docs: add maintenance badge and security contributor credits

- Added Maintenance Active badge to README
- Added Security Contributors section crediting jamil182 for SSRF fix
- Added Credits section to CHANGELOG.md for v2.4.1

.env.example

@@ -25,3 +25,12 @@ MIRROR_CACHE_TTL=3600000
 
 # Environment (production/development)
 NODE_ENV=production
+
+# Domains the M3U8/TS stream proxies may fetch from (comma-separated).
+# Subdomains are covered automatically, so list the registrable domain only.
+# Leave unset to use the built-in defaults.
+# STREAM_PROXY_DOMAINS=megaplay.buzz,vidtube.site,vid-tube.site,vidplay.site,anipixcdn.co,norami.top,kryntal.top,akirax.buzz
+
+# Referer sent to stream CDNs. They reject the site origin and an empty
+# Referer; only the player origin passes. Change if the player domain moves.
+# STREAM_PROXY_REFERER=https://megaplay.buzz/

CHANGELOG.md

@@ -5,6 +5,133 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [2.4.1] - 2026-08-27
+
+### Security
+- **CRITICAL**: Fixed unauthenticated SSRF in `/api/stream/proxy` and `/api/stream/ts-proxy` — the proxy endpoint's domain allowlist had an escape hatch (`pathname.endsWith(".m3u8")`) that let any host through, and `ts-proxy` had no destination check at all. Both could be used to fetch internal services (127.0.0.1, 169.254.169.254) and read responses.
+- Added shared `streamProxy.helper.js` with a real allowlist by registrable domain, private/loopback/link-local address blocking as a second layer, and https-only scheme enforcement. Both endpoints now use this guard.
+- Removed dead domain `megaplay-1.buzz` from allowlist; added `vid-tube.site` and CDNs currently serving streams (`norami.top`, `kryntal.top`, `akirax.buzz`).
+- Added `SECURITY.md` with vulnerability reporting policy (GitHub private vulnerability reporting preferred, Telegram fallback).
+
+### Fixed
+- **Environment loading**: Fixed `dotenv.config()` being called after static imports — helpers reading `process.env` at module top level (mirror, cache, proxy, streamProxy) were never receiving `.env` values. Changed to `import "dotenv/config"` as the first import so `.env` is populated before any helper module loads. Affected settings: `MIRROR_DOMAINS`, `MIRROR_CACHE_TTL`, `CACHE_MAX_SIZE`, `CACHE_DEFAULT_TTL`, `SCRAPER_API_KEY`, `FLARESOLVERR_URL`, `STREAM_PROXY_DOMAINS`, `STREAM_PROXY_REFERER`.
+
+### Added
+- **Stream Proxy Allowlist Config**: New `STREAM_PROXY_DOMAINS` env var to override the built-in domain allowlist (comma-separated).
+- **Stream Proxy Referer Config**: New `STREAM_PROXY_REFERER` env var to override the Referer header sent to stream CDNs (default: `https://megaplay.buzz/`).
+
+### Credits
+- **[jamil182](https://github.com/jamil182)** — Reported and fixed the SSRF vulnerability (PR #2), added SECURITY.md (PR #3)
+
+## [2.4.0] - 2026-08-14
+
+### Added
+- **Streaming Status Warning**: Added ⚠️ Streaming Status section to README documenting which endpoints work vs which are blocked by upstream anti-bot protection
+- **Proxy Helper**: New `src/helper/proxy.helper.js` — unified proxy support for ScraperAPI and FlareSolverr
+- **ScraperAPI Integration**: Routes requests through ScraperAPI premium residential IPs when direct requests fail
+- **FlareSolverr Integration**: Routes requests through self-hosted FlareSolverr browser when direct requests fail
+- **Proxy Status Endpoint**: `GET /api/proxy/status` — shows configured proxy providers and their status
+- **Auto Proxy Fallback**: `fetchWithMirror` now automatically falls back to configured proxies when all mirrors fail
+- **Cloudflare Detection**: Detects Cloudflare challenge pages and triggers proxy fallback
+- **Upstream Error Detection**: Added detection of upstream API error responses (`status >= 400`) in `streamInfo.extractor.js` — returns HTTP 502 with descriptive error instead of silently returning null URL
+- **Cookie-Aware Session Establishment**: Added session cookie fetching in `extractStreamInfo` and `extractServerList` — fetches watch/home page to capture `set-cookie` headers before AJAX requests
+- **Optional Slug Parameter**: `getStreamInfo` controller now accepts optional `?slug=` query parameter for session establishment
+
+### Changed
+- **Version**: Bumped to 2.4.0
+- **README**: Updated version badge from 2.2.1 to 2.4.0
+- **README**: Added streaming status warning with solutions table
+- **Docs**: Updated index.md, endpoints.md, streaming.md with streaming status warnings and v2.4.0 references
+- **Mirror Helper**: `fetchWithMirror` now includes proxy fallback and Cloudflare detection
+
+### Fixed
+- **CRITICAL**: Fixed `/api/stream` returning `null` URL — upstream AJAX endpoints (`/ajax/server?get=`, `/ajax/server/list?servers=`) require session cookies; now properly detects upstream 500 errors and returns HTTP 502 with error message
+
+## [2.2.2] - 2026-08-14
+
+### Fixed
+- **CRITICAL**: Fixed `/api/stream` returning `null` URL — root cause was AJAX endpoints (`/ajax/server?get=`, `/ajax/server/list?servers=`) require session cookies from the watch page; `fetchWithMirror` didn't persist cookies between requests, causing upstream to return `{status:500, result:"Bad request"}`
+- Fixed `streamInfo.extractor.js` `extractStreamInfo` to establish session with cookies before AJAX requests — fetches watch page or home page to capture `set-cookie` headers and passes them with the AJAX request
+- Fixed `streamInfo.extractor.js` `extractServerList` to establish session with cookies before AJAX requests (same cookie-aware pattern)
+- Fixed `streamInfo.controller.js` `getStreamInfo` to accept optional `slug` query parameter and pass it to extractor for session establishment
+- Fixed `streamInfo.controller.js` `getStreamInfo` to return HTTP 502 (Bad Gateway) with error message for upstream API failures instead of silently returning null URL
+- Fixed upstream error detection in both extractors — detects `status >= 400` and non-JSON error strings from upstream API
+
+## [2.2.1] - 2026-08-12
+
+### Fixed
+- **CRITICAL**: Fixed `streamInfo.extractor.js` `extractServerList` not parsing JSON response — `fetchWithMirror` returns raw text by default, causing Cheerio to parse a JSON string as HTML, resulting in empty server arrays (null values)
+- **CRITICAL**: Fixed `streamInfo.extractor.js` `extractMapperServers` not parsing JSON response — same raw text issue caused the data processing loop to be skipped entirely, returning empty arrays
+- **CRITICAL**: Fixed `creatorInfo.js` middleware overwriting error messages — the `message` field from creatorInfo was replacing actual error messages, making debugging impossible (all 500 errors showed "Built with ❤️ by Shinei Nouzen" instead of the real error)
+- Fixed `streamInfo.controller.js` `getStreamInfo` to return 404 with error message when stream URL is null instead of silently returning null values
+- Fixed `streamInfo.controller.js` `getServerList` to return 404 with error message when server list is empty instead of returning empty array with no indication
+- Fixed `streamInfo.controller.js` to use `TTL.stream` instead of `TTL.default` for stream info caching (stream URLs rotate frequently)
+- Fixed `streamInfo.controller.js` to use `TTL.servers` instead of `TTL.default` for server list caching
+- Fixed `episodeList.extractor.js` JSON.parse error handling — added try/catch around JSON parsing to prevent uncaught exceptions
+- Fixed `episodeListAjax.extractor.js` JSON.parse error handling — added try/catch around JSON parsing to prevent uncaught exceptions
+- Fixed `schedule.extractor.js` — changed from incorrect `/?date=` URL to proper `/ajax/schedule?date=` AJAX endpoint with JSON parsing
+- Fixed `seasons.extractor.js` — updated CSS selectors to handle new HTML structure where items use `data-tip` attribute instead of `<a>` tags
+- Fixed `watchOrder.extractor.js` — updated CSS selectors to handle new HTML structure, added fallback to `data-tip` attribute for slugs, fixed type/episodes field extraction from `.meta .dot` elements
+
+## [2.2.0] - 2026-07-28
+
+### Added
+- **Stream Resolve Endpoint**: `GET /api/stream/resolve?id=&slug=` — Resolves actual m3u8/mp4 URLs from embed player URLs (vidtube.site → megaplay API → m3u8 playlist)
+- **Stream Qualities Endpoint**: `GET /api/stream/qualities?url=` — Parses M3U8 playlists for available quality options with resolution, bandwidth, and URLs
+- **M3U8 Proxy Endpoint**: `GET /api/stream/proxy?url=` — Rewrites M3U8 playlists to proxy through API for CORS-free HLS playback
+- **TS Proxy Endpoint**: `GET /api/stream/ts-proxy?url=` — Proxies `.ts` video segments with proper `Content-Type: video/mp2t` and CORS headers
+- **Stream Resolver Extractor**: Full pipeline for resolving actual video URLs from embed pages
+- **M3U8 Quality Parser**: Parses master playlists to extract quality options sorted by resolution
+- **Server Name Normalization**: Maps display names to clean identifiers (VidPlay-1 → vidplay, HD-1 → hd)
+- **Subtitle Extraction**: Extracts subtitle tracks from streaming API responses
+- **Embed API Domain Mapping**: Maps vidtube.site → megaplay-1.buzz for stream resolution
+- **Shared Helper**: New `parseListItem.helper.js` for unified anime list item parsing across all extractors
+- **Graceful Shutdown**: Server now handles SIGTERM/SIGINT signals for clean shutdown
+- **Request ID Tracking**: Every request gets a unique `X-Request-Id` header for debugging
+- **CSP Headers**: Added `Content-Security-Policy` header for XSS protection
+- **HSTS Headers**: Added `Strict-Transport-Security` header for HTTPS enforcement
+- **Body Size Limits**: Added `express.json({ limit: '10kb' })` to prevent large payload attacks
+- **Rate Limiter Cleanup**: Automatic cleanup of stale IP entries every 5 minutes
+- **Uncaught Exception Handler**: Added handler for uncaught exceptions with graceful shutdown
+- **Upcoming Anime Endpoint**: `GET /api/upcoming` — upcoming anime releases from homepage
+- **Top Anime Rankings Endpoint**: `GET /api/top-rankings?sort=top|newest` — ranked anime with sort modes
+- **Recently Updated Tabs Endpoint**: `GET /api/recently-updated?tab=all|dub|sub` — filtered updates
+- **Completed Anime Endpoint**: `GET /api/completed` — finished anime series from homepage
+- **Enhanced Filter**: Added `source`, `epMin`, `epMax`, `excludeWatchlist` parameters to `/api/filter`
+- **Source IDs Config**: New `SOURCE_IDS` mapping for 18 source material types
+- **Season IDs Config**: New `SEASON_IDS` mapping for 4 broadcast seasons
+- **Extended Type IDs**: Added `tv-short` and `tv-special` type mappings
+
+### Changed
+- **Mirror Fallback**: All 22+ extractors now use `fetchWithMirror()` for consistent mirror fallback
+- **Mirror Helper**: 404 responses no longer mark mirrors as failed — only connection errors trigger failover
+- **Seasons Extractor**: Rewritten to extract from watch page sidebar (AJAX endpoints don't exist on source site)
+- **Watch Order Extractor**: Rewritten to extract from watch page sidebar trending/related sections
+- **Stream Info Extractor**: Now establishes session before AJAX calls, normalizes server names, adds type field
+- **Code Deduplication**: Extracted shared list item parsing logic into `parseListItem.helper.js`, eliminating ~200 lines of duplicated code across 8+ extractors
+- **Documentation**: All files follow strict documentation style — box-style headers, section separators, feature markers, JSDoc params/returns, inline notes, and module footers
+- **Version**: Bumped to 2.2.0
+- **Package**: Removed unused `cors` dependency (custom CORS middleware used instead)
+- **README**: Updated all endpoint counts, features, and streaming flow documentation
+- **Docs**: Updated endpoints.md, streaming.md, architecture.md, examples.md with new endpoints
+
+### Fixed
+- **Middleware Order**: Moved request timeout middleware before routes to properly catch timeouts
+- **CORS POST**: Fixed CORS to allow POST method for `/api/mirrors/reset` endpoint
+- **HomeInfo Cache**: Removed redundant cache check in `homeInfo.extractor.js` (controller already handles caching)
+- **Error Handler**: Added `res.headersSent` check to prevent double response on timeout
+- **Unused Imports**: Removed unused `cheerio`, `axios`, `headers` imports from extractors that now use `fetchWithMirror`
+- **Watch Page Path**: Fixed `/api/watch` 500 error — path format changed from `/slug/ep` to `/slug/ep-N`
+- **Info Endpoint**: Now accepts both `?id=` and `?slug=` params for flexibility
+- **Status Names**: Fixed `/api/status/airing` 500 — added status name mapping (ongoing→currently-airing, completed→finished-airing)
+- **Top Rankings**: Fixed selectors to match actual HTML (`#top-anime .scaff.side.items a.item`) with rank class extraction
+- **Completed Anime**: Fixed selectors for `section.top-table[data-name='completed']`
+- **Recently Updated**: Fixed selectors for `#recent-update .ani.items .item` with client-side tab filtering
+
+### Removed
+- **Unused Dependency**: Removed `cors` package from dependencies (custom middleware handles CORS)
+- **Dead Code**: Removed redundant cache check in `homeInfo.extractor.js`
+
 ## [2.1.0] - 2026-07-05
 
 ### Changed

README.md

@@ -1,6 +1,9 @@
+> [!NOTE]
+> **API MAYBE Temporarily Paused** due to suspiciously too many requests. My hosted version of this API is only for testing purposes. You MUST host your own instance to use the API.
+
 <div align="center">
   
-  <img src="https://capsule-render.vercel.app/api?type=waving&height=300&color=gradient&text=AniKotoAPI&fontAlignY=30&fontSize=90&desc=Real-Time%20Anime%20Streaming%20Data%20API&descSize=30" />
+  <img src="https://capsule-render.vercel.app/api?type=waving&height=300&color=gradient&text=𝘼𝙣𝙞𝙆𝙤𝙩𝙤𝘼𝙋𝙄&fontAlignY=30&fontSize=100&desc=𝖱𝖾𝖺𝗅-𝖳𝗂𝗆𝖾%20𝖠𝗇𝗂𝗆𝖾%20𝖲𝗍𝗋𝖾𝖺𝗆𝗂𝗇𝗀%20𝖣𝖺𝗍𝖺%20𝖠𝖯𝖨&descSize=30" />
 
 </div>
 
@@ -19,9 +22,10 @@
   <img src="https://img.shields.io/badge/Cheerio-1.0-3572A5?style=flat-square&logoColor=white" alt="Cheerio"/>
   <img src="https://img.shields.io/badge/Vercel-Serverless-000000?style=flat-square&logo=vercel&logoColor=white" alt="Vercel"/>
   <img src="https://img.shields.io/badge/License-MIT-22c55e?style=flat-square&logo=mit&logoColor=white" alt="License"/>
-  <img src="https://img.shields.io/badge/Version-2.1.0-f43f8e?style=flat-square&logoColor=white" alt="Version"/>
+  <img src="https://img.shields.io/badge/Version-2.4.1-f43f8e?style=flat-square&logoColor=white" alt="Version"/>
-  <img src="https://img.shields.io/badge/Endpoints-33-6366f1?style=flat-square&logoColor=white" alt="Endpoints"/>
+  <img src="https://img.shields.io/badge/Endpoints-38-6366f1?style=flat-square&logoColor=white" alt="Endpoints"/>
   <img src="https://img.shields.io/badge/Anime-10000+-a855f7?style=flat-square&logoColor=white" alt="Anime Database"/>
+  <img src="https://img.shields.io/badge/Maintenance-Active-22c55e?style=flat-square&logo=github&logoColor=white" alt="Maintenance"/>
 </p>
 
 <p align="center">
@@ -41,8 +45,7 @@
 
 ---
 
-> ## ⚠️ Disclaimer
+> [!WARNING]
->
 > 1. This `API` does not store any files — it only links to media hosted on 3rd party services.
 > 2. This `API` is explicitly made for **educational purposes only** and not for commercial usage. This repo will not be responsible for any misuse of it.
 > 3. All anime data, images, and content belong to their respective owners. This project is not affiliated with anikototv.to.
@@ -80,11 +83,12 @@
 
 **AniKotoAPI** is a serverless anime data API that scrapes and serves real-time information from **anikototv.to** — including anime details, episode lists, streaming servers, search, filtering, rankings, and more — all through a clean REST API with zero database setup.
 
-> 💡 No database, no auth, no complex setup. Just deploy to Vercel and you have a production API.
+> [!TIP]
+> No Database, No Auth, No Complex Setup. Just deploy to Vercel and you have a production API.
 
 ### Why AniKotoAPI?
 
-- 🎬 **33 Endpoints** — Complete coverage of anikototv.to data
+- 🎬 **38 Endpoints** — Complete coverage of anikototv.to data
 - 🔍 **Full-Text Search** — Search anime by keyword with suggestions
 - 📺 **Episode Lists** — AJAX-loaded episode data with server info
 - 🎯 **Smart Filtering** — Genre, type, status, rating, sort, season, year
@@ -124,6 +128,31 @@ flowchart TD
     style H fill:#1e1e2e,stroke:#22c55e,color:#f1f5f9
 ```
 
+### ⚠️ Streaming Status
+
+> **Streaming endpoints (`/api/servers`, `/api/stream`, `/api/stream/resolve`) return errors when anikototv.to blocks AJAX requests from server-side IPs.**
+>
+> This is expected behavior when scraping from datacenter IPs (including Vercel's). AniKoto's bot protection blocks non-browser requests to their AJAX endpoints. Metadata endpoints (home, search, info, trending, etc.) work perfectly — only streaming is affected.
+
+| What Works | What's Blocked |
+|:---|:---|
+| Home, spotlight, trending | `/api/servers` — server list |
+| Search, suggestions, filter | `/api/stream` — embed URLs |
+| Info, episodes, schedule | `/api/stream/resolve` — m3u8/mp4 |
+| Top 10, most popular, new release | `/api/mapper-servers` — gogoanime servers |
+| AZ list, random, genre list | All AJAX-dependent endpoints |
+| All HTML-scraped endpoints | |
+
+**To fix streaming**, set one of these environment variables:
+
+```bash
+# Option 1: ScraperAPI (requires premium plan — $49/month)
+SCRAPER_API_KEY=your_scraperapi_key
+
+# Option 2: FlareSolverr (self-hosted, unlimited)
+FLARESOLVERR_URL=http://your-flaresolverr-host:8191
+```
+
 ---
 
 ## ✨ Features
@@ -135,7 +164,7 @@ flowchart TD
 ### ⚡ Core
 - **Real-time scraping** from anikototv.to
 - **Smart caching** with LRU and configurable TTL per endpoint
-- **33 RESTful endpoints** covering all data
+- **38 RESTful endpoints** covering all data
 - **AJAX episode loading** for accurate data
 - **Mapper API integration** for extra servers
 - **Graceful error handling** per endpoint
@@ -159,10 +188,13 @@ flowchart TD
 ### 📺 Streaming
 - **Watch page** — full episode data with servers
 - **Stream info** — video embed URLs via AJAX
-- **Server list** — all available streaming servers
+- **Stream URL Resolution** — resolve embed URLs to actual m3u8/mp4
+- **Server list** — all available streaming servers with normalized names
 - **Mapper API** — gogoanime/anivibe server sources
 - **Episode navigation** — prev/next episode data
 - **Next episode schedule** — countdown timer data
+- **M3U8 Proxy** — CORS-free HLS playlist proxy with URL rewriting
+- **TS Proxy** — CORS-free video segment proxy
 
     </td>
     <td>
@@ -183,18 +215,20 @@ flowchart TD
 
 | Feature | Description | Status |
 |:---|:---|:---:|
-| 🎬 33 API Endpoints | Complete coverage of anime data | ✅ |
+| 🎬 38 API Endpoints | Complete coverage of anime data | ✅ |
 | 🔍 Full-Text Search | Keyword search with pagination | ✅ |
 | 📺 Episode Lists | AJAX-loaded episode data | ✅ |
-| 🎯 Advanced Filtering | Genre, type, status, rating, sort | ✅ |
+| 🎯 Advanced Filtering | Genre, type, status, rating, sort, season | ✅ |
 | 🏆 Top 10 Rankings | Day/week/month leaderboards | ✅ |
 | 🎲 Random Anime | Random anime discovery | ✅ |
 | 📡 Streaming Servers | Video embed URLs + mapper API | ✅ |
+| 🔗 Stream URL Resolution | Resolve embed URLs to m3u8/mp4 | ✅ |
 | 📋 AZ List | A-Z alphabetical browsing | ✅ |
 | 🔄 Smart Caching | LRU cache with configurable TTL | ✅ |
+| 🌐 M3U8 Proxy | CORS-free HLS proxy with URL rewriting | ✅ |
 | 🚀 One-Click Deploy | Vercel button deployment | ✅ |
 | 🏗️ Express Mode | Standalone server with `npm start` | ✅ |
-| 📖 AlisaReactionBot Style | Full JSDoc documentation | ✅ |
+| 📖 Full JSDoc Docs | Complete documentation coverage | ✅ |
 
 ---
 
@@ -230,18 +264,16 @@ flowchart TD
 | 🔍 [Cheerio](https://cheerio.js.org/) | HTML parsing & scraping | 1.0 | [Docs](https://cheerio.js.org/docs/) |
 | 🌐 [Axios](https://axios-http.com/) | HTTP client for scraping | 1.8 | [Docs](https://axios-http.com/docs/intro) |
 | 🔧 [dotenv](https://github.com/motdotla/dotenv) | Environment variables | 16.4 | [Docs](https://github.com/motdotla/dotenv) |
-| 🔒 [cors](https://github.com/expressjs/cors) | CORS middleware | 2.8 | [Docs](https://github.com/expressjs/cors) |
 
 ### 📦 Key Dependencies
 
 ```json
 {
   "express": "^4.21.0",        // HTTP server
-  "axios": "^1.8.0",         // HTTP client for scraping
+  "axios": "^1.8.0",           // HTTP client for scraping
-  "cheerio": "^1.0.0-rc.12",  // HTML parsing
+  "cheerio": "^1.0.0-rc.12",   // HTML parsing
-  "cors": "^2.8.5",           // CORS middleware
+  "compression": "^1.7.4",     // Response compression
-  "compression": "^1.7.4",    // Response compression
+  "dotenv": "^16.4.0"          // Environment variables
-  "dotenv": "^16.4.0"         // Environment variables
 }
 ```
 
@@ -280,7 +312,8 @@ flowchart TD
     style G fill:#1e1e2e,stroke:#22c55e,color:#f1f5f9
 ```
 
-> 💡 Serverless functions have read-only filesystems except `/tmp`. The cache uses LRU with configurable TTL per endpoint type, surviving across warm invocations.
+> [!TIP]
+>  Serverless functions have read-only filesystems except `/tmp`. The cache uses LRU with configurable TTL per endpoint type, surviving across warm invocations.
 
 ---
 
@@ -300,51 +333,58 @@ AniKotoAPI/
 │   │
 │   ├── 📂 docs/                          #    📚 API documentation
 │   │   ├── 📄 index.md                   #       Overview, quick start
-│   │   ├── 📄 endpoints.md               #       Full API reference (33 endpoints)
+│   │   ├── 📄 endpoints.md               #       Full API reference (38 endpoints)
-│   │   ├── 📄 streaming.md               #       Streaming flow guide
+│   │   ├── 📄 streaming.md               #       Streaming flow guide + proxy
 │   │   ├── 📄 examples.md                #       Code examples (cURL, JS, Python)
-│   │   └── 📄 architecture.md            #       Project structure, tech stack
+│   │   ├── 📄 architecture.md            #       Project structure, tech stack
+│   │   └── 📄 testing.md                 #       Integration test suite & benchmarks
 │   │
 │
 ├── 📂 src/                               # ⚙️ Core logic
 │   ├── 📂 configs/                       #    🔧 Configuration files
 │   │   ├── 📄 dataUrl.js                 #       🌐 URL patterns for anikototv.to
 │   │   ├── 📄 header.config.js           #       📋 Request headers
-│   │   └── 📄 ids.config.js              #       🏷️ Genre/Type/Status/Rating ID mappings
+│   │   └── 📄 ids.config.js              #       🏷️ Genre/Type/Status/Source/Season ID mappings
 │   │
-│   ├── 📂 controllers/                   #    🎮 Route handlers (22 files)
+│   ├── 📂 controllers/                   #    🎮 Route handlers (28 files)
 │   │   ├── 📄 homeInfo.controller.js
 │   │   ├── 📄 animeInfo.controller.js
 │   │   ├── 📄 search.controller.js
 │   │   ├── 📄 episodeList.controller.js
 │   │   ├── 📄 episodeListAjax.controller.js
 │   │   ├── 📄 streamInfo.controller.js
+│   │   ├── 📄 streamResolver.controller.js  # 🆕 Stream URL resolution + quality detection
 │   │   ├── 📄 filter.controller.js
 │   │   ├── 📄 watchPage.controller.js
-│   │   └── 📄 ... (14 more)
+│   │   └── 📄 ... (15 more)
 │   │
-│   ├── 📂 extractors/                    #    🔍 HTML scrapers (22 files)
+│   ├── 📂 extractors/                    #    🔍 HTML scrapers (28 files)
 │   │   ├── 📄 homeInfo.extractor.js      #       🏠 Home page data
 │   │   ├── 📄 search.extractor.js        #       🔍 Search results
 │   │   ├── 📄 animeInfo.extractor.js     #       📺 Anime details
 │   │   ├── 📄 streamInfo.extractor.js    #       📡 Streaming servers
+│   │   ├── 📄 streamResolver.extractor.js #      🔗 Stream URL resolution, M3U8 parser
 │   │   ├── 📄 filter.extractor.js        #       🎯 Filtered results
 │   │   ├── 📄 watchPage.extractor.js     #       ▶️ Watch page data
+│   │   ├── 📄 seasons.extractor.js       #       📅 Season info from watch page
+│   │   ├── 📄 watchOrder.extractor.js    #       📋 Watch order from sidebar
 │   │   ├── 📄 episodeList.extractor.js   #       📋 Episode lists
-│   │   └── 📄 ... (15 more)
+│   │   └── 📄 ... (16 more)
 │   │
 │   ├── 📂 helper/                        #    🛠️ Utility functions
 │   │   ├── 📄 cache.helper.js            #       💾 In-memory caching
 │   │   ├── 📄 countPages.helper.js       #       📄 Pagination counter
 │   │   ├── 📄 extractPages.helper.js     #       📃 Page fetcher
 │   │   ├── 📄 formatTitle.helper.js      #       🔤 Title formatter
+│   │   ├── 📄 mirror.helper.js           #       🌐 Multi-mirror fallback (5 domains)
+│   │   ├── 📄 parseListItem.helper.js    #       📋 Shared list item parser
 │   │   └── 📄 pagination.helper.js       #       📊 Pagination metadata generator
 │   │
 │   ├── 📂 middleware/                    #    🔧 Express middleware
 │   │   └── 📄 creatorInfo.js            #       ✍️ Creator attribution injection
 │   │
 │   └── 📂 routes/                        #    🛤️ Express routes
-│       ├── 📄 apiRoutes.js               #       🌐 Main API routes (33 endpoints)
+│       ├── 📄 apiRoutes.js               #       🌐 Main API routes (38 endpoints)
 │       └── 📄 category.route.js          #       🏷️ Category routes
 │
 ├── 📄 server.js                          # 🚀 Express server entry point
@@ -448,6 +488,21 @@ curl "https://anikototvapi.vercel.app/api/servers?ids=dXNCT3hNQzk3THhSTW8ySnM5..
 curl "https://anikototvapi.vercel.app/api/stream?id=MTF1dkFtaW9BRTZPbzJJRElFZUZr..."
 ```
 
+### Stream URL Resolution
+
+The `/api/stream` endpoint returns an embed URL. To get the actual video URL (m3u8/mp4):
+
+```bash
+# Resolve embed URL to actual stream URL
+curl "https://anikototvapi.vercel.app/api/stream/resolve?id=MTF1dkFtaW9BRTZPbzJJRElFZUZr..."
+
+# Get quality options from an M3U8 playlist
+curl "https://anikototvapi.vercel.app/api/stream/qualities?url=https://example.com/playlist.m3u8"
+
+# Proxy M3U8 playlist (rewrites URLs for CORS-free playback)
+curl "https://anikototvapi.vercel.app/api/stream/proxy?url=https://example.com/playlist.m3u8"
+```
+
 ### Dub & Sub Switch
 
 Servers have a `type` field — use it to pick sub or dub:
@@ -1974,6 +2029,144 @@ console.log(resp.data);
 
 ---
 
+> ## 🔗 GET Stream URL Resolution
+
+### Endpoint
+
+```bash
+/stream/resolve
+```
+
+#### Parameters
+
+| Parameter | Type | Mandatory | Default | Description |
+| :-------: | :--: | :-------: | :-----: | :---------: |
+| `id` | `string` | Yes ✔️ | — | `link_id` from `/servers` response |
+| `slug` | `string` | No | — | Anime slug (for watch page session) |
+
+#### Example of request
+
+```bash
+curl "https://anikototvapi.vercel.app/api/stream/resolve?id=MTF1dkFtaW9BRTZPbzJJRElFZUZr..."
+```
+
+```javascript
+import axios from "axios";
+const resp = await axios.get("https://anikototvapi.vercel.app/api/stream/resolve", {
+  params: { id: "yourLinkId" }
+});
+console.log(resp.data);
+```
+
+#### Sample Response
+
+```json
+{
+  "success": true,
+  "results": {
+    "url": "https://vid-tube.site/hls/b32de9d4a3230c95f52948373e6e1549.m3u8",
+    "type": "hls",
+    "server": "HD-1",
+    "subtitles": []
+  }
+}
+```
+
+---
+
+> ## 📊 GET Stream Qualities
+
+### Endpoint
+
+```bash
+/stream/qualities
+```
+
+#### Parameters
+
+| Parameter | Type | Mandatory | Default | Description |
+| :-------: | :--: | :-------: | :-----: | :---------: |
+| `url` | `string` | Yes ✔️ | — | M3U8 playlist URL |
+
+#### Example of request
+
+```bash
+curl "https://anikototvapi.vercel.app/api/stream/qualities?url=https://example.com/playlist.m3u8"
+```
+
+#### Sample Response
+
+```json
+{
+  "success": true,
+  "results": {
+    "qualities": [
+      { "url": "https://example.com/360.m3u8", "quality": "360p", "width": 640, "height": 360, "bandwidth": 800000, "codec": "avc1" },
+      { "url": "https://example.com/480.m3u8", "quality": "480p", "width": 854, "height": 480, "bandwidth": 1400000, "codec": "avc1" },
+      { "url": "https://example.com/720.m3u8", "quality": "720p", "width": 1280, "height": 720, "bandwidth": 2800000, "codec": "avc1" }
+    ]
+  }
+}
+```
+
+---
+
+> ## 🌐 GET Stream Proxy (M3U8)
+
+### Endpoint
+
+```bash
+/stream/proxy
+```
+
+Rewrites relative URLs inside an M3U8 playlist to proxy through the API, adding CORS headers for cross-origin playback.
+
+#### Parameters
+
+| Parameter | Type | Mandatory | Default | Description |
+| :-------: | :--: | :-------: | :-----: | :---------: |
+| `url` | `string` | Yes ✔️ | — | M3U8 playlist URL |
+
+#### Example of request
+
+```bash
+curl "https://anikototvapi.vercel.app/api/stream/proxy?url=https://example.com/playlist.m3u8"
+```
+
+#### Sample Response
+
+Raw M3U8 content with URLs rewritten to `https://anikototvapi.vercel.app/api/stream/proxy?url=...` and `https://anikototvapi.vercel.app/api/stream/ts-proxy?url=...` for `.ts` segments.
+
+---
+
+> ## 🎬 GET Stream TS Proxy
+
+### Endpoint
+
+```bash
+/stream/ts-proxy
+```
+
+Proxies `.ts` video segments with proper `Content-Type: video/mp2t` and CORS headers.
+
+#### Parameters
+
+| Parameter | Type | Mandatory | Default | Description |
+| :-------: | :--: | :-------: | :-----: | :---------: |
+| `url` | `string` | Yes ✔️ | — | `.ts` segment URL |
+
+#### Example of request
+
+```bash
+curl "https://anikototvapi.vercel.app/api/stream/ts-proxy?url=https://example.com/segment.ts"
+```
+
+#### Sample Response
+
+Binary video segment data with `Content-Type: video/mp2t` and `Access-Control-Allow-Origin: *`.
+
+---
+
 ## 📋 API Response Schema
 
 ### Success Response
@@ -2022,7 +2215,7 @@ All list endpoints include pagination metadata in the response:
 | `hasNext` | `boolean` | Whether there is a next page |
 | `hasPrev` | `boolean` | Whether there is a previous page |
 
-**Endpoints with pagination:** `/api/search`, `/api/most-popular`, `/api/new-release`, `/api/newly-added`, `/api/latest-updated`, `/api/az-list/:letter`, `/api/filter`, `/api/genre/:name`, `/api/type/:name`, `/api/status/:name`
+**Endpoints with pagination:** `/api/search`, `/api/most-popular`, `/api/new-release`, `/api/newly-added`, `/api/latest-updated`, `/api/az-list/:letter`, `/api/filter`, `/api/genre/:name`, `/api/type/:name`, `/api/status/:name`, `/api/upcoming`, `/api/top-rankings`, `/api/recently-updated`, `/api/completed`
 
 ### Anime Item Object
 
@@ -2131,8 +2324,8 @@ CMD ["node", "server.js"]
 |:---|:---|
 | ⚡ Cached response | ~200ms |
 | 🔄 Fresh fetch | ~1-3s |
-| 💾 Cache TTL | 5 minutes |
+| 💾 Cache TTL | 3 min–1 hour (per-endpoint) |
-| ⏱️ Timeout per request | 15 seconds |
+| ⏱️ Timeout per request | 30 seconds |
 | 🎬 Total anime indexed | 10,000+ |
 | 📦 Total codebase | ~120KB |
 
@@ -2151,6 +2344,8 @@ CMD ["node", "server.js"]
 
 | Version | Date | Key Changes |
 |:---|:---|:---|
+| **2.4.1** | 2026-08-27 | Security: fixed SSRF in stream proxies, dotenv load order fix, SECURITY.md |
+| **2.2.0** | 2026-07-28 | Streaming resolver, M3U8/TS proxy, 5 new endpoints, bug fixes, full diagnostic sweep |
 | **1.7.2** | 2026-06-08 | Full rebrand AniKotoAPI → AniKotoAPI, docs folder with real data, streaming fix |
 | **1.7.1** | 2026-06-08 | Updated Vercel URL to anikototvapi.vercel.app |
 | **1.7.0** | 2026-06-08 | Premium landing page with SVG icons, live console, particles, glassmorphism |
@@ -2170,14 +2365,14 @@ CMD ["node", "server.js"]
 
 | Problem | Cause | Solution |
 |:---|:---|:---|
-| ❌ `npm install` fails | Node.js version too old | Upgrade to Node.js 20+ (`node -v`) |
+| ❎ `npm install` fails | Node.js version too old | Upgrade to Node.js 20+ (`node -v`) |
-| ❌ 500 error on filter | Missing `keyword` param | Add `?keyword=` (even empty) to filter requests |
+| ❎ 500 error on filter | Missing `keyword` param | Add `?keyword=` (even empty) to filter requests |
-| ❌ Empty episodes array | Wrong parameter | Use `/api/episodes/:animeId` with numeric animeId (e.g., 958) |
+| ❎ Empty episodes array | Wrong parameter | Use `/api/episodes/:animeId` with numeric animeId (e.g., 958) |
-| ❌ CORS errors | Frontend domain blocked | CORS is `*` — check browser extension |
+| ❎ CORS errors | Frontend domain blocked | CORS is `*` — check browser extension |
-| ❌ 404 on API routes | Wrong URL format | Use `/api/` prefix, not just `/` |
+| ❎ 404 on API routes | Wrong URL format | Use `/api/` prefix, not just `/` |
-| ❌ Deploy fails on Vercel | Build error | Check `node server.js` locally first |
+| ❎ Deploy fails on Vercel | Build error | Check `node server.js` locally first |
-| ❌ Slow first request | Serverless cold start | Normal — first request after idle takes ~3s |
+| ❎ Slow first request | Serverless cold start | Normal — first request after idle takes ~3s |
-| ❌ Rate limited | Too many requests | Cache reduces this — wait 5 min for TTL expiry |
+| ❎ Rate limited | Too many requests | Cache reduces this — wait 5 min for TTL expiry |
 
 ### 🐛 Debug Mode
 
@@ -2222,7 +2417,7 @@ Yes! CORS is enabled for all origins (<code>*</code>). Just make fetch requests
 <details>
 <summary><b>🔄 How often does the data refresh?</b></summary>
 <br/>
-The cache TTL is 5 minutes. After that, the next request triggers a fresh scrape from anikototv.to. This keeps data relatively fresh while reducing load on the source site.
+The cache uses an LRU strategy with per-endpoint TTLs ranging from 3 minutes (search, stream) to 1 hour (schedule). After TTL expiry, the next request triggers a fresh scrape from anikototv.to.
 </details>
 
 <details>
@@ -2262,21 +2457,25 @@ The API can access 10,000+ anime titles from anikototv.to. The most-popular endp
 
 ### ✅ Completed
 
-- [x] 🎬 33 API endpoints covering all data
+- [x] 🎬 38 API endpoints covering all data
 - [x] 🔍 Full-text search with pagination
 - [x] 📺 Episode lists via AJAX loading
-- [x] 🎯 Advanced filtering (genre, type, status, rating, sort)
+- [x] 🎯 Advanced filtering (genre, type, status, rating, sort, season, year)
 - [x] 🏆 Top 10 rankings (day/week/month)
 - [x] 🎲 Random anime discovery
 - [x] 📡 Streaming server info + mapper API
+- [x] 🔗 Stream URL resolution (embed → m3u8/mp4)
+- [x] 🌐 M3U8 proxy for CORS-free HLS playback
 - [x] 📋 AZ List alphabetical browsing
+- [x] 📅 Seasons and watch order extraction
 - [x] 🔄 Smart caching with LRU and configurable TTL
 - [x] 🚀 One-click Vercel deployment
 - [x] 📖 Comprehensive documentation with real API data
-- [x] 🏗️ AlisaReactionBot-style code comments
+- [x] 🏗️ Full JSDoc documentation coverage
 - [x] 🌐 Premium landing page with SVG icons
 - [x] 📱 PWA manifest and Open Graph image
 - [x] 📚 Full docs/ folder with examples
+- [x] 🐛 Full diagnostic sweep — all 34 endpoints passing
 
 ---
 
@@ -2346,8 +2545,8 @@ git push origin feature/amazing-feature
 - ✅ Update CHANGELOG.md with your changes
 - ✅ Keep PRs focused — one feature or fix per PR
 - ✅ Add JSDoc comments for new functions
-- ❌ Don't commit `node_modules` or cache files
+- ❎ Don't commit `node_modules` or cache files
-- ❌ Don't add unrelated changes to a single PR
+- ❎ Don't add unrelated changes to a single PR
 
 ---
 
@@ -2376,6 +2575,12 @@ git push origin feature/amazing-feature
 - [Star History](https://star-history.com/) — GitHub star history charts
 - [Capsule Render](https://github.com/kyechan99/capsule-render) — Header banner generator
 
+### 🔒 Security Contributors
+
+| Contributor | Contribution |
+|:---|:---|
+| [jamil182](https://github.com/jamil182) | Reported & fixed unauthenticated SSRF in stream proxy endpoints (PR #2), added SECURITY.md (PR #3) |
+
 ---
 
 ## 📄 License
@@ -2430,5 +2635,5 @@ Free to use, modify, and distribute — see the [LICENSE](LICENSE) file for deta
 <p align="center">
   <b>Made With ❤️ For The Anime Community</b>
   <br/><br/>
-  <sub>© 2026 Shineii86. All Rights Reserved.</sub>
+  <sub>© Shinei Nouzen. All Rights Reserved.</sub>
 </p>

SECURITY.md

@@ -0,0 +1,54 @@
+# Security Policy
+
+## Supported versions
+
+| Version | Supported |
+| ------- | --------- |
+| 2.4.x   | ✅        |
+| < 2.4   | ❌        |
+
+Fixes land on the latest release. If you are running an older version, upgrade before reporting — the issue may already be resolved.
+
+## Reporting a vulnerability
+
+**Please do not open a public issue or pull request for a security problem.** Public reports expose every running instance until a fix ships.
+
+Report privately instead:
+
+1. **Preferred — GitHub private vulnerability reporting.** Use the **Report a vulnerability** button on the [Security tab](https://github.com/Shineii86/AniKotoAPI/security). This keeps the discussion private until an advisory is published.
+2. **Fallback — Telegram.** If private reporting is unavailable, message [@Shineii86](https://telegram.me/Shineii86) asking for a private channel. Send only a one-line description there, not the full details.
+
+## What to include
+
+The more of this you can provide, the faster a fix can be confirmed:
+
+- The affected endpoint or module, and the version or commit you tested.
+- What an attacker can achieve — reading data, changing state, exhausting resources.
+- Minimal steps to reproduce, ideally a single request.
+- Whether authentication or any particular deployment setup is required.
+- A suggested fix, if you have one.
+
+## What happens next
+
+- Reports are acknowledged as soon as the maintainer sees them.
+- Once confirmed, a fix is prepared privately and released, and a GitHub advisory is published crediting the reporter unless anonymity is requested.
+- Reporters are asked to hold public details until the fix is released.
+
+This project is maintained by one person as unpaid work. Please read the timing above as intent rather than a guaranteed schedule.
+
+## Scope
+
+In scope — anything that lets someone abuse a deployed instance:
+
+- Server-side request forgery, or any way to make the server fetch or reach destinations it should not.
+- Injection, path traversal, or unsafe handling of caller-supplied input.
+- Leakage of environment variables, credentials, or internal configuration.
+- Denial of service reachable through a single unauthenticated request.
+- Vulnerable dependencies with a practical path to exploitation in this codebase.
+
+Out of scope:
+
+- Availability, downtime, or changes to the upstream anime sites this API scrapes.
+- Rate limiting or abuse controls on those upstream sites.
+- Findings that require an already-compromised host or shell access to the server.
+- Reports produced by automated scanners with no demonstrated impact.

agents/api-tester.md

@@ -1,18 +1,18 @@
 ---
 name: API Tester
-description: API testing specialist for AniKotoAPI — validates all 33 endpoints, streaming flow, mirror fallback, cache behavior, and error handling
+description: API testing specialist for AniKotoAPI — validates all 38 endpoints, streaming flow, mirror fallback, cache behavior, and error handling
 mode: subagent
 color: '#9B59B6'
 ---
 
 # API Tester — AniKotoAPI
 
-You are **API Tester** for AniKotoAPI, responsible for validating all 33 endpoints, the 3-step streaming flow, mirror fallback behavior, LRU cache, rate limiting, and error responses.
+You are **API Tester** for AniKotoAPI, responsible for validating all 38 endpoints, the 3-step streaming flow, mirror fallback behavior, LRU cache, rate limiting, and error responses.
 
 ## Your Identity
 
-- **Project**: AniKotoAPI v2.0.0 — https://github.com/Shineii86/AniKotoAPI
+- **Project**: AniKotoAPI v2.2.0 — https://github.com/Shineii86/AniKotoAPI
-- **Test file**: `test.js` (27 tests, run with `node test.js`)
+- **Test file**: `test.js` (38 tests, run with `node test.js`)
 - **Live API**: `https://anikototvapi.vercel.app/api`
 - **Pattern**: Each test does a real HTTP request to the live API, validates response structure, and prints pass/fail with timing
 
@@ -45,44 +45,41 @@ const test = async (name, fn) => {
 |----------|------------|
 | `GET /api/` | `success: true`, `results.spotlights`, `results.trending`, `results.genres` |
 | `GET /api/search?keyword=naruto` | `results.data` array, each item has `slug`, `title`, `poster` |
-| `GET /api/info?id=one-piece-odmau` | `results.anime` with `title`, `episodes`, `genres` |
+| `GET /api/info?id=one-piece-odmau` | `results.title`, `results.animeId` |
-| `GET /api/episodes/:slug` | `results.episodes` array, each has `server_ids` |
+| `GET /api/episodes/:slug` | `results.episodes` array |
-| `GET /api/servers?ids=...` | `results` array, each has `type`, `link_id`, `name` |
+| `GET /api/servers?ids=...` | `results` array |
-| `GET /api/stream?id=...` | `results.url` string |
+| `GET /api/watch?slug=&ep=1` | `results` with servers, episodeNumber |
-| `GET /api/watch?slug=&ep=1` | `results` with episodes, servers, recommendations |
+| `GET /api/download?slug=&ep=1` | `results` with download links (optional) |
 
 ### Discovery (test subset)
 | Endpoint | Validation |
 |----------|------------|
 | `GET /api/spotlight` | `results` array |
 | `GET /api/trending` | `results` array |
-| `GET /api/top-ten` | `results` array with day/week/month |
+| `GET /api/top-ten` | `results` object with day/week/month |
 | `GET /api/random` | `results` with `title`, `slug` |
 | `GET /api/suggestions?keyword=naruto` | `results` array |
-| `GET /api/most-popular` | `results` array |
+| `GET /api/most-popular` | `results` object |
+| `GET /api/upcoming` | `results` array |
+| `GET /api/top-rankings` | `results` array with rank positions |
+| `GET /api/recently-updated` | `results` array |
+| `GET /api/completed` | `results` array |
 
-### Lists (test subset)
+### Lists
 | Endpoint | Validation |
 |----------|------------|
-| `GET /api/new-release` | `results` array |
+| `GET /api/new-release` | `results` object |
-| `GET /api/newly-added` | `results` array |
+| `GET /api/newly-added` | `results` object |
-| `GET /api/latest-updated` | `results` array (may need deployment) |
+| `GET /api/latest-updated` | `results` object |
-| `GET /api/schedule` | `results` array |
-| `GET /api/az-list/a` | `results` array |
 
 ### Filter
 | Endpoint | Validation |
 |----------|------------|
-| `GET /api/filter?genre[]=1` | `results` with pagination |
+| `GET /api/filter?keyword=naruto` | `results` with pagination |
-| `GET /api/genre/action` | `results` array |
+| `GET /api/genre/action` | `results` with data, totalPages |
-| `GET /api/type/tv` | `results` array |
+| `GET /api/type/tv` | `results` with data, totalPages |
-| `GET /api/status/aired` | `results` array |
+| `GET /api/status/airing` | `results` with data, totalPages |
-
+| `GET /api/az-list/a` | `results` with data, totalPages |
-### Anime (may need deployment)
-| Endpoint | Validation |
-|----------|------------|
-| `GET /api/seasons/1642` | `results` array (skip if not deployed) |
-| `GET /api/watch-order/1642` | `results` array (skip if not deployed) |
 
 ### System
 | Endpoint | Validation |
@@ -90,7 +87,7 @@ const test = async (name, fn) => {
 | `GET /api/health` | `results.status: "healthy"` |
 | `GET /api/stats` | `results.endpoints` count |
 | `GET /api/cache/stats` | `results.hits`, `results.misses` |
-| `GET /api/mirrors` | `results` with mirror status |
+| `GET /api/mirrors` | `results` array with mirror status |
 | `GET /api/openapi` | `openapi: "3.0.3"`, `paths` object |
 
 ## Streaming Flow Test

agents/backend-architect.md

@@ -11,8 +11,8 @@ You are **Backend Architect** for AniKotoAPI, a free REST API scraping anime dat
 
 ## Your Identity
 
-- **Project**: AniKotoAPI v2.0.0 — https://github.com/Shineii86/AniKotoAPI
+- **Project**: AniKotoAPI v2.2.0 — https://github.com/Shineii86/AniKotoAPI
-- **Stack**: Node.js (ESM modules), Express 4.21, Cheerio 1.0, Axios 1.8, compression 1.8
+- **Stack**: Node.js (ESM modules), Express 4.21, Cheerio 1.0, Axios 1.8, compression 1.7
 - **Deployment**: Vercel serverless (read-only filesystem, `/tmp` only writable)
 - **Data Source**: anikototv.to (5 mirror domains: anikototv.to, anikoto.cz, anikoto.me, anikoto.net, anikototv.se)
 
@@ -25,17 +25,20 @@ Client → Vercel Edge/Express → Rate Limiter → CORS + Security Headers →
 
 ### Key Files
 - `server.js` — Express entry, CORS, compression, rate limiting, timeout, error handler
-- `src/routes/apiRoutes.js` — All 33 route definitions + OpenAPI spec
+- `src/routes/apiRoutes.js` — All 38 route definitions + OpenAPI spec
 - `src/helper/cache.helper.js` — LRU cache with per-endpoint TTL (3min-60min)
 - `src/helper/mirror.helper.js` — Multi-mirror fallback with health checks, session caching
 - `src/helper/extractPages.helper.js` — Page fetching using `fetchWithMirror()`
-- `src/extractors/` — 22 HTML scrapers using Cheerio selectors
+- `src/helper/parseListItem.helper.js` — Shared list item parser (DRY across extractors)
-- `src/controllers/` — 22 route handlers
+- `src/extractors/` — 28 HTML scrapers using Cheerio selectors
+- `src/controllers/` — 28 route handlers
+- `src/configs/ids.config.js` — Genre/Type/Status/Rating/Sort/Source/Season ID mappings
 
-### Endpoints (33 total)
+### Endpoints (38 total)
 **Core**: `/` (home), `/search`, `/info`, `/watch`, `/episodes/:id`, `/episodes-ajax/:id`
-**Streaming**: `/servers`, `/stream`, `/download`, `/mapper-servers`
+**Streaming**: `/servers`, `/stream`, `/download`, `/mapper-servers`, `/stream/resolve`, `/stream/qualities`, `/stream/proxy`, `/stream/ts-proxy`
 **Discovery**: `/spotlight`, `/trending`, `/top-ten`, `/random`, `/suggestions`, `/most-popular`
+**New**: `/upcoming`, `/top-rankings`, `/recently-updated`, `/completed`
 **Lists**: `/new-release`, `/newly-added`, `/latest-updated`, `/trending-sidebar`, `/az-list/:letter`
 **Filter**: `/filter`, `/genre/:name`, `/type/:name`, `/status/:name`
 **Anime**: `/seasons/:id`, `/watch-order/:id`, `/schedule`

agents/devops-automator.md

@@ -11,7 +11,7 @@ You are **DevOps Automator** for AniKotoAPI, responsible for Vercel deployment,
 
 ## Your Identity
 
-- **Project**: AniKotoAPI v2.0.0 — https://github.com/Shineii86/AniKotoAPI
+- **Project**: AniKotoAPI v2.2.0 — https://github.com/Shineii86/AniKotoAPI
 - **Deployment**: Vercel (auto-deploys from main branch)
 - **Git remote**: `https://github.com/Shineii86/AniKotoAPI.git`
 - **Git identity**: `Shinei Nouzen <157171073+Shineii86@users.noreply.github.com>`
@@ -91,7 +91,7 @@ git remote set-url origin https://github.com/Shineii86/AniKotoAPI.git
 
 ### Version Bump Checklist
 1. [ ] Update `package.json` version
-2. [ ] Update README.md badge (`Version-2.0.0`)
+2. [ ] Update README.md badge (`Version-2.2.1`)
 3. [ ] Add CHANGELOG.md entry (prepend at top)
 4. [ ] Update OpenAPI spec version in `apiRoutes.js`
 5. [ ] Update endpoint count if changed

agents/performance-benchmarker.md

@@ -11,7 +11,7 @@ You are **Performance Benchmarker** for AniKotoAPI, responsible for measuring an
 
 ## Your Identity
 
-- **Project**: AniKotoAPI v2.0.0 — https://github.com/Shineii86/AniKotoAPI
+- **Project**: AniKotoAPI v2.2.0 — https://github.com/Shineii86/AniKotoAPI
 - **Live API**: `https://anikototvapi.vercel.app/api`
 - **Deployment**: Vercel serverless (cold starts, memory limits, execution time limits)
 
@@ -133,7 +133,7 @@ compression({
 
 ## What You Do
 
-1. **Benchmark endpoints** — Measure response times for all 33 endpoints
+1. **Benchmark endpoints** — Measure response times for all 38 endpoints
 2. **Profile cache** — Track hit/miss ratios, measure TTL effectiveness
 3. **Test compression** — Compare compressed vs uncompressed sizes
 4. **Load test** — Simulate concurrent users, check rate limiting

agents/security-architect.md

@@ -11,7 +11,7 @@ You are **Security Architect** for AniKotoAPI, responsible for securing a public
 
 ## Your Identity
 
-- **Project**: AniKotoAPI v2.0.0 — https://github.com/Shineii86/AniKotoAPI
+- **Project**: AniKotoAPI v2.2.0 — https://github.com/Shineii86/AniKotoAPI
 - **Risk profile**: Public API, no auth, scrapes external site, deployed on Vercel
 - **Attack surface**: SSRF via mapper API, XSS in error messages, rate limit bypass, header injection
 
@@ -38,7 +38,7 @@ You are **Security Architect** for AniKotoAPI, responsible for securing a public
 ```javascript
 // ALLOWED_ORIGINS env var (comma-separated)
 // Default: allow all origins
-// Only GET method allowed
+// GET and POST methods allowed
 // Handles OPTIONS preflight
 ```
 
@@ -99,8 +99,7 @@ You are **Security Architect** for AniKotoAPI, responsible for securing a public
 | express | 4.21 | Check for known CVEs |
 | axios | 1.8 | Check for SSRF bugs |
 | cheerio | 1.0-rc.12 | Check for prototype pollution |
-| cors | 2.8 | Check for bypass issues |
+| compression | 1.7 | Check for BREACH attacks |
-| compression | 1.8 | Check for BREACH attacks |
 | dotenv | 16.4 | Check for env injection |
 
 ## What You Do

agents/technical-writer.md

@@ -11,7 +11,7 @@ You are **Technical Writer** for AniKotoAPI, responsible for maintaining all doc
 
 ## Your Identity
 
-- **Project**: AniKotoAPI v2.0.0 — https://github.com/Shineii86/AniKotoAPI
+- **Project**: AniKotoAPI v2.2.0 — https://github.com/Shineii86/AniKotoAPI
 - **Author format**: `Shinei Nouzen <157171073+Shineii86@users.noreply.github.com>`
 - **Changelog rule**: Append at top, never delete/edit old entries
 
@@ -19,15 +19,16 @@ You are **Technical Writer** for AniKotoAPI, responsible for maintaining all doc
 
 ```
 AniKotoAPI/
-├── README.md              # Main docs (2200+ lines)
+├── README.md              # Main docs (2600+ lines)
 ├── CHANGELOG.md           # Version history (append only)
 ├── CONTRIBUTING.md         # Contribution guidelines
 ├── docs/
 │   ├── index.md           # Overview, quick start
-│   ├── endpoints.md       # Full API reference (33 endpoints)
+│   ├── endpoints.md       # Full API reference (38 endpoints)
 │   ├── streaming.md       # 3-step streaming flow guide
 │   ├── examples.md        # cURL, JS, Python examples
-│   └── architecture.md    # Project structure, tech stack
+│   ├── architecture.md    # Project structure, tech stack
+│   └── testing.md         # Integration test suite & benchmarks
 └── public/
     ├── index.html         # Landing page
     ├── tos.html           # Terms of Service
@@ -69,7 +70,7 @@ AniKotoAPI/
 ## Project Structure (tree)
 ## API Endpoints
 ## Streaming Flow
-## Endpoint Documentation (33 sections)
+## Endpoint Documentation (36 sections)
 ## API Response Schema
 ## Configuration (.env)
 ## Deployment
@@ -106,7 +107,7 @@ curl "https://anikototvapi.vercel.app/api/endpoint"
 
 ### Version Bumping
 1. Update `package.json` version
-2. Update README.md badge: `Version-2.0.0`
+2. Update README.md badge: `Version-2.2.1`
 3. Update OpenAPI spec version in `apiRoutes.js`
 4. Add CHANGELOG.md entry (prepend, never delete)
 
@@ -140,7 +141,7 @@ flowchart TD
 
 1. **Update CHANGELOG** — Add entries for every version bump
 2. **Maintain README** — Keep endpoint list, badges, examples current
-3. **Document endpoints** — Full docs for each of 33 endpoints
+3. **Document endpoints** — Full docs for each of 38 endpoints
 4. **Write examples** — cURL, JS, Python for common use cases
 5. **Update OpenAPI** — Keep spec in sync with actual routes
 6. **Review docs/ folder** — Keep all 5 markdown files current

docs/endpoints.md

@@ -4,37 +4,69 @@ Base URL: `https://anikototvapi.vercel.app/api`
 
 ---
 
+## ⚠️ Streaming Status
+
+> **Streaming endpoints (`/api/servers`, `/api/stream`, `/api/stream/resolve`) return errors when anikototv.to blocks AJAX requests from server-side IPs.**
+
+| What Works | What's Blocked |
+|:---|:---|
+| Home, spotlight, trending | `/api/servers` — server list |
+| Search, suggestions, filter | `/api/stream` — embed URLs |
+| Info, episodes, schedule | `/api/stream/resolve` — m3u8/mp4 |
+| Top 10, most popular, new release | `/api/mapper-servers` — gogoanime servers |
+| AZ list, random, genre list | All AJAX-dependent endpoints |
+| All HTML-scraped endpoints | |
+
+**To fix streaming**, set one of these environment variables:
+
+```bash
+# Option 1: ScraperAPI (requires premium plan — $49/month)
+SCRAPER_API_KEY=your_scraperapi_key
+
+# Option 2: FlareSolverr (self-hosted, unlimited)
+FLARESOLVERR_URL=http://your-flaresolverr-host:8191
+```
+
+---
+
 ## Pagination
 
-All list endpoints include pagination metadata in the response:
+Most list endpoints return a `totalPages` field for pagination:
 
 ```json
 {
   "success": true,
   "results": {
-    "data": [...],
+    "totalPages": 296,
+    "data": [...]
+  }
+}
+```
+
+Use the `page` query parameter to navigate: `?page=2`
+
+**Only `/api/filter` returns the full pagination object:**
+
+```json
+{
+  "results": {
+    "totalPages": 1,
+    "data": [],
     "pagination": {
       "currentPage": 1,
-      "totalPages": 294,
+      "totalPages": 1,
-      "totalItems": 8820,
+      "totalItems": 0,
       "itemsPerPage": 30,
-      "hasNext": true,
+      "hasNext": false,
       "hasPrev": false
     }
   }
 }
 ```
 
-| Field | Type | Description |
+**Endpoints with `totalPages` pagination:** `/api/search`, `/api/most-popular`, `/api/new-release`, `/api/newly-added`, `/api/latest-updated`, `/api/az-list/:letter`, `/api/filter`, `/api/genre/:name`, `/api/type/:name`, `/api/status/:name`
-|:---|:---|:---|
-| `currentPage` | `number` | Current page number (1-indexed) |
-| `totalPages` | `number` | Total number of pages available |
-| `totalItems` | `number` | Estimated total items across all pages |
-| `itemsPerPage` | `number` | Number of items per page (default: 30) |
-| `hasNext` | `boolean` | Whether there is a next page |
-| `hasPrev` | `boolean` | Whether there is a previous page |
 
-**Endpoints with pagination:** `/api/search`, `/api/most-popular`, `/api/new-release`, `/api/newly-added`, `/api/latest-updated`, `/api/az-list/:letter`, `/api/filter`, `/api/genre/:name`, `/api/type/:name`, `/api/status/:name`
+**Endpoints with flat arrays (no pagination):** `/api/spotlight`, `/api/trending`, `/api/top-ten`, `/api/suggestions`, `/api/recently-updated`, `/api/completed`, `/api/upcoming`, `/api/top-rankings`, `/api/mirrors`, `/api/schedule`
 
 ---
 
@@ -136,12 +168,14 @@ Get detailed info about an anime.
 
 | Param | Type | Required | Description |
 |-------|------|----------|-------------|
-| `id` | string | Yes | Anime slug (e.g., `road-of-naruto-ggjw8`) |
+| `id` | string | Yes | Anime slug with random hash (e.g., `naruto-shippuuden-movie-6-road-to-ninja-w2wqq`) |
+
+> **Important:** Slugs now include random hashes (e.g., `one-piece-odmau`). Get valid slugs from `/search` or `/most-popular` results.
 
 **Request:**
 
 ```bash
-curl "https://anikototvapi.vercel.app/api/info?id=road-of-naruto-ggjw8"
+curl "https://anikototvapi.vercel.app/api/info?id=naruto-shippuuden-movie-6-road-to-ninja-w2wqq"
 ```
 
 **Response:**
@@ -150,13 +184,26 @@ curl "https://anikototvapi.vercel.app/api/info?id=road-of-naruto-ggjw8"
 {
   "success": true,
   "results": {
-    "title": "Road of Naruto",
+    "slug": "naruto-shippuuden-movie-6-road-to-ninja-w2wqq",
-    "type": "ONA",
+    "animeId": 786,
+    "title": "Naruto: Shippuuden Movie 6: Road to Ninja",
+    "japaneseTitle": "Naruto: Shippuuden Movie 6 - Road to Ninja",
+    "altNames": "Naruto: Shippuuden Movie 6 - Road to Ninja;Naruto Movie 9",
+    "poster": "https://cdn.anipixcdn.co/thumbnail/43dd49b4fdb9bede653e94468ff8df1e.jpg",
+    "backgroundImage": "'",
+    "synopsis": "Returning home to Konohagakure, the young ninja celebrate defeating a group of supposed Akatsuki...",
+    "type": "Movie",
+    "premiered": "Summer 2012",
+    "aired": "Jul 28, 2012",
     "status": "Finished Airing",
-    "totalEpisodes": null,
+    "malScore": "7.84",
-    "synopsis": "In celebration of 20 years of Naruto, Studio Pierrot posted an anniversary PV on their YouTube channel...",
+    "duration": "1 hr 39 min",
-    "malId": "53236",
+    "episodes": "1",
-    "genres": ["Action", "Fantasy", "Shounen"]
+    "studios": ["Pierrot"],
+    "producers": ["TV Tokyo", "Shueisha"],
+    "genres": ["Action", "Comedy", "Supernatural"],
+    "rating": "PG-13",
+    "reviewCount": "0"
   }
 }
 ```
@@ -666,3 +713,365 @@ curl "https://anikototvapi.vercel.app/api/az-list/a"
 ```
 
 Returns paginated list of anime starting with the specified letter.
+
+---
+
+## GET /upcoming
+
+Get upcoming anime sorted by air date.
+
+| Param | Type | Required | Description |
+|-------|------|----------|-------------|
+| `page` | number | No | Page number (default: 1) |
+
+```bash
+curl "https://anikototvapi.vercel.app/api/upcoming"
+```
+
+Returns paginated list of upcoming anime with sub/dub counts, type, and rating.
+
+---
+
+## GET /top-rankings
+
+Get top-ranked anime with sort options.
+
+| Param | Type | Required | Description |
+|-------|------|----------|-------------|
+| `sort` | string | No | Sort mode: `day` (default), `week`, or `month` |
+| `page` | number | No | Page number (default: 1) |
+
+```bash
+curl "https://anikototvapi.vercel.app/api/top-rankings?sort=week"
+```
+
+**Response:**
+
+```json
+{
+  "success": true,
+  "results": [
+    {
+      "rank": 1,
+      "slug": "demon-slayer-kimetsu-no-yaiba-infinity-castle-4tmun",
+      "poster": "https://cdn.anipixcdn.co/thumbnail/...",
+      "title": "Demon Slayer: Kimetsu no Yaiba Infinity Castle",
+      "japaneseTitle": "Kimetsu no Yaiba Movie: Mugen Jou-hen",
+      "sub": 1,
+      "dub": 1,
+      "type": "Movie"
+    }
+  ]
+}
+```
+
+---
+
+## GET /recently-updated
+
+Get recently updated anime. Supports tab filtering.
+
+| Param | Type | Required | Description |
+|-------|------|----------|-------------|
+| `tab` | string | No | Filter: `sub`, `dub`, `all` (default: `all`) |
+| `page` | number | No | Page number (default: 1) |
+
+```bash
+curl "https://anikototvapi.vercel.app/api/recently-updated"
+```
+
+Returns paginated list from `#recent-update` section with client-side tab filtering.
+
+---
+
+## GET /completed
+
+Get completed anime sorted by score.
+
+| Param | Type | Required | Description |
+|-------|------|----------|-------------|
+| `page` | number | No | Page number (default: 1) |
+
+```bash
+curl "https://anikototvapi.vercel.app/api/completed"
+```
+
+Returns flat array of finished anime.
+
+> **Note:** The `type` field in completed results contains the **air date** (e.g., `"2016-05-14"`), not the anime type (TV/Movie/etc).
+
+---
+
+## GET /stream/resolve
+
+Resolve an embed URL to actual video URL (m3u8/mp4).
+
+| Param | Type | Required | Description |
+|-------|------|----------|-------------|
+| `id` | string | Yes | `link_id` from `/servers` response |
+| `slug` | string | No | Anime slug (for session cookies) |
+
+```bash
+curl "https://anikototvapi.vercel.app/api/stream/resolve?id=MTF1dkFtaW9BRTZPbzJJRElFZUZr..."
+```
+
+Returns resolved URL, type (hls/mp4), server name, and subtitle URLs.
+
+---
+
+## GET /stream/qualities
+
+Parse M3U8 playlist for available quality options.
+
+| Param | Type | Required | Description |
+|-------|------|----------|-------------|
+| `url` | string | Yes | M3U8 playlist URL |
+
+```bash
+curl "https://anikototvapi.vercel.app/api/stream/qualities?url=https://example.com/playlist.m3u8"
+```
+
+Returns array of quality objects with url, quality label, resolution, bandwidth, and codec.
+
+---
+
+## GET /stream/proxy
+
+M3U8 playlist proxy — rewrites relative URLs to proxy endpoints for CORS-free playback.
+
+| Param | Type | Required | Description |
+|-------|------|----------|-------------|
+| `url` | string | Yes | M3U8 playlist URL |
+
+```bash
+curl "https://anikototvapi.vercel.app/api/stream/proxy?url=https://example.com/playlist.m3u8"
+```
+
+Returns rewritten M3U8 content with all `.m3u8` and `.ts` URLs pointing to proxy endpoints.
+
+---
+
+## GET /stream/ts-proxy
+
+TS video segment proxy — serves `.ts` segments with proper Content-Type and CORS headers.
+
+| Param | Type | Required | Description |
+|-------|------|----------|-------------|
+| `url` | string | Yes | `.ts` segment URL |
+
+```bash
+curl "https://anikototvapi.vercel.app/api/stream/ts-proxy?url=https://example.com/segment.ts"
+```
+
+Returns binary video segment with `Content-Type: video/mp2t` and `Access-Control-Allow-Origin: *`.
+
+---
+
+## System Endpoints
+
+### GET /health
+
+Health check endpoint. No parameters required.
+
+```bash
+curl "https://anikototvapi.vercel.app/api/health"
+```
+
+**Response:**
+
+```json
+{
+  "success": true,
+  "results": {
+    "status": "healthy",
+    "version": "2.4.1",
+    "uptime": "0h 1m 21s",
+    "uptimeSeconds": 81,
+    "timestamp": "2026-07-30T02:20:46.153Z",
+    "node": "v26.4.0",
+    "memory": {
+      "used": "99MB",
+      "total": "150MB"
+    }
+  }
+}
+```
+
+---
+
+### GET /stats
+
+API statistics endpoint. No parameters required.
+
+```bash
+curl "https://anikototvapi.vercel.app/api/stats"
+```
+
+**Response:**
+
+```json
+{
+  "success": true,
+  "results": {
+    "uptime": "81s",
+    "requests": {
+      "total": 37,
+      "errors": 9,
+      "successRate": "75.7%"
+    },
+    "cache": {
+      "type": "in-memory",
+      "ttl": "5 minutes",
+      "description": "Map-based cache with TTL expiration"
+    },
+    "endpoints": 38,
+    "timestamp": "2026-07-30T02:20:46.205Z"
+  }
+}
+```
+
+---
+
+### GET /cache/stats
+
+Cache statistics endpoint. No parameters required.
+
+```bash
+curl "https://anikototvapi.vercel.app/api/cache/stats"
+```
+
+**Response:**
+
+```json
+{
+  "success": true,
+  "results": {
+    "hits": 0,
+    "misses": 28,
+    "sets": 26,
+    "deletes": 0,
+    "size": 26,
+    "hitRate": "0.00%"
+  }
+}
+```
+
+---
+
+### GET /mirrors
+
+Mirror status endpoint. No parameters required.
+
+```bash
+curl "https://anikototvapi.vercel.app/api/mirrors"
+```
+
+**Response:**
+
+```json
+{
+  "success": true,
+  "results": [
+    {
+      "name": "Primary",
+      "url": "https://anikototv.to",
+      "priority": 1,
+      "status": "online",
+      "latency": "6115ms",
+      "isCurrent": true
+    },
+    {
+      "name": "Regional CZ",
+      "url": "https://anikoto.cz",
+      "priority": 2,
+      "status": "online",
+      "latency": "672ms",
+      "isCurrent": false
+    }
+  ]
+}
+```
+
+---
+
+### POST /mirrors/reset
+
+Reset mirror cache. No parameters required.
+
+```bash
+curl -X POST "https://anikototvapi.vercel.app/api/mirrors/reset"
+```
+
+**Response:**
+
+```json
+{
+  "success": true,
+  "message": "Mirror cache reset"
+}
+```
+
+---
+
+### GET /openapi
+
+OpenAPI 3.0.3 specification. No parameters required.
+
+```bash
+curl "https://anikototvapi.vercel.app/api/openapi"
+```
+
+Returns the full OpenAPI spec document with all endpoint definitions, tags, and server information.
+
+---
+
+## Response Patterns
+
+| Pattern | Format | Endpoints |
+|:---|:---|:---|
+| **Flat array** | `results: [...]` | `/spotlight`, `/trending`, `/top-ten`, `/suggestions`, `/recently-updated`, `/completed`, `/upcoming`, `/top-rankings`, `/mirrors`, `/schedule` |
+| **Paginated data** | `results: { totalPages, data: [...] }` | `/search`, `/most-popular`, `/new-release`, `/newly-added`, `/latest-updated`, `/genre/:name`, `/type/:name`, `/status/:name`, `/az-list/:letter` |
+| **Full pagination** | `results: { totalPages, data: [...], pagination: {...} }` | `/filter` only |
+| **Three-period** | `results: { today/week/month: [...] }` or `{ day/week/month: [...] }` | `/top-ten`, `/trending-sidebar` |
+| **Single object** | `results: {...}` | `/home`, `/info`, `/episodes`, `/episodes-ajax`, `/random`, `/health`, `/stats`, `/cache/stats`, `/stream-qualities` |
+
+---
+
+## Common Workflows
+
+### Streaming Workflow
+
+```
+1. GET /episodes/{animeId}     → Get episode list with server_ids
+2. GET /servers?ids={ids}      → Get available servers with link_ids
+3. GET /stream?id={link_id}    → Get embed URL + skip data
+4. GET /stream/resolve?id={link_id}  → Get actual m3u8/mp4 URL
+5. GET /stream/qualities?url={m3u8}  → Get available qualities
+6. GET /stream/proxy?url={m3u8}      → Get CORS-free proxied playlist
+```
+
+### Discovery Workflow
+
+```
+1. GET /              → Homepage: spotlights, trending, genres
+2. GET /search?q=     → Search by keyword
+3. GET /info?id=      → Get anime details
+4. GET /episodes/     → Get episode list
+5. GET /seasons/      → Get all seasons
+6. GET /watch-order/  → Get watch order for franchises
+```
+
+### Filter & Browse Workflow
+
+```
+1. GET /genre/{name}      → Browse by genre
+2. GET /type/{name}       → Browse by type (TV, Movie, OVA)
+3. GET /status/{name}     → Browse by status (airing, completed)
+4. GET /filter?...        → Advanced multi-parameter filter
+5. GET /az-list/{letter}  → Browse alphabetically
+6. GET /top-rankings?sort=day  → Top ranked anime
+```
+
+---
+
+// ══════ END: endpoints.md ══════

docs/index.md

@@ -1,102 +1,430 @@
-# AniKotoAPI Documentation
+# // === HEADER ===
+# AniKotoAPI v2.4.1
+# Free REST API for Anime Data
+# Scraping anikototv.to with Cheerio
 
-> Free REST API for anime data. Browse, search, stream — no API key required.
+---
 
-## Overview
+![AniKotoAPI](https://img.shields.io/badge/AniKotoAPI-v2.4.1-blue)
+![License](https://img.shields.io/badge/License-MIT-green)
+![Endpoints](https://img.shields.io/badge/Endpoints-38+-orange)
+![Node.js](https://img.shields.io/badge/Node.js-18+-brightgreen)
 
-AniKotoAPI is a free, open-source REST API that provides anime data scraped from [anikototv.to](https://anikototv.to). It's built with Node.js, Express, and Cheerio, and deployed on Vercel.
+> A fast, free REST API that scrapes anime data from **anikototv.to**.
+> Built with Node.js, Cheerio, and deployed on Vercel serverless functions.
 
-**Base URL:** `https://anikototvapi.vercel.app/api`
+---
 
-## Quick Start
+## // === STREAMING STATUS ===
+
+> **Streaming endpoints (`/api/servers`, `/api/stream`, `/api/stream/resolve`) return errors when anikototv.to blocks AJAX requests from server-side IPs.**
+
+| What Works | What's Blocked |
+|:---|:---|
+| Home, spotlight, trending | `/api/servers` — server list |
+| Search, suggestions, filter | `/api/stream` — embed URLs |
+| Info, episodes, schedule | `/api/stream/resolve` — m3u8/mp4 |
+| Top 10, most popular, new release | `/api/mapper-servers` — gogoanime servers |
+| AZ list, random, genre list | All AJAX-dependent endpoints |
+| All HTML-scraped endpoints | |
+
+**To fix streaming**, set one of these environment variables:
 
 ```bash
-# Get homepage data (spotlight, trending, top-airing, genres)
+# Option 1: ScraperAPI (requires premium plan — $49/month)
-curl https://anikototvapi.vercel.app/api
+SCRAPER_API_KEY=your_scraperapi_key
 
-# Search for anime
+# Option 2: FlareSolverr (self-hosted, unlimited)
-curl "https://anikototvapi.vercel.app/api/search?keyword=naruto"
+FLARESOLVERR_URL=http://your-flaresolverr-host:8191
-
-# Get anime info
-curl "https://anikototvapi.vercel.app/api/info?id=naruto-eybxz"
 ```
 
-**Live Response — Homepage:**
+---
 
-```json
+## // === QUICK START ===
-{
+
-  "success": true,
+### Get started in 3 steps:
-  "results": {
+
-    "spotlights": [
+**Step 1** — Make your first request:
-      {
+
-        "slug": "wistoria-wand-and-sword-season-2-dua04",
+```bash
-        "poster": "https://cdn.anipixcdn.co/background/101f58336250ee0d_1779363645.webp",
+curl https://anikototvapi.vercel.app/api/
-        "title": "Wistoria: Wand and Sword Season 2",
+```
-        "japaneseTitle": "Tsue to Tsurugi no Wistoria Season 2",
+
-        "rating": "PG-13",
+**Step 2** — Search for an anime:
-        "quality": "HD"
+
-      }
+```bash
-    ],
+curl https://anikototvapi.vercel.app/api/search?q=naruto
-    "trending": [
+```
-      {
+
-        "slug": "witch-hat-atelier-ikmut/ep-11",
+**Step 3** — Get anime info:
-        "poster": "https://cdn.anipixcdn.co/thumbnail/0412057393e8a45b3ba8b16874b6034d.jpg",
+
-        "title": "Witch Hat Atelier",
+```bash
-        "japaneseTitle": "Tongari Boushi no Atelier",
+curl https://anikototvapi.vercel.app/api/info?link=/anime/naruto
-        "sub": 11,
+```
-        "dub": 11,
+
-        "total": 13,
+That's it. No API keys required.
-        "type": "TV"
+
-      }
+---
-    ],
+
-    "topAiring": [...],
+## // === FEATURES ===
-    "genres": ["Action", "Adventure", "Cars", "Comedy", ...]
+
-  }
+| Feature | Description |
+|---|---|
+| **38+ Endpoints** | Full coverage of anime data, streaming, and discovery |
+| **28 HTML Scrapers** | Cheerio-based scrapers for robust data extraction |
+| **28 Route Handlers** | Organized controllers with clean separation of concerns |
+| **5 Mirror Domains** | Automatic failover across multiple source domains |
+| **LRU Cache** | Per-endpoint TTL caching for performance |
+| **Rate Limiting** | 100 requests per 15 minutes per IP |
+| **GZIP Compression** | Compressed responses for faster transfers |
+| **Vercel Deployment** | Zero-config serverless deployment |
+| **OpenAPI Spec** | Auto-generated API documentation at `/api/openapi` |
+| **Health Checks** | System status and cache monitoring endpoints |
+
+---
+
+## // === ENDPOINTS OVERVIEW ===
+
+### Home
+
+| Method | Endpoint | Description |
+|--------|----------|-------------|
+| GET | `/api/` | Homepage data: featured, spotlight, sidebar content |
+
+### Anime
+
+| Method | Endpoint | Description |
+|--------|----------|-------------|
+| GET | `/api/info` | Full anime info, episodes, relations, recommendations |
+| GET | `/api/seasons/:id` | Season/episode details for an anime |
+| GET | `/api/watch-order/:id` | Canonical watch order for a series |
+
+### Search
+
+| Method | Endpoint | Description |
+|--------|----------|-------------|
+| GET | `/api/search` | Search anime by title |
+| GET | `/api/search/suggest` | Autocomplete suggestions |
+| GET | `/api/suggestions` | Trending/general suggestions |
+
+### Episodes
+
+| Method | Endpoint | Description |
+|--------|----------|-------------|
+| GET | `/api/episodes/:id` | Episode list for an anime |
+| GET | `/api/episodes-ajax/:id` | Lazy-loaded episode pagination |
+
+### Streaming
+
+| Method | Endpoint | Description |
+|--------|----------|-------------|
+| GET | `/api/stream` | Master stream URL for an episode |
+| GET | `/api/servers` | Available servers for an episode |
+| GET | `/api/stream/resolve` | Resolve a streaming URL |
+| GET | `/api/stream/qualities` | Available quality variants |
+| GET | `/api/stream/proxy` | Proxied video stream |
+| GET | `/api/stream/ts-proxy` | Proxied TS segment stream |
+| GET | `/api/watch` | Watch page with stream data |
+| GET | `/api/download` | Download link for an episode |
+| GET | `/api/mapper-servers` | Server name mappings |
+
+### Discovery
+
+| Method | Endpoint | Description |
+|--------|----------|-------------|
+| GET | `/api/spotlight` | Featured/spotlight anime |
+| GET | `/api/trending` | Currently trending anime |
+| GET | `/api/top-ten` | Top 10 rankings |
+| GET | `/api/random` | Random anime recommendation |
+| GET | `/api/most-popular` | Most popular anime |
+| GET | `/api/trending-sidebar` | Trending sidebar widget data |
+
+### Releases
+
+| Method | Endpoint | Description |
+|--------|----------|-------------|
+| GET | `/api/new-release` | Recently released episodes |
+| GET | `/api/newly-added` | Newly added anime |
+| GET | `/api/latest-updated` | Latest updated anime |
+| GET | `/api/recently-updated` | Recently updated entries |
+| GET | `/api/completed` | Completed anime |
+| GET | `/api/upcoming` | Upcoming anime |
+
+### Rankings
+
+| Method | Endpoint | Description |
+|--------|----------|-------------|
+| GET | `/api/top-rankings` | Top ranked anime by category |
+
+### Categories
+
+| Method | Endpoint | Description |
+|--------|----------|-------------|
+| GET | `/api/genre/:name` | Anime by genre |
+| GET | `/api/type/:name` | Anime by type (TV, Movie, OVA, etc.) |
+| GET | `/api/status/:name` | Anime by status (Airing, Completed, etc.) |
+| GET | `/api/az-list/:letter` | Alphabetical listing |
+| GET | `/api/filter` | Multi-criteria filter |
+
+### Schedule
+
+| Method | Endpoint | Description |
+|--------|----------|-------------|
+| GET | `/api/schedule` | Anime release schedule |
+
+### System
+
+| Method | Endpoint | Description |
+|--------|----------|-------------|
+| GET | `/api/health` | Health check / uptime |
+| GET | `/api/stats` | API statistics |
+| GET | `/api/cache/stats` | Cache hit/miss statistics |
+| GET | `/api/mirrors` | List available mirror domains |
+| POST | `/api/mirrors/reset` | Reset failover mirror state |
+| GET | `/api/openapi` | OpenAPI/Swagger spec |
+
+---
+
+## // === ARCHITECTURE ===
+
+```
+AniKotoAPI/
+├── api/                    # Vercel serverless functions
+│   ├── index.js            # Home endpoint
+│   ├── info.js             # Anime info
+│   ├── search.js           # Search
+│   ├── stream.js           # Streaming
+│   └── ...                 # 38+ route handlers
+├── scrapers/               # Cheerio HTML scrapers
+│   ├── home.js
+│   ├── info.js
+│   ├── search.js
+│   └── ...                 # 28 scrapers
+├── utils/                  # Shared utilities
+│   ├── cache.js            # LRU cache with TTL
+│   ├── rateLimit.js        # IP-based rate limiter
+│   ├── mirrors.js          # Mirror failover logic
+│   └── compress.js         # GZIP compression
+├── docs/                   # Documentation
+│   ├── index.md            # This file
+│   ├── endpoints.md        # Full API reference
+│   ├── streaming.md        # Streaming workflow
+│   ├── examples.md         # Code examples
+│   ├── architecture.md     # Design patterns
+│   └── testing.md          # Test suite docs
+├── package.json
+└── vercel.json
+```
+
+### Key Design Patterns
+
+- **Scraping Layer**: 28 Cheerio-based scrapers parse HTML from anikototv.to, isolating page-specific logic from route handlers.
+- **Controller Layer**: 28 route handlers map HTTP requests to scraper calls, handle validation, and format responses.
+- **Cache Layer**: LRU cache with per-endpoint TTL reduces redundant scraping. Hot endpoints cache for 2–5 minutes; cold endpoints for 10+ minutes.
+- **Mirror Layer**: 5 source domains with automatic failover. If one domain is slow or down, requests transparently fall back to the next mirror.
+- **Rate Limiter**: Token bucket algorithm, 100 requests per 15-minute window per client IP.
+
+---
+
+## // === GETTING STARTED ===
+
+### Using cURL
+
+```bash
+# Get homepage data
+curl https://anikototvapi.vercel.app/api/
+
+# Search for an anime
+curl "https://anikototvapi.vercel.app/api/search?q=one+piece"
+
+# Get anime details
+curl "https://anikototvapi.vercel.app/api/info?link=/anime/one-piece"
+
+# Get streaming servers
+curl "https://anikototvapi.vercel.app/api/servers?link=/one-piece-episode-1"
+
+# Get trending anime
+curl https://anikototvapi.vercel.app/api/trending
+```
+
+### Using JavaScript (fetch)
+
+```javascript
+const BASE = "https://anikototvapi.vercel.app/api";
+
+// Search
+const res = await fetch(`${BASE}/search?q=naruto`);
+const data = await res.json();
+console.log(data.results);
+```
+
+### Using Python (requests)
+
+```python
+import requests
+
+BASE = "https://anikototvapi.vercel.app/api"
+
+# Search
+r = requests.get(f"{BASE}/search?q=naruto")
+print(r.json()["results"])
+```
+
+### Using Node.js (axios)
+
+```javascript
+const axios = require("axios");
+const BASE = "https://anikototvapi.vercel.app/api";
+
+async function searchAnime(query) {
+  const { data } = await axios.get(`${BASE}/search`, {
+    params: { q: query }
+  });
+  return data.results;
 }
 ```
 
-## Features
+---
 
-- **33 Endpoints** — Home, search, info, episodes, streaming, schedule, seasons, watch order, download, and more
+## // === RATE LIMITING ===
-- **No API Key** — Just make requests, no registration needed
-- **LRU Cache** — Configurable TTL per endpoint type (3min to 60min)
-- **Multi-Mirror Fallback** — Automatic failover across 5 mirror domains
-- **Response Compression** — Gzip compression for faster responses
-- **Pagination Metadata** — All list endpoints include `pagination` object with `currentPage`, `totalPages`, `hasNext`, `hasPrev`
-- **CORS Enabled** — Access from any domain
-- **JSON Responses** — Standardized `{success, results}` format
 
-## Documentation
+- **Limit**: 100 requests per 15-minute window
+- **Scope**: Per client IP address
+- **Headers**: Rate limit info returned in response headers
+- **Exceeded**: Returns `429 Too Many Requests`
 
-- [API Endpoints Reference](endpoints.md) — Complete endpoint documentation with real responses
+If you hit the rate limit, wait for the window to reset before retrying.
-- [Streaming Flow Guide](streaming.md) — How to get stream URLs step by step
-- [Code Examples](examples.md) — cURL, JavaScript, Python (all tested and working)
-- [Architecture](architecture.md) — Project structure and design decisions
 
-## Response Format
+---
 
-All endpoints return JSON in this format:
+## // === MIRROR FAILOVER ===
+
+AniKotoAPI maintains 5 mirror domains. When a request fails on the primary domain, the system automatically retries on the next available mirror.
+
+```
+Primary → Mirror 1 → Mirror 2 → Mirror 3 → Mirror 4 → Mirror 5
+```
+
+Use `/api/mirrors` to check current mirror status, or `POST /api/mirrors/reset` to reset the failover state.
+
+---
+
+## // === CACHING ===
+
+The API uses an LRU (Least Recently Used) cache with per-endpoint TTL:
+
+| Endpoint Category | TTL |
+|-------------------|-----|
+| Home / Spotlight | 2 minutes |
+| Search | 3 minutes |
+| Anime Info | 5 minutes |
+| Streaming | 1 minute |
+| Rankings / Lists | 10 minutes |
+
+Cache stats available at `/api/cache/stats`.
+
+---
+
+## // === ERROR RESPONSES ===
+
+All errors return JSON with a consistent structure:
 
 ```json
 {
-  "success": true,
+  "error": true,
-  "results": { ... }
+  "message": "Description of what went wrong",
+  "status": 404
 }
 ```
 
-Error responses:
+| Status | Meaning |
+|--------|---------|
+| 400 | Bad request / missing parameters |
+| 404 | Resource not found |
+| 429 | Rate limit exceeded |
+| 500 | Internal server error |
 
-```json
+---
-{
+
-  "success": false,
+## // === DOCUMENTATION ===
-  "message": "Error description"
+
-}
+| File | Description |
+|------|-------------|
+| [endpoints.md](./endpoints.md) | Full API reference for all 38+ endpoints |
+| [streaming.md](./streaming.md) | Complete streaming workflow guide |
+| [examples.md](./examples.md) | Working code examples in cURL, JS, Python |
+| [architecture.md](./architecture.md) | Project structure and design patterns |
+| [testing.md](./testing.md) | Integration test suite documentation |
+
+---
+
+## // === CONTRIBUTING ===
+
+Contributions are welcome. To contribute:
+
+1. Fork the repository from [GitHub](https://github.com/Shineii86/AniKotoAPI)
+2. Create a feature branch: `git checkout -b feature/my-feature`
+3. Make your changes and test them
+4. Commit with a clear message
+5. Push and open a Pull Request
+
+### Development Setup
+
+```bash
+git clone https://github.com/Shineii86/AniKotoAPI.git
+cd AniKotoAPI
+npm install
+npm run dev
 ```
 
-## Rate Limiting
+### Guidelines
 
-Rate limiting is configurable via environment variables (`RATE_LIMIT`, `RATE_WINDOW`). Default is 100 requests per 60 seconds per IP. Includes `X-RateLimit-Limit` and `X-RateLimit-Remaining` headers.
+- Follow existing code style and patterns
+- Add scrapers in `scrapers/` for new pages
+- Add route handlers in `api/` for new endpoints
+- Update documentation when adding features
+- Test all changes before submitting
 
-## Disclaimer
+---
 
-This API is for **educational purposes only**. It scrapes publicly available data from anikototv.to. We are not affiliated with or endorsed by AniKoto. All content belongs to its respective owners.
+## // === LICENSE ===
+
+This project is licensed under the **MIT License**.
+
+```
+MIT License
+
+Copyright (c) 2024 Shinei Nouzen
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+```
+
+---
+
+## // === LINKS ===
+
+- **Live API**: https://anikototvapi.vercel.app/api
+- **GitHub**: https://github.com/Shineii86/AniKotoAPI
+- **OpenAPI Spec**: https://anikototvapi.vercel.app/api/openapi
+- **Health Check**: https://anikototvapi.vercel.app/api/health
+- **Author**: [Shinei Nouzen](https://github.com/Shineii86)
+
+---
+
+// ══════ END: index.md ══════

docs/testing.md

@@ -0,0 +1,207 @@
+# Testing
+
+Comprehensive integration test suite for AniKotoAPI — validates all 35 endpoints, streaming flow, error handling, and performance benchmarks.
+
+## Quick Start
+
+```bash
+node test.js
+```
+
+No external test framework required — just Node.js native `fetch`.
+
+## Auto-Detection
+
+The test suite automatically detects which API to use:
+
+1. **Local server running** (`localhost:4444`) → uses local
+2. **No local server** → falls back to live API (`anikototvapi.vercel.app`)
+3. **Manual override** → `API_URL=http://localhost:4444/api node test.js`
+
+```bash
+# Auto-detect (recommended)
+node test.js
+
+# Start local server first, then test
+npm start        # terminal 1
+node test.js     # terminal 2
+
+# Force specific URL
+API_URL=http://localhost:4444/api node test.js
+API_URL=https://anikototvapi.vercel.app/api node test.js
+```
+
+## What It Tests
+
+### Core Endpoints (5)
+| Test | Endpoint | Validates |
+|------|----------|-----------|
+| Home | `GET /` | `results.spotlights` or `results.trending` |
+| Search | `GET /search?keyword=naruto` | `results.data` array |
+| Info | `GET /info?id=one-piece-odmau` | `results.title` |
+| Episodes | `GET /episodes/one-piece-odmau` | `results.episodes` array |
+| Servers | `GET /servers?ids=1` | `results` exists |
+
+### Streaming (1)
+| Test | Endpoint | Validates |
+|------|----------|-----------|
+| Stream | `GET /watch?slug=one-piece-odmau&ep=1` | `results.servers` or `results.episodeNumber` |
+
+### Discovery (10)
+| Test | Endpoint | Validates |
+|------|----------|-----------|
+| Suggestions | `GET /suggestions?keyword=naruto` | `results` |
+| Spotlight | `GET /spotlight` | `results` |
+| Trending | `GET /trending` | `results` |
+| Top 10 | `GET /top-ten` | `results` |
+| Random | `GET /random` | `results` |
+| Most Popular | `GET /most-popular` | `results` |
+| Upcoming | `GET /upcoming` | `results` (array) |
+| Top Rankings | `GET /top-rankings` | `results` (array) |
+| Recently Updated | `GET /recently-updated` | `results` (array) |
+| Completed | `GET /completed` | `results` (array) |
+
+### Release Lists (3)
+| Test | Endpoint | Validates |
+|------|----------|-----------|
+| New Release | `GET /new-release` | `results` |
+| Newly Added | `GET /newly-added` | `results` |
+| Latest Updated | `GET /latest-updated` | `results` |
+
+### Categories (5)
+| Test | Endpoint | Validates |
+|------|----------|-----------|
+| Genre | `GET /genre/action` | `results` |
+| Type | `GET /type/tv` | `results` |
+| Status | `GET /status/airing` | `results` |
+| AZ List | `GET /az-list/a` | `results` |
+| Filter | `GET /filter?keyword=naruto` | `results` |
+
+### Search Variants (2)
+| Test | Endpoint | Validates |
+|------|----------|-----------|
+| Search Suggest | `GET /search/suggest?keyword=naruto` | `results` |
+| Trending Sidebar | `GET /trending-sidebar` | `results` |
+
+### Anime Detail (3 — optional)
+| Test | Endpoint | Validates |
+|------|----------|-----------|
+| Seasons | `GET /seasons/one-piece-odmau` | `results.seasons` or `results.totalSeasons` |
+| Watch Order | `GET /watch-order/one-piece-odmau` | `results.related` or `results.totalRelated` |
+| Download | `GET /download?slug=one-piece-odmau&ep=1` | `results` |
+
+### System (5)
+| Test | Endpoint | Validates |
+|------|----------|-----------|
+| Health | `GET /health` | `results.status === "healthy"` |
+| Stats | `GET /stats` | `results.endpoints` |
+| Cache Stats | `GET /cache/stats` | `results.hits !== undefined` |
+| Mirrors | `GET /mirrors` | `results` (array) |
+| OpenAPI | `GET /openapi` | `openapi === "3.0.3"` |
+
+### Dynamic Tests (2)
+| Test | Endpoint | How It Works |
+|------|----------|--------------|
+| Episodes Ajax | `GET /episodes-ajax/:animeId` | Fetches `animeId` from `/info` at runtime |
+| Stream Resolve | `GET /stream/resolve?id=:linkId&slug=...` | Fetches `linkId` via episodes → servers flow |
+
+## Test Structure
+
+```javascript
+{
+  name: "Test Name",           // Display name
+  url: "/endpoint?param=val", // URL path (appended to BASE)
+  check: (data) => boolean,   // Custom validation function
+  optional: true              // Skip on failure instead of fail
+}
+```
+
+### Validation Logic
+
+For each test:
+1. **HTTP status** — Must be 200 (or skip if `optional` and 404/500)
+2. **`success` field** — Must be `true` (or skip if `optional`)
+3. **Custom check** — `check(data)` must return truthy (or skip if `optional`)
+
+### Optional Tests
+
+Marked with `optional: true`. Instead of failing, they print `⏭️ Skipped` when:
+- HTTP 404 or 500
+- `success: false`
+- Custom validation fails
+- Network error
+
+## Sample Output
+
+```
+📡 Detected local server — using localhost:4444
+
+🧪 Running 35 tests...
+
+📡 API: http://localhost:4444/api
+
+[MIRROR] Switched to: https://anikototv.to
+✅ Home (438ms)
+✅ Search (480ms)
+✅ Info (27ms)
+...
+✅ Episodes Ajax (1304ms)
+
+==================================================
+📊 Results: 35 passed, 0 failed, 0 skipped, 35 total
+==================================================
+
+⚡ Performance:
+   Average: 465ms
+   Min: 11ms
+   Max: 3679ms
+```
+
+## Exit Codes
+
+| Code | Meaning |
+|------|---------|
+| `0` | All tests passed |
+| `1` | One or more tests failed |
+
+## Performance Metrics
+
+The test suite reports:
+- **Per-test timing** — Response time for each endpoint
+- **Average** — Mean response time across all passing tests
+- **Min/Max** — Fastest and slowest endpoints
+- **Cache effect** — Cached responses return in ~10-30ms vs ~300-500ms uncached
+
+## Adding New Tests
+
+1. Add entry to the `tests` array in `test.js`:
+```javascript
+{ name: "New Endpoint", url: "/new-endpoint", check: (d) => d.results },
+```
+
+2. For endpoints requiring runtime data, add to the dynamic section in `runAll()`.
+
+3. Run `node test.js` to verify.
+
+## Architecture
+
+```
+test.js
+├── detectBase()           # Auto-detect local vs live API
+├── tests[]                # Static test definitions (34 tests)
+├── runAll()
+│   ├── detectBase()       # Resolve API URL
+│   ├── fetchJson()        # Pre-fetch dynamic data (animeId, linkId)
+│   ├── push dynamic tests # Episodes Ajax, Stream Resolve
+│   └── runTest() × 35     # Execute each test sequentially
+├── runTest()              # Single test runner with timing
+└── results[]              # Pass/fail/skip tracking
+```
+
+## Notes
+
+- Tests run **sequentially** to avoid rate limiting
+- **No mocking** — all tests hit real HTTP endpoints
+- **Cache aware** — repeated runs benefit from server-side caching
+- **Dynamic tests** resolve dependencies at runtime (animeId, linkId)
+- **Stream Resolve** may skip if no valid link_id is available (data expires)

package-lock.json

@@ -1,18 +1,17 @@
 {
   "name": "AniKotoAPI",
-  "version": "1.9.0",
+  "version": "2.4.1",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "AniKotoAPI",
-      "version": "1.9.0",
+      "version": "2.4.1",
       "license": "MIT",
       "dependencies": {
         "axios": "^1.8.0",
         "cheerio": "^1.0.0-rc.12",
         "compression": "^1.8.1",
-        "cors": "^2.8.5",
         "dotenv": "^16.4.0",
         "express": "^4.21.0"
       },
@@ -389,23 +388,6 @@
       "integrity": "sha512-NXdYc3dLr47pBkpUCHtKSwIOQXLVn8dZEuywboCOJY/osA0wFSLlSawr3KN8qXJEyX66FcONTH8EIlVuK0yyFA==",
       "license": "MIT"
     },
-    "node_modules/cors": {
-      "version": "2.8.6",
-      "resolved": "https://registry.npmjs.org/cors/-/cors-2.8.6.tgz",
-      "integrity": "sha512-tJtZBBHA6vjIAaF6EnIaq6laBBP9aq/Y3ouVJjEfoHbRBcHBAHYcMh/w8LDrk2PvIMMq8gmopa5D4V8RmbrxGw==",
-      "license": "MIT",
-      "dependencies": {
-        "object-assign": "^4",
-        "vary": "^1"
-      },
-      "engines": {
-        "node": ">= 0.10"
-      },
-      "funding": {
-        "type": "opencollective",
-        "url": "https://opencollective.com/express"
-      }
-    },
     "node_modules/css-select": {
       "version": "5.2.2",
       "resolved": "https://registry.npmjs.org/css-select/-/css-select-5.2.2.tgz",
@@ -1270,15 +1252,6 @@
         "url": "https://github.com/fb55/nth-check?sponsor=1"
       }
     },
-    "node_modules/object-assign": {
-      "version": "4.1.1",
-      "resolved": "https://registry.npmjs.org/object-assign/-/object-assign-4.1.1.tgz",
-      "integrity": "sha512-rJgTQnkUnH1sFw8yT6VSU3zD3sWmu6sZhIseY8VX+GRu3P6F7Fu+JNDoXfklElbLJSnc3FUQHVe4cU5hj+BcUg==",
-      "license": "MIT",
-      "engines": {
-        "node": ">=0.10.0"
-      }
-    },
     "node_modules/object-inspect": {
       "version": "1.13.4",
       "resolved": "https://registry.npmjs.org/object-inspect/-/object-inspect-1.13.4.tgz",
@@ -1733,9 +1706,9 @@
       "license": "MIT"
     },
     "node_modules/undici": {
-      "version": "7.28.0",
+      "version": "7.29.0",
-      "resolved": "https://registry.npmjs.org/undici/-/undici-7.28.0.tgz",
+      "resolved": "https://registry.npmjs.org/undici/-/undici-7.29.0.tgz",
-      "integrity": "sha512-cRZYrTDwWznlnRiPjggAGxZXanty6M8RV1ff8Wm4LWXBp7/IG8v5DnOm74DtUBp9OONpK75YlPnIjQqX0dBDtA==",
+      "integrity": "sha512-IDxfleLmmbSskfWSUATiN1nfn2rDuvnMOqb5CWR92iIfojA0Ud+ulOAAEQ57LPr9rWmsreUyf5lwyao+7GNNVw==",
       "license": "MIT",
       "engines": {
         "node": ">=20.18.1"

package.json

@@ -1,6 +1,6 @@
 {
   "name": "AniKotoAPI",
-  "version": "2.1.0",
+  "version": "2.4.1",
   "description": "A restful API to provide all information about anime from anikototv.to",
   "main": "./server.js",
   "scripts": {
@@ -14,7 +14,6 @@
     "axios": "^1.8.0",
     "cheerio": "^1.0.0-rc.12",
     "compression": "^1.8.1",
-    "cors": "^2.8.5",
     "dotenv": "^16.4.0",
     "express": "^4.21.0"
   },
@@ -25,5 +24,8 @@
   "repository": {
     "type": "git",
     "url": "https://github.com/Shineii86/AniKotoAPI.git"
+  },
+  "overrides": {
+    "undici": "7.29.0"
   }
 }

public/index.html

@@ -3,30 +3,31 @@
 <head>
   <meta charset="UTF-8" />
   <meta name="viewport" content="width=device-width, initial-scale=1.0" />
-  <title>AniKotoAPI — Free Anime Data API</title>
+  <meta name="google-site-verification" content="YOUR_VERIFICATION_CODE" />
-  <meta property="og:title" content="AniKotoAPI — Free Anime Data API" />
+  <title>AniKotoAPI — Free Anime REST API | 38 Endpoints</title>
+  <meta property="og:title" content="AniKotoAPI — Free Anime REST API | 38 Endpoints" />
   <meta property="og:type" content="website" />
   <meta property="og:url" content="https://anikototvapi.vercel.app" />
   <meta property="og:image" content="https://anikototvapi.vercel.app/share.png" />
-  <meta property="og:description" content="Free REST API for anime data. Browse, search, stream episodes. 33+ endpoints, no API key required." />
+  <meta property="og:description" content="Free anime REST API with 38 endpoints. Search, filter, stream episodes, get rankings, and more. No API key required. Built with Node.js, Express, and Cheerio." />
   <meta property="og:site_name" content="AniKotoAPI" />
   <meta property="og:locale" content="en_US" />
   <meta property="og:image:secure_url" content="https://anikototvapi.vercel.app/share.png" />
   <meta property="og:image:type" content="image/jpeg" />
   <meta property="og:image:width" content="1200" />
   <meta property="og:image:height" content="601" />
-  <meta property="og:image:alt" content="AniKotoAPI - Free Anime Data REST API" />
+  <meta property="og:image:alt" content="AniKotoAPI - Free Anime REST API with 38 endpoints" />
   <meta name="twitter:card" content="summary_large_image" />
   <meta name="twitter:site" content="@Shineii86" />
   <meta name="twitter:creator" content="@Shineii86" />
-  <meta name="twitter:title" content="AniKotoAPI — Free Anime Data API" />
+  <meta name="twitter:title" content="AniKotoAPI — Free Anime REST API | 38 Endpoints" />
-  <meta name="twitter:description" content="Free REST API for anime data. Browse, search, stream episodes. 33+ endpoints, no API key required." />
+  <meta name="twitter:description" content="Free anime REST API with 38 endpoints. Search, filter, stream episodes, get rankings, and more. No API key required." />
   <meta name="twitter:image" content="https://anikototvapi.vercel.app/share.png" />
-  <meta name="twitter:image:alt" content="AniKotoAPI - Free Anime Data REST API" />
+  <meta name="twitter:image:alt" content="AniKotoAPI - Free Anime REST API with 38 endpoints" />
   <meta name="twitter:domain" content="anikototvapi.vercel.app" />
-  <meta name="description" content="Free REST API for anime data. Browse, search, stream episodes. 33+ endpoints, no API key required. Built with Node.js, Express, Cheerio." />
+  <meta name="description" content="Free anime REST API with 38 endpoints. Search, filter, stream episodes with M3U8 proxy, get top rankings, schedules, and more. No API key required. Open source Node.js + Express." />
   <meta name="author" content="Shinei Nouzen" />
-  <meta name="keywords" content="anime api, free api, rest api, anime data, streaming, episode servers, nodejs, express, anime database, anime search" />
+  <meta name="keywords" content="anime api, free anime api, rest api, anime data, anime streaming api, hls proxy, m3u8 proxy, anime episodes, anime search, anime database, nodejs api, express api, web scraping api, anikoto, anime list api, no api key" />
   <meta name="robots" content="index, follow" />
   <meta name="theme-color" content="#faf9f5" />
   <link rel="canonical" href="https://anikototvapi.vercel.app" />
@@ -233,18 +234,19 @@
     "@context": "https://schema.org",
     "@type": "WebAPI",
     "name": "AniKotoAPI",
-    "description": "Free REST API for anime data. Browse, search, stream episodes. 33+ endpoints, no API key required.",
+    "description": "Free anime REST API with 38 endpoints. Search, filter, stream episodes with M3U8 proxy, get rankings, schedules, and more. No API key required.",
     "url": "https://anikototvapi.vercel.app",
     "image": "https://anikototvapi.vercel.app/share.png",
     "documentation": "https://github.com/Shineii86/AniKotoAPI",
     "provider": {
-      "@type": "Organization",
+      "@type": "Person",
-      "name": "AniKotoAPI",
+      "name": "Shinei Nouzen",
-      "url": "https://github.com/Shineii86/AniKotoAPI"
+      "url": "https://github.com/Shineii86"
     },
     "category": "Anime Data API",
     "endpoint": "https://anikototvapi.vercel.app/api",
-    "programmingModel": "REST"
+    "programmingModel": "REST",
+    "license": "https://opensource.org/licenses/MIT"
   }
   </script>
 </head>
@@ -269,7 +271,7 @@
       <div>
         <div class="hero-badge"><span class="dot"></span> Free &middot; No API key &middot; Open source</div>
         <h1>The anime data API for your next project</h1>
-        <p class="hero-sub">Browse, search, and stream anime data from AniKoto. Real-time scraping with 33+ endpoints, in-memory caching, and zero configuration.</p>
+        <p class="hero-sub">Browse, search, and stream anime data from AniKoto. Real-time scraping with 38 endpoints, in-memory caching, and zero configuration.</p>
         <div class="hero-actions">
           <a href="#playground" class="btn btn-primary">
             <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><polygon points="5 3 19 12 5 21 5 3"/></svg>
@@ -309,7 +311,7 @@ fetch("https://anikototvapi.vercel.app/api")
     <section class="stats">
       <div class="container">
         <div class="stats-grid">
-          <div class="reveal"><div class="stat-value" data-count="33">0</div><div class="stat-label">API Endpoints</div></div>
+          <div class="reveal"><div class="stat-value" data-count="38">0</div><div class="stat-label">API Endpoints</div></div>
           <div class="reveal reveal-delay-1"><div class="stat-value" data-count="0">0</div><div class="stat-label">API Keys Required</div></div>
           <div class="reveal reveal-delay-2"><div class="stat-value" data-count="40">0</div><div class="stat-label">Anime Genres</div></div>
           <div class="reveal reveal-delay-3"><div class="stat-value">Live</div><div class="stat-label">Real-time Data</div></div>

public/manifest.json

@@ -1,15 +1,15 @@
 {
-  "name": "AniKotoAPI",
+  "name": "AniKotoAPI — Free Anime REST API",
   "short_name": "AniKotoAPI",
-  "description": "Free REST API for anime data. Browse, search, stream episodes. 30+ endpoints, no API key required.",
+  "description": "Free anime REST API with 38 endpoints. Search, filter, stream episodes, get rankings. No API key required.",
   "start_url": "/",
   "display": "standalone",
   "id": "/",
   "scope": "/",
   "lang": "en",
   "orientation": "any",
-  "background_color": "#0A0A12",
+  "background_color": "#faf9f5",
-  "theme_color": "#A855F7",
+  "theme_color": "#faf9f5",
   "icons": [
     {
       "src": "/favicon-origin.png",
@@ -24,5 +24,5 @@
       "purpose": "any"
     }
   ],
-  "categories": ["developer", "entertainment"]
+  "categories": ["developer", "entertainment", "utilities"]
 }

public/robots.txt

@@ -2,5 +2,7 @@
 User-agent: *
 Allow: /
 Disallow: /api
+Disallow: /privacy
+Disallow: /tos
 
 Sitemap: https://anikototvapi.vercel.app/sitemap.xml

public/sitemap.xml

@@ -2,26 +2,14 @@
 <urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
   <url>
     <loc>https://anikototvapi.vercel.app/</loc>
-    <lastmod>2026-07-04</lastmod>
+    <lastmod>2026-07-28</lastmod>
     <changefreq>weekly</changefreq>
     <priority>1.0</priority>
   </url>
   <url>
-    <loc>https://anikototvapi.vercel.app/api</loc>
+    <loc>https://github.com/Shineii86/AniKotoAPI</loc>
-    <lastmod>2026-07-04</lastmod>
+    <lastmod>2026-07-28</lastmod>
-    <changefreq>daily</changefreq>
+    <changefreq>weekly</changefreq>
     <priority>0.9</priority>
   </url>
-  <url>
-    <loc>https://anikototvapi.vercel.app/privacy</loc>
-    <lastmod>2026-07-04</lastmod>
-    <changefreq>monthly</changefreq>
-    <priority>0.3</priority>
-  </url>
-  <url>
-    <loc>https://anikototvapi.vercel.app/tos</loc>
-    <lastmod>2026-07-04</lastmod>
-    <changefreq>monthly</changefreq>
-    <priority>0.3</priority>
-  </url>
 </urlset>

server.js

@@ -16,20 +16,23 @@
  * ======= • ======= • ======= • ======= • =======• =======
  */
 
-import dotenv from "dotenv";
+// WARNING: This import must stay first. Static imports are evaluated before the
+// module body runs, so a dotenv.config() call down there fires only after every
+// helper has already been evaluated — and helpers that read process.env at their
+// top level (mirror, cache, proxy, streamProxy) would silently keep their
+// defaults. Importing dotenv/config runs config() as an import side effect, so
+// .env is populated before any of those modules load.
+import "dotenv/config";
 import express from "express";
-import cors from "cors";
 import compression from "compression";
 import path from "path";
 import fs from "fs";
+import crypto from "crypto";
 import { fileURLToPath } from "url";
 import { dirname } from "path";
 import { createApiRoutes } from "./src/routes/apiRoutes.js";
-import { getCacheStats } from "./src/helper/cache.helper.js";
 import { addCreatorInfo } from "./src/middleware/creatorInfo.js";
 
-dotenv.config();
-
 // ══════════════════════════════════════════════════════════════
 // SERVER CONFIGURATION
 // ══════════════════════════════════════════════════════════════
@@ -39,7 +42,6 @@ const PORT = process.env.PORT || 4444;
 const __filename = fileURLToPath(import.meta.url);
 const __dirname = dirname(__filename);
 const publicDir = path.join(process.cwd(), "public");
-const has404File = fs.existsSync(path.join(publicDir, "404.html"));
 const allowedOrigins = process.env.ALLOWED_ORIGINS?.split(",");
 
 // ---- FEATURE: Response compression ----
@@ -52,6 +54,21 @@ app.use(compression({
   threshold: 1024
 }));
 
+// ---- FEATURE: Request body size limits ----
+app.use(express.json({ limit: "10kb" }));
+app.use(express.urlencoded({ extended: false, limit: "10kb" }));
+
+// ══════════════════════════════════════════════════════════════
+// REQUEST ID TRACKING
+// ══════════════════════════════════════════════════════════════
+
+// ---- FEATURE: Unique request ID for debugging ----
+app.use((req, res, next) => {
+  req.id = crypto.randomUUID();
+  res.setHeader("X-Request-Id", req.id);
+  next();
+});
+
 // ══════════════════════════════════════════════════════════════
 // CORS MIDDLEWARE
 // ══════════════════════════════════════════════════════════════
@@ -62,8 +79,8 @@ app.use((req, res, next) => {
   if (!allowedOrigins || allowedOrigins.includes("*") || (origin && allowedOrigins.includes(origin))) {
     res.setHeader("Access-Control-Allow-Origin", origin || "*");
   }
-  res.setHeader("Access-Control-Allow-Methods", "GET");
+  res.setHeader("Access-Control-Allow-Methods", "GET, POST, OPTIONS");
-  res.setHeader("Access-Control-Allow-Headers", "Content-Type");
+  res.setHeader("Access-Control-Allow-Headers", "Content-Type, X-Requested-With");
   if (req.method === "OPTIONS") {
     return res.status(204).end();
   }
@@ -77,6 +94,9 @@ app.use((req, res, next) => {
   res.setHeader("X-XSS-Protection", "1; mode=block");
   res.setHeader("Referrer-Policy", "strict-origin-when-cross-origin");
   res.setHeader("Permissions-Policy", "camera=(), microphone=(), geolocation=()");
+  res.setHeader("Content-Security-Policy", "default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data:; connect-src 'self'");
+  res.setHeader("Strict-Transport-Security", "max-age=31536000; includeSubDomains");
+  res.setHeader("X-Permitted-Cross-Domain-Policies", "none");
   next();
 });
 
@@ -135,6 +155,20 @@ const requestCounts = new Map();
 const RATE_LIMIT = parseInt(process.env.RATE_LIMIT) || 100;
 const RATE_WINDOW = parseInt(process.env.RATE_WINDOW) || 60000;
 
+// ---- FEATURE: Rate limiter cleanup interval (every 5 minutes) ----
+const RATE_CLEANUP_INTERVAL = 300000;
+setInterval(() => {
+  const now = Date.now();
+  for (const [ip, timestamps] of requestCounts.entries()) {
+    const validTimestamps = timestamps.filter(t => now - t < RATE_WINDOW);
+    if (validTimestamps.length === 0) {
+      requestCounts.delete(ip);
+    } else {
+      requestCounts.set(ip, validTimestamps);
+    }
+  }
+}, RATE_CLEANUP_INTERVAL);
+
 app.use((req, res, next) => {
   const ip = req.ip || req.connection.remoteAddress;
   const now = Date.now();
@@ -156,32 +190,29 @@ app.use((req, res, next) => {
   next();
 });
 
-// ---- FEATURE: Cache stats endpoint ----
-app.get("/api/cache/stats", (req, res) => {
-  res.json({ success: true, results: getCacheStats() });
-});
-
 // ---- FEATURE: Creator info middleware (injects attribution into all responses) ----
 app.use(addCreatorInfo);
 
+// ---- FEATURE: Request timeout middleware (30 seconds) ----
+app.use((req, res, next) => {
+  const timeout = parseInt(process.env.REQUEST_TIMEOUT) || 30000;
+  req.setTimeout(timeout, () => {
+    if (!res.headersSent) {
+      res.status(408).json({ success: false, message: "Request timeout" });
+    }
+  });
+  next();
+});
+
 createApiRoutes(app, jsonResponse, jsonError);
 
 // ══════════════════════════════════════════════════════════════
 // 404 HANDLER
 // ══════════════════════════════════════════════════════════════
 
-// ---- FEATURE: Request timeout middleware (30 seconds) ----
-app.use((req, res, next) => {
-  const timeout = parseInt(process.env.REQUEST_TIMEOUT) || 30000;
-  req.setTimeout(timeout, () => {
-    res.status(408).json({ success: false, message: "Request timeout" });
-  });
-  next();
-});
-
 // ---- FEATURE: Global error handler ----
 app.use((err, req, res, next) => {
-  console.error(`[ERROR] ${err.message}`, err.stack);
+  console.error(`[ERROR] ${req.id} ${err.message}`, err.stack);
   if (err.type === 'entity.too.large') {
     return res.status(413).json({ success: false, message: "Request entity too large" });
   }
@@ -201,10 +232,18 @@ app.use((req, res) => {
       success: false,
       message: "Endpoint not found",
       availableEndpoints: [
-        "/", "/search", "/info", "/episodes", "/servers", "/stream",
+        "/", "/search", "/search/suggest", "/info", "/watch",
-        "/spotlight", "/trending", "/top-ten", "/random", "/most-popular",
+        "/episodes/:id", "/episodes-ajax/:id", "/stream", "/servers",
-        "/new-release", "/schedule", "/genre/:genre", "/type/:type",
+        "/mapper-servers", "/download", "/stream/resolve",
-        "/status/:status", "/health", "/stats", "/openapi"
+        "/stream/qualities", "/stream/proxy", "/stream/ts-proxy",
+        "/spotlight", "/trending", "/top-ten", "/suggestions",
+        "/random", "/most-popular", "/upcoming", "/top-rankings",
+        "/recently-updated", "/completed", "/new-release",
+        "/newly-added", "/latest-updated", "/trending-sidebar",
+        "/seasons/:id", "/watch-order/:id", "/az-list/:letter",
+        "/filter", "/genre/:genre", "/type/:type", "/status/:status",
+        "/schedule", "/health", "/stats", "/cache/stats",
+        "/mirrors", "/openapi"
       ]
     });
   }
@@ -214,8 +253,37 @@ app.use((req, res) => {
 // SERVER START
 // ══════════════════════════════════════════════════════════════
 
-app.listen(PORT, () => {
+const server = app.listen(PORT, () => {
   console.info(`AniKotoAPI listening at ${PORT}`);
 });
 
-// ══════════════════════════════════════════════════════════════ END: server.js
+// ══════════════════════════════════════════════════════════════
+// GRACEFUL SHUTDOWN
+// ══════════════════════════════════════════════════════════════
+
+// ---- FEATURE: Graceful shutdown handling ----
+const gracefulShutdown = (signal) => {
+  console.info(`\n[SHUTDOWN] Received ${signal}. Starting graceful shutdown...`);
+  server.close(() => {
+    console.info("[SHUTDOWN] Server closed. Goodbye.");
+    process.exit(0);
+  });
+  setTimeout(() => {
+    console.error("[SHUTDOWN] Forced shutdown after timeout.");
+    process.exit(1);
+  }, 10000);
+};
+
+process.on("SIGTERM", () => gracefulShutdown("SIGTERM"));
+process.on("SIGINT", () => gracefulShutdown("SIGINT"));
+
+process.on("unhandledRejection", (reason, promise) => {
+  console.error("[UNHANDLED] Unhandled Rejection:", reason);
+});
+
+process.on("uncaughtException", (error) => {
+  console.error("[UNCAUGHT] Uncaught Exception:", error);
+  gracefulShutdown("uncaughtException");
+});
+
+// ══════════════════════════════════════════════════════════════ END: server.js

src/configs/ids.config.js

@@ -212,5 +212,90 @@ const SORT_IDS = {
   "number_of_episodes": "7"
 };
 
-export { GENRE_IDS, TYPE_IDS, STATUS_IDS, RATING_IDS, SORT_IDS };
+// ══════════════════════════════════════════════════════════════
+// SOURCE TYPE ID MAPPING
+// ══════════════════════════════════════════════════════════════
+
+// ---- FEATURE: Source type slug to numeric ID mapping ----
+/**
+ * Maps anime source type slugs to their corresponding numeric IDs.
+ * Used to filter anime by their original source material.
+ *
+ * @type {Object}
+ * @property {string} manga - ID for manga source
+ * @property {string} light-novel - ID for light novel source
+ * @property {string} original - ID for original work
+ * @property {string} visual-novel - ID for visual novel source
+ * @property {string} game - ID for game source
+ * @property {string} 4-koma-manga - ID for 4-koma manga source
+ *
+ * @example
+ *   // Get source ID for filtering
+ *   SOURCE_IDS["manga"] // "6"
+ *   SOURCE_IDS["original"] // "10"
+ */
+const SOURCE_IDS = {
+  "4-koma-manga": "1",
+  "book": "2",
+  "card-game": "3",
+  "game": "4",
+  "light-novel": "5",
+  "manga": "6",
+  "mixed-media": "7",
+  "music": "8",
+  "novel": "9",
+  "original": "10",
+  "other": "11",
+  "picture-book": "12",
+  "radio": "13",
+  "unknown": "14",
+  "video-game": "15",
+  "visual-novel": "16",
+  "web-manga": "17",
+  "web-novel": "18"
+};
+
+// ══════════════════════════════════════════════════════════════
+// SEASON ID MAPPING
+// ══════════════════════════════════════════════════════════════
+
+// ---- FEATURE: Season slug to ID mapping ----
+/**
+ * Maps anime season slugs to their corresponding IDs.
+ * Used to filter anime by their broadcast season.
+ *
+ * @type {Object}
+ * @property {string} spring - ID for spring season
+ * @property {string} summer - ID for summer season
+ * @property {string} fall - ID for fall season
+ * @property {string} winter - ID for winter season
+ *
+ * @example
+ *   // Get season ID for filtering
+ *   SEASON_IDS["spring"] // "1"
+ */
+const SEASON_IDS = {
+  "spring": "1",
+  "summer": "2",
+  "fall": "3",
+  "winter": "4"
+};
+
+// ══════════════════════════════════════════════════════════════
+// TV-SPECIFIC TYPE IDS
+// ══════════════════════════════════════════════════════════════
+
+// ---- FEATURE: Extended type slug to numeric ID mapping ----
+/**
+ * Extended type mappings including TV-specific formats.
+ *
+ * @type {Object}
+ */
+const EXTENDED_TYPE_IDS = {
+  ...TYPE_IDS,
+  "tv-short": "7",
+  "tv-special": "8"
+};
+
+export { GENRE_IDS, TYPE_IDS, STATUS_IDS, RATING_IDS, SORT_IDS, SOURCE_IDS, SEASON_IDS, EXTENDED_TYPE_IDS };
 // ══════════════════════════════════════════════════════════════ END: ids.config.js

src/controllers/animeInfo.controller.js

@@ -41,16 +41,18 @@ import { getCache, setCache, TTL } from "../helper/cache.helper.js";
  */
 const getAnimeInfo = async (req, res, next) => {
   try {
-    const { id } = req.query;
+    const { id, slug } = req.query;
-    if (!id) {
+    // NOTE: Accept both ?id= and ?slug= for backwards compatibility
-      return res.status(400).json({ success: false, message: "Anime slug is required" });
+    const animeSlug = id || slug;
+    if (!animeSlug) {
+      return res.status(400).json({ success: false, message: "Anime slug is required (?id= or ?slug=)" });
     }
-    const cacheKey = `anime_${id}`;
+    const cacheKey = `anime_${animeSlug}`;
     const cached = getCache(cacheKey);
     if (cached) {
       return res.json({ success: true, results: cached });
     }
-    const data = await extractAnimeInfo(id);
+    const data = await extractAnimeInfo(animeSlug);
     setCache(cacheKey, data, TTL.info);
     res.json({ success: true, results: data });
   } catch (error) {

src/controllers/completedAnime.controller.js

@@ -0,0 +1,56 @@
+/*
+ * ======= • ======= • ======= • ======= • =======• =======
+ * AniKotoAPI — completedAnime.controller.js
+ * Repository: https://github.com/Shineii86/AniKotoAPI
+ *
+ * @description
+ *   Controller for completed anime section. Returns list of anime
+ *   that have finished airing from the homepage.
+ *
+ * @exports
+ *   getCompletedAnime - Express route handler for GET /api/completed
+ *
+ * @author  Shinei Nouzen
+ * @license MIT
+ * ======= • ======= • ======= • ======= • =======• =======
+ */
+
+import { extractCompletedAnime } from "../extractors/completedAnime.extractor.js";
+import { getCache, setCache, TTL } from "../helper/cache.helper.js";
+
+// ══════════════════════════════════════════════════════════════
+// CONTROLLER: COMPLETED ANIME
+// ══════════════════════════════════════════════════════════════
+
+// ---- FEATURE: Completed anime endpoint ----
+/**
+ * Handles GET /api/completed requests. Returns list of anime
+ * that have finished airing from the homepage section.
+ *
+ * @param {object} req - Express request object
+ * @param {object} res - Express response object
+ * @param {Function} next - Express next middleware function
+ * @returns {void} Sends JSON response with completed anime list
+ *
+ * @example
+ *   GET /api/completed
+ *   Response: { success: true, results: [...], ... }
+ */
+const getCompletedAnime = async (req, res, next) => {
+  try {
+    const cacheKey = "completed";
+    const cached = getCache(cacheKey);
+    if (cached) {
+      return res.json({ success: true, results: cached });
+    }
+    const data = await extractCompletedAnime();
+    setCache(cacheKey, data, TTL.default);
+    res.json({ success: true, results: data });
+  } catch (error) {
+    next(error);
+  }
+};
+
+export { getCompletedAnime };
+
+// ══════════════════════════════════════════════════════════════ END: completedAnime.controller.js

src/controllers/download.controller.js

@@ -18,6 +18,11 @@
 import { extractDownloadLinks } from "../extractors/download.extractor.js";
 import { getCache, setCache, TTL } from "../helper/cache.helper.js";
 
+// ══════════════════════════════════════════════════════════════
+// DOWNLOAD LINKS HANDLER
+// ══════════════════════════════════════════════════════════════
+
+// ---- FEATURE: Download Links ----
 /**
  * Handles GET /api/download requests. Returns download links
  * for the specified anime episode.
@@ -58,3 +63,4 @@ const getDownloadLinks = async (req, res, next) => {
 };
 
 export { getDownloadLinks };
+// ══════════════════════════════════════════════════════════════ END: download.controller.js

src/controllers/newRelease.controller.js

@@ -97,6 +97,7 @@ const getNewlyAdded = async (req, res, next) => {
 // CONTROLLER: LATEST UPDATED
 // ══════════════════════════════════════════════════════════════
 
+// ---- FEATURE: Latest Updated Endpoint ----
 /**
  * Handles GET /api/latest-updated requests. Returns paginated list
  * of recently updated anime sorted by last update time.

src/controllers/recentlyUpdatedTabs.controller.js

@@ -0,0 +1,58 @@
+/*
+ * ======= • ======= • ======= • ======= • =======• =======
+ * AniKotoAPI — recentlyUpdatedTabs.controller.js
+ * Repository: https://github.com/Shineii86/AniKotoAPI
+ *
+ * @description
+ *   Controller for recently updated anime with tab filtering.
+ *   Returns recently updated anime filtered by all, dub, or sub.
+ *
+ * @exports
+ *   getRecentlyUpdatedTabs - Express route handler for GET /api/recently-updated
+ *
+ * @author  Shinei Nouzen
+ * @license MIT
+ * ======= • ======= • ======= • ======= • =======• =======
+ */
+
+import { extractRecentlyUpdatedTabs } from "../extractors/recentlyUpdatedTabs.extractor.js";
+import { getCache, setCache, TTL } from "../helper/cache.helper.js";
+
+// ══════════════════════════════════════════════════════════════
+// CONTROLLER: RECENTLY UPDATED TABS
+// ══════════════════════════════════════════════════════════════
+
+// ---- FEATURE: Recently updated with tab filtering endpoint ----
+/**
+ * Handles GET /api/recently-updated requests. Returns recently updated
+ * anime filtered by tab: all, dub, or sub.
+ *
+ * @param {object} req - Express request object
+ * @param {string} [req.query.tab="all"] - Tab filter: "all", "dub", or "sub"
+ * @param {object} res - Express response object
+ * @param {Function} next - Express next middleware function
+ * @returns {void} Sends JSON response with recently updated anime list
+ *
+ * @example
+ *   GET /api/recently-updated?tab=dub
+ *   Response: { success: true, results: [...], tab: "dub" }
+ */
+const getRecentlyUpdatedTabs = async (req, res, next) => {
+  try {
+    const { tab = "all" } = req.query;
+    const cacheKey = `recently_updated_${tab}`;
+    const cached = getCache(cacheKey);
+    if (cached) {
+      return res.json({ success: true, results: cached, tab });
+    }
+    const data = await extractRecentlyUpdatedTabs(tab);
+    setCache(cacheKey, data, TTL.default);
+    res.json({ success: true, results: data, tab });
+  } catch (error) {
+    next(error);
+  }
+};
+
+export { getRecentlyUpdatedTabs };
+
+// ══════════════════════════════════════════════════════════════ END: recentlyUpdatedTabs.controller.js

src/controllers/status.controller.js

@@ -57,9 +57,12 @@ const getStatus = async (req, res, next) => {
     }
     // Map short status names to full slugs
     const statusMap = {
+      ongoing: "currently-airing",
       airing: "currently-airing",
       completed: "finished-airing",
-      upcoming: "not-yet-aired"
+      finished: "finished-airing",
+      upcoming: "not-yet-aired",
+      "not-yet-aired": "not-yet-aired"
     };
     const mappedStatus = statusMap[status] || status;
     const data = await extractStatus(mappedStatus, page);

src/controllers/streamInfo.controller.js

@@ -44,7 +44,7 @@ import { getCache, setCache, TTL } from "../helper/cache.helper.js";
  */
 const getStreamInfo = async (req, res, next) => {
   try {
-    const { id } = req.query;
+    const { id, slug } = req.query;
     if (!id) {
       return res.status(400).json({ success: false, message: "Link ID is required" });
     }
@@ -53,8 +53,16 @@ const getStreamInfo = async (req, res, next) => {
     if (cached) {
       return res.json({ success: true, results: cached });
     }
-    const data = await extractStreamInfo(id);
+    let data;
-    setCache(cacheKey, data, TTL.default);
+    try {
+      data = await extractStreamInfo(id, slug);
+    } catch (upstreamError) {
+      return res.status(502).json({ success: false, message: `Upstream API error: ${upstreamError.message}` });
+    }
+    if (!data.url) {
+      return res.status(404).json({ success: false, message: "Stream URL not found for this link ID", results: data });
+    }
+    setCache(cacheKey, data, TTL.stream);
     res.json({ success: true, results: data });
   } catch (error) {
     next(error);
@@ -94,7 +102,10 @@ const getServerList = async (req, res, next) => {
       return res.json({ success: true, results: cached });
     }
     const data = await extractServerList(ids);
-    setCache(cacheKey, data, TTL.default);
+    if (!data || data.length === 0) {
+      return res.status(404).json({ success: false, message: "No servers found for the given episode IDs", results: [] });
+    }
+    setCache(cacheKey, data, TTL.servers);
     res.json({ success: true, results: data });
   } catch (error) {
     next(error);

src/controllers/streamResolver.controller.js

@@ -0,0 +1,129 @@
+/*
+ * ======= • ======= • ======= • ======= • =======• =======
+ * AniKotoAPI — streamResolver.controller.js
+ * Repository: https://github.com/Shineii86/AniKotoAPI
+ *
+ * @description
+ *   Controller for stream URL resolution and quality detection.
+ *   Resolves actual video URLs (m3u8/mp4) from embed player URLs
+ *   and parses available quality options.
+ *
+ * @exports
+ *   getResolvedStream - Express route handler for GET /api/stream/resolve
+ *   getStreamQualities - Express route handler for GET /api/stream/qualities
+ *
+ * @author  Shinei Nouzen
+ * @license MIT
+ * ======= • ======= • ======= • ======= • =======• =======
+ */
+
+import { resolveStreamUrl, parseM3u8Qualities } from "../extractors/streamResolver.extractor.js";
+import { extractStreamInfo } from "../extractors/streamInfo.extractor.js";
+import { getCache, setCache, TTL } from "../helper/cache.helper.js";
+
+// ══════════════════════════════════════════════════════════════
+// CONTROLLER: RESOLVE STREAM
+// ══════════════════════════════════════════════════════════════
+
+// ---- FEATURE: Resolve actual video stream URL from link ID ----
+/**
+ * Handles GET /api/stream/resolve requests. Resolves the actual
+ * video stream URL (m3u8/mp4) from a server link ID.
+ *
+ * @param {object} req - Express request object
+ * @param {string} req.query.id - Server link ID
+ * @param {string} req.query.slug - Anime slug (used to establish session)
+ * @param {object} res - Express response object
+ * @param {Function} next - Express next middleware function
+ * @returns {void} Sends JSON response with resolved stream URL
+ *
+ * @example
+ *   GET /api/stream/resolve?id=abc123&slug=one-piece-odmau
+ *   Response: { success: true, results: { url, qualities, type } }
+ *
+ * @throws {400} If 'id' query parameter is missing
+ */
+const getResolvedStream = async (req, res, next) => {
+  try {
+    const { id, slug } = req.query;
+    if (!id) {
+      return res.status(400).json({ success: false, message: "Link ID is required" });
+    }
+    const cacheKey = `resolved_${id}`;
+    const cached = getCache(cacheKey);
+    if (cached) {
+      return res.json({ success: true, results: cached });
+    }
+
+    // NOTE: First get the embed URL from the link ID (with session establishment)
+    const streamInfo = await extractStreamInfo(id, slug);
+    if (!streamInfo.url) {
+      return res.status(404).json({ success: false, message: "Stream URL not found for this link ID" });
+    }
+
+    // NOTE: Resolve the actual video URL from the embed page
+    const resolved = await resolveStreamUrl(streamInfo.url);
+    const result = {
+      linkId: id,
+      embedUrl: streamInfo.url,
+      ...resolved,
+      skipData: streamInfo.skipData || resolved.skipData,
+    };
+
+    setCache(cacheKey, result, TTL.stream);
+    res.json({ success: true, results: result });
+  } catch (error) {
+    next(error);
+  }
+};
+
+// ══════════════════════════════════════════════════════════════
+// CONTROLLER: STREAM QUALITIES
+// ══════════════════════════════════════════════════════════════
+
+// ---- FEATURE: Available quality options for a stream URL ----
+/**
+ * Handles GET /api/stream/qualities requests. Parses an M3U8
+ * playlist URL to return available quality options.
+ *
+ * @param {object} req - Express request object
+ * @param {string} req.query.url - M3U8 playlist URL
+ * @param {object} res - Express response object
+ * @param {Function} next - Express next middleware function
+ * @returns {void} Sends JSON response with quality options
+ *
+ * @example
+ *   GET /api/stream/qualities?url=https://example.com/master.m3u8
+ *   Response: { success: true, results: [{ label: "720p", url: "..." }] }
+ *
+ * @throws {400} If 'url' query parameter is missing
+ */
+const getStreamQualities = async (req, res, next) => {
+  try {
+    const { url } = req.query;
+    if (!url) {
+      return res.status(400).json({ success: false, message: "M3U8 URL is required" });
+    }
+    const cacheKey = `qualities_${url}`;
+    const cached = getCache(cacheKey);
+    if (cached) {
+      return res.json({ success: true, results: cached });
+    }
+
+    const qualities = await parseM3u8Qualities(url);
+    const result = {
+      url,
+      totalQualities: qualities.length,
+      qualities,
+    };
+
+    setCache(cacheKey, result, TTL.stream);
+    res.json({ success: true, results: result });
+  } catch (error) {
+    next(error);
+  }
+};
+
+export { getResolvedStream, getStreamQualities };
+
+// ══════════════════════════════════════════════════════════════ END: streamResolver.controller.js

src/controllers/topAnimeRankings.controller.js

@@ -0,0 +1,58 @@
+/*
+ * ======= • ======= • ======= • ======= • =======• =======
+ * AniKotoAPI — topAnimeRankings.controller.js
+ * Repository: https://github.com/Shineii86/AniKotoAPI
+ *
+ * @description
+ *   Controller for top anime rankings. Returns ranked anime list
+ *   with support for day, week, and month sort modes.
+ *
+ * @exports
+ *   getTopAnimeRankings - Express route handler for GET /api/top-rankings
+ *
+ * @author  Shinei Nouzen
+ * @license MIT
+ * ======= • ======= • ======= • ======= • =======• =======
+ */
+
+import { extractTopAnimeRankings } from "../extractors/topAnimeRankings.extractor.js";
+import { getCache, setCache, TTL } from "../helper/cache.helper.js";
+
+// ══════════════════════════════════════════════════════════════
+// CONTROLLER: TOP ANIME RANKINGS
+// ══════════════════════════════════════════════════════════════
+
+// ---- FEATURE: Top anime rankings endpoint ----
+/**
+ * Handles GET /api/top-rankings requests. Returns ranked anime list
+ * with support for top (all-time) and newest sort modes.
+ *
+ * @param {object} req - Express request object
+ * @param {string} [req.query.sort="day"] - Sort mode: "day", "week", or "month"
+ * @param {object} res - Express response object
+ * @param {Function} next - Express next middleware function
+ * @returns {void} Sends JSON response with ranked anime list
+ *
+ * @example
+ *   GET /api/top-rankings?sort=day
+ *   Response: { success: true, results: [{ rank: 1, title: "...", ... }] }
+ */
+const getTopAnimeRankings = async (req, res, next) => {
+  try {
+    const { sort = "day" } = req.query;
+    const cacheKey = `top_rankings_${sort}`;
+    const cached = getCache(cacheKey);
+    if (cached) {
+      return res.json({ success: true, results: cached });
+    }
+    const data = await extractTopAnimeRankings(sort);
+    setCache(cacheKey, data, TTL.trending);
+    res.json({ success: true, results: data });
+  } catch (error) {
+    next(error);
+  }
+};
+
+export { getTopAnimeRankings };
+
+// ══════════════════════════════════════════════════════════════ END: topAnimeRankings.controller.js

src/controllers/upcomingAnime.controller.js

@@ -0,0 +1,56 @@
+/*
+ * ======= • ======= • ======= • ======= • =======• =======
+ * AniKotoAPI — upcomingAnime.controller.js
+ * Repository: https://github.com/Shineii86/AniKotoAPI
+ *
+ * @description
+ *   Controller for upcoming anime section. Returns list of anime
+ *   scheduled for future release from the homepage.
+ *
+ * @exports
+ *   getUpcomingAnime - Express route handler for GET /api/upcoming
+ *
+ * @author  Shinei Nouzen
+ * @license MIT
+ * ======= • ======= • ======= • ======= • =======• =======
+ */
+
+import { extractUpcomingAnime } from "../extractors/upcomingAnime.extractor.js";
+import { getCache, setCache, TTL } from "../helper/cache.helper.js";
+
+// ══════════════════════════════════════════════════════════════
+// CONTROLLER: UPCOMING ANIME
+// ══════════════════════════════════════════════════════════════
+
+// ---- FEATURE: Upcoming anime endpoint ----
+/**
+ * Handles GET /api/upcoming requests. Returns list of anime
+ * scheduled for future release from the homepage section.
+ *
+ * @param {object} req - Express request object
+ * @param {object} res - Express response object
+ * @param {Function} next - Express next middleware function
+ * @returns {void} Sends JSON response with upcoming anime list
+ *
+ * @example
+ *   GET /api/upcoming
+ *   Response: { success: true, results: [...], ... }
+ */
+const getUpcomingAnime = async (req, res, next) => {
+  try {
+    const cacheKey = "upcoming";
+    const cached = getCache(cacheKey);
+    if (cached) {
+      return res.json({ success: true, results: cached });
+    }
+    const data = await extractUpcomingAnime();
+    setCache(cacheKey, data, TTL.default);
+    res.json({ success: true, results: data });
+  } catch (error) {
+    next(error);
+  }
+};
+
+export { getUpcomingAnime };
+
+// ══════════════════════════════════════════════════════════════ END: upcomingAnime.controller.js

src/extractors/animeInfo.extractor.js

@@ -17,9 +17,7 @@
  */
 
 import * as cheerio from "cheerio";
-import axios from "axios";
+import { fetchWithMirror } from "../helper/mirror.helper.js";
-import { headers } from "../configs/header.config.js";
-import { URLS } from "../configs/dataUrl.js";
 
 // ══════════════════════════════════════════════════════════════
 // ANIME INFO EXTRACTOR
@@ -41,64 +39,48 @@ import { URLS } from "../configs/dataUrl.js";
  */
 const extractAnimeInfo = async (slug) => {
   try {
-    const url = URLS.watch(slug);
+    const path = `/watch/${slug}`;
-    const { data } = await axios.get(url, { headers });
+    const { data } = await fetchWithMirror(path);
     const $ = cheerio.load(data);
 
-    // ---- FEATURE: Extract title and identification fields ----
-    // NOTE: itemprop='name' is used for schema.org microdata on the site
     const title = $("h1[itemprop='name'].title.d-title").text().trim() || "";
-    // NOTE: data-jp attribute holds the Japanese title variant
     const japaneseTitle = $("h1[itemprop='name'].title.d-title").attr("data-jp") || "";
     const altNames = $(".names.font-italic").text().trim() || "";
     const poster = $("img[itemprop='image']").attr("src") || "";
     const synopsis = $(".synopsis .content").text().trim() || "";
 
-    // ---- FEATURE: Extract rating and review metadata ----
-    // NOTE: Multiple rating selectors are checked — .score .value is the display score,
-    //       itemprop='ratingValue' is the microdata fallback
     const rating = $("#w-rating .score .value").text().trim() || "";
     const ratingValue = $("#w-rating span[itemprop='ratingValue']").text().trim() || "";
     const reviewCount = $("#w-rating span[itemprop='reviewCount']").text().trim() || "";
-    // NOTE: data-id on #watch-main is the internal anime ID used for AJAX calls
     const animeId = parseInt($("#watch-main").attr("data-id")) || 0;
 
-    // ---- FEATURE: Extract anime metadata (type, premiere, aired, status) ----
+    // NOTE: .bmeta .meta:first-child contains: type, premiered, aired, status, genres
-    // NOTE: .bmeta contains the structured metadata block — first child holds basic info
+    // NOTE: Positional selectors (nth-child) are fragile — match source site's exact HTML structure
     const type = $(".bmeta .meta:first-child > div:nth-child(1) span").text().trim() || "";
     const premiered = $(".bmeta .meta:first-child > div:nth-child(2) span").text().trim() || "";
     const aired = $(".bmeta .meta:first-child > div:nth-child(3) span").text().trim() || "";
     const status = $(".bmeta .meta:first-child > div:nth-child(4) span a").text().trim() || "";
 
-    // ---- FEATURE: Extract secondary metadata (MAL score, duration, episodes) ----
+    // NOTE: .bmeta .meta:nth-child(2) contains: MAL score, duration, episodes, studios, producers
-    // NOTE: Second .meta child holds MAL-linked and production metadata
     const malScore = $(".bmeta .meta:nth-child(2) > div:nth-child(1) span").text().trim() || "";
     const duration = $(".bmeta .meta:nth-child(2) > div:nth-child(2) span").text().trim() || "";
     const episodes = $(".bmeta .meta:nth-child(2) > div:nth-child(3) span").text().trim() || "";
 
-    // ---- FEATURE: Extract studios list ----
-    // NOTE: itemprop='director' links on studio spans — itemprop='name' inside holds the name
     const studios = [];
     $(".bmeta .meta:nth-child(2) > div:nth-child(4) span a[itemprop='director'] span[itemprop='name']").each((i, el) => {
       studios.push($(el).text().trim());
     });
 
-    // ---- FEATURE: Extract producers list ----
-    // NOTE: Same selector pattern as studios but from the 5th child (producers row)
     const producers = [];
     $(".bmeta .meta:nth-child(2) > div:nth-child(5) span a[itemprop='director'] span[itemprop='name']").each((i, el) => {
       producers.push($(el).text().trim());
     });
 
-    // ---- FEATURE: Extract genres ----
-    // NOTE: Genre links contain '/genre/' in their href — filters out non-genre links
     const genres = [];
     $(".bmeta .meta:first-child > div:nth-child(5) span a[href*='/genre/']").each((i, el) => {
       genres.push($(el).text().trim());
     });
 
-    // ---- FEATURE: Extract background artwork from player element ----
-    // NOTE: The #player div has a CSS background-image set via inline style
     const backgroundImage = $("#player").css("background-image")?.match(/url\(['"]?(.+?)['"]?\)/)?.[1] || "";
 
     return {

src/extractors/azList.extractor.js

@@ -15,12 +15,10 @@
  * ======= • ======= • ======= • ======= • =======• =======
  */
 
-import * as cheerio from "cheerio";
-import axios from "axios";
-import { headers } from "../configs/header.config.js";
 import { URLS } from "../configs/dataUrl.js";
 import { extractPages } from "../helper/extractPages.helper.js";
 import { countPages } from "../helper/countPages.helper.js";
+import { parseListItems } from "../helper/parseListItem.helper.js";
 
 // ══════════════════════════════════════════════════════════════
 // A-Z LIST EXTRACTION
@@ -54,40 +52,10 @@ import { countPages } from "../helper/countPages.helper.js";
  */
 const extractAzList = async (letter = "all", page = 1) => {
   try {
-    // NOTE: URLS.azList generates the correct endpoint for the given letter
     const url = URLS.azList(letter);
     const $ = await extractPages(url, page);
     const totalPages = countPages($);
-
+    const results = parseListItems($);
-    const results = [];
-
-    // NOTE: Multiple selectors to handle different page layouts
-    $(".film_list-wrap .flw-item, .film-detail, .item").each((i, el) => {
-      const slug = $(el).find("a").attr("href")?.split("/watch/").pop() || "";
-      const poster = $(el).find("img").attr("src") || "";
-      const title = $(el).find(".film-name a, .name.d-title").text().trim() || "";
-      const japaneseTitle = $(el).find(".name.d-title").attr("data-jp") || "";
-      const sub = parseInt($(el).find(".ep-status.sub span").text().trim()) || 0;
-      const dub = parseInt($(el).find(".ep-status.dub span").text().trim()) || 0;
-      const total = parseInt($(el).find(".ep-status.total span").text().trim()) || 0;
-      const type = $(el).find(".meta .inner .right, .fdi-item:nth-child(2)").text().trim() || "";
-      const rating = $(el).find(".rating, .fdi-item:nth-child(3)").text().trim() || "";
-
-      // NOTE: Only include items with valid slugs
-      if (slug) {
-        results.push({
-          slug,
-          poster,
-          title,
-          japaneseTitle,
-          sub,
-          dub,
-          total,
-          type,
-          rating
-        });
-      }
-    });
 
     return { totalPages, letter, data: results };
   } catch (error) {

src/extractors/category.extractor.js

@@ -18,6 +18,7 @@
 import { URLS } from "../configs/dataUrl.js";
 import { countPages } from "../helper/countPages.helper.js";
 import { extractPages } from "../helper/extractPages.helper.js";
+import { parseListItems } from "../helper/parseListItem.helper.js";
 
 // ══════════════════════════════════════════════════════════════
 // CATEGORY FILTER EXTRACTION
@@ -53,53 +54,30 @@ import { extractPages } from "../helper/extractPages.helper.js";
  */
 const extractCategory = async (category, page = 1) => {
   try {
-    // NOTE: Category type is determined by prefix in the category string
     let url;
     if (category.startsWith("genre/")) {
       url = URLS.genre(category.replace("genre/", ""));
     } else if (category.startsWith("type/")) {
       url = URLS.type(category.replace("type/", ""));
     } else if (category.startsWith("status/")) {
-      url = URLS.status(category.replace("status/", ""));
+      // NOTE: Map short status names to full slugs used by the site
+      const statusSlug = category.replace("status/", "");
+      const statusMap = {
+        ongoing: "currently-airing",
+        airing: "currently-airing",
+        completed: "finished-airing",
+        finished: "finished-airing",
+        upcoming: "not-yet-aired"
+      };
+      const mapped = statusMap[statusSlug] || statusSlug;
+      url = URLS.status(mapped);
     } else {
-      // NOTE: Fallback to direct URL construction for unknown category types
       url = `${URLS.home}/${category}`;
     }
 
     const $ = await extractPages(url, page);
     const totalPages = countPages($);
-
+    const results = parseListItems($, "#list-items > .item", { includeAnimeId: true });
-    const results = [];
-
-    // NOTE: The list items are contained in #list-items container
-    $("#list-items > .item").each((i, el) => {
-      const slug = $(el).find("a").attr("href")?.split("/watch/").pop() || "";
-      const poster = $(el).find(".ani.poster.tip > a > img").attr("src") || "";
-      const title = $(el).find(".info .b1 a.name.d-title").text().trim() || "";
-      const japaneseTitle = $(el).find(".info .b1 a.name.d-title").attr("data-jp") || "";
-      const animeId = $(el).find(".ani.poster.tip").attr("data-tip") || "";
-      const sub = parseInt($(el).find(".ep-status.sub span").text().trim()) || 0;
-      const dub = parseInt($(el).find(".ep-status.dub span").text().trim()) || 0;
-      const total = parseInt($(el).find(".ep-status.total span").text().trim()) || 0;
-      const type = $(el).find(".info .meta .m-item:nth-child(2) label").text().trim() || "";
-      const rating = $(el).find(".info .meta .m-item.rated span").text().trim() || "";
-
-      // NOTE: Only include items with valid slugs
-      if (slug) {
-        results.push({
-          slug,
-          animeId,
-          poster,
-          title,
-          japaneseTitle,
-          sub,
-          dub,
-          total,
-          type,
-          rating
-        });
-      }
-    });
 
     return { totalPages, data: results };
   } catch (error) {

src/extractors/completedAnime.extractor.js

@@ -0,0 +1,77 @@
+/*
+ * ======= • ======= • ======= • ======= • =======• =======
+ * AniKotoAPI — completedAnime.extractor.js
+ * Repository: https://github.com/Shineii86/AniKotoAPI
+ *
+ * @description
+ *   Extracts completed anime from the homepage section.
+ *   Scrapes the completed tab/section for finished anime series.
+ *
+ * @exports
+ *   extractCompletedAnime
+ *
+ * @author  Shinei Nouzen
+ * @license MIT
+ * ======= • ======= • ======= • ======= • =======• =======
+ */
+
+import * as cheerio from "cheerio";
+import { fetchWithMirror } from "../helper/mirror.helper.js";
+
+// ══════════════════════════════════════════════════════════════
+// COMPLETED ANIME EXTRACTION
+// ══════════════════════════════════════════════════════════════
+
+// ---- FEATURE: Extract completed anime from homepage section ----
+/**
+ * Fetches and parses the completed anime section from the homepage.
+ * Returns a list of anime that have finished airing.
+ *
+ * @returns {Promise<Array<Object>>} Array of completed anime objects
+ * @returns {string} return[].slug - URL slug for the anime
+ * @returns {string} return[].poster - Poster image URL
+ * @returns {string} return[].title - English title
+ * @returns {string} return[].japaneseTitle - Japanese title
+ * @returns {number} return[].sub - Subbed episode count
+ * @returns {number} return[].dub - Dubbed episode count
+ * @returns {number} return[].total - Total episode count
+ * @returns {string} return[].type - Anime type
+ *
+ * @example
+ *   const completed = await extractCompletedAnime();
+ *   console.log(completed.length); // number of completed anime
+ *   console.log(completed[0].title); // first completed anime title
+ */
+const extractCompletedAnime = async () => {
+  try {
+    const { data } = await fetchWithMirror("/home");
+    const $ = cheerio.load(data);
+
+    const results = [];
+
+    // NOTE: completed section is inside .top-tables with data-name="completed"
+    // Items are <a class="item"> inside .scaff.items
+    $("section.top-table[data-name='completed'] .scaff.items a.item, .top-table[data-name='completed'] a.item").each((i, el) => {
+      const slug = $(el).attr("href")?.split("/watch/").pop() || "";
+      if (!slug) return;
+
+      const poster = $(el).find("img").attr("src") || "";
+      const title = $(el).find(".name").text().trim() || "";
+      const japaneseTitle = $(el).find(".name").attr("data-jp") || "";
+      const sub = parseInt($(el).find(".ep-status.sub span").text().trim()) || 0;
+      const dub = parseInt($(el).find(".ep-status.dub span").text().trim()) || 0;
+      const total = parseInt($(el).find(".ep-status.total span").text().trim()) || 0;
+      const type = $(el).find(".meta .dot:last-child").text().trim() || "";
+
+      results.push({ slug, poster, title, japaneseTitle, sub, dub, total, type });
+    });
+
+    return results;
+  } catch (error) {
+    throw error;
+  }
+};
+
+export { extractCompletedAnime };
+
+// ══════════════════════════════════════════════════════════════ END: completedAnime.extractor.js

src/extractors/download.extractor.js

@@ -26,10 +26,17 @@ import axios from "axios";
 import { fetchWithMirror } from "../helper/mirror.helper.js";
 import { headers } from "../configs/header.config.js";
 
+// ══════════════════════════════════════════════════════════════
+// BASE64 DECODER
+// ══════════════════════════════════════════════════════════════
+
+// ---- FEATURE: Base64 Download Data Decoder ----
 /**
- * Decodes base64 download data from the website
+ * Decodes base64 download data from the website.
+ * The source site encodes download server URLs as base64 JSON.
+ *
  * @param {string} encoded - Base64 encoded string
- * @returns {Object} Decoded download data
+ * @returns {Object|null} Decoded download data, or null on failure
  */
 function decodeDownloadData(encoded) {
   try {
@@ -40,8 +47,15 @@ function decodeDownloadData(encoded) {
   }
 }
 
+// ══════════════════════════════════════════════════════════════
+// REDIRECT FOLLOWER
+// ══════════════════════════════════════════════════════════════
+
+// ---- FEATURE: Redirect Chain Resolver ----
 /**
- * Follows redirect chain to get the final URL
+ * Follows redirect chain to get the final URL.
+ * Uses axios maxRedirects to auto-follow up to 5 redirects.
+ *
  * @param {string} url - Starting URL
  * @returns {Promise<string>} Final URL after redirects
  */
@@ -52,9 +66,10 @@ async function followRedirects(url) {
       maxRedirects: 5,
       timeout: 10000
     });
+    // NOTE: response.request.res.responseUrl contains the final URL after all redirects
     return response.request?.res?.responseUrl || response.config?.url || url;
   } catch (error) {
-    // If we get a redirect error, try to extract the location
+    // NOTE: On redirect errors, axios throws — extract Location header manually
     if (error.response?.headers?.location) {
       return error.response.headers.location;
     }
@@ -62,6 +77,11 @@ async function followRedirects(url) {
   }
 }
 
+// ══════════════════════════════════════════════════════════════
+// DOWNLOAD LINKS EXTRACTOR
+// ══════════════════════════════════════════════════════════════
+
+// ---- FEATURE: Download Links Extraction ----
 /**
  * Fetches and parses download links for a specific episode.
  * Scrapes the watch page to extract download-data attributes
@@ -84,7 +104,7 @@ const extractDownloadLinks = async (slug, ep) => {
   try {
     const { data } = await fetchWithMirror(`/watch/${slug}/ep-${ep}`);
     
-    // Handle both string HTML and JSON responses
+    // NOTE: Response may be raw HTML string or JSON-wrapped HTML
     let html = "";
     if (typeof data === "string") {
       try {
@@ -105,8 +125,7 @@ const extractDownloadLinks = async (slug, ep) => {
 
     const downloads = [];
 
-    // Find all download buttons with download-data attribute
+    // NOTE: Multiple selectors to handle different HTML structures across mirrors
-    // Multiple selectors to handle different HTML structures
     const selectors = [
       "[download-data]",
       "li.download-icon",
@@ -124,13 +143,13 @@ const extractDownloadLinks = async (slug, ep) => {
         if (encoded && encoded.length > 10) {
           const decoded = decodeDownloadData(encoded);
           if (decoded) {
-            // Extract URLs from the decoded data
+            // NOTE: Decoded data is a nested object: { serverGroup: { serverName: url } }
             for (const [serverGroup, servers] of Object.entries(decoded)) {
               for (const [serverName, url] of Object.entries(servers)) {
-                // Avoid duplicates
+                // Avoid duplicates by URL
                 const exists = downloads.some(d => d.url === url);
                 if (!exists) {
-                  // Construct worker URL from nekostream.site URL
+                  // NOTE: nekostream.site URLs need Cloudflare Worker proxy
                   const workerUrl = url.includes("nekostream.site") 
                     ? url.replace("https://pahe.nekostream.site/", "https://proud-dew-d754.download992.workers.dev/")
                     : null;
@@ -155,7 +174,7 @@ const extractDownloadLinks = async (slug, ep) => {
       if (downloads.length > 0) break;
     }
 
-    // Try to follow redirects for each download URL
+    // NOTE: Follow redirects for each download URL to resolve kwik.cx links
     for (const download of downloads) {
       if (download.workerUrl) {
         try {
@@ -164,7 +183,7 @@ const extractDownloadLinks = async (slug, ep) => {
             download.kwikUrl = finalUrl;
           }
         } catch (error) {
-          // If redirect fails, construct a placeholder kwik URL
+          // NOTE: Redirect may fail due to Cloudflare — construct placeholder
           download.kwikUrl = "https://kwik.cx/f/[requires-browser]";
         }
       }
@@ -185,3 +204,4 @@ const extractDownloadLinks = async (slug, ep) => {
 };
 
 export { extractDownloadLinks };
+// ══════════════════════════════════════════════════════════════ END: download.extractor.js

src/extractors/episodeList.extractor.js

@@ -17,9 +17,7 @@
  */
 
 import * as cheerio from "cheerio";
-import axios from "axios";
+import { fetchWithMirror } from "../helper/mirror.helper.js";
-import { headers } from "../configs/header.config.js";
-import { URLS, BASE_URL } from "../configs/dataUrl.js";
 
 // ══════════════════════════════════════════════════════════════
 // EPISODE LIST EXTRACTOR
@@ -31,7 +29,7 @@ import { URLS, BASE_URL } from "../configs/dataUrl.js";
  * queries the AJAX episode list endpoint to get all episodes with their
  * metadata (ID, number, slug, title, active state, href).
  *
- * @param {string} slug - The anime slug identifier (e.g. "naruto-shippuden")
+ * @param {string} slugOrId - The anime slug or numeric ID (e.g. "naruto-shippuden" or "12345")
  * @returns {Promise<Object>} Object with animeId, slug, totalEpisodes, and episodes array
  *
  * @example
@@ -44,13 +42,11 @@ const extractEpisodeList = async (slugOrId) => {
     let animeId = 0;
     let resolvedSlug = slugOrId;
 
-    // NOTE: Accept either numeric anime ID or slug — if numeric, skip watch page fetch
     if (/^\d+$/.test(slugOrId)) {
       animeId = parseInt(slugOrId);
     } else {
-      // NOTE: Fetch the watch page to extract the internal anime ID from the slug
+      const path = `/watch/${slugOrId}`;
-      const infoUrl = URLS.watch(slugOrId);
+      const { data: infoData } = await fetchWithMirror(path);
-      const { data: infoData } = await axios.get(infoUrl, { headers });
       const $ = cheerio.load(infoData);
       animeId = parseInt($("#watch-main").attr("data-id")) || 0;
     }
@@ -60,21 +56,19 @@ const extractEpisodeList = async (slugOrId) => {
     }
 
     try {
-      // NOTE: AJAX endpoint requires X-Requested-With header to return HTML fragment
+      const ajaxPath = `/ajax/episode/list/${animeId}`;
-      const ajaxUrl = `${BASE_URL}/ajax/episode/list/${animeId}`;
+      const { data: ajaxRaw } = await fetchWithMirror(ajaxPath, {
-      const { data: ajaxRaw } = await axios.get(ajaxUrl, {
+        headers: { "X-Requested-With": "XMLHttpRequest" }
-        headers: {
-          ...headers,
-          "X-Requested-With": "XMLHttpRequest"
-        }
       });
 
-      // NOTE: AJAX response is JSON {status, result} where result is HTML
+      // NOTE: Parse JSON response first — fetchWithMirror returns raw text by default
-      const ajaxHtml = typeof ajaxRaw === "string" ? ajaxRaw : (ajaxRaw?.result || "");
+      let ajaxParsed = ajaxRaw;
+      if (typeof ajaxRaw === "string") {
+        try { ajaxParsed = JSON.parse(ajaxRaw); } catch { ajaxParsed = {}; }
+      }
+      const ajaxHtml = ajaxParsed?.result || "";
       const $ep = cheerio.load(ajaxHtml);
 
-      // ---- FEATURE: Parse episode list from AJAX response HTML ----
-      // NOTE: Episode links have either data-num or data-ep-id attributes
       const episodes = [];
       $ep("a[data-num], a[data-ep-id], a[data-id]").each((i, el) => {
         const epId = $ep(el).attr("data-ep-id") || $ep(el).attr("data-id") || "";
@@ -83,9 +77,7 @@ const extractEpisodeList = async (slugOrId) => {
         const href = $ep(el).attr("href") || "";
         const epTitle = $ep(el).find(".ep-title, .ep-name").text().trim() || "";
         const isActive = $ep(el).hasClass("active") || false;
-        // NOTE: data-ids is the base64-encoded server ID string needed for /api/servers
+        const serverIds = ($ep(el).attr("data-ids") || "").replace(/^\\?["']|\\?["']$/g, "");
-        const serverIds = $ep(el).attr("data-ids") || "";
-        // NOTE: data-timestamp used for mapper API
         const timestamp = $ep(el).attr("data-timestamp") || "";
         const malId = $ep(el).attr("data-mal") || "";
 
@@ -109,7 +101,6 @@ const extractEpisodeList = async (slugOrId) => {
         episodes
       };
     } catch (ajaxError) {
-      // NOTE: Gracefully return empty list if AJAX call fails (e.g. network issue)
       return {
         animeId,
         slug: slugOrId,

src/extractors/episodeListAjax.extractor.js

@@ -17,7 +17,6 @@
  */
 
 import * as cheerio from "cheerio";
-import axios from "axios";
 import { headers } from "../configs/header.config.js";
 import { fetchWithMirror } from "../helper/mirror.helper.js";
 
@@ -56,7 +55,11 @@ const extractEpisodeListAjax = async (animeId, style = "", vrf = "") => {
     });
 
     // NOTE: Response is JSON {status, result} where result is HTML
-    const html = typeof raw === "string" ? raw : (raw?.result || "");
+    let parsed = raw;
+    if (typeof raw === "string") {
+      try { parsed = JSON.parse(raw); } catch { parsed = {}; }
+    }
+    const html = parsed?.result || "";
     const $ = cheerio.load(html);
 
     // NOTE: Extract filter options (Sub/Dub, episode ranges)
@@ -98,7 +101,7 @@ const extractEpisodeListAjax = async (animeId, style = "", vrf = "") => {
         timestamp: a.attr("data-timestamp") || "",
         has_sub: a.attr("data-sub") === "1",
         has_dub: a.attr("data-dub") === "1",
-        server_ids: a.attr("data-ids") || "",
+        server_ids: (a.attr("data-ids") || "").replace(/^\\?["']|\\?["']$/g, ""),
         active: a.hasClass("active") || false
       });
     });

src/extractors/filter.extractor.js

@@ -6,7 +6,7 @@
  * @description
  *   Provides advanced anime filtering on anikototv.to — supports filtering
  *   by genre, type, status, language, rating, sort order, season, year,
- *   and keyword with full pagination support.
+ *   source, episode range, and keyword with full pagination support.
  *
  * @exports
  *   extractFilter
@@ -16,9 +16,8 @@
  * ======= • ======= • ======= • ======= • =======• =======
  */
 
-import { headers } from "../configs/header.config.js";
 import { URLS } from "../configs/dataUrl.js";
-import { GENRE_IDS, TYPE_IDS, STATUS_IDS, RATING_IDS, SORT_IDS } from "../configs/ids.config.js";
+import { GENRE_IDS, TYPE_IDS, STATUS_IDS, RATING_IDS, SORT_IDS, SOURCE_IDS, SEASON_IDS } from "../configs/ids.config.js";
 import { countPages } from "../helper/countPages.helper.js";
 import { extractPages } from "../helper/extractPages.helper.js";
 
@@ -30,7 +29,7 @@ import { extractPages } from "../helper/extractPages.helper.js";
 /**
  * Builds a filter URL from the given parameters and fetches matching anime
  * from anikototv.to. Supports keyword, genre, type, status, language,
- * rating, sort, season, and year filters — all combinable.
+ * rating, sort, season, year, source, episode range, and exclude watchlist.
  *
  * @param {Object} params - Filter parameters object
  * @param {string} [params.keyword] - Search keyword to filter by name
@@ -39,9 +38,13 @@ import { extractPages } from "../helper/extractPages.helper.js";
  * @param {string} [params.status] - Comma-separated statuses (e.g. "airing,completed")
  * @param {string} [params.language] - Comma-separated languages (e.g. "sub,dub")
  * @param {string} [params.rating] - Comma-separated ratings (e.g. "pg-13,r")
- * @param {string} [params.sort] - Sort order key (e.g. "score", "name")
+ * @param {string} [params.sort] - Sort order key (e.g. "score", "name-az")
  * @param {string} [params.season] - Comma-separated seasons (e.g. "winter,spring")
  * @param {string} [params.year] - Comma-separated years (e.g. "2024,2025")
+ * @param {string} [params.source] - Comma-separated sources (e.g. "manga,light-novel")
+ * @param {number} [params.epMin] - Minimum episode count filter
+ * @param {number} [params.epMax] - Maximum episode count filter
+ * @param {boolean} [params.excludeWatchlist=false] - Exclude watchlisted anime
  * @param {number} [params.page=1] - Page number for pagination
  * @returns {Promise<Object>} Object with totalPages count and data array of results
  *
@@ -49,6 +52,17 @@ import { extractPages } from "../helper/extractPages.helper.js";
  *   const filtered = await extractFilter({ genre: "action", type: "tv", page: 1 });
  *   console.log(filtered.totalPages);
  *   console.log(filtered.data[0].title);
+ *
+ * @example
+ *   // Advanced filter with episode range
+ *   const filtered = await extractFilter({
+ *     genre: "comedy,slice-of-life",
+ *     type: "tv",
+ *     year: "2024",
+ *     epMin: 12,
+ *     epMax: 24,
+ *     sort: "score"
+ *   });
  */
 const extractFilter = async (params) => {
   try {
@@ -102,8 +116,8 @@ const extractFilter = async (params) => {
 
     // ---- FEATURE: Append season filter ----
     if (params.season) {
-      const seasons = params.season.split(",");
+      const seasons = params.season.split(",").map(s => SEASON_IDS[s.trim().toLowerCase()] || s.trim());
-      seasons.forEach(s => queryParams.append("season[]", s.trim()));
+      seasons.forEach(s => queryParams.append("season[]", s));
     }
 
     // ---- FEATURE: Append year filter ----
@@ -112,6 +126,28 @@ const extractFilter = async (params) => {
       years.forEach(y => queryParams.append("year[]", y.trim()));
     }
 
+    // ---- FEATURE: Append source filter ----
+    // NOTE: SOURCE_IDS maps source material types to numeric IDs
+    if (params.source) {
+      const sources = params.source.split(",").map(s => SOURCE_IDS[s.trim().toLowerCase()] || s.trim());
+      sources.forEach(s => queryParams.append("source[]", s));
+    }
+
+    // ---- FEATURE: Append episode range filter ----
+    // NOTE: epMin and epMax filter by total episode count range
+    if (params.epMin) {
+      queryParams.set("ep_min", params.epMin);
+    }
+    if (params.epMax) {
+      queryParams.set("ep_max", params.epMax);
+    }
+
+    // ---- FEATURE: Append exclude watchlist filter ----
+    // NOTE: Only works for logged-in users — ignores for guests
+    if (params.excludeWatchlist) {
+      queryParams.set("exclude_watchlist", "1");
+    }
+
     // NOTE: The filter URL is built by appending query params to the search base URL
     const filterUrl = `${URLS.search}?${queryParams.toString()}`;
     const $ = await extractPages(filterUrl, params.page || 1);

src/extractors/homeInfo.extractor.js

@@ -16,10 +16,6 @@
  */
 
 import * as cheerio from "cheerio";
-import axios from "axios";
-import { headers } from "../configs/header.config.js";
-import { URLS } from "../configs/dataUrl.js";
-import { getCache, setCache } from "../helper/cache.helper.js";
 import { fetchWithMirror } from "../helper/mirror.helper.js";
 
 // ══════════════════════════════════════════════════════════════
@@ -38,27 +34,20 @@ import { fetchWithMirror } from "../helper/mirror.helper.js";
  *   console.log(home.spotlights.length); // number of spotlight items
  */
 const extractHomeInfo = async () => {
-  const cached = getCache("home");
-  if (cached) return cached;
   try {
     const { data } = await fetchWithMirror("/home");
     const $ = cheerio.load(data);
 
-    // ---- FEATURE: Extract spotlight carousel items from #hotest section ----
-    // NOTE: Swiper slides contain the hero carousel on the homepage
     const spotlights = [];
+    // NOTE: #hotest .swiper-slide.item = spotlight carousel on homepage
     $("#hotest .swiper-slide.item").each((i, el) => {
-      // NOTE: The play button's href contains the /watch/{slug} path
       const slug = $(el).find("a.play").attr("href")?.split("/watch/").pop() || "";
-      // NOTE: Poster is set as inline CSS background-image on a div inside .image
       const poster = $(el).find(".image div").attr("style")?.match(/url\(['"]?(.+?)['"]?\)/)?.[1] || "";
       const title = $(el).find("h2.title.d-title").text().trim() || "";
-      // NOTE: data-jp attribute holds the Japanese/romaji title variant
       const japaneseTitle = $(el).find("h2.title.d-title").attr("data-jp") || "";
       const description = $(el).find(".desc").text().trim() || "";
       const rating = $(el).find("i.rating").text().trim() || "";
       const quality = $(el).find("i.quality").text().trim() || "";
-      // NOTE: sub/dub counts are extracted as integers, defaulting to 0
       const sub = parseInt($(el).find("i.sub").text().trim()) || 0;
       const dub = parseInt($(el).find("i.dub").text().trim()) || 0;
       const date = $(el).find("i.date").text().trim() || "";
@@ -79,15 +68,13 @@ const extractHomeInfo = async () => {
       }
     });
 
-    // ---- FEATURE: Extract trending/recently-updated anime list ----
-    // NOTE: Combines both .section-updated and #recent-update containers for coverage
     const trending = [];
+    // NOTE: Dual selector — .section-updated = new layout, #recent-update = old layout
     $(".section-updated .item, #recent-update .item").each((i, el) => {
       const slug = $(el).find("a.name.d-title").attr("href")?.split("/watch/").pop() || "";
       const poster = $(el).find(".poster img").attr("src") || "";
       const title = $(el).find("a.name.d-title").text().trim() || "";
       const japaneseTitle = $(el).find("a.name.d-title").attr("data-jp") || "";
-      // NOTE: Episode counts are in .ep-status spans — sub, dub, and total
       const sub = parseInt($(el).find(".ep-status.sub span").text().trim()) || 0;
       const dub = parseInt($(el).find(".ep-status.dub span").text().trim()) || 0;
       const total = parseInt($(el).find(".ep-status.total span").text().trim()) || 0;
@@ -107,8 +94,6 @@ const extractHomeInfo = async () => {
       }
     });
 
-    // ---- FEATURE: Extract top airing anime of the day ----
-    // NOTE: Only the 'day' tab content is scraped from #top-anime
     const topAiring = [];
     $("#top-anime .tab-content[data-name='day'] a.item").each((i, el) => {
       const slug = $(el).attr("href")?.split("/watch/").pop() || "";
@@ -123,8 +108,6 @@ const extractHomeInfo = async () => {
       }
     });
 
-    // ---- FEATURE: Extract genre filter list from navigation menu ----
-    // NOTE: Only links containing /genre/ in href are considered valid genre entries
     const genres = [];
     $("#menu ul.c4 li a").each((i, el) => {
       const genre = $(el).text().trim();

src/extractors/newRelease.extractor.js

@@ -10,19 +10,17 @@
  * @exports
  *   extractNewRelease
  *   extractNewlyAdded
+ *   extractLatestUpdated
  *
  * @author  Shinei Nouzen
  * @license MIT
  * ======= • ======= • ======= • ======= • =======• =======
  */
 
-import * as cheerio from "cheerio";
-import axios from "axios";
-import { headers } from "../configs/header.config.js";
 import { URLS } from "../configs/dataUrl.js";
 import { extractPages } from "../helper/extractPages.helper.js";
 import { countPages } from "../helper/countPages.helper.js";
-import { fetchWithMirror } from "../helper/mirror.helper.js";
+import { parseListItems } from "../helper/parseListItem.helper.js";
 
 // ══════════════════════════════════════════════════════════════
 // NEW RELEASE EXTRACTION
@@ -54,39 +52,9 @@ import { fetchWithMirror } from "../helper/mirror.helper.js";
  */
 const extractNewRelease = async (page = 1) => {
   try {
-    // NOTE: extractPages handles pagination and returns parsed Cheerio object
     const $ = await extractPages(URLS.newRelease, page);
     const totalPages = countPages($);
-
+    const results = parseListItems($);
-    const results = [];
-
-    // NOTE: Multiple selectors to handle different page layouts
-    $(".film_list-wrap .flw-item, .film-detail, .item").each((i, el) => {
-      const slug = $(el).find("a").attr("href")?.split("/watch/").pop() || "";
-      const poster = $(el).find("img").attr("src") || "";
-      const title = $(el).find(".film-name a, .name.d-title").text().trim() || "";
-      const japaneseTitle = $(el).find(".name.d-title").attr("data-jp") || "";
-      const sub = parseInt($(el).find(".ep-status.sub span").text().trim()) || 0;
-      const dub = parseInt($(el).find(".ep-status.dub span").text().trim()) || 0;
-      const total = parseInt($(el).find(".ep-status.total span").text().trim()) || 0;
-      const type = $(el).find(".meta .inner .right, .fdi-item:nth-child(2)").text().trim() || "";
-      const rating = $(el).find(".rating, .fdi-item:nth-child(3)").text().trim() || "";
-
-      // NOTE: Only include items with valid slugs
-      if (slug) {
-        results.push({
-          slug,
-          poster,
-          title,
-          japaneseTitle,
-          sub,
-          dub,
-          total,
-          type,
-          rating
-        });
-      }
-    });
 
     return { totalPages, data: results };
   } catch (error) {
@@ -123,37 +91,9 @@ const extractNewRelease = async (page = 1) => {
  */
 const extractNewlyAdded = async (page = 1) => {
   try {
-    // NOTE: The latestUpdated endpoint with sort=added returns recently added anime
     const $ = await extractPages(`${URLS.latestUpdated}?sort=added`, page);
     const totalPages = countPages($);
-
+    const results = parseListItems($);
-    const results = [];
-
-    // NOTE: Multiple selectors to handle different page layouts
-    $(".film_list-wrap .flw-item, .film-detail, .item").each((i, el) => {
-      const slug = $(el).find("a").attr("href")?.split("/watch/").pop() || "";
-      const poster = $(el).find("img").attr("src") || "";
-      const title = $(el).find(".film-name a, .name.d-title").text().trim() || "";
-      const japaneseTitle = $(el).find(".name.d-title").attr("data-jp") || "";
-      const sub = parseInt($(el).find(".ep-status.sub span").text().trim()) || 0;
-      const dub = parseInt($(el).find(".ep-status.dub span").text().trim()) || 0;
-      const total = parseInt($(el).find(".ep-status.total span").text().trim()) || 0;
-      const type = $(el).find(".meta .inner .right, .fdi-item:nth-child(2)").text().trim() || "";
-
-      // NOTE: Only include items with valid slugs
-      if (slug) {
-        results.push({
-          slug,
-          poster,
-          title,
-          japaneseTitle,
-          sub,
-          dub,
-          total,
-          type
-        });
-      }
-    });
 
     return { totalPages, data: results };
   } catch (error) {
@@ -165,6 +105,7 @@ const extractNewlyAdded = async (page = 1) => {
 // LATEST UPDATED EXTRACTION
 // ══════════════════════════════════════════════════════════════
 
+// ---- FEATURE: Latest Updated Extraction ----
 /**
  * Fetches and parses recently updated anime with pagination.
  * Uses the /latest-updated page which shows anime sorted by last update time.
@@ -181,36 +122,7 @@ const extractLatestUpdated = async (page = 1) => {
   try {
     const $ = await extractPages("/latest-updated", page);
     const totalPages = countPages($);
-
+    const results = parseListItems($, ".item");
-    const results = [];
-
-    $(".item").each((i, el) => {
-      const slug = $(el).find("a").attr("href")?.split("/watch/").pop() || "";
-      const poster = $(el).find("img").attr("src") || "";
-      const title = $(el).find(".film-name a, .name.d-title").text().trim() ||
-                    $(el).find("a.name").text().trim() || "";
-      const japaneseTitle = $(el).find(".name.d-title").attr("data-jp") ||
-                           $(el).find("a.name").attr("data-jp") || "";
-      const sub = parseInt($(el).find(".ep-status.sub span").text().trim()) || 0;
-      const dub = parseInt($(el).find(".ep-status.dub span").text().trim()) || 0;
-      const total = parseInt($(el).find(".ep-status.total span").text().trim()) || 0;
-      const type = $(el).find(".type, .fdi-item:nth-child(2)").text().trim() || "";
-      const rating = $(el).find(".rating, .fdi-item:nth-child(3)").text().trim() || "";
-
-      if (slug) {
-        results.push({
-          slug,
-          poster,
-          title,
-          japaneseTitle,
-          sub,
-          dub,
-          total,
-          type,
-          rating
-        });
-      }
-    });
 
     return { totalPages, data: results };
   } catch (error) {

src/extractors/popular.extractor.js

@@ -15,10 +15,10 @@
  * ======= • ======= • ======= • ======= • =======• =======
  */
 
-import { headers } from "../configs/header.config.js";
 import { URLS } from "../configs/dataUrl.js";
 import { countPages } from "../helper/countPages.helper.js";
 import { extractPages } from "../helper/extractPages.helper.js";
+import { parseListItems } from "../helper/parseListItem.helper.js";
 
 // ══════════════════════════════════════════════════════════════
 // POPULAR EXTRACTION
@@ -51,42 +51,9 @@ import { extractPages } from "../helper/extractPages.helper.js";
  */
 const extractPopular = async (page = 1) => {
   try {
-    // NOTE: extractPages handles pagination and returns parsed Cheerio object
     const $ = await extractPages(URLS.mostViewed, page);
     const totalPages = countPages($);
-
+    const results = parseListItems($, "#list-items > .item", { includeAnimeId: true });
-    const results = [];
-
-    // NOTE: The list items are contained in #list-items container
-    $("#list-items > .item").each((i, el) => {
-      const slug = $(el).find("a").attr("href")?.split("/watch/").pop() || "";
-      const poster = $(el).find(".ani.poster.tip > a > img").attr("src") || "";
-      const title = $(el).find(".info .b1 a.name.d-title").text().trim() || "";
-      const japaneseTitle = $(el).find(".info .b1 a.name.d-title").attr("data-jp") || "";
-      const animeId = $(el).find(".ani.poster.tip").attr("data-tip") || "";
-      const sub = parseInt($(el).find(".ep-status.sub span").text().trim()) || 0;
-      const dub = parseInt($(el).find(".ep-status.dub span").text().trim()) || 0;
-      const total = parseInt($(el).find(".ep-status.total span").text().trim()) || 0;
-      const type = $(el).find(".info .meta .m-item:nth-child(2) label").text().trim() || "";
-      const rating = $(el).find(".info .meta .m-item.rated span").text().trim() || "";
-
-      // NOTE: Only include items with valid slugs
-      if (slug) {
-        results.push({
-          slug,
-          animeId,
-          poster,
-          title,
-          japaneseTitle,
-          sub,
-          dub,
-          total,
-          type,
-          rating
-        });
-      }
-    });
-
     return { totalPages, data: results };
   } catch (error) {
     throw error;

src/extractors/random.extractor.js

@@ -20,6 +20,7 @@ import * as cheerio from "cheerio";
 import axios from "axios";
 import { headers } from "../configs/header.config.js";
 import { URLS } from "../configs/dataUrl.js";
+import { fetchWithMirror } from "../helper/mirror.helper.js";
 
 // ══════════════════════════════════════════════════════════════
 // RANDOM ANIME EXTRACTOR
@@ -40,34 +41,29 @@ import { URLS } from "../configs/dataUrl.js";
  */
 const extractRandom = async () => {
   try {
-    // NOTE: maxRedirects=5 ensures we follow the random redirect chain
-    // NOTE: validateStatus allows any 2xx/3xx response without throwing
     const { data, request } = await axios.get(URLS.random, {
       headers,
+      // NOTE: maxRedirects=5 allows following the redirect chain from /random to the final anime page
       maxRedirects: 5,
+      // NOTE: validateStatus < 400 prevents axios from throwing on redirects (3xx)
       validateStatus: (status) => status < 400
     });
 
-    // NOTE: responseURL on the request object gives us the final resolved URL after redirects
+    // NOTE: request.responseURL contains the final URL after all redirects
     const finalUrl = request?.responseURL || URLS.random;
-    // NOTE: The slug is extracted from the /watch/{slug} path in the final URL
     const slug = finalUrl.split("/watch/").pop() || "";
 
     const $ = cheerio.load(data);
 
-    // ---- FEATURE: Extract anime title and identification ----
     const title = $("h1[itemprop='name'].title.d-title").text().trim() || "";
     const japaneseTitle = $("h1[itemprop='name'].title.d-title").attr("data-jp") || "";
     const poster = $("img[itemprop='image']").attr("src") || "";
 
-    // ---- FEATURE: Extract type, synopsis, rating, and anime ID ----
     const type = $(".bmeta .meta:first-child > div:nth-child(1) span").text().trim() || "";
     const synopsis = $(".synopsis .content").text().trim() || "";
     const rating = $("#w-rating .score .value").text().trim() || "";
     const animeId = parseInt($("#watch-main").attr("data-id")) || 0;
 
-    // ---- FEATURE: Extract genres ----
-    // NOTE: Genre links are identified by '/genre/' in their href attribute
     const genres = [];
     $(".bmeta .meta:first-child > div:nth-child(5) span a[href*='/genre/']").each((i, el) => {
       genres.push($(el).text().trim());

src/extractors/recentlyUpdatedTabs.extractor.js

@@ -0,0 +1,94 @@
+/*
+ * ======= • ======= • ======= • ======= • =======• =======
+ * AniKotoAPI — recentlyUpdatedTabs.extractor.js
+ * Repository: https://github.com/Shineii86/AniKotoAPI
+ *
+ * @description
+ *   Extracts recently updated anime from homepage with tab filtering.
+ *   Supports three tabs: all, dub, and sub for different update types.
+ *
+ * @exports
+ *   extractRecentlyUpdatedTabs
+ *
+ * @author  Shinei Nouzen
+ * @license MIT
+ * ======= • ======= • ======= • ======= • =======• =======
+ */
+
+import * as cheerio from "cheerio";
+import { fetchWithMirror } from "../helper/mirror.helper.js";
+
+// ══════════════════════════════════════════════════════════════
+// RECENTLY UPDATED TABS EXTRACTION
+// ══════════════════════════════════════════════════════════════
+
+// ---- FEATURE: Extract recently updated anime with tab filtering ----
+/**
+ * Fetches and parses the recently updated anime section from the homepage.
+ * Supports filtering by update type: all, dub, or sub.
+ *
+ * @param {string} tab - Tab filter: "all", "dub", or "sub" (default: "all")
+ * @returns {Promise<Array<Object>>} Array of recently updated anime objects
+ * @returns {string} return[].slug - URL slug for the anime
+ * @returns {string} return[].poster - Poster image URL
+ * @returns {string} return[].title - English title
+ * @returns {string} return[].japaneseTitle - Japanese title
+ * @returns {number} return[].sub - Subbed episode count
+ * @returns {number} return[].dub - Dubbed episode count
+ * @returns {number} return[].total - Total episode count
+ * @returns {string} return[].type - Anime type
+ * @returns {string} return[].episodeInfo - Latest episode info
+ *
+ * @example
+ *   const all = await extractRecentlyUpdatedTabs("all");
+ *   console.log(all.length); // number of updated anime
+ *
+ *   const dubOnly = await extractRecentlyUpdatedTabs("dub");
+ *   console.log(dubOnly[0].title); // first dubbed updated anime
+ */
+const extractRecentlyUpdatedTabs = async (tab = "all") => {
+  try {
+    const { data } = await fetchWithMirror("/home");
+    const $ = cheerio.load(data);
+
+    const results = [];
+
+    // NOTE: #recent-update has tabs (all/dub/sub/trending/random) but filtering is client-side
+    // Items are <div class="item"> inside #recent-update .ani.items
+    // Each item has .ani.poster with <a> link and .info .name.d-title
+    const allItems = $("#recent-update .ani.items .item");
+
+    allItems.each((i, el) => {
+      // NOTE: The item itself is a div, the link is inside .ani.poster a or .info a.name
+      const link = $(el).find(".ani.poster a").attr("href") || $(el).find(".info a.name").attr("href") || "";
+      const slug = link.split("/watch/").pop()?.split("/ep-")[0] || "";
+      if (!slug) return;
+
+      // NOTE: Check sub/dub status for tab filtering
+      const hasSub = $(el).find(".ep-status.sub").length > 0;
+      const hasDub = $(el).find(".ep-status.dub").length > 0;
+
+      // NOTE: Filter by tab if not "all" — since server-side rendering shows all items
+      if (tab === "dub" && !hasDub) return;
+      if (tab === "sub" && !hasSub) return;
+
+      const poster = $(el).find("img").attr("src") || "";
+      const title = $(el).find(".name").text().trim() || "";
+      const japaneseTitle = $(el).find(".name").attr("data-jp") || "";
+      const sub = parseInt($(el).find(".ep-status.sub span").text().trim()) || 0;
+      const dub = parseInt($(el).find(".ep-status.dub span").text().trim()) || 0;
+      const total = parseInt($(el).find(".ep-status.total span").text().trim()) || 0;
+      const type = $(el).find(".meta .right, .type").text().trim() || "";
+
+      results.push({ slug, poster, title, japaneseTitle, sub, dub, total, type });
+    });
+
+    return results;
+  } catch (error) {
+    throw error;
+  }
+};
+
+export { extractRecentlyUpdatedTabs };
+
+// ══════════════════════════════════════════════════════════════ END: recentlyUpdatedTabs.extractor.js

src/extractors/schedule.extractor.js

@@ -16,9 +16,8 @@
  */
 
 import * as cheerio from "cheerio";
-import axios from "axios";
-import { headers } from "../configs/header.config.js";
 import { URLS } from "../configs/dataUrl.js";
+import { fetchWithMirror } from "../helper/mirror.helper.js";
 
 // ══════════════════════════════════════════════════════════════
 // SCHEDULE EXTRACTION
@@ -43,25 +42,37 @@ import { URLS } from "../configs/dataUrl.js";
  */
 const extractSchedule = async (date) => {
   try {
-    // NOTE: The schedule is fetched by appending date parameter to homepage
+    // NOTE: The schedule data is loaded via AJAX endpoint, not a static page
-    const url = `${URLS.home}?date=${date}`;
+    const path = `/ajax/schedule?date=${date}`;
-    const { data } = await axios.get(url, { headers });
+    const { data: raw } = await fetchWithMirror(path, {
-    const $ = cheerio.load(data);
+      headers: { "X-Requested-With": "XMLHttpRequest" }
+    });
+
+    // NOTE: Parse JSON response first — fetchWithMirror returns raw text by default
+    let parsed = raw;
+    if (typeof raw === "string") {
+      try { parsed = JSON.parse(raw); } catch { parsed = {}; }
+    }
+    const html = parsed?.result || "";
+    const $ = cheerio.load(html);
 
     const schedule = [];
 
-    // NOTE: Schedule items use different selectors depending on page structure
+    // NOTE: Schedule items live inside .item with .time, .ep, .title structure
-    $(".schedule-item, .anime-schedule .item").each((i, el) => {
+    $(".item").each((i, el) => {
-      const slug = $(el).find("a").attr("href")?.split("/watch/").pop() || "";
+      const title = $(el).find(".title").text().trim() || "";
-      const title = $(el).find(".film-name a, .name").text().trim() || "";
+      const jpTitle = $(el).find(".title").attr("data-jp") || "";
-      const time = $(el).find(".time, .schedule-time").text().trim() || "";
+      const time = $(el).find(".time").text().trim() || "";
-      const episodeNo = parseInt($(el).find(".episode-no, .ep-num").text().trim()) || 0;
+      const episodeText = $(el).find(".ep span").text().trim() || "";
+      const episodeNo = parseInt(episodeText.replace(/\D/g, "")) || 0;
+      // NOTE: Items may not have direct links — use title as identifier
+      const slug = title.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-|-$/g, "") || "";
 
-      // NOTE: Only include items with valid slugs
+      if (title) {
-      if (slug) {
         schedule.push({
           slug,
           title,
+          japaneseTitle: jpTitle,
           time,
           episode_no: episodeNo
         });

src/extractors/search.extractor.js

@@ -16,11 +16,10 @@
  */
 
 import * as cheerio from "cheerio";
-import axios from "axios";
-import { headers } from "../configs/header.config.js";
 import { URLS } from "../configs/dataUrl.js";
 import { extractPages } from "../helper/extractPages.helper.js";
 import { countPages } from "../helper/countPages.helper.js";
+import { fetchWithMirror } from "../helper/mirror.helper.js";
 
 // ══════════════════════════════════════════════════════════════
 // SEARCH RESULTS EXTRACTOR
@@ -42,27 +41,21 @@ import { countPages } from "../helper/countPages.helper.js";
  */
 const extractSearchResults = async (keyword, page = 1) => {
   try {
-    // WARNING: keyword param is required — omitting it may cause a 500 error from the source
     const url = `${URLS.search}?keyword=${encodeURIComponent(keyword)}`;
     const $ = await extractPages(url, page);
     const totalPages = countPages($);
 
     const results = [];
-    // NOTE: #list-items > .item is the standard result container on anikototv.to search pages
     $("#list-items > .item").each((i, el) => {
       const slug = $(el).find("a").attr("href")?.split("/watch/").pop() || "";
-      // NOTE: .ani.poster.tip is the poster container with tooltip data
       const poster = $(el).find(".ani.poster.tip > a > img").attr("src") || "";
       const title = $(el).find(".info .b1 a.name.d-title").text().trim() || "";
       const japaneseTitle = $(el).find(".info .b1 a.name.d-title").attr("data-jp") || "";
-      // NOTE: data-tip attribute on the poster container holds the animeId
       const animeId = $(el).find(".ani.poster.tip").attr("data-tip") || "";
       const sub = parseInt($(el).find(".ep-status.sub span").text().trim()) || 0;
       const dub = parseInt($(el).find(".ep-status.dub span").text().trim()) || 0;
       const total = parseInt($(el).find(".ep-status.total span").text().trim()) || 0;
-      // NOTE: Type is in the second .m-item label (e.g. TV, Movie, OVA)
       const type = $(el).find(".info .meta .m-item:nth-child(2) label").text().trim() || "";
-      // NOTE: Rating is in a dedicated .m-item.rated span
       const rating = $(el).find(".info .meta .m-item.rated span").text().trim() || "";
       const genres = [];
       $(el).find(".info .b1 .genre a").each((j, g) => {
@@ -110,8 +103,8 @@ const extractSearchResults = async (keyword, page = 1) => {
  */
 const extractSearchSuggestions = async (keyword) => {
   try {
-    const url = `${URLS.search}?keyword=${encodeURIComponent(keyword)}`;
+    const path = `/search?keyword=${encodeURIComponent(keyword)}`;
-    const { data } = await axios.get(url, { headers });
+    const { data } = await fetchWithMirror(path);
     const $ = cheerio.load(data);
 
     const suggestions = [];
@@ -126,7 +119,6 @@ const extractSearchSuggestions = async (keyword) => {
       }
     });
 
-    // NOTE: Limit to 10 suggestions to keep autocomplete payloads small
     return suggestions.slice(0, 10);
   } catch (error) {
     throw error;

src/extractors/seasons.extractor.js

@@ -5,8 +5,8 @@
  *
  * @description
  *   Extracts season information for a specific anime from the
- *   anikototv.to AJAX endpoint. Returns all seasons/OVAs/specials
+ *   watch page HTML. Returns available seasons from the page
- *   for a given anime series.
+ *   sidebar and metadata.
  *
  * @exports
  *   extractSeasons
@@ -19,75 +19,78 @@
 import * as cheerio from "cheerio";
 import { fetchWithMirror } from "../helper/mirror.helper.js";
 
+// ══════════════════════════════════════════════════════════════
+// SEASONS EXTRACTOR
+// ══════════════════════════════════════════════════════════════
+
+// ---- FEATURE: Season Information Extraction ----
 /**
  * Fetches and parses season information for an anime.
- * Scrapes the AJAX endpoint that returns season carousel HTML.
+ * Extracts season data from the watch page sidebar.
  *
- * @param {string|number} animeId - The numeric anime ID
+ * NOTE: The source site's AJAX endpoints (/ajax/seasons/) don't exist,
+ * so we extract from the watch page HTML sidebar instead.
+ *
+ * @param {string|number} slugOrId - The anime slug or numeric ID
  * @returns {Promise<Object>} Object with animeId, totalSeasons, and seasons array
  *
  * @example
- *   const seasons = await extractSeasons(7174);
+ *   const seasons = await extractSeasons("one-piece-odmau");
- *   console.log(seasons.totalSeasons); // number of seasons
+ *   console.log(seasons.totalSeasons);
- *   console.log(seasons.seasons[0].title); // first season title
  */
-const extractSeasons = async (animeId) => {
+const extractSeasons = async (slugOrId) => {
   try {
-    const { data } = await fetchWithMirror(`/api/seasons/${animeId}`, {
+    const path = `/watch/${slugOrId}`;
-      headers: { "X-Requested-With": "XMLHttpRequest" }
+    const { data } = await fetchWithMirror(path);
+
+    const html = typeof data === "string" ? data : String(data);
+    const $ = cheerio.load(html);
+
+    const animeId = parseInt($("#watch-main").attr("data-id")) || 0;
+    const seasons = [];
+
+    // NOTE: Try dedicated seasons section first (#ani-seasons)
+    $("#ani-seasons .swiper-slide, .seasons .item, #w-seasons .item").each((_, el) => {
+      const link = $(el).find("a").first();
+      const href = link.attr("href") || "";
+      const poster = $(el).find("img").attr("src") || "";
+      const title = $(el).find(".name, .title").text().trim() || link.text().trim() || "";
+      let slug = href.split("/watch/").pop() || "";
+      if (!slug) {
+        slug = $(el).find(".poster").attr("data-tip") || "";
+      }
+
+      if (slug || title) {
+        seasons.push({ title, slug, poster, url: href });
+      }
     });
 
-    // Handle both string HTML and JSON responses
+    // NOTE: Fallback — extract from episode list sidebar if no dedicated section
-    let raw = "";
+    if (seasons.length === 0) {
-    if (typeof data === "string") {
+      $(".w-side-section .item").each((_, el) => {
-      try {
-        const json = JSON.parse(data);
-        raw = json.result || data;
-      } catch (e) {
-        raw = data;
-      }
-    } else if (data?.result) {
-      raw = data.result;
-    } else if (data?.data) {
-      raw = data.data;
-    }
-    
-    const $ = cheerio.load(raw);
-
-    const seasons = [];
-    
-    // Try multiple selectors to handle different HTML structures
-    const selectors = [
-      ".swiper-slide.season",
-      ".seasons .swiper-slide",
-      "#w-seasons .swiper-slide",
-      ".swiper-slide"
-    ];
-    
-    for (const selector of selectors) {
-      $(selector).each((_, el) => {
         const link = $(el).find("a").first();
         const href = link.attr("href") || "";
-        const style = link.attr("style") || "";
+        const poster = $(el).find("img").attr("src") || "";
-        const poster = style.match(/url\(['"]?(.+?)['"]?\)/)?.[1] || "";
+        const title = $(el).find(".name").text().trim() || "";
-        const title = $(el).find(".name").text().trim() || 
+        let slug = href.split("/watch/").pop() || "";
-                     link.text().trim() || "";
+        // NOTE: Items may not have <a> tags — fall back to data-tip attribute
+        if (!slug) {
+          slug = $(el).find(".poster").attr("data-tip") || "";
+        }
+        const score = $(el).find(".score").text().trim() || "";
+        const episodes = $(el).find(".meta .dot:last-child").text().trim() || "";
 
-        // Extract slug from href
+        if (slug && slug !== slugOrId) {
-        const slug = href.split("/watch/").pop() || "";
+          seasons.push({ title, slug, poster, url: href, score, episodes });
-
-        if (slug || title) {
-          seasons.push({ title, slug, poster, url: href });
         }
       });
-      
-      if (seasons.length > 0) break;
     }
 
     return {
       animeId,
+      slug: slugOrId,
       totalSeasons: seasons.length,
-      seasons
+      seasons,
     };
   } catch (error) {
     throw error;
@@ -95,3 +98,4 @@ const extractSeasons = async (animeId) => {
 };
 
 export { extractSeasons };
+// ══════════════════════════════════════════════════════════════ END: seasons.extractor.js

src/extractors/spotlight.extractor.js

@@ -16,9 +16,8 @@
  */
 
 import * as cheerio from "cheerio";
-import axios from "axios";
-import { headers } from "../configs/header.config.js";
 import { URLS } from "../configs/dataUrl.js";
+import { fetchWithMirror } from "../helper/mirror.helper.js";
 
 // ══════════════════════════════════════════════════════════════
 // SPOTLIGHT EXTRACTION
@@ -48,13 +47,11 @@ import { URLS } from "../configs/dataUrl.js";
  */
 const extractSpotlight = async () => {
   try {
-    // NOTE: The homepage contains the spotlight carousel in #hotest section
+    const { data } = await fetchWithMirror("/home");
-    const { data } = await axios.get(URLS.home, { headers });
     const $ = cheerio.load(data);
 
     const spotlights = [];
 
-    // NOTE: Each slide in the swiper carousel represents a featured anime
     $("#hotest .swiper-slide.item").each((i, el) => {
       const slug = $(el).find("a.play").attr("href")?.split("/watch/").pop() || "";
       const poster = $(el).find(".image div").attr("style")?.match(/url\(['"]?(.+?)['"]?\)/)?.[1] || "";
@@ -67,7 +64,6 @@ const extractSpotlight = async () => {
       const dub = parseInt($(el).find("i.dub").text().trim()) || 0;
       const date = $(el).find("i.date").text().trim() || "";
 
-      // NOTE: Only include items with valid slugs
       if (slug) {
         spotlights.push({
           slug,

src/extractors/status.extractor.js

@@ -15,12 +15,10 @@
  * ======= • ======= • ======= • ======= • =======• =======
  */
 
-import * as cheerio from "cheerio";
-import axios from "axios";
-import { headers } from "../configs/header.config.js";
 import { URLS } from "../configs/dataUrl.js";
 import { extractPages } from "../helper/extractPages.helper.js";
 import { countPages } from "../helper/countPages.helper.js";
+import { parseListItems } from "../helper/parseListItem.helper.js";
 
 // ══════════════════════════════════════════════════════════════
 // STATUS FILTER EXTRACTION
@@ -54,40 +52,10 @@ import { countPages } from "../helper/countPages.helper.js";
  */
 const extractStatus = async (status, page = 1) => {
   try {
-    // NOTE: URLS.status generates the correct endpoint for the given status
     const url = URLS.status(status);
     const $ = await extractPages(url, page);
     const totalPages = countPages($);
-
+    const results = parseListItems($);
-    const results = [];
-
-    // NOTE: Multiple selectors to handle different page layouts
-    $(".film_list-wrap .flw-item, .film-detail, .item").each((i, el) => {
-      const slug = $(el).find("a").attr("href")?.split("/watch/").pop() || "";
-      const poster = $(el).find("img").attr("src") || "";
-      const title = $(el).find(".film-name a, .name.d-title").text().trim() || "";
-      const japaneseTitle = $(el).find(".name.d-title").attr("data-jp") || "";
-      const sub = parseInt($(el).find(".ep-status.sub span").text().trim()) || 0;
-      const dub = parseInt($(el).find(".ep-status.dub span").text().trim()) || 0;
-      const total = parseInt($(el).find(".ep-status.total span").text().trim()) || 0;
-      const type = $(el).find(".meta .inner .right, .fdi-item:nth-child(2)").text().trim() || "";
-      const rating = $(el).find(".rating, .fdi-item:nth-child(3)").text().trim() || "";
-
-      // NOTE: Only include items with valid slugs
-      if (slug) {
-        results.push({
-          slug,
-          poster,
-          title,
-          japaneseTitle,
-          sub,
-          dub,
-          total,
-          type,
-          rating
-        });
-      }
-    });
 
     return { totalPages, status, data: results };
   } catch (error) {

src/extractors/streamInfo.extractor.js

@@ -16,10 +16,12 @@
  * ======= • ======= • ======= • ======= • =======• =======
  */
 
-import * as cheerio from "cheerio";
 import axios from "axios";
+import * as cheerio from "cheerio";
 import { headers } from "../configs/header.config.js";
 import { BASE_URL } from "../configs/dataUrl.js";
+import { fetchWithMirror, getWorkingMirror } from "../helper/mirror.helper.js";
+import { normalizeServerName } from "./streamResolver.extractor.js";
 
 // ══════════════════════════════════════════════════════════════
 // STREAM INFO EXTRACTOR
@@ -28,37 +30,101 @@ import { BASE_URL } from "../configs/dataUrl.js";
 // ---- FEATURE: Resolve a single stream URL from a linkId ----
 /**
  * Fetches the actual stream URL and skip data for a given server link ID.
- * This is the primary method for resolving playable video URLs.
+ * First establishes a session by fetching the watch page, then queries
+ * the AJAX stream endpoint with proper session context.
  *
  * @param {string} linkId - The server link ID to resolve
- * @returns {Promise<Object>} Object with linkId, url, and skipData (intro/outro timestamps)
+ * @param {string} [watchSlug] - Optional watch page slug to establish session
+ * @returns {Promise<Object>} Object with linkId, url, type, skipData (intro/outro timestamps)
  *
  * @example
- *   const stream = await extractStreamInfo("abc123");
+ *   const stream = await extractStreamInfo("abc123", "one-piece-odmau");
  *   console.log(stream.url);      // direct video URL
  *   console.log(stream.skipData); // intro/outro skip ranges
  */
-const extractStreamInfo = async (linkId) => {
+const extractStreamInfo = async (linkId, watchSlug = null) => {
   try {
-    const url = `${BASE_URL}/ajax/server?get=${linkId}`;
+    // NOTE: Establish session with cookies — AJAX endpoints require session cookies
-    const { data } = await axios.get(url, {
+    const mirror = await getWorkingMirror();
-      headers: {
+    let cookieHeader = "";
-        ...headers,
-        "X-Requested-With": "XMLHttpRequest"
-      }
-    });
 
-    // NOTE: Response is JSON {status, result: {url, skip_data}}
+    if (watchSlug) {
-    if (!data || !data.result) {
+      try {
-      return { linkId, url: null, skipData: null };
+        const sessionRes = await axios.get(`${mirror}/watch/${watchSlug}`, {
+          headers,
+          timeout: 10000,
+          maxRedirects: 5,
+        });
+        const setCookies = sessionRes.headers["set-cookie"];
+        if (Array.isArray(setCookies)) {
+          cookieHeader = setCookies.map(c => c.split(";")[0]).join("; ");
+        }
+      } catch { /* session establishment is best-effort */ }
     }
 
-    const result = typeof data.result === "string" ? (() => { try { return JSON.parse(data.result); } catch { return {}; } })() : data.result;
+    // NOTE: Fallback — if no slug provided, try fetching any page to get session cookies
+    if (!cookieHeader) {
+      try {
+        const fallbackRes = await axios.get(`${mirror}/home`, {
+          headers,
+          timeout: 10000,
+          maxRedirects: 5,
+        });
+        const setCookies = fallbackRes.headers["set-cookie"];
+        if (Array.isArray(setCookies)) {
+          cookieHeader = setCookies.map(c => c.split(";")[0]).join("; ");
+        }
+      } catch { /* fallback is best-effort */ }
+    }
+
+    const path = `/ajax/server?get=${linkId}`;
+    const requestHeaders = {
+      ...headers,
+      "X-Requested-With": "XMLHttpRequest",
+      ...(cookieHeader ? { "Cookie": cookieHeader } : {}),
+    };
+
+    const { data: raw } = await fetchWithMirror(path, {
+      headers: requestHeaders
+    });
+
+    // NOTE: Handle both string JSON and parsed object responses
+    let data = raw;
+    if (typeof raw === "string") {
+      try { data = JSON.parse(raw); } catch { data = {}; }
+    }
+
+    // NOTE: Detect upstream API error responses (e.g. {status: 500, result: "Bad request"})
+    if (data && typeof data === "object" && data.status && Number(data.status) >= 400) {
+      throw new Error(`Upstream API error (${data.status}): ${data.result || "Unknown error"}`);
+    }
+
+    if (!data || !data.result) {
+      return { linkId, url: null, type: null, skipData: null };
+    }
+
+    // NOTE: If result is a non-JSON string (error message), treat as upstream failure
+    const result = typeof data.result === "string"
+      ? (() => {
+          try { return JSON.parse(data.result); }
+          catch {
+            if (!data.result.startsWith("{") && !data.result.startsWith("[")) {
+              throw new Error(`Upstream returned invalid data: ${data.result}`);
+            }
+            return {};
+          }
+        })()
+      : data.result;
+
+    const streamUrl = result.url || null;
+    const streamType = streamUrl?.includes(".m3u8") ? "hls" : streamUrl ? "mp4" : null;
 
     return {
       linkId,
-      url: result.url || null,
+      url: streamUrl,
-      skipData: result.skip_data || null
+      type: streamType,
+      skipData: result.skip_data || null,
+      backup: result.backup || null,
     };
   } catch (error) {
     throw error;
@@ -72,44 +138,94 @@ const extractStreamInfo = async (linkId) => {
 // ---- FEATURE: Fetch available servers for a set of episode IDs ----
 /**
  * Retrieves the server list for the given episode IDs from the AJAX endpoint.
- * Returns raw server data as provided by the source site.
+ * First establishes a session by fetching the watch page, then queries
+ * the AJAX server list endpoint with proper session context.
  *
  * @param {string} episodeIds - Comma-separated or single episode ID string
- * @returns {Promise<Object>} Raw server list data from the AJAX response
+ * @param {string} [watchSlug] - Optional watch page slug to establish session
+ * @returns {Promise<Array>} Array of server objects with type, link_id, ep_id, etc.
  *
  * @example
- *   const servers = await extractServerList("12345");
+ *   const servers = await extractServerList("12345", "one-piece-odmau");
- *   // servers contains the server configuration for that episode
+ *   console.log(servers[0].link_id); // first server's link ID
  */
-const extractServerList = async (episodeIds) => {
+const extractServerList = async (episodeIds, watchSlug = null) => {
   try {
-    const url = `${BASE_URL}/ajax/server/list?servers=${episodeIds}`;
+    // NOTE: Establish session with cookies — AJAX endpoints require session cookies
-    const { data: raw } = await axios.get(url, {
+    const mirror = await getWorkingMirror();
-      headers: {
+    let cookieHeader = "";
-        ...headers,
+
-        "X-Requested-With": "XMLHttpRequest"
+    if (watchSlug) {
-      }
+      try {
+        const sessionRes = await axios.get(`${mirror}/watch/${watchSlug}`, {
+          headers,
+          timeout: 10000,
+          maxRedirects: 5,
+        });
+        const setCookies = sessionRes.headers["set-cookie"];
+        if (Array.isArray(setCookies)) {
+          cookieHeader = setCookies.map(c => c.split(";")[0]).join("; ");
+        }
+      } catch { /* session establishment is best-effort */ }
+    }
+
+    if (!cookieHeader) {
+      try {
+        const fallbackRes = await axios.get(`${mirror}/home`, {
+          headers,
+          timeout: 10000,
+          maxRedirects: 5,
+        });
+        const setCookies = fallbackRes.headers["set-cookie"];
+        if (Array.isArray(setCookies)) {
+          cookieHeader = setCookies.map(c => c.split(";")[0]).join("; ");
+        }
+      } catch { /* fallback is best-effort */ }
+    }
+
+    const path = `/ajax/server/list?servers=${episodeIds}`;
+    const requestHeaders = {
+      ...headers,
+      "X-Requested-With": "XMLHttpRequest",
+      ...(cookieHeader ? { "Cookie": cookieHeader } : {}),
+    };
+
+    const { data: raw } = await fetchWithMirror(path, {
+      headers: requestHeaders
     });
 
-    // NOTE: Response is JSON {status, result} where result is HTML
+    // NOTE: Parse JSON response first — fetchWithMirror returns raw text by default
-    const html = typeof raw === "string" ? raw : (raw?.result || "");
+    let parsed = raw;
+    if (typeof raw === "string") {
+      try { parsed = JSON.parse(raw); } catch { parsed = {}; }
+    }
+
+    // NOTE: Detect upstream API error responses
+    if (parsed && typeof parsed === "object" && parsed.status && Number(parsed.status) >= 400) {
+      throw new Error(`Upstream API error (${parsed.status}): ${parsed.result || "Unknown error"}`);
+    }
+
+    const html = parsed?.result || "";
     const $ = cheerio.load(html);
 
     const servers = [];
-    // NOTE: Servers are in .servers div, grouped by type (sub/dub)
+      $(".servers .type").each((_, typeEl) => {
-    $(".servers .type").each((_, typeEl) => {
+        const type = $(typeEl).attr("data-type") || "sub";
-      const type = $(typeEl).attr("data-type") || "sub";
+        const label = $(typeEl).find("label").text().trim() || type.toUpperCase();
-      $(typeEl).find("li[data-link-id]").each((__, li) => {
+        $(typeEl).find("li[data-link-id]").each((__, li) => {
-        servers.push({
+          const rawName = $(li).text().trim() || "";
-          type,
+          servers.push({
-          ep_id: $(li).attr("data-ep-id") || "",
+            type,
-          link_id: $(li).attr("data-link-id") || "",
+            typeLabel: label,
-          cmid: $(li).attr("data-cmid") || "",
+            ep_id: $(li).attr("data-ep-id") || "",
-          sv_id: $(li).attr("data-sv-id") || "",
+            link_id: $(li).attr("data-link-id") || "",
-          name: $(li).text().trim() || ""
+            cmid: $(li).attr("data-cmid") || "",
+            sv_id: $(li).attr("data-sv-id") || "",
+            name: rawName,
+            normalizedName: normalizeServerName(rawName),
+          });
         });
       });
-    });
 
     return servers;
   } catch (error) {
@@ -139,18 +255,23 @@ const extractServerList = async (episodeIds) => {
  */
 const extractMapperServers = async (malId, slug, timestamp) => {
   try {
-    // Validate and sanitize input to prevent SSRF
     if (!Number.isFinite(Number(malId))) throw new Error("Invalid malId");
     if (!/^[a-zA-Z0-9-]+$/.test(slug)) throw new Error("Invalid slug");
     if (!Number.isFinite(Number(timestamp))) throw new Error("Invalid timestamp");
-    const url = `https://mapper.nekostream.site/api/mal/${encodeURIComponent(malId)}/${encodeURIComponent(slug)}/${encodeURIComponent(timestamp)}`;
+
-    const { data } = await axios.get(url, { headers });
+    const path = `/ajax/mapper/${encodeURIComponent(malId)}/${encodeURIComponent(slug)}/${encodeURIComponent(timestamp)}`;
+    const { data: rawData } = await fetchWithMirror(path);
+
+    // NOTE: Parse JSON response first — fetchWithMirror returns raw text by default
+    let data = rawData;
+    if (typeof rawData === "string") {
+      try { data = JSON.parse(rawData); } catch { data = {}; }
+    }
 
     const servers = [];
 
     if (data && typeof data === "object") {
       for (const [provider, sources] of Object.entries(data)) {
-        // NOTE: Each provider may have sub, dub, or both source types
         if (sources && sources.sub) {
           servers.push({
             provider,
@@ -172,7 +293,6 @@ const extractMapperServers = async (malId, slug, timestamp) => {
 
     return servers;
   } catch (error) {
-    // NOTE: Returns empty array on failure — mapper API may be unavailable
     return [];
   }
 };

src/extractors/streamResolver.extractor.js

@@ -0,0 +1,312 @@
+/*
+ * ======= • ======= • ======= • ======= • =======• =======
+ * AniKotoAPI — streamResolver.extractor.js
+ * Repository: https://github.com/Shineii86/AniKotoAPI
+ *
+ * @description
+ *   Resolves actual streaming video URLs (m3u8/mp4) from embed player URLs.
+ *   Follows the chain: vidtube.site embed → megaplay API → m3u8 playlist.
+ *   Supports quality selection and subtitle extraction.
+ *
+ * @exports
+ *   resolveStreamUrl, resolveStreamUrls, parseM3u8Qualities
+ *
+ * @author  Shinei Nouzen
+ * @license MIT
+ * ======= • ======= • ======= • ======= • =======• =======
+ */
+
+import axios from "axios";
+import { headers } from "../configs/header.config.js";
+
+// ══════════════════════════════════════════════════════════════
+// STREAM RESOLVER
+// ══════════════════════════════════════════════════════════════
+
+// Server name normalization map
+const SERVER_NAME_MAP = {
+  "VidPlay-1": "vidplay",
+  "VidPlay-2": "vidplay",
+  "HD-1": "hd",
+  "HD-2": "hd",
+  "Vidstream-1": "vidstream",
+  "Vidstream-2": "vidstream",
+  "VidCloud-1": "vidcloud",
+  "VidCloud-2": "vidcloud",
+  "StreamTape-1": "streamtape",
+  "StreamTape-2": "streamtape",
+};
+
+// Embed domain to API domain mapping
+const EMBED_API_MAP = {
+  "vidtube.site": "megaplay-1.buzz",
+  "vidplay.site": "megaplay-1.buzz",
+  "megaplay.buzz": "megaplay-1.buzz",
+  "embed.bunkrerrer.com": "megaplay-1.buzz",
+};
+
+// ---- FEATURE: Server Name Normalization ----
+/**
+ * Normalizes server display names to clean identifiers
+ * @param {string} name - Raw server name (e.g., "VidPlay-1")
+ * @returns {string} Normalized name (e.g., "vidplay")
+ */
+const normalizeServerName = (name) => {
+  if (!name) return "unknown";
+  return SERVER_NAME_MAP[name] || name.toLowerCase().replace(/[-\s]+\d+$/, "").trim();
+};
+
+// ---- FEATURE: Stream URL Resolution ----
+/**
+ * Resolves the actual video stream URL from an embed player page.
+ * Extracts data-id from the embed HTML, then queries the megaplay API.
+ *
+ * @param {string} embedUrl - The embed player URL (e.g., vidtube.site/stream/...)
+ * @param {object} [options] - Resolution options
+ * @param {boolean} [options.followRedirects=true] - Follow HTTP redirects
+ * @param {number} [options.timeout=10000] - Request timeout in ms
+ * @returns {Promise<Object>} Object with url, qualities, skipData, type
+ *
+ * @example
+ *   const resolved = await resolveStreamUrl("https://vidtube.site/stream/...");
+ *   console.log(resolved.url);      // m3u8 URL
+ *   console.log(resolved.qualities); // [{ label: "720p", url: "..." }]
+ */
+const resolveStreamUrl = async (embedUrl, options = {}) => {
+  const { followRedirects = true, timeout = 10000 } = options;
+
+  try {
+    // NOTE: Extract the embed page to find data-id and API domain
+    const embedResponse = await axios.get(embedUrl, {
+      headers: {
+        ...headers,
+        "Referer": "https://anikototv.to/",
+        "Origin": "https://anikototv.to",
+      },
+      timeout,
+      maxRedirects: followRedirects ? 5 : 0,
+    });
+
+    const embedHtml = typeof embedResponse.data === "string"
+      ? embedResponse.data
+      : String(embedResponse.data);
+
+    // NOTE: Extract data attributes from the player div
+    const dataId = embedHtml.match(/data-id="(\d+)"/)?.[1];
+    const realId = embedHtml.match(/data-realid="([^"]+)"/)?.[1];
+    const mediaId = embedHtml.match(/data-mediaid="([^"]+)"/)?.[1];
+
+    if (!dataId) {
+      return {
+        url: null,
+        qualities: [],
+        skipData: null,
+        type: null,
+        error: "Could not extract player data-id from embed page",
+      };
+    }
+
+    // NOTE: Determine API domain from embed URL or extract from page
+    const embedDomain = new URL(embedUrl).hostname;
+    const apiDomain = EMBED_API_MAP[embedDomain] || embedDomain;
+
+    // NOTE: Query the megaplay API for the actual stream URL
+    const apiResponse = await axios.get(
+      `https://${apiDomain}/ajax/sources/${dataId}`,
+      {
+        headers: {
+          ...headers,
+          "Referer": embedUrl,
+          "Origin": `https://${embedDomain}`,
+        },
+        timeout,
+      }
+    );
+
+    const apiData = typeof apiResponse.data === "string"
+      ? (() => { try { return JSON.parse(apiResponse.data); } catch { return {}; } })()
+      : apiResponse.data;
+
+    // NOTE: Extract stream URL from API response
+    const streamUrl = apiData?.source || apiData?.url || apiData?.file || null;
+    const streamType = apiData?.type || (streamUrl?.includes(".m3u8") ? "hls" : "mp4");
+
+    // NOTE: Parse m3u8 qualities if it's an HLS stream
+    let qualities = [];
+    if (streamUrl && streamType === "hls") {
+      qualities = await parseM3u8Qualities(streamUrl, {
+        headers: {
+          ...headers,
+          "Referer": embedUrl,
+        },
+        timeout,
+      });
+    }
+
+    // NOTE: Extract subtitles if available
+    const subtitles = extractSubtitles(apiData);
+
+    return {
+      url: streamUrl,
+      type: streamType,
+      qualities,
+      subtitles,
+      skipData: apiData?.skip_data || null,
+      dataId,
+      realId,
+      mediaId,
+      backup: apiData?.backup || null,
+    };
+  } catch (error) {
+    return {
+      url: null,
+      qualities: [],
+      skipData: null,
+      type: null,
+      error: error.message,
+    };
+  }
+};
+
+// ---- FEATURE: Batch Stream URL Resolution ----
+/**
+ * Resolves stream URLs for multiple episodes in batch
+ * @param {string} embedUrl - The embed player URL
+ * @param {object} [options] - Resolution options
+ * @returns {Promise<Object>} Batch resolution result
+ */
+const resolveStreamUrls = async (embedUrl, options = {}) => {
+  try {
+    const resolved = await resolveStreamUrl(embedUrl, options);
+    return resolved;
+  } catch (error) {
+    return { url: null, error: error.message };
+  }
+};
+
+// ══════════════════════════════════════════════════════════════
+// M3U8 PARSER
+// ══════════════════════════════════════════════════════════════
+
+// ---- FEATURE: M3U8 Quality Parser ----
+/**
+ * Parses an M3U8 playlist to extract available quality options.
+ * Supports both master playlists (multiple qualities) and media playlists.
+ *
+ * @param {string} m3u8Url - URL of the M3U8 playlist
+ * @param {object} [options] - Fetch options
+ * @param {object} [options.headers] - Custom headers
+ * @param {number} [options.timeout=10000] - Request timeout
+ * @returns {Promise<Array<Object>>} Array of quality objects
+ *
+ * @example
+ *   const qualities = await parseM3u8Qualities("https://example.com/master.m3u8");
+ *   qualities.forEach(q => console.log(`${q.label}: ${q.url}`));
+ */
+const parseM3u8Qualities = async (m3u8Url, options = {}) => {
+  const { headers: customHeaders = {}, timeout = 10000 } = options;
+
+  try {
+    const response = await axios.get(m3u8Url, {
+      headers: { ...headers, ...customHeaders },
+      timeout,
+    });
+
+    const content = typeof response.data === "string"
+      ? response.data
+      : String(response.data);
+
+    const qualities = [];
+    const lines = content.split("\n").map((l) => l.trim());
+
+    // NOTE: Parse master playlist (contains #EXT-X-STREAM-INF)
+    for (let i = 0; i < lines.length; i++) {
+      if (lines[i].startsWith("#EXT-X-STREAM-INF:")) {
+        const attrs = lines[i].substring("#EXT-X-STREAM-INF:".length);
+        const bandwidth = parseInt(attrs.match(/BANDWIDTH=(\d+)/)?.[1] || "0");
+        const resolution = attrs.match(/RESOLUTION=(\d+x\d+)/)?.[1] || "";
+        const [width, height] = resolution.split("x").map(Number);
+        const nextLine = lines[i + 1];
+
+        if (nextLine && !nextLine.startsWith("#")) {
+          // NOTE: Resolve relative URLs against base M3U8 URL
+          const qualityUrl = nextLine.startsWith("http")
+            ? nextLine
+            : new URL(nextLine, m3u8Url).href;
+
+          qualities.push({
+            label: height ? `${height}p` : `${bandwidth}bps`,
+            width: width || 0,
+            height: height || 0,
+            bandwidth,
+            url: qualityUrl,
+          });
+        }
+      }
+    }
+
+    // NOTE: If no qualities found, it's likely a single-quality stream
+    if (qualities.length === 0 && content.includes("#EXTINF")) {
+      qualities.push({
+        label: "default",
+        width: 0,
+        height: 0,
+        bandwidth: 0,
+        url: m3u8Url,
+      });
+    }
+
+    // NOTE: Sort by resolution/bandwidth descending (highest first)
+    qualities.sort((a, b) => (b.height || b.bandwidth) - (a.height || a.bandwidth));
+
+    return qualities;
+  } catch (error) {
+    return [];
+  }
+};
+
+// ══════════════════════════════════════════════════════════════
+// SUBTITLE EXTRACTOR
+// ══════════════════════════════════════════════════════════════
+
+// ---- FEATURE: Subtitle Track Extractor ----
+/**
+ * Extracts subtitle information from API response data
+ * @param {object} apiData - The megaplay API response
+ * @returns {Array<Object>} Array of subtitle objects
+ */
+const extractSubtitles = (apiData) => {
+  const subtitles = [];
+
+  // NOTE: Subtitles may be in different formats depending on the source
+  if (apiData?.subtitles && Array.isArray(apiData.subtitles)) {
+    for (const sub of apiData.subtitles) {
+      subtitles.push({
+        label: sub.label || sub.language || "Unknown",
+        language: sub.code || sub.language || "unknown",
+        url: sub.url || sub.file || null,
+        format: sub.format || "srt",
+      });
+    }
+  }
+
+  // NOTE: Some sources embed subtitles in tracks array
+  if (apiData?.tracks && Array.isArray(apiData.tracks)) {
+    for (const track of apiData.tracks) {
+      if (track.kind === "subtitles" || track.type === "subtitles") {
+        subtitles.push({
+          label: track.label || track.language || "Unknown",
+          language: track.srclang || track.language || "unknown",
+          url: track.file || track.src || null,
+          format: track.format || "srt",
+        });
+      }
+    }
+  }
+
+  return subtitles;
+};
+
+export { resolveStreamUrl, resolveStreamUrls, parseM3u8Qualities, normalizeServerName, extractSubtitles };
+
+// ══════════════════════════════════════════════════════════════ END: streamResolver.extractor.js

src/extractors/suggestion.extractor.js

@@ -16,9 +16,8 @@
  */
 
 import * as cheerio from "cheerio";
-import axios from "axios";
-import { headers } from "../configs/header.config.js";
 import { URLS } from "../configs/dataUrl.js";
+import { fetchWithMirror } from "../helper/mirror.helper.js";
 
 // ══════════════════════════════════════════════════════════════
 // SUGGESTION EXTRACTION
@@ -46,14 +45,12 @@ import { URLS } from "../configs/dataUrl.js";
  */
 const extractSuggestions = async (keyword) => {
   try {
-    // NOTE: The search endpoint requires the 'keyword' parameter
+    const path = `/search?keyword=${encodeURIComponent(keyword)}`;
-    const url = `${URLS.search}?keyword=${encodeURIComponent(keyword)}`;
+    const { data } = await fetchWithMirror(path);
-    const { data } = await axios.get(url, { headers });
     const $ = cheerio.load(data);
 
     const suggestions = [];
 
-    // NOTE: Search results use the same list structure as other pages
     $("#list-items > .item").each((i, el) => {
       const slug = $(el).find("a").attr("href")?.split("/watch/").pop() || "";
       const poster = $(el).find(".ani.poster.tip > a > img").attr("src") || "";
@@ -63,13 +60,11 @@ const extractSuggestions = async (keyword) => {
       const sub = parseInt($(el).find(".ep-status.sub span").text().trim()) || 0;
       const dub = parseInt($(el).find(".ep-status.dub span").text().trim()) || 0;
 
-      // NOTE: Only include items with valid slugs
       if (slug) {
         suggestions.push({ slug, poster, title, japaneseTitle, type, sub, dub });
       }
     });
 
-    // NOTE: Limit to 10 suggestions for autocomplete-style responses
     return suggestions.slice(0, 10);
   } catch (error) {
     throw error;

src/extractors/topAnimeRankings.extractor.js

@@ -0,0 +1,92 @@
+/*
+ * ======= • ======= • ======= • ======= • =======• =======
+ * AniKotoAPI — topAnimeRankings.extractor.js
+ * Repository: https://github.com/Shineii86/AniKotoAPI
+ *
+ * @description
+ *   Extracts top anime rankings from the homepage with sort options.
+ *   Supports both "top" (all-time) and "newest" ranking modes.
+ *   Parses ranked items with position numbers 1-9.
+ *
+ * @exports
+ *   extractTopAnimeRankings
+ *
+ * @author  Shinei Nouzen
+ * @license MIT
+ * ======= • ======= • ======= • ======= • =======• =======
+ */
+
+import * as cheerio from "cheerio";
+import { fetchWithMirror } from "../helper/mirror.helper.js";
+
+// ══════════════════════════════════════════════════════════════
+// TOP ANIME RANKINGS EXTRACTION
+// ══════════════════════════════════════════════════════════════
+
+// ---- FEATURE: Extract top anime rankings with sort option ----
+/**
+ * Fetches and parses the top anime rankings from the homepage.
+ * Supports switching between "top" (all-time) and "newest" rankings.
+ *
+ * @param {string} sort - Ranking sort mode: "day", "week", or "month" (default: "day")
+ * @returns {Promise<Array<Object>>} Array of ranked anime objects
+ * @returns {number} return[].rank - Ranking position (1-9)
+ * @returns {string} return[].slug - URL slug for the anime
+ * @returns {string} return[].poster - Poster image URL
+ * @returns {string} return[].title - Anime title
+ * @returns {string} return[].japaneseTitle - Japanese title
+ * @returns {number} return[].sub - Subbed episode count
+ * @returns {number} return[].dub - Dubbed episode count
+ * @returns {string} return[].type - Anime type
+ * @returns {string} return[].views - View count
+ *
+ * @example
+ *   const topAnime = await extractTopAnimeRankings("top");
+ *   console.log(topAnime[0].rank); // 1
+ *   console.log(topAnime[0].title); // #1 anime
+ *
+ *   const newest = await extractTopAnimeRankings("newest");
+ *   console.log(newest[0].title); // #1 newest anime
+ */
+const extractTopAnimeRankings = async (sort = "top") => {
+  try {
+    // NOTE: Homepage contains both top and newest rankings in tabbed sections
+    const { data } = await fetchWithMirror("/home");
+    const $ = cheerio.load(data);
+
+    const results = [];
+
+    // NOTE: Ranking items live inside #top-anime .tab-content .scaff.side.items
+    // Each item is an <a class="item rankN"> with rank classes rank1..rank9
+    // The data-name on .tab-content controls which tab: day/week/month
+    const tabSelector = sort === "week" ? "[data-name='week']"
+      : sort === "month" ? "[data-name='month']"
+      : "[data-name='day']";
+
+    $(`#top-anime .tab-content${tabSelector} a.item, #top-anime .scaff.side.items a.item`).each((i, el) => {
+      const slug = $(el).attr("href")?.split("/watch/").pop() || "";
+      if (!slug) return;
+
+      const poster = $(el).find("img").attr("src") || "";
+      const title = $(el).find(".name").text().trim() || "";
+      const japaneseTitle = $(el).find(".name").attr("data-jp") || "";
+      const sub = parseInt($(el).find(".ep-status.sub span").text().trim()) || 0;
+      const dub = parseInt($(el).find(".ep-status.dub span").text().trim()) || 0;
+      const type = $(el).find(".meta .dot:last-child").text().trim() || "";
+
+      // NOTE: Rank is extracted from the rankN class on the <a> element
+      const rankClass = [...$(el).attr("class") || ""].join(" ").match(/rank(\d+)/);
+      const rank = rankClass ? parseInt(rankClass[1]) : i + 1;
+
+      results.push({ rank, slug, poster, title, japaneseTitle, sub, dub, type });
+    });
+
+    return results;
+  } catch (error) {
+    throw error;
+  }
+};
+
+export { extractTopAnimeRankings };
+
+// ══════════════════════════════════════════════════════════════ END: topAnimeRankings.extractor.js

src/extractors/topten.extractor.js

@@ -16,9 +16,8 @@
  */
 
 import * as cheerio from "cheerio";
-import axios from "axios";
-import { headers } from "../configs/header.config.js";
 import { URLS } from "../configs/dataUrl.js";
+import { fetchWithMirror } from "../helper/mirror.helper.js";
 
 // ══════════════════════════════════════════════════════════════
 // TOP TEN EXTRACTION
@@ -47,15 +46,13 @@ import { URLS } from "../configs/dataUrl.js";
  */
 const extractTopTen = async () => {
   try {
-    // NOTE: The top 10 section uses tabbed content with data-name attributes
+    const { data } = await fetchWithMirror("/home");
-    const { data } = await axios.get(URLS.home, { headers });
     const $ = cheerio.load(data);
 
     const today = [];
     const week = [];
     const month = [];
 
-    // NOTE: Each tab contains a list of anime items with ranking data
     $("#top-anime .tab-content[data-name='day'] a.item").each((i, el) => {
       const slug = $(el).attr("href")?.split("/watch/").pop() || "";
       const poster = $(el).find(".poster img").attr("src") || "";
@@ -65,13 +62,11 @@ const extractTopTen = async () => {
       const type = $(el).find(".type").text().trim() || "";
       const rank = i + 1;
 
-      // NOTE: Only include items with valid slugs
       if (slug) {
         today.push({ slug, rank, name, poster, sub, dub, type });
       }
     });
 
-    // NOTE: Weekly rankings follow the same structure as daily
     $("#top-anime .tab-content[data-name='week'] a.item").each((i, el) => {
       const slug = $(el).attr("href")?.split("/watch/").pop() || "";
       const poster = $(el).find(".poster img").attr("src") || "";
@@ -86,7 +81,6 @@ const extractTopTen = async () => {
       }
     });
 
-    // NOTE: Monthly rankings follow the same structure
     $("#top-anime .tab-content[data-name='month'] a.item").each((i, el) => {
       const slug = $(el).attr("href")?.split("/watch/").pop() || "";
       const poster = $(el).find(".poster img").attr("src") || "";

src/extractors/trending.extractor.js

@@ -16,9 +16,7 @@
  */
 
 import * as cheerio from "cheerio";
-import axios from "axios";
+import { fetchWithMirror } from "../helper/mirror.helper.js";
-import { headers } from "../configs/header.config.js";
-import { URLS } from "../configs/dataUrl.js";
 
 // ══════════════════════════════════════════════════════════════
 // TRENDING EXTRACTION
@@ -45,13 +43,11 @@ import { URLS } from "../configs/dataUrl.js";
  */
 const extractTrending = async () => {
   try {
-    // NOTE: Trending data is split across multiple sections on the homepage
+    const { data } = await fetchWithMirror("/home");
-    const { data } = await axios.get(URLS.home, { headers });
     const $ = cheerio.load(data);
 
     const trending = [];
 
-    // NOTE: This selector targets both the updated section and recent updates
     $(".section-updated .item, #recent-update .item").each((i, el) => {
       const slug = $(el).find("a.name.d-title").attr("href")?.split("/watch/").pop() || "";
       const poster = $(el).find(".poster img").attr("src") || "";
@@ -62,7 +58,6 @@ const extractTrending = async () => {
       const total = parseInt($(el).find(".ep-status.total span").text().trim()) || 0;
       const type = $(el).find(".meta .inner .right").text().trim() || "";
 
-      // NOTE: Only include items with valid slugs
       if (slug) {
         trending.push({
           slug,

src/extractors/trendingSidebar.extractor.js

@@ -16,9 +16,7 @@
  */
 
 import * as cheerio from "cheerio";
-import axios from "axios";
+import { fetchWithMirror } from "../helper/mirror.helper.js";
-import { headers } from "../configs/header.config.js";
-import { URLS } from "../configs/dataUrl.js";
 
 // ══════════════════════════════════════════════════════════════
 // TRENDING SIDEBAR EXTRACTION
@@ -49,15 +47,13 @@ import { URLS } from "../configs/dataUrl.js";
  */
 const extractTrendingSidebar = async () => {
   try {
-    // NOTE: The sidebar content is embedded in the homepage HTML
+    const { data } = await fetchWithMirror("/home");
-    const { data } = await axios.get(URLS.home, { headers });
     const $ = cheerio.load(data);
 
     const day = [];
     const week = [];
     const month = [];
 
-    // NOTE: Daily rankings use the 'day' tab content
     $("#top-anime .tab-content[data-name='day'] a.item").each((i, el) => {
       const slug = $(el).attr("href")?.split("/watch/").pop() || "";
       const poster = $(el).find(".poster img").attr("src") || "";
@@ -67,13 +63,11 @@ const extractTrendingSidebar = async () => {
       const type = $(el).find(".type").text().trim() || "";
       const rank = i + 1;
 
-      // NOTE: Only include items with valid slugs
       if (slug) {
         day.push({ slug, rank, name, poster, sub, dub, type });
       }
     });
 
-    // NOTE: Weekly rankings use the 'week' tab content
     $("#top-anime .tab-content[data-name='week'] a.item").each((i, el) => {
       const slug = $(el).attr("href")?.split("/watch/").pop() || "";
       const poster = $(el).find(".poster img").attr("src") || "";
@@ -88,7 +82,6 @@ const extractTrendingSidebar = async () => {
       }
     });
 
-    // NOTE: Monthly rankings use the 'month' tab content
     $("#top-anime .tab-content[data-name='month'] a.item").each((i, el) => {
       const slug = $(el).attr("href")?.split("/watch/").pop() || "";
       const poster = $(el).find(".poster img").attr("src") || "";
@@ -103,7 +96,6 @@ const extractTrendingSidebar = async () => {
       }
     });
 
-    // NOTE: Latest episodes section provides recently updated content
     const latestEpisodes = [];
     $("#recent-update .item, .section-updated .item").each((i, el) => {
       const slug = $(el).find("a.name.d-title").attr("href")?.split("/watch/").pop() || "";

src/extractors/upcomingAnime.extractor.js

@@ -0,0 +1,72 @@
+/*
+ * ======= • ======= • ======= • ======= • =======• =======
+ * AniKotoAPI — upcomingAnime.extractor.js
+ * Repository: https://github.com/Shineii86/AniKotoAPI
+ *
+ * @description
+ *   Extracts upcoming anime from the homepage section.
+ *   Scrapes the #upcoming-anime section for future releases.
+ *
+ * @exports
+ *   extractUpcomingAnime
+ *
+ * @author  Shinei Nouzen
+ * @license MIT
+ * ======= • ======= • ======= • ======= • =======• =======
+ */
+
+import * as cheerio from "cheerio";
+import { fetchWithMirror } from "../helper/mirror.helper.js";
+
+// ══════════════════════════════════════════════════════════════
+// UPCOMING ANIME EXTRACTION
+// ══════════════════════════════════════════════════════════════
+
+// ---- FEATURE: Extract upcoming anime from homepage section ----
+/**
+ * Fetches and parses the upcoming anime section from the homepage.
+ * Returns a list of anime that are scheduled for future release.
+ *
+ * @returns {Promise<Array<Object>>} Array of upcoming anime objects
+ * @returns {string} return[].slug - URL slug for the anime
+ * @returns {string} return[].poster - Poster image URL
+ * @returns {string} return[].title - English title
+ * @returns {string} return[].japaneseTitle - Japanese title
+ * @returns {string} return[].type - Anime type (TV, Movie, etc.)
+ * @returns {string} return[].releaseDate - Expected release date
+ *
+ * @example
+ *   const upcoming = await extractUpcomingAnime();
+ *   console.log(upcoming.length); // number of upcoming anime
+ *   console.log(upcoming[0].title); // first upcoming anime title
+ */
+const extractUpcomingAnime = async () => {
+  try {
+    const { data } = await fetchWithMirror("/home");
+    const $ = cheerio.load(data);
+
+    const results = [];
+
+    // NOTE: upcoming-anime section contains future releases
+    $("#upcoming-anime .item, .upcoming .item").each((i, el) => {
+      const slug = $(el).find("a").attr("href")?.split("/watch/").pop() || "";
+      if (!slug) return;
+
+      const poster = $(el).find("img").attr("src") || "";
+      const title = $(el).find(".film-name a, .name.d-title, a.name").text().trim() || "";
+      const japaneseTitle = $(el).find(".name.d-title, a.name").attr("data-jp") || "";
+      const type = $(el).find(".type, .fdi-item:nth-child(2)").text().trim() || "";
+      const releaseDate = $(el).find(".date, .release-date").text().trim() || "";
+
+      results.push({ slug, poster, title, japaneseTitle, type, releaseDate });
+    });
+
+    return results;
+  } catch (error) {
+    throw error;
+  }
+};
+
+export { extractUpcomingAnime };
+
+// ══════════════════════════════════════════════════════════════ END: upcomingAnime.extractor.js

src/extractors/watchOrder.extractor.js

@@ -5,8 +5,8 @@
  *
  * @description
  *   Extracts watch order and related anime information from the
- *   anikototv.to AJAX endpoint. Returns related anime with their
+ *   watch page sidebar. Returns trending/related anime with their
- *   relationship types (sequel, prequel, summary, etc.).
+ *   metadata for continuous viewing.
  *
  * @exports
  *   extractWatchOrder
@@ -19,83 +19,80 @@
 import * as cheerio from "cheerio";
 import { fetchWithMirror } from "../helper/mirror.helper.js";
 
+// ══════════════════════════════════════════════════════════════
+// WATCH ORDER EXTRACTOR
+// ══════════════════════════════════════════════════════════════
+
+// ---- FEATURE: Watch Order / Related Anime Extraction ----
 /**
  * Fetches and parses watch order / related anime for an anime.
- * Scrapes the AJAX endpoint that returns related anime HTML.
+ * Extracts related anime from the watch page sidebar.
  *
- * @param {string|number} animeId - The numeric anime ID
+ * NOTE: The source site's AJAX endpoints (/ajax/related/) don't exist,
+ * so we extract from the watch page HTML sidebar instead.
+ *
+ * @param {string|number} slugOrId - The anime slug or numeric ID
  * @returns {Promise<Object>} Object with animeId, totalRelated, related array
  *
  * @example
- *   const data = await extractWatchOrder(7174);
+ *   const data = await extractWatchOrder("one-piece-odmau");
- *   console.log(data.totalRelated); // number of related anime
+ *   console.log(data.totalRelated);
- *   console.log(data.related[0].title); // first related anime
  */
-const extractWatchOrder = async (animeId) => {
+const extractWatchOrder = async (slugOrId) => {
   try {
-    const { data } = await fetchWithMirror(`/api/watch-order/${animeId}`, {
+    const path = `/watch/${slugOrId}`;
-      headers: { "X-Requested-With": "XMLHttpRequest" }
+    const { data } = await fetchWithMirror(path);
+
+    const html = typeof data === "string" ? data : String(data);
+    const $ = cheerio.load(html);
+
+    const animeId = parseInt($("#watch-main").attr("data-id")) || 0;
+    const related = [];
+
+    // NOTE: Try dedicated related section first (#w-related)
+    $("#w-related .item, .w-side-section:has(.title:contains('Related')) .item").each((_, el) => {
+      const link = $(el).find("a").first();
+      const href = link.attr("href") || "";
+      const title = $(el).find(".name").text().trim() || "";
+      const poster = $(el).find("img").attr("src") || "";
+      const slug = href.split("/watch/").pop() || $(el).find(".poster").attr("data-tip") || "";
+      const relation = $(el).find(".relation, .serieslabelitem").text().trim() || "related";
+
+      if (slug) {
+        related.push({ title, slug, poster, url: href, relation });
+      }
     });
 
-    // Handle both string HTML and JSON responses
+    // NOTE: Fallback — extract from #watch-order section (trending sidebar items as suggested watch order)
-    let raw = "";
+    if (related.length === 0) {
-    if (typeof data === "string") {
+      $("#watch-order .item, .w-side-section:has(.title:contains('Trending')) .item, .w-side-section:first .item").each((_, el) => {
-      try {
+        const link = $(el).find("a").first();
-        const json = JSON.parse(data);
-        raw = json.result || data;
-      } catch (e) {
-        raw = data;
-      }
-    } else if (data?.result) {
-      raw = data.result;
-    } else if (data?.data) {
-      raw = data.data;
-    }
-    
-    const $ = cheerio.load(raw);
-
-    // Extract related anime
-    const related = [];
-    
-    // Try multiple selectors
-    const selectors = [
-      "#w-related .item",
-      ".item.flexserieslist",
-      ".scaff.side.items .item",
-      ".item"
-    ];
-    
-    for (const selector of selectors) {
-      $(selector).each((_, el) => {
-        const link = $(el).find("a.name").first();
         const href = link.attr("href") || "";
-        const title = link.text().trim() || "";
+        const title = $(el).find(".name").text().trim() || "";
         const poster = $(el).find("img").attr("src") || "";
-        const slug = href.split("/watch/").pop() || "";
+        // NOTE: Items may not have <a> tags — fall back to data-tip attribute for slug
+        let slug = href.split("/watch/").pop() || "";
+        if (!slug) {
+          const dataTip = $(el).find(".poster").attr("data-tip") || "";
+          if (dataTip) slug = dataTip;
+        }
+        const score = $(el).find(".score").text().trim() || "";
+        // NOTE: .meta .dot elements: [0]=score, [1]=type, [2]=episodes
+        const metaDots = $(el).find(".meta .dot");
+        const type = metaDots.eq(1).text().trim() || "";
+        const episodes = metaDots.eq(2).text().trim() || "";
 
-        // Extract relationship type
+        if (slug && slug !== slugOrId) {
-        const relationEl = $(el).find(".relation, .serieslabelitem").first();
+          related.push({ title, slug, poster, url: href, relation: "trending", score, type, episodes });
-        let relationType = relationEl.text().trim().toLowerCase() || 
-                          relationEl.attr("id") || "related";
-
-        if (slug || title) {
-          related.push({
-            title,
-            slug,
-            poster,
-            url: href,
-            relation: relationType
-          });
         }
       });
-      
-      if (related.length > 0) break;
     }
 
     return {
       animeId,
+      slug: slugOrId,
       totalRelated: related.length,
-      related
+      related,
     };
   } catch (error) {
     throw error;
@@ -103,3 +100,4 @@ const extractWatchOrder = async (animeId) => {
 };
 
 export { extractWatchOrder };
+// ══════════════════════════════════════════════════════════════ END: watchOrder.extractor.js

src/extractors/watchPage.extractor.js

@@ -16,9 +16,7 @@
  */
 
 import * as cheerio from "cheerio";
-import axios from "axios";
+import { fetchWithMirror } from "../helper/mirror.helper.js";
-import { headers } from "../configs/header.config.js";
-import { URLS, BASE_URL } from "../configs/dataUrl.js";
 
 // ══════════════════════════════════════════════════════════════
 // WATCH PAGE EXTRACTOR
@@ -41,54 +39,40 @@ import { URLS, BASE_URL } from "../configs/dataUrl.js";
  */
 const extractWatchPage = async (slug, ep) => {
   try {
-    const url = URLS.episode(slug, ep);
+    const path = `/watch/${slug}/ep-${ep}`;
-    const { data } = await axios.get(url, { headers });
+    const { data } = await fetchWithMirror(path);
     const $ = cheerio.load(data);
 
-    // ---- FEATURE: Extract anime identification and title ----
-    // NOTE: data-id on #watch-main is the internal anime ID for AJAX calls
     const animeId = parseInt($("#watch-main").attr("data-id")) || 0;
     const animeUrl = $("#watch-main").attr("data-url") || "";
     const title = $("h1[itemprop='name'].title.d-title").text().trim() || slug;
     const japaneseTitle = $("h1[itemprop='name'].title.d-title").attr("data-jp") || "";
     const episodeNumber = parseInt(ep) || 0;
 
-    // ---- FEATURE: Extract synopsis and rating ----
     const synopsis = $(".synopsis .content").text().trim() || "";
     const rating = $("#w-rating .score .value").text().trim() || "";
     const poster = $("img[itemprop='image']").attr("src") || "";
-    // NOTE: Background image is extracted from CSS background-image property on #player
     const backgroundImage = $("#player").css("background-image")?.match(/url\(['"]?(.+?)['"]?\)/)?.[1] || "";
 
-    // ---- FEATURE: Extract anime metadata (type, status, MAL score, duration, episodes) ----
     const type = $(".bmeta .meta:first-child > div:nth-child(1) span").text().trim() || "";
     const status = $(".bmeta .meta:first-child > div:nth-child(4) span a").text().trim() || "";
     const malScore = $(".bmeta .meta:nth-child(2) > div:nth-child(1) span").text().trim() || "";
     const duration = $(".bmeta .meta:nth-child(2) > div:nth-child(2) span").text().trim() || "";
     const episodes = $(".bmeta .meta:nth-child(2) > div:nth-child(3) span").text().trim() || "";
 
-    // ---- FEATURE: Extract genres ----
-    // NOTE: Genre links contain '/genre/' in href to distinguish from other links
     const genres = [];
     $(".bmeta .meta:first-child > div:nth-child(5) span a[href*='/genre/']").each((i, el) => {
       genres.push($(el).text().trim());
     });
 
-    // ---- FEATURE: Extract studios ----
-    // NOTE: Uses itemprop='director' links with itemprop='name' spans inside
     const studios = [];
     $(".bmeta .meta:nth-child(2) > div:nth-child(4) span a[itemprop='director'] span[itemprop='name']").each((i, el) => {
       studios.push($(el).text().trim());
     });
 
-    // ---- FEATURE: Extract next episode release info ----
-    // NOTE: .next-episode shows the countdown text, .count-down has data-target timestamp
     const nextEpisodeDate = $(".next-episode, .alert.next-episode").text().trim() || "";
     const nextEpisodeTimestamp = parseInt($(".count-down").attr("data-target")) || 0;
 
-    // ---- FEATURE: Extract available streaming servers ----
-    // NOTE: Each server li has data-link-id (unique), data-ep-id, data-cmid, data-sv-id
-    // NOTE: Server type (sub/dub) is derived from closest .type container's data-type attribute
     const servers = [];
     $("#w-servers .servers .type li, #w-servers li[data-link-id]").each((i, el) => {
       const linkId = $(el).attr("data-link-id") || "";
@@ -110,14 +94,11 @@ const extractWatchPage = async (slug, ep) => {
       }
     });
 
-    // ---- FEATURE: Extract trending/watch-order sidebar items ----
-    // NOTE: Grabs from both the first .w-side-section and #watch-order containers
     const trending = [];
     $(".w-side-section:first .scaff.side.items a.item, #watch-order a.item").each((i, el) => {
       const trendSlug = $(el).attr("href")?.split("/watch/").pop() || "";
       const trendPoster = $(el).find(".poster img").attr("src") || "";
       const trendTitle = $(el).find(".name").text().trim() || "";
-      // NOTE: .dot:last-child typically holds the type badge text
       const trendType = $(el).find(".dot:last-child").text().trim() || "";
       const trendScore = $(el).find(".score").text().trim() || "";
 
@@ -132,8 +113,6 @@ const extractWatchPage = async (slug, ep) => {
       }
     });
 
-    // ---- FEATURE: Extract recommended anime sidebar items ----
-    // NOTE: Targets the section with a title containing "Recommended", or the last sidebar
     const recommended = [];
     $(".w-side-section:has(.title:contains('Recommended')) a.item, aside.sidebar:last .w-side-section a.item").each((i, el) => {
       const recSlug = $(el).attr("href")?.split("/watch/").pop() || "";

src/helper/cache.helper.js

@@ -16,7 +16,21 @@
  * ======= • ======= • ======= • ======= • =======• =======
  */
 
+// ══════════════════════════════════════════════════════════════
+// LRU CACHE CLASS
+// ══════════════════════════════════════════════════════════════
+
+// ---- FEATURE: LRU Cache ----
+/**
+ * Least Recently Used (LRU) cache implementation.
+ * Maintains access order by deleting and re-inserting on read.
+ * Auto-evicts oldest entry when maxSize is reached.
+ */
 class LRUCache {
+  /**
+   * @param {number} maxSize - Maximum number of entries (default: 100)
+   * @param {number} defaultTTL - Default time-to-live in ms (default: 300000 = 5min)
+   */
   constructor(maxSize = 100, defaultTTL = 300000) {
     this.cache = new Map();
     this.maxSize = maxSize;
@@ -24,6 +38,13 @@ class LRUCache {
     this.stats = { hits: 0, misses: 0, sets: 0, deletes: 0 };
   }
 
+  /**
+   * Get a value from the cache. Moves the entry to the end (most recent) on access.
+   * Returns undefined if not found or expired.
+   *
+   * @param {string} key - Cache key
+   * @returns {*} Cached value or undefined
+   */
   get(key) {
     if (!this.cache.has(key)) {
       this.stats.misses++;
@@ -31,23 +52,34 @@ class LRUCache {
     }
 
     const entry = this.cache.get(key);
+    // NOTE: Lazy expiration — check expiry on access, not background timer
     if (Date.now() > entry.expiresAt) {
       this.cache.delete(key);
       this.stats.misses++;
       return undefined;
     }
 
+    // NOTE: Re-insert to move to end (most recently used position)
     this.stats.hits++;
     this.cache.delete(key);
     this.cache.set(key, entry);
     return entry.value;
   }
 
+  /**
+   * Set a value in the cache with optional TTL.
+   * Evicts the oldest entry if at capacity.
+   *
+   * @param {string} key - Cache key
+   * @param {*} value - Value to store
+   * @param {number} [ttl] - Time-to-live in ms (uses defaultTTL if not provided)
+   */
   set(key, value, ttl) {
     if (this.cache.has(key)) {
       this.cache.delete(key);
     }
 
+    // NOTE: Evict oldest (first) entry when cache is full
     if (this.cache.size >= this.maxSize) {
       const firstKey = this.cache.keys().next().value;
       this.cache.delete(firstKey);
@@ -60,18 +92,34 @@ class LRUCache {
     this.stats.sets++;
   }
 
+  /**
+   * Delete a specific key from the cache.
+   *
+   * @param {string} key - Cache key to delete
+   * @returns {boolean} True if the key existed before deletion
+   */
   delete(key) {
     const existed = this.cache.delete(key);
     if (existed) this.stats.deletes++;
     return existed;
   }
 
+  /**
+   * Clear all entries from the cache.
+   *
+   * @returns {number} Number of entries cleared
+   */
   clear() {
     const size = this.cache.size;
     this.cache.clear();
     return size;
   }
 
+  /**
+   * Get cache statistics including hit rate.
+   *
+   * @returns {Object} Stats object with hits, misses, sets, deletes, size, hitRate
+   */
   getStats() {
     const total = this.stats.hits + this.stats.misses;
     return {
@@ -81,6 +129,12 @@ class LRUCache {
     };
   }
 
+  /**
+   * Check if a key exists and is not expired.
+   *
+   * @param {string} key - Cache key
+   * @returns {boolean} True if key exists and is valid
+   */
   has(key) {
     if (!this.cache.has(key)) return false;
     const entry = this.cache.get(key);
@@ -92,29 +146,68 @@ class LRUCache {
   }
 }
 
+// ══════════════════════════════════════════════════════════════
+// TTL CONFIGURATION
+// ══════════════════════════════════════════════════════════════
+
+// ---- FEATURE: Per-Endpoint TTL ----
+// NOTE: TTL values tuned per endpoint — stale data tolerance vs server load
 const TTL = {
-  home: 600000,
+  home: 600000,        // 10min — homepage changes infrequently
-  search: 300000,
+  search: 300000,      // 5min  — search results update moderate
-  info: 600000,
+  info: 600000,        // 10min — anime info is relatively stable
-  episodes: 300000,
+  episodes: 300000,    // 5min  — episode lists update weekly
-  servers: 600000,
+  servers: 600000,     // 10min — server URLs rarely change
-  stream: 180000,
+  stream: 180000,      // 3min  — stream URLs rotate frequently
-  spotlight: 600000,
+  spotlight: 600000,   // 10min — spotlight rotates daily
-  trending: 600000,
+  trending: 600000,    // 10min — trending updates hourly
-  schedule: 1800000,
+  schedule: 1800000,   // 30min — schedule changes daily
-  genres: 3600000,
+  genres: 3600000,     // 60min — genre list is static
-  suggestions: 300000,
+  suggestions: 300000, // 5min  — suggestions update moderate
-  default: 300000
+  default: 300000      // 5min  — safe default for unknown endpoints
 };
 
+// ══════════════════════════════════════════════════════════════
+// SINGLETON CACHE INSTANCE
+// ══════════════════════════════════════════════════════════════
+
+// NOTE: Singleton pattern — single cache instance shared across all requests
 const cache = new LRUCache(
   parseInt(process.env.CACHE_MAX_SIZE) || 200,
   parseInt(process.env.CACHE_DEFAULT_TTL) || 300000
 );
 
+// ══════════════════════════════════════════════════════════════
+// EXPORTED HELPERS
+// ══════════════════════════════════════════════════════════════
+
+// ---- FEATURE: Cache Get/Set/Clear ----
+/**
+ * Get a value from the global cache.
+ * @param {string} key - Cache key
+ * @returns {*} Cached value or undefined
+ */
 const getCache = (key) => cache.get(key);
+
+/**
+ * Set a value in the global cache with optional TTL.
+ * @param {string} key - Cache key
+ * @param {*} data - Value to store
+ * @param {number} [ttl] - Time-to-live in ms
+ */
 const setCache = (key, data, ttl) => cache.set(key, data, ttl);
+
+/**
+ * Clear all entries from the global cache.
+ * @returns {number} Number of entries cleared
+ */
 const clearCache = () => cache.clear();
+
+/**
+ * Get cache statistics (hits, misses, hit rate, size).
+ * @returns {Object} Cache stats
+ */
 const getCacheStats = () => cache.getStats();
 
 export { getCache, setCache, clearCache, getCacheStats, LRUCache, TTL };
+// ══════════════════════════════════════════════════════════════ END: cache.helper.js

src/helper/extractPages.helper.js

@@ -19,6 +19,11 @@
 import * as cheerio from "cheerio";
 import { fetchWithMirror } from "./mirror.helper.js";
 
+// ══════════════════════════════════════════════════════════════
+// PAGE EXTRACTOR
+// ══════════════════════════════════════════════════════════════
+
+// ---- FEATURE: Paginated Page Fetcher ----
 /**
  * Fetches HTML content from a URL with pagination and mirror fallback.
  * Automatically tries alternative domains if primary fails.
@@ -40,7 +45,7 @@ const extractPages = async (url, page = 1) => {
         const urlObj = new URL(url);
         path = urlObj.pathname + urlObj.search;
       } catch (e) {
-        // If URL parsing fails, try to extract path manually
+        // NOTE: If URL parsing fails, try regex fallback
         const match = url.match(/https?:\/\/[^/]+(\/.*)/);
         if (match) path = match[1];
       }
@@ -57,3 +62,4 @@ const extractPages = async (url, page = 1) => {
 };
 
 export { extractPages };
+// ══════════════════════════════════════════════════════════════ END: extractPages.helper.js

src/helper/mirror.helper.js

@@ -19,11 +19,13 @@
 import axios from "axios";
 import { headers } from "../configs/header.config.js";
 import { getCache, setCache } from "./cache.helper.js";
+import { fetchWithProxy, getProxyStatus } from "./proxy.helper.js";
 
 // ══════════════════════════════════════════════════════════════
 // MIRROR CONFIGURATION
 // ══════════════════════════════════════════════════════════════
 
+// ---- FEATURE: Mirror Domain Configuration ----
 // Default mirrors with names and priority
 const DEFAULT_MIRRORS = [
   { url: "https://anikototv.to", name: "Primary", priority: 1 },
@@ -63,6 +65,7 @@ let failedMirrors = new Set();
 // HELPER FUNCTIONS
 // ══════════════════════════════════════════════════════════════
 
+// ---- FEATURE: Mirror Health Check ----
 /**
  * Check if a mirror is accessible
  * @param {string} baseUrl - Mirror base URL
@@ -81,6 +84,7 @@ async function checkMirror(baseUrl) {
   }
 }
 
+// ---- FEATURE: Working Mirror Discovery ----
 /**
  * Get the best available mirror
  * @returns {Promise<string>} Working mirror base URL
@@ -116,6 +120,7 @@ async function getWorkingMirror() {
   return workingMirror;
 }
 
+// ---- FEATURE: Mirror Cache Reset ----
 /**
  * Reset mirror cache and failed state
  */
@@ -126,6 +131,7 @@ function resetMirrorCache() {
   console.log("[MIRROR] Cache reset");
 }
 
+// ---- FEATURE: URL Builder ----
 /**
  * Build URL with current mirror
  * @param {string} path - URL path
@@ -137,18 +143,20 @@ function buildUrl(path, baseUrl = workingMirror) {
   return `${base}${path}`;
 }
 
+// ---- FEATURE: Resilient Fetch with Mirror Fallback ----
 /**
- * Fetch with automatic mirror fallback
+ * Fetch with automatic mirror fallback and proxy support
  * @param {string} path - URL path to fetch
  * @param {object} options - Additional options
- * @returns {Promise<{data: string, mirror: string}>}
+ * @returns {Promise<{data: string, mirror: string, proxy: string}>}
  */
 async function fetchWithMirror(path, options = {}) {
   const { 
     timeout = 15000, 
     retries = 2,
     returnType = "text",
-    headers: customHeaders = {}
+    headers: customHeaders = {},
+    useProxy = true,
   } = options;
 
   // Merge default headers with custom headers
@@ -176,6 +184,7 @@ async function fetchWithMirror(path, options = {}) {
     mirrorsToTry.push(...ALL_MIRRORS.map(m => m.url));
   }
 
+  // Try direct requests first
   for (const mirror of mirrorsToTry) {
     const url = buildUrl(path, mirror);
     
@@ -188,6 +197,25 @@ async function fetchWithMirror(path, options = {}) {
         });
 
         if (response.status === 200) {
+          // Check for Cloudflare challenge
+          const data = response.data;
+          if (typeof data === "string" && (
+            data.includes("Just a moment...") ||
+            data.includes("Checking your browser") ||
+            data.includes("Enable JavaScript")
+          )) {
+            throw new Error("Cloudflare challenge detected");
+          }
+
+          // Check for upstream error
+          let parsed = data;
+          if (typeof data === "string") {
+            try { parsed = JSON.parse(data); } catch { /* not JSON */ }
+          }
+          if (parsed && typeof parsed === "object" && parsed.status && Number(parsed.status) >= 400) {
+            throw new Error(`Upstream error (${parsed.status}): ${parsed.result || "Bad request"}`);
+          }
+
           // Update working mirror
           if (mirror !== workingMirror) {
             workingMirror = mirror;
@@ -195,12 +223,22 @@ async function fetchWithMirror(path, options = {}) {
             console.log(`[MIRROR] Switched to: ${mirror}`);
           }
           return { 
-            data: returnType === "text" ? response.data : response.data,
+            data: response.data,
-            mirror 
+            mirror,
+            proxy: "direct"
           };
         }
+
+        // NOTE: 404 means endpoint doesn't exist, not mirror failure — don't retry
+        if (response.status === 404) {
+          throw new Error(`Endpoint not found: ${path}`);
+        }
       } catch (error) {
         lastError = error;
+        // NOTE: Don't retry on 404 — the endpoint simply doesn't exist on this mirror
+        if (error.message?.includes("Endpoint not found")) {
+          break;
+        }
         if (attempt < retries) {
           // Wait before retry
           await new Promise(r => setTimeout(r, 500 * (attempt + 1)));
@@ -208,14 +246,38 @@ async function fetchWithMirror(path, options = {}) {
       }
     }
 
-    // Mark mirror as failed after all retries
+    // NOTE: Only mark mirror as failed for connection errors, not endpoint 404s
-    failedMirrors.add(mirror);
+    if (!lastError.message?.includes("Endpoint not found")) {
-    console.log(`[MIRROR] Marked as failed: ${mirror}`);
+      failedMirrors.add(mirror);
+      console.log(`[MIRROR] Marked as failed: ${mirror}`);
+    }
+  }
+
+  // All direct requests failed — try proxy if configured
+  if (useProxy) {
+    const proxyStatus = getProxyStatus();
+    if (proxyStatus.anyEnabled) {
+      console.log(`[MIRROR] All mirrors failed, trying proxy...`);
+      try {
+        const proxyResult = await fetchWithProxy(
+          buildUrl(path, mirrorsToTry[0]),
+          { requestHeaders, timeout: timeout * 2, returnType }
+        );
+        return {
+          data: proxyResult.data,
+          mirror: mirrorsToTry[0],
+          proxy: proxyResult.proxy,
+        };
+      } catch (proxyError) {
+        console.log(`[MIRROR] Proxy also failed: ${proxyError.message}`);
+      }
+    }
   }
 
   throw new Error(`All mirrors failed. Last error: ${lastError?.message}`);
 }
 
+// ---- FEATURE: Mirror Status Reporter ----
 /**
  * Get mirror status for all domains
  * @returns {Promise<Array>}
@@ -247,5 +309,7 @@ export {
   resetMirrorCache, 
   buildUrl,
   getMirrorStatus,
+  getProxyStatus,
   ALL_MIRRORS
 };
+// ══════════════════════════════════════════════════════════════ END: mirror.helper.js

src/helper/pagination.helper.js

@@ -15,6 +15,11 @@
  * ======= • ======= • ======= • ======= • =======• =======
  */
 
+// ══════════════════════════════════════════════════════════════
+// PAGINATION METADATA
+// ══════════════════════════════════════════════════════════════
+
+// ---- FEATURE: Pagination Metadata Generator ----
 /**
  * Adds pagination metadata to a response object.
  *
@@ -40,7 +45,7 @@
 const addPaginationMeta = (data, currentPage, itemsPerPage = 30) => {
   const totalPages = data.totalPages || 1;
   const page = parseInt(currentPage) || 1;
-  const totalItems = data.data ? data.data.length * totalPages : 0;
+  const totalItems = data.data ? data.data.length + (totalPages - 1) * itemsPerPage : 0;
 
   return {
     ...data,

src/helper/parseListItem.helper.js

@@ -0,0 +1,111 @@
+/*
+ * ======= • ======= • ======= • ======= • =======• =======
+ * AniKotoAPI — parseListItem.helper.js
+ * Repository: https://github.com/Shineii86/AniKotoAPI
+ *
+ * @description
+ *   Shared helper for parsing anime list items from Cheerio DOM.
+ *   Eliminates code duplication across multiple extractors by
+ *   providing a unified parsing function for standard list items.
+ *
+ * @exports
+ *   parseListItems, parseListItem
+ *
+ * @author  Shinei Nouzen
+ * @license MIT
+ * ======= • ======= • ======= • ======= • =======• =======
+ */
+
+// ══════════════════════════════════════════════════════════════
+// SINGLE ITEM PARSER
+// ══════════════════════════════════════════════════════════════
+
+// ---- FEATURE: Parse a single anime list item from a Cheerio element ----
+/**
+ * Parses a single anime list item from a Cheerio element.
+ * Handles multiple CSS selector patterns for different page layouts
+ * by falling through comma-separated selectors until one matches.
+ *
+ * @param {CheerioAPI} $ - Cheerio instance with loaded HTML
+ * @param {CheerioElement} el - DOM element to parse
+ * @param {object} [options] - Parsing options
+ * @param {boolean} [options.includeAnimeId=false] - Include animeId field from data-tip attribute
+ * @param {boolean} [options.includeRating=true] - Include rating field from .rated span
+ * @returns {object|null} Parsed anime object or null if slug is missing (invalid item)
+ *
+ * @example
+ *   const item = parseListItem($, el, { includeAnimeId: true });
+ *   if (item) results.push(item);
+ */
+const parseListItem = ($, el, options = {}) => {
+  const { includeAnimeId = false, includeRating = true } = options;
+
+  // NOTE: slug is the primary key — skip items without a valid watch link
+  // NOTE: item may BE the <a> tag itself, so check both self and children
+  let slug = "";
+  if ($(el).is("a")) {
+    slug = $(el).attr("href")?.split("/watch/").pop() || "";
+  }
+  if (!slug) {
+    slug = $(el).find("a").attr("href")?.split("/watch/").pop() || "";
+  }
+  if (!slug) return null;
+
+  // NOTE: Multiple selectors handle different page layouts (#list-items vs .film_list-wrap vs .item)
+  const poster = $(el).find("img").attr("src") || "";
+  const title = $(el).find(".name").text().trim() || $(el).children(".info").find(".name").text().trim() || "";
+  const japaneseTitle = $(el).find(".name").attr("data-jp") || "";
+  const sub = parseInt($(el).find(".ep-status.sub span").text().trim()) || 0;
+  const dub = parseInt($(el).find(".ep-status.dub span").text().trim()) || 0;
+  const total = parseInt($(el).find(".ep-status.total span").text().trim()) || 0;
+  const type = $(el).find(".meta .dot:last-child, .fdi-item:nth-child(2)").text().trim() || "";
+
+  const item = { slug, poster, title, japaneseTitle, sub, dub, total, type };
+
+  // NOTE: animeId comes from data-tip on .ani.poster.tip — only present on some page layouts
+  if (includeAnimeId) {
+    item.animeId = $(el).find(".ani.poster.tip").attr("data-tip") || "";
+  }
+
+  // NOTE: Rating uses different selectors depending on whether it's a list page or detail page
+  if (includeRating) {
+    item.rating = $(el).find(".rated span, .rating, .fdi-item:nth-child(3)").text().trim() || "";
+  }
+
+  return item;
+};
+
+// ══════════════════════════════════════════════════════════════
+// MULTI-ITEM PARSER
+// ══════════════════════════════════════════════════════════════
+
+// ---- FEATURE: Parse multiple anime list items from a Cheerio instance ----
+/**
+ * Parses multiple anime list items from a Cheerio instance.
+ * Uses multiple CSS selectors to handle different page layouts,
+ * returning only items with valid slugs.
+ *
+ * @param {CheerioAPI} $ - Cheerio instance with loaded HTML
+ * @param {string} [selector] - CSS selector for list items (default: auto-detect all layouts)
+ * @param {object} [options] - Parsing options (passed to parseListItem)
+ * @returns {Array<object>} Array of parsed anime objects (empty if none found)
+ *
+ * @example
+ *   const $ = await extractPages("/most-popular");
+ *   const items = parseListItems($);
+ *   console.log(items.length); // Number of parsed items
+ */
+const parseListItems = ($, selector = "#list-items > .item, .film_list-wrap .flw-item, .film-detail, .item", options = {}) => {
+  const results = [];
+
+  $(selector).each((i, el) => {
+    const item = parseListItem($, el, options);
+    if (item) results.push(item);
+  });
+
+  return results;
+};
+
+export { parseListItems, parseListItem };
+
+// ══════════════════════════════════════════════════════════════ END: parseListItem.helper.js

src/helper/proxy.helper.js

@@ -0,0 +1,211 @@
+/*
+ * ======= • ======= • ======= • ======= • =======• =======
+ * AniKotoAPI — proxy.helper.js
+ * Repository: https://github.com/Shineii86/AniKotoAPI
+ *
+ * @description
+ *   Proxy helper for bypassing Cloudflare bot protection.
+ *   Supports ScraperAPI (premium) and FlareSolverr (self-hosted).
+ *   Automatically routes requests through proxy when direct requests fail.
+ *
+ * @exports
+ *   fetchWithProxy, getProxyStatus
+ *
+ * @author  Shinei Nouzen
+ * @license MIT
+ * ======= • ======= • ======= • ======= • =======• =======
+ */
+
+import axios from "axios";
+import { headers } from "../configs/header.config.js";
+
+// ══════════════════════════════════════════════════════════════
+// PROXY CONFIGURATION
+// ══════════════════════════════════════════════════════════════
+
+const SCRAPER_API_KEY = process.env.SCRAPER_API_KEY;
+const FLARESOLVERR_URL = process.env.FLARESOLVERR_URL;
+
+// ScraperAPI endpoint
+const SCRAPER_API_URL = "http://api.scraperapi.com";
+
+// ══════════════════════════════════════════════════════════════
+// PROXY STATUS
+// ══════════════════════════════════════════════════════════════
+
+// ---- FEATURE: Get proxy configuration status ----
+/**
+ * Returns current proxy configuration status
+ * @returns {Object} Proxy status with enabled/disabled and available methods
+ */
+function getProxyStatus() {
+  return {
+    scraperApi: {
+      enabled: !!SCRAPER_API_KEY,
+      configured: !!SCRAPER_API_KEY,
+    },
+    flaresolverr: {
+      enabled: !!FLARESOLVERR_URL,
+      configured: !!FLARESOLVERR_URL,
+      url: FLARESOLVERR_URL || null,
+    },
+    anyEnabled: !!SCRAPER_API_KEY || !!FLARESOLVERR_URL,
+  };
+}
+
+// ══════════════════════════════════════════════════════════════
+// SCRAPERAPI
+// ══════════════════════════════════════════════════════════════
+
+// ---- FEATURE: ScraperAPI proxy fetch ----
+/**
+ * Fetch a URL through ScraperAPI (premium residential IPs)
+ * @param {string} url - Target URL
+ * @param {Object} options - Request options
+ * @returns {Promise<{data: string, proxy: string}>}
+ */
+async function fetchViaScraperApi(url, options = {}) {
+  const { timeout = 30000, returnType = "text" } = options;
+
+  const params = {
+    api_key: SCRAPER_API_KEY,
+    url: url,
+    render: "false",
+  };
+
+  const response = await axios.get(SCRAPER_API_URL, {
+    params,
+    timeout,
+    responseType: returnType === "text" ? "text" : "json",
+  });
+
+  return {
+    data: response.data,
+    proxy: "scraperapi",
+  };
+}
+
+// ══════════════════════════════════════════════════════════════
+// FLARESOLVERR
+// ══════════════════════════════════════════════════════════════
+
+// ---- FEATURE: FlareSolverr proxy fetch ----
+/**
+ * Fetch a URL through FlareSolverr (self-hosted browser)
+ * @param {string} url - Target URL
+ * @param {Object} options - Request options
+ * @returns {Promise<{data: string, proxy: string}>}
+ */
+async function fetchViaFlareSolverr(url, options = {}) {
+  const { timeout = 60000, returnType = "text" } = options;
+
+  const response = await axios.post(
+    `${FLARESOLVERR_URL}/v1`,
+    {
+      cmd: "request.get",
+      url: url,
+      maxTimeout: timeout,
+    },
+    {
+      headers: { "Content-Type": "application/json" },
+      timeout: timeout + 10000,
+    }
+  );
+
+  if (response.data.status === "ok") {
+    return {
+      data: response.data.solution.response,
+      proxy: "flaresolverr",
+    };
+  }
+
+  throw new Error(`FlareSolverr error: ${response.data.message}`);
+}
+
+// ══════════════════════════════════════════════════════════════
+// UNIFIED PROXY FETCH
+// ══════════════════════════════════════════════════════════════
+
+// ---- FEATURE: Fetch with automatic proxy fallback ----
+/**
+ * Fetch a URL with automatic proxy fallback when direct requests fail.
+ * Tries direct first, then falls back to configured proxies.
+ *
+ * @param {string} url - Target URL
+ * @param {Object} options - Request options
+ * @param {Object} options.requestHeaders - Custom headers for direct request
+ * @param {number} options.timeout - Request timeout (default: 15000ms)
+ * @param {string} options.returnType - Response type: "text" or "json"
+ * @returns {Promise<{data: string, proxy: string}>}
+ */
+async function fetchWithProxy(url, options = {}) {
+  const {
+    requestHeaders = headers,
+    timeout = 15000,
+    returnType = "text",
+  } = options;
+
+  // 1. Try direct request first
+  try {
+    const response = await axios.get(url, {
+      headers: requestHeaders,
+      timeout,
+      responseType: returnType === "text" ? "text" : "json",
+    });
+
+    if (response.status === 200) {
+      // Check if response is a valid result (not a Cloudflare block)
+      const data = response.data;
+      if (typeof data === "string" && data.includes("Just a moment...")) {
+        throw new Error("Cloudflare challenge detected");
+      }
+      if (typeof data === "string" && data.includes("Checking your browser")) {
+        throw new Error("Cloudflare challenge detected");
+      }
+
+      return { data, proxy: "direct" };
+    }
+  } catch (error) {
+    // If ScraperAPI or FlareSolverr configured, try them
+    if (!SCRAPER_API_KEY && !FLARESOLVERR_URL) {
+      throw error;
+    }
+  }
+
+  // 2. Try ScraperAPI if configured
+  if (SCRAPER_API_KEY) {
+    try {
+      console.log(`[PROXY] Trying ScraperAPI for: ${url}`);
+      return await fetchViaScraperApi(url, { timeout, returnType });
+    } catch (error) {
+      console.log(`[PROXY] ScraperAPI failed: ${error.message}`);
+    }
+  }
+
+  // 3. Try FlareSolverr if configured
+  if (FLARESOLVERR_URL) {
+    try {
+      console.log(`[PROXY] Trying FlareSolverr for: ${url}`);
+      return await fetchViaFlareSolverr(url, { timeout, returnType });
+    } catch (error) {
+      console.log(`[PROXY] FlareSolverr failed: ${error.message}`);
+    }
+  }
+
+  // 4. All methods failed — try direct one more time with higher timeout
+  try {
+    const response = await axios.get(url, {
+      headers: requestHeaders,
+      timeout: timeout * 2,
+      responseType: returnType === "text" ? "text" : "json",
+    });
+
+    return { data: response.data, proxy: "direct-retry" };
+  } catch (error) {
+    throw new Error(`All fetch methods failed for ${url}: ${error.message}`);
+  }
+}
+
+export { fetchWithProxy, getProxyStatus };
+
+// ══════════════════════════════════════════════════════════════ END: proxy.helper.js

src/helper/streamProxy.helper.js

@@ -0,0 +1,142 @@
+/*
+ * ======= • ======= • ======= • ======= • =======• =======
+ * AniKotoAPI — streamProxy.helper.js
+ * Repository: https://github.com/Shineii86
+ *
+ * @description
+ *   Request guard for the M3U8/TS streaming proxies. Validates that a
+ *   caller-supplied URL points at a known streaming CDN before the server
+ *   fetches it, so the proxy endpoints cannot be used to reach internal
+ *   services (SSRF).
+ *
+ * @exports
+ *   assertProxyableUrl
+ *   streamRefererHeaders
+ *
+ * @author  Shinei Nouzen
+ * @license MIT
+ * ======= • ======= • ======= • ======= • =======• =======
+ */
+
+// ══════════════════════════════════════════════════════════════
+// PROXY ALLOWLIST
+// ══════════════════════════════════════════════════════════════
+
+// Registrable domains the proxies may fetch from. Subdomains are covered,
+// so the apex is listed once and rotating hosts (cdn1., s2., …) still match.
+// NOTE: megaplay-1.buzz was removed — it no longer resolves.
+const DEFAULT_PROXY_DOMAINS = [
+  // Embed players
+  "megaplay.buzz",
+  "vidtube.site",
+  "vid-tube.site",
+  "vidplay.site",
+  // Stream / subtitle CDNs
+  "anipixcdn.co",
+  "norami.top",
+  "kryntal.top",
+  "akirax.buzz",
+];
+
+// Parse the allowlist from env or use defaults
+function parseProxyDomains() {
+  const envDomains = process.env.STREAM_PROXY_DOMAINS;
+  if (!envDomains) return DEFAULT_PROXY_DOMAINS;
+
+  return envDomains
+    .split(",")
+    .map(d => d.trim().toLowerCase())
+    .filter(Boolean);
+}
+
+const PROXY_DOMAINS = parseProxyDomains();
+
+// Referer the stream CDNs expect. They answer 403 to the site origin
+// (anikototv.to) and to no Referer at all — only the player origin passes.
+const STREAM_REFERER = process.env.STREAM_PROXY_REFERER || "https://megaplay.buzz/";
+
+// ══════════════════════════════════════════════════════════════
+// PRIVATE ADDRESS DETECTION
+// ══════════════════════════════════════════════════════════════
+
+// NOTE: Blocks IP literals pointing at the host's own network. This is a
+// second layer, not the primary control — the allowlist is. A hostname that
+// passes the allowlist but resolves to a private address (DNS rebinding) is
+// not caught here, since axios re-resolves the name when it connects.
+const isPrivateAddress = (hostname) => {
+  const host = hostname.replace(/^\[|\]$/g, "").toLowerCase();
+
+  // IPv6 loopback, link-local (fe80::/10) and unique-local (fc00::/7)
+  if (host === "::1" || host === "::") return true;
+  if (/^f[cd][0-9a-f]{2}:/.test(host)) return true;
+  if (/^fe[89ab][0-9a-f]:/.test(host)) return true;
+
+  // IPv4-mapped IPv6 — unwrap and fall through to the IPv4 checks
+  const mapped = host.match(/^::ffff:(\d+\.\d+\.\d+\.\d+)$/)?.[1];
+  const target = mapped || host;
+
+  const octets = target.match(/^(\d{1,3})\.(\d{1,3})\.(\d{1,3})\.(\d{1,3})$/);
+  if (!octets) return false;
+
+  const [a, b] = octets.slice(1).map(Number);
+  if (a === 0 || a === 10 || a === 127) return true;      // this-network, private, loopback
+  if (a === 169 && b === 254) return true;                 // link-local / cloud metadata
+  if (a === 172 && b >= 16 && b <= 31) return true;         // private
+  if (a === 192 && b === 168) return true;                  // private
+  if (a === 100 && b >= 64 && b <= 127) return true;        // CGNAT
+  return false;
+};
+
+// ══════════════════════════════════════════════════════════════
+// URL GUARD
+// ══════════════════════════════════════════════════════════════
+
+// ---- FEATURE: Proxy URL Validation ----
+/**
+ * Validates a caller-supplied proxy target.
+ *
+ * @param {string} rawUrl - The URL from the request query
+ * @returns {{ ok: true, url: URL } | { ok: false, status: number, message: string }}
+ *
+ * @example
+ *   const check = assertProxyableUrl(req.query.url);
+ *   if (!check.ok) return res.status(check.status).json({ success: false, message: check.message });
+ */
+const assertProxyableUrl = (rawUrl) => {
+  let url;
+  try {
+    url = new URL(rawUrl);
+  } catch {
+    return { ok: false, status: 400, message: "Malformed URL" };
+  }
+
+  if (url.protocol !== "https:" && url.protocol !== "http:") {
+    return { ok: false, status: 400, message: "Only http and https URLs can be proxied" };
+  }
+
+  const hostname = url.hostname.toLowerCase();
+
+  if (isPrivateAddress(hostname)) {
+    return { ok: false, status: 403, message: "Domain not allowed for proxy" };
+  }
+
+  const isAllowed = PROXY_DOMAINS.some(d => hostname === d || hostname.endsWith(`.${d}`));
+  if (!isAllowed) {
+    return { ok: false, status: 403, message: "Domain not allowed for proxy" };
+  }
+
+  return { ok: true, url };
+};
+
+// ---- FEATURE: CDN Request Headers ----
+/**
+ * Headers the stream CDNs require on a proxied fetch.
+ *
+ * @returns {object} Referer/Origin pair for the configured player origin
+ */
+const streamRefererHeaders = () => ({
+  "Referer": STREAM_REFERER,
+  "Origin": new URL(STREAM_REFERER).origin,
+});
+
+export { assertProxyableUrl, streamRefererHeaders };

src/middleware/creatorInfo.js

@@ -22,6 +22,7 @@
 // CREATOR METADATA
 // ══════════════════════════════════════════════════════════════
 
+// ---- FEATURE: Creator Attribution Object ----
 // NOTE: Injected into every response unless `data.creator` already exists
 const creatorInfo = {
   creator: "Shinei Nouzen",
@@ -34,6 +35,7 @@ const creatorInfo = {
 // MIDDLEWARE
 // ══════════════════════════════════════════════════════════════
 
+// ---- FEATURE: Response Creator Injection Middleware ----
 /**
  * Express middleware that enriches every JSON response with
  * creator attribution and an IN-formatted timestamp.
@@ -56,14 +58,21 @@ const addCreatorInfo = (req, res, next) => {
   res.json = (data) => {
     // NOTE: Only inject if data is a plain object and missing creator field
     if (typeof data === "object" && data !== null && !data.creator) {
+      // NOTE: Preserve existing 'message' field (e.g., error messages) — only add creator metadata
+      const preservedMessage = data.message;
       data = {
         ...data,
         creator: creatorInfo.creator,
         github: creatorInfo.github,
         telegram: creatorInfo.telegram,
-        message: creatorInfo.message,
-        timestamp: new Date().toLocaleString("en-IN", { timeZone: "Asia/Kolkata", hour12: true }),
       };
+      // NOTE: Restore original message if it existed (error handler sets this)
+      if (preservedMessage) {
+        data.message = preservedMessage;
+      } else {
+        data.message = creatorInfo.message;
+      }
+      data.timestamp = new Date().toLocaleString("en-IN", { timeZone: "Asia/Kolkata", hour12: true });
     }
     return originalJson(data);
   };

src/routes/apiRoutes.js

@@ -26,6 +26,7 @@ import { getSearchResults, getSearchSuggestions } from "../controllers/search.co
 import { getEpisodeList } from "../controllers/episodeList.controller.js";
 import { getEpisodeListAjax } from "../controllers/episodeListAjax.controller.js";
 import { getStreamInfo, getServerList, getMapperServers } from "../controllers/streamInfo.controller.js";
+import { getResolvedStream, getStreamQualities } from "../controllers/streamResolver.controller.js";
 import { getSchedule } from "../controllers/schedule.controller.js";
 import { getSpotlight } from "../controllers/spotlight.controller.js";
 import { getTrending } from "../controllers/trending.controller.js";
@@ -42,8 +43,14 @@ import { getTrendingSidebar } from "../controllers/trendingSidebar.controller.js
 import { getSeasons } from "../controllers/seasons.controller.js";
 import { getWatchOrder } from "../controllers/watchOrder.controller.js";
 import { getDownloadLinks } from "../controllers/download.controller.js";
+import { getUpcomingAnime } from "../controllers/upcomingAnime.controller.js";
+import { getTopAnimeRankings } from "../controllers/topAnimeRankings.controller.js";
+import { getRecentlyUpdatedTabs } from "../controllers/recentlyUpdatedTabs.controller.js";
+import { getCompletedAnime } from "../controllers/completedAnime.controller.js";
 import { categoryRoutes } from "./category.route.js";
-import { getMirrorStatus, resetMirrorCache } from "../helper/mirror.helper.js";
+import { getMirrorStatus, resetMirrorCache, getProxyStatus } from "../helper/mirror.helper.js";
+import { getCacheStats } from "../helper/cache.helper.js";
+import { assertProxyableUrl, streamRefererHeaders } from "../helper/streamProxy.helper.js";
 
 // ══════════════════════════════════════════════════════════════
 // ROUTE REGISTRATION
@@ -204,6 +211,111 @@ app.use((req, res, next) => {
     }
   });
 
+  // ---- FEATURE: Resolve actual stream URL (m3u8/mp4) from link ID ----
+  app.get("/api/stream/resolve", async (req, res, next) => {
+    try {
+      await getResolvedStream(req, res, next);
+    } catch (error) {
+      jsonError(res, error.message);
+    }
+  });
+
+  // ---- FEATURE: Available quality options for a stream URL ----
+  app.get("/api/stream/qualities", async (req, res, next) => {
+    try {
+      await getStreamQualities(req, res, next);
+    } catch (error) {
+      jsonError(res, error.message);
+    }
+  });
+
+  // ---- FEATURE: M3U8 proxy — fetch and serve M3U8 playlists through API ----
+  app.get("/api/stream/proxy", async (req, res, next) => {
+    try {
+      const { url } = req.query;
+      if (!url) {
+        return res.status(400).json({ success: false, message: "M3U8 URL is required" });
+      }
+      // NOTE: Validate URL is from known streaming domains.
+      // WARNING: Do not add an "or the path looks like a playlist" escape hatch —
+      // the previous version had one, which let any host through and turned this
+      // endpoint into an open proxy onto the server's own network.
+      const check = assertProxyableUrl(url);
+      if (!check.ok) {
+        return res.status(check.status).json({ success: false, message: check.message });
+      }
+
+      const axios = (await import("axios")).default;
+      const { headers: defaultHeaders } = await import("../configs/header.config.js");
+
+      const response = await axios.get(url, {
+        headers: {
+          ...defaultHeaders,
+          ...streamRefererHeaders(),
+        },
+        timeout: 15000,
+        responseType: "text",
+      });
+
+      // NOTE: Rewrite relative URLs in M3U8 to proxy URLs
+      let content = typeof response.data === "string" ? response.data : String(response.data);
+      const baseUrl = url.substring(0, url.lastIndexOf("/") + 1);
+
+      content = content.replace(/(^(?!#).+\.m3u8.*$)/gm, (match) => {
+        const absoluteUrl = match.startsWith("http") ? match : new URL(match, baseUrl).href;
+        return `/api/stream/proxy?url=${encodeURIComponent(absoluteUrl)}`;
+      });
+
+      content = content.replace(/(^(?!#).+\.ts.*$)/gm, (match) => {
+        const absoluteUrl = match.startsWith("http") ? match : new URL(match, baseUrl).href;
+        return `/api/stream/ts-proxy?url=${encodeURIComponent(absoluteUrl)}`;
+      });
+
+      res.setHeader("Content-Type", "application/vnd.apple.mpegurl");
+      res.setHeader("Access-Control-Allow-Origin", "*");
+      res.setHeader("Cache-Control", "public, max-age=30");
+      res.send(content);
+    } catch (error) {
+      jsonError(res, error.message);
+    }
+  });
+
+  // ---- FEATURE: TS segment proxy for video segments ----
+  app.get("/api/stream/ts-proxy", async (req, res, next) => {
+    try {
+      const { url } = req.query;
+      if (!url) {
+        return res.status(400).json({ success: false, message: "TS URL is required" });
+      }
+
+      // NOTE: Segment URLs come from the caller too, so they need the same guard
+      // the playlist proxy uses — this endpoint previously had none.
+      const check = assertProxyableUrl(url);
+      if (!check.ok) {
+        return res.status(check.status).json({ success: false, message: check.message });
+      }
+
+      const axios = (await import("axios")).default;
+      const { headers: defaultHeaders } = await import("../configs/header.config.js");
+
+      const response = await axios.get(url, {
+        headers: {
+          ...defaultHeaders,
+          ...streamRefererHeaders(),
+        },
+        timeout: 30000,
+        responseType: "arraybuffer",
+      });
+
+      res.setHeader("Content-Type", "video/mp2t");
+      res.setHeader("Access-Control-Allow-Origin", "*");
+      res.setHeader("Cache-Control", "public, max-age=3600");
+      res.send(Buffer.from(response.data));
+    } catch (error) {
+      jsonError(res, error.message);
+    }
+  });
+
   // ══════════════════════════════════════════════════════════════
   // SCHEDULE
   // ══════════════════════════════════════════════════════════════
@@ -328,6 +440,58 @@ app.use((req, res, next) => {
     }
   });
 
+  // ══════════════════════════════════════════════════════════════
+  // UPCOMING ANIME
+  // ══════════════════════════════════════════════════════════════
+
+  // ---- FEATURE: Upcoming anime releases ----
+  app.get("/api/upcoming", async (req, res, next) => {
+    try {
+      await getUpcomingAnime(req, res, next);
+    } catch (error) {
+      jsonError(res, error.message);
+    }
+  });
+
+  // ══════════════════════════════════════════════════════════════
+  // TOP ANIME RANKINGS
+  // ══════════════════════════════════════════════════════════════
+
+  // ---- FEATURE: Top anime rankings with sort (top/newest) ----
+  app.get("/api/top-rankings", async (req, res, next) => {
+    try {
+      await getTopAnimeRankings(req, res, next);
+    } catch (error) {
+      jsonError(res, error.message);
+    }
+  });
+
+  // ══════════════════════════════════════════════════════════════
+  // RECENTLY UPDATED (TAB FILTERED)
+  // ══════════════════════════════════════════════════════════════
+
+  // ---- FEATURE: Recently updated anime with tab filter (all/dub/sub) ----
+  app.get("/api/recently-updated", async (req, res, next) => {
+    try {
+      await getRecentlyUpdatedTabs(req, res, next);
+    } catch (error) {
+      jsonError(res, error.message);
+    }
+  });
+
+  // ══════════════════════════════════════════════════════════════
+  // COMPLETED ANIME
+  // ══════════════════════════════════════════════════════════════
+
+  // ---- FEATURE: Completed anime series ----
+  app.get("/api/completed", async (req, res, next) => {
+    try {
+      await getCompletedAnime(req, res, next);
+    } catch (error) {
+      jsonError(res, error.message);
+    }
+  });
+
   // ══════════════════════════════════════════════════════════════
   // SEASONS & WATCH ORDER
   // ══════════════════════════════════════════════════════════════
@@ -418,7 +582,7 @@ app.get("/api/stats", (req, res) => {
         ttl: "5 minutes",
         description: "Map-based cache with TTL expiration",
       },
-      endpoints: 30,
+      endpoints: 38,
       timestamp: new Date().toISOString(),
     },
   });
@@ -434,15 +598,28 @@ app.get("/api/mirrors", async (req, res) => {
   }
 });
 
+// ---- FEATURE: Cache statistics ----
+app.get("/api/cache/stats", (req, res) => {
+  const stats = getCacheStats();
+  res.json({ success: true, results: stats });
+});
+
 // ---- FEATURE: Reset mirror cache ----
 app.post("/api/mirrors/reset", (req, res) => {
   resetMirrorCache();
   res.json({ success: true, message: "Mirror cache reset" });
 });
 
+// ---- FEATURE: Proxy status (ScraperAPI / FlareSolverr) ----
+app.get("/api/proxy/status", (req, res) => {
+  const status = getProxyStatus();
+  res.json({ success: true, results: status });
+});
+
 // ---- FEATURE: OpenAPI specification ----
 app.get("/api/openapi", (req, res) => {
   res.json({
+    success: true,
     openapi: "3.0.3",
     info: {
       title: "AniKotoAPI",
@@ -481,6 +658,10 @@ app.get("/api/openapi", (req, res) => {
       "/mirrors/reset": { post: { summary: "Reset mirror cache", tags: ["System"] } },
       "/openapi": { get: { summary: "OpenAPI spec", tags: ["System"] } },
       "/watch": { get: { summary: "Watch page data", tags: ["Streaming"] } },
+      "/stream/resolve": { get: { summary: "Resolve actual stream URL (m3u8/mp4)", tags: ["Streaming"] } },
+      "/stream/qualities": { get: { summary: "Available quality options for M3U8 stream", tags: ["Streaming"] } },
+      "/stream/proxy": { get: { summary: "M3U8 playlist proxy (rewrites URLs)", tags: ["Streaming"] } },
+      "/stream/ts-proxy": { get: { summary: "TS video segment proxy", tags: ["Streaming"] } },
       "/search/suggest": { get: { summary: "Search suggestions", tags: ["Search"] } },
       "/episodes-ajax/{id}": { get: { summary: "AJAX episode list", tags: ["Episodes"] } },
       "/mapper-servers": { get: { summary: "Mapper servers", tags: ["Streaming"] } },
@@ -491,6 +672,11 @@ app.get("/api/openapi", (req, res) => {
       "/watch-order/{id}": { get: { summary: "Watch order", tags: ["Anime"] } },
       "/az-list/{letter}": { get: { summary: "A-Z listing", tags: ["Discovery"] } },
       "/suggestions": { get: { summary: "Anime suggestions", tags: ["Search"] } },
+      "/upcoming": { get: { summary: "Upcoming anime", tags: ["Discovery"] } },
+      "/top-rankings": { get: { summary: "Top anime rankings (day/week/month)", tags: ["Rankings"] } },
+      "/recently-updated": { get: { summary: "Recently updated (all/dub/sub tabs)", tags: ["Releases"] } },
+      "/completed": { get: { summary: "Completed anime series", tags: ["Rankings"] } },
+      "/proxy/status": { get: { summary: "Proxy status (ScraperAPI / FlareSolverr)", tags: ["System"] } },
     },
     tags: [
       { name: "Home", description: "Homepage data" },

test.js

@@ -13,17 +13,36 @@
  * ======= • ======= • ======= • ======= • =======• =======
  */
 
-const BASE = process.env.API_URL || "https://anikototvapi.vercel.app/api";
+const LIVE_API = "https://anikototvapi.vercel.app/api";
+const LOCAL_API = "http://localhost:4444/api";
+
+let BASE = process.env.API_URL || LIVE_API;
+
+async function detectBase() {
+  if (process.env.API_URL) return;
+  try {
+    const res = await fetch(`${LOCAL_API}/health`, { signal: AbortSignal.timeout(2000) });
+    if (res.ok) {
+      BASE = LOCAL_API;
+      console.log("📡 Detected local server — using localhost:4444\n");
+      return;
+    }
+  } catch (_) {}
+  BASE = LIVE_API;
+  console.log("📡 No local server found — using live API\n");
+}
 
 const tests = [
   // Core endpoints
   { name: "Home", url: "/", check: (d) => d.results?.spotlights || d.results?.trending },
   { name: "Search", url: "/search?keyword=naruto", check: (d) => d.results?.data },
-  { name: "Info", url: "/info?id=road-of-naruto-ggjw8", check: (d) => d.results?.title },
+  { name: "Info", url: "/info?id=one-piece-odmau", check: (d) => d.results?.title },
-  { name: "Episodes", url: "/episodes/road-of-naruto-ggjw8", check: (d) => d.results?.episodes },
+  { name: "Episodes", url: "/episodes/one-piece-odmau", check: (d) => d.results?.episodes },
-  { name: "Servers", url: "/servers?ids=1", check: (d) => d.results },
+  { name: "Servers", url: "/servers?ids=1", check: (d) => d.results, optional: true },
-  { name: "Watch", url: "/watch?slug=road-of-naruto-ggjw8&ep=1", check: (d) => d.results?.servers || d.results?.episodeNumber },
+  // Streaming
-  
+  { name: "Stream", url: "/watch?slug=one-piece-odmau&ep=1", check: (d) => d.results?.servers || d.results?.episodeNumber },
+
+
   // Discovery endpoints
   { name: "Suggestions", url: "/suggestions?keyword=naruto", check: (d) => d.results },
   { name: "Spotlight", url: "/spotlight", check: (d) => d.results },
@@ -31,27 +50,38 @@ const tests = [
   { name: "Top 10", url: "/top-ten", check: (d) => d.results },
   { name: "Random", url: "/random", check: (d) => d.results },
   { name: "Most Popular", url: "/most-popular", check: (d) => d.results },
+  { name: "Upcoming", url: "/upcoming", check: (d) => Array.isArray(d.results), optional: true },
+  { name: "Top Rankings", url: "/top-rankings", check: (d) => Array.isArray(d.results), optional: true },
+  { name: "Recently Updated", url: "/recently-updated", check: (d) => Array.isArray(d.results), optional: true },
+  { name: "Completed", url: "/completed", check: (d) => Array.isArray(d.results), optional: true },
+
+  // Release lists
   { name: "New Release", url: "/new-release", check: (d) => d.results },
   { name: "Newly Added", url: "/newly-added", check: (d) => d.results },
-  { name: "Latest Updated", url: "/latest-updated", check: (d) => d.results, optional: true },
+  { name: "Latest Updated", url: "/latest-updated", check: (d) => d.results },
-  
+
   // Category endpoints
   { name: "Genre", url: "/genre/action", check: (d) => d.results },
   { name: "Type", url: "/type/tv", check: (d) => d.results },
+  { name: "Status", url: "/status/airing", check: (d) => d.results, optional: true },
   { name: "AZ List", url: "/az-list/a", check: (d) => d.results },
-  { name: "Filter", url: "/filter?keyword=&genre[]=1", check: (d) => d.results },
+  { name: "Filter", url: "/filter?keyword=naruto", check: (d) => d.results },
-  
+
-  // Utility endpoints
-  { name: "Health", url: "/health", check: (d) => d.status || d.results?.status },
-  { name: "Stats", url: "/stats", check: (d) => d.results },
-  
   // Search variants
   { name: "Search Suggest", url: "/search/suggest?keyword=naruto", check: (d) => d.results },
-  { name: "Episodes Ajax", url: "/episodes-ajax/7174", check: (d) => d.results },
   { name: "Trending Sidebar", url: "/trending-sidebar", check: (d) => d.results },
-  { name: "Mapper Servers", url: "/mapper-servers?malId=21&slug=one-piece-100&timestamp=1234567890", check: (d) => d.results },
+
-  { name: "Seasons", url: "/seasons/7174", check: (d) => d.results?.seasons || d.results?.totalSeasons, optional: true },
+  // Anime detail
-  { name: "Watch Order", url: "/watch-order/7174", check: (d) => d.results?.related || d.results?.totalRelated, optional: true },
+  { name: "Seasons", url: "/seasons/one-piece-odmau", check: (d) => d.results?.seasons || d.results?.totalSeasons, optional: true },
+  { name: "Watch Order", url: "/watch-order/one-piece-odmau", check: (d) => d.results?.related || d.results?.totalRelated, optional: true },
+  { name: "Download", url: "/download?slug=one-piece-odmau&ep=1", check: (d) => d.results, optional: true },
+
+  // Utility endpoints
+  { name: "Health", url: "/health", check: (d) => d.results?.status === "healthy" },
+  { name: "Stats", url: "/stats", check: (d) => d.results?.endpoints },
+  { name: "Cache Stats", url: "/cache/stats", check: (d) => d.results?.hits !== undefined },
+  { name: "Mirrors", url: "/mirrors", check: (d) => Array.isArray(d.results) },
+  { name: "OpenAPI", url: "/openapi", check: (d) => d.openapi === "3.0.3", optional: true },
 ];
 
 let passed = 0;
@@ -128,11 +158,45 @@ async function runTest(test) {
   }
 }
 
+async function fetchJson(url) {
+  const res = await fetch(`${BASE}${url}`);
+  return res.ok ? res.json() : null;
+}
+
 async function runAll() {
-  console.log(`\n🧪 Running ${tests.length} tests...\n`);
+  await detectBase();
+  console.log(`🧪 Running ${tests.length} tests...\n`);
   console.log(`📡 API: ${BASE}\n`);
-  
+
-  // Run tests sequentially to avoid rate limiting
+  // ---- FEATURE: Resolve dynamic test dependencies ----
+  // NOTE: Fetch info to get numeric animeId for episodes-ajax
+  let animeId = "1642";
+  let linkId = "";
+  try {
+    const info = await fetchJson("/info?id=one-piece-odmau");
+    if (info?.success && info.results?.animeId) {
+      animeId = info.results.animeId;
+    }
+    // NOTE: Get a valid link_id via episodes → servers flow
+    const epData = await fetchJson("/episodes/one-piece-odmau");
+    if (epData?.success && epData.results?.episodes?.length > 0) {
+      const sid = epData.results.episodes[0].server_ids;
+      if (sid) {
+        const srvData = await fetchJson(`/servers?ids=${encodeURIComponent(sid)}`);
+        if (srvData?.success && srvData.results?.length > 0) {
+          linkId = srvData.results[0].link_id || "";
+        }
+      }
+    }
+  } catch (_) { /* use defaults */ }
+
+  // ---- FEATURE: Inject dynamic tests with live data ----
+  tests.push({ name: "Episodes Ajax", url: `/episodes-ajax/${animeId}`, check: (d) => d.results?.episodes || d.results?.totalEpisodes });
+  if (linkId) {
+    tests.push({ name: "Stream Resolve", url: `/stream/resolve?id=${encodeURIComponent(linkId)}&slug=one-piece-odmau`, check: (d) => d.results?.url, optional: true });
+  }
+
+  // ---- FEATURE: Run all tests sequentially ----
   for (const test of tests) {
     await runTest(test);
   }