@serifpersia/dango 3.6.5 → 3.6.8

package/server/dist/hono/proxy.js

@@ -1,295 +1,30 @@
-import { gotScraping } from 'got-scraping';
-import path from 'path';
-import { AppCache } from '../utils/cache.utils.js';
-import { CONFIG } from '../config.js';
-import fs from 'fs';
-import logger from '../logger.js';
-import { buildCfClearanceCookie, sanitizeCfClearance } from '../utils/cookie.utils.js';
-import { isSafeExternalUrl } from '../utils/security.utils.js';
-import { fetchWithRetry, linkAbort, setProxyHeaders } from '../utils/http.utils.js';
-import { MEGAPLAY_ORIGIN, isNexabloomMasterUrl, signNexabloomMasterUrl, } from '../utils/megaplay.utils.js';
-const proxyCache = new AppCache({ ttlSeconds: 30, maxKeys: 500 });
-const imageCache = new AppCache({ ttlSeconds: 86400, maxKeys: 3000 });
-function assTimeToVtt(value) {
-    const m = value.trim().match(/^(-?\d+):(\d{2}):(\d{2})[.:](\d{2,3})$/);
-    if (!m)
-        return null;
-    const h = String(Math.max(0, parseInt(m[1], 10))).padStart(2, '0');
-    const ms = m[4].length === 2 ? `${m[4]}0` : m[4];
-    return `${h}:${m[2]}:${m[3]}.${ms}`;
-}
-function assToVtt(body) {
-    if (!/^\s*\[Script Info\]/im.test(body))
-        return null;
-    const lines = body.replace(/\r\n/g, '\n').split('\n');
-    let inEvents = false;
-    let format = null;
-    const cues = [];
-    for (const raw of lines) {
-        const line = raw.trim();
-        if (/^\[Events\]/i.test(line)) {
-            inEvents = true;
-            continue;
-        }
-        if (/^\[/.test(line)) {
-            inEvents = false;
-            continue;
-        }
-        if (!inEvents)
-            continue;
-        if (/^Format\s*:/i.test(line)) {
-            format = line
-                .replace(/^Format\s*:/i, '')
-                .split(',')
-                .map((s) => s.trim().toLowerCase());
-            continue;
-        }
-        if (!/^Dialogue\s*:/i.test(line) || !format)
-            continue;
-        const payload = line.replace(/^Dialogue\s*:/i, '');
-        const parts = [];
-        let rest = payload;
-        for (let i = 0; i < format.length - 1; i++) {
-            const idx = rest.indexOf(',');
-            if (idx < 0)
-                break;
-            parts.push(rest.slice(0, idx));
-            rest = rest.slice(idx + 1);
-        }
-        parts.push(rest);
-        const start = assTimeToVtt(parts[format.indexOf('start')] ?? '');
-        const end = assTimeToVtt(parts[format.indexOf('end')] ?? '');
-        if (!start || !end || format.indexOf('text') < 0)
-            continue;
-        const text = (parts[format.indexOf('text')] ?? '')
-            .replace(/\\\\/g, '\\u0000')
-            .replace(/\{[^}]*\}/g, '')
-            .replace(/\\N/gi, '\n')
-            .replace(/\\n/g, '\n')
-            .replace(/\\h/gi, ' ')
-            .replace(/\\[a-zA-Z]+\d*/g, '')
-            .replace(/\\u0000/g, '\\')
-            .split('\n')
-            .map((s) => s.trim())
-            .filter(Boolean)
-            .join('\n');
-        if (!text)
-            continue;
-        cues.push(`${start} --> ${end}\n${text}`);
-        if (cues.length > 5000)
-            break;
-    }
-    if (cues.length === 0)
-        return null;
-    return `WEBVTT\n\n${cues.join('\n\n')}\n`;
-}
-const SUB_WRAP_AT = 50;
-function splitBalancedCueLine(line) {
-    const words = line.split(/\s+/).filter((w) => w.length > 0);
-    if (words.length < 2)
-        return [line];
-    const total = words.join(' ').length;
-    if (total <= SUB_WRAP_AT)
-        return [line];
-    const target = total / 2;
-    let acc = words[0]?.length ?? 0;
-    let best = 1;
-    let bestDiff = Math.abs(acc - target);
-    for (let i = 1; i < words.length; i++) {
-        acc += 1 + (words[i]?.length ?? 0);
-        const diff = Math.abs(acc - target);
-        if (diff < bestDiff) {
-            bestDiff = diff;
-            best = i + 1;
-        }
-    }
-    if (best <= 0 || best >= words.length)
-        return [line];
-    return [words.slice(0, best).join(' '), words.slice(best).join(' ')];
-}
-function rewrapVttCues(vtt) {
-    const blocks = vtt.replace(/\r\n/g, '\n').split(/\n\n+/);
-    return blocks
-        .map((block, idx) => {
-        if (idx === 0 && /^\s*WEBVTT/i.test(block))
-            return block;
-        const lines = block.split('\n');
-        const tIdx = lines.findIndex((l) => l.includes('-->'));
-        if (tIdx < 0)
-            return block;
-        const payload = lines.slice(tIdx + 1).filter((l) => l.trim() !== '');
-        if (payload.length !== 1)
-            return block;
-        const split = splitBalancedCueLine((payload[0] ?? '').trim());
-        if (split.length < 2)
-            return block;
-        return [...lines.slice(0, tIdx + 1), ...split].join('\n');
-    })
-        .join('\n\n');
-}
-const KWIK_DOMAINS = new Set(['kwik.cx', 'kwik.si', 'kwik.pro']);
-const ANIMEPAHE_URL = 'https://animepahe.pw/';
-const VAULT_CDN_HOSTS = new Set(['uwucdn.top', 'owocdn.top']);
-const GOT_SCRAPING_HOSTS = new Set([
-    'kwik.cx',
-    'kwik.si',
-    'kwik.pro',
-    'animepahe.pw',
-    'animepahe.ru',
-]);
-const GOT_SCRAPING_SUFFIXES = [
-    '.uwucdn.top',
-    '.owocdn.top',
-    '.streamzone1.site',
-    '.nekostream.site',
-    '.nukitashith.top',
-    '.aniwatchtv.site',
-    '.settlar.io',
-];
-const HANIME_HOSTS = new Set(['r2.1hanime.com', '1.1hanime.com']);
-const OPPAI_HOSTS = new Set(['myspacecat.pictures']);
-const KAA_HOSTS = new Set([
-    'hls.krussdomi.com',
-    'subst.krussdomi.com',
-    'krussdomi.com',
-    'st1.advancedairesearchlab.xyz',
-    'st1.habibikun.xyz',
-    'st1.babybayw.xyz',
-    'st1.narutokun.xyz',
-]);
-const KAA_REFERER = 'https://krussdomi.com/';
-const KAA_ORIGIN = 'https://krussdomi.com';
-const ANILIGHT_REFERER = 'https://anilight.live/';
-const ANILIGHT_ORIGIN = 'https://anilight.live';
-const ANILIGHT_HOSTS = [
-    'anilight.live',
-    'api.anilight.live',
-    'lostproject.club',
-    'streamzone1.site',
-    'nukitashi.top',
-    'vivibebe.site',
-    'vibeplayer.site',
-    'aniwatchtv.site',
-];
-const NEXABLOOM_FAMILY_SUFFIXES = [
-    '.quavex.top',
-    '.nexabloom.top',
-    '.hiddenvertex.top',
-    '.ironhorizon.top',
-    '.solarhaven.top',
-];
-const NEXABLOOM_FALLBACK_HOSTS = ['fetch.nexabloom.top'];
-function nexabloomFallbackUrls(urlStr) {
-    let host = '';
-    try {
-        host = new URL(urlStr).hostname.toLowerCase();
-    }
-    catch {
-        return [urlStr];
-    }
-    if (!NEXABLOOM_FAMILY_SUFFIXES.some((s) => host.endsWith(s))) {
-        return [urlStr];
-    }
-    const urls = [urlStr];
-    for (const fallback of NEXABLOOM_FALLBACK_HOSTS) {
-        if (fallback === host)
-            continue;
-        try {
-            const candidate = new URL(urlStr);
-            candidate.hostname = fallback;
-            urls.push(candidate.href);
-        }
-        catch {
-            // ignore
-        }
-    }
-    return urls;
-}
-async function fetchNexabloomFallback(urlStr, signal, attempt, isOk) {
-    let last = null;
-    for (const candidate of nexabloomFallbackUrls(urlStr)) {
-        if (signal.aborted)
-            break;
-        const r = await attempt(candidate).catch(() => null);
-        if (!r)
-            continue;
-        if (isOk(r))
-            return r;
-        last = r;
-    }
-    return last;
-}
-function isGotScrapingHost(urlStr) {
-    try {
-        const host = new URL(urlStr).hostname.toLowerCase();
-        if (GOT_SCRAPING_HOSTS.has(host))
-            return true;
-        if (HANIME_HOSTS.has(host))
-            return true;
-        return GOT_SCRAPING_SUFFIXES.some((s) => host.endsWith(s));
-    }
-    catch {
-        return false;
-    }
-}
-function validateKwikUrl(value) {
-    if (typeof value !== 'string')
-        return null;
-    try {
-        const url = new URL(value);
-        const isSecure = url.protocol === 'https:';
-        const isKwik = KWIK_DOMAINS.has(url.hostname.toLowerCase());
-        const isEmbedPath = /^\/e\/[A-Za-z0-9_-]+$/.test(url.pathname);
-        const noAuthOrQuery = !url.username && !url.password && !url.search && !url.hash;
-        return isSecure && isKwik && isEmbedPath && noAuthOrQuery ? url : null;
-    }
-    catch {
-        return null;
-    }
-}
-function pinVariant(body, idx) {
-    const lines = body.split('\n');
-    let streamIdx = -1;
-    let skipUri = false;
-    const out = [];
-    for (const line of lines) {
-        const trimmed = line.trim();
-        if (trimmed.startsWith('#EXT-X-STREAM-INF')) {
-            streamIdx++;
-            skipUri = streamIdx !== idx;
-            if (!skipUri)
-                out.push(line);
-            continue;
-        }
-        if (skipUri && trimmed && !trimmed.startsWith('#')) {
-            skipUri = false;
-            continue;
-        }
-        out.push(line);
-    }
-    if (streamIdx < 0 || idx > streamIdx)
-        return null;
-    return out.join('\n');
-}
-function applyKwikPatches(html, kwikUrl, cookieStr = '') {
-    const safeReferer = JSON.stringify(kwikUrl.href).replace(/</g, '\\u003c');
-    const safeCookie = JSON.stringify(cookieStr).replace(/</g, '\\u003c');
-    const patched = html.replace(/\b(src|href|url)\s*[=:]\s*(["']?)(\/\/[^"'>)]+|\/(?!\/)[^"'>)]*)\2/gi, (match, attr, quote, path) => {
-        const full = path.startsWith('//') ? `https:${path}` : `${kwikUrl.origin}${path}`;
-        const prefix = match.startsWith('url') ? `url(` : `${attr}=`;
-        const suffix = match.startsWith('url') ? `)` : '';
-        return `${prefix}${quote}${full}${quote}${suffix}`;
-    });
-    const iconProxy = `/api/proxy?url=${encodeURIComponent(`${kwikUrl.origin}/app/js/vendor/plyr.svg`)}&referer=${encodeURIComponent(kwikUrl.href)}`;
-    const plyrPatch = `<script>if(window.Plyr) Plyr.defaults.iconUrl=${JSON.stringify(iconProxy).replace(/</g, '\\u003c')};</script>`;
-    const hlsPatch = `<script>
+import{gotScraping as H}from"got-scraping";import j from"path";import{AppCache as _}from"../utils/cache.utils.js";import{CONFIG as N}from"../config.js";import D from"fs";import A from"../logger.js";import{buildCfClearanceCookie as V,sanitizeCfClearance as ee}from"../utils/cookie.utils.js";import{isSafeExternalUrl as W}from"../utils/security.utils.js";import{fetchWithRetry as G,linkAbort as L,setProxyHeaders as X}from"../utils/http.utils.js";const O=new _({ttlSeconds:30,maxKeys:500}),z=new _({ttlSeconds:86400,maxKeys:3e3});function J(c){const o=c.trim().match(/^(-?\d+):(\d{2}):(\d{2})[.:](\d{2,3})$/);if(!o)return null;const e=String(Math.max(0,parseInt(o[1],10))).padStart(2,"0"),r=o[4].length===2?`${o[4]}0`:o[4];return`${e}:${o[2]}:${o[3]}.${r}`}function te(c){if(!/^\s*\[Script Info\]/im.test(c))return null;const o=c.replace(/\r\n/g,`
+`).split(`
+`);let e=!1,r=null;const i=[];for(const t of o){const n=t.trim();if(/^\[Events\]/i.test(n)){e=!0;continue}if(/^\[/.test(n)){e=!1;continue}if(!e)continue;if(/^Format\s*:/i.test(n)){r=n.replace(/^Format\s*:/i,"").split(",").map(h=>h.trim().toLowerCase());continue}if(!/^Dialogue\s*:/i.test(n)||!r)continue;const s=n.replace(/^Dialogue\s*:/i,""),d=[];let m=s;for(let h=0;h<r.length-1;h++){const b=m.indexOf(",");if(b<0)break;d.push(m.slice(0,b)),m=m.slice(b+1)}d.push(m);const R=J(d[r.indexOf("start")]??""),w=J(d[r.indexOf("end")]??"");if(!R||!w||r.indexOf("text")<0)continue;const T=(d[r.indexOf("text")]??"").replace(/\\\\/g,"\\u0000").replace(/\{[^}]*\}/g,"").replace(/\\N/gi,`
+`).replace(/\\n/g,`
+`).replace(/\\h/gi," ").replace(/\\[a-zA-Z]+\d*/g,"").replace(/\\u0000/g,"\\").split(`
+`).map(h=>h.trim()).filter(Boolean).join(`
+`);if(T&&(i.push(`${R} --> ${w}
+${T}`),i.length>5e3))break}return i.length===0?null:`WEBVTT
+
+${i.join(`
+
+`)}
+`}const re=50;function ne(c){const o=c.split(/\s+/).filter(s=>s.length>0);if(o.length<2)return[c];const e=o.join(" ").length;if(e<=re)return[c];const r=e/2;let i=o[0]?.length??0,t=1,n=Math.abs(i-r);for(let s=1;s<o.length;s++){i+=1+(o[s]?.length??0);const d=Math.abs(i-r);d<n&&(n=d,t=s+1)}return t<=0||t>=o.length?[c]:[o.slice(0,t).join(" "),o.slice(t).join(" ")]}function P(c){return c.replace(/\r\n/g,`
+`).split(/\n\n+/).map((e,r)=>{if(r===0&&/^\s*WEBVTT/i.test(e))return e;const i=e.split(`
+`),t=i.findIndex(d=>d.includes("-->"));if(t<0)return e;const n=i.slice(t+1).filter(d=>d.trim()!=="");if(n.length!==1)return e;const s=ne((n[0]??"").trim());return s.length<2?e:[...i.slice(0,t+1),...s].join(`
+`)}).join(`
+
+`)}function I(c,o){let e;try{e=new URL(c).hostname.toLowerCase()}catch{return}return o.find(r=>r.hosts?.some(i=>i===e)||r.suffixes?.some(i=>e.endsWith(i)))}function B(c,o,e){return e||(c?.originFromReferer?o:"")||c?.origin||""}function se(c,o){if(!o?.length)return[c];let e;try{e=new URL(c)}catch{return[c]}const r=new Set([e.hostname.toLowerCase()]),i=[c];for(const t of o){const n=t.toLowerCase();if(r.has(n))continue;r.add(n);const s=new URL(e.href);s.hostname=n,i.push(s.href)}return i}async function K(c,o,e,r,i){let t=null;for(const n of se(c,o)){if(e.aborted)break;const s=await r(n).catch(()=>null);if(s){if(i(s))return s;t=s}}return t}function oe(c,o){const e=c.split(`
+`);let r=-1,i=!1;const t=[];for(const n of e){const s=n.trim();if(s.startsWith("#EXT-X-STREAM-INF")){r++,i=r!==o,i||t.push(n);continue}if(i&&s&&!s.startsWith("#")){i=!1;continue}t.push(n)}return r<0||o>r?null:t.join(`
+`)}function ie(c,o,e=""){const r=JSON.stringify(o.href).replace(/</g,"\\u003c"),i=JSON.stringify(e).replace(/</g,"\\u003c"),t=c.replace(/\b(src|href|url)\s*[=:]\s*(["']?)(\/\/[^"'>)]+|\/(?!\/)[^"'>)]*)\2/gi,(T,h,b,l)=>{const u=l.startsWith("//")?`https:${l}`:`${o.origin}${l}`,y=T.startsWith("url")?"url(":`${h}=`,f=T.startsWith("url")?")":"";return`${y}${b}${u}${b}${f}`}),n=`/api/proxy?url=${encodeURIComponent(`${o.origin}/app/js/vendor/plyr.svg`)}&referer=${encodeURIComponent(o.href)}`,s=`<script>if(window.Plyr) Plyr.defaults.iconUrl=${JSON.stringify(n).replace(/</g,"\\u003c")};</script>`,d=`<script>
       (function() {
         var hook = function() {
           if (!window.Hls) return;
           var original = Hls.prototype.loadSource;
           Hls.prototype.loadSource = function(src) {
             if (typeof src === 'string' && src.includes('.m3u8')) {
-              src = window.location.origin + '/api/proxy?url=' + encodeURIComponent(src) + '&referer=' + encodeURIComponent(${safeReferer}) + (${safeCookie} ? '&cookie=' + encodeURIComponent(${safeCookie}) : '');
+              src = window.location.origin + '/api/proxy?url=' + encodeURIComponent(src) + '&referer=' + encodeURIComponent(${r}) + (${i} ? '&cookie=' + encodeURIComponent(${i}) : '');
             }
             return original.call(this, src);
           };
@@ -302,8 +37,7 @@ function applyKwikPatches(html, kwikUrl, cookieStr = '') {
           observer.observe(document.documentElement, { childList: true, subtree: true });
         }
       })();
-    </script>`;
-    const endBridgePatch = `<script>
+    </script>`,w=t.replace(/(<script[^>]+\/plyr\.min\.js[^>]*><\/script>)/i,`$1${s}`).replace(/(<script[^>]+hls(?:\.min)?\.js[^>]*><\/script>)/i,`$1${d}`).replace(/<\/body>/i,`<script>
       (function() {
         var notified = false;
         var notifyEnded = function() {
@@ -330,620 +64,17 @@ function applyKwikPatches(html, kwikUrl, cookieStr = '') {
 
         observer.observe(document.documentElement, { childList: true, subtree: true });
       })();
-    </script>`;
-    const beforePlyr = patched.replace(/(<script[^>]+\/plyr\.min\.js[^>]*><\/script>)/i, `$1${plyrPatch}`);
-    const final = beforePlyr
-        .replace(/(<script[^>]+hls(?:\.min)?\.js[^>]*><\/script>)/i, `$1${hlsPatch}`)
-        .replace(/<\/body>/i, `${endBridgePatch}</body>`);
-    return final === html ? null : final;
-}
-function placeholderSvg() {
-    const possiblePaths = [
-        path.join(CONFIG.PACKAGE_ROOT, 'client/public/placeholder.svg'),
-        path.join(CONFIG.PACKAGE_ROOT, 'client/dist/placeholder.svg'),
-        path.join(CONFIG.SERVER_ROOT, '..', 'client/public/placeholder.svg'),
-    ];
-    for (const p of possiblePaths) {
-        try {
-            if (fs.existsSync(p)) {
-                const headers = new Headers();
-                headers.set('Cache-Control', 'no-store');
-                headers.set('Content-Type', 'image/svg+xml');
-                return new Response(fs.readFileSync(p), { headers });
-            }
-        }
-        catch {
-            // ignore
-        }
-    }
-    return null;
-}
-const PROXY_UA = 'Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0';
-export function registerProxy(app) {
-    app.get('/api/proxy', async (c) => {
-        const url = c.req.query('url');
-        if (!url)
-            return c.text('URL required', 400);
-        const safeCheck = isSafeExternalUrl(url);
-        if (!safeCheck.safe) {
-            return c.text(safeCheck.error || 'Invalid URL', 400);
-        }
-        const urlStr = url;
-        const refererStr = c.req.query('referer') || '';
-        const cookieStr = c.req.query('cookie') || '';
-        const variantRaw = c.req.query('variant');
-        const variantIdx = variantRaw !== undefined ? parseInt(variantRaw, 10) : NaN;
-        const pinVar = Number.isInteger(variantIdx) && variantIdx >= 0;
-        const cacheKey = `m3u8-${urlStr}-${refererStr}${pinVar ? `-v${variantIdx}` : ''}`;
-        const abort = new AbortController();
-        linkAbort(c.req.raw.signal, abort);
-        try {
-            const isVaultCdn = Array.from(VAULT_CDN_HOSTS).some((host) => urlStr.includes(host));
-            const isHanime = Array.from(HANIME_HOSTS).some((host) => urlStr.includes(host));
-            const isOppai = Array.from(OPPAI_HOSTS).some((host) => urlStr.includes(host));
-            const isKaa = refererStr.startsWith(KAA_ORIGIN) ||
-                Array.from(KAA_HOSTS).some((host) => urlStr.includes(host));
-            const headers = {
-                'User-Agent': PROXY_UA,
-            };
-            if (refererStr)
-                headers['Referer'] = refererStr;
-            if (isVaultCdn) {
-                headers['Origin'] = refererStr || ANIMEPAHE_URL;
-                const cookieHeader = buildCfClearanceCookie(cookieStr);
-                if (cookieHeader)
-                    headers['Cookie'] = cookieHeader;
-            }
-            if (isHanime) {
-                if (!headers['Referer'])
-                    headers['Referer'] = refererStr || 'https://nhplayer.com/';
-                headers['Origin'] = 'https://nhplayer.com';
-            }
-            if (isOppai) {
-                if (!headers['Referer'])
-                    headers['Referer'] = refererStr || 'https://oppai.stream/';
-                headers['Origin'] = 'https://oppai.stream';
-            }
-            if (isKaa) {
-                if (!headers['Referer'])
-                    headers['Referer'] = refererStr || KAA_REFERER;
-                headers['Origin'] = KAA_ORIGIN;
-            }
-            const isMegaplay = refererStr.startsWith(MEGAPLAY_ORIGIN) || urlStr.includes('nexabloom.top');
-            if (isMegaplay && !headers['Origin']) {
-                headers['Origin'] = MEGAPLAY_ORIGIN;
-            }
-            if (urlStr.includes('weeabo0.xyz') || urlStr.includes('weeab0o.xyz')) {
-                if (!headers['Referer'])
-                    headers['Referer'] = refererStr || 'https://japaneseasmr.com/';
-                const jasmrCookieHeader = buildCfClearanceCookie(cookieStr);
-                if (jasmrCookieHeader)
-                    headers['Cookie'] = jasmrCookieHeader;
-                const jasmrUa = c.req.query('ua') || '';
-                if (jasmrUa)
-                    headers['User-Agent'] = jasmrUa;
-            }
-            const range = c.req.header('range');
-            if (range)
-                headers['Range'] = range;
-            const playlistResponse = (body) => {
-                const outHeaders = new Headers();
-                outHeaders.set('Content-Type', 'application/vnd.apple.mpegurl');
-                outHeaders.set('Access-Control-Allow-Origin', '*');
-                return new Response(body, { headers: outHeaders });
-            };
-            const rewritePlaylist = (playlistBody, finalUrl) => {
-                const baseUrl = new URL(finalUrl);
-                const proxiedMediaUrl = (targetUrl) => `/api/proxy?url=${encodeURIComponent(targetUrl)}&referer=${encodeURIComponent(refererStr)}` +
-                    (cookieStr ? `&cookie=${encodeURIComponent(sanitizeCfClearance(cookieStr))}` : '') +
-                    (c.req.query('ua') ? `&ua=${encodeURIComponent(c.req.query('ua'))}` : '');
-                const needsProxy = Boolean(refererStr);
-                const isProxied = (value) => value.includes('/api/proxy');
-                const pinned = pinVar ? pinVariant(playlistBody, variantIdx) : null;
-                return (pinned || playlistBody)
-                    .split('\n')
-                    .map((line) => {
-                    const trimmed = line.trim();
-                    if (!trimmed)
-                        return line;
-                    if (trimmed.startsWith('#')) {
-                        return trimmed.replace(/URI="([^"]+)"/g, (_, uri) => {
-                            if (isProxied(uri))
-                                return `URI="${uri}"`;
-                            const absolute = new URL(uri, baseUrl).href;
-                            return `URI="${needsProxy || absolute.includes('.m3u8') ? proxiedMediaUrl(absolute) : absolute}"`;
-                        });
-                    }
-                    if (isProxied(trimmed))
-                        return line;
-                    const absolute = new URL(trimmed, baseUrl).href;
-                    return proxiedMediaUrl(absolute);
-                })
-                    .join('\n');
-            };
-            if (urlStr.includes('.m3u8')) {
-                const cached = proxyCache.get(cacheKey);
-                if (cached) {
-                    const headers = new Headers();
-                    headers.set('Content-Type', 'application/vnd.apple.mpegurl');
-                    headers.set('Access-Control-Allow-Origin', '*');
-                    return new Response(cached, { headers });
-                }
-                const resp = await fetchNexabloomFallback(urlStr, abort.signal, (candidate) => gotScraping({
-                    url: isNexabloomMasterUrl(candidate) ? signNexabloomMasterUrl(candidate) : candidate,
-                    method: 'GET',
-                    headers,
-                    responseType: 'text',
-                    timeout: { request: 30000 },
-                    followRedirect: true,
-                    throwHttpErrors: false,
-                }), (attempt) => attempt.statusCode === 200 || attempt.statusCode === 206);
-                if (!resp || (resp.statusCode !== 200 && resp.statusCode !== 206)) {
-                    return c.text('Upstream error', (resp?.statusCode || 502));
-                }
-                const rewritten = rewritePlaylist(resp.body, resp.url || urlStr);
-                proxyCache.set(cacheKey, rewritten);
-                return playlistResponse(rewritten);
-            }
-            else {
-                if (isGotScrapingHost(urlStr)) {
-                    if (range)
-                        headers['Range'] = range;
-                    const resp = await fetchNexabloomFallback(urlStr, abort.signal, (candidate) => gotScraping({
-                        url: candidate,
-                        method: 'GET',
-                        headers,
-                        responseType: 'buffer',
-                        timeout: { request: 30000 },
-                        followRedirect: true,
-                        throwHttpErrors: false,
-                    }), (attempt) => attempt.statusCode === 200 || attempt.statusCode === 206);
-                    if (!resp || (resp.statusCode !== 200 && resp.statusCode !== 206)) {
-                        return c.text('Upstream error', (resp?.statusCode || 502));
-                    }
-                    const ct = resp.headers['content-type'];
-                    const isVtt = urlStr.endsWith('.vtt') || urlStr.includes('.vtt?');
-                    const bodyText = String(resp.body ?? '');
-                    if (!isVtt &&
-                        ((typeof ct === 'string' && ct.includes('mpegurl')) || bodyText.startsWith('#EXTM3U'))) {
-                        const cached = proxyCache.get(cacheKey);
-                        const rewritten = cached ?? rewritePlaylist(bodyText, resp.url || urlStr);
-                        if (!cached)
-                            proxyCache.set(cacheKey, rewritten);
-                        return playlistResponse(rewritten);
-                    }
-                    const outHeaders = new Headers();
-                    outHeaders.set('Content-Type', isVtt ? 'text/vtt; charset=utf-8' : ct || 'application/octet-stream');
-                    setProxyHeaders(outHeaders, (name) => resp.headers[name]);
-                    return new Response(resp.body, {
-                        status: resp.statusCode,
-                        headers: outHeaders,
-                    });
-                }
-                else {
-                    const upstream = await fetchNexabloomFallback(urlStr, abort.signal, async (candidate) => {
-                        const attempt = await fetchWithRetry(candidate, { method: 'GET', headers }, { retries: 3, timeoutMs: 30000, signal: abort.signal });
-                        if (attempt.status !== 200 && attempt.status !== 206) {
-                            try {
-                                await attempt.body?.cancel();
-                            }
-                            catch {
-                                // ignore
-                            }
-                        }
-                        return attempt;
-                    }, (attempt) => attempt.status === 200 || attempt.status === 206);
-                    if (!upstream) {
-                        return c.text('Upstream error', 502);
-                    }
-                    const status = upstream.status;
-                    if (status !== 200 && status !== 206) {
-                        try {
-                            await upstream.body?.cancel();
-                        }
-                        catch {
-                            // ignore
-                        }
-                        return c.text('Upstream error', status);
-                    }
-                    const isVtt = urlStr.endsWith('.vtt') || urlStr.includes('.vtt?');
-                    const ct = upstream.headers.get('content-type');
-                    const outHeaders = new Headers();
-                    outHeaders.set('Content-Type', isVtt ? 'text/vtt; charset=utf-8' : ct || 'application/octet-stream');
-                    setProxyHeaders(outHeaders, (name) => upstream.headers.get(name));
-                    if (!upstream.body) {
-                        return c.text('Upstream error', 502);
-                    }
-                    return new Response(upstream.body, { status: status, headers: outHeaders });
-                }
-            }
-        }
-        catch (e) {
-            if (abort.signal.aborted)
-                return new Response(null, { status: 499 });
-            logger.error({ url: urlStr, error: e?.message }, '[proxy] upstream request failed');
-            return c.text('Proxy error', 500);
-        }
-    });
-    app.get('/api/embed-proxy', async (c) => {
-        const kwikUrl = validateKwikUrl(c.req.query('url'));
-        if (!kwikUrl)
-            return c.text('Invalid or unsupported gateway URL', 400);
-        const cookieStr = c.req.query('cookie') || '';
-        const abort = new AbortController();
-        linkAbort(c.req.raw.signal, abort);
-        try {
-            const headers = {
-                'User-Agent': PROXY_UA,
-                Referer: ANIMEPAHE_URL,
-                Origin: 'https://animepahe.pw',
-            };
-            if (cookieStr) {
-                const cookieHeader = buildCfClearanceCookie(cookieStr);
-                if (cookieHeader)
-                    headers['Cookie'] = cookieHeader;
-            }
-            const response = await gotScraping({
-                url: kwikUrl.href,
-                method: 'GET',
-                headers,
-                responseType: 'text',
-                timeout: { request: 30000 },
-                followRedirect: true,
-                throwHttpErrors: false,
-            });
-            const originalHtml = response.body;
-            const patched = applyKwikPatches(originalHtml, kwikUrl, cookieStr);
-            if (!patched)
-                return c.text('Failed to patch video gateway', 502);
-            const outHeaders = new Headers();
-            outHeaders.set('Content-Type', 'text/html; charset=utf-8');
-            outHeaders.set('Cache-Control', 'private, max-age=120');
-            return new Response(patched, { status: 200, headers: outHeaders });
-        }
-        catch {
-            if (abort.signal.aborted)
-                return new Response(null, { status: 499 });
-            return c.text('Gateway proxy error', 502);
-        }
-    });
-    app.get('/api/subtitle-proxy', async (c) => {
-        const url = c.req.query('url');
-        if (!url)
-            return c.text('URL required', 400);
-        const safeCheck = isSafeExternalUrl(url);
-        if (!safeCheck.safe) {
-            return c.text(safeCheck.error || 'Invalid URL', 400);
-        }
-        const abort = new AbortController();
-        linkAbort(c.req.raw.signal, abort);
-        const subUrl = url;
-        const refererStr = c.req.query('referer') || '';
-        const isAnilight = refererStr.includes('anilight.live') || ANILIGHT_HOSTS.some((host) => subUrl.includes(host));
-        const innerRawUrl = (() => {
-            try {
-                const parsed = new URL(subUrl);
-                if (parsed.hostname.toLowerCase().endsWith('anilight.live') &&
-                    parsed.pathname.includes('/proxy/captions')) {
-                    const inner = parsed.searchParams.get('url');
-                    if (inner && (inner.startsWith('http://') || inner.startsWith('https://'))) {
-                        return inner;
-                    }
-                }
-            }
-            catch {
-                // ignore
-            }
-            return null;
-        })();
-        const buildHeaders = () => {
-            const headers = {
-                'User-Agent': 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36',
-                Accept: 'text/vtt,text/plain,*/*;q=0.8',
-            };
-            if (refererStr) {
-                headers['Referer'] = refererStr;
-            }
-            else if (isAnilight) {
-                headers['Referer'] = ANILIGHT_REFERER;
-            }
-            if (refererStr.startsWith(KAA_ORIGIN) ||
-                Array.from(KAA_HOSTS).some((host) => subUrl.includes(host))) {
-                headers['Origin'] = KAA_ORIGIN;
-            }
-            else if (isAnilight) {
-                headers['Origin'] = ANILIGHT_ORIGIN;
-            }
-            return headers;
-        };
-        const fetchText = async (target, retries = 1) => {
-            const headers = buildHeaders();
-            if (innerRawUrl && target === innerRawUrl) {
-                headers['Referer'] = ANILIGHT_REFERER;
-                headers['Origin'] = ANILIGHT_ORIGIN;
-            }
-            if (isGotScrapingHost(target)) {
-                try {
-                    const upstream = await gotScraping({
-                        url: target,
-                        method: 'GET',
-                        headers,
-                        responseType: 'text',
-                        timeout: { request: 15000 },
-                        followRedirect: true,
-                        throwHttpErrors: false,
-                    });
-                    if (upstream.statusCode !== 200) {
-                        logger.warn({ target, status: upstream.statusCode }, '[subtitle-proxy] upstream returned error status');
-                        return { status: upstream.statusCode, body: '' };
-                    }
-                    const body = String(upstream.body ?? '').replace(/^\uFEFF/, '');
-                    if (/^\s*\{[\s\S]*"error"[\s\S]*\}\s*$/.test(body.slice(0, 500))) {
-                        logger.warn({ target, body: body.slice(0, 200) }, '[subtitle-proxy] upstream JSON error');
-                        return { status: 502, body: '' };
-                    }
-                    return { status: 200, body };
-                }
-                catch (e) {
-                    if (abort.signal.aborted)
-                        return null;
-                    logger.warn({ target, error: e?.message }, '[subtitle-proxy] upstream fetch failed');
-                    return { status: 502, body: '' };
-                }
-            }
-            try {
-                const upstream = await fetchWithRetry(target, { method: 'GET', headers }, { retries, timeoutMs: 15000, signal: abort.signal });
-                if (!upstream.ok) {
-                    logger.warn({ target, status: upstream.status }, '[subtitle-proxy] upstream returned error status');
-                    try {
-                        await upstream.body?.cancel();
-                    }
-                    catch {
-                        // ignore
-                    }
-                    return { status: upstream.status, body: '' };
-                }
-                const body = (await upstream.text()).replace(/^\uFEFF/, '');
-                if (/^\s*\{[\s\S]*"error"[\s\S]*\}\s*$/.test(body.slice(0, 500))) {
-                    logger.warn({ target, body: body.slice(0, 200) }, '[subtitle-proxy] upstream JSON error');
-                    return { status: 502, body: '' };
-                }
-                return { status: upstream.status, body };
-            }
-            catch (e) {
-                if (abort.signal.aborted)
-                    return null;
-                logger.warn({ target, error: e?.message }, '[subtitle-proxy] upstream fetch failed');
-                return { status: 502, body: '' };
-            }
-        };
-        const vttHeaders = (cacheControl) => {
-            const headers = new Headers();
-            headers.set('Content-Type', 'text/vtt; charset=utf-8');
-            headers.set('Access-Control-Allow-Origin', '*');
-            headers.set('Cache-Control', cacheControl);
-            return headers;
-        };
-        const subtitleError = (text) => {
-            const headers = new Headers();
-            headers.set('Access-Control-Allow-Origin', '*');
-            headers.set('Cache-Control', 'no-store');
-            return new Response(text, { status: 502, headers });
-        };
-        try {
-            const headers = buildHeaders();
-            let result = await fetchText(subUrl, 1);
-            if (abort.signal.aborted)
-                return new Response(null, { status: 499 });
-            if ((!result || !result.body) && innerRawUrl) {
-                result = await fetchText(innerRawUrl, 0);
-                if (abort.signal.aborted)
-                    return new Response(null, { status: 499 });
-            }
-            if (!result || !result.body) {
-                return subtitleError('Subtitle upstream error');
-            }
-            const body = result.body;
-            const baseForSegments = innerRawUrl || subUrl;
-            if (/#EXTM3U/i.test(body.slice(0, 1000))) {
-                const segUrls = body
-                    .split('\n')
-                    .map((l) => l.trim())
-                    .filter((l) => l && !l.startsWith('#'))
-                    .slice(0, 200)
-                    .map((u) => {
-                    try {
-                        return new URL(u, baseForSegments).href;
-                    }
-                    catch {
-                        return null;
-                    }
-                })
-                    .filter((u) => Boolean(u));
-                const parts = [];
-                for (const seg of segUrls) {
-                    try {
-                        const segRes = await fetchWithRetry(seg, { method: 'GET', headers }, { retries: 1, timeoutMs: 15000, signal: abort.signal });
-                        if (!segRes.ok)
-                            continue;
-                        let segBody = (await segRes.text()).replace(/^\uFEFF/, '');
-                        if (/#EXTM3U/i.test(segBody.slice(0, 200)))
-                            continue;
-                        segBody = segBody
-                            .replace(/\r\n/g, '\n')
-                            .replace(/(\d{2}:\d{2}:\d{2}),(\d{3})/g, '$1.$2');
-                        if (/^\s*WEBVTT/i.test(segBody)) {
-                            segBody = segBody.replace(/^\s*WEBVTT[^\n]*\n(\n|.*\n)?/, '');
-                        }
-                        segBody = segBody.trim();
-                        if (segBody)
-                            parts.push(segBody);
-                        if (parts.join('\n').length > 2_000_000)
-                            break;
-                    }
-                    catch {
-                        if (abort.signal.aborted)
-                            return new Response(null, { status: 499 });
-                    }
-                }
-                if (parts.length === 0) {
-                    return subtitleError('Subtitle playlist empty');
-                }
-                return new Response(rewrapVttCues(`WEBVTT\n\n${parts.join('\n\n')}\n`), {
-                    headers: vttHeaders('public, max-age=86400'),
-                });
-            }
-            if (/^\s*WEBVTT/i.test(body)) {
-                return new Response(rewrapVttCues(body), {
-                    headers: vttHeaders('public, max-age=86400'),
-                });
-            }
-            const vttFromAss = assToVtt(body);
-            if (vttFromAss) {
-                return new Response(rewrapVttCues(vttFromAss), {
-                    headers: vttHeaders('public, max-age=86400'),
-                });
-            }
-            return new Response(rewrapVttCues(`WEBVTT\n\n${body.replace(/\r\n/g, '\n').replace(/(\d{2}:\d{2}:\d{2}),(\d{3})/g, '$1.$2')}`), { headers: vttHeaders('public, max-age=86400') });
-        }
-        catch {
-            if (abort.signal.aborted)
-                return new Response(null, { status: 499 });
-            logger.warn({ url: subUrl }, '[subtitle-proxy] failed');
-            return subtitleError('Subtitle upstream error');
-        }
-    });
-    app.get('/api/image-proxy', async (c) => {
-        const url = c.req.query('url');
-        if (!url)
-            return c.text('URL required', 400);
-        const safeCheck = isSafeExternalUrl(url);
-        if (!safeCheck.safe) {
-            return c.text(safeCheck.error || 'Invalid URL', 400);
-        }
-        const targetUrl = url;
-        const cookie = c.req.query('cookie') || '';
-        const ua = c.req.query('ua') || '';
-        const strict = c.req.query('strict') === '1';
-        const abort = new AbortController();
-        linkAbort(c.req.raw.signal, abort);
-        let refererValue = 'https://anilist.co/';
-        const headers = {
-            'User-Agent': ua ||
-                'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36',
-        };
-        const cacheKey = `${targetUrl}|${cookie}|${ua}`;
-        const cached = imageCache.get(cacheKey);
-        if (cached) {
-            const hit = new Headers();
-            hit.set('Cache-Control', 'public, max-age=604800, immutable');
-            hit.set('Content-Type', cached.contentType);
-            hit.set('Access-Control-Allow-Origin', '*');
-            hit.set('X-Dango-Cache', 'hit');
-            return new Response(cached.body, { headers: hit });
-        }
-        try {
-            if (targetUrl.includes('animepahe')) {
-                refererValue = 'https://animepahe.pw/';
-                headers['Cookie'] = `cf_clearance=${sanitizeCfClearance(cookie)}`;
-            }
-            else if (targetUrl.includes('anilist.co')) {
-                refererValue = 'https://anilist.co/';
-            }
-            else if (targetUrl.includes('gogocdn.net')) {
-                refererValue = 'https://gogoanime.lu/';
-            }
-            else if (targetUrl.includes('animeya.cc')) {
-                refererValue = 'https://animeya.cc/';
-            }
-            else if (targetUrl.includes('myspacecat.pictures')) {
-                refererValue = 'https://oppai.stream/';
-            }
-            else if (targetUrl.includes('weeabo0.xyz')) {
-                refererValue = 'https://japaneseasmr.com/';
-                const jasmrCookieHeader = buildCfClearanceCookie(cookie);
-                if (jasmrCookieHeader)
-                    headers['Cookie'] = jasmrCookieHeader;
-                const uaParam = ua || '';
-                if (uaParam)
-                    headers['User-Agent'] = uaParam;
-            }
-            headers['Referer'] = refererValue;
-            let body = null;
-            let contentType = 'image/webp';
-            for (let attempt = 0; attempt < 3 && !body; attempt++) {
-                const resp = await gotScraping({
-                    url: targetUrl,
-                    method: 'GET',
-                    headers,
-                    responseType: 'buffer',
-                    followRedirect: true,
-                    throwHttpErrors: false,
-                    timeout: { request: 30000 },
-                });
-                if (resp.statusCode === 200 && resp.rawBody?.length) {
-                    body = Buffer.from(resp.rawBody);
-                    contentType = String(resp.headers['content-type'] || 'image/webp');
-                }
-                else {
-                    if (attempt < 2)
-                        await new Promise((r) => setTimeout(r, 400 * (attempt + 1)));
-                }
-            }
-            if (body) {
-                imageCache.set(cacheKey, { body, contentType });
-                const outHeaders = new Headers();
-                outHeaders.set('Cache-Control', 'public, max-age=604800, immutable');
-                outHeaders.set('Content-Type', contentType);
-                outHeaders.set('Access-Control-Allow-Origin', '*');
-                return new Response(body, { headers: outHeaders });
-            }
-            // strict=1 callers retry another candidate instead of settling for the
-            // placeholder, which would otherwise read as a successful load.
-            if (strict)
-                return c.text('Not Found', 404);
-            const placeholder = placeholderSvg();
-            if (placeholder)
-                return placeholder;
-            return c.text('Not Found', 404);
-        }
-        catch {
-            if (abort.signal.aborted)
-                return new Response(null, { status: 499 });
-            if (strict)
-                return c.text('Not Found', 502);
-            const placeholder = placeholderSvg();
-            if (placeholder)
-                return placeholder;
-            return c.text('Not Found', 404);
-        }
-    });
-    app.get('/api/resolve', async (c) => {
-        const targetUrl = c.req.query('url');
-        if (!targetUrl || typeof targetUrl !== 'string') {
-            return c.json({ error: 'URL required' }, 400);
-        }
-        const safeCheck = isSafeExternalUrl(targetUrl);
-        if (!safeCheck.safe) {
-            return c.json({ error: safeCheck.error || 'Invalid URL' }, 400);
-        }
-        try {
-            const response = await fetch(targetUrl, {
-                method: 'GET',
-                headers: {
-                    'User-Agent': 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36',
-                    Accept: 'text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8',
-                },
-                redirect: 'follow',
-            });
-            return c.json({
-                finalUrl: response.url,
-                status: response.status,
-            });
-        }
-        catch (e) {
-            const err = e;
-            return c.json({ error: err.message || 'Resolve failed' }, 500);
-        }
-    });
-}
+    </script></body>`);return w===c?null:w}function Y(){const c=[j.join(N.PACKAGE_ROOT,"client/public/placeholder.svg"),j.join(N.PACKAGE_ROOT,"client/dist/placeholder.svg"),j.join(N.SERVER_ROOT,"..","client/public/placeholder.svg")];for(const o of c)try{if(D.existsSync(o)){const e=new Headers;return e.set("Cache-Control","no-store"),e.set("Content-Type","image/svg+xml"),new Response(D.readFileSync(o),{headers:e})}}catch{}return null}const Z="Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0";function ye(c,o){c.get("/api/proxy",async e=>{const r=e.req.query("url");if(!r)return e.text("URL required",400);const i=W(r);if(!i.safe)return e.text(i.error||"Invalid URL",400);const t=r,n=I(t,o()),s=e.req.query("referer")||n?.referer||"",d=B(n,s,e.req.query("origin")),m=e.req.query("ua")||"",R=e.req.query("cookie")||"",w=e.req.query("scrape")==="1"||n?.scrape===!0,T=e.req.query("cf")==="1"||n?.cfCookie===!0,h=e.req.query("variant"),b=h!==void 0?parseInt(h,10):NaN,l=Number.isInteger(b)&&b>=0,u=`m3u8-${t}-${s}-${d}-${m}${l?`-v${b}`:""}`,y=new AbortController;L(e.req.raw.signal,y);try{const f={"User-Agent":m||Z};if(s&&(f.Referer=s),d&&(f.Origin=d),R){const a=T?V(R):R;a&&(f.Cookie=a)}const p=e.req.header("range");p&&(f.Range=p);const U=a=>{const g=new Headers;return g.set("Content-Type","application/vnd.apple.mpegurl"),g.set("Access-Control-Allow-Origin","*"),new Response(a,{headers:g})},E=(a,g)=>{const x=new URL(g),q=k=>{const v=new URLSearchParams({url:k});return s&&v.set("referer",s),d&&v.set("origin",d),m&&v.set("ua",m),R&&v.set("cookie",ee(R)),w&&v.set("scrape","1"),T&&v.set("cf","1"),`/api/proxy?${v}`},$=!!(s||d||m||w),C=k=>k.includes("/api/proxy");return((l?oe(a,b):null)||a).split(`
+`).map(k=>{const v=k.trim();if(!v)return k;if(v.startsWith("#"))return v.replace(/URI="([^"]+)"/g,(ae,F)=>{if(C(F))return`URI="${F}"`;const M=new URL(F,x).href;return`URI="${$||M.includes(".m3u8")?q(M):M}"`});if(C(v))return k;const Q=new URL(v,x).href;return q(Q)}).join(`
+`)};if(t.includes(".m3u8")){const a=O.get(u);if(a){const q=new Headers;return q.set("Content-Type","application/vnd.apple.mpegurl"),q.set("Access-Control-Allow-Origin","*"),new Response(a,{headers:q})}const g=await K(t,n?.mirrors,y.signal,q=>H({url:q,method:"GET",headers:f,responseType:"text",timeout:{request:3e4},followRedirect:!0,throwHttpErrors:!1}),q=>q.statusCode===200||q.statusCode===206);if(!g||g.statusCode!==200&&g.statusCode!==206)return e.text("Upstream error",g?.statusCode||502);const x=E(g.body,g.url||t);return O.set(u,x),U(x)}else if(w){p&&(f.Range=p);const a=await K(t,n?.mirrors,y.signal,C=>H({url:C,method:"GET",headers:f,responseType:"buffer",timeout:{request:3e4},followRedirect:!0,throwHttpErrors:!1}),C=>C.statusCode===200||C.statusCode===206);if(!a||a.statusCode!==200&&a.statusCode!==206)return e.text("Upstream error",a?.statusCode||502);const g=a.headers["content-type"],x=t.endsWith(".vtt")||t.includes(".vtt?"),q=String(a.body??"");if(!x&&(typeof g=="string"&&g.includes("mpegurl")||q.startsWith("#EXTM3U"))){const C=O.get(u),S=C??E(q,a.url||t);return C||O.set(u,S),U(S)}const $=new Headers;return $.set("Content-Type",x?"text/vtt; charset=utf-8":g||"application/octet-stream"),X($,C=>a.headers[C]),new Response(a.body,{status:a.statusCode,headers:$})}else{const a=await K(t,n?.mirrors,y.signal,async C=>{const S=await G(C,{method:"GET",headers:f},{retries:3,timeoutMs:3e4,signal:y.signal});if(S.status!==200&&S.status!==206)try{await S.body?.cancel()}catch{}return S},C=>C.status===200||C.status===206);if(!a)return e.text("Upstream error",502);const g=a.status;if(g!==200&&g!==206){try{await a.body?.cancel()}catch{}return e.text("Upstream error",g)}const x=t.endsWith(".vtt")||t.includes(".vtt?"),q=a.headers.get("content-type"),$=new Headers;return $.set("Content-Type",x?"text/vtt; charset=utf-8":q||"application/octet-stream"),X($,C=>a.headers.get(C)),a.body?new Response(a.body,{status:g,headers:$}):e.text("Upstream error",502)}}catch(f){return y.signal.aborted?new Response(null,{status:499}):(A.error({url:t,error:f?.message},"[proxy] upstream request failed"),e.text("Proxy error",500))}}),c.get("/api/embed-proxy",async e=>{const r=e.req.query("url");if(!r)return e.text("URL required",400);const i=W(r);if(!i.safe)return e.text(i.error||"Invalid URL",400);const t=I(r,o());if(!t?.embedPatch)return e.text("Invalid or unsupported gateway URL",400);const n=new URL(r),s=e.req.query("cookie")||"",d=e.req.query("referer")||t.referer||"",m=B(t,d,e.req.query("origin")),R=new AbortController;L(e.req.raw.signal,R);try{const w={"User-Agent":e.req.query("ua")||Z};if(d&&(w.Referer=d),m&&(w.Origin=m),s){const u=e.req.query("cf")==="1"||t.cfCookie?V(s):s;u&&(w.Cookie=u)}const h=(await H({url:n.href,method:"GET",headers:w,responseType:"text",timeout:{request:3e4},followRedirect:!0,throwHttpErrors:!1})).body,b=ie(h,n,s);if(!b)return e.text("Failed to patch video gateway",502);const l=new Headers;return l.set("Content-Type","text/html; charset=utf-8"),l.set("Cache-Control","private, max-age=120"),new Response(b,{status:200,headers:l})}catch{return R.signal.aborted?new Response(null,{status:499}):e.text("Gateway proxy error",502)}}),c.get("/api/subtitle-proxy",async e=>{const r=e.req.query("url");if(!r)return e.text("URL required",400);const i=W(r);if(!i.safe)return e.text(i.error||"Invalid URL",400);const t=new AbortController;L(e.req.raw.signal,t);const n=r,s=I(n,o()),d=e.req.query("referer")||s?.referer||"",m=B(s,d,e.req.query("origin")),R=e.req.query("scrape")==="1"||s?.scrape===!0,w=()=>{const l={"User-Agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36",Accept:"text/vtt,text/plain,*/*;q=0.8"};return d&&(l.Referer=d),m&&(l.Origin=m),l},T=async(l,u=1)=>{const y=w();if(R)try{const f=await H({url:l,method:"GET",headers:y,responseType:"text",timeout:{request:15e3},followRedirect:!0,throwHttpErrors:!1});if(f.statusCode!==200)return A.warn({target:l,status:f.statusCode},"[subtitle-proxy] upstream returned error status"),{status:f.statusCode,body:""};const p=String(f.body??"").replace(/^\uFEFF/,"");return/^\s*\{[\s\S]*"error"[\s\S]*\}\s*$/.test(p.slice(0,500))?(A.warn({target:l,body:p.slice(0,200)},"[subtitle-proxy] upstream JSON error"),{status:502,body:""}):{status:200,body:p}}catch(f){return t.signal.aborted?null:(A.warn({target:l,error:f?.message},"[subtitle-proxy] upstream fetch failed"),{status:502,body:""})}try{const f=await G(l,{method:"GET",headers:y},{retries:u,timeoutMs:15e3,signal:t.signal});if(!f.ok){A.warn({target:l,status:f.status},"[subtitle-proxy] upstream returned error status");try{await f.body?.cancel()}catch{}return{status:f.status,body:""}}const p=(await f.text()).replace(/^\uFEFF/,"");return/^\s*\{[\s\S]*"error"[\s\S]*\}\s*$/.test(p.slice(0,500))?(A.warn({target:l,body:p.slice(0,200)},"[subtitle-proxy] upstream JSON error"),{status:502,body:""}):{status:f.status,body:p}}catch(f){return t.signal.aborted?null:(A.warn({target:l,error:f?.message},"[subtitle-proxy] upstream fetch failed"),{status:502,body:""})}},h=l=>{const u=new Headers;return u.set("Content-Type","text/vtt; charset=utf-8"),u.set("Access-Control-Allow-Origin","*"),u.set("Cache-Control",l),u},b=l=>{const u=new Headers;return u.set("Access-Control-Allow-Origin","*"),u.set("Cache-Control","no-store"),new Response(l,{status:502,headers:u})};try{const l=w(),u=await T(n,1);if(t.signal.aborted)return new Response(null,{status:499});if(!u||!u.body)return b("Subtitle upstream error");const y=u.body,f=n;if(/#EXTM3U/i.test(y.slice(0,1e3))){const U=y.split(`
+`).map(a=>a.trim()).filter(a=>a&&!a.startsWith("#")).slice(0,200).map(a=>{try{return new URL(a,f).href}catch{return null}}).filter(a=>!!a),E=[];for(const a of U)try{const g=await G(a,{method:"GET",headers:l},{retries:1,timeoutMs:15e3,signal:t.signal});if(!g.ok)continue;let x=(await g.text()).replace(/^\uFEFF/,"");if(/#EXTM3U/i.test(x.slice(0,200)))continue;if(x=x.replace(/\r\n/g,`
+`).replace(/(\d{2}:\d{2}:\d{2}),(\d{3})/g,"$1.$2"),/^\s*WEBVTT/i.test(x)&&(x=x.replace(/^\s*WEBVTT[^\n]*\n(\n|.*\n)?/,"")),x=x.trim(),x&&E.push(x),E.join(`
+`).length>2e6)break}catch{if(t.signal.aborted)return new Response(null,{status:499})}return E.length===0?b("Subtitle playlist empty"):new Response(P(`WEBVTT
+
+${E.join(`
+
+`)}
+`),{headers:h("public, max-age=86400")})}if(/^\s*WEBVTT/i.test(y))return new Response(P(y),{headers:h("public, max-age=86400")});const p=te(y);return p?new Response(P(p),{headers:h("public, max-age=86400")}):new Response(P(`WEBVTT
+
+${y.replace(/\r\n/g,`
+`).replace(/(\d{2}:\d{2}:\d{2}),(\d{3})/g,"$1.$2")}`),{headers:h("public, max-age=86400")})}catch{return t.signal.aborted?new Response(null,{status:499}):(A.warn({url:n},"[subtitle-proxy] failed"),b("Subtitle upstream error"))}}),c.get("/api/image-proxy",async e=>{const r=e.req.query("url");if(!r)return e.text("URL required",400);const i=W(r);if(!i.safe)return e.text(i.error||"Invalid URL",400);const t=r,n=e.req.query("cookie")||"",s=e.req.query("ua")||"",d=e.req.query("strict")==="1",m=I(t,o()),R=e.req.query("referer")||m?.referer||"",w=B(m,R,e.req.query("origin")),T=new AbortController;L(e.req.raw.signal,T);const h={"User-Agent":s||"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"},b=`${t}|${n}|${s}|${R}|${w}`,l=z.get(b);if(l){const u=new Headers;return u.set("Cache-Control","public, max-age=604800, immutable"),u.set("Content-Type",l.contentType),u.set("Access-Control-Allow-Origin","*"),u.set("X-Dango-Cache","hit"),new Response(l.body,{headers:u})}try{if(R&&(h.Referer=R),w&&(h.Origin=w),e.req.query("cf")==="1"||m?.cfCookie){const p=V(n);p&&(h.Cookie=p)}let u=null,y="image/webp";for(let p=0;p<3&&!u;p++){const U=await H({url:t,method:"GET",headers:h,responseType:"buffer",followRedirect:!0,throwHttpErrors:!1,timeout:{request:3e4}});U.statusCode===200&&U.rawBody?.length?(u=Buffer.from(U.rawBody),y=String(U.headers["content-type"]||"image/webp")):p<2&&await new Promise(E=>setTimeout(E,400*(p+1)))}if(u){z.set(b,{body:u,contentType:y});const p=new Headers;return p.set("Cache-Control","public, max-age=604800, immutable"),p.set("Content-Type",y),p.set("Access-Control-Allow-Origin","*"),new Response(u,{headers:p})}if(d)return e.text("Not Found",404);const f=Y();return f||e.text("Not Found",404)}catch{if(T.signal.aborted)return new Response(null,{status:499});if(d)return e.text("Not Found",502);const u=Y();return u||e.text("Not Found",404)}}),c.get("/api/resolve",async e=>{const r=e.req.query("url");if(!r||typeof r!="string")return e.json({error:"URL required"},400);const i=W(r);if(!i.safe)return e.json({error:i.error||"Invalid URL"},400);try{const t=await fetch(r,{method:"GET",headers:{"User-Agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36",Accept:"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8"},redirect:"follow"});return e.json({finalUrl:t.url,status:t.status})}catch(t){const n=t;return e.json({error:n.message||"Resolve failed"},500)}})}export{ye as registerProxy};