@serifpersia/dango 3.6.7 → 3.6.8

package/server/dist/trpc/validation.js

@@ -1,258 +1 @@
-import { TRPCError } from '@trpc/server';
-export function defineSchema(parse) {
-    return {
-        '~standard': {
-            version: 1,
-            vendor: 'dango',
-            types: undefined,
-            validate(value) {
-                try {
-                    return { value: parse(value) };
-                }
-                catch (err) {
-                    return { issues: [{ message: err instanceof Error ? err.message : 'Invalid input' }] };
-                }
-            },
-        },
-    };
-}
-function readKey(value) {
-    if (typeof value !== 'object' || value === null)
-        throw new Error('Expected an object');
-    const key = value.key;
-    if (typeof key !== 'string' || key.length === 0)
-        throw new Error('key must be a string');
-    return key;
-}
-export function reqStr(obj, name) {
-    const value = obj[name];
-    if (typeof value !== 'string' || value.length === 0) {
-        throw new Error(`${name} must be a string`);
-    }
-    return value;
-}
-export function optStr(obj, name) {
-    const value = obj[name];
-    if (value === undefined || value === null)
-        return undefined;
-    return String(value);
-}
-export function optNum(obj, name) {
-    const value = obj[name];
-    if (value === undefined || value === null || value === '')
-        return undefined;
-    const num = Number(value);
-    return Number.isFinite(num) ? num : undefined;
-}
-export function optBool(obj, name) {
-    const value = obj[name];
-    if (typeof value !== 'boolean')
-        return undefined;
-    return value;
-}
-export function badRequest(message) {
-    return new TRPCError({ code: 'BAD_REQUEST', message });
-}
-export function failed(message) {
-    return new TRPCError({ code: 'INTERNAL_SERVER_ERROR', message });
-}
-export function reqId(obj, name) {
-    const value = obj[name];
-    if ((typeof value !== 'string' && typeof value !== 'number') || String(value).length === 0) {
-        throw new Error(`${name} must be a string`);
-    }
-    return String(value);
-}
-export function readCount(obj, name, fallback) {
-    const raw = obj[name];
-    if (raw === undefined || raw === null || raw === '')
-        return fallback;
-    const n = Math.floor(Number(raw));
-    return Number.isFinite(n) ? n : fallback;
-}
-export function strOrNull(obj, name) {
-    const value = obj[name];
-    return typeof value === 'string' ? value : null;
-}
-export function readPageLimit(obj) {
-    const out = {};
-    const page = optNum(obj, 'page');
-    if (page !== undefined)
-        out.page = page;
-    const limit = optNum(obj, 'limit');
-    if (limit !== undefined)
-        out.limit = limit;
-    return out;
-}
-function reqEpNum(obj, name) {
-    const value = obj[name];
-    if ((typeof value !== 'string' && typeof value !== 'number') || String(value).length === 0) {
-        throw new Error(`${name} must be a string`);
-    }
-    return String(value);
-}
-export function reqStrArray(obj, name, nonEmpty) {
-    const value = obj[name];
-    if (!Array.isArray(value) || (nonEmpty && value.length === 0)) {
-        throw new Error(`${name} must be ${nonEmpty ? 'a non-empty ' : 'an '}array`);
-    }
-    return value.map((ep) => String(ep));
-}
-export function reqObj(value) {
-    if (typeof value !== 'object' || value === null)
-        throw new Error('Expected an object');
-    return value;
-}
-export const keyInput = () => defineSchema((value) => ({ key: readKey(value) }));
-export const idInput = () => defineSchema((value) => ({ id: reqStr(reqObj(value), 'id') }));
-export const showIdInput = () => defineSchema((value) => ({
-    showId: reqStr(reqObj(value), 'showId'),
-}));
-export const episodeProgressInput = () => defineSchema((value) => {
-    const obj = reqObj(value);
-    return { showId: reqStr(obj, 'showId'), episodeNumber: reqEpNum(obj, 'episodeNumber') };
-});
-export const idsInput = () => defineSchema((value) => ({
-    ids: [...new Set(reqStrArray(reqObj(value), 'ids', true))],
-}));
-export const watchlistAddInput = () => defineSchema((value) => {
-    const obj = reqObj(value);
-    const out = { id: reqStr(obj, 'id'), name: reqStr(obj, 'name') };
-    const status = optStr(obj, 'status');
-    if (status !== undefined)
-        out.status = status;
-    const thumbnail = optStr(obj, 'thumbnail');
-    if (thumbnail !== undefined)
-        out.thumbnail = thumbnail;
-    const nativeName = optStr(obj, 'nativeName');
-    if (nativeName !== undefined)
-        out.nativeName = nativeName;
-    const englishName = optStr(obj, 'englishName');
-    if (englishName !== undefined)
-        out.englishName = englishName;
-    const type = optStr(obj, 'type');
-    if (type !== undefined)
-        out.type = type;
-    if (typeof obj.isAdult === 'boolean')
-        out.isAdult = obj.isAdult;
-    return out;
-});
-export const watchlistStatusInput = () => defineSchema((value) => {
-    const obj = reqObj(value);
-    return { id: reqStr(obj, 'id'), status: reqStr(obj, 'status') };
-});
-export const watchlistBatchStatusInput = () => defineSchema((value) => {
-    const obj = reqObj(value);
-    return { ids: [...new Set(reqStrArray(obj, 'ids', true))], status: reqStr(obj, 'status') };
-});
-function readMeta(obj) {
-    return {
-        showName: optStr(obj, 'showName'),
-        showThumbnail: optStr(obj, 'showThumbnail'),
-        nativeName: optStr(obj, 'nativeName'),
-        englishName: optStr(obj, 'englishName'),
-        type: optStr(obj, 'type'),
-    };
-}
-export const queueAddInput = () => defineSchema((value) => {
-    const obj = reqObj(value);
-    return {
-        ...readMeta(obj),
-        showId: reqStr(obj, 'showId'),
-        episodeNumber: reqEpNum(obj, 'episodeNumber'),
-    };
-});
-export const queueBatchInput = () => defineSchema((value) => {
-    const obj = reqObj(value);
-    return {
-        ...readMeta(obj),
-        showId: reqStr(obj, 'showId'),
-        episodeNumbers: reqStrArray(obj, 'episodeNumbers', true),
-    };
-});
-export const queueRemoveInput = () => defineSchema((value) => {
-    const obj = reqObj(value);
-    return { showId: reqStr(obj, 'showId'), episodeNumber: reqEpNum(obj, 'episodeNumber') };
-});
-export const queueRemoveManyInput = () => defineSchema((value) => {
-    const obj = reqObj(value);
-    const out = { showId: reqStr(obj, 'showId') };
-    if (obj.episodeNumbers !== undefined)
-        out.episodeNumbers = reqStrArray(obj, 'episodeNumbers', false);
-    return out;
-});
-export const queueReorderInput = () => defineSchema((value) => {
-    if (!Array.isArray(value))
-        throw new Error('items must be an array');
-    return value.map((item) => {
-        const entry = reqObj(item);
-        const out = {};
-        if (typeof entry.id === 'number')
-            out.id = entry.id;
-        if (entry.showId !== undefined)
-            out.showId = String(entry.showId);
-        if (entry.episodeNumber !== undefined)
-            out.episodeNumber = String(entry.episodeNumber);
-        return out;
-    });
-});
-export const setSettingInput = () => defineSchema((value) => {
-    if (typeof value !== 'object' || value === null)
-        throw new Error('Expected an object');
-    return { key: readKey(value), value: value.value };
-});
-export const progressUpdateInput = () => defineSchema((value) => {
-    const obj = reqObj(value);
-    const out = {
-        showId: reqStr(obj, 'showId'),
-        episodeNumber: reqEpNum(obj, 'episodeNumber'),
-    };
-    const currentTime = optNum(obj, 'currentTime');
-    if (currentTime !== undefined)
-        out.currentTime = currentTime;
-    const duration = optNum(obj, 'duration');
-    if (duration !== undefined)
-        out.duration = duration;
-    const showName = optStr(obj, 'showName');
-    if (showName !== undefined)
-        out.showName = showName;
-    const showThumbnail = optStr(obj, 'showThumbnail');
-    if (showThumbnail !== undefined)
-        out.showThumbnail = showThumbnail;
-    const nativeName = optStr(obj, 'nativeName');
-    if (nativeName !== undefined)
-        out.nativeName = nativeName;
-    const englishName = optStr(obj, 'englishName');
-    if (englishName !== undefined)
-        out.englishName = englishName;
-    const genres = obj['genres'];
-    if (typeof genres === 'string' || Array.isArray(genres)) {
-        out.genres = (Array.isArray(genres) ? genres : [genres]).map(String);
-    }
-    const popularityScore = optNum(obj, 'popularityScore');
-    if (popularityScore !== undefined)
-        out.popularityScore = popularityScore;
-    const type = optStr(obj, 'type');
-    if (type !== undefined)
-        out.type = type;
-    const status = optStr(obj, 'status');
-    if (status !== undefined)
-        out.status = status;
-    const episodeCount = optNum(obj, 'episodeCount');
-    if (episodeCount !== undefined)
-        out.episodeCount = episodeCount;
-    const isPlaying = optBool(obj, 'isPlaying');
-    if (isPlaying !== undefined)
-        out.isPlaying = isPlaying;
-    const sessionId = optStr(obj, 'sessionId');
-    if (sessionId !== undefined)
-        out.sessionId = sessionId;
-    const isAdult = optBool(obj, 'isAdult');
-    if (isAdult !== undefined)
-        out.isAdult = isAdult;
-    return out;
-});
-export const notificationDismissInput = () => defineSchema((value) => {
-    const obj = reqObj(value);
-    return { showId: reqStr(obj, 'showId'), episodeNumber: reqEpNum(obj, 'episodeNumber') };
-});
+import{TRPCError as S}from"@trpc/server";function i(t){return{"~standard":{version:1,vendor:"dango",types:void 0,validate(e){try{return{value:t(e)}}catch(n){return{issues:[{message:n instanceof Error?n.message:"Invalid input"}]}}}}}}function v(t){if(typeof t!="object"||t===null)throw new Error("Expected an object");const e=t.key;if(typeof e!="string"||e.length===0)throw new Error("key must be a string");return e}function o(t,e){const n=t[e];if(typeof n!="string"||n.length===0)throw new Error(`${e} must be a string`);return n}function s(t,e){const n=t[e];if(n!=null)return String(n)}function a(t,e){const n=t[e];if(n==null||n==="")return;const r=Number(n);return Number.isFinite(r)?r:void 0}function k(t,e){const n=t[e];if(typeof n=="boolean")return n}function Q(t){return new S({code:"BAD_REQUEST",message:t})}function T(t){return new S({code:"INTERNAL_SERVER_ERROR",message:t})}function P(t,e){const n=t[e];if(typeof n!="string"&&typeof n!="number"||String(n).length===0)throw new Error(`${e} must be a string`);return String(n)}function j(t,e,n){const r=t[e];if(r==null||r==="")return n;const d=Math.floor(Number(r));return Number.isFinite(d)?d:n}function q(t,e){const n=t[e];return typeof n=="string"?n:null}function M(t){const e={},n=a(t,"page");n!==void 0&&(e.page=n);const r=a(t,"limit");return r!==void 0&&(e.limit=r),e}function f(t,e){const n=t[e];if(typeof n!="string"&&typeof n!="number"||String(n).length===0)throw new Error(`${e} must be a string`);return String(n)}function l(t,e,n){const r=t[e];if(!Array.isArray(r)||n&&r.length===0)throw new Error(`${e} must be ${n?"a non-empty ":"an "}array`);return r.map(d=>String(d))}function u(t){if(typeof t!="object"||t===null)throw new Error("Expected an object");return t}const O=()=>i(t=>({key:v(t)})),B=()=>i(t=>({id:o(u(t),"id")})),W=()=>i(t=>({showId:o(u(t),"showId")})),C=()=>i(t=>{const e=u(t);return{showId:o(e,"showId"),episodeNumber:f(e,"episodeNumber")}}),U=()=>i(t=>({ids:[...new Set(l(u(t),"ids",!0))]})),D=()=>i(t=>{const e=u(t),n={id:o(e,"id"),name:o(e,"name")},r=s(e,"status");r!==void 0&&(n.status=r);const d=s(e,"thumbnail");d!==void 0&&(n.thumbnail=d);const p=s(e,"nativeName");p!==void 0&&(n.nativeName=p);const g=s(e,"englishName");g!==void 0&&(n.englishName=g);const c=s(e,"type");return c!==void 0&&(n.type=c),typeof e.isAdult=="boolean"&&(n.isAdult=e.isAdult),n}),$=()=>i(t=>{const e=u(t);return{id:o(e,"id"),status:o(e,"status")}}),_=()=>i(t=>{const e=u(t);return{ids:[...new Set(l(e,"ids",!0))],status:o(e,"status")}});function A(t){return{showName:s(t,"showName"),showThumbnail:s(t,"showThumbnail"),nativeName:s(t,"nativeName"),englishName:s(t,"englishName"),type:s(t,"type")}}const F=()=>i(t=>{const e=u(t);return{...A(e),showId:o(e,"showId"),episodeNumber:f(e,"episodeNumber")}}),L=()=>i(t=>{const e=u(t);return{...A(e),showId:o(e,"showId"),episodeNumbers:l(e,"episodeNumbers",!0)}}),K=()=>i(t=>{const e=u(t);return{showId:o(e,"showId"),episodeNumber:f(e,"episodeNumber")}}),V=()=>i(t=>{const e=u(t),n={showId:o(e,"showId")};return e.episodeNumbers!==void 0&&(n.episodeNumbers=l(e,"episodeNumbers",!1)),n}),z=()=>i(t=>{if(!Array.isArray(t))throw new Error("items must be an array");return t.map(e=>{const n=u(e),r={};return typeof n.id=="number"&&(r.id=n.id),n.showId!==void 0&&(r.showId=String(n.showId)),n.episodeNumber!==void 0&&(r.episodeNumber=String(n.episodeNumber)),r})}),G=()=>i(t=>{if(typeof t!="object"||t===null)throw new Error("Expected an object");return{key:v(t),value:t.value}}),H=()=>i(t=>{const e=u(t),n={showId:o(e,"showId"),episodeNumber:f(e,"episodeNumber")},r=a(e,"currentTime");r!==void 0&&(n.currentTime=r);const d=a(e,"duration");d!==void 0&&(n.duration=d);const p=s(e,"showName");p!==void 0&&(n.showName=p);const g=s(e,"showThumbnail");g!==void 0&&(n.showThumbnail=g);const c=s(e,"nativeName");c!==void 0&&(n.nativeName=c);const h=s(e,"englishName");h!==void 0&&(n.englishName=h);const m=e.genres;(typeof m=="string"||Array.isArray(m))&&(n.genres=(Array.isArray(m)?m:[m]).map(String));const I=a(e,"popularityScore");I!==void 0&&(n.popularityScore=I);const w=s(e,"type");w!==void 0&&(n.type=w);const y=s(e,"status");y!==void 0&&(n.status=y);const b=a(e,"episodeCount");b!==void 0&&(n.episodeCount=b);const N=k(e,"isPlaying");N!==void 0&&(n.isPlaying=N);const x=s(e,"sessionId");x!==void 0&&(n.sessionId=x);const R=k(e,"isAdult");return R!==void 0&&(n.isAdult=R),n}),J=()=>i(t=>{const e=u(t);return{showId:o(e,"showId"),episodeNumber:f(e,"episodeNumber")}});export{Q as badRequest,i as defineSchema,C as episodeProgressInput,T as failed,B as idInput,U as idsInput,O as keyInput,J as notificationDismissInput,k as optBool,a as optNum,s as optStr,H as progressUpdateInput,F as queueAddInput,L as queueBatchInput,K as queueRemoveInput,V as queueRemoveManyInput,z as queueReorderInput,j as readCount,M as readPageLimit,P as reqId,u as reqObj,o as reqStr,l as reqStrArray,G as setSettingInput,W as showIdInput,q as strOrNull,D as watchlistAddInput,_ as watchlistBatchStatusInput,$ as watchlistStatusInput};

package/server/dist/utils/cache.utils.js

@@ -1,25 +1 @@
-import { LRUCache } from 'lru-cache';
-export class AppCache {
-    cache;
-    constructor(options = {}) {
-        this.cache = new LRUCache({
-            max: options.maxKeys ?? 5000,
-            ttl: (options.ttlSeconds ?? 3600) * 1000,
-        });
-    }
-    get(key) {
-        return this.cache.get(key);
-    }
-    set(key, value, ttlSeconds) {
-        const entry = value;
-        if (ttlSeconds === undefined) {
-            this.cache.set(key, entry);
-        }
-        else {
-            this.cache.set(key, entry, { ttl: ttlSeconds * 1000 });
-        }
-    }
-    delete(key) {
-        this.cache.delete(key);
-    }
-}
+import{LRUCache as s}from"lru-cache";class r{cache;constructor(e={}){this.cache=new s({max:e.maxKeys??5e3,ttl:(e.ttlSeconds??3600)*1e3})}get(e){return this.cache.get(e)}set(e,n,t){const c=n;t===void 0?this.cache.set(e,c):this.cache.set(e,c,{ttl:t*1e3})}delete(e){this.cache.delete(e)}}export{r as AppCache};

package/server/dist/utils/cookie.utils.js

@@ -1,13 +1 @@
-export function sanitizeCfClearance(raw) {
-    if (!raw)
-        return '';
-    let s = String(raw).trim();
-    s = s.replace(/^cf_clearance/i, '');
-    s = s.replace(/^[:=]\s*/, '');
-    s = s.replace(/["']/g, '').trim();
-    return s;
-}
-export function buildCfClearanceCookie(raw) {
-    const c = sanitizeCfClearance(raw);
-    return c ? `cf_clearance=${c}` : '';
-}
+function r(n){if(!n)return"";let e=String(n).trim();return e=e.replace(/^cf_clearance/i,""),e=e.replace(/^[:=]\s*/,""),e=e.replace(/["']/g,"").trim(),e}function i(n){const e=r(n);return e?`cf_clearance=${e}`:""}export{i as buildCfClearanceCookie,r as sanitizeCfClearance};

package/server/dist/utils/db-utils.js

@@ -1,17 +1,5 @@
-export const dbAll = (db, sql, params = []) => {
-    return db.all(sql, params);
-};
-export const dbGet = (db, sql, params = []) => {
-    return db.get(sql, params);
-};
-export const dbRun = (db, sql, params = []) => {
-    db.run(sql, params);
-};
-export async function adultNonListIds(db, progressTable, libraryTable, keyCol, adultPred) {
-    const rows = await dbAll(db, `SELECT DISTINCT p."${keyCol}" as id
-       FROM "${progressTable}" p
-       LEFT JOIN "${libraryTable}" l ON l.id = p."${keyCol}"
-       WHERE ${adultPred}
-         AND l.id IS NULL`);
-    return rows.map((r) => r.id);
-}
+const e=(r,n,a=[])=>r.all(n,a),u=(r,n,a=[])=>r.get(n,a),b=(r,n,a=[])=>{r.run(n,a)};async function d(r,n,a,t,s){return(await e(r,`SELECT DISTINCT p."${t}" as id
+       FROM "${n}" p
+       LEFT JOIN "${a}" l ON l.id = p."${t}"
+       WHERE ${s}
+         AND l.id IS NULL`)).map(i=>i.id)}export{d as adultNonListIds,e as dbAll,u as dbGet,b as dbRun};

package/server/dist/utils/env.utils.js

@@ -1,77 +1,5 @@
-import fs from 'fs';
-import { CONFIG } from '../config.js';
-const lockPath = `${CONFIG.ENV_PATH}.lock`;
-async function acquireLock() {
-    let handle;
-    let attempts = 0;
-    while (!handle) {
-        try {
-            handle = await fs.promises.open(lockPath, 'wx');
-        }
-        catch {
-            if (++attempts >= 100) {
-                fs.promises.unlink(lockPath).catch(() => { });
-                throw new Error('Failed to acquire lock on .env file - another process may be holding it');
-            }
-            await new Promise((r) => setTimeout(r, 100));
-        }
-    }
-    return handle;
-}
-function releaseLock(handle) {
-    handle.close().catch(() => { });
-    fs.promises.unlink(lockPath).catch(() => { });
-}
-export async function updateEnvFile(updates) {
-    const lockHandle = await acquireLock();
-    try {
-        const envPath = CONFIG.ENV_PATH;
-        let envContent = '';
-        if (fs.existsSync(envPath)) {
-            envContent = fs.readFileSync(envPath, 'utf8');
-        }
-        const lines = envContent.split('\n');
-        const newLines = [...lines];
-        Object.entries(updates).forEach(([rawKey, rawValue]) => {
-            const key = rawKey.trim();
-            if (!/^[A-Z0-9_]+$/i.test(key)) {
-                throw new Error(`Invalid environment variable key: ${key}`);
-            }
-            const value = String(rawValue ?? '').replace(/[\r\n]/g, '');
-            let found = false;
-            for (let i = 0; i < newLines.length; i++) {
-                const line = newLines[i];
-                if (line && line.startsWith(`${key}=`)) {
-                    if (value === '') {
-                        newLines.splice(i, 1);
-                        continue;
-                    }
-                    else {
-                        newLines[i] = `${key}=${value}`;
-                    }
-                    found = true;
-                    break;
-                }
-            }
-            if (!found && value !== '') {
-                newLines.push(`${key}=${value}`);
-            }
-        });
-        const finalContent = newLines
-            .join('\n')
-            .replace(/\n{2,}/g, '\n')
-            .trim() + '\n';
-        fs.writeFileSync(envPath, finalContent);
-        Object.entries(updates).forEach(([key, value]) => {
-            if (value === '') {
-                delete process.env[key];
-            }
-            else {
-                process.env[key] = value;
-            }
-        });
-    }
-    finally {
-        releaseLock(lockHandle);
-    }
-}
+import t from"fs";import{CONFIG as u}from"../config.js";const f=`${u.ENV_PATH}.lock`;async function w(){let e,a=0;for(;!e;)try{e=await t.promises.open(f,"wx")}catch{if(++a>=100)throw t.promises.unlink(f).catch(()=>{}),new Error("Failed to acquire lock on .env file - another process may be holding it");await new Promise(i=>setTimeout(i,100))}return e}function k(e){e.close().catch(()=>{}),t.promises.unlink(f).catch(()=>{})}async function $(e){const a=await w();try{const i=u.ENV_PATH;let p="";t.existsSync(i)&&(p=t.readFileSync(i,"utf8"));const n=[...p.split(`
+`)];Object.entries(e).forEach(([r,c])=>{const s=r.trim();if(!/^[A-Z0-9_]+$/i.test(s))throw new Error(`Invalid environment variable key: ${s}`);const l=String(c??"").replace(/[\r\n]/g,"");let m=!1;for(let o=0;o<n.length;o++){const h=n[o];if(h&&h.startsWith(`${s}=`)){if(l===""){n.splice(o,1);continue}else n[o]=`${s}=${l}`;m=!0;break}}!m&&l!==""&&n.push(`${s}=${l}`)});const d=n.join(`
+`).replace(/\n{2,}/g,`
+`).trim()+`
+`;t.writeFileSync(i,d),Object.entries(e).forEach(([r,c])=>{c===""?delete process.env[r]:process.env[r]=c})}finally{k(a)}}export{$ as updateEnvFile};

package/server/dist/utils/http.utils.js

@@ -1,82 +1 @@
-import { brotliDecompressSync, gunzipSync, inflateSync } from 'node:zlib';
-export class HttpError extends Error {
-    status;
-    constructor(status, message) {
-        super(message || `Upstream request failed with status ${status}`);
-        this.name = 'HttpError';
-        this.status = status;
-    }
-}
-export function decodeMaybeGzip(bytes) {
-    if (bytes.length > 2 && bytes[0] === 0x1f && bytes[1] === 0x8b)
-        return gunzipSync(bytes);
-    return bytes;
-}
-export async function parseJsonBody(res) {
-    const buf = Buffer.from(await res.arrayBuffer());
-    const text = decodeMaybeGzip(buf).toString('utf8');
-    try {
-        return JSON.parse(text);
-    }
-    catch (err) {
-        const attempts = [() => brotliDecompressSync(buf), () => inflateSync(buf)];
-        for (const attempt of attempts) {
-            try {
-                return JSON.parse(attempt().toString('utf8'));
-            }
-            catch {
-                // ignore
-            }
-        }
-        throw err;
-    }
-}
-export function linkAbort(signal, abort) {
-    signal.addEventListener('abort', () => abort.abort(), { once: true });
-}
-export function setProxyHeaders(out, get) {
-    for (const name of ['content-length', 'content-range', 'accept-ranges']) {
-        const raw = get(name);
-        const value = Array.isArray(raw) ? raw[0] : raw;
-        if (value)
-            out.set(name, value);
-    }
-    out.set('Access-Control-Allow-Origin', '*');
-}
-export function isAbortError(err) {
-    if (!err || typeof err !== 'object')
-        return false;
-    const name = err.name;
-    return name === 'AbortError' || name === 'TimeoutError';
-}
-const sleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
-function isRetryableStatus(status) {
-    return status === 408 || status === 429 || status >= 500;
-}
-export async function fetchWithRetry(input, init = {}, options = {}) {
-    const { retries = 0, baseDelayMs = 100, timeoutMs = 30000, signal } = options;
-    let attempt = 0;
-    for (;;) {
-        const timeoutSignal = AbortSignal.timeout(timeoutMs);
-        const combined = signal ? AbortSignal.any([signal, timeoutSignal]) : timeoutSignal;
-        try {
-            const response = await fetch(input, { ...init, signal: combined });
-            if (!isRetryableStatus(response.status) || attempt >= retries)
-                return response;
-            try {
-                await response.body?.cancel();
-            }
-            catch {
-                // ignore
-            }
-        }
-        catch (err) {
-            if (signal?.aborted || attempt >= retries)
-                throw err;
-            if (!isAbortError(err) && !(err instanceof TypeError))
-                throw err;
-        }
-        attempt += 1;
-        await sleep(Math.min(baseDelayMs * 2 ** (attempt - 1), 3000));
-    }
-}
+import{brotliDecompressSync as l,gunzipSync as m,inflateSync as p}from"node:zlib";class w extends Error{status;constructor(r,e){super(e||`Upstream request failed with status ${r}`),this.name="HttpError",this.status=r}}function b(t){return t.length>2&&t[0]===31&&t[1]===139?m(t):t}async function x(t){const r=Buffer.from(await t.arrayBuffer()),e=b(r).toString("utf8");try{return JSON.parse(e)}catch(n){const s=[()=>l(r),()=>p(r)];for(const i of s)try{return JSON.parse(i().toString("utf8"))}catch{}throw n}}function A(t,r){t.addEventListener("abort",()=>r.abort(),{once:!0})}function S(t,r){for(const e of["content-length","content-range","accept-ranges"]){const n=r(e),s=Array.isArray(n)?n[0]:n;s&&t.set(e,s)}t.set("Access-Control-Allow-Origin","*")}function g(t){if(!t||typeof t!="object")return!1;const r=t.name;return r==="AbortError"||r==="TimeoutError"}const y=t=>new Promise(r=>setTimeout(r,t));function h(t){return t===408||t===429||t>=500}async function E(t,r={},e={}){const{retries:n=0,baseDelayMs:s=100,timeoutMs:i=3e4,signal:c}=e;let a=0;for(;;){const u=AbortSignal.timeout(i),f=c?AbortSignal.any([c,u]):u;try{const o=await fetch(t,{...r,signal:f});if(!h(o.status)||a>=n)return o;try{await o.body?.cancel()}catch{}}catch(o){if(c?.aborted||a>=n||!g(o)&&!(o instanceof TypeError))throw o}a+=1,await y(Math.min(s*2**(a-1),3e3))}}export{w as HttpError,b as decodeMaybeGzip,E as fetchWithRetry,g as isAbortError,A as linkAbort,x as parseJsonBody,S as setProxyHeaders};

package/server/dist/utils/request-context.js

@@ -1,2 +1 @@
-import { AsyncLocalStorage } from 'node:async_hooks';
-export const requestContext = new AsyncLocalStorage();
+import{AsyncLocalStorage as t}from"node:async_hooks";const r=new t;export{r as requestContext};

package/server/dist/utils/security.utils.js

@@ -1,76 +1 @@
-import { CONFIG } from '../config.js';
-export function isSafeExternalUrl(rawUrl) {
-    if (typeof rawUrl !== 'string' || !rawUrl.trim()) {
-        return { safe: false, error: 'URL required' };
-    }
-    let parsed;
-    try {
-        parsed = new URL(rawUrl.trim());
-    }
-    catch {
-        return { safe: false, error: 'Invalid URL format' };
-    }
-    if (parsed.protocol !== 'http:' && parsed.protocol !== 'https:') {
-        return { safe: false, error: 'Only http and https protocols are supported' };
-    }
-    const hostname = parsed.hostname.toLowerCase();
-    if (hostname === 'localhost' ||
-        hostname === '127.0.0.1' ||
-        hostname === '::1' ||
-        hostname === '0.0.0.0' ||
-        hostname.endsWith('.localhost') ||
-        hostname.endsWith('.local') ||
-        hostname.endsWith('.internal')) {
-        return { safe: false, error: 'Access to loopback/local addresses is forbidden' };
-    }
-    const ipv4Match = hostname.match(/^(\d{1,3})\.(\d{1,3})\.(\d{1,3})\.(\d{1,3})$/);
-    if (ipv4Match) {
-        const o1 = Number(ipv4Match[1]);
-        const o2 = Number(ipv4Match[2]);
-        const o3 = Number(ipv4Match[3]);
-        const o4 = Number(ipv4Match[4]);
-        if ([o1, o2, o3, o4].some((o) => o < 0 || o > 255)) {
-            return { safe: false, error: 'Invalid IP address format' };
-        }
-        if (o1 === 0 ||
-            o1 === 10 ||
-            o1 === 127 ||
-            (o1 === 172 && o2 >= 16 && o2 <= 31) ||
-            (o1 === 192 && o2 === 168) ||
-            (o1 === 169 && o2 === 254)) {
-            return { safe: false, error: 'Access to private or link-local IP addresses is forbidden' };
-        }
-    }
-    if (hostname.startsWith('[') || hostname.includes(':')) {
-        const cleanIpv6 = hostname.replace(/^\[|\]$/g, '').toLowerCase();
-        if (cleanIpv6 === '::1' ||
-            cleanIpv6 === '::' ||
-            cleanIpv6.startsWith('fe80:') ||
-            cleanIpv6.startsWith('fc00:') ||
-            cleanIpv6.startsWith('fd00:') ||
-            cleanIpv6.startsWith('::ffff:127.') ||
-            cleanIpv6.startsWith('::ffff:192.168.') ||
-            cleanIpv6.startsWith('::ffff:10.') ||
-            cleanIpv6.startsWith('::ffff:172.') ||
-            cleanIpv6.startsWith('::ffff:169.254.')) {
-            return { safe: false, error: 'Access to private or link-local IPv6 addresses is forbidden' };
-        }
-    }
-    return { safe: true, url: parsed };
-}
-export function isAllowedOrigin(origin) {
-    if (!origin)
-        return true; // Non-browser clients, same-origin, or mobile webview
-    try {
-        const parsed = new URL(origin);
-        const host = parsed.hostname.toLowerCase();
-        const isLocal = host === 'localhost' || host === '127.0.0.1' || host === '::1';
-        if (CONFIG.HOST === '0.0.0.0') {
-            return true;
-        }
-        return isLocal;
-    }
-    catch {
-        return false;
-    }
-}
+import{CONFIG as l}from"../config.js";function d(s){if(typeof s!="string"||!s.trim())return{safe:!1,error:"URL required"};let o;try{o=new URL(s.trim())}catch{return{safe:!1,error:"Invalid URL format"}}if(o.protocol!=="http:"&&o.protocol!=="https:")return{safe:!1,error:"Only http and https protocols are supported"};const r=o.hostname.toLowerCase();if(r==="localhost"||r==="127.0.0.1"||r==="::1"||r==="0.0.0.0"||r.endsWith(".localhost")||r.endsWith(".local")||r.endsWith(".internal"))return{safe:!1,error:"Access to loopback/local addresses is forbidden"};const e=r.match(/^(\d{1,3})\.(\d{1,3})\.(\d{1,3})\.(\d{1,3})$/);if(e){const t=Number(e[1]),a=Number(e[2]),n=Number(e[3]),i=Number(e[4]);if([t,a,n,i].some(f=>f<0||f>255))return{safe:!1,error:"Invalid IP address format"};if(t===0||t===10||t===127||t===172&&a>=16&&a<=31||t===192&&a===168||t===169&&a===254)return{safe:!1,error:"Access to private or link-local IP addresses is forbidden"}}if(r.startsWith("[")||r.includes(":")){const t=r.replace(/^\[|\]$/g,"").toLowerCase();if(t==="::1"||t==="::"||t.startsWith("fe80:")||t.startsWith("fc00:")||t.startsWith("fd00:")||t.startsWith("::ffff:127.")||t.startsWith("::ffff:192.168.")||t.startsWith("::ffff:10.")||t.startsWith("::ffff:172.")||t.startsWith("::ffff:169.254."))return{safe:!1,error:"Access to private or link-local IPv6 addresses is forbidden"}}return{safe:!0,url:o}}function u(s){if(!s)return!0;try{const r=new URL(s).hostname.toLowerCase(),e=r==="localhost"||r==="127.0.0.1"||r==="::1";return l.HOST==="0.0.0.0"?!0:e}catch{return!1}}export{u as isAllowedOrigin,d as isSafeExternalUrl};

package/server/package.json

@@ -1,7 +1,7 @@
 {
   "name": "dango-server",
   "private": true,
-  "version": "3.6.7",
+  "version": "3.6.8",
   "type": "module",
   "engines": {
     "node": ">=22.12.0"
@@ -9,7 +9,7 @@
   "scripts": {
     "start": "node --max-old-space-size=256 dist/server.js",
     "dev": "tsx watch src/server.ts --dev",
-    "build": "tsc",
+    "build": "tsc --noEmit && node build.mjs",
     "format": "prettier --write .",
     "lint": "eslint ."
   },
@@ -36,6 +36,7 @@
     "@types/jsdom": "^30.0.0",
     "@types/node": "^22.5.0",
     "@types/ws": "^8.5.10",
+    "esbuild": "0.28.2",
     "pino-pretty": "^13.1.1",
     "tsx": "^4.23.13"
   }