@serifpersia/dango 3.6.7 → 3.6.8

package/server/dist/app-hono.js

@@ -1,427 +1,9 @@
-import { Hono } from 'hono';
-import { compress } from 'hono/compress';
-import { getConnInfo } from '@hono/node-server/conninfo';
-import path from 'path';
-import fs from 'fs';
-import { XMLParser } from 'fast-xml-parser';
-import { CONFIG } from './config.js';
-import { isAllowedOrigin } from './utils/security.utils.js';
-import { requestContext } from './utils/request-context.js';
-import logger from './logger.js';
-import { LAN_AUTH_PUBLIC_PATHS, buildLanCookie, clearAllLanSessions, clearLanCookie, createLanSession, getTokenFromHeaders, hasAppPassword, isLoopbackIp, revokeLanSession, setAppPassword, validateLanSession, verifyAppPassword, } from './app-auth.js';
-import { importMangaFromMalXmlItems, } from './lib/tracker/manga-sync.service.js';
-import { LibraryRepository } from './repositories/library.repository.js';
-import { performAsmrWriteTransactionAsync, performMangaWriteTransactionAsync, performTvWriteTransactionAsync, performWriteTransactionAsync, KIND_SYNC, setKindManifestVersion, } from './sync.js';
-import { ANIME_SYNC_TABLES, ASMR_SYNC_TABLES, MANGA_SYNC_TABLES, TV_SYNC_TABLES, exportTables, importTables, normalizePayload, readPayloadVersion, } from './sync-payload.js';
-import { getMalImportStatus, prepareMalImport, executeMalImport } from './lib/mal-import.js';
-import { registerMusic } from './hono/music.js';
-import { registerAuth } from './hono/auth.js';
-import { registerTv } from './hono/tv.js';
-import { registerProxy } from './hono/proxy.js';
-import { fetchRequestHandler } from '@trpc/server/adapters/fetch';
-import { appRouter } from './trpc/router.js';
-import { buildTrpcContext } from './trpc/context.js';
-const malMangaXmlParser = new XMLParser({
-    isArray: (name) => name === 'manga',
-    parseTagValue: false,
-    trimValues: true,
-});
-function mangaXmlText(value) {
-    if (Array.isArray(value))
-        return String(value[0] ?? '');
-    return String(value ?? '');
-}
-function mapMalMangaXmlStatus(status) {
-    switch (status) {
-        case 'Plan to Read':
-            return 'Planned';
-        case 'On Hold':
-            return 'On-Hold';
-        case 'Reading':
-        case 'Completed':
-        case 'Dropped':
-            return status;
-        default:
-            return 'Planned';
-    }
-}
-export function getHonoClientIp(c) {
-    try {
-        return getConnInfo(c).remote.address;
-    }
-    catch {
-        return c.req.header('x-dango-client-ip') ?? undefined;
-    }
-}
-const NOT_READY_HEADER = 'x-dango-not-ready';
-function notReady(c, body) {
-    c.header(NOT_READY_HEADER, '1');
-    return typeof body === 'string' ? c.text(body, 503) : c.json(body, 503);
-}
-export async function honoRequestLogger(c, next) {
-    const start = process.hrtime.bigint();
-    const url = new URL(c.req.url);
-    const loggedUrl = `${url.pathname}${url.search}`;
-    await next();
-    const ms = Math.round((Number(process.hrtime.bigint() - start) / 1_000_000) * 10) / 10;
-    const status = c.res.status;
-    const payload = { method: c.req.method, url: loggedUrl, status, ms };
-    if (status >= 500 && !c.res.headers.get(NOT_READY_HEADER)) {
-        logger.warn(payload, 'request failed');
-    }
-    else if (!loggedUrl.startsWith('/api/proxy')) {
-        logger.trace(`${c.req.method} ${loggedUrl} ${status} ${ms}ms`);
-    }
-}
-export async function honoRequestContextMiddleware(c, next) {
-    const store = new Map();
-    const ua = c.req.header('x-animepahe-ua');
-    if (ua)
-        store.set('ua', ua);
-    const cookie = c.req.header('x-animepahe-cookie');
-    if (cookie)
-        store.set('cookie', cookie);
-    const jasmrUa = c.req.header('x-jasmr-ua');
-    if (jasmrUa)
-        store.set('jasmr_ua', jasmrUa);
-    const jasmrCookie = c.req.header('x-jasmr-cookie');
-    if (jasmrCookie)
-        store.set('jasmr_cookie', jasmrCookie);
-    return requestContext.run(store, () => next());
-}
-async function restoreJsonBackup(c, dbs, buffer) {
-    let parsed;
-    try {
-        parsed = JSON.parse(buffer.toString('utf-8'));
-    }
-    catch {
-        return c.json({ error: 'Invalid backup file.' }, 400);
-    }
-    const databases = parsed?.databases;
-    if (!databases || typeof databases !== 'object') {
-        return c.json({ error: 'Invalid backup file: missing databases.' }, 400);
-    }
-    const kindDbs = {
-        anime: dbs.db,
-        manga: dbs.mangaDb,
-        tv: dbs.tvDb,
-        asmr: dbs.asmrDb,
-    };
-    const targets = Object.keys(KIND_SYNC).map((kind) => ({
-        key: kind,
-        db: kindDbs[kind],
-        tables: KIND_SYNC[kind].tables,
-        libraryTables: KIND_SYNC[kind].libraryTables,
-        backupName: KIND_SYNC[kind].backupName,
-        setVersion: (version) => setKindManifestVersion(kind, version),
-    }));
-    const present = targets.filter((t) => databases[t.key] !== undefined);
-    if (present.length === 0) {
-        return c.json({ error: 'Invalid backup file: no databases found.' }, 400);
-    }
-    const sections = new Map();
-    try {
-        for (const target of present) {
-            sections.set(target.key, normalizePayload(databases[target.key], target.tables, `backup ${target.key}`));
-        }
-    }
-    catch (err) {
-        logger.warn({ err }, 'Multi-database restore rejected: invalid payload');
-        return c.json({ error: 'Invalid backup file.' }, 400);
-    }
-    const restored = [];
-    try {
-        for (const target of present) {
-            const section = sections.get(target.key);
-            if (!section)
-                continue;
-            importTables(target.db, target.tables, section, {
-                libraryTables: target.libraryTables,
-                backupName: target.backupName,
-            });
-            await target.setVersion(readPayloadVersion(section));
-            restored.push(target.key);
-        }
-    }
-    catch (err) {
-        logger.error({ err, restored }, 'Multi-database restore failed partway');
-        return c.json({ error: 'Restore failed partway.', restored }, 500);
-    }
-    logger.warn({ restored }, 'Databases restored from backup file by user request');
-    return c.json({ success: true, message: 'Databases restored.', restored });
-}
-function restoreLegacyDatabase(c, dbs, buffer, dbAdmin) {
-    const dbName = CONFIG.IS_DEV ? CONFIG.DB_NAME_DEV : CONFIG.DB_NAME_PROD;
-    const tempPath = path.join(CONFIG.ROOT, 'restore_temp.db');
-    const dbPath = path.join(CONFIG.ROOT, dbName);
-    try {
-        fs.writeFileSync(tempPath, buffer);
-    }
-    catch (err) {
-        logger.error({ err }, 'Failed to stage legacy database restore file');
-        return Promise.resolve(c.json({ error: 'Failed to stage restore file.' }, 500));
-    }
-    const db = dbs.db;
-    return new Promise((resolve) => {
-        db.close((closeErr) => {
-            if (closeErr) {
-                resolve(c.json({ error: 'Failed to close database.' }, 500));
-                return;
-            }
-            try {
-                db.checkpoint();
-            }
-            catch (checkpointErr) {
-                logger.warn({ err: checkpointErr }, 'WAL checkpoint failed');
-            }
-            try {
-                if (fs.existsSync(`${dbPath}-wal`))
-                    fs.unlinkSync(`${dbPath}-wal`);
-                if (fs.existsSync(`${dbPath}-shm`))
-                    fs.unlinkSync(`${dbPath}-shm`);
-            }
-            catch (cleanupErr) {
-                logger.warn({ err: cleanupErr }, 'Failed to clean up WAL files');
-            }
-            fs.rename(tempPath, dbPath, async (renameErr) => {
-                if (renameErr) {
-                    try {
-                        dbAdmin.setDb(await dbAdmin.initializeDatabase(dbPath));
-                    }
-                    catch (e) {
-                        logger.error({ err: e }, 'Failed to reopen DB after rename failure');
-                    }
-                    resolve(c.json({ error: 'Failed to replace database file.' }, 500));
-                    return;
-                }
-                try {
-                    dbAdmin.setDb(await dbAdmin.initializeDatabase(dbPath));
-                    resolve(c.json({ success: true, message: 'Database restored.' }));
-                }
-                catch (e) {
-                    logger.error({ err: e }, 'Failed to initialize restored database');
-                    resolve(c.json({ error: 'Failed to initialize restored database.' }, 500));
-                }
-            });
-        });
-    });
-}
-export function createHonoApp(getState, getGuardState, getDbs, dbAdmin, providerApi, runSync, media) {
-    const app = new Hono();
-    app.use(honoRequestLogger);
-    app.use(honoRequestContextMiddleware);
-    app.get('/api/health', (c) => {
-        const state = getState();
-        if (state.shuttingDown) {
-            return notReady(c, { status: 'shutting-down', ready: false });
-        }
-        if (!state.dbReady) {
-            return notReady(c, { status: 'starting', ready: false });
-        }
-        return c.json({ status: 'ok', ready: true });
-    });
-    app.use(async (c, next) => {
-        const guard = getGuardState();
-        if (guard.shuttingDown) {
-            return notReady(c, 'Server is shutting down...');
-        }
-        if (!guard.dbsReady) {
-            return notReady(c, 'Database initializing...');
-        }
-        if (guard.bootSyncing &&
-            c.req.method !== 'GET' &&
-            c.req.method !== 'HEAD' &&
-            c.req.method !== 'OPTIONS') {
-            return notReady(c, 'Sync in progress...');
-        }
-        await next();
-    });
-    const honoCompress = compress({ threshold: 1024 });
-    app.use(async (c, next) => {
-        if (c.req.header('x-no-compression')) {
-            await next();
-            return;
-        }
-        await honoCompress(c, next);
-    });
-    app.use(async (c, next) => {
-        const origin = c.req.header('origin');
-        if (c.req.method === 'OPTIONS') {
-            if (!origin || !isAllowedOrigin(origin)) {
-                await next();
-                return;
-            }
-            const reqHeaders = c.req.header('access-control-request-headers');
-            return new Response(null, {
-                status: 204,
-                headers: {
-                    'Access-Control-Allow-Origin': origin,
-                    'Access-Control-Allow-Credentials': 'true',
-                    'Access-Control-Allow-Methods': 'GET,HEAD,PUT,PATCH,POST,DELETE',
-                    ...(reqHeaders ? { 'Access-Control-Allow-Headers': reqHeaders } : {}),
-                    Vary: 'Origin',
-                },
-            });
-        }
-        if (!origin || isAllowedOrigin(origin)) {
-            if (origin)
-                c.header('Access-Control-Allow-Origin', origin);
-            c.header('Access-Control-Allow-Credentials', 'true');
-            c.header('Vary', 'Origin');
-        }
-        await next();
-    });
-    app.use(async (c, next) => {
-        const method = c.req.method.toUpperCase();
-        if (!['POST', 'PUT', 'DELETE', 'PATCH'].includes(method)) {
-            await next();
-            return;
-        }
-        const secFetchSite = c.req.header('sec-fetch-site');
-        if (secFetchSite === 'cross-site') {
-            const origin = c.req.header('origin');
-            if (!isAllowedOrigin(origin)) {
-                return c.json({ error: 'Forbidden: cross-site request rejected' }, 403);
-            }
-        }
-        const origin = c.req.header('origin');
-        if (origin && !isAllowedOrigin(origin)) {
-            return c.json({ error: 'Forbidden: cross-origin request rejected' }, 403);
-        }
-        await next();
-    });
-    app.get('/api/auth/app-status', (c) => {
-        const authed = !hasAppPassword() ||
-            validateLanSession(getTokenFromHeaders(c.req.header('authorization'), c.req.header('cookie')));
-        return c.json({ hasPassword: hasAppPassword(), isAuthenticated: authed, port: CONFIG.PORT });
-    });
-    app.post('/api/auth/app-login', async (c) => {
-        const body = (await c.req.json().catch(() => undefined));
-        const password = String(body?.password || '');
-        if (!hasAppPassword()) {
-            return c.json({ success: true });
-        }
-        if (!password) {
-            return c.json({ error: 'Password required' }, 400);
-        }
-        if (!verifyAppPassword(password)) {
-            return c.json({ error: 'Invalid password' }, 401);
-        }
-        const session = createLanSession();
-        c.header('Set-Cookie', buildLanCookie(session.token, session.expiry));
-        return c.json({ success: true });
-    });
-    app.post('/api/auth/app-logout', (c) => {
-        revokeLanSession(getTokenFromHeaders(c.req.header('authorization'), c.req.header('cookie')));
-        c.header('Set-Cookie', clearLanCookie());
-        return c.json({ success: true });
-    });
-    app.post('/api/auth/app-setup', async (c) => {
-        if (!isLoopbackIp(c.req.header('x-dango-client-ip'))) {
-            return c.json({ error: 'Forbidden' }, 403);
-        }
-        const body = (await c.req.json().catch(() => undefined));
-        const password = String(body?.password || '');
-        try {
-            await setAppPassword(password);
-            clearAllLanSessions();
-            return c.json({ success: true, hasPassword: hasAppPassword() });
-        }
-        catch {
-            return c.json({ error: 'Failed to update password' }, 500);
-        }
-    });
-    app.use(async (c, next) => {
-        const path = c.req.path;
-        if (!path.startsWith('/api/')) {
-            await next();
-            return;
-        }
-        if (LAN_AUTH_PUBLIC_PATHS.has(path)) {
-            await next();
-            return;
-        }
-        if (path.startsWith('/api/internal/') && isLoopbackIp(getHonoClientIp(c))) {
-            await next();
-            return;
-        }
-        if (!hasAppPassword()) {
-            await next();
-            return;
-        }
-        if (validateLanSession(getTokenFromHeaders(c.req.header('authorization'), c.req.header('cookie')))) {
-            await next();
-            return;
-        }
-        return c.json({ error: 'LAN_AUTH_REQUIRED' }, 401);
-    });
-    app.all('/api/trpc/*', (c) => fetchRequestHandler({
-        endpoint: '/api/trpc',
-        req: c.req.raw,
-        router: appRouter,
-        createContext: () => buildTrpcContext({
-            ...getDbs(),
-            apiCache: media.getApiCache(),
-            getTvProvider: media.getTvProvider,
-            getMangaProvider: media.getMangaProvider,
-            getJasmr: media.getJasmr,
-            getProviders: media.getProviders,
-            getCatalog: providerApi.getCatalog,
-        }, c.req.header('authorization'), c.req.header('cookie')),
-    }));
-    app.post('/api/import/mal-xml', async (c) => {
-        const dbs = getDbs();
-        const fields = (await c.req.parseBody().catch(() => ({})));
-        const file = fields['xmlfile'];
-        const buffer = file instanceof File ? Buffer.from(await file.arrayBuffer()) : undefined;
-        const prepared = prepareMalImport(buffer, {
-            erase: fields['erase'],
-            useOfflineDb: fields['useOfflineDb'],
-            skipFallback: fields['skipFallback'],
-        });
-        if (!prepared.ok)
-            return c.json(prepared.body, prepared.status);
-        const stream = new TransformStream();
-        const writer = stream.writable.getWriter();
-        const encoder = new TextEncoder();
-        let disconnected = false;
-        c.req.raw.signal.addEventListener('abort', () => {
-            disconnected = true;
-        }, { once: true });
-        const sendEvent = (event, data) => {
-            if (disconnected)
-                return;
-            void writer
-                .write(encoder.encode(`event: ${event}\ndata: ${JSON.stringify(data)}\n\n`))
-                .catch(() => { });
-        };
-        void executeMalImport(dbs.db, prepared.import, sendEvent).finally(() => {
-            void writer.close().catch(() => { });
-        });
-        return new Response(stream.readable, {
-            headers: {
-                'Content-Type': 'text/event-stream',
-                'Cache-Control': 'no-cache',
-                Connection: 'keep-alive',
-            },
-        });
-    });
-    app.get('/api/providers', (c) => {
-        c.header('Cache-Control', 'public, max-age=300');
-        return c.json(providerApi.getCatalog());
-    });
-    app.post('/api/providers/refresh', async (c) => {
-        try {
-            return c.json(await providerApi.refresh());
-        }
-        catch (err) {
-            return c.json({ error: err.message || 'refresh failed' }, 500);
-        }
-    });
-    app.get('/api/tracker/anilist/callback', (c) => {
-        return c.html(`<!doctype html>
-<html><head><meta charset="utf-8"><title>AniList — completing login</title></head>
-<body style="font-family:system-ui;padding:24px;background:#0b1426;color:#e5eefc"><p>Completing AniList login…</p>
+import{Hono as N}from"hono";import{compress as L}from"hono/compress";import{getConnInfo as O}from"@hono/node-server/conninfo";import M from"path";import v from"fs";import{XMLParser as F}from"fast-xml-parser";import{CONFIG as k}from"./config.js";import{isAllowedOrigin as D}from"./utils/security.utils.js";import{requestContext as B}from"./utils/request-context.js";import m from"./logger.js";import{LAN_AUTH_PUBLIC_PATHS as W,buildLanCookie as U,clearAllLanSessions as V,clearLanCookie as X,createLanSession as $,getTokenFromHeaders as T,hasAppPassword as A,isLoopbackIp as _,revokeLanSession as z,setAppPassword as J,validateLanSession as E,verifyAppPassword as G}from"./app-auth.js";import{importMangaFromMalXmlItems as Y}from"./lib/tracker/manga-sync.service.js";import{LibraryRepository as b}from"./repositories/library.repository.js";import{performAsmrWriteTransactionAsync as K,performMangaWriteTransactionAsync as Q,performTvWriteTransactionAsync as Z,performWriteTransactionAsync as ee,KIND_SYNC as P,setKindManifestVersion as re}from"./sync.js";import{ANIME_SYNC_TABLES as te,ASMR_SYNC_TABLES as ae,MANGA_SYNC_TABLES as oe,TV_SYNC_TABLES as ne,exportTables as S,importTables as se,normalizePayload as ie,readPayloadVersion as de}from"./sync-payload.js";import{getMalImportStatus as ce,prepareMalImport as le,executeMalImport as pe}from"./lib/mal-import.js";import{registerMusic as ue}from"./hono/music.js";import{registerAuth as fe}from"./hono/auth.js";import{registerTv as me}from"./hono/tv.js";import{registerProxy as ge}from"./hono/proxy.js";import{fetchRequestHandler as he}from"@trpc/server/adapters/fetch";import{appRouter as ye}from"./trpc/router.js";import{buildTrpcContext as be}from"./trpc/context.js";const we=new F({isArray:a=>a==="manga",parseTagValue:!1,trimValues:!0});function q(a){return Array.isArray(a)?String(a[0]??""):String(a??"")}function ve(a){switch(a){case"Plan to Read":return"Planned";case"On Hold":return"On-Hold";case"Reading":case"Completed":case"Dropped":return a;default:return"Planned"}}function ke(a){try{return O(a).remote.address}catch{return a.req.header("x-dango-client-ip")??void 0}}const H="x-dango-not-ready";function C(a,l){return a.header(H,"1"),typeof l=="string"?a.text(l,503):a.json(l,503)}async function Ce(a,l){const s=process.hrtime.bigint(),p=new URL(a.req.url),c=`${p.pathname}${p.search}`;await l();const g=Math.round(Number(process.hrtime.bigint()-s)/1e6*10)/10,n=a.res.status,o={method:a.req.method,url:c,status:n,ms:g};n>=500&&!a.res.headers.get(H)?m.warn(o,"request failed"):c.startsWith("/api/proxy")||m.trace(`${a.req.method} ${c} ${n} ${g}ms`)}async function Ae(a,l){const s=new Map,p=a.req.header("x-animepahe-ua");p&&s.set("ua",p);const c=a.req.header("x-animepahe-cookie");c&&s.set("cookie",c);const g=a.req.header("x-jasmr-ua");g&&s.set("jasmr_ua",g);const n=a.req.header("x-jasmr-cookie");return n&&s.set("jasmr_cookie",n),B.run(s,()=>l())}async function je(a,l,s){let p;try{p=JSON.parse(s.toString("utf-8"))}catch{return a.json({error:"Invalid backup file."},400)}const c=p?.databases;if(!c||typeof c!="object")return a.json({error:"Invalid backup file: missing databases."},400);const g={anime:l.db,manga:l.mangaDb,tv:l.tvDb,asmr:l.asmrDb},o=Object.keys(P).map(r=>({key:r,db:g[r],tables:P[r].tables,libraryTables:P[r].libraryTables,backupName:P[r].backupName,setVersion:t=>re(r,t)})).filter(r=>c[r.key]!==void 0);if(o.length===0)return a.json({error:"Invalid backup file: no databases found."},400);const h=new Map;try{for(const r of o)h.set(r.key,ie(c[r.key],r.tables,`backup ${r.key}`))}catch(r){return m.warn({err:r},"Multi-database restore rejected: invalid payload"),a.json({error:"Invalid backup file."},400)}const e=[];try{for(const r of o){const t=h.get(r.key);t&&(se(r.db,r.tables,t,{libraryTables:r.libraryTables,backupName:r.backupName}),await r.setVersion(de(t)),e.push(r.key))}}catch(r){return m.error({err:r,restored:e},"Multi-database restore failed partway"),a.json({error:"Restore failed partway.",restored:e},500)}return m.warn({restored:e},"Databases restored from backup file by user request"),a.json({success:!0,message:"Databases restored.",restored:e})}function De(a,l,s,p){const c=k.IS_DEV?k.DB_NAME_DEV:k.DB_NAME_PROD,g=M.join(k.ROOT,"restore_temp.db"),n=M.join(k.ROOT,c);try{v.writeFileSync(g,s)}catch(h){return m.error({err:h},"Failed to stage legacy database restore file"),Promise.resolve(a.json({error:"Failed to stage restore file."},500))}const o=l.db;return new Promise(h=>{o.close(e=>{if(e){h(a.json({error:"Failed to close database."},500));return}try{o.checkpoint()}catch(r){m.warn({err:r},"WAL checkpoint failed")}try{v.existsSync(`${n}-wal`)&&v.unlinkSync(`${n}-wal`),v.existsSync(`${n}-shm`)&&v.unlinkSync(`${n}-shm`)}catch(r){m.warn({err:r},"Failed to clean up WAL files")}v.rename(g,n,async r=>{if(r){try{p.setDb(await p.initializeDatabase(n))}catch(t){m.error({err:t},"Failed to reopen DB after rename failure")}h(a.json({error:"Failed to replace database file."},500));return}try{p.setDb(await p.initializeDatabase(n)),h(a.json({success:!0,message:"Database restored."}))}catch(t){m.error({err:t},"Failed to initialize restored database"),h(a.json({error:"Failed to initialize restored database."},500))}})})})}function Ye(a,l,s,p,c,g,n){const o=new N;o.use(Ce),o.use(Ae),o.get("/api/health",e=>{const r=a();return r.shuttingDown?C(e,{status:"shutting-down",ready:!1}):r.dbReady?e.json({status:"ok",ready:!0}):C(e,{status:"starting",ready:!1})}),o.use(async(e,r)=>{const t=l();if(t.shuttingDown)return C(e,"Server is shutting down...");if(!t.dbsReady)return C(e,"Database initializing...");if(t.bootSyncing&&e.req.method!=="GET"&&e.req.method!=="HEAD"&&e.req.method!=="OPTIONS")return C(e,"Sync in progress...");await r()});const h=L({threshold:1024});return o.use(async(e,r)=>{if(e.req.header("x-no-compression")){await r();return}await h(e,r)}),o.use(async(e,r)=>{const t=e.req.header("origin");if(e.req.method==="OPTIONS"){if(!t||!D(t)){await r();return}const i=e.req.header("access-control-request-headers");return new Response(null,{status:204,headers:{"Access-Control-Allow-Origin":t,"Access-Control-Allow-Credentials":"true","Access-Control-Allow-Methods":"GET,HEAD,PUT,PATCH,POST,DELETE",...i?{"Access-Control-Allow-Headers":i}:{},Vary:"Origin"}})}(!t||D(t))&&(t&&e.header("Access-Control-Allow-Origin",t),e.header("Access-Control-Allow-Credentials","true"),e.header("Vary","Origin")),await r()}),o.use(async(e,r)=>{const t=e.req.method.toUpperCase();if(!["POST","PUT","DELETE","PATCH"].includes(t)){await r();return}if(e.req.header("sec-fetch-site")==="cross-site"){const d=e.req.header("origin");if(!D(d))return e.json({error:"Forbidden: cross-site request rejected"},403)}const y=e.req.header("origin");if(y&&!D(y))return e.json({error:"Forbidden: cross-origin request rejected"},403);await r()}),o.get("/api/auth/app-status",e=>{const r=!A()||E(T(e.req.header("authorization"),e.req.header("cookie")));return e.json({hasPassword:A(),isAuthenticated:r,port:k.PORT})}),o.post("/api/auth/app-login",async e=>{const r=await e.req.json().catch(()=>{}),t=String(r?.password||"");if(!A())return e.json({success:!0});if(!t)return e.json({error:"Password required"},400);if(!G(t))return e.json({error:"Invalid password"},401);const i=$();return e.header("Set-Cookie",U(i.token,i.expiry)),e.json({success:!0})}),o.post("/api/auth/app-logout",e=>(z(T(e.req.header("authorization"),e.req.header("cookie"))),e.header("Set-Cookie",X()),e.json({success:!0}))),o.post("/api/auth/app-setup",async e=>{if(!_(e.req.header("x-dango-client-ip")))return e.json({error:"Forbidden"},403);const r=await e.req.json().catch(()=>{}),t=String(r?.password||"");try{return await J(t),V(),e.json({success:!0,hasPassword:A()})}catch{return e.json({error:"Failed to update password"},500)}}),o.use(async(e,r)=>{const t=e.req.path;if(!t.startsWith("/api/")){await r();return}if(W.has(t)){await r();return}if(t.startsWith("/api/internal/")&&_(ke(e))){await r();return}if(!A()){await r();return}if(E(T(e.req.header("authorization"),e.req.header("cookie")))){await r();return}return e.json({error:"LAN_AUTH_REQUIRED"},401)}),o.all("/api/trpc/*",e=>he({endpoint:"/api/trpc",req:e.req.raw,router:ye,createContext:()=>be({...s(),apiCache:n.getApiCache(),getTvProvider:n.getTvProvider,getMangaProvider:n.getMangaProvider,getJasmr:n.getJasmr,getProviders:n.getProviders,getCatalog:c.getCatalog},e.req.header("authorization"),e.req.header("cookie"))})),o.post("/api/import/mal-xml",async e=>{const r=s(),t=await e.req.parseBody().catch(()=>({})),i=t.xmlfile,y=i instanceof File?Buffer.from(await i.arrayBuffer()):void 0,d=le(y,{erase:t.erase,useOfflineDb:t.useOfflineDb,skipFallback:t.skipFallback});if(!d.ok)return e.json(d.body,d.status);const u=new TransformStream,f=u.writable.getWriter(),x=new TextEncoder;let j=!1;e.req.raw.signal.addEventListener("abort",()=>{j=!0},{once:!0});const R=(w,I)=>{j||f.write(x.encode(`event: ${w}
+data: ${JSON.stringify(I)}
+
+`)).catch(()=>{})};return pe(r.db,d.import,R).finally(()=>{f.close().catch(()=>{})}),new Response(u.readable,{headers:{"Content-Type":"text/event-stream","Cache-Control":"no-cache",Connection:"keep-alive"}})}),o.get("/api/providers",e=>(e.header("Cache-Control","public, max-age=300"),e.json(c.getCatalog()))),o.post("/api/providers/refresh",async e=>{try{return e.json(await c.refresh())}catch(r){return e.json({error:r.message||"refresh failed"},500)}}),o.get("/api/tracker/anilist/callback",e=>e.html(`<!doctype html>
+<html><head><meta charset="utf-8"><title>AniList \u2014 completing login</title></head>
+<body style="font-family:system-ui;padding:24px;background:#0b1426;color:#e5eefc"><p>Completing AniList login\u2026</p>
 <script>
 (function(){
   var qs = new URLSearchParams(location.search);
@@ -463,136 +45,4 @@ export function createHonoApp(getState, getGuardState, getDbs, dbAdmin, provider
   }
   location.replace(frontend + (frontend.indexOf('?') !== -1 ? '&' : '?') + 'anilist=error&reason=no_token');
 })();
-</script></body></html>`);
-    });
-    app.post('/api/import/mal-xml-manga', async (c) => {
-        const fields = (await c.req.parseBody().catch(() => ({})));
-        const file = fields['xmlfile'];
-        if (!(file instanceof File))
-            return c.json({ error: 'No file' }, 400);
-        const eraseRaw = fields['erase'];
-        const erase = eraseRaw === true || eraseRaw === 'true' || eraseRaw === '1';
-        try {
-            const dbs = getDbs();
-            if (!dbs.mangaDb || dbs.mangaDb.isClosedCheck()) {
-                return notReady(c, { error: 'Manga database is not ready' });
-            }
-            let result;
-            try {
-                result = malMangaXmlParser.parse(Buffer.from(await file.arrayBuffer()).toString());
-            }
-            catch {
-                return c.json({ error: 'Invalid XML' }, 400);
-            }
-            const mangaList = result?.myanimelist?.manga || [];
-            if (mangaList.length === 0) {
-                return c.json({ error: 'No manga found in XML' }, 400);
-            }
-            const items = mangaList.map((item) => ({
-                malId: parseInt(mangaXmlText(item.series_mangadb_id), 10) || 0,
-                title: mangaXmlText(item.series_title),
-                status: mapMalMangaXmlStatus(mangaXmlText(item.my_status)),
-                chapters: Math.max(parseInt(mangaXmlText(item.my_read_chapters), 10) || 0, 0),
-            }));
-            const { imported, skipped } = await importMangaFromMalXmlItems(dbs.db, dbs.mangaDb, items, erase);
-            return c.json({ success: true, imported, skipped });
-        }
-        catch (err) {
-            const message = err instanceof Error ? err.message : 'Import failed';
-            return c.json({ error: message }, 500);
-        }
-    });
-    app.get('/api/backup-db', (c) => {
-        try {
-            const dbs = getDbs();
-            const payload = {
-                version: 1,
-                exportedAt: new Date().toISOString(),
-                databases: {
-                    anime: exportTables(dbs.db, ANIME_SYNC_TABLES),
-                    manga: exportTables(dbs.mangaDb, MANGA_SYNC_TABLES),
-                    tv: exportTables(dbs.tvDb, TV_SYNC_TABLES),
-                    asmr: exportTables(dbs.asmrDb, ASMR_SYNC_TABLES),
-                },
-            };
-            c.header('Content-Disposition', 'attachment; filename="dango-backup.json"');
-            return c.json(payload);
-        }
-        catch (err) {
-            logger.error({ err }, 'Multi-database backup failed');
-            return c.json({ error: 'Backup failed' }, 500);
-        }
-    });
-    app.post('/api/database/clear', async (c) => {
-        const body = (await c.req.json().catch(() => undefined));
-        if (body?.confirm !== true) {
-            return c.json({ error: 'Confirmation required' }, 400);
-        }
-        if (getMalImportStatus().running) {
-            return c.json({ error: 'An import is in progress' }, 409);
-        }
-        try {
-            const dbs = getDbs();
-            const before = await LibraryRepository.countAll(dbs.db);
-            const beforeManga = await LibraryRepository.countManga(dbs.mangaDb);
-            const beforeTv = await LibraryRepository.countTv(dbs.tvDb);
-            const beforeAsmr = await LibraryRepository.countAsmr(dbs.asmrDb);
-            await performWriteTransactionAsync(dbs.db, async (tx) => {
-                await LibraryRepository.clearAll(tx);
-            });
-            await performMangaWriteTransactionAsync(dbs.mangaDb, async (tx) => {
-                await LibraryRepository.clearManga(tx);
-            });
-            await performTvWriteTransactionAsync(dbs.tvDb, async (tx) => {
-                await LibraryRepository.clearTv(tx);
-            });
-            await performAsmrWriteTransactionAsync(dbs.asmrDb, async (tx) => {
-                await LibraryRepository.clearAsmr(tx);
-            });
-            logger.warn({ before, beforeManga, beforeTv, beforeAsmr }, 'Library database cleared by user request');
-            return c.json({
-                success: true,
-                deleted: before,
-                deletedManga: beforeManga,
-                deletedTv: beforeTv,
-                deletedAsmr: beforeAsmr,
-            });
-        }
-        catch {
-            return c.json({ error: 'DB error' }, 500);
-        }
-    });
-    app.post('/api/restore-db', async (c) => {
-        const dbs = getDbs();
-        let buffer;
-        let originalName = '';
-        try {
-            const body = await c.req.parseBody();
-            const file = body['dbfile'];
-            if (file instanceof File) {
-                buffer = Buffer.from(await file.arrayBuffer());
-                originalName = file.name || '';
-            }
-        }
-        catch {
-            return c.json({ error: 'No file uploaded.' }, 400);
-        }
-        if (!buffer)
-            return c.json({ error: 'No file uploaded.' }, 400);
-        const head = buffer.slice(0, 16).toString('utf-8').trimStart();
-        if (originalName.endsWith('.json') || head.startsWith('{')) {
-            return restoreJsonBackup(c, dbs, buffer);
-        }
-        return restoreLegacyDatabase(c, dbs, buffer, dbAdmin);
-    });
-    registerMusic(app);
-    registerAuth(app, getDbs, runSync);
-    registerTv(app, media.getTvProvider);
-    registerProxy(app, media.getProxyRules);
-    app.onError((err, c) => {
-        logger.error({ err, url: c.req.path, method: c.req.method }, 'Unhandled error');
-        const status = err.status || 500;
-        return c.json({ error: err.message || 'Internal Server Error', status }, status);
-    });
-    return app;
-}
+</script></body></html>`)),o.post("/api/import/mal-xml-manga",async e=>{const r=await e.req.parseBody().catch(()=>({})),t=r.xmlfile;if(!(t instanceof File))return e.json({error:"No file"},400);const i=r.erase,y=i===!0||i==="true"||i==="1";try{const d=s();if(!d.mangaDb||d.mangaDb.isClosedCheck())return C(e,{error:"Manga database is not ready"});let u;try{u=we.parse(Buffer.from(await t.arrayBuffer()).toString())}catch{return e.json({error:"Invalid XML"},400)}const f=u?.myanimelist?.manga||[];if(f.length===0)return e.json({error:"No manga found in XML"},400);const x=f.map(w=>({malId:parseInt(q(w.series_mangadb_id),10)||0,title:q(w.series_title),status:ve(q(w.my_status)),chapters:Math.max(parseInt(q(w.my_read_chapters),10)||0,0)})),{imported:j,skipped:R}=await Y(d.db,d.mangaDb,x,y);return e.json({success:!0,imported:j,skipped:R})}catch(d){const u=d instanceof Error?d.message:"Import failed";return e.json({error:u},500)}}),o.get("/api/backup-db",e=>{try{const r=s(),t={version:1,exportedAt:new Date().toISOString(),databases:{anime:S(r.db,te),manga:S(r.mangaDb,oe),tv:S(r.tvDb,ne),asmr:S(r.asmrDb,ae)}};return e.header("Content-Disposition",'attachment; filename="dango-backup.json"'),e.json(t)}catch(r){return m.error({err:r},"Multi-database backup failed"),e.json({error:"Backup failed"},500)}}),o.post("/api/database/clear",async e=>{if((await e.req.json().catch(()=>{}))?.confirm!==!0)return e.json({error:"Confirmation required"},400);if(ce().running)return e.json({error:"An import is in progress"},409);try{const t=s(),i=await b.countAll(t.db),y=await b.countManga(t.mangaDb),d=await b.countTv(t.tvDb),u=await b.countAsmr(t.asmrDb);return await ee(t.db,async f=>{await b.clearAll(f)}),await Q(t.mangaDb,async f=>{await b.clearManga(f)}),await Z(t.tvDb,async f=>{await b.clearTv(f)}),await K(t.asmrDb,async f=>{await b.clearAsmr(f)}),m.warn({before:i,beforeManga:y,beforeTv:d,beforeAsmr:u},"Library database cleared by user request"),e.json({success:!0,deleted:i,deletedManga:y,deletedTv:d,deletedAsmr:u})}catch{return e.json({error:"DB error"},500)}}),o.post("/api/restore-db",async e=>{const r=s();let t,i="";try{const u=(await e.req.parseBody()).dbfile;u instanceof File&&(t=Buffer.from(await u.arrayBuffer()),i=u.name||"")}catch{return e.json({error:"No file uploaded."},400)}if(!t)return e.json({error:"No file uploaded."},400);const y=t.slice(0,16).toString("utf-8").trimStart();return i.endsWith(".json")||y.startsWith("{")?je(e,r,t):De(e,r,t,p)}),ue(o),fe(o,s,g),me(o,n.getTvProvider),ge(o,n.getProxyRules),o.onError((e,r)=>{m.error({err:e,url:r.req.path,method:r.req.method},"Unhandled error");const t=e.status||500;return r.json({error:e.message||"Internal Server Error",status:t},t)}),o}export{Ye as createHonoApp,ke as getHonoClientIp,Ae as honoRequestContextMiddleware,Ce as honoRequestLogger};