'libmpv.so.*' | sort)
           for root in usr/plugins usr/qml; do
             test ! -d "$extracted/$root" || while IFS= read -r elf; do
               elf_args+=(--root "${elf#"$extracted/"}")
             done < <(find "$extracted/$root" -type f -name '*.so*' | sort)
           done
-          for soname in ld-linux-x86-64.so.2 libc.so.6 libdl.so.2 libm.so.6 libmvec.so.1 \
-            libpthread.so.0 libresolv.so.2 librt.so.1 libutil.so.1 libGLESv2.so.2 libgbm.so.1 libglapi.so.0
+          # glibc is bundled; only these come from the host.
+          for soname in libGLESv2.so.2 libgbm.so.1 libglapi.so.0
           do
             elf_args+=(--allow-system "$soname")
           done
@@ -420,7 +420,7 @@ jobs:
 
       - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.0
         with:
-          name: spool-for-jellyfin-linux
+          name: spool-linux
           path: |
             dist/*.AppImage
             dist/*-linux-x86_64.tar.zst
@@ -577,7 +577,7 @@ jobs:
             --parallel "$(sysctl -n hw.ncpu)" --output-on-failure
 
       - name: Lint compiled QML
-        run: nix develop .#native --no-write-lock-file -c cmake --build build/macos/app --target jellyfin-native_qmllint_strict
+        run: nix develop .#native --no-write-lock-file -c cmake --build build/macos/app --target spool_qmllint_strict
 
       - name: Load bundled Vulkan runtime
         run: |
@@ -613,7 +613,7 @@ jobs:
 
       - name: Launch-test macOS app UI
         env:
-          JELLYFIN_LAUNCH_TEST_QPA_PLATFORM: cocoa
+          SPOOL_LAUNCH_TEST_QPA_PLATFORM: cocoa
         run: nix develop .#native --no-write-lock-file -c bash tools/launch-native-app.sh build/macos/install/Spool.app
 
       - name: Sign macOS application
@@ -650,7 +650,7 @@ jobs:
           if [[ '${{ inputs.enable_macos_signing }}' == true ]]; then
             codesign --verify --strict --deep --verbose=2 "$app"
           fi
-          JELLYFIN_LAUNCH_TEST_QPA_PLATFORM=cocoa \
+          SPOOL_LAUNCH_TEST_QPA_PLATFORM=cocoa \
             bash tools/launch-native-app.sh "$app"
           bash tools/detach-dmg.sh "$mountpoint"
           trap - EXIT
@@ -670,7 +670,7 @@ jobs:
 
       - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.0
         with:
-          name: spool-for-jellyfin-macos-dmg-${{ matrix.arch }}
+          name: spool-macos-dmg-${{ matrix.arch }}
           path: |
             dist/*.dmg
             dist/*.dmg.app.tar.gz
@@ -798,7 +798,7 @@ jobs:
           test -n "$data_tar"
           tar -tf "$data_tar" | tee "$work/data-files.txt" >/dev/null
           grep -Eq '(^|/)appinfo\.json$' "$work/data-files.txt"
-          grep -Eq '(^|/)bin/jellyfin-native$' "$work/data-files.txt"
+          grep -Eq '(^|/)bin/spool$' "$work/data-files.txt"
 
           mkdir "$work/data"
           tar -xf "$data_tar" -C "$work/data"
@@ -824,12 +824,12 @@ jobs:
               appinfo = json.load(handle)
 
           assert appinfo["id"] == "com.sachk.spool", appinfo.get("id")
-          assert appinfo["main"] == "bin/jellyfin-native", appinfo.get("main")
+          assert appinfo["main"] == "bin/spool", appinfo.get("main")
           assert re.fullmatch(r"\d+\.\d+\.\d+", appinfo["version"]), appinfo.get("version")
           print(f"Validated {appinfo['id']} {appinfo['version']} IPK")
           PY
 
-          launcher="$(find "$work/data" -path '*/bin/jellyfin-native' -type f -print -quit)"
+          launcher="$(find "$work/data" -path '*/bin/spool' -type f -print -quit)"
           test -n "$launcher"
           test -x "$launcher"
           python3 - "$launcher" <<'PY'
@@ -843,9 +843,9 @@ jobs:
               header = handle.read(20)
 
           if header[:4] != b"\x7fELF":
-              binary = binary.with_name("jellyfin-native.real")
-              assert binary.is_file(), "launcher is not ELF and jellyfin-native.real is missing"
-              assert os.access(binary, os.X_OK), "jellyfin-native.real is not executable"
+              binary = binary.with_name("spool.real")
+              assert binary.is_file(), "launcher is not ELF and spool.real is missing"
+              assert os.access(binary, os.X_OK), "spool.real is not executable"
               with binary.open("rb") as handle:
                   header = handle.read(20)
 
@@ -860,7 +860,7 @@ jobs:
 
       - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.0
         with:
-          name: spool-for-jellyfin-webos-ipk
+          name: spool-webos-ipk
           path: build/*.ipk
           if-no-files-found: error
           retention-days: ${{ inputs.release && 1 || 7 }}
@@ -1028,15 +1028,15 @@ jobs:
         if: ${{ failure() && matrix.abi == 'x86_64' }}
         uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.0
         with:
-          name: spool-for-jellyfin-android-launch-test
+          name: spool-android-launch-test
           path: |
             build/android/launch-test
             build/android/emulator.log
           retention-days: 1
 
       - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.0
         with:
-          name: spool-for-jellyfin-android-apks-${{ matrix.abi }}
+          name: spool-android-apks-${{ matrix.abi }}
           path: dist/android/*.apk
           if-no-files-found: error
           retention-days: ${{ inputs.release && 1 || 7 }}
@@ -1083,12 +1083,12 @@ jobs:
       # will wait for and one they will not.
       - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
         with:
-          name: spool-for-jellyfin-android-apks-arm64-v8a
+          name: spool-android-apks-arm64-v8a
           path: dist/android
 
       - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
         with:
-          name: spool-for-jellyfin-android-apks-armeabi-v7a
+          name: spool-android-apks-armeabi-v7a
           path: dist/android
 
       - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
@@ -1152,7 +1152,7 @@ jobs:
 
       - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.0
         with:
-          name: spool-for-jellyfin-android-apk-universal
+          name: spool-android-apk-universal
           path: dist/android/spool-universal.apk
           if-no-files-found: error
           retention-days: ${{ inputs.release && 1 || 7 }}
@@ -1166,8 +1166,8 @@ jobs:
     env:
       QT_VERSION: ${{ needs.toolchain.outputs.qt_version }}
       QT_ARCH: win64_${{ needs.toolchain.outputs.qt_windows_kit }}
-      JELLYFIN_QT_ROOT: C:\Qt\${{ needs.toolchain.outputs.qt_version }}\${{ needs.toolchain.outputs.qt_windows_kit }}
-      JELLYFIN_QCORO_ROOT: C:\Qt\${{ needs.toolchain.outputs.qcoro_windows_prefix }}
+      SPOOL_QT_ROOT: C:\Qt\${{ needs.toolchain.outputs.qt_version }}\${{ needs.toolchain.outputs.qt_windows_kit }}
+      SPOOL_QCORO_ROOT: C:\Qt\${{ needs.toolchain.outputs.qcoro_windows_prefix }}
 
     steps:
       - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.0.2
@@ -1265,7 +1265,7 @@ jobs:
       - name: Upload portable executable
         uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.0
         with:
-          name: spool-for-jellyfin-windows-x64-portable
+          name: spool-windows-x64-portable
           path: |
             dist/*-Portable.exe
           if-no-files-found: error
@@ -1274,7 +1274,7 @@ jobs:
       - name: Upload installer executable
         uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.0
         with:
-          name: spool-for-jellyfin-windows-x64-installer
+          name: spool-windows-x64-installer
           path: |
             dist/*-Setup.exe
           if-no-files-found: error

.github/workflows/release.yml

@@ -37,7 +37,7 @@ jobs:
       - name: Upload corresponding source
         uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.0
         with:
-          name: spool-for-jellyfin-corresponding-source
+          name: spool-corresponding-source
           path: release-source/*
           retention-days: 1
 
@@ -280,7 +280,7 @@ jobs:
           fi
           gh release download "$TAG" --repo "$GITHUB_REPOSITORY" \
             --pattern SHA256SUMS.txt --dir "$RUNNER_TEMP"
-          bundle="Spool-for-Jellyfin-$version-linux-x86_64.tar.zst"
+          bundle="Spool-$version-linux-x86_64.tar.zst"
           checksum="$(awk -v want="$bundle" \
             '{ sub(/^\*/, "", $2); if ($2 == want) print $1 }' \
             "$RUNNER_TEMP/SHA256SUMS.txt")"

.github/workflows/rescan-release-sboms.yml

@@ -24,11 +24,11 @@ jobs:
           mkdir sboms
           tag="$(gh release list --exclude-drafts --limit 1 --json tagName --jq '.[0].tagName')"
           test -n "$tag"
-          gh release download "$tag" --pattern '*.cdx.json' --dir sboms
-          test -n "$(find sboms -type f -name '*.cdx.json' -print -quit)"
+          gh release download "$tag" --pattern '*.syft.json' --pattern 'ffmpeg-vex.json' --dir sboms
+          test -n "$(find sboms -type f -name '*.syft.json' -print -quit)"
       - name: Enforce vulnerability policy
         run: |
           set -euo pipefail
-          for sbom in sboms/*.cdx.json; do
-            "$RUNNER_TEMP/release-tools/grype" "sbom:$sbom" --fail-on high --only-fixed
+          for sbom in sboms/*.syft.json; do
+            "$RUNNER_TEMP/release-tools/grype" "sbom:$sbom" --vex sboms/ffmpeg-vex.json --fail-on high --only-fixed
           done

.qmlls.ini

@@ -1,4 +1,4 @@
 [General]
-; QML files live at qml/ and qml/*/, so include both relative depths.
-buildDir=../build/linux-dev/app:../../build/linux-dev/app
+; QML files live at qml/, qml/*/ and qml/providers/*/, so include every relative depth.
+buildDir=../build/linux-dev/app:../../build/linux-dev/app:../../../build/linux-dev/app
 no-cmake-calls=true

AGENTS.md

@@ -2,7 +2,7 @@
 
 ## Project
 
-- Spool for Jellyfin client for webOS and desktop.
+- Spool: a media player for webOS, desktop and Android.
 - Prefer a smaller, faster, easier-to-extend codebase over compatibility scaffolding or speculative abstractions.
 - The app is prerelease software: bump/reset caches on schema changes instead of adding migrations or fallback readers.
 - `mpv/` is a submodule. Commit mpv changes inside `mpv/`, then commit its pointer here.
@@ -29,18 +29,31 @@
 
 ## Module Seam
 
-The goal is one core that several backends can sit on (spool-jellyfin,
-spool-plex, spool-stremio). `CMakeLists.txt` groups sources into
-`SPOOL_PLATFORM_SOURCES`, `SPOOL_PLAYER_SOURCES`, `SPOOL_SHELL_SOURCES` and
-`SPOOL_JELLYFIN_SOURCES` to mark where that cut goes. They still build as one
-library; the grouping exists so the split stays mechanical.
+The app knows no media backend. Every source is a provider package (JS logic
+and QML screens) run by `src/provider/`; `docs/providers.md` describes the
+pieces and `sdk/` is the provider contract (API 0.2). Jellyfin, Emby and Plex live in
+spool-player/spool-jellyfin, spool-emby and spool-plex and are bundled from
+the pins in `providers/lock.json`.
 
-- Do not add a `src/api/` or `src/discovery/` include to the platform, player
-  or shell groups. Four such dependencies already exist and are the work a
-  split has to undo first: `PlayerController`, `PlaybackReporter`,
-  `PlayQueueController` and `SettingsController` each take a
-  `JellyfinApiFacade`, and `configurePlatformPlaybackCapabilities()` is
-  handed one.
+- Core is everything under `src/` except `src/providers/` (native providers;
+  only `LocalProvider` today) and `src/main.cpp`, the composition root. Core
+  never includes `src/providers/`; `tools/check-module-seam.sh` is the
+  `module-seam` ctest.
+- The app sees one `Provider`, `SourceHub`, which routes to every enabled
+  account. IDs leaving it are scoped (`<8 hex>:<id>`) and stay opaque to
+  routes, caches and QML. Pages reach media through `Catalog`,
+  `SearchSource`, `UserItemStateSink`, `ArtworkSource`, `PlaybackSource` and
+  `StreamQualityControl`, never a provider type.
+- Shared QML gates optional controls on the `ProviderCapabilities` singleton
+  (search, userItemState, playbackReporting, segments, groupPlayback,
+  remoteControl, streamQuality, trickplay): what the enabled accounts can do
+  between them. Provider-specific UI is the provider's own QML, mounted by
+  `shell/ProviderSurface` with a `ProviderUiContext`; item-menu entries come
+  from the manifest's `actions`.
+- Group playback and remote control are generic (`GroupPlaybackController`,
+  `AppControllerRemote.cpp`); providers translate their protocol into
+  `group` and `remote` events. Do not touch `src/player` or
+  `qml/pages/Player*` for provider work beyond renames.
 - `qml/primitives` and `qml/theme` reach exactly two singletons, `Art.url` and
   `Settings.uiScalePercent`. Keep it that way; page- and shell-level QML is
   where backend-shaped data belongs.
@@ -63,7 +76,7 @@ library; the grouping exists so the split stays mechanical.
 - Build without launching with `nix run .#build`.
 - Run the test suite the way CI does with `nix run .#tests` (release build, then the same ctest invocation and exclusions as the workflow).
 - Leave interactive UI testing to the user. Do not drive their desktop with xdotool/xdgtool or similar input automation, or launch visible smoke tests unless explicitly requested. Use builds and isolated/offscreen checks for verification.
-- Use `nix develop .#native -c ...` for targeted development commands (e.g. `cmake --preset linux-dev`, then `cmake --build build/linux-dev/app --target jellyfin-native`).
+- Use `nix develop .#native -c ...` for targeted development commands (e.g. `cmake --preset linux-dev`, then `cmake --build build/linux-dev/app --target spool`).
 - The image-diagnostics equivalents remain `nix run .#image-debug-build` followed by `nix run .#image-debug`.
 - Batch coherent edits, then run one build and one `qmlformat`/`clang-format` invocation over all touched files; don't build or format file-by-file.