release: merge dev into main

.env.example

@@ -148,6 +148,27 @@ BETTER_AUTH_SECRET=
 # Maximum log entries per worker in memory (default: 1000)
 # WORKER_MAX_LOGS=1000
 
+# =============================================================================
+# CAPTCHA / CLOUDFLARE BROWSER SOLVING (Advanced)
+# =============================================================================
+# Cinephage solves Cloudflare/DDoS-Guard challenges with an embedded headless
+# Firefox (Camoufox). Each browser is a full Firefox process (300MB-1GB+ RSS),
+# so concurrency is hard-capped to avoid OOM under heavy fan-out.
+
+# Maximum concurrent Camoufox browsers (default: 2, minimum: 1).
+# Lower to 1 on memory-constrained hosts (e.g. small LXCs); raise only if you
+# also raise the container's shm_size.
+# CAPTCHA_MAX_BROWSERS=2
+
+# Force-close a browser if it lives longer than this many ms (default: 120000).
+# Safety net for wedged/orphaned browsers; must exceed the solve timeout.
+# CAPTCHA_BROWSER_MAX_AGE_MS=120000
+
+# NOTE on /dev/shm: headless Firefox uses shared memory. Containers default to
+# 64MB which causes crashes. docker-compose.yaml sets shm_size: 256m. For
+# `docker run`, add `--shm-size=256m`. On Proxmox LXC, the host's /dev/shm may
+# also need raising (mount a larger tmpfs at /dev/shm inside the container).
+
 # =============================================================================
 # STREAMING CONFIGURATION (Advanced)
 # =============================================================================

.github/workflows/ghcr-retag-latest.yml

@@ -205,5 +205,5 @@ jobs:
             echo "- Source tag: \`${SOURCE_TAG}\`"
             echo "- Source digest: \`${SOURCE_DIGEST}\`"
             echo "- New latest digest: \`${NEW_LATEST_DIGEST}\`"
-            echo "- Result: ✅ \`latest\` now points to \`${SOURCE_TAG}\`"
+            echo "- Result: \`latest\` now points to \`${SOURCE_TAG}\`"
           } >> "$GITHUB_STEP_SUMMARY"

.gitignore

@@ -60,6 +60,7 @@ opencode
 opencode.md
 OPENCODE.md
 AGENTS.md
+HANDOVER.md
 
 # Qwen local settings
 .qwen/

Dockerfile

@@ -1,15 +1,19 @@
 # ==========================================
-# Build Stage
+# Build-deps base (shared by builder + prod-deps to avoid duplicate apt layers)
 # ==========================================
-FROM node:24-trixie-slim AS builder
+FROM node:24-trixie-slim AS build-deps-base
 WORKDIR /app
-
 RUN apt-get update && apt-get install -y --no-install-recommends \
 	python3 \
 	make \
 	g++ \
 	&& rm -rf /var/lib/apt/lists/*
 
+# ==========================================
+# Build Stage
+# ==========================================
+FROM build-deps-base AS builder
+
 COPY package*.json ./
 COPY .npmrc ./
 
@@ -32,14 +36,7 @@ RUN npm run build
 # ==========================================
 # Production Dependencies Stage
 # ==========================================
-FROM node:24-trixie-slim AS prod-deps
-WORKDIR /app
-
-RUN apt-get update && apt-get install -y --no-install-recommends \
-	python3 \
-	make \
-	g++ \
-	&& rm -rf /var/lib/apt/lists/*
+FROM build-deps-base AS prod-deps
 
 COPY package*.json ./
 COPY .npmrc ./
@@ -50,6 +47,7 @@ COPY .npmrc ./
 RUN npm ci --omit=dev --no-audit --no-fund \
 	&& find node_modules -type f -name '*.map' -delete \
 	&& find node_modules -type d \( -name test -o -name tests -o -name __tests__ -o -name docs -o -name doc -o -name examples -o -name example \) -prune -exec rm -rf '{}' + \
+	&& find node_modules -name 'lightningcss-linux-x64-musl' -prune -exec rm -rf '{}' + \
 	&& find node_modules -type d -empty -delete
 
 # ==========================================
@@ -63,6 +61,7 @@ ARG APP_SOURCE=https://github.com/MoldyTaint/Cinephage
 ARG VCS_REF=unknown
 ARG BUILD_CREATED=unknown
 ENV APP_VERSION=${APP_VERSION}
+ENV APP_COMMIT=${VCS_REF}
 RUN printf '%s\n' "$APP_VERSION" > /app/version.txt
 
 LABEL org.opencontainers.image.title='Cinephage' \
@@ -101,11 +100,14 @@ COPY --from=builder /app/package.json ./package.json
 COPY --from=builder /app/server.js ./server.js
 COPY --from=builder /app/scripts ./scripts
 COPY --from=builder /app/data ./bundled-data
+# Camoufox shadow-unlock addon (loaded at runtime for Cloudflare Turnstile solving)
+COPY --from=builder /app/src/lib/server/captcha/browser/addon ./camoufox-addon
 COPY --chmod=755 docker-entrypoint.sh /usr/local/bin/cinephage-entrypoint
 COPY --chmod=755 docker-script-runner.sh /usr/local/bin/cinephage-script
 RUN ln -sf /usr/local/bin/cinephage-script /usr/local/bin/cine-run
 
 ENV NODE_ENV=production \
+    NODE_OPTIONS="--max-old-space-size=2048" \
     HOST=0.0.0.0 \
     PORT=3000 \
     FFPROBE_PATH=/usr/bin/ffprobe \

LICENSE

@@ -1,3 +1,7 @@
+# SPDX-License-Identifier: GPL-3.0-or-later
+
+                    GNU GENERAL PUBLIC LICENSE
+
 Cinephage - Self-hosted Media Management
 Copyright (C) 2025 Cinephage Contributors
 
@@ -16,7 +20,7 @@ along with this program.  If not, see <https://www.gnu.org/licenses/>.
 
 --------------------------------------------------------------------------------
 
-                    GNU GENERAL PUBLIC LICENSE
+                    GNU GENERAL PUBLIC LICENSE (full text)
                        Version 3, 29 June 2007
 
  Copyright (C) 2007 Free Software Foundation, Inc. <https://fsf.org/>

README.md

@@ -112,8 +112,9 @@ Dynamic content discovery with auto-add to library. Import from IMDb, Trakt, TMD
 ## Requirements
 
 - **TMDB API Key** — Free at [themoviedb.org/settings/api](https://www.themoviedb.org/settings/api)
-- **Download Client** (optional) — qBittorrent, SABnzbd, or NZBGet
+- **Download Client** (optional) — qBittorrent, SABnzbd, NZBGet, Real-Debrid, or TorBox
   - Or use streaming mode — no download client needed
+  - Real-Debrid and TorBox accept torrent releases, materialize ready files directly into the resolved library destination, and can optionally remove provider items after a durable import.
 
 ## Quick Start
 

data/indexers/definitions/1337x.yaml

@@ -0,0 +1,108 @@
+---
+# 1337x Public Torrent Indexer
+# Adapted for Cinephage from the Prowlarr/Jackett community definition.
+# Cloudflare-protected: relies on Cinephage's built-in Camoufox captcha solver.
+id: 1337x
+name: 1337x
+description: 1337x is a Public torrent site that offers verified torrent downloads
+language: en-US
+type: public
+protocol: torrent
+encoding: UTF-8
+requestdelay: 2
+
+links:
+  - https://1337x.to/
+  - https://1337x.st/
+  - https://x1337x.ws/
+
+settings:
+  - name: info_flaresolverr
+    type: info_flaresolverr
+  - name: downloadlink
+    type: select
+    label: Download link
+    default: 'magnet:'
+    options:
+      'magnet:': Magnet
+      'http://itorrents.org/': iTorrents.org
+  - name: downloadlink2
+    type: select
+    label: Download link (fallback)
+    default: 'http://itorrents.org/'
+    options:
+      'http://itorrents.org/': iTorrents.org
+      'magnet:': Magnet
+
+caps:
+  categorymappings:
+    - { id: 28, cat: TV/Anime, desc: 'Anime/Anime' }
+    - { id: 1, cat: Movies/DVD, desc: 'Movies/DVD' }
+    - { id: 2, cat: Movies/SD, desc: 'Movies/Divx/Xvid' }
+    - { id: 42, cat: Movies/HD, desc: 'Movies/HD' }
+    - { id: 54, cat: Movies/HD, desc: 'Movies/h.264/x264' }
+    - { id: 70, cat: Movies/HD, desc: 'Movies/HEVC/x265' }
+    - { id: 76, cat: Movies/UHD, desc: 'Movies/UHD' }
+    - { id: 41, cat: TV/HD, desc: 'TV/HD' }
+    - { id: 71, cat: TV, desc: 'TV/HEVC/x265' }
+    - { id: 75, cat: TV/SD, desc: 'TV/SD' }
+    - { id: 5, cat: TV, desc: 'TV/DVD' }
+
+  modes:
+    search: [q]
+    tv-search: [q, season, ep]
+    movie-search: [q]
+
+download:
+  # The .torrent URL and magnet URI live on the details page.
+  selectors:
+    - selector: ul li a[href^="{{ .Config.downloadlink }}"]
+      attribute: href
+    - selector: ul li a[href^="{{ .Config.downloadlink2 }}"]
+      attribute: href
+
+search:
+  # 1337x serves a stricter Cloudflare challenge on deep links; the captcha
+  # solver warms up the site root first, so a simple search path is enough.
+  paths:
+    - path: 'search/{{ .Keywords }}/1/'
+
+  keywordsfilters:
+    - name: re_replace # daily standard S2023 > 2023
+      args: ['\bS(20\d{2})\b', '$1']
+
+  rows:
+    selector: 'tr:has(a[href^="/torrent/"])'
+
+  fields:
+    title:
+      selector: td[class^="coll-1"] a[href^="/torrent/"]
+    details:
+      selector: td[class^="coll-1"] a[href^="/torrent/"]
+      attribute: href
+    download:
+      selector: td[class^="coll-1"] a[href^="/torrent/"]
+      attribute: href
+    category:
+      selector: td[class^="coll-1"] a[href^="/sub/"]
+      attribute: href
+      optional: true
+      default: '42'
+      filters:
+        - name: split
+          args: ['/', 2]
+    seeders:
+      selector: td[class^="coll-2"]
+    leechers:
+      selector: td[class^="coll-3"]
+    size:
+      selector: td[class^="coll-4"]
+    date:
+      selector: td[class^="coll-date"]
+      optional: true
+      filters:
+        - name: fuzzytime
+    downloadvolumefactor:
+      text: '0'
+    uploadvolumefactor:
+      text: '1'

data/indexers/definitions/bitsearch.yaml

@@ -9,9 +9,10 @@ type: public
 encoding: UTF-8
 requestdelay: 2
 links:
-  - https://bitsearch.to/
+  - https://bitsearch.eu/
   - https://solidtorrents.eu/
 legacylinks:
+  - https://bitsearch.to/
   - https://bitsearch.nocensor.cloud/
   - https://bitsearch.mrunblock.bond/
   - https://solidtorrents.net/