# YMhut Box changes

Imported from `MoeKoeMusic/MoeKoeMusic` commit
`4581660209c9cdd07669e8bd5bcbe136b7d91e02`. The `api` directory is the
repository's `MakcRe/KuGouMusicApi` submodule at commit
`06560e3e053bda1ab830750db6f645bab703f824`.

YMhut Box adds an internal Windows sidecar entry point and these local-only
controls:

- loopback-only random-port startup and a versioned JSON readiness message;
- a per-process authentication token and parent-process watchdog;
- authenticated health and graceful shutdown routes;
- a KuGou-host-only compatibility bridge used by the existing signed C# adapter;
- a two-minute allowlist cache limited to anonymous, public GET routes;
- relocatable production dependencies staged with pnpm's hoisted linker;
- quiet logging that does not print query strings, credentials, or response bodies.

The original API source remains under `api/`. Original project notices are in
`MOEKOE_README.md`, `MOEKOE_LICENSE`, `api/README.md`, and `api/LICENSE`.