YMhut-box-C-/third_party/MoeKoeMusic/YMhut_PATCHES.md

YMhut Box changes

Imported from MoeKoeMusic/MoeKoeMusic commit 4581660209c9cdd07669e8bd5bcbe136b7d91e02. The api directory is the repository's MakcRe/KuGouMusicApi submodule at commit 06560e3e053bda1ab830750db6f645bab703f824.

YMhut Box adds an internal Windows sidecar entry point and these local-only controls:

• loopback-only random-port startup and a versioned JSON readiness message;
• a per-process authentication token and parent-process watchdog;
• authenticated health and graceful shutdown routes;
• a KuGou-host-only compatibility bridge used by the existing signed C# adapter;
• a two-minute allowlist cache limited to anonymous, public GET routes;
• relocatable production dependencies staged with pnpm's hoisted linker;
• quiet logging that does not print query strings, credentials, or response bodies.

The original API source remains under api/. Original project notices are in MOEKOE_README.md, MOEKOE_LICENSE, api/README.md, and api/LICENSE.