Add SeriousSportSync sports event integration

[Monkfish1337]

Goal

Allow a hosted Comet operator to support SeriousSportSync (SSS), while each user supplies their own private SSS manifest and debrid configuration. SSS remains the installed sports catalog addon and forwards event stream requests to Comet, giving users centrally operated scrapers without requiring a self-hosted scraper stack.

SSS event IDs are not IMDb, TMDB, or Kitsu IDs, so Comet needs a small bridge to resolve an event into safe, token-scoped search context before scraping.

What this adds

• A per-user seriousSportsSyncManifestUrl setting in Comet's configuration UI and manifest model.
• An operator-controlled SERIOUSSPORTSYNC_ALLOWED_HOSTS exact host:port allowlist.
• Token-scoped SSS search-context resolution for title aliases, event year, and event date.
• Sports-aware title searching, including fixture names, exact-year matching, split-day events such as Saturday/Sunday, and date mismatch rejection.
• Revalidation of cached sports results, with a fresh scrape when stale cached rows are rejected.
• Native BitMagnet text search for SSS event titles.
• Preservation of SSS event IDs through cached debrid playback, avoiding IMDb/Kitsu metadata lookup paths.
• Integration documentation and focused tests.

Title-search scrapers can participate in this flow. Sources that only forward external IDs, such as Torrentio, cannot search these SSS-specific event IDs directly.

User flow

1. Copy the private SSS manifest from the user's SSS account.
2. Configure Comet with that manifest plus the user's debrid service.
3. Paste the generated Comet manifest back into the SSS account.
4. Install SSS in Nuvio/Stremio. SSS supplies catalogs; Comet supplies streams and playback in the background.

Comet intentionally remains stream-only, so installing its manifest alone does not show SSS catalogs.

Security model

• The Comet operator explicitly allows each SSS host:port; arbitrary user-supplied hosts are rejected.
• Event metadata comes from the token-scoped SSS search-context endpoint, not a public global lookup.
• The SSS URL remains part of the user's normal encoded Comet manifest configuration; this adds no separate server-side credential store.

Validation

The integration was exercised end-to-end against live SSS, BitMagnet, and TorBox test services:

• An exact WWE SummerSlam 2025 Sunday event returned three relevant torrent rows with no wrong-year or wrong-day results.
• A stale cached result set was rejected and repaired by a fresh scrape.
• The same event returned three cached TorBox rows.
• Cached debrid playback returned an HTTP 302 redirect to a signed TorBox CDN stream.

Focused Linux tests cover configuration compatibility, SSS resolution, scraper behavior, sports filtering, stale-cache refresh, orchestration, and debrid playback. The fork's validation runs passed:

• https://github.com/Monkfish1337/comet/actions/runs/31816095597
• https://github.com/Monkfish1337/comet/actions/runs/31816098888

[coderabbitai]

Important

Review skipped

Draft detected.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: b4c81b0a-6e2f-44c9-b7e3-80e83948d60f

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}