feat: release payload disk cache, batched rip status for list, artwork 404, stricter input handling

server/test/static.test.ts

@@ -50,6 +50,14 @@ describe('static serving', () => {
     await app.close()
   })
 
+  it('unknown artwork paths return json 404, not the SPA', async () => {
+    const app = await build()
+    const res = await app.inject({ method: 'GET', url: '/artwork/missing.jpg' })
+    expect(res.statusCode).toBe(404)
+    expect(res.json()).toEqual({ error: 'not_found' })
+    await app.close()
+  })
+
   it('unknown api routes return json 404, not the SPA', async () => {
     const app = await build()
     const res = await app.inject({ method: 'GET', url: '/api/nope' })