POC: let public Comet hosts resolve SeriousSportSync events

[Monkfish1337]

Goal

Allow a hosted Comet operator (for example, a Midnight Ignite-style public instance) to enable SeriousSportSync once. Individual users then paste their private hosted SSS manifest into Comet and use Comet's centrally operated scrapers with their own debrid account. Users do not need to self-host Prowlarr, BitMagnet, or another scraper.

Implementation

• Resolve token-scoped SSS event IDs into title aliases, year, and event date.
• Feed those aliases into Comet's centrally configured title-search scrapers.
• Add fixture-token, exact-year, split-day, and event-date filtering.
• Revalidate cached rows and force a fresh scrape when stale rows are rejected.
• Add native SSS text searching to Comet's BitMagnet scraper.
• Keep SSS event IDs intact through debrid playback instead of sending them through the IMDb/Kitsu metadata path.
• Expose one optional per-user SSS manifest field.
• Require the operator to allow each hosted SSS domain through SERIOUSSPORTSYNC_ALLOWED_HOSTS.

Public-host model

The Comet operator configures public or private scraper backends once. An SSS user only needs:

1. an account on a hosted SSS service;
2. their tokenized SSS manifest URL;
3. their normal Comet/debrid configuration.

The SSS manifest remains per-user. The operator allowlist uses exact host and port entries, and Comet only requests the token-scoped search-context endpoint derived from that manifest.

ID-only forwarding sources such as Torrentio cannot search arbitrary sports titles and remain outside this first protocol. Title-search-capable Comet sources such as Zilean and BitMagnet can participate.

Live means test

The POC image ghcr.io/monkfish1337/comet:sss-poc overlays this branch on the official ghcr.io/g0ldyy/comet:latest runtime.

Verified locally with an SSS SummerSlam Sunday event:

• SSS event ID resolved to precise and broad title variants.
• Public Comet sources returned matching releases.
• Wrong-year and Saturday releases were rejected for the 2025 Sunday event.
• Existing stale cache rows were repaired without deleting the data volume.
• Torrent-only mode returned three playable torrent rows.
• TorBox mode returned three debrid rows, including a cached result.
• Cached TorBox playback returned HTTP 302 to a signed TorBox CDN URL.

No user API key or private manifest URL is stored server-side by this bridge; they remain encoded in the user's normal Comet manifest configuration.

Validation

• Focused Linux tests cover SSS resolution, config compatibility, scraper title queries, relevance filtering, stale-cache handling, and debrid playback metadata.
• The POC image build and focused test workflow pass on the fork.