Pipeline audit follow-up: reduce wasted runner time on PRs and tighten CI security, without reducing what actually gets validated. Runner-time waste: - Concurrency with PR-only cancel-in-progress on CI, E2E, and docker-build, so a new push cancels the previous commit's still-running checks. Non-PR runs use the unique run_id as the group, because GitHub keeps at most one pending run per group even with cancel-in-progress: false — a shared ref group could silently drop a queued master run. - paths-ignore for docs-only changes (Markdown, docs/, .plans/, .codex/, .claude/) on the Electron build matrix and the E2E suites; E2E also skips apps/website/**. The build workflow keeps apps/website/** because its Linux job builds the website to verify AppStream assets. Tag pushes are unaffected: GitHub does not evaluate paths filters for tags. - PRs lint affected projects only; master pushes keep the full run-many. Lint-global inputs (eslint.config.mjs, tools/eslint/**) now mark all 41 lint projects affected, including the run-commands targets database and packaging, so the max-lines baseline cannot be widened without lint. Hardening: - Explicit least-privilege permissions on CI, E2E, and build-and-make; the create-release job keeps its job-level contents: write. The repository default workflow token was switched to read-only. - New actionlint job (image pinned by digest, shellcheck at warning+), with the shared-anchor false positive suppressed in .github/actionlint.yaml. Fixed one real finding: unquoted $GITHUB_OUTPUT. - .github/dependabot.yml: weekly cadence, minor+patch grouped per ecosystem (npm, GitHub Actions, Docker), majors stay individual PRs. Docs updated: CLAUDE.md, docs/architecture/nx-workspace-boundaries.md, and docs/architecture/validation-map.md now describe affected-lint on PRs and the E2E path-filter exceptions.
67 KiB
CLAUDE.md
This file provides guidance to Claude Code (claude.ai/code) when working with code in this repository.
The process sections below (Plan Mode, Documentation After Changes, Regression Prevention, Agent Bootstrap, Electron CDP Debugging) are mirrored in
AGENTS.md, which is the canonical copy for agent workflows. When updating one, keep the other in sync.
Plan Mode
- When Claude Code is in Plan Mode and produces a final
<proposed_plan>, it must also save that finalized plan as a Markdown file in the repo-root.plans/directory. - Save only finalized plans. Do not write interim exploration, question turns, or draft revisions to
.plans/. - Use the filename pattern
YYYY-MM-DD-short-topic.mdsuch as.plans/2026-03-12-channel-filtering.md. - If the intended filename already exists, append a numeric suffix such as
-2,-3, and so on.
Documentation After Changes
- After implementing a meaningful change, Claude Code must assess whether canonical repo docs need updates before considering the task complete.
- Meaningful changes include new or changed user-visible behavior, architecture or data-flow changes, non-obvious maintenance workflows, new setup/debugging steps, and new subsystem contracts or boundaries.
- Skip doc updates for trivial refactors with unchanged behavior, formatting-only edits, and isolated test-only changes.
- Prefer updating an existing authoritative doc before creating a new one:
README.mdfor top-level developer or user workflowsdocs/architecture/for architecture, ownership, and behavior contracts- the nearest module
README.mdfor local usage or behavior
- Keep this file (
CLAUDE.md) itself up to date. It is a living document: whenever a change touches something it describes — monorepo structure (new/moved/renamed apps or libs), routes, database schema/tables, stores and their features, key components, commands, environment behavior, or coding conventions — update the affectedCLAUDE.mdsections as part of the same task, and keep the mirrored process sections inAGENTS.mdin sync. - When adding a new feature area, check whether the Architecture or Key Features sections of
CLAUDE.mddescribe the surrounding area; if they do, reflect the addition there instead of leaving the description stale. - Do not let
CLAUDE.mddrift: a stale path or route in this file poisons the context of every future agent session. If you notice an outdated claim while working, fix it (or flag it in the final summary) even if it is unrelated to the current task. - Repo docs are canonical even when they were originally drafted by an LLM.
- Final task summaries should state whether docs were updated and which doc changed.
Regression Prevention And Test Updates
- Before the final summary for any feature, behavior change, bug fix, data-flow change, Electron IPC/database change, or user-visible UI workflow change, Claude Code must complete a test impact pass. Identify the affected projects and decide whether unit, integration, E2E, build, lint, or manual/CDP verification is required.
- Bug fixes must normally include regression coverage that fails on the old behavior and passes with the fix. If automated coverage is not practical, document why in the final summary and include the strongest manual validation performed.
- Feature work and behavior changes must update existing tests when assertions, fixtures, mocks, routes, or E2E flows are now stale, incomplete, or missing. Prefer extending the closest existing spec or E2E file before adding a new suite.
- Default validation ladder:
- Run targeted unit tests for directly affected projects with
pnpm nx test <project>or existing scripts such aspnpm run test:frontend,pnpm run test:backend, orpnpm run test:unit:ciwhen the scope is broader. - Run affected E2E coverage when changing user-visible workflows, routing, persistence, playback, portals, settings, import flows, or Electron-only behavior.
- Use
pnpm nx show projects --withTarget testandpnpm nx show projects --withTarget e2ewhen project ownership or available validation targets are unclear. - Prefer specific atomized E2E targets before broad suites when they cover the changed behavior, for example
pnpm nx run web-e2e:e2e-ci--src/xtream.e2e.tsorpnpm nx run electron-backend-e2e:e2e-ci--src/search.e2e.ts.
- Run targeted unit tests for directly affected projects with
- Electron-specific changes affecting IPC, SQLite, packaged runtime, external players, native file access, or Electron-only routes require Electron E2E coverage where available, or CDP/manual verification with
agent-browserand the tracing flags documented below. - Final task summaries must list tests added or updated, validation commands run with results, and any skipped validation with the reason. For docs-only changes, state that unit/E2E validation was not required and verify the changed Markdown instead.
Project Overview
IPTVnator is a cross-platform IPTV player application built with Angular and Electron, supporting M3U/M3U8 playlists, Xtream Codes API, and Stalker portals.
Dual Environment Support: The application is designed to work in both Electron and as a Progressive Web App (PWA). The architecture uses a factory pattern to inject environment-specific services at runtime, ensuring the same codebase works in both contexts.
Development Commands
Agent Bootstrap
pnpm install --frozen-lockfile
pnpm nx show projects
- Run the install step in a fresh worktree before relying on Nx discovery, lint, test, or build commands. Without
node_modules, local Nx modules are unavailable. - Use scoped path aliases from
tsconfig.base.jsonsuch as@iptvnator/services,@iptvnator/shared/interfaces, and@iptvnator/ui/components. - Do not add new imports from legacy bare aliases such as
services,shared-interfaces,components,m3u-state, ordatabase. - Every Nx project should keep
scope:*,domain:*, andtype:*tags inproject.json. - See
docs/architecture/nx-workspace-boundaries.mdfor the current Nx tag and alias policy. - Repository-specific skills are committed under
.codex/skills/. If Claude Code does not load skills directly, treat those files as concise ownership docs.
Building and Serving
# Serve the Angular web app only (development mode, baseHref="/")
pnpm run serve:frontend
# or
nx serve web
# Serve with PWA configuration (optimized, baseHref="/")
pnpm run serve:frontend:pwa
# or
nx serve web --configuration=pwa
# Serve the Electron app (starts both frontend and backend)
pnpm run serve:backend
# or
nx serve electron-backend
# Build frontend for Electron (baseHref="./")
pnpm run build:frontend
# or
nx build web
# Build frontend for PWA deployment (baseHref="/")
pnpm run build:frontend:pwa
# or
nx build web --configuration=pwa
# Build backend (Electron)
pnpm run build:backend
# or
nx build electron-backend
# Package the app (creates distributable without installers)
pnpm run package:app
# or
nx run electron-backend:package
# Create installers/executables
pnpm run make:app
# or
nx run electron-backend:make
Electron CDP Debugging
- Start Electron in dev mode with:
nx serve electron-backend - Package-script equivalent:
pnpm run serve:backend - The workspace is configured to always launch Electron with:
--remote-debugging-port=9222 - Use CDP clients (Chrome DevTools Protocol tools) against:
127.0.0.1:9222 - When the task is Electron automation/debugging, use the
electronskill - Do not auto-open DevTools during normal CDP automation. In development, DevTools is opt-in via
ELECTRON_OPEN_DEVTOOLS=1. - If DevTools is open,
agent-browser --cdp 9222 ...may attach to the DevTools page instead of the IPTVnator window (symptoms:tab listshowsabout:blank, empty snapshots, black screenshots). Inspect targets withcurl http://127.0.0.1:9222/json/listand connect directly to the app page'swebSocketDebuggerUrl.
For startup tracing or white-screen debugging:
IPTVNATOR_TRACE_STARTUP=1 nx serve electron-backend
Useful narrower flags:
IPTVNATOR_TRACE_IPC=1traces rendererwindow.electron.*bridge callsIPTVNATOR_TRACE_DB=1traces DB worker requests and DB progress eventsIPTVNATOR_TRACE_SQL=1traces SQLite statements in both main and worker connectionsIPTVNATOR_TRACE_WINDOW=1traces BrowserWindow navigation/load lifecycleIPTVNATOR_TRACE_PLAYER=1traces external-player activity and bounded Embedded MPV runtime-probe stderrIPTVNATOR_TRACE_RENDERER_CONSOLE=1mirrors renderer console logs into the Electron terminal
Settings, portal request/response, and trace payloads must use
@iptvnator/shared/logging or the redacting portal logger before reaching
console.*; never log raw credentials while debugging.
If the Nx daemon gets into a bad state before rerunning Electron:
pnpm nx reset
Use global agent-browser (preferred):
# Verify CDP targets
agent-browser --cdp 9222 tab list
# Switch to the app tab and inspect interactive elements
agent-browser --cdp 9222 tab 1
agent-browser --cdp 9222 snapshot -i -c -d 4
# Capture debug artifacts
agent-browser --cdp 9222 screenshot /tmp/iptvnator-cdp.png
agent-browser --cdp 9222 trace start /tmp/iptvnator.trace.zip
agent-browser --cdp 9222 wait 1500
agent-browser --cdp 9222 trace stop /tmp/iptvnator.trace.zip
If agent-browser is not in PATH, use:
npx --yes agent-browser --cdp 9222 tab list
Testing
# Run frontend tests
pnpm run test:frontend
# or
pnpm nx test web
# Run backend tests
pnpm run test:backend
# or
pnpm nx test electron-backend
# Run targeted E2E tests (Playwright)
pnpm nx run web-e2e:e2e-ci--src/xtream.e2e.ts
pnpm nx run electron-backend-e2e:e2e-ci--src/search.e2e.ts
# Run broad E2E suites only when the impact justifies it
pnpm nx e2e web-e2e
pnpm nx e2e electron-backend-e2e
# Run tests with coverage when needed
pnpm nx test web --configuration=ci
Before finishing behavior changes or bug fixes, follow Regression Prevention And Test Updates above and report the test impact decision in the final summary.
Linting
# Lint all projects (CI runs this on master; PRs lint affected projects)
pnpm run lint
# Lint a single project
nx lint web
nx lint electron-backend
CI lints affected projects on PRs (nx affected) and every project on master
pushes (.github/workflows/ci.yml). This enforces the
Nx module-boundary tags, the legacy bare-alias ban, and a max-lines ESLint
rule (hard maximum 400 lines per TypeScript file). Pre-existing oversized files
are baselined in tools/eslint/max-lines-baseline.mjs; regenerate the baseline
with node tools/eslint/generate-max-lines-baseline.mjs after splitting a file.
Never add new files to the baseline.
Architecture
Monorepo Structure (Nx Workspace)
This is an Nx monorepo with the following structure:
- apps/web - Angular application (frontend, shared by Electron and PWA)
- apps/electron-backend - Electron main process
- apps/web-backend - HTTP backend for the self-hosted PWA (
/parse,/parse-xml,/xtream,/stalkerCORS proxy endpoints) - apps/remote-control-web - Mobile remote-control web app served by the Electron backend
- apps/web-e2e - Playwright E2E tests against the web app
- apps/electron-backend-e2e - Playwright E2E tests against the Electron app
- apps/stalker-mock-server - Mock Stalker/Ministra portal for dev and E2E
- apps/xtream-mock-server - Mock Xtream Codes API for dev and E2E
- apps/website - Astro + Tailwind landing page and blog
- libs/ - Shared libraries:
- epg/data-access - EPG services, runtime bridge, program normalization
- m3u-state - NgRx state management for M3U playlists
- playlist/import/feature - Playlist import flows (file/URL/text upload, Xtream and Stalker import dialogs)
- playlist/m3u/feature-player - M3U video player page and
/workspace/playlists/:idroutes - playlist/shared/{ui,util} - Shared playlist UI and utilities
- portal/xtream/{data-access,feature} - XtreamStore, services, data sources; routed Xtream components
- portal/stalker/{data-access,feature} - StalkerStore and routed Stalker components
- portal/catalog/feature - Portal catalog UI
- portal/downloads/feature - Download manager UI
- portal/shared/{data-access,ui,util} - Cross-portal shared code
- services - Abstract DataService contract and shared app services (incl. the TMDB metadata enrichment module in
lib/tmdb/) - shared/interfaces - TypeScript interfaces and types (incl.
ElectronBridgeApi) - shared/logging - Dependency-free structured redaction for diagnostic logs
- shared/database - Canonical Drizzle schema and DB connection (used by the Electron backend)
- shared/m3u-utils - M3U playlist utilities
- shared/testing - Shared test helpers
- ui/components - Reusable UI components (incl. channel list)
- ui/epg - EPG UI (timeline ribbon, multi-EPG, progress panel, program dialogs)
- ui/playback - Player UI (video/audio players)
- ui/pipes - Angular pipes
- ui/remote-control - Remote-control UI pieces
- ui/shared-portals - Shared portal types (
LiveEpgPanelSummary) - ui/styles - Shared styles/theme
- workspace/{shell,dashboard} - Workspace shell (layout/navigation) and dashboard
Frontend Architecture (Angular)
State Management: Uses NgRx for playlist state management:
- Store configuration in
apps/web/src/app/app.config.ts - Playlist state, actions, effects, and reducers in
libs/m3u-state/ - Entity adapter pattern for managing playlists collection
- Router store integration for route-based state
XtreamStore Architecture (Signal Store with Feature Composition):
The Xtream Codes module uses NgRx Signal Store with a layered architecture:
┌─────────────────────────────────────────────────────────────────┐
│ PRESENTATION LAYER │
│ Components use XtreamStore (facade) │
└─────────────────────────────────────────────────────────────────┘
│
▼
┌─────────────────────────────────────────────────────────────────┐
│ FACADE LAYER │
│ XtreamStore │
│ (Composes feature stores, unified API) │
└─────────────────────────────────────────────────────────────────┘
│
┌────────────┬────────────┼────────────┬────────────┐
▼ ▼ ▼ ▼ ▼
┌────────────┐ ┌────────────┐ ┌────────────┐ ┌────────────┐ ┌────────────┐
│ withPortal│ │withContent │ │withSelection│ │ withSearch │ │ withPlayer │
└────────────┘ └────────────┘ └────────────┘ └────────────┘ └────────────┘
│ │ │
└───────────────────────────┼──────────────┘
▼
┌─────────────────────────────────────────────────────────────────┐
│ DATA SOURCE LAYER │
│ IXtreamDataSource │
│ ┌───────────────────┬───────────────────┐ │
│ ▼ ▼ │
│ ElectronDataSource PwaDataSource │
│ (DB-first + API) (API-only) │
└─────────────────────────────────────────────────────────────────┘
File structure:
libs/portal/xtream/
├── data-access/src/lib/
│ ├── stores/
│ │ ├── features/
│ │ │ ├── with-portal.feature.ts # Playlist & portal status
│ │ │ ├── with-content.feature.ts # Categories & streams
│ │ │ ├── with-selection.feature.ts # UI selection & pagination
│ │ │ ├── with-search.feature.ts # Search functionality
│ │ │ ├── with-epg.feature.ts # EPG data
│ │ │ ├── with-player.feature.ts # Stream URLs & player
│ │ │ ├── with-playback-positions.feature.ts # Resume/playback positions
│ │ │ └── index.ts
│ │ ├── xtream.store.ts # Facade composing all features
│ │ └── index.ts
│ ├── services/
│ │ ├── xtream-api.service.ts # Xtream Codes API calls
│ │ ├── xtream-url.service.ts # Stream URL construction
│ │ ├── favorites.service.ts # Favorites persistence
│ │ ├── epg-queue.service.ts # EPG fetch queueing
│ │ ├── xtream-xmltv-fallback.service.ts # XMLTV fallback EPG
│ │ └── index.ts
│ ├── data-sources/
│ │ ├── xtream-data-source.interface.ts # Abstract interface + types
│ │ ├── electron-xtream-data-source.ts # DB-first implementation
│ │ ├── pwa-xtream-data-source.ts # API-only implementation
│ │ └── index.ts # provideXtreamDataSource() factory
│ ├── with-favorites.feature.ts # Favorites feature
│ └── with-recent-items.ts # Recently viewed feature
└── feature/src/lib/ # Routed components
├── xtream-feature.routes.ts # createXtreamRoutes(): /workspace/xtreams/:id tree
├── live-stream-layout/, vod-details/, serial-details/, ...
└── global-search-results/ # Global search (Electron-only route)
Key patterns:
- Feature stores: Each
with*.feature.tsusessignalStoreFeature()for focused functionality - Facade pattern:
XtreamStorecomposes all features, maintaining backward compatibility - Data source abstraction:
IXtreamDataSourceinterface with environment-specific implementations - Factory injection:
provideXtreamDataSource()selects Electron or PWA implementation at runtime
Data strategies by environment:
| Environment | Strategy |
|---|---|
| Electron | DB-first: Check DB → fetch API if missing → cache to DB |
| PWA | API-only: Always fetch from API, store in memory |
M3U Playlist Module Architecture:
The M3U playlist module handles traditional M3U/M3U8 playlists with support for 90,000+ channels.
┌─────────────────────────────────────────────────────────────────────┐
│ VIDEO PLAYER PAGE │
│ libs/playlist/m3u/feature-player/src/lib/video-player/ │
├─────────────────────────────────────────────────────────────────────┤
│ ┌─────────────┐ ┌───────────────────────────────────────────────┐│
│ │ Sidebar │ │ Video Player (ArtPlayer/Video.js) ││
│ │ ┌─────────┐ │ │ ││
│ │ │Channel │ │ ├───────────────────────────────────────────────┤│
│ │ │List │ │ │ EPG timeline ribbon (app-epg-timeline) ││
│ │ │Container│ │ │ horizontal, under the player ││
│ │ └─────────┘ │ └───────────────────────────────────────────────┘│
│ └─────────────┘ │
└─────────────────────────────────────────────────────────────────────┘
The live EPG panel is a horizontal timeline ribbon under the player (app-epg-timeline, libs/ui/epg/src/lib/epg-timeline/), not a right-side drawer (reworked in PR #1102). See docs/architecture/m3u-playlist-module.md for the timeline's controllers and scroll behavior.
Radio Channel Layout (when channel.radio === 'true'):
┌─────────────────────────────────────────────────────────────────────┐
│ ┌─────────────┐ ┌────────────────────────────────────────────────┐│
│ │ Sidebar │ │ Blurred backdrop (station logo) ││
│ │ │ │ ┌──────────┐ ││
│ │ │ │ │ Artwork │ ← cinematic hero layout ││
│ │ │ │ └──────────┘ ││
│ │ │ │ Station Name ││
│ │ │ │ [LIVE] badge ││
│ │ │ │ ⏮ ▶/⏸ ⏭ ← transport controls ││
│ │ │ │ 🔊 ━━━━━━━━━ ← volume slider ││
│ │ │ │ (no EPG panel) ││
│ └─────────────┘ └────────────────────────────────────────────────┘│
└─────────────────────────────────────────────────────────────────────┘
Key radio behavior:
- Detection:
channel.radio === 'true'(string from M3Uradioattribute) - The audio player always renders inline —
shouldShowInlinePlayeris bypassed for radio - EPG panel is conditionally hidden in the template when radio is active
- Volume is shared with video player via
localStoragekey'volume' - Keyboard: ArrowUp/Down adjusts volume by 5%, M toggles mute
- Component:
libs/ui/playback/src/lib/audio-player/audio-player.component.ts
Channel List Component Structure (parent coordinator pattern):
libs/ui/components/src/lib/channel-list-container/
├── channel-list-container.component.ts # Parent - shared state coordinator
├── all-channels-view/ # Virtual scroll + debounced search
├── groups-view/ # Expansion panels + infinite scroll
├── favorites-view/ # CDK drag-drop reordering
├── recent-view/ # Recently viewed channels
└── channel-list-item/ # Individual channel display
Key patterns:
- EnrichedChannel: Pre-computed EPG data attached to channels for performance
- Parent coordinator: Manages shared signals (
channelEpgMap,progressTick,favoriteIds) - Virtual scrolling: CDK virtual scroll for 90,000+ channel lists
- Infinite scroll: IntersectionObserver in groups view loads 50 items at a time
- Global progress tick: Single 30s interval instead of per-item intervals
State management via NgRx (libs/m3u-state/):
PlaylistActions: loadPlaylists, addPlaylist, removePlaylist, parsePlaylistChannelActions: setChannels, setActiveChannel, setAdjacentChannelAsActiveEpgActions: setActiveEpgProgram, setCurrentEpgProgram, setEpgAvailableFlagFavoritesActions: updateFavorites, setFavorites
See docs/architecture/m3u-playlist-module.md for complete documentation.
Routing: Lazy-loaded routes in apps/web/src/app/app.routes.ts. All user-facing routes are nested under the workspace shell (/workspace/...); / redirects into the workspace.
- Dashboard:
/workspace/dashboard; sources overview:/workspace/sources - M3U player:
/workspace/playlists/:id(children:favorites,recent,:view) — routes inlibs/playlist/m3u/feature-player - Xtream Codes:
/workspace/xtreams/:id(children:live,vod,series,search,actor/:personId,recently-added,favorites,recent,downloads) —libs/portal/xtream/feature/src/lib/xtream-feature.routes.ts - Stalker portal:
/workspace/stalker/:id(children:itv,vod,radio,series,favorites,recent,search,actor/:personId,downloads) —libs/portal/stalker/feature/src/lib/stalker-feature.routes.ts - Global collections:
/workspace/global-favorites,/workspace/global-recent - Global search:
/workspace/search(Electron-only; a guard redirects the PWA to/workspace/sources) - Downloads:
/workspace/downloads - Settings:
/workspace/settings(/settingsredirects there)
Service Architecture (Factory Pattern):
- Abstract
DataServiceclass inlibs/services/src/lib/data.service.tsdefines the contract - Two environment-specific implementations:
ElectronService(apps/web/src/app/services/electron.service.ts) - Uses IPC to communicate with Electron backendPwaService(apps/web/src/app/services/pwa.service.ts) - Uses HTTP API and IndexedDB for standalone web version
- Factory function
DataFactory()inapps/web/src/app/app.config.tsdetermines which implementation to inject:if (window.electron) { return inject(ElectronService); } return inject(PwaService);
Data Storage (Environment-Specific):
- Electron: SQLite database via Drizzle ORM (
better-sqlite3driver)- Location:
~/.iptvnator/databases/iptvnator.db - Full-featured relational database with foreign keys and indexes
- Canonical schema and connection live in
libs/shared/database
- Location:
- PWA (Web): IndexedDB via
ngx-indexed-db- Browser-based NoSQL storage
- Same schema structure but implemented in IndexedDB
- Limited by browser storage quotas
TypeScript File Size Rule:
Keep TypeScript files under 300 lines. Hard maximum is 350–400 lines.
- When creating new files, design them to stay within this limit from the start.
- When adding a feature to an existing file that would push it past 350 lines, refactor first: extract helpers, sub-services, or feature modules before adding the new code.
- When you notice a file already exceeds 350 lines, proactively suggest a refactoring (or perform it if the change is straightforward) — even if the immediate task is small.
Typical split strategies:
- Angular components: extract child components, move logic to a dedicated service or store feature
- Signal store features: split into smaller
with*feature functions in separate files - Services: split by responsibility (e.g. separate API, transformation, and state concerns)
- Utility files: group by domain and export from a barrel
index.ts
This rule exists to keep the codebase navigable and reviewable. A 150-line file is always preferable to a 500-line file.
Angular Coding Standards:
This project uses modern Angular signal-based APIs and patterns. ALWAYS use the following:
-
Component Queries: Use
viewChild(),viewChildren(),contentChild(),contentChildren()instead of@ViewChild,@ViewChildren,@ContentChild,@ContentChildrendecorators// ✅ Correct - Signal-based readonly menu = viewChild.required<MatMenu>('menuRef'); readonly items = viewChildren<ElementRef>('item'); // ❌ Incorrect - Old decorator syntax @ViewChild('menuRef') menu!: MatMenu; @ViewChildren('item') items!: QueryList<ElementRef>;Important: When using signals in templates with properties that expect non-signal values, unwrap the signal by calling it:
<!-- ✅ Correct - Unwrap the signal --> <button [matMenuTriggerFor]="menu()">Open Menu</button> <!-- ❌ Incorrect - Signal not unwrapped --> <button [matMenuTriggerFor]="menu">Open Menu</button> -
Component Inputs/Outputs: Use
input()andoutput()functions instead of@Input()and@Output()decorators// ✅ Correct - Signal-based readonly title = input.required<string>(); readonly size = input<number>(10); // with default value readonly clicked = output<string>(); // ❌ Incorrect - Old decorator syntax @Input({ required: true }) title!: string; @Input() size = 10; @Output() clicked = new EventEmitter<string>(); -
Reactive State: Use signal primitives for reactive state management
// ✅ Use signal(), computed(), effect(), linkedSignal() readonly count = signal(0); readonly doubled = computed(() => this.count() * 2); constructor() { effect(() => { console.log('Count changed:', this.count()); }); } -
Host Bindings: Use
@HostBinding()and@HostListener()decorators (these don't have signal equivalents yet)@HostBinding('class.active') get isActive() { return this.active(); } @HostListener('click') onClick() { /* ... */ } -
Control Flow: Use
@if,@for,@switchinstead of*ngIf,*ngFor,*ngSwitch// ✅ Correct - Modern syntax @if (isLoggedIn()) { <p>Welcome!</p> } @for (item of items(); track item.id) { <li>{{ item.name }}</li> } // ❌ Incorrect - Old syntax <p *ngIf="isLoggedIn">Welcome!</p> <li *ngFor="let item of items; trackBy: trackById">{{ item.name }}</li>
Backend Architecture (Electron)
Main Entry: apps/electron-backend/src/main.ts
- Bootstraps Electron app and initializes database
- Registers event handlers for IPC communication
Database:
- ORM: Drizzle ORM with
better-sqlite3(local SQLite file) - Location:
~/.iptvnator/databases/iptvnator.db(avoids spaces in path) - Schema (
libs/shared/database/src/lib/schema.ts— canonical;apps/electron-backend/src/app/database/schema.tsis a backwards-compat re-export shim):playlists- Playlist metadata (M3U, Xtream, Stalker)categories- Content categories (live, movies, series)content- Streams/VOD/series itemsfavorites- User favoritesrecentlyViewed- Watch historyepgChannels,epgPrograms- Persisted EPG dataepgChannelMappings(epg_channel_mappings) - Manual EPG channel mappings (defined inepg-mapping.schema.ts, re-exported byschema.ts)playbackPositions- Resume positionsdownloads- Download manager stateappState- Key-value app state (also tracks one-off data migrations)tmdbMetadata- TMDB enrichment cache (details payloads + search match resolutions, keyed by media type/lookup key/language)
- Connection:
libs/shared/database/src/lib/connection.tscreateTables()auto-creates tables on init (CREATE TABLE IF NOT EXISTS)- Provides full read-write access for
electron-backendand a read-only mode - A root
drizzle.config.tsconfigures Drizzle Kit tooling (points at the schema via the compat shim)
IPC Communication:
- Preload script:
apps/electron-backend/src/app/api/main.preload.ts- Exposes
window.electronAPI viacontextBridge - All IPC channels defined here (playlist operations, EPG, database CRUD, external players, etc.)
- The canonical TypeScript contract is
ElectronBridgeApiinlibs/shared/interfaces/src/lib/electron-api.interface.ts;global.d.ts,apps/web/src/typings.d.ts, andmain.preload.tsmust reference this shared type instead of maintaining separate method lists.
- Exposes
- Event handlers:
apps/electron-backend/src/app/events/database.events.ts- Database CRUD operationsplaylist.events.ts- Playlist import/updateepg.events.ts- EPG IPC registration and freshness/fetch orchestration; worker lifecycle lives inepg-worker.service.ts, DB lookups inepg-query.service.tsxtream.events.ts- Xtream Codes APIstalker.events.ts- Stalker portal APIplayer.events.ts- External player IPC registration; MPV/VLC lifecycle logic lives inmpv-session.service.ts,vlc-session.service.ts, and sharedexternal-player-*helperssettings.events.ts- App settingselectron.events.ts- App version, etc.
Workers (apps/electron-backend/src/app/workers/):
- EPG parsing:
epg-parser.worker.ts; main-process worker lifecycle is coordinated fromapps/electron-backend/src/app/events/epg-worker.service.ts - Non-EPG SQLite work:
database.worker.ts(seedocs/architecture/sqlite-db-worker.md) - Playlist refresh:
playlist-refresh.worker.ts
Key Features
Playlist Support:
- M3U/M3U8 files (local or URL)
- Xtream Codes API (
username,password,serverUrl) - Stalker portal (
macAddress,url)
Video Players:
- Built-in web players: HTML5+hls.js, Video.js, and ArtPlayer
- DASH + ClearKey (M3U module):
.mpdchannels play through a lazily loaded Shaka Player source engine inside the HTML5 and ArtPlayer components (no new player in settings). ClearKey keys come from#KODIPROP:inputstream.adaptive.*lines, post-processed intoChannel.drmbyextractDrmFromRaw()inlibs/shared/m3u-utils(hooked increatePlaylistObject(), covering all import paths). DASH channels always play inline:isDashChannel()bypasses the external-player setting (radio precedent) and routes Video.js/MPV/VLC/ embedded-MPV users to the HTML5 player viaplayerOverride(ArtPlayer keeps ArtPlayer). Unsupported license types (Widevine/PlayReady — out of scope, need the castLabs Electron fork) surface a DRM playback diagnostic instead of crashing. ClearKey EME works in stock Electron. Engine:libs/ui/playback/src/lib/shaka-engine/; details indocs/architecture/m3u-playlist-module.md("DASH + ClearKey Playback"). - External players: MPV, VLC (via IPC to Electron backend)
- Embedded MPV (experimental, macOS/Windows/Linux): renders mpv video inside the Electron window through a native addon. macOS uses the libmpv render API in an
NSOpenGLView; Windows uses in-process libmpv with--widagainst an app-owned childHWND; Linux spawns an out-of-processmpv --wid=<x11-window>controlled over a JSON IPC socket (X11/XWayland only, requires systemmpvon PATH; subtitles/speed/aspect/recording are not exported there). mpv's own screensaver inhibition does not apply to any of these paths, soEmbeddedMpvNativeServiceholds an ElectronpowerSaveBlocker(prevent-display-sleep) whenever any session's status isplaying, and releases it on pause, dispose, or shutdown. Renderer bounds are CSS pixels; the service converts them to native units in the main process (embedded-mpv-bounds.util.ts: × page zoom everywhere, × display scale on Windows/Linux whose child windows are positioned in physical pixels; frame-copy bounds stay unscaled), and the session controller re-syncs bounds whendevicePixelRatiochanges. Service:apps/electron-backend/src/app/services/embedded-mpv-native.service.ts; full architecture:docs/architecture/embedded-mpv-native.md. - Embedded MPV frame-copy engine (experimental, macOS Apple Silicon + Linux
x64 + Windows; enabled via
Settings > Playback > Embedded MPV: frame-copy engine(restart required) orIPTVNATOR_ENABLE_EMBEDDED_MPV_FRAME_COPY=1on top of the embedded MPV experiment flag): a per-session helper renders mpv offscreen (CGL on macOS, EGL on Linux, WGL on Windows), publishes BGRA frames into a shm ring, and the preload frame pump uploads them to<canvas data-embedded-mpv-frame>. Sharedapp-player-controlsowns the DOM UI; native-view retains the legacy dock. On Linux, onlyiptvnator_mpv_helpermay link libmpv; Electron, its shipped libraries, the addon, and frame reader must not. Pristine afterPack/unpacked layouts scan Electron libraries recursively; extracted Snap payloads exclude only the package-managerlib/**andusr/lib/**trees overlaid into the same root. Every other directory remains recursive, and Electron-library symlinks still fail closed.electron-backend/native{,/**/*}is excluded fromapp.asar;afterPackalone owns the profile-normalized unpacked native tree, and package checks reject every archived/electron-backend/native/**entry. Packaged addon, frame-reader, and helper discovery uses only package-ownedapp.asar.unpackedpaths; cwd/dist candidates remain development-only. Official x64 packages use three separate profiles: DEB/RPM/Pacman depend on system libmpv plus the helper's direct EGL/GL/GBM interfaces, AppImage/Snap bundle the pinned LGPL closure, and Flatpak bundles the same closure. Flatpak is an isolated packaging pass and keepsiptvnatoras the real Electron ELF so Electron Builder'selectron-wrapperpasses it directly to Zypak. Other Linux targets retain the conditionaliptvnatorwrapper andiptvnator.bin. Mixed Flatpak/non-Flatpak target sets fail before mutation. Exact system dependencies are DEB=libmpv2,libegl1,libgl1,libgbm1, RPM=mpv-libs,libglvnd-egl,libglvnd-glx,mesa-libgbm, and Pacman=mpv,libglvnd,mesa. The DEB contract is verified on Ubuntu 24.04+; Ubuntu 22.04 users need the x64 AppImage because Jammy provideslibmpv1. ARM packages are marker-only. Stored or explicit opt-ins cannot bypass the fail-closed packaged manifest/file/hash gate and bounded--runtime-probe; any failure keeps the sandbox enabled, records a stable reason, and falls back to native-view without crashing. Snap iscore22/strict and uses an exact privateshared-memoryplug plus thegraphics-core22content plug at a real empty mode-0755$SNAP/graphics, with externalmesa-core22as the default provider. Its only provider-data layouts bind/usr/share/libdrmfrom$SNAP/graphics/libdrmand symlink/usr/share/drirc.dto$SNAP/graphics/drirc.d. Installed-Snap CI requires controlled unavailable status after disconnect, then reconnects and requires success. The helper linkslibGL.so.1, and probe/playback share a sanitized loader environment in which ambient audit, preload, library, graphics-driver, and shell-startup overrides are removed; the validated private closure plus trusted host GL, graphics-content, core22 base x64, and exact GNOME-platform roots have explicit precedence. The core22 base stays ahead of GNOME so the olderlibedit.so.2requiringlibtinfo.so.5cannot shadow the base ABI. The extracted-artifact verifier removes the identical unsafe loader/graphics/ shell set before direct helper smoke while preserving selectors such asLIBGL_ALWAYS_SOFTWARE. Snap fixes the wrapperPATH, removes exportedBASH_FUNC_*functions, and launches probe/playback through the regular executable$SNAP/graphics/bin/graphics-core22-provider-wrapper; a missing or disconnected provider returnssnap-graphics-provider-unavailablebefore helper spawn. The packaging-only--embedded-mpv-runtime-probeapp switch runs the complete packaged gate before BrowserWindow startup and emits one availability JSON line. A nonzero helper exit keeps top-level reasonhelper-probe-failed;helperReasonis present only for an exact protocol-v1 line carrying a fixed allowlisted reason, and its optionalhelperDetailmust be 1–1024 printable ASCII characters. Invalid detail suppresses both helper fields. Every probe uses an explicit 16 MiB aggregate captured-output ceiling independent of tracing. WithIPTVNATOR_TRACE_PLAYER=1, non-empty helper stderr is emitted separately as one JSON-escaped stderr line with a 16,384-characterstderrlimit and an explicittruncatedfield; trace-write failure cannot change availability. Installed-Snap CI enables Mesa EGL/GL diagnostics through this bounded channel. The exact packaged Flatpak/appcontext reconstructs only Freedesktop Platform 24.08's immutable__EGL_EXTERNAL_PLATFORM_CONFIG_DIRS; its CI smoke invokes that application-level probe instead of the helper directly. The packaged x64 Playwright smoke runs its fixture-contract target first and passes Chromium--ignore-gpu-blocklistso CI llvmpipe exposes WebGL2; this does not bypass the runtime gate, and--no-sandboxremains root-only. Bundled Linux packages carry hash-validatedembedded-mpv-notices.json,THIRD_PARTY_NOTICES.txt, andlicenses/**. CI caches the staged runtime plus immutable source inputs, never finished notices or the compliance tarball; it regenerates those notices and the VCS-metadata-freelinux-frame-copy-runtime-sources.tar.xzfor the current checkout while preserving the exact pinned six recursive libplacebo submodule records. Each record is canonicalfull-commit safe/path; clone-depth dependentgit describeannotations are discarded and never form part of the provenance identity. Its source index carries the globally sorted libplacebo directory/file/symlink inventory; file hashes, sizes, executable bits, link targets, aggregates, and canonical tree digest must match the trusted pinned checkout. The archive has an exact member/type layout and itsmetadata/archive-sha256.txtrecords must match the actual source archives. Concatenated tar/xz streams are inspected past every end marker. Every bundled x64 package manifest binds the final archive's SHA-256 and repository revision; system and marker-only packages do not carry that binding. Snap Store publication runs only from a publicv*GitHub release that already contains the Snap assets and exactly one source archive. Before any upload, the workflow hashes and checks the archive's exact member/type set and size bounds, verifies its clean tag revision, pinned sources including the six recursive submodule records and exact libplacebo tree digest, legal payload, and exact released tooling, then performs bounded extraction and static validation for every Snap. That public-release boundary independently revalidates the exact strictmeta/snap.yamlgraphics/shared-memory contract and enumeratesresources/app.asar, rejecting any archivedelectron-backend/native/**payload before publication. Its bounded ASAR header reader uses only Node built-ins and released local tooling, so the clean tag checkout does not requirenode_modules. Exactly one x64 Snap must have matchingsourceArchiveandsourceRuntime; any non-x64 Snap remains marker-only. Checkout and artifact-transfer actions are pinned to full commits; checkout does not persist credentials, and repository credentials are scoped to download steps. A secretless verification job copies assets through no-follow descriptors, checks them before and after inspection, writes an exact receipt, fully reverifies a root-owned read-only snapshot, and transfers only that data through the pinned artifact service while passing the receipt digest separately through a job output. The dependent publish job uses a boundedubuntu-latestrunner with no checkout or release-tag code, verifies that digest plus the exact receipt, asset hashes, and file-only layout, root-seals the data again, and installs Snapcraft directly. Its final fixed shell step alone receives the Store credential, resolves no PATH command, executes no released code, and exposes that credential only to each exact/snap/bin/snapcraft upload --release=edgeprocess. Candidate/stable promotion is manual after installed-Snap frame-copy and missing-runtime fallback smoke; GitHub Actions never promotes automatically. On Windows, package validation requires the exact MPV DLL named by the helper's PE import table beside the executable. Backend adapter:apps/electron-backend/src/app/services/embedded-mpv-frame-copy.adapter.ts; shared-controls adapter:libs/ui/playback/src/lib/embedded-mpv-player/embedded-mpv-controls.adapter.ts; helper:apps/electron-backend/native/helper/; canonical packaging/runtime contracts:docs/architecture/embedded-mpv-native.mdandtools/embedded-mpv/README.md. - Shared player-controls layer:
libs/ui/playback/src/lib/player-controls/exports the engine-neutralPlayerControllercontract, standaloneapp-player-controls, a generic web-video adapter/helper, and component-scopedWEB_PLAYER_SHARED_CONTROLSrollout token. In fullscreen,app-player-controlsshows a pointer-transparent media-title overlay at the top while controls are revealed (mediaTitleinput: movie/channel/series name, plus anS01E03second line for episodes; series names flow from the detail views throughPortalInlinePlayerComponent.seriesTitleandWebPlayerViewComponent.mediaTitle). PersistedSettings.webPlayerSharedControlsis default-off, and its checkbox appears only when HTML5, Video.js, or ArtPlayer is selected.WebPlayerViewComponentsnapshots the preference into the immutable token for each new player host. The parent/workspaceroute awaits the initialSettingsStoreload, including cold-start direct links, before this snapshot can occur. Saving applies to the next host without an application restart; an existing session never changes controls mode in place. Embedded MPV ignores the web-player preference: frame-copy always uses shared DOM controls throughEmbeddedMpvControlsAdapter, native-view retains its compositor-safe legacy dock, and external MPV/VLC retain their own UI. The Embedded MPV host selects exactly one controls UI for its reported engine.showControls=falsedetaches the shared surface, modal overlays gate frame-copy playback shortcuts, fullscreen remains DOM-based with Embedded MPV bounds sync, and a playback/session transition key prevents engine or session handoff from presenting stale recording feedback while timers and pending commands are cancelled. Same-session IPC replies yield to a broadcast snapshot received while the command was pending, so a successful recording acknowledgement cannot be rolled back by a stale reply. The built-in HTML5/hls.js player is the second guarded consumer:HtmlVideoPlayerComponentprovides a component-scopedWebVideoControlsAdapter, while its neutralweb-video-supportbridge is shared with ArtPlayer and owns HLS/Shaka(DASH)/native tracks, MPEG-TS VOD duration correction, caption preference, and source cleanup.HtmlVideoElementSessionowns native video-event lifecycle, persisted volume, start-time/time/ended propagation, and legacy post-play caption suppression. Video.js is the third guarded consumer:VjsPlayerComponentprovides a component-scopedWebVideoControlsAdapter; its bridge rebinds the current Tech video afterplayerreset, exposes source-stable audio/subtitle IDs, preserves caption preference and explicit subtitle-off state, and reads Video.js duration. Reset-driven raw MPEG-TS changes pause first, coalesce to the latest desired source, preserve actual volume across Video.js's reset, and restart when authoritative live/VOD metadata changes. In shared-controls mode, Video.js native controls, click/double-click/hotkey actions, and spatial navigation are disabled. ArtPlayer is the fourth guarded consumer:ArtPlayerComponentprovides a component-scopedWebVideoControlsAdapter;ArtPlayerSourceSessionowns HLS/DASH(Shaka)/MPEG-TS/native sources, the neutral web-video bridge, exact cleanup, and a destroyed-session guard for delayedcustomTypecallbacks, whileArtPlayerVideoSessionowns native media/ArtPlayer events. Shared ArtPlayer mode uses authoritative live/VOD metadata, HLS/Shaka/native tracks and caption preference, MPEG-TS VOD duration correction, and reapplies app volume directly after ArtPlayer restores its own stored volume. Vendor chrome/hotkeys are disabled, and a transparent capture layer gives shared controls exclusive click and double-click ownership.WebPlayerViewComponent.resolvedIsLivesupplies authoritative metadata; visible playback diagnostics disable shared pointer/keyboard ownership and exit only the active HTML5, Video.js, or ArtPlayer shell's own fullscreen so retry/fallback actions remain visible. On the preference-off path, all three web players retain their existing controls, source behavior, and legacy series navigation. Contract:docs/architecture/player-controls-contract.md. - Shared web picture-in-picture stays inside that default-off rollout.
PlayerControllerexposes capabilitypictureInPicture, statepictureInPictureActive/canPictureInPicture, and commandtogglePictureInPicture(). HTML5, Video.js, and ArtPlayer use standard element PiP from the adapter's attached video; shared ArtPlayer keeps vendorpip: false, while preference-off native/vendor paths remain unchanged. The capability-gated button sits before fullscreen and uses active enter/exit semantics; entry is disabled until metadata, and the action is disabled while an operation is pending. Embedded MPV reports capability/state false with a no-op command and has no popup/mini-window. WebVideoControlsAdaptersupplies its current video and binding generation toWebVideoPictureInPictureController; the controller reads the video'sownerDocument, while browser enter/leave events remain authoritative. Exact-owner exit stays available if request support changes. Request/exit invocation remains synchronous for user activation, one operation is serialized, and binding generation plus exact video identity protects replacement and teardown from stale completion. Video.js Tech reset and ArtPlayer rebuild rebind with exact-owner cleanup; HTML5 source changes on a retained target preserve PiP. Standard PiP shows the browser/OS video surface without Angular control chrome, with browser-dependent subtitles. AirPlay, Cast, Document PiP, a PiP keyboard shortcut, and Embedded MPV popup/native support are out of scope.
VOD/Series Detail Pages (two-state layout):
- Xtream and Stalker detail pages use the shared
PortalDetailShellComponent(libs/ui/components/src/lib/portal-detail-shell/) with two states: Browse (hero with poster/metadata/actions, episodes below) and Watch (hero collapses with a ~300ms morph, the inline player takes the full content width, metadata moves to an About block below the episodes) - The inline player (
PortalInlinePlayerComponent) renders a full-width theater stage (.player-shell__viewport): the 16:9 player is centered and letterboxed so the leftover on wide-short windows is always the stage's black background, never app surface. An opt-inplayerAmbientModesetting (Settings → Playback, default off, built-in web players only) fills that leftover with a blurred, dimmed copy of the poster (YouTube "Ambient mode" style) - For inline series playback on wide windows the stage instead docks the player left and shows an "Up Next" episode rail in the leftover column (
app-up-next-railinlibs/ui/playback/src/lib/portal-inline-player/): rest of the current season plus next-season spillover, playing episode highlighted, watch-progress bars from playback positions; clicking plays inline via the host's episode flow (both Xtream and Stalker). Gated by theplayerUpNextRailsetting (default on, web players only) and a ≥320px leftover-width check via ResizeObserver — narrower windows keep the centered theater/ambient stage; movies and live never show the rail. The rail is opaque and sits on top of the ambient fill - Watch state derives from
inlinePlayback() !== nullonly; external MPV/VLC playback keeps the browse layout. Esc and "Close player" exit to browse without navigation; the now-playing back arrow is route-level back (straight to the list via the host'sgoBack()) - A successful external MPV/VLC episode launch immediately persists the selected episode as the latest playback-position entry and retargets the series CTA to
Play episode N; real player telemetry overwrites that marker when available, so episode identity is reliable while exact external timestamps remain best-effort. - Stalker preserves this contract for regular
/series, embedded VODseries[], and lazy Ministra VODis_seriesitems: quick-start translation parameters must reach the CTA, and inline/external episode handoffs must include the parent series id plus resolved season and episode numbers. This metadata lets the dashboard render the tracked S/E badge for VOD-backed series. Existing playback rows without it remain badge-less until the episode is played again. - Hosts pass hero chips/meta/actions as
*appDetailTags/*appDetailMeta/*appDetailActionstemplates; the shell stamps them into both the hero and the About block - Seasons are tabs (
SeasonTabsComponent, dropdown beyond 6 seasons) with auto-selection (playing episode's season → resume season → first) that fires the sameseasonSelectedlazy-load/enrichment hooks as manual clicks; grid/list episode view toggle persists to localStorage; season descriptions come fromget_series_info(Xtream) or TMDB (Stalker) - Dashboard hero/Continue Watching clicks for an Xtream series carry a one-shot resume target through the global-recent inline-detail handoff; after series metadata and playback positions load, the exact saved episode starts at its stored position. A failed positions load leaves the target unconsumed and the handoff detail-only, so a transient storage error never starts the episode from the beginning. Ordinary global-recent grid clicks remain detail-only.
- See
docs/architecture/embedded-inline-playback.md("Two-State Detail Layout")
Radio Player:
- Dedicated audio player for channels with
radio="true"M3U attribute - Cinematic layout: blurred station logo as backdrop, floating artwork card, transport controls
- Always uses the built-in inline player — external player settings (MPV/VLC) are ignored for radio
- EPG panel is hidden for radio channels (radio streams have no EPG data)
- Volume synced with video player via shared
localStoragekey'volume' - Keyboard shortcuts: ArrowUp/ArrowDown (volume), M (mute)
- Component:
libs/ui/playback/src/lib/audio-player/audio-player.component.ts
EPG (Electronic Program Guide):
- XMLTV format support
- Background parsing in worker thread
- Stored in database for quick lookup
- Manual EPG mapping (Electron only): right-click a channel in any list (M3U views, Xtream portal list, Stalker ITV sidebar, global favorites) → "Map EPG channel" attaches it to an uploaded-XMLTV channel; stored in
epg_channel_mappingskeyed by the M3U lookup key or a playlist-scoped portal key (xtream:{playlistId}:{id}/stalker:{playlistId}:{id}, helpers inlibs/shared/interfaces/src/lib/epg-mapping-key.util.ts); resolved on every EPG path (single + batch IPC lookups, portal detail views, preview queues); dialog:libs/ui/components/src/lib/channel-list-container/epg-mapping-dialog/
TMDB Metadata Enrichment (opt-in):
- Enriches Xtream and Stalker VOD/series detail views with TMDB data (plot, cast with avatar chips, director, genres, rating, artwork, YouTube trailers) via a field-level merge — the provider stays authoritative for stream data and any field TMDB can't fill; Cyrillic titles are searched with
ru-RUso exact-title matching works - "Similar" rail in ALL detail views: TMDB recommendations matched against the provider catalog by normalized title, two-tier — exact form first, year-stripped fallback gated on year compatibility (
libs/portal/xtream/feature/src/lib/tmdb-similar.util.ts,normalizeTitleKeys); cross-portal matches from other imported Xtream playlists supplement the Xtream rail and fully power the Stalker rail (CrossPortalSimilarServiceinlibs/services, batchedDB_MATCH_TITLES, Electron only); detail components re-initialize on route param changes since the router reuses them for detail→detail navigation - Season/episode enrichment: opening a season lazily fetches
/tv/{id}/season/{n}and overlays real episode names, overviews and stills viamergeEpisodesWithTmdb(Xtream:XtreamStore.enrichSelectedSerialSeason; Stalker: overlay in the series view'smappedSeasons); for single-season provider slices whose title carries an explicit season marker ("The Mandalorian (2 season)", "s02", "2 сезон"), the marker overrides the provider's renumbered season (resolveEnrichmentSeasonNumberinlibs/shared/interfaces/src/lib/season-marker.util.ts) - Dashboard: opt-in "Trending this week" rail (weekly TMDB trending matched against imported Xtream playlists via one batched
DB_MATCH_TITLESrequest; Electron-only,dashboardRails.tmdbTrendingtoggle) and hero TMDB extras (backdrop fallback, rating + genre badges, memoized per session; series heroes show the tracked S/E badge from playback positions) —DashboardTrendingServiceinlibs/workspace/dashboard/data-access,DashboardHeroTmdbServiceinlibs/workspace/dashboard/feature; both load async after first paint - Actor pages: cast avatar chips are clickable (TMDB person id) and open
actor/:personIdinside the current portal — TMDB person bio + full filmography (acting + directing credits merged; acting wins the per-title dedup); director/creator chips (tmdb_directorsviaenrichedDirectors/enrichedCreatorsintmdb-merge.ts) are clickable the same way and open the same person page; Xtream matches titles against the loaded catalog (direct navigation), unmatched titles and all Stalker titles open the portal search prefilled (?q=); the in-portal search page shows a Back button (SearchLayoutComponent.showBackButton→Location.back()) so users can return to the actor page; shared UI inlibs/ui/shared-portals(ActorViewComponent) - Actor page "All portals" scope (Electron only): batched
DB_MATCH_TITLESworker op (trigram FTS over all imported Xtream playlists,apps/electron-backend/src/app/database/operations/title-match.operations.ts);normalizeTitleis shared renderer/worker vialibs/shared/interfaces/src/lib/title-normalization.util.ts - Opt-in via
Settings > Metadata (TMDB)(sends titles to TMDB); optional user API key overrides the embedded default (DEFAULT_TMDB_API_KEYinlibs/services/src/lib/tmdb/tmdb-config.ts— an empty placeholder in the repo by design; the real key lives in theTMDB_API_KEYGitHub Actions secret and is injected at CI build time bytools/tmdb/inject-tmdb-key.mjs) - Match confidence: provider
tmdb_idtrusted fully; otherwise normalized-title + year (±1) search with a strict gate — no confident match means no enrichment - Detail views render provider data immediately; enrichment patches the selection asynchronously (staleness-guarded)
- Cached in SQLite
tmdb_metadata(Electron, via DB worker opsDB_GET/SET_TMDB_METADATA) or in-memory (PWA); localized via the app language setting. Search-match lookup keys are versioned, and connection startup removes obsolete unversioned rows once through themigration:tmdb-search-lookup-v2-cache-cleanup:v1app-state marker. - Service layer:
libs/services/src/lib/tmdb/; store glue:libs/portal/xtream/data-access/src/lib/stores/xtream-tmdb-enrichment.tsandlibs/portal/stalker/data-access/src/lib/stores/stalker-tmdb-enrichment.ts(hooked inwithStalkerSelection().setSelectedItem) - TMDB attribution (logo + disclaimer) is required and shown in the settings TMDB section and About
- See
docs/architecture/tmdb-metadata-enrichment.md
Favorites and Recently Viewed:
- Per-playlist favorites and global favorites
- Recently viewed tracks watch history
Internationalization:
- Uses
@ngx-translatewith 19 language files inapps/web/src/assets/i18n/
Development Notes
Environment Detection and Dual-Mode Architecture
The app determines whether it's running in Electron or as a PWA by checking:
window.electron; // truthy in Electron, undefined in browser
Why Dual Mode? IPTVnator supports both Electron (desktop app) and PWA (web browser) to provide flexibility:
- Electron: Full-featured desktop experience with local database, external player support (MPV/VLC), and native file system access
- PWA: Lightweight web version that runs in any browser without installation
Environment-Specific Behavior:
app.config.ts-DataFactory()selects DataService implementation based on environmentapp.routes.ts- Same/workspace/...route tree in both environments; guards keep Electron-only routes (e.g. global search) out of the PWA- Storage layer switches automatically:
- Electron → SQLite/Drizzle ORM →
~/.iptvnator/databases/iptvnator.db - PWA → IndexedDB → Browser storage
- Electron → SQLite/Drizzle ORM →
- External player support (MPV/VLC) only available in Electron
- File system operations only available in Electron (uploading playlists from disk)
Base Href Configuration: The app uses different base href values depending on the build target:
- Development & PWA:
baseHref="/"(fromindex.html)- Used by:
pnpm run serve:frontend,pnpm run build:frontend:pwa - For web servers with proper routing
- Used by:
- Electron Production:
baseHref="./"(overridden in build config)- Used by:
pnpm run build:backend,pnpm run make:app - Required for
file://protocol in Electron
- Used by:
Build configurations in apps/web/project.json:
production: Electron build withbaseHref="./"pwa: Web deployment withbaseHref="/"development: Dev mode withbaseHref="/"from index.html
Factory Pattern Implementation: The factory pattern ensures a single codebase works in both environments without conditional checks scattered throughout the application. All environment-specific logic is encapsulated in the service implementations.
Build Commit In About:
CI injects the git commit into apps/web/src/environments/build-commit.ts via tools/build/inject-build-commit.mjs (same placeholder pattern as the TMDB key inject); Settings > About then shows "<version> (<short-sha>)". The semver version itself deliberately stays untouched — a -sha suffix would flip electron-updater into prerelease mode and leak into installer/artifact version fields. Local/dev builds keep the placeholder empty and show the plain version.
Testing Strategy
- Unit tests: Jest with
jest-preset-angularandng-mocks - E2E tests: Playwright testing the web app and Electron app
- Backend tests use standard Jest
- Bug fixes should add focused regression coverage unless there is a documented reason not to.
- Use the impact-based validation policy in
Regression Prevention And Test Updatesto choose targeted unit tests, atomized E2E targets, broad suites, or CDP/manual verification.
Nx Commands
Use nx CLI for better performance:
pnpm nx run <project>:<target>
# Example: pnpm nx run web:build
# Example: pnpm nx run electron-backend:serve
To run multiple projects:
pnpm nx run-many --target=test --all
Electron Build Process
The Electron backend depends on the web app being built first:
electron-backend:builddepends onweb:build- Output goes to
dist/apps/electron-backend(backend) anddist/apps/web(frontend) - Packaging combines both into distributable
Database Migrations
No formal migration system yet. Schema changes are applied via raw SQL in the createTables() function in libs/shared/database/src/lib/connection.ts using CREATE TABLE IF NOT EXISTS. One-off data migrations run guarded by keys stored in the appState table.
Common Patterns
IPC Communication:
- Define handler in appropriate events file (e.g.,
database.events.ts) - Register with
ipcMain.handle()in the event bootstrap function - Expose in preload script via
contextBridge.exposeInMainWorld() - Call from Angular via
window.electron.<methodName>()
Adding New Playlist Source:
- Add type to
libs/shared/interfaces/src/lib/playlist.interface.ts - Create event handler in
apps/electron-backend/src/app/events/ - Add the import flow in
libs/playlist/import/feature/(add-playlist dialog + per-source import components) and surface it on the dashboard (libs/workspace/dashboard/) if needed - Update database schema if needed
State Management:
- Use NgRx for global application state (M3U playlists,
libs/m3u-state) - Use NgRx Signal Store with
signalStoreFeature()composition for portal/feature state (XtreamStore, StalkerStore) - Use NgRx signals for reactive data streams
General Guidelines for working with Nx
- For navigating/exploring the workspace, invoke the
nx-workspaceskill first when it is available - it has patterns for querying projects, targets, and dependencies. If it is unavailable, usepnpm nx show projects,pnpm nx graph, and projectproject.jsonfiles directly. - When running tasks (for example build, lint, test, e2e, etc.), always prefer running the task through
nx(i.e.nx run,nx run-many,nx affected) instead of using the underlying tooling directly - Prefix nx commands with the workspace's package manager (e.g.,
pnpm nx build,npm exec nx test) - avoids using globally installed CLI - You have access to the Nx MCP server and its tools, use them to help the user
- For Nx plugin best practices, check
node_modules/@nx/<plugin>/PLUGIN.md. Not all plugins have this file - proceed without it if unavailable. - NEVER guess CLI flags - always check nx_docs or
--helpfirst when unsure
Scaffolding & Generators
- For scaffolding tasks (creating apps, libs, project structure, setup), ALWAYS invoke the
nx-generateskill FIRST before exploring or calling MCP tools
When to use nx_docs
- USE for: advanced config options, unfamiliar flags, migration guides, plugin configuration, edge cases
- DON'T USE for: basic generator syntax (
nx g @nx/react:app), standard commands, things you already know - The
nx-generateskill handles generator discovery internally - don't call nx_docs just to look up generator syntax