Rebuild: fresh AdonisJS 7 API app on Postgres

The rebuild branch starts over (REBUILD.md): the API starter kit, with
Postgres instead of SQLite (its own database, DB_SEARCH_PATH for a
shared one in development) and the #lib alias. Phase 1's code is
imported from the current app module by module.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

app/controllers/newznab_controller.ts

@@ -1,123 +0,0 @@
-import type { HttpContext } from '@adonisjs/core/http'
-import env from '#start/env'
-import SearchService from '#services/SearchService'
-import { capsXml, errorXml, expandCategories, resultsXml, type NewznabServer } from '#lib/newznab/index'
-
-const LIMITS = { max: 100, default: 50 }
-
-/** Search functions and the category each defaults to when `cat` is absent. */
-const SEARCH_FUNCTIONS: Record<string, number | undefined> = {
-  'search': undefined,
-  'tvsearch': 5000,
-  'tv-search': 5000,
-  'movie': 2000,
-  'movie-search': 2000,
-  'music': 3000,
-  'audio': 3000,
-  'book': 7000,
-}
-
-/** The configured key, if any (a Secret from .env, or a plain string set at runtime). */
-function configuredApiKey(): string | undefined {
-  const value: any = env.get('NEWZNAB_API_KEY')
-  const key = typeof value === 'string' ? value : value?.release()
-  return key || undefined
-}
-
-function int(value: unknown): number | undefined {
-  return typeof value === 'string' && /^\d+$/.test(value) ? Number(value) : undefined
-}
-
-/**
- * Newznab API (CONCEPT.md D23) for Prowlarr, Sonarr, Radarr and the like:
- * GET /api?t=caps|search|tvsearch|movie|music|book|get&apikey=…
- */
-export default class NewznabController {
-  async handle({ request, response }: HttpContext) {
-    const qs = request.qs()
-    const t = String(qs.t ?? '')
-    const server = this.server(request)
-
-    const xml = (body: string, type = 'application/xml') => {
-      response.header('Content-Type', `${type}; charset=utf-8`)
-      return response.send(body)
-    }
-
-    const apiKey = configuredApiKey()
-    if (apiKey && qs.apikey !== apiKey) return xml(errorXml(100, 'Incorrect user credentials'))
-
-    if (t === 'caps') return xml(capsXml(server, LIMITS))
-
-    if (t === 'get') {
-      const id = int(qs.id)
-      if (id === undefined) return xml(errorXml(200, 'Missing parameter (id)'))
-      const nzb = await SearchService.nzb(id)
-      if (!nzb) return xml(errorXml(300, 'No such item'))
-      const filename = `${nzb.name.replace(/[^\w.\-()[\] ]+/g, '_').slice(0, 180) || 'release'}.nzb`
-      response.header('Content-Disposition', `attachment; filename="${filename}"`)
-      return xml(nzb.xml, 'application/x-nzb')
-    }
-
-    if (!(t in SEARCH_FUNCTIONS)) return xml(errorXml(202, `No such function (${t || 'none'})`))
-
-    const requested = String(qs.cat ?? '')
-      .split(',')
-      .map((c) => int(c.trim()))
-      .filter((c): c is number => c !== undefined)
-    const fallback = SEARCH_FUNCTIONS[t]
-    const categories = expandCategories(requested.length ? requested : fallback ? [fallback] : [])
-    const limit = Math.min(int(qs.limit) ?? LIMITS.default, LIMITS.max)
-    const offset = int(qs.offset) ?? 0
-
-    // ID-only lookups (tvdbid, imdbid, …) are not supported: caps says so, but
-    // answer with an empty result rather than everything.
-    const q = typeof qs.q === 'string' ? qs.q.trim() : ''
-    const idOnly = !q && ['tvdbid', 'tvmazeid', 'rid', 'imdbid', 'tmdbid'].some((p) => qs[p])
-
-    const result = idOnly
-      ? { total: 0, releases: [] }
-      : await SearchService.search({
-          q,
-          categories,
-          readable: true,
-          notIncomplete: true,
-          hideContainers: true,
-          maxAgeDays: int(qs.maxage),
-          season: int(qs.season),
-          episode: int(qs.season) !== undefined ? int(qs.ep) : undefined,
-          sort: 'newest',
-          perPage: limit,
-          offset,
-        })
-
-    const items = result.releases.map((r: any) => {
-      const tv = /(?:^|[._ -])S(\d{1,2})E(\d{1,3})/i.exec(r.name)
-      return {
-        id: r.id,
-        title: r.name,
-        category: r.category ?? 8010,
-        size: r.size,
-        files: r.fileCount,
-        postedAt: r.postedAt ? new Date(r.postedAt) : null,
-        poster: r.poster,
-        groups: r.groups ?? [],
-        // 1 only when a password is needed that we can't give; a known one is in our NZB.
-        password: r.passwordState === 'missing',
-        description: r.spotDescription ?? undefined,
-        season: tv ? `S${tv[1].padStart(2, '0')}` : undefined,
-        episode: tv ? `E${tv[2].padStart(2, '0')}` : undefined,
-      }
-    })
-    return xml(resultsXml(server, items, offset, result.total), 'application/rss+xml')
-  }
-
-  private server(request: HttpContext['request']): NewznabServer {
-    const proto = request.header('x-forwarded-proto') ?? 'http'
-    const host = request.header('x-forwarded-host') ?? request.header('host') ?? 'localhost'
-    return {
-      title: 'Usenet Indexer',
-      baseUrl: `${proto}://${host}`,
-      apiKey: configuredApiKey(),
-    }
-  }
-}

app/controllers/releases_controller.ts

@@ -1,65 +0,0 @@
-import type { HttpContext } from '@adonisjs/core/http'
-import SearchService, { type SortOrder } from '#services/SearchService'
-
-const flag = (value: unknown) => value === '1' || value === 'true' || value === true
-
-/** A size in MB from the query string, as bytes. */
-function megabytes(value: unknown): number | undefined {
-  const mb = Number(value)
-  return value !== undefined && value !== '' && Number.isFinite(mb) && mb >= 0 ? Math.round(mb * 1024 * 1024) : undefined
-}
-
-export default class ReleasesController {
-  /** GET /api/v1/releases?q=&readable=1&complete=1&hide_encrypted=1&min_size=&max_size=(MB)&ext=mkv,flac&source=&poster=&sort=&page=&per_page= */
-  async index({ request }: HttpContext) {
-    const qs = request.qs()
-    return SearchService.search({
-      q: typeof qs.q === 'string' ? qs.q : undefined,
-      readable: flag(qs.readable),
-      complete: flag(qs.complete),
-      hideEncrypted: flag(qs.hide_encrypted),
-      includePar2Only: flag(qs.par2_only),
-      source: typeof qs.source === 'string' && qs.source ? qs.source : undefined,
-      poster: typeof qs.poster === 'string' && qs.poster ? qs.poster : undefined,
-      minSize: megabytes(qs.min_size),
-      maxSize: megabytes(qs.max_size),
-      extensions: typeof qs.ext === 'string' && qs.ext ? qs.ext.split(/[\s,]+/) : undefined,
-      sort: qs.sort as SortOrder | undefined,
-      page: Number(qs.page) || 1,
-      perPage: Number(qs.per_page) || 50,
-      // The page shows "1,000+"; counting further made filter clicks take seconds.
-      countLimit: 1000,
-    })
-  }
-
-  /** GET /api/v1/releases/:id */
-  async show({ params, response }: HttpContext) {
-    const release = await SearchService.release(Number(params.id))
-    return release ?? response.notFound({ error: 'Release not found' })
-  }
-
-  /** GET /api/v1/releases/:id/nzb */
-  async nzb({ params, response }: HttpContext) {
-    const nzb = await SearchService.nzb(Number(params.id))
-    if (!nzb) return response.notFound({ error: 'Release not found' })
-    const filename = `${nzb.name.replace(/[^\w.\-()[\] ]+/g, '_').slice(0, 180) || 'release'}.nzb`
-    response.header('Content-Type', 'application/x-nzb')
-    response.header('Content-Disposition', `attachment; filename="${filename}"`)
-    return response.send(nzb.xml)
-  }
-
-  /** GET /api/v1/releases/:id/image: the image of the release's spot, read from Usenet. */
-  async image({ params, response }: HttpContext) {
-    const image = await SearchService.spotImage(Number(params.id))
-    if (!image) return response.notFound({ error: 'No image' })
-    response.header('Content-Type', image.type)
-    // A spot's image never changes.
-    response.header('Cache-Control', 'public, max-age=604800, immutable')
-    return response.send(image.data)
-  }
-
-  /** GET /api/v1/stats */
-  async stats() {
-    return SearchService.stats()
-  }
-}

app/controllers/seed_controller.ts

@@ -1,156 +0,0 @@
-import type { HttpContext } from '@adonisjs/core/http'
-import SeedOrchestrator, { LeaseLost } from '#services/SeedOrchestrator'
-import SeedFetchPool from '#services/SeedFetchPool'
-import RemoteContentService, { ArticleRelayOff, JobLost } from '#services/RemoteContentService'
-import type { SeedBatch } from '#lib/seed/wire'
-
-/**
- * The seed API (CONCEPT.md D38). Nodes make outgoing HTTPS requests only:
- * lease a range, post batches of what they found, then finish or release
- * the range. Bodies may be gzip-compressed (Content-Encoding: gzip).
- */
-export default class SeedController {
-  /** POST /api/v1/seed/lease → 200 { range } or 204 when there's nothing to do. */
-  async lease({ seedNode, response }: HttpContext) {
-    const range = await SeedOrchestrator.lease(seedNode.id)
-    return range ? { range } : response.noContent()
-  }
-
-  /** POST /api/v1/seed/ranges/:id/batches with a SeedBatch. */
-  async batch({ seedNode, params, request, response }: HttpContext) {
-    const batch = request.body() as SeedBatch
-    if (!Number.isSafeInteger(batch?.next) || !Array.isArray(batch.files) || !Array.isArray(batch.fragments)) {
-      return response.badRequest({ error: 'Expected { next, headers, files[], fragments[] }' })
-    }
-    return this.leased(response, async () => {
-      const stored = await SeedOrchestrator.batch(seedNode.id, Number(params.id), {
-        ...batch,
-        headers: Number(batch.headers) || 0,
-        obfuscated: Number(batch.obfuscated) || 0,
-        deferred: Number(batch.deferred) || 0,
-      })
-      return { stored }
-    })
-  }
-
-  /**
-   * GET /api/v1/seed/ranges/:id/chunk?from=&to= → the overviews of those
-   * articles as a zlib/gzip stream (relay nodes fetch through the indexer).
-   */
-  async chunk({ seedNode, params, request, response }: HttpContext) {
-    if (SeedFetchPool.size === 0) return response.serviceUnavailable({ error: 'Relay is off (SEED_NNTP_CONNECTIONS=0); fetch directly' })
-    const from = Number(request.input('from'))
-    const to = Number(request.input('to'))
-    if (!Number.isSafeInteger(from) || !Number.isSafeInteger(to)) return response.badRequest({ error: 'Expected ?from=&to=' })
-    return this.leased(response, async () => {
-      try {
-        const raw = await SeedOrchestrator.chunk(seedNode.id, Number(params.id), from, to)
-        response.header('content-type', 'application/octet-stream')
-        return response.send(raw)
-      } catch (error) {
-        if (error instanceof RangeError) return response.badRequest({ error: error.message })
-        throw error
-      }
-    })
-  }
-
-  /** POST /api/v1/seed/ranges/:id/done */
-  async done({ seedNode, params, response }: HttpContext) {
-    return this.leased(response, async () => {
-      await SeedOrchestrator.finish(seedNode.id, Number(params.id))
-      return { ok: true }
-    })
-  }
-
-  /** POST /api/v1/seed/ranges/:id/release { error?, uncounted? } */
-  async release({ seedNode, params, request, response }: HttpContext) {
-    const error = request.input('error')
-    const uncounted = request.input('uncounted') === true
-    return this.leased(response, async () => {
-      await SeedOrchestrator.release(seedNode.id, Number(params.id), typeof error === 'string' ? error : undefined, uncounted)
-      return { ok: true }
-    })
-  }
-
-  /**
-   * POST /api/v1/seed/inspect/lease { max } → 200 { jobs } or 204: content
-   * inspection and archive walks for the node (CONCEPT.md D41).
-   */
-  async inspectLease({ seedNode, request, response }: HttpContext) {
-    const max = Math.min(10, Math.max(1, Number(request.input('max')) || 1))
-    const jobs = await RemoteContentService.lease(seedNode.id, max)
-    return jobs.length > 0 ? { jobs } : response.noContent()
-  }
-
-  /**
-   * POST /api/v1/seed/inspect/done { queue, jobId, token, result } where
-   * result is the probe as a JSON string (the body parser would turn the
-   * empty strings inside it into nulls).
-   */
-  async inspectDone({ request, response }: HttpContext) {
-    const { queue, jobId, token, result } = request.only(['queue', 'jobId', 'token', 'result'])
-    if (!RemoteContentService.isQueue(queue) || typeof jobId !== 'string' || typeof token !== 'string' || typeof result !== 'string') {
-      return response.badRequest({ error: 'Expected { queue, jobId, token, result: JSON string }' })
-    }
-    return this.job(response, () => RemoteContentService.finish(queue, jobId, token, JSON.parse(result)))
-  }
-
-  /** POST /api/v1/seed/inspect/failed { queue, jobId, token, error } */
-  async inspectFailed({ request, response }: HttpContext) {
-    const { queue, jobId, token, error } = request.only(['queue', 'jobId', 'token', 'error'])
-    if (!RemoteContentService.isQueue(queue) || typeof jobId !== 'string' || typeof token !== 'string') {
-      return response.badRequest({ error: 'Expected { queue, jobId, token, error }' })
-    }
-    return this.job(response, () => RemoteContentService.fail(queue, jobId, token, String(error ?? 'unknown error')))
-  }
-
-  /** POST /api/v1/seed/inspect/release { queue, jobId, token }: a stopping node gives a job back. */
-  async inspectRelease({ request, response }: HttpContext) {
-    const { queue, jobId, token } = request.only(['queue', 'jobId', 'token'])
-    if (!RemoteContentService.isQueue(queue) || typeof jobId !== 'string' || typeof token !== 'string') {
-      return response.badRequest({ error: 'Expected { queue, jobId, token }' })
-    }
-    return this.job(response, () => RemoteContentService.release(queue, jobId, token))
-  }
-
-  /** GET /api/v1/seed/articles?id=<message id> → the raw article body; 410 when the server doesn't have it. */
-  async article({ request, response }: HttpContext) {
-    const id = request.input('id')
-    if (typeof id !== 'string' || id.length === 0 || id.length > 250) return response.badRequest({ error: 'Expected ?id=<message id>' })
-    try {
-      const body = await RemoteContentService.article(id)
-      if (!body) return response.gone({ error: 'No such article' })
-      response.header('content-type', 'application/octet-stream')
-      return response.send(body)
-    } catch (error: any) {
-      if (error instanceof ArticleRelayOff) return response.serviceUnavailable({ error: error.message })
-      return response.badGateway({ error: `NNTP: ${error.message}` })
-    }
-  }
-
-  /** GET /api/v1/seed/status */
-  async status() {
-    return SeedOrchestrator.status()
-  }
-
-  /** 409 when the job's lock is gone (it was given to another node meanwhile). */
-  private async job(response: HttpContext['response'], action: () => Promise<unknown>) {
-    try {
-      await action()
-      return { ok: true }
-    } catch (error) {
-      if (error instanceof JobLost) return response.conflict({ error: error.message })
-      throw error
-    }
-  }
-
-  /** 409 when the range was given to another node meanwhile; the node should drop it. */
-  private async leased(response: HttpContext['response'], action: () => Promise<unknown>) {
-    try {
-      return await action()
-    } catch (error) {
-      if (error instanceof LeaseLost) return response.conflict({ error: error.message })
-      throw error
-    }
-  }
-}