fix(anime): harden the extension bridge against untrusted repos and hangs

Addresses CodeRabbit review feedback on the Anime Browser: - reject repository package/apk names that are not plain identifiers, and verify the install target resolves inside the extensions directory - count mpv's %n% option escape in UTF-8 bytes, and escape backslashes in header values so a trailing one cannot eat the list separator - key the bridge extension-id cache by APK content, so an in-place upgrade re-uploads instead of running the previous build - bound every bridge, release-listing, and download request with a timeout - enforce the APK size limit while streaming rather than after buffering - read APK bytes on demand instead of holding a base64 copy per extension for the lifetime of the browser - serialize preference mutations and write the file atomically - handle the sidecar spawn error event, and wait for the child to exit in stop() before returning - report a failed Anime Browser bootstrap instead of showing the starting banner forever - keep the preferences panel's save confirmation and in-flight multi-select edits by re-rendering only on a structural schema change
feat(anime): add anime browser powered by Aniyomi extensions
2026-07-31 19:21:33 -07:00 · 2026-07-31 17:57:01 -07:00 · 2026-07-31 17:21:12 -07:00 · 2026-07-31 17:17:29 -07:00 · 2026-07-30 19:47:08 -07:00 · 2026-07-29 22:26:03 -07:00
170 changed files with 8921 additions and 866 deletions
@@ -1,12 +1,61 @@
 # Changelog
 ## Unreleased
 ### Fixed
 - Anime Browser Window Switching: Opening the anime browser now shows a tray icon on every platform and — on macOS — puts the app in the Cmd+Tab switcher (which requires the Dock icon; the two are inseparable on macOS), so you can switch between it and mpv. Previously the subtitle overlay's fullscreen support hid the whole app from the Dock and Cmd+Tab, leaving no way to reach the window. The Dock icon is released again when the window closes during playback.
 - Anime Browser Playback Session: Launching a video from the anime browser now starts a regular SubMiner session (tray icon plus the on-demand overlay runtime), and in `subminer anime` standalone mode, closing the browser window during playback no longer quits the app and kills the stream — the window can be reopened from the tray while mpv keeps playing.
 ## v0.19.0 (2026-07-29)
 ### Added
 - Anki Maturity Highlighting: Known-word subtitle highlights can now be colored by Anki card maturity (new, learning, young, mature), similar to asbplayer. Tier thresholds and colors are configurable, with a runtime toggle and an updated help legend.
 - Post-Playback Menu: After a watch-history episode ends, the fzf/rofi launcher returns to that series with options to play the previous or next episode, rewatch, pick another episode, or quit. The pre-playback series menu now offers the previous episode too.
 - Delete Library Entries: The stats Library detail view can now delete an entire title in one step (episodes, sessions, subtitle lines, rollups, cover art, and vocabulary counts). Delete progress is now shown app-wide via a progress bar and status toast instead of disappearing when you switch tabs.
 - Cross-Machine Sync: Added SSH-based syncing of stats and watch history between machines, available from the tray ("Sync Stats & History") or `subminer sync`, with saved devices, per-host sync direction, background auto-sync, connection testing, manual snapshots, and support for Windows remotes.
 - TsukiHime Subtitle Downloads: Added subtitle downloads for the current video via TsukiHime, loading Japanese as the primary track and your configured secondary language directly into mpv.
 ### Changed
 - Clipboard-Video Shortcut: The "append clipboard video to queue" shortcut is now configurable.
 ### Fixed
 - AniList Season Resolution: Season 2+ files now resolve to the correct AniList entry instead of silently falling back to season 1 (which mismatched character dictionaries and watch progress). Manual overrides now stay scoped per season, fix both the dictionary and progress tracking together, and also correct per-season cover art.
 - Subtitle Annotation Accuracy: Fixed several annotation edge cases, including inconsistent POS exclusions on merged quote-particle tokens, dropped annotations on supplementary-plane kanji, katakana punctuation wrongly treated as noise, and certain kanji vocabulary losing N+1 highlighting eligibility.
 - AnkiConnect Proxy Port Conflict: Video startup no longer crashes when another process already holds the configured AnkiConnect proxy port; a notification now explains how to resolve it.
 - AppImage Quit Crash: Fixed a "Service Crash" desktop notification appearing after closing a video when running the Linux AppImage.
 - Autoplay Pause Timing: Fixed playback resuming a few seconds before subtitle tokenization warmup finished, most noticeable when resuming mid-episode or when a cue starts within the first two seconds.
 - Stats Known-Word Count: Fixed stats reporting 0 known words for every session after the known-word cache format changed.
 - Stats Library Cover Art: Relinking a title to a different AniList entry now updates its cover in the Library grid immediately instead of leaving a stale, mismatched cover cached.
 - Rofi Prompt Spacing: Rofi menu prompts now keep a space before the input field instead of running into the placeholder text.
 - Stats Settings & Reliability: Hardened stats settings validation (nested/legacy AnkiConnect config now falls back safely instead of breaking) and stats routes against malformed requests and other edge cases.
 - Stats Delete Performance: Deleting sessions, episodes, and library entries is now dramatically faster and no longer stalls playback (e.g. a 12-episode title dropped from about a minute to under a second on a large library); the Vocabulary tab also loads much faster. The first launch after upgrading runs a one-time database migration.
 <details>
 <summary>Internal changes</summary>
 ### Internal
 - Added a golden-file regression test corpus for the tokenizer/annotation pipeline, plus scripts to record new fixtures and diff against stock Yomitan.
 - Consolidated renderer modal state handling into a descriptor registry.
 - Consolidated CI quality checks (PR, stable, and prerelease) into one reusable workflow with mpv plugin tests and dependency audits.
 - Removed the unused stats IPC transport and unified stats dashboard HTTP types with the backend contract.
 - Added a script to verify known-word highlight tiers against live Anki data outside of playback.
 </details>
 ## v0.18.0 (2026-07-10)
 ### Added
 - Sentence Audio Normalization: Generated sentence audio is now normalized to -23 LUFS by default, and clips mined from playback mirror mpv's software volume curve with a limiter to prevent clipping. Both behaviors are configurable independently.
 - Watch History Command: Added `subminer -H` / `--history` to browse watch history, replay or continue episodes, or pick one via fzf or rofi, with cover art shown in the rofi picker.
 ### Changed
 - Fzf Preview Layout: Moved fzf previews below launcher menus, giving long titles and metadata more room.
 - Known-Word Highlighting: Now compares subtitle and Anki-card readings, preventing false matches between homographs and unrelated words that share a reading, while still supporting matching across kana and kanji spellings.
 - Annotation Filtering: Standalone suffix tokens (e.g. さん, れる) are now excluded from JLPT/frequency/N+1 highlighting by default, matching how particles and interjections are treated; configurable via the pos2 exclusion setting.
@@ -14,6 +63,7 @@
 - Stats Trend Charts: Overhauled with persisted title visibility, per-chart title limits, "top" and "most recent" ranking modes, an option to show or hide empty days, calendar-aligned periods, and value-sorted tooltips.
 ### Fixed
 - Background Stats Server: `subminer app` background launches now auto-start the stats server when enabled, and skip startup if one is already running.
 - Character Name Highlighting: Character dictionaries now split unspaced native names more reliably, and portraits, highlights, and hover lookup survive punctuation, unmatched text, and competing dictionary matches without incorrectly splitting longer words.
 - Highlighting Coverage: Frequency/JLPT highlighting and vocabulary stats now include content adverbs (e.g. 確かに, やはり) and kanji nouns MeCab tags as non-independent (e.g. 日, 点, 以外), while still suppressing interjections, pronouns, and grammar fragments; lexicalized kana expressions like かといって keep their annotations.
@@ -27,6 +77,7 @@
 <summary>Internal changes</summary>
 ### Internal
 - Test lanes moved to `scripts/test-lanes.ts` with per-directory discovery and isolated per-file timeouts; CI now covers previously orphaned stats, scripts, plugin process-retry, and runtime-compat suites, plus a new stats lane in the change-verification workflow.
 </details>
@@ -34,15 +85,18 @@
 ## v0.17.2 (2026-06-28)
 ### Fixed
 - YouTube Background Cache: Fixed Windows YouTube background media cache startup for YouTube URLs opened directly in mpv, including resolved stream URLs when mpv still exposes the original YouTube playlist entry, so queued Anki media updates can append audio and images after the cache finishes.
 - YouTube Subtitle Picker: Manual subtitle picker requests now show an immediate configured notification while SubMiner probes tracks and opens the modal. Subtitle download progress is replaced with a transient success notification after tracks load.
 ## v0.17.1 (2026-06-27)
 ### Added
 - YouTube Media Cache Mode: Adds `youtube.mediaCache.mode` with `direct` and `background` options. Background mode uses a yt-dlp cache download when direct stream extraction is unreliable — creates a text-only card immediately, queues media updates for mined notes, and fills audio/image fields once the download finishes. Progress is announced via overlay/OSD notifications. Downloads are capped at 720p by default (`youtube.mediaCache.maxHeight`). Switching back to direct mode cancels any in-flight background download.
 ### Fixed
 - Log Export: Fixed log filenames to use the local date so exports around UTC midnight include the current day's logs rather than stale prior-day files. Expanded export redaction to mask IPs, emails, auth and cookie headers, yt-dlp cookie arguments, URL credentials, token/key/password fields, and signed YouTube media URL parameters.
 - YouTube Card Media: Improved media generation reliability by sending safer ffmpeg options for resolved streams and skipping stale stream maps (including cached YouTube files). Hardened background cache downloads with IPv4 and extractor retry flags; failed downloads now notify the user and clear queued media updates instead of leaving them silently pending. Stale background cache files are cleaned on startup and before each new download.
@@ -123,6 +177,7 @@
 <summary>Internal changes</summary>
 ### Internal
 - **Build**: `make deps` now initializes git submodules before installing dependencies on a fresh source checkout.
 - **Release Tooling**: Release notes now credit contributors and first-time authors resolved from changelog fragments via git and the GitHub API.
 - **Changelog Guidance**: PR fragment guidance updated to preserve separate-outcome fragments while directing contributors to consolidate same-PR follow-up notes before adding churn.
@@ -132,9 +187,11 @@
 ## v0.15.2 (2026-06-02)
 ### Changed
 - Yomitan: Updated the bundled Yomitan build to the latest vendored revision.
 ### Fixed
 - Anki - Animated AVIF: Clip timing no longer starts or ends early; word-audio lead-in and clip duration are now aligned to frame boundaries.
 - Overlay (Hyprland): Fixed fullscreen overlay alignment - modal, stats, and sidebar content no longer shift below the mpv window.
 - Overlay (macOS): Subtitle bars are now interactive immediately after autoplay starts with "wait for overlay to be ready" enabled, without requiring a manual click.
@@ -0,0 +1,15 @@
 type: added
 area: anime
 - Added an anime browser window that searches Aniyomi extension sources, shows cover art and episode lists, and plays an episode in mpv so the overlay and mining tools attach as usual.
 - Added `subminer anime` and the `--anime` flag to open the browser, plus a "Browse Anime" tray entry.
 - Anime extensions are read from `<userData>/anime-extensions`; drop Aniyomi `.apk` files there to add sources.
 - Added a source settings tab so extensions that need configuration (server address, credentials, quality) can be set up from the browser; values persist per source.
 - Added an Extensions tab for adding repository URLs and installing, updating, or removing extensions in place; extensions that fail to load are listed with the reason.
 - Browse, Extensions, and Source settings are tabs, so each one gets the full window instead of sharing it with the search results.
 - Repository URLs only need to be an https URL to a `.json` index; the file name is not restricted to `index.min.json`.
 - The source picker offers "All sources", which searches every installed source at once. Results stream in as each source answers — a fast source is on screen while a slow one is still resolving, with per-source progress in the status bar. Results are tagged with the source they came from, and a source that fails is named in the status bar instead of blanking the grid.
 - The Extensions tab opens with an Installed section listing every extension on disk with Remove — including ones added by hand or whose repository has since been removed — and Update where a configured repository still carries it.
 - Added `anime.repos`, `anime.extensionsDir`, and `anime.preferredQuality` config keys. SubMiner ships no extension repositories and performs no discovery.
 - Anime playback targets Japanese audio: dub-labelled entries are skipped when the source offers an alternative, `alang` prefers Japanese, and the source's own audio and subtitle tracks are loaded into mpv (Japanese selected) instead of being discarded, so all of them can be switched from mpv's track menu.
 - The primary subtitle slot stays reserved for Japanese: a source that only has, say, English subtitles gets them added with a normalized language tag (`English` → `en`) but not selected, so the regular `secondarySub` auto-load can route them to the secondary slot instead.
@@ -1,5 +0,0 @@
 type: added
 area: overlay
 - Known-word subtitle highlights can now be colored by Anki card maturity (new, learning, young, mature) like asbplayer. Enable with `ankiConnect.knownWords.maturityEnabled`; the mature interval threshold (`matureThresholdDays`, default 21) and the four tier colors (`subtitleStyle.knownWordMaturityColors`) are configurable, and a runtime option toggles it in-session. The session help color legend shows the four tier colors while maturity highlighting is on.
 - Tiers follow Anki's own card counts: the interval tiers exclude cards in the learning/relearning queue, so a lapsed card shows the learning color instead of young (its interval is reset to at least 1 day, which previously made the learning tier unreachable). A note with a mature card alongside a relearning card still shows mature.
@@ -1,5 +0,0 @@
 type: fixed
 area: overlay
 - Applied configured primary POS exclusions consistently to merged trailing quote-particle tokens, preserved annotations for supplementary-plane kanji, and stopped treating katakana punctuation as kana-only annotation noise.
 - Kept kanji vocabulary tagged `名詞/非自立` eligible for N+1 highlighting, consistent with frequency, JLPT, and vocabulary persistence.
@@ -1,4 +0,0 @@
 type: changed
 area: shortcuts
 - Made the clipboard-video playlist shortcut configurable through `shortcuts.appendClipboardVideoToQueue`.
@@ -1,8 +0,0 @@
 type: fixed
 area: anilist
 - Season 2 and later files now resolve to the right AniList entry. AniList has no numbered seasons (sequels are separate entries titled `Zoku`, `Kan`, `2nd Season`), so the old `<title> Season N` search returned nothing and silently fell back to the season 1 entry: an Oregairu S03 episode loaded the season 1 character dictionary and pushed watch progress onto season 1. SubMiner now searches the base title and walks AniList `SEQUEL` relations to reach the requested season, ordering the franchise's TV entries by air date when the relation chain is incomplete.
 - When the season still cannot be located, SubMiner no longer writes progress to the season 1 entry; it skips the update and points at the manual AniList override instead. The character dictionary logs the same warning and states which entry it fell back to.
 - Character dictionary overrides are now scoped by detected season as well as directory, so seasons kept in one flat folder no longer share (or overwrite) each other's override, and an override now also pins the entry used for AniList watch progress: correcting a wrong match once fixes both the dictionary and progress tracking.
 - Cover art lookup uses the same season-aware resolution, so per-season art no longer falls back to the season 1 cover.
 - An unresolvable season is no longer cached as if it were a normal match, so the fallback cannot silently stick for every later episode of that series.
@@ -1,4 +0,0 @@
 type: fixed
 area: anki
 - Prevented video startup from crashing when another process already owns the configured AnkiConnect proxy port, and added a notification explaining how to resolve the conflict.
@@ -1,4 +0,0 @@
 type: fixed
 area: app
 - Fixed "Service Crash" desktop notifications (KDE DrKonqi) after closing a video when running the Linux AppImage: the short-lived background bootstrap spawned a Chromium GPU child that outlived it (surviving `app.exit`) and died with SIGBUS at session end when the bootstrap's FUSE mount was finally released. The bootstrap now runs with the GPU in-process so it leaves no children behind, and the detached app's mount remains supervised until its Chromium children finish. Set `SUBMINER_NO_APPIMAGE_MOUNT_KEEPALIVE=1` to disable the detached-app mount supervisor.
@@ -1,4 +0,0 @@
 type: fixed
 area: character dictionary
 - Kept manual AniList overrides active across episodes in the same season directory when filename guesses differ.
@@ -1,4 +0,0 @@
 type: fixed
 area: overlay
 - Fixed `mpv.pauseUntilOverlayReady` releasing playback seconds before tokenization warmup finished: startup subtitle priming emits the current cue untokenized so the overlay can paint early, and that emission was treated as the autoplay-readiness signal as soon as the overlay window loaded. The autoplay gate now ignores untokenized subtitle payloads while tokenization warmup is pending, so playback resumes only after the first tokenized delivery (or the post-warmup release). Most visible when resuming mid-episode or when a subtitle cue starts within the first two seconds.
@@ -1,5 +0,0 @@
 type: fixed
 area: stats
 - Stats reported 0 known words for every session after the known-word cache gained maturity tiers. The stats server carried its own copy of the cache parser that only recognized versions up to 3, so the new v4 file was read as "no cache" rather than as a format it should understand.
 - The cache format, its parser, and the derived known-word set now live in one module that both the cache manager and the stats server read, and the version dispatch ends in an exhaustive check so a future format bump fails the build instead of silently reporting zero. A cache that exists but does not parse now logs a warning rather than passing for an empty one.
@@ -1,4 +0,0 @@
 type: fixed
 area: stats
 - Relinking a title to a different AniList entry now updates its cover in the stats Library grid too. The detail view picked up the new art immediately while the grid kept the previous entry's image, so several unrelated titles could end up sharing one wrong cover. The library list is refetched after a relink, and cover responses now carry an ETag and revalidate instead of being cached for a day, so a stale image can no longer be served from the browser cache.
@@ -1,7 +0,0 @@
 type: internal
 area: tokenizer
 - Added a golden-file regression corpus for the tokenizer/annotation pipeline: recorded Yomitan backend responses and MeCab tokens replay through the real tokenizeSubtitle pipeline in bun tests without Electron or dictionaries.
 - Added `record-tokenizer-fixture:electron` script to capture new fixtures from a live Yomitan/MeCab session, with flags for known words, JLPT levels, and annotation toggles.
 - Seeded eleven fixtures covering the #147–#156 regression classes (grammar-helper suppression, lexical くれる, kanji non-independent nouns, N+1 targeting, reading collisions, unparsed runs, ordinal/honorific prefixes).
 - Added `compare-yomitan-api:electron` script that diffs SubMiner tokenization against a stock Yomitan instance via the yomitan-api bridge (segmentation, readings, headword forms).
@@ -1,5 +0,0 @@
 type: added
 area: launcher
 - After a watch-history episode ends or mpv closes, the fzf or rofi launcher returns to that series with options to play the previous episode, rewatch, play the next episode, select another episode, or quit SubMiner. Previous and Next continue across season directories.
 - The action menu shown right after picking a series from `subminer -H` now also offers the previous episode, matching the menu shown after playback.
@@ -0,0 +1,4 @@
 type: fixed
 area: overlay
 - Fixed the macOS Yomitan popup going inert after mining a card: clicking outside the popup no longer passes through to mpv (with the overlay flickering hidden and shown), and scrolling over the popup scrolls its definitions again instead of seeking mpv.
@@ -1,4 +0,0 @@
 type: internal
 area: overlay
 - Consolidated renderer modal state handling into a descriptor registry.
@@ -1,4 +0,0 @@
 type: internal
 area: release
 - Consolidated pull request, stable release, and prerelease quality checks in one reusable workflow, with Lua mpv plugin tests and blocking high-severity dependency audits running in every gate.
@@ -1,4 +0,0 @@
 type: fixed
 area: launcher
 - Rofi menu prompts now keep a space between the prompt text and the input field instead of running into the search placeholder.
@@ -1,5 +0,0 @@
 type: fixed
 area: stats
 - Validated nested and legacy AnkiConnect settings after splitting the resolver, preserving valid modern overrides while warning and falling back for invalid primitive values.
 - Hardened stats routes against malformed IDs and static paths, stalled AniList searches, word-mining media collisions, missing Yomitan bridges, and throwing timing observers.
@@ -1,5 +0,0 @@
 type: added
 area: stats
 - Added a "Delete Entry" action to the stats Library detail view. It removes the whole title in one step — every episode, session, subtitle line, rollup, cover art and vocabulary counts derived from them — and the title disappears from the Library grid. Previously only individual episodes and sessions could be deleted, so a mistakenly created entry had to be cleared episode by episode and still lingered in the library.
 - Deletion progress is now shown app-wide instead of only on Overview and Sessions. Every delete (session, session group, episode, and library entry) drives a sweeping bar at the top of the window plus a bottom-right status toast, and both stay visible across tab switches, detail views, and the in-app stats overlay window. The per-tab indicators previously went blank the moment you left the tab that started the delete.
@@ -1,7 +0,0 @@
 type: fixed
 area: stats
 - Made deleting stats data much faster and stopped it stalling playback. Every delete used to recompute each affected word's totals by re-reading that word's whole occurrence history across the library, which meant one random read into the largest table per occurrence. On a 960-session library that cost 3.8s to delete a single session and over a minute to clear a 12-episode title, and because the stats server runs in the app process when the app owns it, that time was spent blocking mpv.
 - Word and kanji occurrences now store the subtitle line's timestamp alongside the count, so those totals are answered from a covering index instead of the subtitle-line table, and a delete only subtracts what it actually removed rather than recomputing untouched entries. Measured on the same 960-session library: deleting one session 3832ms to 190ms, a ten-session day group 6453ms to 433ms, one episode 5437ms to 263ms, and a whole 12-episode title 60556ms to 621ms.
 - Opening the Vocabulary tab no longer stalls either. It was computing "seen in N titles" for every word in the library before ordering by frequency and keeping the top 100, so the whole occurrence history was walked to produce one page. It now picks the page first and counts only those rows: 2136ms to 62ms on the same library.
 - The first launch after upgrading migrates the existing stats database in place (about 3s for a 288k-line library) and it grows roughly 20% from the added index. Vocabulary dates recorded before the upgrade keep working while the migration runs.
@@ -1,8 +0,0 @@
 type: added
 area: sync
 - Added cross-machine immersion sync for stats and watch history over SSH, available as a window (**Sync Stats & History** in the tray menu, or `subminer sync --ui`) and as a command (`subminer sync <host>`, with `--push` / `--pull` for one-way insert-only transfers). The window keeps saved devices with per-host direction, one-click sync with live stage-by-stage progress and separate merge summaries for each machine, connection testing for first-time setup, cancellable runs while the app/stats server/playback is active, and manual database snapshots (create/merge/reveal/delete, stored in `/tmp/subminer-db-snapshots/` by default). Hosts with auto-sync enabled sync in the background on a configurable interval, including during playback, with results reported as overlay notifications; hosts synced from the CLI are remembered in `<config dir>/sync-hosts.json` and appear in the window automatically.
 - Merges are an insert-only union keyed on session UUIDs / video keys / series title keys, so re-syncing is idempotent and nothing is double-counted: each side snapshots its database (`VACUUM INTO`) from a consistent WAL point, snapshots are exchanged with `scp`, and each machine merges the other's data transactionally. Lifetime totals and daily/monthly rollups are updated incrementally (history older than the session retention window is preserved), unfinished sessions are excluded until a later sync sees them finalized, and remote-only historical rollups are copied only when they do not conflict with retained local session history. Sync aborts on stats schema version mismatches and refuses to run while the stats daemon or a live mpv session is active (`--force` overrides).
 - The sync engine runs only inside the app: the sync window and the `subminer sync` command both delegate to `SubMiner --sync-cli` (headless, works over SSH with no display), so neither machine needs bun or the command-line launcher. A remote machine only needs SubMiner itself, found automatically as the app binary or via the launcher proxy.
 - Windows remotes are supported: sync detects the remote shell (POSIX, cmd, or PowerShell) and manages remote temp files through SubMiner itself (`sync --make-temp` / `--remove-temp`) instead of `mktemp` / `rm`, so a Windows machine with the built-in OpenSSH Server works as a sync remote, found in its default Windows install location automatically.
 - Added supporting flags: `subminer sync <host> --check` tests the SSH connection and remote launcher availability without syncing, `subminer sync --snapshot <file>` and `--merge <file>` expose the underlying steps for manual transfers, and `subminer sync --json` emits machine-readable NDJSON progress (the protocol the sync window consumes).
@@ -1,4 +0,0 @@
 type: added
 area: overlay
 - Added TsukiHime subtitle downloads for the current video, with Japanese primary and configured secondary-language tracks loaded directly into mpv.
@@ -1,4 +0,0 @@
 type: internal
 area: stats
 - Removed the unused stats IPC data transport and unified the stats dashboard's HTTP wire types with the backend contract.
@@ -1,7 +0,0 @@
 type: internal
 area: tokenizer
 - Added `verify-known-word-highlights:electron` script: tokenizes a real subtitle file through the app's Yomitan/MeCab pipeline with the live known-word cache, prints each line in the configured tier colors, and summarizes the tier counts so highlighting can be checked outside of playback.
 - Added `--audit`, which re-derives every highlighted tier from live Anki card data (`notesInfo` + `cardsInfo` intervals) and reports each token whose rendered tier disagrees, catching both stale cache entries and tier-classification bugs.
 - Added `--profile-copy` so the check can run while SubMiner is open (Electron locks the Yomitan userData dir), plus `--refresh`, `--limit`, `--json`, and `--quiet`.
 - Added `KnownWordCacheManager.getKnownWordMatchNoteIds`, exposing the note ids behind a known-word match so an audit can trace a rendered tier back to the exact Anki notes.
@@ -0,0 +1,6 @@
 type: added
 area: anki
 - Added `ankiConnect.lapisKiku.wordCardKind` (Settings > Mining/Anki > Kiku/Lapis Features > "Word Card Type") to choose which card-type flag SubMiner marks on Kiku/Lapis word cards: `word-and-sentence` (default, unchanged behavior), `click`, `sentence`, `audio`, or `none` to leave the flags alone. Requested by Kiku users who only want `IsClickCard` set.
 - Word cards can now be flagged as Kiku click cards (`IsClickCard`), which SubMiner previously never set.
 - Setting a card-type flag now clears `IsClickCard` alongside the other card-type flags, so a note can no longer claim two card types at once.
@@ -523,7 +523,7 @@
  // ==========================================
  // AnkiConnect Integration
  // Automatic Anki updates and media generation options.
-  // Hot-reload: ankiConnect.ai.enabled, media.normalizeAudio/mirrorMpvVolume, knownWords, nPlusOne, fields.word/audio/image/sentence/miscInfo, behavior.autoUpdateNewCards, isLapis.sentenceCardModel, and isKiku.fieldGrouping update live while SubMiner is running.
+  // Hot-reload: ankiConnect.ai.enabled, media.normalizeAudio/mirrorMpvVolume, knownWords, nPlusOne, fields.word/audio/image/sentence/miscInfo, behavior.autoUpdateNewCards, isLapis.sentenceCardModel, isKiku.fieldGrouping, and lapisKiku.wordCardKind update live while SubMiner is running.
  // Shared AI provider transport settings are read from top-level ai and typically require restart.
  // Most other AnkiConnect settings still require restart.
  // ==========================================
@@ -605,9 +605,24 @@
      "enabled": false, // Enable Kiku-specific mining behaviors (duplicate handling, field grouping). Values: true | false
      "fieldGrouping": "disabled", // Kiku duplicate-card field grouping mode. Values: auto | manual | disabled
      "deleteDuplicateInAuto": true // When Kiku field grouping is "auto", delete the duplicate source card after grouping completes. Values: true | false
-    } // Is kiku setting.
+    }, // Is kiku setting.
    "lapisKiku": {
      "wordCardKind": "word-and-sentence" // Card-type flag SubMiner marks on Kiku/Lapis word cards. Only one flag is set at a time; the others are cleared. Requires isKiku.enabled or isLapis.enabled. Values: word-and-sentence | click | sentence | audio | none
    } // Lapis kiku setting.
  }, // Automatic Anki updates and media generation options.
  // ==========================================
  // Anime Browser
  // Anime browser sources. SubMiner ships no extension repositories and bundles no sources;
  // add a repository index URL here (or drop .apk files in the extensions directory) to have any.
  // Hot-reload: anime changes apply the next time the anime browser opens.
  // ==========================================
  "anime": {
    "extensionsDir": "", // Directory holding Aniyomi extension .apk files. Empty uses <userData>/anime-extensions.
    "repos": [], // Extension repository index URLs (any https .json index, e.g. https://.../index.min.json). Empty by default; SubMiner ships no repositories.
    "preferredQuality": "" // Preferred stream quality label, matched as a substring (for example: 1080). Empty uses the source order.
  }, // Anime browser sources. SubMiner ships no extension repositories and bundles no sources;
  // ==========================================
  // Jimaku
  // Jimaku API configuration and defaults.
@@ -327,6 +327,7 @@ const sidebar: DefaultTheme.SidebarItem[] = [
      { text: 'Anki', link: '/anki-integration' },
      { text: 'Jellyfin', link: '/jellyfin-integration' },
      { text: 'YouTube', link: '/youtube-integration' },
      { text: 'Anime Browser', link: '/anime-browser' },
      { text: 'Jimaku', link: '/jimaku-integration' },
      { text: 'TsukiHime', link: '/tsukihime-integration' },
      { text: 'AniList', link: '/anilist-integration' },
@@ -45,7 +45,9 @@
  border: 1px solid var(--vp-c-border);
  border-radius: 0;
  background: var(--vp-c-bg);
-  box-shadow: 0 8px 32px rgba(0, 0, 0, 0.3), 0 24px 64px rgba(0, 0, 0, 0.2);
+  box-shadow:
    0 8px 32px rgba(0, 0, 0, 0.3),
    0 24px 64px rgba(0, 0, 0, 0.2);
  overflow: hidden;
 }
@@ -62,7 +64,9 @@
  font-family: var(--tui-font-mono);
  font-size: 12px;
  cursor: pointer;
-  transition: border-color 180ms ease, color 180ms ease;
+  transition:
    border-color 180ms ease,
    color 180ms ease;
 }
 .mermaid-modal__close:hover {
@@ -10,7 +10,5 @@ test('status line file path formats version archive home without trailing slash'
 });
 test('status line file path keeps normal docs routes as markdown files', () => {
-  expect(formatStatusLineFilePath('/v/0.12.0/configuration')).toBe(
+  expect(formatStatusLineFilePath('/v/0.12.0/configuration')).toBe('v/0.12.0/configuration.md');
    'v/0.12.0/configuration.md',
  );
 });
@@ -22,17 +22,8 @@
 :root {
  --tui-font-mono: 'JetBrains Mono', 'Cascadia Code', 'Fira Code', monospace;
  --tui-font-body:
-    'Manrope Default',
+    'Manrope Default', 'M PLUS 1', 'Manrope', 'Noto Sans CJK JP', 'Noto Sans JP',
-    'M PLUS 1',
+    'Hiragino Kaku Gothic ProN', 'Meiryo', 'Yu Gothic', 'Hiragino Sans', system-ui, sans-serif;
    'Manrope',
    'Noto Sans CJK JP',
    'Noto Sans JP',
    'Hiragino Kaku Gothic ProN',
    'Meiryo',
    'Yu Gothic',
    'Hiragino Sans',
    system-ui,
    sans-serif;
  --tui-transition: 180ms ease;
  /* Theme-specific values — overridden in .dark below */
@@ -96,8 +87,11 @@ button,
 .VPFeature,
 .VPNavBarMenuLink,
 .VPSidebarItem .text {
-  transition: color var(--tui-transition), background var(--tui-transition),
+  transition:
-    border-color var(--tui-transition), opacity var(--tui-transition);
+    color var(--tui-transition),
    background var(--tui-transition),
    border-color var(--tui-transition),
    opacity var(--tui-transition);
 }
 /* === Nav bar === */
@@ -218,8 +212,7 @@ button,
  background: var(--vp-c-bg-soft);
  border: 1px solid var(--vp-c-divider);
  color: var(--vp-c-brand-1);
-  font-family: var(--tui-font-mono), 'M PLUS 1', 'Noto Sans CJK JP', 'Noto Sans JP',
+  font-family: var(--tui-font-mono), 'M PLUS 1', 'Noto Sans CJK JP', 'Noto Sans JP', monospace;
    monospace;
  font-variant-ligatures: none;
 }
@@ -228,8 +221,7 @@ button,
  border-radius: 0;
  border: 1px solid var(--vp-c-divider);
  background: var(--vp-c-bg-alt) !important;
-  font-family: var(--tui-font-mono), 'M PLUS 1', 'Noto Sans CJK JP', 'Noto Sans JP',
+  font-family: var(--tui-font-mono), 'M PLUS 1', 'Noto Sans CJK JP', 'Noto Sans JP', monospace;
    monospace;
  font-variant-ligatures: none;
 }
@@ -273,7 +265,9 @@ button,
 .vp-doc a {
  text-decoration: none;
  border-bottom: 1px solid var(--tui-link-underline);
-  transition: border-color var(--tui-transition), color var(--tui-transition);
+  transition:
    border-color var(--tui-transition),
    color var(--tui-transition);
 }
 .vp-doc a:hover {
@@ -312,20 +306,45 @@ button,
  border-left-width: 1px;
 }
-.vp-doc .custom-block.tip { border-color: var(--vp-c-brand-1); }
+.vp-doc .custom-block.tip {
-.vp-doc .custom-block.tip::before { content: '-- tip'; color: var(--vp-c-brand-1); }
+  border-color: var(--vp-c-brand-1);
 }
 .vp-doc .custom-block.tip::before {
  content: '-- tip';
  color: var(--vp-c-brand-1);
 }
-.vp-doc .custom-block.info { border-color: var(--vp-c-brand-2); }
+.vp-doc .custom-block.info {
-.vp-doc .custom-block.info::before { content: '-- info'; color: var(--vp-c-brand-2); }
+  border-color: var(--vp-c-brand-2);
 }
 .vp-doc .custom-block.info::before {
  content: '-- info';
  color: var(--vp-c-brand-2);
 }
-.vp-doc .custom-block.warning { border-color: var(--vp-c-warning-1); }
+.vp-doc .custom-block.warning {
-.vp-doc .custom-block.warning::before { content: '-- warning'; color: var(--vp-c-warning-1); }
+  border-color: var(--vp-c-warning-1);
 }
 .vp-doc .custom-block.warning::before {
  content: '-- warning';
  color: var(--vp-c-warning-1);
 }
-.vp-doc .custom-block.danger { border-color: var(--vp-c-danger-1); }
+.vp-doc .custom-block.danger {
-.vp-doc .custom-block.danger::before { content: '-- danger'; color: var(--vp-c-danger-1); }
+  border-color: var(--vp-c-danger-1);
 }
 .vp-doc .custom-block.danger::before {
  content: '-- danger';
  color: var(--vp-c-danger-1);
 }
-.vp-doc .custom-block.details { border-color: var(--vp-c-divider); }
+.vp-doc .custom-block.details {
-.vp-doc .custom-block.details::before { content: '-- details'; color: var(--vp-c-text-2); }
+  border-color: var(--vp-c-divider);
 }
 .vp-doc .custom-block.details::before {
  content: '-- details';
  color: var(--vp-c-text-2);
 }
 .vp-doc .custom-block .custom-block-title {
  font-family: var(--tui-font-mono);
@@ -413,11 +432,15 @@ button,
 }
@keyframes tui-blink {
-  0%, 100% { opacity: 1; }
+  0%,
-  50% { opacity: 0; }
+  100% {
    opacity: 1;
  }
  50% {
    opacity: 0;
  }
 }
 /* === Statusline === */
 .tui-statusline {
  position: fixed;
@@ -457,7 +480,7 @@ button,
  margin-left: -12px;
 }
-.tui-statusline__mode[data-mode="HOME"] {
+.tui-statusline__mode[data-mode='HOME'] {
  background: var(--vp-c-brand-2);
 }
@@ -561,7 +584,9 @@ body {
 .VPFeatures .VPFeature {
  border-radius: 8px !important;
  border: 1px solid var(--vp-c-divider) !important;
-  transition: border-color var(--tui-transition), background var(--tui-transition),
+  transition:
    border-color var(--tui-transition),
    background var(--tui-transition),
    transform var(--tui-transition);
  position: relative;
  overflow: hidden;
@@ -672,11 +697,7 @@ body {
  transform: translateX(-50%);
  width: 600px;
  height: 400px;
-  background: radial-gradient(
+  background: radial-gradient(ellipse at center, var(--tui-hero-glow) 0%, transparent 70%);
    ellipse at center,
    var(--tui-hero-glow) 0%,
    transparent 70%
  );
  pointer-events: none;
  z-index: -1;
 }
@@ -0,0 +1,182 @@
 # Anime Browser
 Search anime sources, pick an episode, and play it in mpv with SubMiner's overlay
 and mining tools attached — the same way a local file or a Jellyfin stream works.
 Open it with `subminer anime`, with `SubMiner.AppImage --anime`, or from
 **Browse Anime** in the tray menu. The window stays open while you watch, so you
 can queue the next episode without reopening it.
 While the window is open, SubMiner shows a tray icon and — on macOS — appears
 in the Cmd+Tab switcher and the Dock (macOS ties the two together), so you can
 flip between the browser and mpv. SubMiner normally hides itself from the Dock
 because the subtitle overlay needs that to float above fullscreen video; it
 hides again when the window closes during playback.
 Launching an episode starts a full SubMiner playback session, the same as
 playing a local file: the overlay and mining tools attach, and the tray icon
 stays available. In standalone `subminer anime` mode, closing the window while
 a video is playing leaves playback running — reopen the browser from the tray
 (**Browse Anime**). The app only exits with the window when nothing is playing.
 ## How it works
 SubMiner does not implement any anime source itself. It runs **Aniyomi extension
 APKs** through a bundled JVM sidecar ([M-Extension-Server][mes]), asks the
 selected extension to resolve an episode, and hands the resulting URL to mpv.
 ```
 extension APK  →  bridge (JVM)  →  { url, headers }  →  mpv  →  SubMiner overlay
 ```
 Because the extension resolves the stream, whichever sources you install decide
 what is available. SubMiner only hosts them.
 ## Installing extensions
 **SubMiner ships no extension repositories and bundles no sources.** There is no
 default repository, no suggested list, and no discovery. Until you add one, the
 browser has nothing to search — that is deliberate, and it is what keeps SubMiner
 a neutral host rather than a distributor.
 There are two ways to add extensions.
 ### From a repository
 The window has three tabs — **Browse**, **Extensions**, and **Source settings** —
 and each one fills the window, so a long extension list is not squeezed in above
 the search results.
 Open the **Extensions** tab, paste a repository index URL, and choose
 **Add repository**. The URL must be `https` and point at a `.json` index file —
 `index.min.json` is the common Aniyomi name, but repositories are free to publish
 under another one (for example `video.min.json`). Anything else is rejected
 immediately rather than failing later. Everything before the file name is treated
 as the repository root, so `.apk` and icon URLs are resolved relative to it.
 Extensions your repositories offer but you do not have appear under
 **Available**, each with **Install**. Repositories are stored in config under
 `anime.repos`, so you can also manage them there and keep them in a dotfile.
 ### Managing what is installed
 The Extensions tab opens with an **Installed** section listing everything in the
 extensions directory, with the sources each one provides and a **Remove**
 button. It is built from the directory rather than from a repository, so an
 extension you dropped in by hand — or one whose repository you have since
 removed — is still listed and still removable.
 **Update** appears next to an extension a configured repository still carries;
 it downloads the current version over the existing APK.
 ### From a file
 Drop Aniyomi `.apk` files into the extensions directory, shown at the top of the
 Extensions tab. It defaults to `<userData>/anime-extensions` — on macOS,
 `~/Library/Application Support/SubMiner/anime-extensions` — and can be moved with
 `anime.extensionsDir`.
 A single APK may provide several sources; each appears separately in the
 **Source** picker. Extensions that fail to load are listed in the Installed
 section with the reason, so a broken APK is visible rather than silently
 missing.
 An extension that fails to load is skipped rather than blocking the others, so
 one bad APK will not hide the rest.
 ## Searching every source at once
 With more than one source installed, the **Source** picker gains an
 **All sources** entry. Searching with it selected runs the query against every
 installed source at once, and each source's results appear the moment that
 source answers — a fast source is on screen while a slow one is still
 resolving. The status bar counts sources as they finish
 (`Searching… 3/5 sources · 42 results`).
 Each cover is labelled with the source it came from, and opening one always
 queries that source, whatever the picker says afterwards.
 A source that errors is named in the status bar and the rest still show their
 results; one extension that needs a login cannot blank the grid. If every
 source fails, the first error is shown in full.
 Typing a new search while one is still running simply starts over: results
 from the superseded search are discarded, even if its sources answer late.
 Source settings belong to a single extension, so the **Source settings** tab
 asks you to pick one while **All sources** is selected.
 ## Settings
 | Key                      | Purpose                                                              |
 | ------------------------ | -------------------------------------------------------------------- |
 | `anime.repos`            | Repository index URLs. Empty by default.                             |
 | `anime.extensionsDir`    | Where APKs are read from. Empty uses `<userData>/anime-extensions`.  |
 | `anime.preferredQuality` | Preferred stream label, matched as a substring (for example `1080`). |
 ## Source settings
 Most extensions need configuration before they return anything — a server
 address and credentials, a preferred quality, a language filter. Open the
 **Source settings** tab to edit them. Changes save as you make them and
 persist across restarts in `<userData>/anime-source-preferences.json`.
 Each save is handed back to the extension, so it can react: the Jellyfin source
 logs in when the address and password land, then fills in its media-library
 picker. Password-like fields are masked. Because that file can hold
 credentials, it is written with owner-only permissions.
 ## The bridge
 The first launch downloads a platform bundle (~130 MB) containing the server and
 a matching Java runtime, so no system JDK is required. It is verified against a
 pinned SHA-256 before running, unpacked into `<userData>/anime-bridge`, and
 reused after that. Progress appears in the banner at the top of the window.
 The bridge stays running while the window is open. Resolved video URLs point at
 its own loopback proxy so the extension's cookies and headers apply, which means
 those URLs stop working once it exits — the window keeps it alive for the whole
 session.
 Two known limits:
 - There is no Android WebView, so extensions that need one (typically for
  Cloudflare challenges) will fail with an error from the source.
 - Bundles are published for macOS (arm64, x64), Linux (x64), and Windows (x64).
  Other platforms are unsupported.
 ## Playback
 Selecting an episode resolves the best available stream, applies the source's
 required headers as mpv `http-header-fields`, and loads it. The headers are
 readable back off mpv, so Anki card audio and screenshots fetch correctly too.
 ### Japanese audio, and switching tracks
 Sources often return a dub and the original audio as two separate entries — or
 as two audio tracks of one stream — and the dub is frequently listed first.
 SubMiner always aims at the Japanese audio:
 - Entries labelled as a dub are skipped as long as another entry exists. This
  outranks `anime.preferredQuality`: a 1080p dub is the wrong file, not a better
  one. If every entry is a dub, it still plays.
 - mpv's `alang` is set to `ja,jpn,jp,japanese` before the file loads, so a
  stream carrying several audio tracks starts on the Japanese one. With no
  Japanese track, mpv falls back to the first one as usual.
 - Any audio or subtitle tracks the extension supplies separately are added to
  mpv with `audio-add` / `sub-add`, tagged with their language, and the
  Japanese one is selected.
 The primary subtitle slot is reserved for Japanese — it is what the overlay
 mines. A source that only carries, say, English subtitles does not get them
 promoted to primary; instead the track is added with a normalized language tag
 (`English` → `en`), and the regular [dual-subtitle settings](configuration.md)
 apply: with `secondarySub.autoLoadSecondarySub` enabled and the language listed
 in `secondarySub.secondarySubLanguages`, it is picked up as the secondary
 subtitle, exactly as it would be for a local file.
 Every track is added, including the ones that are not selected, so all of them
 appear in mpv's track menu and can be switched by hand while watching
 (`#` cycles audio, `j` cycles subtitles by default).
 [mes]: https://github.com/1Selxo/M-Extension-Server
@@ -45,9 +45,9 @@ Results are cached per file for the app session; only definitive "no intro found
 You can trigger AniSkip actions from mpv script-messages:
-| Command | Effect |
+| Command                                   | Effect                                                                  |
-| ------- | ------ |
+| ----------------------------------------- | ----------------------------------------------------------------------- |
-| `script-message subminer-skip-intro` | Skip to the intro end immediately (same as pressing the key) |
+| `script-message subminer-skip-intro`      | Skip to the intro end immediately (same as pressing the key)            |
 | `script-message subminer-aniskip-refresh` | Force a fresh lookup for the current file, discarding any cached result |
 These are handled by the SubMiner app over the IPC socket.
@@ -289,6 +289,21 @@ Trigger with the mine sentence shortcut (`Ctrl/Cmd+S` by default). The card is c
 To mine multiple subtitle lines as one sentence card, use `Ctrl/Cmd+Shift+S` followed by a digit (1–9) to select how many recent lines to combine.
 ## Word Card Type (Kiku/Lapis)
 Word cards get a card-type flag when SubMiner fills their sentence, whether that comes from Yomitan auto-enrichment, a manual clipboard update, or stats-dashboard word mining. By default the flag is `IsWordAndSentenceCard`; pick a different one with `ankiConnect.lapisKiku.wordCardKind`.
 ```jsonc
 "ankiConnect": {
  "isKiku": { "enabled": true },
  "lapisKiku": {
    "wordCardKind": "click" // word-and-sentence (default), click, sentence, audio, none
  }
 }
 ```
 `click` marks `IsClickCard`, `sentence` marks `IsSentenceCard`, `audio` marks `IsAudioCard`, and `none` leaves the flags untouched for templates that manage them elsewhere. Whichever flag is chosen, the other card-type flags are cleared so the note never claims two card types. The setting is only read when `isKiku` or `isLapis` is enabled, and cards mined with Mine Sentence or Mine Audio keep their own flag.
 ## Field Grouping (Kiku)
 When you mine the same word multiple times, SubMiner can merge the cards instead of creating duplicates. This is designed for note types like [Kiku](https://github.com/youyoumu/kiku) that support grouped sentence/audio/image fields.
@@ -313,11 +328,11 @@ When you mine the same word multiple times, SubMiner can merge the cards instead
 ### What Gets Merged
-| Field    | Merge behavior                          |
+| Field    | Merge behavior                                |
-| -------- | ---------------------------------------- |
+| -------- | --------------------------------------------- |
 | Sentence | Both cards' sentences kept as grouped entries |
-| Audio    | Both cards' `[sound:...]` entries kept  |
+| Audio    | Both cards' `[sound:...]` entries kept        |
-| Image    | Both cards' images kept                 |
+| Image    | Both cards' images kept                       |
 Identical values from both cards are kept as separate grouped entries; the merge does not deduplicate.
@@ -1,12 +1,59 @@
 # Changelog
-## v0.18.0 (2026-07-10)
+## v0.19.0 (2026-07-29)
 **Added**
 - Anki Maturity Highlighting: Known-word subtitle highlights can now be colored by Anki card maturity (new, learning, young, mature), similar to asbplayer. Tier thresholds and colors are configurable, with a runtime toggle and an updated help legend.
 - Post-Playback Menu: After a watch-history episode ends, the fzf/rofi launcher returns to that series with options to play the previous or next episode, rewatch, pick another episode, or quit. The pre-playback series menu now offers the previous episode too.
 - Delete Library Entries: The stats Library detail view can now delete an entire title in one step (episodes, sessions, subtitle lines, rollups, cover art, and vocabulary counts). Delete progress is now shown app-wide via a progress bar and status toast instead of disappearing when you switch tabs.
 - Cross-Machine Sync: Added SSH-based syncing of stats and watch history between machines, available from the tray ("Sync Stats & History") or `subminer sync`, with saved devices, per-host sync direction, background auto-sync, connection testing, manual snapshots, and support for Windows remotes.
 - TsukiHime Subtitle Downloads: Added subtitle downloads for the current video via TsukiHime, loading Japanese as the primary track and your configured secondary language directly into mpv.
 **Changed**
 - Clipboard-Video Shortcut: The "append clipboard video to queue" shortcut is now configurable.
 **Fixed**
 - AniList Season Resolution: Season 2+ files now resolve to the correct AniList entry instead of silently falling back to season 1 (which mismatched character dictionaries and watch progress). Manual overrides now stay scoped per season, fix both the dictionary and progress tracking together, and also correct per-season cover art.
 - Subtitle Annotation Accuracy: Fixed several annotation edge cases, including inconsistent POS exclusions on merged quote-particle tokens, dropped annotations on supplementary-plane kanji, katakana punctuation wrongly treated as noise, and certain kanji vocabulary losing N+1 highlighting eligibility.
 - AnkiConnect Proxy Port Conflict: Video startup no longer crashes when another process already holds the configured AnkiConnect proxy port; a notification now explains how to resolve it.
 - AppImage Quit Crash: Fixed a "Service Crash" desktop notification appearing after closing a video when running the Linux AppImage.
 - Autoplay Pause Timing: Fixed playback resuming a few seconds before subtitle tokenization warmup finished, most noticeable when resuming mid-episode or when a cue starts within the first two seconds.
 - Stats Known-Word Count: Fixed stats reporting 0 known words for every session after the known-word cache format changed.
 - Stats Library Cover Art: Relinking a title to a different AniList entry now updates its cover in the Library grid immediately instead of leaving a stale, mismatched cover cached.
 - Rofi Prompt Spacing: Rofi menu prompts now keep a space before the input field instead of running into the placeholder text.
 - Stats Settings & Reliability: Hardened stats settings validation (nested/legacy AnkiConnect config now falls back safely instead of breaking) and stats routes against malformed requests and other edge cases.
 - Stats Delete Performance: Deleting sessions, episodes, and library entries is now dramatically faster and no longer stalls playback (e.g. a 12-episode title dropped from about a minute to under a second on a large library); the Vocabulary tab also loads much faster. The first launch after upgrading runs a one-time database migration.
 <details>
 <summary>Internal changes</summary>
 **Internal**
 - Added a golden-file regression test corpus for the tokenizer/annotation pipeline, plus scripts to record new fixtures and diff against stock Yomitan.
 - Consolidated renderer modal state handling into a descriptor registry.
 - Consolidated CI quality checks (PR, stable, and prerelease) into one reusable workflow with mpv plugin tests and dependency audits.
 - Removed the unused stats IPC transport and unified stats dashboard HTTP types with the backend contract.
 - Added a script to verify known-word highlight tiers against live Anki data outside of playback.
 </details>
 ## Previous Versions
 <details>
 <summary>v0.18.x</summary>
 <h2>v0.18.0 (2026-07-10)</h2>
 **Added**
 - Sentence Audio Normalization: Generated sentence audio is now normalized to -23 LUFS by default, and clips mined from playback mirror mpv's software volume curve with a limiter to prevent clipping. Both behaviors are configurable independently.
 - Watch History Command: Added `subminer -H` / `--history` to browse watch history, replay or continue episodes, or pick one via fzf or rofi, with cover art shown in the rofi picker.
 **Changed**
 - Fzf Preview Layout: Moved fzf previews below launcher menus, giving long titles and metadata more room.
 - Known-Word Highlighting: Now compares subtitle and Anki-card readings, preventing false matches between homographs and unrelated words that share a reading, while still supporting matching across kana and kanji spellings.
 - Annotation Filtering: Standalone suffix tokens (e.g. さん, れる) are now excluded from JLPT/frequency/N+1 highlighting by default, matching how particles and interjections are treated; configurable via the pos2 exclusion setting.
@@ -14,6 +61,7 @@
 - Stats Trend Charts: Overhauled with persisted title visibility, per-chart title limits, "top" and "most recent" ranking modes, an option to show or hide empty days, calendar-aligned periods, and value-sorted tooltips.
 **Fixed**
 - Background Stats Server: `subminer app` background launches now auto-start the stats server when enabled, and skip startup if one is already running.
 - Character Name Highlighting: Character dictionaries now split unspaced native names more reliably, and portraits, highlights, and hover lookup survive punctuation, unmatched text, and competing dictionary matches without incorrectly splitting longer words.
 - Highlighting Coverage: Frequency/JLPT highlighting and vocabulary stats now include content adverbs (e.g. 確かに, やはり) and kanji nouns MeCab tags as non-independent (e.g. 日, 点, 以外), while still suppressing interjections, pronouns, and grammar fragments; lexicalized kana expressions like かといって keep their annotations.
@@ -27,11 +75,12 @@
 <summary>Internal changes</summary>
 **Internal**
 - Test lanes moved to `scripts/test-lanes.ts` with per-directory discovery and isolated per-file timeouts; CI now covers previously orphaned stats, scripts, plugin process-retry, and runtime-compat suites, plus a new stats lane in the change-verification workflow.
 </details>
-## Previous Versions
+</details>
 <details>
 <summary>v0.17.x</summary>
@@ -39,15 +88,18 @@
 <h2>v0.17.2 (2026-06-28)</h2>
 **Fixed**
 - YouTube Background Cache: Fixed Windows YouTube background media cache startup for YouTube URLs opened directly in mpv, including resolved stream URLs when mpv still exposes the original YouTube playlist entry, so queued Anki media updates can append audio and images after the cache finishes.
 - YouTube Subtitle Picker: Manual subtitle picker requests now show an immediate configured notification while SubMiner probes tracks and opens the modal. Subtitle download progress is replaced with a transient success notification after tracks load.
 <h2>v0.17.1 (2026-06-27)</h2>
 **Added**
 - YouTube Media Cache Mode: Adds `youtube.mediaCache.mode` with `direct` and `background` options. Background mode uses a yt-dlp cache download when direct stream extraction is unreliable — creates a text-only card immediately, queues media updates for mined notes, and fills audio/image fields once the download finishes. Progress is announced via overlay/OSD notifications. Downloads are capped at 720p by default (`youtube.mediaCache.maxHeight`). Switching back to direct mode cancels any in-flight background download.
 **Fixed**
 - Log Export: Fixed log filenames to use the local date so exports around UTC midnight include the current day's logs rather than stale prior-day files. Expanded export redaction to mask IPs, emails, auth and cookie headers, yt-dlp cookie arguments, URL credentials, token/key/password fields, and signed YouTube media URL parameters.
 - YouTube Card Media: Improved media generation reliability by sending safer ffmpeg options for resolved streams and skipping stale stream maps (including cached YouTube files). Hardened background cache downloads with IPv4 and extractor retry flags; failed downloads now notify the user and clear queued media updates instead of leaving them silently pending. Stale background cache files are cleaned on startup and before each new download.
@@ -133,6 +185,7 @@
 <summary>Internal changes</summary>
 **Internal**
 - **Build**: `make deps` now initializes git submodules before installing dependencies on a fresh source checkout.
 - **Release Tooling**: Release notes now credit contributors and first-time authors resolved from changelog fragments via git and the GitHub API.
 - **Changelog Guidance**: PR fragment guidance updated to preserve separate-outcome fragments while directing contributors to consolidate same-PR follow-up notes before adding churn.
@@ -147,9 +200,11 @@
 <h2>v0.15.2 (2026-06-02)</h2>
 **Changed**
 - Yomitan: Updated the bundled Yomitan build to the latest vendored revision.
 **Fixed**
 - Anki - Animated AVIF: Clip timing no longer starts or ends early; word-audio lead-in and clip duration are now aligned to frame boundaries.
 - Overlay (Hyprland): Fixed fullscreen overlay alignment - modal, stats, and sidebar content no longer shift below the mpv window.
 - Overlay (macOS): Subtitle bars are now interactive immediately after autoplay starts with "wait for overlay to be ready" enabled, without requiring a manual click.
@@ -398,30 +398,30 @@ See `config.example.jsonc` for detailed configuration options.
 }
 ```
-| Option                             | Values   | Description                                                                                                                  |
+| Option                             | Values   | Description                                                                                                                                                               |
-| ---------------------------------- | -------- | ---------------------------------------------------------------------------------------------------------------------------- |
+| ---------------------------------- | -------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
-| `primaryDefaultMode`               | string   | Default primary subtitle bar visibility mode: `"hidden"`, `"visible"`, or `"hover"` (default: `"visible"`)                   |
+| `primaryDefaultMode`               | string   | Default primary subtitle bar visibility mode: `"hidden"`, `"visible"`, or `"hover"` (default: `"visible"`)                                                                |
-| `subtitleStyle.css`                | object   | CSS declaration object applied to primary subtitles after normal style defaults. Use CSS property names such as `font-size`. |
+| `subtitleStyle.css`                | object   | CSS declaration object applied to primary subtitles after normal style defaults. Use CSS property names such as `font-size`.                                              |
-| `secondary.css`                    | object   | CSS declaration object applied to secondary subtitles after normal secondary style defaults.                                 |
+| `secondary.css`                    | object   | CSS declaration object applied to secondary subtitles after normal secondary style defaults.                                                                              |
-| `enableJlpt`                       | boolean  | Enable JLPT level underline styling (`false` by default)                                                                     |
+| `enableJlpt`                       | boolean  | Enable JLPT level underline styling (`false` by default)                                                                                                                  |
-| `preserveLineBreaks`               | boolean  | Preserve line breaks in visible overlay subtitle rendering (`false` by default). Enable to mirror mpv line layout.           |
+| `preserveLineBreaks`               | boolean  | Preserve line breaks in visible overlay subtitle rendering (`false` by default). Enable to mirror mpv line layout.                                                        |
-| `autoPauseVideoOnHover`            | boolean  | Pause playback while mouse hovers subtitle text, then resume on leave (`true` by default).                                   |
+| `autoPauseVideoOnHover`            | boolean  | Pause playback while mouse hovers subtitle text, then resume on leave (`true` by default).                                                                                |
-| `autoPauseVideoOnYomitanPopup`     | boolean  | Pause playback while the Yomitan popup is open, then resume when the popup closes (`true` by default).                       |
+| `autoPauseVideoOnYomitanPopup`     | boolean  | Pause playback while the Yomitan popup is open, then resume when the popup closes (`true` by default).                                                                    |
-| `primaryVisibleOnYomitanPopup`     | boolean  | Keep hover-mode primary subtitles visible while the Yomitan popup is open (`true` by default).                               |
+| `primaryVisibleOnYomitanPopup`     | boolean  | Keep hover-mode primary subtitles visible while the Yomitan popup is open (`true` by default).                                                                            |
-| `nameMatchEnabled`                 | boolean  | Enable character dictionary sync and subtitle token coloring for character-name matches (`false` by default)                 |
+| `nameMatchEnabled`                 | boolean  | Enable character dictionary sync and subtitle token coloring for character-name matches (`false` by default)                                                              |
-| `nameMatchImagesEnabled`           | boolean  | Show small cached AniList character portraits beside matched character-name tokens (`false` by default)                      |
+| `nameMatchImagesEnabled`           | boolean  | Show small cached AniList character portraits beside matched character-name tokens (`false` by default)                                                                   |
-| `nameMatchColor`                   | string   | Hex color used for subtitle tokens matched from the SubMiner character dictionary (default: `#f5bde6`)                       |
+| `nameMatchColor`                   | string   | Hex color used for subtitle tokens matched from the SubMiner character dictionary (default: `#f5bde6`)                                                                    |
-| `knownWordColor`                   | string   | Hex color used for known-word subtitle highlights (default: `#a6da95`)                                                       |
+| `knownWordColor`                   | string   | Hex color used for known-word subtitle highlights (default: `#a6da95`)                                                                                                    |
 | `knownWordMaturityColors`          | object   | Per-tier known-word colors used when `ankiConnect.knownWords.maturityEnabled` is on: `new` (`#ee99a0`), `learning` (`#b7bdf8`), `young` (`#91d7e3`), `mature` (`#a6da95`) |
-| `nPlusOneColor`                    | string   | Hex color used for the single N+1 target subtitle highlight (default: `#c6a0f6`)                                             |
+| `nPlusOneColor`                    | string   | Hex color used for the single N+1 target subtitle highlight (default: `#c6a0f6`)                                                                                          |
-| `frequencyDictionary.enabled`      | boolean  | Enable frequency highlighting from dictionary lookups (`false` by default)                                                   |
+| `frequencyDictionary.enabled`      | boolean  | Enable frequency highlighting from dictionary lookups (`false` by default)                                                                                                |
-| `frequencyDictionary.sourcePath`   | string   | Path to a local frequency dictionary root. Leave empty or omit to use installed/default frequency-dictionary search paths.   |
+| `frequencyDictionary.sourcePath`   | string   | Path to a local frequency dictionary root. Leave empty or omit to use installed/default frequency-dictionary search paths.                                                |
-| `frequencyDictionary.topX`         | number   | Only color tokens whose frequency rank is `<= topX` (`10000` by default)                                                     |
+| `frequencyDictionary.topX`         | number   | Only color tokens whose frequency rank is `<= topX` (`10000` by default)                                                                                                  |
-| `frequencyDictionary.mode`         | string   | `"single"` or `"banded"` (`"single"` by default)                                                                             |
+| `frequencyDictionary.mode`         | string   | `"single"` or `"banded"` (`"single"` by default)                                                                                                                          |
-| `frequencyDictionary.matchMode`    | string   | `"headword"` or `"surface"` (`"headword"` by default)                                                                        |
+| `frequencyDictionary.matchMode`    | string   | `"headword"` or `"surface"` (`"headword"` by default)                                                                                                                     |
-| `frequencyDictionary.singleColor`  | string   | Color used for all highlighted tokens in single mode                                                                         |
+| `frequencyDictionary.singleColor`  | string   | Color used for all highlighted tokens in single mode                                                                                                                      |
-| `frequencyDictionary.bandedColors` | string[] | Array of five hex colors used for ranked bands in banded mode                                                                |
+| `frequencyDictionary.bandedColors` | string[] | Array of five hex colors used for ranked bands in banded mode                                                                                                             |
-| `jlptColors`                       | object   | JLPT level underline colors object (`N1`..`N5`)                                                                              |
+| `jlptColors`                       | object   | JLPT level underline colors object (`N1`..`N5`)                                                                                                                           |
 Subtitle CSS custom properties:
@@ -555,11 +555,11 @@ Secondary subtitles do **not** auto-load by default. To turn them on for local a
 }
 ```
-| Option                  | Values                             | Description                                                                                                                                                             |
+| Option                  | Values                             | Description                                                                                                                                   |
-| ----------------------- | ---------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| ----------------------- | ---------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------- |
-| `secondarySubLanguages` | string[]                           | Language codes to auto-load (e.g., `["eng", "en"]`); non-Signs/Songs tracks are preferred when several tracks match. Default is empty (`[]`).                            |
+| `secondarySubLanguages` | string[]                           | Language codes to auto-load (e.g., `["eng", "en"]`); non-Signs/Songs tracks are preferred when several tracks match. Default is empty (`[]`). |
-| `autoLoadSecondarySub`  | `true`, `false`                    | Auto-detect and load a matching secondary subtitle track for local/Jellyfin sidecar files (default: `false`)                                                             |
+| `autoLoadSecondarySub`  | `true`, `false`                    | Auto-detect and load a matching secondary subtitle track for local/Jellyfin sidecar files (default: `false`)                                  |
-| `defaultMode`           | `"hidden"`, `"visible"`, `"hover"` | Initial display mode (default: `"hover"`)                                                                                                                               |
+| `defaultMode`           | `"hidden"`, `"visible"`, `"hover"` | Initial display mode (default: `"hover"`)                                                                                                     |
 These two settings apply to local and Jellyfin playback only. YouTube secondary selection is fixed to English and ignores them; see [YouTube Integration](/youtube-integration#secondary-subtitle-languages). `defaultMode` still controls how the loaded secondary bar is displayed in every case.
@@ -1043,7 +1043,7 @@ This example is intentionally compact. The option table below documents availabl
 | `ankiConnect.knownWords.refreshMinutes`           | number                                      | Minutes between known-word cache refreshes (default: `1440`)                                                                                                                                                                    |
 | `ankiConnect.knownWords.decks`                    | object                                      | Deck→fields mapping used for known-word cache query scope (e.g. `{ "Kaishi 1.5k": ["Word"] }`).                                                                                                                                 |
 | `ankiConnect.knownWords.maturityEnabled`          | `true`, `false`                             | Color known words by Anki card maturity (new/learning/young/mature) instead of one color. Requires `knownWords.highlightEnabled` (default: `false`). Tier colors come from `subtitleStyle.knownWordMaturityColors`.             |
-| `ankiConnect.knownWords.matureThresholdDays`      | number                                      | Card interval in days at which a known word counts as mature (default: `21`, matching Anki's own convention)                                                                                                                   |
+| `ankiConnect.knownWords.matureThresholdDays`      | number                                      | Card interval in days at which a known word counts as mature (default: `21`, matching Anki's own convention)                                                                                                                    |
 | `ankiConnect.nPlusOne.enabled`                    | `true`, `false`                             | Enable N+1 subtitle highlighting (highlights the one unknown word in a sentence). Independent from `knownWords.highlightEnabled`. Requires known-word cache data (default: `false`).                                            |
 | `ankiConnect.nPlusOne.minSentenceWords`           | number                                      | Minimum number of words required in a sentence before single unknown-word N+1 highlighting can trigger (default: `3`).                                                                                                          |
 | `behavior.notificationType`                       | `"overlay"`, `"system"`, `"both"`, `"none"` | Notification type on card update (default: `"overlay"`). `"both"` means overlay + system. `osd` and `osd-system` are legacy config-file-only values; use `"osd-system"` to keep the old OSD + system behavior.                  |
@@ -1069,6 +1069,9 @@ SubMiner is intentionally built for [Kiku](https://kiku.youyoumu.my.id/) and [La
    "enabled": true,
    "fieldGrouping": "manual",
    "deleteDuplicateInAuto": true
  },
  "lapisKiku": {
    "wordCardKind": "word-and-sentence"
  }
 }
 ```
@@ -1077,6 +1080,21 @@ SubMiner is intentionally built for [Kiku](https://kiku.youyoumu.my.id/) and [La
 - Enable `isKiku` to turn on duplicate merge behavior for mined Word/Expression hits.
 - When both are enabled, Kiku behavior is applied for grouping while sentence-card model settings are still read from `isLapis`.
 - `isKiku.fieldGrouping` supports `disabled`, `auto`, and `manual` merge modes; see [Field Grouping Modes](#field-grouping-modes).
 - `lapisKiku.wordCardKind` picks the card-type flag set on word cards; see [Word Card Type](#word-card-type). It is read only while `isLapis` or `isKiku` is enabled.
 ### Word Card Type
 When SubMiner fills the sentence on a mined word card - from Yomitan auto-enrichment, a manual clipboard update, or stats-dashboard word mining - it marks which card that note should generate. `ankiConnect.lapisKiku.wordCardKind` chooses the flag:
 | Value                         | Flag set                |
 | ----------------------------- | ----------------------- |
 | `word-and-sentence` (default) | `IsWordAndSentenceCard` |
 | `click`                       | `IsClickCard`           |
 | `sentence`                    | `IsSentenceCard`        |
 | `audio`                       | `IsAudioCard`           |
 | `none`                        | none; flags left as-is  |
 The other card-type flags are cleared so a note never claims two card types at once. Notes are skipped when the note type has no field for the chosen flag, and when the note was already mined as a sentence or audio card. Cards created by Mine Sentence and Mine Audio keep their own flag regardless of this setting.
 ### N+1 Word Highlighting
@@ -1167,10 +1185,10 @@ TsukiHime subtitle search works out of the box and needs no account or API key.
 }
 ```
-| Option                       | Values       | Description                                                                                          |
+| Option                       | Values       | Description                                                                                           |
-| ---------------------------- | ------------ | ---------------------------------------------------------------------------------------------------- |
+| ---------------------------- | ------------ | ----------------------------------------------------------------------------------------------------- |
 | `tsukihime.apiBaseUrl`       | string (URL) | Base URL of the TsukiHime API (default: `https://api.tsukihime.org/v1`). Only change it for a mirror. |
-| `tsukihime.maxSearchResults` | number       | Maximum releases returned per search (default: `10`; the API caps this at 100)                       |
+| `tsukihime.maxSearchResults` | number       | Maximum releases returned per search (default: `10`; the API caps this at 100)                        |
 The keyboard shortcut lives under `shortcuts.openTsukihime` (default `Ctrl+Shift+T`; set to `null` to disable). The older `animetosho` section and `shortcuts.openAnimetosho` are still accepted as deprecated aliases, with the current names taking precedence when both are set.
@@ -1228,17 +1246,17 @@ AniList integration is opt-in and disabled by default. Enable it to allow SubMin
 }
 ```
-| Option                                                         | Values              | Description                                                                                                   |
+| Option                                                         | Values                  | Description                                                                                                   |
-| -------------------------------------------------------------- | ------------------- | ------------------------------------------------------------------------------------------------------------- |
+| -------------------------------------------------------------- | ----------------------- | ------------------------------------------------------------------------------------------------------------- |
-| `anilist.enabled`                                              | `true`, `false`     | Enable AniList post-watch progress updates (default: `false`)                                                 |
+| `anilist.enabled`                                              | `true`, `false`         | Enable AniList post-watch progress updates (default: `false`)                                                 |
-| `accessToken`                                                  | string              | Optional explicit AniList access token override (default: empty string)                                       |
+| `accessToken`                                                  | string                  | Optional explicit AniList access token override (default: empty string)                                       |
-| `characterDictionary.maxLoaded`                                | number              | Maximum number of most-recently-used AniList media snapshots included in the merged dictionary (default: `3`) |
+| `characterDictionary.maxLoaded`                                | number                  | Maximum number of most-recently-used AniList media snapshots included in the merged dictionary (default: `3`) |
-| `characterDictionary.refreshTtlHours`                          | number              | Hours before a cached media snapshot is refreshed (default: `168`, clamped to 1–8760)                         |
+| `characterDictionary.refreshTtlHours`                          | number                  | Hours before a cached media snapshot is refreshed (default: `168`, clamped to 1–8760)                         |
-| `characterDictionary.evictionPolicy`                           | `"delete"`, `"disable"` | What happens to snapshots evicted beyond `maxLoaded` (default: `"delete"`)                                |
+| `characterDictionary.evictionPolicy`                           | `"delete"`, `"disable"` | What happens to snapshots evicted beyond `maxLoaded` (default: `"delete"`)                                    |
-| `characterDictionary.collapsibleSections.description`          | `true`, `false`     | Open the Description section by default in generated dictionary entries                                       |
+| `characterDictionary.collapsibleSections.description`          | `true`, `false`         | Open the Description section by default in generated dictionary entries                                       |
-| `characterDictionary.collapsibleSections.characterInformation` | `true`, `false`     | Open the Character Information section by default in generated dictionary entries                             |
+| `characterDictionary.collapsibleSections.characterInformation` | `true`, `false`         | Open the Character Information section by default in generated dictionary entries                             |
-| `characterDictionary.collapsibleSections.voicedBy`             | `true`, `false`     | Open the Voiced by section by default in generated dictionary entries                                         |
+| `characterDictionary.collapsibleSections.voicedBy`             | `true`, `false`         | Open the Voiced by section by default in generated dictionary entries                                         |
-| `characterDictionary.profileScope`                             | `"all"`, `"active"` | Apply dictionary settings updates to all Yomitan profiles or only active profile                              |
+| `characterDictionary.profileScope`                             | `"all"`, `"active"`     | Apply dictionary settings updates to all Yomitan profiles or only active profile                              |
 When `enabled` is `true` and `accessToken` is empty, SubMiner opens an AniList setup helper window. Keep `enabled` as `false` to disable all AniList setup/update behavior.
@@ -1539,18 +1557,18 @@ Configure the mpv executable, profile, and window state for SubMiner-managed mpv
 }
 ```
-| Option                   | Values                                                                      | Description                                                                                                                                 |
+| Option                   | Values                                                                      | Description                                                                                                                                                                         |
-| ------------------------ | --------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------- |
+| ------------------------ | --------------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
-| `executablePath`         | string                                                                      | Absolute path to `mpv.exe` for Windows launch flows. Leave empty to auto-discover from `SUBMINER_MPV_PATH` or `PATH` (default `""`)         |
+| `executablePath`         | string                                                                      | Absolute path to `mpv.exe` for Windows launch flows. Leave empty to auto-discover from `SUBMINER_MPV_PATH` or `PATH` (default `""`)                                                 |
-| `profile`                | string                                                                      | mpv profile name passed as `--profile=<name>`. Leave empty to pass no profile (default `""`)                                                |
+| `profile`                | string                                                                      | mpv profile name passed as `--profile=<name>`. Leave empty to pass no profile (default `""`)                                                                                        |
-| `launchMode`             | `"normal"` \| `"maximized"` \| `"fullscreen"`                               | Window state when SubMiner spawns mpv (default `"normal"`)                                                                                  |
+| `launchMode`             | `"normal"` \| `"maximized"` \| `"fullscreen"`                               | Window state when SubMiner spawns mpv (default `"normal"`)                                                                                                                          |
 | `socketPath`             | string                                                                      | mpv IPC socket path used by SubMiner-managed playback and the bundled mpv plugin (platform-dependent default: `/tmp/subminer-socket`, or `\\\\.\\pipe\\subminer-socket` on Windows) |
-| `backend`                | `"auto"` \| `"hyprland"` \| `"sway"` \| `"x11"` \| `"macos"` \| `"windows"` | Window tracking backend passed to the bundled mpv plugin. Auto detects the current platform (default: `"auto"`)                             |
+| `backend`                | `"auto"` \| `"hyprland"` \| `"sway"` \| `"x11"` \| `"macos"` \| `"windows"` | Window tracking backend passed to the bundled mpv plugin. Auto detects the current platform (default: `"auto"`)                                                                     |
-| `autoStartSubMiner`      | `true`, `false`                                                             | Start SubMiner in the background when SubMiner-managed mpv loads a file (default: `true`)                                                   |
+| `autoStartSubMiner`      | `true`, `false`                                                             | Start SubMiner in the background when SubMiner-managed mpv loads a file (default: `true`)                                                                                           |
-| `pauseUntilOverlayReady` | `true`, `false`                                                             | Pause mpv on visible-overlay auto-start until SubMiner signals subtitle tokenization readiness, with a 30-second fallback (default: `true`) |
+| `pauseUntilOverlayReady` | `true`, `false`                                                             | Pause mpv on visible-overlay auto-start until SubMiner signals subtitle tokenization readiness, with a 30-second fallback (default: `true`)                                         |
-| `subminerBinaryPath`     | string                                                                      | SubMiner app binary path passed to the bundled mpv plugin. Leave empty to use the launcher-detected app path (default: `""`)                |
+| `subminerBinaryPath`     | string                                                                      | SubMiner app binary path passed to the bundled mpv plugin. Leave empty to use the launcher-detected app path (default: `""`)                                                        |
-| `aniskipEnabled`         | `true`, `false`                                                             | Enable AniSkip intro detection, chapter markers, and the skip-intro key (default: `true`)                                                   |
+| `aniskipEnabled`         | `true`, `false`                                                             | Enable AniSkip intro detection, chapter markers, and the skip-intro key (default: `true`)                                                                                           |
-| `aniskipButtonKey`       | string                                                                      | mpv key used to skip the detected intro while the skip prompt is visible (default: `"TAB"`)                                                 |
+| `aniskipButtonKey`       | string                                                                      | mpv key used to skip the detected intro while the skip prompt is visible (default: `"TAB"`)                                                                                         |
 If `mpv.profile` is configured and the launcher also receives `--profile`, SubMiner passes both as a comma-separated mpv profile list.
@@ -38,7 +38,7 @@ flowchart TB
 ## Runtime Sockets
-The renderer↔main bridge above lives *inside* the Electron app. A separate set of OS sockets connects the app to the other runtimes - mpv and the launcher/plugin. These carry no renderer payloads and bypass the contract/validator layer; they are command and property channels between processes.
+The renderer↔main bridge above lives _inside_ the Electron app. A separate set of OS sockets connects the app to the other runtimes - mpv and the launcher/plugin. These carry no renderer payloads and bypass the contract/validator layer; they are command and property channels between processes.
 - **mpv IPC socket** (`/tmp/subminer-socket`, or `\\.\pipe\subminer-socket` on Windows): the `MpvIpcClient` in the main process connects here to send JSON commands and subscribe to playback/subtitle properties via `observe_property`. Created by mpv's `--input-ipc-server`.
 - **App control socket** (`/tmp/subminer-control-<uid>-<hash>.sock`, or a named pipe on Windows): the launcher and the mpv plugin send CLI-style commands (`--start`, `--show-visible-overlay`, `--texthooker`) to a running app here. It also dedupes a second `subminer` invocation into the existing instance instead of launching twice.
@@ -69,15 +69,15 @@ How these sockets are established during launch is covered in [Playback Startup
 ## Core Surfaces
-| File | Role |
+| File                                   | Role                                                                                                                    |
-| --- | --- |
+| -------------------------------------- | ----------------------------------------------------------------------------------------------------------------------- |
-| `src/shared/ipc/contracts.ts` | Canonical channel names and payload type contracts. Single source of truth for both processes. |
+| `src/shared/ipc/contracts.ts`          | Canonical channel names and payload type contracts. Single source of truth for both processes.                          |
-| `src/shared/ipc/validators.ts` | Runtime payload parsers and type guards. Every `invoke` payload is validated here before the handler runs. |
+| `src/shared/ipc/validators.ts`         | Runtime payload parsers and type guards. Every `invoke` payload is validated here before the handler runs.              |
-| `src/preload.ts` | Renderer-side bridge. Exposes a typed API surface to the renderer - only approved channels are accessible. |
+| `src/preload.ts`                       | Renderer-side bridge. Exposes a typed API surface to the renderer - only approved channels are accessible.              |
-| `src/main/ipc-runtime.ts` | Main-process handler registration and routing. Wires validated channels to domain handlers. |
+| `src/main/ipc-runtime.ts`              | Main-process handler registration and routing. Wires validated channels to domain handlers.                             |
-| `src/core/services/ipc.ts` | Service-level invoke handling. Applies guardrails (validation, error wrapping) before calling domain logic. |
+| `src/core/services/ipc.ts`             | Service-level invoke handling. Applies guardrails (validation, error wrapping) before calling domain logic.             |
-| `src/core/services/anki-jimaku-ipc.ts` | Integration-specific IPC boundary for Anki and Jimaku operations. |
+| `src/core/services/anki-jimaku-ipc.ts` | Integration-specific IPC boundary for Anki and Jimaku operations.                                                       |
-| `src/main/cli-runtime.ts` | CLI/runtime command boundary. Handles commands that originate from the launcher or mpv plugin rather than the renderer. |
+| `src/main/cli-runtime.ts`              | CLI/runtime command boundary. Handles commands that originate from the launcher or mpv plugin rather than the renderer. |
 ## Contract Rules
@@ -23,12 +23,12 @@ If no files match the current episode filter, a "Show all files" button lets you
 ### Modal Keyboard Shortcuts
-| Key | Action |
+| Key                       | Action                       |
-| --- | --- |
+| ------------------------- | ---------------------------- |
-| `Enter` (in text field) | Search |
+| `Enter` (in text field)   | Search                       |
-| `Enter` (in list) | Select entry / download file |
+| `Enter` (in list)         | Select entry / download file |
-| `Arrow Up` / `Arrow Down` | Navigate entries or files |
+| `Arrow Up` / `Arrow Down` | Navigate entries or files    |
-| `Escape` | Close modal |
+| `Escape`                  | Close modal                  |
 ## Configuration
@@ -41,26 +41,26 @@ Add a `jimaku` section to your `config.jsonc`:
    "apiKeyCommand": "cat ~/.jimaku_key",
    "apiBaseUrl": "https://jimaku.cc",
    "languagePreference": "ja",
-    "maxEntryResults": 10
+    "maxEntryResults": 10,
-  }
+  },
 }
 ```
-| Option | Type | Default | Description |
+| Option                      | Type                         | Default               | Description                                                                                                                                              |
-| --- | --- | --- | --- |
+| --------------------------- | ---------------------------- | --------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------- |
-| `jimaku.apiKey` | `string` | - | Jimaku API key (plaintext). Mutually exclusive with `apiKeyCommand`. |
+| `jimaku.apiKey`             | `string`                     | -                     | Jimaku API key (plaintext). Mutually exclusive with `apiKeyCommand`.                                                                                     |
-| `jimaku.apiKeyCommand` | `string` | - | Shell command that prints the API key to stdout. Useful for secret managers (e.g., `pass jimaku/api-key`). |
+| `jimaku.apiKeyCommand`      | `string`                     | -                     | Shell command that prints the API key to stdout. Useful for secret managers (e.g., `pass jimaku/api-key`).                                               |
-| `jimaku.apiBaseUrl` | `string` | `"https://jimaku.cc"` | Base URL for the Jimaku API. Only change this if using a mirror or local instance. |
+| `jimaku.apiBaseUrl`         | `string`                     | `"https://jimaku.cc"` | Base URL for the Jimaku API. Only change this if using a mirror or local instance.                                                                       |
-| `jimaku.languagePreference` | `"ja"` \| `"en"` \| `"none"` | `"ja"` | Sort subtitle files by language tag. `"ja"` pushes Japanese-tagged files to the top; `"en"` does the same for English. `"none"` preserves the API order. |
+| `jimaku.languagePreference` | `"ja"` \| `"en"` \| `"none"` | `"ja"`                | Sort subtitle files by language tag. `"ja"` pushes Japanese-tagged files to the top; `"en"` does the same for English. `"none"` preserves the API order. |
-| `jimaku.maxEntryResults` | `number` | `10` | Maximum number of anime entries returned per search. |
+| `jimaku.maxEntryResults`    | `number`                     | `10`                  | Maximum number of anime entries returned per search.                                                                                                     |
 The keyboard shortcut is configured separately under `shortcuts`:
 ```jsonc
 {
  "shortcuts": {
-    "openJimaku": "Ctrl+Shift+J"
+    "openJimaku": "Ctrl+Shift+J",
-  }
+  },
 }
 ```
@@ -31,20 +31,20 @@ input-ipc-server=\\.\pipe\subminer-socket
 The plugin reads options from `script-opts` with the `subminer-` prefix (for example `--script-opts=subminer-backend=hyprland`). Managed launches inject these automatically from your SubMiner config; the shipped `subminer.conf` is intentionally empty so command-line opts always win.
-| Option                                             | Default          | Description                                                                     |
+| Option                                         | Default          | Description                                                                                     |
-| -------------------------------------------------- | ---------------- | -------------------------------------------------------------------------------- |
+| ---------------------------------------------- | ---------------- | ----------------------------------------------------------------------------------------------- |
-| `binary_path`                                      | `""`             | Path to the SubMiner binary; empty enables [auto-detection](#binary-auto-detection) |
+| `binary_path`                                  | `""`             | Path to the SubMiner binary; empty enables [auto-detection](#binary-auto-detection)             |
-| `socket_path`                                      | platform default | mpv IPC socket path (`/tmp/subminer-socket`, or `\\.\pipe\subminer-socket` on Windows) |
+| `socket_path`                                  | platform default | mpv IPC socket path (`/tmp/subminer-socket`, or `\\.\pipe\subminer-socket` on Windows)          |
-| `texthooker_enabled`                               | `no`             | Start the texthooker server with the overlay                                    |
+| `texthooker_enabled`                           | `no`             | Start the texthooker server with the overlay                                                    |
-| `texthooker_port`                                  | `5174`           | Texthooker server port                                                          |
+| `texthooker_port`                              | `5174`           | Texthooker server port                                                                          |
-| `backend`                                          | `auto`           | Window backend (`auto`, `hyprland`, `sway`, `x11`, `macos`)                     |
+| `backend`                                      | `auto`           | Window backend (`auto`, `hyprland`, `sway`, `x11`, `macos`)                                     |
-| `auto_start`                                       | `no`             | Start the overlay app on `file-loaded` (managed launches set this from `mpv.autoStartSubMiner`) |
+| `auto_start`                                   | `no`             | Start the overlay app on `file-loaded` (managed launches set this from `mpv.autoStartSubMiner`) |
-| `auto_start_visible_overlay`                       | `no`             | Show the visible overlay on auto-start (from `auto_start_overlay` in config)    |
+| `auto_start_visible_overlay`                   | `no`             | Show the visible overlay on auto-start (from `auto_start_overlay` in config)                    |
-| `overlay_loading_osd`                              | `no`             | Show an OSD loading spinner while the overlay starts                            |
+| `overlay_loading_osd`                          | `no`             | Show an OSD loading spinner while the overlay starts                                            |
-| `auto_start_pause_until_ready`                     | `yes`            | Keep mpv paused until the overlay reports tokenization-ready                    |
+| `auto_start_pause_until_ready`                 | `yes`            | Keep mpv paused until the overlay reports tokenization-ready                                    |
-| `auto_start_pause_until_ready_timeout_seconds`     | `30`             | Timeout before resuming playback anyway                                         |
+| `auto_start_pause_until_ready_timeout_seconds` | `30`             | Timeout before resuming playback anyway                                                         |
-| `osd_messages`                                     | `yes`            | Show plugin OSD status messages                                                 |
+| `osd_messages`                                 | `yes`            | Show plugin OSD status messages                                                                 |
-| `log_level`                                        | `info`           | Plugin log verbosity                                                            |
+| `log_level`                                    | `info`           | Plugin log verbosity                                                                            |
 ## Keybindings
@@ -523,7 +523,7 @@
  // ==========================================
  // AnkiConnect Integration
  // Automatic Anki updates and media generation options.
-  // Hot-reload: ankiConnect.ai.enabled, media.normalizeAudio/mirrorMpvVolume, knownWords, nPlusOne, fields.word/audio/image/sentence/miscInfo, behavior.autoUpdateNewCards, isLapis.sentenceCardModel, and isKiku.fieldGrouping update live while SubMiner is running.
+  // Hot-reload: ankiConnect.ai.enabled, media.normalizeAudio/mirrorMpvVolume, knownWords, nPlusOne, fields.word/audio/image/sentence/miscInfo, behavior.autoUpdateNewCards, isLapis.sentenceCardModel, isKiku.fieldGrouping, and lapisKiku.wordCardKind update live while SubMiner is running.
  // Shared AI provider transport settings are read from top-level ai and typically require restart.
  // Most other AnkiConnect settings still require restart.
  // ==========================================
@@ -605,9 +605,24 @@
      "enabled": false, // Enable Kiku-specific mining behaviors (duplicate handling, field grouping). Values: true | false
      "fieldGrouping": "disabled", // Kiku duplicate-card field grouping mode. Values: auto | manual | disabled
      "deleteDuplicateInAuto": true // When Kiku field grouping is "auto", delete the duplicate source card after grouping completes. Values: true | false
-    } // Is kiku setting.
+    }, // Is kiku setting.
    "lapisKiku": {
      "wordCardKind": "word-and-sentence" // Card-type flag SubMiner marks on Kiku/Lapis word cards. Only one flag is set at a time; the others are cleared. Requires isKiku.enabled or isLapis.enabled. Values: word-and-sentence | click | sentence | audio | none
    } // Lapis kiku setting.
  }, // Automatic Anki updates and media generation options.
  // ==========================================
  // Anime Browser
  // Anime browser sources. SubMiner ships no extension repositories and bundles no sources;
  // add a repository index URL here (or drop .apk files in the extensions directory) to have any.
  // Hot-reload: anime changes apply the next time the anime browser opens.
  // ==========================================
  "anime": {
    "extensionsDir": "", // Directory holding Aniyomi extension .apk files. Empty uses <userData>/anime-extensions.
    "repos": [], // Extension repository index URLs (any https .json index, e.g. https://.../index.min.json). Empty by default; SubMiner ships no repositories.
    "preferredQuality": "" // Preferred stream quality label, matched as a substring (for example: 1080). Empty uses the source order.
  }, // Anime browser sources. SubMiner ships no extension repositories and bundles no sources;
  // ==========================================
  // Jimaku
  // Jimaku API configuration and defaults.
@@ -12,10 +12,10 @@ All shortcuts are configurable in `config.jsonc` under `shortcuts` and `keybindi
 ## App-Wide Shortcuts
-| Shortcut      | Action                 | Scope                                       | Configurable                           |
+| Shortcut      | Action                 | Scope                                    | Configurable                           |
-| ------------- | ---------------------- | -------------------------------------------- | -------------------------------------- |
+| ------------- | ---------------------- | ---------------------------------------- | -------------------------------------- |
-| `Alt+Shift+O` | Toggle visible overlay | Works while the overlay or mpv has focus     | `shortcuts.toggleVisibleOverlayGlobal` |
+| `Alt+Shift+O` | Toggle visible overlay | Works while the overlay or mpv has focus | `shortcuts.toggleVisibleOverlayGlobal` |
-| `Alt+Shift+Y` | Open Yomitan settings  | OS-global (registered with the OS)           | Fixed (not configurable)               |
+| `Alt+Shift+Y` | Open Yomitan settings  | OS-global (registered with the OS)       | Fixed (not configurable)               |
 ::: tip
 `Alt+Shift+O` is dispatched by the overlay window and the mpv plugin, so it works from either surface without OS registration. Only `Alt+Shift+Y` is registered with the OS; if it conflicts with another application, that binding cannot be changed. All `shortcuts.*` keys hot-reload - no restart needed.
@@ -75,21 +75,21 @@ Mouse-hover playback behavior is configured separately from shortcuts: `subtitle
 ## Subtitle & Feature Shortcuts
-| Shortcut           | Action                                                   | Config key                                 |
+| Shortcut           | Action                                                   | Config key                                                                                      |
-| ------------------ | -------------------------------------------------------- | ------------------------------------------ |
+| ------------------ | -------------------------------------------------------- | ----------------------------------------------------------------------------------------------- |
-| `Ctrl/Cmd+Shift+V` | Cycle secondary subtitle mode (hidden → visible → hover) | `shortcuts.toggleSecondarySub`             |
+| `Ctrl/Cmd+Shift+V` | Cycle secondary subtitle mode (hidden → visible → hover) | `shortcuts.toggleSecondarySub`                                                                  |
-| `Ctrl/Cmd+D`       | Open loaded character dictionary manager                 | `shortcuts.openCharacterDictionaryManager` |
+| `Ctrl/Cmd+D`       | Open loaded character dictionary manager                 | `shortcuts.openCharacterDictionaryManager`                                                      |
-| `Ctrl/Cmd+Shift+O` | Open runtime options palette                             | `shortcuts.openRuntimeOptions`             |
+| `Ctrl/Cmd+Shift+O` | Open runtime options palette                             | `shortcuts.openRuntimeOptions`                                                                  |
-| `Ctrl/Cmd+/`       | Open session help modal                                  | `shortcuts.openSessionHelp`                |
+| `Ctrl/Cmd+/`       | Open session help modal                                  | `shortcuts.openSessionHelp`                                                                     |
-| `Ctrl+Shift+J`     | Open Jimaku subtitle search modal                        | `shortcuts.openJimaku`                     |
+| `Ctrl+Shift+J`     | Open Jimaku subtitle search modal                        | `shortcuts.openJimaku`                                                                          |
-| `Ctrl+Shift+T`     | Open TsukiHime subtitle search modal (EN/JA tabs)       | `shortcuts.openTsukihime`                 |
+| `Ctrl+Shift+T`     | Open TsukiHime subtitle search modal (EN/JA tabs)        | `shortcuts.openTsukihime`                                                                       |
-| `Ctrl/Cmd+N`       | Toggle overlay notification history panel                | `shortcuts.toggleNotificationHistory`      |
+| `Ctrl/Cmd+N`       | Toggle overlay notification history panel                | `shortcuts.toggleNotificationHistory`                                                           |
-| `Ctrl+Alt+C`       | Open the manual YouTube subtitle picker                  | `keybindings`                              |
+| `Ctrl+Alt+C`       | Open the manual YouTube subtitle picker                  | `keybindings`                                                                                   |
-| `Ctrl+Alt+S`       | Open subtitle sync (subsync) modal                       | `shortcuts.triggerSubsync`                 |
+| `Ctrl+Alt+S`       | Open subtitle sync (subsync) modal                       | `shortcuts.triggerSubsync`                                                                      |
-| `Ctrl/Cmd+A`       | Append clipboard video path to mpv playlist              | `shortcuts.appendClipboardVideoToQueue`    |
+| `Ctrl/Cmd+A`       | Append clipboard video path to mpv playlist              | `shortcuts.appendClipboardVideoToQueue`                                                         |
 | `\`                | Toggle subtitle sidebar                                  | `subtitleSidebar.toggleKey` (overlay) / `shortcuts.toggleSubtitleSidebar` (mpv session binding) |
-| `` ` ``            | Toggle stats overlay                                     | `stats.toggleKey`                          |
+| `` ` ``            | Toggle stats overlay                                     | `stats.toggleKey`                                                                               |
-| `W`                | Mark current video watched and advance to next in queue  | `stats.markWatchedKey`                     |
+| `W`                | Mark current video watched and advance to next in queue  | `stats.markWatchedKey`                                                                          |
 `shortcuts.openAnimetosho` remains accepted as a deprecated alias for `shortcuts.openTsukihime`. The current name takes precedence when both are configured.
@@ -62,23 +62,23 @@ Styling lives under the `css` object, using CSS property names and CSS custom pr
 | `pauseVideoOnHover` | boolean | `true`        | Pause playback while hovering the cue list                                 |
 | `autoScroll`        | boolean | `true`        | Keep the active cue in view during playback                                |
-| `css` property                              | Default                     | Description                  |
+| `css` property                               | Default                                                         | Description                         |
-| ------------------------------------------- | --------------------------- | ---------------------------- |
+| -------------------------------------------- | --------------------------------------------------------------- | ----------------------------------- |
-| `font-family`                               | `Hiragino Sans, M PLUS 1, Source Han Sans JP, Noto Sans CJK JP` | Cue text font family |
+| `font-family`                                | `Hiragino Sans, M PLUS 1, Source Han Sans JP, Noto Sans CJK JP` | Cue text font family                |
-| `color`                                     | `#cad3f5`                   | Default cue text color       |
+| `color`                                      | `#cad3f5`                                                       | Default cue text color              |
-| `background-color`                          | `rgba(73, 77, 100, 0.9)`    | Sidebar shell background color |
+| `background-color`                           | `rgba(73, 77, 100, 0.9)`                                        | Sidebar shell background color      |
-| `font-size`                                 | `16px`                      | Base cue font size           |
+| `font-size`                                  | `16px`                                                          | Base cue font size                  |
-| `opacity`                                   | `0.95`                      | Sidebar opacity between `0` and `1` |
+| `opacity`                                    | `0.95`                                                          | Sidebar opacity between `0` and `1` |
-| `--subtitle-sidebar-max-width`              | `420px`                     | Maximum sidebar width        |
+| `--subtitle-sidebar-max-width`               | `420px`                                                         | Maximum sidebar width               |
-| `--subtitle-sidebar-timestamp-color`        | `#a5adcb`                   | Cue timestamp color          |
+| `--subtitle-sidebar-timestamp-color`         | `#a5adcb`                                                       | Cue timestamp color                 |
-| `--subtitle-sidebar-active-line-color`      | `#f5bde6`                   | Active cue text color        |
+| `--subtitle-sidebar-active-line-color`       | `#f5bde6`                                                       | Active cue text color               |
-| `--subtitle-sidebar-active-background-color`| `rgba(138, 173, 244, 0.22)` | Active cue background color  |
+| `--subtitle-sidebar-active-background-color` | `rgba(138, 173, 244, 0.22)`                                     | Active cue background color         |
-| `--subtitle-sidebar-hover-background-color` | `rgba(54, 58, 79, 0.84)`    | Hovered cue background color |
+| `--subtitle-sidebar-hover-background-color`  | `rgba(54, 58, 79, 0.84)`                                        | Hovered cue background color        |
 ## Keyboard Shortcut
-| Key | Action                  | Config key                     |
+| Key | Action                  | Config key                  |
-| --- | ----------------------- | ------------------------------ |
+| --- | ----------------------- | --------------------------- |
-| `\` | Toggle subtitle sidebar | `subtitleSidebar.toggleKey`    |
+| `\` | Toggle subtitle sidebar | `subtitleSidebar.toggleKey` |
 The toggle is overlay-local and only opens when SubMiner has a parsed cue list for the active subtitle source. See [Keyboard Shortcuts](/shortcuts) for the full shortcut reference.
@@ -70,6 +70,7 @@ subminer https://youtu.be/...     # Play a YouTube URL
 subminer stats                    # Open the immersion stats dashboard
 subminer doctor                   # Check dependencies, config, and the mpv socket
 subminer settings                 # Open the SubMiner settings window
 subminer anime                    # Open the anime browser window
 subminer app --setup              # Re-open first-run setup
 subminer -u                       # Check for updates
 ```
@@ -131,6 +132,7 @@ SubMiner.AppImage --open-tsukihime        # Open TsukiHime subtitle search
 SubMiner.AppImage --yomitan               # Open Yomitan settings
 SubMiner.AppImage --settings              # Open the SubMiner settings window
 SubMiner.AppImage --jellyfin              # Open the Jellyfin setup window
 SubMiner.AppImage --anime                 # Open the anime browser window
 SubMiner.AppImage --dictionary            # Generate a character dictionary ZIP
 SubMiner.AppImage --start --dev           # Enable app/dev mode
 SubMiner.AppImage --start --log-level debug  # Verbose logging without dev mode
@@ -2,7 +2,7 @@
 **Who this page is for:** developers and tinkerers who want to consume SubMiner's live subtitle stream from their own tools - a browser tab, an automation script, or another mpv plugin. If you just want subtitles in a browser tab for Yomitan, skip to [Texthooker Integration Guide](#texthooker-integration-guide); the rest is reference for building custom clients.
-A *texthooker* is a page/tool that receives the text currently on screen so a dictionary extension (like Yomitan) can look words up. SubMiner ships its own texthooker UI and also broadcasts subtitle text over local WebSockets that any client can connect to.
+A _texthooker_ is a page/tool that receives the text currently on screen so a dictionary extension (like Yomitan) can look words up. SubMiner ships its own texthooker UI and also broadcasts subtitle text over local WebSockets that any client can connect to.
 SubMiner exposes a small set of local integration surfaces for browser tools, automation helpers, and mpv-driven workflows:
@@ -15,12 +15,12 @@ This page documents those integration points and shows how to build custom consu
 ## Quick Reference
-| Surface | Default | Purpose |
+| Surface               | Default                     | Purpose                                            |
-| --- | --- | --- |
+| --------------------- | --------------------------- | -------------------------------------------------- |
-| `websocket` | `ws://127.0.0.1:6677` | Basic subtitle broadcast stream |
+| `websocket`           | `ws://127.0.0.1:6677`       | Basic subtitle broadcast stream                    |
-| `annotationWebsocket` | `ws://127.0.0.1:6678` | Structured stream with token metadata |
+| `annotationWebsocket` | `ws://127.0.0.1:6678`       | Structured stream with token metadata              |
-| `texthooker` | `http://127.0.0.1:5174` | Local texthooker UI with injected websocket config |
+| `texthooker`          | `http://127.0.0.1:5174`     | Local texthooker UI with injected websocket config |
-| mpv plugin | `script-message subminer-*` | Start/stop/toggle/status automation inside mpv |
+| mpv plugin            | `script-message subminer-*` | Start/stop/toggle/status automation inside mpv     |
 ## Enable and Configure the Services
@@ -30,16 +30,16 @@ SubMiner's integration ports are configured in `config.jsonc`. All three service
 {
  "websocket": {
    "enabled": "auto",
-    "port": 6677
+    "port": 6677,
  },
  "annotationWebsocket": {
    "enabled": true,
-    "port": 6678
+    "port": 6678,
  },
  "texthooker": {
    "launchAtStartup": true,
-    "openBrowser": false
+    "openBrowser": false,
-  }
+  },
 }
 ```
@@ -79,12 +79,12 @@ When a client connects, SubMiner immediately sends the latest subtitle payload i
 #### Field reference
-| Field | Type | Notes |
+| Field      | Type   | Notes                                                                                          |
-| --- | --- | --- |
+| ---------- | ------ | ---------------------------------------------------------------------------------------------- |
-| `version` | number | Current websocket payload version. Today this is `1`. |
+| `version`  | number | Current websocket payload version. Today this is `1`.                                          |
-| `text` | string | Raw subtitle text. |
+| `text`     | string | Raw subtitle text.                                                                             |
 | `sentence` | string | Plain subtitle text with line breaks represented as `<br>`. No annotation spans or attributes. |
-| `tokens` | array | Always empty on the basic subtitle websocket. |
+| `tokens`   | array  | Always empty on the basic subtitle websocket.                                                  |
 ### 2. Annotation WebSocket
@@ -127,22 +127,22 @@ In practice, if you are building a new client, prefer `annotationWebsocket` unle
 Each annotation token may include:
-| Token field | Type | Notes |
+| Token field           | Type             | Notes                                            |
-| --- | --- | --- |
+| --------------------- | ---------------- | ------------------------------------------------ |
-| `surface` | string | Display text for the token |
+| `surface`             | string           | Display text for the token                       |
-| `reading` | string | Kana reading when available |
+| `reading`             | string           | Kana reading when available                      |
-| `headword` | string | Dictionary headword when available |
+| `headword`            | string           | Dictionary headword when available               |
-| `startPos` / `endPos` | number | Character offsets in the subtitle text |
+| `startPos` / `endPos` | number           | Character offsets in the subtitle text           |
-| `partOfSpeech` | string | SubMiner token POS label |
+| `partOfSpeech`        | string           | SubMiner token POS label                         |
-| `isMerged` | boolean | Whether this token represents merged content |
+| `isMerged`            | boolean          | Whether this token represents merged content     |
-| `isKnown` | boolean | Marked known by SubMiner's known-word logic |
+| `isKnown`             | boolean          | Marked known by SubMiner's known-word logic      |
-| `isNPlusOneTarget` | boolean | True when the token is the sentence's N+1 target |
+| `isNPlusOneTarget`    | boolean          | True when the token is the sentence's N+1 target |
-| `isNameMatch` | boolean | True for prioritized character-name matches |
+| `isNameMatch`         | boolean          | True for prioritized character-name matches      |
-| `frequencyRank` | number | Frequency rank when available |
+| `frequencyRank`       | number           | Frequency rank when available                    |
-| `jlptLevel` | string | JLPT level when available |
+| `jlptLevel`           | string           | JLPT level when available                        |
-| `className` | string | CSS-ready class list derived from token state |
+| `className`           | string           | CSS-ready class list derived from token state    |
-| `frequencyRankLabel` | string or `null` | Preformatted rank label for UIs |
+| `frequencyRankLabel`  | string or `null` | Preformatted rank label for UIs                  |
-| `jlptLevelLabel` | string or `null` | Preformatted JLPT label for UIs |
+| `jlptLevelLabel`      | string or `null` | Preformatted JLPT label for UIs                  |
 ### 3. HTML markup conventions
@@ -110,8 +110,8 @@ Background cache downloads are capped at 720p by default (`youtube.mediaCache.ma
 }
 ```
-| Option                | Type       | Description                                                                           |
+| Option                | Type       | Description                                                                                                                                                                              |
-| --------------------- | ---------- | ------------------------------------------------------------------------------------- |
+| --------------------- | ---------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
 | `primarySubLanguages` | `string[]` | Languages that count as a satisfactory primary subtitle (default `["ja", "jpn"]`). Used by the "primary subtitle missing" notification and by managed local/playlist subtitle selection. |
 YouTube auto-selection itself always picks a Japanese track first (manual over auto), then falls back to any manual track — `primarySubLanguages` does not change which YouTube track is auto-picked.
@@ -130,11 +130,11 @@ YouTube secondary selection is fixed: SubMiner always tries an English track (ma
 }
 ```
-| Option                  | Type                                 | Description                                                                                                                                                                                         |
+| Option                  | Type                                 | Description                                                                                                                                                             |
-| ----------------------- | ------------------------------------ | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| ----------------------- | ------------------------------------ | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
 | `secondarySubLanguages` | `string[]`                           | Extra language codes (e.g. `["eng", "en"]`) used when auto-selecting a secondary track for local/Jellyfin sidecar files. Default is empty (`[]`). Not used for YouTube. |
 | `autoLoadSecondarySub`  | `boolean`                            | Auto-detect and load a matching secondary sidecar track for local files (default: `false`). Not used for YouTube.                                                       |
-| `defaultMode`           | `"hidden"` / `"visible"` / `"hover"` | Initial display mode for secondary subtitles (default: `"hover"`)                                                                                                                                   |
+| `defaultMode`           | `"hidden"` / `"visible"` / `"hover"` | Initial display mode for secondary subtitles (default: `"hover"`)                                                                                                       |
 These settings come from `config.jsonc` (or built-in defaults); there are no CLI flags or environment variables for subtitle language selection.
@@ -64,15 +64,17 @@ External subtitle files only (SRT, VTT, ASS). Embedded subtitle tracks are out o
 A cue parser extracts both timing and text content from subtitle files for prefetching.
 **Parsed cue structure:**
 ```typescript
 interface SubtitleCue {
-  startTime: number;  // seconds
+  startTime: number; // seconds
-  endTime: number;    // seconds
+  endTime: number; // seconds
-  text: string;       // raw subtitle text
+  text: string; // raw subtitle text
 }
 ```
 **Supported formats:**
 - SRT/VTT: Regex-based parsing of timing lines + text content between timing blocks.
 - ASS: Parse `[Events]` section, extract `Dialogue:` lines, split on the first 9 commas only (ASS v4+ has 10 fields; the last field is Text which can itself contain commas). Strip ASS override tags (`{\...}`) from the text before storing.
  ASS text fields contain inline override tags like `{\b1}`, `{\an8}`, `{\fad(200,300)}`. The cue parser strips these during extraction so the tokenizer receives clean text.
@@ -153,6 +155,7 @@ tokens (already have frequencyRank values from parser-level applyFrequencyRanks)
 ### Dependency Analysis
 All annotations either depend on MeCab POS data or benefit from running after it:
 - **Known word marking:** Needs base tokens (surface/headword). No POS dependency, but no reason to run separately.
 - **Frequency filtering:** Uses `pos1Exclusions` and `pos2Exclusions` to clear frequency ranks on excluded tokens (particles, noise). Depends on MeCab POS data.
 - **JLPT marking:** Uses `shouldIgnoreJlptForMecabPos1` to filter. Depends on MeCab POS data.
@@ -169,18 +172,14 @@ function annotateTokens(tokens, deps, options): MergedToken[] {
  // Single pass: known word + frequency filtering + JLPT computed together
  const annotated = tokens.map((token) => {
-    const isKnown = nPlusOneEnabled
+    const isKnown = nPlusOneEnabled ? token.isKnown || computeIsKnown(token, deps) : false;
      ? token.isKnown || computeIsKnown(token, deps)
      : false;
    // Filter frequency rank using POS exclusions (rank values already set at parser level)
    const frequencyRank = frequencyEnabled
      ? filterFrequencyRank(token, pos1Exclusions, pos2Exclusions)
      : undefined;
-    const jlptLevel = jlptEnabled
+    const jlptLevel = jlptEnabled ? computeJlptLevel(token, deps.getJlptLevel) : undefined;
      ? computeJlptLevel(token, deps.getJlptLevel)
      : undefined;
    return { ...token, isKnown, frequencyRank, jlptLevel };
  });
@@ -221,6 +220,7 @@ Replace `document.createElement('span')` calls in the renderer with `templateSpa
 ### Current Behavior
 In `renderWithTokens` (`subtitle-render.ts`), each render cycle:
 1. Clears DOM with `innerHTML = ''`
 2. Creates a `DocumentFragment`
 3. Calls `document.createElement('span')` for each token (~10-15 per subtitle)
@@ -256,27 +256,30 @@ Full recycling (collecting old nodes, clearing attributes, reusing them) require
 ## Combined Impact Summary
-| Scenario | Before | After | Improvement |
+| Scenario                          | Before     | After      | Improvement |
-|----------|--------|-------|-------------|
+| --------------------------------- | ---------- | ---------- | ----------- |
-| Normal playback (prefetch-warmed) | ~200-320ms | ~30-50ms | ~80-85% |
+| Normal playback (prefetch-warmed) | ~200-320ms | ~30-50ms   | ~80-85%     |
-| Cache hit (repeated subtitle) | ~72ms | ~55-65ms | ~10-20% |
+| Cache hit (repeated subtitle)     | ~72ms      | ~55-65ms   | ~10-20%     |
-| Cache miss (immediate seek) | ~200-320ms | ~150-260ms | ~20-25% |
+| Cache miss (immediate seek)       | ~200-320ms | ~150-260ms | ~20-25%     |
 ---
 ## Files Summary
 ### New Files
 - `src/core/services/subtitle-prefetch.ts`
 - `src/core/services/subtitle-cue-parser.ts`
 ### Modified Files
 - `src/core/services/subtitle-processing-controller.ts` (expose `preCacheTokenization`)
 - `src/core/services/tokenizer/annotation-stage.ts` (batched single-pass)
 - `src/renderer/subtitle-render.ts` (template cloneNode)
 - `src/main.ts` (wire up prefetch service)
 ### Test Files
 - New tests for subtitle cue parser (SRT, VTT, ASS formats)
 - New tests for subtitle prefetch service (priority window, seek, pause/resume)
 - Updated tests for annotation stage (same behavior, new implementation)
@@ -7,21 +7,21 @@ Last verified: 2026-05-23
 Owner: Kyle Yasuda  
 Read when: finding internal docs or checking verification status
-| Area | Path | Status | Last verified | Notes |
+| Area                     | Path                                            | Status | Last verified | Notes                                      |
-| --- | --- | --- | --- | --- |
+| ------------------------ | ----------------------------------------------- | ------ | ------------- | ------------------------------------------ |
-| KB home | `docs/README.md` | active | 2026-05-23 | internal entrypoint |
+| KB home                  | `docs/README.md`                                | active | 2026-05-23    | internal entrypoint                        |
-| Architecture index | `docs/architecture/README.md` | active | 2026-05-23 | top-level runtime map |
+| Architecture index       | `docs/architecture/README.md`                   | active | 2026-05-23    | top-level runtime map                      |
-| Domain ownership | `docs/architecture/domains.md` | active | 2026-05-23 | runtime and feature ownership |
+| Domain ownership         | `docs/architecture/domains.md`                  | active | 2026-05-23    | runtime and feature ownership              |
-| Layering rules | `docs/architecture/layering.md` | active | 2026-05-23 | dependency direction and smells |
+| Layering rules           | `docs/architecture/layering.md`                 | active | 2026-05-23    | dependency direction and smells            |
-| Subtitle overlay priming | `docs/architecture/subtitle-overlay-priming.md` | active | 2026-06-01 | visible-overlay subtitle startup flow |
+| Subtitle overlay priming | `docs/architecture/subtitle-overlay-priming.md` | active | 2026-06-01    | visible-overlay subtitle startup flow      |
-| KB rules | `docs/knowledge-base/README.md` | active | 2026-05-23 | maintenance policy |
+| KB rules                 | `docs/knowledge-base/README.md`                 | active | 2026-05-23    | maintenance policy                         |
-| Core beliefs | `docs/knowledge-base/core-beliefs.md` | active | 2026-03-13 | agent-first principles |
+| Core beliefs             | `docs/knowledge-base/core-beliefs.md`           | active | 2026-03-13    | agent-first principles                     |
-| Quality scorecard | `docs/knowledge-base/quality.md` | active | 2026-03-13 | quality grades and gaps |
+| Quality scorecard        | `docs/knowledge-base/quality.md`                | active | 2026-03-13    | quality grades and gaps                    |
-| Workflow index | `docs/workflow/README.md` | active | 2026-05-23 | execution map |
+| Workflow index           | `docs/workflow/README.md`                       | active | 2026-05-23    | execution map                              |
-| Planning guide | `docs/workflow/planning.md` | active | 2026-05-23 | lightweight vs execution plans |
+| Planning guide           | `docs/workflow/planning.md`                     | active | 2026-05-23    | lightweight vs execution plans             |
-| Agent plugins | `docs/workflow/agent-plugins.md` | active | 2026-05-23 | repo-local agent workflow plugin ownership |
+| Agent plugins            | `docs/workflow/agent-plugins.md`                | active | 2026-05-23    | repo-local agent workflow plugin ownership |
-| Verification guide | `docs/workflow/verification.md` | active | 2026-05-23 | maintained verification lanes |
+| Verification guide       | `docs/workflow/verification.md`                 | active | 2026-05-23    | maintained verification lanes              |
-| Release guide | `docs/RELEASING.md` | active | 2026-05-23 | release checklist |
+| Release guide            | `docs/RELEASING.md`                             | active | 2026-05-23    | release checklist                          |
 ## Update Rules
@@ -11,27 +11,27 @@ Grades are directional, not ceremonial. The point is to keep gaps visible.
 ## Product / Runtime Domains
-| Area | Grade | Notes |
+| Area                                    | Grade | Notes                                                                    |
-| --- | --- | --- |
+| --------------------------------------- | ----- | ------------------------------------------------------------------------ |
-| Desktop runtime composition | B | strong modularization; still easy for `main` wiring drift to reappear |
+| Desktop runtime composition             | B     | strong modularization; still easy for `main` wiring drift to reappear    |
-| Launcher CLI | B | focused surface; generated/stale artifact hazards need constant guarding |
+| Launcher CLI                            | B     | focused surface; generated/stale artifact hazards need constant guarding |
-| mpv plugin | B | modular, but Lua/runtime coupling still specialized |
+| mpv plugin                              | B     | modular, but Lua/runtime coupling still specialized                      |
-| Overlay renderer | B | improved modularity; interaction complexity remains |
+| Overlay renderer                        | B     | improved modularity; interaction complexity remains                      |
-| Config system | A- | clear defaults/definitions split and good validation surface |
+| Config system                           | A-    | clear defaults/definitions split and good validation surface             |
-| Immersion / AniList / Jellyfin surfaces | B- | growing product scope; ownership spans multiple services |
+| Immersion / AniList / Jellyfin surfaces | B-    | growing product scope; ownership spans multiple services                 |
-| Internal docs system | B | new structure in place; needs habitual maintenance |
+| Internal docs system                    | B     | new structure in place; needs habitual maintenance                       |
-| Public docs site | B | strong user docs; must stay separate from internal KB |
+| Public docs site                        | B     | strong user docs; must stay separate from internal KB                    |
 ## Architectural Layers
-| Layer | Grade | Notes |
+| Layer                          | Grade | Notes                                                     |
-| --- | --- | --- |
+| ------------------------------ | ----- | --------------------------------------------------------- |
-| `src/main.ts` composition root | B | direction good; still needs vigilance against logic creep |
+| `src/main.ts` composition root | B     | direction good; still needs vigilance against logic creep |
-| `src/main/` runtime adapters | B | mostly clear; can accumulate wiring debt |
+| `src/main/` runtime adapters   | B     | mostly clear; can accumulate wiring debt                  |
-| `src/core/services/` | B+ | good extraction pattern; some domains remain broad |
+| `src/core/services/`           | B+    | good extraction pattern; some domains remain broad        |
-| `src/renderer/` | B | cleaner than before; UI/runtime behavior still dense |
+| `src/renderer/`                | B     | cleaner than before; UI/runtime behavior still dense      |
-| `launcher/` | B | clear command boundaries |
+| `launcher/`                    | B     | clear command boundaries                                  |
-| `docs/` internal KB | B | structure exists; enforcement now guards core rules |
+| `docs/` internal KB            | B     | structure exists; enforcement now guards core rules       |
 ## Current Gaps
@@ -15,13 +15,16 @@
 ## File Structure
 **Backend (`src/core/services/immersion-tracker/`):**
 - `query-trends.ts` — add `LibrarySummaryRow` type, `buildLibrarySummary` helper, wire into `getTrendsDashboard`, drop `animePerDay` from `TrendsDashboardQueryResult`, delete now-unused `buildPerAnimeFromSessions` and `buildLookupsPerHundredPerAnime`.
 - `__tests__/query.test.ts` — update existing `getTrendsDashboard` test (drop `animePerDay` assertion, add `librarySummary` assertion); add new tests for summary-specific behavior (empty window, multi-title, null lookupsPerHundred).
 **Backend test fixtures:**
 - `src/core/services/__tests__/stats-server.test.ts` — update `TRENDS_DASHBOARD` fixture (remove `animePerDay`, add `librarySummary`), fix `assert.deepEqual` that references `body.animePerDay.watchTime`.
 **Frontend (`stats/src/`):**
 - `types/stats.ts` — add `LibrarySummaryRow` interface, add `librarySummary` field to `TrendsDashboardData`, remove `animePerDay` field.
 - `lib/api-client.test.ts` — update the two inline fetch-mock fixtures (remove `animePerDay`, add `librarySummary`).
 - `components/trends/LibrarySummarySection.tsx` — **new** file. Owns the header content: leaderboard Recharts chart + sortable HTML table. Takes `{ rows, hiddenTitles }` as props.
@@ -29,6 +32,7 @@
 - `components/trends/anime-visibility.ts` — unchanged. The existing helpers operate on `PerAnimeDataPoint[]`; we'll adapt by passing a derived `PerAnimeDataPoint[]` built from `librarySummary` (or add an overload — see Task 7 for the final decision).
 **Changelog:**
 - `changes/stats-library-summary.md` — **new** changelog fragment.
 ---
@@ -36,6 +40,7 @@
 ## Task 1: Backend — Add `LibrarySummaryRow` type and empty stub field
 **Files:**
 - Modify: `src/core/services/immersion-tracker/query-trends.ts`
 - [ ] **Step 1: Add the row type and add `librarySummary: []` to the returned object**
@@ -82,6 +87,7 @@ git commit -m "feat(stats): scaffold LibrarySummaryRow type and empty field"
 ## Task 2: Backend — TDD the `buildLibrarySummary` helper
 **Files:**
 - Modify: `src/core/services/immersion-tracker/query-trends.ts`
 - Modify: `src/core/services/immersion-tracker/__tests__/query.test.ts`
@@ -160,16 +166,7 @@ test('getTrendsDashboard builds librarySummary with per-title aggregates', () =>
              lines_seen = ?, tokens_seen = ?, cards_mined = ?, yomitan_lookup_count = ?
          WHERE session_id = ?
        `,
-      ).run(
+      ).run(`${startedAtMs + activeMs}`, activeMs, activeMs, 10, tokens, cards, lookups, sessionId);
        `${startedAtMs + activeMs}`,
        activeMs,
        activeMs,
        10,
        tokens,
        cards,
        lookups,
        sessionId,
      );
    }
    for (const [day, active, tokens, cards] of [
@@ -289,8 +286,7 @@ function buildLibrarySummary(
      cards: acc.cards,
      words: acc.words,
      lookups: acc.lookups,
-      lookupsPerHundred:
+      lookupsPerHundred: acc.words > 0 ? +((acc.lookups / acc.words) * 100).toFixed(1) : null,
        acc.words > 0 ? +((acc.lookups / acc.words) * 100).toFixed(1) : null,
      firstWatched: acc.firstWatched,
      lastWatched: acc.lastWatched,
    });
@@ -334,6 +330,7 @@ git commit -m "feat(stats): build per-title librarySummary from daily rollups an
 ## Task 3: Backend — Add null-lookupsPerHundred and empty-window tests
 **Files:**
 - Modify: `src/core/services/immersion-tracker/__tests__/query.test.ts`
 - [ ] **Step 1: Write a failing test for `lookupsPerHundred: null` when words == 0**
@@ -402,16 +399,7 @@ test('getTrendsDashboard librarySummary returns null lookupsPerHundred when word
            lines_seen = ?, tokens_seen = ?, cards_mined = ?, yomitan_lookup_count = ?
        WHERE session_id = ?
      `,
-    ).run(
+    ).run(`${startMs + 20 * 60_000}`, 20 * 60_000, 20 * 60_000, 5, 0, 0, 0, session.sessionId);
      `${startMs + 20 * 60_000}`,
      20 * 60_000,
      20 * 60_000,
      5,
      0,
      0,
      0,
      session.sessionId,
    );
    db.prepare(
      `
@@ -464,6 +452,7 @@ git commit -m "test(stats): cover librarySummary null-lookups and empty-window c
 ## Task 4: Backend — Drop `animePerDay` from the response type and clean up dead helpers
 **Files:**
 - Modify: `src/core/services/immersion-tracker/query-trends.ts`
 - Modify: `src/core/services/immersion-tracker/__tests__/query.test.ts`
 - Modify: `src/core/services/__tests__/stats-server.test.ts`
@@ -489,61 +478,61 @@ animePerDay: {
 In `getTrendsDashboard` (around lines 649-668 and 694-699), keep the internal `animePerDay` construction (it's still used by `animeCumulative`) but do NOT include it in the returned object. Also drop the now-unused `lookups` and `lookupsPerHundred` fields from the internal `animePerDay` object. Replace the block starting with `const animePerDay = {` through the return statement:
 ```ts
-  const animePerDay = {
+const animePerDay = {
-    episodes: buildEpisodesPerAnimeFromDailyRollups(dailyRollups, titlesByVideoId),
+  episodes: buildEpisodesPerAnimeFromDailyRollups(dailyRollups, titlesByVideoId),
-    watchTime: buildPerAnimeFromDailyRollups(
+  watchTime: buildPerAnimeFromDailyRollups(
-      dailyRollups,
+    dailyRollups,
-      titlesByVideoId,
+    titlesByVideoId,
-      (rollup) => rollup.totalActiveMin,
+    (rollup) => rollup.totalActiveMin,
-    ),
+  ),
-    cards: buildPerAnimeFromDailyRollups(
+  cards: buildPerAnimeFromDailyRollups(
-      dailyRollups,
+    dailyRollups,
-      titlesByVideoId,
+    titlesByVideoId,
-      (rollup) => rollup.totalCards,
+    (rollup) => rollup.totalCards,
-    ),
+  ),
-    words: buildPerAnimeFromDailyRollups(
+  words: buildPerAnimeFromDailyRollups(
-      dailyRollups,
+    dailyRollups,
-      titlesByVideoId,
+    titlesByVideoId,
-      (rollup) => rollup.totalTokensSeen,
+    (rollup) => rollup.totalTokensSeen,
-    ),
+  ),
-  };
+};
-  return {
+return {
-    activity,
+  activity,
-    progress: {
+  progress: {
-      watchTime: accumulatePoints(activity.watchTime),
+    watchTime: accumulatePoints(activity.watchTime),
-      sessions: accumulatePoints(activity.sessions),
+    sessions: accumulatePoints(activity.sessions),
-      words: accumulatePoints(activity.words),
+    words: accumulatePoints(activity.words),
-      newWords: accumulatePoints(
+    newWords: accumulatePoints(
-        useMonthlyBuckets ? buildNewWordsPerMonth(db, cutoffMs) : buildNewWordsPerDay(db, cutoffMs),
+      useMonthlyBuckets ? buildNewWordsPerMonth(db, cutoffMs) : buildNewWordsPerDay(db, cutoffMs),
-      ),
+    ),
-      cards: accumulatePoints(activity.cards),
+    cards: accumulatePoints(activity.cards),
-      episodes: accumulatePoints(
+    episodes: accumulatePoints(
-        useMonthlyBuckets
+      useMonthlyBuckets
-          ? buildEpisodesPerMonthFromRollups(monthlyRollups)
+        ? buildEpisodesPerMonthFromRollups(monthlyRollups)
-          : buildEpisodesPerDayFromDailyRollups(dailyRollups),
+        : buildEpisodesPerDayFromDailyRollups(dailyRollups),
-      ),
+    ),
-      lookups: accumulatePoints(
+    lookups: accumulatePoints(
-        useMonthlyBuckets
+      useMonthlyBuckets
-          ? buildSessionSeriesByMonth(sessions, (session) => session.yomitanLookupCount)
+        ? buildSessionSeriesByMonth(sessions, (session) => session.yomitanLookupCount)
-          : buildSessionSeriesByDay(sessions, (session) => session.yomitanLookupCount),
+        : buildSessionSeriesByDay(sessions, (session) => session.yomitanLookupCount),
-      ),
+    ),
-    },
+  },
-    ratios: {
+  ratios: {
-      lookupsPerHundred: buildLookupsPerHundredWords(sessions, groupBy),
+    lookupsPerHundred: buildLookupsPerHundredWords(sessions, groupBy),
-    },
+  },
-    librarySummary: buildLibrarySummary(dailyRollups, sessions, titlesByVideoId),
+  librarySummary: buildLibrarySummary(dailyRollups, sessions, titlesByVideoId),
-    animeCumulative: {
+  animeCumulative: {
-      watchTime: buildCumulativePerAnime(animePerDay.watchTime),
+    watchTime: buildCumulativePerAnime(animePerDay.watchTime),
-      episodes: buildCumulativePerAnime(animePerDay.episodes),
+    episodes: buildCumulativePerAnime(animePerDay.episodes),
-      cards: buildCumulativePerAnime(animePerDay.cards),
+    cards: buildCumulativePerAnime(animePerDay.cards),
-      words: buildCumulativePerAnime(animePerDay.words),
+    words: buildCumulativePerAnime(animePerDay.words),
-    },
+  },
-    patterns: {
+  patterns: {
-      watchTimeByDayOfWeek: buildWatchTimeByDayOfWeek(sessions),
+    watchTimeByDayOfWeek: buildWatchTimeByDayOfWeek(sessions),
-      watchTimeByHour: buildWatchTimeByHour(sessions),
+    watchTimeByHour: buildWatchTimeByHour(sessions),
-    },
+  },
-  };
+};
 ```
 - [ ] **Step 3: Delete now-unused helpers**
@@ -622,6 +611,7 @@ git commit -m "refactor(stats): drop animePerDay from trends response in favor o
 ## Task 5: Frontend — Update types and api-client test fixtures
 **Files:**
 - Modify: `stats/src/types/stats.ts`
 - Modify: `stats/src/lib/api-client.test.ts`
@@ -710,6 +700,7 @@ git commit -m "refactor(stats): replace animePerDay type with librarySummary"
 ## Task 6: Frontend — Create `LibrarySummarySection` skeleton with empty state
 **Files:**
 - Create: `stats/src/components/trends/LibrarySummarySection.tsx`
 - [ ] **Step 1: Create the file with the empty state and props plumbing**
@@ -765,6 +756,7 @@ git commit -m "feat(stats): scaffold LibrarySummarySection with empty state"
 ## Task 7: Frontend — Add the leaderboard bar chart to `LibrarySummarySection`
 **Files:**
 - Modify: `stats/src/components/trends/LibrarySummarySection.tsx`
 - [ ] **Step 1: Replace the skeleton body with the leaderboard chart**
@@ -772,15 +764,7 @@ git commit -m "feat(stats): scaffold LibrarySummarySection with empty state"
 Replace the entire contents of `stats/src/components/trends/LibrarySummarySection.tsx` with:
 ```tsx
-import {
+import { Bar, BarChart, CartesianGrid, ResponsiveContainer, Tooltip, XAxis, YAxis } from 'recharts';
  Bar,
  BarChart,
  CartesianGrid,
  ResponsiveContainer,
  Tooltip,
  XAxis,
  YAxis,
 } from 'recharts';
 import type { LibrarySummaryRow } from '../../types/stats';
 import { CHART_DEFAULTS, CHART_THEME, TOOLTIP_CONTENT_STYLE } from '../../lib/chart-theme';
@@ -821,9 +805,7 @@ export function LibrarySummarySection({ rows, hiddenTitles }: LibrarySummarySect
  return (
    <>
      <div className="col-span-full rounded-lg border border-ctp-surface1 bg-ctp-surface0 p-4">
-        <h3 className="text-xs font-semibold text-ctp-text mb-2">
+        <h3 className="text-xs font-semibold text-ctp-text mb-2">Top Titles by Watch Time (min)</h3>
          Top Titles by Watch Time (min)
        </h3>
        <ResponsiveContainer width="100%" height={LEADERBOARD_HEIGHT}>
          <BarChart
            data={leaderboard}
@@ -881,6 +863,7 @@ git commit -m "feat(stats): add top-titles leaderboard chart to LibrarySummarySe
 ## Task 8: Frontend — Add the sortable table to `LibrarySummarySection`
 **Files:**
 - Modify: `stats/src/components/trends/LibrarySummarySection.tsx`
 - [ ] **Step 1: Add sort state, column definitions, and the table markup**
@@ -889,15 +872,7 @@ Replace the entire file with the version below. The change vs. Task 7: imports `
 ```tsx
 import { useMemo, useState } from 'react';
-import {
+import { Bar, BarChart, CartesianGrid, ResponsiveContainer, Tooltip, XAxis, YAxis } from 'recharts';
  Bar,
  BarChart,
  CartesianGrid,
  ResponsiveContainer,
  Tooltip,
  XAxis,
  YAxis,
 } from 'recharts';
 import type { LibrarySummaryRow } from '../../types/stats';
 import { CHART_DEFAULTS, CHART_THEME, TOOLTIP_CONTENT_STYLE } from '../../lib/chart-theme';
 import { epochDayToDate, formatDuration, formatNumber } from '../../lib/formatters';
@@ -1023,9 +998,7 @@ export function LibrarySummarySection({ rows, hiddenTitles }: LibrarySummarySect
  if (visibleRows.length === 0) {
    return (
      <div className="col-span-full rounded-lg border border-ctp-surface1 bg-ctp-surface0 p-4">
-        <div className="text-xs text-ctp-overlay2">
+        <div className="text-xs text-ctp-overlay2">No library activity in the selected window.</div>
          No library activity in the selected window.
        </div>
      </div>
    );
  }
@@ -1042,9 +1015,7 @@ export function LibrarySummarySection({ rows, hiddenTitles }: LibrarySummarySect
  return (
    <>
      <div className="col-span-full rounded-lg border border-ctp-surface1 bg-ctp-surface0 p-4">
-        <h3 className="text-xs font-semibold text-ctp-text mb-2">
+        <h3 className="text-xs font-semibold text-ctp-text mb-2">Top Titles by Watch Time (min)</h3>
          Top Titles by Watch Time (min)
        </h3>
        <ResponsiveContainer width="100%" height={LEADERBOARD_HEIGHT}>
          <BarChart
            data={leaderboard}
@@ -1081,10 +1052,7 @@ export function LibrarySummarySection({ rows, hiddenTitles }: LibrarySummarySect
      </div>
      <div className="col-span-full rounded-lg border border-ctp-surface1 bg-ctp-surface0 p-4">
        <h3 className="text-xs font-semibold text-ctp-text mb-2">Per-Title Summary</h3>
-        <div
+        <div className="overflow-auto" style={{ maxHeight: TABLE_MAX_HEIGHT }}>
          className="overflow-auto"
          style={{ maxHeight: TABLE_MAX_HEIGHT }}
        >
          <table className="w-full text-xs">
            <thead className="sticky top-0 bg-ctp-surface0">
              <tr className="border-b border-ctp-surface1 text-ctp-subtext0">
@@ -1138,9 +1106,7 @@ export function LibrarySummarySection({ rows, hiddenTitles }: LibrarySummarySect
                    {formatNumber(row.lookups)}
                  </td>
                  <td className="px-2 py-2 text-right text-ctp-text tabular-nums">
-                    {row.lookupsPerHundred === null
+                    {row.lookupsPerHundred === null ? '—' : row.lookupsPerHundred.toFixed(1)}
                      ? '—'
                      : row.lookupsPerHundred.toFixed(1)}
                  </td>
                  <td className="px-2 py-2 text-right text-ctp-subtext0 tabular-nums">
                    {formatDateRange(row.firstWatched, row.lastWatched)}
@@ -1173,6 +1139,7 @@ git commit -m "feat(stats): add sortable per-title table to LibrarySummarySectio
 ## Task 9: Frontend — Wire `LibrarySummarySection` into `TrendsTab` and remove the per-day block
 **Files:**
 - Modify: `stats/src/components/trends/TrendsTab.tsx`
 - [ ] **Step 1: Delete the per-day filtered locals and imports**
@@ -1192,10 +1159,7 @@ const filteredWatchTimePerAnime = filterHiddenAnimeData(
 );
 const filteredCardsPerAnime = filterHiddenAnimeData(data.animePerDay.cards, activeHiddenAnime);
 const filteredWordsPerAnime = filterHiddenAnimeData(data.animePerDay.words, activeHiddenAnime);
-const filteredLookupsPerAnime = filterHiddenAnimeData(
+const filteredLookupsPerAnime = filterHiddenAnimeData(data.animePerDay.lookups, activeHiddenAnime);
  data.animePerDay.lookups,
  activeHiddenAnime,
 );
 const filteredLookupsPerHundredPerAnime = filterHiddenAnimeData(
  data.animePerDay.lookupsPerHundred,
  activeHiddenAnime,
@@ -1286,6 +1250,7 @@ git commit -m "feat(stats): replace per-day trends section with library summary"
 ## Task 10: Add changelog fragment and run the full handoff gate
 **Files:**
 - Create: `changes/stats-library-summary.md`
 - [ ] **Step 1: Check the existing changelog fragment format**
@@ -43,6 +43,7 @@
 ## Task 1: 365d range — backend type extension
 **Files:**
 - Modify: `src/core/services/immersion-tracker/query-trends.ts:16` and `src/core/services/immersion-tracker/query-trends.ts:84-88`
 - Test: `src/core/services/immersion-tracker/__tests__/query.test.ts`
@@ -101,13 +102,14 @@
 ## Task 2: 365d range — server route allow-list
 **Files:**
 - Modify: `src/core/services/stats-server.ts` (search for trends route handler — look for `/api/stats/trends` or `getTrendsDashboard`)
 - Test: `src/core/services/__tests__/stats-server.test.ts`
 - [ ] **Step 1: Locate the trends route in `stats-server.ts`**
  Run: `grep -n 'trends\|TrendRange' src/core/services/stats-server.ts`
-  Read the surrounding code. If the route delegates straight through to `tracker.getTrendsDashboard(range, groupBy)` without an allow-list, **this entire task is a no-op** — skip ahead to Task 3 and document in the commit message of Task 3 that no server changes were needed. If there *is* an allow-list (e.g. a `validRanges` array), continue.
+  Read the surrounding code. If the route delegates straight through to `tracker.getTrendsDashboard(range, groupBy)` without an allow-list, **this entire task is a no-op** — skip ahead to Task 3 and document in the commit message of Task 3 that no server changes were needed. If there _is_ an allow-list (e.g. a `validRanges` array), continue.
 - [ ] **Step 2: Add a failing test for `range=365d`**
@@ -145,6 +147,7 @@
 ## Task 3: 365d range — frontend client and selector
 **Files:**
 - Modify: `stats/src/lib/api-client.ts`
 - Modify: `stats/src/lib/api-client.test.ts`
 - Modify: `stats/src/hooks/useTrends.ts:5`
@@ -175,10 +178,13 @@
 - [ ] **Step 6: Add `365d` to the `DateRangeSelector` segmented control**
  In `stats/src/components/trends/DateRangeSelector.tsx:56`, change:
  ```tsx
  options={['7d', '30d', '90d', 'all'] as TimeRange[]}
  ```
  to:
  ```tsx
  options={['7d', '30d', '90d', '365d', 'all'] as TimeRange[]}
  ```
@@ -206,6 +212,7 @@
 ## Task 4: Vocabulary Top 50 — collapse word/reading column
 **Files:**
 - Modify: `stats/src/components/vocabulary/FrequencyRankTable.tsx:110-144`
 - Test: create `stats/src/components/vocabulary/FrequencyRankTable.test.tsx` if not present (check first with `ls stats/src/components/vocabulary/`)
@@ -217,6 +224,7 @@
 - [ ] **Step 2: Write the failing test**
  Create or extend `stats/src/components/vocabulary/FrequencyRankTable.test.tsx` with:
  ```tsx
  import { render, screen } from '@testing-library/react';
  import { describe, it, expect } from 'bun:test';
@@ -271,6 +279,7 @@
  Replace the `<th>Reading</th>` header column and the corresponding `<td>` in the body. The new shape:
  Header (around line 113-119):
  ```tsx
  <thead>
    <tr className="text-xs text-ctp-overlay2 border-b border-ctp-surface1">
@@ -283,6 +292,7 @@
  ```
  Body row (around line 122-141):
  ```tsx
  <tr
    key={w.wordId}
@@ -297,16 +307,10 @@
      {(() => {
        const reading = fullReading(w.headword, w.reading);
        if (!reading || reading === w.headword) return null;
-        return (
+        return <span className="text-ctp-subtext0 text-xs ml-1.5">【{reading}】</span>;
          <span className="text-ctp-subtext0 text-xs ml-1.5">
            【{reading}】
          </span>
        );
      })()}
    </td>
-    <td className="py-1.5 pr-3">
+    <td className="py-1.5 pr-3">{w.partOfSpeech && <PosBadge pos={w.partOfSpeech} />}</td>
      {w.partOfSpeech && <PosBadge pos={w.partOfSpeech} />}
    </td>
    <td className="py-1.5 text-right font-mono tabular-nums text-ctp-blue text-xs">
      {w.frequency}x
    </td>
@@ -336,6 +340,7 @@
 ## Task 5: Episode detail — filter Anki-deleted cards
 **Files:**
 - Modify: `stats/src/components/anime/EpisodeDetail.tsx:109-147`
 - Test: create `stats/src/components/anime/EpisodeDetail.test.tsx` if not present
@@ -410,11 +415,13 @@
  Then change the JSX iteration from `cardEvents.map(...)` to `filteredCardEvents.map(...)` (one occurrence around line 113), and after the `</div>` closing the cards-mined section, add:
  ```tsx
-  {hiddenCardCount > 0 && (
+  {
-    <div className="px-3 pb-3 -mt-1 text-[10px] text-ctp-overlay2 italic">
+    hiddenCardCount > 0 && (
-      {hiddenCardCount} card{hiddenCardCount === 1 ? '' : 's'} hidden (deleted from Anki)
+      <div className="px-3 pb-3 -mt-1 text-[10px] text-ctp-overlay2 italic">
-    </div>
+        {hiddenCardCount} card{hiddenCardCount === 1 ? '' : 's'} hidden (deleted from Anki)
-  )}
+      </div>
    );
  }
  ```
  Place that footer immediately before the closing `</div>` of the bordered cards-mined section, so it stays scoped to that block.
@@ -422,12 +429,14 @@
  **Important:** the filter only fires once `noteInfos` has been populated. While `noteInfos` is still empty (initial load before the second fetch resolves), every card with noteIds would be filtered out — that's wrong. Guard the filter so that it only runs after the noteInfos fetch has completed. The simplest signal: track `noteInfosLoaded: boolean` next to `noteInfos`, set it `true` in the `.then` callback, and only apply filtering when `noteInfosLoaded || allNoteIds.length === 0`.
  Concrete change near line 22:
  ```tsx
  const [noteInfos, setNoteInfos] = useState<Map<number, NoteInfo>>(new Map());
  const [noteInfosLoaded, setNoteInfosLoaded] = useState(false);
  ```
  Inside the existing `useEffect` (around line 36-46), set the loaded flag:
  ```tsx
  if (allNoteIds.length > 0) {
    getStatsClient()
@@ -452,6 +461,7 @@
  ```
  And gate the filter:
  ```tsx
  const filteredCardEvents = noteInfosLoaded
    ? cardEvents
@@ -496,6 +506,7 @@
 ## Task 6: Library detail — delete episode action
 **Files:**
 - Modify: `stats/src/components/library/MediaHeader.tsx`
 - Modify: `stats/src/components/library/MediaDetailView.tsx`
 - Modify: `stats/src/hooks/useMediaLibrary.ts`
@@ -553,9 +564,7 @@
  ```tsx
  <div className="flex items-start gap-2">
-    <h2 className="text-lg font-bold text-ctp-text truncate flex-1">
+    <h2 className="text-lg font-bold text-ctp-text truncate flex-1">{detail.canonicalTitle}</h2>
      {detail.canonicalTitle}
    </h2>
    {onDeleteEpisode && (
      <button
        type="button"
@@ -718,6 +727,7 @@
 ## Task 7: Library — collapsible series groups
 **Files:**
 - Modify: `stats/src/components/library/LibraryTab.tsx`
 - Test: create `stats/src/components/library/LibraryTab.test.tsx`
@@ -758,11 +768,13 @@
 - [ ] **Step 3: Add collapsible state and toggle to `LibraryTab.tsx`**
  Modify imports:
  ```tsx
  import { useState, useMemo, useCallback } from 'react';
  ```
  Inside the component, after the existing `useState` calls:
  ```tsx
  const [collapsedGroups, setCollapsedGroups] = useState<Set<string>>(() => new Set());
@@ -780,6 +792,7 @@
  ```
  Actually, the cleanest pattern is **initialize once on first data load via `useEffect`**:
  ```tsx
  const [collapsedGroups, setCollapsedGroups] = useState<Set<string>>(() => new Set());
  const [hasInitializedCollapsed, setHasInitializedCollapsed] = useState(false);
@@ -814,71 +827,71 @@
  Replace the section block (around line 64-115) so the header is a `<button>`:
  ```tsx
-  {grouped.map((group) => {
+  {
-    const isCollapsed = collapsedGroups.has(group.key);
+    grouped.map((group) => {
-    const isSingleVideo = group.items.length === 1;
+      const isCollapsed = collapsedGroups.has(group.key);
-    return (
+      const isSingleVideo = group.items.length === 1;
-      <section
+      return (
-        key={group.key}
+        <section
-        className="rounded-2xl border border-ctp-surface1 bg-ctp-surface0/70 overflow-hidden"
+          key={group.key}
-      >
+          className="rounded-2xl border border-ctp-surface1 bg-ctp-surface0/70 overflow-hidden"
        <button
          type="button"
          onClick={() => !isSingleVideo && toggleGroup(group.key)}
          aria-expanded={!isCollapsed}
          aria-controls={`group-body-${group.key}`}
          disabled={isSingleVideo}
          className={`w-full flex items-center gap-4 p-4 border-b border-ctp-surface1 bg-ctp-base/40 text-left ${
            isSingleVideo ? '' : 'hover:bg-ctp-base/60 transition-colors cursor-pointer'
          }`}
        >
-          {!isSingleVideo && (
+          <button
-            <span
+            type="button"
-              aria-hidden="true"
+            onClick={() => !isSingleVideo && toggleGroup(group.key)}
-              className={`text-xs text-ctp-overlay2 transition-transform shrink-0 ${
+            aria-expanded={!isCollapsed}
-                isCollapsed ? '' : 'rotate-90'
+            aria-controls={`group-body-${group.key}`}
-              }`}
+            disabled={isSingleVideo}
-            >
+            className={`w-full flex items-center gap-4 p-4 border-b border-ctp-surface1 bg-ctp-base/40 text-left ${
-              {'\u25B6'}
+              isSingleVideo ? '' : 'hover:bg-ctp-base/60 transition-colors cursor-pointer'
-            </span>
+            }`}
          >
            {!isSingleVideo && (
              <span
                aria-hidden="true"
                className={`text-xs text-ctp-overlay2 transition-transform shrink-0 ${
                  isCollapsed ? '' : 'rotate-90'
                }`}
              >
                {'\u25B6'}
              </span>
            )}
            <CoverImage
              videoId={group.items[0]!.videoId}
              title={group.title}
              src={group.imageUrl}
              className="w-16 h-16 rounded-2xl shrink-0"
            />
            <div className="min-w-0 flex-1">
              <div className="flex items-center gap-2">
                <h3 className="text-base font-semibold text-ctp-text truncate">{group.title}</h3>
              </div>
              {group.subtitle ? (
                <div className="text-xs text-ctp-overlay1 truncate mt-1">{group.subtitle}</div>
              ) : null}
              <div className="text-xs text-ctp-overlay2 mt-2">
                {group.items.length} video{group.items.length !== 1 ? 's' : ''} ·{' '}
                {formatDuration(group.totalActiveMs)} · {formatNumber(group.totalCards)} cards
              </div>
            </div>
          </button>
          {!isCollapsed && (
            <div id={`group-body-${group.key}`} className="p-4">
              <div className="grid grid-cols-2 sm:grid-cols-3 md:grid-cols-4 lg:grid-cols-5 gap-4">
                {group.items.map((item) => (
                  <MediaCard
                    key={item.videoId}
                    item={item}
                    onClick={() => setSelectedVideoId(item.videoId)}
                  />
                ))}
              </div>
            </div>
          )}
-          <CoverImage
+        </section>
-            videoId={group.items[0]!.videoId}
+      );
-            title={group.title}
+    });
-            src={group.imageUrl}
+  }
            className="w-16 h-16 rounded-2xl shrink-0"
          />
          <div className="min-w-0 flex-1">
            <div className="flex items-center gap-2">
              <h3 className="text-base font-semibold text-ctp-text truncate">
                {group.title}
              </h3>
            </div>
            {group.subtitle ? (
              <div className="text-xs text-ctp-overlay1 truncate mt-1">{group.subtitle}</div>
            ) : null}
            <div className="text-xs text-ctp-overlay2 mt-2">
              {group.items.length} video{group.items.length !== 1 ? 's' : ''} ·{' '}
              {formatDuration(group.totalActiveMs)} · {formatNumber(group.totalCards)} cards
            </div>
          </div>
        </button>
        {!isCollapsed && (
          <div id={`group-body-${group.key}`} className="p-4">
            <div className="grid grid-cols-2 sm:grid-cols-3 md:grid-cols-4 lg:grid-cols-5 gap-4">
              {group.items.map((item) => (
                <MediaCard
                  key={item.videoId}
                  item={item}
                  onClick={() => setSelectedVideoId(item.videoId)}
                />
              ))}
            </div>
          </div>
        )}
      </section>
    );
  })}
  ```
  **Watch out:** the previous header had a clickable `<a>` for the channel URL. Wrapping the whole header in a `<button>` makes nested anchors invalid. The simplest fix: drop the channel URL link from inside the header (it's still reachable from the individual `MediaCard`s), or move it to a separate row outside the button. Choose the first — minimum visual disruption.
@@ -906,6 +919,7 @@
 ## Task 8: Session grouping helper
 **Files:**
 - Create: `stats/src/lib/session-grouping.ts`
 - Create: `stats/src/lib/session-grouping.test.ts`
@@ -1012,7 +1026,9 @@
    for (const session of sessions) {
      const hasVideoId =
-        typeof session.videoId === 'number' && Number.isFinite(session.videoId) && session.videoId > 0;
+        typeof session.videoId === 'number' &&
        Number.isFinite(session.videoId) &&
        session.videoId > 0;
      const key = hasVideoId ? `v-${session.videoId}` : `s-${session.sessionId}`;
      const existing = byVideo.get(key);
      if (existing) {
@@ -1066,6 +1082,7 @@
 ## Task 9: Sessions tab — episode rollup UI
 **Files:**
 - Modify: `stats/src/components/sessions/SessionsTab.tsx`
 - Modify: `stats/src/lib/delete-confirm.ts` (add `confirmBucketDelete`)
 - Modify: `stats/src/lib/delete-confirm.test.ts`
@@ -1161,114 +1178,120 @@
  Skeleton:
  ```tsx
-  {Array.from(groups.entries()).map(([dayLabel, daySessions]) => {
+  {
-    const buckets = groupSessionsByVideo(daySessions);
+    Array.from(groups.entries()).map(([dayLabel, daySessions]) => {
-    return (
+      const buckets = groupSessionsByVideo(daySessions);
-      <div key={dayLabel}>
+      return (
-        <div className="flex items-center gap-3 mb-2">
+        <div key={dayLabel}>
-          <h3 className="text-xs font-semibold text-ctp-overlay2 uppercase tracking-widest shrink-0">
+          <div className="flex items-center gap-3 mb-2">
-            {dayLabel}
+            <h3 className="text-xs font-semibold text-ctp-overlay2 uppercase tracking-widest shrink-0">
-          </h3>
+              {dayLabel}
-          <div className="flex-1 h-px bg-gradient-to-r from-ctp-surface1 to-transparent" />
+            </h3>
-        </div>
+            <div className="flex-1 h-px bg-gradient-to-r from-ctp-surface1 to-transparent" />
-        <div className="space-y-2">
+          </div>
-          {buckets.map((bucket) => {
+          <div className="space-y-2">
-            if (bucket.sessions.length === 1) {
+            {buckets.map((bucket) => {
-              const s = bucket.sessions[0]!;
+              if (bucket.sessions.length === 1) {
-              const detailsId = `session-details-${s.sessionId}`;
+                const s = bucket.sessions[0]!;
                const detailsId = `session-details-${s.sessionId}`;
                return (
                  <div key={bucket.key}>
                    <SessionRow
                      session={s}
                      isExpanded={expandedId === s.sessionId}
                      detailsId={detailsId}
                      onToggle={() =>
                        setExpandedId(expandedId === s.sessionId ? null : s.sessionId)
                      }
                      onDelete={() => void handleDeleteSession(s)}
                      deleteDisabled={deletingSessionId === s.sessionId}
                      onNavigateToMediaDetail={onNavigateToMediaDetail}
                    />
                    {expandedId === s.sessionId && (
                      <div id={detailsId}>
                        <SessionDetail session={s} />
                      </div>
                    )}
                  </div>
                );
              }
              const isOpen = expandedBuckets.has(bucket.key);
              return (
-                <div key={bucket.key}>
+                <div
-                  <SessionRow
+                  key={bucket.key}
-                    session={s}
+                  className="rounded-lg border border-ctp-surface1 bg-ctp-surface0/40"
-                    isExpanded={expandedId === s.sessionId}
+                >
-                    detailsId={detailsId}
+                  <button
-                    onToggle={() => setExpandedId(expandedId === s.sessionId ? null : s.sessionId)}
+                    type="button"
-                    onDelete={() => void handleDeleteSession(s)}
+                    onClick={() => toggleBucket(bucket.key)}
-                    deleteDisabled={deletingSessionId === s.sessionId}
+                    aria-expanded={isOpen}
-                    onNavigateToMediaDetail={onNavigateToMediaDetail}
+                    className="w-full flex items-center gap-3 px-3 py-2 text-left hover:bg-ctp-surface0/70 transition-colors"
-                  />
+                  >
-                  {expandedId === s.sessionId && (
+                    <span
-                    <div id={detailsId}>
+                      aria-hidden="true"
-                      <SessionDetail session={s} />
+                      className={`text-xs text-ctp-overlay2 transition-transform ${isOpen ? 'rotate-90' : ''}`}
                    >
                      {'\u25B6'}
                    </span>
                    <div className="min-w-0 flex-1">
                      <div className="text-sm text-ctp-text truncate">
                        {bucket.representativeSession.canonicalTitle ?? 'Unknown Episode'}
                      </div>
                      <div className="text-xs text-ctp-overlay2">
                        {bucket.sessions.length} sessions · {formatDuration(bucket.totalActiveMs)} ·{' '}
                        {bucket.totalCardsMined} cards
                      </div>
                    </div>
                    <button
                      type="button"
                      onClick={(e) => {
                        e.stopPropagation();
                        void handleDeleteBucket(bucket);
                      }}
                      className="text-[10px] text-ctp-red/70 hover:text-ctp-red px-1.5 py-0.5 rounded hover:bg-ctp-red/10 transition-colors"
                      title="Delete all sessions in this group"
                    >
                      Delete
                    </button>
                  </button>
                  {isOpen && (
                    <div className="pl-8 pr-2 pb-2 space-y-2">
                      {bucket.sessions.map((s) => {
                        const detailsId = `session-details-${s.sessionId}`;
                        return (
                          <div key={s.sessionId}>
                            <SessionRow
                              session={s}
                              isExpanded={expandedId === s.sessionId}
                              detailsId={detailsId}
                              onToggle={() =>
                                setExpandedId(expandedId === s.sessionId ? null : s.sessionId)
                              }
                              onDelete={() => void handleDeleteSession(s)}
                              deleteDisabled={deletingSessionId === s.sessionId}
                              onNavigateToMediaDetail={onNavigateToMediaDetail}
                            />
                            {expandedId === s.sessionId && (
                              <div id={detailsId}>
                                <SessionDetail session={s} />
                              </div>
                            )}
                          </div>
                        );
                      })}
                    </div>
                  )}
                </div>
              );
-            }
+            })}
-            const isOpen = expandedBuckets.has(bucket.key);
+          </div>
            return (
              <div key={bucket.key} className="rounded-lg border border-ctp-surface1 bg-ctp-surface0/40">
                <button
                  type="button"
                  onClick={() => toggleBucket(bucket.key)}
                  aria-expanded={isOpen}
                  className="w-full flex items-center gap-3 px-3 py-2 text-left hover:bg-ctp-surface0/70 transition-colors"
                >
                  <span
                    aria-hidden="true"
                    className={`text-xs text-ctp-overlay2 transition-transform ${isOpen ? 'rotate-90' : ''}`}
                  >
                    {'\u25B6'}
                  </span>
                  <div className="min-w-0 flex-1">
                    <div className="text-sm text-ctp-text truncate">
                      {bucket.representativeSession.canonicalTitle ?? 'Unknown Episode'}
                    </div>
                    <div className="text-xs text-ctp-overlay2">
                      {bucket.sessions.length} sessions ·{' '}
                      {formatDuration(bucket.totalActiveMs)} ·{' '}
                      {bucket.totalCardsMined} cards
                    </div>
                  </div>
                  <button
                    type="button"
                    onClick={(e) => {
                      e.stopPropagation();
                      void handleDeleteBucket(bucket);
                    }}
                    className="text-[10px] text-ctp-red/70 hover:text-ctp-red px-1.5 py-0.5 rounded hover:bg-ctp-red/10 transition-colors"
                    title="Delete all sessions in this group"
                  >
                    Delete
                  </button>
                </button>
                {isOpen && (
                  <div className="pl-8 pr-2 pb-2 space-y-2">
                    {bucket.sessions.map((s) => {
                      const detailsId = `session-details-${s.sessionId}`;
                      return (
                        <div key={s.sessionId}>
                          <SessionRow
                            session={s}
                            isExpanded={expandedId === s.sessionId}
                            detailsId={detailsId}
                            onToggle={() =>
                              setExpandedId(expandedId === s.sessionId ? null : s.sessionId)
                            }
                            onDelete={() => void handleDeleteSession(s)}
                            deleteDisabled={deletingSessionId === s.sessionId}
                            onNavigateToMediaDetail={onNavigateToMediaDetail}
                          />
                          {expandedId === s.sessionId && (
                            <div id={detailsId}>
                              <SessionDetail session={s} />
                            </div>
                          )}
                        </div>
                      );
                    })}
                  </div>
                )}
              </div>
            );
          })}
        </div>
-      </div>
+      );
-    );
+    });
-  })}
+  }
  ```
-  **Note on nested buttons:** the bucket header is a `<button>` and contains a "Delete" `<button>`. HTML disallows nested buttons. Switch the outer element to a `<div role="button" tabIndex={0} onClick={...} onKeyDown={...}>` instead, OR put the delete button in a wrapping flex container *outside* the toggle button. Pick the second option — it's accessible without role gymnastics:
+  **Note on nested buttons:** the bucket header is a `<button>` and contains a "Delete" `<button>`. HTML disallows nested buttons. Switch the outer element to a `<div role="button" tabIndex={0} onClick={...} onKeyDown={...}>` instead, OR put the delete button in a wrapping flex container _outside_ the toggle button. Pick the second option — it's accessible without role gymnastics:
  ```tsx
  <div className="flex items-center">
@@ -1281,7 +1304,7 @@
  </div>
  ```
-  Use that pattern in the actual implementation. The skeleton above shows the *intent*; the final code must have sibling buttons, not nested ones.
+  Use that pattern in the actual implementation. The skeleton above shows the _intent_; the final code must have sibling buttons, not nested ones.
  Add `handleDeleteBucket`:
@@ -1336,6 +1359,7 @@
 ## Task 10: Chart clarity pass
 **Files:**
 - Modify: `stats/src/lib/chart-theme.ts`
 - Modify: `stats/src/components/trends/TrendChart.tsx`
 - Modify: `stats/src/components/trends/StackedTrendChart.tsx`
@@ -1528,6 +1552,7 @@
 ## Task 11: Changelog fragment
 **Files:**
 - Create: `changes/2026-04-09-stats-dashboard-feedback-pass.md`
 - [ ] **Step 1: Read the existing changelog format**
@@ -46,16 +46,16 @@ Add to `stats/src/types/stats.ts` and the backend query module:
 ```ts
 type LibrarySummaryRow = {
-  title: string;              // display title — anime series, YouTube video title, etc.
+  title: string; // display title — anime series, YouTube video title, etc.
-  watchTimeMin: number;       // sum(total_active_min) across the window
+  watchTimeMin: number; // sum(total_active_min) across the window
-  videos: number;             // distinct video_id count
+  videos: number; // distinct video_id count
-  sessions: number;           // session count from imm_sessions
+  sessions: number; // session count from imm_sessions
-  cards: number;              // sum(total_cards)
+  cards: number; // sum(total_cards)
-  words: number;              // sum(total_tokens_seen)
+  words: number; // sum(total_tokens_seen)
-  lookups: number;            // sum(lookup_count) from imm_sessions
+  lookups: number; // sum(lookup_count) from imm_sessions
  lookupsPerHundred: number | null; // lookups / words * 100, null when words == 0
-  firstWatched: number;       // min(rollup_day) as epoch day, within the window
+  firstWatched: number; // min(rollup_day) as epoch day, within the window
-  lastWatched: number;        // max(rollup_day) as epoch day, within the window
+  lastWatched: number; // max(rollup_day) as epoch day, within the window
 };
 ```
@@ -21,6 +21,7 @@ Out of scope for this pass: English-token ingestion cleanup and Overview stat-ca
 ## Files touched (inventory)
 Dashboard (`stats/src/`):
 - `components/library/LibraryTab.tsx` — collapsible groups (item 1).
 - `components/library/MediaDetailView.tsx`, `components/library/MediaHeader.tsx` — delete-episode action (item 4).
 - `components/sessions/SessionsTab.tsx`, `components/library/MediaSessionList.tsx` — episode rollup (item 2).
@@ -31,6 +32,7 @@ Dashboard (`stats/src/`):
 - New file: `stats/src/lib/session-grouping.ts` + `session-grouping.test.ts`.
 Backend (`src/core/services/`):
 - `immersion-tracker/query-trends.ts` — extend `TrendRange` and `TREND_DAY_LIMITS` (item 3).
 - `immersion-tracker/__tests__/query.test.ts` — 365d coverage (item 3).
 - `stats-server.ts` — passthrough if range validation lives here (check before editing).
@@ -93,9 +95,10 @@ Within each day, sessions with the same `videoId` collapse into one parent row s
 ### Implementation
 - New helper in `stats/src/lib/session-grouping.ts`:
  ```ts
  export interface SessionBucket {
-    key: string;              // videoId as string, or `s-${sessionId}` for singletons
+    key: string; // videoId as string, or `s-${sessionId}` for singletons
    videoId: number | null;
    sessions: SessionSummary[];
    totalActiveMs: number;
@@ -104,6 +107,7 @@ Within each day, sessions with the same `videoId` collapse into one parent row s
  }
  export function groupSessionsByVideo(sessions: SessionSummary[]): SessionBucket[];
  ```
  Sessions missing a `videoId` become singleton buckets.
 - `SessionsTab.tsx`: after day grouping, pipe each `daySessions` through `groupSessionsByVideo`. Render each bucket:
@@ -132,11 +136,13 @@ Within each day, sessions with the same `videoId` collapse into one parent row s
 ### Backend
 `src/core/services/immersion-tracker/query-trends.ts`:
 - `type TrendRange = '7d' | '30d' | '90d' | '365d' | 'all';`
 - Add `'365d': 365` to `TREND_DAY_LIMITS`.
 - `getTrendDayLimit` picks up the new key automatically because of the `Exclude<TrendRange, 'all'>` generic.
 `src/core/services/stats-server.ts`:
 - Search for any hardcoded range validation (e.g. allow-list in the trends route handler) and extend it.
 ### Frontend
@@ -202,11 +208,7 @@ Merge Word + Reading into a single column titled "Word". Reading sits immediatel
  ```tsx
  <td className="py-1.5 pr-3">
    <span className="text-ctp-text font-medium">{w.headword}</span>
-    {reading && (
+    {reading && <span className="text-ctp-subtext0 text-xs ml-1.5">【{reading}】</span>}
      <span className="text-ctp-subtext0 text-xs ml-1.5">
        【{reading}】
      </span>
    )}
  </td>
  ```
  where `reading = fullReading(w.headword, w.reading)` and differs from `headword`.
@@ -230,6 +232,7 @@ Merge Word + Reading into a single column titled "Word". Reading sits immediatel
 ### Target behavior
 After `ankiNotesInfo` resolves:
 - Drop `noteId`s that are not in the resolved map.
 - Drop `cardEvents` whose `noteIds` list was non-empty but is now empty after filtering.
 - Card events with a positive `cardsDelta` but no `noteIds` (legacy rollup path) still render as `+N cards` — we have no way to cross-reference them, so leave them alone.
@@ -255,6 +258,7 @@ After `ankiNotesInfo` resolves:
 ### Current behavior
 `TrendChart.tsx`, `StackedTrendChart.tsx`, and `WatchTimeChart.tsx` render Recharts components with:
 - No `CartesianGrid` → no horizontal reference lines.
 - 9px axis ticks → borderline unreadable.
 - Height 120 → cramped.
@@ -270,6 +274,7 @@ All three charts share a theme, have horizontal gridlines, readable ticks, and s
 ### Implementation
 Extend `stats/src/lib/chart-theme.ts` with the additional shared defaults (keeping the existing `CHART_THEME` export intact so current consumers don't break):
 ```ts
 export const CHART_THEME = {
  tick: '#a5adcb',
@@ -299,6 +304,7 @@ export const TOOLTIP_CONTENT_STYLE = {
 ```
 Apply to each chart:
 - Import `CartesianGrid` from recharts.
 - Insert `<CartesianGrid stroke={CHART_THEME.grid} {...CHART_DEFAULTS.grid} />` inside each chart container.
 - `<XAxis tick={{ fontSize: CHART_DEFAULTS.tickFontSize, fill: CHART_THEME.tick }} />` and equivalent `YAxis`.
@@ -16,6 +16,10 @@ type AppCommandDeps = {
    appPath: string,
    logLevel: LauncherCommandContext['args']['logLevel'],
  ) => void;
  launchAnimeBrowserDetached: (
    appPath: string,
    logLevel: LauncherCommandContext['args']['logLevel'],
  ) => void;
 };
 const defaultAppCommandDeps: AppCommandDeps = {
@@ -23,6 +27,8 @@ const defaultAppCommandDeps: AppCommandDeps = {
  launchSyncUiDetached: (appPath, logLevel) =>
    launchAppCommandDetached(appPath, ['--sync-window'], logLevel, 'sync-ui'),
  launchAppBackgroundDetached,
  launchAnimeBrowserDetached: (appPath, logLevel) =>
    launchAppCommandDetached(appPath, ['--anime'], logLevel, 'anime'),
 };
 export function runAppPassthroughCommand(
@@ -37,6 +43,11 @@ export function runAppPassthroughCommand(
    deps.runAppCommandWithInherit(appPath, ['--settings']);
    return true;
  }
  if (args.animeBrowser) {
    // Detached: the browser window is long-lived and owns the bridge process.
    deps.launchAnimeBrowserDetached(appPath, args.logLevel);
    return true;
  }
  if (args.syncUi) {
    deps.launchSyncUiDetached(appPath, args.logLevel);
    return true;
@@ -207,6 +207,7 @@ test('app command starts default macOS background app detached from launcher', (
      calls.push('attached');
    },
    launchSyncUiDetached: () => calls.push('sync-ui'),
    launchAnimeBrowserDetached: () => {},
    launchAppBackgroundDetached: (appPath, logLevel) => {
      calls.push(`detached:${appPath}:${logLevel}`);
    },
@@ -227,6 +228,7 @@ test('app command starts default Linux background app detached from launcher', (
      calls.push('attached');
    },
    launchSyncUiDetached: () => calls.push('sync-ui'),
    launchAnimeBrowserDetached: () => {},
    launchAppBackgroundDetached: (appPath, logLevel) => {
      calls.push(`detached:${appPath}:${logLevel}`);
    },
@@ -248,6 +250,7 @@ test('app command keeps explicit passthrough args attached', () => {
      forwarded.push(appArgs);
    },
    launchSyncUiDetached: () => detached.push('sync-ui'),
    launchAnimeBrowserDetached: () => {},
    launchAppBackgroundDetached: () => {
      detached.push('detached');
    },
@@ -266,6 +269,7 @@ test('sync UI command launches the app detached from the terminal', () => {
  const handled = runAppPassthroughCommand(context, {
    runAppCommandWithInherit: () => calls.push('piped'),
    launchSyncUiDetached: (appPath, logLevel) => calls.push(`sync-ui:${appPath}:${logLevel}`),
    launchAnimeBrowserDetached: () => calls.push('anime'),
    launchAppBackgroundDetached: () => calls.push('detached'),
  });
@@ -63,6 +63,7 @@ function createContext(): LauncherCommandContext {
      logsExport: false,
      version: false,
      settings: false,
      animeBrowser: false,
      configPath: false,
      configShow: false,
      mpvIdle: false,
@@ -120,6 +120,7 @@ test('applyInvocationsToArgs maps config and jellyfin invocation state', () => {
      logLevel: 'warn',
    },
    settingsInvocation: null,
    animeInvocation: null,
    mpvInvocation: null,
    appInvocation: null,
    dictionaryTriggered: false,
@@ -171,6 +172,7 @@ test('applyInvocationsToArgs maps settings invocation to settings window', () =>
    settingsInvocation: {
      logLevel: undefined,
    },
    animeInvocation: null,
    mpvInvocation: null,
    appInvocation: null,
    dictionaryTriggered: false,
@@ -215,6 +217,7 @@ test('applyInvocationsToArgs fails when config invocation has no action', () =>
        action: undefined,
      },
      settingsInvocation: null,
      animeInvocation: null,
      mpvInvocation: null,
      appInvocation: null,
      dictionaryTriggered: false,
@@ -257,6 +260,7 @@ test('applyInvocationsToArgs maps texthooker browser-open request', () => {
    jellyfinInvocation: null,
    configInvocation: null,
    settingsInvocation: null,
    animeInvocation: null,
    mpvInvocation: null,
    appInvocation: null,
    dictionaryTriggered: false,
@@ -168,6 +168,7 @@ export function createDefaultArgs(
    version: false,
    update: false,
    settings: false,
    animeBrowser: false,
    configPath: false,
    configShow: false,
    mpvIdle: false,
@@ -348,6 +349,12 @@ export function applyInvocationsToArgs(parsed: Args, invocations: CliInvocations
      );
  }
  if (invocations.animeInvocation) {
    if (invocations.animeInvocation.logLevel) {
      parsed.logLevel = parseLogLevel(invocations.animeInvocation.logLevel);
    }
    parsed.animeBrowser = true;
  }
  if (invocations.settingsInvocation) {
    if (invocations.settingsInvocation.logLevel) {
      parsed.logLevel = parseLogLevel(invocations.settingsInvocation.logLevel);
@@ -23,6 +23,7 @@ export interface CliInvocations {
  jellyfinInvocation: JellyfinInvocation | null;
  configInvocation: CommandActionInvocation | null;
  settingsInvocation: CommandActionInvocation | null;
  animeInvocation: CommandActionInvocation | null;
  mpvInvocation: CommandActionInvocation | null;
  appInvocation: { appArgs: string[] } | null;
  dictionaryTriggered: boolean;
@@ -102,6 +103,7 @@ function getTopLevelCommand(argv: string[]): { name: string; index: number } | n
    'doctor',
    'config',
    'settings',
    'anime',
    'mpv',
    'logs',
    'dictionary',
@@ -155,6 +157,7 @@ export function parseCliPrograms(
  let jellyfinInvocation: JellyfinInvocation | null = null;
  let configInvocation: CommandActionInvocation | null = null;
  let settingsInvocation: CommandActionInvocation | null = null;
  let animeInvocation: CommandActionInvocation | null = null;
  let mpvInvocation: CommandActionInvocation | null = null;
  let appInvocation: { appArgs: string[] } | null = null;
  let dictionaryTriggered = false;
@@ -415,6 +418,16 @@ export function parseCliPrograms(
      };
    });
  commandProgram
    .command('anime')
    .description('Open the anime browser window')
    .option('--log-level <level>', 'Log level')
    .action((options: Record<string, unknown>) => {
      animeInvocation = {
        logLevel: typeof options.logLevel === 'string' ? options.logLevel : undefined,
      };
    });
  commandProgram
    .command('mpv')
    .description('MPV helpers')
@@ -469,6 +482,7 @@ export function parseCliPrograms(
      jellyfinInvocation,
      configInvocation,
      settingsInvocation,
      animeInvocation,
      mpvInvocation,
      appInvocation,
      dictionaryTriggered,
@@ -57,6 +57,7 @@ function createArgs(): Args {
    logsExport: false,
    version: false,
    settings: false,
    animeBrowser: false,
    configPath: false,
    configShow: false,
    mpvIdle: false,
@@ -629,6 +629,7 @@ function makeArgs(overrides: Partial<Args> = {}): Args {
    logsExport: false,
    version: false,
    settings: false,
    animeBrowser: false,
    configPath: false,
    configShow: false,
    mpvIdle: false,
@@ -149,6 +149,7 @@ export interface Args {
  version: boolean;
  update?: boolean;
  settings: boolean;
  animeBrowser: boolean;
  configPath: boolean;
  configShow: boolean;
  mpvIdle: boolean;
@@ -2,7 +2,7 @@
  "name": "subminer",
  "productName": "SubMiner",
  "desktopName": "SubMiner.desktop",
-  "version": "0.19.0-beta.5",
+  "version": "0.19.0",
  "description": "All-in-one sentence mining overlay with AnkiConnect and dictionary integration",
  "packageManager": "bun@1.3.5",
  "main": "dist/main-entry.js",
@@ -21,10 +21,11 @@
    "build:launcher": "bun build ./launcher/main.ts --target=bun --packages=bundle --banner='#!/usr/bin/env bun' --outfile=dist/launcher/subminer",
    "build:stats": "cd stats && bun run build",
    "dev:stats": "cd stats && bun run dev",
-    "build": "bun run build:yomitan && bun run build:stats && tsc -p tsconfig.json && bun run build:renderer && bun run build:settings && bun run build:syncui && bun run build:launcher && bun run build:assets",
+    "build": "bun run build:yomitan && bun run build:stats && tsc -p tsconfig.json && bun run build:renderer && bun run build:settings && bun run build:syncui && bun run build:animeui && bun run build:launcher && bun run build:assets",
    "build:renderer": "esbuild src/renderer/renderer.ts --bundle --platform=browser --format=esm --target=es2022 --outfile=dist/renderer/renderer.js --sourcemap",
    "build:settings": "esbuild src/settings/settings.ts --bundle --platform=browser --format=esm --target=es2022 --outfile=dist/settings/settings.js --sourcemap",
    "build:syncui": "esbuild src/syncui/syncui.ts --bundle --platform=browser --format=esm --target=es2022 --outfile=dist/syncui/syncui.js --sourcemap && esbuild src/preload-syncui.ts --bundle --platform=node --format=cjs --target=node20 --external:electron --outfile=dist/preload-syncui.js --sourcemap",
    "build:animeui": "esbuild src/animeui/animeui.ts --bundle --platform=browser --format=esm --target=es2022 --outfile=dist/animeui/animeui.js --sourcemap && esbuild src/preload-animeui.ts --bundle --platform=node --format=cjs --target=node20 --external:electron --outfile=dist/preload-animeui.js --sourcemap",
    "changelog:build": "bun run scripts/build-changelog.ts build-release",
    "changelog:check": "bun run scripts/build-changelog.ts check",
    "changelog:docs": "bun run scripts/build-changelog.ts docs",
@@ -3,14 +3,33 @@ import assert from 'node:assert/strict';
 import fs from 'node:fs';
 import path from 'node:path';
-test('build:syncui bundles the sandboxed preload and keeps Electron external', () => {
+function buildScript(name: string): string {
  const packageJson = JSON.parse(
    fs.readFileSync(path.join(import.meta.dir, '..', 'package.json'), 'utf8'),
  ) as { scripts: Record<string, string> };
-  const command = packageJson.scripts['build:syncui'] ?? '';
+  return packageJson.scripts[name] ?? '';
 }
 test('build:syncui bundles the sandboxed preload and keeps Electron external', () => {
  const command = buildScript('build:syncui');
  assert.match(command, /src\/preload-syncui\.ts/);
  assert.match(command, /--bundle/);
  assert.match(command, /--external:electron/);
  assert.match(command, /--outfile=dist\/preload-syncui\.js/);
 });
 test('build:animeui bundles the sandboxed preload and keeps Electron external', () => {
  const command = buildScript('build:animeui');
  // The preload imports IPC_CHANNELS, so it must be bundled rather than
  // emitted by plain tsc with a relative runtime require.
  assert.match(command, /src\/preload-animeui\.ts/);
  assert.match(command, /--bundle/);
  assert.match(command, /--external:electron/);
  assert.match(command, /--outfile=dist\/preload-animeui\.js/);
 });
 test('build:animeui runs as part of the top-level build', () => {
  assert.match(buildScript('build'), /bun run build:animeui/);
 });
@@ -11,6 +11,8 @@ const settingsSourceDir = path.join(repoRoot, 'src', 'settings');
 const settingsOutputDir = path.join(repoRoot, 'dist', 'settings');
 const syncUiSourceDir = path.join(repoRoot, 'src', 'syncui');
 const syncUiOutputDir = path.join(repoRoot, 'dist', 'syncui');
 const animeUiSourceDir = path.join(repoRoot, 'src', 'animeui');
 const animeUiOutputDir = path.join(repoRoot, 'dist', 'animeui');
 const scriptsOutputDir = path.join(repoRoot, 'dist', 'scripts');
 const macosHelperSourcePath = path.join(scriptDir, 'get-mpv-window-macos.swift');
 const macosHelperBinaryPath = path.join(scriptsOutputDir, 'get-mpv-window-macos');
@@ -47,6 +49,10 @@ function copySyncUiAssets() {
  copyAssets(syncUiSourceDir, syncUiOutputDir, 'syncui');
 }
 function copyAnimeUiAssets() {
  copyAssets(animeUiSourceDir, animeUiOutputDir, 'animeui');
 }
 function fallbackToMacosSource() {
  copyFile(macosHelperSourcePath, macosHelperSourceCopyPath);
  process.stdout.write(`Staged macOS helper source fallback: ${macosHelperSourceCopyPath}\n`);
@@ -90,6 +96,7 @@ function main() {
  copyRendererAssets();
  copySettingsAssets();
  copySyncUiAssets();
  copyAnimeUiAssets();
  buildMacosHelper();
 }
@@ -0,0 +1,166 @@
 import test from 'node:test';
 import assert from 'node:assert/strict';
 import { AnimeBridgeClient, BridgeExtensionError } from './bridge-client';
 import { BRIDGE_CONTEXT_KEY } from './types';
 const EXTENSION_ID = 'a'.repeat(64);
 const APK_BASE64 = 'QVBLLUJZVEVT';
 const source = {
  fingerprint: 'sha-1',
  loadApkBase64: async () => APK_BASE64,
  sourceId: 'source-1',
 };
 interface Recorded {
  url: string;
  body: Record<string, unknown>;
 }
 function stubFetch(responder: (call: Recorded, index: number) => Response): {
  fetchImpl: typeof fetch;
  calls: Recorded[];
 } {
  const calls: Recorded[] = [];
  const fetchImpl = (async (input: RequestInfo | URL, init?: RequestInit) => {
    const call: Recorded = {
      url: String(input),
      body: init?.body ? (JSON.parse(String(init.body)) as Record<string, unknown>) : {},
    };
    calls.push(call);
    return responder(call, calls.length - 1);
  }) as typeof fetch;
  return { fetchImpl, calls };
 }
 function jsonResponse(body: unknown, extensionId?: string): Response {
  const headers = new Headers({ 'Content-Type': 'application/json' });
  if (extensionId) headers.set('x-mangatan-extension-id', extensionId);
  return new Response(JSON.stringify(body), { status: 200, headers });
 }
 test('isReady requires every capability the client depends on', async () => {
  const ready = new AnimeBridgeClient({
    baseUrl: 'http://127.0.0.1:9',
    fetchImpl: stubFetch(() =>
      jsonResponse({ mangatanMihonBridge: 1, sourceFactory: true, preferenceCallbacks: true }),
    ).fetchImpl,
  });
  assert.equal(await ready.isReady(), true);
  const partial = new AnimeBridgeClient({
    baseUrl: 'http://127.0.0.1:9',
    fetchImpl: stubFetch(() => jsonResponse({ mangatanMihonBridge: 1, sourceFactory: true }))
      .fetchImpl,
  });
  assert.equal(await partial.isReady(), false);
 });
 test('isReady reports false instead of throwing when the bridge is down', async () => {
  const client = new AnimeBridgeClient({
    baseUrl: 'http://127.0.0.1:9',
    fetchImpl: (async () => {
      throw new Error('ECONNREFUSED');
    }) as typeof fetch,
  });
  assert.equal(await client.isReady(), false);
 });
 test('getVideoList posts the APK and episode url with a bridge context preference', async () => {
  const { fetchImpl, calls } = stubFetch(() => jsonResponse([{ videoUrl: 'http://x/video/t' }]));
  const client = new AnimeBridgeClient({ baseUrl: 'http://127.0.0.1:9/', fetchImpl });
  const videos = await client.getVideoList(source, 'https://origin.example/ep/1');
  assert.equal(calls[0]?.url, 'http://127.0.0.1:9/dalvik');
  assert.equal(calls[0]?.body.method, 'getVideoList');
  assert.deepEqual(calls[0]?.body.episodeData, { url: 'https://origin.example/ep/1' });
  assert.equal(calls[0]?.body.data, APK_BASE64);
  assert.deepEqual(calls[0]?.body.preferences, [{ key: BRIDGE_CONTEXT_KEY, sourceId: 'source-1' }]);
  assert.equal(videos.length, 1);
 });
 test('a cached extension id replaces the APK upload on later calls', async () => {
  const { fetchImpl, calls } = stubFetch(() => jsonResponse([], EXTENSION_ID));
  const client = new AnimeBridgeClient({ baseUrl: 'http://127.0.0.1:9', fetchImpl });
  await client.getVideoList(source, 'https://origin.example/ep/1');
  await client.getVideoList(source, 'https://origin.example/ep/2');
  assert.equal(calls[0]?.body.data, APK_BASE64);
  assert.equal(calls[0]?.body.extensionId, undefined);
  assert.equal(calls[1]?.body.data, undefined);
  assert.equal(calls[1]?.body.extensionId, EXTENSION_ID);
 });
 test('an upgraded APK re-uploads instead of reusing the previous extension id', async () => {
  const { fetchImpl, calls } = stubFetch(() => jsonResponse([], EXTENSION_ID));
  const client = new AnimeBridgeClient({ baseUrl: 'http://127.0.0.1:9', fetchImpl });
  await client.getVideoList(source, 'https://origin.example/ep/1');
  // Same source id, new build in the same file: the id cache must miss.
  const upgraded = { ...source, fingerprint: 'sha-2', loadApkBase64: async () => 'TkVXLUFQSw==' };
  await client.getVideoList(upgraded, 'https://origin.example/ep/2');
  assert.equal(calls[1]?.body.extensionId, undefined);
  assert.equal(calls[1]?.body.data, 'TkVXLUFQSw==');
 });
 test('a 409 re-uploads the APK once and succeeds', async () => {
  const { fetchImpl, calls } = stubFetch((call, index) => {
    if (index === 0) return jsonResponse([], EXTENSION_ID);
    // Cache evicted: reject the id-only call, accept the re-upload.
    if (call.body.extensionId !== undefined) return new Response('', { status: 409 });
    return jsonResponse([{ videoUrl: 'http://x/video/t' }], EXTENSION_ID);
  });
  const client = new AnimeBridgeClient({ baseUrl: 'http://127.0.0.1:9', fetchImpl });
  await client.getVideoList(source, 'https://origin.example/ep/1');
  const videos = await client.getVideoList(source, 'https://origin.example/ep/2');
  assert.equal(calls.length, 3);
  assert.equal(calls[1]?.body.extensionId, EXTENSION_ID);
  assert.equal(calls[2]?.body.data, APK_BASE64);
  assert.equal(videos.length, 1);
 });
 test('an error body on a 200 response raises BridgeExtensionError with the code', async () => {
  const { fetchImpl } = stubFetch(() => jsonResponse({ error: 'Cloudflare challenge', code: 403 }));
  const client = new AnimeBridgeClient({ baseUrl: 'http://127.0.0.1:9', fetchImpl });
  await assert.rejects(
    () => client.getVideoList(source, 'https://origin.example/ep/1'),
    (error: unknown) => {
      assert.ok(error instanceof BridgeExtensionError);
      assert.equal(error.code, 403);
      assert.match(error.message, /Cloudflare challenge/);
      return true;
    },
  );
 });
 test('searchAnime sends a 1-based page and returns the page payload', async () => {
  const { fetchImpl, calls } = stubFetch(() =>
    jsonResponse({ animes: [{ title: 'Example' }], hasNextPage: true }),
  );
  const client = new AnimeBridgeClient({ baseUrl: 'http://127.0.0.1:9', fetchImpl });
  const page = await client.searchAnime(source, 'example');
  assert.equal(calls[0]?.body.method, 'getSearchAnime');
  assert.equal(calls[0]?.body.page, 1);
  assert.equal(calls[0]?.body.search, 'example');
  assert.deepEqual(calls[0]?.body.filterList, []);
  assert.equal(page.hasNextPage, true);
  assert.equal(page.animes?.length, 1);
 });
 test('getEpisodeList wraps the anime url in animeData', async () => {
  const { fetchImpl, calls } = stubFetch(() => jsonResponse([{ name: 'Episode 1', url: '/ep/1' }]));
  const client = new AnimeBridgeClient({ baseUrl: 'http://127.0.0.1:9', fetchImpl });
  const episodes = await client.getEpisodeList(source, 'https://origin.example/anime/1');
  assert.equal(calls[0]?.body.method, 'getEpisodeList');
  assert.deepEqual(calls[0]?.body.animeData, { url: 'https://origin.example/anime/1' });
  assert.equal(episodes[0]?.name, 'Episode 1');
 });
@@ -0,0 +1,241 @@
 import { BRIDGE_CONTEXT_KEY } from './types';
 import type {
  BridgeAnime,
  BridgeAnimePage,
  BridgeCapabilities,
  BridgeEpisode,
  BridgePreference,
  BridgeSourceDescriptor,
  BridgeVideo,
 } from './types';
 const EXTENSION_ID_HEADER = 'x-mangatan-extension-id';
 const EXTENSION_ID_PATTERN = /^[0-9a-f]{64}$/;
 export interface BridgeSource {
  /**
   * Identity of the APK's contents. Keys the extension-id cache, so an upgraded
   * APK is re-uploaded instead of reusing the previous build's id.
   */
  fingerprint: string;
  /**
   * Reads and base64-encodes the APK. Called only when the bridge actually
   * needs the bytes, so multi-megabyte payloads are not held on the heap.
   */
  loadApkBase64: () => Promise<string>;
  /** Selects one source inside a multi-source (SourceFactory) APK. */
  sourceId?: string;
  preferences?: BridgePreference[];
 }
 export interface BridgeClientOptions {
  /** Loopback base URL of the running bridge, e.g. `http://127.0.0.1:53112`. */
  baseUrl: string;
  fetchImpl?: typeof fetch;
  /**
   * Per-request deadline. Node's `fetch` has none, so a sidecar that accepts
   * the socket and then stalls would leave every call pending forever.
   */
  requestTimeoutMs?: number;
 }
 /** Extension calls can be slow (a source may scrape several pages). */
 const DEFAULT_REQUEST_TIMEOUT_MS = 60_000;
 /** The readiness probe is a local health check; it should answer at once. */
 const CAPABILITIES_TIMEOUT_MS = 5_000;
 /** The bridge reports extension failures as HTTP 200 with an error body. */
 export class BridgeExtensionError extends Error {
  readonly code?: number;
  constructor(message: string, code?: number) {
    super(message);
    this.name = 'BridgeExtensionError';
    this.code = code;
  }
 }
 /**
 * Client for the M-Extension-Server `/dalvik` RPC endpoint.
 *
 * The server caches uploaded APKs and returns a content hash, letting
 * subsequent calls send that id instead of re-uploading megabytes of base64.
 * A 409 means the cache was evicted, so the APK is resent once.
 */
 export class AnimeBridgeClient {
  private readonly baseUrl: string;
  private readonly fetchImpl: typeof fetch;
  private readonly requestTimeoutMs: number;
  private readonly extensionIds = new Map<string, string>();
  constructor(options: BridgeClientOptions) {
    this.baseUrl = options.baseUrl.replace(/\/+$/, '');
    this.fetchImpl = options.fetchImpl ?? fetch;
    this.requestTimeoutMs = options.requestTimeoutMs ?? DEFAULT_REQUEST_TIMEOUT_MS;
  }
  async getCapabilities(): Promise<BridgeCapabilities> {
    const response = await this.fetchImpl(`${this.baseUrl}/capabilities`, {
      signal: AbortSignal.timeout(Math.min(CAPABILITIES_TIMEOUT_MS, this.requestTimeoutMs)),
    });
    if (!response.ok) {
      throw new Error(`Anime bridge capabilities check failed (${response.status}).`);
    }
    return (await response.json()) as BridgeCapabilities;
  }
  /** True once the bridge is up and reports the features this client needs. */
  async isReady(): Promise<boolean> {
    try {
      const capabilities = await this.getCapabilities();
      return (
        capabilities.mangatanMihonBridge === 1 &&
        capabilities.sourceFactory === true &&
        capabilities.preferenceCallbacks === true
      );
    } catch {
      return false;
    }
  }
  async searchAnime(
    source: BridgeSource,
    query: string,
    page = 1,
    filterList: unknown[] = [],
  ): Promise<BridgeAnimePage> {
    return this.call<BridgeAnimePage>(source, 'getSearchAnime', {
      page,
      search: query,
      filterList,
    });
  }
  /**
   * List the sources an extension APK provides. A single APK may expose many
   * (a SourceFactory), so this is how a package becomes selectable entries.
   */
  async listAnimeSources(source: BridgeSource): Promise<BridgeSourceDescriptor[]> {
    return this.call<BridgeSourceDescriptor[]>(source, 'sourcesAnime', {});
  }
  /** The extension's own settings schema, with current values. */
  async getSourcePreferences(source: BridgeSource): Promise<BridgePreference[]> {
    return this.call<BridgePreference[]>(source, 'preferencesAnime', {});
  }
  /**
   * Commit a preference change. The whole array is sent back with the edited
   * entry, and `changedPreferenceKey` tells the extension which one moved so it
   * can react (the Jellyfin source logs in when the address or password lands).
   * Returns the extension's refreshed schema.
   */
  async setSourcePreference(
    source: BridgeSource,
    changedPreferenceKey: string,
  ): Promise<BridgePreference[]> {
    return this.call<BridgePreference[]>(source, 'setPreferenceAnime', {}, changedPreferenceKey);
  }
  /** Full metadata for one anime: description, cover art, genres, status. */
  async getAnimeDetails(source: BridgeSource, animeUrl: string): Promise<BridgeAnime> {
    return this.call<BridgeAnime>(source, 'getDetailsAnime', {
      animeData: { url: animeUrl },
    });
  }
  async getPopularAnime(source: BridgeSource, page = 1): Promise<BridgeAnimePage> {
    return this.call<BridgeAnimePage>(source, 'getPopularAnime', { page });
  }
  async getEpisodeList(source: BridgeSource, animeUrl: string): Promise<BridgeEpisode[]> {
    return this.call<BridgeEpisode[]>(source, 'getEpisodeList', {
      animeData: { url: animeUrl },
    });
  }
  async getVideoList(source: BridgeSource, episodeUrl: string): Promise<BridgeVideo[]> {
    return this.call<BridgeVideo[]>(source, 'getVideoList', {
      episodeData: { url: episodeUrl },
    });
  }
  private buildPreferences(
    source: BridgeSource,
    changedPreferenceKey?: string,
  ): BridgePreference[] {
    const context: BridgePreference = { key: BRIDGE_CONTEXT_KEY };
    if (source.sourceId !== undefined) context.sourceId = source.sourceId;
    if (changedPreferenceKey !== undefined) context.changedPreferenceKey = changedPreferenceKey;
    return [...(source.preferences ?? []), context];
  }
  private async call<T>(
    source: BridgeSource,
    method: string,
    extras: Record<string, unknown>,
    changedPreferenceKey?: string,
  ): Promise<T> {
    // Keyed by APK contents, not by source id: an in-place upgrade keeps the
    // same source id, and reusing its cached extension id would silently run
    // the previous build (the bridge has no reason to answer 409).
    const cacheKey = `${source.fingerprint}:${source.sourceId ?? ''}`;
    const cachedId = this.extensionIds.get(cacheKey);
    let response = await this.post(method, extras, source, cachedId, changedPreferenceKey);
    if (response.status === 409 && cachedId !== undefined) {
      // Server evicted the cached APK; upload it again.
      this.extensionIds.delete(cacheKey);
      response = await this.post(method, extras, source, undefined, changedPreferenceKey);
    }
    if (!response.ok) {
      throw new Error(`Anime bridge ${method} failed (${response.status}).`);
    }
    const returnedId = response.headers.get(EXTENSION_ID_HEADER)?.trim();
    if (returnedId && EXTENSION_ID_PATTERN.test(returnedId)) {
      this.extensionIds.set(cacheKey, returnedId);
    }
    const body = (await response.json()) as T;
    assertNoExtensionError(body, method);
    return body;
  }
  private async post(
    method: string,
    extras: Record<string, unknown>,
    source: BridgeSource,
    extensionId: string | undefined,
    changedPreferenceKey?: string,
  ): Promise<Response> {
    const payload: Record<string, unknown> = {
      method,
      ...extras,
      preferences: this.buildPreferences(source, changedPreferenceKey),
      ...(extensionId === undefined ? { data: await source.loadApkBase64() } : { extensionId }),
    };
    return this.fetchImpl(`${this.baseUrl}/dalvik`, {
      method: 'POST',
      headers: {
        'Content-Type': 'application/json; charset=utf-8',
        Accept: 'application/json',
      },
      body: JSON.stringify(payload),
      signal: AbortSignal.timeout(this.requestTimeoutMs),
    });
  }
 }
 function assertNoExtensionError(body: unknown, method: string): void {
  if (body === null || typeof body !== 'object' || Array.isArray(body)) return;
  const error = (body as { error?: unknown }).error;
  if (typeof error !== 'string') return;
  const code = (body as { code?: unknown }).code;
  throw new BridgeExtensionError(
    `Anime bridge ${method} failed: ${error}`,
    typeof code === 'number' ? code : undefined,
  );
 }
@@ -0,0 +1,192 @@
 import test from 'node:test';
 import assert from 'node:assert/strict';
 import { mkdtemp, readFile, writeFile } from 'node:fs/promises';
 import { existsSync } from 'node:fs';
 import { tmpdir } from 'node:os';
 import path from 'node:path';
 import { installExtension, looksLikeApk, removeExtension } from './extension-installer';
 import type { RepoExtension } from './extension-repo';
 const PKG = 'eu.kanade.tachiyomi.animeextension.all.example';
 function apkBytes(payload = 'APK-BODY'): Uint8Array {
  // APKs are zip archives, so they start with the PK local-file-header magic.
  return new Uint8Array([0x50, 0x4b, 0x03, 0x04, ...new TextEncoder().encode(payload)]);
 }
 function repoExtension(overrides: Partial<RepoExtension> = {}): RepoExtension {
  return {
    pkg: PKG,
    name: 'Example Source',
    lang: 'all',
    version: '1.2.3',
    versionCode: 12,
    nsfw: false,
    apkUrl: 'https://repo.example/anime/apk/example.apk',
    iconUrl: 'https://repo.example/anime/icon/example.png',
    repoUrl: 'https://repo.example/anime/index.min.json',
    sourceNames: ['Example'],
    ...overrides,
  };
 }
 function respondWith(bytes: Uint8Array, headers: Record<string, string> = {}): typeof fetch {
  // Uint8Array is a valid Response body at runtime; the DOM lib types disagree.
  const body = bytes as unknown as BodyInit;
  return (async () => new Response(body, { status: 200, headers })) as typeof fetch;
 }
 test('looksLikeApk accepts the zip magic and rejects anything else', () => {
  assert.equal(looksLikeApk(apkBytes()), true);
  assert.equal(looksLikeApk(new TextEncoder().encode('<!DOCTYPE html>')), false);
  assert.equal(looksLikeApk(new Uint8Array([])), false);
 });
 test('installExtension writes the apk named after its package', async () => {
  const dir = await mkdtemp(path.join(tmpdir(), 'subminer-install-'));
  const target = await installExtension({
    extensionsDir: dir,
    extension: repoExtension(),
    fetchImpl: respondWith(apkBytes()),
  });
  assert.equal(target, path.join(dir, `${PKG}.apk`));
  assert.match((await readFile(target)).toString(), /APK-BODY/);
 });
 test('installing again replaces the previous version in place', async () => {
  const dir = await mkdtemp(path.join(tmpdir(), 'subminer-install-'));
  await installExtension({
    extensionsDir: dir,
    extension: repoExtension(),
    fetchImpl: respondWith(apkBytes('OLD')),
  });
  await installExtension({
    extensionsDir: dir,
    extension: repoExtension({ version: '2.0.0', versionCode: 20 }),
    fetchImpl: respondWith(apkBytes('NEW')),
  });
  const contents = (await readFile(path.join(dir, `${PKG}.apk`))).toString();
  assert.match(contents, /NEW/);
  assert.doesNotMatch(contents, /OLD/);
 });
 test('the extensions directory is created when missing', async () => {
  const root = await mkdtemp(path.join(tmpdir(), 'subminer-install-'));
  const nested = path.join(root, 'does', 'not', 'exist');
  await installExtension({
    extensionsDir: nested,
    extension: repoExtension(),
    fetchImpl: respondWith(apkBytes()),
  });
  assert.equal(existsSync(path.join(nested, `${PKG}.apk`)), true);
 });
 test('a non-ok response is reported with the extension name', async () => {
  const dir = await mkdtemp(path.join(tmpdir(), 'subminer-install-'));
  const fetchImpl = (async () => new Response('', { status: 404 })) as typeof fetch;
  await assert.rejects(
    () => installExtension({ extensionsDir: dir, extension: repoExtension(), fetchImpl }),
    /Example Source.*404/,
  );
 });
 test('a response that is not an apk is rejected rather than written', async () => {
  const dir = await mkdtemp(path.join(tmpdir(), 'subminer-install-'));
  // A misconfigured repo commonly serves an HTML error page instead.
  const fetchImpl = respondWith(new TextEncoder().encode('<!DOCTYPE html><html>404</html>'));
  await assert.rejects(
    () => installExtension({ extensionsDir: dir, extension: repoExtension(), fetchImpl }),
    /did not download as an APK/,
  );
  assert.equal(existsSync(path.join(dir, `${PKG}.apk`)), false);
 });
 test('an oversized download is refused by the declared length', async () => {
  const dir = await mkdtemp(path.join(tmpdir(), 'subminer-install-'));
  const fetchImpl = respondWith(apkBytes(), { 'content-length': '999999999' });
  await assert.rejects(
    () =>
      installExtension({
        extensionsDir: dir,
        extension: repoExtension(),
        fetchImpl,
        maxBytes: 1024,
      }),
    /larger than the 1024 byte limit/,
  );
 });
 test('an oversized download is refused even when the length header lies', async () => {
  const dir = await mkdtemp(path.join(tmpdir(), 'subminer-install-'));
  const fetchImpl = respondWith(apkBytes('x'.repeat(4096)), { 'content-length': '10' });
  await assert.rejects(
    () =>
      installExtension({
        extensionsDir: dir,
        extension: repoExtension(),
        fetchImpl,
        maxBytes: 1024,
      }),
    /larger than the 1024 byte limit/,
  );
  assert.equal(existsSync(path.join(dir, `${PKG}.apk`)), false);
 });
 test('the byte limit stops the read instead of buffering the whole body', async () => {
  const dir = await mkdtemp(path.join(tmpdir(), 'subminer-install-'));
  let pushed = 0;
  // Endless body: if the limit were only checked after buffering, this hangs.
  const body = new ReadableStream<Uint8Array>({
    pull(controller) {
      pushed += 1;
      controller.enqueue(new Uint8Array(512));
    },
  });
  const fetchImpl = (async () => new Response(body, { status: 200 })) as typeof fetch;
  await assert.rejects(
    () =>
      installExtension({
        extensionsDir: dir,
        extension: repoExtension(),
        fetchImpl,
        maxBytes: 1024,
      }),
    /larger than the 1024 byte limit/,
  );
  // Only enough chunks to cross the limit were ever read.
  assert.ok(pushed <= 4, `read ${pushed} chunks before aborting`);
 });
 test('a package name carrying path separators cannot escape the extensions dir', async () => {
  const root = await mkdtemp(path.join(tmpdir(), 'subminer-install-'));
  const dir = path.join(root, 'extensions');
  const escaping = `eu.kanade.tachiyomi.animeextension${path.sep}..${path.sep}..${path.sep}pwned`;
  await assert.rejects(
    () =>
      installExtension({
        extensionsDir: dir,
        extension: repoExtension({ pkg: escaping }),
        fetchImpl: respondWith(apkBytes()),
      }),
    /not a valid file name/,
  );
  assert.equal(existsSync(path.join(root, 'pwned.apk')), false);
 });
 test('removeExtension deletes the file and tolerates a missing one', async () => {
  const dir = await mkdtemp(path.join(tmpdir(), 'subminer-install-'));
  const file = path.join(dir, `${PKG}.apk`);
  await writeFile(file, 'x');
  await removeExtension(dir, PKG);
  assert.equal(existsSync(file), false);
  await removeExtension(dir, PKG);
 });
@@ -0,0 +1,127 @@
 import { mkdir, rm, writeFile } from 'node:fs/promises';
 import path from 'node:path';
 import { extensionFileName, type RepoExtension } from './extension-repo';
 /**
 * Downloads extension APKs into the extensions directory.
 *
 * Only URLs that came from a repository index the user configured are ever
 * fetched; nothing here discovers or suggests sources.
 */
 export interface InstallExtensionOptions {
  extensionsDir: string;
  extension: RepoExtension;
  fetchImpl?: typeof fetch;
  /** Guards against a mistyped repo serving something enormous. */
  maxBytes?: number;
  /** Cancels a stalled download; without it a hung repo blocks the install. */
  signal?: AbortSignal;
  /** Applied when no `signal` is given, so a download can never hang forever. */
  timeoutMs?: number;
 }
 /** APKs are a few MB; anything far past that is not an extension. */
 const DEFAULT_MAX_BYTES = 64 * 1024 * 1024;
 /** Generous enough for a large APK on a slow link, short of hanging forever. */
 const DEFAULT_TIMEOUT_MS = 120_000;
 const APK_MAGIC = [0x50, 0x4b, 0x03, 0x04]; // "PK\x03\x04" — APKs are zip archives.
 export function looksLikeApk(bytes: Uint8Array): boolean {
  return APK_MAGIC.every((byte, index) => bytes[index] === byte);
 }
 /**
 * Download one extension into `extensionsDir`, replacing any previous version.
 *
 * The file is named after the package so an update overwrites in place rather
 * than leaving two versions for the bridge to load.
 */
 export async function installExtension(options: InstallExtensionOptions): Promise<string> {
  const fetchImpl = options.fetchImpl ?? fetch;
  const maxBytes = options.maxBytes ?? DEFAULT_MAX_BYTES;
  const signal = options.signal ?? AbortSignal.timeout(options.timeoutMs ?? DEFAULT_TIMEOUT_MS);
  const response = await fetchImpl(options.extension.apkUrl, { signal });
  if (!response.ok) {
    throw new Error(`Downloading ${options.extension.name} failed (${response.status}).`);
  }
  const declared = Number(response.headers.get('content-length') ?? '0');
  if (declared > maxBytes) {
    throw new Error(`${options.extension.name} is larger than the ${maxBytes} byte limit.`);
  }
  const bytes = await readBounded(response, maxBytes, options.extension.name);
  if (!looksLikeApk(bytes)) {
    throw new Error(`${options.extension.name} did not download as an APK.`);
  }
  await mkdir(options.extensionsDir, { recursive: true });
  const target = resolveTarget(options.extensionsDir, options.extension.pkg);
  await writeFile(target, bytes);
  return target;
 }
 /**
 * Read the body incrementally and stop the moment the limit is passed.
 *
 * Buffering first and measuring afterwards would let a repo that lies about
 * (or omits) `content-length` push an unbounded amount into memory before the
 * check ever runs.
 */
 async function readBounded(
  response: Response,
  maxBytes: number,
  name: string,
 ): Promise<Uint8Array> {
  const reader = response.body?.getReader();
  if (!reader) {
    const bytes = new Uint8Array(await response.arrayBuffer());
    if (bytes.byteLength > maxBytes) {
      throw new Error(`${name} is larger than the ${maxBytes} byte limit.`);
    }
    return bytes;
  }
  const chunks: Uint8Array[] = [];
  let total = 0;
  for (;;) {
    const { done, value } = await reader.read();
    if (done) break;
    total += value.byteLength;
    if (total > maxBytes) {
      await reader.cancel();
      throw new Error(`${name} is larger than the ${maxBytes} byte limit.`);
    }
    chunks.push(value);
  }
  const bytes = new Uint8Array(total);
  let offset = 0;
  for (const chunk of chunks) {
    bytes.set(chunk, offset);
    offset += chunk.byteLength;
  }
  return bytes;
 }
 /**
 * Defence in depth against a repository index that smuggles path separators
 * into a package name: the write target must stay inside `extensionsDir`.
 */
 function resolveTarget(extensionsDir: string, pkg: string): string {
  const root = path.resolve(extensionsDir);
  const target = path.resolve(root, extensionFileName(pkg));
  if (path.dirname(target) !== root) {
    throw new Error(`Refusing to install ${pkg}: the package name is not a valid file name.`);
  }
  return target;
 }
 /** Delete an installed extension. Missing files are treated as already gone. */
 export async function removeExtension(extensionsDir: string, pkg: string): Promise<void> {
  await rm(resolveTarget(extensionsDir, pkg), { force: true });
 }
@@ -0,0 +1,197 @@
 import test from 'node:test';
 import assert from 'node:assert/strict';
 import {
  extensionFileName,
  fetchRepoCatalogue,
  fetchRepoIndex,
  isValidRepoUrl,
  parseRepoIndex,
  repoBaseUrl,
 } from './extension-repo';
 const INDEX = 'https://repo.example/anime/index.min.json';
 function animeEntry(overrides: Record<string, unknown> = {}): Record<string, unknown> {
  return {
    name: 'Aniyomi: Example Source',
    pkg: 'eu.kanade.tachiyomi.animeextension.all.example',
    apk: 'example-v1.2.3.apk',
    lang: 'all',
    code: 12,
    version: '1.2.3',
    nsfw: 0,
    sources: [{ name: 'Example', lang: 'en' }],
    ...overrides,
  };
 }
 test('any https url naming a json index is accepted', () => {
  assert.equal(isValidRepoUrl(INDEX), true);
  assert.equal(isValidRepoUrl('  ' + INDEX + '  '), true);
  // Repos are free to name the index; index.min.json is only a convention.
  assert.equal(isValidRepoUrl('https://repo.example/anime/index.json'), true);
  assert.equal(
    isValidRepoUrl('https://manatan-community.github.io/extensions/video.min.json'),
    true,
  );
  // Plain http would let a network attacker swap the APK list.
  assert.equal(isValidRepoUrl('http://repo.example/anime/index.min.json'), false);
  assert.equal(isValidRepoUrl('https://repo.example/anime/'), false);
  assert.equal(isValidRepoUrl('https://repo.example/index.min.json.txt'), false);
  assert.equal(isValidRepoUrl('https://repo.example'), false);
  assert.equal(isValidRepoUrl(''), false);
 });
 test('repoBaseUrl strips the index file name', () => {
  assert.equal(repoBaseUrl(INDEX), 'https://repo.example/anime');
  assert.equal(
    repoBaseUrl('https://manatan-community.github.io/extensions/video.min.json'),
    'https://manatan-community.github.io/extensions',
  );
 });
 test('parseRepoIndex builds apk and icon urls from the repo root', () => {
  const [extension] = parseRepoIndex(INDEX, [animeEntry()]);
  assert.equal(extension?.pkg, 'eu.kanade.tachiyomi.animeextension.all.example');
  assert.equal(extension?.apkUrl, 'https://repo.example/anime/apk/example-v1.2.3.apk');
  assert.equal(
    extension?.iconUrl,
    'https://repo.example/anime/icon/eu.kanade.tachiyomi.animeextension.all.example.png',
  );
  assert.equal(extension?.repoUrl, INDEX);
  assert.equal(extension?.versionCode, 12);
  assert.deepEqual(extension?.sourceNames, ['Example']);
 });
 test('the Aniyomi name prefix is stripped', () => {
  const [extension] = parseRepoIndex(INDEX, [animeEntry()]);
  assert.equal(extension?.name, 'Example Source');
 });
 test('manga packages are excluded', () => {
  const entries = [animeEntry(), animeEntry({ pkg: 'eu.kanade.tachiyomi.extension.en.somemanga' })];
  const parsed = parseRepoIndex(INDEX, entries);
  assert.equal(parsed.length, 1);
  assert.match(parsed[0]!.pkg, /animeextension/);
 });
 test('malformed entries are skipped rather than failing the repo', () => {
  const parsed = parseRepoIndex(INDEX, [
    null,
    'nonsense',
    animeEntry({ apk: undefined }),
    animeEntry({ pkg: undefined }),
    animeEntry(),
  ]);
  assert.equal(parsed.length, 1);
 });
 test('a package name that is not a plain identifier is rejected', () => {
  // The package name becomes the on-disk file name, and a repo index is
  // unauthenticated: path separators here would write outside the extensions
  // directory even though the prefix check passes.
  const parsed = parseRepoIndex(INDEX, [
    animeEntry({ pkg: 'eu.kanade.tachiyomi.animeextension/../../../../etc/cron.d/x' }),
    animeEntry({ pkg: 'eu.kanade.tachiyomi.animeextension\\..\\evil' }),
    animeEntry({ pkg: 'eu.kanade.tachiyomi.animeextension.all.ok' }),
  ]);
  assert.deepEqual(
    parsed.map((extension) => extension.pkg),
    ['eu.kanade.tachiyomi.animeextension.all.ok'],
  );
 });
 test('an apk file name with path characters is rejected', () => {
  const parsed = parseRepoIndex(INDEX, [animeEntry({ apk: '../../../etc/passwd' })]);
  assert.deepEqual(parsed, []);
 });
 test('parseRepoIndex tolerates a non-array payload', () => {
  assert.deepEqual(parseRepoIndex(INDEX, { message: 'Not Found' }), []);
  assert.deepEqual(parseRepoIndex(INDEX, null), []);
 });
 test('missing optional fields fall back to safe defaults', () => {
  const [extension] = parseRepoIndex(INDEX, [
    { pkg: 'eu.kanade.tachiyomi.animeextension.all.bare', apk: 'bare.apk' },
  ]);
  assert.equal(extension?.name, 'eu.kanade.tachiyomi.animeextension.all.bare');
  assert.equal(extension?.lang, 'all');
  assert.equal(extension?.versionCode, 0);
  assert.equal(extension?.nsfw, false);
  assert.deepEqual(extension?.sourceNames, []);
 });
 test('nsfw is read from the numeric flag', () => {
  assert.equal(parseRepoIndex(INDEX, [animeEntry({ nsfw: 1 })])[0]?.nsfw, true);
  assert.equal(parseRepoIndex(INDEX, [animeEntry({ nsfw: 0 })])[0]?.nsfw, false);
 });
 test('fetchRepoIndex rejects an invalid url before making a request', async () => {
  let called = false;
  const fetchImpl = (async () => {
    called = true;
    return new Response('[]');
  }) as typeof fetch;
  await assert.rejects(() => fetchRepoIndex('http://insecure/index.min.json', { fetchImpl }));
  assert.equal(called, false);
 });
 test('fetchRepoIndex surfaces a non-ok response', async () => {
  const fetchImpl = (async () => new Response('', { status: 404 })) as typeof fetch;
  await assert.rejects(() => fetchRepoIndex(INDEX, { fetchImpl }), /404/);
 });
 test('fetchRepoCatalogue merges repos and keeps the highest version code', async () => {
  const second = 'https://other.example/anime/index.min.json';
  const fetchImpl = (async (input: RequestInfo | URL) => {
    const url = String(input);
    if (url === INDEX) {
      return new Response(JSON.stringify([animeEntry({ code: 12, version: '1.2.3' })]));
    }
    return new Response(JSON.stringify([animeEntry({ code: 20, version: '2.0.0' })]));
  }) as typeof fetch;
  const catalogue = await fetchRepoCatalogue([INDEX, second], { fetchImpl });
  assert.equal(catalogue.extensions.length, 1);
  assert.equal(catalogue.extensions[0]?.versionCode, 20);
  assert.equal(catalogue.extensions[0]?.repoUrl, second);
  assert.deepEqual(catalogue.failures, []);
 });
 test('one failing repo does not hide the others', async () => {
  const broken = 'https://broken.example/anime/index.min.json';
  const fetchImpl = (async (input: RequestInfo | URL) => {
    if (String(input) === broken) throw new Error('ENOTFOUND');
    return new Response(JSON.stringify([animeEntry()]));
  }) as typeof fetch;
  const catalogue = await fetchRepoCatalogue([broken, INDEX], { fetchImpl });
  assert.equal(catalogue.extensions.length, 1);
  assert.equal(catalogue.failures.length, 1);
  assert.equal(catalogue.failures[0]?.repoUrl, broken);
  assert.match(catalogue.failures[0]?.error ?? '', /ENOTFOUND/);
 });
 test('an empty repo list yields an empty catalogue without any request', async () => {
  let called = false;
  const fetchImpl = (async () => {
    called = true;
    return new Response('[]');
  }) as typeof fetch;
  const catalogue = await fetchRepoCatalogue([], { fetchImpl });
  assert.deepEqual(catalogue, { extensions: [], failures: [] });
  assert.equal(called, false);
 });
 test('extensions are stored under their package name so updates replace in place', () => {
  assert.equal(
    extensionFileName('eu.kanade.tachiyomi.animeextension.all.example'),
    'eu.kanade.tachiyomi.animeextension.all.example.apk',
  );
 });
@@ -0,0 +1,194 @@
 /**
 * Client for Aniyomi-format extension repositories.
 *
 * SubMiner ships no repositories and performs no discovery. A repository only
 * exists once the user adds its index URL, and only extensions from those
 * repositories are ever listed or downloaded.
 */
 /** Aniyomi extension packages carry this prefix; manga packages are ignored. */
 const ANIME_PACKAGE_PREFIX = 'eu.kanade.tachiyomi.animeextension';
 /**
 * A package name becomes the on-disk APK file name, and a repository index is
 * unauthenticated content the user pointed us at. Only plain dotted identifiers
 * are accepted, so nothing in an index can carry `/` or `..` into a file path.
 */
 const PACKAGE_NAME_PATTERN = /^[A-Za-z0-9_.]+$/;
 /** The APK file name is appended to the repo URL, so keep it a bare name. */
 const APK_FILE_NAME_PATTERN = /^[A-Za-z0-9_.+-]+$/;
 /**
 * Repos are identified by their index URL. The file name is not fixed:
 * `index.min.json` is the Aniyomi convention, but repositories publish under
 * other names too (e.g. `video.min.json`), so only https and a `.json` file
 * name are required.
 */
 const INDEX_URL_PATTERN = /^https:\/\/[^\s/]+(?:\/[^\s/]*)*\/[^\s/]+\.json$/;
 export interface RepoExtension {
  /** Package name, the stable identity of an extension across versions. */
  pkg: string;
  name: string;
  lang: string;
  version: string;
  /** Monotonic version code; the comparison basis for updates. */
  versionCode: number;
  nsfw: boolean;
  apkUrl: string;
  iconUrl: string;
  /** Index URL of the repo this came from. */
  repoUrl: string;
  /** Source names the package provides, when the index declares them. */
  sourceNames: string[];
 }
 /** `true` when `url` is a usable Aniyomi index URL. */
 export function isValidRepoUrl(url: string): boolean {
  return INDEX_URL_PATTERN.test(url.trim());
 }
 /** Strip the index file name to get the repo root. */
 export function repoBaseUrl(indexUrl: string): string {
  return indexUrl.trim().replace(/\/[^/]*$/, '');
 }
 interface RawEntry {
  name?: unknown;
  pkg?: unknown;
  apk?: unknown;
  lang?: unknown;
  code?: unknown;
  version?: unknown;
  nsfw?: unknown;
  sources?: unknown;
 }
 function readSourceNames(sources: unknown): string[] {
  if (!Array.isArray(sources)) return [];
  return sources
    .map((source) =>
      source !== null && typeof source === 'object'
        ? (source as { name?: unknown }).name
        : undefined,
    )
    .filter((name): name is string => typeof name === 'string' && name.length > 0);
 }
 /**
 * Parse an index payload into anime extensions.
 *
 * Entries that are malformed, or that are manga rather than anime packages,
 * are skipped rather than failing the whole repo.
 */
 export function parseRepoIndex(indexUrl: string, payload: unknown): RepoExtension[] {
  if (!Array.isArray(payload)) return [];
  const base = repoBaseUrl(indexUrl);
  const extensions: RepoExtension[] = [];
  for (const raw of payload as RawEntry[]) {
    if (raw === null || typeof raw !== 'object') continue;
    const pkg = typeof raw.pkg === 'string' ? raw.pkg : '';
    const apk = typeof raw.apk === 'string' ? raw.apk : '';
    if (!pkg.startsWith(ANIME_PACKAGE_PREFIX) || !PACKAGE_NAME_PATTERN.test(pkg)) continue;
    if (apk.length === 0 || !APK_FILE_NAME_PATTERN.test(apk)) continue;
    const versionCode = Number(raw.code);
    extensions.push({
      pkg,
      // Repo entries are prefixed "Aniyomi: "; the app supplies its own context.
      name: (typeof raw.name === 'string' ? raw.name : pkg).replace(/^Aniyomi:\s*/, ''),
      lang: typeof raw.lang === 'string' ? raw.lang : 'all',
      version: typeof raw.version === 'string' ? raw.version : '0',
      versionCode: Number.isFinite(versionCode) ? versionCode : 0,
      nsfw: Number(raw.nsfw) === 1,
      apkUrl: `${base}/apk/${apk}`,
      iconUrl: `${base}/icon/${pkg}.png`,
      repoUrl: indexUrl,
      sourceNames: readSourceNames(raw.sources),
    });
  }
  return extensions;
 }
 export interface FetchRepoOptions {
  fetchImpl?: typeof fetch;
  signal?: AbortSignal;
 }
 /** Fetch and parse one repository index. */
 export async function fetchRepoIndex(
  indexUrl: string,
  options: FetchRepoOptions = {},
 ): Promise<RepoExtension[]> {
  if (!isValidRepoUrl(indexUrl)) {
    throw new Error(`Not a valid repository index URL: ${indexUrl}`);
  }
  const fetchImpl = options.fetchImpl ?? fetch;
  const response = await fetchImpl(indexUrl.trim(), {
    headers: { Accept: 'application/json' },
    ...(options.signal ? { signal: options.signal } : {}),
  });
  if (!response.ok) {
    throw new Error(`Repository returned ${response.status} for ${indexUrl}`);
  }
  return parseRepoIndex(indexUrl, await response.json());
 }
 export interface RepoFetchFailure {
  repoUrl: string;
  error: string;
 }
 export interface RepoCatalogue {
  extensions: RepoExtension[];
  failures: RepoFetchFailure[];
 }
 /**
 * Fetch every configured repository.
 *
 * When two repos publish the same package, the higher version code wins, so a
 * user's preferred repo ordering does not silently pin an older build.
 */
 export async function fetchRepoCatalogue(
  indexUrls: string[],
  options: FetchRepoOptions = {},
 ): Promise<RepoCatalogue> {
  const failures: RepoFetchFailure[] = [];
  const byPackage = new Map<string, RepoExtension>();
  const results = await Promise.all(
    indexUrls.map(async (indexUrl) => {
      try {
        return { indexUrl, extensions: await fetchRepoIndex(indexUrl, options) };
      } catch (error) {
        failures.push({
          repoUrl: indexUrl,
          error: error instanceof Error ? error.message : String(error),
        });
        return { indexUrl, extensions: [] as RepoExtension[] };
      }
    }),
  );
  for (const { extensions } of results) {
    for (const extension of extensions) {
      const existing = byPackage.get(extension.pkg);
      if (!existing || extension.versionCode > existing.versionCode) {
        byPackage.set(extension.pkg, extension);
      }
    }
  }
  return {
    extensions: [...byPackage.values()].sort((a, b) => a.name.localeCompare(b.name)),
    failures,
  };
 }
 /** File name an extension is stored under, so updates replace in place. */
 export function extensionFileName(pkg: string): string {
  return `${pkg}.apk`;
 }
@@ -0,0 +1,159 @@
 import test from 'node:test';
 import assert from 'node:assert/strict';
 import { mkdtemp, mkdir, writeFile } from 'node:fs/promises';
 import { createHash } from 'node:crypto';
 import { tmpdir } from 'node:os';
 import path from 'node:path';
 import {
  listExtensionSources,
  readInstalledExtensions,
  toBridgeSource,
  toInstalledExtensionViews,
  type ExtensionSource,
  type InstalledExtension,
 } from './extension-store';
 import type { AnimeBridgeClient } from './bridge-client';
 async function makeExtensionDir(files: Record<string, string>): Promise<string> {
  const dir = await mkdtemp(path.join(tmpdir(), 'subminer-ext-'));
  for (const [name, contents] of Object.entries(files)) {
    await writeFile(path.join(dir, name), contents);
  }
  return dir;
 }
 function fakeClient(
  impl: (source: { fingerprint: string }) => Promise<unknown[]>,
 ): AnimeBridgeClient {
  return { listAnimeSources: impl } as unknown as AnimeBridgeClient;
 }
 test('readInstalledExtensions fingerprints apks without holding their bytes', async () => {
  const dir = await makeExtensionDir({ 'my-source.apk': 'APK-BYTES' });
  const extensions = await readInstalledExtensions(dir);
  assert.equal(extensions.length, 1);
  assert.equal(extensions[0]?.fallbackName, 'my-source');
  assert.equal(extensions[0]?.sha256, createHash('sha256').update('APK-BYTES').digest('hex'));
 });
 test('the fingerprint changes when an apk is replaced in place', async () => {
  const dir = await makeExtensionDir({ 'my-source.apk': 'V1' });
  const before = (await readInstalledExtensions(dir))[0]?.sha256;
  await writeFile(path.join(dir, 'my-source.apk'), 'V2');
  const after = (await readInstalledExtensions(dir))[0]?.sha256;
  assert.notEqual(before, after);
 });
 test('toBridgeSource reads the apk only when the bridge asks for it', async () => {
  const dir = await makeExtensionDir({ 'lazy.apk': 'APK-BYTES' });
  const extension = (await readInstalledExtensions(dir))[0]!;
  const bridgeSource = toBridgeSource(extension);
  assert.equal(bridgeSource.fingerprint, extension.sha256);
  assert.equal(Buffer.from(await bridgeSource.loadApkBase64(), 'base64').toString(), 'APK-BYTES');
 });
 test('readInstalledExtensions ignores non-apk files and subdirectories', async () => {
  const dir = await makeExtensionDir({ 'a.apk': 'A', 'notes.txt': 'x', 'b.APK': 'B' });
  await mkdir(path.join(dir, 'nested.apk'), { recursive: true });
  const names = (await readInstalledExtensions(dir)).map((e) => e.fallbackName);
  // Sorted, case-insensitive extension match, directories excluded.
  assert.deepEqual(names, ['a', 'b']);
 });
 test('readInstalledExtensions returns empty for a missing directory', async () => {
  assert.deepEqual(await readInstalledExtensions('/nonexistent/subminer/extensions'), []);
 });
 test('toBridgeSource includes sourceId only when selecting inside a factory apk', () => {
  const extension: InstalledExtension = { file: '/x/a.apk', fallbackName: 'a', sha256: 'hash-a' };
  assert.equal(toBridgeSource(extension).sourceId, undefined);
  assert.equal(toBridgeSource(extension, 'src-1').sourceId, 'src-1');
  assert.equal(toBridgeSource(extension, 'src-1').fingerprint, 'hash-a');
 });
 test('listExtensionSources flattens every source a factory apk provides', async () => {
  const extensions: InstalledExtension[] = [
    { file: '/x/multi.apk', fallbackName: 'multi', sha256: 'hash-a' },
  ];
  const client = fakeClient(async () => [
    { id: 101, name: 'Source One', lang: 'en' },
    { id: '102', name: 'Source Two', lang: 'ja' },
  ]);
  const sources = await listExtensionSources(client, extensions);
  assert.equal(sources.length, 2);
  // Numeric ids are normalized to strings so they can key UI state.
  assert.equal(sources[0]?.id, '101');
  assert.equal(sources[0]?.name, 'Source One');
  assert.equal(sources[1]?.lang, 'ja');
 });
 test('listExtensionSources falls back to the file name and a default language', async () => {
  const extensions: InstalledExtension[] = [
    { file: '/x/my-ext.apk', fallbackName: 'my-ext', sha256: 'hash-a' },
  ];
  const client = fakeClient(async () => [{ id: '1', name: '   ' }]);
  const sources = await listExtensionSources(client, extensions);
  assert.equal(sources[0]?.name, 'my-ext');
  assert.equal(sources[0]?.lang, 'all');
 });
 test('listExtensionSources drops descriptors with no usable id', async () => {
  const client = fakeClient(async () => [{ name: 'No Id' }, { id: '', name: 'Empty' }]);
  const sources = await listExtensionSources(client, [
    { file: '/x/a.apk', fallbackName: 'a', sha256: 'hash-a' },
  ]);
  assert.deepEqual(sources, []);
 });
 test('toInstalledExtensionViews names an extension after the sources it provides', () => {
  const extensions: InstalledExtension[] = [
    { file: '/x/multi.apk', fallbackName: 'multi', sha256: 'hash-a' },
  ];
  const sources: ExtensionSource[] = [
    { id: '1', name: 'One', lang: 'en', pkg: 'multi', file: '/x/multi.apk' },
    { id: '2', name: 'Two', lang: 'ja', pkg: 'multi', file: '/x/multi.apk' },
  ];
  assert.deepEqual(toInstalledExtensionViews(extensions, sources, []), [
    { pkg: 'multi', name: 'One, Two', langs: ['en', 'ja'], sourceCount: 2, error: null },
  ]);
 });
 test('toInstalledExtensionViews lists an extension that loaded nothing, with its reason', () => {
  const extensions: InstalledExtension[] = [
    { file: '/x/broken.apk', fallbackName: 'broken', sha256: 'hash-a' },
  ];
  // A broken APK is still installed, so it must stay listed and removable.
  assert.deepEqual(
    toInstalledExtensionViews(extensions, [], [{ pkg: 'broken', error: 'dex2jar failed' }]),
    [{ pkg: 'broken', name: 'broken', langs: [], sourceCount: 0, error: 'dex2jar failed' }],
  );
 });
 test('one broken extension does not hide the working ones', async () => {
  const extensions: InstalledExtension[] = [
    { file: '/x/broken.apk', fallbackName: 'broken', sha256: 'hash-a' },
    { file: '/x/good.apk', fallbackName: 'good', sha256: 'hash-b' },
  ];
  const failures: string[] = [];
  const client = fakeClient(async (source) => {
    if (source.fingerprint === 'hash-a') throw new Error('dex2jar failed');
    return [{ id: '7', name: 'Good Source', lang: 'en' }];
  });
  const sources = await listExtensionSources(client, extensions, (extension) => {
    failures.push(extension.fallbackName);
  });
  assert.deepEqual(failures, ['broken']);
  assert.equal(sources.length, 1);
  assert.equal(sources[0]?.name, 'Good Source');
 });
@@ -0,0 +1,145 @@
 import { createReadStream } from 'node:fs';
 import { readdir, readFile } from 'node:fs/promises';
 import { createHash } from 'node:crypto';
 import { pipeline } from 'node:stream/promises';
 import path from 'node:path';
 import type { AnimeBridgeClient } from './bridge-client';
 import type { BridgeSource } from './bridge-client';
 import type { ExtensionLoadFailure, InstalledExtensionView } from '../types/anime-browser';
 /**
 * Anime extensions are Aniyomi APKs the user supplies. They are read from a
 * directory rather than fetched from a hardcoded catalogue, so which sources
 * exist is entirely the user's choice.
 */
 export interface InstalledExtension {
  /** Absolute path to the .apk. */
  file: string;
  /** File name without extension, used when the bridge reports no name. */
  fallbackName: string;
  /**
   * SHA-256 of the APK. Identifies the build rather than the slot, so the
   * bridge's extension-id cache misses after an in-place upgrade.
   */
  sha256: string;
 }
 export interface ExtensionSource {
  /** Stable id: the bridge source id, which selects it inside a factory APK. */
  id: string;
  name: string;
  lang: string;
  pkg: string;
  file: string;
 }
 /**
 * Discover every .apk in `directory`. A missing directory yields no extensions.
 *
 * Only a hash is kept, never the bytes: APKs run to several MB each and a
 * base64 copy adds a third on top, so holding the whole set for the lifetime of
 * the Anime Browser would cost far more than re-reading a file on the rare
 * upload. Hashing streams, so peak memory stays flat regardless of APK size.
 */
 export async function readInstalledExtensions(directory: string): Promise<InstalledExtension[]> {
  let entries;
  try {
    entries = await readdir(directory, { withFileTypes: true });
  } catch {
    return [];
  }
  const extensions: InstalledExtension[] = [];
  for (const entry of entries.sort((a, b) => a.name.localeCompare(b.name))) {
    if (!entry.isFile() || !entry.name.toLowerCase().endsWith('.apk')) continue;
    const file = path.join(directory, entry.name);
    extensions.push({
      file,
      fallbackName: entry.name.replace(/\.apk$/i, ''),
      sha256: await hashFile(file),
    });
  }
  return extensions;
 }
 async function hashFile(file: string): Promise<string> {
  const hash = createHash('sha256');
  await pipeline(createReadStream(file), hash);
  return hash.digest('hex');
 }
 /**
 * Describe what is on disk, for the installed list in the Extensions tab.
 *
 * Built from the directory rather than from a repository catalogue: an APK
 * dropped in by hand, or one whose repository the user has since removed, is
 * still installed and must stay removable.
 */
 export function toInstalledExtensionViews(
  extensions: InstalledExtension[],
  sources: ExtensionSource[],
  loadFailures: ExtensionLoadFailure[],
 ): InstalledExtensionView[] {
  return extensions.map((extension) => {
    const provided = sources.filter((source) => source.file === extension.file);
    const names = [...new Set(provided.map((source) => source.name))];
    return {
      pkg: extension.fallbackName,
      name: names.length > 0 ? names.join(', ') : extension.fallbackName,
      langs: [...new Set(provided.map((source) => source.lang))],
      sourceCount: provided.length,
      error: loadFailures.find((failure) => failure.pkg === extension.fallbackName)?.error ?? null,
    };
  });
 }
 /**
 * The bridge payload for a specific source inside an extension.
 *
 * The APK is read on demand: after the first upload the bridge answers by
 * extension id, so most calls never touch the file at all.
 */
 export function toBridgeSource(extension: InstalledExtension, sourceId?: string): BridgeSource {
  return {
    fingerprint: extension.sha256,
    loadApkBase64: async () => (await readFile(extension.file)).toString('base64'),
    ...(sourceId ? { sourceId } : {}),
  };
 }
 /**
 * Ask the bridge which sources each extension provides.
 *
 * An extension that fails to load is skipped rather than aborting the scan, so
 * one broken APK cannot hide every working one. Failures are reported through
 * `onError` for surfacing in the UI.
 */
 export async function listExtensionSources(
  client: AnimeBridgeClient,
  extensions: InstalledExtension[],
  onError?: (extension: InstalledExtension, error: unknown) => void,
 ): Promise<ExtensionSource[]> {
  const sources: ExtensionSource[] = [];
  for (const extension of extensions) {
    try {
      const descriptors = await client.listAnimeSources(toBridgeSource(extension));
      for (const descriptor of descriptors) {
        const id = descriptor.id === undefined ? null : String(descriptor.id);
        if (id === null || id.length === 0) continue;
        sources.push({
          id,
          name: descriptor.name?.trim() || extension.fallbackName,
          lang: descriptor.lang ?? 'all',
          pkg: extension.fallbackName,
          file: extension.file,
        });
      }
    } catch (error) {
      onError?.(extension, error);
    }
  }
  return sources;
 }
@@ -0,0 +1,73 @@
 import test from 'node:test';
 import assert from 'node:assert/strict';
 import { parseOkHttpHeaders, resolveStream, toMpvHeaderFields } from './headers';
 test('parseOkHttpHeaders flattens the alternating name/value array', () => {
  const parsed = parseOkHttpHeaders({
    namesAndValues$okhttp: ['Referer', 'https://origin.example/', 'User-Agent', 'Aniyomi'],
  });
  assert.deepEqual(parsed, {
    Referer: 'https://origin.example/',
    'User-Agent': 'Aniyomi',
  });
 });
 test('parseOkHttpHeaders tolerates missing, empty, and odd-length input', () => {
  assert.deepEqual(parseOkHttpHeaders(undefined), {});
  assert.deepEqual(parseOkHttpHeaders({}), {});
  assert.deepEqual(parseOkHttpHeaders({ namesAndValues$okhttp: [] }), {});
  // A trailing name with no value is dropped rather than mapped to undefined.
  assert.deepEqual(parseOkHttpHeaders({ namesAndValues$okhttp: ['Referer'] }), {});
 });
 test('toMpvHeaderFields joins entries and escapes commas in values', () => {
  const fields = toMpvHeaderFields({
    Referer: 'https://origin.example/',
    Cookie: 'a=1, b=2',
  });
  assert.equal(fields, 'Referer: https://origin.example/,Cookie: a=1\\, b=2');
 });
 test('toMpvHeaderFields escapes backslashes so a trailing one cannot eat the separator', () => {
  const fields = toMpvHeaderFields({ Referer: 'https://origin.example/path\\', Cookie: 'a=1' });
  // Without doubling, the value's trailing backslash would escape the comma
  // and merge Cookie into the Referer entry.
  assert.equal(fields, 'Referer: https://origin.example/path\\\\,Cookie: a=1');
 });
 test('toMpvHeaderFields returns an empty string when there are no headers', () => {
  assert.equal(toMpvHeaderFields({}), '');
 });
 test('resolveStream normalizes a bridge video into a playable stream', () => {
  const stream = resolveStream({
    url: 'https://origin.example/embed/1',
    quality: '1080p',
    videoUrl: 'http://127.0.0.1:8080/video/master-token',
    headers: { namesAndValues$okhttp: ['Referer', 'https://origin.example/'] },
    subtitleTracks: [{ url: 'http://127.0.0.1:8080/video/sub-token', lang: 'English' }],
    audioTracks: [{ url: 'http://127.0.0.1:8080/video/audio-token', lang: 'Japanese' }],
  });
  assert.deepEqual(stream, {
    url: 'http://127.0.0.1:8080/video/master-token',
    quality: '1080p',
    headers: { Referer: 'https://origin.example/' },
    subtitles: [{ url: 'http://127.0.0.1:8080/video/sub-token', lang: 'English' }],
    audios: [{ url: 'http://127.0.0.1:8080/video/audio-token', lang: 'Japanese' }],
  });
 });
 test('resolveStream returns null when the extension resolved no media url', () => {
  assert.equal(resolveStream({ url: 'https://origin.example/embed/1', quality: '1080p' }), null);
  assert.equal(resolveStream({ videoUrl: '' }), null);
 });
 test('resolveStream drops tracks without a url and defaults a missing lang', () => {
  const stream = resolveStream({
    videoUrl: 'http://127.0.0.1:8080/video/master-token',
    subtitleTracks: [{ lang: 'English' }, { url: 'http://127.0.0.1:8080/video/sub-token' }],
  });
  assert.deepEqual(stream?.subtitles, [{ url: 'http://127.0.0.1:8080/video/sub-token', lang: '' }]);
  assert.equal(stream?.quality, '');
 });
@@ -0,0 +1,56 @@
 import type { BridgeVideo, OkHttpHeaders, ResolvedStream } from './types';
 /**
 * Flatten OkHttp's alternating `[name, value, name, value]` array into a map.
 * A trailing name with no value is dropped rather than mapped to undefined.
 */
 export function parseOkHttpHeaders(headers: OkHttpHeaders | undefined): Record<string, string> {
  const flat = headers?.['namesAndValues$okhttp'];
  if (!Array.isArray(flat)) return {};
  const parsed: Record<string, string> = {};
  for (let i = 0; i + 1 < flat.length; i += 2) {
    const name = flat[i];
    const value = flat[i + 1];
    if (typeof name === 'string' && typeof value === 'string') parsed[name] = value;
  }
  return parsed;
 }
 /**
 * Render headers as mpv's `--http-header-fields` string list. mpv splits
 * entries on commas, so commas inside a value must be escaped — and the
 * backslash that does the escaping has to be escaped first, or a value ending
 * in `\` would neutralise the separator and swallow the next header.
 */
 export function toMpvHeaderFields(headers: Record<string, string>): string {
  return Object.entries(headers)
    .map(([name, value]) => `${name}: ${value.replace(/\\/g, '\\\\').replace(/,/g, '\\,')}`)
    .join(',');
 }
 function normalizeTracks(
  tracks: Array<{ url?: string; lang?: string }> | undefined,
 ): Array<{ url: string; lang: string }> {
  if (!Array.isArray(tracks)) return [];
  return tracks
    .filter((track): track is { url: string; lang?: string } => typeof track.url === 'string')
    .map((track) => ({ url: track.url, lang: track.lang ?? '' }));
 }
 /**
 * Normalize a bridge video into a playable stream. Returns null when the
 * extension produced no `videoUrl`, which happens for entries it failed to
 * resolve.
 */
 export function resolveStream(video: BridgeVideo): ResolvedStream | null {
  if (typeof video.videoUrl !== 'string' || video.videoUrl.length === 0) return null;
  return {
    url: video.videoUrl,
    quality: video.quality ?? '',
    headers: parseOkHttpHeaders(video.headers),
    subtitles: normalizeTracks(video.subtitleTracks),
    audios: normalizeTracks(video.audioTracks),
  };
 }
@@ -0,0 +1,69 @@
 import test from 'node:test';
 import assert from 'node:assert/strict';
 import { parseAnimeStatus, resolveBridgeMediaUrl } from './media-url';
 const BRIDGE = 'http://127.0.0.1:56037';
 test('a loopback proxy url is rebased onto the live bridge port', () => {
  assert.equal(
    resolveBridgeMediaUrl(BRIDGE, 'http://127.0.0.1:8080/image/cover-uuid'),
    'http://127.0.0.1:56037/image/cover-uuid',
  );
  assert.equal(
    resolveBridgeMediaUrl(BRIDGE, 'http://localhost:8080/video/master-token'),
    'http://127.0.0.1:56037/video/master-token',
  );
 });
 test('query strings and fragments survive rebasing', () => {
  assert.equal(
    resolveBridgeMediaUrl(BRIDGE, 'http://127.0.0.1:8080/video/token?quality=1080#t=30'),
    'http://127.0.0.1:56037/video/token?quality=1080#t=30',
  );
 });
 test('ipv6 loopback is recognised', () => {
  assert.equal(
    resolveBridgeMediaUrl(BRIDGE, 'http://[::1]:8080/image/cover'),
    'http://127.0.0.1:56037/image/cover',
  );
 });
 test('remote urls are left untouched', () => {
  const remote = 'https://cdn.example.com/covers/1.jpg';
  assert.equal(resolveBridgeMediaUrl(BRIDGE, remote), remote);
 });
 test('loopback urls outside the proxy routes are left untouched', () => {
  // Only /image and /video are proxy routes; /capabilities is the server's own API.
  const other = 'http://127.0.0.1:8080/capabilities';
  assert.equal(resolveBridgeMediaUrl(BRIDGE, other), other);
 });
 test('a base url without a scheme is assumed to be http', () => {
  assert.equal(
    resolveBridgeMediaUrl('127.0.0.1:56037', 'http://127.0.0.1:8080/image/cover'),
    'http://127.0.0.1:56037/image/cover',
  );
 });
 test('unparseable input is returned unchanged rather than throwing', () => {
  assert.equal(resolveBridgeMediaUrl(BRIDGE, 'not a url'), 'not a url');
  assert.equal(
    resolveBridgeMediaUrl('', 'http://127.0.0.1:8080/image/c'),
    'http://127.0.0.1:8080/image/c',
  );
  assert.equal(resolveBridgeMediaUrl(BRIDGE, ''), '');
 });
 test('parseAnimeStatus maps the SAnime constants', () => {
  assert.equal(parseAnimeStatus(1), 'ongoing');
  assert.equal(parseAnimeStatus(2), 'completed');
  assert.equal(parseAnimeStatus(4), 'publishing-finished');
  assert.equal(parseAnimeStatus(5), 'cancelled');
  assert.equal(parseAnimeStatus(6), 'on-hiatus');
  assert.equal(parseAnimeStatus(0), 'unknown');
  assert.equal(parseAnimeStatus(undefined), 'unknown');
  // 3 is unused in the SAnime constants.
  assert.equal(parseAnimeStatus(3), 'unknown');
 });
@@ -0,0 +1,74 @@
 /**
 * The bridge returns cover art and video URLs pointing at its own loopback
 * media proxy, but the origin it embeds is not always the port we actually
 * started it on. Rebase those onto the live bridge origin, and leave any
 * genuinely remote URL untouched.
 */
 const PROXY_ROUTES = new Set(['image', 'video']);
 const LOOPBACK_HOSTS = new Set(['127.0.0.1', 'localhost', '::1', '[::1]']);
 function isLoopbackProxyUrl(candidate: URL): boolean {
  if (candidate.protocol !== 'http:' && candidate.protocol !== 'https:') return false;
  const host = candidate.hostname.toLowerCase();
  if (!LOOPBACK_HOSTS.has(host)) return false;
  const route = candidate.pathname.split('/').filter(Boolean)[0];
  return route !== undefined && PROXY_ROUTES.has(route);
 }
 /**
 * Rewrite a bridge media URL onto `bridgeBaseUrl`, preserving path and query.
 * Returns the input unchanged when it is not a loopback proxy URL, or when
 * either URL cannot be parsed.
 */
 export function resolveBridgeMediaUrl(bridgeBaseUrl: string, mediaUrl: string): string {
  let media: URL;
  try {
    media = new URL(mediaUrl);
  } catch {
    return mediaUrl;
  }
  if (!isLoopbackProxyUrl(media)) return mediaUrl;
  const normalizedBase = bridgeBaseUrl.includes('://') ? bridgeBaseUrl : `http://${bridgeBaseUrl}`;
  let base: URL;
  try {
    base = new URL(normalizedBase);
  } catch {
    return mediaUrl;
  }
  if (base.protocol !== 'http:' && base.protocol !== 'https:') return mediaUrl;
  if (base.hostname.length === 0) return mediaUrl;
  const rebased = new URL(base.origin);
  rebased.pathname = media.pathname;
  rebased.search = media.search;
  rebased.hash = media.hash;
  return rebased.toString();
 }
 /** Aniyomi's SAnime status constants. */
 export type AnimeStatus =
  | 'unknown'
  | 'ongoing'
  | 'completed'
  | 'publishing-finished'
  | 'cancelled'
  | 'on-hiatus';
 export function parseAnimeStatus(status: number | undefined): AnimeStatus {
  switch (status) {
    case 1:
      return 'ongoing';
    case 2:
      return 'completed';
    case 4:
      return 'publishing-finished';
    case 5:
      return 'cancelled';
    case 6:
      return 'on-hiatus';
    default:
      return 'unknown';
  }
 }
@@ -0,0 +1,231 @@
 import test from 'node:test';
 import assert from 'node:assert/strict';
 import {
  buildLoadfileOptions,
  buildPlaybackCommands,
  buildTrackCommands,
  normalizeLangTag,
  selectPreferredStream,
 } from './mpv-playback';
 import type { ResolvedStream } from './types';
 function stream(overrides: Partial<ResolvedStream> = {}): ResolvedStream {
  return {
    url: 'http://127.0.0.1:8080/video/token',
    quality: '1080p',
    headers: {},
    subtitles: [],
    audios: [],
    ...overrides,
  };
 }
 test('loadfile options keep one visible track and never scan the filesystem', () => {
  const options = buildLoadfileOptions({ stream: stream() });
  for (const expected of [
    'sub-auto=no',
    'secondary-sid=no',
    'secondary-sub-visibility=no',
    'sub-visibility=yes',
  ]) {
    assert.ok(options.split(',').includes(expected), `missing ${expected}`);
  }
  // The source's own subtitles are the only ones this path gets, so they must
  // not be suppressed the way the Jellyfin path suppresses them.
  assert.ok(!options.split(',').includes('sid=no'));
  // Comma-separated values would split the option list, so the language
  // preferences ride as properties instead.
  assert.ok(!options.includes('alang'));
  assert.ok(!options.includes('slang'));
 });
 test('headers are percent-escaped so their commas do not split the option list', () => {
  const headers = { Referer: 'https://a.test/', 'User-Agent': 'X' };
  const options = buildLoadfileOptions({ stream: stream({ headers }) });
  // Verified against mpv 0.41: the unescaped form yields an empty header list.
  const fields = 'Referer: https://a.test/,User-Agent: X';
  assert.ok(options.includes(`http-header-fields=%${fields.length}%${fields}`));
 });
 test('the escape length counts the full header string including separators', () => {
  const options = buildLoadfileOptions({
    stream: stream({ headers: { Cookie: 'a=1, b=2' } }),
  });
  // The comma inside the value is backslash-escaped first, so the length grows.
  const fields = 'Cookie: a=1\\, b=2';
  assert.ok(options.includes(`%${fields.length}%${fields}`));
 });
 test('the escape length is counted in utf-8 bytes, not js string units', () => {
  // An extension may put a non-ASCII value in a header; mpv reads %n% as a
  // byte count, so counting string units would truncate the value.
  const options = buildLoadfileOptions({
    stream: stream({ headers: { 'X-Title': '日本語' } }),
  });
  const fields = 'X-Title: 日本語';
  assert.ok(options.includes(`%${Buffer.byteLength(fields, 'utf8')}%${fields}`));
  assert.ok(!options.includes(`%${fields.length}%`));
 });
 test('no header option is emitted when the stream carries no headers', () => {
  const options = buildLoadfileOptions({ stream: stream() });
  assert.ok(!options.includes('http-header-fields'));
 });
 test('a positive start position is appended, zero is omitted', () => {
  assert.ok(buildLoadfileOptions({ stream: stream(), startSeconds: 42 }).includes('start=42'));
  assert.ok(!buildLoadfileOptions({ stream: stream(), startSeconds: 0 }).includes('start='));
  assert.ok(!buildLoadfileOptions({ stream: stream() }).includes('start='));
 });
 test('playback commands set the language preference before loading the file', () => {
  const commands = buildPlaybackCommands({ stream: stream(), title: 'Example - 01' });
  assert.deepEqual(commands[0], ['script-message', 'subminer-managed-subtitles-loading']);
  // Japanese first, so a multi-audio stream never starts on the dub. slang is
  // Japanese-only: an English track belongs in the secondary slot, which the
  // secondarySub auto-load fills by language tag.
  assert.deepEqual(commands[1], ['set_property', 'alang', 'ja,jpn,jp,japanese']);
  assert.deepEqual(commands[2], ['set_property', 'slang', 'ja,jpn,jp,japanese']);
  assert.equal(commands[3]?.[0], 'loadfile');
  assert.equal(commands[3]?.[1], 'http://127.0.0.1:8080/video/token');
  assert.equal(commands[3]?.[2], 'replace');
  assert.equal(commands[3]?.[3], -1);
  assert.deepEqual(commands[4], ['set_property', 'force-media-title', 'Example - 01']);
 });
 test('force-media-title is skipped when there is no title', () => {
  assert.equal(buildPlaybackCommands({ stream: stream() }).length, 4);
  assert.equal(buildPlaybackCommands({ stream: stream(), title: '' }).length, 4);
 });
 test('external audio tracks are added, with the Japanese one selected', () => {
  const commands = buildTrackCommands(
    stream({
      audios: [
        { url: 'http://host/en.m4a', lang: 'en' },
        { url: 'http://host/ja.m4a', lang: 'ja' },
      ],
    }),
  );
  assert.deepEqual(commands, [
    ['audio-add', 'http://host/en.m4a', 'auto', 'en', 'en'],
    ['audio-add', 'http://host/ja.m4a', 'select', 'ja', 'ja'],
  ]);
 });
 test('external audio is left unselected when none of it is Japanese', () => {
  // alang already picked a track off the container; do not override it.
  const commands = buildTrackCommands(
    stream({ audios: [{ url: 'http://host/en.m4a', lang: 'eng' }] }),
  );
  assert.deepEqual(commands, [['audio-add', 'http://host/en.m4a', 'auto', 'eng', 'en']]);
 });
 test('only a Japanese subtitle track is selected as primary', () => {
  const japanese = buildTrackCommands(
    stream({
      subtitles: [
        { url: 'http://host/en.vtt', lang: 'English' },
        { url: 'http://host/ja.vtt', lang: 'Japanese' },
      ],
    }),
  );
  assert.deepEqual(japanese[1], ['sub-add', 'http://host/ja.vtt', 'select', 'Japanese', 'ja']);
  assert.equal(japanese[0]?.[2], 'auto');
  // English is the user's *secondary* language; it must not take the primary
  // slot. It rides in unselected, tagged so the secondarySub auto-load can
  // route it to secondary-sid.
  const englishOnly = buildTrackCommands(
    stream({ subtitles: [{ url: 'http://host/en.vtt', lang: 'English' }] }),
  );
  assert.deepEqual(englishOnly, [['sub-add', 'http://host/en.vtt', 'auto', 'English', 'en']]);
 });
 test('language labels normalize to the tags users configure', () => {
  assert.equal(normalizeLangTag('English'), 'en');
  assert.equal(normalizeLangTag('eng'), 'en');
  assert.equal(normalizeLangTag('en-US'), 'en');
  assert.equal(normalizeLangTag('Japanese'), 'ja');
  assert.equal(normalizeLangTag('jpn'), 'ja');
  assert.equal(normalizeLangTag('Português'), 'pt');
  // Unknown labels pass through untouched rather than being guessed at.
  assert.equal(normalizeLangTag('Klingon'), 'Klingon');
  assert.equal(normalizeLangTag(''), '');
 });
 test('unlabelled tracks still get a usable menu title, duplicates are dropped', () => {
  const commands = buildTrackCommands(
    stream({
      subtitles: [
        { url: 'http://host/a.vtt', lang: '' },
        { url: 'http://host/a.vtt', lang: '' },
        { url: 'http://host/b.vtt', lang: '' },
      ],
    }),
  );
  assert.deepEqual(commands, [
    ['sub-add', 'http://host/a.vtt', 'auto', 'Subtitle 1', ''],
    ['sub-add', 'http://host/b.vtt', 'auto', 'Subtitle 2', ''],
  ]);
 });
 test('a stream with no external tracks emits no track commands', () => {
  assert.deepEqual(buildTrackCommands(stream()), []);
 });
 test('selectPreferredStream skips dub entries in favour of the original audio', () => {
  const streams = [
    stream({ quality: '1080p (Dub)' }),
    stream({ quality: '720p (Sub)' }),
    stream({ quality: '480p (Dub)' }),
  ];
  // Language beats the quality hint: a 1080p dub is the wrong file, not a
  // better one.
  assert.equal(selectPreferredStream(streams)?.quality, '720p (Sub)');
  assert.equal(selectPreferredStream(streams, '1080')?.quality, '720p (Sub)');
 });
 test('selectPreferredStream prefers an entry carrying a Japanese audio track', () => {
  const streams = [
    stream({ quality: '1080p' }),
    stream({ quality: '720p', audios: [{ url: 'http://host/ja.m4a', lang: 'ja' }] }),
  ];
  assert.equal(selectPreferredStream(streams)?.quality, '720p');
 });
 test('an all-dub list still plays rather than failing', () => {
  const streams = [stream({ quality: '1080p Dub' }), stream({ quality: '720p Dub' })];
  assert.equal(selectPreferredStream(streams)?.quality, '1080p Dub');
  assert.equal(selectPreferredStream(streams, '720')?.quality, '720p Dub');
 });
 test('selectPreferredStream honours a quality hint, else takes the first', () => {
  const streams = [stream({ quality: '360p' }), stream({ quality: '1080p' })];
  assert.equal(selectPreferredStream(streams, '1080')?.quality, '1080p');
  assert.equal(selectPreferredStream(streams, '1080P')?.quality, '1080p');
  // Extensions label streams with the host name, so the hint matches a substring.
  const decorated = [
    stream({ quality: 'Doodstream - 360p' }),
    stream({ quality: 'Vidhide - 720p' }),
  ];
  assert.equal(selectPreferredStream(decorated, '720')?.quality, 'Vidhide - 720p');
  // Extensions pre-sort by their own preference, so the first entry wins.
  assert.equal(selectPreferredStream(streams)?.quality, '360p');
  // A hint that matches nothing falls back rather than failing.
  assert.equal(selectPreferredStream(streams, '4k')?.quality, '360p');
 });
 test('selectPreferredStream returns null for an empty list', () => {
  assert.equal(selectPreferredStream([]), null);
  assert.equal(selectPreferredStream([], '1080p'), null);
 });
@@ -0,0 +1,238 @@
 import { toMpvHeaderFields } from './headers';
 import type { ResolvedStream } from './types';
 /**
 * Japanese first, always, and for subtitles Japanese *only*: the primary slot
 * belongs to the language being mined, and an English track belongs in the
 * secondary slot, where the `secondarySub` machinery puts it by language tag.
 * For audio, mpv falls back to the first track when nothing matches, so an
 * English-only release still plays.
 */
 export const JAPANESE_LANGUAGE_PREFERENCE = 'ja,jpn,jp,japanese';
 /**
 * mpv must not scan the filesystem for sidecar subtitles when the "file" is a
 * network stream, and the secondary slot stays empty so the overlay only ever
 * reads one track. Everything else is left to normal track selection, driven
 * by the language preferences above.
 *
 * `alang`/`slang` are set as properties instead of file-local options: their
 * values are comma-separated lists, and a comma inside a `loadfile` option
 * value splits the option list.
 */
 const BASE_LOADFILE_OPTIONS = [
  'sub-auto=no',
  'secondary-sid=no',
  'secondary-sub-visibility=no',
  'sub-visibility=yes',
 ];
 /** Matches a language tag or a label such as "Japanese (Sub)" or "[JPN]". */
 const JAPANESE_PATTERN = /(^|[^a-z])(ja|jp|jpn|japanese|日本語)([^a-z]|$)/i;
 /** Extensions label dub entries in the quality string, e.g. "1080p (Dub)". */
 const DUB_PATTERN = /(^|[^a-z])(dub|dubbed|dublado|latino|castellano)([^a-z]|$)/i;
 /** The counterpart label for original-audio entries, e.g. "SUB - 1080p". */
 const SUBBED_PATTERN = /(^|[^a-z])(sub|subbed|softsub|hardsub|subtitulado|raw)([^a-z]|$)/i;
 export type MpvCommand = Array<string | number>;
 export interface BuildPlaybackOptions {
  stream: ResolvedStream;
  /** Shown as the mpv window/OSD title. */
  title?: string;
  /** Resume position in seconds. */
  startSeconds?: number;
 }
 export function isJapaneseTag(value: string): boolean {
  return JAPANESE_PATTERN.test(value);
 }
 /**
 * Build the mpv `loadfile` option string for a stream.
 *
 * Headers ride as `file-local-options/http-header-fields` so they apply to this
 * file only, and so SubMiner's Anki media path can read them back off mpv when
 * generating card audio and screenshots. Tracks added later with `sub-add` /
 * `audio-add` inherit them too, which is how external tracks on an
 * authenticated host stay reachable.
 */
 export function buildLoadfileOptions(options: BuildPlaybackOptions): string {
  const parts = [...BASE_LOADFILE_OPTIONS];
  const headerFields = toMpvHeaderFields(options.stream.headers);
  if (headerFields.length > 0) {
    // Escape the mpv option-list separators so a header never splits the list.
    parts.push(`http-header-fields=${escapeOptionValue(headerFields)}`);
  }
  if (options.startSeconds !== undefined && options.startSeconds > 0) {
    parts.push(`start=${options.startSeconds}`);
  }
  return parts.join(',');
 }
 /**
 * mpv splits `loadfile` options on commas and `=`-separates keys, so a value
 * containing either must be quoted. Percent-encoding is mpv's own escape for
 * embedded separators in option values.
 *
 * The count is in UTF-8 bytes of the decoded value, not JS string units, so a
 * non-ASCII header value (extensions supply these) would otherwise under-count
 * and mpv would cut the value short.
 */
 function escapeOptionValue(value: string): string {
  return `%${Buffer.byteLength(value, 'utf8')}%${value}`;
 }
 /**
 * Ordered mpv commands that start playback of a resolved stream.
 *
 * The plugin is told subtitles are being managed before the file loads, so the
 * overlay does not flash the source's own tracks during the swap.
 */
 export function buildPlaybackCommands(options: BuildPlaybackOptions): MpvCommand[] {
  const commands: MpvCommand[] = [
    ['script-message', 'subminer-managed-subtitles-loading'],
    ['set_property', 'alang', JAPANESE_LANGUAGE_PREFERENCE],
    ['set_property', 'slang', JAPANESE_LANGUAGE_PREFERENCE],
    ['loadfile', options.stream.url, 'replace', -1, buildLoadfileOptions(options)],
  ];
  if (options.title !== undefined && options.title.length > 0) {
    commands.push(['set_property', 'force-media-title', options.title]);
  }
  return commands;
 }
 /**
 * Commands that attach the extension's external audio and subtitle tracks.
 *
 * These must be sent *after* the file is loading, so they are separate from
 * {@link buildPlaybackCommands}. Every track is added — even the ones we do not
 * select — so they show up in mpv's track menu and can be switched by hand.
 */
 export function buildTrackCommands(stream: ResolvedStream): MpvCommand[] {
  return [
    ...buildAddTrackCommands('audio-add', stream.audios, 'Audio'),
    ...buildAddTrackCommands('sub-add', stream.subtitles, 'Subtitle'),
  ];
 }
 /**
 * Only a Japanese track is ever selected outright — the primary slot is for
 * the mining language. A non-Japanese track is added unselected: for audio,
 * `alang`'s pick off the container stands; for subtitles, the `secondarySub`
 * auto-load matches the track's language tag against the user's configured
 * secondary languages and routes it to `secondary-sid` instead.
 */
 function buildAddTrackCommands(
  command: 'audio-add' | 'sub-add',
  tracks: Array<{ url: string; lang: string }>,
  kind: 'Audio' | 'Subtitle',
 ): MpvCommand[] {
  const unique = dedupeByUrl(tracks);
  const selected = unique.findIndex((track) => isJapaneseTag(track.lang));
  return unique.map((track, index) => [
    command,
    track.url,
    index === selected ? 'select' : 'auto',
    track.lang || `${kind} ${index + 1}`,
    normalizeLangTag(track.lang),
  ]);
 }
 /** Extension language labels mapped to the tags users put in config. */
 const LANG_TAG_BY_LABEL: Record<string, string> = {
  japanese: 'ja',
  日本語: 'ja',
  english: 'en',
  eng: 'en',
  spanish: 'es',
  español: 'es',
  portuguese: 'pt',
  português: 'pt',
  french: 'fr',
  français: 'fr',
  german: 'de',
  deutsch: 'de',
  italian: 'it',
  italiano: 'it',
  indonesian: 'id',
  arabic: 'ar',
  russian: 'ru',
  korean: 'ko',
  chinese: 'zh',
  thai: 'th',
  vietnamese: 'vi',
 };
 /**
 * mpv's `lang` field is what SubMiner's secondary-subtitle auto-load compares
 * against `secondarySub.secondarySubLanguages`, so a label like "English" must
 * become the tag a user would actually configure. Unknown labels pass through;
 * matching is best-effort, and the raw label stays visible as the track title.
 */
 export function normalizeLangTag(lang: string): string {
  const trimmed = lang.trim();
  if (isJapaneseTag(trimmed)) return 'ja';
  const mapped = LANG_TAG_BY_LABEL[trimmed.toLowerCase()];
  if (mapped !== undefined) return mapped;
  if (/^[A-Za-z]{2,3}([-_][A-Za-z0-9]+)?$/.test(trimmed)) {
    return trimmed.split(/[-_]/, 1)[0]?.toLowerCase() ?? trimmed.toLowerCase();
  }
  return trimmed;
 }
 function dedupeByUrl(
  tracks: Array<{ url: string; lang: string }>,
 ): Array<{ url: string; lang: string }> {
  const seen = new Set<string>();
  return tracks.filter((track) => {
    if (track.url.length === 0 || seen.has(track.url)) return false;
    seen.add(track.url);
    return true;
  });
 }
 /**
 * Rank a stream by how likely it is to carry Japanese audio.
 *
 * Sources commonly return the dub and the original as separate entries rather
 * than as two audio tracks of one entry, so the choice of *entry* is the first
 * place a dub can slip in.
 */
 function scoreStream(stream: ResolvedStream): number {
  if (stream.audios.some((audio) => isJapaneseTag(audio.lang))) return 2;
  const label = stream.quality;
  if (isJapaneseTag(label) || SUBBED_PATTERN.test(label)) return 1;
  if (DUB_PATTERN.test(label)) return -1;
  return 0;
 }
 /**
 * Pick the best stream from an extension's video list.
 *
 * Japanese audio outranks the quality hint — a 1080p dub is the wrong file, not
 * a better one. Within the surviving entries the hint decides, and otherwise
 * the extension's own ordering does.
 */
 export function selectPreferredStream(
  streams: ResolvedStream[],
  preferredQuality?: string,
 ): ResolvedStream | null {
  if (streams.length === 0) return null;
  const best = Math.max(...streams.map(scoreStream));
  const candidates = streams.filter((stream) => scoreStream(stream) === best);
  if (preferredQuality !== undefined && preferredQuality.length > 0) {
    const needle = preferredQuality.toLowerCase();
    const match = candidates.find((stream) => stream.quality.toLowerCase().includes(needle));
    if (match) return match;
  }
  return candidates[0] ?? null;
 }
@@ -0,0 +1,71 @@
 import test from 'node:test';
 import assert from 'node:assert/strict';
 import { interleave, mapSourcesConcurrently } from './multi-source-search';
 const source = (id: string) => ({ id, name: `Source ${id}` });
 test('mapSourcesConcurrently returns results in source order, not completion order', async () => {
  const sources = [source('a'), source('b'), source('c')];
  const delays: Record<string, number> = { a: 20, b: 0, c: 10 };
  const { results, failures } = await mapSourcesConcurrently(sources, async (target) => {
    await new Promise((resolve) => setTimeout(resolve, delays[target.id]));
    return target.id;
  });
  assert.deepEqual(results, ['a', 'b', 'c']);
  assert.deepEqual(failures, []);
 });
 test('a failing source is reported without losing the others', async () => {
  const sources = [source('a'), source('b'), source('c')];
  const { results, failures } = await mapSourcesConcurrently(sources, async (target) => {
    if (target.id === 'b') throw new Error('login required');
    return target.id;
  });
  assert.deepEqual(results, ['a', 'c']);
  assert.deepEqual(failures, [{ sourceId: 'b', sourceName: 'Source b', error: 'login required' }]);
 });
 test('mapSourcesConcurrently never runs more than the concurrency limit at once', async () => {
  const sources = ['a', 'b', 'c', 'd', 'e'].map(source);
  let running = 0;
  let peak = 0;
  await mapSourcesConcurrently(
    sources,
    async () => {
      running += 1;
      peak = Math.max(peak, running);
      await new Promise((resolve) => setTimeout(resolve, 5));
      running -= 1;
    },
    2,
  );
  assert.equal(peak, 2);
 });
 test('mapSourcesConcurrently handles an empty source list', async () => {
  const { results, failures } = await mapSourcesConcurrently([], async () => 'x');
  assert.deepEqual(results, []);
  assert.deepEqual(failures, []);
 });
 test('interleave takes one from each source before taking a second', () => {
  assert.deepEqual(interleave([['a1', 'a2', 'a3'], ['b1'], ['c1', 'c2']]), [
    'a1',
    'b1',
    'c1',
    'a2',
    'c2',
    'a3',
  ]);
 });
 test('interleave ignores empty groups', () => {
  assert.deepEqual(interleave([[], ['b1', 'b2'], []]), ['b1', 'b2']);
  assert.deepEqual(interleave([]), []);
 });
@@ -0,0 +1,85 @@
 import type { SourceSearchFailure } from '../types/anime-browser';
 /**
 * Running one query against every installed source at once.
 *
 * Each source is a separate extension behind the same single-threaded bridge,
 * so the fan-out is bounded rather than unleashed: a dozen extensions all
 * uploading and searching at once starves the ones the user is waiting on.
 */
 /** Enough to hide the latency of a slow source without queueing the bridge. */
 const DEFAULT_CONCURRENCY = 4;
 export interface SourceTarget {
  id: string;
  name: string;
 }
 export interface FanOutResult<T> {
  /** One entry per source that succeeded, in source order. */
  results: T[];
  /** One entry per source that threw, in source order. */
  failures: SourceSearchFailure[];
 }
 /**
 * Run `task` against every source, at most `concurrency` at a time.
 *
 * A source that throws becomes a failure instead of rejecting the whole call —
 * one misconfigured extension must not hide every other source's results.
 */
 export async function mapSourcesConcurrently<S extends SourceTarget, T>(
  sources: S[],
  task: (source: S) => Promise<T>,
  concurrency: number = DEFAULT_CONCURRENCY,
 ): Promise<FanOutResult<T>> {
  // Slots keep the output in source order regardless of completion order, so
  // the same query lays out the same way twice.
  const results: Array<{ value: T } | null> = sources.map(() => null);
  const failures: Array<SourceSearchFailure | null> = sources.map(() => null);
  let next = 0;
  const worker = async (): Promise<void> => {
    for (;;) {
      const index = next;
      next += 1;
      const source = sources[index];
      if (!source) return;
      try {
        results[index] = { value: await task(source) };
      } catch (error) {
        failures[index] = {
          sourceId: source.id,
          sourceName: source.name,
          error: error instanceof Error ? error.message : String(error),
        };
      }
    }
  };
  const workers = Math.max(1, Math.min(concurrency, sources.length));
  await Promise.all(Array.from({ length: workers }, () => worker()));
  return {
    results: results
      .filter((slot): slot is { value: T } => slot !== null)
      .map((slot) => slot.value),
    failures: failures.filter((slot): slot is SourceSearchFailure => slot !== null),
  };
 }
 /**
 * Round-robin merge, so the grid opens with one hit from each source rather
 * than the whole of the first source before the second one starts.
 */
 export function interleave<T>(groups: T[][]): T[] {
  const merged: T[] = [];
  const longest = groups.reduce((max, group) => Math.max(max, group.length), 0);
  for (let index = 0; index < longest; index += 1) {
    for (const group of groups) {
      if (index < group.length) merged.push(group[index] as T);
    }
  }
  return merged;
 }
@@ -0,0 +1,69 @@
 import test from 'node:test';
 import assert from 'node:assert/strict';
 import { mkdtemp, readFile, readdir, writeFile } from 'node:fs/promises';
 import { tmpdir } from 'node:os';
 import path from 'node:path';
 import { PreferenceStore } from './preference-store';
 async function storeFile(): Promise<string> {
  const dir = await mkdtemp(path.join(tmpdir(), 'subminer-prefs-'));
  return path.join(dir, 'anime-preferences.json');
 }
 test('values round-trip through the file', async () => {
  const file = await storeFile();
  await new PreferenceStore(file).set('src-1', [{ key: 'address' }]);
  assert.deepEqual(await new PreferenceStore(file).get('src-1'), [{ key: 'address' }]);
 });
 test('concurrent writes on a cold cache do not lose an update', async () => {
  const file = await storeFile();
  const store = new PreferenceStore(file);
  // Both start before either has loaded; unserialized they would each get their
  // own object and the later persist would drop the other's entry.
  await Promise.all([store.set('src-1', [{ key: 'a' }]), store.set('src-2', [{ key: 'b' }])]);
  const reloaded = new PreferenceStore(file);
  assert.deepEqual(await reloaded.get('src-1'), [{ key: 'a' }]);
  assert.deepEqual(await reloaded.get('src-2'), [{ key: 'b' }]);
 });
 test('a clear racing a set is applied in order', async () => {
  const file = await storeFile();
  const store = new PreferenceStore(file);
  await store.set('pkg:src', [{ key: 'password' }]);
  await Promise.all([store.clear('pkg'), store.set('other:src', [{ key: 'x' }])]);
  const reloaded = new PreferenceStore(file);
  assert.deepEqual(await reloaded.get('pkg:src'), []);
  assert.deepEqual(await reloaded.get('other:src'), [{ key: 'x' }]);
 });
 test('the file is written owner-only and leaves no temporary behind', async () => {
  const file = await storeFile();
  await new PreferenceStore(file).set('src-1', [{ key: 'password' }]);
  const { stat } = await import('node:fs/promises');
  assert.equal((await stat(file)).mode & 0o777, 0o600);
  assert.deepEqual(await readdir(path.dirname(file)), [path.basename(file)]);
 });
 test('a corrupt file starts empty rather than blocking the browser', async () => {
  const file = await storeFile();
  await writeFile(file, '{ not json');
  assert.deepEqual(await new PreferenceStore(file).get('src-1'), []);
 });
 test('a write replaces the previous contents wholesale', async () => {
  const file = await storeFile();
  const store = new PreferenceStore(file);
  await store.set('src-1', [{ key: 'first' }]);
  await store.set('src-1', [{ key: 'second' }]);
  const parsed = JSON.parse(await readFile(file, 'utf8')) as Record<string, unknown[]>;
  assert.deepEqual(parsed['src-1'], [{ key: 'second' }]);
 });
@@ -0,0 +1,101 @@
 import { readFile, writeFile, rename, rm, mkdir } from 'node:fs/promises';
 import path from 'node:path';
 import type { BridgePreference } from './types';
 /**
 * Persists each source's preference array verbatim, keyed by bridge source id.
 *
 * Extensions keep credentials in here (the Jellyfin source stores a password),
 * so the file is written with owner-only permissions.
 */
 export class PreferenceStore {
  private readonly file: string;
  private cache: Record<string, BridgePreference[]> | null = null;
  /**
   * Mutations run one at a time. Two concurrent load-modify-persist cycles
   * starting on a cold cache would each read their own object, and the later
   * write would drop the earlier one's edit.
   */
  private queue: Promise<unknown> = Promise.resolve();
  constructor(file: string) {
    this.file = file;
  }
  private enqueue<T>(operation: () => Promise<T>): Promise<T> {
    const result = this.queue.then(operation, operation);
    // Keep the chain alive after a rejection so one failure cannot wedge it.
    this.queue = result.catch(() => undefined);
    return result;
  }
  private async load(): Promise<Record<string, BridgePreference[]>> {
    if (this.cache !== null) return this.cache;
    try {
      const parsed = JSON.parse(await readFile(this.file, 'utf8')) as unknown;
      this.cache =
        parsed !== null && typeof parsed === 'object' && !Array.isArray(parsed)
          ? (parsed as Record<string, BridgePreference[]>)
          : {};
    } catch {
      // Missing or corrupt file starts empty rather than blocking the browser.
      this.cache = {};
    }
    return this.cache;
  }
  async get(sourceId: string): Promise<BridgePreference[]> {
    return this.enqueue(async () => {
      const all = await this.load();
      return all[sourceId] ?? [];
    });
  }
  async set(sourceId: string, preferences: BridgePreference[]): Promise<void> {
    await this.enqueue(async () => {
      const all = await this.load();
      all[sourceId] = preferences;
      await this.persist(all);
    });
  }
  /**
   * Drop every saved value whose key starts with `prefix`.
   *
   * Removing an extension should not leave its credentials on disk, and a
   * source id is not knowable once the APK is gone — so callers pass the
   * package name and this clears anything recorded under it.
   */
  async clear(prefix: string): Promise<void> {
    await this.enqueue(async () => {
      const all = await this.load();
      let changed = false;
      for (const key of Object.keys(all)) {
        if (key === prefix || key.startsWith(`${prefix}:`)) {
          delete all[key];
          changed = true;
        }
      }
      if (changed) await this.persist(all);
    });
  }
  /**
   * Write through a temporary file and rename into place.
   *
   * A write interrupted partway would otherwise leave truncated JSON, and
   * `load()` treats unparseable content as empty — which would quietly discard
   * every saved credential.
   */
  private async persist(all: Record<string, BridgePreference[]>): Promise<void> {
    await mkdir(path.dirname(this.file), { recursive: true });
    const temporary = `${this.file}.tmp`;
    try {
      await writeFile(temporary, JSON.stringify(all, null, 2), { mode: 0o600 });
      await rename(temporary, this.file);
    } catch (error) {
      await rm(temporary, { force: true }).catch(() => undefined);
      throw error;
    }
  }
 }
@@ -0,0 +1,143 @@
 import test from 'node:test';
 import assert from 'node:assert/strict';
 import {
  applyPreferenceValue,
  isSecretPreference,
  parsePreferences,
  type SourcePreferenceView,
 } from './preferences';
 import type { BridgePreference } from './types';
 // Shapes taken from the real Jellyfin extension's preferencesAnime response.
 const RAW: BridgePreference[] = [
  {
    key: 'host_url',
    editTextPreference: {
      title: 'Address',
      summary: 'The server address',
      value: '',
      text: '',
    },
  },
  {
    key: 'password',
    editTextPreference: { title: 'Password', summary: 'The user account password', value: '' },
  },
  {
    key: 'pref_quality',
    listPreference: {
      title: 'Preferred quality',
      summary: 'Preferred quality.',
      valueIndex: 0,
      entries: ['Source', '20 Mbps'],
      entryValues: ['source', '20000000'],
    },
  },
  {
    key: 'pref_episode_details_key',
    multiSelectListPreference: {
      title: 'Additional details for episodes',
      values: [],
      entries: ['Overview', 'Runtime'],
      entryValues: ['overview', 'runtime'],
    },
  },
  {
    key: 'pref_trust_cert',
    switchPreferenceCompat: { title: 'Trust certificate', value: false },
  },
 ];
 function view(views: SourcePreferenceView[], key: string): SourcePreferenceView {
  const found = views.find((candidate) => candidate.key === key);
  assert.ok(found, `missing preference ${key}`);
  return found;
 }
 test('parsePreferences flattens each widget type', () => {
  const views = parsePreferences(RAW);
  assert.equal(views.length, 5);
  assert.equal(view(views, 'host_url').kind, 'text');
  assert.equal(view(views, 'host_url').title, 'Address');
  assert.equal(view(views, 'host_url').value, '');
  const quality = view(views, 'pref_quality');
  assert.equal(quality.kind, 'list');
  // valueIndex 0 resolves through entryValues, not entries.
  assert.equal(quality.value, 'source');
  assert.deepEqual(quality.entries, ['Source', '20 Mbps']);
  assert.deepEqual(view(views, 'pref_episode_details_key').value, []);
  assert.equal(view(views, 'pref_trust_cert').value, false);
 });
 test('parsePreferences skips the bridge context entry and unknown widgets', () => {
  const views = parsePreferences([
    { key: '__mangatan_bridge_context__', sourceId: '1' },
    { key: 'mystery', someFutureWidget: { title: 'X' } },
    ...RAW.slice(0, 1),
  ]);
  assert.deepEqual(
    views.map((v) => v.key),
    ['host_url'],
  );
 });
 test('a list preference with no selection reads as empty', () => {
  const views = parsePreferences([
    {
      key: 'library_pref',
      listPreference: {
        title: 'Select media library',
        valueIndex: -1,
        entries: [],
        entryValues: [],
      },
    },
  ]);
  assert.equal(view(views, 'library_pref').value, '');
 });
 test('applyPreferenceValue writes text into both value and text', () => {
  const updated = applyPreferenceValue(RAW, 'host_url', 'https://media.example');
  const body = updated.find((e) => e.key === 'host_url')!.editTextPreference as Record<
    string,
    unknown
  >;
  assert.equal(body.value, 'https://media.example');
  assert.equal(body.text, 'https://media.example');
  // Other entries are untouched.
  assert.equal(parsePreferences(updated).length, RAW.length);
 });
 test('applyPreferenceValue moves a list preference by entry value', () => {
  const updated = applyPreferenceValue(RAW, 'pref_quality', '20000000');
  const body = updated.find((e) => e.key === 'pref_quality')!.listPreference as Record<
    string,
    unknown
  >;
  assert.equal(body.valueIndex, 1);
  assert.equal(parsePreferences(updated).find((v) => v.key === 'pref_quality')?.value, '20000000');
 });
 test('applyPreferenceValue handles multi-select and switch widgets', () => {
  const multi = applyPreferenceValue(RAW, 'pref_episode_details_key', ['overview']);
  assert.deepEqual(
    parsePreferences(multi).find((v) => v.key === 'pref_episode_details_key')?.value,
    ['overview'],
  );
  const toggled = applyPreferenceValue(RAW, 'pref_trust_cert', true);
  assert.equal(parsePreferences(toggled).find((v) => v.key === 'pref_trust_cert')?.value, true);
 });
 test('applyPreferenceValue leaves unknown keys alone', () => {
  assert.deepEqual(applyPreferenceValue(RAW, 'not-a-key', 'x'), RAW);
 });
 test('secrets are recognised by key or title', () => {
  const views = parsePreferences(RAW);
  assert.equal(isSecretPreference(view(views, 'password')), true);
  assert.equal(isSecretPreference(view(views, 'host_url')), false);
 });
@@ -0,0 +1,132 @@
 import type { BridgePreference } from './types';
 /**
 * Extension preferences arrive as Android preference objects, one wrapper key
 * per widget type. They are stored and sent back verbatim so the extension sees
 * exactly the shape it produced; only the value field is edited.
 */
 export type PreferenceKind = 'text' | 'list' | 'multi' | 'switch';
 /** A preference flattened for rendering. */
 export interface SourcePreferenceView {
  key: string;
  kind: PreferenceKind;
  title: string;
  summary: string | null;
  /** Current value: string for text/list, string[] for multi, boolean for switch. */
  value: string | string[] | boolean;
  /** Display labels, parallel to entryValues. Empty for text/switch. */
  entries: string[];
  entryValues: string[];
 }
 const WIDGETS = {
  editTextPreference: 'text',
  listPreference: 'list',
  multiSelectListPreference: 'multi',
  switchPreferenceCompat: 'switch',
  checkBoxPreference: 'switch',
 } as const satisfies Record<string, PreferenceKind>;
 type WidgetName = keyof typeof WIDGETS;
 function widgetOf(
  entry: BridgePreference,
 ): { name: WidgetName; body: Record<string, unknown> } | null {
  for (const name of Object.keys(WIDGETS) as WidgetName[]) {
    const body = entry[name];
    if (body !== null && typeof body === 'object') {
      return { name, body: body as Record<string, unknown> };
    }
  }
  return null;
 }
 function stringList(value: unknown): string[] {
  return Array.isArray(value)
    ? value.filter((item): item is string => typeof item === 'string')
    : [];
 }
 /** Flatten bridge preference entries for display. Unknown widgets are skipped. */
 export function parsePreferences(raw: BridgePreference[]): SourcePreferenceView[] {
  const views: SourcePreferenceView[] = [];
  for (const entry of raw) {
    if (typeof entry.key !== 'string' || entry.key.startsWith('__')) continue;
    const widget = widgetOf(entry);
    if (!widget) continue;
    const { body } = widget;
    const kind = WIDGETS[widget.name];
    const entries = stringList(body.entries);
    const entryValues = stringList(body.entryValues);
    let value: string | string[] | boolean;
    if (kind === 'multi') {
      value = stringList(body.values);
    } else if (kind === 'switch') {
      value = body.value === true;
    } else if (kind === 'list') {
      const index = typeof body.valueIndex === 'number' ? body.valueIndex : -1;
      // valueIndex is -1 when the extension has no selection yet.
      value = index >= 0 && index < entryValues.length ? entryValues[index]! : '';
    } else {
      value = typeof body.value === 'string' ? body.value : '';
    }
    views.push({
      key: entry.key,
      kind,
      title: typeof body.title === 'string' ? body.title : entry.key,
      summary: typeof body.summary === 'string' ? body.summary : null,
      value,
      entries,
      entryValues,
    });
  }
  return views;
 }
 /**
 * Return a copy of `raw` with one preference's value replaced, in whichever
 * fields that widget type reads. Unknown keys are returned unchanged.
 */
 export function applyPreferenceValue(
  raw: BridgePreference[],
  key: string,
  value: string | string[] | boolean,
 ): BridgePreference[] {
  return raw.map((entry) => {
    if (entry.key !== key) return entry;
    const widget = widgetOf(entry);
    if (!widget) return entry;
    const body = { ...widget.body };
    const kind = WIDGETS[widget.name];
    if (kind === 'multi') {
      body.values = Array.isArray(value) ? value : [];
    } else if (kind === 'switch') {
      body.value = value === true;
    } else if (kind === 'list') {
      const entryValues = stringList(body.entryValues);
      const index = entryValues.indexOf(String(value));
      body.valueIndex = index;
      if (index >= 0) body.value = entryValues[index];
    } else {
      // editTextPreference carries the same string in both value and text.
      body.value = String(value);
      body.text = String(value);
    }
    return { ...entry, [widget.name]: body };
  });
 }
 /** True when the preference should be masked in the UI and in logs. */
 export function isSecretPreference(view: SourcePreferenceView): boolean {
  return /password|token|api[-_ ]?key|secret/i.test(`${view.key} ${view.title}`);
 }
@@ -0,0 +1,117 @@
 import test from 'node:test';
 import assert from 'node:assert/strict';
 import { mkdtemp, mkdir, writeFile } from 'node:fs/promises';
 import { tmpdir } from 'node:os';
 import path from 'node:path';
 import {
  findBundleBinaries,
  PINNED_BUNDLE_SHA256,
  PINNED_BUNDLE_TAG,
  resolveBundleAssetName,
  selectBundleAsset,
  sha256,
  verifyPinnedBundle,
 } from './sidecar-bundle';
 test('resolveBundleAssetName maps supported platform/arch pairs', () => {
  assert.equal(resolveBundleAssetName('darwin', 'arm64'), 'macOS-arm64-bundle.zip');
  assert.equal(resolveBundleAssetName('darwin', 'x64'), 'macOS-x64-bundle.zip');
  assert.equal(resolveBundleAssetName('linux', 'x64'), 'linux-x64-bundle.zip');
  assert.equal(resolveBundleAssetName('win32', 'x64'), 'windows-x64-bundle.zip');
 });
 test('resolveBundleAssetName returns null for unpublished combinations', () => {
  assert.equal(resolveBundleAssetName('linux', 'arm64'), null);
  assert.equal(resolveBundleAssetName('win32', 'arm64'), null);
  assert.equal(resolveBundleAssetName('freebsd', 'x64'), null);
 });
 test('selectBundleAsset skips releases without a matching asset', () => {
  const releases = [
    // The iOS runtime release carries no desktop bundle.
    { tag_name: 'ios-runtime-v7', assets: [{ name: 'MExtensionServer-ios.jar' }] },
    {
      tag_name: 'v1.0.6.0',
      assets: [
        {
          name: 'macOS-arm64-bundle.zip',
          browser_download_url: 'https://example.test/macOS-arm64-bundle.zip',
          size: 133_058_560,
        },
      ],
    },
  ];
  const asset = selectBundleAsset(releases, 'macOS-arm64-bundle.zip');
  assert.equal(asset?.tagName, 'v1.0.6.0');
  assert.equal(asset?.downloadUrl, 'https://example.test/macOS-arm64-bundle.zip');
  assert.equal(asset?.sizeBytes, 133_058_560);
 });
 test('selectBundleAsset returns null when nothing matches', () => {
  assert.equal(selectBundleAsset([{ tag_name: 'v1', assets: [] }], 'linux-x64-bundle.zip'), null);
  assert.equal(selectBundleAsset([], 'linux-x64-bundle.zip'), null);
  assert.equal(selectBundleAsset({ message: 'rate limited' }, 'linux-x64-bundle.zip'), null);
 });
 test('findBundleBinaries locates the nested jre and jar', async () => {
  const root = await mkdtemp(path.join(tmpdir(), 'subminer-bundle-'));
  await mkdir(path.join(root, 'jre', 'jre', 'bin'), { recursive: true });
  await writeFile(path.join(root, 'jre', 'jre', 'bin', 'java'), '');
  await writeFile(path.join(root, 'MExtensionServer-1.0.6.0.jar'), '');
  const binaries = await findBundleBinaries(root);
  assert.equal(binaries?.javaPath, path.join(root, 'jre', 'jre', 'bin', 'java'));
  assert.equal(binaries?.jarPath, path.join(root, 'MExtensionServer-1.0.6.0.jar'));
 });
 test('findBundleBinaries prefers the shallowest java when a nested copy exists', async () => {
  const root = await mkdtemp(path.join(tmpdir(), 'subminer-bundle-'));
  await mkdir(path.join(root, 'bin'), { recursive: true });
  await mkdir(path.join(root, 'bin', 'nested', 'bin'), { recursive: true });
  await writeFile(path.join(root, 'bin', 'java'), '');
  await writeFile(path.join(root, 'bin', 'nested', 'bin', 'java'), '');
  await writeFile(path.join(root, 'MExtensionServer.jar'), '');
  const binaries = await findBundleBinaries(root);
  assert.equal(binaries?.javaPath, path.join(root, 'bin', 'java'));
 });
 test('findBundleBinaries returns null when the bundle is incomplete', async () => {
  const root = await mkdtemp(path.join(tmpdir(), 'subminer-bundle-'));
  await writeFile(path.join(root, 'MExtensionServer.jar'), '');
  assert.equal(await findBundleBinaries(root), null);
 });
 test('sha256 produces lowercase hex digests matching known vectors', () => {
  const encode = (value: string) => new TextEncoder().encode(value);
  assert.equal(
    sha256(encode('')),
    'e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855',
  );
  assert.equal(
    sha256(encode('subminer')),
    'f3b7fdb2037add4cd8f122c090a727243b46b1b9d8a6c379f71573e2df120885',
  );
 });
 test('verifyPinnedBundle accepts a matching hash and rejects a mismatch', () => {
  const asset = 'macOS-arm64-bundle.zip';
  const wrong = verifyPinnedBundle(asset, new TextEncoder().encode('not the bundle'));
  assert.equal(wrong.ok, false);
  assert.match((wrong as { reason: string }).reason, /Checksum mismatch/);
 });
 test('verifyPinnedBundle refuses an asset that has no pin', () => {
  const result = verifyPinnedBundle('linux-x64-bundle.zip', new Uint8Array([1, 2, 3]));
  assert.equal(result.ok, false);
  assert.match((result as { reason: string }).reason, /No pinned checksum/);
 });
 test('the pinned tag and macOS arm64 hash are the verified release', () => {
  assert.equal(PINNED_BUNDLE_TAG, 'v1.0.6.0');
  assert.equal(
    PINNED_BUNDLE_SHA256['macOS-arm64-bundle.zip'],
    '5f4fb03abfe88bc46ddf5f4d8221156ee2d66b9cbad7c4bc3ade4baf3a4266e6',
  );
 });
@@ -0,0 +1,150 @@
 import { createHash } from 'node:crypto';
 import { readdir, stat } from 'node:fs/promises';
 import path from 'node:path';
 /**
 * Locates the M-Extension-Server release bundle for the host platform. Each
 * bundle ships a matching JRE alongside the server JAR, so no system JDK is
 * required.
 */
 export const BUNDLE_RELEASES_URL =
  'https://api.github.com/repos/1Selxo/M-Extension-Server/releases?page=1&per_page=10';
 /**
 * The bridge release this integration was verified against.
 *
 * Upstream publishes no checksums for the desktop bundles, so we pin a tag and
 * a hash we computed ourselves rather than tracking "latest". Bumping this
 * means downloading the new asset, verifying it starts and reports the
 * capabilities in `AnimeBridgeClient.isReady`, then updating both fields.
 */
 export const PINNED_BUNDLE_TAG = 'v1.0.6.0';
 /** SHA-256 of each pinned asset, keyed by release asset name. */
 export const PINNED_BUNDLE_SHA256: Readonly<Record<string, string>> = {
  'macOS-arm64-bundle.zip': '5f4fb03abfe88bc46ddf5f4d8221156ee2d66b9cbad7c4bc3ade4baf3a4266e6',
 };
 /**
 * Check a downloaded asset against its pin. Assets we have not verified
 * ourselves are rejected rather than trusted, so an unpinned platform fails
 * loudly instead of silently running an unchecked binary.
 */
 export function verifyPinnedBundle(
  assetName: string,
  bytes: Uint8Array,
 ): { ok: true } | { ok: false; reason: string } {
  const expected = PINNED_BUNDLE_SHA256[assetName];
  if (expected === undefined) {
    return { ok: false, reason: `No pinned checksum for ${assetName}; refusing to run it.` };
  }
  const actual = sha256(bytes);
  if (actual !== expected) {
    return {
      ok: false,
      reason: `Checksum mismatch for ${assetName}: expected ${expected}, got ${actual}.`,
    };
  }
  return { ok: true };
 }
 /** Release asset name for a platform/arch pair, or null when unsupported. */
 export function resolveBundleAssetName(platform: string, arch: string): string | null {
  if (platform === 'linux') return arch === 'x64' ? 'linux-x64-bundle.zip' : null;
  if (platform === 'win32') return arch === 'x64' ? 'windows-x64-bundle.zip' : null;
  if (platform === 'darwin') {
    if (arch === 'arm64') return 'macOS-arm64-bundle.zip';
    if (arch === 'x64') return 'macOS-x64-bundle.zip';
  }
  return null;
 }
 export interface BundleBinaries {
  javaPath: string;
  jarPath: string;
 }
 async function walk(dir: string, depth: number, onFile: (file: string) => void): Promise<void> {
  if (depth < 0) return;
  let entries;
  try {
    entries = await readdir(dir, { withFileTypes: true });
  } catch {
    return;
  }
  for (const entry of entries) {
    const full = path.join(dir, entry.name);
    if (entry.isDirectory()) await walk(full, depth - 1, onFile);
    else onFile(full);
  }
 }
 /**
 * Find the bundled `java` executable and `MExtensionServer-*.jar` inside an
 * extracted bundle. The archive nests them a few levels deep and the exact
 * layout differs per platform, so this searches rather than assuming a path.
 */
 export async function findBundleBinaries(rootDir: string): Promise<BundleBinaries | null> {
  const javaCandidates: string[] = [];
  const jarCandidates: string[] = [];
  await walk(rootDir, 6, (file) => {
    const base = path.basename(file);
    if (base === 'java' || base === 'java.exe') javaCandidates.push(file);
    else if (/^MExtensionServer.*\.jar$/.test(base)) jarCandidates.push(file);
  });
  // Prefer the shallowest match so a nested duplicate never shadows the real one.
  const byDepth = (a: string, b: string) => a.split(path.sep).length - b.split(path.sep).length;
  const javaPath = javaCandidates.sort(byDepth)[0];
  const jarPath = jarCandidates.sort(byDepth)[0];
  if (!javaPath || !jarPath) return null;
  return { javaPath, jarPath };
 }
 /** Verify a downloaded archive against a pinned SHA-256, as Mangatan does. */
 export function sha256(bytes: Uint8Array): string {
  return createHash('sha256').update(bytes).digest('hex');
 }
 export async function isExecutableFile(file: string): Promise<boolean> {
  try {
    const info = await stat(file);
    return info.isFile();
  } catch {
    return false;
  }
 }
 export interface BundleAsset {
  tagName: string;
  assetName: string;
  downloadUrl: string;
  sizeBytes: number;
 }
 interface GithubRelease {
  tag_name?: string;
  assets?: Array<{ name?: string; browser_download_url?: string; size?: number }>;
 }
 /**
 * Pick the newest release carrying an asset for this platform. Releases are
 * returned newest-first, and some (the iOS runtime) carry no desktop bundle.
 */
 export function selectBundleAsset(releases: unknown, assetName: string): BundleAsset | null {
  if (!Array.isArray(releases)) return null;
  for (const release of releases as GithubRelease[]) {
    const asset = release.assets?.find((candidate) => candidate.name === assetName);
    if (asset?.browser_download_url && release.tag_name) {
      return {
        tagName: release.tag_name,
        assetName,
        downloadUrl: asset.browser_download_url,
        sizeBytes: asset.size ?? 0,
      };
    }
  }
  return null;
 }
@@ -0,0 +1,47 @@
 import test from 'node:test';
 import assert from 'node:assert/strict';
 import { EventEmitter } from 'node:events';
 import type { spawn as spawnType, ChildProcess } from 'node:child_process';
 import { allocatePort, startSidecar } from './sidecar-process';
 import type { BundleBinaries } from './sidecar-bundle';
 const binaries: BundleBinaries = {
  javaPath: '/nonexistent/java',
  jarPath: '/tmp/MExtensionServer.jar',
 };
 /** A ChildProcess stand-in: an EventEmitter with the bits startSidecar touches. */
 function fakeChild(): ChildProcess {
  const child = new EventEmitter();
  Object.assign(child, { stdout: null, stderr: null, kill: () => true });
  return child as unknown as ChildProcess;
 }
 test('a failed spawn rejects instead of throwing an unhandled error event', async () => {
  const port = await allocatePort();
  const child = fakeChild();
  const spawnImpl = (() => {
    // Node emits `error` asynchronously when the binary cannot be executed.
    queueMicrotask(() => child.emit('error', new Error('spawn ENOENT')));
    return child;
  }) as unknown as typeof spawnType;
  await assert.rejects(
    () => startSidecar({ binaries, port, readyTimeoutMs: 2000, spawnImpl }),
    /could not start.*ENOENT/,
  );
 });
 test('an early exit is reported with its code rather than waiting out the deadline', async () => {
  const port = await allocatePort();
  const child = fakeChild();
  const spawnImpl = (() => {
    queueMicrotask(() => child.emit('exit', 1, null));
    return child;
  }) as unknown as typeof spawnType;
  await assert.rejects(
    () => startSidecar({ binaries, port, readyTimeoutMs: 2000, spawnImpl }),
    /exited before becoming ready \(code 1/,
  );
 });
@@ -0,0 +1,133 @@
 import { spawn, type ChildProcess } from 'node:child_process';
 import path from 'node:path';
 import { createServer } from 'node:net';
 import { AnimeBridgeClient } from './bridge-client';
 import type { BundleBinaries } from './sidecar-bundle';
 /** Cold start includes JVM boot plus AndroidCompat init; be generous. */
 export const DEFAULT_READY_TIMEOUT_MS = 30_000;
 const READY_POLL_INTERVAL_MS = 500;
 /** How long to wait for the child to go after each signal before escalating. */
 const STOP_TIMEOUT_MS = 5_000;
 function delay(ms: number): Promise<void> {
  return new Promise((resolve) => setTimeout(resolve, ms));
 }
 /** Ask the OS for a free loopback port, then hand it to the JVM. */
 export async function allocatePort(): Promise<number> {
  return new Promise((resolve, reject) => {
    const server = createServer();
    server.once('error', reject);
    server.listen(0, '127.0.0.1', () => {
      const address = server.address();
      if (address === null || typeof address === 'string') {
        server.close();
        reject(new Error('Could not allocate a loopback port for the anime bridge.'));
        return;
      }
      const { port } = address;
      server.close(() => resolve(port));
    });
  });
 }
 export interface SidecarHandle {
  baseUrl: string;
  port: number;
  client: AnimeBridgeClient;
  stop: () => Promise<void>;
 }
 export interface StartSidecarOptions {
  binaries: BundleBinaries;
  port?: number;
  readyTimeoutMs?: number;
  spawnImpl?: typeof spawn;
  onLog?: (line: string) => void;
 }
 /**
 * Launch the bridge and wait until it reports the capabilities this client
 * needs. The desktop launch contract is `java -jar MExtensionServer.jar <port>`,
 * run from the JAR's own directory.
 */
 export async function startSidecar(options: StartSidecarOptions): Promise<SidecarHandle> {
  const { binaries } = options;
  const port = options.port ?? (await allocatePort());
  const baseUrl = `http://127.0.0.1:${port}`;
  const spawnProcess = options.spawnImpl ?? spawn;
  const child: ChildProcess = spawnProcess(
    binaries.javaPath,
    ['-jar', binaries.jarPath, String(port)],
    {
      cwd: path.dirname(binaries.jarPath),
      stdio: ['ignore', 'pipe', 'pipe'],
    },
  );
  const log = options.onLog;
  if (log) {
    child.stdout?.on('data', (chunk: Buffer) => log(chunk.toString().trimEnd()));
    child.stderr?.on('data', (chunk: Buffer) => log(chunk.toString().trimEnd()));
  }
  let exited: { code: number | null; signal: NodeJS.Signals | null } | null = null;
  let spawnError: Error | null = null;
  const hasExited = new Promise<void>((resolve) => {
    child.once('exit', (code, signal) => {
      exited = { code, signal };
      resolve();
    });
    // A ChildProcess is an EventEmitter: without this listener a failed spawn
    // (a missing or non-executable java) throws in the main process instead of
    // failing the readiness loop below.
    child.once('error', (error: Error) => {
      spawnError = error;
      if (exited === null) exited = { code: null, signal: null };
      resolve();
    });
  });
  const stop = async (): Promise<void> => {
    if (exited !== null) return;
    // Graceful first: the server exposes a shutdown endpoint.
    try {
      await fetch(`${baseUrl}/stop`, { signal: AbortSignal.timeout(2000) });
    } catch {
      // Falling through to a signal is fine; the endpoint may already be gone.
    }
    if (exited !== null) return;
    child.kill();
    // kill() only sends the signal. Wait for the process to actually go, so a
    // restart cannot race the old one still holding the port.
    await Promise.race([hasExited, delay(STOP_TIMEOUT_MS)]);
    if (exited === null) {
      child.kill('SIGKILL');
      await Promise.race([hasExited, delay(STOP_TIMEOUT_MS)]);
    }
  };
  const client = new AnimeBridgeClient({ baseUrl });
  const deadline = Date.now() + (options.readyTimeoutMs ?? DEFAULT_READY_TIMEOUT_MS);
  while (Date.now() < deadline) {
    if (spawnError !== null) {
      throw new Error(`Anime bridge could not start: ${(spawnError as Error).message}`);
    }
    if (exited !== null) {
      const { code, signal } = exited as { code: number | null; signal: NodeJS.Signals | null };
      throw new Error(
        `Anime bridge exited before becoming ready (code ${code}, signal ${signal}).`,
      );
    }
    if (await client.isReady()) return { baseUrl, port, client, stop };
    await delay(READY_POLL_INTERVAL_MS);
  }
  await stop();
  throw new Error(
    `Anime bridge did not become ready within ${options.readyTimeoutMs ?? DEFAULT_READY_TIMEOUT_MS}ms.`,
  );
 }
@@ -0,0 +1,101 @@
 /**
 * Wire types for the M-Extension-Server bridge, which runs Aniyomi
 * (`eu.kanade.tachiyomi.animeextension`) APKs on a desktop JVM and exposes
 * them over loopback HTTP.
 *
 * Field names mirror the server's JSON exactly, including Kotlin/OkHttp
 * internals that leak into the payload (see `OkHttpHeaders`).
 */
 /** Marker key the server uses to select a source inside a SourceFactory APK. */
 export const BRIDGE_CONTEXT_KEY = '__mangatan_bridge_context__';
 /** Handshake shape from `GET /capabilities`. */
 export interface BridgeCapabilities {
  mangatanMihonBridge?: number;
  sourceFactory?: boolean;
  preferenceCallbacks?: boolean;
  youtubeResolver?: boolean;
 }
 /**
 * OkHttp serializes `Headers` as a flat alternating name/value array under an
 * internal field name. Kept verbatim so parsing stays honest about the source.
 */
 export interface OkHttpHeaders {
  namesAndValues$okhttp?: string[];
 }
 export interface BridgeTrack {
  url?: string;
  lang?: string;
 }
 /** One playable stream returned by an extension's `getVideoList`. */
 export interface BridgeVideo {
  /** Page/embed URL the stream was extracted from. */
  url?: string;
  /** Display label, e.g. "1080p". */
  quality?: string;
  /**
   * Playable media URL. Normally a `/video/<token>` proxy URL on the bridge
   * itself, valid only while that server process is alive.
   */
  videoUrl?: string;
  headers?: OkHttpHeaders;
  audioTracks?: BridgeTrack[];
  subtitleTracks?: BridgeTrack[];
 }
 export interface BridgeEpisode {
  name?: string;
  url?: string;
  date_upload?: number;
  scanlator?: string;
  episode_number?: number;
 }
 export interface BridgeAnime {
  url?: string;
  title?: string;
  artist?: string;
  author?: string;
  description?: string;
  genres?: string[];
  status?: number;
  thumbnail_url?: string;
 }
 /** One source inside an extension APK. A SourceFactory APK yields several. */
 export interface BridgeSourceDescriptor {
  id?: string | number;
  name?: string;
  lang?: string;
  baseUrl?: string;
 }
 export interface BridgeAnimePage {
  animes?: BridgeAnime[];
  hasNextPage?: boolean;
 }
 /** The server reports failures as HTTP 200 with an error body. */
 export interface BridgeErrorBody {
  error?: string;
  code?: number;
 }
 /** A source preference entry, passed through to the extension unchanged. */
 export interface BridgePreference {
  key: string;
  [field: string]: unknown;
 }
 /** Normalized stream, ready to hand to mpv. */
 export interface ResolvedStream {
  url: string;
  quality: string;
  headers: Record<string, string>;
  subtitles: Array<{ url: string; lang: string }>;
  audios: Array<{ url: string; lang: string }>;
 }
@@ -0,0 +1,512 @@
 import { describe, el } from './dom';
 import { sourceOptionLabel, summarizeSearch } from './format';
 import { applySearchUpdate, idleSearchProgress, summarizeProgress } from './search-progress';
 import { createExtensionsPanel } from './extensions-panel';
 import { renderPreferences, renderPreferencesUnavailable } from './preferences-fields';
 import { ALL_SOURCES_ID } from '../types/anime-browser';
 import type {
  AnimeBrowserAPI,
  AnimeBrowserBridgeState,
  AnimeBrowserEntry,
  AnimeBrowserEpisode,
  AnimeBrowserSource,
 } from '../types/anime-browser';
 declare global {
  interface Window {
    animeBrowserAPI: AnimeBrowserAPI;
  }
 }
 const api = window.animeBrowserAPI;
 const searchForm = el<HTMLFormElement>('search-form');
 const searchInput = el<HTMLInputElement>('search-input');
 const searchButton = el<HTMLButtonElement>('search-button');
 const sourceSelect = el<HTMLSelectElement>('source-select');
 const grid = el<HTMLDivElement>('grid');
 const gridEmpty = el<HTMLParagraphElement>('grid-empty');
 const results = el<HTMLElement>('results');
 const detail = el<HTMLElement>('detail');
 const detailBack = el<HTMLButtonElement>('detail-back');
 const detailCover = el<HTMLImageElement>('detail-cover');
 const detailTitle = el<HTMLHeadingElement>('detail-title');
 const detailChips = el<HTMLDivElement>('detail-chips');
 const detailDescription = el<HTMLParagraphElement>('detail-description');
 const episodes = el<HTMLOListElement>('episodes');
 const episodesCount = el<HTMLSpanElement>('episodes-count');
 const banner = el<HTMLDivElement>('bridge-banner');
 const bannerMessage = el<HTMLSpanElement>('bridge-message');
 const bannerMeter = el<HTMLSpanElement>('bridge-meter');
 const bannerMeterFill = el<HTMLElement>('bridge-meter-fill');
 const statusMessage = el<HTMLSpanElement>('status-message');
 const browseTab = el<HTMLButtonElement>('tab-browse');
 const extensionsTab = el<HTMLButtonElement>('tab-extensions');
 const settingsTab = el<HTMLButtonElement>('tab-settings');
 const layout = el<HTMLElement>('layout');
 const extensionsPanel = el<HTMLElement>('extensions');
 const settingsPanel = el<HTMLElement>('settings');
 const settingsFields = el<HTMLDivElement>('settings-fields');
 const settingsTitle = el<HTMLHeadingElement>('settings-title');
 /** The anime the detail page is showing, with the source that produced it. */
 let selectedAnime: { url: string; title: string; sourceId: string } | null = null;
 /** Where the results grid was scrolled to before the detail page covered it. */
 let resultsScrollTop = 0;
 /* ---------- tabs ---------- */
 type View = 'browse' | 'extensions' | 'settings';
 let currentView: View = 'browse';
 /**
 * Show one view at a time. The panels used to sit above the results, which left
 * a long extension list scrolling inside a sliver of the window; as tabs each
 * one gets the whole content region.
 */
 function setView(view: View): void {
  currentView = view;
  layout.classList.toggle('hidden', view !== 'browse');
  extensionsPanel.classList.toggle('hidden', view !== 'extensions');
  settingsPanel.classList.toggle('hidden', view !== 'settings');
  browseTab.setAttribute('aria-selected', String(view === 'browse'));
  extensionsTab.setAttribute('aria-selected', String(view === 'extensions'));
  settingsTab.setAttribute('aria-selected', String(view === 'settings'));
 }
 function setStatus(message: string, tone: 'info' | 'ok' | 'error' = 'info'): void {
  statusMessage.textContent = message;
  statusMessage.parentElement?.setAttribute('data-tone', tone);
 }
 const BRIDGE_LABELS: Record<AnimeBrowserBridgeState['stage'], string> = {
  idle: 'Starting the extension bridge',
  locating: 'Looking up the extension bridge release',
  downloading: 'Downloading the extension bridge',
  verifying: 'Verifying the download',
  extracting: 'Unpacking the extension bridge',
  starting: 'Starting the extension bridge',
  ready: 'Bridge ready',
  failed: 'Bridge failed to start',
 };
 const BUSY_STAGES = new Set([
  'idle',
  'locating',
  'downloading',
  'verifying',
  'extracting',
  'starting',
 ]);
 function renderBridgeState(state: AnimeBrowserBridgeState): void {
  const busy = BUSY_STAGES.has(state.stage);
  banner.dataset.stage = state.stage;
  banner.dataset.busy = String(busy);
  // Once ready with nothing to report, the banner has nothing to say.
  const hide = state.stage === 'ready' && state.message === null;
  banner.classList.toggle('hidden', hide);
  bannerMessage.textContent = state.message ?? BRIDGE_LABELS[state.stage];
  const showMeter = state.progress !== null;
  bannerMeter.classList.toggle('hidden', !showMeter);
  if (state.progress !== null) {
    bannerMeterFill.style.width = `${Math.round(state.progress * 100)}%`;
  }
  const ready = state.stage === 'ready';
  searchInput.disabled = !ready;
  searchButton.disabled = !ready;
 }
 /* ---------- source picker ---------- */
 /**
 * The picker lists every installed source, plus an "All sources" entry that
 * searches them together. That entry only earns its place with more than one
 * source installed.
 */
 function renderSources(sources: AnimeBrowserSource[], selectedId: string | null): void {
  const options: HTMLOptionElement[] = [];
  if (sources.length > 1) {
    const all = document.createElement('option');
    all.value = ALL_SOURCES_ID;
    all.textContent = `All sources (${sources.length})`;
    all.selected = selectedId === ALL_SOURCES_ID;
    options.push(all);
  }
  for (const source of sources) {
    const option = document.createElement('option');
    option.value = source.id;
    option.textContent = sourceOptionLabel(source);
    option.selected = source.id === selectedId;
    options.push(option);
  }
  sourceSelect.replaceChildren(...options);
  sourceSelect.disabled = options.length <= 1;
 }
 function searchingAllSources(): boolean {
  return sourceSelect.value === ALL_SOURCES_ID;
 }
 /* ---------- results ---------- */
 function createCard(entry: AnimeBrowserEntry, showSource: boolean): HTMLButtonElement {
  const card = document.createElement('button');
  card.type = 'button';
  card.className = 'card';
  const art = document.createElement('div');
  art.className = 'card-art';
  if (entry.thumbnailUrl) {
    const img = document.createElement('img');
    img.src = entry.thumbnailUrl;
    img.alt = '';
    img.loading = 'lazy';
    // A dead cover should fall back to the initial, not a broken-image icon.
    img.addEventListener('error', () => {
      img.remove();
      art.classList.add('is-empty');
    });
    art.append(img);
  } else {
    art.classList.add('is-empty');
  }
  art.dataset.initial = entry.title.trim().charAt(0).toUpperCase() || '?';
  if (showSource) {
    const badge = document.createElement('span');
    badge.className = 'card-source';
    badge.textContent = entry.sourceName;
    art.append(badge);
  }
  const title = document.createElement('div');
  title.className = 'card-title';
  title.textContent = entry.title;
  card.append(art, title);
  card.title = showSource ? `${entry.title} — ${entry.sourceName}` : entry.title;
  card.addEventListener('click', () => {
    void openDetail(entry);
  });
  return card;
 }
 function renderEntries(entries: AnimeBrowserEntry[], emptyMessage: string): void {
  // Which source a cover came from only matters when they are mixed together.
  const showSource = searchingAllSources();
  grid.replaceChildren(...entries.map((entry) => createCard(entry, showSource)));
  const empty = entries.length === 0;
  gridEmpty.classList.toggle('hidden', !empty);
  gridEmpty.textContent = emptyMessage;
 }
 /** Streamed results land at the end of the grid, in arrival order. */
 function appendEntries(entries: AnimeBrowserEntry[]): void {
  const showSource = searchingAllSources();
  grid.append(...entries.map((entry) => createCard(entry, showSource)));
 }
 function formatEpisodeIndex(episode: AnimeBrowserEpisode, fallbackIndex: number): string {
  const value = episode.number ?? fallbackIndex;
  return Number.isInteger(value) ? String(value).padStart(2, '0') : value.toFixed(1);
 }
 function renderEpisodes(list: AnimeBrowserEpisode[]): void {
  episodesCount.textContent = list.length === 0 ? '' : `${list.length}`;
  episodes.replaceChildren(
    ...list.map((episode, index) => {
      const item = document.createElement('li');
      const button = document.createElement('button');
      button.type = 'button';
      button.className = 'cue';
      const cueIndex = document.createElement('span');
      cueIndex.className = 'cue-index';
      cueIndex.textContent = formatEpisodeIndex(episode, list.length - index);
      const name = document.createElement('span');
      name.className = 'cue-name';
      name.textContent = episode.name;
      if (episode.uploadedAt !== null) {
        const sub = document.createElement('span');
        sub.className = 'cue-sub';
        sub.textContent = new Date(episode.uploadedAt).toISOString().slice(0, 10);
        name.append(sub);
      }
      button.append(cueIndex, name);
      button.addEventListener('click', () => {
        void playEpisode(button, episode);
      });
      item.append(button);
      return item;
    }),
  );
 }
 /**
 * The detail page replaces the results grid rather than squeezing in beside
 * it. The grid stays in the DOM with its scroll position remembered, so Back
 * returns to the same results without re-running the search.
 */
 async function openDetail(entry: AnimeBrowserEntry): Promise<void> {
  selectedAnime = { url: entry.url, title: entry.title, sourceId: entry.sourceId };
  resultsScrollTop = results.scrollTop;
  results.classList.add('hidden');
  detail.classList.remove('hidden');
  detail.scrollTop = 0;
  detailTitle.textContent = entry.title;
  detailDescription.textContent = 'Loading…';
  detailChips.replaceChildren();
  episodes.replaceChildren();
  episodesCount.textContent = '';
  detailCover.src = entry.thumbnailUrl ?? '';
  try {
    // Always ask the entry's own source: after an all-sources search the
    // picker's selection says nothing about where this cover came from.
    const [details, episodeList] = await Promise.all([
      api.getDetails(entry.url, entry.sourceId),
      api.getEpisodes(entry.url, entry.sourceId),
    ]);
    detailTitle.textContent = details.title;
    detailDescription.textContent = details.description ?? 'No description from this source.';
    if (details.thumbnailUrl) detailCover.src = details.thumbnailUrl;
    const chips: HTMLSpanElement[] = [];
    const source = document.createElement('span');
    source.className = 'chip source';
    source.textContent = entry.sourceName;
    chips.push(source);
    if (details.status !== 'unknown') {
      const status = document.createElement('span');
      status.className = 'chip status';
      status.textContent = details.status.replace(/-/g, ' ');
      chips.push(status);
    }
    for (const genre of details.genres.slice(0, 6)) {
      const chip = document.createElement('span');
      chip.className = 'chip';
      chip.textContent = genre;
      chips.push(chip);
    }
    detailChips.replaceChildren(...chips);
    renderEpisodes(episodeList);
    setStatus(`${details.title} · ${episodeList.length} episodes`);
  } catch (error) {
    detailDescription.textContent = '';
    setStatus(describe(error), 'error');
  }
 }
 function closeDetail(): void {
  detail.classList.add('hidden');
  results.classList.remove('hidden');
  results.scrollTop = resultsScrollTop;
  selectedAnime = null;
 }
 async function playEpisode(button: HTMLButtonElement, episode: AnimeBrowserEpisode): Promise<void> {
  if (!selectedAnime) return;
  for (const other of episodes.querySelectorAll<HTMLButtonElement>('.cue')) {
    other.removeAttribute('data-state');
  }
  button.dataset.state = 'loading';
  setStatus(`Resolving ${episode.name}…`);
  const result = await api.playEpisode({
    sourceId: selectedAnime.sourceId,
    animeUrl: selectedAnime.url,
    animeTitle: selectedAnime.title,
    episodeUrl: episode.url,
    episodeName: episode.name,
  });
  if (result.ok) {
    button.dataset.state = 'playing';
    setStatus(
      result.quality ? `Playing ${episode.name} · ${result.quality}` : `Playing ${episode.name}`,
      'ok',
    );
  } else {
    button.removeAttribute('data-state');
    setStatus(result.error ?? 'Could not play that episode.', 'error');
  }
 }
 /* ---------- streamed search ---------- */
 /**
 * Results are pushed per source while the search call is still pending, so a
 * fast source is on screen before a slow one answers. The grid is built from
 * those pushes; the awaited result then settles the final status line (and
 * backfills the grid if no push ever arrived).
 */
 let progress = idleSearchProgress();
 /** Orders runSearch calls so a slow search cannot finish over a newer one. */
 let searchRequest = 0;
 api.onSearchUpdate((update) => {
  const applied = applySearchUpdate(progress, update);
  if (!applied) return; // A superseded search; let it run out quietly.
  progress = applied.progress;
  if (applied.started) {
    grid.replaceChildren();
    gridEmpty.classList.add('hidden');
    return;
  }
  if (applied.entries.length > 0) appendEntries(applied.entries);
  if (!progress.done) {
    setStatus(summarizeProgress(progress), progress.failures.length > 0 ? 'error' : 'info');
  }
 });
 async function runSearch(query: string): Promise<void> {
  const request = ++searchRequest;
  // A new search means new results; leave the detail page for them.
  if (!detail.classList.contains('hidden')) closeDetail();
  setStatus(query ? `Searching for “${query}”…` : 'Loading popular…');
  grid.replaceChildren();
  gridEmpty.classList.add('hidden');
  try {
    const result = query ? await api.search(query) : await api.getPopular();
    // A newer search owns the grid now; this one's result is history.
    if (request !== searchRequest) return;
    // Every source failing is an error, not an empty result set.
    if (result.entries.length === 0 && result.failures.length > 0) {
      const first = result.failures[0];
      renderEntries([], `${first?.sourceName}: ${first?.error}`);
      setStatus(summarizeSearch(result), 'error');
      return;
    }
    // The stream already filled the grid; only render from the result when no
    // update arrived (covers a host without streaming wired up).
    if (grid.childElementCount === 0 || result.entries.length === 0) {
      renderEntries(
        result.entries,
        query ? `Nothing found for “${query}”.` : 'This source returned nothing.',
      );
    }
    setStatus(summarizeSearch(result), result.failures.length > 0 ? 'error' : 'info');
  } catch (error) {
    if (request !== searchRequest) return;
    renderEntries([], describe(error));
    setStatus(describe(error), 'error');
  }
 }
 /* ---------- source settings ---------- */
 async function openSettings(): Promise<void> {
  const option = sourceSelect.selectedOptions[0];
  settingsTitle.textContent = option ? `${option.textContent} settings` : 'Source settings';
  settingsFields.replaceChildren();
  setView('settings');
  // Settings belong to one extension, so there is nothing coherent to show for
  // "All sources".
  if (searchingAllSources()) {
    renderPreferencesUnavailable(
      settingsFields,
      'Pick a single source in the Source picker to edit its settings.',
    );
    return;
  }
  const sourceId = sourceSelect.value;
  try {
    renderPreferences(settingsFields, await api.getPreferences(sourceId), (key, value) =>
      api.setPreference(sourceId, key, value),
    );
  } catch (error) {
    setStatus(describe(error), 'error');
    setView('browse');
  }
 }
 /* ---------- wiring ---------- */
 async function refreshSources(): Promise<void> {
  const snapshot = await api.getSnapshot();
  renderSources(snapshot.sources, snapshot.selectedSourceId);
 }
 const extensions = createExtensionsPanel({ api, setStatus, onSourcesChanged: refreshSources });
 browseTab.addEventListener('click', () => setView('browse'));
 settingsTab.addEventListener('click', () => void openSettings());
 extensionsTab.addEventListener('click', () => {
  setView('extensions');
  void extensions.refresh();
 });
 searchForm.addEventListener('submit', (event) => {
  event.preventDefault();
  // Searching is a browse action, whichever tab it was typed from.
  setView('browse');
  void runSearch(searchInput.value.trim());
 });
 sourceSelect.addEventListener('change', () => {
  void (async () => {
    await api.selectSource(sourceSelect.value);
    // Settings belong to the source, so reload them rather than showing stale fields.
    if (currentView === 'settings') await openSettings();
    await runSearch(searchInput.value.trim());
  })();
 });
 detailBack.addEventListener('click', closeDetail);
 document.addEventListener('keydown', (event) => {
  if (event.key === 'Escape' && !detail.classList.contains('hidden')) {
    closeDetail();
  }
 });
 api.onBridgeState(renderBridgeState);
 void (async () => {
  renderBridgeState({ stage: 'idle', progress: null, message: null });
  try {
    const state = await api.ensureBridge();
    renderBridgeState(state);
    const snapshot = await api.getSnapshot();
    renderSources(snapshot.sources, snapshot.selectedSourceId);
    if (state.stage === 'ready' && snapshot.sources.length > 0) {
      searchInput.focus();
      await runSearch('');
    } else if (state.stage === 'ready') {
      setStatus(state.message ?? 'No extensions installed.', 'error');
    } else {
      setStatus(state.message ?? 'The extension bridge is not available.', 'error');
    }
  } catch (error) {
    // Without this the window keeps the "starting" banner up forever, with the
    // search box disabled and nothing saying why.
    renderBridgeState({ stage: 'failed', progress: null, message: describe(error) });
    setStatus(describe(error), 'error');
  }
 })();
@@ -0,0 +1,13 @@
 /** Small helpers shared by the anime browser's panels. */
 export function el<T extends HTMLElement>(id: string): T {
  const node = document.getElementById(id);
  if (!node) throw new Error(`Missing element #${id}`);
  return node as T;
 }
 export function describe(error: unknown): string {
  const message = error instanceof Error ? error.message : String(error);
  // Electron wraps handler errors; keep only the useful tail.
  return message.replace(/^Error invoking remote method '[^']+':\s*/, '').replace(/^Error:\s*/, '');
 }
@@ -0,0 +1,280 @@
 import { describe, el } from './dom';
 import { describeInstalled } from './format';
 import type {
  AnimeBrowserAPI,
  AvailableExtension,
  InstalledExtensionView,
 } from '../types/anime-browser';
 /**
 * The Extensions tab: what is installed, which repositories feed it, and what
 * those repositories still offer.
 *
 * Installed extensions get their own section at the top, listed from the
 * extensions directory rather than from a repository catalogue — an APK dropped
 * in by hand, or one whose repository has since been removed, is still
 * installed and has to stay removable.
 */
 export interface ExtensionsPanelOptions {
  api: AnimeBrowserAPI;
  setStatus: (message: string, tone?: 'info' | 'ok' | 'error') => void;
  /** Called after an install or removal, so the source picker keeps up. */
  onSourcesChanged: () => Promise<void>;
 }
 interface RowAction {
  label: string;
  primary?: boolean;
  onClick: () => void | Promise<void>;
 }
 interface RowOptions {
  name: string;
  sub: string;
  tags?: Array<{ text: string; className: string }>;
  actions?: RowAction[];
  isError?: boolean;
 }
 function extensionRow(options: RowOptions): HTMLDivElement {
  const row = document.createElement('div');
  row.className = options.isError ? 'ext-row is-error' : 'ext-row';
  const main = document.createElement('div');
  main.className = 'ext-main';
  const name = document.createElement('div');
  name.className = 'ext-name';
  name.textContent = options.name;
  const sub = document.createElement('div');
  sub.className = 'ext-sub';
  sub.textContent = options.sub;
  main.append(name, sub);
  row.append(main);
  for (const tag of options.tags ?? []) {
    const chip = document.createElement('span');
    chip.className = `ext-tag ${tag.className}`;
    chip.textContent = tag.text;
    row.append(chip);
  }
  for (const action of options.actions ?? []) {
    const button = document.createElement('button');
    button.type = 'button';
    button.className = action.primary ? 'primary-button' : 'ghost-button';
    button.textContent = action.label;
    button.addEventListener('click', () => {
      button.disabled = true;
      void Promise.resolve(action.onClick()).finally(() => {
        button.disabled = false;
      });
    });
    row.append(button);
  }
  return row;
 }
 function emptyNote(text: string): HTMLParagraphElement {
  const empty = document.createElement('p');
  empty.className = 'ext-empty';
  empty.textContent = text;
  return empty;
 }
 export function createExtensionsPanel(options: ExtensionsPanelOptions) {
  const { api, setStatus, onSourcesChanged } = options;
  const extensionsDirLabel = el<HTMLSpanElement>('extensions-dir');
  const installedList = el<HTMLDivElement>('installed-list');
  const installedCount = el<HTMLSpanElement>('installed-count');
  const availableList = el<HTMLDivElement>('extensions-list');
  const repoInput = el<HTMLInputElement>('repo-input');
  const repoAddButton = el<HTMLButtonElement>('repo-add');
  const repoList = el<HTMLDivElement>('repo-list');
  async function afterChange(extensionName: string, verb: string): Promise<void> {
    await refresh();
    await onSourcesChanged();
    setStatus(`${extensionName} ${verb}`, 'ok');
  }
  function renderInstalled(
    installed: InstalledExtensionView[],
    offeredPkgs: Set<string>,
    extensionsDir: string,
  ): void {
    installedCount.textContent = installed.length === 0 ? '' : String(installed.length);
    if (installed.length === 0) {
      installedList.replaceChildren(
        emptyNote(
          `Nothing installed yet. Add a repository below, or drop .apk files in ${extensionsDir}.`,
        ),
      );
      return;
    }
    installedList.replaceChildren(
      ...installed.map((view) => {
        const actions: RowAction[] = [];
        // Only offer an update for an extension a configured repository still
        // carries; reinstalling overwrites the APK in place.
        if (offeredPkgs.has(view.pkg)) {
          actions.push({
            label: 'Update',
            onClick: async () => {
              setStatus(`Updating ${view.name}…`);
              try {
                await api.installExtension(view.pkg);
                await afterChange(view.name, 'updated');
              } catch (error) {
                setStatus(describe(error), 'error');
              }
            },
          });
        }
        actions.push({
          label: 'Remove',
          onClick: async () => {
            setStatus(`Removing ${view.name}…`);
            try {
              await api.removeExtension(view.pkg);
              await afterChange(view.name, 'removed');
            } catch (error) {
              setStatus(describe(error), 'error');
            }
          },
        });
        return extensionRow({
          name: view.name,
          sub: view.error ?? describeInstalled(view),
          isError: view.error !== null,
          tags: view.error === null ? [] : [{ text: 'failed', className: 'nsfw' }],
          actions,
        });
      }),
    );
  }
  function renderRepos(repos: string[]): void {
    repoList.replaceChildren(
      ...repos.map((repoUrl) =>
        extensionRow({
          name: repoUrl.replace(/^https:\/\//, '').replace(/\/[^/]*\.json$/, ''),
          sub: repoUrl,
          actions: [
            {
              label: 'Remove',
              onClick: async () => {
                await api.removeRepo(repoUrl);
                await refresh();
              },
            },
          ],
        }),
      ),
    );
  }
  function renderAvailable(
    available: AvailableExtension[],
    repoFailures: Array<{ name: string; error: string }>,
    hasRepos: boolean,
  ): void {
    const rows: HTMLElement[] = repoFailures.map((failure) =>
      extensionRow({ name: failure.name, sub: failure.error, isError: true }),
    );
    for (const extension of available) {
      rows.push(
        extensionRow({
          name: extension.name,
          sub: `${extension.lang} · v${extension.version}`,
          tags: extension.nsfw ? [{ text: '18+', className: 'nsfw' }] : [],
          actions: [
            {
              label: 'Install',
              primary: true,
              onClick: async () => {
                setStatus(`Installing ${extension.name}…`);
                try {
                  await api.installExtension(extension.pkg);
                  await afterChange(extension.name, 'installed');
                } catch (error) {
                  setStatus(describe(error), 'error');
                }
              },
            },
          ],
        }),
      );
    }
    if (rows.length === 0) {
      rows.push(
        emptyNote(
          hasRepos
            ? 'Every extension the configured repositories offer is already installed.'
            : 'No repository configured, so there is nothing to install from.',
        ),
      );
    }
    availableList.replaceChildren(...rows);
  }
  async function refresh(): Promise<void> {
    const snapshot = await api.getSnapshot();
    extensionsDirLabel.textContent = snapshot.extensionsDir;
    renderRepos(snapshot.repos);
    const repoFailures: Array<{ name: string; error: string }> = [];
    let available;
    try {
      available = await api.listAvailableExtensions();
    } catch (error) {
      repoFailures.push({ name: 'Repository error', error: describe(error) });
      available = { extensions: [], failures: [] };
    }
    for (const failure of available.failures) {
      repoFailures.push({ name: failure.repoUrl, error: failure.error });
    }
    const offeredPkgs = new Set(available.extensions.map((extension) => extension.pkg));
    renderInstalled(snapshot.installed, offeredPkgs, snapshot.extensionsDir);
    renderAvailable(
      // Installed extensions have their own section; leaving them here too
      // would list every one of them twice.
      available.extensions.filter((extension) => !extension.installed),
      repoFailures,
      snapshot.repos.length > 0,
    );
  }
  repoAddButton.addEventListener('click', () => {
    void (async () => {
      const url = repoInput.value.trim();
      if (url.length === 0) return;
      try {
        await api.addRepo(url);
        repoInput.value = '';
        setStatus('Repository added');
        await refresh();
      } catch (error) {
        setStatus(describe(error), 'error');
      }
    })();
  });
  repoInput.addEventListener('keydown', (event) => {
    if (event.key === 'Enter') {
      event.preventDefault();
      repoAddButton.click();
    }
  });
  return { refresh };
 }
@@ -0,0 +1,60 @@
 import test from 'node:test';
 import assert from 'node:assert/strict';
 import { describeInstalled, sourceOptionLabel, summarizeSearch } from './format';
 import type { AnimeBrowserSearchResult } from '../types/anime-browser';
 const result = (
  entryCount: number,
  failures: AnimeBrowserSearchResult['failures'] = [],
 ): AnimeBrowserSearchResult => ({
  entries: Array.from({ length: entryCount }, (_unused, index) => ({
    url: `/a/${index}`,
    title: `Anime ${index}`,
    thumbnailUrl: null,
    sourceId: 's',
    sourceName: 'Source',
  })),
  hasNextPage: false,
  failures,
 });
 test('sourceOptionLabel omits the language for an all-language source', () => {
  assert.equal(sourceOptionLabel({ id: '1', name: 'Nyaa', lang: 'ja', pkg: 'p' }), 'Nyaa (ja)');
  assert.equal(sourceOptionLabel({ id: '2', name: 'Jellyfin', lang: 'all', pkg: 'p' }), 'Jellyfin');
 });
 test('summarizeSearch counts results and singularizes one', () => {
  assert.equal(summarizeSearch(result(4)), '4 results');
  assert.equal(summarizeSearch(result(1)), '1 result');
  assert.equal(summarizeSearch(result(0)), '0 results');
 });
 test('summarizeSearch names the sources that failed alongside the ones that answered', () => {
  const summary = summarizeSearch(
    result(6, [
      { sourceId: 'a', sourceName: 'Alpha', error: 'login required' },
      { sourceId: 'b', sourceName: 'Beta', error: 'timed out' },
    ]),
  );
  assert.equal(summary, '6 results · 2 unavailable: Alpha, Beta');
 });
 test('describeInstalled reports sources and languages when the extension loaded', () => {
  assert.equal(
    describeInstalled({
      pkg: 'multi',
      name: 'One, Two',
      langs: ['en', 'ja'],
      sourceCount: 2,
      error: null,
    }),
    'multi · 2 sources · en, ja',
  );
 });
 test('describeInstalled falls back to the package alone when nothing loaded', () => {
  assert.equal(
    describeInstalled({ pkg: 'broken', name: 'broken', langs: [], sourceCount: 0, error: 'boom' }),
    'broken',
  );
 });
@@ -0,0 +1,35 @@
 import type {
  AnimeBrowserSearchResult,
  AnimeBrowserSource,
  InstalledExtensionView,
 } from '../types/anime-browser';
 /** Display strings for the anime browser, kept separate from the DOM. */
 /** `Nyaa (ja)`, or just the name for a source that serves every language. */
 export function sourceOptionLabel(source: AnimeBrowserSource): string {
  return source.lang === 'all' ? source.name : `${source.name} (${source.lang})`;
 }
 /**
 * The status line after a search.
 *
 * An all-sources search can half-succeed, so the sources that failed are named
 * rather than folded into a count the user cannot act on.
 */
 export function summarizeSearch(result: AnimeBrowserSearchResult): string {
  const count = `${result.entries.length} result${result.entries.length === 1 ? '' : 's'}`;
  if (result.failures.length === 0) return count;
  const names = result.failures.map((failure) => failure.sourceName).join(', ');
  return `${count} · ${result.failures.length} unavailable: ${names}`;
 }
 /** `pkg · 3 sources · en, ja`, trimmed to what the extension actually reported. */
 export function describeInstalled(view: InstalledExtensionView): string {
  const parts = [view.pkg];
  if (view.sourceCount > 0) {
    parts.push(`${view.sourceCount} source${view.sourceCount === 1 ? '' : 's'}`);
  }
  if (view.langs.length > 0) parts.push(view.langs.join(', '));
  return parts.join(' · ');
 }
@@ -0,0 +1,158 @@
 <!doctype html>
 <html lang="en">
  <head>
    <meta charset="utf-8" />
    <meta
      http-equiv="Content-Security-Policy"
      content="default-src 'self'; script-src 'self'; style-src 'self'; img-src 'self' data: blob: http://127.0.0.1:* http://localhost:* https:; object-src 'none'; base-uri 'self';"
    />
    <title>SubMiner Anime</title>
    <link rel="stylesheet" href="./style.css" />
  </head>
  <body>
    <header class="topbar">
      <div class="brand-block">
        <div class="brand-title">SubMiner</div>
        <div class="brand-subtitle">Anime</div>
      </div>
      <form class="search-form" id="search-form" role="search">
        <input
          class="text-input search-input"
          id="search-input"
          type="search"
          placeholder="Search anime"
          autocomplete="off"
          aria-label="Search anime"
        />
        <button class="primary-button" id="search-button" type="submit">Search</button>
      </form>
      <label class="source-picker">
        <span class="source-label">Source</span>
        <select class="text-input" id="source-select" aria-label="Extension source"></select>
      </label>
      <nav class="tabs" role="tablist" aria-label="View">
        <button
          class="tab"
          id="tab-browse"
          type="button"
          role="tab"
          aria-controls="layout"
          aria-selected="true"
        >
          Browse
        </button>
        <button
          class="tab"
          id="tab-extensions"
          type="button"
          role="tab"
          aria-controls="extensions"
          aria-selected="false"
        >
          Extensions
        </button>
        <button
          class="tab"
          id="tab-settings"
          type="button"
          role="tab"
          aria-controls="settings"
          aria-selected="false"
        >
          Source settings
        </button>
      </nav>
    </header>
    <div class="bridge-banner hidden" id="bridge-banner" role="status" aria-live="polite">
      <span class="bridge-dot" id="bridge-dot"></span>
      <span class="bridge-message" id="bridge-message"></span>
      <span class="bridge-meter hidden" id="bridge-meter"><i id="bridge-meter-fill"></i></span>
    </div>
    <section class="settings hidden" id="settings" role="tabpanel" aria-labelledby="tab-settings">
      <div class="settings-head">
        <h2 class="settings-title" id="settings-title">Source settings</h2>
        <span class="settings-note">Saved as you change them.</span>
      </div>
      <div class="settings-fields" id="settings-fields"></div>
    </section>
    <section
      class="settings hidden"
      id="extensions"
      role="tabpanel"
      aria-labelledby="tab-extensions"
    >
      <div class="settings-head">
        <h2 class="settings-title">Extensions</h2>
        <span class="settings-note" id="extensions-dir"></span>
      </div>
      <h3 class="ext-group-title">
        Installed <span class="ext-group-count" id="installed-count"></span>
      </h3>
      <div class="ext-list" id="installed-list" aria-label="Installed extensions"></div>
      <h3 class="ext-group-title">Repositories</h3>
      <div class="repo-add">
        <input
          class="text-input"
          id="repo-input"
          type="url"
          placeholder="https://example.org/repo/index.min.json"
          aria-label="Repository index URL"
        />
        <button class="primary-button" id="repo-add" type="button">Add repository</button>
      </div>
      <p class="repo-hint" id="repo-hint">
        SubMiner ships no repositories. Add any https URL to a repository's <code>.json</code> index
        to install extensions from it, or drop <code>.apk</code> files in the extensions directory.
      </p>
      <div class="ext-list" id="repo-list" aria-label="Repositories"></div>
      <h3 class="ext-group-title">Available</h3>
      <div class="ext-list" id="extensions-list" aria-label="Available extensions"></div>
    </section>
    <main class="layout" id="layout" role="tabpanel" aria-labelledby="tab-browse">
      <section class="results" id="results" aria-label="Results">
        <div class="grid" id="grid"></div>
        <p class="empty hidden" id="grid-empty"></p>
      </section>
      <section class="detail hidden" id="detail" aria-label="Details">
        <div class="detail-body">
          <button class="ghost-button detail-back" id="detail-back" type="button">
            ← Back to results
          </button>
          <div class="detail-head">
            <img class="detail-cover" id="detail-cover" alt="" />
            <div class="detail-meta">
              <h2 class="detail-title" id="detail-title"></h2>
              <div class="detail-chips" id="detail-chips"></div>
              <p class="detail-description" id="detail-description"></p>
            </div>
          </div>
          <div class="episodes-head">
            <h3 class="episodes-title">Episodes</h3>
            <span class="episodes-count" id="episodes-count"></span>
          </div>
          <ol class="cue-rail" id="episodes"></ol>
        </div>
      </section>
    </main>
    <footer class="statusbar">
      <span id="status-message"></span>
    </footer>
    <script type="module" src="./animeui.js"></script>
  </body>
 </html>
@@ -0,0 +1,192 @@
 import { describe } from './dom';
 import type { SourcePreferenceView } from '../types/anime-browser';
 /**
 * Renders one extension's settings schema as form fields.
 *
 * The extension owns the schema, so a commit hands back a refreshed one and the
 * whole panel re-renders from it — the Jellyfin source fills in its library
 * picker only after a successful login, and that has to show up.
 */
 export type PreferenceCommit = (
  key: string,
  value: string | string[] | boolean,
 ) => Promise<SourcePreferenceView[]>;
 /** Masked in the UI so a shoulder-surfer cannot read a stored password. */
 function isSecretKey(view: SourcePreferenceView): boolean {
  return /password|token|api[-_ ]?key|secret/i.test(`${view.key} ${view.title}`);
 }
 /**
 * Structure of a schema, ignoring the values.
 *
 * A commit hands back the whole schema, but re-rendering on every save would
 * throw away the "Saved" note, move focus off the control that was just
 * committed, and rebuild a `multi` group out from under a second toggle that is
 * still in flight. Only a structural change is worth a rebuild — which is
 * exactly the case that matters, Jellyfin filling in its library picker after a
 * successful login.
 */
 function schemaShape(views: SourcePreferenceView[]): string {
  return JSON.stringify(
    views.map((view) => [
      view.key,
      view.kind,
      view.title,
      view.summary,
      view.entries,
      view.entryValues,
    ]),
  );
 }
 function renderPreferenceField(
  container: HTMLElement,
  view: SourcePreferenceView,
  commit: PreferenceCommit,
 ): HTMLElement {
  const field = document.createElement('div');
  field.className = 'field';
  const label = document.createElement('label');
  label.className = 'field-label';
  label.textContent = view.title;
  field.append(label);
  if (view.summary) {
    const summary = document.createElement('span');
    summary.className = 'field-summary';
    summary.textContent = view.summary;
    field.append(summary);
  }
  const state = document.createElement('span');
  state.className = 'field-state';
  const save = async (value: string | string[] | boolean): Promise<void> => {
    state.removeAttribute('data-tone');
    state.textContent = 'Saving…';
    try {
      // Commits are chained so a second toggle cannot land before the first
      // one's round trip finishes and overwrite it with a stale array.
      const refreshed = await enqueueCommit(container, () => commit(view.key, value));
      state.dataset.tone = 'ok';
      state.textContent = 'Saved';
      if (schemaShape(refreshed) !== renderedShapes.get(container)) {
        renderPreferences(container, refreshed, commit);
      }
    } catch (error) {
      state.dataset.tone = 'error';
      state.textContent = describe(error);
    }
  };
  const row = document.createElement('div');
  row.className = 'field-row';
  if (view.kind === 'switch') {
    const wrapper = document.createElement('label');
    wrapper.className = 'field-check';
    const box = document.createElement('input');
    box.type = 'checkbox';
    box.checked = view.value === true;
    box.addEventListener('change', () => void save(box.checked));
    wrapper.append(box, document.createTextNode('Enabled'));
    row.append(wrapper);
  } else if (view.kind === 'list') {
    const select = document.createElement('select');
    select.className = 'text-input';
    for (const [index, entryValue] of view.entryValues.entries()) {
      const option = document.createElement('option');
      option.value = entryValue;
      option.textContent = view.entries[index] ?? entryValue;
      option.selected = entryValue === view.value;
      select.append(option);
    }
    if (view.entryValues.length === 0) {
      select.disabled = true;
      const option = document.createElement('option');
      option.textContent = 'Nothing to choose yet';
      select.append(option);
    }
    select.addEventListener('change', () => void save(select.value));
    row.append(select);
  } else if (view.kind === 'multi') {
    const group = document.createElement('div');
    group.className = 'field-multi';
    const selected = new Set(Array.isArray(view.value) ? view.value : []);
    for (const [index, entryValue] of view.entryValues.entries()) {
      const wrapper = document.createElement('label');
      wrapper.className = 'field-check';
      const box = document.createElement('input');
      box.type = 'checkbox';
      box.checked = selected.has(entryValue);
      box.addEventListener('change', () => {
        if (box.checked) selected.add(entryValue);
        else selected.delete(entryValue);
        void save([...selected]);
      });
      wrapper.append(box, document.createTextNode(view.entries[index] ?? entryValue));
      group.append(wrapper);
    }
    row.append(group);
  } else {
    const input = document.createElement('input');
    input.className = 'text-input';
    input.type = isSecretKey(view) ? 'password' : 'text';
    input.value = typeof view.value === 'string' ? view.value : '';
    // Commit on blur/Enter rather than per keystroke; each save round-trips
    // to the extension and may trigger a login.
    input.addEventListener('change', () => void save(input.value));
    row.append(input);
  }
  field.append(row, state);
  return field;
 }
 /** Shape currently on screen, per container, so a save can skip a no-op rebuild. */
 const renderedShapes = new WeakMap<HTMLElement, string>();
 /** Serializes commits per container; see the comment in `save`. */
 const commitQueues = new WeakMap<HTMLElement, Promise<unknown>>();
 function enqueueCommit(
  container: HTMLElement,
  run: () => Promise<SourcePreferenceView[]>,
 ): Promise<SourcePreferenceView[]> {
  const previous = commitQueues.get(container) ?? Promise.resolve();
  const result = previous.then(run, run);
  // Swallow here only so one failed commit does not wedge the queue; the
  // caller still sees the rejection.
  commitQueues.set(
    container,
    result.catch(() => undefined),
  );
  return result;
 }
 export function renderPreferences(
  container: HTMLElement,
  views: SourcePreferenceView[],
  commit: PreferenceCommit,
 ): void {
  renderedShapes.set(container, schemaShape(views));
  container.replaceChildren(...views.map((view) => renderPreferenceField(container, view, commit)));
  if (views.length === 0) {
    const empty = document.createElement('p');
    empty.className = 'field-summary';
    empty.textContent = 'This source has no settings.';
    container.append(empty);
  }
 }
 /** Shown in place of the fields when the source picker is on "All sources". */
 export function renderPreferencesUnavailable(container: HTMLElement, message: string): void {
  const note = document.createElement('p');
  note.className = 'field-summary';
  note.textContent = message;
  container.replaceChildren(note);
 }
@@ -0,0 +1,103 @@
 import test from 'node:test';
 import assert from 'node:assert/strict';
 import { applySearchUpdate, idleSearchProgress, summarizeProgress } from './search-progress';
 import type { AnimeBrowserEntry, SourceSearchFailure } from '../types/anime-browser';
 const entry = (title: string): AnimeBrowserEntry => ({
  url: `/a/${title}`,
  title,
  thumbnailUrl: null,
  sourceId: 's1',
  sourceName: 'Source One',
 });
 const failure: SourceSearchFailure = {
  sourceId: 's2',
  sourceName: 'Source Two',
  error: 'login required',
 };
 test('a search accumulates results and failures update by update', () => {
  let progress = idleSearchProgress();
  let applied = applySearchUpdate(progress, { kind: 'start', token: 1, sourceCount: 3 });
  assert.ok(applied);
  assert.equal(applied.started, true);
  progress = applied.progress;
  applied = applySearchUpdate(progress, {
    kind: 'result',
    token: 1,
    sourceId: 's1',
    sourceName: 'Source One',
    entries: [entry('A'), entry('B')],
  });
  assert.ok(applied);
  assert.deepEqual(
    applied.entries.map((item) => item.title),
    ['A', 'B'],
  );
  progress = applied.progress;
  applied = applySearchUpdate(progress, { kind: 'failure', token: 1, failure });
  assert.ok(applied);
  progress = applied.progress;
  assert.equal(progress.entryCount, 2);
  assert.equal(progress.sourcesDone, 2);
  assert.deepEqual(progress.failures, [failure]);
  assert.equal(progress.done, false);
  applied = applySearchUpdate(progress, { kind: 'done', token: 1 });
  assert.ok(applied);
  assert.equal(applied.progress.done, true);
 });
 test('updates from a superseded search are dropped entirely', () => {
  let progress = idleSearchProgress();
  progress = applySearchUpdate(progress, { kind: 'start', token: 1, sourceCount: 2 })!.progress;
  progress = applySearchUpdate(progress, { kind: 'start', token: 2, sourceCount: 2 })!.progress;
  // The first search's straggler results and completion must not touch token 2.
  assert.equal(
    applySearchUpdate(progress, {
      kind: 'result',
      token: 1,
      sourceId: 's1',
      sourceName: 'Source One',
      entries: [entry('stale')],
    }),
    null,
  );
  assert.equal(applySearchUpdate(progress, { kind: 'done', token: 1 }), null);
  assert.equal(progress.entryCount, 0);
 });
 test('an older start cannot reset a newer search', () => {
  let progress = idleSearchProgress();
  progress = applySearchUpdate(progress, { kind: 'start', token: 5, sourceCount: 1 })!.progress;
  assert.equal(applySearchUpdate(progress, { kind: 'start', token: 4, sourceCount: 9 }), null);
  assert.equal(applySearchUpdate(progress, { kind: 'start', token: 5, sourceCount: 9 }), null);
  assert.equal(progress.sourceCount, 1);
 });
 test('summarizeProgress counts sources and names failures', () => {
  let progress = idleSearchProgress();
  progress = applySearchUpdate(progress, { kind: 'start', token: 1, sourceCount: 5 })!.progress;
  progress = applySearchUpdate(progress, {
    kind: 'result',
    token: 1,
    sourceId: 's1',
    sourceName: 'Source One',
    entries: [entry('A')],
  })!.progress;
  assert.equal(summarizeProgress(progress), 'Searching… 1/5 sources · 1 result');
  progress = applySearchUpdate(progress, { kind: 'failure', token: 1, failure })!.progress;
  assert.equal(
    summarizeProgress(progress),
    'Searching… 2/5 sources · 1 result · unavailable: Source Two',
  );
 });
@@ -0,0 +1,106 @@
 import type { AnimeBrowserEntry, AnimeBrowserSearchUpdate } from '../types/anime-browser';
 import type { SourceSearchFailure } from '../types/anime-browser';
 /**
 * Streamed-search bookkeeping, kept apart from the DOM so the staleness rules
 * are testable.
 *
 * Updates stream in while earlier searches may still be resolving; a search is
 * identified by its token and only the newest one may touch the grid. Tokens
 * are emitted in start order over an ordered channel, so "newest" is simply
 * the highest token seen.
 */
 export interface SearchProgress {
  token: number;
  sourceCount: number;
  sourcesDone: number;
  entryCount: number;
  failures: SourceSearchFailure[];
  done: boolean;
 }
 const IDLE: SearchProgress = {
  token: -1,
  sourceCount: 0,
  sourcesDone: 0,
  entryCount: 0,
  failures: [],
  done: false,
 };
 export interface AppliedUpdate {
  progress: SearchProgress;
  /** Entries this update contributed; append them to the grid. */
  entries: AnimeBrowserEntry[];
  /** True when this update began a new search; clear the grid first. */
  started: boolean;
 }
 export function idleSearchProgress(): SearchProgress {
  return { ...IDLE, failures: [] };
 }
 /**
 * Fold one update into the current progress. Returns null for an update from
 * a superseded search, which the caller must ignore entirely.
 */
 export function applySearchUpdate(
  current: SearchProgress,
  update: AnimeBrowserSearchUpdate,
 ): AppliedUpdate | null {
  if (update.kind === 'start') {
    // An older search's start (or a replay) must not reset the newer one.
    if (update.token <= current.token) return null;
    return {
      progress: {
        token: update.token,
        sourceCount: update.sourceCount,
        sourcesDone: 0,
        entryCount: 0,
        failures: [],
        done: false,
      },
      entries: [],
      started: true,
    };
  }
  if (update.token !== current.token) return null;
  if (update.kind === 'result') {
    return {
      progress: {
        ...current,
        sourcesDone: current.sourcesDone + 1,
        entryCount: current.entryCount + update.entries.length,
      },
      entries: update.entries,
      started: false,
    };
  }
  if (update.kind === 'failure') {
    return {
      progress: {
        ...current,
        sourcesDone: current.sourcesDone + 1,
        failures: [...current.failures, update.failure],
      },
      entries: [],
      started: false,
    };
  }
  return { progress: { ...current, done: true }, entries: [], started: false };
 }
 /** `Searching… 3/5 sources · 42 results`, with failures named once they exist. */
 export function summarizeProgress(progress: SearchProgress): string {
  const counts = `${progress.sourcesDone}/${progress.sourceCount} sources · ${progress.entryCount} result${progress.entryCount === 1 ? '' : 's'}`;
  const failed =
    progress.failures.length === 0
      ? ''
      : ` · unavailable: ${progress.failures.map((failure) => failure.sourceName).join(', ')}`;
  return `Searching… ${counts}${failed}`;
 }
@@ -0,0 +1,908 @@
@font-face {
  font-family: 'M PLUS 1';
  src: url('./fonts/MPLUS1[wght].ttf') format('truetype');
  font-weight: 100 900;
  font-display: swap;
 }
 :root {
  /* Catppuccin Macchiato */
  --ctp-mauve: #c6a0f6;
  --ctp-red: #ed8796;
  --ctp-peach: #f5a97f;
  --ctp-yellow: #eed49f;
  --ctp-green: #a6da95;
  --ctp-sky: #91d7e3;
  --ctp-blue: #8aadf4;
  --ctp-lavender: #b7bdf8;
  --ctp-text: #cad3f5;
  --ctp-subtext0: #a5adcb;
  --ctp-overlay1: #8087a2;
  --ctp-surface0: #363a4f;
  --ctp-base: #24273a;
  --ctp-mantle: #1e2030;
  --ctp-crust: #181926;
  --bg: var(--ctp-base);
  --panel: rgba(36, 39, 58, 0.85);
  --panel-elevated: rgba(54, 58, 79, 0.55);
  --line: rgba(110, 115, 141, 0.28);
  --text: var(--ctp-text);
  --muted: var(--ctp-subtext0);
  --faint: var(--ctp-overlay1);
  --accent: var(--ctp-blue);
  --accent-strong: var(--ctp-lavender);
  /* Amber marks the mining action: the thing you highlight to look up. */
  --mine: var(--ctp-yellow);
  --danger: var(--ctp-red);
  --ok: var(--ctp-green);
  --shadow: rgba(0, 0, 0, 0.42);
  --mono: 'SF Mono', 'Cascadia Code', 'JetBrains Mono', 'Fira Code', monospace;
 }
 * {
  box-sizing: border-box;
 }
 html,
 body {
  height: 100%;
  margin: 0;
  overflow: hidden;
 }
 body {
  display: flex;
  flex-direction: column;
  background: var(--bg);
  color: var(--text);
  font-family:
    'M PLUS 1', 'Avenir Next', 'Hiragino Sans', 'Hiragino Kaku Gothic ProN', 'Yu Gothic', sans-serif;
  font-size: 14px;
  line-height: 1.55;
 }
 .hidden {
  display: none !important;
 }
 /* ---------- top bar ---------- */
 .topbar {
  display: flex;
  align-items: center;
  gap: 20px;
  padding: 14px 20px;
  border-bottom: 1px solid var(--line);
  background: linear-gradient(180deg, var(--ctp-mantle), var(--ctp-base));
  flex: none;
 }
 .brand-title {
  font-size: 11px;
  font-weight: 700;
  letter-spacing: 0.22em;
  text-transform: uppercase;
  color: var(--faint);
 }
 .brand-subtitle {
  font-size: 20px;
  font-weight: 600;
  letter-spacing: -0.01em;
  line-height: 1.1;
 }
 .search-form {
  display: flex;
  gap: 8px;
  flex: 1 1 auto;
  max-width: 560px;
 }
 .text-input {
  width: 100%;
  padding: 9px 12px;
  border: 1px solid var(--line);
  border-radius: 10px;
  background: var(--ctp-crust);
  color: var(--text);
  font: inherit;
  transition:
    border-color 0.15s ease,
    box-shadow 0.15s ease;
 }
 .text-input:focus-visible {
  outline: none;
  border-color: var(--accent);
  box-shadow: 0 0 0 3px rgba(138, 173, 244, 0.22);
 }
 .primary-button,
 .ghost-button {
  padding: 9px 16px;
  border-radius: 10px;
  border: 1px solid transparent;
  font: inherit;
  font-weight: 600;
  cursor: pointer;
  white-space: nowrap;
  transition:
    background 0.15s ease,
    border-color 0.15s ease,
    transform 0.1s ease;
 }
 .primary-button {
  background: var(--accent);
  color: var(--ctp-crust);
 }
 .primary-button:hover:not(:disabled) {
  background: var(--accent-strong);
 }
 .ghost-button {
  background: transparent;
  border-color: var(--line);
  color: var(--muted);
 }
 .ghost-button:hover:not(:disabled) {
  color: var(--text);
  border-color: var(--faint);
 }
 .primary-button:disabled,
 .ghost-button:disabled {
  opacity: 0.5;
  cursor: default;
 }
 .primary-button:active:not(:disabled) {
  transform: translateY(1px);
 }
 :focus-visible {
  outline: 2px solid var(--accent);
  outline-offset: 2px;
 }
 .tabs {
  display: flex;
  gap: 4px;
  flex: none;
  padding: 3px;
  border: 1px solid var(--line);
  border-radius: 12px;
  background: var(--ctp-crust);
 }
 .tab {
  padding: 8px 14px;
  border: 1px solid transparent;
  border-radius: 9px;
  background: transparent;
  color: var(--muted);
  font: inherit;
  font-weight: 600;
  white-space: nowrap;
  cursor: pointer;
  transition:
    background 0.15s ease,
    color 0.15s ease;
 }
 .tab:hover[aria-selected='false'] {
  color: var(--text);
 }
 .tab[aria-selected='true'] {
  background: var(--panel-elevated);
  border-color: var(--line);
  color: var(--text);
 }
 .source-picker {
  display: flex;
  flex-direction: column;
  gap: 3px;
  flex: none;
  min-width: 190px;
 }
 .source-label {
  font-size: 10px;
  letter-spacing: 0.16em;
  text-transform: uppercase;
  color: var(--faint);
 }
 /* ---------- bridge banner ---------- */
 .bridge-banner {
  display: flex;
  align-items: center;
  gap: 10px;
  padding: 9px 20px;
  border-bottom: 1px solid var(--line);
  background: var(--panel-elevated);
  font-size: 13px;
  color: var(--muted);
  flex: none;
 }
 .bridge-dot {
  width: 8px;
  height: 8px;
  border-radius: 50%;
  background: var(--faint);
  flex: none;
 }
 .bridge-banner[data-stage='ready'] .bridge-dot {
  background: var(--ok);
 }
 .bridge-banner[data-stage='failed'] .bridge-dot {
  background: var(--danger);
 }
 .bridge-banner[data-busy='true'] .bridge-dot {
  background: var(--accent);
  animation: pulse 1.1s ease-in-out infinite;
 }
@keyframes pulse {
  0%,
  100% {
    opacity: 0.35;
  }
  50% {
    opacity: 1;
  }
 }
 .bridge-meter {
  width: 160px;
  height: 4px;
  border-radius: 2px;
  background: var(--ctp-crust);
  overflow: hidden;
 }
 .bridge-meter i {
  display: block;
  height: 100%;
  width: 0;
  background: var(--accent);
  transition: width 0.2s ease;
 }
 /* ---------- layout ---------- */
 .layout {
  display: flex;
  flex: 1 1 0;
  min-height: 0;
 }
 .results {
  flex: 1 1 auto;
  min-width: 0;
  overflow-y: auto;
  padding: 20px;
 }
 .grid {
  display: grid;
  grid-template-columns: repeat(auto-fill, minmax(158px, 1fr));
  gap: 18px;
 }
 .empty {
  margin: 48px auto;
  max-width: 44ch;
  text-align: center;
  color: var(--muted);
 }
 /* ---------- cover cards ---------- */
 .card {
  display: flex;
  flex-direction: column;
  gap: 8px;
  padding: 0;
  border: none;
  background: none;
  color: inherit;
  font: inherit;
  text-align: left;
  cursor: pointer;
  animation: card-in 0.32s ease both;
 }
@keyframes card-in {
  from {
    opacity: 0;
    transform: translateY(8px);
  }
  to {
    opacity: 1;
    transform: translateY(0);
  }
 }
 .card-art {
  position: relative;
  aspect-ratio: 2 / 3;
  border-radius: 12px;
  overflow: hidden;
  background: var(--ctp-crust);
  border: 1px solid var(--line);
  box-shadow: 0 10px 28px -18px var(--shadow);
  transition:
    border-color 0.18s ease,
    transform 0.18s ease;
 }
 .card:hover .card-art,
 .card:focus-visible .card-art {
  border-color: var(--accent);
  transform: translateY(-3px);
 }
 .card-art img {
  width: 100%;
  height: 100%;
  object-fit: cover;
  display: block;
 }
 .card-art.is-empty::after {
  content: attr(data-initial);
  position: absolute;
  inset: 0;
  display: grid;
  place-items: center;
  font-size: 30px;
  font-weight: 600;
  color: var(--faint);
 }
 /* Which source a cover came from, shown only in an all-sources result. */
 .card-source {
  position: absolute;
  left: 6px;
  bottom: 6px;
  right: 6px;
  padding: 3px 7px;
  border-radius: 7px;
  background: rgba(24, 25, 38, 0.82);
  backdrop-filter: blur(6px);
  color: var(--muted);
  font-size: 10px;
  letter-spacing: 0.04em;
  text-transform: uppercase;
  overflow: hidden;
  text-overflow: ellipsis;
  white-space: nowrap;
 }
 .card-title {
  font-size: 13px;
  line-height: 1.35;
  display: -webkit-box;
  -webkit-line-clamp: 2;
  -webkit-box-orient: vertical;
  overflow: hidden;
 }
 /* ---------- detail page ---------- */
 /*
 * The detail view is a page, not a sidebar: it takes over the whole content
 * region while the results grid waits, hidden, behind the Back button.
 */
 .detail {
  flex: 1 1 auto;
  min-width: 0;
  background: var(--panel);
  overflow-y: auto;
  padding: 20px clamp(20px, 5vw, 56px) 32px;
  animation: detail-in 0.28s ease both;
 }
@keyframes detail-in {
  from {
    opacity: 0;
    transform: translateY(10px);
  }
  to {
    opacity: 1;
    transform: translateY(0);
  }
 }
 .detail-body {
  max-width: 1040px;
  margin: 0 auto;
 }
 .detail-back {
  padding: 6px 14px;
  font-size: 12px;
  margin-bottom: 20px;
 }
 .detail-head {
  display: flex;
  gap: clamp(18px, 3vw, 36px);
  margin-bottom: 28px;
 }
 .detail-cover {
  flex: none;
  width: clamp(140px, 18vw, 232px);
  aspect-ratio: 2 / 3;
  object-fit: cover;
  border-radius: 12px;
  border: 1px solid var(--line);
  background: var(--ctp-crust);
  box-shadow: 0 18px 40px -24px var(--shadow);
 }
 .detail-title {
  margin: 0 0 10px;
  font-size: clamp(19px, 2.4vw, 27px);
  font-weight: 600;
  line-height: 1.25;
 }
 .detail-chips {
  display: flex;
  flex-wrap: wrap;
  gap: 6px;
  margin-bottom: 10px;
 }
 .chip {
  padding: 2px 8px;
  border-radius: 999px;
  border: 1px solid var(--line);
  font-size: 11px;
  color: var(--muted);
 }
 .chip.status {
  border-color: rgba(166, 218, 149, 0.4);
  color: var(--ok);
 }
 /* Which extension answered — the one chip that is always present. */
 .chip.source {
  border-color: color-mix(in srgb, var(--accent) 40%, transparent);
  color: var(--accent);
 }
 .detail-description {
  margin: 0;
  font-size: 13px;
  max-width: 72ch;
  color: var(--muted);
  white-space: pre-wrap;
 }
 .episodes-head {
  display: flex;
  align-items: baseline;
  justify-content: space-between;
  margin-bottom: 10px;
  padding-bottom: 8px;
  border-bottom: 1px solid var(--line);
 }
 .episodes-title {
  margin: 0;
  font-size: 11px;
  font-weight: 700;
  letter-spacing: 0.18em;
  text-transform: uppercase;
  color: var(--faint);
 }
 .episodes-count {
  font-family: var(--mono);
  font-size: 11px;
  color: var(--faint);
 }
 /*
 * The cue rail: episodes read as subtitle cues on a timeline, because that is
 * what they are about to become. The rail is the spine, the index is the cue
 * number, and the title is the cue text.
 */
 .cue-rail {
  list-style: none;
  margin: 0;
  padding: 0 0 0 2px;
  position: relative;
 }
 .cue-rail::before {
  content: '';
  position: absolute;
  left: 41px;
  top: 6px;
  bottom: 6px;
  width: 1px;
  background: var(--line);
 }
 .cue {
  position: relative;
  display: grid;
  grid-template-columns: 40px 1fr;
  gap: 14px;
  align-items: baseline;
  width: 100%;
  padding: 9px 10px 9px 0;
  border: none;
  border-radius: 8px;
  background: none;
  color: inherit;
  font: inherit;
  text-align: left;
  cursor: pointer;
  transition: background 0.14s ease;
 }
 .cue::after {
  content: '';
  position: absolute;
  left: 37px;
  top: 15px;
  width: 7px;
  height: 7px;
  border-radius: 50%;
  background: var(--ctp-surface0);
  border: 1px solid var(--line);
  transition:
    background 0.14s ease,
    border-color 0.14s ease;
 }
 .cue:hover,
 .cue:focus-visible {
  background: var(--panel-elevated);
 }
 .cue:hover::after,
 .cue:focus-visible::after {
  background: var(--mine);
  border-color: var(--mine);
 }
 .cue-index {
  font-family: var(--mono);
  font-size: 12px;
  color: var(--faint);
  text-align: right;
  font-variant-numeric: tabular-nums;
 }
 .cue-name {
  font-size: 13px;
  line-height: 1.4;
 }
 .cue-sub {
  display: block;
  font-family: var(--mono);
  font-size: 11px;
  color: var(--faint);
  margin-top: 2px;
 }
 .cue[data-state='loading'] {
  background: var(--panel-elevated);
 }
 .cue[data-state='loading']::after {
  background: var(--accent);
  border-color: var(--accent);
  animation: pulse 1.1s ease-in-out infinite;
 }
 .cue[data-state='playing']::after {
  background: var(--mine);
  border-color: var(--mine);
 }
 /* ---------- status bar ---------- */
 .statusbar {
  flex: none;
  padding: 7px 20px;
  border-top: 1px solid var(--line);
  background: var(--ctp-mantle);
  font-size: 12px;
  color: var(--faint);
  min-height: 30px;
 }
 .statusbar[data-tone='error'] {
  color: var(--danger);
 }
 .statusbar[data-tone='ok'] {
  color: var(--ok);
 }
 /* ---------- scrollbars ---------- */
 ::-webkit-scrollbar {
  width: 10px;
  height: 10px;
 }
 ::-webkit-scrollbar-track {
  background: transparent;
 }
 ::-webkit-scrollbar-thumb {
  background: var(--ctp-surface0);
  border-radius: 6px;
  border: 2px solid var(--bg);
 }
 ::-webkit-scrollbar-thumb:hover {
  background: var(--faint);
 }
@media (prefers-reduced-motion: reduce) {
  *,
  *::before,
  *::after {
    animation-duration: 0.01ms !important;
    animation-iteration-count: 1 !important;
    transition-duration: 0.01ms !important;
  }
 }
 /* ---------- source settings ---------- */
 .settings {
  /* A tab panel owns the whole content region; only one is ever visible. */
  flex: 1 1 0;
  min-height: 0;
  overflow-y: auto;
  padding: 16px 20px 18px;
  background: var(--panel-elevated);
 }
 .settings-head {
  display: flex;
  align-items: baseline;
  gap: 12px;
  margin-bottom: 12px;
 }
 .settings-title {
  margin: 0;
  font-size: 11px;
  font-weight: 700;
  letter-spacing: 0.18em;
  text-transform: uppercase;
  color: var(--faint);
 }
 .settings-note {
  font-size: 12px;
  color: var(--faint);
 }
 .settings-fields {
  display: grid;
  grid-template-columns: repeat(auto-fill, minmax(280px, 1fr));
  gap: 14px 20px;
 }
 .field {
  display: flex;
  flex-direction: column;
  gap: 5px;
  min-width: 0;
 }
 .field-label {
  font-size: 12px;
  font-weight: 600;
 }
 .field-summary {
  font-size: 11px;
  color: var(--faint);
  line-height: 1.4;
 }
 .field-row {
  display: flex;
  align-items: center;
  gap: 8px;
 }
 .field-row .text-input {
  flex: 1 1 auto;
  min-width: 0;
 }
 .field-multi {
  display: flex;
  flex-wrap: wrap;
  gap: 6px;
 }
 .field-check {
  display: inline-flex;
  align-items: center;
  gap: 6px;
  font-size: 12px;
  color: var(--muted);
  cursor: pointer;
 }
 .field-state {
  font-size: 11px;
  color: var(--faint);
  min-height: 14px;
 }
 .field-state[data-tone='ok'] {
  color: var(--ok);
 }
 .field-state[data-tone='error'] {
  color: var(--danger);
 }
 /* ---------- extensions panel ---------- */
 .repo-add {
  display: flex;
  gap: 8px;
  margin-bottom: 8px;
 }
 .repo-add .text-input {
  flex: 1 1 auto;
 }
 .repo-hint {
  margin: 0 0 14px;
  font-size: 12px;
  color: var(--faint);
  max-width: 78ch;
 }
 .repo-hint code {
  font-family: var(--mono);
  font-size: 11px;
 }
 .ext-group-title {
  display: flex;
  align-items: baseline;
  gap: 8px;
  margin: 0 0 8px;
  font-size: 11px;
  font-weight: 700;
  letter-spacing: 0.18em;
  text-transform: uppercase;
  color: var(--faint);
 }
 /* A rule between the groups, but not above the first one. */
 .ext-list + .ext-group-title {
  margin-top: 6px;
  padding-top: 14px;
  border-top: 1px solid var(--line);
 }
 .ext-group-count {
  font-size: 11px;
  letter-spacing: 0.06em;
  color: var(--muted);
 }
 .ext-group-count:empty {
  display: none;
 }
 .ext-list {
  display: flex;
  flex-direction: column;
  gap: 6px;
 }
 .ext-list:not(:empty) {
  margin-bottom: 14px;
 }
 .ext-row {
  display: flex;
  align-items: center;
  gap: 12px;
  padding: 9px 12px;
  border: 1px solid var(--line);
  border-radius: 10px;
  background: var(--ctp-crust);
 }
 .ext-row.is-error {
  border-color: rgba(237, 135, 150, 0.45);
 }
 .ext-main {
  flex: 1 1 auto;
  min-width: 0;
 }
 .ext-name {
  font-size: 13px;
  overflow: hidden;
  text-overflow: ellipsis;
  white-space: nowrap;
 }
 .ext-sub {
  font-family: var(--mono);
  font-size: 11px;
  color: var(--faint);
  overflow: hidden;
  text-overflow: ellipsis;
  white-space: nowrap;
 }
 .ext-row.is-error .ext-sub {
  color: var(--danger);
  white-space: normal;
 }
 .ext-tag {
  flex: none;
  padding: 2px 8px;
  border-radius: 999px;
  border: 1px solid var(--line);
  font-size: 10px;
  letter-spacing: 0.08em;
  text-transform: uppercase;
  color: var(--faint);
 }
 .ext-tag.installed {
  border-color: rgba(166, 218, 149, 0.4);
  color: var(--ok);
 }
 .ext-tag.nsfw {
  border-color: rgba(237, 135, 150, 0.4);
  color: var(--danger);
 }
 .ext-row .ghost-button,
 .ext-row .primary-button {
  flex: none;
  padding: 5px 12px;
  font-size: 12px;
 }
 .ext-empty {
  padding: 14px 2px;
  font-size: 13px;
  color: var(--muted);
 }
@@ -22,10 +22,12 @@ import { MediaGenerator } from './media-generator';
 import path from 'path';
 import {
  AnkiConnectConfig,
  type CardKind,
  KikuDuplicateCardInfo,
  KikuFieldGroupingChoice,
  KikuMergePreviewResponse,
  NotificationOptions,
  type WordCardKind,
 } from './types/anki';
 import { AiConfig } from './types/integrations';
 import type { KnownWordMaturityTier } from './types/subtitle';
@@ -50,6 +52,7 @@ import {
  withUpdateProgress,
  UiFeedbackState,
 } from './anki-integration/ui-feedback';
 import { applyCardKindFlagFields, resolveWordCardKindSetting } from './anki-integration/card-kinds';
 import { KnownWordCacheManager } from './anki-integration/known-word-cache';
 import { PollingRunner } from './anki-integration/polling';
 import type { AnkiConnectProxyServer } from './anki-integration/anki-connect-proxy';
@@ -83,8 +86,6 @@ interface NoteInfo {
  fields: Record<string, { value: string }>;
 }
 type CardKind = 'sentence' | 'audio' | 'word-and-sentence';
 function trimToNonEmptyString(value: unknown): string | null {
  if (typeof value !== 'string') return null;
  const trimmed = value.trim();
@@ -840,6 +841,7 @@ export class AnkiIntegration {
    kikuEnabled: boolean;
    kikuFieldGrouping: 'auto' | 'manual' | 'disabled';
    kikuDeleteDuplicateInAuto: boolean;
    wordCardKind: WordCardKind;
  } {
    const lapis = this.getLapisConfig();
    const kiku = this.getKikuConfig();
@@ -852,6 +854,7 @@ export class AnkiIntegration {
      kikuEnabled: kiku.enabled,
      kikuFieldGrouping: (kiku.fieldGrouping || 'disabled') as 'auto' | 'manual' | 'disabled',
      kikuDeleteDuplicateInAuto: kiku.deleteDuplicateInAuto !== false,
      wordCardKind: resolveWordCardKindSetting(this.config.lapisKiku?.wordCardKind),
    };
  }
@@ -1315,79 +1318,9 @@ export class AnkiIntegration {
    availableFieldNames: string[],
    cardKind: CardKind,
  ): void {
-    const audioFlagNames = ['IsAudioCard'];
+    applyCardKindFlagFields(updatedFields, cardKind, (preferredName) =>
-
+      this.resolveFieldName(availableFieldNames, preferredName),
    if (cardKind === 'word-and-sentence') {
      const wordAndSentenceFlag = this.resolveFieldName(
        availableFieldNames,
        'IsWordAndSentenceCard',
      );
      if (!wordAndSentenceFlag) {
        return;
      }
      updatedFields[wordAndSentenceFlag] = 'x';
      const sentenceFlag = this.resolveFieldName(availableFieldNames, 'IsSentenceCard');
      if (sentenceFlag && sentenceFlag !== wordAndSentenceFlag) {
        updatedFields[sentenceFlag] = '';
      }
      for (const audioFlagName of audioFlagNames) {
        const resolved = this.resolveFieldName(availableFieldNames, audioFlagName);
        if (resolved && resolved !== wordAndSentenceFlag) {
          updatedFields[resolved] = '';
        }
      }
      return;
    }
    if (cardKind === 'sentence') {
      const sentenceFlag = this.resolveFieldName(availableFieldNames, 'IsSentenceCard');
      if (sentenceFlag) {
        updatedFields[sentenceFlag] = 'x';
      }
      for (const audioFlagName of audioFlagNames) {
        const resolved = this.resolveFieldName(availableFieldNames, audioFlagName);
        if (resolved && resolved !== sentenceFlag) {
          updatedFields[resolved] = '';
        }
      }
      const wordAndSentenceFlag = this.resolveFieldName(
        availableFieldNames,
        'IsWordAndSentenceCard',
      );
      if (wordAndSentenceFlag && wordAndSentenceFlag !== sentenceFlag) {
        updatedFields[wordAndSentenceFlag] = '';
      }
      return;
    }
    const resolvedAudioFlags = Array.from(
      new Set(
        audioFlagNames
          .map((name) => this.resolveFieldName(availableFieldNames, name))
          .filter((name): name is string => Boolean(name)),
      ),
    );
    const audioFlagName = resolvedAudioFlags[0] || null;
    if (audioFlagName) {
      updatedFields[audioFlagName] = 'x';
    }
    for (const extraAudioFlag of resolvedAudioFlags.slice(1)) {
      updatedFields[extraAudioFlag] = '';
    }
    const sentenceFlag = this.resolveFieldName(availableFieldNames, 'IsSentenceCard');
    if (sentenceFlag && sentenceFlag !== audioFlagName) {
      updatedFields[sentenceFlag] = '';
    }
    const wordAndSentenceFlag = this.resolveFieldName(availableFieldNames, 'IsWordAndSentenceCard');
    if (wordAndSentenceFlag && wordAndSentenceFlag !== audioFlagName) {
      updatedFields[wordAndSentenceFlag] = '';
    }
  }
  private async showNotification(
--- a/Show More
+++ b/Show More
Author	SHA1	Message	Date
sudacode	f5e98dfa9d	fix(anime): harden the extension bridge against untrusted repos and hangs Addresses CodeRabbit review feedback on the Anime Browser: - reject repository package/apk names that are not plain identifiers, and verify the install target resolves inside the extensions directory - count mpv's %n% option escape in UTF-8 bytes, and escape backslashes in header values so a trailing one cannot eat the list separator - key the bridge extension-id cache by APK content, so an in-place upgrade re-uploads instead of running the previous build - bound every bridge, release-listing, and download request with a timeout - enforce the APK size limit while streaming rather than after buffering - read APK bytes on demand instead of holding a base64 copy per extension for the lifetime of the browser - serialize preference mutations and write the file atomically - handle the sidecar spawn error event, and wait for the child to exit in stop() before returning - report a failed Anime Browser bootstrap instead of showing the starting banner forever - keep the preferences panel's save confirmation and in-flight multi-select edits by re-rendering only on a structural schema change	2026-07-31 17:57:01 -07:00
sudacode	e64ff1a0ee	feat(anime): add anime browser powered by Aniyomi extensions - Add `subminer anime` / `--anime` and a tray entry to open a browser that searches installed Aniyomi extension sources, shows cover art and episodes, and plays into mpv with overlay/mining attached - Add an Extensions tab to add repos and install/update/remove sources, and per-source settings for sources needing config - Support searching all sources at once with streaming, per-source results and status - Prefer Japanese audio/subtitle tracks from the source and keep the primary subtitle slot reserved for Japanese - Fix window/tray/Dock handling so the browser and mpv can be switched between without quitting the app or losing the Dock icon - Add anime.repos, anime.extensionsDir, anime.preferredQuality config keys (no bundled repos or discovery)	2026-07-31 17:21:12 -07:00
sudacode	b204d4dd6e	feat(anki): add configurable word card type for Kiku/Lapis (#175 )	2026-07-31 17:17:29 -07:00
sudacode	89ed675935	fix(overlay): keep Yomitan popup interactive on macOS/Windows (#177 )	2026-07-30 19:47:08 -07:00
sudacode	1995200e76	chore(release): prepare v0.19.0	2026-07-29 22:26:03 -07:00