plx-converter 0.1.0 → 0.1.2

package/README.md

@@ -1,15 +1,15 @@
 # plx
 
-Spotify ⇄ Deezer playlist converter CLI.
+Playlist converter CLI for Spotify, Deezer, and YouTube Music.
 
-Converts playlists in both directions — reads Spotify **without an account, Premium, or OAuth**; writes via your session cookies.
+Converts a playlist from any of the three services into any other — six directions — using your own logged-in browser session. No developer account, no OAuth, no API keys.
 
-> ⚠️ **Personal, non-commercial use.** Uses unofficial web endpoints that can change or break without notice. Not affiliated with Spotify or Deezer.
+> ⚠️ **Personal, non-commercial use.** Uses unofficial web endpoints that can change or break without notice. Not affiliated with Spotify, Deezer, or YouTube.
 
 ## Install
 
 ```bash
-npm install -g plx
+npm install -g plx-converter
 ```
 
 Requires Node.js ≥ 22.
@@ -17,14 +17,20 @@ Requires Node.js ≥ 22.
 ## Usage
 
 ```bash
-plx                                              # interactive menu (both directions)
-plx --url "https://open.spotify.com/playlist/ID" # Spotify → Deezer
-plx --url "<URL>" --dry-run                      # preview matches without writing
+plx                                                        # interactive menu
+plx --url "https://open.spotify.com/playlist/ID" --to deezer
+plx --url "https://www.deezer.com/playlist/ID" --to spotify
+plx --url "https://music.youtube.com/playlist?list=ID" --to deezer
+plx --url "<LINK>" --to deezer --dry-run                   # preview matches without writing
 ```
 
+You name the **target**; the source is inferred from the link, since the link already says which
+service it belongs to. plx never guesses a destination — omitting `--to` is an error.
+
 ```text
 Options:
-  -u, --url <URL|ID>      playlist URL/URI/ID (repeatable)
+  -u, --url <LINK>        playlist URL/URI/ID (repeatable)
+  -t, --to <PROVIDER>     target provider (required)
   -o, --output <file>     CSV report path (default: conversion_report.csv)
   -d, --dry-run           match only, don't write
   -h, --help              show help
@@ -35,7 +41,7 @@ Options:
 | Cookie | Env var | Needed for |
 |---|---|---|
 | Deezer `arl` | `DEEZER_ARL` | writing to Deezer |
-| Spotify `sp_dc` | `SPOTIFY_DC` | writing to Spotify (reverse flow) |
+| Spotify `sp_dc` | `SPOTIFY_DC` | writing to a Spotify target |
 
 Set in `.env`, or paste when prompted. Reading a Spotify playlist needs **no credentials**. Full setup: [`docs/CONFIG.md`](docs/CONFIG.md).
 

package/dist/args.js

@@ -1,22 +1,28 @@
-export const HELP_TEXT = `plx — Spotify → Deezer playlist converter
+export const HELP_TEXT = `plx — playlist converter
 
 Usage:
-  plx                              interactive menu
-  plx --url <URL|ID> [--url ...]   convert specific playlist(s) — no Spotify account or OAuth needed
+  plx                                    interactive menu
+  plx --url <LINK> --to <PROVIDER>       convert a playlist into PROVIDER
+
+The source provider is inferred from the link, so you only name the target.
 
 Options:
-  -u, --url <URL|ID>      Spotify playlist URL, URI, or ID (repeatable)
+  -u, --url <LINK>        playlist URL, URI, or ID (repeatable)
+  -t, --to <PROVIDER>     target provider: spotify | deezer | ytmusic (required)
   -o, --output <file>     CSV report path (default: conversion_report.csv)
-  -d, --dry-run           match only; do not create Deezer playlists
+  -d, --dry-run           match only; do not create or modify any playlist
   -h, --help              show this help
 
 Examples:
-  plx --url https://open.spotify.com/playlist/37i9dQZF1DXcBWIGoYBM5M --dry-run
+  plx --url https://open.spotify.com/playlist/37i9dQZF1DXcBWIGoYBM5M --to deezer
+  plx --url https://www.deezer.com/playlist/1234567890 --to ytmusic
+  plx --url https://music.youtube.com/playlist?list=PL... --to spotify
+  plx --url https://open.spotify.com/playlist/37i9dQZF1DXcBWIGoYBM5M --to deezer --dry-run
   plx
 `;
 export function parseArgs(argv) {
-    const options = { urls: [], dryRun: false, output: 'conversion_report.csv', help: false };
-    const takeValue = (flag, i, inline) => inline !== undefined ? { value: inline, next: i + 1 } : { value: argv[i + 1], next: i + 2 };
+    const options = { urls: [], target: null, dryRun: false, output: 'conversion_report.csv', help: false };
+    const takeValue = (i, inline) => inline !== undefined ? { value: inline, next: i + 1 } : { value: argv[i + 1], next: i + 2 };
     for (let i = 0; i < argv.length; i += 1) {
         const arg = argv[i];
         if (arg === '--help' || arg === '-h') {
@@ -27,18 +33,25 @@ export function parseArgs(argv) {
             options.dryRun = true;
             continue;
         }
-        const flagMatch = arg.match(/^(--\w+|\w)=(.+)$/);
+        const flagMatch = arg.match(/^(--\w[\w-]*|-\w)=(.+)$/);
         const flag = flagMatch ? flagMatch[1] : arg;
         const inline = flagMatch ? flagMatch[2] : undefined;
         if (flag === '--url' || flag === '-u') {
-            const { value, next } = takeValue('--url', i, inline);
+            const { value, next } = takeValue(i, inline);
             if (value)
                 options.urls.push(value);
             i = next - 1;
             continue;
         }
+        if (flag === '--to' || flag === '-t') {
+            const { value, next } = takeValue(i, inline);
+            if (value)
+                options.target = value;
+            i = next - 1;
+            continue;
+        }
         if (flag === '--output' || flag === '-o') {
-            const { value, next } = takeValue('--output', i, inline);
+            const { value, next } = takeValue(i, inline);
             if (value)
                 options.output = value;
             i = next - 1;

package/dist/browser.js

@@ -4,6 +4,7 @@ import { existsSync, readFileSync } from 'node:fs';
 import { homedir, platform } from 'node:os';
 import { join } from 'node:path';
 import { DatabaseSync } from 'node:sqlite';
+import { YTMUSIC_COOKIES, cookieHeader } from './ytmusic.js';
 const CHROMIUM_BROWSERS = [
     { dir: 'BraveSoftware/Brave-Browser', keychain: 'Brave Safe Storage' },
     { dir: 'Google/Chrome', keychain: 'Chrome Safe Storage' },
@@ -45,7 +46,39 @@ function keychainPassword(service) {
         return null; // keychain denied / no such item — skip this browser
     }
 }
-const COOKIE_QUERY = `SELECT name, host_key, encrypted_value FROM cookies WHERE (name = 'arl' AND host_key = '.deezer.com') OR (name = 'sp_dc' AND host_key = '.spotify.com')`;
+// Which cookie names matter, and which hosts they may come from **in priority order**.
+//
+// This ordering is not cosmetic. Google sets `SID`, `SAPISID` and friends on `.google.com` *and*
+// `.youtube.com` with **different values**, so taking whichever the cookie store happened to return
+// first yields a bundle mixing two sessions — which the service reads as logged out. `.youtube.com`
+// wins because that is the host the requests actually go to; `.google.com` is only a fallback for a
+// cookie YouTube did not set itself.
+const WANTED = [
+    { name: 'arl', hosts: ['deezer.com'] },
+    { name: 'sp_dc', hosts: ['spotify.com'] },
+    ...YTMUSIC_COOKIES.map((name) => ({ name, hosts: ['youtube.com', 'google.com'] })),
+];
+const COOKIE_NAMES = WANTED.map((w) => w.name);
+// How preferred this host is for this cookie name: 0 is best, -1 means "not a host we want it from".
+export function hostRank(name, host) {
+    const want = WANTED.find((w) => w.name === name);
+    if (!want)
+        return -1;
+    return want.hosts.findIndex((h) => host === h || host.endsWith(`.${h}`));
+}
+// Keep the best-ranked host for each cookie name, whatever order the store yielded rows in.
+function collect(rows) {
+    const best = new Map();
+    for (const row of rows) {
+        const rank = hostRank(row.name, row.host);
+        if (rank < 0)
+            continue;
+        const current = best.get(row.name);
+        if (!current || rank < current.rank)
+            best.set(row.name, { rank, value: row.value });
+    }
+    return Object.fromEntries([...best].map(([name, { value }]) => [name, value]));
+}
 function readChromium(browser) {
     const dbPath = join(homedir(), 'Library', 'Application Support', browser.dir, 'Default', 'Cookies');
     if (!existsSync(dbPath))
@@ -58,18 +91,12 @@ function readChromium(browser) {
     try {
         const meta = db.prepare("SELECT value FROM meta WHERE key = 'version'").get();
         const dbVersion = meta?.value ? Number(meta.value) : 0;
-        const out = {};
-        const rows = db.prepare(COOKIE_QUERY).all();
-        for (const row of rows) {
+        const query = `SELECT name, host_key, encrypted_value FROM cookies WHERE name IN (${COOKIE_NAMES.map(() => '?').join(',')})`;
+        const rows = db.prepare(query).all(...COOKIE_NAMES);
+        return collect(rows.flatMap((row) => {
             const value = decryptCookie(Buffer.from(row.encrypted_value), key, dbVersion >= 24);
-            if (value) {
-                if (row.name === 'arl')
-                    out.arl = value;
-                else if (row.name === 'sp_dc')
-                    out.spDc = value;
-            }
-        }
-        return out;
+            return value ? [{ name: row.name, host: row.host_key, value }] : [];
+        }));
     }
     catch {
         return {}; // locked DB / changed schema — skip this browser
@@ -98,7 +125,7 @@ export function parseSafariCookies(buf) {
     const pageSizes = [];
     for (let i = 0; i < totalPages; i++)
         pageSizes.push(buf.readUInt32BE(8 + i * 4));
-    const out = {};
+    const found = [];
     let base = 8 + totalPages * 4;
     for (let p = 0; p < totalPages; p++) {
         const page = buf.subarray(base, base + pageSizes[p]);
@@ -111,15 +138,10 @@ export function parseSafariCookies(buf) {
             const host = readCStr(page, cookieOffset + page.readUInt32LE(cookieOffset + 16));
             const name = readCStr(page, cookieOffset + page.readUInt32LE(cookieOffset + 20));
             const value = readCStr(page, cookieOffset + page.readUInt32LE(cookieOffset + 28));
-            if (!out.arl && name === 'arl' && host.includes('deezer.com'))
-                out.arl = value;
-            else if (!out.spDc && name === 'sp_dc' && host.includes('spotify.com'))
-                out.spDc = value;
-            if (out.arl && out.spDc)
-                return out;
+            found.push({ name, host, value });
         }
     }
-    return out;
+    return collect(found);
 }
 function readSafari() {
     for (const path of SAFARI_PATHS) {
@@ -134,28 +156,30 @@ function readSafari() {
     }
     return {};
 }
-// Auto-retrieve credentials from the first logged-in browser that has them.
-// Never throws — a missing browser, locked DB, denied keychain, or TCC block
-// just yields {}. Callers persist what's found; manual paste stays the fallback.
+// Auto-retrieve credentials from the first logged-in browser that has them, keyed by provider —
+// the parsers above speak in cookie names, and this is where that becomes one opaque string per
+// provider for the config layer to store. Never throws: a missing browser, locked DB, denied
+// keychain, or TCC block just yields {}. Manual paste stays the fallback.
 export function fetchBrowserCredentials() {
     if (platform() !== 'darwin')
         return {};
-    const result = {};
-    for (const browser of CHROMIUM_BROWSERS) {
-        const found = readChromium(browser);
-        if (found.arl && !result.arl)
-            result.arl = found.arl;
-        if (found.spDc && !result.spDc)
-            result.spDc = found.spDc;
-        if (result.arl && result.spDc)
-            break;
-    }
-    if (!result.arl || !result.spDc) {
-        const safari = readSafari();
-        if (safari.arl && !result.arl)
-            result.arl = safari.arl;
-        if (safari.spDc && !result.spDc)
-            result.spDc = safari.spDc;
+    const credentials = {};
+    // Every backend is read rather than stopping at the first: a user may be logged into Deezer in one
+    // browser and YouTube Music in another.
+    for (const found of [...CHROMIUM_BROWSERS.map(readChromium), readSafari()]) {
+        if (!credentials.deezer && found.arl)
+            credentials.deezer = found.arl;
+        if (!credentials.spotify && found.sp_dc)
+            credentials.spotify = found.sp_dc;
+        // A cookie bundle is only a session as a *set* from one profile, so it is built per browser and
+        // never merged across them — half of one login plus half of another authenticates as neither.
+        // Both backends funnel through the one joiner, so "which cookies, joined how" is decided in a
+        // single place, and that place is testable without a browser.
+        if (!credentials.ytmusic) {
+            const header = cookieHeader(found);
+            if (header)
+                credentials.ytmusic = header;
+        }
     }
-    return result;
+    return credentials;
 }