Tracearr v1.5.0-beta.2 - New Auth, True Merged Users

Auth

Login got rebuilt. Local username/password, Plex, and optional SSO (set the three OIDC env vars and a provider button appears). Existing sessions keep working after upgrade - no forced re-login. Jellyfin credential login is gone.

Merged Users

Merge the same person's accounts across servers into one identity. Suggestions surface likely matches by email/username, and merges are reversible with split - even chained ones.

Once merged, the whole app treats them as one person:

• Users page shows one row per person with server badges and a live overall trust score
• Leaderboards, active users, and unique viewers count people, not accounts
• Profile combines activity across servers, with a picker to drill into one
• Violations has a multi-select people filter and person-safe bulk actions
• Rules can target a person across all their servers, with a per-rule toggle to enforce on their other servers too (off by default)

Fixes

• Top users and library pages respect the multi-server selector
• Library sync screen handles multiple servers, per-server sync buttons
• Dashboard "today" stats ~100x cheaper on big libraries
• Stats rebuilds run in the background instead of blocking startup
• Growth chart no longer dips on partially-synced days
• Bandwidth average matches its own chart
• Data pages show a real error with retry instead of looking empty

Notes

• Some counts drop slightly - merged people are no longer double counted