Fix uTorrent torrent list failing on unexpected value types (#712)

fixed ignored downloads not being saved for Queue Cleaner

.github/FUNDING.yml

@@ -0,0 +1 @@
+github: Flaminel

.github/ISSUE_TEMPLATE/1-bug.yml

@@ -6,7 +6,14 @@ body:
   - type: markdown
     attributes:
       value: |
-        Thanks for taking the time to improve cleanuperr!
+        Thanks for taking the time to improve Cleanuparr!
+  - type: checkboxes
+    id: duplicate-check
+    attributes:
+      label: "Duplicate check"
+      options:
+        - label: I have searched for existing issues and confirmed this is not a duplicate.
+          required: true
   - type: checkboxes
     id: init
     attributes:
@@ -14,8 +21,12 @@ body:
       options:
         - label: Reviewed the documentation.
           required: true
+        - label: Ensured I am using ghcr.io/cleanuparr/cleanuparr docker repository.
+          required: true
         - label: Ensured I am using the latest version.
           required: true
+        - label: Enabled verbose logging.
+          required: true
   - type: textarea
     id: what-happened
     attributes:
@@ -23,14 +34,6 @@ body:
       description: If applicable, mention what you expected to happen.
     validations:
       required: true
-  - type: input
-    id: version
-    attributes:
-      label: Version
-      description: What version of our software are you running?
-      placeholder: e.g. 1.3.0 or latest
-    validations:
-      required: true
   - type: dropdown
     id: os
     attributes:

.github/ISSUE_TEMPLATE/2-feature.yml

@@ -6,7 +6,26 @@ body:
   - type: markdown
     attributes:
       value: |
-        Thanks for taking the time to improve cleanuperr!
+        Thanks for taking the time to improve Cleanuparr!
+  - type: checkboxes
+    id: duplicate-check
+    attributes:
+      label: "Duplicate check"
+      options:
+        - label: I have searched for existing issues and confirmed this is not a duplicate.
+          required: true
+  - type: checkboxes
+    id: init
+    attributes:
+      label: Implementation & testing support
+      description: The requester should help answer questions, provide support for the implementation and test changes.
+      options:
+        - label: I understand I must be available to assist with implementation questions and to test the feature before being released.
+          required: true
+        - label: I understand that joining the Discord server may be necessary for better coordination and faster communication.
+          required: true
+        - label: I understand that failure to assist in the development process of my request will result in the request being closed.
+          required: true
   - type: textarea
     id: description
     attributes:

.github/ISSUE_TEMPLATE/3-help.yml

@@ -7,6 +7,26 @@ body:
     attributes:
       value: |
         If you are experiencing unexpected behavior, please consider submitting a bug report instead.
+  - type: checkboxes
+    id: duplicate-check
+    attributes:
+      label: "Duplicate check"
+      options:
+        - label: I have searched for existing issues and confirmed this is not a duplicate.
+          required: true
+  - type: checkboxes
+    id: init
+    attributes:
+      label: "Before submitting a help request, I have:"
+      options:
+        - label: Reviewed the documentation.
+          required: true
+        - label: Ensured I am using ghcr.io/cleanuparr/cleanuparr docker repository.
+          required: true
+        - label: Ensured I am using the latest version.
+          required: true
+        - label: Enabled verbose logging.
+          required: true
   - type: textarea
     id: description
     attributes:

.github/ISSUE_TEMPLATE/config.yml

@@ -1,2 +1,8 @@
 blank_issues_enabled: false
-contact_links: []
+contact_links:
+  - name: Discord Community
+    url: https://discord.gg/SCtMCgtsc4
+    about: Join our Discord for real-time help and discussions
+  - name: Documentation
+    url: https://cleanuparr.github.io/Cleanuparr/
+    about: Check the documentation for configurations and usage guidelines

.github/PULL_REQUEST_TEMPLATE.md

@@ -0,0 +1,24 @@
+## Description
+<!-- Brief description of what this PR does -->
+
+## Related Issue
+Closes #ISSUE_NUMBER
+
+## Type of Change
+- [ ] Bug fix
+- [ ] New feature
+- [ ] Breaking change
+- [ ] Documentation update
+
+## Testing
+<!-- Describe how you tested your changes -->
+
+## Screenshots (if applicable)
+<!-- Add screenshots here -->
+
+## Checklist
+- [ ] I have read the [Contributing Guide](../CONTRIBUTING.md)
+- [ ] I have announced my intent to work on this and received approval
+- [ ] My code follows the project's code standards
+- [ ] I have tested my changes thoroughly
+- [ ] I have updated relevant documentation

.github/actions/vault-secrets/action.yml

@@ -0,0 +1,30 @@
+name: 'Get Vault Secrets'
+description: 'Retrieves secrets from HashiCorp Vault using AppRole authentication'
+inputs:
+  vault_host:
+    description: 'Vault server URL'
+    required: true
+  vault_role_id:
+    description: 'Vault AppRole Role ID'
+    required: true
+  vault_secret_id:
+    description: 'Vault AppRole Secret ID'
+    required: true
+  secrets:
+    description: 'Secrets to retrieve (multiline string, one per line in format: path | output_name)'
+    required: true
+    default: |
+      secrets/data/github repo_readonly_pat | REPO_READONLY_PAT
+      secrets/data/github packages_pat | PACKAGES_PAT
+
+runs:
+  using: "composite"
+  steps:
+    - name: Get vault secrets
+      uses: hashicorp/vault-action@v4
+      with:
+        url: ${{ inputs.vault_host }}
+        method: approle
+        roleId: ${{ inputs.vault_role_id }}
+        secretId: ${{ inputs.vault_secret_id }}
+        secrets: ${{ inputs.secrets }}

.github/release.yml

@@ -0,0 +1,25 @@
+changelog:
+  exclude:
+    labels:
+      - duplicate
+      - invalid
+      - wontfix
+  categories:
+    - title: Breaking Changes
+      labels:
+        - breaking
+    - title: Features
+      labels:
+        - enhancement
+    - title: Bug Fixes
+      labels:
+        - bug
+    - title: Documentation
+      labels:
+        - documentation
+    - title: Maintenance
+      labels:
+        - chore
+    - title: Other Changes
+      labels:
+        - "*"

.github/workflows/build-docker.yml

@@ -0,0 +1,297 @@
+name: Build Docker Images
+
+on:
+  pull_request:
+    paths:
+      - 'code/**'
+  workflow_call:
+    inputs:
+      push_docker:
+        description: 'Push Docker image to registry'
+        type: boolean
+        required: false
+        default: true
+      app_version:
+        description: 'Application version'
+        type: string
+        required: false
+        default: ''
+      ref:
+        description: 'Commit SHA to build. The image revision metadata uses this value. Defaults to the ref derived from the event.'
+        type: string
+        required: false
+        default: ''
+      pr_number:
+        description: 'PR number to tag the image with (pr-N). Required when called outside a pull_request event.'
+        type: string
+        required: false
+        default: ''
+
+# Cancel in-progress runs for the same PR
+concurrency:
+  group: build-docker-${{ inputs.pr_number || github.event.pull_request.number || github.ref }}
+  cancel-in-progress: true
+
+permissions:
+  contents: read
+  packages: write
+
+env:
+  REGISTRY_IMAGE: ghcr.io/cleanuparr/cleanuparr
+
+jobs:
+  # Compute tags, version, and push decision for downstream jobs
+  prepare:
+    runs-on: ubuntu-latest
+    if: github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository
+    outputs:
+      tags: ${{ steps.build-info.outputs.tags }}
+      version: ${{ steps.build-info.outputs.version }}
+      version_docker_tag: ${{ steps.build-info.outputs.version_docker_tag }}
+      branch: ${{ steps.build-info.outputs.branch }}
+      push: ${{ steps.build-info.outputs.push }}
+      github_sha: ${{ inputs.ref || github.event.pull_request.head.sha || github.sha }}
+    steps:
+      - name: Initialize build info
+        id: build-info
+        timeout-minutes: 1
+        env:
+          GITHUB_HEAD_REF: ${{ github.head_ref }}
+          GITHUB_REF: ${{ github.ref }}
+          INPUT_VERSION: ${{ inputs.app_version }}
+          INPUT_REF: ${{ inputs.ref }}
+          INPUT_PR_NUMBER: ${{ inputs.pr_number }}
+          PR_NUMBER: ${{ github.event.pull_request.number }}
+          PR_HEAD_SHA: ${{ github.event.pull_request.head.sha }}
+        run: |
+          githubHeadRef="$GITHUB_HEAD_REF"
+          githubRef="$GITHUB_REF"
+          inputVersion="$INPUT_VERSION"
+          inputRef="$INPUT_REF"
+          inputPrNumber="$INPUT_PR_NUMBER"
+          latestDockerTag=""
+          versionDockerTag=""
+          majorVersionDockerTag=""
+          minorVersionDockerTag=""
+          version="0.0.1"
+
+          if [[ -n "$inputVersion" ]]; then
+            # Version provided via input (manual release)
+            branch="main"
+            latestDockerTag="latest"
+            versionDockerTag="$inputVersion"
+            version="$inputVersion"
+
+            # Extract major and minor versions for additional tags
+            if [[ "$versionDockerTag" =~ ^([0-9]+)\.([0-9]+)\.([0-9]+) ]]; then
+              majorVersionDockerTag="${BASH_REMATCH[1]}"
+              minorVersionDockerTag="${BASH_REMATCH[1]}.${BASH_REMATCH[2]}"
+            fi
+          elif [[ "$githubRef" =~ ^"refs/tags/" ]]; then
+            # Tag push
+            branch=${githubRef##*/}
+            latestDockerTag="latest"
+            versionDockerTag=${branch#v}
+            version=${branch#v}
+
+            # Extract major and minor versions for additional tags
+            if [[ "$versionDockerTag" =~ ^([0-9]+)\.([0-9]+)\.([0-9]+) ]]; then
+              majorVersionDockerTag="${BASH_REMATCH[1]}"
+              minorVersionDockerTag="${BASH_REMATCH[1]}.${BASH_REMATCH[2]}"
+            fi
+          else
+            if [[ -n "$inputPrNumber" ]]; then
+              # Pull request built outside a pull_request event (no head_ref available)
+              branch="$inputRef"
+              versionDockerTag="pr-$inputPrNumber"
+            elif [[ -z "$githubHeadRef" ]]; then
+              # Main branch
+              branch=${githubRef##*/}
+              versionDockerTag="$branch"
+            else
+              # Pull request
+              branch="$PR_HEAD_SHA"
+              versionDockerTag="pr-$PR_NUMBER"
+            fi
+          fi
+
+          githubTags=""
+          if [ -n "$latestDockerTag" ]; then
+            githubTags="$githubTags,$REGISTRY_IMAGE:$latestDockerTag"
+          fi
+          if [ -n "$versionDockerTag" ]; then
+            githubTags="$githubTags,$REGISTRY_IMAGE:$versionDockerTag"
+          fi
+          if [ -n "$minorVersionDockerTag" ]; then
+            githubTags="$githubTags,$REGISTRY_IMAGE:$minorVersionDockerTag"
+          fi
+          if [ -n "$majorVersionDockerTag" ]; then
+            githubTags="$githubTags,$REGISTRY_IMAGE:$majorVersionDockerTag"
+          fi
+
+          githubTags="${githubTags#,}"
+
+          # Determine push decision
+          push="${{ github.event_name == 'pull_request' || inputs.push_docker == true }}"
+
+          echo "tags=$githubTags" >> $GITHUB_OUTPUT
+          echo "version=$version" >> $GITHUB_OUTPUT
+          echo "version_docker_tag=$versionDockerTag" >> $GITHUB_OUTPUT
+          echo "branch=$branch" >> $GITHUB_OUTPUT
+          echo "push=$push" >> $GITHUB_OUTPUT
+
+  # Build each platform in parallel
+  build:
+    runs-on: ubuntu-latest
+    needs: [prepare]
+    strategy:
+      fail-fast: false
+      matrix:
+        platform:
+          - linux/amd64
+          - linux/arm64
+    steps:
+      - name: Prepare platform pair
+        run: |
+          platform=${{ matrix.platform }}
+          echo "PLATFORM_PAIR=${platform//\//-}" >> $GITHUB_ENV
+
+      - name: Get vault secrets
+        uses: hashicorp/vault-action@v4
+        with:
+          url: ${{ secrets.VAULT_HOST }}
+          method: approle
+          roleId: ${{ secrets.VAULT_ROLE_ID }}
+          secretId: ${{ secrets.VAULT_SECRET_ID }}
+          secrets:
+            secrets/data/github repo_readonly_pat | REPO_READONLY_PAT;
+            secrets/data/github packages_pat | PACKAGES_PAT
+
+      - name: Checkout target repository
+        uses: actions/checkout@v7
+        timeout-minutes: 1
+        with:
+          repository: ${{ github.repository }}
+          ref: ${{ needs.prepare.outputs.branch }}
+          token: ${{ env.REPO_READONLY_PAT }}
+          persist-credentials: false
+
+      - name: Set up QEMU
+        uses: docker/setup-qemu-action@v4
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v4
+        timeout-minutes: 5
+
+      - name: Login to GitHub Container Registry
+        if: needs.prepare.outputs.push == 'true'
+        uses: docker/login-action@v4
+        with:
+          registry: ghcr.io
+          username: ${{ github.repository_owner }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Build and push by digest
+        if: needs.prepare.outputs.push == 'true'
+        id: build-push
+        timeout-minutes: 30
+        uses: docker/build-push-action@v7
+        with:
+          context: ${{ github.workspace }}/code
+          file: ${{ github.workspace }}/code/Dockerfile
+          provenance: false
+          labels: |
+            org.opencontainers.image.revision=${{ needs.prepare.outputs.github_sha }}
+            org.opencontainers.image.version=${{ needs.prepare.outputs.version_docker_tag }}
+          build-args: |
+            VERSION=${{ needs.prepare.outputs.version }}
+            PACKAGES_USERNAME=${{ secrets.PACKAGES_USERNAME }}
+            PACKAGES_PAT=${{ env.PACKAGES_PAT }}
+          platforms: ${{ matrix.platform }}
+          outputs: type=image,"name=${{ env.REGISTRY_IMAGE }}",push-by-digest=true,name-canonical=true,push=true
+          cache-from: type=gha,scope=build-${{ env.PLATFORM_PAIR }}
+          cache-to: type=gha,scope=build-${{ env.PLATFORM_PAIR }},mode=max
+
+      - name: Build (no push)
+        if: needs.prepare.outputs.push != 'true'
+        timeout-minutes: 30
+        uses: docker/build-push-action@v7
+        with:
+          context: ${{ github.workspace }}/code
+          file: ${{ github.workspace }}/code/Dockerfile
+          provenance: false
+          labels: |
+            org.opencontainers.image.revision=${{ needs.prepare.outputs.github_sha }}
+            org.opencontainers.image.version=${{ needs.prepare.outputs.version_docker_tag }}
+          build-args: |
+            VERSION=${{ needs.prepare.outputs.version }}
+            PACKAGES_USERNAME=${{ secrets.PACKAGES_USERNAME }}
+            PACKAGES_PAT=${{ env.PACKAGES_PAT }}
+          platforms: ${{ matrix.platform }}
+          push: false
+          cache-from: type=gha,scope=build-${{ env.PLATFORM_PAIR }}
+          cache-to: type=gha,scope=build-${{ env.PLATFORM_PAIR }},mode=max
+
+      - name: Export digest
+        if: needs.prepare.outputs.push == 'true'
+        run: |
+          mkdir -p ${{ runner.temp }}/digests
+          digest="${{ steps.build-push.outputs.digest }}"
+          touch "${{ runner.temp }}/digests/${digest#sha256:}"
+
+      - name: Upload digest
+        if: needs.prepare.outputs.push == 'true'
+        uses: actions/upload-artifact@v7
+        with:
+          name: digests-${{ env.PLATFORM_PAIR }}
+          path: ${{ runner.temp }}/digests/*
+          if-no-files-found: error
+          retention-days: 1
+
+  # Create multi-platform manifest and push with final tags
+  merge:
+    runs-on: ubuntu-latest
+    needs: [prepare, build]
+    if: needs.prepare.outputs.push == 'true'
+    steps:
+      - name: Download digests
+        uses: actions/download-artifact@v8
+        with:
+          path: ${{ runner.temp }}/digests
+          pattern: digests-*
+          merge-multiple: true
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v4
+
+      - name: Login to GitHub Container Registry
+        uses: docker/login-action@v4
+        with:
+          registry: ghcr.io
+          username: ${{ github.repository_owner }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Create manifest list and push
+        timeout-minutes: 5
+        working-directory: ${{ runner.temp }}/digests
+        run: |
+          tags="${{ needs.prepare.outputs.tags }}"
+          tag_args=""
+          IFS=',' read -ra TAG_ARRAY <<< "$tags"
+          for tag in "${TAG_ARRAY[@]}"; do
+            tag=$(echo "$tag" | xargs)
+            if [ -n "$tag" ]; then
+              tag_args="$tag_args -t $tag"
+            fi
+          done
+
+          docker buildx imagetools create $tag_args \
+            --annotation "index:org.opencontainers.image.version=${{ needs.prepare.outputs.version_docker_tag }}" \
+            --annotation "index:org.opencontainers.image.revision=${{ needs.prepare.outputs.github_sha }}" \
+            $(printf '${{ env.REGISTRY_IMAGE }}@sha256:%s ' *)
+
+      - name: Inspect image
+        run: |
+          tags="${{ needs.prepare.outputs.tags }}"
+          first_tag=$(echo "$tags" | tr ',' '\n' | grep -v '^$' | head -1 | xargs)
+          docker buildx imagetools inspect "$first_tag"

.github/workflows/build-executable.yml

@@ -0,0 +1,135 @@
+name: Build Executables
+
+on:
+  workflow_call:
+    inputs:
+      app_version:
+        description: 'Application version'
+        type: string
+        required: false
+        default: ''
+      ref:
+        description: 'Git ref to checkout (branch, tag, or SHA). Defaults to github.ref_name.'
+        type: string
+        required: false
+        default: ''
+      platforms:
+        description: 'JSON array of runtime/platform pairs to build. Defaults to all platforms.'
+        type: string
+        required: false
+        default: >-
+          [{"runtime":"win-x64","platform":"win-amd64"},
+           {"runtime":"linux-x64","platform":"linux-amd64"},
+           {"runtime":"linux-arm64","platform":"linux-arm64"},
+           {"runtime":"osx-x64","platform":"osx-amd64"},
+           {"runtime":"osx-arm64","platform":"osx-arm64"}]
+
+permissions:
+  contents: read
+
+jobs:
+  # Build for each platform in parallel using matrix strategy
+  build-platform:
+    runs-on: ubuntu-latest
+    strategy:
+      fail-fast: true
+      matrix:
+        include: ${{ fromJSON(inputs.platforms) }}
+
+    steps:
+      - name: Set variables
+        run: |
+          ref=${{ github.ref }}
+
+          # Use input version if provided, otherwise determine from ref
+          if [[ -n "${{ inputs.app_version }}" ]]; then
+            appVersion="${{ inputs.app_version }}"
+            releaseVersion="v$appVersion"
+          elif [[ "$ref" =~ ^refs/tags/ ]]; then
+            releaseVersion=${ref##refs/tags/}
+            appVersion=${releaseVersion#v}
+          else
+            releaseVersion="dev-$(date +%Y%m%d-%H%M%S)"
+            appVersion="0.0.1-dev"
+          fi
+
+          repoFullName=${{ github.repository }}
+          repositoryName=${repoFullName#*/}
+
+          echo "githubRepository=${{ github.repository }}" >> $GITHUB_ENV
+          echo "githubRepositoryName=$repositoryName" >> $GITHUB_ENV
+          echo "releaseVersion=$releaseVersion" >> $GITHUB_ENV
+          echo "appVersion=$appVersion" >> $GITHUB_ENV
+          echo "executableName=Cleanuparr.Api" >> $GITHUB_ENV
+
+      - name: Get vault secrets
+        uses: hashicorp/vault-action@v4
+        with:
+          url: ${{ secrets.VAULT_HOST }}
+          method: approle
+          roleId: ${{ secrets.VAULT_ROLE_ID }}
+          secretId: ${{ secrets.VAULT_SECRET_ID }}
+          secrets:
+            secrets/data/github repo_readonly_pat | REPO_READONLY_PAT;
+            secrets/data/github packages_pat | PACKAGES_PAT
+
+      - name: Checkout target repository
+        uses: actions/checkout@v7
+        timeout-minutes: 1
+        with:
+          repository: ${{ env.githubRepository }}
+          ref: ${{ inputs.ref || github.ref_name }}
+          token: ${{ env.REPO_READONLY_PAT }}
+          persist-credentials: false
+
+      - name: Setup dotnet
+        uses: actions/setup-dotnet@v6
+        with:
+          dotnet-version: 10.0.200
+
+      - name: Cache NuGet packages
+        uses: actions/cache@v6
+        with:
+          path: ~/.nuget/packages
+          key: ${{ runner.os }}-nuget-${{ hashFiles('**/packages.lock.json', '**/*.csproj') }}
+          restore-keys: |
+            ${{ runner.os }}-nuget-
+
+      - name: Download frontend artifact
+        uses: actions/download-artifact@v8
+        with:
+          name: frontend-dist
+          path: code/frontend/dist/ui/browser
+
+      - name: Install dependencies and restore
+        run: |
+          dotnet nuget add source --username ${{ github.repository_owner }} --password ${{ env.PACKAGES_PAT }} --store-password-in-clear-text --name Cleanuparr https://nuget.pkg.github.com/Cleanuparr/index.json
+          dotnet restore code/backend/${{ env.executableName }}/${{ env.executableName }}.csproj
+
+      - name: Copy frontend to backend wwwroot
+        run: |
+          mkdir -p code/backend/${{ env.executableName }}/wwwroot
+          cp -r code/frontend/dist/ui/browser/* code/backend/${{ env.executableName }}/wwwroot/
+
+      - name: Build ${{ matrix.platform }}
+        run: |
+          dotnet publish code/backend/${{ env.executableName }}/${{ env.executableName }}.csproj \
+            -c Release \
+            --runtime ${{ matrix.runtime }} \
+            --self-contained \
+            -o artifacts/${{ env.githubRepositoryName }}-${{ env.appVersion }}-${{ matrix.platform }} \
+            /p:PublishSingleFile=true \
+            /p:Version=${{ env.appVersion }} \
+            /p:DebugSymbols=false
+
+      - name: Zip artifact
+        run: |
+          cd ./artifacts
+          zip -r ./${{ env.githubRepositoryName }}-${{ env.appVersion }}-${{ matrix.platform }}.zip ./${{ env.githubRepositoryName }}-${{ env.appVersion }}-${{ matrix.platform }}/
+
+      - name: Upload artifact
+        uses: actions/upload-artifact@v7
+        with:
+          name: executable-${{ matrix.platform }}
+          path: ./artifacts/*.zip
+          retention-days: 30

.github/workflows/build-frontend.yml

@@ -0,0 +1,56 @@
+name: Build Frontend
+
+on:
+  workflow_call:
+    inputs:
+      ref:
+        description: 'Git ref to checkout (branch, tag, or SHA). Defaults to github.ref_name.'
+        type: string
+        required: false
+        default: ''
+
+permissions:
+  contents: read
+
+jobs:
+  build-frontend:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Get vault secrets
+        uses: hashicorp/vault-action@v4
+        with:
+          url: ${{ secrets.VAULT_HOST }}
+          method: approle
+          roleId: ${{ secrets.VAULT_ROLE_ID }}
+          secretId: ${{ secrets.VAULT_SECRET_ID }}
+          secrets:
+            secrets/data/github repo_readonly_pat | REPO_READONLY_PAT
+
+      - name: Checkout repository
+        uses: actions/checkout@v7
+        timeout-minutes: 1
+        with:
+          repository: ${{ github.repository }}
+          ref: ${{ inputs.ref || github.ref_name }}
+          token: ${{ env.REPO_READONLY_PAT }}
+          persist-credentials: false
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v7
+        with:
+          node-version: '26'
+          cache: 'npm'
+          cache-dependency-path: code/frontend/package-lock.json
+
+      - name: Build frontend
+        run: |
+          cd code/frontend
+          npm ci
+          npm run build
+
+      - name: Upload frontend artifact
+        uses: actions/upload-artifact@v7
+        with:
+          name: frontend-dist
+          path: code/frontend/dist/ui/browser
+          retention-days: 1

.github/workflows/build-macos-installer.yml

@@ -0,0 +1,377 @@
+name: Build macOS Installers
+
+permissions:
+  contents: read
+
+on:
+  workflow_call:
+    inputs:
+      app_version:
+        description: 'Application version'
+        type: string
+        required: false
+        default: ''
+
+jobs:
+  build-macos-installer:
+    name: Build macOS ${{ matrix.arch }} Installer
+    runs-on: ${{ matrix.runner }}
+    strategy:
+      fail-fast: false
+      matrix:
+        include:
+          - arch: Intel
+            runner: macos-15-intel
+            runtime: osx-x64
+            min_os_version: "10.15"
+            artifact_suffix: intel
+          - arch: ARM
+            runner: macos-15
+            runtime: osx-arm64
+            min_os_version: "11.0"
+            artifact_suffix: arm64
+
+    steps:
+      - name: Set variables
+        run: |
+          repoFullName=${{ github.repository }}
+          ref=${{ github.ref }}
+
+          # Use input version if provided, otherwise determine from ref
+          if [[ -n "${{ inputs.app_version }}" ]]; then
+            appVersion="${{ inputs.app_version }}"
+            releaseVersion="v$appVersion"
+          elif [[ "$ref" =~ ^refs/tags/ ]]; then
+            releaseVersion=${ref##refs/tags/}
+            appVersion=${releaseVersion#v}
+          else
+            # For manual dispatch, use a default version
+            releaseVersion="dev-$(date +%Y%m%d-%H%M%S)"
+            appVersion="0.0.1-dev"
+          fi
+
+          repositoryName=${repoFullName#*/}
+
+          echo "githubRepository=${{ github.repository }}" >> $GITHUB_ENV
+          echo "githubRepositoryName=$repositoryName" >> $GITHUB_ENV
+          echo "releaseVersion=$releaseVersion" >> $GITHUB_ENV
+          echo "appVersion=$appVersion" >> $GITHUB_ENV
+          echo "executableName=Cleanuparr.Api" >> $GITHUB_ENV
+
+      - name: Get vault secrets
+        uses: hashicorp/vault-action@v4
+        with:
+          url: ${{ secrets.VAULT_HOST }}
+          method: approle
+          roleId: ${{ secrets.VAULT_ROLE_ID }}
+          secretId: ${{ secrets.VAULT_SECRET_ID }}
+          secrets:
+            secrets/data/github repo_readonly_pat | REPO_READONLY_PAT;
+            secrets/data/github packages_pat | PACKAGES_PAT
+
+      - name: Checkout repository
+        uses: actions/checkout@v7
+        with:
+          repository: ${{ env.githubRepository }}
+          ref: ${{ github.ref_name }}
+          token: ${{ env.REPO_READONLY_PAT }}
+          fetch-depth: 0
+          persist-credentials: false
+
+      - name: Download frontend artifact
+        uses: actions/download-artifact@v8
+        with:
+          name: frontend-dist
+          path: code/frontend/dist/ui/browser
+
+      - name: Setup .NET
+        uses: actions/setup-dotnet@v6
+        with:
+          dotnet-version: 10.0.200
+
+      - name: Restore .NET dependencies
+        run: |
+          dotnet nuget add source --username ${{ github.repository_owner }} --password ${{ env.PACKAGES_PAT }} --store-password-in-clear-text --name Cleanuparr https://nuget.pkg.github.com/Cleanuparr/index.json
+          dotnet restore code/backend/${{ env.executableName }}/${{ env.executableName }}.csproj
+
+      - name: Build macOS ${{ matrix.arch }} executable
+        run: |
+          # Clean any existing output directory
+          rm -rf dist
+          mkdir -p dist/temp
+
+          # Build to a temporary location
+          dotnet publish code/backend/${{ env.executableName }}/${{ env.executableName }}.csproj \
+            -c Release \
+            --runtime ${{ matrix.runtime }} \
+            --self-contained true \
+            -o dist/temp \
+            /p:PublishSingleFile=true \
+            /p:Version=${{ env.appVersion }} \
+            /p:DebugType=None \
+            /p:DebugSymbols=false \
+            /p:UseAppHost=true \
+            /p:EnableMacOSCodeSign=false \
+            /p:CodeSignOnCopy=false \
+            /p:_CodeSignDuringBuild=false \
+            /p:PublishTrimmed=false \
+            /p:TrimMode=link
+
+          # Create proper app bundle structure
+          mkdir -p dist/Cleanuparr.app/Contents/MacOS
+
+          # Copy the built executable (note: AssemblyName is "Cleanuparr" not "Cleanuparr.Api")
+          cp dist/temp/Cleanuparr dist/Cleanuparr.app/Contents/MacOS/Cleanuparr
+
+          # Copy frontend directly to where it belongs in the app bundle
+          mkdir -p dist/Cleanuparr.app/Contents/MacOS/wwwroot
+          cp -r code/frontend/dist/ui/browser/* dist/Cleanuparr.app/Contents/MacOS/wwwroot/
+
+          # Copy any additional runtime files if they exist
+          if [ -d "dist/temp" ]; then
+            find dist/temp -name "*.dylib" -exec cp {} dist/Cleanuparr.app/Contents/MacOS/ \; 2>/dev/null || true
+            find dist/temp -name "createdump" -exec cp {} dist/Cleanuparr.app/Contents/MacOS/ \; 2>/dev/null || true
+          fi
+
+      - name: Post-build setup
+        run: |
+          # Make sure the executable is actually executable
+          chmod +x dist/Cleanuparr.app/Contents/MacOS/Cleanuparr
+
+          # Remove any .pdb files that might have been created
+          find dist/Cleanuparr.app/Contents/MacOS -name "*.pdb" -delete 2>/dev/null || true
+
+          echo "Checking architecture of built binary:"
+          file dist/Cleanuparr.app/Contents/MacOS/Cleanuparr
+          if command -v lipo >/dev/null 2>&1; then
+            lipo -info dist/Cleanuparr.app/Contents/MacOS/Cleanuparr
+          fi
+
+          echo "Files in MacOS directory:"
+          ls -la dist/Cleanuparr.app/Contents/MacOS/
+
+      - name: Create macOS app bundle structure
+        run: |
+          # Create proper app bundle structure
+          mkdir -p dist/Cleanuparr.app/Contents/{MacOS,Resources,Frameworks}
+
+          # Convert ICO to ICNS for macOS app bundle
+          if command -v iconutil >/dev/null 2>&1; then
+            # Create iconset directory structure
+            mkdir -p Cleanuparr.iconset
+
+            # Use existing PNG files from Logo directory for different sizes
+            cp Logo/16.png Cleanuparr.iconset/icon_16x16.png
+            cp Logo/32.png Cleanuparr.iconset/icon_16x16@2x.png
+            cp Logo/32.png Cleanuparr.iconset/icon_32x32.png
+            cp Logo/64.png Cleanuparr.iconset/icon_32x32@2x.png
+            cp Logo/128.png Cleanuparr.iconset/icon_128x128.png
+            cp Logo/256.png Cleanuparr.iconset/icon_128x128@2x.png
+            cp Logo/256.png Cleanuparr.iconset/icon_256x256.png
+            cp Logo/512.png Cleanuparr.iconset/icon_256x256@2x.png
+            cp Logo/512.png Cleanuparr.iconset/icon_512x512.png
+            cp Logo/1024.png Cleanuparr.iconset/icon_512x512@2x.png
+
+            # Create ICNS file
+            iconutil -c icns Cleanuparr.iconset -o dist/Cleanuparr.app/Contents/Resources/Cleanuparr.icns
+
+            # Clean up iconset directory
+            rm -rf Cleanuparr.iconset
+          fi
+
+          # Create Launch Daemon plist
+          cat > dist/Cleanuparr.app/Contents/Resources/com.cleanuparr.daemon.plist << EOF
+          <?xml version="1.0" encoding="UTF-8"?>
+          <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+          <plist version="1.0">
+          <dict>
+              <key>Label</key>
+              <string>com.cleanuparr.daemon</string>
+              <key>ProgramArguments</key>
+              <array>
+                  <string>/Applications/Cleanuparr.app/Contents/MacOS/Cleanuparr</string>
+              </array>
+              <key>RunAtLoad</key>
+              <true/>
+              <key>KeepAlive</key>
+              <true/>
+              <key>StandardOutPath</key>
+              <string>/var/log/cleanuparr.log</string>
+              <key>StandardErrorPath</key>
+              <string>/var/log/cleanuparr.error.log</string>
+              <key>WorkingDirectory</key>
+              <string>/Applications/Cleanuparr.app/Contents/MacOS</string>
+              <key>EnvironmentVariables</key>
+              <dict>
+                  <key>HTTP_PORTS</key>
+                  <string>11011</string>
+              </dict>
+          </dict>
+          </plist>
+          EOF
+
+          # Create Info.plist with proper configuration
+          cat > dist/Cleanuparr.app/Contents/Info.plist << EOF
+          <?xml version="1.0" encoding="UTF-8"?>
+          <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+          <plist version="1.0">
+          <dict>
+              <key>CFBundleExecutable</key>
+              <string>Cleanuparr</string>
+              <key>CFBundleIdentifier</key>
+              <string>com.Cleanuparr</string>
+              <key>CFBundleName</key>
+              <string>Cleanuparr</string>
+              <key>CFBundleDisplayName</key>
+              <string>Cleanuparr</string>
+              <key>CFBundleVersion</key>
+              <string>${{ env.appVersion }}</string>
+              <key>CFBundleShortVersionString</key>
+              <string>${{ env.appVersion }}</string>
+              <key>CFBundleInfoDictionaryVersion</key>
+              <string>6.0</string>
+              <key>CFBundlePackageType</key>
+              <string>APPL</string>
+              <key>CFBundleSignature</key>
+              <string>CLNR</string>
+              <key>CFBundleIconFile</key>
+              <string>Cleanuparr</string>
+              <key>NSHighResolutionCapable</key>
+              <true/>
+              <key>NSRequiresAquaSystemAppearance</key>
+              <false/>
+              <key>LSMinimumSystemVersion</key>
+              <string>${{ matrix.min_os_version }}</string>
+              <key>LSApplicationCategoryType</key>
+              <string>public.app-category.productivity</string>
+              <key>NSSupportsAutomaticTermination</key>
+              <false/>
+              <key>NSSupportsSuddenTermination</key>
+              <false/>
+              <key>LSBackgroundOnly</key>
+              <false/>
+              <key>NSAppTransportSecurity</key>
+              <dict>
+                  <key>NSAllowsArbitraryLoads</key>
+                  <true/>
+              </dict>
+          </dict>
+          </plist>
+          EOF
+
+          # Clean up temp directory
+          rm -rf dist/temp
+
+      - name: Create PKG installer
+        run: |
+          # Create preinstall script to handle existing installations
+          mkdir -p scripts
+          cat > scripts/preinstall << 'EOF'
+          #!/bin/bash
+
+          # Stop and unload existing launch daemon if it exists
+          if launchctl list | grep -q "com.cleanuparr.daemon"; then
+            launchctl stop com.cleanuparr.daemon 2>/dev/null || true
+            launchctl unload /Library/LaunchDaemons/com.cleanuparr.daemon.plist 2>/dev/null || true
+          fi
+
+          # Stop any running instances of Cleanuparr
+          pkill -f "Cleanuparr" || true
+          sleep 2
+
+          # Remove old installation if it exists
+          if [[ -d "/Applications/Cleanuparr.app" ]]; then
+            rm -rf "/Applications/Cleanuparr.app"
+          fi
+
+          # Remove old launch daemon plist if it exists
+          if [[ -f "/Library/LaunchDaemons/com.cleanuparr.daemon.plist" ]]; then
+            rm -f "/Library/LaunchDaemons/com.cleanuparr.daemon.plist"
+          fi
+
+          exit 0
+          EOF
+
+          chmod +x scripts/preinstall
+
+          # Create postinstall script
+          cat > scripts/postinstall << 'EOF'
+          #!/bin/bash
+
+          # Set proper permissions for the app bundle
+          chmod -R 755 /Applications/Cleanuparr.app
+          chmod +x /Applications/Cleanuparr.app/Contents/MacOS/Cleanuparr
+
+          # Install the launch daemon
+          cp /Applications/Cleanuparr.app/Contents/Resources/com.cleanuparr.daemon.plist /Library/LaunchDaemons/
+          chown root:wheel /Library/LaunchDaemons/com.cleanuparr.daemon.plist
+          chmod 644 /Library/LaunchDaemons/com.cleanuparr.daemon.plist
+
+          # Load and start the service
+          launchctl load /Library/LaunchDaemons/com.cleanuparr.daemon.plist
+          launchctl start com.cleanuparr.daemon
+
+          # Wait a moment for service to start
+          sleep 3
+
+          # Display as system notification
+          osascript -e 'display notification "Cleanuparr service started! Visit http://localhost:11011 in your browser." with title "Installation Complete"' 2>/dev/null || true
+
+          exit 0
+          EOF
+
+          chmod +x scripts/postinstall
+
+          # Create uninstall script (optional, for user reference)
+          cat > scripts/uninstall_cleanuparr.sh << 'EOF'
+          #!/bin/bash
+          # Cleanuparr Uninstall Script
+          # Run this script with sudo to completely remove Cleanuparr
+
+          echo "Stopping Cleanuparr service..."
+          launchctl stop com.cleanuparr.daemon 2>/dev/null || true
+          launchctl unload /Library/LaunchDaemons/com.cleanuparr.daemon.plist 2>/dev/null || true
+
+          echo "Removing service files..."
+          rm -f /Library/LaunchDaemons/com.cleanuparr.daemon.plist
+
+          echo "Removing application..."
+          rm -rf /Applications/Cleanuparr.app
+
+          echo "Removing logs..."
+          rm -f /var/log/cleanuparr.log
+          rm -f /var/log/cleanuparr.error.log
+
+          echo "Cleanuparr has been completely removed."
+          echo "Note: Configuration files in /Applications/Cleanuparr.app/Contents/MacOS/config/ have been removed with the app."
+          EOF
+
+          chmod +x scripts/uninstall_cleanuparr.sh
+
+          # Copy uninstall script to app bundle for user access
+          cp scripts/uninstall_cleanuparr.sh dist/Cleanuparr.app/Contents/Resources/
+
+          # Determine package name - if app_version input was provided, it's a release build
+          if [[ -n "${{ inputs.app_version }}" ]] || [[ "${{ github.ref }}" =~ ^refs/tags/ ]]; then
+            pkg_name="Cleanuparr-${{ env.appVersion }}-macos-${{ matrix.artifact_suffix }}.pkg"
+          else
+            pkg_name="Cleanuparr-${{ env.appVersion }}-macos-${{ matrix.artifact_suffix }}-dev.pkg"
+          fi
+
+          # Create PKG installer with better metadata
+          pkgbuild --root dist/ \
+                  --scripts scripts/ \
+                  --identifier com.Cleanuparr \
+                  --version ${{ env.appVersion }} \
+                  --install-location /Applications \
+                  --ownership preserve \
+                  ${pkg_name}
+
+          echo "pkgName=${pkg_name}" >> $GITHUB_ENV
+
+      - name: Upload installer as artifact
+        uses: actions/upload-artifact@v7
+        with:
+          name: Cleanuparr-macos-${{ matrix.artifact_suffix }}-installer
+          path: '${{ env.pkgName }}'
+          retention-days: 30

.github/workflows/build-windows-installer.yml

@@ -0,0 +1,149 @@
+name: Build Windows Installer
+
+on:
+  workflow_call:
+    inputs:
+      app_version:
+        description: 'Application version'
+        type: string
+        required: false
+        default: ''
+      ref:
+        description: 'Git ref to checkout (branch, tag, or SHA). Defaults to github.ref_name.'
+        type: string
+        required: false
+        default: ''
+
+permissions:
+  contents: read
+
+jobs:
+  build-windows-installer:
+    runs-on: windows-latest
+    
+    steps:
+      - name: Set variables
+        shell: pwsh
+        run: |
+          $repoFullName = "${{ github.repository }}"
+          $ref = "${{ github.ref }}"
+          $inputVersion = "${{ inputs.app_version }}"
+
+          # Use input version if provided, otherwise determine from ref
+          if ($inputVersion -ne "") {
+            $appVersion = $inputVersion
+            $releaseVersion = "v$appVersion"
+          } elseif ($ref -match "^refs/tags/") {
+            $releaseVersion = $ref -replace "refs/tags/", ""
+            $appVersion = $releaseVersion -replace "^v", ""
+          } else {
+            # For manual dispatch, use a default version
+            $releaseVersion = "dev-$(Get-Date -Format 'yyyyMMdd-HHmmss')"
+            $appVersion = "0.0.1-dev"
+          }
+
+          $repositoryName = $repoFullName.Split("/")[1]
+
+          echo "githubRepository=${{ github.repository }}" >> $env:GITHUB_ENV
+          echo "githubRepositoryName=$repositoryName" >> $env:GITHUB_ENV
+          echo "releaseVersion=$releaseVersion" >> $env:GITHUB_ENV
+          echo "appVersion=$appVersion" >> $env:GITHUB_ENV
+          echo "APP_VERSION=$appVersion" >> $env:GITHUB_ENV
+          echo "executableName=Cleanuparr.Api" >> $env:GITHUB_ENV
+
+      - name: Get vault secrets
+        uses: hashicorp/vault-action@v4
+        with:
+          url: ${{ secrets.VAULT_HOST }}
+          method: approle
+          roleId: ${{ secrets.VAULT_ROLE_ID }}
+          secretId: ${{ secrets.VAULT_SECRET_ID }}
+          secrets:
+            secrets/data/github repo_readonly_pat | REPO_READONLY_PAT;
+            secrets/data/github packages_pat | PACKAGES_PAT
+
+      - name: Checkout repository
+        uses: actions/checkout@v7
+        with:
+          repository: ${{ env.githubRepository }}
+          ref: ${{ inputs.ref || github.ref_name }}
+          token: ${{ env.REPO_READONLY_PAT }}
+          persist-credentials: false
+
+      - name: Download frontend artifact
+        uses: actions/download-artifact@v8
+        with:
+          name: frontend-dist
+          path: code/frontend/dist/ui/browser
+
+      - name: Setup .NET
+        uses: actions/setup-dotnet@v6
+        with:
+          dotnet-version: 10.0.200
+
+      - name: Restore .NET dependencies
+        run: |
+          dotnet nuget add source --username ${{ github.repository_owner }} --password ${{ env.PACKAGES_PAT }} --store-password-in-clear-text --name Cleanuparr https://nuget.pkg.github.com/Cleanuparr/index.json
+          dotnet restore code/backend/${{ env.executableName }}/${{ env.executableName }}.csproj
+
+      - name: Copy frontend to backend wwwroot
+        shell: pwsh
+        run: |
+          New-Item -ItemType Directory -Force -Path "code/backend/${{ env.executableName }}/wwwroot"
+          Copy-Item -Path "code/frontend/dist/ui/browser/*" -Destination "code/backend/${{ env.executableName }}/wwwroot/" -Recurse -Force
+
+      - name: Build Windows executable
+        run: |
+          dotnet publish code/backend/${{ env.executableName }}/${{ env.executableName }}.csproj -c Release --runtime win-x64 --self-contained -o dist /p:PublishSingleFile=true /p:Version=${{ env.appVersion }} /p:DebugType=None /p:DebugSymbols=false
+
+      - name: Setup Inno Setup
+        shell: pwsh
+        run: |
+          choco install innosetup --no-progress -y
+          $innoPath = "C:\Program Files (x86)\Inno Setup 6"
+          echo "$innoPath" >> $env:GITHUB_PATH
+
+      - name: Verify LICENSE file exists
+        shell: pwsh
+        run: |
+          if (-not (Test-Path "LICENSE")) {
+            Write-Error "LICENSE file not found in repository root"
+            exit 1
+          }
+          Write-Host "LICENSE file found successfully"
+
+      - name: Build Windows installer
+        shell: pwsh
+        run: |
+          # Copy installer script to root
+          Copy-Item "installers/windows/cleanuparr-installer.iss" -Destination "cleanuparr-installer.iss"
+          
+          # The installer script has been pre-updated with proper icon and config paths
+          # No dynamic modifications needed as the base script now includes correct references
+          
+          # Run Inno Setup compiler
+          & "C:\Program Files (x86)\Inno Setup 6\ISCC.exe" "cleanuparr-installer.iss"
+          
+          # Check if installer was created
+          if (Test-Path "installer/Cleanuparr_Setup.exe") {
+            Write-Host "Installer created successfully"
+          } else {
+            Write-Error "Installer creation failed"
+            exit 1
+          }
+
+      - name: Rename installer with version
+        shell: pwsh
+        run: |
+          $installerName = "Cleanuparr-${{ env.appVersion }}-Setup.exe"
+          Move-Item "installer/Cleanuparr_Setup.exe" "installer/$installerName"
+          echo "installerName=$installerName" >> $env:GITHUB_ENV
+
+      - name: Upload installer artifact
+        uses: actions/upload-artifact@v7
+        with:
+          name: Cleanuparr-windows-installer
+          path: installer/${{ env.installerName }}
+          retention-days: 30
+
+      # Removed individual release step - handled by main release workflow 

.github/workflows/build.yml

@@ -1,12 +0,0 @@
-on:
-  workflow_dispatch:
-  workflow_call:
-
-jobs:
-  build:
-    uses: flmorg/universal-workflows/.github/workflows/dotnet.build.app.yml@main
-    with:
-      dockerRepository: flaminel/cleanuperr
-      githubContext: ${{ toJSON(github) }}
-      outputName: cleanuperr
-    secrets: inherit

.github/workflows/cloudflare-pages-blocklists.yml

@@ -0,0 +1,46 @@
+name: Deploy to Cloudflare Pages
+
+on:
+  push:
+    branches:
+      - main
+    paths:
+      - 'Cloudflare/**'
+      - 'blacklist'
+      - 'blacklist_permissive'
+      - 'whitelist'
+      - 'whitelist_with_subtitles'
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+jobs:
+  deploy:
+    runs-on: ubuntu-latest
+    name: Deploy to Cloudflare Pages
+    
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v7
+        with:
+          persist-credentials: false
+
+      - name: Create directory for static files
+        run: |
+          mkdir -p Cloudflare/static
+      
+      - name: Copy root static files to Cloudflare static directory
+        run: |
+          cp blacklist Cloudflare/static/
+          cp blacklist_permissive Cloudflare/static/
+          cp whitelist Cloudflare/static/
+          cp whitelist_with_subtitles Cloudflare/static/
+      
+      - name: Deploy to Cloudflare Pages
+        uses: cloudflare/wrangler-action@v4
+        with:
+          apiToken: ${{ secrets.CLOUDFLARE_PAGES_TOKEN }}
+          accountId: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}
+          workingDirectory: "Cloudflare"
+          command: pages deploy . --project-name=cleanuparr

.github/workflows/cloudflare-pages-status.yml

@@ -0,0 +1,43 @@
+name: Deploy Status Page to Cloudflare Pages
+
+on:
+  workflow_call:
+    inputs:
+      version:
+        description: 'Release version (e.g. v1.2.3)'
+        type: string
+        required: true
+  workflow_dispatch:
+    inputs:
+      version:
+        description: 'Release version (e.g. v1.2.3)'
+        type: string
+        required: true
+
+permissions:
+  contents: read
+
+jobs:
+  deploy:
+    runs-on: ubuntu-latest
+    name: Deploy Status Page to Cloudflare Pages
+    
+    steps:
+      - name: Create status files
+        run: |
+          mkdir -p status
+          echo "{ \"version\": \"${{ inputs.version }}\" }" > status/status.json
+
+          # Cache static files for 10 minutes
+          cat > status/_headers << 'EOF'
+          /*
+            Cache-Control: public, max-age=600, s-maxage=600
+          EOF
+      
+      - name: Deploy to Cloudflare Pages
+        uses: cloudflare/wrangler-action@v4
+        with:
+          apiToken: ${{ secrets.CLOUDFLARE_PAGES_TOKEN }}
+          accountId: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}
+          workingDirectory: "status"
+          command: pages deploy . --project-name=cleanuparr-status

.github/workflows/dependency-review.yml

@@ -0,0 +1,47 @@
+name: Dependency Review
+
+on:
+  pull_request:
+    branches:
+      - main
+
+# Cancel in-progress runs for the same PR
+concurrency:
+  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
+  cancel-in-progress: true
+
+permissions:
+  contents: read
+  pull-requests: write
+
+jobs:
+  dependency-review:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v7
+        with:
+          persist-credentials: false
+
+      - name: Dependency Review
+        uses: actions/dependency-review-action@v5
+        with:
+          # Fail on critical and high severity vulnerabilities
+          fail-on-severity: high
+          # Warn on moderate vulnerabilities
+          warn-on-severity: moderate
+          # Allow licenses
+          # allow-licenses: MIT, Apache-2.0, BSD-2-Clause, BSD-3-Clause, ISC, 0BSD
+          # Comment summarizes the vulnerabilities found
+          comment-summary-in-pr: on-failure
+          # Show dependency changes in PR
+          show-openssf-scorecard: true
+          vulnerability-check: true
+
+      - name: Upload dependency review results
+        uses: actions/upload-artifact@v7
+        with:
+          name: dependency-review-results
+          path: dependency-review-*.json
+          if-no-files-found: ignore
+          retention-days: 30

.github/workflows/deploy.yml

@@ -1,19 +0,0 @@
-on:
-  workflow_call:
-  workflow_dispatch:
-  push:
-    paths:
-      - 'chart/**'
-    branches: [ main ]
-
-jobs:
-  deploy:
-    uses: flmorg/universal-workflows/.github/workflows/chart.install.yml@main
-    with:
-      githubContext: ${{ toJSON(github) }}
-      chartRepo: oci://ghcr.io/flmorg
-      chartName: universal-chart
-      version: ^1.0.0
-      valuesPath: chart/values.yaml
-      releaseName: main
-    secrets: inherit

.github/workflows/docs-preview-cleanup.yml

@@ -0,0 +1,63 @@
+name: Docs Preview Cleanup
+
+on:
+  pull_request:
+    types: [closed]
+    paths:
+      - 'docs/**'
+  workflow_dispatch:
+    inputs:
+      pr_number:
+        description: 'PR number whose preview deployments to delete'
+        required: true
+        type: string
+
+permissions:
+  contents: read
+
+jobs:
+  cleanup:
+    runs-on: ubuntu-latest
+    # Skip fork PRs
+    if: github.event_name == 'workflow_dispatch' || github.event.pull_request.head.repo.full_name == github.repository
+    env:
+      CF_API_TOKEN: ${{ secrets.CLOUDFLARE_PAGES_TOKEN }}
+      CF_ACCOUNT_ID: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}
+      PROJECT: cleanuparr-docs
+      BRANCH: pull-${{ github.event.pull_request.number || inputs.pr_number }}
+    steps:
+      - name: Delete preview deployments for this PR
+        run: |
+          set -euo pipefail
+          api="https://api.cloudflare.com/client/v4"
+          auth="Authorization: Bearer $CF_API_TOKEN"
+
+          if [ -z "${CF_ACCOUNT_ID:-}" ]; then
+            echo "CLOUDFLARE_ACCOUNT_ID repo variable is not set" >&2
+            exit 1
+          fi
+          echo "Account $CF_ACCOUNT_ID, tearing down branch $BRANCH"
+
+          ids=""
+          page=1
+          while :; do
+            resp=$(curl -fsS -H "$auth" \
+              "$api/accounts/$CF_ACCOUNT_ID/pages/projects/$PROJECT/deployments?page=$page&per_page=25")
+            count=$(echo "$resp" | jq '.result | length')
+            [ "$count" -eq 0 ] && break
+
+            page_ids=$(echo "$resp" | jq -r --arg b "$BRANCH" \
+              '.result[] | select(.deployment_trigger.metadata.branch == $b) | .id')
+            ids="$ids $page_ids"
+            page=$((page + 1))
+          done
+
+          deleted=0
+          for id in $ids; do
+            echo "Deleting deployment $id"
+            curl -fsS -X DELETE -H "$auth" \
+              "$api/accounts/$CF_ACCOUNT_ID/pages/projects/$PROJECT/deployments/$id?force=true" >/dev/null
+            deleted=$((deleted + 1))
+          done
+
+          echo "Deleted $deleted deployment(s) for $BRANCH"

.github/workflows/docs-preview.yml

@@ -0,0 +1,85 @@
+name: Docs Preview
+
+on:
+  pull_request:
+    paths:
+      - 'docs/**'
+
+concurrency:
+  group: docs-preview-${{ github.event.pull_request.number }}
+  cancel-in-progress: true
+
+permissions:
+  contents: read
+  pull-requests: write
+
+jobs:
+  preview:
+    runs-on: ubuntu-latest
+    # Skip fork PRs
+    if: github.event.pull_request.head.repo.full_name == github.repository
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v7
+        with:
+          persist-credentials: false
+
+      - name: Set up Node.js
+        uses: actions/setup-node@v7
+        with:
+          node-version: 26.x
+          cache: yarn
+          cache-dependency-path: docs/yarn.lock
+
+      - name: Install dependencies
+        working-directory: docs
+        run: yarn install --frozen-lockfile
+
+      - name: Build Docusaurus
+        working-directory: docs
+        run: yarn build
+
+      - name: Deploy preview to Cloudflare Pages
+        uses: cloudflare/wrangler-action@v4
+        with:
+          apiToken: ${{ secrets.CLOUDFLARE_PAGES_TOKEN }}
+          accountId: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}
+          workingDirectory: docs
+          command: pages deploy build --project-name=cleanuparr-docs --branch=pull-${{ github.event.pull_request.number }}
+
+      - name: Comment preview URL
+        uses: actions/github-script@v9
+        with:
+          script: |
+            const url = `https://pull-${context.issue.number}.cleanuparr-docs.pages.dev`;
+            const marker = '<!-- docs-preview -->';
+            const body = [
+              marker,
+              `Docs preview for \`${context.payload.pull_request.head.ref}\` (\`${context.payload.pull_request.head.sha.substring(0, 7)}\`):`,
+              ``,
+              `${url}/docs`
+            ].join('\n');
+
+            const comments = await github.paginate(github.rest.issues.listComments, {
+              owner: context.repo.owner,
+              repo: context.repo.repo,
+              issue_number: context.issue.number,
+              per_page: 100
+            });
+            const existing = comments.find(c => c.body.includes(marker));
+
+            if (existing) {
+              await github.rest.issues.updateComment({
+                owner: context.repo.owner,
+                repo: context.repo.repo,
+                comment_id: existing.id,
+                body
+              });
+            } else {
+              await github.rest.issues.createComment({
+                owner: context.repo.owner,
+                repo: context.repo.repo,
+                issue_number: context.issue.number,
+                body
+              });
+            }

.github/workflows/docs.yml

@@ -0,0 +1,73 @@
+name: Deploy Docusaurus to GitHub Pages
+
+on:
+  workflow_call: {}
+  workflow_dispatch: {}
+
+permissions:
+  contents: read
+  pages: write
+  id-token: write
+
+jobs:
+  publish:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v7
+        with:
+          fetch-depth: 0
+          ref: main
+          persist-credentials: false
+
+      - name: Set up Node.js
+        uses: actions/setup-node@v7
+        with:
+          node-version: 26.x
+          cache: yarn
+          cache-dependency-path: docs/yarn.lock
+
+      - name: Install dependencies
+        working-directory: docs
+        run: yarn install --frozen-lockfile
+
+      - name: Build Docusaurus
+        working-directory: docs
+        run: yarn build
+
+      - name: Publish to org site
+        uses: peaceiris/actions-gh-pages@v4
+        with:
+          personal_token: ${{ secrets.DOCS_DEPLOY_TOKEN }}
+          external_repository: Cleanuparr/Cleanuparr.github.io
+          publish_branch: gh-pages
+          publish_dir: docs/build
+
+  redirect:
+    environment:
+      name: github-pages
+      url: ${{ steps.deployment.outputs.page_url }}
+    runs-on: ubuntu-latest
+    steps:
+      - name: Build redirect stub
+        run: |
+          mkdir redirect
+          cat > redirect/404.html <<'EOF'
+          <!doctype html>
+          <meta http-equiv="refresh" content="0;url=https://cleanuparr.github.io/docs">
+          <script>
+            var p = location.pathname.replace(/^\/Cleanuparr/, '');
+            location.replace('https://cleanuparr.github.io' + p + location.search + location.hash);
+          </script>
+          EOF
+          cp redirect/404.html redirect/index.html
+
+      - name: Upload artifact
+        uses: actions/upload-pages-artifact@v5
+        with:
+          path: redirect
+          retention-days: 1
+
+      - name: Deploy redirect to GitHub Pages
+        id: deployment
+        uses: actions/deploy-pages@v5

.github/workflows/e2e.yml

@@ -0,0 +1,124 @@
+name: E2E Tests
+
+on:
+  workflow_call:
+    inputs:
+      ref:
+        description: 'Git ref to checkout (branch, tag, or SHA). Defaults to the triggering ref.'
+        type: string
+        required: false
+        default: ''
+  workflow_dispatch:
+
+concurrency:
+  group: E2E Tests-${{ inputs.ref || github.ref }}
+  cancel-in-progress: true
+
+permissions:
+  contents: read
+
+jobs:
+  e2e:
+    runs-on: ubuntu-latest
+    timeout-minutes: 60
+
+    strategy:
+      fail-fast: false
+      matrix:
+        suite:
+          # These folders need only the app, Keycloak, nginx and the wiremocks.
+          - name: core
+            make-target: up-core
+            projects: >-
+              --project=account --project=arr --project=auth
+              --project=blacklist-sync --project=core --project=download-client
+              --project=general --project=notifications --project=oidc
+              --project=queue-cleaner --project=regression --project=seeker
+              --project=signalr
+          # These folders need the torrent clients and the tracker.
+          - name: clients
+            make-target: up-clients
+            projects: '--project=download-cleaner --project=malware-blocker'
+
+    name: e2e (${{ matrix.suite.name }})
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v7
+        timeout-minutes: 1
+        with:
+          ref: ${{ inputs.ref || github.ref }}
+          persist-credentials: false
+
+      - name: Get vault secrets
+        uses: hashicorp/vault-action@v4
+        with:
+          url: ${{ secrets.VAULT_HOST }}
+          method: approle
+          roleId: ${{ secrets.VAULT_ROLE_ID }}
+          secretId: ${{ secrets.VAULT_SECRET_ID }}
+          secrets:
+            secrets/data/github packages_pat | PACKAGES_PAT
+
+      - name: Start services
+        working-directory: e2e
+        run: make ${{ matrix.suite.make-target }}
+        env:
+          PACKAGES_USERNAME: ${{ github.repository_owner }}
+          PACKAGES_PAT: ${{ env.PACKAGES_PAT }}
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v7
+        with:
+          node-version: 26
+          cache: 'npm'
+          cache-dependency-path: e2e/package-lock.json
+
+      - name: Install E2E dependencies
+        working-directory: e2e
+        run: npm ci
+
+      - name: Resolve Playwright version
+        id: playwright
+        working-directory: e2e
+        run: echo "version=$(node -p "require('@playwright/test/package.json').version")" >> "$GITHUB_OUTPUT"
+
+      - name: Cache Playwright browsers
+        uses: actions/cache@v6
+        with:
+          path: ~/.cache/ms-playwright
+          key: ${{ runner.os }}-playwright-${{ steps.playwright.outputs.version }}
+
+      - name: Report runner disk space
+        run: df -h /
+
+      - name: Install Playwright browsers
+        working-directory: e2e
+        timeout-minutes: 10
+        env:
+          DEBUG: pw:install
+        run: npx playwright install --with-deps chromium
+
+      - name: Run E2E tests
+        working-directory: e2e
+        run: npx playwright test ${{ matrix.suite.projects }}
+
+      - name: Dump service logs
+        if: failure()
+        working-directory: e2e
+        run: docker compose -f docker-compose.e2e.yml logs --no-color --tail 500
+
+      - name: Upload test results
+        uses: actions/upload-artifact@v7
+        if: always()
+        with:
+          name: e2e-test-results-${{ matrix.suite.name }}
+          path: |
+            e2e/playwright-report/
+            e2e/test-results/
+          retention-days: 7
+
+      - name: Stop services
+        if: always()
+        working-directory: e2e
+        run: make down

.github/workflows/pipeline.yml

@@ -1,20 +0,0 @@
-on:
-  push:
-    tags:
-      - "v*.*.*"
-    # paths:
-    #   - 'code/**'
-    # branches: [ main ]
-  pull_request:
-    paths:
-      - 'code/**'
-
-jobs:
-  build:
-    uses: flmorg/cleanuperr/.github/workflows/build.yml@main
-    secrets: inherit
-
-  # deploy:
-  #   needs: [ build ]
-  #   uses: flmorg/cleanuperr/.github/workflows/deploy.yml@main
-  #   secrets: inherit

.github/workflows/pr-build.yml

@@ -0,0 +1,297 @@
+name: PR Build (Comment Triggered)
+
+on:
+  issue_comment:
+    types: [created]
+
+permissions:
+  contents: read
+
+jobs:
+  validate:
+    runs-on: ubuntu-latest
+    if: github.event.issue.pull_request != null
+    permissions:
+      contents: read
+      issues: write
+      pull-requests: read
+      statuses: write
+    outputs:
+      build: ${{ steps.parse.outputs.build }}
+      meta: ${{ steps.parse.outputs.meta }}
+      pr_ref: ${{ steps.parse.outputs.pr_ref }}
+      pr_sha: ${{ steps.parse.outputs.pr_sha }}
+      pr_number: ${{ steps.parse.outputs.pr_number }}
+
+    steps:
+      - name: Parse command and check permissions
+        id: parse
+        uses: actions/github-script@v9
+        with:
+          script: |
+            const comment = context.payload.comment.body.trim();
+
+            const ALLOWED_USERS = ['flaminel'];
+
+            // Parse supported commands
+            const commands = {
+              '/build-windows': {
+                target: 'windows',
+                label: 'Windows installer',
+                artifacts: '`Cleanuparr-windows-installer`'
+              },
+              '/build-linux': {
+                target: 'linux',
+                label: 'Linux executables',
+                artifacts: '`executable-linux-amd64` and `executable-linux-arm64`'
+              },
+              '/test': {
+                target: 'test',
+                label: 'Unit tests',
+                artifacts: '`test-results`, `coverage-report` and `frontend-coverage-report`'
+              },
+              '/e2e': {
+                target: 'e2e',
+                label: 'E2E tests',
+                artifacts: '`e2e-test-results-core` and `e2e-test-results-clients`'
+              },
+              '/build-docker': {
+                target: 'docker',
+                label: 'Docker image',
+                artifacts: ''
+              }
+            };
+
+            const command = commands[comment];
+            if (!command) {
+              console.log(`Comment "${comment}" is not a recognized build command, skipping.`);
+              return;
+            }
+
+            const login = context.payload.comment.user.login;
+            if (!ALLOWED_USERS.includes(login.toLowerCase())) {
+              console.log(`User ${login} is not allowed to trigger builds, skipping.`);
+              return;
+            }
+
+            try {
+              await github.rest.reactions.createForIssueComment({
+                owner: context.repo.owner,
+                repo: context.repo.repo,
+                comment_id: context.payload.comment.id,
+                content: 'eyes'
+              });
+            } catch (e) {
+              console.log(`Could not add reaction: ${e}`);
+            }
+
+            // Fetch PR details
+            const pr = await github.rest.pulls.get({
+              owner: context.repo.owner,
+              repo: context.repo.repo,
+              pull_number: context.issue.number
+            });
+
+            // Verify PR is open
+            if (pr.data.state !== 'open') {
+              console.log('PR is not open, skipping.');
+              return;
+            }
+
+            console.log(`${login} triggered ${comment} on PR #${pr.data.number} @ ${pr.data.head.sha}.`);
+
+            try {
+              await github.rest.repos.createCommitStatus({
+                owner: context.repo.owner,
+                repo: context.repo.repo,
+                sha: pr.data.head.sha,
+                state: 'pending',
+                context: `pr-build / ${command.target}`,
+                description: `${command.label} running`,
+                target_url: `${context.serverUrl}/${context.repo.owner}/${context.repo.repo}/actions/runs/${context.runId}`
+              });
+            } catch (e) {
+              console.log(`Could not create commit status: ${e}`);
+            }
+
+            core.setOutput('build', command.target);
+            core.setOutput('meta', JSON.stringify({ label: command.label, artifacts: command.artifacts }));
+
+            // Export PR details for downstream jobs
+            core.setOutput('pr_ref', pr.data.head.ref);
+            core.setOutput('pr_sha', pr.data.head.sha);
+            core.setOutput('pr_number', String(pr.data.number));
+
+  build-frontend:
+    needs: validate
+    if: needs.validate.outputs.build == 'windows' || needs.validate.outputs.build == 'linux'
+    uses: ./.github/workflows/build-frontend.yml
+    with:
+      ref: ${{ needs.validate.outputs.pr_sha }}
+    secrets: inherit
+
+  build-windows:
+    needs: [validate, build-frontend]
+    if: needs.validate.outputs.build == 'windows'
+    concurrency:
+      group: pr-build-windows-${{ needs.validate.outputs.pr_number }}
+      cancel-in-progress: true
+    uses: ./.github/workflows/build-windows-installer.yml
+    with:
+      ref: ${{ needs.validate.outputs.pr_sha }}
+    secrets: inherit
+
+  build-linux:
+    needs: [validate, build-frontend]
+    if: needs.validate.outputs.build == 'linux'
+    concurrency:
+      group: pr-build-linux-${{ needs.validate.outputs.pr_number }}
+      cancel-in-progress: true
+    uses: ./.github/workflows/build-executable.yml
+    with:
+      ref: ${{ needs.validate.outputs.pr_sha }}
+      platforms: '[{"runtime":"linux-x64","platform":"linux-amd64"},{"runtime":"linux-arm64","platform":"linux-arm64"}]'
+    secrets: inherit
+
+  test:
+    needs: validate
+    if: needs.validate.outputs.build == 'test'
+    concurrency:
+      group: pr-test-${{ needs.validate.outputs.pr_number }}
+      cancel-in-progress: true
+    uses: ./.github/workflows/test.yml
+    with:
+      ref: ${{ needs.validate.outputs.pr_sha }}
+    secrets: inherit
+
+  e2e:
+    needs: validate
+    if: needs.validate.outputs.build == 'e2e'
+    concurrency:
+      group: pr-e2e-${{ needs.validate.outputs.pr_number }}
+      cancel-in-progress: true
+    uses: ./.github/workflows/e2e.yml
+    with:
+      ref: ${{ needs.validate.outputs.pr_sha }}
+    secrets: inherit
+
+  build-docker:
+    needs: validate
+    if: needs.validate.outputs.build == 'docker'
+    permissions:
+      contents: read
+      packages: write
+    uses: ./.github/workflows/build-docker.yml
+    with:
+      ref: ${{ needs.validate.outputs.pr_sha }}
+      pr_number: ${{ needs.validate.outputs.pr_number }}
+      push_docker: true
+    secrets: inherit
+
+  post-result:
+    needs: [validate, build-frontend, build-windows, build-linux, test, e2e, build-docker]
+    if: always() && needs.validate.outputs.build != ''
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      issues: write
+      statuses: write
+
+    steps:
+      - name: Post result comment
+        uses: actions/github-script@v9
+        env:
+          PR_REF: ${{ needs.validate.outputs.pr_ref }}
+          META: ${{ needs.validate.outputs.meta }}
+        with:
+          script: |
+            const target = '${{ needs.validate.outputs.build }}';
+
+            // needs.* is only readable inside this job, so the result lookup has to live here.
+            const results = {
+              windows: '${{ needs.build-windows.result }}',
+              linux: '${{ needs.build-linux.result }}',
+              test: '${{ needs.test.result }}',
+              e2e: '${{ needs.e2e.result }}',
+              docker: '${{ needs.build-docker.result }}'
+            };
+
+            const frontend = '${{ needs.build-frontend.result }}';
+
+            let result = results[target];
+            if (result === 'skipped' && (frontend === 'failure' || frontend === 'cancelled')) {
+              result = frontend;
+            }
+
+            if (!result || result === 'skipped') {
+              console.log(`Nothing to report for target "${target}" (${result}).`);
+              return;
+            }
+
+            const { label, artifacts } = JSON.parse(process.env.META);
+            const runUrl = `https://github.com/${context.repo.owner}/${context.repo.repo}/actions/runs/${context.runId}`;
+
+            const prSha = '${{ needs.validate.outputs.pr_sha }}';
+            const statusContext = `pr-build / ${target}`;
+            let publishStatus = result !== 'cancelled';
+
+            if (publishStatus) {
+              try {
+                const combined = await github.rest.repos.getCombinedStatusForRef({
+                  owner: context.repo.owner,
+                  repo: context.repo.repo,
+                  ref: prSha
+                });
+                const current = combined.data.statuses.find(s => s.context === statusContext);
+                publishStatus = !current || current.state !== 'pending' || current.target_url === runUrl;
+              } catch (e) {
+                console.log(`Could not read the current commit status: ${e}`);
+              }
+            }
+
+            if (publishStatus) {
+              try {
+                await github.rest.repos.createCommitStatus({
+                  owner: context.repo.owner,
+                  repo: context.repo.repo,
+                  sha: prSha,
+                  state: result === 'success' ? 'success' : 'failure',
+                  context: statusContext,
+                  description: `${label} ${result}`,
+                  target_url: runUrl
+                });
+              } catch (e) {
+                console.log(`Could not update commit status: ${e}`);
+              }
+            } else {
+              console.log(`A newer run owns "${statusContext}", skipping the status update.`);
+            }
+
+            const prRef = process.env.PR_REF;
+            const prNumber = parseInt('${{ needs.validate.outputs.pr_number }}');
+            const shortSha = prSha.substring(0, 7);
+
+            let body;
+            if (result === 'success') {
+              const how = target === 'docker'
+                ? [`**Pull:** \`docker pull ghcr.io/cleanuparr/cleanuparr:pr-${prNumber}\``]
+                : [
+                    `**Download:** open the [workflow run](${runUrl}), scroll to the **Artifacts** section at the bottom.`,
+                    `The ${artifacts} artifact(s) are attached to that run.`
+                  ];
+              body = [`${label} **succeeded** for \`${prRef}\` (\`${shortSha}\`).`, ``, ...how].join('\n');
+            } else {
+              const verb = result === 'cancelled' ? 'was **cancelled**' : '**failed**';
+              body = [
+                `${label} ${verb} for \`${prRef}\` (\`${shortSha}\`).`,
+                ``,
+                `See the [workflow run](${runUrl}) for details.`
+              ].join('\n');
+            }
+
+            await github.rest.issues.createComment({
+              owner: context.repo.owner,
+              repo: context.repo.repo,
+              issue_number: prNumber,
+              body
+            });

.github/workflows/pr-label.yml

@@ -0,0 +1,29 @@
+name: PR Label
+
+on:
+  pull_request:
+    types: [opened, reopened, synchronize, labeled, unlabeled]
+
+concurrency:
+  group: PR Label-${{ github.event.pull_request.number }}
+  cancel-in-progress: true
+
+permissions:
+  contents: read
+
+jobs:
+  category:
+    name: Require category label
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Fail when no category label is present
+        if: >-
+          !contains(github.event.pull_request.labels.*.name, 'breaking') &&
+          !contains(github.event.pull_request.labels.*.name, 'enhancement') &&
+          !contains(github.event.pull_request.labels.*.name, 'bug') &&
+          !contains(github.event.pull_request.labels.*.name, 'documentation') &&
+          !contains(github.event.pull_request.labels.*.name, 'chore')
+        run: |
+          echo "::error::Add one of these labels so the release notes can be categorised: breaking, enhancement, bug, documentation, chore"
+          exit 1

.github/workflows/release.yml

@@ -1,11 +1,373 @@
+name: Release Build
+
 on:
   push:
     tags:
       - "v*.*.*"
+  workflow_dispatch:
+    inputs:
+      version:
+        description: 'Version to release (e.g., 1.0.0)'
+        required: true
+      runTests:
+        description: 'Run test suite'
+        type: boolean
+        required: false
+        default: true
+      buildDocker:
+        description: 'Build Docker image'
+        type: boolean
+        required: false
+        default: true
+      pushDocker:
+        description: 'Push Docker image to registry'
+        type: boolean
+        required: false
+        default: false
+      buildBinaries:
+        description: 'Build executables and installers'
+        type: boolean
+        required: false
+        default: true
+      createRelease:
+        description: 'Create GitHub release'
+        type: boolean
+        required: false
+        default: false
+
+permissions:
+  contents: read
 
 jobs:
-  release:
-    uses: flmorg/universal-workflows/.github/workflows/dotnet.release.yml@main
+  # Validate release
+  validate:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      pull-requests: read
+    outputs:
+      app_version: ${{ steps.version.outputs.app_version }}
+      release_version: ${{ steps.version.outputs.release_version }}
+      is_tag: ${{ steps.version.outputs.is_tag }}
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v7
+        with:
+          persist-credentials: false
+
+      - name: Get version info
+        id: version
+        run: |
+          if [[ "${{ github.ref }}" =~ ^refs/tags/ ]]; then
+            # Tag event
+            release_version=${GITHUB_REF##refs/tags/}
+            app_version=${release_version#v}
+            is_tag=true
+          else
+            # Manual workflow with version
+            app_version="${{ github.event.inputs.version }}"
+
+            # Validate version format (x.x.x)
+            if ! [[ "$app_version" =~ ^[0-9]+\.[0-9]+\.[0-9]+$ ]]; then
+              echo "Error: Version must be in format x.x.x (e.g., 1.0.0)"
+              echo "Provided version: $app_version"
+              exit 1
+            fi
+
+            release_version="v$app_version"
+            is_tag=false
+          fi
+
+          echo "app_version=$app_version" >> $GITHUB_OUTPUT
+          echo "release_version=$release_version" >> $GITHUB_OUTPUT
+          echo "is_tag=$is_tag" >> $GITHUB_OUTPUT
+
+          echo "Release Version: $release_version"
+          echo "App Version: $app_version"
+          echo "Is Tag: $is_tag"
+
+      - name: Check if release already exists
+        run: |
+          if gh release view "${{ steps.version.outputs.release_version }}" &>/dev/null; then
+            echo "❌ Release ${{ steps.version.outputs.release_version }} already exists. Stopping workflow."
+            exit 1
+          fi
+          echo "✅ Release ${{ steps.version.outputs.release_version }} does not exist. Proceeding."
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Check the version against PR labels
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          APP_VERSION: ${{ steps.version.outputs.app_version }}
+        run: |
+          previous_tag=$(gh release view --json tagName --jq .tagName 2>/dev/null || echo "")
+
+          if [ -z "$previous_tag" ]; then
+            echo "No previous release found. Skipping the label check."
+            exit 0
+          fi
+
+          published=$(gh release view "$previous_tag" --json publishedAt --jq .publishedAt)
+
+          if ! breaking_list=$(gh api --paginate "repos/${{ github.repository }}/issues?labels=breaking&state=closed&since=$published&per_page=100" \
+            --jq ".[] | select(.pull_request.merged_at > \"$published\") | \"  #\(.number) \(.title)\""); then
+            echo "::error::Failed to query pull request labels, cannot verify the version"
+            printf '%s\n' "$breaking_list"
+            exit 1
+          fi
+
+          breaking=$(printf '%s' "$breaking_list" | grep -c . || true)
+
+          previous_version=${previous_tag#v}
+
+          if [ "$previous_version" = "$APP_VERSION" ]; then
+            echo "::error::$APP_VERSION is the same version as the previous release $previous_tag."
+            exit 1
+          fi
+
+          if [ "$(printf '%s\n%s\n' "$previous_version" "$APP_VERSION" | sort -V | tail -1)" != "$APP_VERSION" ]; then
+            echo "::error::$APP_VERSION is older than the previous release $previous_tag. Releases must move forward."
+            exit 1
+          fi
+
+          previous_minor=${previous_version%.*}
+          new_minor=${APP_VERSION%.*}
+
+          echo "Previous release: $previous_tag (published $published)"
+          echo "Breaking PRs merged since: $breaking"
+
+          if [ "$breaking" -gt 0 ] && [ "$previous_minor" = "$new_minor" ]; then
+            echo "::error::$breaking PR(s) labelled 'breaking' were merged since $previous_tag, so $APP_VERSION cannot be a patch release. Bump the minor, or remove the label if it was applied by mistake. See RELEASING.md."
+            printf '%s\n' "$breaking_list"
+            exit 1
+          fi
+
+          if [ "$breaking" -eq 0 ] && [ "$previous_minor" != "$new_minor" ]; then
+            echo "::warning::$APP_VERSION bumps the minor but no PR merged since $previous_tag carries the 'breaking' label. Intentional for a policy or milestone release, otherwise check the labels."
+          fi
+
+          echo "✅ Version $APP_VERSION is consistent with the PR labels."
+
+  # Run tests
+  test:
+    needs: validate
+    if: ${{ needs.validate.outputs.is_tag == 'true' || github.event.inputs.runTests == 'true' }}
+    uses: ./.github/workflows/test.yml
+    secrets: inherit
+
+  # Build frontend once for all build jobs and cache it
+  build-frontend:
+    needs: [validate, test]
+    if: |
+      always() &&
+      needs.validate.result == 'success' &&
+      (needs.test.result == 'success' || needs.test.result == 'skipped') &&
+      (needs.validate.outputs.is_tag == 'true' || github.event.inputs.buildBinaries == 'true')
+    uses: ./.github/workflows/build-frontend.yml
+    secrets: inherit
+
+  # Build portable executables
+  build-executables:
+    needs: [validate, test, build-frontend]
+    if: |
+      always() &&
+      needs.validate.result == 'success' &&
+      (needs.test.result == 'success' || needs.test.result == 'skipped') &&
+      needs.build-frontend.result == 'success' &&
+      (needs.validate.outputs.is_tag == 'true' || github.event.inputs.buildBinaries == 'true')
+    uses: ./.github/workflows/build-executable.yml
     with:
-      githubContext: ${{ toJSON(github) }}
-    secrets: inherit
+      app_version: ${{ needs.validate.outputs.app_version }}
+    secrets: inherit
+
+  # Build Windows installer
+  build-windows-installer:
+    needs: [validate, test, build-frontend]
+    if: |
+      always() &&
+      needs.validate.result == 'success' &&
+      (needs.test.result == 'success' || needs.test.result == 'skipped') &&
+      needs.build-frontend.result == 'success' &&
+      (needs.validate.outputs.is_tag == 'true' || github.event.inputs.buildBinaries == 'true')
+    uses: ./.github/workflows/build-windows-installer.yml
+    with:
+      app_version: ${{ needs.validate.outputs.app_version }}
+    secrets: inherit
+
+  # Build macOS installers (Intel and ARM)
+  build-macos:
+    needs: [validate, test, build-frontend]
+    if: |
+      always() &&
+      needs.validate.result == 'success' &&
+      (needs.test.result == 'success' || needs.test.result == 'skipped') &&
+      needs.build-frontend.result == 'success' &&
+      (needs.validate.outputs.is_tag == 'true' || github.event.inputs.buildBinaries == 'true')
+    uses: ./.github/workflows/build-macos-installer.yml
+    with:
+      app_version: ${{ needs.validate.outputs.app_version }}
+    secrets: inherit
+
+  # Build and push Docker image(s)
+  build-docker:
+    needs: [validate, test]
+    permissions:
+      contents: read
+      packages: write
+    if: |
+      always() &&
+      needs.validate.result == 'success' &&
+      (needs.test.result == 'success' || needs.test.result == 'skipped') &&
+      (needs.validate.outputs.is_tag == 'true' || github.event.inputs.buildDocker == 'true')
+    uses: ./.github/workflows/build-docker.yml
+    with:
+      push_docker: ${{ needs.validate.outputs.is_tag == 'true' || github.event.inputs.pushDocker == 'true' }}
+      app_version: ${{ needs.validate.outputs.app_version }}
+    secrets: inherit
+
+  # Create GitHub release
+  create-release:
+    needs: [validate, build-executables, build-windows-installer, build-macos]
+    runs-on: ubuntu-latest
+    if: |
+      always() &&
+      needs.validate.result == 'success' &&
+      needs.build-executables.result == 'success' &&
+      needs.build-windows-installer.result == 'success' &&
+      needs.build-macos.result == 'success' &&
+      (
+        needs.validate.outputs.is_tag == 'true' ||
+        (github.event.inputs.createRelease == 'true' && github.event.inputs.buildBinaries == 'true')
+      )
+    
+    steps:
+      - name: Get vault secrets
+        uses: hashicorp/vault-action@v4
+        with:
+          url: ${{ secrets.VAULT_HOST }}
+          method: approle
+          roleId: ${{ secrets.VAULT_ROLE_ID }}
+          secretId: ${{ secrets.VAULT_SECRET_ID }}
+          secrets:
+            secrets/data/github repo_readonly_pat | REPO_READONLY_PAT
+
+      - name: Download executable artifacts
+        uses: actions/download-artifact@v8
+        with:
+          pattern: executable-*
+          path: ./artifacts
+          merge-multiple: true
+
+      - name: Download Windows installer
+        uses: actions/download-artifact@v8
+        with:
+          name: Cleanuparr-windows-installer
+          path: ./artifacts
+
+      - name: Download macOS installers
+        uses: actions/download-artifact@v8
+        with:
+          pattern: Cleanuparr-macos-*-installer
+          path: ./artifacts
+          merge-multiple: true
+
+      - name: List downloaded artifacts
+        run: |
+          echo "Downloaded artifacts:"
+          find ./artifacts -type f \( -name "*.zip" -o -name "*.pkg" -o -name "*.exe" \) | sort
+          echo ""
+          echo "Total files: $(find ./artifacts -type f \( -name "*.zip" -o -name "*.pkg" -o -name "*.exe" \) | wc -l)"
+
+      - name: Create release
+        uses: softprops/action-gh-release@v3
+        with:
+          name: ${{ needs.validate.outputs.release_version }}
+          tag_name: ${{ needs.validate.outputs.release_version }}
+          token: ${{ env.REPO_READONLY_PAT }}
+          make_latest: true
+          target_commitish: main
+          generate_release_notes: true
+          files: |
+            ./artifacts/*.zip
+            ./artifacts/*.pkg
+            ./artifacts/*.exe
+
+  # Deploy docs after a successful release
+  deploy-docs:
+    needs: [create-release]
+    if: always() && needs.create-release.result == 'success'
+    permissions:
+      contents: read
+      pages: write
+      id-token: write
+    uses: ./.github/workflows/docs.yml
+    secrets: inherit
+
+  # Deploy Cloudflare status page after a successful release
+  deploy-status:
+    needs: [validate, create-release]
+    if: always() && needs.create-release.result == 'success'
+    uses: ./.github/workflows/cloudflare-pages-status.yml
+    with:
+      version: ${{ needs.validate.outputs.release_version }}
+    secrets: inherit
+
+  # Summary job
+  summary:
+    needs: [validate, test, build-frontend, build-executables, build-windows-installer, build-macos, build-docker]
+    runs-on: ubuntu-latest
+    permissions:
+      actions: read
+    if: always()
+
+    steps:
+      - name: Record workflow start time
+        id: workflow-start
+        run: |
+          # Get workflow start time from GitHub API
+          workflow_start=$(gh api repos/${{ github.repository }}/actions/runs/${{ github.run_id }} --jq '.run_started_at')
+          start_epoch=$(date -d "$workflow_start" +%s 2>/dev/null || date -j -f "%Y-%m-%dT%H:%M:%SZ" "$workflow_start" +%s)
+          echo "start=$start_epoch" >> $GITHUB_OUTPUT
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Build Summary
+        run: |
+          # Calculate total workflow duration
+          start_time=${{ steps.workflow-start.outputs.start }}
+          end_time=$(date +%s)
+          duration=$((end_time - start_time))
+          minutes=$((duration / 60))
+          seconds=$((duration % 60))
+          echo "## 🏗️ Cleanuparr Build Summary" >> $GITHUB_STEP_SUMMARY
+          echo "" >> $GITHUB_STEP_SUMMARY
+          echo "**Version**: ${{ needs.validate.outputs.release_version }}" >> $GITHUB_STEP_SUMMARY
+          echo "**App Version**: ${{ needs.validate.outputs.app_version }}" >> $GITHUB_STEP_SUMMARY
+          echo "**Is Tag**: ${{ needs.validate.outputs.is_tag }}" >> $GITHUB_STEP_SUMMARY
+          echo "**Total Duration**: ${minutes}m ${seconds}s" >> $GITHUB_STEP_SUMMARY
+          echo "" >> $GITHUB_STEP_SUMMARY
+          echo "### Build Results" >> $GITHUB_STEP_SUMMARY
+          echo "" >> $GITHUB_STEP_SUMMARY
+
+          # Helper function to print job result
+          print_result() {
+            local name="$1"
+            local result="$2"
+            case "$result" in
+              success) echo "✅ **$name**: Success" >> $GITHUB_STEP_SUMMARY ;;
+              skipped) echo "⏭️ **$name**: Skipped" >> $GITHUB_STEP_SUMMARY ;;
+              *) echo "❌ **$name**: $result" >> $GITHUB_STEP_SUMMARY ;;
+            esac
+          }
+
+          print_result "Tests" "${{ needs.test.result }}"
+          print_result "Frontend Build" "${{ needs.build-frontend.result }}"
+          print_result "Portable Executables" "${{ needs.build-executables.result }}"
+          print_result "Windows Installer" "${{ needs.build-windows-installer.result }}"
+          print_result "macOS Installers (Intel & ARM)" "${{ needs.build-macos.result }}"
+          print_result "Docker Image Build" "${{ needs.build-docker.result }}"
+
+          echo "" >> $GITHUB_STEP_SUMMARY
+          echo "🎉 **Build completed!**" >> $GITHUB_STEP_SUMMARY 

.github/workflows/test.yml

@@ -0,0 +1,164 @@
+name: Tests
+
+on:
+  push:
+    branches:
+      - main
+    paths:
+      - 'code/backend/**'
+      - 'code/frontend/**'
+      - '.github/workflows/test.yml'
+  pull_request:
+    paths:
+      - 'code/backend/**'
+      - 'code/frontend/**'
+      - '.github/workflows/test.yml'
+  workflow_call:
+    inputs:
+      ref:
+        description: 'Git ref to checkout (branch, tag, or SHA). Defaults to the triggering ref.'
+        type: string
+        required: false
+        default: ''
+
+# Cancel in-progress runs for the same PR
+concurrency:
+  group: Tests-${{ inputs.ref || github.event.pull_request.number || github.ref }}
+  cancel-in-progress: true
+
+permissions:
+  contents: read
+
+jobs:
+  backend:
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    if: github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v7
+        timeout-minutes: 1
+        with:
+          ref: ${{ inputs.ref || github.ref }}
+          persist-credentials: false
+
+      - name: Setup .NET
+        uses: actions/setup-dotnet@v6
+        with:
+          dotnet-version: 10.0.200
+
+      - name: Cache NuGet packages
+        uses: actions/cache@v6
+        with:
+          path: ~/.nuget/packages
+          key: ${{ runner.os }}-nuget-${{ hashFiles('**/packages.lock.json', '**/*.csproj') }}
+          restore-keys: |
+            ${{ runner.os }}-nuget-
+
+      - name: Get vault secrets
+        uses: hashicorp/vault-action@v4
+        with:
+          url: ${{ secrets.VAULT_HOST }}
+          method: approle
+          roleId: ${{ secrets.VAULT_ROLE_ID }}
+          secretId: ${{ secrets.VAULT_SECRET_ID }}
+          secrets:
+            secrets/data/github packages_pat | PACKAGES_PAT
+
+      - name: Restore dependencies
+        run: |
+          dotnet nuget add source --username ${{ github.repository_owner }} --password ${{ env.PACKAGES_PAT }} --store-password-in-clear-text --name Cleanuparr https://nuget.pkg.github.com/Cleanuparr/index.json
+          dotnet restore code/backend/cleanuparr.sln
+
+      - name: Build solution
+        run: dotnet build code/backend/cleanuparr.sln --configuration Release --no-restore
+
+      - name: Run tests
+        id: run-tests
+        run: dotnet test code/backend/cleanuparr.sln --configuration Release --no-build --verbosity normal --logger trx --collect:"XPlat Code Coverage" --settings code/backend/coverage.runsettings --results-directory ./coverage
+
+      - name: Upload test results
+        uses: actions/upload-artifact@v7
+        with:
+          name: test-results
+          path: ./coverage/*.trx
+          retention-days: 30
+
+      - name: Upload coverage reports
+        uses: actions/upload-artifact@v7
+        with:
+          name: coverage-report
+          path: ./coverage/**/coverage.cobertura.xml
+          retention-days: 30
+
+      - name: Upload coverage to Codecov
+        if: inputs.ref == ''
+        uses: codecov/codecov-action@v7
+        with:
+          files: ./coverage/**/coverage.cobertura.xml
+          token: ${{ secrets.CODECOV_TOKEN }}
+          fail_ci_if_error: false
+          flags: backend
+          name: backend-coverage
+
+      - name: Test Summary
+        run: |
+          echo "## Test Results" >> $GITHUB_STEP_SUMMARY
+          echo "" >> $GITHUB_STEP_SUMMARY
+          if [ "${{ steps.run-tests.outcome }}" == "success" ]; then
+            echo "✅ All tests passed!" >> $GITHUB_STEP_SUMMARY
+          else
+            echo "❌ Tests failed or were cancelled. Status: ${{ steps.run-tests.outcome }}" >> $GITHUB_STEP_SUMMARY
+          fi
+          echo "" >> $GITHUB_STEP_SUMMARY
+          echo "Test artifacts have been uploaded for detailed analysis." >> $GITHUB_STEP_SUMMARY
+
+  frontend:
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    if: github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository
+    defaults:
+      run:
+        working-directory: code/frontend
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v7
+        timeout-minutes: 1
+        with:
+          ref: ${{ inputs.ref || github.ref }}
+          persist-credentials: false
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v7
+        with:
+          node-version: '26'
+          cache: 'npm'
+          cache-dependency-path: code/frontend/package-lock.json
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Lint
+        run: npm run lint
+
+      - name: Run tests
+        run: npm run test:ci
+
+      - name: Upload coverage reports
+        uses: actions/upload-artifact@v7
+        with:
+          name: frontend-coverage-report
+          path: code/frontend/coverage/ui/lcov.info
+          retention-days: 30
+
+      - name: Upload coverage to Codecov
+        if: inputs.ref == ''
+        uses: codecov/codecov-action@v7
+        with:
+          files: code/frontend/coverage/ui/lcov.info
+          token: ${{ secrets.CODECOV_TOKEN }}
+          fail_ci_if_error: false
+          flags: frontend
+          name: frontend-coverage

.github/workflows/version-info.yml

@@ -0,0 +1,69 @@
+name: Get Version Info
+
+on:
+  workflow_call:
+    inputs:
+      manual_version:
+        description: 'Manual version override (e.g., 1.0.0)'
+        required: false
+        type: string
+        default: ''
+    outputs:
+      app_version:
+        description: 'Application version (without v prefix)'
+        value: ${{ jobs.version.outputs.app_version }}
+      release_version:
+        description: 'Release version (with v prefix)'
+        value: ${{ jobs.version.outputs.release_version }}
+      is_tag:
+        description: 'Whether this is a tag event'
+        value: ${{ jobs.version.outputs.is_tag }}
+      repository_name:
+        description: 'Repository name without owner'
+        value: ${{ jobs.version.outputs.repository_name }}
+
+permissions:
+  contents: read
+
+jobs:
+  version:
+    runs-on: ubuntu-latest
+    outputs:
+      app_version: ${{ steps.version.outputs.app_version }}
+      release_version: ${{ steps.version.outputs.release_version }}
+      is_tag: ${{ steps.version.outputs.is_tag }}
+      repository_name: ${{ steps.version.outputs.repository_name }}
+
+    steps:
+      - name: Calculate version info
+        id: version
+        run: |
+          repoFullName="${{ github.repository }}"
+          repositoryName="${repoFullName#*/}"
+
+          if [[ "${{ github.ref }}" =~ ^refs/tags/ ]]; then
+            # Tag event
+            release_version="${GITHUB_REF##refs/tags/}"
+            app_version="${release_version#v}"
+            is_tag="true"
+          elif [[ -n "${{ inputs.manual_version }}" ]]; then
+            # Manual workflow with version
+            app_version="${{ inputs.manual_version }}"
+            release_version="v${app_version}"
+            is_tag="false"
+          else
+            # Development build
+            app_version="0.0.1-dev-$(date +%Y%m%d-%H%M%S)"
+            release_version="v${app_version}"
+            is_tag="false"
+          fi
+
+          echo "app_version=${app_version}" >> $GITHUB_OUTPUT
+          echo "release_version=${release_version}" >> $GITHUB_OUTPUT
+          echo "is_tag=${is_tag}" >> $GITHUB_OUTPUT
+          echo "repository_name=${repositoryName}" >> $GITHUB_OUTPUT
+
+          echo "📦 Repository: ${repositoryName}"
+          echo "🏷️ Release Version: ${release_version}"
+          echo "📱 App Version: ${app_version}"
+          echo "🔖 Is Tag: ${is_tag}"

.gitignore

@@ -105,7 +105,6 @@ _NCrunch_*
 _TeamCity*
 
 # Sonarr
-config.xml
 nzbdrone.log*txt
 UpdateLogs/
 *workspace.xml

CLAUDE.md

@@ -0,0 +1,212 @@
+# Cleanuparr - Claude AI Rules
+
+## Rules
+
+1. **DO NOT break existing functionality** - All features are critical and must continue to work
+2. **When in doubt, ASK** - Don't assume, clarify with the maintainer first
+3. **Always read existing code before making changes** - Understand the current architecture and patterns
+4. **Follow existing patterns** - Study the codebase style and match it exactly
+5. **Ask before introducing new patterns** - Use current coding standards or get approval first
+6. **Prefer editing existing files over creating new ones** - Build on existing work
+7. **Flag potential gotchas or issues immediately** - Document and report anything unexpected
+8. **If unsure about an approach, ask before implementing**
+
+## Project Overview
+
+Cleanuparr is a tool for automating the cleanup of unwanted or blocked files in Sonarr, Radarr, Lidarr, Readarr, Whisparr and supported download clients (qBittorrent, Transmission, Deluge, uTorrent, rTorrent). It provides malware protection, automated cleanup, and queue management for *arr applications.
+
+**Key Features:**
+- Strike system for bad downloads
+- Malware detection and blocking
+- Automatic search triggering after removal (Seeker)
+- Missing and upgrade search
+- Orphaned download cleanup with cross-seed support
+- Authentication (OIDC, 2FA)
+- Notification providers (Apprise, Discord, Gotify, Notifiarr, Ntfy, Pushover, Telegram)
+
+## Architecture & Tech Stack
+
+### Backend
+- **.NET 10.0** (C#) with ASP.NET Core
+- **Architecture**: Clean Architecture with `Features/` subdirectory pattern
+  - `Cleanuparr.Api` - REST API and web host (`Features/` for endpoint groups)
+  - `Cleanuparr.Application` - Application services and use cases
+  - `Cleanuparr.Domain` - Domain models (Entities, Enums, Exceptions)
+  - `Cleanuparr.Infrastructure` - External integrations (`Features/` for Arr, DownloadClient, Notifications, etc.)
+  - `Cleanuparr.Persistence` - Data access with EF Core (SQLite)
+  - `Cleanuparr.Shared` - Shared utilities
+- **Database**: SQLite with Entity Framework Core
+  - Three separate contexts: `DataContext`, `EventsContext`, `UsersContext`
+- **Key Libraries**:
+  - MassTransit (messaging)
+  - Quartz.NET (scheduling)
+  - Serilog (logging)
+  - SignalR (real-time communication)
+- **Testing**: xUnit + NSubstitute + Shouldly
+  - Always use **NSubstitute** for mocking in new tests (Moq is being phased out)
+
+### Frontend
+- **Angular 22** with TypeScript 6.0, Node 26 (standalone components, zoneless, OnPush)
+- **UI**: Custom glassmorphism design system with 33 custom components — no external UI frameworks
+- **Icons**: @ng-icons/core + @ng-icons/tabler-icons
+- **Design System**: 3-layer SCSS (`_variables` -> `_tokens` -> `_themes`), dark/light themes
+- **State Management**: Angular signals (`signal`/`computed`/`effect`) — `@ngrx/signals` was removed (it was unused)
+- **Data fetching**: Angular 22 Resource API — `rxResource` from `@angular/core/rxjs-interop` (not manual `HttpClient.subscribe()`)
+- **Forms**: Angular 22 Signal Forms — `form()` + `[formField]` from `@angular/forms/signals` (settings forms; a few not-yet-migrated forms still use per-field signals)
+- **Real-time Updates**: @microsoft/signalr 10.0.0
+- **PWA**: Service Worker support enabled
+
+## Project Structure
+
+```
+Cleanuparr/
+├── code/
+│   ├── backend/
+│   │   ├── Cleanuparr.Api/              # REST API (Features/ for endpoint groups)
+│   │   ├── Cleanuparr.Api.Tests/        # API layer tests
+│   │   ├── Cleanuparr.Application/      # Business logic layer
+│   │   ├── Cleanuparr.Domain/           # Domain models
+│   │   ├── Cleanuparr.Infrastructure/   # External integrations (Features/ subdirs)
+│   │   ├── Cleanuparr.Infrastructure.Tests/
+│   │   ├── Cleanuparr.Persistence/      # SQLite data access
+│   │   ├── Cleanuparr.Persistence.Tests/
+│   │   └── Cleanuparr.Shared/           # Shared utilities
+│   ├── frontend/                        # Angular 22 application
+│   ├── Dockerfile                       # Multi-stage Docker build
+│   ├── entrypoint.sh                    # Docker entrypoint
+│   └── Makefile                         # Build & migration helpers
+├── docs/                                # Docusaurus documentation
+├── e2e/                                 # Playwright E2E tests
+├── .github/workflows/                   # CI/CD pipelines
+├── blacklist                            # Default malware patterns (strict)
+├── blacklist_permissive                 # Less strict malware patterns
+├── whitelist                            # Safe file extensions
+└── whitelist_with_subtitles             # Includes subtitle formats
+```
+
+## Code Standards & Conventions
+
+**IMPORTANT:** Always study existing code in the relevant area before making changes. Match the existing style exactly.
+
+### Backend (C#)
+- Follow Microsoft C# Coding Conventions
+- Use nullable reference types (`<Nullable>enable</Nullable>`)
+- Add XML documentation comments for public APIs
+- Use meaningful names - avoid abbreviations unless widely understood
+- Keep services focused - single responsibility principle
+- New integrations go under `Features/` subdirectories (e.g., `Infrastructure/Features/Arr/`)
+
+### Frontend (TypeScript/Angular)
+- All components must be **standalone** with **ChangeDetectionStrategy.OnPush**
+- Use `input()` / `output()` function APIs (not `@Input()` / `@Output()` decorators)
+- Use Angular **signals** for reactive state (`signal()`, `computed()`, `effect()`)
+- **Data fetching**: use the **Resource API** (`rxResource`) with a reactive `params` + `stream`, not manual `HttpClient.subscribe()`; drive spinners/errors off `isLoading()`/`error()`
+- **Forms**: use **Signal Forms** (`form()` + `[formField]`) with a single model signal + schema validators; keep the JSON-snapshot dirty tracking (`buildSnapshot()`/`hasPendingChanges()`), do NOT use Signal Forms `dirty()` for the unsaved-changes guard
+- Follow the 3-layer SCSS design system (`_variables` -> `_tokens` -> `_themes`)
+- **Do not introduce external UI frameworks** (no PrimeNG, Material, Tailwind, etc.)
+- Component naming: `{feature}.component.ts`
+- Service naming: `{feature}.service.ts`
+- **Look at similar existing components before creating new ones**
+
+### Testing
+- **Backend**: xUnit + NSubstitute + Shouldly
+- Always use **NSubstitute** for mocking (Moq is being phased out)
+- Write unit tests for new features and bug fixes
+- Use descriptive test names that explain what is being tested
+- **Frontend**: Vitest via the `@angular/build:unit-test` builder in jsdom (`cd code/frontend && npm test`). Specs live next to the source as `{feature}.component.spec.ts`
+- Vitest globals are enabled in `tsconfig.spec.json`, so do NOT import `describe`/`it`/`expect`/`vi`
+- `angular.json` sets `skipTests: true` for all schematics, so `ng generate` never creates a spec. Write them by hand
+- Test components through `TestBed.createComponent` and the rendered DOM. For inputs/outputs, declare a standalone host component in the spec. Stub API classes with a plain object of methods returning `of(...)`, never mock `HttpClient` or use `provideHttpClientTesting`
+- Keep stub observables synchronous: an `rxResource` fed by `of(...)` resolves inside one `fixture.detectChanges()`, an async source needs `await fixture.whenStable()`
+- Call `fixture.detectChanges()` after every interaction (zoneless + OnPush). For a bare `effect()`, use `TestBed.runInInjectionContext()` then `TestBed.tick()`
+
+### Git Commit Messages
+- Use clear, descriptive messages in imperative mood
+- Examples: "Add Discord notification support", "Fix memory leak in download client polling"
+- Reference issue numbers when applicable: "Fix #123: Handle null response from Radarr API"
+
+## Development Setup
+
+### Running the Backend
+```bash
+cd code/backend
+dotnet build Cleanuparr.Api/Cleanuparr.Api.csproj
+dotnet run --project Cleanuparr.Api/Cleanuparr.Api.csproj
+```
+API runs at http://localhost:5000
+
+### Running the Frontend
+```bash
+cd code/frontend
+npm install
+npm start
+```
+UI runs at http://localhost:4200
+
+### Running Tests
+```bash
+# Backend
+cd code/backend
+dotnet test
+
+# Frontend
+cd code/frontend
+npm test            # ng test; watches in an interactive terminal, single run when not a TTY
+npm run test:ci     # single run with coverage, written to coverage/ui/ (what CI runs)
+npm run lint
+```
+Both run as concurrent `backend` and `frontend` jobs in `.github/workflows/test.yml`.
+
+## Database Migrations
+
+Three separate database contexts, all commands run from the `code` directory:
+
+```bash
+# Data migrations (DataContext)
+make migrate-data name=YourMigrationName
+
+# Events migrations (EventsContext)
+make migrate-events name=YourMigrationName
+
+# Users migrations (UsersContext)
+make migrate-users name=YourMigrationName
+```
+
+## Common Development Workflows
+
+### Adding a New *arr Application Integration
+1. Add integration in `Cleanuparr.Infrastructure/Features/Arr/`
+2. Update domain models in `Cleanuparr.Domain/`
+3. Create/update services in `Cleanuparr.Application/`
+4. Add API endpoints in `Cleanuparr.Api/Features/Arr/`
+5. Update frontend in `code/frontend/src/app/`
+
+### Adding a New Download Client
+1. Add client implementation in `Cleanuparr.Infrastructure/Features/DownloadClient/`
+2. Follow existing patterns (qBittorrent, Transmission, etc.)
+3. Add configuration models to `Cleanuparr.Domain/`
+4. Update API and frontend as above
+
+### Adding a New Notification Provider
+1. Add provider in `Cleanuparr.Infrastructure/Features/Notifications/`
+2. Update configuration models
+3. Add UI configuration in frontend
+
+## Key Gotchas
+
+- **Custom glassmorphism design system** - Do not introduce external UI frameworks (no PrimeNG, Material, Tailwind)
+- **All frontend components** must be standalone with OnPush change detection
+- **Frontend tests are zoneless**: `fakeAsync`/`tick()`/`flush()` from `@angular/core/testing` require Zone.js and will throw. Use `vi.useFakeTimers()` + `vi.advanceTimersByTime()`, restore with `vi.useRealTimers()`
+- **`@angular/build`'s unit-test runner sets `isolate: false`** (Vitest's own default is `isolate: true`, so its docs will tell you the opposite): module state, `localStorage`, fake timers and `document.documentElement` attributes/inline styles leak between spec files. Undo them in `afterEach`
+- **Node >= 25 shadows jsdom's `localStorage`**: vitest skips copying globals that already exist on `globalThis`, so specs would get an inert object (or `undefined` on Node 26). `src/testing/test-setup.ts` restores jsdom's Storage and is wired via `setupFiles` in `angular.json`. `matchMedia`, `IntersectionObserver`, `ResizeObserver` and `navigator.clipboard` are still absent in jsdom, stub them per spec
+- **Frontend toolchain is pinned high**: Node >= 26 and npm 11.6.2. CI uses `setup-node@v7` with `node-version: '26'`
+- **Database migrations** require awareness of all three contexts (Data, Events, Users)
+- **Malware blocker** is a critical security feature - changes require careful testing
+- **Cross-seed integration** allows keeping torrents that are actively seeding
+- **Real-time updates** use SignalR - maintain websocket patterns when adding features
+- Use `@ng-icons/core` + `@ng-icons/tabler-icons` for icons (NOT `angular-tabler-icons` which doesn't support Angular 22)
+- **Sidebar** stays dark purple in both themes - uses sidebar-specific CSS variables
+- The project uses **Clean Architecture** - respect layer boundaries
+- **Settings dirty tracking** uses JSON snapshot comparison (`buildSnapshot()` + `hasPendingChanges()`) — keep this even with Signal Forms; Signal Forms `dirty()` means "touched", not "differs from saved"
+- **Resource API** (`rxResource`): `value()` throws in the error state — always set a `defaultValue` (lists) or guard with `hasValue()` before reading
+- **Signal Forms** (`[formField]`) owns `min`/`max`/`disabled`/`required` — set these via schema validators, not template bindings. Custom controls satisfy the contract via `model()` signals (`chip-input` exposes a `value` model; `size-input`'s numeric-min input is named `minValue` to avoid clashing with the field min)

CONTRIBUTING.md

@@ -0,0 +1,377 @@
+# Contributing to Cleanuparr
+
+Thanks for your interest in contributing to Cleanuparr! This guide will help you get started with development.
+
+## Before You Start
+
+### AI usage
+
+In this ever-evolving field of work, AI is now the shiny new tool to help programmers work faster and there's nothing wrong with that.
+But it is **very** wrong to rely solely on AI tools to write, review and test your code.
+
+**If you do not have a background in programming and you do not intend to test your code properly, please do not submit AI-generated code.** If you still want to help in other ways such as testing features, that would also help a lot!
+
+### Announce Your Intent
+
+Before starting any work, please let us know what you want to contribute:
+
+- For existing issues: Comment on the issue stating you'd like to work on it
+- For new features/changes: Create a new issue first and mention that you want to work on it
+
+This helps us avoid redundant work, git conflicts, and contributions that may not align with the project's direction.
+
+**Wait for approval from the maintainers before proceeding with your contribution.**
+
+## Development Setup
+
+### Prerequisites
+
+- [.NET 10.0 SDK](https://dotnet.microsoft.com/download/dotnet/10.0)
+- [Node.js 26+](https://nodejs.org/)
+- [Git](https://git-scm.com/)
+- (Optional) [Make](https://www.gnu.org/software/make/) for database migrations
+- (Optional) IDE: [JetBrains Rider](https://www.jetbrains.com/rider/) or [Visual Studio](https://visualstudio.microsoft.com/)
+
+### Repository Setup
+
+1. Fork the repository on GitHub
+2. Clone your fork locally:
+   ```bash
+   git clone https://github.com/YOUR_USERNAME/Cleanuparr.git
+   cd Cleanuparr
+   ```
+3. Add the upstream repository:
+   ```bash
+   git remote add upstream https://github.com/Cleanuparr/Cleanuparr.git
+   ```
+
+## Backend Development
+
+### Initial Setup
+
+#### 1. Create a GitHub Personal Access Token (PAT)
+
+Cleanuparr uses GitHub Packages for NuGet dependencies. You'll need a PAT with `read:packages` permission:
+
+1. Go to [GitHub Settings > Developer Settings > Personal Access Tokens > Tokens (classic)](https://github.com/settings/tokens)
+2. Click "Generate new token" → "Generate new token (classic)"
+3. Give it a descriptive name (e.g., "Cleanuparr NuGet Access")
+4. Set an expiration (recommend 90 days or longer for development)
+5. Select only the `read:packages` scope
+6. Click "Generate token" and copy it
+
+#### 2. Configure NuGet Source
+
+Add the Cleanuparr NuGet repository:
+
+```bash
+dotnet nuget add source \
+  --username YOUR_GITHUB_USERNAME \
+  --password YOUR_GITHUB_PAT \
+  --store-password-in-clear-text \
+  --name Cleanuparr \
+  https://nuget.pkg.github.com/Cleanuparr/index.json
+```
+
+Replace `YOUR_GITHUB_USERNAME` and `YOUR_GITHUB_PAT` with your GitHub username and the PAT you created.
+
+### Running the Backend
+
+#### Option 1: Using .NET CLI
+
+Navigate to the backend directory:
+```bash
+cd code/backend
+```
+
+Build the application:
+```bash
+dotnet build Cleanuparr.Api/Cleanuparr.Api.csproj
+```
+
+Run the application:
+```bash
+dotnet run --project Cleanuparr.Api/Cleanuparr.Api.csproj
+```
+
+Run tests:
+```bash
+dotnet test
+```
+
+The API will be available at http://localhost:5000
+
+#### Option 2: Using an IDE
+
+For JetBrains Rider or Visual Studio:
+1. Open the solution file: `code/backend/cleanuparr.sln`
+2. Set `Cleanuparr.Api` as the startup project
+3. Press `F5` to start the application
+
+### Database Migrations
+
+Cleanuparr uses two separate database contexts: `DataContext` and `EventsContext`.
+
+#### Prerequisites
+
+Install Make if not already installed:
+- Windows: Install via [Chocolatey](https://chocolatey.org/) (`choco install make`) or use [WSL](https://docs.microsoft.com/windows/wsl/)
+- macOS: Install via Homebrew (`brew install make`)
+- Linux: Usually pre-installed, or install via package manager (`apt install make`, `yum install make`, etc.)
+
+#### Creating Migrations
+
+From the `code` directory:
+
+For data migrations (DataContext):
+```bash
+make migrate-data name=YourMigrationName
+```
+
+For events migrations (EventsContext):
+```bash
+make migrate-events name=YourMigrationName
+```
+
+Example:
+```bash
+make migrate-data name=AddUserPreferences
+make migrate-events name=AddAuditLogEvents
+```
+
+## Frontend Development
+
+### Setup
+
+1. Navigate to the frontend directory:
+   ```bash
+   cd code/frontend
+   ```
+
+2. Install dependencies:
+   ```bash
+   npm install
+   ```
+
+3. Start the development server:
+   ```bash
+   npm start
+   ```
+
+The UI will be available at http://localhost:4200
+
+### Testing
+
+Unit tests run on [Vitest](https://vitest.dev/) through the Angular `@angular/build:unit-test` builder, in a jsdom environment. No browser download is required.
+
+```bash
+cd code/frontend
+
+# Watch mode, re-runs on save
+npm test
+
+# Single run with a coverage report, written to coverage/ui/. This is what CI runs
+npm run test:ci
+
+# Single run without coverage
+npm test -- --watch=false
+
+# Run a single spec
+npm test -- --include src/app/ui/chip-input/chip-input.component.spec.ts
+
+# Lint, also a CI gate
+npm run lint
+```
+
+`npm test` is Angular's `ng test`, which watches by default in an interactive terminal and runs once when stdout is not a TTY. CI therefore needs no extra flag, but do not rely on that locally: in your terminal `npm test` stays open until you quit it.
+
+#### Writing specs
+
+Specs live next to the code they cover, named `{feature}.component.spec.ts`. The Angular schematics in `angular.json` are configured with `skipTests: true`, so `ng generate` will not create a spec for you. Write it by hand.
+
+House style, follow the existing specs as reference:
+
+- Vitest globals (`describe`, `it`, `expect`, `vi`) are enabled via `tsconfig.spec.json`. Do not import them.
+- Use `TestBed.createComponent` and drive the rendered DOM. Assert on output, not on private internals.
+- For a component with inputs and outputs, declare a small standalone host component in the spec file and test through it. See `src/app/ui/chip-input/chip-input.component.spec.ts`.
+- Stub API classes with a plain object of methods returning `of(...)` from RxJS. Do not mock `HttpClient` and do not use `provideHttpClientTesting`. See `src/app/features/settings/seeker/seeker.component.spec.ts`.
+- Keep stub observables synchronous. An `rxResource` backed by `of(...)` resolves within a single `fixture.detectChanges()`, while an async source would need `await fixture.whenStable()`.
+- To flush a bare `effect()` outside a component, call it inside `TestBed.runInInjectionContext(...)` and flush with `TestBed.tick()`. See `src/app/core/services/overlay-stack.service.spec.ts`.
+- Put shared setup in a local `function setup()` inside the `describe` rather than in `beforeEach`, so each test reads top to bottom.
+- Components are zoneless and `OnPush`, so call `fixture.detectChanges()` after every interaction that should update the view.
+
+Two consequences of the zoneless, non-isolated test environment are worth knowing before you debug something strange:
+
+- `fakeAsync`, `tick()` and `flush()` from `@angular/core/testing` require Zone.js and **cannot** be used. Use `vi.useFakeTimers()` and `vi.advanceTimersByTime()` instead, and restore with `vi.useRealTimers()`.
+- The Angular `@angular/build` unit-test runner sets Vitest's `isolate` option to `false` to match the old Karma behaviour. Vitest's own default is `isolate: true`, so its documentation will tell you the opposite. In practice module-level state, `localStorage`, fake timers and anything written to `document.documentElement` leak into other spec files. Always undo them in `afterEach`.
+
+## Documentation Development
+
+### Setup
+
+1. Navigate to the docs directory:
+   ```bash
+   cd docs
+   ```
+
+2. Install dependencies:
+   ```bash
+   npm install
+   ```
+
+3. Start the development server:
+   ```bash
+   npm start
+   ```
+
+The documentation site will be available at http://localhost:3000
+
+## Building with Docker
+
+### Building a Local Docker Image
+
+To build the Docker image locally for testing:
+
+1. Navigate to the `code` directory:
+   ```bash
+   cd code
+   ```
+
+2. Build the image:
+   ```bash
+   docker build \
+     --build-arg PACKAGES_USERNAME=YOUR_GITHUB_USERNAME \
+     --build-arg PACKAGES_PAT=YOUR_GITHUB_PAT \
+     -t cleanuparr:local \
+     -f Dockerfile .
+   ```
+
+   Replace `YOUR_GITHUB_USERNAME` and `YOUR_GITHUB_PAT` with your credentials.
+
+3. Run the container:
+   ```bash
+   docker run -d \
+     --name cleanuparr-dev \
+     -p 11011:11011 \
+     -v /path/to/config:/config \
+     -e PUID=1000 \
+     -e PGID=1000 \
+     -e TZ=Etc/UTC \
+     cleanuparr:local
+   ```
+
+4. Access the application at http://localhost:11011
+
+### Building for Multiple Architectures
+
+Use Docker Buildx for multi-platform builds:
+
+```bash
+docker buildx build \
+  --platform linux/amd64,linux/arm64 \
+  --build-arg PACKAGES_USERNAME=YOUR_GITHUB_USERNAME \
+  --build-arg PACKAGES_PAT=YOUR_GITHUB_PAT \
+  -t cleanuparr:local \
+  -f Dockerfile .
+```
+
+## Code Standards
+
+### Backend (.NET/C#)
+- Follow existing conventions and [Microsoft C# Coding Conventions](https://docs.microsoft.com/dotnet/csharp/fundamentals/coding-style/coding-conventions)
+- Use meaningful variable and method names
+- Add XML documentation comments for public APIs
+- Write unit tests whenever possible
+
+### Frontend (Angular/TypeScript)
+- Follow existing conventions and the [Angular Style Guide](https://angular.io/guide/styleguide)
+- Use TypeScript strict mode
+- Write unit tests whenever possible, see [Frontend Development > Testing](#testing)
+
+### Documentation
+- Use clear, concise language
+- Include code examples where appropriate
+- Update relevant documentation when adding/changing features
+- Check for spelling and grammar
+
+## Submitting Your Contribution
+
+### 1. Create a Feature Branch
+
+```bash
+git checkout -b feature/your-feature-name
+# or
+git checkout -b fix/your-bug-fix-name
+```
+
+### 2. Make Your Changes
+
+- Write clean, well-documented code
+- Follow the code standards outlined above
+- **Test your changes thoroughly!**
+
+### 3. Commit Your Changes
+
+Write clear, descriptive commit messages:
+
+```bash
+git add .
+git commit -m "Add feature: brief description of your changes"
+```
+
+### 4. Keep Your Branch Updated
+
+```bash
+git fetch upstream
+git rebase upstream/main
+```
+
+### 5. Push to Your Fork
+
+```bash
+git push origin feature/your-feature-name
+```
+
+### 6. Create a Pull Request
+
+1. Go to the [Cleanuparr repository](https://github.com/Cleanuparr/Cleanuparr)
+2. Click "New Pull Request"
+3. Select your fork and branch
+4. Fill out the PR template with:
+   - A descriptive title (e.g., "Add support for Prowlarr integration" or "Fix memory leak in download client polling")
+   - Description of changes
+   - Related issue number
+   - Testing performed
+   - Screenshots (if applicable)
+
+### 7. Code Review Process
+
+- Maintainers will review your PR
+- Address any feedback or requested changes
+- Once approved, your PR will be merged
+
+## Other Ways to Contribute
+
+### Help Test New Features
+
+We're always looking for testers to help validate new features before they are released. If you'd like to help test upcoming changes:
+
+1. Join our [Discord community](https://discord.gg/SCtMCgtsc4)
+2. Let us know you're interested in testing
+3. We'll provide you with pre-release builds and testing instructions
+
+Your feedback helps us catch issues early and deliver better releases.
+
+## Getting Help
+
+- Discord: Join our [Discord community](https://discord.gg/SCtMCgtsc4) for real-time help
+- Issues: Check existing [GitHub issues](https://github.com/Cleanuparr/Cleanuparr/issues) or create a new one
+- Documentation: Review the [complete documentation](https://cleanuparr.github.io/Cleanuparr/)
+
+## License
+
+By contributing to Cleanuparr, you agree that your contributions will be licensed under the same license as the project.
+
+---
+
+Thanks for contributing to Cleanuparr!

Cloudflare/_headers

@@ -0,0 +1,3 @@
+# Cache static files for 5 minutes
+/static/*
+  Cache-Control: public, max-age=300, s-maxage=300

README.md

@@ -1,241 +1,126 @@
-# <img width="24px" src="./Logo/256.png" alt="cleanuperr"></img> cleanuperr
+<div align="center">
 
-cleanuperr is a tool for automating the cleanup of unwanted or blocked files in Sonarr, Radarr, and supported download clients like qBittorrent. It removes incomplete or blocked downloads, updates queues, and enforces blacklists or whitelists to manage file selection. After removing blocked content, cleanuperr can also trigger a search to replace the deleted shows/movies.
+_Love this project? Give it a ⭐️ and let others know!_
 
-cleanuperr was created primarily to address malicious files, such as `*.lnk` or `*.zipx`, that were getting stuck in Sonarr/Radarr and required manual intervention. Some of the reddit posts that made cleanuperr come to life can be found [here](https://www.reddit.com/r/sonarr/comments/1gqnx16/psa_sonarr_downloaded_a_virus/), [here](https://www.reddit.com/r/sonarr/comments/1gqwklr/sonar_downloaded_a_mkv_file_which_looked_like_a/), [here](https://www.reddit.com/r/sonarr/comments/1gpw2wa/downloaded_waiting_to_import/) and [here](https://www.reddit.com/r/sonarr/comments/1gpi344/downloads_not_importing_no_files_found/).
+# <img width="24px" src="./Logo/256.png" alt="Cleanuparr"></img> Cleanuparr
 
-The tool supports both qBittorrent's built-in exclusion features and its own blocklist-based system. Binaries for all platforms are provided, along with Docker images for easy deployment.
+_/kliː.nʌp.ər/ — like "cleanuper", someone who does the cleanup. Not "CleanupArr" or "CleanUpArr"._
 
-Refer to the [Environment variables](#Environment-variables) section for detailed configuration instructions and the [Setup](#Setup) section for an in-depth explanation of the cleanup process.
+![Version](https://img.shields.io/badge/dynamic/json?url=https%3A%2F%2Fcleanuparr-status.pages.dev%2Fstatus.json&query=%24.version&logo=git&label=version&color=blue)
+![Total Downloads](https://img.shields.io/badge/dynamic/json?url=https%3A%2F%2Fghcr-badge.elias.eu.org%2Fapi%2FCleanuparr%2FCleanuparr%2Fcleanuparr&query=%24.downloadCount&style=flat&logo=docker&label=Total%20Downloads&color=blue)
+[![Tests](https://github.com/Cleanuparr/Cleanuparr/actions/workflows/test.yml/badge.svg?branch=main)](https://github.com/Cleanuparr/Cleanuparr/actions/workflows/test.yml)
 
-## Key features
-- Marks unwanted files as skip/unwanted in the download client.
-- Automatically strikes stalled or stuck downloads. 
-- Removes and blocks downloads that reached the maximum number of strikes or are marked as unwanted by the download client or by cleanuperr and triggers a search for removed downloads.
 
-## Important note
+[![Discord](https://img.shields.io/discord/1306721212587573389?color=7289DA&label=Discord&style=for-the-badge&logo=discord)](https://discord.gg/SCtMCgtsc4)
 
-Only the **latest versions** of the following apps are supported, or earlier versions that have the same API as the latest version:
-- qBittorrent
-- Deluge
-- Transmission
-- Sonarr
-- Radarr
+</div>
 
-This tool is actively developed and still a work in progress. Join the Discord server if you want to reach out to me quickly (or just stay updated on new releases) so we can squash those pesky bugs together:
+Cleanuparr is an advanced download manager for the Servarr ecosystem. It works with Sonarr, Radarr, Lidarr, Readarr, and Whisparr alongside download clients like qBittorrent, Transmission, and Deluge. Beyond cleaning up stalled, blocked, and malicious downloads, it searches for missing content and quality upgrades, manages seeding, and removes orphaned files.
 
-> https://discord.gg/sWggpnmGNY
+Cleanuparr was created primarily to address malicious files, such as `*.lnk` or `*.zipx`, that were getting stuck in Sonarr/Radarr and required manual intervention. Some of the reddit posts that made Cleanuparr come to life can be found [here](https://www.reddit.com/r/sonarr/comments/1gqnx16/psa_sonarr_downloaded_a_virus/), [here](https://www.reddit.com/r/sonarr/comments/1gqwklr/sonar_downloaded_a_mkv_file_which_looked_like_a/), [here](https://www.reddit.com/r/sonarr/comments/1gpw2wa/downloaded_waiting_to_import/) and [here](https://www.reddit.com/r/sonarr/comments/1gpi344/downloads_not_importing_no_files_found/).
 
-# How it works
+> [!IMPORTANT]
+> **Features:**
+> - Strike system to mark bad downloads.
+> - Remove and block downloads that reached a maximum number of strikes.
+> - Remove and block downloads that are **failing to be imported** by the arrs.
+> - Remove and block downloads that are **stalled** or in **metadata downloading** state.
+> - Remove and block downloads that have a **low download speed** or **high estimated completion time**.
+> - Remove and block downloads blocked by qBittorrent or by Cleanuparr's **Malware Blocker**.
+> - Remove and block known malware based on patterns found by the community.
+> - Automatically trigger a search for downloads removed from the arrs.
+> - Proactively search for **missing** items across your Radarr and Sonarr libraries.
+> - Search for **quality upgrades** for items that haven't met their quality profile's cutoff (a.k.a. **Cutoff Unmet**).
+> - Search for **custom format score upgrades** with automatic score tracking.
+> - Clean up downloads that have been **seeding** for a certain amount of time.
+> - Remove downloads that are **orphaned**/have no **hardlinks**/are not referenced by the arrs anymore (with [cross-seed](https://www.cross-seed.org/) support).
+> - Scan configured directories for **files not claimed by any active torrent**, move them to a dedicated orphaned directory, and optionally auto-purge.
+> - Notify on strike or download removal.
+> - Ignore certain torrent hashes, categories, tags or trackers from being processed by Cleanuparr.
 
-1. **Content blocker** will:
-   - Run every 5 minutes (or configured cron).
-   - Process all items in the *arr queue.
-   - Find the corresponding item from the download client for each queue item.
-   - Mark the files that were found in the queue as **unwanted/skipped** if:
-     - They **are listed in the blacklist**, or
-     - They **are not included in the whitelist**.
-2. **Queue cleaner** will:
-   - Run every 5 minutes (or configured cron).
-   - Process all items in the *arr queue.
-   - Check each queue item if it is **stalled (download speed is 0)**, **stuck in matadata downloading** or **failed to be imported**.
-     - If it is, the item receives a **strike** and will continue to accumulate strikes every time it meets any of these conditions.
-   - Check each queue item if it meets one of the following condition in the download client:
-     - **Marked as completed, but 0 bytes have been downloaded** (due to files being blocked by qBittorrent or the **content blocker**).
-     - All associated files of are marked as **unwanted/skipped**.
-   - If the item **DOES NOT** match the above criteria, it will be skipped.
-   - If the item **DOES** match the criteria or has received the **maximum number of strikes**:
-     - It will be removed from the *arr's queue and blocked.
-     - It will be deleted from the download client.
-     - A new search will be triggered for the *arr item.
+## Sponsored by GitAds
+[![Sponsored by GitAds](https://gitads.dev/v1/ad-serve?source=cleanuparr/cleanuparr@github)](https://gitads.dev/v1/ad-track?source=cleanuparr/cleanuparr@github)
 
-# Setup
+## Screenshots
 
-## Using qBittorrent's built-in feature (works only with qBittorrent)
+https://cleanuparr.github.io/Cleanuparr/docs/screenshots
 
-1. Go to qBittorrent -> Options -> Downloads -> make sure `Excluded file names` is checked -> Paste an exclusion list that you have copied.
-   - [blacklist](https://raw.githubusercontent.com/flmorg/cleanuperr/refs/heads/main/blacklist), or
-   - [permissive blacklist](https://raw.githubusercontent.com/flmorg/cleanuperr/refs/heads/main/blacklist_permissive), or
-   - create your own
-2. qBittorrent will block files from being downloaded. In the case of malicious content, **nothing is downloaded and the torrent is marked as complete**.
-3. Start **cleanuperr** with `QUEUECLEANER__ENABLED` set to `true`.
-4. The **queue cleaner** will perform a cleanup process as described in the [How it works](#how-it-works) section.
+## 🎯 Supported Applications
 
-## Using cleanuperr's blocklist (works with all supported download clients)
+### *Arr Applications (latest version)
+- **Sonarr**
+- **Radarr**
+- **Lidarr**
+- **Readarr**
+- **Whisparr v2**
+- **Whisparr v3**
 
-1. Set both `QUEUECLEANER__ENABLED` and `CONTENTBLOCKER_ENABLED` to `true` in your environment variables.
-2. Configure and enable either a **blacklist** or a **whitelist** as described in the [Environment variables](#Environment-variables) section.
-3. Once configured, cleanuperr will perform the following tasks:
-   - Execute the **content blocker** job, as explained in the [How it works](#how-it-works) section.
-   - Execute the **queue cleaner** job, as explained in the [How it works](#how-it-works) section.
+### Download Clients (latest version)
+- **qBittorrent**
+- **Transmission**
+- **Deluge**
+- **µTorrent**
+- **rTorrent**
 
-## Using cleanuperr just for failed *arr imports (works for Usenet users as well)
+### Platforms
+- **Docker**
+- **Windows**
+- **macOS**
+- **Linux**
+- **Unraid**
 
-1. Set `QUEUECLEANER__ENABLED` to `true`.
-2. Set `QUEUECLEANER__IMPORT_FAILED_MAX_STRIKES` to a desired value.
-3. Optionally set failed import message patterns to ignore using `QUEUECLEANER__IMPORT_FAILED_IGNORE_PATTERNS__<NUMBER>`.
-4. Set `DOWNLOAD_CLIENT` to `none`.
+## 🚀 Quick Start
 
-**No other action involving a download client would work (e.g. content blocking, removing stalled downloads, excluding private trackers).**
-
-## Usage
-
-### Docker compose yaml
-
-```
-version: "3.3"
-services:
-  cleanuperr:
-    volumes:
-      - ./cleanuperr/logs:/var/logs
-    environment:
-      - LOGGING__LOGLEVEL=Information
-      - LOGGING__FILE__ENABLED=false
-      - LOGGING__FILE__PATH=/var/logs/
-      - LOGGING__ENHANCED=true
-
-      - TRIGGERS__QUEUECLEANER=0 0/5 * * * ?
-      - TRIGGERS__CONTENTBLOCKER=0 0/5 * * * ?
-
-      - QUEUECLEANER__ENABLED=true
-      - QUEUECLEANER__RUNSEQUENTIALLY=true
-      - QUEUECLEANER__IMPORT_FAILED_MAX_STRIKES=5
-      - QUEUECLEANER__IMPORT_FAILED_IGNORE_PRIVATE=false
-      # - QUEUECLEANER__IMPORT_FAILED_IGNORE_PATTERNS__0=title mismatch
-      # - QUEUECLEANER__IMPORT_FAILED_IGNORE_PATTERNS__1=manual import required
-      - QUEUECLEANER__STALLED_MAX_STRIKES=5
-      - QUEUECLEANER__STALLED_IGNORE_PRIVATE=false
-
-      - CONTENTBLOCKER__ENABLED=true
-      - CONTENTBLOCKER__IGNORE_PRIVATE=true
-      - CONTENTBLOCKER__BLACKLIST__ENABLED=true
-      - CONTENTBLOCKER__BLACKLIST__PATH=https://raw.githubusercontent.com/flmorg/cleanuperr/refs/heads/main/blacklist
-      # OR
-      # - CONTENTBLOCKER__WHITELIST__ENABLED=true
-      # - CONTENTBLOCKER__WHITELIST__PATH=https://raw.githubusercontent.com/flmorg/cleanuperr/refs/heads/main/whitelist
-
-      - DOWNLOAD_CLIENT=qBittorrent
-      - QBITTORRENT__URL=http://localhost:8080
-      - QBITTORRENT__USERNAME=user
-      - QBITTORRENT__PASSWORD=pass
-      # OR
-      # - DOWNLOAD_CLIENT=deluge
-      # - DELUGE__URL=http://localhost:8112
-      # - DELUGE__PASSWORD=testing
-      # OR
-      # - DOWNLOAD_CLIENT=transmission
-      # - TRANSMISSION__URL=http://localhost:9091
-      # - TRANSMISSION__USERNAME=test
-      # - TRANSMISSION__PASSWORD=testing
-      # OR
-      # - DOWNLOAD_CLIENT=none
-
-      - SONARR__ENABLED=true
-      - SONARR__SEARCHTYPE=Episode
-      - SONARR__INSTANCES__0__URL=http://localhost:8989
-      - SONARR__INSTANCES__0__APIKEY=secret1
-      - SONARR__INSTANCES__1__URL=http://localhost:8990
-      - SONARR__INSTANCES__1__APIKEY=secret2
-
-      - RADARR__ENABLED=true
-      - RADARR__INSTANCES__0__URL=http://localhost:7878
-      - RADARR__INSTANCES__0__APIKEY=secret3
-      - RADARR__INSTANCES__1__URL=http://localhost:7879
-      - RADARR__INSTANCES__1__APIKEY=secret4
-    image: ghcr.io/flmorg/cleanuperr:latest
-    restart: unless-stopped
+```bash
+docker run -d --name cleanuparr \
+  --restart unless-stopped \
+  -p 11011:11011 \
+  -v /path/to/config:/config \
+  -e PORT=11011 \
+  -e PUID=1000 \
+  -e PGID=1000 \
+  -e TZ=Etc/UTC \
+  ghcr.io/cleanuparr/cleanuparr:latest
 ```
 
-### Environment variables
+For Docker Compose, health checks, and other installation methods, see the [Complete Installation Guide](https://cleanuparr.github.io/Cleanuparr/docs/installation/detailed), but not before reading the [Prerequisites](https://cleanuparr.github.io/Cleanuparr/docs/installation/).
 
-| Variable | Required | Description | Default value |
-|---|---|---|---|
-| LOGGING__LOGLEVEL | No | Can be `Verbose`, `Debug`, `Information`, `Warning`, `Error` or `Fatal` | `Information` |
-| LOGGING__FILE__ENABLED | No | Enable or disable logging to file | false |
-| LOGGING__FILE__PATH | No | Directory where to save the log files | empty |
-| LOGGING__ENHANCED | No | Enhance logs whenever possible<br>A more detailed description is provided [here](variables.md#LOGGING__ENHANCED) | true |
-|||||
-| TRIGGERS__QUEUECLEANER | Yes if queue cleaner is enabled | [Quartz cron trigger](https://www.quartz-scheduler.org/documentation/quartz-2.3.0/tutorials/crontrigger.html)<br>Can be a max of 6h interval<br>**Is ignored if `QUEUECLEANER__RUNSEQUENTIALLY=true` and `CONTENTBLOCKER__ENABLED=true`** | 0 0/5 * * * ? |
-| TRIGGERS__CONTENTBLOCKER | Yes if content blocker is enabled | [Quartz cron trigger](https://www.quartz-scheduler.org/documentation/quartz-2.3.0/tutorials/crontrigger.html)<br>Can be a max of 6h interval | 0 0/5 * * * ? |
-|||||
-| QUEUECLEANER__ENABLED | No | Enable or disable the queue cleaner | true |
-| QUEUECLEANER__RUNSEQUENTIALLY | No | If set to true, the queue cleaner will run after the content blocker instead of running in parallel, streamlining the cleaning process | true |
-| QUEUECLEANER__IMPORT_FAILED_MAX_STRIKES | No | After how many strikes should a failed import be removed<br>0 means never | 0 |
-| QUEUECLEANER__IMPORT_FAILED_IGNORE_PRIVATE | No | Whether to ignore failed imports from private trackers | false |
-| QUEUECLEANER__IMPORT_FAILED_IGNORE_PATTERNS__0 | No | First pattern to look for when an import is failed<br>If the specified message pattern is found, the item is skipped | empty |
-| QUEUECLEANER__STALLED_MAX_STRIKES | No | After how many strikes should a stalled download be removed<br>0 means never | 0 |
-| QUEUECLEANER__STALLED_IGNORE_PRIVATE | No | Whether to ignore stalled downloads from private trackers | false |
-|||||
-| CONTENTBLOCKER__ENABLED | No | Enable or disable the content blocker | false |
-| CONTENTBLOCKER__IGNORE_PRIVATE | No | Whether to ignore downloads from private trackers | false |
-| CONTENTBLOCKER__BLACKLIST__ENABLED | Yes if content blocker is enabled and whitelist is not enabled | Enable or disable the blacklist | false |
-| CONTENTBLOCKER__BLACKLIST__PATH | Yes if blacklist is enabled | Path to the blacklist (local file or url)<br>Needs to be json compatible | empty |
-| CONTENTBLOCKER__WHITELIST__ENABLED | Yes if content blocker is enabled and blacklist is not enabled | Enable or disable the whitelist | false |
-| CONTENTBLOCKER__WHITELIST__PATH | Yes if whitelist is enabled | Path to the whitelist (local file or url)<br>Needs to be json compatible | empty |
-|||||
-| DOWNLOAD_CLIENT | No | Download client that is used by *arrs<br>Can be `qbittorrent`, `deluge`, `transmission` or `none` | `qbittorrent` |
-| QBITTORRENT__URL | No | qBittorrent instance url | http://localhost:8112 |
-| QBITTORRENT__USERNAME | No | qBittorrent user | empty |
-| QBITTORRENT__PASSWORD | No | qBittorrent password | empty |
-|||||
-| DELUGE__URL | No | Deluge instance url | http://localhost:8080 |
-| DELUGE__PASSWORD | No | Deluge password | empty |
-|||||
-| TRANSMISSION__URL | No | Transmission instance url | http://localhost:9091 |
-| TRANSMISSION__USERNAME | No | Transmission user | empty |
-| TRANSMISSION__PASSWORD | No | Transmission password | empty |
-|||||
-| SONARR__ENABLED | No | Enable or disable Sonarr cleanup  | true |
-| SONARR__SEARCHTYPE | No | What to search for after removing a queue item<br>Can be `Episode`, `Season` or `Series` | `Episode` |
-| SONARR__INSTANCES__0__URL | No | First Sonarr instance url | http://localhost:8989 |
-| SONARR__INSTANCES__0__APIKEY | No | First Sonarr instance API key | empty |
-|||||
-| RADARR__ENABLED | No | Enable or disable Radarr cleanup  | false |
-| RADARR__INSTANCES__0__URL | No | First Radarr instance url | http://localhost:8989 |
-| RADARR__INSTANCES__0__APIKEY | No | First Radarr instance API key | empty |
+> Prefer not to self-host? A managed Cleanuparr instance is available via [ElfHosted](https://store.elfhosted.com/product-category/personal-stacks/?utm_source=github&utm_medium=readme&utm_campaign=cleanuparr-readme), bundled alongside Sonarr/Radarr to keep your queues tidy (7-day trial).
 
-#
-### To be noted
+### 🌐 Access the Web Interface
 
-1. The blacklist and the whitelist can not be both enabled at the same time.
-2. The queue cleaner and content blocker can be enabled or disabled separately, if you want to run only one of them.
-3. Only one download client can be enabled at a time. If you have more than one download client, you should deploy multiple instances of cleanuperr.
-4. The blocklists (blacklist/whitelist) should have a single pattern on each line and supports the following:
+After installation, open your browser and navigate to:
 ```
-*example      // file name ends with "example"
-example*      // file name starts with "example"
-*example*     // file name has "example" in the name
-example       // file name is exactly the word "example"
-regex:<ANY_REGEX>   // regex that needs to be marked at the start of the line with "regex:"
-```
-5. Multiple Sonarr/Radarr instances can be specified using this format, where `<NUMBER>` starts from 0:
-```
-SONARR__INSTANCES__<NUMBER>__URL
-SONARR__INSTANCES__<NUMBER>__APIKEY
-```
-6. Multiple failed import patterns can be specified using this format, where `<NUMBER>` starts from 0:
-```
-QUEUECLEANER__IMPORT_FAILED_IGNORE_PATTERNS__<NUMBER>
+http://localhost:11011
 ```
 
-#
+**Next Steps:** Check out the [📖 Complete Documentation](https://cleanuparr.github.io/Cleanuparr/) for detailed configuration guides and setup instructions.
 
-### Binaries (if you're not using Docker)
+## 📖 Documentation & Support
 
-1. Download the binaries from [releases](https://github.com/flmorg/cleanuperr/releases).
-2. Extract them from the zip file.
-3. Edit **appsettings.json**. The paths from this json file correspond with the docker env vars, as described [above](#environment-variables).
+- **📚 [Complete Documentation](https://cleanuparr.github.io/Cleanuparr/)** - Installation guides, configuration, and troubleshooting
+- **⚙️ [Configuration Guide](https://cleanuparr.github.io/Cleanuparr/docs/category/configuration)** - Set up download clients, *arr apps, and features
+- **🔧 [Setup Scenarios](https://cleanuparr.github.io/Cleanuparr/docs/category/setup-scenarios)** - Common use cases and examples
+- **💬 [Discord Community](https://discord.gg/SCtMCgtsc4)** - Get help and discuss with other users
+- **🔗 [GitHub Releases](https://github.com/Cleanuparr/Cleanuparr/releases)** - Download binaries and view changelog
 
-### Run as a Windows Service
+## 🤝 Contributing
 
-Check out this stackoverflow answer on how to do it: https://stackoverflow.com/a/15719678
+We welcome contributions from the community! Whether it's bug fixes, new features, documentation improvements, or testing, your help is appreciated.
+
+**Before contributing:** Please read our [Contributing Guide](CONTRIBUTING.md) and announce your intent to work on an issue before starting.
+
+- **[Contributing Guide](CONTRIBUTING.md)** - Learn how to set up your development environment and submit contributions
+- **[Report Issues](https://github.com/Cleanuparr/Cleanuparr/issues/new/choose)** - Found a bug? Let us know!
+- **[Feature Requests](https://github.com/Cleanuparr/Cleanuparr/issues/new/choose)** - Share your ideas for new features
+- **[Help Test Features](https://discord.gg/SCtMCgtsc4)** - Join Discord to test pre-release features and provide feedback
 
 # Credits
 Special thanks for inspiration go to:
 - [ThijmenGThN/swaparr](https://github.com/ThijmenGThN/swaparr)
 - [ManiMatter/decluttarr](https://github.com/ManiMatter/decluttarr)
 - [PaeyMoopy/sonarr-radarr-queue-cleaner](https://github.com/PaeyMoopy/sonarr-radarr-queue-cleaner)
-- [Sonarr](https://github.com/Sonarr/Sonarr) & [Radarr](https://github.com/Radarr/Radarr) for the logo
+- [Sonarr](https://github.com/Sonarr/Sonarr) & [Radarr](https://github.com/Radarr/Radarr)
 
 # Buy me a coffee
 If I made your life just a tiny bit easier, consider buying me a coffee!

RELEASING.md

@@ -0,0 +1,87 @@
+# Releasing Cleanuparr
+
+Versioning rules and the release process are detailed in the user-facing version of this policy at [docs/docs/installation/versioning.mdx](docs/docs/installation/versioning.mdx) and published under [Versioning](https://cleanuparr.github.io/docs/installation/versioning).
+
+## Versioning
+
+This policy takes effect starting with **v2.10.0**. Previous releases did not follow this approach, and their version numbers have no compatibility meaning.
+
+| Part | Bump when |
+| --- | --- |
+| Major | Probably never, unless something significant changes. |
+| Minor | The release contains a breaking change. |
+| Patch | Anything else: bug fixes and new features. |
+
+## Deciding the number
+
+Every pull request includes a category label, which is enforced by [pr-label.yml](.github/workflows/pr-label.yml). The `breaking` label determines the version number.
+
+From the `code` directory, use this command to list every breaking pull request that was merged since the last release and indicate which number to bump:
+
+```bash
+make release-check
+```
+
+To view the full release notes for a version before tagging it, without creating anything:
+
+```bash
+make release-notes version=2.11.0
+```
+
+A `## Breaking Changes` section means the release is a minor version. If this section is absent, the release is a patch.
+
+[release.yml](.github/workflows/release.yml) performs the same check and stops the release process before anything is built if breaking pull requests were merged but the minor version did not increment. It issues a warning but continues if the minor version moves without a breaking pull request leading it.
+
+Examples of breaking changes:
+
+- A migration that drops or rewrites data, preventing rollback to the previous version
+- Renaming or removing an environment variable
+- Dropping a platform, architecture, installer, or database provider
+- A default value that alters how an existing configuration interacts with user data
+- A setting whose unit or interpretation changes and cannot be altered by a migration
+- Dropping a download client or *arr application, or increasing the minimum supported version
+- A change to the public REST API (e.g., the `stats` endpoint)
+
+Examples of non-breaking changes:
+
+- A migration that simply adds columns or tables
+- Renaming any value stored in the database and configured through the UI, accompanied by a migration
+- Any change to the private REST API, which is intended only for the UI
+- Modifications to the Web UI layout, internal structure, or logging
+
+## Auditing migrations before a release
+
+The easiest breaking change to overlook is a migration that prevents rollback. To see the migrations added since the previous tag:
+
+```bash
+git diff --name-only <last-tag>..main -- '*/Migrations/**' \
+  | grep -v -e Designer -e Snapshot \
+  | xargs grep -l 'DropColumn\|DropTable\|AlterColumn\|RenameColumn\|DeleteData\|migrationBuilder\.Sql'
+```
+
+Only `Up()` matters, since every migration drops things in `Down()` by definition, leading to false positives in that grep.
+
+Additive changes are safe. `AddColumn` and `CreateTable` allow previous versions to start. However, a conversion or rewrite does not.
+
+## Release process
+
+Tag pushes that match `v*.*.*` trigger [release.yml](.github/workflows/release.yml).
+
+```bash
+git tag v2.10.0
+git push origin v2.10.0
+```
+
+### Release notes
+
+GitHub generates notes from the pull requests merged since the last tag, grouped into sections by label according to [release.yml](.github/release.yml):
+
+| Label | Section |
+| --- | --- |
+| `breaking` | Breaking Changes |
+| `enhancement` | Features |
+| `bug` | Bug Fixes |
+| `documentation` | Documentation |
+| `chore` | Maintenance |
+
+The status check for `Require category label` is mandatory on `main`, so a missing label will be caught before merging. Labels added after merging still apply because notes are generated at release time.

blacklist

@@ -1,11 +1,27 @@
 *(sample).*
+*sample.avchd
+*sample.avi
+*sample.mkv
+*sample.mov
+*sample.mp4
+*sample.webm
+*sample.wmv
+*.000
+*.001
+*.002
+*.004
 *.0xe
 *.73k
 *.73p
 *.7z
+*.7z.001
+*.7z.002
 *.89k
 *.89z
 *.8ck
+*.a00
+*.a01
+*.a02
 *.a7r
 *.ac
 *.acc
@@ -21,8 +37,11 @@
 *.ahk
 *.ai
 *.aif
+*.ain
 *.air
 *.alz
+*.ana
+*.apex
 *.api
 *.apk
 *.app
@@ -30,15 +49,28 @@
 *.applescript
 *.application
 *.appx
+*.apz
+*.ar
 *.arc
+*.archiver
+*.arduboy
+*.arh
+*.ari
 *.arj
+*.ark
 *.arscript
 *.asb
+*.asice
 *.asp
 *.aspx
 *.aspx-exe
 *.atmx
+*.ayt
 *.azw2
+*.b1
+*.b6z
+*.b64
+*.ba
 *.ba_
 *.bak
 *.bas
@@ -46,26 +78,48 @@
 *.bat
 *.bdjo
 *.bdmv
+*.bdoc
 *.beam
+*.bh
 *.bin
 *.bmp
 *.bms
+*.bndl
 *.bns
+*.boo
 *.bsa
 *.btm
+*.bundle
+*.bz
 *.bz2
+*.bza
+*.bzabw
+*.bzip
+*.bzip2
 *.c
+*.c00
+*.c01
+*.c02
+*.c10
 *.cab
 *.caction
+*.car
+*.cb7
+*.cba
+*.cbr
+*.cbt
+*.cbz
 *.cci
 *.cda
 *.cdb
+*.cdz
 *.cel
 *.celx
 *.cfs
 *.cgi
 *.cheat
 *.chm
+*.cit
 *.ckpt
 *.cla
 *.class
@@ -75,9 +129,15 @@
 *.coffee
 *.com
 *.command
+*.comppkg.hauptwerk.rar
+*.comppkg_hauptwerk_rar
+*.conda
 *.conf
 *.config
+*.cp9
+*.cpgz
 *.cpl
+*.cpt
 *.crt
 *.cs
 *.csh
@@ -85,17 +145,27 @@
 *.csproj
 *.css
 *.csv
+*.ctx
+*.ctz
 *.cue
 *.cur
+*.cxarchive
 *.cyw
+*.czip
 *.daemon
+*.daf
+*.dar
 *.dat
 *.data-00000-of-00001
 *.db
+*.dd
 *.deamon
 *.deb
 *.dek
+*.dgc
+*.dist
 *.diz
+*.dl_
 *.dld
 *.dll
 *.dmc
@@ -112,19 +182,27 @@
 *.dw
 *.dword
 *.dxl
+*.dz
 *.e_e
 *.ear
 *.ebacmd
 *.ebm
 *.ebs
 *.ebs2
+*.ecar
 *.ecf
+*.ecs
+*.ecsbx
+*.edz
+*.efw
+*.egg
 *.eham
 *.elf
 *.elf-so
 *.email
 *.emu
 *.epk
+*.epi
 *.es
 *.esh
 *.etc
@@ -140,36 +218,62 @@
 *.exz
 *.ezs
 *.ezt
+*.f
+*.f3z
 *.fas
 *.fba
+*.fcx
 *.fky
 *.flac
 *.flatpak
 *.flv
+*.fp8
 *.fpi
 *.frs
 *.fxp
+*.fzpz
 *.gadget
+*.gar
 *.gat
+*.gca
 *.gif
 *.gifv
 *.gm9
+*.gmz
 *.gpe
 *.gpu
 *.gs
 *.gz
+*.gz2
+*.gza
+*.gzi
+*.gzip
 *.h5
+*.ha
 *.ham
+*.hbc
+*.hbc2
+*.hbe
 *.hex
+*.hki
+*.hki1
+*.hki2
+*.hki3
 *.hlp
 *.hms
 *.hpf
+*.hpk
+*.hpkg
 *.hta
 *.hta-psh
 *.htaccess
 *.htm
 *.html
+*.htmi
+*.hyp
+*.iadproj
 *.icd
+*.ice
 *.icns
 *.ico
 *.idx
@@ -182,17 +286,27 @@
 *.ins
 *.ipa
 *.ipf
+*.ipg
 *.ipk
 *.ipsw
 *.iqylink
+*.ish
 *.iso
 *.isp
 *.isu
+*.isx
 *.ita
+*.ize
 *.izh
 *.izma ace
+*.j
 *.jar
+*.jar.pack
 *.java
+*.jex
+*.jgz
+*.jhh
+*.jic
 *.jpeg
 *.jpg
 *.js
@@ -201,27 +315,51 @@
 *.jse
 *.jsf
 *.json
+*.jsonlz4
 *.jsp
 *.jsx
+*.kextraction
+*.kgb
 *.kix
 *.ksh
+*.ksp
+*.kwgt
 *.kx
+*.kz
+*.layout
+*.lbr
 *.lck
 *.ldb
+*.lemon
+*.lha
+*.lhzd
 *.lib
+*.libzip
 *.link
 *.lnk
 *.lo
 *.lock
 *.log
 *.loop-vbs
+*.lpkg
+*.lqr
 *.ls
+*.lz
+*.lz4
+*.lzh
+*.lzm
+*.lzma
+*.lzo
+*.lzr
+*.lzx
 *.m3u
 *.m4a
 *.mac
 *.macho
 *.mamc
 *.manifest
+*.mar
+*.mbz
 *.mcr
 *.md
 *.mda
@@ -232,22 +370,29 @@
 *.mdt
 *.mel
 *.mem
+*.memo
 *.meta
 *.mgm
 *.mhm
 *.mht
 *.mhtml
 *.mid
+*.mint
 *.mio
 *.mlappinstall
+*.mlproj
 *.mlx
 *.mm
 *.mobileconfig
 *.model
 *.moo
+*.mou
+*.movpkg
+*.mozlz4
 *.mp3
 *.mpa
 *.mpk
+*.mpkg
 *.mpls
 *.mrc
 *.mrp
@@ -266,41 +411,79 @@
 *.msp
 *.mst
 *.msu
+*.mxc
 *.mxe
+*.mzp
 *.n
+*.nar
 *.ncl
 *.net
+*.nex
 *.nexe
 *.nfo
+*.npk
 *.nrg
 *.num
+*.nz
 *.nzb.bz2
 *.nzb.gz
 *.nzbs
+*.oar
 *.ocx
+*.odlgz
 *.odt
+*.opk
 *.ore
+*.osf
 *.ost
 *.osx
 *.osx-app
 *.otm
 *.out
 *.ova
+*.oz
 *.p
+*.p01
+*.p19
+*.p7z
+*.pa
+*.pack.gz
+*.package
+*.pae
 *.paf
 *.pak
+*.paq6
+*.paq7
+*.paq8
+*.paq8f
+*.paq8l
+*.paq8p
+*.par
+*.par2
+*.pax
 *.pb
+*.pbi
 *.pcd
+*.pcv
 *.pdb
 *.pdf
 *.pea
 *.perl
+*.pet
 *.pex
+*.pf
 *.phar
 *.php
 *.php5
 *.pif
+*.pim
+*.pima
+*.pit
+*.piz
 *.pkg
+*.pkg.tar.xz
+*.pkg.tar.zst
+*.pkz
 *.pl
 *.plsc
 *.plx
@@ -318,6 +501,7 @@
 *.pptx
 *.prc
 *.prg
+*.prs
 *.ps
 *.ps1
 *.ps1xml
@@ -333,9 +517,16 @@
 *.psh-reflection
 *.psm1
 *.pst
+*.psz
 *.pt
+*.pup
+*.puz
 *.pvd
+*.pvmp
+*.pvmz
+*.pwa
 *.pwc
+*.pxl
 *.pxo
 *.py
 *.pyc
@@ -343,8 +534,20 @@
 *.pyo
 *.python
 *.pyz
+*.q
+*.qda
 *.qit
 *.qpx
+*.r0
+*.r00
+*.r01
+*.r02
+*.r03
+*.r04
+*.r1
+*.r2
+*.r21
+*.r30
 *.ram
 *.rar
 *.raw
@@ -355,22 +558,35 @@
 *.reg
 *.resources
 *.resx
+*.rev
 *.rfs
 *.rfu
 *.rgs
+*.rk
 *.rm
+*.rnc
 *.rox
+*.rp9
 *.rpg
 *.rpj
 *.rpm
+*.rss
 *.ruby
 *.run
 *.rxe
+*.rz
+*.s00
+*.s01
+*.s02
+*.s09
 *.s2a
+*.s7z
 *.sample
 *.sapk
+*.sar
 *.savedmodel
 *.sbs
+*.sbx
 *.sca
 *.scar
 *.scb
@@ -380,42 +596,86 @@
 *.scr
 *.script
 *.sct
+*.sdc
+*.sdn
+*.sdoc
+*.sdocx
+*.sea
 *.seed
+*.sen
 *.server
 *.service
+*.sfg
+*.sfm
+*.sfs
 *.sfv
+*.sfx
 *.sh
+*.shar
 *.shb
 *.shell
+*.shk
 *.shortcut
+*.shr
 *.shs
 *.shtml
+*.sifz
+*.sipa
 *.sit
 *.sitx
 *.sk
 *.sldm
 *.sln
 *.smm
+*.smpf
 *.snap
+*.snagitstamps
+*.snappy
+*.snb
 *.snd
+*.snz
+*.spa
+*.spd
+*.spl
+*.spm
 *.spr
+*.spt
 *.sql
+*.sqf
 *.sqx
+*.sqz
 *.srec
+*.srep
 *.srt
 *.ssm
+*.stg
+*.stkdoodlz
+*.stproj
 *.sts
 *.sub
 *.svg
 *.swf
+*.sy_
 *.sys
 *.tar
+*.tar.bz2
 *.tar.gz
+*.tar.gz2
+*.tar.lz
+*.tar.lzma
+*.tar.xz
+*.tar.z
+*.tar.zip
+*.taz
 *.tbl
 *.tbz
+*.tbz2
 *.tcp
+*.tcx
 *.text
 *.tf
+*.tg
+*.tgs
 *.tgz
 *.thm
 *.thmx
@@ -424,19 +684,35 @@
 *.tif
 *.tiff
 *.tipa
+*.tlz
+*.tlzma
 *.tmp
 *.tms
 *.toast
 *.torrent
 *.tpk
+*.tpsr
+*.trs
 *.txt
+*.tx_
+*.txz
+*.tz
+*.tzst
 *.u3p
+*.ubz
+*.uc2
 *.udf
+*.ufdr
+*.ufs.uzip
+*.uha
 *.upk
 *.upx
 *.url
+*.uue
 *.uvm
 *.uw8
+*.uzed
+*.uzip
 *.vb
 *.vba
 *.vba-exe
@@ -448,26 +724,46 @@
 *.vbscript 
 *.vcd
 *.vdo
+*.vem
 *.vexe
+*.vfs
 *.vhd
 *.vhdx
+*.vib
+*.vip
 *.vlx
 *.vm
+*.vmcz
 *.vmdk
+*.vms
 *.vob
 *.vocab
+*.voca
+*.vpk
 *.vpm
+*.vrpackage
+*.vsi
+*.vwi
 *.vxp
+*.wa
+*.wacz
+*.waff
 *.war
+*.wastickers
 *.wav
 *.wbk
 *.wcm
+*.wdz
 *.webm
+*.whl
+*.wick
 *.widget
 *.wim
 *.wiz
+*.wlb
 *.wma
 *.workflow
+*.wot
 *.wpk
 *.wpl
 *.wpm
@@ -476,14 +772,26 @@
 *.wsc
 *.wsf
 *.wsh
+*.wux
 *.x86
 *.x86_64
 *.xaml
 *.xap
+*.xapk
+*.xar
 *.xbap
 *.xbe
+*.xcf.bz2
+*.xcf.gz
+*.xcf.xz
+*.xcfbz2
+*.xcfgz
+*.xcfxz
 *.xex
+*.xez
+*.xfp
 *.xig
+*.xip
 *.xla
 *.xlam
 *.xll
@@ -496,24 +804,47 @@
 *.xltb
 *.xltm
 *.xlw
+*.xmcdz
 *.xml
+*.xoj
+*.xopp
 *.xqt
 *.xrt
+*.xx
 *.xys
 *.xz
+*.xzm
+*.y
+*.yc
 *.ygh
+*.yz1
 *.z
+*.z00
+*.z01
+*.z02
+*.z03
+*.z04
+*.zabw
+*.zap
+*.zed
+*.zfsendtotarget
+*.zhelp
+*.zi
+*.zi_
+*.zim
 *.zip
 *.zipx
+*.zix
+*.zl
 *.zl9
 *.zoo
-*sample.avchd
-*sample.avi
-*sample.mkv
-*sample.mov
-*sample.mp4
-*sample.webm
-*sample.wmv
+*.zpaq
+*.zpi
+*.zsplit
+*.zst
+*.zw
+*.zwi
+*.zz
 Trailer.*
 VOSTFR
 api

blacklist_permissive

@@ -1,51 +1,410 @@
+*.000
+*.001
+*.002
+*.004
+*.7z
+*.7z.001
+*.7z.002
+*.a00
+*.a01
+*.a02
+*.ace
+*.ain
+*.alz
+*.ana
+*.apex
 *.apk
+*.apz
+*.ar
+*.arc
+*.archiver
+*.arduboy
+*.arh
+*.ari
+*.arj
+*.ark
+*.asice
+*.ayt
+*.b1
+*.b6z
+*.b64
+*.ba
 *.bat
+*.bdoc
+*.bh
 *.bin
 *.bmp
+*.bndl
+*.boo
+*.bundle
+*.bz
+*.bz2
+*.bza
+*.bzabw
+*.bzip
+*.bzip2
+*.c00
+*.c01
+*.c02
+*.c10
+*.car
+*.cb7
+*.cba
+*.cbr
+*.cbt
+*.cbz
+*.cdz
+*.cit
 *.cmd
 *.com
+*.comppkg.hauptwerk.rar
+*.comppkg_hauptwerk_rar
+*.conda
+*.cp9
+*.cpgz
+*.cpt
+*.ctx
+*.ctz
+*.cxarchive
+*.czip
+*.daf
+*.dar
 *.db
+*.dd
+*.deb
+*.dgc
+*.dist
 *.diz
+*.dl_
 *.dll
 *.dmg
+*.dz
+*.ecar
+*.ecs
+*.ecsbx
+*.edz
+*.efw
+*.egg
+*.epi
 *.etc
 *.exe
+*.f
+*.f3z
+*.fcx
+*.fp8
+*.fzpz
+*.gar
+*.gca
 *.gif
+*.gmz
+*.gz
+*.gz2
+*.gza
+*.gzi
+*.gzip
+*.ha
+*.hbc
+*.hbc2
+*.hbe
+*.hki
+*.hki1
+*.hki2
+*.hki3
+*.hpk
+*.hpkg
 *.htm
 *.html
+*.htmi
+*.hyp
+*.iadproj
+*.ice
 *.ico
 *.ini
+*.ipg
+*.ipk
+*.ish
 *.iso
+*.isx
+*.ita
+*.ize
+*.j
 *.jar
+*.jar.pack
+*.jex
+*.jgz
+*.jhh
+*.jic
 *.jpg
 *.js
+*.jsonlz4
+*.kextraction
+*.kgb
+*.ksp
+*.kwgt
+*.kz
+*.layout
+*.lbr
+*.lemon
+*.lha
+*.lhzd
+*.libzip
 *.link
 *.lnk
+*.lpkg
+*.lqr
+*.lz
+*.lz4
+*.lzh
+*.lzm
+*.lzma
+*.lzo
+*.lzr
+*.lzx
+*.mar
+*.mbz
+*.md
+*.memo
+*.mint
+*.mlproj
+*.mou
+*.movpkg
+*.mozlz4
+*.mpkg
 *.msi
+*.mxc
+*.mzp
+*.nar
+*.nex
 *.nfo
+*.npk
+*.nz
+*.oar
+*.odlgz
+*.opk
+*.osf
+*.oz
+*.p01
+*.p19
+*.p7z
+*.pa
+*.pack.gz
+*.package
+*.pae
+*.pak
+*.paq6
+*.paq7
+*.paq8
+*.paq8f
+*.paq8l
+*.paq8p
+*.par
+*.par2
+*.pax
+*.pbi
+*.pcv
+*.pea
 *.perl
+*.pet
+*.pf
 *.php
+*.pim
+*.pima
+*.pit
+*.piz
+*.pkg
+*.pkg.tar.xz
+*.pkg.tar.zst
+*.pkz
 *.pl
 *.png
+*.prs
 *.ps1
 *.psc1
 *.psd1
 *.psm1
+*.psz
+*.pup
+*.puz
+*.pvmp
+*.pvmz
+*.pwa
+*.pxl
 *.py
 *.pyd
+*.q
+*.qda
+*.r0
+*.r00
+*.r01
+*.r02
+*.r03
+*.r04
+*.r1
+*.r2
+*.r21
+*.r30
+*.rar
 *.rb
 *.readme
 *.reg
+*.rev
+*.rk
+*.rnc
+*.rp9
+*.rpm
+*.rss
 *.run
+*.rz
+*.s00
+*.s01
+*.s02
+*.s09
+*.s7z
+*.sar
+*.sbx
 *.scr
+*.sdc
+*.sdn
+*.sdoc
+*.sdocx
+*.sea
+*.sen
+*.sfg
+*.sfm
+*.sfs
+*.sfx
 *.sh
+*.shar
+*.shk
+*.shr
+*.sifz
+*.sipa
+*.sit
+*.sitx
+*.smpf
+*.snagitstamps
+*.snappy
+*.snb
+*.snz
+*.spa
+*.spd
+*.spl
+*.spm
+*.spt
 *.sql
+*.sqf
+*.sqx
+*.sqz
+*.srep
+*.stg
+*.stkdoodlz
+*.stproj
+*.sy_
+*.tar.bz2
+*.tar.gz
+*.tar.gz2
+*.tar.lz
+*.tar.lzma
+*.tar.xz
+*.tar.z
+*.tar.zip
+*.taz
+*.tbz
+*.tbz2
+*.tcx
 *.text
+*.tg
+*.tgs
+*.tgz
 *.thumb
+*.tlz
+*.tlzma
 *.torrent
+*.tpsr
+*.trs
 *.txt
+*.tx_
+*.txz
+*.tz
+*.tzst
+*.ubz
+*.uc2
+*.ufdr
+*.ufs.uzip
+*.uha
 *.url
+*.uue
+*.uvm
+*.uzed
+*.uzip
 *.vbs
+*.vem
+*.vfs
+*.vib
+*.vip
+*.vmcz
+*.vms
+*.voca
+*.vpk
+*.vrpackage
+*.vsi
+*.vwi
+*.wa
+*.wacz
+*.waff
+*.war
+*.wastickers
+*.wdz
+*.whl
+*.wick
+*.wlb
+*.wot
 *.wsf
+*.wux
+*.xapk
+*.xar
+*.xcf.bz2
+*.xcf.gz
+*.xcf.xz
+*.xcfbz2
+*.xcfgz
+*.xcfxz
+*.xez
+*.xfp
+*.xip
 *.xml
-*.zipx
+*.xmcdz
+*.xoj
+*.xopp
+*.xx
+*.xz
+*.xzm
+*.y
+*.yc
+*.yz1
+*.z
+*.z00
+*.z01
+*.z02
+*.z03
+*.z04
+*.zabw
+*.zap
+*.zed
+*.zfsendtotarget
+*.zhelp
+*.zi
+*.zi_
+*.zim
+*.zip
+*.zipx
+*.zix
+*.zl
+*.zoo
+*.zpaq
+*.zpi
+*.zsplit
+*.zst
+*.zw
+*.zwi
+*.zz

chart/values.yaml

@@ -1,115 +0,0 @@
-deployment:
-  replicas: 1
-  strategy:
-    type: RollingUpdate
-    maxSurge: 1
-    maxUnavailable: 0
-  containers:
-    - name: qbit
-      image:
-        repository: ghcr.io/flmorg/cleanuperr
-        tag: latest
-      env:
-        - name: LOGGING__LOGLEVEL
-          value: Information
-        - name: LOGGING__FILE__ENABLED
-          value: "true"
-        - name: LOGGING__FILE__PATH
-          value: /var/logs
-        - name: LOGGING__ENHANCED
-          value: "true"
-        - name: TRIGGERS__QUEUECLEANER
-          value: 0 0/5 * * * ?
-        - name: TRIGGERS__CONTENTBLOCKER
-          value: 0 0/5 * * * ?
-        - name: QUEUECLEANER__ENABLED
-          value: "true"
-        - name: QUEUECLEANER__RUNSEQUENTIALLY
-          value: "true"
-        - name: QUEUECLEANER__IMPORT_FAILED_MAX_STRIKES
-          value: "3"
-        - name: QUEUECLEANER__STALLED_MAX_STRIKES
-          value: "3"
-        - name: CONTENTBLOCKER__ENABLED
-          value: "true"
-        - name: CONTENTBLOCKER__BLACKLIST__ENABLED
-          value: "true"
-        - name: CONTENTBLOCKER__BLACKLIST__PATH
-          value: https://raw.githubusercontent.com/flmorg/cleanuperr/refs/heads/main/blacklist
-        - name: DOWNLOAD_CLIENT
-          value: qbittorrent
-        - name: QBITTORRENT__URL
-          value: http://service.qbittorrent-videos.svc.cluster.local
-        - name: SONARR__ENABLED
-          value: "true"
-        - name: SONARR__SEARCHTYPE
-          value: Episode
-        - name: SONARR__INSTANCES__0__URL
-          value: http://service.sonarr-low-res.svc.cluster.local
-        - name: SONARR__INSTANCES__1__URL
-          value: http://service.sonarr-high-res.svc.cluster.local
-        - name: RADARR__ENABLED
-          value: "true"
-        - name: RADARR__INSTANCES__0__URL
-          value: http://service.radarr-low-res.svc.cluster.local
-        - name: RADARR__INSTANCES__1__URL
-          value: http://service.radarr-high-res.svc.cluster.local
-      envFromSecret:
-        - secretName: qbit-auth
-          envs:
-            - name: QBITTORRENT__USERNAME
-              key: QBIT_USER
-            - name: QBITTORRENT__PASSWORD
-              key: QBIT_PASS
-        - secretName: sonarr-auth
-          envs:
-            - name: SONARR__INSTANCES__0__APIKEY
-              key: SNRL_API_KEY
-            - name: SONARR__INSTANCES__1__APIKEY
-              key: SNRH_API_KEY
-        - secretName: radarr-auth
-          envs:
-            - name: RADARR__INSTANCES__0__APIKEY
-              key: RDRL_API_KEY
-            - name: RADARR__INSTANCES__1__APIKEY
-              key: RDRH_API_KEY
-      resources:
-        requests:
-          cpu: 0m
-          memory: 0Mi
-        limits:
-          cpu: 1000m
-          memory: 1000Mi
-      volumeMounts:
-        - name: storage
-          mountPath: /var/logs
-          subPath: cleanuperr/logs
-  volumes:
-    - name: storage
-      type: pvc
-      typeName: storage-pvc
-
-pvcs:
-  - name: storage-pvc
-    storageClassName: local-path-persistent
-    accessModes:
-      - ReadWriteOnce
-    size: 1Gi
-    volumeMode: Filesystem
-
-vaultSecrets:
-  - name: qbit-auth
-    path: secrets/qbittorrent
-    templates:
-      QBIT_USER: "{% .Secrets.username %}"
-      QBIT_PASS: "{% .Secrets.password %}"
-  - name: radarr-auth
-    path: secrets/radarr
-    templates:
-      RDRL_API_KEY: "{% .Secrets.low_api_key %}"
-      RDRH_API_KEY: "{% .Secrets.high_api_key %}"
-  - name: sonarr-auth
-    path: secrets/sonarr
-    templates:
-      SNRL_API_KEY: "{% .Secrets.low_api_key %}"
-      SNRH_API_KEY: "{% .Secrets.high_api_key %}"

code/.dockerignore

@@ -0,0 +1,87 @@
+# Documentation
+*.md
+docs/
+
+# Version control
+.git/
+.gitignore
+
+# IDE files
+.vscode/
+.idea/
+*.swp
+*.swo
+
+# OS files
+.DS_Store
+Thumbs.db
+
+# Node.js
+frontend/node_modules/
+frontend/dist/
+frontend/.angular/
+
+# .NET
+backend/bin/
+backend/obj/
+backend/*/bin/
+backend/*/obj/
+backend/.vs/
+
+# Build artifacts
+artifacts/
+dist/
+
+# Test files
+backend/**/*Tests/
+backend/**/Tests/
+
+# Development files
+docker-compose*.yml
+test/ 
+
+# ================================
+# Node and build output
+# ================================
+node_modules
+dist
+out-tsc
+.angular
+.cache
+.tmp
+
+# ================================
+# Testing & Coverage
+# ================================
+coverage
+jest
+cypress
+cypress/screenshots
+cypress/videos
+reports
+playwright-report
+.vite
+.vitepress
+
+# ================================
+# Environment & log files
+# ================================
+*.env*
+!*.env.production
+*.log
+*.tsbuildinfo
+
+# ================================
+# Docker & local orchestration
+# ================================
+Dockerfile
+Dockerfile.*
+.dockerignore
+docker-compose.yml
+docker-compose*.yml
+
+# ================================
+# Miscellaneous
+# ================================
+*.bak
+*.old

code/Common/Common.csproj

@@ -1,14 +0,0 @@
-<Project Sdk="Microsoft.NET.Sdk">
-
-    <PropertyGroup>
-        <TargetFramework>net9.0</TargetFramework>
-        <ImplicitUsings>enable</ImplicitUsings>
-        <Nullable>enable</Nullable>
-    </PropertyGroup>
-
-    <ItemGroup>
-      <PackageReference Include="Microsoft.Extensions.Configuration.Abstractions" Version="9.0.0" />
-      <PackageReference Include="Serilog" Version="4.2.0" />
-    </ItemGroup>
-
-</Project>

code/Common/Configuration/Arr/ArrConfig.cs

@@ -1,8 +0,0 @@
-namespace Common.Configuration.Arr;
-
-public abstract record ArrConfig
-{
-    public required bool Enabled { get; init; }
-    
-    public required List<ArrInstance> Instances { get; init; }
-}

code/Common/Configuration/Arr/ArrInstance.cs

@@ -1,8 +0,0 @@
-namespace Common.Configuration.Arr;
-
-public sealed class ArrInstance
-{
-    public required Uri Url { get; set; }
-    
-    public required string ApiKey { get; set; }
-}

code/Common/Configuration/Arr/RadarrConfig.cs

@@ -1,6 +0,0 @@
-namespace Common.Configuration.Arr;
-
-public sealed record RadarrConfig : ArrConfig
-{
-    public const string SectionName = "Radarr";
-}

code/Common/Configuration/Arr/SonarrConfig.cs

@@ -1,8 +0,0 @@
-namespace Common.Configuration.Arr;
-
-public sealed record SonarrConfig : ArrConfig
-{
-    public const string SectionName = "Sonarr";
-    
-    public SonarrSearchType SearchType { get; init; }
-}

code/Common/Configuration/Arr/SonarrSearchType.cs

@@ -1,8 +0,0 @@
-namespace Common.Configuration.Arr;
-
-public enum SonarrSearchType
-{
-    Episode,
-    Season,
-    Series
-}

code/Common/Configuration/ContentBlocker/ContentBlockerConfig.cs

@@ -1,45 +0,0 @@
-using Microsoft.Extensions.Configuration;
-
-namespace Common.Configuration.ContentBlocker;
-
-public sealed record ContentBlockerConfig : IJobConfig
-{
-    public const string SectionName = "ContentBlocker";
-    
-    public required bool Enabled { get; init; }
-    
-    [ConfigurationKeyName("IGNORE_PRIVATE")]
-    public bool IgnorePrivate { get; init; }
-    
-    public PatternConfig? Blacklist { get; init; }
-    
-    public PatternConfig? Whitelist { get; init; }
-
-    public void Validate()
-    {
-        if (!Enabled)
-        {
-            return;
-        }
-
-        if (Blacklist is null && Whitelist is null)
-        {
-            throw new Exception("content blocker is enabled, but both blacklist and whitelist are missing");
-        }
-
-        if (Blacklist?.Enabled is true && Whitelist?.Enabled is true)
-        {
-            throw new Exception("only one exclusion (blacklist/whitelist) list is allowed");
-        }
-
-        if (Blacklist?.Enabled is true && string.IsNullOrEmpty(Blacklist.Path))
-        {
-            throw new Exception("blacklist path is required");
-        }
-        
-        if (Whitelist?.Enabled is true && string.IsNullOrEmpty(Whitelist.Path))
-        {
-            throw new Exception("blacklist path is required");
-        }
-    }
-}

code/Common/Configuration/ContentBlocker/PatternConfig.cs

@@ -1,8 +0,0 @@
-namespace Common.Configuration.ContentBlocker;
-
-public sealed record PatternConfig
-{
-    public bool Enabled { get; init; }
-    
-    public string? Path { get; init; }
-}

code/Common/Configuration/DownloadClient/DelugeConfig.cs

@@ -1,18 +0,0 @@
-namespace Common.Configuration.DownloadClient;
-
-public sealed record DelugeConfig : IConfig
-{
-    public const string SectionName = "Deluge";
-    
-    public Uri? Url { get; init; }
-    
-    public string? Password { get; init; }
-    
-    public void Validate()
-    {
-        if (Url is null)
-        {
-            throw new ArgumentNullException(nameof(Url));
-        }
-    }
-}

code/Common/Configuration/DownloadClient/DownloadClientConfig.cs

@@ -1,9 +0,0 @@
-using Microsoft.Extensions.Configuration;
-
-namespace Common.Configuration.DownloadClient;
-
-public sealed record DownloadClientConfig
-{
-    [ConfigurationKeyName("DOWNLOAD_CLIENT")]
-    public Enums.DownloadClient DownloadClient { get; init; } = Enums.DownloadClient.QBittorrent;
-}

code/Common/Configuration/DownloadClient/QBitConfig.cs

@@ -1,20 +0,0 @@
-namespace Common.Configuration.DownloadClient;
-
-public sealed class QBitConfig : IConfig
-{
-    public const string SectionName = "qBittorrent";
-    
-    public Uri? Url { get; init; }
-    
-    public string? Username { get; init; }
-    
-    public string? Password { get; init; }
-    
-    public void Validate()
-    {
-        if (Url is null)
-        {
-            throw new ArgumentNullException(nameof(Url));
-        }
-    }
-}

code/Common/Configuration/DownloadClient/TransmissionConfig.cs

@@ -1,20 +0,0 @@
-namespace Common.Configuration.DownloadClient;
-
-public record TransmissionConfig : IConfig
-{
-    public const string SectionName = "Transmission";
-    
-    public Uri? Url { get; init; }
-    
-    public string? Username { get; init; }
-    
-    public string? Password { get; init; }
-    
-    public void Validate()
-    {
-        if (Url is null)
-        {
-            throw new ArgumentNullException(nameof(Url));
-        }
-    }
-}

code/Common/Configuration/IJobConfig.cs

@@ -1,6 +0,0 @@
-namespace Common.Configuration;
-
-public interface IJobConfig : IConfig
-{
-    bool Enabled { get; init; }
-}

code/Common/Configuration/Logging/FileLogConfig.cs

@@ -1,12 +0,0 @@
-namespace Common.Configuration.Logging;
-
-public class FileLogConfig : IConfig
-{
-    public bool Enabled { get; set; }
-    
-    public string Path { get; set; } = string.Empty;
-    
-    public void Validate()
-    {
-    }
-}

code/Common/Configuration/Logging/LoggingConfig.cs

@@ -1,18 +0,0 @@
-using Serilog.Events;
-
-namespace Common.Configuration.Logging;
-
-public class LoggingConfig : IConfig
-{
-    public const string SectionName = "Logging";
-    
-    public LogEventLevel LogLevel { get; set; }
-    
-    public bool Enhanced { get; set; }
-    
-    public FileLogConfig? File { get; set; }
-    
-    public void Validate()
-    {
-    }
-}

code/Common/Configuration/QueueCleaner/QueueCleanerConfig.cs

@@ -1,31 +0,0 @@
-using Microsoft.Extensions.Configuration;
-
-namespace Common.Configuration.QueueCleaner;
-
-public sealed record QueueCleanerConfig : IJobConfig
-{
-    public const string SectionName = "QueueCleaner";
-    
-    public required bool Enabled { get; init; }
-    
-    public required bool RunSequentially { get; init; }
-    
-    [ConfigurationKeyName("IMPORT_FAILED_MAX_STRIKES")]
-    public ushort ImportFailedMaxStrikes { get; init; }
-    
-    [ConfigurationKeyName("IMPORT_FAILED_IGNORE_PRIVATE")]
-    public bool ImportFailedIgnorePrivate { get; init; }
-    
-    [ConfigurationKeyName("IMPORT_FAILED_IGNORE_PATTERNS")]
-    public List<string>? ImportFailedIgnorePatterns { get; init; }
-    
-    [ConfigurationKeyName("STALLED_MAX_STRIKES")]
-    public ushort StalledMaxStrikes { get; init; }
-    
-    [ConfigurationKeyName("STALLED_IGNORE_PRIVATE")]
-    public bool StalledIgnorePrivate { get; init; }
-
-    public void Validate()
-    {
-    }
-}

code/Common/Configuration/TriggersConfig.cs

@@ -1,10 +0,0 @@
-namespace Common.Configuration;
-
-public sealed class TriggersConfig
-{
-    public const string SectionName = "Triggers";
-    
-    public required string QueueCleaner { get; init; }
-    
-    public required string ContentBlocker { get; init; }
-}

code/Common/Enums/DownloadClient.cs

@@ -1,9 +0,0 @@
-namespace Common.Enums;
-
-public enum DownloadClient
-{
-    QBittorrent,
-    Deluge,
-    Transmission,
-    None
-}

code/Common/Helpers/Constants.cs

@@ -1,7 +0,0 @@
-namespace Common.Helpers;
-
-public static class Constants
-{
-    public static readonly TimeSpan TriggerMaxLimit  = TimeSpan.FromHours(6);
-    public static readonly TimeSpan CacheLimitBuffer = TimeSpan.FromHours(2);
-}

code/Dockerfile

@@ -0,0 +1,87 @@
+# Build Angular frontend
+FROM --platform=$BUILDPLATFORM node:26-alpine AS frontend-build
+WORKDIR /app
+
+# Copy package files first for better layer caching
+COPY frontend/package*.json ./
+# Use cache mount for npm to speed up builds
+RUN --mount=type=cache,target=/root/.npm \
+    npm ci && npm install -g @angular/cli
+
+# Copy source code
+COPY frontend/ .
+
+# Build with appropriate base-href and deploy-url
+RUN npm run build
+
+# Build .NET backend
+FROM --platform=$BUILDPLATFORM mcr.microsoft.com/dotnet/sdk:10.0 AS build
+ARG TARGETARCH
+ARG VERSION=0.0.1
+ARG PACKAGES_USERNAME
+ARG PACKAGES_PAT
+WORKDIR /app
+EXPOSE 11011
+
+# Copy source code
+COPY backend/ ./backend/
+
+# Add NuGet source
+RUN dotnet nuget add source --username ${PACKAGES_USERNAME} --password ${PACKAGES_PAT} --store-password-in-clear-text --name Cleanuparr https://nuget.pkg.github.com/Cleanuparr/index.json
+
+# Restore and publish with cache mount
+RUN --mount=type=cache,target=/root/.nuget/packages,sharing=locked \
+    dotnet restore ./backend/Cleanuparr.Api/Cleanuparr.Api.csproj -a $TARGETARCH && \
+    dotnet publish ./backend/Cleanuparr.Api/Cleanuparr.Api.csproj \
+    -a $TARGETARCH \
+    -c Release \
+    -o /app/publish \
+    --no-restore \
+    /p:Version=${VERSION} \
+    /p:PublishSingleFile=true \
+    /p:DebugSymbols=false
+
+# Runtime stage
+FROM mcr.microsoft.com/dotnet/aspnet:10.0
+
+# Install required packages for user management, timezone support, and Python for Apprise CLI
+RUN apt-get update && apt-get install -y --no-install-recommends \
+    curl \
+    tzdata \
+    gosu \
+    python3 \
+    python3-venv \
+    && rm -rf /var/lib/apt/lists/*
+
+# Create virtual environment and install Apprise CLI
+ENV VIRTUAL_ENV=/opt/apprise-venv
+RUN python3 -m venv $VIRTUAL_ENV
+ENV PATH="$VIRTUAL_ENV/bin:$PATH"
+RUN pip install --no-cache-dir apprise==1.9.6
+
+ENV PUID=1000 \
+    PGID=1000 \
+    UMASK=022 \
+    TZ=Etc/UTC \
+    HTTP_PORTS=11011
+
+# Fix FileSystemWatcher in Docker: https://github.com/dotnet/dotnet-docker/issues/3546
+ENV DOTNET_USE_POLLING_FILE_WATCHER=true
+
+# GC tuning: prefer lower memory footprint over throughput
+ENV DOTNET_GCDynamicAdaptationMode=1 \
+    DOTNET_GCConserveMemory=5 \
+    DOTNET_GCRetainVM=0
+
+WORKDIR /app
+
+# Copy backend
+COPY --from=build /app/publish .
+# Copy frontend to wwwroot
+COPY --from=frontend-build /app/dist/ui/browser ./wwwroot
+# Copy entrypoint script
+COPY entrypoint.sh /entrypoint.sh
+RUN chmod +x /entrypoint.sh
+
+ENTRYPOINT ["/entrypoint.sh"]
+CMD ["./Cleanuparr"]

code/Domain/Domain.csproj

@@ -1,17 +0,0 @@
-<Project Sdk="Microsoft.NET.Sdk">
-
-    <PropertyGroup>
-        <TargetFramework>net9.0</TargetFramework>
-        <ImplicitUsings>enable</ImplicitUsings>
-        <Nullable>enable</Nullable>
-    </PropertyGroup>
-
-    <ItemGroup>
-      <PackageReference Include="Newtonsoft.Json" Version="13.0.3" />
-    </ItemGroup>
-
-    <ItemGroup>
-      <ProjectReference Include="..\Common\Common.csproj" />
-    </ItemGroup>
-
-</Project>

code/Domain/Enums/InstanceType.cs

@@ -1,9 +0,0 @@
-namespace Domain.Enums;
-
-public enum InstanceType
-{
-    Sonarr,
-    Radarr,
-    Lidarr,
-    Readarr
-}

code/Domain/Enums/StrikeType.cs

@@ -1,7 +0,0 @@
-namespace Domain.Enums;
-
-public enum StrikeType
-{
-    Stalled,
-    ImportFailed
-}

code/Domain/Models/Arr/Queue/QueueListResponse.cs

@@ -1,7 +0,0 @@
-namespace Domain.Models.Arr.Queue;
-
-public record QueueListResponse
-{
-    public required int TotalRecords { get; init; }
-    public required IReadOnlyList<QueueRecord> Records { get; init; }
-}

code/Domain/Models/Arr/Queue/QueueRecord.cs

@@ -1,17 +0,0 @@
-namespace Domain.Models.Arr.Queue;
-
-public sealed record QueueRecord
-{
-    public int SeriesId { get; init; }
-    public int EpisodeId { get; init; }
-    public int SeasonNumber { get; init; }
-    public int MovieId { get; init; }
-    public required string Title { get; init; }
-    public string Status { get; init; }
-    public string TrackedDownloadStatus { get; init; }
-    public string TrackedDownloadState { get; init; }
-    public List<TrackedDownloadStatusMessage>? StatusMessages { get; init; }
-    public required string DownloadId { get; init; }
-    public required string Protocol { get; init; }
-    public required int Id { get; init; }
-}

code/Domain/Models/Deluge/Exceptions/DelugeClientException.cs

@@ -1,8 +0,0 @@
-namespace Domain.Models.Deluge.Exceptions;
-
-public class DelugeClientException : Exception
-{
-    public DelugeClientException(string message) : base(message)
-    {
-    }
-}

code/Domain/Models/Deluge/Request/DelugeRequest.cs

@@ -1,32 +0,0 @@
-using Newtonsoft.Json;
-
-namespace Domain.Models.Deluge.Request;
-
-public class DelugeRequest
-{
-    [JsonProperty(PropertyName = "id")]
-    public int RequestId { get; set; }
-
-    [JsonProperty(PropertyName = "method")]
-    public String Method { get; set; }
-
-    [JsonProperty(PropertyName = "params")]
-    public List<Object> Params { get; set; }
-
-    [JsonIgnore]
-    public NullValueHandling NullValueHandling { get; set; }
-
-    public DelugeRequest(int requestId, String method, params object[] parameters)
-    {
-        RequestId = requestId;
-        Method = method;
-        Params = new List<Object>();
-
-        if (parameters != null)
-        {
-            Params.AddRange(parameters);
-        }
-
-        NullValueHandling = NullValueHandling.Include;
-    }
-}

code/Domain/Models/Deluge/Response/DelugeContents.cs

@@ -1,12 +0,0 @@
-using System.Text.Json.Serialization;
-
-namespace Domain.Models.Deluge.Response;
-
-public sealed record DelugeContents
-{
-    [JsonPropertyName("contents")]
-    public Dictionary<string, DelugeFileOrDirectory>? Contents { get; set; }
-
-    [JsonPropertyName("type")]
-    public string Type { get; set; } // Always "dir" for the root
-}

code/Domain/Models/Deluge/Response/DelugeError.cs

@@ -1,12 +0,0 @@
-using Newtonsoft.Json;
-
-namespace Domain.Models.Deluge.Response;
-
-public sealed record DelugeError
-{
-    [JsonProperty(PropertyName = "message")]
-    public String Message { get; set; }
-
-    [JsonProperty(PropertyName = "code")]
-    public int Code { get; set; }
-}

code/Domain/Models/Deluge/Response/DelugeFileOrDirectory.cs

@@ -1,33 +0,0 @@
-using System.Text.Json.Serialization;
-
-namespace Domain.Models.Deluge.Response;
-
-public class DelugeFileOrDirectory
-{
-    [JsonPropertyName("type")]
-    public string Type { get; set; } // "file" or "dir"
-
-    [JsonPropertyName("contents")]
-    public Dictionary<string, DelugeFileOrDirectory>? Contents { get; set; } // Recursive property for directories
-
-    [JsonPropertyName("index")]
-    public required int Index { get; set; }
-
-    [JsonPropertyName("path")]
-    public string Path { get; set; }
-
-    [JsonPropertyName("size")]
-    public int? Size { get; set; }
-
-    [JsonPropertyName("offset")]
-    public int? Offset { get; set; }
-
-    [JsonPropertyName("progress")]
-    public double? Progress { get; set; }
-
-    [JsonPropertyName("priority")]
-    public required int Priority { get; set; }
-
-    [JsonPropertyName("progresses")]
-    public List<double> Progresses { get; set; }
-}

code/Domain/Models/Deluge/Response/DelugeResponse.cs

@@ -1,15 +0,0 @@
-using Newtonsoft.Json;
-
-namespace Domain.Models.Deluge.Response;
-
-public sealed record DelugeResponse<T>
-{
-    [JsonProperty(PropertyName = "id")]
-    public int ResponseId { get; set; }
-
-    [JsonProperty(PropertyName = "result")]
-    public T? Result { get; set; }
-
-    [JsonProperty(PropertyName = "error")]
-    public DelugeError? Error { get; set; }
-}

code/Domain/Models/Deluge/Response/DelugeTorrent.cs

@@ -1,30 +0,0 @@
-using Newtonsoft.Json;
-
-namespace Domain.Models.Deluge.Response;
-
-public record DelugeTorrent
-{
-    [JsonProperty(PropertyName = "comment")]
-    public string Comment { get; set; }
-
-    [JsonProperty(PropertyName = "is_seed")]
-    public bool IsSeed { get; set; }
-
-    [JsonProperty(PropertyName = "hash")]
-    public string Hash { get; set; }
-
-    [JsonProperty(PropertyName = "paused")]
-    public bool Paused { get; set; }
-
-    [JsonProperty(PropertyName = "ratio")]
-    public double Ratio { get; set; }
-
-    [JsonProperty(PropertyName = "message")]
-    public string Message { get; set; }
-
-    [JsonProperty(PropertyName = "name")]
-    public string Name { get; set; }
-
-    [JsonProperty(PropertyName = "label")]
-    public string Label { get; set; }
-}

code/Domain/Models/Deluge/Response/DelugeTorrentExtended.cs

@@ -1,110 +0,0 @@
-using Newtonsoft.Json;
-
-namespace Domain.Models.Deluge.Response;
-
-public sealed record DelugeTorrentExtended : DelugeTorrent
-{
-    [JsonProperty(PropertyName = "total_done")]
-    public long TotalDone { get; set; }
-
-    [JsonProperty(PropertyName = "total_payload_download")]
-    public long TotalPayloadDownload { get; set; }
-
-    [JsonProperty(PropertyName = "total_uploaded")]
-    public long TotalUploaded { get; set; }
-
-    [JsonProperty(PropertyName = "next_announce")]
-    public int NextAnnounce { get; set; }
-
-    [JsonProperty(PropertyName = "tracker_status")]
-    public string TrackerStatus { get; set; }
-
-    [JsonProperty(PropertyName = "num_pieces")]
-    public int NumPieces { get; set; }
-
-    [JsonProperty(PropertyName = "piece_length")]
-    public long PieceLength { get; set; }
-
-    [JsonProperty(PropertyName = "is_auto_managed")]
-    public bool IsAutoManaged { get; set; }
-
-    [JsonProperty(PropertyName = "active_time")]
-    public long ActiveTime { get; set; }
-
-    [JsonProperty(PropertyName = "seeding_time")]
-    public long SeedingTime { get; set; }
-
-    [JsonProperty(PropertyName = "time_since_transfer")]
-    public long TimeSinceTransfer { get; set; }
-
-    [JsonProperty(PropertyName = "seed_rank")]
-    public int SeedRank { get; set; }
-
-    [JsonProperty(PropertyName = "last_seen_complete")]
-    public long LastSeenComplete { get; set; }
-
-    [JsonProperty(PropertyName = "completed_time")]
-    public long CompletedTime { get; set; }
-
-    [JsonProperty(PropertyName = "owner")] public string Owner { get; set; }
-
-    [JsonProperty(PropertyName = "public")]
-    public bool Public { get; set; }
-
-    [JsonProperty(PropertyName = "shared")]
-    public bool Shared { get; set; }
-
-    [JsonProperty(PropertyName = "queue")] public int Queue { get; set; }
-
-    [JsonProperty(PropertyName = "total_wanted")]
-    public long TotalWanted { get; set; }
-
-    [JsonProperty(PropertyName = "state")] public string State { get; set; }
-
-    [JsonProperty(PropertyName = "progress")]
-    public float Progress { get; set; }
-
-    [JsonProperty(PropertyName = "num_seeds")]
-    public int NumSeeds { get; set; }
-
-    [JsonProperty(PropertyName = "total_seeds")]
-    public int TotalSeeds { get; set; }
-
-    [JsonProperty(PropertyName = "num_peers")]
-    public int NumPeers { get; set; }
-
-    [JsonProperty(PropertyName = "total_peers")]
-    public int TotalPeers { get; set; }
-
-    [JsonProperty(PropertyName = "download_payload_rate")]
-    public long DownloadPayloadRate { get; set; }
-
-    [JsonProperty(PropertyName = "upload_payload_rate")]
-    public long UploadPayloadRate { get; set; }
-
-    [JsonProperty(PropertyName = "eta")] public long Eta { get; set; }
-
-    [JsonProperty(PropertyName = "distributed_copies")]
-    public float DistributedCopies { get; set; }
-
-    [JsonProperty(PropertyName = "time_added")]
-    public int TimeAdded { get; set; }
-
-    [JsonProperty(PropertyName = "tracker_host")]
-    public string TrackerHost { get; set; }
-
-    [JsonProperty(PropertyName = "download_location")]
-    public string DownloadLocation { get; set; }
-
-    [JsonProperty(PropertyName = "total_remaining")]
-    public long TotalRemaining { get; set; }
-
-    [JsonProperty(PropertyName = "max_download_speed")]
-    public long MaxDownloadSpeed { get; set; }
-
-    [JsonProperty(PropertyName = "max_upload_speed")]
-    public long MaxUploadSpeed { get; set; }
-
-    [JsonProperty(PropertyName = "seeds_peers_ratio")]
-    public float SeedsPeersRatio { get; set; }
-}

code/Domain/Models/Deluge/Response/TorrentStatus.cs

@@ -1,14 +0,0 @@
-namespace Domain.Models.Deluge.Response;
-
-public sealed record TorrentStatus
-{
-    public string? Hash { get; init; }
-    
-    public string? State { get; init; }
-    
-    public string? Name { get; init; }
-    
-    public ulong Eta { get; init; }
-    
-    public bool Private { get; init; }
-}

code/Domain/Models/Radarr/Movie.cs

@@ -1,8 +0,0 @@
-namespace Domain.Models.Radarr;
-
-public sealed record Movie
-{
-    public required long Id { get; init; }
-    
-    public required string Title { get; init; }
-}

code/Domain/Models/Sonarr/Series.cs

@@ -1,8 +0,0 @@
-namespace Domain.Models.Sonarr;
-
-public sealed record Series
-{
-    public required long Id { get; init; }
-            
-    public required string Title { get; init; }
-}

code/Executable/DependencyInjection/ConfigurationDI.cs

@@ -1,24 +0,0 @@
-using Common.Configuration;
-using Common.Configuration.Arr;
-using Common.Configuration.ContentBlocker;
-using Common.Configuration.DownloadClient;
-using Common.Configuration.Logging;
-using Common.Configuration.QueueCleaner;
-using Domain.Enums;
-
-namespace Executable.DependencyInjection;
-
-public static class ConfigurationDI
-{
-    public static IServiceCollection AddConfiguration(this IServiceCollection services, IConfiguration configuration) =>
-        services
-            .Configure<QueueCleanerConfig>(configuration.GetSection(QueueCleanerConfig.SectionName))
-            .Configure<ContentBlockerConfig>(configuration.GetSection(ContentBlockerConfig.SectionName))
-            .Configure<DownloadClientConfig>(configuration)
-            .Configure<QBitConfig>(configuration.GetSection(QBitConfig.SectionName))
-            .Configure<DelugeConfig>(configuration.GetSection(DelugeConfig.SectionName))
-            .Configure<TransmissionConfig>(configuration.GetSection(TransmissionConfig.SectionName))
-            .Configure<SonarrConfig>(configuration.GetSection(SonarrConfig.SectionName))
-            .Configure<RadarrConfig>(configuration.GetSection(RadarrConfig.SectionName))
-            .Configure<LoggingConfig>(configuration.GetSection(LoggingConfig.SectionName));
-}

code/Executable/DependencyInjection/LoggingDI.cs

@@ -1,67 +0,0 @@
-using Common.Configuration.Logging;
-using Infrastructure.Verticals.ContentBlocker;
-using Infrastructure.Verticals.QueueCleaner;
-using Serilog;
-using Serilog.Events;
-using Serilog.Templates;
-using Serilog.Templates.Themes;
-
-namespace Executable.DependencyInjection;
-
-public static class LoggingDI
-{
-    public static ILoggingBuilder AddLogging(this ILoggingBuilder builder, IConfiguration configuration)
-    {
-        LoggingConfig? config = configuration.GetSection(LoggingConfig.SectionName).Get<LoggingConfig>();
-
-        if (!string.IsNullOrEmpty(config?.File?.Path) && !Directory.Exists(config.File.Path))
-        {
-            try
-            {
-                Directory.CreateDirectory(config.File.Path);
-            }
-            catch (Exception exception)
-            {
-                throw new Exception($"log file path is not a valid directory | {config.File.Path}", exception);
-            }
-        }
-        
-        LoggerConfiguration logConfig = new();
-        const string consoleOutputTemplate = "[{@t:yyyy-MM-dd HH:mm:ss.fff} {@l:u3}]{#if JobName is not null} {Concat('[',JobName,']'),PAD}{#end} {@m}\n{@x}";
-        const string fileOutputTemplate = "{@t:yyyy-MM-dd HH:mm:ss.fff zzz} [{@l:u3}]{#if JobName is not null} {Concat('[',JobName,']'),PAD}{#end} {@m:lj}\n{@x}";
-        LogEventLevel level = LogEventLevel.Information;
-        List<string> jobNames = [nameof(ContentBlocker), nameof(QueueCleaner)];
-        int padding = jobNames.Max(x => x.Length) + 2;
-
-        if (config is not null)
-        {
-            level = config.LogLevel;
-
-            if (config.File?.Enabled is true)
-            {
-                logConfig.WriteTo.File(
-                    path: Path.Combine(config.File.Path, "cleanuperr-.txt"),
-                    formatter: new ExpressionTemplate(fileOutputTemplate.Replace("PAD", padding.ToString())),
-                    fileSizeLimitBytes: 10L * 1024 * 1024,
-                    rollingInterval: RollingInterval.Day,
-                    rollOnFileSizeLimit: true
-                );
-            }
-        }
-
-        Log.Logger = logConfig
-            .MinimumLevel.Is(level)
-            .MinimumLevel.Override("Microsoft.Hosting.Lifetime", LogEventLevel.Information)
-            .MinimumLevel.Override("Microsoft.Extensions.Http", LogEventLevel.Warning)
-            .MinimumLevel.Override("Quartz", LogEventLevel.Warning)
-            .MinimumLevel.Override("System.Net.Http.HttpClient", LogEventLevel.Error)
-            .WriteTo.Console(new ExpressionTemplate(consoleOutputTemplate.Replace("PAD", padding.ToString())))
-            .Enrich.FromLogContext()
-            .Enrich.WithProperty("ApplicationName", "cleanuperr")
-            .CreateLogger();
-        
-        return builder
-            .ClearProviders()
-            .AddSerilog();
-    }
-}

code/Executable/DependencyInjection/MainDI.cs

@@ -1,51 +0,0 @@
-using System.Net;
-using Common.Configuration;
-using Common.Configuration.ContentBlocker;
-using Executable.Jobs;
-using Infrastructure.Verticals.Arr;
-using Infrastructure.Verticals.ContentBlocker;
-using Infrastructure.Verticals.DownloadClient;
-using Infrastructure.Verticals.DownloadClient.Deluge;
-using Infrastructure.Verticals.DownloadClient.QBittorrent;
-using Infrastructure.Verticals.DownloadClient.Transmission;
-using Infrastructure.Verticals.QueueCleaner;
-
-namespace Executable.DependencyInjection;
-
-public static class MainDI
-{
-    public static IServiceCollection AddInfrastructure(this IServiceCollection services, IConfiguration configuration) =>
-        services
-            .AddLogging(builder => builder.ClearProviders().AddConsole())
-            .AddHttpClients()
-            .AddConfiguration(configuration)
-            .AddMemoryCache()
-            .AddServices()
-            .AddQuartzServices(configuration);
-    
-    private static IServiceCollection AddHttpClients(this IServiceCollection services)
-    {
-        // add default HttpClient
-        services.AddHttpClient();
-
-        // add Deluge HttpClient
-        services
-            .AddHttpClient(nameof(DelugeService), x =>
-            {
-                x.Timeout = TimeSpan.FromSeconds(5);
-            })
-            .ConfigurePrimaryHttpMessageHandler(_ =>
-            {
-                return new HttpClientHandler
-                {
-                    AllowAutoRedirect = true,
-                    UseCookies = true,
-                    CookieContainer = new CookieContainer(),
-                    AutomaticDecompression = DecompressionMethods.GZip | DecompressionMethods.Deflate,
-                    ServerCertificateCustomValidationCallback = (_, _, _, _) => true
-                };
-            });
-
-        return services;
-    }
-}

code/Executable/DependencyInjection/QuartzDI.cs

@@ -1,135 +0,0 @@
-using Common.Configuration;
-using Common.Configuration.ContentBlocker;
-using Common.Configuration.QueueCleaner;
-using Common.Helpers;
-using Executable.Jobs;
-using Infrastructure.Verticals.ContentBlocker;
-using Infrastructure.Verticals.Jobs;
-using Infrastructure.Verticals.QueueCleaner;
-using Quartz;
-using Quartz.Spi;
-
-namespace Executable.DependencyInjection;
-
-public static class QuartzDI
-{
-    public static IServiceCollection AddQuartzServices(this IServiceCollection services, IConfiguration configuration) =>
-        services
-            .AddQuartz(q =>
-            {
-                TriggersConfig? config = configuration
-                    .GetRequiredSection(TriggersConfig.SectionName)
-                    .Get<TriggersConfig>();
-
-                if (config is null)
-                {
-                    throw new NullReferenceException("triggers configuration is null");
-                }
-
-                q.AddJobs(configuration, config);
-            })
-            .AddQuartzHostedService(opt =>
-            {
-                opt.WaitForJobsToComplete = true;
-            });
-
-    private static void AddJobs(
-        this IServiceCollectionQuartzConfigurator q,
-        IConfiguration configuration,
-        TriggersConfig triggersConfig
-    )
-    {
-        ContentBlockerConfig? contentBlockerConfig = configuration
-            .GetRequiredSection(ContentBlockerConfig.SectionName)
-            .Get<ContentBlockerConfig>();
-        
-        q.AddJob<ContentBlocker>(contentBlockerConfig, triggersConfig.ContentBlocker);
-        
-        QueueCleanerConfig? queueCleanerConfig = configuration
-            .GetRequiredSection(QueueCleanerConfig.SectionName)
-            .Get<QueueCleanerConfig>();
-
-        if (contentBlockerConfig?.Enabled is true && queueCleanerConfig is { Enabled: true, RunSequentially: true })
-        {
-            q.AddJob<QueueCleaner>(queueCleanerConfig, string.Empty);
-            q.AddJobListener(new JobChainingListener(nameof(QueueCleaner)));
-        }
-        else
-        {
-            q.AddJob<QueueCleaner>(queueCleanerConfig, triggersConfig.QueueCleaner);
-        }
-    }
-    
-    private static void AddJob<T>(
-        this IServiceCollectionQuartzConfigurator q,
-        IJobConfig? config,
-        string trigger
-    ) where T: GenericHandler
-    {
-        string typeName = typeof(T).Name;
-        
-        if (config is null)
-        {
-            throw new NullReferenceException($"{typeName} configuration is null");
-        }
-
-        if (!config.Enabled)
-        {
-            return;
-        }
-
-        bool hasTrigger = trigger.Length > 0;
-
-        q.AddJob<GenericJob<T>>(opts =>
-        {
-            opts.WithIdentity(typeName);
-
-            if (!hasTrigger)
-            {
-                // jobs with no triggers need to be stored durably
-                opts.StoreDurably();
-            }
-        });
-
-        // skip empty triggers
-        if (!hasTrigger)
-        {
-            return;
-        }
-        
-        IOperableTrigger triggerObj = (IOperableTrigger)TriggerBuilder.Create()
-            .WithIdentity("ExampleTrigger")
-            .StartNow()
-            .WithCronSchedule(trigger)
-            .Build();
-
-        IReadOnlyList<DateTimeOffset> nextFireTimes = TriggerUtils.ComputeFireTimes(triggerObj, null, 2);
-        TimeSpan triggerValue = nextFireTimes[1] - nextFireTimes[0];
-        
-        if (triggerValue > Constants.TriggerMaxLimit)
-        {
-            throw new Exception($"{trigger} should have a fire time of maximum 1 hour");
-        }
-
-        if (triggerValue > StaticConfiguration.TriggerValue)
-        {
-            StaticConfiguration.TriggerValue = triggerValue;
-        }
-        
-        q.AddTrigger(opts =>
-        {
-            opts.ForJob(typeName)
-                .WithIdentity($"{typeName}-trigger")
-                .WithCronSchedule(trigger, x =>x.WithMisfireHandlingInstructionDoNothing())
-                .StartNow();
-        });
-        
-        // Startup trigger
-        q.AddTrigger(opts =>
-        {
-            opts.ForJob(typeName)
-                .WithIdentity($"{typeName}-startup-trigger")
-                .StartNow();
-        });
-    }
-}

code/Executable/DependencyInjection/ServicesDI.cs

@@ -1,29 +0,0 @@
-using Infrastructure.Verticals.Arr;
-using Infrastructure.Verticals.ContentBlocker;
-using Infrastructure.Verticals.DownloadClient;
-using Infrastructure.Verticals.DownloadClient.Deluge;
-using Infrastructure.Verticals.DownloadClient.QBittorrent;
-using Infrastructure.Verticals.DownloadClient.Transmission;
-using Infrastructure.Verticals.ItemStriker;
-using Infrastructure.Verticals.QueueCleaner;
-
-namespace Executable.DependencyInjection;
-
-public static class ServicesDI
-{
-    public static IServiceCollection AddServices(this IServiceCollection services) =>
-        services
-            .AddTransient<SonarrClient>()
-            .AddTransient<RadarrClient>()
-            .AddTransient<QueueCleaner>()
-            .AddTransient<ContentBlocker>()
-            .AddTransient<FilenameEvaluator>()
-            .AddTransient<DummyDownloadService>()
-            .AddTransient<QBitService>()
-            .AddTransient<DelugeService>()
-            .AddTransient<TransmissionService>()
-            .AddTransient<ArrQueueIterator>()
-            .AddTransient<DownloadServiceFactory>()
-            .AddSingleton<BlocklistProvider>()
-            .AddSingleton<Striker>();
-}

code/Executable/Executable.csproj

@@ -1,30 +0,0 @@
-<Project Sdk="Microsoft.NET.Sdk.Worker">
-
-    <PropertyGroup>
-        <AssemblyName>cleanuperr</AssemblyName>
-        <TargetFramework>net9.0</TargetFramework>
-        <Version Condition="'$(Version)' == ''">0.0.1</Version>
-        <Nullable>enable</Nullable>
-        <ImplicitUsings>enable</ImplicitUsings>
-        <UserSecretsId>dotnet-Executable-6108b2ba-f035-47bc-addf-aaf5e20da4b8</UserSecretsId>
-    </PropertyGroup>
-
-    <ItemGroup>
-        <PackageReference Include="Microsoft.Extensions.Hosting" Version="9.0.0" />
-        <PackageReference Include="Microsoft.Extensions.Http" Version="9.0.0" />
-        <PackageReference Include="Quartz" Version="3.13.1" />
-        <PackageReference Include="Quartz.Extensions.DependencyInjection" Version="3.13.1" />
-        <PackageReference Include="Quartz.Extensions.Hosting" Version="3.13.1" />
-        <PackageReference Include="Serilog" Version="4.2.0" />
-        <PackageReference Include="Serilog.Expressions" Version="5.0.0" />
-        <PackageReference Include="Serilog.Extensions.Hosting" Version="9.0.0" />
-        <PackageReference Include="Serilog.Settings.Configuration" Version="9.0.0" />
-        <PackageReference Include="Serilog.Sinks.Console" Version="6.0.0" />
-        <PackageReference Include="Serilog.Sinks.File" Version="6.0.0" />
-    </ItemGroup>
-
-    <ItemGroup>
-      <ProjectReference Include="..\Common\Common.csproj" />
-      <ProjectReference Include="..\Infrastructure\Infrastructure.csproj" />
-    </ItemGroup>
-</Project>

code/Executable/Jobs/GenericJob.cs

@@ -1,33 +0,0 @@
-using Infrastructure.Verticals.Jobs;
-using Quartz;
-using Serilog.Context;
-
-namespace Executable.Jobs;
-
-[DisallowConcurrentExecution]
-public sealed class GenericJob<T> : IJob
-    where T : GenericHandler
-{
-    private readonly ILogger<GenericJob<T>> _logger;
-    private readonly T _handler;
-
-    public GenericJob(ILogger<GenericJob<T>> logger, T handler)
-    {
-        _logger = logger;
-        _handler = handler;
-    }
-    
-    public async Task Execute(IJobExecutionContext context)
-    {
-        using var _ = LogContext.PushProperty("JobName", typeof(T).Name);
-        
-        try
-        {
-            await _handler.ExecuteAsync();
-        }
-        catch (Exception ex)
-        {
-            _logger.LogError(ex, "{name} failed", typeof(T).Name);
-        }
-    }
-}

code/Executable/Program.cs

@@ -1,21 +0,0 @@
-using System.Reflection;
-using Executable.DependencyInjection;
-
-var builder = Host.CreateApplicationBuilder(args);
-
-builder.Services.AddInfrastructure(builder.Configuration);
-builder.Logging.AddLogging(builder.Configuration);
-
-var host = builder.Build();
-
-var logger = host.Services.GetRequiredService<ILogger<Program>>();
-
-var version = Assembly.GetExecutingAssembly().GetName().Version;
-
-logger.LogInformation(
-    version is null
-        ? "cleanuperr version not detected"
-        : $"cleanuperr v{version.Major}.{version.Minor}.{version.Build}"
-);
-
-host.Run();

code/Executable/appsettings.Development.json

@@ -1,71 +0,0 @@
-{
-  "Logging": {
-    "LogLevel": "Debug",
-    "Enhanced": true,
-    "File": {
-      "Enabled": false,
-      "Path": ""
-    }
-  },
-  "Triggers": {
-    "QueueCleaner": "0/10 * * * * ?",
-    "ContentBlocker": "0/10 * * * * ?"
-  },
-  "ContentBlocker": {
-    "Enabled": true,
-    "IGNORE_PRIVATE": true,
-    "Blacklist": {
-      "Enabled": false,
-      "Path": "https://raw.githubusercontent.com/flmorg/cleanuperr/refs/heads/main/blacklist"
-    },
-    "Whitelist": {
-      "Enabled": false,
-      "Path": "https://raw.githubusercontent.com/flmorg/cleanuperr/refs/heads/main/whitelist"
-    }
-  },
-  "QueueCleaner": {
-    "Enabled": true,
-    "RunSequentially": true,
-    "IMPORT_FAILED_MAX_STRIKES": 5,
-    "IMPORT_FAILED_IGNORE_PRIVATE": true,
-    "IMPORT_FAILED_IGNORE_PATTERNS": [
-      "file is a sample"
-    ],
-    "STALLED_MAX_STRIKES": 5,
-    "STALLED_IGNORE_PRIVATE": true
-  },
-  "DOWNLOAD_CLIENT": "qbittorrent",
-  "qBittorrent": {
-    "Url": "http://localhost:8080",
-    "Username": "test",
-    "Password": "testing"
-  },
-  "Deluge": {
-    "Url": "http://localhost:8112",
-    "Password": "testing"
-  },
-  "Transmission": {
-    "Url": "http://localhost:9091",
-    "Username": "test",
-    "Password": "testing"
-  },
-  "Sonarr": {
-    "Enabled": true,
-    "SearchType": "Episode",
-    "Instances": [
-      {
-        "Url": "http://localhost:8989",
-        "ApiKey": "96736c3eb3144936b8f1d62d27be8cee"
-      }
-    ]
-  },
-  "Radarr": {
-    "Enabled": true,
-    "Instances": [
-      {
-        "Url": "http://localhost:7878",
-        "ApiKey": "705b553732ab4167ab23909305d60600"
-      }
-    ]
-  }
-}

code/Executable/appsettings.json

@@ -1,69 +0,0 @@
-{
-  "Logging": {
-    "LogLevel": "Information",
-    "Enhanced": true,
-    "File": {
-      "Enabled": false,
-      "Path": ""
-    }
-  },
-  "Triggers": {
-    "QueueCleaner": "0 0/5 * * * ?",
-    "ContentBlocker": "0 0/5 * * * ?"
-  },
-  "ContentBlocker": {
-    "Enabled": false,
-    "IGNORE_PRIVATE": false,
-    "Blacklist": {
-      "Enabled": false,
-      "Path": ""
-    },
-    "Whitelist": {
-      "Enabled": false,
-      "Path": ""
-    }
-  },
-  "QueueCleaner": {
-    "Enabled": true,
-    "RunSequentially": true,
-    "IMPORT_FAILED_MAX_STRIKES": 5,
-    "IMPORT_FAILED_IGNORE_PRIVATE": false,
-    "IMPORT_FAILED_IGNORE_PATTERNS": [],
-    "STALLED_MAX_STRIKES": 5,
-    "STALLED_IGNORE_PRIVATE": false
-  },
-  "DOWNLOAD_CLIENT": "qbittorrent",
-  "qBittorrent": {
-    "Url": "http://localhost:8080",
-    "Username": "",
-    "Password": ""
-  },
-  "Deluge": {
-    "Url": "http://localhost:8112",
-    "Password": "testing"
-  },
-  "Transmission": {
-    "Url": "http://localhost:9091",
-    "Username": "test",
-    "Password": "testing"
-  },
-  "Sonarr": {
-    "Enabled": true,
-    "SearchType": "Episode",
-    "Instances": [
-      {
-        "Url": "http://localhost:8989",
-        "ApiKey": ""
-      }
-    ]
-  },
-  "Radarr": {
-    "Enabled": false,
-    "Instances": [
-      {
-        "Url": "http://localhost:7878",
-        "ApiKey": ""
-      }
-    ]
-  }
-}

code/Infrastructure/Infrastructure.csproj

@@ -1,22 +0,0 @@
-<Project Sdk="Microsoft.NET.Sdk">
-
-    <PropertyGroup>
-        <TargetFramework>net9.0</TargetFramework>
-        <ImplicitUsings>enable</ImplicitUsings>
-        <Nullable>enable</Nullable>
-    </PropertyGroup>
-
-    <ItemGroup>
-      <ProjectReference Include="..\Common\Common.csproj" />
-      <ProjectReference Include="..\Domain\Domain.csproj" />
-    </ItemGroup>
-
-    <ItemGroup>
-      <PackageReference Include="FLM.Transmission" Version="1.0.0" />
-      <PackageReference Include="Microsoft.Extensions.Caching.Memory" Version="9.0.0" />
-      <PackageReference Include="Microsoft.Extensions.Http" Version="9.0.0" />
-      <PackageReference Include="QBittorrent.Client" Version="1.9.24285.1" />
-      <PackageReference Include="Quartz" Version="3.13.1" />
-    </ItemGroup>
-
-</Project>

code/Infrastructure/Verticals/Arr/ArrClient.cs

@@ -1,178 +0,0 @@
-using Common.Configuration.Arr;
-using Common.Configuration.Logging;
-using Common.Configuration.QueueCleaner;
-using Domain.Enums;
-using Domain.Models.Arr;
-using Domain.Models.Arr.Queue;
-using Infrastructure.Verticals.ItemStriker;
-using Microsoft.Extensions.Logging;
-using Microsoft.Extensions.Options;
-using Newtonsoft.Json;
-
-namespace Infrastructure.Verticals.Arr;
-
-public abstract class ArrClient
-{
-    protected readonly ILogger<ArrClient> _logger;
-    protected readonly HttpClient _httpClient;
-    protected readonly LoggingConfig _loggingConfig;
-    protected readonly QueueCleanerConfig _queueCleanerConfig;
-    protected readonly Striker _striker;
-    
-    protected ArrClient(
-        ILogger<ArrClient> logger,
-        IHttpClientFactory httpClientFactory,
-        IOptions<LoggingConfig> loggingConfig,
-        IOptions<QueueCleanerConfig> queueCleanerConfig,
-        Striker striker
-    )
-    {
-        _logger = logger;
-        _striker = striker;
-        _httpClient = httpClientFactory.CreateClient();
-        _loggingConfig = loggingConfig.Value;
-        _queueCleanerConfig = queueCleanerConfig.Value;
-        _striker = striker;
-    }
-
-    public virtual async Task<QueueListResponse> GetQueueItemsAsync(ArrInstance arrInstance, int page)
-    {
-        Uri uri = new(arrInstance.Url, GetQueueUrlPath(page));
-
-        using HttpRequestMessage request = new(HttpMethod.Get, uri);
-        SetApiKey(request, arrInstance.ApiKey);
-        
-        using HttpResponseMessage response = await _httpClient.SendAsync(request);
-
-        try
-        {
-            response.EnsureSuccessStatusCode();
-        }
-        catch
-        {
-            _logger.LogError("queue list failed | {uri}", uri);
-            throw;
-        }
-        
-        string responseBody = await response.Content.ReadAsStringAsync();
-        QueueListResponse? queueResponse = JsonConvert.DeserializeObject<QueueListResponse>(responseBody);
-
-        if (queueResponse is null)
-        {
-            throw new Exception($"unrecognized queue list response | {uri} | {responseBody}");
-        }
-
-        return queueResponse;
-    }
-
-    public virtual bool ShouldRemoveFromQueue(QueueRecord record, bool isPrivateDownload)
-    {
-        if (_queueCleanerConfig.ImportFailedIgnorePrivate && isPrivateDownload)
-        {
-            // ignore private trackers
-            _logger.LogDebug("skip failed import check | download is private | {name}", record.Title);
-            return false;
-        }
-        
-        bool hasWarn() => record.TrackedDownloadStatus
-            .Equals("warning", StringComparison.InvariantCultureIgnoreCase);
-        bool isImportBlocked() => record.TrackedDownloadState
-            .Equals("importBlocked", StringComparison.InvariantCultureIgnoreCase);
-        bool isImportPending() => record.TrackedDownloadState
-            .Equals("importPending", StringComparison.InvariantCultureIgnoreCase);
-        
-        if (hasWarn() && (isImportBlocked() || isImportPending()))
-        {
-            if (HasIgnoredPatterns(record))
-            {
-                _logger.LogDebug("skip failed import check | contains ignored pattern | {name}", record.Title);
-                return false;
-            }
-            
-            return _striker.StrikeAndCheckLimit(
-                record.DownloadId,
-                record.Title,
-                _queueCleanerConfig.ImportFailedMaxStrikes,
-                StrikeType.ImportFailed
-            );
-        }
-
-        return false;
-    }
-    
-    public virtual async Task DeleteQueueItemAsync(ArrInstance arrInstance, QueueRecord queueRecord)
-    {
-        Uri uri = new(arrInstance.Url, $"/api/v3/queue/{queueRecord.Id}?removeFromClient=true&blocklist=true&skipRedownload=true&changeCategory=false");
-        
-        using HttpRequestMessage request = new(HttpMethod.Delete, uri);
-        SetApiKey(request, arrInstance.ApiKey);
-
-        using HttpResponseMessage response = await _httpClient.SendAsync(request);
-
-        try
-        {
-            response.EnsureSuccessStatusCode();
-            
-            _logger.LogInformation("queue item deleted | {url} | {title}", arrInstance.Url, queueRecord.Title);
-        }
-        catch
-        {
-            _logger.LogError("queue delete failed | {uri} | {title}", uri, queueRecord.Title);
-            throw;
-        }
-    }
-
-    public abstract Task RefreshItemsAsync(ArrInstance arrInstance, ArrConfig config, HashSet<SearchItem>? items);
-
-    public virtual bool IsRecordValid(QueueRecord record)
-    {
-        if (string.IsNullOrEmpty(record.DownloadId))
-        {
-            _logger.LogDebug("skip | download id is null for {title}", record.Title);
-            return false;
-        }
-
-        if (record.DownloadId.Equals(record.Title, StringComparison.InvariantCultureIgnoreCase))
-        {
-            _logger.LogDebug("skip | item is not ready yet | {title}", record.Title);
-            return false;
-        }
-
-        return true;
-    }
-    
-    protected abstract string GetQueueUrlPath(int page);
-    
-    protected virtual void SetApiKey(HttpRequestMessage request, string apiKey)
-    {
-        request.Headers.Add("x-api-key", apiKey);
-    }
-
-    private bool HasIgnoredPatterns(QueueRecord record)
-    {
-        if (_queueCleanerConfig.ImportFailedIgnorePatterns?.Count is null or 0)
-        {
-            // no patterns are configured
-            return false;
-        }
-            
-        if (record.StatusMessages?.Count is null or 0)
-        {
-            // no status message found
-            return false;
-        }
-        
-        HashSet<string> messages = record.StatusMessages
-            .SelectMany(x => x.Messages ?? Enumerable.Empty<string>())
-            .ToHashSet();
-        record.StatusMessages.Select(x => x.Title)
-            .ToList()
-            .ForEach(x => messages.Add(x));
-        
-        return messages.Any(
-            m => _queueCleanerConfig.ImportFailedIgnorePatterns.Any(
-                p => !string.IsNullOrWhiteSpace(p.Trim()) && m.Contains(p, StringComparison.InvariantCultureIgnoreCase)
-            )
-        );
-    }
-}

code/Infrastructure/Verticals/Arr/RadarrClient.cs

@@ -1,137 +0,0 @@
-using System.Text;
-using Common.Configuration.Arr;
-using Common.Configuration.Logging;
-using Common.Configuration.QueueCleaner;
-using Domain.Models.Arr;
-using Domain.Models.Arr.Queue;
-using Domain.Models.Radarr;
-using Infrastructure.Verticals.ItemStriker;
-using Microsoft.Extensions.Caching.Memory;
-using Microsoft.Extensions.Logging;
-using Microsoft.Extensions.Options;
-using Newtonsoft.Json;
-
-namespace Infrastructure.Verticals.Arr;
-
-public sealed class RadarrClient : ArrClient
-{
-    public RadarrClient(
-        ILogger<ArrClient> logger,
-        IHttpClientFactory httpClientFactory,
-        IOptions<LoggingConfig> loggingConfig,
-        IOptions<QueueCleanerConfig> queueCleanerConfig,
-        Striker striker
-    ) : base(logger, httpClientFactory, loggingConfig, queueCleanerConfig, striker)
-    {
-    }
-
-    protected override string GetQueueUrlPath(int page)
-    {
-        return $"/api/v3/queue?page={page}&pageSize=200&includeUnknownMovieItems=true&includeMovie=true";
-    }
-
-    public override async Task RefreshItemsAsync(ArrInstance arrInstance, ArrConfig config, HashSet<SearchItem>? items)
-    {
-        if (items?.Count is null or 0)
-        {
-            return;
-        }
-
-        List<long> ids = items.Select(item => item.Id).ToList();
-        
-        Uri uri = new(arrInstance.Url, "/api/v3/command");
-        RadarrCommand command = new()
-        {
-            Name = "MoviesSearch",
-            MovieIds = ids,
-        };
-        
-        using HttpRequestMessage request = new(HttpMethod.Post, uri);
-        request.Content = new StringContent(
-            JsonConvert.SerializeObject(command),
-            Encoding.UTF8,
-            "application/json"
-        );
-        SetApiKey(request, arrInstance.ApiKey);
-
-        using HttpResponseMessage response = await _httpClient.SendAsync(request);
-        string? logContext = await ComputeCommandLogContextAsync(arrInstance, command);
-
-        try
-        {
-            response.EnsureSuccessStatusCode();
-            
-            _logger.LogInformation("{log}", GetSearchLog(arrInstance.Url, command, true, logContext));
-        }
-        catch
-        {
-            _logger.LogError("{log}", GetSearchLog(arrInstance.Url, command, false, logContext));
-            throw;
-        }
-    }
-
-    public override bool IsRecordValid(QueueRecord record)
-    {
-        if (record.MovieId is 0)
-        {
-            _logger.LogDebug("skip | item information missing | {title}", record.Title);
-            return false;
-        }
-        
-        return base.IsRecordValid(record);
-    }
-
-    private static string GetSearchLog(Uri instanceUrl, RadarrCommand command, bool success, string? logContext)
-    {
-        string status = success ? "triggered" : "failed";
-        string message = logContext ?? $"movie ids: {string.Join(',', command.MovieIds)}";
-
-        return $"movie search {status} | {instanceUrl} | {message}";
-    }
-
-    private async Task<string?> ComputeCommandLogContextAsync(ArrInstance arrInstance, RadarrCommand command)
-    {
-        try
-        {
-            if (!_loggingConfig.Enhanced)
-            {
-                return null;
-            }
-
-            StringBuilder log = new();
-
-            foreach (long movieId in command.MovieIds)
-            {
-                Movie? movie = await GetMovie(arrInstance, movieId);
-
-                if (movie is null)
-                {
-                    return null;
-                }
-
-                log.Append($"[{movie.Title}]");
-            }
-
-            return log.ToString();
-        }
-        catch (Exception exception)
-        {
-            _logger.LogDebug(exception, "failed to compute log context");
-        }
-
-        return null;
-    }
-
-    private async Task<Movie?> GetMovie(ArrInstance arrInstance, long movieId)
-    {
-        Uri uri = new(arrInstance.Url, $"api/v3/movie/{movieId}");
-        using HttpRequestMessage request = new(HttpMethod.Get, uri);
-        SetApiKey(request, arrInstance.ApiKey);
-
-        using HttpResponseMessage response = await _httpClient.SendAsync(request);
-        response.EnsureSuccessStatusCode();
-                
-        string responseBody = await response.Content.ReadAsStringAsync();
-        return JsonConvert.DeserializeObject<Movie>(responseBody);
-    }
-}

code/Infrastructure/Verticals/ContentBlocker/BlocklistProvider.cs

@@ -1,134 +0,0 @@
-using System.Collections.Concurrent;
-using System.Diagnostics;
-using System.Text.RegularExpressions;
-using Common.Configuration.ContentBlocker;
-using Domain.Enums;
-using Microsoft.Extensions.Logging;
-using Microsoft.Extensions.Options;
-
-namespace Infrastructure.Verticals.ContentBlocker;
-
-public sealed class BlocklistProvider
-{
-    private readonly ILogger<BlocklistProvider> _logger;
-    private readonly ContentBlockerConfig _config;
-    private readonly HttpClient _httpClient;
-    
-    public BlocklistType BlocklistType { get; }
-
-    public ConcurrentBag<string> Patterns { get; } = [];
-
-    public ConcurrentBag<Regex> Regexes { get; } = [];
-
-    public BlocklistProvider(
-        ILogger<BlocklistProvider> logger,
-        IOptions<ContentBlockerConfig> config,
-        IHttpClientFactory httpClientFactory)
-    {
-        _logger = logger;
-        _config = config.Value;
-        _httpClient = httpClientFactory.CreateClient();
-        
-        _config.Validate();
-        
-        if (_config.Blacklist?.Enabled is true)
-        {
-            BlocklistType = BlocklistType.Blacklist;
-        }
-
-        if (_config.Whitelist?.Enabled is true)
-        {
-            BlocklistType = BlocklistType.Whitelist;
-        }
-    }
-
-    public async Task LoadBlocklistAsync()
-    {
-        if (Patterns.Count > 0 || Regexes.Count > 0)
-        {
-            _logger.LogDebug("blocklist already loaded");
-            return;
-        }
-        
-        try
-        {
-            await LoadPatternsAndRegexesAsync();
-        }
-        catch
-        {
-            _logger.LogError("failed to load {type}", BlocklistType.ToString());
-            throw;
-        }
-    }
-
-    private async Task LoadPatternsAndRegexesAsync()
-    {
-        string[] patterns;
-        
-        if (BlocklistType is BlocklistType.Blacklist)
-        {
-            patterns = await ReadContentAsync(_config.Blacklist.Path);
-        }
-        else
-        {
-            patterns = await ReadContentAsync(_config.Whitelist.Path);
-        }
-        
-        long startTime = Stopwatch.GetTimestamp();
-        ParallelOptions options = new() { MaxDegreeOfParallelism = 5 };
-        const string regexId = "regex:";
-        
-        Parallel.ForEach(patterns, options, pattern =>
-        {
-            if (!pattern.StartsWith(regexId))
-            {
-                Patterns.Add(pattern);
-                return;
-            }
-            
-            pattern = pattern[regexId.Length..];
-            
-            try
-            {
-                Regex regex = new(pattern, RegexOptions.Compiled);
-                Regexes.Add(regex);
-            }
-            catch (ArgumentException)
-            {
-                _logger.LogWarning("invalid regex | {pattern}", pattern);
-            }
-        });
-
-        TimeSpan elapsed = Stopwatch.GetElapsedTime(startTime);
-        
-        _logger.LogDebug("loaded {count} patterns", Patterns.Count);
-        _logger.LogDebug("loaded {count} regexes", Regexes.Count);
-        _logger.LogDebug("blocklist loaded in {elapsed} ms", elapsed.TotalMilliseconds);
-    }
-    
-    private async Task<string[]> ReadContentAsync(string path)
-    {
-        if (Uri.TryCreate(path, UriKind.Absolute, out var uri) && (uri.Scheme == Uri.UriSchemeHttp || uri.Scheme == Uri.UriSchemeHttps))
-        {
-            // http(s) url
-            return await ReadFromUrlAsync(path);
-        }
-
-        if (File.Exists(path))
-        {
-            // local file path
-            return await File.ReadAllLinesAsync(path);
-        }
-
-        throw new ArgumentException($"blocklist not found | {path}");
-    }
-
-    private async Task<string[]> ReadFromUrlAsync(string url)
-    {
-        using HttpResponseMessage response = await _httpClient.GetAsync(url);
-        response.EnsureSuccessStatusCode();
-        
-        return (await response.Content.ReadAsStringAsync())
-            .Split(['\r','\n'], StringSplitOptions.RemoveEmptyEntries);
-    }
-}

code/Infrastructure/Verticals/ContentBlocker/ContentBlocker.cs

@@ -1,68 +0,0 @@
-using Common.Configuration.Arr;
-using Common.Configuration.DownloadClient;
-using Domain.Enums;
-using Domain.Models.Arr.Queue;
-using Infrastructure.Verticals.Arr;
-using Infrastructure.Verticals.DownloadClient;
-using Infrastructure.Verticals.Jobs;
-using Microsoft.Extensions.Logging;
-using Microsoft.Extensions.Options;
-
-namespace Infrastructure.Verticals.ContentBlocker;
-
-public sealed class ContentBlocker : GenericHandler
-{
-    private readonly BlocklistProvider _blocklistProvider;
-    
-    public ContentBlocker(
-        ILogger<ContentBlocker> logger,
-        IOptions<DownloadClientConfig> downloadClientConfig,
-        IOptions<SonarrConfig> sonarrConfig,
-        IOptions<RadarrConfig> radarrConfig,
-        SonarrClient sonarrClient,
-        RadarrClient radarrClient,
-        ArrQueueIterator arrArrQueueIterator,
-        BlocklistProvider blocklistProvider,
-        DownloadServiceFactory downloadServiceFactory
-    ) : base(logger, downloadClientConfig, sonarrConfig.Value, radarrConfig.Value, sonarrClient, radarrClient, arrArrQueueIterator, downloadServiceFactory)
-    {
-        _blocklistProvider = blocklistProvider;
-    }
-
-    public override async Task ExecuteAsync()
-    {
-        if (_downloadClientConfig.DownloadClient is Common.Enums.DownloadClient.None)
-        {
-            _logger.LogWarning("download client is set to none");
-            return;
-        }
-        
-        await _blocklistProvider.LoadBlocklistAsync();
-        await base.ExecuteAsync();
-    }
-
-    protected override async Task ProcessInstanceAsync(ArrInstance instance, InstanceType instanceType)
-    {
-        ArrClient arrClient = GetClient(instanceType);
-
-        await _arrArrQueueIterator.Iterate(arrClient, instance, async items =>
-        {
-            foreach (QueueRecord record in items)
-            {
-                if (record.Protocol is not "torrent")
-                {
-                    continue;
-                }
-                
-                if (string.IsNullOrEmpty(record.DownloadId))
-                {
-                    _logger.LogDebug("skip | download id is null for {title}", record.Title);
-                    continue;
-                }
-                
-                _logger.LogDebug("searching unwanted files for {title}", record.Title);
-                await _downloadService.BlockUnwantedFilesAsync(record.DownloadId);
-            }
-        });
-    }
-}

code/Infrastructure/Verticals/ContentBlocker/FilenameEvaluator.cs

@@ -1,81 +0,0 @@
-using Domain.Enums;
-using Microsoft.Extensions.Logging;
-
-namespace Infrastructure.Verticals.ContentBlocker;
-
-public sealed class FilenameEvaluator
-{
-    private readonly ILogger<FilenameEvaluator> _logger;
-    private readonly BlocklistProvider _blocklistProvider;
-    
-    public FilenameEvaluator(ILogger<FilenameEvaluator> logger, BlocklistProvider blocklistProvider)
-    {
-        _logger = logger;
-        _blocklistProvider = blocklistProvider;
-    }
-    
-    // TODO create unit tests
-    public bool IsValid(string filename)
-    {
-        return IsValidAgainstPatterns(filename) && IsValidAgainstRegexes(filename);
-    }
-
-    private bool IsValidAgainstPatterns(string filename)
-    {
-        if (_blocklistProvider.Patterns.Count is 0)
-        {
-            return true;
-        }
-
-        return _blocklistProvider.BlocklistType switch
-        {
-            BlocklistType.Blacklist => !_blocklistProvider.Patterns.Any(pattern => MatchesPattern(filename, pattern)),
-            BlocklistType.Whitelist => _blocklistProvider.Patterns.Any(pattern => MatchesPattern(filename, pattern)),
-            _ => true
-        };
-    }
-
-    private bool IsValidAgainstRegexes(string filename)
-    {
-        if (_blocklistProvider.Regexes.Count is 0)
-        {
-            return true;
-        }
-        
-        return _blocklistProvider.BlocklistType switch
-        {
-            BlocklistType.Blacklist => !_blocklistProvider.Regexes.Any(regex => regex.IsMatch(filename)),
-            BlocklistType.Whitelist => _blocklistProvider.Regexes.Any(regex => regex.IsMatch(filename)),
-            _ => true
-        };
-    }
-    
-    private static bool MatchesPattern(string filename, string pattern)
-    {
-        bool hasStartWildcard = pattern.StartsWith('*');
-        bool hasEndWildcard = pattern.EndsWith('*');
-
-        if (hasStartWildcard && hasEndWildcard)
-        {
-            return filename.Contains(
-                pattern.Substring(1, pattern.Length - 2),
-                StringComparison.InvariantCultureIgnoreCase
-            );
-        }
-
-        if (hasStartWildcard)
-        {
-            return filename.EndsWith(pattern.Substring(1), StringComparison.InvariantCultureIgnoreCase);
-        }
-
-        if (hasEndWildcard)
-        {
-            return filename.StartsWith(
-                pattern.Substring(0, pattern.Length - 1),
-                StringComparison.InvariantCultureIgnoreCase
-            );
-        }
-
-        return filename == pattern;
-    }
-}

code/Infrastructure/Verticals/DownloadClient/Deluge/DelugeClient.cs

@@ -1,139 +0,0 @@
-using System.Net.Http.Headers;
-using System.Text.Json.Serialization;
-using Common.Configuration;
-using Common.Configuration.DownloadClient;
-using Domain.Models.Deluge.Exceptions;
-using Domain.Models.Deluge.Request;
-using Domain.Models.Deluge.Response;
-using Infrastructure.Verticals.DownloadClient.Deluge.Extensions;
-using Microsoft.Extensions.Options;
-using Newtonsoft.Json;
-
-namespace Infrastructure.Verticals.DownloadClient.Deluge;
-
-public sealed class DelugeClient
-{
-    private readonly DelugeConfig _config;
-    private readonly HttpClient _httpClient;
-    
-    public DelugeClient(IOptions<DelugeConfig> config, IHttpClientFactory httpClientFactory)
-    {
-        _config = config.Value;
-        _httpClient = httpClientFactory.CreateClient(nameof(DelugeService));
-    }
-    
-    public async Task<bool> LoginAsync()
-    {
-        return await SendRequest<bool>("auth.login", _config.Password);
-    }
-
-    public async Task<bool> Logout()
-    {
-        return await SendRequest<bool>("auth.delete_session");
-    }
-
-    public async Task<List<DelugeTorrent>> ListTorrents(Dictionary<string, string>? filters = null)
-    {
-        filters ??= new Dictionary<string, string>();
-        var keys = typeof(DelugeTorrent).GetAllJsonPropertyFromType();
-        Dictionary<string, DelugeTorrent> result =
-            await SendRequest<Dictionary<string, DelugeTorrent>>("core.get_torrents_status", filters, keys);
-        return result.Values.ToList();
-    }
-
-    public async Task<List<DelugeTorrentExtended>> ListTorrentsExtended(Dictionary<string, string>? filters = null)
-    {
-        filters ??= new Dictionary<string, string>();
-        var keys = typeof(DelugeTorrentExtended).GetAllJsonPropertyFromType();
-        Dictionary<string, DelugeTorrentExtended> result =
-            await SendRequest<Dictionary<string, DelugeTorrentExtended>>("core.get_torrents_status", filters, keys);
-        return result.Values.ToList();
-    }
-
-    public async Task<DelugeTorrent?> GetTorrent(string hash)
-    {
-        List<DelugeTorrent> torrents = await ListTorrents(new Dictionary<string, string>() { { "hash", hash } });
-        return torrents.FirstOrDefault();
-    }
-
-    public async Task<DelugeTorrentExtended?> GetTorrentExtended(string hash)
-    {
-        List<DelugeTorrentExtended> torrents =
-            await ListTorrentsExtended(new Dictionary<string, string> { { "hash", hash } });
-        return torrents.FirstOrDefault();
-    }
-
-    public async Task<DelugeContents?> GetTorrentFiles(string hash)
-    {
-        return await SendRequest<DelugeContents?>("web.get_torrent_files", hash);
-    }
-
-    public async Task ChangeFilesPriority(string hash, List<int> priorities)
-    {
-        Dictionary<string, List<int>> filePriorities = new()
-        {
-            { "file_priorities", priorities }
-        };
-
-        await SendRequest<DelugeResponse<object>>("core.set_torrent_options", hash, filePriorities);
-    }
-
-    private async Task<String> PostJson(String json)
-    {
-        StringContent content = new StringContent(json);
-        content.Headers.ContentType = new MediaTypeWithQualityHeaderValue("application/json");
-
-        var responseMessage = await _httpClient.PostAsync(new Uri(_config.Url, "/json"), content);
-        responseMessage.EnsureSuccessStatusCode();
-
-        var responseJson = await responseMessage.Content.ReadAsStringAsync();
-        return responseJson;
-    }
-
-    private DelugeRequest CreateRequest(string method, params object[] parameters)
-    {
-        if (String.IsNullOrWhiteSpace(method))
-        {
-            throw new ArgumentException(nameof(method));
-        }
-        
-        return new DelugeRequest(1, method, parameters);
-    }
-    
-    public async Task<T> SendRequest<T>(string method, params object[] parameters)
-    {
-        return await SendRequest<T>(CreateRequest(method, parameters));
-    }
-
-    public async Task<T> SendRequest<T>(DelugeRequest webRequest)
-    {
-        var requestJson = JsonConvert.SerializeObject(webRequest, Formatting.None, new JsonSerializerSettings
-        {
-            NullValueHandling = webRequest.NullValueHandling
-        });
-
-        var responseJson = await PostJson(requestJson);
-        var settings = new JsonSerializerSettings
-        {
-            Error = (_, args) =>
-            {
-                // Suppress the error and continue
-                args.ErrorContext.Handled = true;
-            }
-        };
-        
-        DelugeResponse<T>? webResponse = JsonConvert.DeserializeObject<DelugeResponse<T>>(responseJson, settings);
-
-        if (webResponse?.Error != null)
-        {
-            throw new DelugeClientException(webResponse.Error.Message);
-        }
-
-        if (webResponse?.ResponseId != webRequest.RequestId)
-        {
-            throw new DelugeClientException("desync");
-        }
-
-        return webResponse.Result;
-    }
-}

code/Infrastructure/Verticals/DownloadClient/Deluge/DelugeService.cs

@@ -1,196 +0,0 @@
-using Common.Configuration.DownloadClient;
-using Common.Configuration.QueueCleaner;
-using Domain.Models.Deluge.Response;
-using Infrastructure.Verticals.ContentBlocker;
-using Infrastructure.Verticals.ItemStriker;
-using Microsoft.Extensions.Logging;
-using Microsoft.Extensions.Options;
-
-namespace Infrastructure.Verticals.DownloadClient.Deluge;
-
-public sealed class DelugeService : DownloadServiceBase
-{
-    private readonly DelugeClient _client;
-    
-    public DelugeService(
-        ILogger<DelugeService> logger,
-        IOptions<DelugeConfig> config,
-        IHttpClientFactory httpClientFactory,
-        IOptions<QueueCleanerConfig> queueCleanerConfig,
-        FilenameEvaluator filenameEvaluator,
-        Striker striker
-    ) : base(logger, queueCleanerConfig, filenameEvaluator, striker)
-    {
-        config.Value.Validate();
-        _client = new (config, httpClientFactory);
-    }
-    
-    public override async Task LoginAsync()
-    {
-        await _client.LoginAsync();
-    }
-
-    public override async Task<RemoveResult> ShouldRemoveFromArrQueueAsync(string hash)
-    {
-        hash = hash.ToLowerInvariant();
-        
-        DelugeContents? contents = null;
-        RemoveResult result = new();
-
-        TorrentStatus? status = await GetTorrentStatus(hash);
-        
-        if (status?.Hash is null)
-        {
-            _logger.LogDebug("failed to find torrent {hash} in the download client", hash);
-            return result;
-        }
-
-        try
-        {
-            contents = await _client.GetTorrentFiles(hash);
-        }
-        catch (Exception exception)
-        {
-            _logger.LogDebug(exception, "failed to find torrent {hash} in the download client", hash);
-        }
-
-        bool shouldRemove = contents?.Contents?.Count > 0;
-        
-        ProcessFiles(contents.Contents, (_, file) =>
-        {
-            if (file.Priority > 0)
-            {
-                shouldRemove = false;
-            }
-        });
-
-        result.ShouldRemove = shouldRemove || IsItemStuckAndShouldRemove(status);
-        result.IsPrivate = status.Private;
-        
-        return result;
-    }
-
-    public override async Task BlockUnwantedFilesAsync(string hash)
-    {
-        hash = hash.ToLowerInvariant();
-
-        TorrentStatus? status = await GetTorrentStatus(hash);
-        
-        if (status?.Hash is null)
-        {
-            _logger.LogDebug("failed to find torrent {hash} in the download client", hash);
-            return;
-        }
-        
-        if (_queueCleanerConfig.StalledIgnorePrivate && status.Private)
-        {
-            // ignore private trackers
-            _logger.LogDebug("skip files check | download is private | {name}", status.Name);
-            return;
-        }
-        
-        DelugeContents? contents = null;
-
-        try
-        {
-            contents = await _client.GetTorrentFiles(hash);
-        }
-        catch (Exception exception)
-        {
-            _logger.LogDebug(exception, "failed to find torrent {hash} in the download client", hash);
-        }
-
-        if (contents is null)
-        {
-            return;
-        }
-        
-        Dictionary<int, int> priorities = [];
-        bool hasPriorityUpdates = false;
-
-        ProcessFiles(contents.Contents, (name, file) =>
-        {
-            int priority = file.Priority;
-
-            if (file.Priority is not 0 && !_filenameEvaluator.IsValid(name))
-            {
-                priority = 0;
-                hasPriorityUpdates = true;
-                _logger.LogInformation("unwanted file found | {file}", file.Path);
-            }
-            
-            priorities.Add(file.Index, priority);
-        });
-
-        if (!hasPriorityUpdates)
-        {
-            return;
-        }
-        
-        _logger.LogDebug("changing priorities | torrent {hash}", hash);
-
-        List<int> sortedPriorities = priorities
-            .OrderBy(x => x.Key)
-            .Select(x => x.Value)
-            .ToList();
-
-        await _client.ChangeFilesPriority(hash, sortedPriorities);
-    }
-    
-    private bool IsItemStuckAndShouldRemove(TorrentStatus status)
-    {
-        if (_queueCleanerConfig.StalledMaxStrikes is 0)
-        {
-            return false;
-        }
-        
-        if (_queueCleanerConfig.StalledIgnorePrivate && status.Private)
-        {
-            // ignore private trackers
-            _logger.LogDebug("skip stalled check | download is private | {name}", status.Name);
-            return false;
-        }
-        
-        if (status.State is null || !status.State.Equals("Downloading", StringComparison.InvariantCultureIgnoreCase))
-        {
-            return false;
-        }
-
-        if (status.Eta > 0)
-        {
-            return false;
-        }
-
-        return StrikeAndCheckLimit(status.Hash!, status.Name!);
-    }
-
-    private async Task<TorrentStatus?> GetTorrentStatus(string hash)
-    {
-        return await _client.SendRequest<TorrentStatus?>(
-            "web.get_torrent_status",
-            hash,
-            new[] { "hash", "state", "name", "eta", "private" }
-        );
-    }
-    
-    private static void ProcessFiles(Dictionary<string, DelugeFileOrDirectory> contents, Action<string, DelugeFileOrDirectory> processFile)
-    {
-        foreach (var (name, data) in contents)
-        {
-            switch (data.Type)
-            {
-                case "file":
-                    processFile(name, data);
-                    break;
-                case "dir" when data.Contents is not null:
-                    // Recurse into subdirectories
-                    ProcessFiles(data.Contents, processFile);
-                    break;
-            }
-        }
-    }
-
-    public override void Dispose()
-    {
-    }
-}

code/Infrastructure/Verticals/DownloadClient/Deluge/Extensions/DelugeExtensions.cs

@@ -1,20 +0,0 @@
-using Newtonsoft.Json;
-
-namespace Infrastructure.Verticals.DownloadClient.Deluge.Extensions;
-
-internal static class DelugeExtensions
-{
-    public static List<String?> GetAllJsonPropertyFromType(this Type t)
-    {
-        var type = typeof(JsonPropertyAttribute);
-        var props = t.GetProperties()
-            .Where(prop => Attribute.IsDefined(prop, type))
-            .ToList();
-        
-        return props
-            .Select(x => x.GetCustomAttributes(type, true).Single())
-            .Cast<JsonPropertyAttribute>()
-            .Select(x => x.PropertyName)
-            .ToList();
-    }
-}

code/Infrastructure/Verticals/DownloadClient/DownloadServiceBase.cs

@@ -1,42 +0,0 @@
-using Common.Configuration.QueueCleaner;
-using Domain.Enums;
-using Infrastructure.Verticals.ContentBlocker;
-using Infrastructure.Verticals.ItemStriker;
-using Microsoft.Extensions.Logging;
-using Microsoft.Extensions.Options;
-
-namespace Infrastructure.Verticals.DownloadClient;
-
-public abstract class DownloadServiceBase : IDownloadService
-{
-    protected readonly ILogger<DownloadServiceBase> _logger;
-    protected readonly QueueCleanerConfig _queueCleanerConfig;
-    protected readonly FilenameEvaluator _filenameEvaluator;
-    protected readonly Striker _striker;
-    
-    protected DownloadServiceBase(
-        ILogger<DownloadServiceBase> logger,
-        IOptions<QueueCleanerConfig> queueCleanerConfig,
-        FilenameEvaluator filenameEvaluator,
-        Striker striker
-    )
-    {
-        _logger = logger;
-        _queueCleanerConfig = queueCleanerConfig.Value;
-        _filenameEvaluator = filenameEvaluator;
-        _striker = striker;
-    }
-
-    public abstract void Dispose();
-
-    public abstract Task LoginAsync();
-
-    public abstract Task<RemoveResult> ShouldRemoveFromArrQueueAsync(string hash);
-
-    public abstract Task BlockUnwantedFilesAsync(string hash);
-
-    protected bool StrikeAndCheckLimit(string hash, string itemName)
-    {
-        return _striker.StrikeAndCheckLimit(hash, itemName, _queueCleanerConfig.StalledMaxStrikes, StrikeType.Stalled);
-    }
-}

code/Infrastructure/Verticals/DownloadClient/DownloadServiceFactory.cs

@@ -1,30 +0,0 @@
-using Common.Configuration.DownloadClient;
-using Infrastructure.Verticals.DownloadClient.Deluge;
-using Infrastructure.Verticals.DownloadClient.QBittorrent;
-using Infrastructure.Verticals.DownloadClient.Transmission;
-using Microsoft.Extensions.DependencyInjection;
-using Microsoft.Extensions.Options;
-
-namespace Infrastructure.Verticals.DownloadClient;
-
-public sealed class DownloadServiceFactory
-{
-    private readonly IServiceProvider _serviceProvider;
-    private readonly Common.Enums.DownloadClient _downloadClient;
-    
-    public DownloadServiceFactory(IServiceProvider serviceProvider, IOptions<DownloadClientConfig> downloadClientConfig)
-    {
-        _serviceProvider = serviceProvider;
-        _downloadClient = downloadClientConfig.Value.DownloadClient;
-    }
-
-    public IDownloadService CreateDownloadClient() =>
-        _downloadClient switch
-        {
-            Common.Enums.DownloadClient.QBittorrent => _serviceProvider.GetRequiredService<QBitService>(),
-            Common.Enums.DownloadClient.Deluge => _serviceProvider.GetRequiredService<DelugeService>(),
-            Common.Enums.DownloadClient.Transmission => _serviceProvider.GetRequiredService<TransmissionService>(),
-            Common.Enums.DownloadClient.None => _serviceProvider.GetRequiredService<DummyDownloadService>(),
-            _ => throw new ArgumentOutOfRangeException()
-        };
-}

code/Infrastructure/Verticals/DownloadClient/DummyDownloadService.cs

@@ -1,33 +0,0 @@
-using Common.Configuration.QueueCleaner;
-using Infrastructure.Verticals.ContentBlocker;
-using Infrastructure.Verticals.ItemStriker;
-using Microsoft.Extensions.Logging;
-using Microsoft.Extensions.Options;
-
-namespace Infrastructure.Verticals.DownloadClient;
-
-public sealed class DummyDownloadService : DownloadServiceBase
-{
-    public DummyDownloadService(ILogger<DownloadServiceBase> logger, IOptions<QueueCleanerConfig> queueCleanerConfig, FilenameEvaluator filenameEvaluator, Striker striker) : base(logger, queueCleanerConfig, filenameEvaluator, striker)
-    {
-    }
-
-    public override void Dispose()
-    {
-    }
-
-    public override Task LoginAsync()
-    {
-        return Task.CompletedTask;
-    }
-
-    public override Task<RemoveResult> ShouldRemoveFromArrQueueAsync(string hash)
-    {
-        throw new NotImplementedException();
-    }
-
-    public override Task BlockUnwantedFilesAsync(string hash)
-    {
-        throw new NotImplementedException();
-    }
-}

code/Infrastructure/Verticals/DownloadClient/IDownloadService.cs

@@ -1,10 +0,0 @@
-namespace Infrastructure.Verticals.DownloadClient;
-
-public interface IDownloadService : IDisposable
-{
-    public Task LoginAsync();
-
-    public Task<RemoveResult> ShouldRemoveFromArrQueueAsync(string hash);
-
-    public Task BlockUnwantedFilesAsync(string hash);
-}

code/Infrastructure/Verticals/DownloadClient/QBittorrent/QBitService.cs

@@ -1,166 +0,0 @@
-using Common.Configuration.DownloadClient;
-using Common.Configuration.QueueCleaner;
-using Infrastructure.Verticals.ContentBlocker;
-using Infrastructure.Verticals.ItemStriker;
-using Microsoft.Extensions.Logging;
-using Microsoft.Extensions.Options;
-using QBittorrent.Client;
-
-namespace Infrastructure.Verticals.DownloadClient.QBittorrent;
-
-public sealed class QBitService : DownloadServiceBase
-{
-    private readonly QBitConfig _config;
-    private readonly QBittorrentClient _client;
-
-    public QBitService(
-        ILogger<QBitService> logger,
-        IOptions<QBitConfig> config,
-        IOptions<QueueCleanerConfig> queueCleanerConfig,
-        FilenameEvaluator filenameEvaluator,
-        Striker striker
-    ) : base(logger, queueCleanerConfig, filenameEvaluator, striker)
-    {
-        _config = config.Value;
-        _config.Validate();
-        _client = new(_config.Url);
-    }
-
-    public override async Task LoginAsync()
-    {
-        if (string.IsNullOrEmpty(_config.Username) && string.IsNullOrEmpty(_config.Password))
-        {
-            return;
-        }
-        
-        await _client.LoginAsync(_config.Username, _config.Password);
-    }
-
-    public override async Task<RemoveResult> ShouldRemoveFromArrQueueAsync(string hash)
-    {
-        RemoveResult result = new();
-        TorrentInfo? torrent = (await _client.GetTorrentListAsync(new TorrentListQuery { Hashes = [hash] }))
-            .FirstOrDefault();
-
-        if (torrent is null)
-        {
-            _logger.LogDebug("failed to find torrent {hash} in the download client", hash);
-            return result;
-        }
-
-        TorrentProperties? torrentProperties = await _client.GetTorrentPropertiesAsync(hash);
-
-        if (torrentProperties is null)
-        {
-            _logger.LogDebug("failed to find torrent properties {hash} in the download client", hash);
-            return result;
-        }
-
-        result.IsPrivate = torrentProperties.AdditionalData.TryGetValue("is_private", out var dictValue) &&
-                           bool.TryParse(dictValue?.ToString(), out bool boolValue)
-                           && boolValue;
-
-        // if all files were blocked by qBittorrent
-        if (torrent is { CompletionOn: not null, Downloaded: null or 0 })
-        {
-            result.ShouldRemove = true;
-            return result;
-        }
-
-        IReadOnlyList<TorrentContent>? files = await _client.GetTorrentContentsAsync(hash);
-
-        // if all files are marked as skip
-        if (files?.Count is > 0 && files.All(x => x.Priority is TorrentContentPriority.Skip))
-        {
-            result.ShouldRemove = true;
-            return result;
-        }
-
-        result.ShouldRemove = IsItemStuckAndShouldRemove(torrent, result.IsPrivate);
-
-        return result;
-    }
-
-    public override async Task BlockUnwantedFilesAsync(string hash)
-    {
-        TorrentInfo? torrent = (await _client.GetTorrentListAsync(new TorrentListQuery { Hashes = [hash] }))
-            .FirstOrDefault();
-
-        if (torrent is null)
-        {
-            _logger.LogDebug("failed to find torrent {hash} in the download client", hash);
-            return;
-        }
-        
-        TorrentProperties? torrentProperties = await _client.GetTorrentPropertiesAsync(hash);
-
-        if (torrentProperties is null)
-        {
-            _logger.LogDebug("failed to find torrent properties {hash} in the download client", hash);
-            return;
-        }
-
-        bool isPrivate = torrentProperties.AdditionalData.TryGetValue("is_private", out var dictValue) &&
-                         bool.TryParse(dictValue?.ToString(), out bool boolValue)
-                         && boolValue;
-
-        if (_queueCleanerConfig.StalledIgnorePrivate && isPrivate)
-        {
-            // ignore private trackers
-            _logger.LogDebug("skip files check | download is private | {name}", torrent.Name);
-            return;
-        }
-        
-        IReadOnlyList<TorrentContent>? files = await _client.GetTorrentContentsAsync(hash);
-
-        if (files is null)
-        {
-            return;
-        }
-        
-        foreach (TorrentContent file in files)
-        {
-            if (!file.Index.HasValue)
-            {
-                continue;
-            }
-
-            if (file.Priority is TorrentContentPriority.Skip || _filenameEvaluator.IsValid(file.Name))
-            {
-                continue;
-            }
-            
-            _logger.LogInformation("unwanted file found | {file}", file.Name);
-            await _client.SetFilePriorityAsync(hash, file.Index.Value, TorrentContentPriority.Skip);
-        }
-    }
-
-    public override void Dispose()
-    {
-        _client.Dispose();
-    }
-    
-    private bool IsItemStuckAndShouldRemove(TorrentInfo torrent, bool isPrivate)
-    {
-        if (_queueCleanerConfig.StalledMaxStrikes is 0)
-        {
-            return false;
-        }
-        
-        if (_queueCleanerConfig.StalledIgnorePrivate && isPrivate)
-        {
-            // ignore private trackers
-            _logger.LogDebug("skip stalled check | download is private | {name}", torrent.Name);
-            return false;
-        }
-        
-        if (torrent.State is not TorrentState.StalledDownload and not TorrentState.FetchingMetadata
-            and not TorrentState.ForcedFetchingMetadata)
-        {
-            // ignore other states
-            return false;
-        }
-
-        return StrikeAndCheckLimit(torrent.Hash, torrent.Name);
-    }
-}