From 5facbc96572fa87fbe1533579511c6e59a154e72 Mon Sep 17 00:00:00 2001
From: wukko <me@wukko.me>
Date: Fri, 13 Sep 2024 23:28:14 +0600
Subject: [PATCH 01/14] api/tests/bluesky: update deleted post test

---
 api/src/util/tests.json | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/api/src/util/tests.json b/api/src/util/tests.json
index dee2f291..78340691 100644
--- a/api/src/util/tests.json
+++ b/api/src/util/tests.json
@@ -1467,8 +1467,8 @@
             }
         },
         {
-            "name": "deleted post",
-            "url": "https://bsky.app/profile/samuel.bsky.team/post/3l2udah76ch2c",
+            "name": "deleted post/invalid user",
+            "url": "https://bsky.app/profile/notreal.bsky.team/post/3l2udah76ch2c",
             "params": {},
             "expected": {
                 "code": 400,

From 0ccd08470b80915b4c1bd5bd7ad2ed06acfe213e Mon Sep 17 00:00:00 2001
From: wukko <me@wukko.me>
Date: Fri, 13 Sep 2024 23:57:18 +0600
Subject: [PATCH 02/14] web/about/general: more clarity in privacy section

---
 web/src/routes/about/general/+page.svelte | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/web/src/routes/about/general/+page.svelte b/web/src/routes/about/general/+page.svelte
index 3236515c..a7ecacdf 100644
--- a/web/src/routes/about/general/+page.svelte
+++ b/web/src/routes/about/general/+page.svelte
@@ -18,7 +18,7 @@
         <h3>leading privacy</h3>
         <p>
             all requests to backend are anonymous and all tunnels are encrypted.
-            we have a strict zero log policy and don't track <i>anything at all</i>.
+            we have a strict zero log policy and don't track <i>anything</i> about individual people.
         </p>
         <p>
             to avoid caching or storing downloaded files, cobalt processes them on-fly, sending processed pieces directly to client.

From 99937f61f6a4ede75fc57a6690959f76dde8809b Mon Sep 17 00:00:00 2001
From: GuriZenit <gurizenit@gmail.com>
Date: Sat, 14 Sep 2024 02:06:36 -0300
Subject: [PATCH 03/14] api/setup: fix wrong misc path

---
 api/src/util/setup.js | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/api/src/util/setup.js b/api/src/util/setup.js
index 7796ea22..e9d1beae 100644
--- a/api/src/util/setup.js
+++ b/api/src/util/setup.js
@@ -1,7 +1,7 @@
 import { existsSync, unlinkSync, appendFileSync } from "fs";
 import { createInterface } from "readline";
-import { Cyan, Bright } from "./misc/console-text.js";
-import { loadJSON } from "./misc/load-from-fs.js";
+import { Cyan, Bright } from "../misc/console-text.js";
+import { loadJSON } from "../misc/load-from-fs.js";
 import { execSync } from "child_process";
 
 const { version } = loadJSON("./package.json");

From 1bf0d983240c7b551a2d4295274623d822397132 Mon Sep 17 00:00:00 2001
From: lath <38570701+halozat@users.noreply.github.com>
Date: Mon, 16 Sep 2024 07:14:29 +0200
Subject: [PATCH 04/14] web/DonateShareCard: fix copy button not using i18n
 (#750)

---
 web/src/components/donate/DonateShareCard.svelte | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/web/src/components/donate/DonateShareCard.svelte b/web/src/components/donate/DonateShareCard.svelte
index 7da48af8..3225c7ad 100644
--- a/web/src/components/donate/DonateShareCard.svelte
+++ b/web/src/components/donate/DonateShareCard.svelte
@@ -59,7 +59,7 @@
                 <div class="action-button-icon">
                     <CopyIcon check={copied} />
                 </div>
-                copy
+                {$t("button.copy")}
             </button>
 
             {#if device.supports.share}

From 86268eab3f46e831d7ef9d7e13fc5b2fd80ba20e Mon Sep 17 00:00:00 2001
From: dumbmoron <log@riseup.net>
Date: Mon, 16 Sep 2024 13:45:58 +0000
Subject: [PATCH 05/14] api-client: add dist folder to gitignore

---
 packages/api-client/.gitignore | 1 +
 1 file changed, 1 insertion(+)
 create mode 100644 packages/api-client/.gitignore

diff --git a/packages/api-client/.gitignore b/packages/api-client/.gitignore
new file mode 100644
index 00000000..1521c8b7
--- /dev/null
+++ b/packages/api-client/.gitignore
@@ -0,0 +1 @@
+dist

From d93e97e06b78fd6de42297d8a01aece55b33f4a1 Mon Sep 17 00:00:00 2001
From: dumbmoron <log@riseup.net>
Date: Mon, 16 Sep 2024 15:13:24 +0000
Subject: [PATCH 06/14] web/LanguageDropdown: unbind `locale` from select
 dropdown

---
 web/src/components/settings/LanguageDropdown.svelte | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/web/src/components/settings/LanguageDropdown.svelte b/web/src/components/settings/LanguageDropdown.svelte
index dd357dd8..89f2b44f 100644
--- a/web/src/components/settings/LanguageDropdown.svelte
+++ b/web/src/components/settings/LanguageDropdown.svelte
@@ -1,5 +1,4 @@
 <script lang="ts">
-    import locale from "$lib/i18n/locale";
     import languages from "$i18n/languages.json";
 
     import { t, locales } from "$lib/i18n/translations";
@@ -10,10 +9,12 @@
     $: currentSetting = $settings.appearance.language;
     $: disabled = $settings.appearance.autoLanguage;
 
-    const updateLocale = (lang: string) => {
+    const updateLocale = (event: Event) => {
+       const target = event.target as HTMLSelectElement;
+
         updateSetting({
             appearance: {
-                language: lang as keyof typeof languages,
+                language: target.value as keyof typeof languages,
             },
         });
     };
@@ -34,8 +35,7 @@
         </div>
         <select
             id="setting-dropdown-appearance-language"
-            bind:value={$locale}
-            on:change={() => updateLocale($locale)}
+            on:change={updateLocale}
             {disabled}
         >
             {#each $locales as value}

From 66479a979194719a4cce99bba222432a4566a579 Mon Sep 17 00:00:00 2001
From: dumbmoron <log@riseup.net>
Date: Mon, 16 Sep 2024 15:13:44 +0000
Subject: [PATCH 07/14] web/translations: add fallback locale name to unnamed
 locales

---
 web/src/lib/i18n/translations.ts | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/web/src/lib/i18n/translations.ts b/web/src/lib/i18n/translations.ts
index 24dc3057..9a65c761 100644
--- a/web/src/lib/i18n/translations.ts
+++ b/web/src/lib/i18n/translations.ts
@@ -7,7 +7,7 @@ import type {
     LocalizationContent
 } from '$lib/types/i18n';
 
-import languages from '$i18n/languages.json';
+import _languages from '$i18n/languages.json';
 
 const locFiles = import.meta.glob('$i18n/*/**/*.json');
 const parsedLocfiles: StructuredLocfileInfo = {};
@@ -22,6 +22,8 @@ for (const [path, loader] of Object.entries(locFiles)) {
 }
 
 const defaultLocale = 'en';
+const languages: Record<string, string> = _languages;
+
 const config: Config<{
     value?: string;
     formats?: string;
@@ -30,6 +32,8 @@ const config: Config<{
 }> = {
     fallbackLocale: defaultLocale,
     translations: Object.keys(parsedLocfiles).reduce((obj, lang) => {
+        languages[lang] ??= `${lang} (missing name)`;
+
         return {
             ...obj,
             [lang]: { languages }

From b04c204492be57c7e896db2845bcfc04e1003781 Mon Sep 17 00:00:00 2001
From: Alec Armbruster <35377827+alectrocute@users.noreply.github.com>
Date: Mon, 16 Sep 2024 08:33:40 -0700
Subject: [PATCH 08/14] web: fix spelling for various tenses of `tunnel` (#755)

https://github.com/imputnet/cobalt/pull/755
---
 web/i18n/en/settings.json                 | 4 ++--
 web/src/routes/about/privacy/+page.svelte | 4 ++--
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/web/i18n/en/settings.json b/web/i18n/en/settings.json
index 85c3d58b..fea15d29 100644
--- a/web/i18n/en/settings.json
+++ b/web/i18n/en/settings.json
@@ -65,7 +65,7 @@
     "metadata.filename.basic": "basic",
     "metadata.filename.pretty": "pretty",
     "metadata.filename.nerdy": "nerdy",
-    "metadata.filename.description": "filename style will only be used for files tunnelled by cobalt. some services don't support filename styles other than classic.",
+    "metadata.filename.description": "filename style will only be used for files tunneled by cobalt. some services don't support filename styles other than classic.",
 
     "metadata.filename.preview.video": "Video Title",
     "metadata.filename.preview.audio": "Audio Title - Audio Author",
@@ -98,7 +98,7 @@
     "privacy.analytics.description": "anonymous traffic analytics are needed to get an approximate number of active cobalt users. no identifiable information about you is ever stored. all processed data is anonymized and aggregated.\n\nwe use a self-hosted plausible instance that doesn't use cookies and is fully compliant with GDPR, CCPA, and PECR.",
     "privacy.analytics.learnmore": "learn more about plausible's dedication to privacy.",
 
-    "privacy.tunnel": "tunnelling",
+    "privacy.tunnel": "tunneling",
     "privacy.tunnel.title": "always tunnel files",
     "privacy.tunnel.description": "cobalt will hide your ip address, browser info, and bypass local network restrictions. when enabled, files will also have readable filenames that otherwise would be gibberish.",
 
diff --git a/web/src/routes/about/privacy/+page.svelte b/web/src/routes/about/privacy/+page.svelte
index 9dd9b737..28bdba59 100644
--- a/web/src/routes/about/privacy/+page.svelte
+++ b/web/src/routes/about/privacy/+page.svelte
@@ -25,10 +25,10 @@
     <section id="saving">
         <h3>saving</h3>
         <p>
-            when using saving functionality, in some cases cobalt will encrypt & temporarily store information needed for tunnelling. it's stored in processing server's RAM for 90 seconds and irreversibly purged afterwards. no one has access to it, even instance owners, as long as they don't modify the official cobalt image.
+            when using saving functionality, in some cases cobalt will encrypt & temporarily store information needed for tunneling. it's stored in processing server's RAM for 90 seconds and irreversibly purged afterwards. no one has access to it, even instance owners, as long as they don't modify the official cobalt image.
         </p>
         <p>
-            processed/tunnelled files are never cached anywhere. everything is tunnelled live. cobalt's saving functionality is essentially a fancy proxy service.
+            processed/tunneled files are never cached anywhere. everything is tunneled live. cobalt's saving functionality is essentially a fancy proxy service.
         </p>
     </section>
 

From 39eca27e534f1f502234627b8c2807fad6012a24 Mon Sep 17 00:00:00 2001
From: wukko <me@wukko.me>
Date: Tue, 17 Sep 2024 14:14:43 +0600
Subject: [PATCH 09/14] web/changelogs/10: lowball the user count estimate

---
 web/changelogs/10.0.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/web/changelogs/10.0.md b/web/changelogs/10.0.md
index 1a178b75..86da6d3b 100644
--- a/web/changelogs/10.0.md
+++ b/web/changelogs/10.0.md
@@ -47,7 +47,7 @@ and for nerds, we have a giant list of backend changes (that we are also excited
 
 this update allows us to actually innovate and develop new & exciting features. we are no longer held back by the legacy codebase. first feature of such kind is on-device remuxing. go check it out!
 
-oh yeah, we now have 2.5 million monthly users. kind of insane.
+oh yeah, we now have over 2 million monthly users. kind of insane.
 
 we hope you enjoy this update as much as we enjoyed making it. it was a really fun summer project for both of us.
 

From baddb134706aa83968cc524ba92fd35e6dc00cb8 Mon Sep 17 00:00:00 2001
From: wukko <me@wukko.me>
Date: Tue, 17 Sep 2024 19:48:59 +0600
Subject: [PATCH 10/14] web/i18n/settings: update language section descriptions

---
 web/i18n/en/settings.json | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/web/i18n/en/settings.json b/web/i18n/en/settings.json
index fea15d29..90b2e0f6 100644
--- a/web/i18n/en/settings.json
+++ b/web/i18n/en/settings.json
@@ -88,10 +88,10 @@
     "accessibility.motion.description": "disables animations and transitions whenever possible.",
 
     "language": "language",
-    "language.auto.title": "use default browser language",
-    "language.auto.description": "automatically picks the best language for you. if preferred browser language isn't available, english is used instead.",
+    "language.auto.title": "automatic selection",
+    "language.auto.description": "cobalt will use your browser's default language if translation is available. if not, english will be used instead.",
     "language.preferred.title": "preferred language",
-    "language.preferred.description": "if any text isn’t translated to the preferred language, it will fall back to english.",
+    "language.preferred.description": "this language will be used when automatic selection is disabled. any text that isn't translated will be displayed in english.",
 
     "privacy.analytics": "anonymous traffic analytics",
     "privacy.analytics.title": "don't contribute to analytics",

From 29f967a3ec463cc431a74fde325483199cad12c6 Mon Sep 17 00:00:00 2001
From: dumbmoron <log@riseup.net>
Date: Tue, 17 Sep 2024 15:37:01 +0000
Subject: [PATCH 11/14] api: fix accept & content-type validation when not
 using authentication

---
 api/src/core/api.js | 20 ++++++++++++--------
 1 file changed, 12 insertions(+), 8 deletions(-)

diff --git a/api/src/core/api.js b/api/src/core/api.js
index 51ec1697..fdd13ce1 100644
--- a/api/src/core/api.js
+++ b/api/src/core/api.js
@@ -105,6 +105,18 @@ export const runAPI = (express, app, __dirname) => {
     app.post('/', apiLimiter);
     app.use('/tunnel', apiLimiterStream);
 
+    app.post('/', (req, res, next) => {
+        if (!acceptRegex.test(req.header('Accept'))) {
+            return fail(res, "error.api.header.accept");
+        }
+
+        if (!acceptRegex.test(req.header('Content-Type'))) {
+            return fail(res, "error.api.header.content_type");
+        }
+
+        next();
+    });
+
     app.post('/', (req, res, next) => {
         if (!env.turnstileSecret || !env.jwtSecret) {
             return next();
@@ -128,14 +140,6 @@ export const runAPI = (express, app, __dirname) => {
                 return fail(res, "error.api.auth.jwt.invalid");
             }
 
-            if (!acceptRegex.test(req.header('Accept'))) {
-                return fail(res, "error.api.header.accept");
-            }
-
-            if (!acceptRegex.test(req.header('Content-Type'))) {
-                return fail(res, "error.api.header.content_type");
-            }
-
             req.authorized = true;
         } catch {
             return fail(res, "error.api.generic");

From d560c0d34a1a088593260a789831dcc86a2c5746 Mon Sep 17 00:00:00 2001
From: dumbmoron <log@riseup.net>
Date: Wed, 18 Sep 2024 18:03:04 +0000
Subject: [PATCH 12/14] api: return correct extension for gif downloads in api
 response

---
 api/src/misc/utils.js              | 11 +++++++++++
 api/src/processing/match-action.js | 10 ++++++----
 api/src/stream/types.js            |  2 +-
 3 files changed, 18 insertions(+), 5 deletions(-)

diff --git a/api/src/misc/utils.js b/api/src/misc/utils.js
index 05192d97..34666d1c 100644
--- a/api/src/misc/utils.js
+++ b/api/src/misc/utils.js
@@ -65,3 +65,14 @@ export function merge(a, b) {
 
     return a;
 }
+
+export function splitFilenameExtension(filename) {
+    const parts = filename.split('.');
+    const ext = parts.pop();
+
+    if (!parts.length) {
+        return [ ext, "" ]
+    } else {
+        return [ parts.join('.'), ext ]
+    }
+}
diff --git a/api/src/processing/match-action.js b/api/src/processing/match-action.js
index 6b5395d4..4fdb24f6 100644
--- a/api/src/processing/match-action.js
+++ b/api/src/processing/match-action.js
@@ -3,6 +3,7 @@ import createFilename from "./create-filename.js";
 import { createResponse } from "./request.js";
 import { audioIgnore } from "./service-config.js";
 import { createStream } from "../stream/manage.js";
+import { splitFilenameExtension } from "../misc/utils.js";
 
 export default function({ r, host, audioFormat, isAudioOnly, isAudioMuted, disableMetadata, filenameStyle, twitterGif, requestIP, audioBitrate, alwaysProxy }) {
     let action,
@@ -32,10 +33,11 @@ export default function({ r, host, audioFormat, isAudioOnly, isAudioMuted, disab
     }
 
     if (action === "muteVideo" && isAudioMuted && !r.filenameAttributes) {
-        const parts = r.filename.split(".");
-        const ext = parts.pop();
-
-        defaultParams.filename = `${parts.join(".")}_mute.${ext}`;
+        const [ name, ext ] = splitFilenameExtension(r.filename);
+        defaultParams.filename = `${name}_mute.${ext}`;
+    } else if (action === "gif") {
+        const [ name ] = splitFilenameExtension(r.filename);
+        defaultParams.filename = `${name}.gif`;
     }
 
     switch (action) {
diff --git a/api/src/stream/types.js b/api/src/stream/types.js
index aa9becf2..184af873 100644
--- a/api/src/stream/types.js
+++ b/api/src/stream/types.js
@@ -291,7 +291,7 @@ const convertGif = (streamInfo, res) => {
         const [,,, muxOutput] = process.stdio;
 
         res.setHeader('Connection', 'keep-alive');
-        res.setHeader('Content-Disposition', contentDisposition(streamInfo.filename.split('.')[0] + ".gif"));
+        res.setHeader('Content-Disposition', contentDisposition(streamInfo.filename));
 
         pipe(muxOutput, res, shutdown);
 

From 8ae48fa524a3270fcc5f99052e53a14ae31f740e Mon Sep 17 00:00:00 2001
From: dumbmoron <log@riseup.net>
Date: Sat, 21 Sep 2024 13:23:12 +0000
Subject: [PATCH 13/14] api: allow colons (`:`) in url paths

---
 api/src/processing/service-config.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/api/src/processing/service-config.js b/api/src/processing/service-config.js
index 67542e97..f091d448 100644
--- a/api/src/processing/service-config.js
+++ b/api/src/processing/service-config.js
@@ -176,7 +176,7 @@ export const services = {
 Object.values(services).forEach(service => {
     service.patterns = service.patterns.map(
         pattern => new UrlPattern(pattern, {
-            segmentValueCharset: UrlPattern.defaultOptions.segmentValueCharset + '@\\.'
+            segmentValueCharset: UrlPattern.defaultOptions.segmentValueCharset + '@\\.:'
         })
     )
 })

From f83537a73e825a89c427b94126d0b3d21b56ad7b Mon Sep 17 00:00:00 2001
From: dumbmoron <log@riseup.net>
Date: Sat, 21 Sep 2024 13:24:15 +0000
Subject: [PATCH 14/14] tests/bsky: fix tests & use `did`s instead of usernames

---
 api/src/util/tests.json | 16 ++++++++--------
 1 file changed, 8 insertions(+), 8 deletions(-)

diff --git a/api/src/util/tests.json b/api/src/util/tests.json
index 78340691..17952595 100644
--- a/api/src/util/tests.json
+++ b/api/src/util/tests.json
@@ -1401,7 +1401,7 @@
     "bsky": [
         {
             "name": "horizontal video",
-            "url": "https://bsky.app/profile/haileyok.com/post/3l3giwtwp222m",
+            "url": "https://bsky.app/profile/did:plc:oisofpd7lj26yvgiivf3lxsi/post/3l3giwtwp222m",
             "params": {},
             "expected": {
                 "code": 200,
@@ -1410,7 +1410,7 @@
         },
         {
             "name": "horizontal video, recordWithMedia",
-            "url": "https://bsky.app/profile/juicysteak117.gay/post/3l3wonhk23g2i",
+            "url": "https://bsky.app/profile/did:plc:ywbm3iywnhzep3ckt6efhoh7/post/3l3wonhk23g2i",
             "params": {},
             "expected": {
                 "code": 200,
@@ -1419,7 +1419,7 @@
         },
         {
             "name": "vertical video",
-            "url": "https://bsky.app/profile/haileyok.com/post/3l3jhpomhjk2m",
+            "url": "https://bsky.app/profile/did:plc:oisofpd7lj26yvgiivf3lxsi/post/3l3jhpomhjk2m",
             "params": {},
             "expected": {
                 "code": 200,
@@ -1428,7 +1428,7 @@
         },
         {
             "name": "vertical video (muted)",
-            "url": "https://bsky.app/profile/haileyok.com/post/3l3jhpomhjk2m",
+            "url": "https://bsky.app/profile/did:plc:oisofpd7lj26yvgiivf3lxsi/post/3l3jhpomhjk2m",
             "params": {
                 "downloadMode": "mute"
             },
@@ -1439,7 +1439,7 @@
         },
         {
             "name": "vertical video (audio)",
-            "url": "https://bsky.app/profile/haileyok.com/post/3l3jhpomhjk2m",
+            "url": "https://bsky.app/profile/did:plc:oisofpd7lj26yvgiivf3lxsi/post/3l3jhpomhjk2m",
             "params": {
                 "downloadMode": "audio"
             },
@@ -1450,7 +1450,7 @@
         },
         {
             "name": "single image",
-            "url": "https://bsky.app/profile/thehardyboycats.bsky.social/post/3l33flpoygt26",
+            "url": "https://bsky.app/profile/did:plc:k4a7d65fcyevbrnntjxh57go/post/3l33flpoygt26",
             "params": {},
             "expected": {
                 "code": 200,
@@ -1459,7 +1459,7 @@
         },
         {
             "name": "several images",
-            "url": "https://bsky.app/profile/tracey-m.bsky.social/post/3kzxuxbiul626",
+            "url": "https://bsky.app/profile/did:plc:rai7s6su2sy22ss7skouedl7/post/3kzxuxbiul626",
             "params": {},
             "expected": {
                 "code": 200,
@@ -1476,4 +1476,4 @@
             }
         }
     ]
-}
\ No newline at end of file
+}