perf: round 11 — StoragePath joined-only, classifier fusion, memoized bodies, query-shape pack, SPA fine-grained stars

Backend (each change benchmark-gated with BEFORE replicas + equivalence
gates; see examples/bench_round11_micro.rs, bench_round11_queries.rs,
bench_log_writer.rs and benches/ROUND11.md — final numbers land in the
follow-up doc commit):

- StoragePath re-representation: single canonical joined String, segments
  derived on demand; File/Folder drop the duplicated path_string field
  (4000→1000 allocs per 500-row listing page)
- Display classifier fusion: classify_display shares one stack-lowered
  extension across the three decision trees; call sites in FileDto,
  folder/favorites/recent handlers, trash, path-resolver (+ interning
  where Arc::from was still used)
- /status.php and /openapi.json memoized into OnceLock<Bytes> (openapi
  rebuilt a 171 KiB spec per request: 2.8 ms → 18 ns)
- NC upload-session PROPFIND: write! + pre-sized body + stack RFC2822
  dates (2.3-2.6x, 2582→772 allocs at 256 chunks)
- REST download: dead FileDto clone removed (capture mime/size + move)
- CalendarEventDto/TrashedItem into_parts moves (11 KiB ical_data memcpy
  gone per CalDAV row); CardDAV getlastmodified stack render
- 4xx path: borrowed ErrorResponse serialize, ErrorKind::as_str,
  not_found/already_exists clone kill
- vCard emit via write!; search page moved out with into_iter skip/take;
  content-hit UUIDs parsed once; group last-user check via HashSet
- RateLimiter: lock-free get + insert (and_upsert_with variant REJECTED
  by benchmark); CSRF token borrow-compare + borrowed cookie extraction
- Thumbnail/preview ETags built from as_str (Debug-identical bytes)
- Encrypted backend: encrypt_in_place_detached single-buffer write path,
  chunk-sized reserve in collect_stream; retry labels made lazy
- PG: deferred upload registration 3→1 round-trips (persist_file CTE
  template); direct_grant_cache for Calendar/AddressBook/Playlist authz
  (single-flight + set_role/clear_role invalidation); expand_user
  tokio::join!; geo clusters min(uuid)::text; recluster face assignment
  batched into one UNNEST update
- People recluster cosine: norms precomputed once (bit-identical gate)
- NC capabilities poll logs demoted to debug; tracing-appender dep added
  for the log-writer benchmark

Frontend:
- ResourceList.selectedEntries O(N)-per-toggle → id-index projection
  O(k log k); favorites/recent consume the batchToolbar snippet param and
  drop their duplicate filter + dead selectedIds mirror
- Recent: star state via new favoriteIds prop — a star click no longer
  rebuilds all N entries
- admin timeAgo >30d fallback uses the cached Intl.DateTimeFormat
- vitest gates in src/lib/components/round11.bench.test.ts

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01ABhTEHuGujvwoodh67Kga7

frontend/src/routes/favorites/+page.svelte

@@ -246,36 +246,34 @@
 	];
 
 	// ── Selection + batch ─────────────────────────────────────────────────────
-	let selectedIds = $state<Set<string>>(new Set());
-	const selectedEntries = $derived(entries.filter((e) => selectedIds.has(e.id)));
+	// Selected entries arrive via the batchToolbar snippet param —
+	// ResourceList derives them once (O(selection)); the old host-side
+	// `entries.filter(...)` shadow re-ran a second full O(N) scan per
+	// selection toggle, and its id mirror is gone with it (the component
+	// prunes its own selection when items reload) — benches/ROUND11.md.
 
-	function batchTargets() {
-		return selectedEntries.map((e) => ({ id: e.id, name: e.name, kind: e.kind }));
+	function batchTargets(sel: ResourceEntry[]) {
+		return sel.map((e) => ({ id: e.id, name: e.name, kind: e.kind }));
 	}
 
-	function batchDownload() {
-		for (const e of selectedEntries) downloadEntry(e);
+	function batchDownload(sel: ResourceEntry[]) {
+		for (const e of sel) downloadEntry(e);
 	}
 
-	async function batchDelete() {
+	async function batchDelete(sel: ResourceEntry[]) {
 		const ok = await confirmDialog({
 			title: t('common.delete', 'Delete'),
-			message: t(
-				'files.confirm_delete_n',
-				{ count: selectedEntries.length },
-				'Delete {{count}} item(s)?'
-			),
+			message: t('files.confirm_delete_n', { count: sel.length }, 'Delete {{count}} item(s)?'),
 			confirmText: t('common.delete', 'Delete'),
 			danger: true
 		});
 		if (!ok) return;
 		try {
 			await Promise.all(
-				selectedEntries.map((e) => (e.kind === 'file' ? deleteFile(e.id) : deleteFolder(e.id)))
+				sel.map((e) => (e.kind === 'file' ? deleteFile(e.id) : deleteFolder(e.id)))
 			);
-			const removed = new Set(selectedEntries.map((e) => e.id));
+			const removed = new Set(sel.map((e) => e.id));
 			raw = raw.filter((i) => !removed.has(i.resource.id));
-			selectedIds = new Set();
 		} catch (e) {
 			errorToast(e);
 		}
@@ -308,18 +306,19 @@
 		cursor = undefined;
 		load(true, orderBy, rev);
 	}}
-	onselectionchange={(ids) => (selectedIds = ids)}
 >
-	{#snippet batchToolbar()}
-		<Button icon="download" data-testid="favorites-batch-download-btn" onclick={batchDownload}
-			>{t('common.download', 'Download')}</Button
+	{#snippet batchToolbar(sel)}
+		<Button
+			icon="download"
+			data-testid="favorites-batch-download-btn"
+			onclick={() => batchDownload(sel)}>{t('common.download', 'Download')}</Button
 		>
 		<Button
 			icon="arrows-alt"
 			data-testid="favorites-batch-move-btn"
 			onclick={() => {
 				moveTarget = null;
-				moveItems = batchTargets();
+				moveItems = batchTargets(sel);
 				moveOpen = true;
 			}}>{t('files.move', 'Move')}</Button
 		>
@@ -327,7 +326,7 @@
 			variant="danger"
 			icon="trash"
 			data-testid="favorites-batch-delete-btn"
-			onclick={batchDelete}>{t('common.delete', 'Delete')}</Button
+			onclick={() => batchDelete(sel)}>{t('common.delete', 'Delete')}</Button
 		>
 	{/snippet}
 </ResourceList>
@@ -342,10 +341,7 @@
 		bind:open={moveOpen}
 		item={moveTarget}
 		items={moveItems}
-		onmoved={() => {
-			selectedIds = new Set();
-			load(true, orderByForGroup());
-		}}
+		onmoved={() => load(true, orderByForGroup())}
 	/>
 {/if}
 {#if shareDialog.component}