feat: standalone mode

.github/workflows/release.yml

@@ -28,6 +28,34 @@ jobs:
           path: foreseer-desktop
           fetch-depth: 0
 
+      - name: Read pinned Foreseerr revision
+        id: foreseerr
+        shell: bash
+        run: |
+          revision="$(tr -d '[:space:]' < foreseer-desktop/foreseerr.rev)"
+          test -n "${revision}"
+          echo "revision=${revision}" >> "${GITHUB_OUTPUT}"
+
+      - name: Checkout pinned Foreseerr
+        uses: actions/checkout@v4
+        with:
+          repository: selmant/foreseerr
+          ref: ${{ steps.foreseerr.outputs.revision }}
+          path: SeerrSuggestArr
+          submodules: recursive
+
+      - name: Install pinned Node
+        uses: actions/setup-node@v4
+        with:
+          node-version-file: foreseer-desktop/node.rev
+
+      - name: Validate release pins
+        working-directory: foreseer-desktop
+        shell: bash
+        env:
+          FORESEERR_DIR: ${{ github.workspace }}/SeerrSuggestArr
+        run: ./scripts/check-release-pins.sh
+
       - name: Read pinned Jellium revision
         id: jellium
         shell: bash
@@ -44,6 +72,24 @@ jobs:
           path: jellium-desktop
           submodules: recursive
 
+      - name: Audit pinned runtime boundary and protocol contracts
+        working-directory: foreseer-desktop
+        shell: bash
+        env:
+          JELLIUM_DIR: ${{ github.workspace }}/jellium-desktop
+          FORESEERR_DIR: ${{ github.workspace }}/SeerrSuggestArr
+        run: |
+          set -euo pipefail
+          ./scripts/boundary-audit.sh
+          node -e '
+            const fs = require("fs");
+            const a = JSON.parse(fs.readFileSync(process.env.FORESEERR_DIR + "/protocol/protocol-v1.json"));
+            const b = JSON.parse(fs.readFileSync("protocol/protocol-v1.json"));
+            if (JSON.stringify(a) !== JSON.stringify(b)) throw new Error("Foreseerr protocol fixture differs from desktop fixture");
+          '
+          grep -q 'FORESEERR_DESKTOP_READY' "$FORESEERR_DIR/server/index.ts"
+          grep -q 'protocolVersion: 1' "$FORESEERR_DIR/server/index.ts"
+
       - name: Install Rust
         uses: dtolnay/rust-toolchain@stable
 
@@ -98,6 +144,12 @@ jobs:
               print "cd /workspace/jellium-desktop"
               next
             }
+            $0 == "# Desktop integration" {
+              print "# Bundled Foreseerr + Node runtime (resolved relative to the executable)."
+              print "mkdir -p \"$APPDIR/usr/bin/resources\""
+              print "cp -a /workspace/foreseer-desktop/resources/. \"$APPDIR/usr/bin/resources/\""
+              print
+            }
             {
               # POSIX awk replacement strings do not support capture-group
               # backreferences. Every Jellium executable-name occurrence in
@@ -158,17 +210,44 @@ jobs:
           mkdir -p .build/appimage dist
 
           docker run --rm \
+            --env FORESEERR_DIR=/workspace/SeerrSuggestArr \
+            --env FORESEERR_NODE_BIN=/opt/foreseer-node/bin/node \
             --env VERSION="${VERSION}" \
             --volume "${GITHUB_WORKSPACE}:/workspace" \
             --volume "${GITHUB_WORKSPACE}/.build/appimage:/build" \
             --volume "${GITHUB_WORKSPACE}/dist:/host-output" \
             foreseer-desktop-appimage:ci \
-            /workspace/jellium-desktop/dev/linux/appimage/container-build.sh
+            sh -ec '
+              set -eu
+              node_version="$(tr -d "[:space:]" < /workspace/foreseer-desktop/node.rev)"
+              architecture="$(uname -m)"
+              case "$architecture" in
+                x86_64) node_arch=x64 ;;
+                aarch64) node_arch=arm64 ;;
+                *) echo "unsupported Node architecture: $architecture" >&2; exit 1 ;;
+              esac
+              wget -q -O /tmp/node.tar.xz "https://nodejs.org/dist/$node_version/node-$node_version-linux-$node_arch.tar.xz"
+              mkdir -p /opt/foreseer-node
+              tar -xJf /tmp/node.tar.xz --strip-components=1 -C /opt/foreseer-node
+              corepack enable
+              corepack prepare pnpm@10.24.0 --activate
+              /workspace/foreseer-desktop/scripts/stage-foreseerr.sh /workspace/foreseer-desktop/resources
+              /workspace/jellium-desktop/dev/linux/appimage/container-build.sh
+            '
 
           sudo chown -R "$(id -u):$(id -g)" dist .build jellium-desktop/.cache || true
           test -f "dist/ForeseerDesktop-${VERSION}-x86_64.AppImage"
           chmod +x "dist/ForeseerDesktop-${VERSION}-x86_64.AppImage"
 
+      - name: Verify Linux runtime payload
+        shell: bash
+        run: |
+          set -euo pipefail
+          test -f foreseer-desktop/resources/foreseerr/launcher.js
+          test -x foreseer-desktop/resources/node/node
+          test -f foreseer-desktop/resources/THIRD_PARTY_NOTICES.txt
+          strings "dist/ForeseerDesktop-${{ steps.version.outputs.version }}-x86_64.AppImage" | grep -q 'foreseerr/launcher.js'
+
       - name: Upload Linux artifact
         uses: actions/upload-artifact@v4
         with:
@@ -187,6 +266,41 @@ jobs:
           path: foreseer-desktop
           fetch-depth: 0
 
+      - name: Read pinned Foreseerr revision
+        id: foreseerr
+        shell: pwsh
+        run: |
+          $revision = (Get-Content foreseer-desktop/foreseerr.rev -Raw).Trim()
+          if (-not $revision) { throw "foreseerr.rev is empty" }
+          "revision=$revision" >> $env:GITHUB_OUTPUT
+
+      - name: Checkout pinned Foreseerr
+        uses: actions/checkout@v4
+        with:
+          repository: selmant/foreseerr
+          ref: ${{ steps.foreseerr.outputs.revision }}
+          path: SeerrSuggestArr
+          submodules: recursive
+
+      - name: Install pinned Node
+        uses: actions/setup-node@v4
+        with:
+          node-version-file: foreseer-desktop/node.rev
+
+      - name: Stage bundled Foreseerr runtime
+        shell: pwsh
+        env:
+          FORESEERR_DIR: ${{ github.workspace }}\SeerrSuggestArr
+        run: |
+          corepack enable
+          corepack prepare pnpm@10.24.0 --activate
+          $bash = Join-Path $env:ProgramFiles 'Git\bin\bash.exe'
+          if (-not (Test-Path $bash)) { throw "Git Bash is required to stage the runtime" }
+          & $bash -lc 'cd "$(cygpath -u "$GITHUB_WORKSPACE")"; export FORESEERR_DIR="$(cygpath -u "$FORESEERR_DIR")"; ./foreseer-desktop/scripts/stage-foreseerr.sh ./bundle/resources'
+          if ($LASTEXITCODE -ne 0) { exit $LASTEXITCODE }
+          if (-not (Test-Path bundle/resources/foreseerr/launcher.js)) { throw "Foreseerr runtime was not staged" }
+          if (-not (Test-Path bundle/resources/node/node.exe)) { throw "Node runtime was not staged" }
+
       - name: Read pinned Jellium revision
         id: jellium
         shell: pwsh
@@ -205,6 +319,14 @@ jobs:
           path: jellium-desktop
           submodules: recursive
 
+      - name: Audit pinned runtime boundary and protocol contracts
+        shell: pwsh
+        run: |
+          $bash = Join-Path $env:ProgramFiles 'Git\bin\bash.exe'
+          if (-not (Test-Path $bash)) { throw "Git Bash is required for the boundary audit" }
+          & $bash -lc 'cd "$(cygpath -u "$GITHUB_WORKSPACE")/foreseer-desktop"; export JELLIUM_DIR="$(cygpath -u "$GITHUB_WORKSPACE")/jellium-desktop"; export FORESEERR_DIR="$(cygpath -u "$GITHUB_WORKSPACE")/SeerrSuggestArr"; ./scripts/boundary-audit.sh; node -e '\''const fs=require("fs"); const a=JSON.parse(fs.readFileSync(process.env.FORESEERR_DIR + "/protocol/protocol-v1.json")); const b=JSON.parse(fs.readFileSync("protocol/protocol-v1.json")); if(JSON.stringify(a)!==JSON.stringify(b)) throw new Error("Foreseerr protocol fixture differs from desktop fixture");'\''; grep -q FORESEERR_DESKTOP_READY "$FORESEERR_DIR/server/index.ts"; grep -q "protocolVersion: 1" "$FORESEERR_DIR/server/index.ts"'
+          if ($LASTEXITCODE -ne 0) { exit $LASTEXITCODE }
+
       - name: Install Rust
         uses: dtolnay/rust-toolchain@stable
 
@@ -300,6 +422,9 @@ jobs:
           if (-not (Test-Path bundle/foreseer-desktop.exe)) {
             throw "foreseer-desktop.exe was not staged"
           }
+          if (-not (Test-Path bundle/resources/THIRD_PARTY_NOTICES.txt)) {
+            throw "bundled runtime notices were not staged"
+          }
 
           Compress-Archive -Path bundle/* -DestinationPath $archive -Force
 

.gitignore

@@ -1,4 +1,7 @@
 /target
+/logs
+/resources
+*.AppImage
 **/*.rs.bk
 .idea/
 .vscode/

CHANGELOG.md

@@ -1,5 +1,17 @@
 # Changelog
 
+## Unreleased
+
+### Fixed
+
+- Keep the request modal open when picking a quality profile, root folder, or
+  other native `<select>` option. The in-page dropdown overlay was reaching the
+  modal's click-outside handler (browser-native popups do not).
+
+- Adopt a new Jellyfin server Id after the media server is reinstalled, instead
+  of stalling on ConnectionManager `ServerMismatch` because cached credentials
+  and the `/login` hash gate blocked session bootstrap.
+
 ## 0.2.9 — 2026-08-14
 
 ### Fixed

Cargo.toml

@@ -27,6 +27,15 @@ sha2 = "0.10"
 directories = "6"
 url = "2"
 tracing = "0.1"
+libc = "0.2"
+
+[target.'cfg(windows)'.dependencies]
+windows-sys = { version = "0.61", features = [
+  "Win32_Foundation",
+  "Win32_Security",
+  "Win32_System_JobObjects",
+  "Win32_System_Threading",
+] }
 
 [dev-dependencies]
 tempfile = "3"

README.md

@@ -12,10 +12,9 @@ See [LICENSE](LICENSE).
 
 ## How this fits the Foreseer product
 
-Foreseer Desktop is an optional client for the hosted
-[Foreseerr](https://github.com/selmant/foreseerr) application. It does not
-replace or bundle the web app, run a separate request server, or own the user's
-media-account configuration.
+Foreseer Desktop defaults to standalone mode: it starts a bundled Foreseerr
+server on an ephemeral `127.0.0.1` port and owns its local data. Remote mode
+remains available for an existing Foreseerr deployment.
 
 | Component | Owns |
 | --- | --- |
@@ -63,15 +62,17 @@ Foreseer Desktop persists its configuration in a standard OS config directory:
 
 ```json
 {
-  "server_url": "https://foreseer.example.com",
-  "allow_insecure_http": false
+  "schema_version": 2,
+  "mode": "standalone",
+  "remote": { "server_url": "https://foreseer.example.com", "allow_insecure_http": false },
+  "standalone": { "cache_limit_bytes": 2147483648 }
 }
 ```
 
 ### CLI Commands & Environment Variables
 
 ```sh
-# Run with default or saved server URL:
+# Run the saved standalone or remote mode:
 cargo run
 
 # Launch the graphical server setup GUI:
@@ -80,16 +81,45 @@ cargo run -- --setup
 # View current configuration and file location:
 cargo run -- --show-config
 
-# Set a new default server URL:
-cargo run -- --set-url https://foreseer.example.com
+# Switch modes:
+cargo run -- --standalone
+cargo run -- --remote https://foreseer.example.com
 
-# Allow HTTP (non-HTTPS) server URL:
-cargo run -- --set-url http://192.168.1.50:5055 --allow-http
+# Set the combined transient cache budget (images + CEF HTTP cache):
+cargo run -- --cache-limit 2147483648
+
+# HTTP or HTTPS — the URL scheme is the choice:
+cargo run -- --set-url http://192.168.1.50:5055
 
 # Temporary environment variable override (does not modify config.json):
 FORESEER_URL=https://foreseer.example cargo run
 ```
 
+### Standalone data and recovery
+
+Standalone Foreseerr data is separate from the Jellium profile:
+
+```text
+<Foreseer config>/standalone/
+  settings.json
+  db/db.sqlite3
+  logs/
+  state/
+  backups/
+```
+
+Before starting a bundled Foreseerr version different from the last verified
+standalone version, the desktop creates a timestamped backup of `settings.json`
+and the SQLite database (including WAL/SHM files). Caches and logs are never
+included in those backups, and only the three newest automatic backups are
+kept.
+
+If migration or startup fails, use the recovery screen’s **Open Logs** action,
+then stop the desktop before attempting manual recovery. Do not copy an older
+database over a database while a newer bundled binary is running: automatic
+restore is intentionally not implemented because schema downgrades are unsafe.
+Keep the failed database, logs, and backup together until recovery is complete.
+
 ## Test / lint
 
 ```sh