debont80
eb53de2ea5
Ship a smaller installer that no longer carries ffmpeg.exe/ffprobe.exe (the bulk of its size). On first run they are downloaded from a pinned upstream archive (gyan 8.1.2), verified against a pinned SHA-256, and unpacked with the OS tar.exe into the managed userData/bin dir -- the same place as the self-updating yt-dlp, so they survive app updates and portable re-extraction. A hard onboarding gate blocks the app until they are present, with a "locate existing ffmpeg" folder-picker fallback for offline machines and a Repair action in Settings > About. The updater's streaming/checksum/redirect/idle-timeout download loop is extracted to lib/verifiedDownload.streamVerifiedFile and shared by both the app-installer download and the ffmpeg fetch; the updater's public behaviour and error strings are unchanged (its boundary tests still pass). No new npm dependency: extraction uses the System32 bsdtar resolved by absolute path (audit F3). Note: this commit also carries pre-existing, in-progress aria2c/network and updater-token work that was already uncommitted in the working tree and is entangled with the above in shared files (updater.ts, ipc.ts, preload/index.ts, mockApi.ts, shared/ipc.ts, plus the settings/network files and aria2c.exe). It was not cleanly separable by path, so it is included here rather than split out. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
19 lines
417 B
Plaintext
19 lines
417 B
Plaintext
node_modules
|
|
out
|
|
dist
|
|
*.log
|
|
.DS_Store
|
|
*.tsbuildinfo
|
|
|
|
# Local screen-capture frames (not source)
|
|
.frames/
|
|
|
|
# Secrets — never commit
|
|
.gitea-token
|
|
# Retired: no longer read by the build (baked update token removed), but the
|
|
# local file still holds a live token until it's revoked — keep it ignored.
|
|
.update-token
|
|
|
|
# VS Code user settings (workspace settings/.vscode/launch.json are committed)
|
|
.vscode/settings.json
|