79ce0c18a1
fix(downloads): harden aria2 recovery lifecycle
2026-07-16 17:56:00 +03:30
d195a132b3
perf(downloads): scale playlist rows efficiently
2026-07-16 17:23:43 +03:30
feb5d8e87d
fix(downloads): harden playlist state and scrolling
2026-07-16 16:57:35 +03:30
a136fa832c
feat(downloads): support YouTube playlists
2026-07-16 16:07:00 +03:30
f3d0e0be13
fix(downloads): recover stalls and honor connection defaults ( #19 , #20 )
2026-07-16 14:28:59 +03:30
edeef0ac54
fix(startup): enforce consent before download handoffs
...
Gate clipboard, extension, and deep-link inputs until startup consent is resolved, and serialize extension readiness transitions so native prompts cannot race the app explanation. Identify consent by the build revision so same-version updates re-enter the consent boundary.
Requested by [this X post](https://x.com/ixabolfazl/status/2077356127763804450?s=20 ).
2026-07-15 21:48:00 +03:30
9f333618fc
fix(downloads): show total size after completion
2026-07-15 21:30:01 +03:30
ed54a048ab
fix(keychain): version startup consent policy
2026-07-15 21:21:35 +03:30
d2479f52be
fix(startup): restore keychain consent barrier
2026-07-15 21:09:45 +03:30
6e6ae51395
fix(downloads): preserve live progress across lifecycle edges
2026-07-15 20:50:46 +03:30
1d197432b2
feat(downloads): add live limits clipboard capture and byte progress
2026-07-15 20:35:05 +03:30
9917f29743
fix(build): gate platform-specific proxy helper
2026-07-15 12:49:40 +03:30
df3bc359c4
chore(release): prepare Firelink 1.1.0
2026-07-15 11:55:54 +03:30
57f132f53e
fix(metadata): decode URL-derived filenames
...
Decode URL path segments before sanitizing metadata filenames and preserve malformed escapes safely.
Fixes #18
2026-07-15 11:29:17 +03:30
52b00e5cb4
fix(keychain): gate credential-store startup access
2026-07-15 11:07:48 +03:30
8e02a61c3f
fix(downloads): preserve terminal startup state
2026-07-15 10:23:06 +03:30
82f2914077
fix: close post-release lifecycle state gaps
2026-07-15 10:13:53 +03:30
9224117d77
chore(deps): scope release-gate update to npm ( #16 )
...
Remove the unrelated Rust lockfile refresh from the prior dependency commit. Keep the Autoprefixer release-gate update scoped to package.json and package-lock.json. Refs #16 .
2026-07-15 09:43:19 +03:30
3c84b5c1a4
chore(deps): refresh compatible npm and Rust packages ( #16 )
...
Refresh Autoprefixer and compatible Rust transitive dependencies after the release hardening work. Refs #16 .
2026-07-15 09:40:23 +03:30
c34c489aef
fix(settings): preserve speed limiter units
...
Persist the selected display unit for disabled limits, preserve in-progress fractional input, and keep exact KiB-backed preset values visible.\n\nNo linked issue.
2026-07-15 09:19:19 +03:30
b81e8391e1
fix(release): harden speed limits and extension replay checks
2026-07-15 09:02:40 +03:30
6ff0047d6c
fix(release): make verifier RPC smoke resilient
...
Use OS-selected localhost ports with bounded bind retries and handle aria2c spawn failures without unhandled child-process errors.
Refs #3
2026-07-15 08:50:34 +03:30
4a3fece22b
fix(release): harden package and engine verifier cleanup
2026-07-15 08:40:12 +03:30
1da0fa7223
fix(security): harden credential and path boundaries
...
Preserve pending pairing tokens until credential-store migration succeeds, defer keychain access until frontend hydration, reject symlink and malformed ownership paths, and restrict metadata credentials to exact origins.
Refs #15
Refs #16
2026-07-15 08:23:43 +03:30
d6af4ee2b5
fix(extension): harden local handoff boundaries
2026-07-15 06:06:16 +03:30
2479ead4ed
fix(downloads): harden lifecycle race handling
...
Audit Assignment 06 lifecycle paths and preserve truthful state across ambiguous Aria2 resume failures. Clean up partial startup listener registration and prevent stale resume workers from leaking or releasing current permits.
2026-07-15 05:34:32 +03:30
80a29356e0
fix(tools): harden scheduler limits and logs
...
Guard scheduler system actions against pending work, serialize diagnostic log transitions, and keep speed-limit saves truthful after backend failures.\n\nNo linked issue was found for this audit.
2026-07-15 03:00:46 +03:30
45bbca0515
fix(settings): harden persisted settings and update checks
2026-07-15 02:25:53 +03:30
e35b1af731
fix(downloads): close audit lifecycle gaps
...
Prevent duplicate Add Window submissions and preserve discard confirmation.
Reject duplicate backend primary-path ownership and clear stale lifecycle progress.
2026-07-15 01:51:04 +03:30
19953a210e
fix(downloads): harden Add Window handoffs
2026-07-15 01:38:16 +03:30
76850f2433
fix(ui): harden main window interactions
2026-07-15 01:25:59 +03:30
0eee47b97f
chore(release): refresh cross-platform FFmpeg payloads
2026-07-15 00:11:04 +03:30
e8487ee71b
fix(downloads): harden lifecycle cancellation races
2026-07-15 00:10:56 +03:30
e07182fbf2
fix(downloads): harden queue and lifecycle synchronization
...
Serialize queue controls, make multi-item moves atomic, await stale enqueue cleanup, and guard late media and progress events. Add deterministic table sorting and regression coverage for worst-case lifecycle races.
2026-07-14 18:29:14 +03:30
2d9eed99d5
chore(deps): refresh packages after fallback hardening ( #16 )
...
Refresh the compatible npm and Rust dependency set after the metadata fallback hardening. Refs #16 .
2026-07-14 15:34:35 +03:30
80cf835060
fix(downloads): defer captured cookies for metadata probes ( #16 )
...
Fixes #16
2026-07-14 01:19:00 +03:30
c78a72a8d7
fix(downloads): harden aria2 resume lifecycle
2026-07-13 04:40:39 +03:30
df85a77987
fix(downloads): reconcile lost aria2 completion events
2026-07-13 04:21:38 +03:30
be2a98fbcd
fix(downloads): reconcile completed aria2 pause requests
2026-07-13 04:08:18 +03:30
fcfdffa6e0
fix(downloads): harden aria2 lifecycle synchronization
2026-07-13 03:31:41 +03:30
9805c9288a
fix(downloads): harden aria2 recovery and resume lifecycle
2026-07-13 00:35:09 +03:30
dad5b7bc5e
fix(portable): harden persistence and release paths ( #15 )
...
Preserve legacy source data when portable sanitization cannot replace it, reject malformed settings without panicking, and make portable pairing regeneration durable before UI state changes.\n\nMake the packaged smoke assertion tolerate slow WebView startup and clarify AppImage storage behavior.\n\nRefs #15
2026-07-13 00:09:09 +03:30
f441c687f0
fix(security): redact secrets from portable errors ( #15 )
...
Sanitize lastError at the portable SQLite boundary using the shared redactor.\nCover spaced credentials and non-HTTP URL queries while preserving standard-mode diagnostics.\n\nRefs #15
2026-07-12 23:50:13 +03:30
a0f44b79ad
feat(portable): add secure Windows portable release ( #15 )
...
Implement marker-based portable storage, portable WebView and log paths, secure queue and migration sanitization, and Windows portable ZIP validation while preserving the NSIS installer path.
Refs #15
2026-07-12 23:08:56 +03:30
56b4c9f511
fix(release): extract RPM packages with bsdtar
2026-07-12 11:31:52 +03:30
c1fa87b953
fix(release): parse modern Debian package listings
2026-07-12 11:09:15 +03:30
c7ec8cd666
chore(release): prepare Firelink 1.0.4
2026-07-12 10:48:00 +03:30
9133e3b05b
fix(downloads): harden release-critical transfer paths
2026-07-12 07:55:47 +03:30
5bbee12602
feat(release): add verified Linux packages
2026-07-12 06:03:54 +03:30
7894c05bba
fix(ui): keep dialogs clear of window controls
2026-07-11 21:52:01 +03:30
NimBold