db39cd2153
fix: stabilize media progress and cancel controls
2026-07-17 17:12:56 +03:30
f4b830414d
fix: harden audited persistence and download paths
2026-07-17 16:27:39 +03:30
0447d1cab7
fix(build): scope Tailwind scanning and remove dead Rust helper
...
Limit Tailwind source detection to the frontend and root HTML while preserving the CSS-defined theme. Remove redundant test-only nonce validation scaffolding so the Rust library builds without warnings.
2026-07-17 03:20:31 +03:30
513143d745
fix(release): harden packaged smoke cleanup
2026-07-17 02:35:36 +03:30
a8dc4fb447
fix(security): harden browser handoff boundaries
2026-07-17 02:05:41 +03:30
50c3da2f5d
fix(downloads): close media lifecycle cleanup gaps
...
Validate every Aria2 mirror URI, keep metadata cleanup errors truthful, and serialize media registration with lifecycle cancellation so abandoned tombstones cannot accumulate.
2026-07-17 01:03:52 +03:30
6ef911919d
fix(settings): harden settings and diagnostic controls
2026-07-17 00:39:26 +03:30
5144ecd39e
chore(deps): refresh packages and bundled engines
2026-07-17 00:03:15 +03:30
a56b859151
fix(downloads): preserve authenticated capture metadata
...
Keep Gmail attachment filenames and origin-scoped browser cookies intact through metadata redirects, while rejecting Google sign-in responses.\n\nFixes #21
2026-07-16 22:58:12 +03:30
469faed7b9
fix(downloads): harden add flow and URL validation
2026-07-16 22:20:12 +03:30
79ce0c18a1
fix(downloads): harden aria2 recovery lifecycle
2026-07-16 17:56:00 +03:30
d195a132b3
perf(downloads): scale playlist rows efficiently
2026-07-16 17:23:43 +03:30
feb5d8e87d
fix(downloads): harden playlist state and scrolling
2026-07-16 16:57:35 +03:30
a136fa832c
feat(downloads): support YouTube playlists
2026-07-16 16:07:00 +03:30
f3d0e0be13
fix(downloads): recover stalls and honor connection defaults ( #19 , #20 )
2026-07-16 14:28:59 +03:30
edeef0ac54
fix(startup): enforce consent before download handoffs
...
Gate clipboard, extension, and deep-link inputs until startup consent is resolved, and serialize extension readiness transitions so native prompts cannot race the app explanation. Identify consent by the build revision so same-version updates re-enter the consent boundary.
Requested by [this X post](https://x.com/ixabolfazl/status/2077356127763804450?s=20 ).
2026-07-15 21:48:00 +03:30
9f333618fc
fix(downloads): show total size after completion
2026-07-15 21:30:01 +03:30
ed54a048ab
fix(keychain): version startup consent policy
2026-07-15 21:21:35 +03:30
d2479f52be
fix(startup): restore keychain consent barrier
2026-07-15 21:09:45 +03:30
6e6ae51395
fix(downloads): preserve live progress across lifecycle edges
2026-07-15 20:50:46 +03:30
1d197432b2
feat(downloads): add live limits clipboard capture and byte progress
2026-07-15 20:35:05 +03:30
9917f29743
fix(build): gate platform-specific proxy helper
2026-07-15 12:49:40 +03:30
df3bc359c4
chore(release): prepare Firelink 1.1.0
2026-07-15 11:55:54 +03:30
57f132f53e
fix(metadata): decode URL-derived filenames
...
Decode URL path segments before sanitizing metadata filenames and preserve malformed escapes safely.
Fixes #18
2026-07-15 11:29:17 +03:30
52b00e5cb4
fix(keychain): gate credential-store startup access
2026-07-15 11:07:48 +03:30
8e02a61c3f
fix(downloads): preserve terminal startup state
2026-07-15 10:23:06 +03:30
82f2914077
fix: close post-release lifecycle state gaps
2026-07-15 10:13:53 +03:30
9224117d77
chore(deps): scope release-gate update to npm ( #16 )
...
Remove the unrelated Rust lockfile refresh from the prior dependency commit. Keep the Autoprefixer release-gate update scoped to package.json and package-lock.json. Refs #16 .
2026-07-15 09:43:19 +03:30
3c84b5c1a4
chore(deps): refresh compatible npm and Rust packages ( #16 )
...
Refresh Autoprefixer and compatible Rust transitive dependencies after the release hardening work. Refs #16 .
2026-07-15 09:40:23 +03:30
c34c489aef
fix(settings): preserve speed limiter units
...
Persist the selected display unit for disabled limits, preserve in-progress fractional input, and keep exact KiB-backed preset values visible.\n\nNo linked issue.
2026-07-15 09:19:19 +03:30
b81e8391e1
fix(release): harden speed limits and extension replay checks
2026-07-15 09:02:40 +03:30
6ff0047d6c
fix(release): make verifier RPC smoke resilient
...
Use OS-selected localhost ports with bounded bind retries and handle aria2c spawn failures without unhandled child-process errors.
Refs #3
2026-07-15 08:50:34 +03:30
4a3fece22b
fix(release): harden package and engine verifier cleanup
2026-07-15 08:40:12 +03:30
1da0fa7223
fix(security): harden credential and path boundaries
...
Preserve pending pairing tokens until credential-store migration succeeds, defer keychain access until frontend hydration, reject symlink and malformed ownership paths, and restrict metadata credentials to exact origins.
Refs #15
Refs #16
2026-07-15 08:23:43 +03:30
d6af4ee2b5
fix(extension): harden local handoff boundaries
2026-07-15 06:06:16 +03:30
2479ead4ed
fix(downloads): harden lifecycle race handling
...
Audit Assignment 06 lifecycle paths and preserve truthful state across ambiguous Aria2 resume failures. Clean up partial startup listener registration and prevent stale resume workers from leaking or releasing current permits.
2026-07-15 05:34:32 +03:30
80a29356e0
fix(tools): harden scheduler limits and logs
...
Guard scheduler system actions against pending work, serialize diagnostic log transitions, and keep speed-limit saves truthful after backend failures.\n\nNo linked issue was found for this audit.
2026-07-15 03:00:46 +03:30
45bbca0515
fix(settings): harden persisted settings and update checks
2026-07-15 02:25:53 +03:30
e35b1af731
fix(downloads): close audit lifecycle gaps
...
Prevent duplicate Add Window submissions and preserve discard confirmation.
Reject duplicate backend primary-path ownership and clear stale lifecycle progress.
2026-07-15 01:51:04 +03:30
19953a210e
fix(downloads): harden Add Window handoffs
2026-07-15 01:38:16 +03:30
76850f2433
fix(ui): harden main window interactions
2026-07-15 01:25:59 +03:30
0eee47b97f
chore(release): refresh cross-platform FFmpeg payloads
2026-07-15 00:11:04 +03:30
e8487ee71b
fix(downloads): harden lifecycle cancellation races
2026-07-15 00:10:56 +03:30
e07182fbf2
fix(downloads): harden queue and lifecycle synchronization
...
Serialize queue controls, make multi-item moves atomic, await stale enqueue cleanup, and guard late media and progress events. Add deterministic table sorting and regression coverage for worst-case lifecycle races.
2026-07-14 18:29:14 +03:30
2d9eed99d5
chore(deps): refresh packages after fallback hardening ( #16 )
...
Refresh the compatible npm and Rust dependency set after the metadata fallback hardening. Refs #16 .
2026-07-14 15:34:35 +03:30
80cf835060
fix(downloads): defer captured cookies for metadata probes ( #16 )
...
Fixes #16
2026-07-14 01:19:00 +03:30
c78a72a8d7
fix(downloads): harden aria2 resume lifecycle
2026-07-13 04:40:39 +03:30
df85a77987
fix(downloads): reconcile lost aria2 completion events
2026-07-13 04:21:38 +03:30
be2a98fbcd
fix(downloads): reconcile completed aria2 pause requests
2026-07-13 04:08:18 +03:30
fcfdffa6e0
fix(downloads): harden aria2 lifecycle synchronization
2026-07-13 03:31:41 +03:30
NimBold