fix(relay): regenerate missing image thumbnails on request - #9174

…l-and-close-stalled-backfill

* origin/main:
  feat(cli): manage sidebar sections with `buzz sidebar sections` (#9191)
  Show mobile floating dates while scrolling (#9185)
  fix(relay): regenerate missing image thumbnails on request (#9174)
  feat(loadgen): model agent turns and sustained holds (#9182)
  fix(cli): list DMs, attach any file, validate kinds, default the relay (#9168)
  Add avatar color backdrop to mobile agent creation (#9184)
  Cache channel memberships once per user (#9060)

Signed-off-by: David Grochowski <[email protected]>

…cleanup

* origin/main:
  feat(cli): manage sidebar sections with `buzz sidebar sections` (#9191)
  Show mobile floating dates while scrolling (#9185)
  fix(relay): regenerate missing image thumbnails on request (#9174)
  feat(loadgen): model agent turns and sustained holds (#9182)

Signed-off-by: Will Pfleger <[email protected]>

…ip-access-when-no-match

* origin/main:
  perf(relay): serve restriction rows for 10 s with cross-pod invalidation (#9199)
  Pin sqlx to the upstream fix for a cancelled BEGIN (#9192)
  feat(cli): manage sidebar sections with `buzz sidebar sections` (#9191)
  Show mobile floating dates while scrolling (#9185)
  fix(relay): regenerate missing image thumbnails on request (#9174)
  feat(loadgen): model agent turns and sustained holds (#9182)
  fix(cli): list DMs, attach any file, validate kinds, default the relay (#9168)
  Add avatar color backdrop to mobile agent creation (#9184)
  Cache channel memberships once per user (#9060)

Signed-off-by: David Grochowski <[email protected]>

* origin/main:
  perf(relay): serve restriction rows for 10 s with cross-pod invalidation (#9199)
  Pin sqlx to the upstream fix for a cancelled BEGIN (#9192)
  feat(cli): manage sidebar sections with `buzz sidebar sections` (#9191)
  Show mobile floating dates while scrolling (#9185)
  fix(relay): regenerate missing image thumbnails on request (#9174)
  feat(loadgen): model agent turns and sustained holds (#9182)
  fix(cli): list DMs, attach any file, validate kinds, default the relay (#9168)

Signed-off-by: Brad Seiler <[email protected]>

…xels (#9198)

## Summary

Two gaps in the thumbnail regeneration from
[#9174](#9174):

- **Its MinIO tests never ran in CI.**
`api::media::tests::postgres_tests::external_infra_minio_tests` is
excluded from the PostgreSQL lane, which skips `external_infra*`
modules, and the backend integration job's only media MinIO step selects
the admin tests. A sibling step now runs them against the same Postgres
and MinIO.
- **Rebuilding a thumbnail skipped the 25 MP pixel cap.** Upload
validation rejects images over 25 megapixels before they reach the
decoder. A thumbnail rebuilt from a stored original goes straight to
`generate_image_metadata_sync`, so that cap didn't apply. The check is
now a shared `check_image_pixels` that upload validation and thumbnail
generation both run before decoding. On a rebuild, an oversized original
gets the same 404 as any other regeneration failure.

### Related issue

Follow-up to [#9174](#9174), from its
review.

### Testing

- `missing_thumbnail_is_not_regenerated_when_unsafe` now stores a valid
5001x5000 PNG as an image original without thumbnails and requests one
through the media route. On `main` the relay rebuilds and serves it;
with this change the request is a 404 and no thumbnail is written.
- The new CI step runs both `external_infra_minio_tests` cases one at a
time, since they share the fixture image's storage keys.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

---------

Signed-off-by: John Tennant <[email protected]>
Co-authored-by: Simone <0828be588d5c9c4d092c5b1cf01761d5aef63d6b104807fd8e8284d517dd1a99@buzz.block.builderlab.xyz>
Co-authored-by: Claude Opus 5.5 <[email protected]>