[3.3] — Beta

3.3 is the largest AutoBangumi release in a while: a fully async backend architecture, aria2 promoted to a first-class download backend, movie/OVA/special support, per-bangumi release preferences, a hardened security stack, and a WebUI that updates over SSE instead of polling. REST API behavior is backward-compatible; existing databases upgrade automatically (migrations v9–v14).

3.3.4-beta.1 — Multi-user authentication safety preview

This beta intentionally ships the authentication refactor before the next
stable patch. It adds first-run administrator bootstrap, multi-user session
management, and hashed API/MCP tokens whose plaintext is shown only once.
Password changes, account disablement, logout, and session rotation revoke the
right sessions without exposing bearer credentials to browser storage or API
responses. The token reveal is also scrubbed on close, route deactivation, and
late-response races, including the mobile bottom-sheet path.

It also contains the latest issue fixes: TMDB queries honor the configured
locale for TV and movie results (#1075), versioned releases such as 06v2 are
not mistaken for offset overflows (#1072), movie words are preserved in movie
titles, and release classification no longer derives versions from PR metadata
(#1065).

The refactor is guarded by isolated runtime, Chromium, WebKit, and real
qBittorrent E2E lanes. They exercise fresh setup, cookie-only refresh, session
revocation, one-time token handling, restart persistence, Windows paths, TMDB
language changes, offset review, mobile editing, and the complete RSS → real
qB download → hash verification → rename → delete flow.

Highlights

• In-app updates (new in beta.2) — check, apply, and roll back updates from the Log page. Bundles are sha256-checked and ed25519-signed (unsigned releases are rejected, and the signature is re-verified at every boot), the database is snapshotted before promotion, and dependencies sync at apply time as a non-root user. Requires the container to run with restart: unless-stopped so it can restart itself.
• Multi-provider LLM parser (new in beta.2) — OpenAI-compatible endpoints (DeepSeek, Ollama, LM Studio, OpenRouter, …), Anthropic Claude, and Google Gemini, with a selectable mode: fallback (regex first, LLM rescues failures — default) or primary (LLM first). Calls get timeouts, caching, a concurrency cap, and a failure breaker, and route through the app proxy.
• aria2 is now a first-class backend — real add/query/rename/manage support with honest duplicate detection (reconciled against aria2's live state), collision-safe filesystem renames, and offset resolution via a persisted gid↔bangumi mapping. Previously aria2 could only add torrents; organization silently did nothing.
• Movies / OVA / Specials — the parser recognizes 剧场版/劇場版/电影版/Movie and OVA/OAD/SP/Special tokens (episode_type); movies are organized as flat Title (Year) folders with TMDB search/movie fallback, specials go to Season 0. Multi-file movie torrents keep distinct filenames (largest file gets the clean name).
• Per-bangumi release preference — set a preferred subtitle group and/or resolution per series; when multiple groups release the same episode, only the best match is downloaded instead of all of them.
• Notifications beyond "new episode" — typed events for RSS feed failures (on state change, not every tick), download-add failures, and offset needs-review; {{title}}-style message templates now work for every provider, not just webhook.
• Offset suggestions you can apply — season/episode offset mismatches are detected from real parsed episodes and applied with one call (POST /api/v1/bangumi/apply-offset/{id}, single or bulk).
• SSE-driven WebUI — status, downloader, and log views subscribe to /api/v1/events/stream instead of three polling loops; a dead downloader can no longer freeze the stream (bounded fetch with explicit degraded payload).

Backend — Architecture

The backend went through a modernization refactor (REST API behavior unchanged):

• Database layer fully asynchronous: repositories and Database on sqlite+aiosqlite (WAL + busy_timeout); no synchronous DB calls on the event loop
• The Program god object replaced by a lifespan AppContext composition root with a generic PeriodicTask/Scheduler; startup is awaited and a failed migration aborts boot explicitly
• Composition over inheritance throughout (RSSEngine/TorrentManager/Renamer/… take constructor-injected dependencies)
• Table-driven migrations (database/migrations.py) with already_applied guards; old databases upgrade identically
• Downloader Protocol with capability flags; qBittorrent login session reused across operations with automatic re-auth on 401/403 (#1039, #900)
• Config changes uniformly through AppContext.reload_settings() — HTTP client, notifier, scheduler, and parser caches all reset consistently

Backend — Features

• Security config model: login IP allowlist, MCP CIDR allowlist + Bearer Token dual authentication, Authorization: Bearer support on auth endpoints
• Manual air-weekday API with calendar-refresh lock (PATCH /api/v1/bangumi/{id}/weekday, migration v9)
• Configurable TMDB / bgm.tv API base URLs for users behind restrictive networks (#1040, #1042)
• Per-provider parser choice for custom search providers; the OpenAI parser now rescues titles the regex parser fails on instead of replacing it entirely
• Unauthenticated GET /health liveness endpoint ({status, version, db_ok}) and a Docker HEALTHCHECK
• Auth stack migrated from unmaintained python-jose/passlib (CVE-2024-33663, CVE-2024-33664) to PyJWT + bcrypt — existing passwords, including >72-byte ones, keep working

Backend — Fixes

• Failed torrent adds now actually retry on the next RSS tick; "already added" duplicates no longer emit failure notifications — and downloader clients now report add outcomes honestly (a transport failure can no longer be mistaken for a duplicate)
• qBittorrent rename verification no longer reports success without seeing the new filename (#754, #749)
• Lifecycle transitions (start/stop/restart/reload) serialized behind a lock; the setup wizard now starts the background loops on completion
• Filter-rejected torrents no longer pollute offset detection
• Season offset can no longer accidentally move regular episodes into Season 0 (Plex/Jellyfin Specials); only true specials land there
• aria2: stale duplicate-tracking rows are reconciled when downloads are removed outside AutoBangumi; metadata-fetching magnets no longer crash the downloader list; renames refuse to overwrite existing files
• qBittorrent SSL: self-signed certificates no longer break the connection (#923)
• Destructive API endpoints converted from GET to POST (CSRF hardening)
• OpenAI parsing no longer blocks the event loop (AsyncOpenAI)

Backend — Performance

• Missing database indexes backfilled for upgrading installs (previously only fresh databases got them); offset-scanner and preference-dedup queries now index-backed (migrations v13/v14)
• Title parser ~16% faster (all static regex precompiled)
• Renamer fallback lookup batched: 201 → 2 queries at 200 torrents (~11×)
• Notification dispatch parallelized across items (with the underlying HTTP-context race fixed first)

WebUI

• UX/accessibility/perf pass (new in beta.2):
  • The rule-delete dialog is no longer a trap ("No" used to delete the rule too); destructive actions everywhere (RSS bulk delete, torrent delete, clear log, notification provider removal) now confirm first
  • Air weekday is settable from the rule editor — calendar scheduling now works on mobile and keyboard, not just desktop drag
  • The mobile bottom nav is actually at the bottom; touch targets raised to 44px across the app; feed errors shown inline on mobile cards
  • Self-hosted Inter font (no more render-blocking Google Fonts — noticeable on Chinese networks); lazy poster loading; the log view stays fast by rendering only the newest 1000 lines
  • Honest states: failed loads show errors with retry instead of masquerading as empty/onboarding screens; background polls no longer spam error toasts during a backend restart
  • Setup wizard: an unreachable downloader can no longer dead-end the wizard, and progress survives a page reload
• Calendar drag-and-drop scheduling: drag an "Unknown" series onto a weekday to set and lock its air day
• Component system unified on naive-ui (fixes a theme crash that could blank the Config page; naive-ui 2.44 for Vue 3.5 compatibility)
• RSS page: per-feed and refresh-all buttons; decluttered table (source metadata beside the name, status column shows only state)
• Calendar cards show the series title when no poster is available; bangumi titles wrap to two lines with full-title tooltips
• Security settings UI (IP allowlists, tokens); mobile nav labels no longer truncate; WCAG AA contrast pass; log page copy fixes
• Oversized editor components split into a shared useBangumiRuleForm composable

Tooling & CI

• mypy type checking in CI at zero errors; ruff + frontend lint/vitest gates on dev-branch PRs
• E2E suite (real qBittorrent + mock RSS via Docker) green: 67/67
• scripts/dev.sh — one-command seeded development environment
• Backend test suite: 990 tests (was 726 at 3.2)

Upgrade notes

• Migrations v9–v14 run automatically on first start; a failed migration now aborts startup instead of continuing silently
• group_tag keeps its historical meaning (qB rule naming only) — renamed filenames are unchanged, so existing seeding libraries are not touched
• Beta feedback welcome, especially on aria2 setups, movie/special organization, and the new preference dedup