Fix #10 , #27 and #28 from the read-tools sweep

v2 request lists sent the RAML example sort field requestDate; Ombi looks up RequestedDate and NullReferenceException'd every non-empty page. Browse now streams TV popular/most-watched payloads and skips the hydrated seasonRequests graph that blew the 8 MiB read budget. provider_summary treats an empty upstream body as an empty group_page.
Document #12 vote read upstream failures
2026-09-19 20:59:57 +01:00 · 2026-09-19 18:50:24 +01:00 · 2026-09-19 18:48:47 +01:00 · 2026-09-19 18:36:03 +01:00 · 2026-09-19 16:20:03 +01:00 · 2026-09-19 16:19:02 +01:00
23 changed files with 1434 additions and 166 deletions
@@ -115,7 +115,7 @@ Tools are grouped into **bundles** — deployment policy groups, not permission
 | `read_votes` | Global vote list or votes on a request. |
 | `read_users` | Self, authorized user lookup, claims, online users, preference read. |
 | `read_library` | Recent additions, calendar, artwork. |
-| `read_server` | Server status, version, features, news, stats, cron validation. |
+| `read_server` | Server status, version, features, stats, cron validation. |
 | `read_integration` | Saved ARR options and authorized media-server metadata. |
 | `write_request_create` | Create one media request or an explicit collection request. |
 | `write_request_subscribe` | Subscribe/unsubscribe to a request. |
@@ -22,7 +22,7 @@ The [input catalogue](03-input-schemas.md) defines every parameter, required fie
 | `read_votes` | Global vote list or votes on a request | core | vote page |
 | `read_users` | Self, authorized user lookup, claims, online users, preference read | core | user/reference page |
 | `read_library` | Recent additions, calendar, artwork | core | media/calendar/artwork page |
-| `read_server` | Status, version, features, news, stats, cron validation | core | metrics/reference page |
+| `read_server` | Status, version, features, stats, cron validation | core | metrics/reference page |
 | `read_integration` | Saved ARR options and authorized media-server metadata | core | reference/user page |
 | `write_request_create` | One media request or explicit collection request | core | mutation |
 | `write_request_subscribe` | Subscribe/unsubscribe | core | mutation |
@@ -95,7 +95,7 @@ The [input catalogue](03-input-schemas.md) defines every parameter, required fie
   | `welcome_email` | 8 | | | |

   Remaining numeric enums are unresolved gaps and stay numeric pending verification: `VoteType [0,1]` (labels unverified), `RequestSource`, `RequestLimitType [0,1,2]`, and the legacy `orderType`/`statusType`/`availabilityType` filter ints. Search response IDs must retain their source/provider namespace, including multi-search TV TMDB IDs.
-5. A TV parent is a show record; a TV child is an individual request under it. `read_requests.list(media=tv)` uses v2 child pages. Parent detail and children enumeration use v1. A compact projection of v2 children is preferable to secretly swapping in `tvlite` parent results (the v2 list contract is preserved; upstream 500 errors surface natively). Return `parent_request_id` alongside child IDs when present. `read_requests.search` for TV uses v1 `Request/tv/search/{term}` but falls back to a bounded v1 parent scan if it fails, compensating for an upstream LINQ bug.
+5. A TV parent is a show record; a TV child is an individual request under it. `read_requests.list(media=tv)` uses v2 child pages. Parent detail and children enumeration use v1. A compact projection of v2 children is preferable to secretly swapping in `tvlite` parent results (the v2 list contract is preserved). Return `parent_request_id` alongside child IDs when present. `read_requests.search` for TV uses v1 `Request/tv/search/{term}` but falls back to a bounded v1 parent scan if it fails, compensating for an upstream LINQ bug. v2 list `{sort}` is the C# property `RequestedDate` (not the RAML example `requestDate`, which TypeDescriptor cannot resolve and which 500s every non-empty page).
 6. Parameter names such as `currentPosition`, `position`, `skip`, `count`, `take` and `amountToLoad` are mapped exactly per ledger. Offsets are zero-based by this MCP contract; the adapter must verify ambiguous upstream paging behaviour. Requests use count then position; issue summary uses position then take; issue list uses take then skip. Do not reverse these pairs.
 7. Array responses without server pagination are sliced locally only within a bounded fetched response. Mark pagination as local and total unknown unless the complete collection was obtained. A result-size cap is a truncation warning, not a fabricated server total or a promise that the next page exists.
 8. `format: date-time` and cross-field comparisons must be enforced by the server, not assumed from a client's validator. Stats requires `from <= to` when both are supplied. Strings must contain non-whitespace text where used as queries/comments. Reject duplicate season numbers and duplicate episode numbers; impose a maximum of 2,000 selected episodes per call in addition to per-array limits.
@@ -111,16 +111,16 @@ The [input catalogue](03-input-schemas.md) defines every parameter, required fie

 `advanced_movie` POSTs the exact DiscoverModel property names: `type:"movie"`, `release_year→releaseYear`, `genre_ids→genreIds`, `keyword_ids→keywordIds`, `watch_provider_ids→watchProviders`, and decade unchanged. Ombi 4.53.x accepts but ignores `companies`, so `company_ids` is not advertised and legacy calls fail explicitly. Do not invent a `query` requirement for discovery. Release year and decade must agree if both are supplied.

-`read_media.details` chooses v2 movie TMDB/IMDb, TV TVDB/TMDB, artist, or artist/album routes. TV `tmdb` uses v2 `Search/tv/moviedb/{id}`; TV `tvdb` uses the legacy v1 `Search/tv/info/{tvdbId}` route (the v2 `Search/tv/{tvdbId}` route is a TMDB-keyed alias and must never serve a TVDB lookup). The legacy v1 TVDB info route does not reliably carry request state; for TVDB, the adapter performs a bounded scan of v1 `Request/tv` (matching by `tvDbId` or `imdbId`) to overlay `requested`, `request_targets` (using the real parent request ID), and per-episode availability flags. IMDb path placeholder spelling differs from its parameter declaration. `by_request` chooses movie/request, tv/request or artist/request. `movie_localized` uses POST v1 movie/info. `ratings` uses title and year. `streaming` uses TMDB even for TV.
+`read_media.details` chooses v2 movie TMDB/IMDb, TV TVDB/TMDB, artist, or artist/album routes. TV `tmdb` uses v2 `Search/tv/moviedb/{id}`; TV `tvdb` uses the legacy v1 `Search/tv/info/{tvdbId}` route (the v2 `Search/tv/{tvdbId}` route is a TMDB-keyed alias and must never serve a TVDB lookup). The legacy v1 TVDB info route does not reliably carry request state; for TVDB, the adapter performs a bounded scan of v1 `Request/tv` (matching by `tvDbId` or `imdbId`) to overlay `requested`, `request_targets` (using the real parent request ID), and per-episode availability flags. IMDb path placeholder spelling differs from its parameter declaration. `by_request` chooses movie/request, tv/request or artist/request. `movie_localized` uses POST v1 movie/info. `ratings` first uses Ombi's title/year ratings route. Ombi 4.53.x still routes that operation through removed Rotten Tomatoes private endpoints; on a 404/5xx (or a successful empty response), the adapter searches the same media/title and requires an exact case-insensitive title and year match before returning explicitly labelled `tmdb_vote_*` or `tvmaze_site_rating` references. A warning identifies the fallback source; no fuzzy match is substituted. `streaming` uses TMDB even for TV.
 TV identifier labels follow the origin route, not the upstream field name. The v1 TVMaze-backed routes (`Search/tv/{term}`, `Search/tv/info/{tvdbId}`) place the TVDB id in the misleadingly-named `theMovieDbId` field and the TVMaze id in `seriesId`; emit `tvdb` and `tvmaze` there. The v2 engine routes (browse, `moviedb`, `by_request`, multi-search) are TMDB-keyed; emit `tmdb` and do not treat `seriesId` as TVMaze. When `theMovieDbId` is absent, `id` is labelled with that origin namespace so browse and collection members still carry a usable identifier. Multi-search `mediaType` is case-insensitive (`Artist`→artist). The v1 `RecentlyAdded` TV model's id namespace is unverified — keep `tmdb` pending live confirmation.

 `read_reference.keywords` passes query `searchTerm`; keyword detail uses its own keyword ID. Watch-provider catalogue search also has optional `searchTerm`; it is distinct from streaming availability for a particular title. Other branches have no request body. Reference values are good optional cached resources, but remain available through tools for tool-only clients.

 ## Requests and quotas

-Use v2 list/status routes, always with sort and page segments. `status` defaults `all`; `sort_direction` maps to the `{sortOrder}` segment (`asc`/`desc`). Public `sort.field=request_date` maps to the documented example `requestDate`; no speculative sort fields are published. `all` means the base route, not an `/all/` segment. Album lacks an unavailable-status route, so that combination fails schema validation. The misspelled movie `availble` route is an explicitly gated compatibility alias, not the primary path.
+Use v2 list/status routes, always with sort and page segments. `status` defaults `all`; `sort_direction` maps to the `{sortOrder}` segment (`asc`/`desc`). Public `sort.field=request_date` maps to Ombi's `RequestedDate` property (the RAML example `requestDate` does not match and 500s on non-empty pages). No speculative sort fields are published. `all` means the base route, not an `/all/` segment. Album lacks an unavailable-status route, so that combination fails schema validation. The misspelled movie `availble` route is an explicitly gated compatibility alias, not the primary path.

-`get` supports movie and TV parent only; no album single-request endpoint is advertised. `children` returns children for a parent. Request `search` uses the appropriate v1 route and rejects list-only status/sort arguments. `recent` uses v2 recentlyRequested; `target.id` is `requestId` (never a provider id left in `id`). `retry_queue` is a privileged GET and returns queue IDs separately from underlying request IDs.
+`get` supports movie and TV parent only; no album single-request endpoint is advertised. `children` returns children for a parent; child ids are the real upstream child PKs (provider-shaped for first-request children by design), with provider ids surfaced from the embedded `parentRequest`. Request `search` uses the appropriate v1 route and rejects list-only status/sort arguments. `recent` uses v2 recentlyRequested; for movie/album `target.id` is `requestId`, while TV `requestId` is a child request id (often provider-shaped) that is resolved to the parent request id through a bounded v1 parent scan — unresolvable rows emit `target.id` 0 with a warning rather than a provider-shaped target. `retry_queue` is a privileged GET and returns queue IDs separately from underlying request IDs.

 `read_request_stats.counts` uses Request/count; `total` uses the media's total endpoint; `quota` uses its remaining endpoint. Quota belongs to the actual upstream principal. `has_requests` requires an explicit `user_id` by MCP policy and sends it as the optional upstream `userId` query; viewing another user is subject to authorization. Do not combine instance totals with a per-user quota under an unlabeled “total”.

@@ -159,7 +159,7 @@ Issue `list` uses v1 paged issues and returns individual records. `summary` uses

 Issue creation maps only title, subject, description, `issueCategoryId`, numeric `requestType`, and optional `requestId`/`providerId`. Require at least one association by design; RAML marks these properties optional and does not establish a server requirement. If both are provided, verify they refer to the same media. The server supplies author, timestamps and state; never accept `userReported`, comments, resolved date or persistence ID from the model. Comment POST uses `{comment, issueId}`. Status POST uses `{issueId, status}`. Category POST uses `{value}`. Delete IDs are in the path; no speculative update-category endpoint exists.

-Vote reads use `Vote/music/{requestId}` for albums; writes use `Vote/{up|down}/album/{requestId}`. Do not derive both directions from one generic segment rule. Vote toggling/repeated-call behaviour is unverified, hence no idempotence promise.
+Vote reads use `Vote/music/{requestId}` for albums; writes use `Vote/{up|down}/album/{requestId}`. Do not derive both directions from one generic segment rule. Vote toggling/repeated-call behaviour is unverified, hence no idempotence promise. On Ombi 4.53.10, the global vote view and movie vote-record route can return HTTP 500 for existing instance data while the corresponding empty TV route succeeds. Ombi exposes no equivalent read route from which the adapter can reconstruct vote ownership or totals. Preserve `UPSTREAM_REJECTED` in that case; never convert the failure into a fabricated empty `vote_page`.

 User GET-by-ID is `/Identity/User/{id}`. `self`, all users, dropdown, claims, online and notification preferences each have their exact separate routes. Respect hide-user settings and upstream visibility; do not disclose hidden requester IDs simply to populate a normalized field.

@@ -173,7 +173,7 @@ Recent TV grouped and ungrouped routes are separate branches. Calendar has no do

 Images may be binary, redirects or URLs depending on the route; RAML leaves several response bodies unspecified. Return a safe resource reference only after validating actual content type/shape and destination. Do not invent a signed URL or expose an `ApiKey` query. Random backgrounds are read-only but their outputs are not deterministic; idempotent read annotations describe side effects, not identical results.

-Stats passes optional `from` and `to` query values. `update_check` is GET Job/update; `update_info` is GET Update. Running updates is an explicit administrative job. `cron_validate` POSTs `{expression}` to Settings/testcron and is an administrator-gated read calculation, not a scheduled-job mutation.
+Stats requires RFC3339 `from` and `to` query values. `update_check` is GET Job/update; `update_info` is GET Update. Running updates is an explicit administrative job. `cron_validate` POSTs `{expression}` to Settings/testcron and is an administrator-gated read calculation, not a scheduled-job mutation. Ombi uses Quartz cron syntax: six or seven fields, with `?` in the unused day-of-month or day-of-week field.

 `read_integration` prefers saved-settings GETs. Radarr 4K only applies to profiles/root folders, not tags. Sonarr language profiles uses `/v3/LanguageProfiles`. Lidarr Metadata is POST-only, so load saved Lidarr settings privately and construct its request internally. CouchPotato profile is singular and POST-only. Credential acquisition `/CouchPotato/apikey` is never a tool. RPC POST counterparts accepting settings are compatibility adapters to the same read intent; they do not add caller connection overrides.

@@ -226,7 +226,7 @@ Locked decision D3 keeps snake_case MCP field names; the Go adapter translates e
 | `is_4k` | create/moderate/reprocess | `is4kRequest` body / `is4K` body / `{is4K}` path |
 | `request_type` | `write_issue_create`, `write_request_reprocess` | `requestType` body int / `{type}` path int (T1 map) |
 | `status` | `read_issues`, `write_issue_manage` | `{status}` path int / `status` body int (T2 map) |
-| `sort_direction` | `read_requests.list` | `{sortOrder}` path `asc`/`desc` (sort=`requestDate`) |
+| `sort_direction` | `read_requests.list` | `{sortOrder}` path `asc`/`desc` (sort=`RequestedDate`) |
 | `season_numbers` | `write_request_create` tv season mode | adapter expansion → `seasons[].episodes` |
 | `on_behalf_user_id` | `write_request_create` | `requestOnBehalf` body (**Verify**: id vs username) |
 | `requested_by_alias` | `write_request_create.album` | `requestedByAlias` body |
@@ -987,7 +987,7 @@ Read issue records, provider-grouped summaries, comments or counts.

 ## read_votes

-Read all voteable requests or votes for a movie, TV or album request.
+Read all voteable requests or votes for a movie, TV or album request. Some Ombi 4.53.x data sets make the global or movie read routes fail upstream; the tool reports `UPSTREAM_REJECTED` rather than treating unknown votes as an empty page.

 ```json
 {
@@ -1494,18 +1494,6 @@ Read server status, feature availability, version, update information or usage s
      ],
      "additionalProperties": false
    },
-    {
-      "type": "object",
-      "properties": {
-        "action": {
-          "const": "news"
-        }
-      },
-      "required": [
-        "action"
-      ],
-      "additionalProperties": false
-    },
    {
      "type": "object",
      "properties": {
@@ -1546,7 +1534,9 @@ Read server status, feature availability, version, update information or usage s
        }
      },
      "required": [
-        "action"
+        "action",
+        "from",
+        "to"
      ],
      "additionalProperties": false
    },
@@ -1558,6 +1548,7 @@ Read server status, feature availability, version, update information or usage s
        },
        "expression": {
          "type": "string",
+          "description": "Quartz cron expression — 6 or 7 fields (seconds minutes hours day-of-month month day-of-week [year]); one of the two day fields must be ?",
          "minLength": 1,
          "maxLength": 200
        }
@@ -16,10 +16,10 @@ Each per-tool output schema is intentionally a bounded projection, not the recur

 | Family | Projection rules |
 |---|---|
-| media_page | Search/discovery/details return zero or more normalized media records. Details usually has one item. Keep every known ID namespace; never emit the same namespace+value twice. On TV the upstream `theMovieDbId` field name lies: TVMaze-backed v1 routes (`Search/tv/{term}`, `Search/tv/info/{tvdbId}`) carry the TVDB id there (emit `tvdb`, plus `seriesId`→`tvmaze`); TMDB-keyed v2 routes carry the TMDB id (emit `tmdb`) and must not label `seriesId` as `tvmaze` — on those routes it echoes the TMDB id. When `theMovieDbId` is absent, `id` is labelled with the same origin namespace (v2 browse/collection members and MovieFullInfoViewModel). `belongsToCollection.id` is the collection's TMDB id, not the movie's. Multi-search `mediaType` is matched case-insensitively (`Artist`→`artist`/`musicbrainz`). The namespace label is per origin route, never per field name. Credit calls require the caller-supplied person name because Ombi returns only the person ID; TV credit titles are enriched from their TMDB detail records. If requested browse falls back to Ombi's bounded recently-requested feed, mark it truncated and leave total/continuation unknown. Map cast/crew into credits; title-specific streaming into providers; rating fields into named rating references. Never claim a global provider catalogue is a title's availability. Collections keep their own collection identity and returned members. |
-| request_page | Map the Ombi request id to target kind and ID: prefer `requestId` over `id`. v2 TV list items are children and `parentRequestId` is preserved; v1 parent records stay parents. On `recent`, `RecentlyRequestedModel.requestId` is the target id for every kind; a provider-shaped `id` (common on TV) is never the target — provider values go in `identifiers` (`mediaId`, `tvDbId`, `externalProviderId`). Include standard and 4K state separately. Never infer one combined lifecycle status when booleans disagree. |
+| media_page | Search/discovery/details return zero or more normalized media records. Details usually has one item. Keep every known ID namespace; never emit the same namespace+value twice. On TV the upstream `theMovieDbId` field name lies: TVMaze-backed v1 routes (`Search/tv/{term}`, `Search/tv/info/{tvdbId}`) carry the TVDB id there (emit `tvdb`, plus `seriesId`→`tvmaze`); TMDB-keyed v2 routes carry the TMDB id (emit `tmdb`) and must not label `seriesId` as `tvmaze` — on those routes it echoes the TMDB id. When `theMovieDbId` is absent, `id` is labelled with the same origin namespace (v2 browse/collection members and MovieFullInfoViewModel). `belongsToCollection.id` is the collection's TMDB id, not the movie's. Multi-search `mediaType` is matched case-insensitively (`Artist`→`artist`/`musicbrainz`). The namespace label is per origin route, never per field name. Credit calls require the caller-supplied person name because Ombi returns only the person ID; TV credit titles are enriched from their TMDB detail records. If requested browse falls back to Ombi's bounded recently-requested feed, mark it truncated and leave total/continuation unknown. Browse streams the upstream array and discards `seasonRequests` (Ombi hydrates full episode trees on popular/most-watched when hiding available titles). Map cast/crew into credits; title-specific streaming into providers; rating fields into named rating references. Never claim a global provider catalogue is a title's availability. Collections keep their own collection identity and returned members. |
+| request_page | Map the Ombi request id to target kind and ID: prefer `requestId` over `id`. v2 TV list items are children and `parentRequestId` is preserved; v1 parent records stay parents; child provider ids live on the embedded `parentRequest` record. On `recent`, `RecentlyRequestedModel.requestId` is the request id for movie/album, but on TV rows it is a *child* request id (upstream builds recent TV rows from child requests and persists the provider id as the child PK for new-request children). The `tv_parent` target id is therefore resolved through a bounded v1 parent scan — child-id match first, then `tvDbId`/`externalProviderId` fallback — the child id is emitted as an `ombi_tv_child` identifier, provider values land in `identifiers` (`mediaId`, `tvDbId`, `externalProviderId`), and unresolvable rows emit `target.id` 0 with a warning. A provider-shaped value is never the target. Include standard and 4K state separately. Never infer one combined lifecycle status when booleans disagree. |
 | issue_page | Project writable/display fields plus IDs/timestamps. Wire `resovledDate` maps to `resolved_date` without changing upstream spelling. Omit nested user objects and comments unless requested separately. |
-| group_page | v2 issue summaries are provider groups. Count and page units describe groups, not individual issues. Truncate nested issues with a warning. |
+| group_page | v2 issue summaries are provider groups. Count and page units describe groups, not individual issues. Truncate nested issues with a warning. An empty, null, or `[]` body from `provider_summary` is an empty page, not a schema mismatch. |
 | comment_page | Preserve comment text and authorized author identifier, omit full user graph. |
 | vote_page | Preserve numeric VoteType until verified; totals only if supplied or completely computed from an authorized complete set. No inference of the caller's own vote without identity evidence. |
 | user_page | Only ID, username/alias and non-secret language/country/online state. Permission-limited user visibility applies even to nested source objects. |
@@ -234,8 +234,8 @@ The body/response columns describe the **upstream** schema, not a promise to pas
 | 216 | [GET `/api/v2/Search/artist/request/{requestId}`](../api/raml/api.raml#L3949) | D | `read_media / by_request` | path `requestId`:integer required | 200: [ArtistInformation](../api/raml/types/Ombi.Core.Models.Search.V2.Music.ArtistInformation.raml) | Request-ID namespace requires verification. MCP `media=album` maps to this literal `artist` route segment. |
 | 217 | [GET `/api/v2/Search/artist/album/{albumId}`](../api/raml/api.raml#L3976) | D | `read_media / details` | path `albumId`:string required | 200: [ReleaseGroup](../api/raml/types/Ombi.Core.Models.Search.V2.Music.ReleaseGroup.raml) | — |
 | 218 | [GET `/api/v2/Search/releasegroupart/{musicBrainzId}`](../api/raml/api.raml#L4003) | D | `read_library / album_art` | path `musicBrainzId`:string required | 200: [AlbumArt](../api/raml/types/Ombi.Core.Models.Search.V2.Music.AlbumArt.raml) | — |
-| 219 | [GET `/api/v2/Search/ratings/movie/{name}/{year}`](../api/raml/api.raml#L4030) | D | `read_media / ratings` | path `name`:string required; path `year`:integer required | 200: [MovieRatings](../api/raml/types/Ombi.Api.External.ExternalApis.RottenTomatoes.Models.MovieRatings.raml) | — |
-| 220 | [GET `/api/v2/Search/ratings/tv/{name}/{year}`](../api/raml/api.raml#L4060) | D | `read_media / ratings` | path `name`:string required; path `year`:integer required | 200: [TvRatings](../api/raml/types/Ombi.Api.External.ExternalApis.RottenTomatoes.Models.TvRatings.raml) | — |
+| 219 | [GET `/api/v2/Search/ratings/movie/{name}/{year}`](../api/raml/api.raml#L4030) | D | `read_media / ratings` | path `name`:string required; path `year`:integer required | 200: [MovieRatings](../api/raml/types/Ombi.Api.External.ExternalApis.RottenTomatoes.Models.MovieRatings.raml) | Ombi 4.53.x depends on removed Rotten Tomatoes private endpoints; on 404/5xx/empty results, fall back to an exact title/year v1 movie search and label TMDB rating fields. |
+| 220 | [GET `/api/v2/Search/ratings/tv/{name}/{year}`](../api/raml/api.raml#L4060) | D | `read_media / ratings` | path `name`:string required; path `year`:integer required | 200: [TvRatings](../api/raml/types/Ombi.Api.External.ExternalApis.RottenTomatoes.Models.TvRatings.raml) | Ombi 4.53.x depends on removed Rotten Tomatoes private endpoints; on 404/5xx/empty results, fall back to an exact title/year v1 TV search and label TVMaze rating fields. |
 | 221 | [GET `/api/v2/Search/stream/movie/{movieDbId}`](../api/raml/api.raml#L4090) | D | `read_media / streaming` | path `movieDBId`:integer required | 200: array&lt;[StreamingData](../api/raml/types/Ombi.Core.Models.Search.V2.StreamingData.raml)&gt; | — |
 | 222 | [GET `/api/v2/Search/stream/tv/{movieDbId}`](../api/raml/api.raml#L4120) | D | `read_media / streaming` | path `movieDbId`:integer required | 200: array&lt;[StreamingData](../api/raml/types/Ombi.Core.Models.Search.V2.StreamingData.raml)&gt; | — |
 | 223 | [GET `/api/v1/Search/movie/{searchTerm}`](../api/raml/api.raml#L4150) | D | `read_search / text` | path `searchTerm`:unspecified required | 200: array&lt;[SearchMovieViewModel](../api/raml/types/Ombi.Core.Models.Search.SearchMovieViewModel.raml)&gt; | — |
@@ -298,7 +298,7 @@ The body/response columns describe the **upstream** schema, not a promise to pas
 | 280 | [GET `/api/v1/Settings/SickRage`](../api/raml/api.raml#L5100) | D | `read_settings / sickrage` | none documented | 200: [SickRageSettings](../api/raml/types/Ombi.Settings.Settings.Models.External.SickRageSettings.raml) | Allowlisted projection; no raw secrets. |
 | 281 | [GET `/api/v1/Settings/jobs`](../api/raml/api.raml#L5130) | D | `read_settings / jobs` | none documented | 200: [JobSettings](../api/raml/types/Ombi.Settings.Settings.Models.JobSettings.raml) | Allowlisted projection; no raw secrets. |
 | 282 | [POST `/api/v1/Settings/jobs`](../api/raml/api.raml#L5130) | P | `write_settings_patch / patch:jobs` | body [JobSettings](../api/raml/types/Ombi.Settings.Settings.Models.JobSettings.raml) | 200: [JobSettingsViewModel](../api/raml/types/Ombi.Models.JobSettingsViewModel.raml) | Only typed non-secret patch; preserve omitted/private fields. |
-| 283 | [POST `/api/v1/Settings/testcron`](../api/raml/api.raml#L5160) | D | `read_server / cron_validate` | body [CronViewModelBody](../api/raml/types/Ombi.Models.CronViewModelBody.raml) | 200: [CronTestModel](../api/raml/types/Ombi.Models.CronTestModel.raml) | Administrator-gated read calculation. |
+| 283 | [POST `/api/v1/Settings/testcron`](../api/raml/api.raml#L5160) | D | `read_server / cron_validate` | body [CronViewModelBody](../api/raml/types/Ombi.Models.CronViewModelBody.raml) | 200: [CronTestModel](../api/raml/types/Ombi.Models.CronTestModel.raml) | Administrator-gated read calculation; Quartz uses 6-7 fields and `?` for the unused day field. |
 | 284 | [POST `/api/v1/Settings/Issues`](../api/raml/api.raml#L5178) | P | `write_settings_patch / patch:issues` | body [IssueSettings](../api/raml/types/Ombi.Settings.Settings.Models.IssueSettings.raml) | 200: boolean | Only typed non-secret patch; preserve omitted/private fields. |
 | 285 | [GET `/api/v1/Settings/Issues`](../api/raml/api.raml#L5178) | D | `read_settings / issues` | none documented | 200: [IssueSettings](../api/raml/types/Ombi.Settings.Settings.Models.IssueSettings.raml) | Allowlisted projection; no raw secrets. |
 | 286 | [GET `/api/v1/Settings/issuesenabled`](../api/raml/api.raml#L5208) | D | `read_settings / issuesenabled` | none documented | 200: boolean | Allowlisted projection; no raw secrets. |
@@ -344,12 +344,12 @@ The body/response columns describe the **upstream** schema, not a promise to pas
 | 326 | [GET `/api/v1/Sonarr/tags`](../api/raml/api.raml#L5783) | D | `read_integration / options:sonarr/tags` | none documented | 200: array&lt;[Tag](../api/raml/types/Ombi.Api.External.ExternalApis.Sonarr.Models.Tag.raml)&gt; | — |
 | 327 | [GET `/api/v1/Sonarr/enabled`](../api/raml/api.raml#L5815) | D | `read_integration / options:sonarr/enabled` | none documented | 200: boolean | — |
 | 328 | [GET `/api/v1/Sonarr/version`](../api/raml/api.raml#L5824) | D | `read_integration / options:sonarr/version` | none documented | 200: string | — |
-| 329 | [GET `/api/v1/Stats`](../api/raml/api.raml#L5833) | D | `read_server / stats` | query `from`:string optional; query `to`:string optional | 200: [UserStatsSummary](../api/raml/types/Ombi.Core.Engine.UserStatsSummary.raml) | from/to query parameters are supported. |
+| 329 | [GET `/api/v1/Stats`](../api/raml/api.raml#L5833) | D | `read_server / stats` | query `from`:string required; query `to`:string required | 200: [UserStatsSummary](../api/raml/types/Ombi.Core.Engine.UserStatsSummary.raml) | from/to are required at the MCP layer; bare calls cause an upstream NRE. |
 | 330 | [GET `/api/v1/Status`](../api/raml/api.raml#L5849) | D | `read_server / status` | none documented | 200: [HttpStatusCode](../api/raml/types/System.Net.HttpStatusCode.raml) | — |
 | 331 | [GET `/api/v1/Status/info`](../api/raml/api.raml#L5860) | D | `read_server / status_info` | none documented | 200: string | — |
-| 332 | [GET `/api/v2/System/news`](../api/raml/api.raml#L5871) | D | `read_server / news` | none documented | 200: body unspecified | — |
-| 333 | [GET `/api/v2/System/logs`](../api/raml/api.raml#L5877) | D | `read_logs / list` | none documented | 200: body unspecified | — |
-| 334 | [GET `/api/v2/System/logs/{logFileName}`](../api/raml/api.raml#L5883) | D | `read_logs / read` | path `logFileName`:string required | 200: body unspecified | Vetted opaque ID maps to filename; sanitized bounded local slicing. |
+| 332 | [GET `/api/v2/System/news`](../api/raml/api.raml#L5871) | X | action removed | none documented | 200: Markdig HTML text | Not structured data; action removed (#13). |
+| 333 | [GET `/api/v2/System/logs`](../api/raml/api.raml#L5877) | D | `read_logs / list` | none documented | 200: string array of file names | Verified on 4.53.10. |
+| 334 | [GET `/api/v2/System/logs/{logFileName}`](../api/raml/api.raml#L5883) | D | `read_logs / read` | path `logFileName`:string required | 200: plain text | Vetted opaque ID maps to filename; sanitized bounded local slicing (verified 4.53.10). |
 | 335 | [GET `/api/v2/System/logs/download/{logFileName}`](../api/raml/api.raml#L5893) | X | `raw diagnostic download` | path `logFileName`:string required | 200: body unspecified | May expose secrets; sanitized logs tool is the supported alternative. |
 | 336 | [POST `/api/v1/Tester/discord`](../api/raml/api.raml#L5903) | P | `write_integration_test / discord` | body [DiscordNotificationSettings](../api/raml/types/Ombi.Settings.Settings.Models.Notifications.DiscordNotificationSettings.raml) | 200: boolean | Saved authorized profile only; exact tester body differs by service. |
 | 337 | [POST `/api/v1/Tester/pushbullet`](../api/raml/api.raml#L5923) | P | `write_integration_test / pushbullet` | body [PushbulletSettings](../api/raml/types/Ombi.Settings.Settings.Models.Notifications.PushbulletSettings.raml) | 200: boolean | Saved authorized profile only; exact tester body differs by service. |
@@ -383,13 +383,13 @@ The body/response columns describe the **upstream** schema, not a promise to pas
 | 365 | [POST `/api/v1/Token/requirePassword`](../api/raml/api.raml#L6464) | I | `upstream authentication adapter` | body [UserAuthModel](../api/raml/types/Ombi.Models.UserAuthModel.raml) | 200: boolean | Not model-callable; JWT-primary auth adapter (`OMBI_AUTH_MODE=jwt`); login/refresh semantics per `01-authentication.md`; Bearer-on-all-routes remains Verify. |
 | 366 | [POST `/api/v1/Token/header_auth`](../api/raml/api.raml#L6482) | I | `upstream authentication adapter` | none documented | 200: body unspecified | Not model-callable; JWT-primary auth adapter (`OMBI_AUTH_MODE=jwt`); login/refresh semantics per `01-authentication.md`; Bearer-on-all-routes remains Verify. |
 | 367 | [GET `/api/v1/Update`](../api/raml/api.raml#L6494) | D | `read_server / update_info` | none documented | 200: [UpdateModel](../api/raml/types/Ombi.Core.Processor.UpdateModel.raml) | — |
-| 368 | [GET `/api/v1/Vote`](../api/raml/api.raml#L6503) | D | `read_votes / list` | none documented | 200: array&lt;[VoteViewModel](../api/raml/types/Ombi.Core.Models.UI.VoteViewModel.raml)&gt; | — |
+| 368 | [GET `/api/v1/Vote`](../api/raml/api.raml#L6503) | D | `read_votes / list` | none documented | 200: array&lt;[VoteViewModel](../api/raml/types/Ombi.Core.Models.UI.VoteViewModel.raml)&gt; | Ombi 4.53.10 can return HTTP 500 for existing instance data; no lossless alternate read route exists, so preserve `UPSTREAM_REJECTED`. |
 | 369 | [POST `/api/v1/Vote/up/movie/{requestId}`](../api/raml/api.raml#L6515) | D | `write_vote` | path `requestId`:integer required | 200: [VoteEngineResult](../api/raml/types/Ombi.Core.Models.VoteEngineResult.raml) | — |
 | 370 | [POST `/api/v1/Vote/up/tv/{requestId}`](../api/raml/api.raml#L6530) | D | `write_vote` | path `requestId`:integer required | 200: [VoteEngineResult](../api/raml/types/Ombi.Core.Models.VoteEngineResult.raml) | — |
 | 371 | [POST `/api/v1/Vote/up/album/{requestId}`](../api/raml/api.raml#L6545) | D | `write_vote` | path `requestId`:integer required | 200: [VoteEngineResult](../api/raml/types/Ombi.Core.Models.VoteEngineResult.raml) | — |
 | 372 | [POST `/api/v1/Vote/down/movie/{requestId}`](../api/raml/api.raml#L6560) | D | `write_vote` | path `requestId`:integer required | 200: [VoteEngineResult](../api/raml/types/Ombi.Core.Models.VoteEngineResult.raml) | — |
 | 373 | [POST `/api/v1/Vote/down/tv/{requestId}`](../api/raml/api.raml#L6575) | D | `write_vote` | path `requestId`:integer required | 200: [VoteEngineResult](../api/raml/types/Ombi.Core.Models.VoteEngineResult.raml) | — |
 | 374 | [POST `/api/v1/Vote/down/album/{requestId}`](../api/raml/api.raml#L6590) | D | `write_vote` | path `requestId`:integer required | 200: [VoteEngineResult](../api/raml/types/Ombi.Core.Models.VoteEngineResult.raml) | — |
-| 375 | [GET `/api/v1/Vote/movie/{requestId}`](../api/raml/api.raml#L6605) | D | `read_votes / get` | path `requestId`:integer required | 200: array&lt;[Votes](../api/raml/types/Ombi.Store.Entities.Votes.raml)&gt; | — |
+| 375 | [GET `/api/v1/Vote/movie/{requestId}`](../api/raml/api.raml#L6605) | D | `read_votes / get` | path `requestId`:integer required | 200: array&lt;[Votes](../api/raml/types/Ombi.Store.Entities.Votes.raml)&gt; | Ombi 4.53.10 can return HTTP 500 for existing instance data; no lossless alternate read route exists, so preserve `UPSTREAM_REJECTED`. |
 | 376 | [GET `/api/v1/Vote/music/{requestId}`](../api/raml/api.raml#L6621) | D | `read_votes / get` | path `requestId`:integer required | 200: array&lt;[Votes](../api/raml/types/Ombi.Store.Entities.Votes.raml)&gt; | — |
 | 377 | [GET `/api/v1/Vote/tv/{requestId}`](../api/raml/api.raml#L6637) | D | `read_votes / get` | path `requestId`:integer required | 200: array&lt;[Votes](../api/raml/types/Ombi.Store.Entities.Votes.raml)&gt; | — |
@@ -56,7 +56,7 @@ These are future checks, not claims that an implementation was written or tested
 - An empty object must not satisfy a request-creation, issue-creation, moderation or delete schema. Optional defaults must not trigger unrelated conditional requirements.
 - Movie, TVDB TV, TMDB TV, album and collection creation must send the exact wire body and method. TV has no is4kRequest, album has no requestOnBehalf, and collection has no invented body.
 - Denial uses PUT for all media. Similar and actor searches use POST. Lidarr Metadata uses POST. User detail uses Identity/User/{id}. No POST RequestRetry is emitted.
- Request list rejects album+unavailable, preserves TV child identity, maps request_date to requestDate and verifies local versus upstream pagination metadata.
+- Request list rejects album+unavailable, preserves TV child identity, maps request_date to RequestedDate and verifies local versus upstream pagination metadata.
 - Reject empty explicit episode lists, duplicate seasons/episodes, ambiguous providers, irrelevant action properties and overflowing request budgets before upstream calls.
 - Check every method/path pair against the ledger, including spelling/case and request/response types. Generated brace expansion must never add routes.
 - Omitted `is_4k`/`status`/`sort_direction` resolve to documented defaults without triggering conditional requirements.
@@ -302,7 +302,7 @@ The gated live suite is committed and ready; run it with a sourced `.env`. It ad
 ## M5 Findings — Request state and list routes (#7, #10)

 - `#7`: `GET /api/v1/Search/tv/info/{tvdbId}` (TVMaze-backed info route) upstream does not set request state flags accurately, returning `requested: false` regardless of truth. The adapter patches this by performing a bounded `GET /api/v1/Request/tv` parent scan and overlaying per-episode availability and request states.
- `#10`: `GET /api/v2/Requests/{movie,tv,album}/...` (v2 lists) encounter a per-row `NullReferenceException` on non-empty results (observed on Ombi 4.53.10). The adapter surfaces this as `UPSTREAM_REJECTED` rather than silently replacing it with v1 `tvlite` payloads, preserving the expected v2 child-page contract. 
+- `#10`: `GET /api/v2/Requests/{movie,tv,album}/...` (v2 lists) 500'd on every non-empty page because the adapter sent the RAML example sort field `requestDate`. Ombi resolves `{sort}` through `TypeDescriptor.GetProperties(...).Find(sortProperty, true)` against `RequestedDate`; a miss leaves `prop` null and `prop.GetValue(x)` throws `NullReferenceException`. Empty `pending` pages never called `GetValue`, which is why they appeared to work. The adapter now sends `RequestedDate`.
 - `#10` search fallback: `GET /api/v1/Request/tv/search/{term}` on 4.53.10 suffers from a LINQ translation bug (upstream Ombi-app/Ombi#5420, fixed by #5421). The adapter gracefully falls back to a bounded v1 parent scan filtering locally on the term if the primary search route fails.

 ## M6 Findings — Integration options and server-id discovery (#16, #17, #18, #20)
@@ -317,3 +317,21 @@ The gated live suite is committed and ready; run it with a sourced `.env`. It ad
 ### Residual Verify items
 - Verify `PlexServersAddUserModel` and older Ombi instances where `servers` may be returned as a bare array (now tolerated alongside object wrappers).
 - Verify Emby `selectedLibraries[].key` ↔ MediaFolders `id` correspondence across diverse Emby/Jellyfin setups.
+
+## M7 Findings — Admin/server wire contracts (#19, #13, #14, #15)
+
+- `#19`: `GET /api/v2/System/logs` returns a JSON string array of log file names on Ombi 4.53.10. The adapter accepts that form and the legacy object form, then reads the selected file as plain text.
+- `#13`: `GET /api/v2/System/news` returns Markdig-rendered HTML text rather than structured JSON. The `news` action was removed from `read_server`.
+- `#14`: `GET /api/v1/Stats` binds non-nullable `from` and `to` DateTimes; an empty range triggers an upstream null-reference error. The adapter requires both RFC3339 values before calling Ombi.
+- `#15`: Ombi validates Quartz.NET cron expressions. They have six or seven fields and require `?` in one of day-of-month or day-of-week; for example, `0 0 0 * * ?` validates while five-field cron and expressions with both day fields as `*` do not.
+
+## M8 Findings — Upstream ratings and vote failures (#8, #12)
+
+- `#8`: Ombi 4.53.10 implements both v2 ratings routes by calling `www.rottentomatoes.com/api/private`; both private endpoints now return HTTP 404 and Ombi surfaces the dependency failure as HTTP 500. `read_media ratings` retains the native result when available and otherwise performs an exact title/year lookup through Ombi's normal movie or TV search. Fallback values are source-labelled (`tmdb_vote_average`, `tmdb_vote_count`, or `tvmaze_site_rating`) and the result carries a degradation warning. No fuzzy title or year substitution is allowed.
+- `#12`: `GET /api/v1/Vote` and `GET /api/v1/Vote/movie/{requestId}` return HTTP 500 on the verified Ombi 4.53.10 data set, while an empty TV request returns HTTP 200 with `[]`. The global controller builds derived per-request summaries and the per-media controllers are the only raw vote-record reads; there is no second lossless API from which the MCP can recover user vote identity and counts. The adapter therefore preserves the sanitized, retryable `UPSTREAM_REJECTED` error and never substitutes an empty page. Mock coverage fixes this error boundary as part of the public contract.
+
+## Read-tools sweep findings (#10 remainder, #27, #28)
+
+- `#10` remainder: the v2 list 500s were not an upstream per-row serializer bug. Ombi looks up `{sort}` as a C# property name (`RequestedDate`); `requestDate` misses, `prop` is null, and `GetValue` throws on the first row. Pending pages were empty so they never threw. The adapter now sends `RequestedDate`.
+- `#27`: `read_discover browse` TV `popular`/`most_watched` exceeded the 8 MiB read budget because Ombi hydrates `seasonRequests` for every show when `HideAvailableFromDiscover` is on. Browse now streams the JSON array, skips `seasonRequests` while tokenizing, and uses a 64 MiB safety cap.
+- `#28`: `GET /api/v2/Issues/details/{providerId}` returns an empty body when the provider has no issues. `provider_summary` treats empty/`null`/`[]` as an empty `group_page` instead of a decode failure.
@@ -3,11 +3,19 @@
 package integration_test

 import (
+	"crypto/sha256"
+	"encoding/hex"
 	"encoding/json"
+	"net/http"
 	"strings"
 	"testing"
 )

+func testLogFileID(name string) string {
+	sum := sha256.Sum256([]byte(name))
+	return hex.EncodeToString(sum[:16])
+}
+
 // --- protocol surface ---

 func TestHandshakeAndToolList(t *testing.T) {
@@ -36,6 +44,136 @@ func TestHandshakeAndToolList(t *testing.T) {
 	}
 }

+func TestReadLogsStringArrayList(t *testing.T) {
+	mock := newMockOmbi(t, "jwt")
+	c := spawnServer(t, mock.env())
+	c.handshake(t)
+
+	out := c.callTool(t, "read_logs", map[string]any{"action": "list"})
+	data := requireOK(t, out)
+	var logs struct {
+		Kind  string `json:"kind"`
+		Files []struct {
+			FileID string `json:"file_id"`
+			Name   string `json:"name"`
+		} `json:"files"`
+	}
+	if err := json.Unmarshal(data, &logs); err != nil {
+		t.Fatalf("logs decode: %v", err)
+	}
+	if logs.Kind != "logs" || len(logs.Files) != 2 {
+		t.Fatalf("unexpected log list: %s", data)
+	}
+	for _, f := range logs.Files {
+		if f.FileID != testLogFileID(f.Name) {
+			t.Errorf("file ID for %q = %q", f.Name, f.FileID)
+		}
+	}
+}
+
+func TestReadLogsReadByFileID(t *testing.T) {
+	mock := newMockOmbi(t, "jwt")
+	c := spawnServer(t, mock.env())
+	c.handshake(t)
+
+	out := c.callTool(t, "read_logs", map[string]any{
+		"action": "read", "file_id": testLogFileID("ombi-20260919.txt"), "limit": 2,
+	})
+	data := requireOK(t, out)
+	var logs struct {
+		Kind       string   `json:"kind"`
+		Lines      []string `json:"lines"`
+		NextOffset *int     `json:"next_offset"`
+	}
+	if err := json.Unmarshal(data, &logs); err != nil {
+		t.Fatalf("logs decode: %v", err)
+	}
+	if logs.Kind != "logs" || len(logs.Lines) != 2 || logs.NextOffset != nil {
+		t.Fatalf("unexpected log read: %s", data)
+	}
+	bad := c.callTool(t, "read_logs", map[string]any{
+		"action": "read", "file_id": "does-not-exist",
+	})
+	requireErr(t, bad, "NOT_FOUND")
+}
+
+func TestReadServerNewsRemoved(t *testing.T) {
+	mock := newMockOmbi(t, "jwt")
+	c := spawnServer(t, mock.env())
+	c.handshake(t)
+	requireErr(t, c.callTool(t, "read_server", map[string]any{"action": "news"}), "INVALID_ARGUMENT")
+}
+
+func TestReadServerStatsRequiresRange(t *testing.T) {
+	mock := newMockOmbi(t, "jwt")
+	c := spawnServer(t, mock.env())
+	c.handshake(t)
+
+	err := requireErr(t, c.callTool(t, "read_server", map[string]any{"action": "stats"}), "INVALID_ARGUMENT")
+	if err.Field != "from" || mock.countCalls("GET", "/api/v1/Stats") != 0 {
+		t.Fatalf("bare stats error/calls = %+v/%d", err, mock.countCalls("GET", "/api/v1/Stats"))
+	}
+	err = requireErr(t, c.callTool(t, "read_server", map[string]any{
+		"action": "stats", "from": "2026-09-01T00:00:00Z",
+	}), "INVALID_ARGUMENT")
+	if err.Field != "to" {
+		t.Errorf("field = %q, want to", err.Field)
+	}
+	requireErr(t, c.callTool(t, "read_server", map[string]any{
+		"action": "stats", "from": "2026-09-02T00:00:00Z", "to": "2026-09-01T00:00:00Z",
+	}), "INVALID_ARGUMENT")
+
+	out := c.callTool(t, "read_server", map[string]any{
+		"action": "stats", "from": "2026-09-01T00:00:00Z", "to": "2026-09-02T00:00:00Z",
+	})
+	data := requireOK(t, out)
+	var metrics struct {
+		Kind   string `json:"kind"`
+		Values []any  `json:"values"`
+	}
+	if err := json.Unmarshal(data, &metrics); err != nil {
+		t.Fatalf("metrics decode: %v", err)
+	}
+	if metrics.Kind != "metrics" || len(metrics.Values) != 7 {
+		t.Fatalf("unexpected stats: %s", data)
+	}
+}
+
+func TestReadServerCronValidateQuartz(t *testing.T) {
+	mock := newMockOmbi(t, "jwt")
+	c := spawnServer(t, mock.env())
+	c.handshake(t)
+
+	out := c.callTool(t, "read_server", map[string]any{
+		"action": "cron_validate", "expression": "0 0 0 * * ?",
+	})
+	data := requireOK(t, out)
+	var metrics struct {
+		Values []struct {
+			Name  string `json:"name"`
+			Value any    `json:"value"`
+		} `json:"values"`
+	}
+	if err := json.Unmarshal(data, &metrics); err != nil || len(metrics.Values) != 1 ||
+		metrics.Values[0].Name != "valid" || metrics.Values[0].Value != true {
+		t.Fatalf("Quartz-valid expression reported invalid: %s", data)
+	}
+	if got := mock.lastBody(t, "POST", "/api/v1/Settings/testcron")["expression"]; got != "0 0 0 * * ?" {
+		t.Errorf("wire expression = %#v", got)
+	}
+
+	out = c.callTool(t, "read_server", map[string]any{
+		"action": "cron_validate", "expression": "0 0 * * *",
+	})
+	data = requireOK(t, out)
+	if err := json.Unmarshal(data, &metrics); err != nil || len(metrics.Values) < 1 || metrics.Values[0].Value != false {
+		t.Fatalf("Quartz-invalid expression reported valid: %s", data)
+	}
+	if !strings.Contains(strings.Join(out.Envelope.Warnings, " "), "Quartz cron syntax") {
+		t.Errorf("missing Quartz warning: %v", out.Envelope.Warnings)
+	}
+}
+
 func TestBundleRestriction(t *testing.T) {
 	mock := newMockOmbi(t, "jwt")
 	env := mock.env()
@@ -136,6 +274,86 @@ func TestReadMediaDetailsProjectsUndocumentedFields(t *testing.T) {
 	assertNoLeak(t, out.Raw)
 }

+func TestReadMediaRatingsFallsBackToSearchMetadata(t *testing.T) {
+	mock := newMockOmbi(t, "jwt")
+	c := spawnServer(t, mock.env())
+	c.handshake(t)
+
+	for _, tc := range []struct {
+		media string
+		name  string
+		year  int
+		want  string
+	}{
+		{media: "movie", name: "Alien", year: 1979, want: "tmdb_vote_average"},
+		{media: "tv", name: "Breaking Bad", year: 2008, want: "tvmaze_site_rating"},
+	} {
+		out := c.callTool(t, "read_media", map[string]any{
+			"action": "ratings", "media": tc.media, "name": tc.name, "year": tc.year,
+		})
+		data := requireOK(t, out)
+		var page struct {
+			Items []struct {
+				Ratings []struct {
+					Name string `json:"name"`
+				} `json:"ratings"`
+			} `json:"items"`
+		}
+		if err := json.Unmarshal(data, &page); err != nil {
+			t.Fatalf("%s ratings decode: %v\n%s", tc.media, err, data)
+		}
+		if len(page.Items) != 1 || len(page.Items[0].Ratings) == 0 ||
+			page.Items[0].Ratings[0].Name != tc.want {
+			t.Fatalf("%s fallback ratings: %s", tc.media, data)
+		}
+		if !strings.Contains(strings.Join(out.Envelope.Warnings, " "), "search metadata") {
+			t.Errorf("%s fallback warning missing: %v", tc.media, out.Envelope.Warnings)
+		}
+	}
+	if calls := mock.countCalls("GET", "/api/v2/Search/ratings/"); calls != 2 {
+		t.Errorf("ratings endpoint calls = %d, want 2", calls)
+	}
+	if calls := mock.countCalls("GET", "/api/v1/Search/movie/Alien"); calls != 1 {
+		t.Errorf("movie fallback calls = %d, want 1", calls)
+	}
+	if calls := mock.countCalls("GET", "/api/v1/Search/tv/Breaking Bad"); calls != 1 {
+		t.Errorf("TV fallback calls = %d, want 1", calls)
+	}
+}
+
+func TestReadVotesPreservesUpstreamFailures(t *testing.T) {
+	mock := newMockOmbi(t, "jwt")
+	c := spawnServer(t, mock.env())
+	c.handshake(t)
+
+	cases := []map[string]any{
+		{"action": "list"},
+		{"action": "get", "media": "movie", "request_id": 2207},
+	}
+	for _, args := range cases {
+		out := c.callTool(t, "read_votes", args)
+		err := requireErr(t, out, "UPSTREAM_REJECTED")
+		if err.HTTPStatus == nil || *err.HTTPStatus != http.StatusInternalServerError {
+			t.Errorf("vote read HTTP status = %v, want 500", err.HTTPStatus)
+		}
+		if !err.Retryable {
+			t.Errorf("vote read 500 should retain generic retryable mapping")
+		}
+		if len(out.Envelope.Data) != 0 && string(out.Envelope.Data) != "null" {
+			t.Errorf("vote read fabricated data after upstream failure: %s", out.Envelope.Data)
+		}
+	}
+
+	out := c.callTool(t, "read_votes", map[string]any{
+		"action": "get", "media": "tv", "request_id": 759,
+	})
+	data := requireOK(t, out)
+	if !strings.Contains(string(data), `"kind":"vote_page"`) ||
+		!strings.Contains(string(data), `"items":[]`) {
+		t.Fatalf("empty TV votes should remain a successful empty page: %s", data)
+	}
+}
+
 func TestReadRequestsListProjection(t *testing.T) {
 	mock := newMockOmbi(t, "jwt")
 	c := spawnServer(t, mock.env())
@@ -218,6 +436,53 @@ func TestReadRequestsTVChildrenAreChildKind(t *testing.T) {
 	}
 }

+func TestReadRequestsChildrenSurfacesParentProviderIDs(t *testing.T) {
+	mock := newMockOmbi(t, "jwt")
+	c := spawnServer(t, mock.env())
+	c.handshake(t)
+
+	out := c.callTool(t, "read_requests", map[string]any{
+		"action": "children", "parent_request_id": 12,
+	})
+	data := requireOK(t, out)
+	var page struct {
+		Items []struct {
+			Target struct {
+				Kind string `json:"kind"`
+				ID   int    `json:"id"`
+			} `json:"target"`
+			ParentRequestID *int `json:"parent_request_id"`
+			Identifiers     []struct {
+				Namespace string `json:"namespace"`
+				Value     string `json:"value"`
+			} `json:"identifiers"`
+		} `json:"items"`
+	}
+	if err := json.Unmarshal(data, &page); err != nil {
+		t.Fatalf("decode: %v\n%s", err, data)
+	}
+	if len(page.Items) != 1 {
+		t.Fatalf("expected 1 child, got %d: %s", len(page.Items), data)
+	}
+	it := page.Items[0]
+	// The child id is the real upstream child PK — provider-shaped for
+	// first-request children by design — and stays callable.
+	if it.Target.Kind != "tv_child" || it.Target.ID != 77 {
+		t.Errorf("child target = %+v, want tv_child 77", it.Target)
+	}
+	if it.ParentRequestID == nil || *it.ParentRequestID != 12 {
+		t.Errorf("parent_request_id = %v, want 12", it.ParentRequestID)
+	}
+	ids := map[string]string{}
+	for _, id := range it.Identifiers {
+		ids[id.Namespace] = id.Value
+	}
+	if ids["tvdb"] != "81189" || ids["tmdb"] != "1396" || ids["imdb"] != "tt0903747" {
+		t.Errorf("parentRequest provider ids not surfaced: %v", ids)
+	}
+	assertNoLeak(t, out.Raw)
+}
+
 // --- TV identifier namespaces (Gitea issue #1) ---

 func TestReadMediaDetailsTVDBUsesV1InfoRoute(t *testing.T) {
@@ -512,6 +777,10 @@ func TestReadDiscoverRequestedFallsBackToRecentFeed(t *testing.T) {
 					Namespace string `json:"namespace"`
 					Value     string `json:"value"`
 				} `json:"identifiers"`
+				RequestTargets []struct {
+					Kind string `json:"kind"`
+					ID   int    `json:"id"`
+				} `json:"request_targets"`
 			} `json:"items"`
 			Page struct {
 				Mode  string `json:"mode"`
@@ -535,6 +804,14 @@ func TestReadDiscoverRequestedFallsBackToRecentFeed(t *testing.T) {
 		if ids["tmdb"] == "" {
 			t.Errorf("%s fallback missing tmdb identifier: %s", media, data)
 		}
+		if media == "tv" {
+			// Recent TV rows carry child request ids; the fallback must
+			// resolve them to the parent target like the primary path.
+			rt := page.Items[0].RequestTargets
+			if len(rt) != 1 || rt[0].Kind != "tv_parent" || rt[0].ID != 909 {
+				t.Errorf("tv fallback request_targets = %+v, want [{tv_parent 909}]", rt)
+			}
+		}
 		assertNoLeak(t, out.Raw)
 	}
 	if n := mock.countCalls("GET", "/api/v2/Requests/recentlyRequested"); n != 2 {
@@ -646,7 +923,7 @@ func TestReadRequestsRecentTVParentUsesRequestID(t *testing.T) {
 	if err := json.Unmarshal(data, &page); err != nil {
 		t.Fatalf("decode: %v\n%s", err, data)
 	}
-	var movie, tv *struct {
+	items := map[string]*struct {
 		Target struct {
 			Kind string `json:"kind"`
 			ID   int    `json:"id"`
@@ -656,35 +933,50 @@ func TestReadRequestsRecentTVParentUsesRequestID(t *testing.T) {
 			Namespace string `json:"namespace"`
 			Value     string `json:"value"`
 		} `json:"identifiers"`
-	}
+	}{}
 	for i := range page.Items {
-		switch page.Items[i].Title {
-		case "Yummy":
-			movie = &page.Items[i]
-		case "Seven Up!":
-			tv = &page.Items[i]
+		it := page.Items[i]
+		items[it.Title] = &it
 	}
-	}
-	if movie == nil || tv == nil {
+	movie, tv, tvChildID, orphan := items["Yummy"], items["Seven Up!"],
+		items["trigger-500 and something"], items["Provider Only"]
+	if movie == nil || tv == nil || tvChildID == nil || orphan == nil {
 		t.Fatalf("missing recent items: %s", data)
 	}
 	if movie.Target.Kind != "movie" || movie.Target.ID != 2207 {
 		t.Errorf("movie target = %+v", movie.Target)
 	}
-	if tv.Target.Kind != "tv_parent" || tv.Target.ID != 88 {
-		t.Errorf("tv_parent target = %+v, want request id 88 not provider 259032", tv.Target)
+	// TV requestId 259032 is a provider-shaped child PK upstream; the
+	// parent scan must resolve it to the real parent request id 909.
+	if tv.Target.Kind != "tv_parent" || tv.Target.ID != 909 {
+		t.Errorf("tv_parent target = %+v, want resolved parent id 909 not child/provider 259032", tv.Target)
 	}
 	tvIDs := map[string]string{}
 	for _, id := range tv.Identifiers {
 		tvIDs[id.Namespace] = id.Value
 	}
-	if tvIDs["tmdb"] != "259032" {
-		t.Errorf("tv provider id missing from identifiers: %v", tvIDs)
+	if tvIDs["tvdb"] != "259032" || tvIDs["tmdb"] != "118680" || tvIDs["imdb"] != "tt1439629" {
+		t.Errorf("tv identifiers missing parent provider ids: %v", tvIDs)
 	}
-	for _, it := range page.Items {
-		if it.Title == "Provider Only" && it.Target.ID == 111 {
-			t.Errorf("provider id occupied target.id on requestId-less recent item: %+v", it.Target)
+	if tvIDs["ombi_tv_child"] != "259032" {
+		t.Errorf("child request id missing from identifiers: %v", tvIDs)
 	}
+	// A real (non-provider-shaped) child id resolves via the parent's
+	// embedded childRequests[].id alone.
+	if tvChildID.Target.Kind != "tv_parent" || tvChildID.Target.ID != 42 {
+		t.Errorf("child-id recent item target = %+v, want parent id 42", tvChildID.Target)
+	}
+	// Unresolvable rows keep id 0 and a provider-shaped `id` must
+	// never occupy the target.
+	if orphan.Target.Kind != "tv_parent" || orphan.Target.ID != 0 {
+		t.Errorf("unresolvable tv item target = %+v, want tv_parent id 0", orphan.Target)
+	}
+	if len(out.Envelope.Warnings) == 0 {
+		t.Errorf("expected a warning for the unresolvable tv item: %s", out.Raw)
+	}
+	// All TV rows resolve in a single bounded parent scan.
+	if n := mock.countCalls("GET", "/api/v1/Request/tv/"); n != 1 {
+		t.Errorf("tv parent scan calls = %d, want 1", n)
 	}
 	assertNoLeak(t, out.Raw)
 }
@@ -1989,3 +2281,104 @@ func TestM6ServerIdentityDiscoveryAndMediaServer(t *testing.T) {
 		t.Errorf("POST /api/v1/Emby/Library was not called")
 	}
 }
+
+func TestReadRequestsListUsesRequestedDateSort(t *testing.T) {
+	mock := newMockOmbi(t, "jwt")
+	c := spawnServer(t, mock.env())
+	c.handshake(t)
+
+	out := c.callTool(t, "read_requests", map[string]any{
+		"action": "list", "media": "movie", "status": "available",
+	})
+	requireOK(t, out)
+	found := false
+	for _, r := range mock.requests() {
+		if r.Method == "GET" && strings.Contains(r.Path, "/api/v2/Requests/movie/") &&
+			strings.Contains(r.Path, "/RequestedDate/") {
+			found = true
+			if strings.Contains(r.Path, "/requestDate/") {
+				t.Errorf("legacy requestDate sort segment still present: %s", r.Path)
+			}
+		}
+	}
+	if !found {
+		t.Fatal("expected v2 movie list to use RequestedDate sort segment")
+	}
+}
+
+func TestReadDiscoverTVMostWatchedSkimsHugeSeasonGraph(t *testing.T) {
+	mock := newMockOmbi(t, "jwt")
+	c := spawnServer(t, mock.env())
+	c.handshake(t)
+
+	out := c.callTool(t, "read_discover", map[string]any{
+		"action": "browse", "media": "tv", "category": "most_watched",
+		"page": map[string]any{"limit": 3},
+	})
+	data := requireOK(t, out)
+	var page struct {
+		Items []struct {
+			Title       string `json:"title"`
+			Identifiers []struct {
+				Namespace string `json:"namespace"`
+				Value     string `json:"value"`
+			} `json:"identifiers"`
+			Seasons []any `json:"seasons"`
+		} `json:"items"`
+	}
+	if err := json.Unmarshal(data, &page); err != nil {
+		t.Fatalf("decode: %v\n%s", err, data)
+	}
+	if len(page.Items) != 1 || page.Items[0].Title != "Reacher" {
+		t.Fatalf("unexpected browse page: %s", data)
+	}
+	if len(page.Items[0].Seasons) != 0 {
+		t.Errorf("seasonRequests leaked into projection: %+v", page.Items[0].Seasons)
+	}
+	ids := map[string]string{}
+	for _, id := range page.Items[0].Identifiers {
+		ids[id.Namespace] = id.Value
+	}
+	if ids["tmdb"] != "1668" {
+		t.Errorf("identifiers = %v, want tmdb 1668", ids)
+	}
+	assertNoLeak(t, out.Raw)
+}
+
+func TestReadIssuesProviderSummaryEmptyBody(t *testing.T) {
+	mock := newMockOmbi(t, "jwt")
+	c := spawnServer(t, mock.env())
+	c.handshake(t)
+
+	out := c.callTool(t, "read_issues", map[string]any{
+		"action": "provider_summary", "provider_id": "348",
+	})
+	data := requireOK(t, out)
+	var page struct {
+		Kind  string `json:"kind"`
+		Items []any  `json:"items"`
+		Page  struct {
+			Returned int  `json:"returned"`
+			Total    *int `json:"total"`
+		} `json:"page"`
+	}
+	if err := json.Unmarshal(data, &page); err != nil {
+		t.Fatalf("decode: %v\n%s", err, data)
+	}
+	if page.Kind != "group_page" || len(page.Items) != 0 {
+		t.Fatalf("empty provider_summary must be an empty group_page: %s", data)
+	}
+	if page.Page.Returned != 0 {
+		t.Errorf("returned = %d, want 0", page.Page.Returned)
+	}
+
+	outHit := c.callTool(t, "read_issues", map[string]any{
+		"action": "provider_summary", "provider_id": "tt0089826",
+	})
+	dataHit := requireOK(t, outHit)
+	if !strings.Contains(string(dataHit), `"The Equalizer"`) {
+		t.Fatalf("non-empty provider_summary: %s", dataHit)
+	}
+	assertNoLeak(t, out.Raw)
+	assertNoLeak(t, outHit.Raw)
+}
@@ -71,6 +71,50 @@ func TestLiveServerStatus(t *testing.T) {
 	assertNoLeak(t, out.Raw)
 }

+func TestLiveServerStats(t *testing.T) {
+	c := liveServer(t)
+	out := c.callTool(t, "read_server", map[string]any{
+		"action": "stats", "from": "2026-09-01T00:00:00Z", "to": "2026-09-02T00:00:00Z",
+	})
+	data := requireOK(t, out)
+	var metrics struct {
+		Kind string `json:"kind"`
+	}
+	if err := json.Unmarshal(data, &metrics); err != nil || metrics.Kind != "metrics" {
+		t.Fatalf("stats result: %v: %s", err, data)
+	}
+}
+
+func TestLiveLogs(t *testing.T) {
+	c := liveServer(t)
+	out := c.callTool(t, "read_logs", map[string]any{"action": "list"})
+	data := requireOK(t, out)
+	var logs struct {
+		Kind string `json:"kind"`
+	}
+	if err := json.Unmarshal(data, &logs); err != nil || logs.Kind != "logs" {
+		t.Fatalf("logs result: %v: %s", err, data)
+	}
+}
+
+func TestLiveCronValidateQuartz(t *testing.T) {
+	c := liveServer(t)
+	out := c.callTool(t, "read_server", map[string]any{
+		"action": "cron_validate", "expression": "0 0 0 * * ?",
+	})
+	data := requireOK(t, out)
+	if !strings.Contains(string(data), `"name":"valid","value":true`) {
+		t.Fatalf("Quartz-valid expression reported invalid: %s", data)
+	}
+	out = c.callTool(t, "read_server", map[string]any{
+		"action": "cron_validate", "expression": "0 0 * * *",
+	})
+	data = requireOK(t, out)
+	if !strings.Contains(string(data), `"name":"valid","value":false`) {
+		t.Fatalf("five-field cron reported valid: %s", data)
+	}
+}
+
 // --- read/projection contract against real payloads ---

 func TestLiveReadRequestsList(t *testing.T) {
@@ -477,6 +521,54 @@ func TestLiveDiscoverTVBrowseHasIdentifiers(t *testing.T) {
 	assertNoLeak(t, out.Raw)
 }

+func TestLiveRecentTVParentTargetIsCallable(t *testing.T) {
+	c := liveServer(t)
+	out := c.callTool(t, "read_requests", map[string]any{"action": "recent"})
+	data := requireOK(t, out)
+	var page struct {
+		Items []struct {
+			Target struct {
+				Kind string `json:"kind"`
+				ID   int    `json:"id"`
+			} `json:"target"`
+			Title string `json:"title"`
+		} `json:"items"`
+	}
+	if err := json.Unmarshal(data, &page); err != nil {
+		t.Fatalf("decode: %v\n%s", err, data)
+	}
+	var tv *struct {
+		Target struct {
+			Kind string `json:"kind"`
+			ID   int    `json:"id"`
+		} `json:"target"`
+		Title string `json:"title"`
+	}
+	for i := range page.Items {
+		if page.Items[i].Target.Kind == "tv_parent" {
+			tv = &page.Items[i]
+			break
+		}
+	}
+	if tv == nil {
+		t.Skip("live recent feed has no TV rows")
+	}
+	// Issue #11: upstream emits a provider-shaped child request id
+	// here; the resolved tv_parent id must be callable via get.
+	if tv.Target.ID < 1 {
+		t.Skipf("recent tv row %q left unresolved (id 0)", tv.Title)
+	}
+	out = c.callTool(t, "read_requests", map[string]any{
+		"action": "get",
+		"target": map[string]any{"kind": "tv_parent", "id": tv.Target.ID},
+	})
+	if out.IsError {
+		t.Fatalf("recent tv_parent target %d not callable via get (issue #11): %s",
+			tv.Target.ID, out.Raw)
+	}
+	assertNoLeak(t, out.Raw)
+}
+
 func TestLiveSearchMultiArtistMapped(t *testing.T) {
 	c := liveServer(t)
 	out := c.callTool(t, "read_search", map[string]any{
@@ -62,9 +62,16 @@ func newMockOmbi(t *testing.T, mode string) *mockOmbi {
 	mux.HandleFunc("GET /api/v1/Status", m.wrap(m.fixed(`200`)))
 	mux.HandleFunc("GET /api/v1/Status/info", m.wrap(m.fixed(`"mock-status-info"`)))
 	mux.HandleFunc("GET /api/v1/Settings/about", m.wrap(m.json(mockAbout())))
+	mux.HandleFunc("GET /api/v1/Stats", m.wrap(m.stats))
+	mux.HandleFunc("POST /api/v1/Settings/testcron", m.wrap(m.testcron))
+	mux.HandleFunc("GET /api/v2/System/logs", m.wrap(m.fixed(`["ombi-20260918.txt","ombi-20260919.txt"]`)))
+	mux.HandleFunc("GET /api/v2/System/logs/{logFileName}", m.wrap(m.logsRead))
 	mux.HandleFunc("GET /api/v1/Request/tv/{count}/{pos}/{o}/{s}/{a}", m.wrap(m.tvParentList))
-	mux.HandleFunc("GET /api/v2/Requests/movie/{amt}/{pos}/requestDate/{order}", m.wrap(m.movieList))
-	mux.HandleFunc("GET /api/v2/Requests/tv/{amt}/{pos}/requestDate/{order}", m.wrap(m.tvList))
+	mux.HandleFunc("GET /api/v1/Request/tv/{id}/child", m.wrap(m.tvChildren))
+	mux.HandleFunc("GET /api/v2/Requests/movie/{amt}/{pos}/RequestedDate/{order}", m.wrap(m.movieList))
+	mux.HandleFunc("GET /api/v2/Requests/tv/{amt}/{pos}/RequestedDate/{order}", m.wrap(m.tvList))
+	mux.HandleFunc("GET /api/v2/Requests/movie/{status}/{amt}/{pos}/RequestedDate/{order}", m.wrap(m.movieList))
+	mux.HandleFunc("GET /api/v2/Requests/tv/{status}/{amt}/{pos}/RequestedDate/{order}", m.wrap(m.tvList))
 	mux.HandleFunc("GET /api/v2/Search/movie/{id}", m.wrap(m.movieDetails))
 	mux.HandleFunc("GET /api/v2/Search/movie/collection/{id}", m.wrap(m.movieCollection))
 	mux.HandleFunc("GET /api/v2/Search/movie/requested/{pos}/{amt}", m.wrap(m.emptyBrowse))
@@ -72,15 +79,19 @@ func newMockOmbi(t *testing.T, mode string) *mockOmbi {
 	mux.HandleFunc("GET /api/v2/Search/tv/{id}", m.wrap(m.tvDetailsTVDB))
 	mux.HandleFunc("GET /api/v2/Search/tv/popular/{pos}/{amt}", m.wrap(m.tvBrowse))
 	mux.HandleFunc("GET /api/v2/Search/tv/anticipated/{pos}/{amt}", m.wrap(m.tvBrowse))
+	mux.HandleFunc("GET /api/v2/Search/tv/mostwatched/{pos}/{amt}", m.wrap(m.tvBrowseHuge))
 	mux.HandleFunc("GET /api/v2/Search/tv/trending/{pos}/{amt}", m.wrap(m.tvBrowse))
+	mux.HandleFunc("GET /api/v2/Issues/details/{providerId}", m.wrap(m.issueProviderSummary))
 	mux.HandleFunc("GET /api/v2/Search/tv/requested/{pos}/{amt}", m.wrap(m.emptyBrowse))
 	mux.HandleFunc("GET /api/v2/Search/actor/{id}/movie", m.wrap(m.actorMovieCredits))
 	mux.HandleFunc("GET /api/v2/Search/actor/{id}/tv", m.wrap(m.actorTVCredits))
 	mux.HandleFunc("POST /api/v2/Search/advancedSearch/movie/{pos}/{amt}", m.wrap(m.advancedMovie))
 	mux.HandleFunc("POST /api/v2/Search/multi/{term}", m.wrap(m.multiSearch))
+	mux.HandleFunc("GET /api/v2/Search/ratings/{media}/{name}/{year}", m.wrap(m.ratingsUnavailable))
 	mux.HandleFunc("GET /api/v2/Requests/recentlyRequested", m.wrap(m.recentlyRequested))
 	mux.HandleFunc("GET /api/v1/Search/tv/info/{id}", m.wrap(m.tvInfoTVDB))
 	mux.HandleFunc("GET /api/v1/Search/tv/{term}", m.wrap(m.tvSearch))
+	mux.HandleFunc("GET /api/v1/Search/movie/{term}", m.wrap(m.movieSearch))
 	mux.HandleFunc("GET /api/v1/Request/movie/info/{id}", m.wrap(m.movieInfo))
 	mux.HandleFunc("POST /api/v2/Requests/tv", m.wrap(m.createTV))
 	mux.HandleFunc("POST /api/v1/Request/tv", m.wrap(m.createTV))
@@ -110,6 +121,8 @@ func newMockOmbi(t *testing.T, mode string) *mockOmbi {
 		mockUser("u-1", "alice"), mockUser("u-2", "bob"),
 	})))
 	mux.HandleFunc("GET /api/v1/Identity/User/{id}", m.wrap(m.userGet))
+	mux.HandleFunc("GET /api/v1/Vote", m.wrap(m.voteListFailure))
+	mux.HandleFunc("GET /api/v1/Vote/{media}/{id}", m.wrap(m.voteGet))
 	mux.HandleFunc("GET /api/v1/Radarr/Profiles", m.wrap(m.fixed(`[{"id":6,"name":"HD","weight":7,"enabled":false}]`)))
 	mux.HandleFunc("GET /api/v2/Search/Genres/{media}", m.wrap(m.fixed(`[{"id":53,"name":"Thriller"}]`)))
 	mux.HandleFunc("GET /api/v2/Search/Languages", m.wrap(m.fixed(`[{"iso_639_1":"ky","english_name":"??????","name":"Кыргызча"},{"iso_639_1":"zz","english_name":"??????","name":"??????"}]`)))
@@ -419,7 +432,8 @@ func mockTVInfoV1() map[string]any {
 		"title": "Breaking Bad", "name": "Breaking Bad",
 		"overview":   "A chemistry teacher turns to cooking meth.",
 		"firstAired": "2008-01-20T00:00:00", "status": "Ended",
-		"available": false, "requested": false, "fullyAvailable": false,
+		// Live sends requestId 0 (not absent) on unrequested shows.
+		"available": false, "requested": false, "requestId": 0, "fullyAvailable": false,
 		"poster": "/ggFHVNu6YYI5L9pCfOacjizRGt.jpg",
 		"banner": "/tsRy63Mu5cu8etL1X7ZLyf7UP1M.jpg",
 		"genre":  []any{"Crime", "Drama", "Thriller"},
@@ -454,7 +468,7 @@ func mockTVSearchHit() map[string]any {
 		"imdbId": "tt0903747",
 		"title":  "Breaking Bad", "name": "Breaking Bad",
 		"overview":   "A chemistry teacher turns to cooking meth.",
-		"firstAired": "2008-01-20T00:00:00",
+		"firstAired": "2008-01-20T00:00:00", "siteRating": 9,
 		"available": false, "requested": false,
 		"poster":           "/ggFHVNu6YYI5L9pCfOacjizRGt.jpg",
 		"genre":            []any{"Crime", "Drama"},
@@ -462,6 +476,13 @@ func mockTVSearchHit() map[string]any {
 	}
 }

+func mockMovieSearchHit() map[string]any {
+	return map[string]any{
+		"id": 348, "title": "Alien", "releaseDate": "1979-05-25T00:00:00",
+		"voteAverage": 8.2, "voteCount": 15400,
+	}
+}
+
 func mockMovieRequest() map[string]any {
 	return map[string]any{
 		"id": 10, "requestId": 10, "theMovieDbId": 27205, "imdbId": "tt1375666",
@@ -494,7 +515,12 @@ func mockTVChild() map[string]any {
 				},
 			},
 		},
-		"tvDbId": 81189, "externalProviderId": 1396, "imdbId": "tt0903747",
+		// ChildRequests carries no top-level provider ids upstream —
+		// they live on the embedded parent navigation property.
+		"parentRequest": map[string]any{
+			"id": 12, "tvDbId": 81189,
+			"externalProviderId": 1396, "imdbId": "tt0903747",
+		},
 		"childFieldFuture": []any{1, 2},
 	}
 }
@@ -575,18 +601,27 @@ func (m *mockOmbi) movieList(w http.ResponseWriter, r *http.Request) {
 func (m *mockOmbi) tvParentList(w http.ResponseWriter, r *http.Request) {
 	pos := r.PathValue("pos")
 	if pos != "0" {
-		m.json([]any{})(w, r)
+		m.json(map[string]any{"collection": []any{}, "total": 1})(w, r)
 		return
 	}
-	m.json([]any{
+	// RequestsViewModel<TvRequests>: the v1 paged route wraps rows in
+	// {collection,total} — scans that decode a bare array break on live.
+	m.json(map[string]any{
+		"collection": []any{
 			map[string]any{
 				"id":                 42,
 				"tvDbId":             81189,
+				"externalProviderId": 1396,
+				"imdbId":             "tt0903747",
 				"title":              "trigger-500 and something", // For search fallback test
 				"childRequests": []any{
 					map[string]any{
+						// A real (non-provider-shaped) child request
+						// id — recent rows reference this in requestId.
+						"id": 88,
 						"seasonRequests": []any{
 							map[string]any{
+								"childRequestId": 88,
 								"seasonNumber":   1,
 								"episodes": []any{
 									map[string]any{"episodeNumber": 1, "requested": true},
@@ -598,9 +633,41 @@ func (m *mockOmbi) tvParentList(w http.ResponseWriter, r *http.Request) {
 					},
 				},
 			},
+			map[string]any{
+				// Upstream persists the provider id as the child PK
+				// for new-request children — this child's id is the
+				// parent's tvDbId, exactly like live rows.
+				"id":                 909,
+				"tvDbId":             259032,
+				"externalProviderId": 118680,
+				"imdbId":             "tt1439629",
+				"title":              "Seven Up!",
+				"childRequests": []any{
+					map[string]any{
+						"id": 259032,
+						"seasonRequests": []any{
+							map[string]any{
+								"childRequestId": 259032,
+								"seasonNumber":   1,
+								"episodes":       []any{},
+							},
+						},
+					},
+				},
+			},
+		},
+		"total": 2,
 	})(w, r)
 }

+func (m *mockOmbi) tvChildren(w http.ResponseWriter, r *http.Request) {
+	if r.PathValue("id") != "12" {
+		m.jsonErr(w, http.StatusNotFound, "Parent request not found")
+		return
+	}
+	m.json([]any{mockTVChild()})(w, r)
+}
+
 func (m *mockOmbi) tvList(w http.ResponseWriter, r *http.Request) {
 	w.Header().Set("Content-Type", "application/json")
 	json.NewEncoder(w).Encode(map[string]any{
@@ -678,6 +745,26 @@ func (m *mockOmbi) tvSearch(w http.ResponseWriter, r *http.Request) {
 	m.json([]any{mockTVSearchHit()})(w, r)
 }

+func (m *mockOmbi) movieSearch(w http.ResponseWriter, r *http.Request) {
+	m.json([]any{mockMovieSearchHit()})(w, r)
+}
+
+func (m *mockOmbi) ratingsUnavailable(w http.ResponseWriter, r *http.Request) {
+	m.jsonErr(w, http.StatusInternalServerError, "external ratings provider failed")
+}
+
+func (m *mockOmbi) voteListFailure(w http.ResponseWriter, r *http.Request) {
+	m.jsonErr(w, http.StatusInternalServerError, "vote view could not be generated")
+}
+
+func (m *mockOmbi) voteGet(w http.ResponseWriter, r *http.Request) {
+	if r.PathValue("media") == "tv" {
+		m.json([]any{})(w, r)
+		return
+	}
+	m.jsonErr(w, http.StatusInternalServerError, "vote records could not be read")
+}
+
 // tvBrowse is the v2 TMDB-keyed popular/anticipated/trending list —
 // members carry the provider id only in `id`.
 func (m *mockOmbi) tvBrowse(w http.ResponseWriter, r *http.Request) {
@@ -690,6 +777,43 @@ func (m *mockOmbi) tvBrowse(w http.ResponseWriter, r *http.Request) {
 	})(w, r)
 }

+// tvBrowseHuge emulates HideAvailableFromDiscover season hydration:
+// a compact title plus a seasonRequests graph larger than the
+// default 8 MiB read budget (#27).
+func (m *mockOmbi) tvBrowseHuge(w http.ResponseWriter, r *http.Request) {
+	w.Header().Set("Content-Type", "application/json")
+	json.NewEncoder(w).Encode([]any{
+		map[string]any{
+			"id":         1668,
+			"title":      "Reacher",
+			"overview":   "A former military policeman.",
+			"posterPath": "/reacher.jpg",
+			"seasonRequests": []any{
+				map[string]any{
+					"seasonNumber": 1,
+					"overview":     strings.Repeat("x", 9<<20),
+				},
+			},
+		},
+	})
+}
+
+func (m *mockOmbi) issueProviderSummary(w http.ResponseWriter, r *http.Request) {
+	if r.PathValue("providerId") == "348" {
+		w.Header().Set("Content-Type", "application/json")
+		w.WriteHeader(http.StatusOK)
+		return
+	}
+	m.json(map[string]any{
+		"providerId": r.PathValue("providerId"),
+		"title":      "The Equalizer",
+		"count":      1,
+		"issues": []any{
+			map[string]any{"id": 1, "title": "Audio missing", "status": 0},
+		},
+	})(w, r)
+}
+
 func (m *mockOmbi) movieCollection(w http.ResponseWriter, r *http.Request) {
 	m.json(map[string]any{
 		"id": 8091, "name": "Alien Collection", "overview": "In space…",
@@ -752,16 +876,27 @@ func (m *mockOmbi) recentlyRequested(w http.ResponseWriter, r *http.Request) {
 			"requestDate": "2026-09-01T10:00:00",
 		},
 		map[string]any{
-			// Live TV recent items put the provider id in `id` and
-			// may omit requestId; target.id must not become 259032.
-			"id": 259032, "requestId": 88, "type": 0,
-			"title": "Seven Up!", "mediaId": "259032",
+			// Live TV rows carry the CHILD request id in requestId —
+			// for new-request children upstream persists the provider
+			// id as the child PK — and the parent's externalProviderId
+			// in mediaId. The parent request id is absent entirely.
+			"requestId": 259032, "type": 0,
+			"title": "Seven Up!", "mediaId": "118680",
 			"userId": "u-1", "requestDate": "2026-09-02T10:00:00",
 		},
 		map[string]any{
+			// A real (non-provider-shaped) child id — resolvable only
+			// via the parent's embedded childRequests[].id.
+			"requestId": 88, "type": 0,
+			"title": "trigger-500 and something", "mediaId": "1396",
+			"userId": "u-2", "requestDate": "2026-09-03T10:00:00",
+		},
+		map[string]any{
+			// Unresolvable: no requestId, no parent match; a stray
+			// provider-shaped `id` must never occupy target.id.
 			"id": 111, "type": 0, "title": "Provider Only",
 			"mediaId": "111", "userId": "u-1",
-			"requestDate": "2026-09-03T10:00:00",
+			"requestDate": "2026-09-04T10:00:00",
 		},
 	})(w, r)
 }
@@ -863,6 +998,37 @@ func (m *mockOmbi) plexLibraries(w http.ResponseWriter, r *http.Request) {
 	w.Write([]byte(`{"successful":true,"data":[{"id":"3","key":"3","type":"show","title":"TV Shows"},{"id":"1","key":"1","type":"movie","title":"Movies"}]}`))
 }

+func (m *mockOmbi) stats(w http.ResponseWriter, r *http.Request) {
+	if r.URL.Query().Get("from") == "" || r.URL.Query().Get("to") == "" {
+		m.jsonErr(w, http.StatusInternalServerError, "Object reference not set to an instance of an object")
+		return
+	}
+	m.fixed(`{"totalRequests":9,"totalMovieRequests":4,"totalTvRequests":5,"totalIssues":0,"completedRequestsMovies":2,"completedRequestsTv":1,"completedRequests":3}`)(w, r)
+}
+
+func (m *mockOmbi) testcron(w http.ResponseWriter, r *http.Request) {
+	var body struct {
+		Expression string `json:"expression"`
+	}
+	if err := json.NewDecoder(r.Body).Decode(&body); err != nil {
+		m.jsonErr(w, http.StatusBadRequest, "invalid JSON")
+		return
+	}
+	fields := strings.Fields(body.Expression)
+	valid := len(fields) >= 6 && len(fields) <= 7 &&
+		(fields[3] == "?") != (fields[5] == "?")
+	if valid {
+		m.fixed(`{"success":true}`)(w, r)
+		return
+	}
+	m.fixed(fmt.Sprintf(`{"success":false,"message":%q}`, "CRON Expression "+body.Expression+" is not valid"))(w, r)
+}
+
+func (m *mockOmbi) logsRead(w http.ResponseWriter, r *http.Request) {
+	w.Header().Set("Content-Type", "text/plain; charset=utf-8")
+	w.Write([]byte("2026-09-19 10:00:00 [INF] boot\n2026-09-19 10:01:00 [INF] tick\n"))
+}
+
 // mockEnv returns the server env pointing at this mock in the
 // requested mode, plus all three bundles.
 func (m *mockOmbi) env() map[string]string {
@@ -113,7 +113,7 @@ type LibraryArgs struct {

 // read_server
 type ServerArgs struct {
-	Action     string `json:"action"` // status|status_info|about|update_info|update_check|news|landing|features|stats|cron_validate
+	Action     string `json:"action"` // status|status_info|about|update_info|update_check|landing|features|stats|cron_validate
 	From       string `json:"from,omitempty"`
 	To         string `json:"to,omitempty"`
 	Expression string `json:"expression,omitempty"`
@@ -21,6 +21,20 @@ import (
 // into an unbounded entity graph.
 const maxUpstreamBody = 8 << 20 // 8 MiB

+// maxBrowseBody is the read cap for server-paged discover browse
+// routes. Ombi's TV popular/mostwatched payloads embed full
+// seasonRequests trees when HideAvailableFromDiscover is enabled,
+// so three long-running shows routinely exceed 8 MiB. The extra
+// budget is paired with a streaming skim that discards those
+// nested graphs before they become Go values.
+const maxBrowseBody = 64 << 20 // 64 MiB
+
+// browseSkipKeys are nested graphs on SearchTvShowViewModel that
+// the browse projection never emits.
+var browseSkipKeys = map[string]bool{
+	"seasonRequests": true,
+}
+
 // maxSanitizedMsg bounds upstream-derived error text.
 const maxSanitizedMsg = 300

@@ -67,6 +81,166 @@ func (o *op) call(method, path string, query map[string]string, body any) ([]byt
 	return raw, nil
 }

+// callSkimArray GETs an upstream JSON array and decodes each object
+// while skipping keys in skip. budget is the maximum number of
+// response bytes that may be consumed.
+func (o *op) callSkimArray(path string, budget int64, skip map[string]bool) ([]map[string]any, *ToolResult) {
+	resp, err := o.env.Upstream.Do(o.ctx, "GET", path, nil, nil)
+	if err != nil {
+		return nil, o.transportErr(err)
+	}
+	defer resp.Body.Close()
+	if resp.StatusCode < 200 || resp.StatusCode > 299 {
+		raw, err := io.ReadAll(io.LimitReader(resp.Body, maxUpstreamBody+1))
+		if err != nil {
+			return nil, o.transportErr(err)
+		}
+		return nil, o.httpErr(resp, raw)
+	}
+	cr := &countingReader{r: io.LimitReader(resp.Body, budget+1)}
+	arr, fail := o.decodeSkimArray(cr, budget, skip)
+	if fail != nil {
+		return nil, fail
+	}
+	return arr, nil
+}
+
+type countingReader struct {
+	r io.Reader
+	n int64
+}
+
+func (c *countingReader) Read(p []byte) (int, error) {
+	n, err := c.r.Read(p)
+	c.n += int64(n)
+	return n, err
+}
+
+func (o *op) decodeSkimArray(r io.Reader, budget int64, skip map[string]bool) ([]map[string]any, *ToolResult) {
+	cr, _ := r.(*countingReader)
+	if cr == nil {
+		cr = &countingReader{r: r}
+		r = cr
+	}
+	dec := json.NewDecoder(r)
+	tok, err := dec.Token()
+	if err != nil {
+		if cr.n > budget {
+			return nil, o.fail("UPSTREAM_SCHEMA_MISMATCH",
+				"upstream response exceeded the read budget", false)
+		}
+		return nil, o.fail("UPSTREAM_SCHEMA_MISMATCH",
+			fmt.Sprintf("upstream response was not a JSON array: %s", sanitizeErr(err)), false)
+	}
+	if delim, ok := tok.(json.Delim); !ok || delim != '[' {
+		return nil, o.fail("UPSTREAM_SCHEMA_MISMATCH",
+			"upstream response was not a JSON array", false)
+	}
+	out := []map[string]any{}
+	for dec.More() {
+		if cr.n > budget {
+			return nil, o.fail("UPSTREAM_SCHEMA_MISMATCH",
+				"upstream response exceeded the read budget", false)
+		}
+		m, err := decodeSkimObject(dec, skip)
+		if err != nil {
+			if cr.n > budget {
+				return nil, o.fail("UPSTREAM_SCHEMA_MISMATCH",
+					"upstream response exceeded the read budget", false)
+			}
+			return nil, o.fail("UPSTREAM_SCHEMA_MISMATCH",
+				fmt.Sprintf("upstream response did not match the expected shape: %s", sanitizeErr(err)), false)
+		}
+		out = append(out, m)
+		if len(out) >= maxRecords {
+			o.warnf("result capped at %d records", maxRecords)
+			o.truncated = true
+			break
+		}
+	}
+	return out, nil
+}
+
+func decodeSkimObject(dec *json.Decoder, skip map[string]bool) (map[string]any, error) {
+	tok, err := dec.Token()
+	if err != nil {
+		return nil, err
+	}
+	if delim, ok := tok.(json.Delim); !ok || delim != '{' {
+		return nil, fmt.Errorf("expected a JSON object")
+	}
+	m := map[string]any{}
+	for dec.More() {
+		kt, err := dec.Token()
+		if err != nil {
+			return nil, err
+		}
+		key, ok := kt.(string)
+		if !ok {
+			return nil, fmt.Errorf("expected object key")
+		}
+		if skip[key] {
+			if err := skipJSONValue(dec); err != nil {
+				return nil, err
+			}
+			continue
+		}
+		var v any
+		if err := dec.Decode(&v); err != nil {
+			return nil, err
+		}
+		m[key] = v
+	}
+	if _, err := dec.Token(); err != nil {
+		return nil, err
+	}
+	return m, nil
+}
+
+func skipJSONValue(dec *json.Decoder) error {
+	tok, err := dec.Token()
+	if err != nil {
+		return err
+	}
+	delim, ok := tok.(json.Delim)
+	if !ok {
+		return nil
+	}
+	switch delim {
+	case '{':
+		for dec.More() {
+			if _, err := dec.Token(); err != nil {
+				return err
+			}
+			if err := skipJSONValue(dec); err != nil {
+				return err
+			}
+		}
+		_, err = dec.Token()
+		return err
+	case '[':
+		for dec.More() {
+			if err := skipJSONValue(dec); err != nil {
+				return err
+			}
+		}
+		_, err = dec.Token()
+		return err
+	default:
+		return fmt.Errorf("unexpected JSON delimiter %v", delim)
+	}
+}
+
+// emptyCollection reports an empty/null/[] body that some Ombi
+// routes return instead of a structured empty payload.
+func emptyCollection(raw []byte) bool {
+	trim := bytes.TrimSpace(raw)
+	if len(trim) == 0 || bytes.Equal(trim, []byte("null")) {
+		return true
+	}
+	return bytes.Equal(trim, []byte("[]"))
+}
+
 // transportErr maps client/transport failures onto ToolError codes.
 // A timed-out or disconnected write has unknown outcome and is never
 // marked retryable.
@@ -0,0 +1,77 @@
+package tools
+
+import (
+	"bytes"
+	"encoding/json"
+	"strings"
+	"testing"
+)
+
+func TestEmptyCollection(t *testing.T) {
+	cases := []struct {
+		in   string
+		want bool
+	}{
+		{"", true},
+		{"  \n", true},
+		{"null", true},
+		{"[]", true},
+		{" {}", false},
+		{`{"providerId":"1"}`, false},
+		{`[{"id":1}]`, false},
+	}
+	for _, c := range cases {
+		if got := emptyCollection([]byte(c.in)); got != c.want {
+			t.Errorf("emptyCollection(%q) = %v, want %v", c.in, got, c.want)
+		}
+	}
+}
+
+func TestDecodeSkimArrayDropsSeasonRequests(t *testing.T) {
+	body := `[
+		{"id":1668,"title":"Reacher","seasonRequests":[{"seasonNumber":1,"episodes":[{"episodeNumber":1,"title":"Pilot"}]}]},
+		{"id":1396,"title":"Breaking Bad"}
+	]`
+	o := &op{warn: []string{}}
+	arr, fail := o.decodeSkimArray(strings.NewReader(body), maxBrowseBody, browseSkipKeys)
+	if fail != nil {
+		t.Fatalf("decode failed: %+v", fail.Error)
+	}
+	if len(arr) != 2 {
+		t.Fatalf("len = %d, want 2", len(arr))
+	}
+	if _, ok := arr[0]["seasonRequests"]; ok {
+		t.Errorf("seasonRequests was not skipped: %v", arr[0])
+	}
+	if arr[0]["title"] != "Reacher" {
+		t.Errorf("title = %v", arr[0]["title"])
+	}
+	if _, ok := arr[1]["seasonRequests"]; ok {
+		t.Errorf("second item unexpectedly has seasonRequests")
+	}
+}
+
+func TestDecodeSkimArrayBudget(t *testing.T) {
+	item := `{"id":1,"title":"x","seasonRequests":[` + strings.Repeat(`{"e":1},`, 100) + `{"e":2}]}`
+	body := "[" + item + "]"
+	o := &op{warn: []string{}}
+	_, fail := o.decodeSkimArray(strings.NewReader(body), 32, browseSkipKeys)
+	if fail == nil || fail.Error == nil || fail.Error.Code != "UPSTREAM_SCHEMA_MISMATCH" {
+		t.Fatalf("expected budget mismatch, got %+v", fail)
+	}
+}
+
+func TestSkipJSONValueNested(t *testing.T) {
+	raw := `{"keep":true,"seasonRequests":{"a":[1,{"b":[2,3]}],"c":"x"},"title":"T"}`
+	dec := json.NewDecoder(bytes.NewReader([]byte(raw)))
+	m, err := decodeSkimObject(dec, browseSkipKeys)
+	if err != nil {
+		t.Fatal(err)
+	}
+	if m["title"] != "T" || m["keep"] != true {
+		t.Errorf("kept fields = %v", m)
+	}
+	if _, ok := m["seasonRequests"]; ok {
+		t.Errorf("seasonRequests survived skip: %v", m)
+	}
+}
@@ -72,11 +72,7 @@ func (o *op) discoverBrowse(a *DiscoverArgs) *ToolResult {
 	}
 	pos, amt := bounds(a.Page)
 	path := fmt.Sprintf("/api/v2/Search/%s/%s/%d/%d", mediaSeg, segName, pos, amt)
-	raw, fail := o.call("GET", path, nil, nil)
-	if fail != nil {
-		return fail
-	}
-	arr, fail := o.decodeArray(raw)
+	arr, fail := o.callSkimArray(path, maxBrowseBody, browseSkipKeys)
 	if fail != nil {
 		return fail
 	}
@@ -111,6 +107,11 @@ func (o *op) discoverRequestedFallback(a *DiscoverArgs, media string) *ToolResul
 		wantType = 0
 	}
 	items := make([]Media, 0, len(arr))
+	type pendingTV struct {
+		idx int
+		key tvRecentKey
+	}
+	pending := []pendingTV{}
 	for _, m := range arr {
 		kind, ok := toInt(m["type"])
 		if !ok || kind != wantType {
@@ -132,7 +133,12 @@ func (o *op) discoverRequestedFallback(a *DiscoverArgs, media string) *ToolResul
 		if id, ok := toInt(m["requestId"]); ok && id > 0 {
 			kind := "movie"
 			if media == "tv" {
+				// Recent TV requestId is a child request id — resolve
+				// to the parent below; tv_child stays as the truthful
+				// fallback when no parent can be found.
 				kind = "tv_child"
+				pending = append(pending, pendingTV{
+					len(items), tvRecentKey{requestID: id, mediaID: jstr(m, "mediaId")}})
 			}
 			it.RequestTargets = []OutTarget{{Kind: kind, ID: id}}
 		}
@@ -143,6 +149,18 @@ func (o *op) discoverRequestedFallback(a *DiscoverArgs, media string) *ToolResul
 		}
 		items = append(items, it)
 	}
+	if len(pending) > 0 {
+		keys := make([]tvRecentKey, len(pending))
+		for i, p := range pending {
+			keys[i] = p.key
+		}
+		parents := o.resolveRecentTVParents(keys)
+		for i, p := range pending {
+			if pid := jint(parents[i], "id"); pid != nil && *pid > 0 {
+				items[p.idx].RequestTargets = []OutTarget{{Kind: "tv_parent", ID: *pid}}
+			}
+		}
+	}
 	win, _ := localWindow(o, items, a.Page, "media")
 	o.truncated = true
 	o.warnf("requested browse fell back to Ombi's bounded recently-requested feed")
@@ -160,6 +160,10 @@ func (o *op) issuesProviderSummary(a *IssuesArgs) *ToolResult {
 	if fail != nil {
 		return fail
 	}
+	if emptyCollection(raw) {
+		return o.ok(&GroupPage{Kind: "group_page",
+			Items: []Group{}, Page: singlePage(0, "provider_groups")})
+	}
 	m, fail := o.decodeObject(raw)
 	if fail != nil {
 		return fail
@@ -27,6 +27,34 @@ func logFileName(m map[string]any) string {
 	return jstr(m, "fileName", "filename", "name")
 }

+// logFileNames decodes a listing whose elements are bare file names on Ombi
+// 4.53.x. Older deployments that return objects with a name field remain
+// supported. Entries with no usable name are ignored.
+func (o *op) logFileNames(raw []byte) ([]string, *ToolResult) {
+	var els []json.RawMessage
+	if err := json.Unmarshal(raw, &els); err != nil {
+		return nil, o.fail("UPSTREAM_SCHEMA_MISMATCH",
+			"upstream response was not a JSON array: "+sanitizeErr(err), false)
+	}
+	names := []string{}
+	for _, el := range els {
+		var name string
+		if err := json.Unmarshal(el, &name); err == nil {
+			if name != "" {
+				names = append(names, name)
+			}
+			continue
+		}
+		var record map[string]any
+		if err := json.Unmarshal(el, &record); err == nil {
+			if name := logFileName(record); name != "" {
+				names = append(names, name)
+			}
+		}
+	}
+	return names, nil
+}
+
 // read_logs — list sanitized log file IDs or read a bounded,
 // sanitized slice of a single log file.
 func handleLogs(ctx context.Context, env *Env, raw json.RawMessage) *ToolResult {
@@ -50,16 +78,10 @@ func (o *op) logsList() *ToolResult {
 	if fail != nil {
 		return fail
 	}
-	arr, fail := o.decodeArray(raw)
+	names, fail := o.logFileNames(raw)
 	if fail != nil {
 		return fail
 	}
-	names := []string{}
-	for _, m := range arr {
-		if s := logFileName(m); s != "" {
-			names = append(names, s)
-		}
-	}
 	sort.Strings(names)
 	out := &Logs{Kind: "logs", Files: []LogFile{}}
 	for _, n := range names {
@@ -97,13 +119,13 @@ func (o *op) logsRead(a *LogsArgs) *ToolResult {
 	if fail != nil {
 		return fail
 	}
-	arr, fail := o.decodeArray(raw)
+	names, fail := o.logFileNames(raw)
 	if fail != nil {
 		return fail
 	}
 	name := ""
-	for _, m := range arr {
-		if n := logFileName(m); n != "" && logFileID(n) == a.FileID {
+	for _, n := range names {
+		if logFileID(n) == a.FileID {
 			name = n
 			break
 		}
@@ -119,11 +141,15 @@ func (o *op) logsRead(a *LogsArgs) *ToolResult {
 		raw = raw[:maxLogBodyBytes]
 		o.truncated = true
 	}
-	text := sanitizeText(string(raw), maxLogBodyBytes)
-	lines := strings.Split(text, "\n")
+	// Sanitize individual lines so control characters and unbounded text do
+	// not leak while preserving the upstream line boundaries for pagination.
+	lines := strings.Split(string(raw), "\n")
 	if len(lines) > 0 && lines[len(lines)-1] == "" {
 		lines = lines[:len(lines)-1]
 	}
+	for i := range lines {
+		lines[i] = sanitizeText(lines[i], maxLogBodyBytes)
+	}
 	out := &Logs{Kind: "logs", Lines: []string{}, Offset: &offset}
 	if offset < len(lines) {
 		end := offset + limit
@@ -4,6 +4,8 @@ import (
 	"context"
 	"encoding/json"
 	"fmt"
+	"sort"
+	"strings"

 	"ombi-mcp/internal/ombi"
 )
@@ -133,7 +135,10 @@ func (o *op) mediaDetails(a *mediaCallArgs) *ToolResult {
 	// #7 request state overlay for tvdb
 	if t.Media == "tv" && t.Provider == "tvdb" {
 		reqVal := jbool(m, "requested")
-		if (reqVal == nil || !*reqVal) && jint(m, "requestId") == nil {
+		// Upstream sends requestId 0 (not absent) on unrequested shows —
+		// a nil-only check keeps the overlay from ever firing on live.
+		rid := jint(m, "requestId")
+		if (reqVal == nil || !*reqVal) && (rid == nil || *rid == 0) {
 			id, _ := t.idInt()
 			o.overlayTVRequestState(&it, id, jstr(m, "imdbId"))
 		}
@@ -216,23 +221,116 @@ func (o *op) mediaRatings(a *mediaCallArgs) *ToolResult {
 	raw, fail := o.call("GET",
 		fmt.Sprintf("/api/v2/Search/ratings/%s/%s/%d", media, seg(a.Name), *a.Year),
 		nil, nil)
+	if fail != nil && !ratingsFallbackEligible(fail) {
+		return fail
+	}
+	if fail == nil {
+		var m map[string]any
+		if err := json.Unmarshal(raw, &m); err != nil {
+			return o.fail("UPSTREAM_SCHEMA_MISMATCH",
+				fmt.Sprintf("upstream response was not a JSON object: %s", sanitizeErr(err)), false)
+		}
+		if m != nil {
+			if ratings := ratingReferences(m); len(ratings) > 0 {
+				return o.ratingPage(media, a.Name, *a.Year, ratings)
+			}
+		}
+	}
+
+	// Ombi 4.53.x still exposes the Rotten Tomatoes routes above, but their
+	// private upstream endpoints have been removed. Fall back to rating
+	// metadata already returned by Ombi's normal search providers rather than
+	// turning that dependency failure into an unusable MCP action.
+	page, fallbackFail := o.mediaRatingsFromSearch(media, a.Name, *a.Year)
+	if fallbackFail != nil {
 		if fail != nil {
 			return fail
 		}
-	m, fail := o.decodeObject(raw)
-	if fail != nil {
-		return fail
+		return fallbackFail
 	}
-	it := Media{Media: media, Identifiers: []Identifier{}, Title: a.Name, Year: a.Year}
-	for k, v := range m {
+	return o.ok(page)
+}
+
+func ratingsFallbackEligible(fail *ToolResult) bool {
+	if fail == nil || fail.Error == nil || fail.Error.HTTPStatus == nil {
+		return false
+	}
+	status := *fail.Error.HTTPStatus
+	return status == 404 || status >= 500
+}
+
+func ratingReferences(m map[string]any) []Reference {
+	keys := make([]string, 0, len(m))
+	for k := range m {
+		keys = append(keys, k)
+	}
+	sort.Strings(keys)
+
+	refs := []Reference{}
+	for _, k := range keys {
+		v := m[k]
 		if i, ok := toInt(v); ok {
-			it.Ratings = append(it.Ratings, Reference{Name: k, Value: i})
+			refs = append(refs, Reference{Name: k, Value: i})
 		} else if s, ok := v.(string); ok && s != "" {
-			it.Ratings = append(it.Ratings, Reference{Name: k, Value: s})
+			refs = append(refs, Reference{Name: k, Value: s})
 		}
 	}
-	return o.ok(&MediaPage{Kind: "media_page",
-		Items: []Media{it}, Page: singlePage(1, "media")})
+	return refs
+}
+
+func (o *op) mediaRatingsFromSearch(media, name string, year int) (*MediaPage, *ToolResult) {
+	raw, fail := o.call("GET", "/api/v1/Search/"+media+"/"+seg(name), nil, nil)
+	if fail != nil {
+		return nil, fail
+	}
+	arr, fail := o.decodeArray(raw)
+	if fail != nil {
+		return nil, fail
+	}
+
+	for _, m := range arr {
+		title := jstr(m, "title", "name")
+		resultYear := yearOf(jstr(m, "releaseDate", "firstAired", "releaseYear"))
+		if !strings.EqualFold(strings.TrimSpace(title), strings.TrimSpace(name)) ||
+			resultYear == nil || *resultYear != year {
+			continue
+		}
+
+		refs := []Reference{}
+		source := ""
+		if media == "movie" {
+			source = "TMDB"
+			if v, ok := m["voteAverage"].(float64); ok {
+				refs = append(refs, Reference{Name: "tmdb_vote_average", Value: v})
+			}
+			if v, ok := toInt(m["voteCount"]); ok {
+				refs = append(refs, Reference{Name: "tmdb_vote_count", Value: v})
+			}
+		} else {
+			source = "TVMaze"
+			if v, ok := toInt(m["siteRating"]); ok {
+				refs = append(refs, Reference{Name: "tvmaze_site_rating", Value: v})
+			}
+		}
+		o.warnf("Ombi's Rotten Tomatoes ratings endpoint was unavailable; ratings were read from %s search metadata", source)
+		if len(refs) == 0 {
+			o.warnf("the matching %s search result did not include rating metadata", media)
+		}
+		return &MediaPage{Kind: "media_page", Items: []Media{{
+			Media: media, Identifiers: []Identifier{}, Title: title, Year: resultYear, Ratings: refs,
+		}}, Page: singlePage(1, "media")}, nil
+	}
+
+	o.warnf("Ombi's Rotten Tomatoes ratings endpoint was unavailable and search returned no exact title/year match")
+	return &MediaPage{Kind: "media_page", Items: []Media{{
+		Media: media, Identifiers: []Identifier{}, Title: name, Year: &year, Ratings: []Reference{},
+	}}, Page: singlePage(1, "media")}, nil
+}
+
+func (o *op) ratingPage(media, title string, year int, ratings []Reference) *ToolResult {
+	return o.ok(&MediaPage{Kind: "media_page", Items: []Media{{
+		Media: media, Identifiers: []Identifier{}, Title: title, Year: &year, Ratings: ratings,
+	}}, Page: singlePage(1, "media")})
 }

 func (o *op) mediaStreaming(a *mediaCallArgs) *ToolResult {
@@ -448,6 +448,13 @@ func (o *op) projectRequest(m map[string]any, kind string) Request {
 		r.Identifiers = addID(r.Identifiers, "tmdb", m["externalProviderId"])
 		r.Identifiers = addID(r.Identifiers, "tmdb", m["mediaId"])
 		r.Identifiers = addID(r.Identifiers, "imdb", m["imdbId"])
+		// ChildRequests carries no top-level provider ids — they live
+		// on the embedded parent record.
+		if pr := jobj(m, "parentRequest"); pr != nil {
+			r.Identifiers = addID(r.Identifiers, "tvdb", pr["tvDbId"])
+			r.Identifiers = addID(r.Identifiers, "tmdb", pr["externalProviderId"])
+			r.Identifiers = addID(r.Identifiers, "imdb", pr["imdbId"])
+		}
 	case "album":
 		r.Identifiers = addID(r.Identifiers, "musicbrainz", m["foreignAlbumId"])
 		r.Identifiers = addID(r.Identifiers, "musicbrainz", m["mediaId"])
@@ -208,6 +208,46 @@ func TestMergeTVRequestStateNoMatch(t *testing.T) {
 	}
 }

+func TestTVParentMatchChildIDBeatsProviderID(t *testing.T) {
+	parent := map[string]any{
+		"id": 909, "tvDbId": 259032, "externalProviderId": 118680,
+		"childRequests": []any{
+			map[string]any{
+				"id": 88,
+				"seasonRequests": []any{
+					map[string]any{"childRequestId": 88, "seasonNumber": 1},
+				},
+			},
+		},
+	}
+	if got := tvParentMatch(parent, tvRecentKey{requestID: 88, mediaID: "1396"}); got != tvMatchChild {
+		t.Errorf("real child id must match tier 1, got %d", got)
+	}
+	if got := tvParentMatch(parent, tvRecentKey{requestID: 259032}); got != tvMatchProvider {
+		t.Errorf("provider-shaped child pk falls back to tier 2 without embedded child, got %d", got)
+	}
+	if got := tvParentMatch(parent, tvRecentKey{requestID: 0, mediaID: "118680"}); got != tvMatchProvider {
+		t.Errorf("mediaId provider match = %d, want %d", got, tvMatchProvider)
+	}
+	if got := tvParentMatch(parent, tvRecentKey{requestID: 777, mediaID: "999"}); got != tvMatchNone {
+		t.Errorf("unrelated key matched: %d", got)
+	}
+}
+
+func TestTVParentMatchProviderShapedChildPK(t *testing.T) {
+	// Live rows: upstream persists the provider id as the child PK, so
+	// childRequests[].id equals tvDbId/externalProviderId.
+	parent := map[string]any{
+		"id": 909, "tvDbId": 259032,
+		"childRequests": []any{
+			map[string]any{"id": 259032},
+		},
+	}
+	if got := tvParentMatch(parent, tvRecentKey{requestID: 259032}); got != tvMatchChild {
+		t.Errorf("provider-shaped child id is still an exact tier-1 match, got %d", got)
+	}
+}
+
 func TestRefOfDeterministicValue(t *testing.T) {
 	o := &op{}
 	m := map[string]any{
@@ -51,7 +51,7 @@ var registry = []ToolDef{
 	{"read_votes", "core", "Global vote list or votes on a request.", true, false, true, true, []string{"vote_page"}, handleVotes},
 	{"read_users", "core", "Self, authorized user lookup, claims, online users, preference read.", true, false, true, true, []string{"user_page", "reference_page"}, handleUsers},
 	{"read_library", "core", "Recent additions, calendar, artwork.", true, false, true, true, []string{"media_page", "calendar_page", "artwork_page"}, handleLibrary},
-	{"read_server", "core", "Status, version, features, news, stats, cron validation.", true, false, true, true, []string{"metrics", "reference_page"}, handleServer},
+	{"read_server", "core", "Status, version, features, stats, cron validation.", true, false, true, true, []string{"metrics", "reference_page"}, handleServer},
 	{"read_integration", "core", "Saved ARR options and authorized media-server metadata.", true, false, true, true, []string{"reference_page", "user_page"}, handleIntegration},
 	{"write_request_create", "core", "One media request or explicit collection request.", false, false, false, true, []string{"mutation"}, handleRequestCreate},
 	{"write_request_subscribe", "core", "Subscribe/unsubscribe.", false, false, false, true, []string{"mutation"}, handleRequestSubscribe},
@@ -35,7 +35,10 @@ func handleRequests(ctx context.Context, env *Env, raw json.RawMessage) *ToolRes
 }

 // list maps media+status onto the v2 paged routes. `all` uses the
-// base route, never an /all/ segment. Sort is always requestDate.
+// base route, never an /all/ segment. Sort is always RequestedDate
+// — Ombi's TypeDescriptor lookup is the C# property name, and the
+// RAML example `requestDate` does not match (NullReferenceException
+// on every non-empty page; #10).
 func (o *op) requestsList(a *RequestsListArgs) *ToolResult {
 	var mediaSeg, kind string
 	switch a.Media {
@@ -73,7 +76,7 @@ func (o *op) requestsList(a *RequestsListArgs) *ToolResult {
 	if status != "all" {
 		path += "/" + status
 	}
-	path += fmt.Sprintf("/%d/%d/requestDate/%s", amt, pos, order)
+	path += fmt.Sprintf("/%d/%d/RequestedDate/%s", amt, pos, order)
 	raw, fail := o.call("GET", path, nil, nil)
 	if fail != nil {
 		return fail
@@ -208,6 +211,11 @@ func (o *op) requestsRecent(a *RequestsListArgs) *ToolResult {
 		return fail
 	}
 	items := []Request{}
+	type pendingTV struct {
+		idx int
+		key tvRecentKey
+	}
+	pending := []pendingTV{}
 	for _, m := range arr {
 		code, label := o.requestTypeTwin(m["type"])
 		kind := "movie"
@@ -223,17 +231,54 @@ func (o *op) requestsRecent(a *RequestsListArgs) *ToolResult {
 			kind = "movie"
 		}
 		r := o.projectRequest(m, kind)
-		// RecentlyRequestedModel.RequestId is the Ombi request id.
-		// Extra `id` on a TV payload is a provider id and must not
-		// occupy target.id even when requestId is absent.
+		if kind == "tv_parent" {
+			// On TV rows RecentlyRequestedModel.requestId is the CHILD
+			// request id (upstream persists the provider id as the
+			// child PK for new-request children), never the parent id
+			// `get` needs. Zero whatever requestId/`id` projected and
+			// resolve the parent through the v1 parent list; the child
+			// id stays available as an ombi_tv_child identifier.
+			r.Target.ID = 0
+			key := tvRecentKey{mediaID: jstr(m, "mediaId")}
+			if id, ok := toInt(m["requestId"]); ok && id > 0 {
+				key.requestID = id
+				r.Identifiers = addID(r.Identifiers, "ombi_tv_child", id)
+			}
+			pending = append(pending, pendingTV{len(items), key})
+		} else {
+			// RecentlyRequestedModel.requestId is the request id for
+			// movie/album rows; a stray provider `id` must not occupy
+			// the target even when requestId is absent.
 			if id, ok := toInt(m["requestId"]); ok && id > 0 {
 				r.Target.ID = id
 			} else {
 				r.Target.ID = 0
 			}
+		}
 		r.RequestedUserID = jstr(m, "userId")
 		items = append(items, r)
 	}
+	if len(pending) > 0 {
+		keys := make([]tvRecentKey, len(pending))
+		for i, p := range pending {
+			keys[i] = p.key
+		}
+		parents := o.resolveRecentTVParents(keys)
+		for i, p := range pending {
+			r := &items[p.idx]
+			parent, ok := parents[i]
+			pid := jint(parent, "id")
+			if !ok || pid == nil || *pid < 1 {
+				o.warnf("recent tv item %q has no resolvable parent request; target.id left unknown",
+					r.Title)
+				continue
+			}
+			r.Target.ID = *pid
+			r.Identifiers = addID(r.Identifiers, "tvdb", parent["tvDbId"])
+			r.Identifiers = addID(r.Identifiers, "tmdb", parent["externalProviderId"])
+			r.Identifiers = addID(r.Identifiers, "imdb", parent["imdbId"])
+		}
+	}
 	win, pg := localWindow(o, items, a.Page, "requests")
 	return o.ok(&RequestPage{Kind: "request_page", Items: win, Page: pg})
 }
@@ -1,7 +1,9 @@
 package tools

 import (
+	"bytes"
 	"fmt"
+	"strconv"
 )

 // eachTVRequestParent iterates GET /api/v1/Request/tv/{count}/{pos}/1/0/0
@@ -18,7 +20,7 @@ func (o *op) eachTVRequestParent(fn func(map[string]any) bool) (truncated bool,
 		if fail != nil {
 			return false, fail
 		}
-		arr, fail := o.decodeArray(raw)
+		arr, fail := o.decodeTVParentPage(raw)
 		if fail != nil {
 			return false, fail
 		}
@@ -38,6 +40,146 @@ func (o *op) eachTVRequestParent(fn func(map[string]any) bool) (truncated bool,
 	return true, nil // hit cap
 }

+// decodeTVParentPage decodes one page of the v1 TV parent list. The
+// documented shape is RequestsViewModel<TvRequests> — a
+// {"collection":[...],"total":N} object — but a bare array is tolerated
+// for versions or proxies that unwrap it.
+func (o *op) decodeTVParentPage(raw []byte) ([]map[string]any, *ToolResult) {
+	trim := bytes.TrimSpace(raw)
+	if len(trim) > 0 && trim[0] == '[' {
+		return o.decodeArray(raw)
+	}
+	vm, fail := o.decodeObject(raw)
+	if fail != nil {
+		return nil, fail
+	}
+	if _, present := vm["collection"]; !present {
+		return nil, o.fail("UPSTREAM_SCHEMA_MISMATCH",
+			"tv parent page object lacked a collection", false)
+	}
+	arr := jarr(vm, "collection")
+	out := make([]map[string]any, 0, len(arr))
+	for _, v := range arr {
+		if m, ok := v.(map[string]any); ok {
+			out = append(out, m)
+		}
+	}
+	return out, nil
+}
+
+// tvRecentKey carries the identity hints one recentlyRequested TV row
+// provides: requestId is the CHILD request id (Ombi builds recent TV
+// rows from child requests and persists the provider id as the child
+// PK for new-request children), mediaId the parent's
+// externalProviderId. The parent request id itself is never sent.
+type tvRecentKey struct {
+	requestID int
+	mediaID   string
+}
+
+const (
+	tvMatchNone = iota
+	tvMatchChild
+	tvMatchProvider
+)
+
+// tvParentChildIDs collects the real child request ids a TvRequests
+// parent record embeds: childRequests[].id plus
+// seasonRequests[].childRequestId.
+func tvParentChildIDs(p map[string]any) map[int]bool {
+	ids := map[int]bool{}
+	for _, cr := range jarr(p, "childRequests") {
+		crm, ok := cr.(map[string]any)
+		if !ok {
+			continue
+		}
+		if id := jint(crm, "id"); id != nil && *id > 0 {
+			ids[*id] = true
+		}
+		for _, sr := range jarr(crm, "seasonRequests") {
+			srm, ok := sr.(map[string]any)
+			if !ok {
+				continue
+			}
+			if id := jint(srm, "childRequestId"); id != nil && *id > 0 {
+				ids[*id] = true
+			}
+		}
+	}
+	return ids
+}
+
+// tvParentProviderIDs collects a parent record's provider ids as a
+// string set so both int requestId and string mediaId keys compare.
+func tvParentProviderIDs(p map[string]any) map[string]bool {
+	ids := map[string]bool{}
+	for _, k := range []string{"tvDbId", "externalProviderId"} {
+		if s, ok := toStr(p[k]); ok && s != "" && s != "0" {
+			ids[s] = true
+		}
+	}
+	return ids
+}
+
+// tvParentMatch reports how parent record p matches key: tvMatchChild
+// when key.requestID is one of the parent's embedded child request ids
+// (authoritative), tvMatchProvider when requestID/mediaID equals a
+// parent provider id (fallback — covers versions that put the provider
+// id in requestId directly or omit embedded children).
+func tvParentMatch(p map[string]any, k tvRecentKey) int {
+	if k.requestID > 0 && tvParentChildIDs(p)[k.requestID] {
+		return tvMatchChild
+	}
+	provs := tvParentProviderIDs(p)
+	if k.requestID > 0 && provs[strconv.Itoa(k.requestID)] {
+		return tvMatchProvider
+	}
+	if k.mediaID != "" && provs[k.mediaID] {
+		return tvMatchProvider
+	}
+	return tvMatchNone
+}
+
+// resolveRecentTVParents maps recentlyRequested TV rows onto their
+// parent request records via one bounded parent scan. Child-id matches
+// win over provider-id candidates so an unrelated parent's provider id
+// can never shadow a real child id found later in the scan. Returns
+// row-index → parent record; scan failures degrade to a warning, never
+// an error, since the recent payload itself succeeded.
+func (o *op) resolveRecentTVParents(keys []tvRecentKey) map[int]map[string]any {
+	resolved := map[int]map[string]any{}
+	candidate := map[int]map[string]any{}
+	truncated, fail := o.eachTVRequestParent(func(p map[string]any) bool {
+		for i, k := range keys {
+			if _, done := resolved[i]; done {
+				continue
+			}
+			switch tvParentMatch(p, k) {
+			case tvMatchChild:
+				resolved[i] = p
+				delete(candidate, i)
+			case tvMatchProvider:
+				if _, ok := candidate[i]; !ok {
+					candidate[i] = p
+				}
+			}
+		}
+		return len(resolved) == len(keys)
+	})
+	for i, p := range candidate {
+		if _, ok := resolved[i]; !ok {
+			resolved[i] = p
+		}
+	}
+	switch {
+	case fail != nil:
+		o.warnf("tv parent lookup failed; recent tv targets left unresolved")
+	case truncated:
+		o.warnf("tv parent lookup truncated; some recent tv targets may be unresolved")
+	}
+	return resolved
+}
+
 // mergeTVRequestState attempts to match and apply request state from a parent record p.
 // Returns true if the parent matched (stopping the scan).
 func mergeTVRequestState(it *Media, p map[string]any, tvdbID int, imdbID string) bool {
@@ -1796,18 +1796,6 @@
          ],
          "additionalProperties": false
        },
-        {
-          "type": "object",
-          "properties": {
-            "action": {
-              "const": "news"
-            }
-          },
-          "required": [
-            "action"
-          ],
-          "additionalProperties": false
-        },
        {
          "type": "object",
          "properties": {
@@ -1848,7 +1836,9 @@
            }
          },
          "required": [
-            "action"
+            "action",
+            "from",
+            "to"
          ],
          "additionalProperties": false
        },
@@ -1860,6 +1850,7 @@
            },
            "expression": {
              "type": "string",
+              "description": "Quartz cron expression — 6 or 7 fields (seconds minutes hours day-of-month month day-of-week [year]); one of the two day fields must be ?",
              "minLength": 1,
              "maxLength": 200
            }
@@ -8,7 +8,7 @@ import (
 	"ombi-mcp/internal/ombi"
 )

-// read_server — status, version, features, news, stats and the
+// read_server — status, version, features, stats and the
 // administrator-gated cron validation. Families: metrics,
 // reference_page.
 func handleServer(ctx context.Context, env *Env, raw json.RawMessage) *ToolResult {
@@ -28,8 +28,6 @@ func handleServer(ctx context.Context, env *Env, raw json.RawMessage) *ToolResul
 		return o.serverUpdateInfo()
 	case "update_check":
 		return o.serverUpdateCheck()
-	case "news":
-		return o.serverNews()
 	case "landing":
 		return o.serverLanding()
 	case "features":
@@ -137,20 +135,6 @@ func (o *op) serverUpdateCheck() *ToolResult {
 		Values: []Metric{metric("update_available", v, "instance", "")}})
 }

-func (o *op) serverNews() *ToolResult {
-	raw, fail := o.call("GET", "/api/v2/System/news", nil, nil)
-	if fail != nil {
-		return fail
-	}
-	items, fail := o.refArray(raw,
-		[]string{"id"}, []string{"title", "name", "headline"}, "news")
-	if fail != nil {
-		return fail
-	}
-	return o.ok(&ReferencePage{Kind: "reference_page",
-		Items: items, Page: singlePage(len(items), "references")})
-}
-
 func (o *op) serverLanding() *ToolResult {
 	raw, fail := o.call("GET", "/api/v1/LandingPage", nil, nil)
 	if fail != nil {
@@ -196,8 +180,14 @@ func (o *op) serverFeatures() *ToolResult {
 }

 func (o *op) serverStats(a *ServerArgs) *ToolResult {
-	// from <= to must be enforced by the server per the contract.
-	if a.From != "" && a.To != "" {
+	if !nonempty(a.From) || !nonempty(a.To) {
+		field := "from"
+		if nonempty(a.From) {
+			field = "to"
+		}
+		return o.invalid(field, "stats requires both from and to as RFC3339 date-time values")
+	}
+	// from <= to is enforced before the upstream call.
 	f, ferr := time.Parse(time.RFC3339, a.From)
 	t, terr := time.Parse(time.RFC3339, a.To)
 	if ferr != nil || terr != nil {
@@ -206,14 +196,7 @@ func (o *op) serverStats(a *ServerArgs) *ToolResult {
 	if f.After(t) {
 		return o.invalid("from", "from must be on or before to")
 	}
-	}
-	q := map[string]string{}
-	if a.From != "" {
-		q["from"] = a.From
-	}
-	if a.To != "" {
-		q["to"] = a.To
-	}
+	q := map[string]string{"from": a.From, "to": a.To}
 	raw, fail := o.call("GET", "/api/v1/Stats", q, nil)
 	if fail != nil {
 		return fail
@@ -256,5 +239,8 @@ func (o *op) serverCronValidate(a *ServerArgs) *ToolResult {
 	if s := jstr(m, "message"); s != "" {
 		vals = append(vals, metric("message", s, "instance", ""))
 	}
+	if valid, ok := m["success"].(bool); ok && !valid {
+		o.warnf("Ombi validates Quartz cron syntax (6-7 fields: seconds minutes hours day-of-month month day-of-week [year]); use ? for the unused day-of-month/day-of-week field")
+	}
 	return o.ok(&Metrics{Kind: "metrics", Values: vals})
 }
Author	SHA1	Message	Date
gronod	80e01253a2	Fix #10 , #27 and #28 from the read-tools sweep Build and publish / Test and build (linux) (pull_request) Canceled after 0s Details Build and publish / Test and build (windows) (pull_request) Canceled after 0s Details Build and publish / Build and publish Docker image (pull_request) Canceled after 0s Details Build and publish / Test and build (darwin) (pull_request) Canceled after 40s Details Build and publish / Test and build (darwin) (push) Successful in 2m9s Details Build and publish / Test and build (linux) (push) Successful in 2m34s Details Build and publish / Test and build (windows) (push) Successful in 3m11s Details Build and publish / Build and publish Docker image (push) Successful in 1m55s Details v2 request lists sent the RAML example sort field requestDate; Ombi looks up RequestedDate and NullReferenceException'd every non-empty page. Browse now streams TV popular/most-watched payloads and skips the hydrated seasonRequests graph that blew the 8 MiB read budget. provider_summary treats an empty upstream body as an empty group_page.	2026-09-19 20:59:57 +01:00
gronod	958006cff2	Document #12 vote read upstream failures Build and publish / Test and build (darwin) (pull_request) Successful in 1m50s Details Build and publish / Test and build (linux) (pull_request) Successful in 2m21s Details Build and publish / Test and build (windows) (pull_request) Successful in 3m6s Details Build and publish / Build and publish Docker image (pull_request) Successful in 1m53s Details Build and publish / Test and build (darwin) (push) Successful in 2m9s Details Build and publish / Test and build (linux) (push) Successful in 2m31s Details Build and publish / Test and build (windows) (push) Successful in 3m7s Details Build and publish / Build and publish Docker image (push) Successful in 2m15s Details	2026-09-19 18:50:24 +01:00
gronod	7658bc8f39	Fix #8 : fall back to search ratings metadata	2026-09-19 18:48:47 +01:00
gronod	6926a91c80	Fix M7 admin/server wire contracts Build and publish / Test and build (darwin) (pull_request) Successful in 1m52s Details Build and publish / Test and build (linux) (pull_request) Successful in 2m30s Details Build and publish / Test and build (windows) (pull_request) Successful in 3m7s Details Build and publish / Test and build (windows) (push) Successful in 3m7s Details Build and publish / Test and build (darwin) (push) Successful in 1m45s Details Build and publish / Test and build (linux) (push) Successful in 2m12s Details Build and publish / Build and publish Docker image (pull_request) Successful in 1m49s Details Build and publish / Build and publish Docker image (push) Successful in 2m4s Details	2026-09-19 18:36:03 +01:00
gronod	5b1be698d6	Document recent TV identity resolution and add a live callable check Build and publish / Test and build (darwin) (pull_request) Successful in 1m52s Details Build and publish / Test and build (linux) (pull_request) Successful in 2m26s Details Build and publish / Test and build (windows) (pull_request) Successful in 3m6s Details Build and publish / Test and build (windows) (push) Successful in 3m5s Details Build and publish / Test and build (darwin) (push) Successful in 1m48s Details Build and publish / Test and build (linux) (push) Successful in 2m10s Details Build and publish / Build and publish Docker image (pull_request) Successful in 1m52s Details Build and publish / Build and publish Docker image (push) Successful in 2m2s Details The schema contract claimed recent target.id is requestId for every kind — upstream TV rows actually carry a child request id there. The docs now describe the bounded parent-scan resolution, the ombi_tv_child identifier, and the id-0-with-warning degradation. A live test proves a recent tv_parent target is callable via get.	2026-09-19 16:20:03 +01:00
gronod	d07ef4f818	Treat requestId 0 as absent in the TV details overlay gate Upstream Search/tv/info responses send requestId 0 (not a missing field) for shows without a linked request, so the #7 request-state overlay never fired on live instances — requested shows reported requested:false. Now that the parent scan decodes the real collection wrapper, gating on requestId nil-or-0 lets the overlay actually run.	2026-09-19 16:19:02 +01:00
gronod	ff18e60d5a	Resolve discover requested-fallback TV rows to tv_parent targets The recentlyRequested fallback emitted tv_child targets for TV rows while the primary requested-browse path emits tv_parent — and a tv_child target is a dead end for read_requests get/children. Resolve the child request id to the parent via the same bounded scan so both paths agree; rows that fail resolution keep the truthful tv_child target.	2026-09-19 16:18:04 +01:00
gronod	0ce9e2626b	Surface parent provider ids on tv_child projections ChildRequests carries no top-level provider ids upstream — they live on the embedded parentRequest navigation property — so children/list items emitted empty identifiers. Read them from the embedded record; the child target id itself stays the true child PK (provider-shaped for first-request children by upstream design, and callable for child-scoped operations). Mock child rows and the new /Request/tv/{id}/child fixture now match the real wire shape.	2026-09-19 16:16:54 +01:00
gronod	40155b5981	Resolve recent TV rows to real tv_parent request ids Closes #11. Ombi builds recentlyRequested TV rows from child requests, so requestId is a child id — and upstream persists the provider id as the child PK for new-request children, so the value is provider-shaped (TVDB/TMDB) while the parent request id never appears in the payload. Consumers following target into read_requests get hit upstream 500s. TV rows now resolve through one bounded v1 parent scan: an exact child-id match against embedded childRequests (authoritative), then a provider-id fallback against tvDbId/externalProviderId covering versions that put the provider id in requestId directly. The child id is preserved as an ombi_tv_child identifier, provider ids land under tvdb/tmdb/imdb, and unresolvable rows emit target.id 0 with a warning rather than a fabricated or provider-shaped target.	2026-09-19 16:15:18 +01:00
gronod	012f6c0852	Decode the v1 TV parent list's RequestsViewModel wrapper Live Ombi serves GET /api/v1/Request/tv/{count}/{pos}/1/0/0 as {"collection":[...],"total":N}, not a bare array, so decodeArray made every bounded parent scan fail on real instances — the #7 details overlay and the #10 search fallback only worked against the mock's unrealistic bare-array fixture. Decode the documented wrapper shape (tolerating bare arrays) and fix the mock to serve the real shape so tests exercise what production sees.	2026-09-19 16:04:33 +01:00