chore: prepare Server 1.8.1

.env.example

@@ -12,4 +12,8 @@ YOUTUBE_REMOTE_LOGIN_INTERNAL_TOKEN=replace-with-shared-internal-token
 YOUTUBE_REMOTE_LOGIN_TTL_MS=480000
 YOUTUBE_REMOTE_LOGIN_MAX_SESSIONS=2
 
+TYPE_TYPE_INSTANCE_ID=typetype
+TYPE_TYPE_PUSH_NOTIFICATIONS_ENABLED=true
+TYPE_TYPE_PUSH_NOTIFICATIONS_INTERVAL_SECONDS=300
+
 ALLOWED_ORIGINS=http://localhost:5173

build.gradle.kts

@@ -1,8 +1,8 @@
 import java.time.Instant
 
 plugins {
-    kotlin("jvm") version "2.4.10"
-    kotlin("plugin.serialization") version "2.4.10"
+    kotlin("jvm") version "2.4.20"
+    kotlin("plugin.serialization") version "2.4.20"
     id("io.ktor.plugin") version "3.5.2"
     id("jacoco")
 }
@@ -29,7 +29,7 @@ dependencies {
     implementation("com.fasterxml.jackson.core:jackson-core")
     implementation(platform("io.netty:netty-bom:4.2.17.Final"))
     constraints {
-        implementation("org.jsoup:jsoup:1.23.1") {
+        implementation("org.jsoup:jsoup:1.23.2") {
             because("CVE-2026-71497 affects PipePipeExtractor's transitive jsoup version")
         }
     }
@@ -44,18 +44,18 @@ dependencies {
     implementation("io.ktor:ktor-server-call-logging-jvm")
     implementation("io.ktor:ktor-server-rate-limit-jvm")
     implementation("ch.qos.logback:logback-classic:1.6.3")
-    implementation("com.github.Priveetee.PipePipeExtractor:extractor:ca3280f28f3aa0b980b63a2b2d23c362f7616620")
+    implementation("com.github.Priveetee.PipePipeExtractor:extractor:a395a9ba16ae75987969ed9e7d330c928ad3bc20")
     compileOnly("com.github.TeamNewPipe:nanojson:1d9e1aea9049fc9f85e68b43ba39fe7be1c1f751")
     implementation("org.json:json:20260814")
     implementation("com.squareup.okhttp3:okhttp:5.5.0")
     implementation("io.lettuce:lettuce-core:7.7.0.RELEASE")
-    implementation("org.jetbrains.exposed:exposed-core:1.4.0")
-    implementation("org.jetbrains.exposed:exposed-jdbc:1.4.0")
+    implementation("org.jetbrains.exposed:exposed-core:1.5.0")
+    implementation("org.jetbrains.exposed:exposed-jdbc:1.5.0")
     implementation("com.zaxxer:HikariCP:7.1.0")
     implementation("org.postgresql:postgresql:42.7.13")
-    implementation("org.xerial:sqlite-jdbc:3.53.2.1")
+    implementation("org.xerial:sqlite-jdbc:3.53.4.0")
     implementation("com.password4j:password4j:1.8.4")
-    implementation("com.auth0:java-jwt:4.6.0")
+    implementation("com.auth0:java-jwt:4.6.1")
     testImplementation("org.junit.jupiter:junit-jupiter:6.1.3")
     testRuntimeOnly("org.junit.platform:junit-platform-launcher")
     testImplementation("io.mockk:mockk:1.14.11")

gradle.properties

@@ -1,5 +1,5 @@
 org.gradle.jvmargs=-Xmx2g -XX:+UseG1GC
 kotlin.code.style=official
-appVersion=1.8.0
+appVersion=1.8.1
 systemProp.sun.net.client.defaultReadTimeout=180000
 systemProp.sun.net.client.defaultConnectTimeout=60000

openapi.yaml

@@ -29,6 +29,7 @@ paths:
   /streams/audio-only/source: { $ref: ./openapi/paths/streams.yaml#/AudioOnlySource }
   /subtitles/youtube/{videoId}: { $ref: ./openapi/paths/subtitles.yaml#/YoutubeSubtitle }
   /proxy: { $ref: ./openapi/paths/proxy.yaml#/Proxy }
+  /media/{handle}: { $ref: ./openapi/paths/media.yaml#/ProviderMedia }
   /sabr/download/{videoId}: { $ref: ./openapi/paths/sabr-download.yaml#/SabrDownload }
   /sabr/playback/{sessionId}/position: { $ref: ./openapi/paths/sabr-playback.yaml#/SabrPlaybackPosition }
   /sabr/playback/{sessionId}/window: { $ref: ./openapi/paths/sabr-playback.yaml#/SabrPlaybackWindow }
@@ -50,6 +51,17 @@ paths:
   /subscriptions/groups/{groupId}: { $ref: ./openapi/paths/subscriptions.yaml#/SubscriptionGroup }
   /subscriptions/groups/{groupId}/channels: { $ref: ./openapi/paths/subscriptions.yaml#/SubscriptionGroupChannels }
   /subscriptions/feed: { $ref: ./openapi/paths/subscriptions.yaml#/SubscriptionFeed }
+  /profiles: { $ref: ./openapi/paths/profiles.yaml#/AccountProfiles }
+  /profiles/{profileId}: { $ref: ./openapi/paths/profiles.yaml#/AccountProfile }
+  /profiles/{profileId}/default: { $ref: ./openapi/paths/profiles.yaml#/AccountProfileDefault }
+  /profiles/{profileId}/switch: { $ref: ./openapi/paths/profiles.yaml#/AccountProfileSwitch }
+  /notifications: { $ref: ./openapi/paths/notifications.yaml#/Notifications }
+  /notifications/unread-count: { $ref: ./openapi/paths/notifications.yaml#/NotificationsUnreadCount }
+  /notifications/read-all: { $ref: ./openapi/paths/notifications.yaml#/NotificationsReadAll }
+  /notifications/{notificationId}/read: { $ref: ./openapi/paths/notifications.yaml#/NotificationsRead }
+  /notifications/channel-preferences: { $ref: ./openapi/paths/push-notifications.yaml#/ChannelNotificationPreferences }
+  /notifications/push/devices: { $ref: ./openapi/paths/push-notifications.yaml#/PushDevices }
+  /notifications/push/devices/{deviceId}: { $ref: ./openapi/paths/push-notifications.yaml#/PushDevice }
   /rss/feeds: { $ref: ./openapi/paths/rss.yaml#/RssFeeds }
   /rss/feeds/{id}: { $ref: ./openapi/paths/rss.yaml#/RssFeed }
   /rss/feeds/{id}/enabled: { $ref: ./openapi/paths/rss.yaml#/RssFeedEnabled }
@@ -114,6 +126,11 @@ paths:
   /internal/youtube-session/browser/complete:
     $ref: ./openapi/paths/youtube-session.yaml#/InternalBrowserComplete
 components:
+  securitySchemes:
+    bearerAuth:
+      type: http
+      scheme: bearer
+      bearerFormat: JWT
   schemas:
     ErrorResponse:
       $ref: ./openapi/components/common.yaml#/ErrorResponse
@@ -169,6 +186,20 @@ components:
     SubscriptionGroupMembershipBatchRequest: { $ref: ./openapi/components/subscriptions.yaml#/SubscriptionGroupMembershipBatchRequest }
     SubscriptionFeedResponse: { $ref: ./openapi/components/subscriptions.yaml#/SubscriptionFeedResponse }
     SubscriptionFeedPreparingResponse: { $ref: ./openapi/components/subscriptions.yaml#/SubscriptionFeedPreparingResponse }
+    AccountProfileItem: { $ref: ./openapi/components/profiles.yaml#/AccountProfileItem }
+    AccountProfilesResponse: { $ref: ./openapi/components/profiles.yaml#/AccountProfilesResponse }
+    ProfileNameRequest: { $ref: ./openapi/components/profiles.yaml#/ProfileNameRequest }
+    ProfileSwitchResponse: { $ref: ./openapi/components/profiles.yaml#/ProfileSwitchResponse }
+    NotificationItem: { $ref: ./openapi/components/notifications.yaml#/NotificationItem }
+    NotificationsResponse: { $ref: ./openapi/components/notifications.yaml#/NotificationsResponse }
+    UnreadCountResponse: { $ref: ./openapi/components/notifications.yaml#/UnreadCountResponse }
+    MarkNotificationsReadResponse: { $ref: ./openapi/components/notifications.yaml#/MarkNotificationsReadResponse }
+    PushNotificationCapability: { $ref: ./openapi/components/instance.yaml#/PushNotificationCapability }
+    PushDeviceRegistrationRequest: { $ref: ./openapi/components/push-notifications.yaml#/PushDeviceRegistrationRequest }
+    PushDeviceRegistrationResponse: { $ref: ./openapi/components/push-notifications.yaml#/PushDeviceRegistrationResponse }
+    ChannelNotificationPreferenceRequest: { $ref: ./openapi/components/push-notifications.yaml#/ChannelNotificationPreferenceRequest }
+    ChannelNotificationPreference: { $ref: ./openapi/components/push-notifications.yaml#/ChannelNotificationPreference }
+    UnifiedPushNotificationPayload: { $ref: ./openapi/components/push-notifications.yaml#/UnifiedPushNotificationPayload }
     RssFeedRequest: { $ref: ./openapi/components/rss.yaml#/RssFeedRequest }
     RssFeedItem: { $ref: ./openapi/components/rss.yaml#/RssFeedItem }
     RssFeedSecretItem: { $ref: ./openapi/components/rss.yaml#/RssFeedSecretItem }

openapi/components/instance.yaml

@@ -22,6 +22,7 @@ InstanceResponse:
     - youtubeRemoteLoginReady
     - parentalControlsEnabled
     - rss
+    - pushNotifications
   properties:
     name: { type: string, example: TypeType }
     tagline: { type: string, nullable: true }
@@ -56,6 +57,8 @@ InstanceResponse:
       description: True when the instance-wide allow-list policy is enabled.
     rss:
       $ref: '#/RssInstanceCapability'
+    pushNotifications:
+      $ref: '#/PushNotificationCapability'
 RssInstanceCapability:
   type: object
   required: [enabled, maxFeedsPerUser, maxItems, minimumPollMinutes, rateLimitPerMinute]
@@ -65,3 +68,14 @@ RssInstanceCapability:
     maxItems: { type: integer }
     minimumPollMinutes: { type: integer }
     rateLimitPerMinute: { type: integer }
+
+PushNotificationCapability:
+  type: object
+  required: [enabled, provider, eventTypes, maxDevicesPerAccount]
+  properties:
+    enabled: { type: boolean }
+    provider: { type: string, enum: [unifiedpush] }
+    eventTypes:
+      type: array
+      items: { type: string }
+    maxDevicesPerAccount: { type: integer, minimum: 0 }

openapi/components/notifications.yaml

@@ -0,0 +1,39 @@
+NotificationItem:
+  type: object
+  required: [id, type, title, createdAt, publishedAt, channelUrl, channelName, channelAvatarUrl, serviceId, serviceName, read, video]
+  properties:
+    id: { type: string }
+    type: { type: string }
+    title: { type: string }
+    createdAt: { type: integer, format: int64 }
+    publishedAt: { type: integer, format: int64 }
+    channelUrl: { type: string }
+    channelName: { type: string }
+    channelAvatarUrl: { type: string }
+    serviceId: { type: integer, format: int32, minimum: 0 }
+    serviceName: { type: string }
+    read: { type: boolean }
+    video: { $ref: ./media.yaml#/VideoItem }
+NotificationsResponse:
+  type: object
+  required: [items, unreadCount, nextpage, available]
+  properties:
+    items:
+      type: array
+      items: { $ref: '#/NotificationItem' }
+    unreadCount: { type: integer, minimum: 0 }
+    nextpage: { type: string, nullable: true }
+    available: { type: boolean }
+UnreadCountResponse:
+  type: object
+  required: [unreadCount, available]
+  properties:
+    unreadCount: { type: integer, minimum: 0 }
+    available: { type: boolean }
+MarkNotificationsReadResponse:
+  type: object
+  required: [readAt, unreadCount, available]
+  properties:
+    readAt: { type: integer, format: int64 }
+    unreadCount: { type: integer, minimum: 0 }
+    available: { type: boolean }

openapi/components/profiles.yaml

@@ -0,0 +1,33 @@
+AccountProfileItem:
+  type: object
+  required: [id, name, isActive, isDefault, lastUsedAt]
+  properties:
+    id: { type: string, format: uuid }
+    name: { type: string, minLength: 1, maxLength: 40 }
+    isActive: { type: boolean }
+    isDefault: { type: boolean }
+    lastUsedAt: { type: integer, format: int64 }
+    publicUsername: { type: string, nullable: true }
+    avatarUrl: { type: string, nullable: true }
+    avatarType: { type: string, nullable: true }
+    avatarCode: { type: string, nullable: true }
+AccountProfilesResponse:
+  type: object
+  required: [profiles, activeProfileId, defaultProfileId]
+  properties:
+    profiles:
+      type: array
+      items: { $ref: '#/AccountProfileItem' }
+    activeProfileId: { type: string, format: uuid }
+    defaultProfileId: { type: string, format: uuid }
+ProfileNameRequest:
+  type: object
+  required: [name]
+  properties:
+    name: { type: string, minLength: 1, maxLength: 40 }
+ProfileSwitchResponse:
+  type: object
+  required: [accessToken, profile]
+  properties:
+    accessToken: { type: string }
+    profile: { $ref: '#/AccountProfileItem' }

openapi/components/push-notifications.yaml

@@ -0,0 +1,62 @@
+PushDeviceRegistrationRequest:
+  type: object
+  required: [deviceId, endpoint]
+  properties:
+    deviceId: { type: string, minLength: 1, maxLength: 128 }
+    platform: { type: string, enum: [android], default: android }
+    endpoint: { type: string, format: uri, minLength: 1, maxLength: 2048 }
+    expiresAt: { type: integer, format: int64, nullable: true }
+PushDeviceRegistrationResponse:
+  type: object
+  required: [id, deviceId, platform, expiresAt, updatedAt]
+  properties:
+    id: { type: string }
+    deviceId: { type: string }
+    platform: { type: string, enum: [android] }
+    expiresAt: { type: integer, format: int64, nullable: true }
+    updatedAt: { type: integer, format: int64 }
+ChannelNotificationPreferenceRequest:
+  type: object
+  required: [channelUrl, enabled]
+  properties:
+    channelUrl: { type: string, minLength: 1 }
+    enabled: { type: boolean }
+ChannelNotificationPreference:
+  type: object
+  required: [channelUrl, enabled, updatedAt]
+  properties:
+    channelUrl: { type: string }
+    enabled: { type: boolean }
+    updatedAt: { type: integer, format: int64 }
+UnifiedPushNotificationPayload:
+  type: object
+  required:
+    - version
+    - eventType
+    - serviceId
+    - serviceName
+    - eventId
+    - videoId
+    - videoUrl
+    - channelId
+    - channelName
+    - channelAvatarUrl
+    - instanceId
+    - accountId
+    - publishedAt
+    - title
+  properties:
+    version: { type: integer, minimum: 1 }
+    eventType: { type: string, enum: [subscription_new_video] }
+    serviceId: { type: integer, minimum: 0 }
+    serviceName: { type: string }
+    eventId: { type: string }
+    videoId: { type: string }
+    videoUrl: { type: string }
+    channelId: { type: string }
+    channelName: { type: string }
+    channelAvatarUrl: { type: string }
+    instanceId: { type: string }
+    accountId: { type: string }
+    publishedAt: { type: integer, format: int64 }
+    title: { type: string }

openapi/paths/media.yaml

@@ -0,0 +1,59 @@
+ProviderMedia:
+  get:
+    tags: [playback]
+    summary: Retrieve provider media through an opaque temporary handle
+    description: >-
+      Streams BiliBili or NicoNico media referenced by a handle returned from a provider stream
+      endpoint. The signed provider URL and NicoNico cookie remain server-side; clients must not
+      construct or proxy the provider URL themselves. Handles expire with the upstream media
+      signature and support byte ranges for progressive and segmented playback.
+    parameters:
+      - name: handle
+        in: path
+        required: true
+        schema:
+          type: string
+          pattern: '^m1_[A-Za-z0-9_-]{24}$'
+      - name: Range
+        in: header
+        required: false
+        schema: { type: string }
+    responses:
+      '200':
+        description: Complete provider media response.
+        headers:
+          X-Request-ID:
+            $ref: ../components/common.yaml#/RequestIdHeader
+        content:
+          application/octet-stream:
+            schema: { type: string, format: binary }
+          video/mp4:
+            schema: { type: string, format: binary }
+          audio/mp4:
+            schema: { type: string, format: binary }
+          application/vnd.apple.mpegurl:
+            schema: { type: string }
+      '206':
+        description: Partial provider media response.
+        headers:
+          X-Request-ID:
+            $ref: ../components/common.yaml#/RequestIdHeader
+          Content-Range:
+            schema: { type: string }
+          Accept-Ranges:
+            schema: { type: string }
+        content:
+          application/octet-stream:
+            schema: { type: string, format: binary }
+          video/mp4:
+            schema: { type: string, format: binary }
+          audio/mp4:
+            schema: { type: string, format: binary }
+      '404':
+        $ref: ../components/common.yaml#/JsonError
+      '422':
+        $ref: ../components/common.yaml#/JsonError
+      '429':
+        $ref: ../components/common.yaml#/JsonError
+      '503':
+        $ref: ../components/common.yaml#/JsonError