Search and the web interface use the prober's findings

- Search matches a word in the name or the inner name (trigram index on
  inner_name, partial, built concurrently); "Readable names" includes
  releases with an inner name.
- unlocked=1 (chip "No password") leaves out passworded releases.
- Results carry passworded and innerName: a Password badge, the inner
  name under the release name.
- The release view: Inside and Inspected facts, a passworded notice, and
  Contents (per probed article its yEnc name, kind, type, encryption and
  the names inside) from release_inspections.
- Newznab: the password attribute from the prober; an obfuscated release
  with an inner name is included, titled by it (without its extension).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

app/controllers/newznab_controller.ts

@@ -32,7 +32,7 @@ function int(value: unknown): number | undefined {
 /**
  * Newznab API for Prowlarr, Sonarr, Radarr and the like (from voyager 1):
  * GET /api?t=caps|search|tvsearch|movie|music|book|get&apikey=…
- * Releases with readable names that aren't known to miss files.
+ * Releases with readable names (or an inner name from the prober, which then is the title) that aren't known to miss files.
  */
 export default class NewznabController {
   async handle({ request, response }: HttpContext) {
@@ -91,15 +91,16 @@ export default class NewznabController {
       const tv = /(?:^|[._ -])S(\d{1,2})E(\d{1,3})/i.exec(r.name)
       return {
         id: r.id,
-        title: r.name,
+        // An obfuscated release by what the prober found inside, without its extension (what clients parse).
+        title: r.readable || !r.innerName ? r.name : r.innerName.replace(/\.[a-z0-9]{2,4}$/i, ''),
         category: r.category ?? 8010,
         size: r.size,
         files: r.fileCount,
         postedAt: r.postedAt ? new Date(r.postedAt) : null,
         poster: r.poster,
         groups: r.groups ?? [],
-        // Passwords come with phase 2 (archive inspection).
-        password: false,
+        // From the prober (phase 2): encrypted archive entries or headers.
+        password: r.passworded === true,
         season: tv ? `S${tv[1].padStart(2, '0')}` : undefined,
         episode: tv ? `E${tv[2].padStart(2, '0')}` : undefined,
       }

app/controllers/releases_controller.ts

@@ -13,7 +13,7 @@ function megabytes(value: unknown): number | undefined {
 
 /** The catalog for the web interface (REBUILD.md, part 9). */
 export default class ReleasesController {
-  /** GET /api/v1/releases?q=&cat=5000,2040&readable=1&complete=1&min_size=&max_size=(MB)&source=&poster=&sort=&page=&per_page= */
+  /** GET /api/v1/releases?q=&cat=5000,2040&readable=1&complete=1&unlocked=1&min_size=&max_size=(MB)&source=&poster=&sort=&page=&per_page= */
   async index({ request }: HttpContext) {
     const qs = request.qs()
     const categories = String(qs.cat ?? '')
@@ -25,6 +25,7 @@ export default class ReleasesController {
       categories: categories.length ? expandCategories(categories) : undefined,
       readable: flag(qs.readable),
       complete: flag(qs.complete),
+      unlocked: flag(qs.unlocked),
       source: typeof qs.source === 'string' && qs.source ? qs.source : undefined,
       poster: typeof qs.poster === 'string' && qs.poster ? qs.poster : undefined,
       minSize: megabytes(qs.min_size),