navidrome/scanner
Deluan Quintão 2dc0983629
fix: miscellaneous fixes for shares, artwork resize, auth limits, and watcher start (#6098)
* fix(artwork): cap declared image dimensions before resizing

resizeStaticImage decoded the image with a raw image.Decode, so a small file declaring huge dimensions (e.g. a PNG header claiming 50k x 50k) forced a multi-gigabyte allocation on the serve-time resize path. The processor already guards its own decodes with decodeCapped; use it here too so the same 64M pixel cap applies to uploaded and sidecar images served through the cache.

* fix(share): validate every resource ID and reject mixed types when saving

Save only resolved the first ID in ResourceIDs to pick the resource type; the remaining IDs were never checked. A non-existent or hidden entity could ride along behind a valid first ID, and IDs of different kinds were accepted as one share. Resolve every ID as the current user and require all of them to be the same kind, returning ErrNotFound or ErrValidation otherwise.

* fix(share): scope album and media file shares to the owner's libraries

loadMedia already loaded artist and playlist shares as the share owner, but album and media_file shares used the repository context. Public share rendering carries no user, so the library filter was skipped and the share listed albums and tracks from libraries the owner cannot access. Streaming was already blocked, so only metadata leaked. Use ownerContext for all resource types.

* fix(server): limit login payload size and surface first-admin creation errors

The unauthenticated /login and /createAdmin handlers decoded the request body
with no size limit. Add a body-limit middleware to the /auth route group that
caps the payload at 8KiB, which is plenty for a username and password. Also
make createAdminUser return the datastore error instead of logging it and
returning nil, which previously let createAdmin proceed to a login attempt for
a user that was never saved.

* fix(conf): create the log file readable only by the owner

The log file was created with mode 0644, so other local users could read it. Logs can contain usernames, paths and, at trace level, request details, so create it with 0600 instead. Existing files keep their current mode.

* fix(lastfm): stop logging the auth token when fetching the session key fails

The Last.fm callback token was written to the log as a structured field on failure. The redaction hook only matches value patterns, so it was not masked. Drop the field; the request ID is enough to correlate the failure.

* fix(db): allow a music folder path containing a single quote on fresh databases

The library table migration interpolated conf.Server.MusicFolder into the SQL with fmt.Sprintf, so a path such as /music/Rock 'n' Roll produced invalid SQL and the migration failed on a brand new database. Bind the path as a parameter instead.

* fix(scanner): return an error when the folder watcher cannot start

When notify.Watch failed, the watcher goroutine logged the error and exited, but never signalled the started channel, so Start blocked until its context was cancelled and left the watching flag set. Call notify.Watch before spawning the event loop, so Start returns the error right away, the started/failed signalling goes away, and the storage can be watched again later.

* fix(jellyfin): limit the login request body size

The Jellyfin AuthenticateByName endpoint decoded its JSON body with no size limit, the same gap the native /auth routes had. Export the login body-limit middleware from the server package and apply it to the Jellyfin login route, before the optional per-IP rate limiter, so both unauthenticated login surfaces share the same 8KiB cap.

* fix(scanner): share one scanner instance across all injectors

Each wire injector built its own scanner controller, so the Subsonic and native API routers held a different instance from the ones used by the startup scan, the periodic scan, the folder watcher and the SIGUSR1 handler. Status reads the in-progress file and folder counters from its own instance, so getScanStatus reported scanning=true with count=0 for every scan not started through the API. Verified live with a startup scan: master reports count 0 while scanning, this branch reports the real counts. Expose the controller through a singleton, as the watcher, broker and play tracker already are, and wire everything to it. New stays available for tests that need isolated controllers.

* fix(share): do not panic when a media file share has no visible tracks

Share.CoverArtID picked a random track for media file shares without checking that any track was loaded. The tracks are empty when the files went missing, were deleted, or the owner lost access to their library, and the public share page then panicked inside the random pick and returned a 500. Return an empty artwork ID instead, so the page renders with the placeholder cover. The old guard on the split resource IDs was dead code, since SplitN always returns at least one element.
2026-09-11 15:03:54 -04:00
..
metadata_old fix(scanner): stop logging expected lyrics sniff misses as warnings (#5702) 2026-07-02 09:46:57 -04:00
controller.go fix: miscellaneous fixes for shares, artwork resize, auth limits, and watcher start (#6098) 2026-09-11 15:03:54 -04:00
controller_test.go fix: miscellaneous fixes for shares, artwork resize, auth limits, and watcher start (#6098) 2026-09-11 15:03:54 -04:00
external.go refactor: multiple syntax updates for Go 1.26 2026-05-19 18:02:36 -03:00
external_test.go feat(scanner): implement file-based target passing for large target lists 2025-12-16 16:08:32 -05:00
folder_entry.go fix(scanner): detect in-place playlist edits via the folder content hash (#5914) 2026-08-19 13:11:00 -04:00
folder_entry_test.go fix(scanner): detect in-place playlist edits via the folder content hash (#5914) 2026-08-19 13:11:00 -04:00
ignore_checker.go refactor: run Go modernize (#5002) 2026-02-08 09:57:30 -05:00
ignore_checker_test.go feat(scanner): implement selective folder scanning and file system watcher improvements (#4674) 2025-11-14 22:15:43 -05:00
image_changes.go fix(artwork): re-resolve artwork when image files change on disk (#5965) 2026-08-16 13:24:07 -04:00
phase_1_folders.go fix(scanner): detect in-place playlist edits via the folder content hash (#5914) 2026-08-19 13:11:00 -04:00
phase_2_missing_tracks.go fix(scanner): prevent duplicate tracks when multiple missing files match same target (#5183) 2026-03-14 00:07:21 -04:00
phase_2_missing_tracks_test.go fix(scanner): prevent duplicate tracks when multiple missing files match same target (#5183) 2026-03-14 00:07:21 -04:00
phase_3_refresh_albums.go feat(scanner): implement selective folder scanning and file system watcher improvements (#4674) 2025-11-14 22:15:43 -05:00
phase_3_refresh_albums_test.go feat(scanner): implement selective folder scanning and file system watcher improvements (#4674) 2025-11-14 22:15:43 -05:00
phase_4_playlists.go feat(artwork): new artwork pipeline with background resolution and Low Quality Image Placeholders (#5847) 2026-08-09 15:03:27 -04:00
phase_4_playlists_test.go feat(artwork): new artwork pipeline with background resolution and Low Quality Image Placeholders (#5847) 2026-08-09 15:03:27 -04:00
README.md docs(scanner): add overview README document 2025-04-25 12:54:29 -04:00
scanner.go fix(cli): accept absolute paths in selective scan --target (#5947) 2026-08-12 14:55:04 -04:00
scanner_benchmark_test.go fix: assorted scanner, plugin, and server fixes from the Go 1.27 work (#6050) 2026-08-30 21:24:50 -04:00
scanner_internal_test.go fix(cli): accept absolute paths in selective scan --target (#5947) 2026-08-12 14:55:04 -04:00
scanner_multilibrary_test.go feat(artwork): new artwork pipeline with background resolution and Low Quality Image Placeholders (#5847) 2026-08-09 15:03:27 -04:00
scanner_selective_test.go feat(artwork): new artwork pipeline with background resolution and Low Quality Image Placeholders (#5847) 2026-08-09 15:03:27 -04:00
scanner_suite_test.go fix: assorted scanner, plugin, and server fixes from the Go 1.27 work (#6050) 2026-08-30 21:24:50 -04:00
scanner_test.go test(scanner): fix Windows flake in the quick-scan artist image spec (#6093) 2026-09-06 13:40:43 -04:00
walk_dir_tree.go fix(scanner): detect in-place playlist edits via the folder content hash (#5914) 2026-08-19 13:11:00 -04:00
walk_dir_tree_test.go fix(scanner): resolve file symlinks with the production local storage FS (#5755) 2026-07-10 10:52:05 -04:00
watcher.go feat(scanner): add Scanner.IgnoreDotFolders to allow indexing dot-prefixed folders (#5568) 2026-06-19 19:13:16 -04:00
watcher_test.go fix(cache): write the completion marker before closing the cache writer (#5927) 2026-08-10 14:10:05 -04:00

Navidrome Scanner: Technical Overview

This document provides a comprehensive technical explanation of Navidrome's music library scanner system.

Architecture Overview

The Navidrome scanner is built on a multi-phase pipeline architecture designed for efficient processing of music files. It systematically traverses file system directories, processes metadata, and maintains a database representation of the music library. A key performance feature is that some phases run sequentially while others execute in parallel.

flowchart TD
    subgraph "Scanner Execution Flow"
        Controller[Scanner Controller] --> Scanner[Scanner Implementation]
        
        Scanner --> Phase1[Phase 1: Folders Scan]
        Phase1 --> Phase2[Phase 2: Missing Tracks]
        
        Phase2 --> ParallelPhases
        
        subgraph ParallelPhases["Parallel Execution"]
            Phase3[Phase 3: Refresh Albums]
            Phase4[Phase 4: Playlist Import]
        end
        
        ParallelPhases --> FinalSteps[Final Steps: GC + Stats]
    end
    
    %% Triggers that can initiate a scan
    FileChanges[File System Changes] -->|Detected by| Watcher[Filesystem Watcher]
    Watcher -->|Triggers| Controller
    
    ScheduledJob[Scheduled Job] -->|Based on Scanner.Schedule| Controller
    ServerStartup[Server Startup] -->|If Scanner.ScanOnStartup=true| Controller
    ManualTrigger[Manual Scan via UI/API] -->|Admin user action| Controller
    CLICommand[Command Line: navidrome scan] -->|Direct invocation| Controller
    PIDChange[PID Configuration Change] -->|Forces full scan| Controller
    DBMigration[Database Migration] -->|May require full scan| Controller
    
    Scanner -.->|Alternative| External[External Scanner Process]

The execution flow shows that Phases 1 and 2 run sequentially, while Phases 3 and 4 execute in parallel to maximize performance before the final processing steps.

Core Components

Scanner Controller (controller.go)

This is the entry point for all scanning operations. It provides:

  • Public API for initiating scans and checking scan status
  • Event broadcasting to notify clients about scan progress
  • Serialization of scan operations (prevents concurrent scans)
  • Progress tracking and monitoring
  • Error collection and reporting
type Scanner interface {
    // ScanAll starts a full scan of the music library. This is a blocking operation.
    ScanAll(ctx context.Context, fullScan bool) (warnings []string, err error)
    Status(context.Context) (*StatusInfo, error)
}

Scanner Implementation (scanner.go)

The primary implementation that orchestrates the four-phase scanning pipeline. Each phase follows the Phase interface pattern:

type phase[T any] interface {
    producer() ppl.Producer[T]
    stages() []ppl.Stage[T]
    finalize(error) error
    description() string
}

This design enables:

  • Type-safe pipeline construction with generics
  • Modular phase implementation
  • Separation of concerns
  • Easy measurement of performance

External Scanner (external.go)

The External Scanner is a specialized implementation that offloads the scanning process to a separate subprocess. This is specifically designed to address memory management challenges in long-running Navidrome instances.

// scannerExternal is a scanner that runs an external process to do the scanning. It is used to avoid
// memory leaks or retention in the main process, as the scanner can consume a lot of memory. The
// external process will be spawned with the same executable as the current process, and will run
// the "scan" command with the "--subprocess" flag.
//
// The external process will send progress updates to the main process through its STDOUT, and the main
// process will forward them to the caller.
sequenceDiagram
    participant MP as Main Process
    participant ES as External Scanner
    participant SP as Subprocess (navidrome scan --subprocess)
    participant FS as File System
    participant DB as Database
    
    Note over MP: DevExternalScanner=true
    MP->>ES: ScanAll(ctx, fullScan)
    activate ES
    
    ES->>ES: Locate executable path
    ES->>SP: Start subprocess with args:<br>scan --subprocess --configfile ... etc.
    activate SP
    
    Note over ES,SP: Create pipe for communication
    
    par Subprocess executes scan
        SP->>FS: Read files & metadata
        SP->>DB: Update database
    and Main process monitors progress
        loop For each progress update
            SP->>ES: Send encoded progress info via stdout pipe
            ES->>MP: Forward progress info
        end
    end
    
    SP-->>ES: Subprocess completes (success/error)
    deactivate SP
    ES-->>MP: Return aggregated warnings/errors
    deactivate ES

Technical details:

  1. Process Isolation

    • Spawns a separate process using the same executable
    • Uses the --subprocess flag to indicate it's running as a child process
    • Preserves configuration by passing required flags (--configfile, --datafolder, etc.)
  2. Inter-Process Communication

    • Uses a pipe for bidirectional communication
    • Encodes/decodes progress updates using Go's gob encoding for efficient binary transfer
    • Properly handles process termination and error propagation
  3. Memory Management Benefits

    • Scanning operations can be memory-intensive, especially with large music libraries
    • Memory leaks or excessive allocations are automatically cleaned up when the process terminates
    • Main Navidrome process remains stable even if scanner encounters memory-related issues
  4. Error Handling

    • Detects non-zero exit codes from the subprocess
    • Propagates error messages back to the main process
    • Ensures resources are properly cleaned up, even in error conditions

Scanning Process Flow

Phase 1: Folder Scan (phase_1_folders.go)

This phase handles the initial traversal and media file processing.

flowchart TD
    A[Start Phase 1] --> B{Full Scan?}
    B -- Yes --> C[Scan All Folders]
    B -- No --> D[Scan Modified Folders]
    C --> E[Read File Metadata]
    D --> E
    E --> F[Create Artists]
    E --> G[Create Albums]
    F --> H[Save to Database]
    G --> H
    H --> I[Mark Missing Folders]
    I --> J[End Phase 1]

Technical implementation details:

  1. Folder Traversal

    • Uses walkDirTree to traverse the directory structure
    • Handles symbolic links and hidden files
    • Processes .ndignore files for exclusions
    • Maps files to appropriate types (audio, image, playlist)
  2. Metadata Extraction

    • Processes files in batches (defined by filesBatchSize = 200)
    • Extracts metadata using the configured storage backend
    • Converts raw metadata to MediaFile objects
    • Collects and normalizes tag information
  3. Album and Artist Creation

    • Groups tracks by album ID
    • Creates album records from track metadata
    • Handles album ID changes by tracking previous IDs
    • Creates artist records from track participants
  4. Database Persistence

    • Uses transactions for atomic updates
    • Preserves album annotations across ID changes
    • Updates library-artist mappings
    • Marks missing tracks for later processing
    • Pre-caches artwork for performance

Phase 2: Missing Tracks Processing (phase_2_missing_tracks.go)

This phase identifies tracks that have moved or been deleted.

flowchart TD
    A[Start Phase 2] --> B[Load Libraries]
    B --> C[Get Missing and Matching Tracks]
    C --> D[Group by PID]
    D --> E{Match Type?}
    E -- Exact --> F[Update Path]
    E -- Same PID --> G[Update If Only One]
    E -- Equivalent --> H[Update If No Better Match]
    F --> I[End Phase 2]
    G --> I
    H --> I

Technical implementation details:

  1. Track Identification Strategy

    • Uses persistent identifiers (PIDs) to track tracks across scans
    • Loads missing tracks and potential matches from the database
    • Groups tracks by PID to limit comparison scope
  2. Match Analysis

    • Applies three levels of matching criteria:
      • Exact match (full metadata equivalence)
      • Single match for a PID
      • Equivalent match (same base path or similar metadata)
    • Prioritizes matches in order of confidence
  3. Database Update Strategy

    • Preserves the original track ID
    • Updates the path to the new location
    • Deletes the duplicate entry
    • Uses transactions to ensure atomicity

Phase 3: Album Refresh (phase_3_refresh_albums.go)

This phase updates album information based on the latest track metadata.

flowchart TD
    A[Start Phase 3] --> B[Load Touched Albums]
    B --> C[Filter Unmodified]
    C --> D{Changes Detected?}
    D -- Yes --> E[Refresh Album Data]
    D -- No --> F[Skip]
    E --> G[Update Database]
    F --> H[End Phase 3]
    G --> H
    H --> I[Refresh Statistics]

Technical implementation details:

  1. Album Selection Logic

    • Loads albums that have been "touched" in previous phases
    • Uses a producer-consumer pattern for efficient processing
    • Retrieves all media files for each album for completeness
  2. Change Detection

    • Rebuilds album metadata from associated tracks
    • Compares album attributes for changes
    • Skips albums with no media files
    • Avoids unnecessary database updates
  3. Statistics Refreshing

    • Updates album play counts
    • Updates artist play counts
    • Maintains consistency between related entities

Phase 4: Playlist Import (phase_4_playlists.go)

This phase imports and updates playlists from the file system.

flowchart TD
    A[Start Phase 4] --> B{AutoImportPlaylists?}
    B -- No --> C[Skip]
    B -- Yes --> D{Admin User Exists?}
    D -- No --> E[Log Warning & Skip]
    D -- Yes --> F[Load Folders with Playlists]
    F --> G{For Each Folder}
    G --> H[Read Directory]
    H --> I{For Each Playlist}
    I --> J[Import Playlist]
    J --> K[Pre-cache Artwork]
    K --> L[End Phase 4]
    C --> L
    E --> L

Technical implementation details:

  1. Playlist Discovery

    • Loads folders known to contain playlists
    • Focuses on folders that have been touched in previous phases
    • Handles both playlist formats (M3U, NSP)
  2. Import Process

    • Uses the core.Playlists service for import
    • Handles both regular and smart playlists
    • Updates existing playlists when changed
    • Pre-caches playlist cover art
  3. Configuration Awareness

    • Respects the AutoImportPlaylists setting
    • Requires an admin user for playlist import
    • Logs appropriate messages for configuration issues

Final Processing Steps

After the four main phases, several finalization steps occur:

  1. Garbage Collection

    • Removes dangling tracks with no files
    • Cleans up empty albums
    • Removes orphaned artists
    • Deletes orphaned annotations
  2. Statistics Refresh

    • Updates artist song and album counts
    • Refreshes tag usage statistics
    • Updates aggregate metrics
  3. Library Status Update

    • Marks scan as completed
    • Updates last scan timestamp
    • Stores persistent ID configuration
  4. Database Optimization

    • Performs database maintenance
    • Optimizes tables and indexes
    • Reclaims space from deleted records

File System Watching

The watcher system (watcher.go) provides real-time monitoring of file system changes:

flowchart TD
    A[Start Watcher] --> B[For Each Library]
    B --> C[Start Library Watcher]
    C --> D[Monitor File Events]
    D --> E{Change Detected?}
    E -- Yes --> F[Wait for More Changes]
    F --> G{Time Elapsed?}
    G -- Yes --> H[Trigger Scan]
    G -- No --> F
    H --> I[Wait for Scan Completion]
    I --> D

Technical implementation details:

  1. Event Throttling

    • Uses a timer to batch changes
    • Prevents excessive rescanning
    • Configurable wait period
  2. Library-specific Watching

    • Each library has its own watcher goroutine
    • Translates paths to library-relative paths
    • Filters irrelevant changes
  3. Platform Adaptability

    • Uses storage-provided watcher implementation
    • Supports different notification mechanisms per platform
    • Graceful fallback when watching is not supported

Edge Cases and Optimizations

Handling Album ID Changes

The scanner carefully manages album identity across scans:

  • Tracks previous album IDs to handle ID generation changes
  • Preserves annotations when IDs change
  • Maintains creation timestamps for consistent sorting

Detecting Moved Files

A sophisticated algorithm identifies moved files:

  1. Groups missing and new files by their Persistent ID
  2. Applies multiple matching strategies in priority order
  3. Updates paths rather than creating duplicate entries

Resuming Interrupted Scans

If a scan is interrupted:

  • The next scan detects this condition
  • Forces a full scan if the previous one was a full scan
  • Continues from where it left off for incremental scans

Memory Efficiency

Several strategies minimize memory usage:

  • Batched file processing (200 files at a time)
  • External scanner process option
  • Database-side filtering where possible
  • Stream processing with pipelines

Concurrency Control

The scanner implements a sophisticated concurrency model to optimize performance:

  1. Phase-Level Parallelism:

    • Phases 1 and 2 run sequentially due to their dependencies
    • Phases 3 and 4 run in parallel using the chain.RunParallel() function
    • Final steps run sequentially to ensure data consistency
  2. Within-Phase Concurrency:

    • Each phase has configurable concurrency for its stages
    • For example, phase_1_folders.go processes folders concurrently: ppl.NewStage(p.processFolder, ppl.Name("process folder"), ppl.Concurrency(conf.Server.DevScannerThreads))
    • Multiple stages can exist within a phase, each with its own concurrency level
  3. Pipeline Architecture Benefits:

    • Producer-consumer pattern minimizes memory usage
    • Work is streamed through stages rather than accumulated
    • Back-pressure is automatically managed
  4. Thread Safety Mechanisms:

    • Atomic counters for statistics gathering
    • Mutex protection for shared resources
    • Transactional database operations

Configuration Options

The scanner's behavior can be customized through several configuration settings that directly affect its operation:

Core Scanner Options

Setting Description Default
Scanner.Enabled Whether the automatic scanner is enabled true
Scanner.Schedule Cron expression or duration for scheduled scans (e.g., "@daily") "0" (disabled)
Scanner.ScanOnStartup Whether to scan when the server starts true
Scanner.WatcherWait Delay before triggering scan after file changes detected 5s
Scanner.ArtistJoiner String used to join multiple artists in track metadata " • "

Playlist Processing

Setting Description Default
PlaylistsPath Path(s) to search for playlists (supports glob patterns) ""
AutoImportPlaylists Whether to import playlists during scanning true

Performance Options

Setting Description Default
DevExternalScanner Use external process for scanning (reduces memory issues) true
DevScannerThreads Number of concurrent processing threads during scanning 5

Persistent ID Options

Setting Description Default
PID.Track Format for track persistent IDs (critical for tracking moved files) "musicbrainz_trackid|albumid,discnumber,tracknumber,title"
PID.Album Format for album persistent IDs (affects album grouping) "musicbrainz_albumid|albumartistid,album,albumversion,releasedate"

These options can be set in the Navidrome configuration file (e.g., navidrome.toml) or via environment variables with the ND_ prefix (e.g., ND_SCANNER_ENABLED=false). For environment variables, dots in option names are replaced with underscores.

Conclusion

The Navidrome scanner represents a sophisticated system for efficiently managing music libraries. Its phase-based pipeline architecture, careful handling of edge cases, and performance optimizations allow it to handle libraries of significant size while maintaining data integrity and providing a responsive user experience.