disable express static caching to resolve stale UI on app updates

.gitignore

@@ -1,7 +1,6 @@
-# Dependencies
 node_modules/
+package-lock.json
 
-# Build outputs
 dist/
 dist-build/
 temp-validation-extract/
@@ -10,37 +9,30 @@ manifest.json
 integrity-report.json
 validation-report.json
 
-# Rust & Tauri
 src-tauri/target/
 
-# Encrypted files (build-time only)
 config/encrypted-credentials.json
 
-# Sensitive files
 credentials.json
 .env
 *.key
 *.pem
 
-# OS files
 .DS_Store
 Thumbs.db
 desktop.ini
 
-# IDE
 .vscode/
 .idea/
 *.swp
 *.swo
 *~
 
-# Logs
 *.log
 npm-debug.log*
 yarn-debug.log*
 yarn-error.log*
 
-# Temporary files
 *.tmp
 *.temp
 download-temp.zip

DOCUEMENTATION/CLEAR.md

@@ -1,13 +0,0 @@
-taskkill /F /IM node.exe -ErrorAction SilentlyContinue
-taskkill /F /IM vyla-home.exe -ErrorAction SilentlyContinue
-
-Remove-Item -Recurse -Force "$env:APPDATA\com.vyla.home" -ErrorAction SilentlyContinue
-Remove-Item -Recurse -Force "$env:APPDATA\vyla-home" -ErrorAction SilentlyContinue
-
-Remove-Item -Force "$env:USERPROFILE\Downloads\vyla-*-debug*.log" -ErrorAction SilentlyContinue
-
-Remove-Item -Recurse -Force "src-tauri\target" -ErrorAction SilentlyContinue
-Remove-Item -Recurse -Force "dist-build" -ErrorAction SilentlyContinue
-Remove-Item -Force "update-payload.zip" -ErrorAction SilentlyContinue
-Remove-Item -Force "manifest.json" -ErrorAction SilentlyContinue
-Remove-Item -Force "validation-report.json" -ErrorAction SilentlyContinue

DOCUEMENTATION/CLEAR.powershell

@@ -0,0 +1,52 @@
+taskkill /F /IM "node.exe" 2>$null
+taskkill /F /IM "vyla-home.exe" 2>$null
+taskkill /F /IM "Vyla Home.exe" 2>$null
+taskkill /F /IM "msedgewebview2.exe" 2>$null
+
+Stop-Process -Name "node", "vyla-home", "Vyla Home", "msedgewebview2" -Force -ErrorAction SilentlyContinue
+
+$pathsToDelete = @(
+    "$env:APPDATA\com.vyla.home",
+    "$env:APPDATA\vyla-home",
+    "$env:APPDATA\Vyla Home",
+    "$env:LOCALAPPDATA\com.vyla.home",
+    "$env:LOCALAPPDATA\vyla-home",
+    "$env:LOCALAPPDATA\Vyla Home",
+    "$env:LOCALAPPDATA\EBWebView",
+    "$env:LOCALAPPDATA\Programs\Vyla Home",
+    "$env:LOCALAPPDATA\Programs\vyla-home",
+    "$env:USERPROFILE\AppData\LocalLow\com.vyla.home",
+    "$env:USERPROFILE\AppData\LocalLow\vyla-home",
+    "$env:USERPROFILE\AppData\LocalLow\Vyla Home",
+    "$env:USERPROFILE\.vyla-home",
+    "$env:ProgramFiles\Vyla Home",
+    "${env:ProgramFiles(x86)}\Vyla Home",
+    "$env:USERPROFILE\Desktop\Vyla Home.lnk",
+    "$env:PUBLIC\Desktop\Vyla Home.lnk",
+    "$env:APPDATA\Microsoft\Windows\Start Menu\Programs\Vyla Home.lnk",
+    "$env:PROGRAMDATA\Microsoft\Windows\Start Menu\Programs\Vyla Home.lnk",
+    "$env:USERPROFILE\Downloads\vyla-*-debug*.log",
+    "$env:USERPROFILE\Downloads\*-debug.log",
+    "src-tauri\target",
+    "dist-build",
+    "temp-validation-extract",
+    "dist",
+    "frontend",
+    "player",
+    "auth-proxy",
+    "stream-api",
+    "logs",
+    "*.log",
+    "download-temp.zip",
+    "update-payload.zip",
+    "manifest.json",
+    "validation-report.json",
+    "config\encrypted-credentials.json",
+    "config\credentials.json"
+)
+
+foreach ($path in $pathsToDelete) {
+    if (Test-Path $path) {
+        Remove-Item -Recurse -Force $path -ErrorAction SilentlyContinue
+    }
+}

DOCUEMENTATION/FORDEV.md

@@ -0,0 +1,25 @@
+How to start this without releasing it.
+
+Package everything into a local payload zip:
+
+```powershell
+npm run build:payload
+```
+
+Start the Tauri app in development mode:
+
+```powershell
+npm run dev
+```
+
+To release it, run:
+
+```powershell
+npm run release:full
+```
+
+Fixing os error 32
+
+```powershell
+Stop-Process -Name "vyla-home", "node", "cargo" -Force -ErrorAction SilentlyContinue
+```

DOCUEMENTATION/LOGS.md

@@ -0,0 +1,6 @@
+Logs of node and rust can be found here:
+
+%APPDATA%\vyla-home\vyla-home-files\logs
+
+**Full path:**
+C:\Users\<YourUsername>\AppData\Roaming\vyla-home\vyla-home-files\logs\

README.md

@@ -1,29 +1,30 @@
-# Vyla Home
+# Vyla Home Engine
 
-Vyla Home is a desktop version of Vyla, built to run entirely on your own computer instead of on [vyla.cc](https://vyla.cc).
+A high-performance, locally executed environment for the Vyla media ecosystem. Built on the Tauri v2 framework, Vyla Home acts as a secure native bridge between local microservices and a lightweight WebView2 rendering engine.
 
-## Why this exists
+## Architecture & Security
 
-Running Vyla as a hosted website has been a constant source of stress. Hosting providers routinely block or throttle traffic coming from data centers, which is exactly where most affordable hosting lives. Every workaround for that involves paid infrastructure — residential proxies, dedicated IPs, premium tiers — that isn't realistic to keep funding long-term.
+Vyla Home is designed around complete local isolation to maximize speed, privacy, and reliability:
 
-On top of that, there's the standing fear that comes with depending on someone else's infrastructure: a provider changes their policy, a server gets flagged, an account gets suspended, and everything just stops working with no warning. That uncertainty has genuinely cost some sleep. Waking up wondering if the whole project got wiped overnight isn't a sustainable way to build something.
+- **Zero External Reverse-Proxies**: All routing, API endpoints, and authentication middleware run strictly on local loopback interfaces (`127.0.0.1`), eliminating ISP throttling and data-center IP bans.
+- **Native Memory Management**: Background Node.js lifecycle states are managed directly via OS-level memory handles (bypassing slow shell wrappers) for instant startup and teardown.
+- **Cryptographic Obfuscation**: Client configurations and credentials are secured on-disk via hardware-derived AES-256-GCM encryption.
+- **Automated Integrity Patching**: Payloads are dynamically verified using SHA-256 checksums and patched in-memory via C-level buffer scans.
 
-Vyla Home is the answer to that. Instead of fighting hosting providers forever, the app runs locally on your own machine. No data center traffic to block. No hosting bills. No one else's finger on the switch.
+## Build Requirements
 
-## What it actually is
+- [Rust](https://www.rust-lang.org/) (Latest Stable)
+- [Node.js](https://nodejs.org/) (v20+ LTS)
+- Tauri CLI (`npm install -g @tauri-apps/cli`)
 
-Vyla Home packages up the same player, streaming, and live-sports features as the website, wrapped in a small desktop app. When you open it:
+## Compilation
 
-- It grabs the latest version automatically
-- It starts everything up locally on your computer
-- The interface opens in its own window, just like the website did
+The build pipeline has been optimized with Fat LTO and aggressive panic aborts to generate the smallest possible binary footprint.
 
-Everything runs for you, on your machine, for your own personal use.
+```bash
+npm install
 
-## What this is not
+npm run build:payload
 
-This isn't a public service or a way to redistribute anything. It's a personal media player for personal use — think of it as watching things you already have access to, through your own local player, instead of a public streaming platform. Nothing here is intended to be shared, resold, or run as a service for other people.
-
-## Status
-
-Might not be actively worked on. Expect various bugs — this is a solo project built to solve a real problem, not a polished commercial product.
+npm run build
+```

bin/node-v22.14.0.marker

@@ -0,0 +1 @@
+v22.14.0

build-pipeline.js

@@ -20,11 +20,13 @@ const REPO_CONFIG = {
 };
 
 function clonePrivateRepo(repoConfig, targetDir) {
-  const repoUrl = `https://gitlab.com/${GITLAB_GROUP}/${repoConfig.name}.git`;
+  const token = process.env.GITLAB_TOKEN || process.env.VYLA_GITLAB_TOKEN;
+  const auth = token ? `oauth2:${token}@` : '';
+  const repoUrl = `https://${auth}gitlab.com/${GITLAB_GROUP}/${repoConfig.name}.git`;
 
   try {
     if (fs.existsSync(targetDir)) {
-      fs.rmSync(targetDir, { recursive: true, force: true });
+      fs.rmSync(targetDir, { recursive: true, force: true, maxRetries: 3, retryDelay: 100 });
     }
 
     execSync(`git clone --depth 1 --branch ${repoConfig.branch} ${repoUrl} ${targetDir}`, {
@@ -332,6 +334,9 @@ async function build() {
   }
 
   const zipPath = path.join(__dirname, 'update-payload.zip');
+  if (fs.existsSync(zipPath)) {
+    fs.rmSync(zipPath, { force: true });
+  }
   zip.writeZip(zipPath);
 
   const checksum = validatePayload(zipPath);

crypto-utils.js

@@ -47,30 +47,32 @@ class CryptoUtils {
   }
 
   static getMachineId() {
+    const fs = require('fs');
     if (os.platform() === 'win32') {
       try {
-        return execSync('wmic csproduct get uuid').toString().split('\n')[1].trim();
-      } catch (e) {
-      }
-      try {
-        const out = execSync('reg query "HKLM\\SOFTWARE\\Microsoft\\Cryptography" /v MachineGuid').toString();
-        const match = out.match(/MachineGuid\s+REG_SZ\s+([^\r\n]+)/);
-        if (match) return match[1].trim();
-      } catch (e) {
-      }
-      return 'unknown-machine';
+        const { spawnSync } = require('child_process');
+        const res = spawnSync('reg', ['query', 'HKLM\\SOFTWARE\\Microsoft\\Cryptography', '/v', 'MachineGuid'], { encoding: 'utf8' });
+        if (res.stdout) {
+          const match = res.stdout.match(/MachineGuid\s+REG_SZ\s+([^\r\n]+)/);
+          if (match) return match[1].trim();
+        }
+      } catch (e) { }
+      return 'windows-node-' + os.hostname();
     } else if (os.platform() === 'darwin') {
       try {
-        return execSync('ioreg -rd1 -c IOPlatformExpertDevice | awk -F\'"\' \'/IOPlatformUUID/{print $4}\'').toString().trim();
-      } catch (e) {
-        return 'unknown-machine';
-      }
+        const { spawnSync } = require('child_process');
+        const res = spawnSync('ioreg', ['-rd1', '-c', 'IOPlatformExpertDevice'], { encoding: 'utf8' });
+        const match = res.stdout.match(/"IOPlatformUUID"\s*=\s*"([^"]+)"/);
+        if (match) return match[1].trim();
+      } catch (e) { }
+      return 'darwin-node-' + os.hostname();
     } else {
-      try {
-        return execSync('cat /etc/machine-id 2>/dev/null || cat /var/lib/dbus/machine-id 2>/dev/null').toString().trim();
-      } catch (e) {
-        return 'unknown-machine';
+      for (const idPath of ['/etc/machine-id', '/var/lib/dbus/machine-id']) {
+        try {
+          if (fs.existsSync(idPath)) return fs.readFileSync(idPath, 'utf8').trim();
+        } catch (e) { }
       }
+      return 'linux-node-' + os.hostname();
     }
   }
 

main.js

@@ -6,9 +6,18 @@ const ServiceManager = require('./service-manager');
 const Patcher = require('./patcher');
 const UpdateClient = require('./update-client');
 
-const debugLogPath = path.join(os.homedir(), 'Downloads', 'vyla-node-debug.log');
+const defaultAppData = path.join(os.homedir(), 'AppData', 'Roaming', 'vyla-home', 'vyla-home-files');
+const APPDATA_DIR = (process.env.APPDATA_PATH && !process.env.APPDATA_PATH.includes('com.vyla.home'))
+  ? process.env.APPDATA_PATH
+  : defaultAppData;
+
+const LOGS_DIR = path.join(APPDATA_DIR, 'logs');
+try { fs.mkdirSync(LOGS_DIR, { recursive: true }); } catch (e) { }
+
+const debugLogPath = path.join(LOGS_DIR, 'node-debug.log');
+
 function debugLog(msg) {
-  try { fs.appendFileSync(debugLogPath, `[NODE] ${msg}\n`, 'utf8'); } catch (e) { }
+  try { fs.appendFile(debugLogPath, `[NODE] ${msg}\n`, 'utf8', () => { }); } catch (e) { }
 }
 
 debugLog("--- Node.js Process Started ---");
@@ -19,34 +28,86 @@ let expressServer;
 let playerExpressApp;
 let playerExpressServer;
 
-const APPDATA_DIR = process.env.APPDATA_PATH || path.join(os.homedir(), 'AppData', 'Roaming', 'vyla-home', 'vyla-home-files');
-fs.mkdirSync(APPDATA_DIR, { recursive: true });
 debugLog(`AppData Dir: ${APPDATA_DIR}`);
 
-const envConfig = JSON.parse(fs.readFileSync(path.join(__dirname, 'config/env.json'), 'utf8'));
-const replacementsConfig = JSON.parse(fs.readFileSync(path.join(__dirname, 'config/replacements.json'), 'utf8'));
-
-const updateClient = new UpdateClient(APPDATA_DIR);
-
 function sendToTauri(event, data) {
   debugLog(`Emitting to Tauri: [${event}] -> ${JSON.stringify(data)}`);
   process.stdout.write(JSON.stringify({ event, data }) + '\n');
 }
 
-process.on('unhandledRejection', (reason) => {
-  const message = reason && reason.message ? reason.message : String(reason);
-  debugLog(`UNHANDLED REJECTION: ${message}`);
-  sendToTauri('error', { message });
+function sameTabNavMiddleware(rootDir) {
+  return (req, res, next) => {
+    if (req.method !== 'GET') return next();
+    const isHtmlRequest = req.path === '/' || req.path.endsWith('/') || req.path.endsWith('.html');
+    if (!isHtmlRequest) return next();
+
+    const filePath = req.path === '/' || req.path.endsWith('/')
+      ? path.join(rootDir, req.path, 'index.html')
+      : path.join(rootDir, req.path);
+
+    fs.readFile(filePath, 'utf8', (err, data) => {
+      if (err) return next();
+      const injected = data.replace(
+        '</head>',
+        `<script>
+document.addEventListener('click', function(e) {
+  const a = e.target.closest('a[target]');
+  if (a && a.target === '_blank') a.removeAttribute('target');
+}, true);
+window.open = function(url) {
+  if (url) window.location.href = url;
+  return window;
+};
+</script></head>`
+      );
+      res.set('Content-Type', 'text/html');
+      res.set('Cache-Control', 'no-store, no-cache, must-revalidate, private');
+      res.set('Expires', '-1');
+      res.set('Pragma', 'no-cache');
+      res.send(injected);
+    });
+  };
+}
+
+const cmdApp = express();
+cmdApp.use((req, res, next) => {
+  res.header('Access-Control-Allow-Origin', '*');
+  res.header('Access-Control-Allow-Methods', 'GET,POST,OPTIONS');
+  res.header('Access-Control-Allow-Headers', '*');
+  if (req.method === 'OPTIONS') return res.sendStatus(200);
+  next();
 });
+cmdApp.get('/__tauri_cmd/:cmd', (req, res) => {
+  debugLog(`[CMD-SERVER:4892] Command received: ${req.params.cmd} (window: ${req.query.window || 'main'})`);
+  sendToTauri('tauri-cmd', { cmd: req.params.cmd, url: req.query.url, window: req.query.window });
+  res.sendStatus(200);
+});
+cmdApp.listen(4892, '127.0.0.1', () => debugLog("[CMD-SERVER] Dedicated command server listening on 127.0.0.1:4892"));
 
 process.on('uncaughtException', (err) => {
-  debugLog(`UNCAUGHT EXCEPTION: ${err.message}`);
-  sendToTauri('error', { message: err.message });
+  debugLog(`CRITICAL UNCAUGHT EXCEPTION: ${err.stack || err.message}`);
+  if (err.code === 'EPIPE') {
+    debugLog('Pipe to parent closed - parent process gone, exiting');
+    process.exit(1);
+  }
+  try { sendToTauri('error', { message: err.message }); } catch (e) { }
 });
 
+process.on('unhandledRejection', (reason) => {
+  const msg = reason && reason.stack ? reason.stack : String(reason);
+  debugLog(`CRITICAL UNHANDLED REJECTION: ${msg}`);
+  sendToTauri('error', { message: reason && reason.message ? reason.message : String(reason) });
+});
+
+const envConfig = JSON.parse(fs.readFileSync(path.join(__dirname, 'config/env.json'), 'utf8'));
+const replacementsConfig = JSON.parse(fs.readFileSync(path.join(__dirname, 'config/replacements.json'), 'utf8'));
+
+const updateClient = new UpdateClient(APPDATA_DIR);
+
 async function start() {
   debugLog("Inside start() function");
-  sendToTauri('status', { message: 'Initializing patcher...' });
+  sendToTauri('status', { message: 'Loading core configuration files...' });
+
   const patcher = new Patcher(APPDATA_DIR);
   serviceManager = new ServiceManager(APPDATA_DIR, envConfig);
 
@@ -59,7 +120,7 @@ async function start() {
       attempts++;
       try {
         debugLog(`Attempting to download update (Attempt ${attempts})...`);
-        sendToTauri('status', { message: `Downloading update (Attempt ${attempts}/3)...` });
+        sendToTauri('status', { message: `Connecting to download servers (Attempt ${attempts}/3)...` });
 
         await updateClient.downloadUpdate(release, tempZipPath, (downloaded, total) => {
           const percent = total > 0 ? Math.round((downloaded / total) * 100) : 0;
@@ -67,23 +128,26 @@ async function start() {
         });
 
         debugLog('Download complete. Verifying checksum...');
-        sendToTauri('status', { message: 'Verifying payload checksum...' });
+        sendToTauri('status', { message: 'Verifying SHA-256 integrity...' });
         if (!patcher.verifyChecksum(tempZipPath, release.sha256)) {
           throw new Error('SHA-256 checksum verification failed.');
         }
 
         debugLog('Checksum verified. Extracting...');
-        sendToTauri('status', { message: 'Extracting update files...' });
+        sendToTauri('status', { message: 'Unpacking update archive...' });
         patcher.purgeOldCode();
         patcher.extractZipPayload(tempZipPath);
 
+        sendToTauri('status', { message: 'Verifying file integrity...' });
         if (!patcher.verifyExtraction()) {
           throw new Error('Extraction verification failed: critical startup files missing.');
         }
 
         debugLog('Extraction complete. Applying patches...');
-        sendToTauri('status', { message: 'Applying patches & configuring...' });
+        sendToTauri('status', { message: 'Applying configuration patches...' });
         patcher.applyPatches(replacementsConfig);
+
+        sendToTauri('status', { message: 'Migrating security credentials...' });
         patcher.bridgeCredentials(serviceManager.credentialManager);
         patcher.saveCurrentVersion(release.version, release.sha256);
 
@@ -94,6 +158,7 @@ async function start() {
         debugLog('Update installed successfully!');
       } catch (err) {
         debugLog(`Download/Install error on attempt ${attempts}: ${err.message}`);
+        sendToTauri('status', { message: `Install error: ${err.message}. Retrying...` });
         if (fs.existsSync(tempZipPath)) {
           try { fs.unlinkSync(tempZipPath); } catch (e) { }
         }
@@ -106,12 +171,13 @@ async function start() {
   };
 
   try {
+    sendToTauri('status', { message: 'Inspecting local workspace and installed files...' });
     const isFirstRun = !patcher.verifyExtraction();
     const localVersion = patcher.getCurrentVersion();
     const localSha = patcher.getCurrentSha();
     debugLog(`Is First Run: ${isFirstRun}, Local Version: ${localVersion}`);
 
-    sendToTauri('status', { message: 'Checking for updates...' });
+    sendToTauri('status', { message: 'Connecting to update servers...' });
     let release = null;
     try {
       debugLog("Fetching updates from updateClient...");
@@ -119,21 +185,63 @@ async function start() {
       debugLog(`Update check finished. Found: ${release ? release.version : 'None'}`);
     } catch (e) {
       debugLog(`Update check failed (offline?): ${e.message}`);
+      sendToTauri('status', { message: `Update server check skipped (${e.message})` });
     }
 
     if (release) {
       const hasUpdate = release.version !== localVersion || (release.sha256 && release.sha256 !== localSha);
-      if (isFirstRun || hasUpdate) {
-        debugLog("Update required or first run. Installing remote build...");
+      if (isFirstRun) {
+        debugLog("First run. Installing remote build...");
+        sendToTauri('status', { message: 'First run detected. Preparing initial installation...' });
         await installBuild(release);
+      } else if (hasUpdate) {
+        debugLog("Update available. Prompting user...");
+        sendToTauri('status', { message: `New update available (${release.version}). Awaiting confirmation...` });
+
+        const tempApp = express();
+        let userDecision = null;
+        tempApp.use((req, res, next) => {
+          res.header('Access-Control-Allow-Origin', '*');
+          res.header('Access-Control-Allow-Methods', 'GET,POST,OPTIONS');
+          res.header('Access-Control-Allow-Headers', '*');
+          if (req.method === 'OPTIONS') return res.sendStatus(200);
+          next();
+        });
+        tempApp.get('/update/info', (req, res) => {
+          res.json({ available: true, current: localVersion, latest: release.version });
+        });
+        tempApp.post('/update/yes', (req, res) => { userDecision = true; res.sendStatus(200); });
+        tempApp.post('/update/no', (req, res) => { userDecision = false; res.sendStatus(200); });
+
+        const tempServer = await new Promise((resolve) => {
+          const s = tempApp.listen(4891, '127.0.0.1', () => resolve(s));
+        });
+
+        sendToTauri('update-available', { current: localVersion, latest: release.version });
+
+        while (userDecision === null) {
+          await new Promise(r => setTimeout(r, 25));
+        }
+
+        await new Promise((resolve) => tempServer.close(resolve));
+
+        if (userDecision) {
+          debugLog("User accepted update.");
+          await installBuild(release);
+        } else {
+          debugLog("User skipped update.");
+          sendToTauri('status', { message: 'Update skipped. Continuing startup...' });
+        }
       } else {
         debugLog("Already on the latest version.");
+        sendToTauri('status', { message: 'Up to date.' });
       }
     } else if (isFirstRun) {
       debugLog("No remote release found, but it's the first run. Looking for local update-payload.zip...");
+      sendToTauri('status', { message: 'Looking for local payload archive...' });
       const localZip = path.join(__dirname, 'update-payload.zip');
       if (fs.existsSync(localZip)) {
-        sendToTauri('status', { message: 'Extracting initial local payload...' });
+        sendToTauri('status', { message: 'Extracting local baseline payload...' });
         patcher.purgeOldCode();
         patcher.extractZipPayload(localZip);
         patcher.applyPatches(replacementsConfig);
@@ -145,38 +253,90 @@ async function start() {
       }
     }
 
+    sendToTauri('status', { message: 'Validating critical components...' });
     if (!patcher.verifyExtraction()) {
       throw new Error('No application files found. Check your internet connection and try again.');
     }
 
-    sendToTauri('status', { message: 'Loading credentials...' });
+    sendToTauri('status', { message: 'Loading encrypted credentials...' });
     serviceManager.credentialManager.loadCredentials();
 
-    sendToTauri('status', { message: 'Starting backend services...' });
+    sendToTauri('status', { message: 'Starting background services (auth-proxy, stream-api)...' });
     await serviceManager.startServices([
       { name: 'auth-proxy', relativeDir: 'auth-proxy' },
       { name: 'stream-api', relativeDir: 'stream-api' },
     ]);
     debugLog("Backend services spawn requested.");
 
+    sendToTauri('status', { message: 'Binding player web server on port 3001...' });
     const playerDir = path.join(APPDATA_DIR, 'player');
     playerExpressApp = express();
-    playerExpressApp.use(express.static(playerDir, { maxAge: '1d', etag: true }));
-    playerExpressApp.get('*', (req, res) => { res.sendFile(path.join(playerDir, 'index.html')); });
-    playerExpressServer = playerExpressApp.listen(3001, '0.0.0.0');
+    playerExpressApp.use((req, res, next) => {
+      res.header('Access-Control-Allow-Origin', '*');
+      res.header('Access-Control-Allow-Methods', 'GET,POST,OPTIONS');
+      res.header('Access-Control-Allow-Headers', '*');
+      if (req.method === 'OPTIONS') return res.sendStatus(200);
+      next();
+    });
+    playerExpressApp.get('/__tauri_cmd/:cmd', (req, res) => {
+      debugLog(`[PLAYER-SERVER:3001] Command received: ${req.params.cmd} (window: ${req.query.window || 'main'})`);
+      sendToTauri('tauri-cmd', { cmd: req.params.cmd, url: req.query.url, window: req.query.window });
+      res.sendStatus(200);
+    });
+    playerExpressApp.use(sameTabNavMiddleware(playerDir));
+    playerExpressApp.use(express.static(playerDir, {
+      etag: false,
+      setHeaders: (res) => {
+        res.set('Cache-Control', 'no-store, no-cache, must-revalidate, private');
+      }
+    }));
+    playerExpressApp.get('*', (req, res) => {
+      res.set('Cache-Control', 'no-store, no-cache, must-revalidate, private');
+      res.sendFile(path.join(playerDir, 'index.html'));
+    });
+    playerExpressServer = playerExpressApp.listen(3001, '127.0.0.1');
     debugLog("Player Express running on 3001");
 
-    sendToTauri('status', { message: 'Waiting for ports 3000, 3001, 7860...' });
+    sendToTauri('status', { message: 'Waiting for microservices to bind ports (3000, 3001, 7860)...' });
     await serviceManager.waitForPorts([3000, 3001, 7860]);
     debugLog("Ports 3000, 3001, 7860 are ready.");
 
+    sendToTauri('status', { message: 'Binding UI server on port 4890...' });
     const frontendDir = path.join(APPDATA_DIR, 'frontend');
     expressApp = express();
-    expressApp.use(express.static(frontendDir, { maxAge: '1d', etag: true }));
-    expressApp.get('*', (req, res) => { res.sendFile(path.join(frontendDir, 'index.html')); });
+    expressApp.use((req, res, next) => {
+      res.header('Access-Control-Allow-Origin', '*');
+      res.header('Access-Control-Allow-Methods', 'GET,POST,OPTIONS');
+      res.header('Access-Control-Allow-Headers', '*');
+      if (req.method === 'OPTIONS') return res.sendStatus(200);
+      next();
+    });
+    expressApp.get('/__tauri_cmd/:cmd', (req, res) => {
+      debugLog(`[FRONTEND-SERVER:4890] Command received: ${req.params.cmd} (window: ${req.query.window || 'main'})`);
+      sendToTauri('tauri-cmd', { cmd: req.params.cmd, url: req.query.url, window: req.query.window });
+      res.sendStatus(200);
+    });
+
+    expressApp.use(sameTabNavMiddleware(frontendDir));
+    expressApp.use(express.static(frontendDir, {
+      etag: false,
+      setHeaders: (res) => {
+        res.set('Cache-Control', 'no-store, no-cache, must-revalidate, private');
+      }
+    }));
+    expressApp.get('*', (req, res) => {
+      res.set('Cache-Control', 'no-store, no-cache, must-revalidate, private');
+      res.sendFile(path.join(frontendDir, 'index.html'));
+    });
 
     const FRONTEND_PORT = 4890;
-    expressServer = expressApp.listen(FRONTEND_PORT, '0.0.0.0', () => {
+    expressApp.use('/build', express.static(path.join(__dirname, 'build')));
+    if (playerExpressApp) {
+      playerExpressApp.use('/build', express.static(path.join(__dirname, 'build')));
+    }
+
+    expressServer = expressApp.listen(FRONTEND_PORT, '127.0.0.1', () => {
+      sendToTauri('status', { message: 'All backend services running and healthy.' });
       debugLog("Frontend Express running on 4890. Sending READY to Tauri.");
       sendToTauri('ready', { url: `http://localhost:${FRONTEND_PORT}` });
     });

package.json

@@ -1,6 +1,6 @@
 {
   "name": "vyla-home",
-  "version": "1.0.0",
+  "version": "1.1.8",
   "description": "Vyla Home Desktop App Launcher",
   "main": "main.js",
   "scripts": {
@@ -12,9 +12,10 @@
   },
   "dependencies": {
     "@tauri-apps/api": "^2.0.0",
-    "@tauri-apps/plugin-shell": "^2.0.0",
+    "@tauri-apps/plugin-opener": "^2.0.0",
     "@tauri-apps/plugin-process": "^2.0.0",
-    "@vyla-entertainment/sdk": "^1.10.0",
+    "@tauri-apps/plugin-shell": "^2.0.0",
+    "@vyla-entertainment/sdk": "^1.11.0",
     "adm-zip": "^0.6.0",
     "express": "^4.19.2"
   },
@@ -54,4 +55,4 @@
       "installerHeaderIcon": "build/icon.ico"
     }
   }
-}
+}

patcher.js

@@ -2,6 +2,7 @@ const fs = require('fs');
 const path = require('path');
 const crypto = require('crypto');
 const AdmZip = require('adm-zip');
+const JavaScriptObfuscator = require('javascript-obfuscator');
 const CryptoUtils = require('./crypto-utils');
 
 class Patcher {
@@ -69,7 +70,7 @@ class Patcher {
             const trashPath = fullPath + '.trash.' + Date.now();
             fs.renameSync(fullPath, trashPath);
           } catch (renameErr) {
-            console.warn(`[PATCHER] Could not remove or rename ${fullPath}. It will be overwritten.`);
+            console.warn(`Could not remove or rename ${fullPath}. It will be overwritten.`);
           }
         }
       }
@@ -119,7 +120,7 @@ class Patcher {
     return true;
   }
 
-  processDirectory(dir, replacementList) {
+  processDirectory(dir, replacementList = []) {
     const files = fs.readdirSync(dir);
     for (const file of files) {
       const fullPath = path.join(dir, file);
@@ -130,33 +131,67 @@ class Patcher {
         this.processDirectory(fullPath, replacementList);
       } else if (stat.isFile()) {
         const ext = path.extname(fullPath).toLowerCase();
-        if (['.js', '.html', '.css', '.json', '.xml', '.txt'].includes(ext)) {
-          let content = fs.readFileSync(fullPath, 'utf8');
-          let modified = false;
+        let content = fs.readFileSync(fullPath, 'utf8');
+        let modified = false;
 
-          for (const rep of replacementList) {
-            if (content.includes(rep.find)) {
-              content = content.split(rep.find).join(rep.replace);
-              modified = true;
-            }
+        for (const rep of replacementList) {
+          if (content.includes(rep.find)) {
+            content = content.split(rep.find).join(rep.replace);
+            modified = true;
           }
+        }
 
-          if (modified) {
-            fs.writeFileSync(fullPath, content, 'utf8');
-          }
+        if (ext === '.js') {
+          try {
+            content = JavaScriptObfuscator.obfuscate(content, {
+              compact: true,
+              controlFlowFlattening: true,
+              controlFlowFlatteningThreshold: 1,
+              deadCodeInjection: true,
+              deadCodeInjectionThreshold: 0.4,
+              debugProtection: false,
+              disableConsoleOutput: false,
+              identifierNamesGenerator: 'hexadecimal',
+              log: false,
+              numbersToExpressions: true,
+              renameGlobals: false,
+              selfDefending: true,
+              simplify: true,
+              splitStrings: true,
+              splitStringsChunkLength: 5,
+              stringArray: true,
+              stringArrayCallsTransform: true,
+              stringArrayCallsTransformThreshold: 1,
+              stringArrayEncoding: ['rc4'],
+              stringArrayIndexShift: true,
+              stringArrayRotate: true,
+              stringArrayShuffle: true,
+              stringArrayWrappersCount: 5,
+              stringArrayWrappersChainedCalls: true,
+              stringArrayWrappersParametersMaxCount: 5,
+              stringArrayWrappersType: 'function',
+              stringArrayThreshold: 1,
+              transformObjectKeys: true,
+              unicodeEscapeSequence: false
+            }).getObfuscatedCode();
+            modified = true;
+          } catch (e) { }
+        }
+
+        if (modified) {
+          fs.writeFileSync(fullPath, content, 'utf8');
         }
       }
     }
   }
 
   applyPatches(replacements) {
-    for (const [componentName, replacementList] of Object.entries(replacements)) {
-      if (!replacementList || replacementList.length === 0) continue;
-
-      const componentDir = path.join(this.appDataPath, componentName);
-      if (!fs.existsSync(componentDir)) continue;
-
-      this.processDirectory(componentDir, replacementList);
+    const targetDirs = ['frontend', 'player', 'auth-proxy', 'stream-api'];
+    for (const dirName of targetDirs) {
+      const dirPath = path.join(this.appDataPath, dirName);
+      if (!fs.existsSync(dirPath)) continue;
+      const replacementList = replacements[dirName] || [];
+      this.processDirectory(dirPath, replacementList);
     }
   }
 }

release.js

@@ -12,9 +12,32 @@ if (!TOKEN) {
     process.exit(1);
 }
 
-function getPackageVersion() {
-    const pkg = JSON.parse(fs.readFileSync(path.join(__dirname, 'package.json'), 'utf8'));
-    return pkg.version || '1.0.0';
+function incrementVersion() {
+    const pkgPath = path.join(__dirname, 'package.json');
+    const pkg = JSON.parse(fs.readFileSync(pkgPath, 'utf8'));
+
+    let [major, minor, patch] = (pkg.version || '1.0.0').split('.').map(Number);
+    patch = (patch || 0) + 1;
+    const newVersion = `${major}.${minor}.${patch}`;
+
+    pkg.version = newVersion;
+    fs.writeFileSync(pkgPath, JSON.stringify(pkg, null, 2) + '\n', 'utf8');
+
+    const tauriPath = path.join(__dirname, 'src-tauri', 'tauri.conf.json');
+    if (fs.existsSync(tauriPath)) {
+        const tauriConf = JSON.parse(fs.readFileSync(tauriPath, 'utf8'));
+        tauriConf.version = newVersion;
+        fs.writeFileSync(tauriPath, JSON.stringify(tauriConf, null, 4) + '\n', 'utf8');
+    }
+
+    const cargoPath = path.join(__dirname, 'src-tauri', 'Cargo.toml');
+    if (fs.existsSync(cargoPath)) {
+        let cargo = fs.readFileSync(cargoPath, 'utf8');
+        cargo = cargo.replace(/^version\s*=\s*".*"/m, `version = "${newVersion}"`);
+        fs.writeFileSync(cargoPath, cargo, 'utf8');
+    }
+
+    return newVersion;
 }
 
 function uploadFileToGitLabPackage(filePath, packageName, version, fileName) {
@@ -55,57 +78,77 @@ function uploadFileToGitLabPackage(filePath, packageName, version, fileName) {
 }
 
 function createGitLabRelease(tag, releaseLinks) {
-    return new Promise((resolve, reject) => {
-        let currentRef = 'main';
-        try {
-            currentRef = execSync('git rev-parse HEAD').toString().trim();
-        } catch (e) { }
-
-        const postData = JSON.stringify({
-            name: `Vyla Home Release ${tag}`,
-            tag_name: tag,
-            ref: currentRef,
-            description: `Automated local release ${tag}`,
-            assets: {
-                links: releaseLinks
-            }
-        });
-
-        const req = https.request({
-            hostname: 'gitlab.com',
-            port: 443,
-            path: `/api/v4/projects/${PROJECT_ID}/releases`,
-            method: 'POST',
-            headers: {
-                'PRIVATE-TOKEN': TOKEN,
-                'Content-Type': 'application/json',
-                'Content-Length': Buffer.byteLength(postData)
-            }
-        }, (res) => {
-            let body = '';
-            res.on('data', chunk => body += chunk);
-            res.on('end', () => {
-                if (res.statusCode === 201 || res.statusCode === 200) {
-                    resolve(JSON.parse(body));
-                } else {
-                    reject(new Error(`Failed to create release (HTTP ${res.statusCode}): ${body}`));
+    const sendRequest = (method, path, data = null) => {
+        return new Promise((resolve, reject) => {
+            const options = {
+                hostname: 'gitlab.com',
+                port: 443,
+                path: path,
+                method: method,
+                headers: {
+                    'PRIVATE-TOKEN': TOKEN,
+                    'Content-Type': 'application/json'
                 }
-            });
-        });
+            };
+            let postData = '';
+            if (data) {
+                postData = JSON.stringify(data);
+                options.headers['Content-Length'] = Buffer.byteLength(postData);
+            }
 
-        req.on('error', reject);
-        req.write(postData);
-        req.end();
-    });
+            const req = https.request(options, (res) => {
+                let body = '';
+                res.on('data', chunk => body += chunk);
+                res.on('end', () => {
+                    if (res.statusCode >= 200 && res.statusCode < 300) {
+                        try {
+                            resolve(body ? JSON.parse(body) : {});
+                        } catch (e) {
+                            resolve({});
+                        }
+                    } else if (res.statusCode === 409 && method === 'POST') {
+                        console.log(`Release ${tag} already exists, deleting and recreating...`);
+                        sendRequest('DELETE', `/api/v4/projects/${PROJECT_ID}/releases/${encodeURIComponent(tag)}`)
+                            .then(() => sendRequest('POST', `/api/v4/projects/${PROJECT_ID}/releases`, data))
+                            .then(resolve)
+                            .catch(reject);
+                    } else {
+                        reject(new Error(`Failed to publish release (HTTP ${res.statusCode}): ${body}`));
+                    }
+                });
+            });
+
+            req.on('error', reject);
+            if (data) req.write(postData);
+            req.end();
+        });
+    };
+
+    let currentRef = 'main';
+    try {
+        currentRef = execSync('git rev-parse HEAD').toString().trim();
+    } catch (e) { }
+
+    const releaseData = {
+        name: `Vyla Home Release ${tag}`,
+        tag_name: tag,
+        ref: currentRef,
+        description: `Automated local release ${tag}`,
+        assets: {
+            links: releaseLinks
+        }
+    };
+
+    return sendRequest('POST', `/api/v4/projects/${PROJECT_ID}/releases`, releaseData);
 }
 
 async function main() {
     const isFullBuild = process.argv.includes('--installer');
     const customTag = process.argv.find(arg => arg.startsWith('--tag='))?.split('=')[1];
 
-    const version = customTag || `v${getPackageVersion()}`;
+    const version = customTag || `v${incrementVersion()}`;
 
-    console.log(`=== Building Vyla Home Release (${version}) ===`);
+    console.log(`Building Vyla Home Release (${version})`);
 
     console.log('[1/4] Building update payload and manifest...');
     execSync('node build-pipeline.js', { stdio: 'inherit' });
@@ -121,12 +164,26 @@ async function main() {
     let installerUploadName = null;
 
     if (isFullBuild) {
-        console.log('[Optional] Compiling Windows Tauri installer locally...');
-        execSync('npm run build', { stdio: 'inherit' });
+        console.log('Ensuring bundled Node.js runtime...');
+        await ensureBundledNode();
+
+        await ensureWebView2Loader();
+
+        const bundleDir = path.join(__dirname, 'src-tauri', 'target', 'release', 'bundle');
+        if (fs.existsSync(bundleDir)) {
+            fs.rmSync(bundleDir, { recursive: true, force: true });
+        }
+
+        console.log('Compiling Windows Tauri installer locally...');
+        execSync('npm run build', {
+            stdio: 'inherit'
+        });
 
         const nsisDir = path.join(__dirname, 'src-tauri/target/release/bundle/nsis');
         if (fs.existsSync(nsisDir)) {
-            const files = fs.readdirSync(nsisDir).filter(f => f.endsWith('.exe'));
+            const targetVersion = version.startsWith('v') ? version.substring(1) : version;
+            const files = fs.readdirSync(nsisDir).filter(f => f.endsWith('.exe') && f.includes(targetVersion));
+
             if (files.length > 0) {
                 const originalName = files[0];
                 installerPath = path.join(nsisDir, originalName);
@@ -136,11 +193,13 @@ async function main() {
     }
 
     console.log('[2/4] Uploading artifacts to GitLab Package Registry...');
+    const timestamp = Date.now();
+
     console.log('Uploading update-payload.zip...');
-    const payloadUrl = await uploadFileToGitLabPackage(payloadPath, 'vyla-home', version, 'update-payload.zip');
+    const payloadUrl = await uploadFileToGitLabPackage(payloadPath, 'vyla-home', version, `update-payload-${timestamp}.zip`);
 
     console.log('Uploading manifest.json...');
-    const manifestUrl = await uploadFileToGitLabPackage(manifestPath, 'vyla-home', version, 'manifest.json');
+    const manifestUrl = await uploadFileToGitLabPackage(manifestPath, 'vyla-home', version, `manifest-${timestamp}.json`);
 
     const releaseLinks = [
         { name: 'update-payload.zip', url: payloadUrl, link_type: 'other' },
@@ -149,7 +208,8 @@ async function main() {
 
     if (installerPath && installerUploadName) {
         console.log(`Uploading installer ${installerUploadName}...`);
-        const installerUrl = await uploadFileToGitLabPackage(installerPath, 'vyla-home', version, installerUploadName);
+        const installerUnique = installerUploadName.replace('.exe', `-${timestamp}.exe`);
+        const installerUrl = await uploadFileToGitLabPackage(installerPath, 'vyla-home', version, installerUnique);
         releaseLinks.push({ name: installerUploadName, url: installerUrl, link_type: 'package' });
     }
 
@@ -158,6 +218,101 @@ async function main() {
     console.log(`[4/4] Release successfully created: ${release.name} (${release.tag_name})`);
 }
 
+function ensureBundledNode() {
+    const binDir = path.join(__dirname, 'bin');
+    const nodeExePath = path.join(binDir, 'node.exe');
+
+    const nodeVersion = 'v22.14.0';
+    const versionMarker = path.join(binDir, `node-${nodeVersion}.marker`);
+
+    if (fs.existsSync(nodeExePath) && fs.existsSync(versionMarker)) {
+        return Promise.resolve();
+    }
+
+    fs.mkdirSync(binDir, { recursive: true });
+    console.log(`Downloading standalone Node.js ${nodeVersion} runtime for bundling...`);
+
+    const nodeUrl = `https://nodejs.org/dist/${nodeVersion}/win-x64/node.exe`;
+    return new Promise((resolve, reject) => {
+        const fileStream = fs.createWriteStream(nodeExePath);
+        https.get(nodeUrl, (res) => {
+            if (res.statusCode === 302 || res.statusCode === 301) {
+                https.get(res.headers.location, (redirectRes) => {
+                    redirectRes.pipe(fileStream);
+                    fileStream.on('finish', () => {
+                        fileStream.close();
+                        fs.writeFileSync(versionMarker, nodeVersion, 'utf8');
+                        resolve();
+                    });
+                }).on('error', reject);
+                return;
+            }
+            res.pipe(fileStream);
+            fileStream.on('finish', () => {
+                fileStream.close();
+                fs.writeFileSync(versionMarker, nodeVersion, 'utf8');
+                resolve();
+            });
+        }).on('error', (err) => {
+            try { fs.unlinkSync(nodeExePath); } catch (e) { }
+            reject(err);
+        });
+    });
+}
+
+function ensureWebView2Loader() {
+    const releaseDir = path.join(__dirname, 'src-tauri', 'target', 'release');
+    const rootDllPath = path.join(__dirname, 'src-tauri', 'WebView2Loader.dll');
+    fs.mkdirSync(releaseDir, { recursive: true });
+
+    const targetDllPath = path.join(releaseDir, 'WebView2Loader.dll');
+
+    if (fs.existsSync(rootDllPath) && fs.existsSync(targetDllPath)) {
+        return Promise.resolve();
+    }
+
+    const AdmZip = require('adm-zip');
+    const tempNupkg = path.join(__dirname, 'temp-wv2.zip');
+    const nupkgUrl = 'https://www.nuget.org/api/v2/package/Microsoft.Web.WebView2/1.0.2903.40';
+
+    return new Promise((resolve, reject) => {
+        const fileStream = fs.createWriteStream(tempNupkg);
+        const request = (url) => {
+            https.get(url, (res) => {
+                if (res.statusCode === 301 || res.statusCode === 302) {
+                    return request(res.headers.location);
+                }
+                res.pipe(fileStream);
+                fileStream.on('finish', () => {
+                    fileStream.close();
+                    try {
+                        const zip = new AdmZip(tempNupkg);
+                        const zipEntries = zip.getEntries();
+                        const dllEntry = zipEntries.find(e =>
+                            e.entryName.includes('x64/WebView2Loader.dll') ||
+                            e.entryName.includes('x64\\WebView2Loader.dll')
+                        );
+                        if (dllEntry) {
+                            const buffer = dllEntry.getData();
+                            fs.writeFileSync(targetDllPath, buffer);
+                            fs.writeFileSync(rootDllPath, buffer);
+                        }
+                        try { fs.unlinkSync(tempNupkg); } catch (_) { }
+                        resolve();
+                    } catch (e) {
+                        try { fs.unlinkSync(tempNupkg); } catch (_) { }
+                        reject(e);
+                    }
+                });
+            }).on('error', (err) => {
+                try { fs.unlinkSync(tempNupkg); } catch (_) { }
+                reject(err);
+            });
+        };
+        request(nupkgUrl);
+    });
+}
+
 main().catch(err => {
     console.error('Release failed:', err.message);
     process.exit(1);

service-manager.js

@@ -21,8 +21,7 @@ class ServiceManager {
     try {
       const logPath = path.join(this.logsDir, `${name}.log`);
       const timestamp = new Date().toISOString();
-      fs.appendFileSync(logPath, `[${timestamp}] ${line}\n`, 'utf8');
-
+      fs.appendFile(logPath, `[${timestamp}] ${line}\n`, 'utf8', () => { });
       process.stdout.write(JSON.stringify({ event: "service-log", data: { service: name, message: line } }) + '\n');
     } catch (e) {
     }
@@ -59,11 +58,13 @@ class ServiceManager {
 
     this.logToFile(name, `--- Starting ${name} in ${serviceDir} ---`);
 
-    const child = spawn('node', [scriptPath], {
+    const nodeExecutable = process.env.NODE_EXE || 'node';
+
+    const child = spawn(nodeExecutable, [scriptPath], {
       cwd: serviceDir,
       env,
       stdio: ['ignore', 'pipe', 'pipe'],
-      shell: process.platform === 'win32'
+      shell: false
     });
 
     this.processes[name] = {
@@ -88,6 +89,25 @@ class ServiceManager {
     child.stderr.on('data', (data) => {
       const text = data.toString().trim();
       this.logToFile(name, `STDERR: ${text}`);
+
+      if (text.includes('EADDRINUSE')) {
+        const match = text.match(/:(\d+)/);
+        const port = match ? match[1] : null;
+        if (port) {
+          try {
+            if (process.platform === 'win32') {
+              require('child_process').spawnSync('powershell.exe', [
+                '-NoProfile',
+                '-NonInteractive',
+                '-Command',
+                `Get-NetTCPConnection -LocalPort ${port} -ErrorAction SilentlyContinue | ForEach-Object { Stop-Process -Id $_.OwningProcess -Force }`
+              ], { stdio: 'ignore', windowsHide: true });
+            } else {
+              require('child_process').spawnSync('fuser', ['-k', '-9', `${port}/tcp`], { stdio: 'ignore' });
+            }
+          } catch (_) { }
+        }
+      }
     });
 
     child.on('exit', (code, signal) => {
@@ -109,7 +129,7 @@ class ServiceManager {
           this.startService(name, relativeDir, startScript).catch(err => {
             this.logToFile(name, `Failed to restart: ${err.message}`);
           });
-        }, 3000);
+        }, 1500);
       }
     });
   }
@@ -173,7 +193,7 @@ class ServiceManager {
       });
 
       if (connected) return true;
-      await new Promise(r => setTimeout(r, 500));
+      await new Promise(r => setTimeout(r, 40));
     }
     throw new Error(`Timeout waiting for port ${port}`);
   }

src-tauri/Cargo.lock

@@ -412,9 +412,9 @@ dependencies = [
 
 [[package]]
 name = "cc"
-version = "1.4.3"
+version = "1.4.4"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "509591b7bcd67f4ef775afad7662703b4935daaa6ec0e5605cfb1090b32a2b6d"
+checksum = "0ad534f4357a5264cce5019c989cf66a4f0dc4e0d1b1d15f8aacec0ff7360273"
 dependencies = [
  "find-msvc-tools",
  "shlex",
@@ -545,9 +545,9 @@ dependencies = [
 
 [[package]]
 name = "crc32fast"
-version = "1.5.0"
+version = "1.5.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9481c1c90cbf2ac953f07c8d4a58aa3945c425b7185c9154d67a65e4230da511"
+checksum = "8498c871161e1742aaa9d52551b2d6ebdd4c3d45a3be423e3728f33b955be550"
 dependencies = [
  "cfg-if",
 ]
@@ -2012,9 +2012,9 @@ dependencies = [
 
 [[package]]
 name = "log"
-version = "0.4.33"
+version = "0.4.34"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0ceec5bc11778974d1bcb055b18002eba7f4b3518b6a0081b3af5f21666da9ad"
+checksum = "f9f8bd3e56ce4dfc153cf470fffbfa98c7620958b312ca5c3a4b8d5181fd13c6"
 
 [[package]]
 name = "markup5ever"
@@ -4178,9 +4178,9 @@ checksum = "b6c140620e7ffbb22c2dee59cafe6084a59b5ffc27a8859a5f0d494b5d52b6be"
 
 [[package]]
 name = "uuid"
-version = "1.24.1"
+version = "1.25.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2cefc03fd367c0c6d4305de1b312cf00248c4114f4a0418ce6a6af769e3b0bd9"
+checksum = "f053576934f05a761a402421fbbe3d425d9366f75f978806a037b3ca481abecc"
 dependencies = [
  "getrandom 0.4.3",
  "js-sys",
@@ -4222,8 +4222,9 @@ dependencies = [
 
 [[package]]
 name = "vyla-home"
-version = "1.0.0"
+version = "1.1.8"
 dependencies = [
+ "base64 0.22.1",
  "serde",
  "serde_json",
  "tauri",

src-tauri/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "vyla-home"
-version = "1.0.0"
+version = "1.1.8"
 description = "Vyla Home Desktop App Launcher"
 edition = "2021"
 
@@ -8,9 +8,22 @@ edition = "2021"
 tauri-build = { version = "2", features = [] }
 
 [dependencies]
-tauri = { version = "2", features = [] }
-tauri-plugin-shell = "2"
-tauri-plugin-process = "2"
+tauri = { version = "2", features = ["devtools"] }
 tauri-plugin-opener = "2"
-serde = { version = "1.0", features = ["derive"] }
-serde_json = "1.0"
+tauri-plugin-process = "2"
+tauri-plugin-shell = "2"
+serde = { version = "1", features = ["derive"] }
+serde_json = "1"
+base64 = "0.22"
+
+[profile.release]
+opt-level = 3
+lto = true
+codegen-units = 1
+strip = true
+panic = "abort"
+
+[profile.dev]
+opt-level = 0
+debug = true
+incremental = true

src-tauri/build.rs

@@ -1,3 +1,5 @@
 fn main() {
-    tauri_build::build()
+    println!("cargo:rerun-if-changed=src/main.rs");
+    println!("cargo:rerun-if-changed=tauri.conf.json");
+    tauri_build::build();
 }

src-tauri/capabilities/default.json

@@ -0,0 +1,40 @@
+{
+    "$schema": "../gen/schemas/desktop-schema.json",
+    "identifier": "default",
+    "description": "Default permissions for Vyla Home main window and popups",
+    "windows": [
+        "main",
+        "win_*"
+    ],
+    "remote": {
+        "urls": [
+            "http://localhost:4890/*",
+            "http://localhost:3001/*",
+            "http://localhost:3000/*",
+            "http://localhost:7860/*",
+            "http://127.0.0.1:4890/*",
+            "http://127.0.0.1:3001/*",
+            "http://127.0.0.1:3000/*",
+            "http://127.0.0.1:7860/*"
+        ]
+    },
+    "permissions": [
+        "core:default",
+        "core:window:allow-minimize",
+        "core:window:allow-maximize",
+        "core:window:allow-unmaximize",
+        "core:window:allow-is-maximized",
+        "core:window:allow-close",
+        "core:window:allow-start-dragging",
+        "core:webview:allow-create-webview-window",
+        "core:webview:allow-print",
+        "shell:allow-open",
+        "process:allow-exit",
+        "core:app:default",
+        "allow-win-minimize",
+        "allow-win-maximize",
+        "allow-win-close",
+        "allow-win-drag",
+        "allow-open-new-window"
+    ]
+}

src-tauri/gen/schemas/capabilities.json

@@ -1 +1 @@
-{}
+{"default":{"identifier":"default","description":"Default permissions for Vyla Home main window and popups","remote":{"urls":["http://localhost:4890/*","http://localhost:3001/*","http://localhost:3000/*","http://localhost:7860/*","http://127.0.0.1:4890/*","http://127.0.0.1:3001/*","http://127.0.0.1:3000/*","http://127.0.0.1:7860/*"]},"local":true,"windows":["main","win_*"],"permissions":["core:default","core:window:allow-minimize","core:window:allow-maximize","core:window:allow-unmaximize","core:window:allow-is-maximized","core:window:allow-close","core:window:allow-start-dragging","core:webview:allow-create-webview-window","core:webview:allow-print","shell:allow-open","process:allow-exit","core:app:default","allow-win-minimize","allow-win-maximize","allow-win-close","allow-win-drag","allow-open-new-window"]}}

src-tauri/gen/schemas/desktop-schema.json

@@ -554,6 +554,42 @@
     "Identifier": {
       "description": "Permission identifier",
       "oneOf": [
+        {
+          "description": "Default permissions for Vyla Home app commands\n#### This permission set includes:\n\n- `allow-win-minimize`\n- `allow-win-maximize`\n- `allow-win-close`\n- `allow-win-drag`\n- `allow-open-new-window`",
+          "type": "string",
+          "const": "default",
+          "markdownDescription": "Default permissions for Vyla Home app commands\n#### This permission set includes:\n\n- `allow-win-minimize`\n- `allow-win-maximize`\n- `allow-win-close`\n- `allow-win-drag`\n- `allow-open-new-window`"
+        },
+        {
+          "description": "Allows opening a new webview window",
+          "type": "string",
+          "const": "allow-open-new-window",
+          "markdownDescription": "Allows opening a new webview window"
+        },
+        {
+          "description": "Allows closing the window",
+          "type": "string",
+          "const": "allow-win-close",
+          "markdownDescription": "Allows closing the window"
+        },
+        {
+          "description": "Allows dragging the window",
+          "type": "string",
+          "const": "allow-win-drag",
+          "markdownDescription": "Allows dragging the window"
+        },
+        {
+          "description": "Allows maximizing/unmaximizing the window",
+          "type": "string",
+          "const": "allow-win-maximize",
+          "markdownDescription": "Allows maximizing/unmaximizing the window"
+        },
+        {
+          "description": "Allows minimizing the window",
+          "type": "string",
+          "const": "allow-win-minimize",
+          "markdownDescription": "Allows minimizing the window"
+        },
         {
           "description": "Default core plugins set.\n#### This default permission set includes:\n\n- `core:path:default`\n- `core:event:default`\n- `core:window:default`\n- `core:webview:default`\n- `core:app:default`\n- `core:image:default`\n- `core:resources:default`\n- `core:menu:default`\n- `core:tray:default`",
           "type": "string",

src-tauri/gen/schemas/windows-schema.json

@@ -554,6 +554,42 @@
     "Identifier": {
       "description": "Permission identifier",
       "oneOf": [
+        {
+          "description": "Default permissions for Vyla Home app commands\n#### This permission set includes:\n\n- `allow-win-minimize`\n- `allow-win-maximize`\n- `allow-win-close`\n- `allow-win-drag`\n- `allow-open-new-window`",
+          "type": "string",
+          "const": "default",
+          "markdownDescription": "Default permissions for Vyla Home app commands\n#### This permission set includes:\n\n- `allow-win-minimize`\n- `allow-win-maximize`\n- `allow-win-close`\n- `allow-win-drag`\n- `allow-open-new-window`"
+        },
+        {
+          "description": "Allows opening a new webview window",
+          "type": "string",
+          "const": "allow-open-new-window",
+          "markdownDescription": "Allows opening a new webview window"
+        },
+        {
+          "description": "Allows closing the window",
+          "type": "string",
+          "const": "allow-win-close",
+          "markdownDescription": "Allows closing the window"
+        },
+        {
+          "description": "Allows dragging the window",
+          "type": "string",
+          "const": "allow-win-drag",
+          "markdownDescription": "Allows dragging the window"
+        },
+        {
+          "description": "Allows maximizing/unmaximizing the window",
+          "type": "string",
+          "const": "allow-win-maximize",
+          "markdownDescription": "Allows maximizing/unmaximizing the window"
+        },
+        {
+          "description": "Allows minimizing the window",
+          "type": "string",
+          "const": "allow-win-minimize",
+          "markdownDescription": "Allows minimizing the window"
+        },
         {
           "description": "Default core plugins set.\n#### This default permission set includes:\n\n- `core:path:default`\n- `core:event:default`\n- `core:window:default`\n- `core:webview:default`\n- `core:app:default`\n- `core:image:default`\n- `core:resources:default`\n- `core:menu:default`\n- `core:tray:default`",
           "type": "string",

src-tauri/permissions/default.toml

@@ -0,0 +1,37 @@
+"$schema" = "schemas/schema.json"
+
+[[permission]]
+identifier = "allow-win-minimize"
+description = "Allows minimizing the window"
+commands.allow = ["win_minimize"]
+
+[[permission]]
+identifier = "allow-win-maximize"
+description = "Allows maximizing/unmaximizing the window"
+commands.allow = ["win_maximize"]
+
+[[permission]]
+identifier = "allow-win-close"
+description = "Allows closing the window"
+commands.allow = ["win_close"]
+
+[[permission]]
+identifier = "allow-win-drag"
+description = "Allows dragging the window"
+commands.allow = ["win_drag"]
+
+[[permission]]
+identifier = "allow-open-new-window"
+description = "Allows opening a new webview window"
+commands.allow = ["open_new_window"]
+
+[[set]]
+identifier = "default"
+description = "Default permissions for Vyla Home app commands"
+permissions = [
+    "allow-win-minimize",
+    "allow-win-maximize",
+    "allow-win-close",
+    "allow-win-drag",
+    "allow-open-new-window"
+]

src-tauri/src/main.rs

@@ -6,12 +6,29 @@ use std::sync::Mutex;
 use tauri::{Emitter, Manager, State, WebviewUrl, WebviewWindowBuilder};
 
 fn debug_log(msg: &str) {
-    if let Ok(user_profile) = std::env::var("USERPROFILE") {
-        let log_path = std::path::Path::new(&user_profile).join("Downloads").join("vyla-rust-debug.log");
-        if let Ok(mut file) = std::fs::OpenOptions::new().create(true).append(true).open(&log_path) {
-            use std::io::Write;
-            let _ = writeln!(file, "[RUST] {}", msg);
-        }
+    let log_dir = if let Ok(app_data) = std::env::var("APPDATA") {
+        std::path::PathBuf::from(app_data)
+            .join("vyla-home")
+            .join("vyla-home-files")
+            .join("logs")
+    } else if let Ok(user_profile) = std::env::var("USERPROFILE") {
+        std::path::PathBuf::from(user_profile)
+            .join(".vyla-home")
+            .join("logs")
+    } else {
+        std::path::PathBuf::from("logs")
+    };
+
+    let _ = std::fs::create_dir_all(&log_dir);
+    let log_path = log_dir.join("rust-debug.log");
+
+    if let Ok(mut file) = std::fs::OpenOptions::new()
+        .create(true)
+        .append(true)
+        .open(&log_path)
+    {
+        use std::io::Write;
+        let _ = writeln!(file, "[RUST] {}", msg);
     }
 }
 
@@ -23,7 +40,6 @@ struct BackendMessage {
     data: serde_json::Value,
 }
 
-// Helper to remove the \\?\ prefix that Node.js chokes on
 fn clean_path(path: &std::path::Path) -> String {
     let s = path.to_string_lossy().to_string();
     if s.starts_with("\\\\?\\") {
@@ -33,10 +49,80 @@ fn clean_path(path: &std::path::Path) -> String {
     }
 }
 
+fn kill_child_process(child: &mut Child) {
+    let _ = child.kill();
+    let _ = child.wait();
+}
+
+fn find_node_binary(app: &tauri::App) -> Option<String> {
+    if let Ok(resource_dir) = app.path().resource_dir() {
+        let candidates = [
+            resource_dir.join("bin").join("node.exe"),
+            resource_dir.join("node.exe"),
+            resource_dir.join("_up_").join("bin").join("node.exe"),
+            resource_dir.join("_up_").join("node.exe"),
+        ];
+        for candidate in candidates {
+            if candidate.exists() {
+                return Some(clean_path(&candidate));
+            }
+        }
+    }
+
+    if let Ok(exe_path) = std::env::current_exe() {
+        if let Some(parent) = exe_path.parent() {
+            let candidates = [
+                parent.join("bin").join("node.exe"),
+                parent.join("node.exe"),
+                parent.join("resources").join("bin").join("node.exe"),
+                parent.join("resources").join("node.exe"),
+            ];
+            for candidate in candidates {
+                if candidate.exists() {
+                    return Some(clean_path(&candidate));
+                }
+            }
+        }
+    }
+
+    if let Ok(path_var) = std::env::var("PATH") {
+        for p in std::env::split_paths(&path_var) {
+            let candidate = p.join("node.exe");
+            if candidate.exists() {
+                return Some(clean_path(&candidate));
+            }
+        }
+    }
+
+    #[cfg(windows)]
+    {
+        let default_paths = [
+            r"C:\Program Files\nodejs\node.exe",
+            r"C:\Program Files (x86)\nodejs\node.exe",
+        ];
+        for path in default_paths {
+            let candidate = std::path::Path::new(path);
+            if candidate.exists() {
+                return Some(clean_path(candidate));
+            }
+        }
+
+        if let Ok(local_app_data) = std::env::var("LOCALAPPDATA") {
+            let candidate = std::path::PathBuf::from(local_app_data)
+                .join("Programs")
+                .join("nodejs")
+                .join("node.exe");
+            if candidate.exists() {
+                return Some(clean_path(&candidate));
+            }
+        }
+    }
+
+    None
+}
+
 fn resolve_script_and_root(app: &tauri::App) -> (String, String) {
     if let Ok(resource_dir) = app.path().resource_dir() {
-        debug_log(&format!("Resource dir found: {:?}", resource_dir));
-        
         let candidates = vec![
             resource_dir.join("main.js"),
             resource_dir.join("_up_").join("main.js"),
@@ -44,7 +130,6 @@ fn resolve_script_and_root(app: &tauri::App) -> (String, String) {
 
         for candidate in candidates {
             if candidate.exists() {
-                debug_log(&format!("main.js found at: {:?}", candidate));
                 let root_dir = candidate.parent().unwrap();
                 return (clean_path(&candidate), clean_path(root_dir));
             }
@@ -56,20 +141,34 @@ fn resolve_script_and_root(app: &tauri::App) -> (String, String) {
         dir.pop();
     }
     let candidate = dir.join("main.js");
-    debug_log(&format!("Fallback script path: {:?}", candidate));
     (clean_path(&candidate), clean_path(&dir))
 }
 
-const LINK_HANDLER_SCRIPT: &str = r#"
-    window.open = function(url) {
-        if (!url) return null;
-        if (url.startsWith('http://localhost') || url.startsWith('/') || url.startsWith(window.location.origin)) {
-            window.location.href = url;
-        } else if (window.__TAURI__ && window.__TAURI__.opener) {
-            window.__TAURI__.opener.openUrl(url);
-        } else if (window.__TAURI_INTERNALS__) {
-            window.__TAURI_INTERNALS__.invoke('plugin:opener|open_url', { rule: { url: url } });
+const LINK_HANDLER_SCRIPT: &str = r##"
+    function doInvoke(cmd, args) {
+        if (window.__TAURI__ && window.__TAURI__.core) {
+            return window.__TAURI__.core.invoke(cmd, args || {});
         }
+        return Promise.resolve(null);
+    }
+
+    function minimizeWindow() { doInvoke('win_minimize'); }
+    function maximizeWindow() { doInvoke('win_maximize'); }
+    function closeWindow() { doInvoke('win_close'); }
+    function dragWindow() { doInvoke('win_drag'); }
+
+    function openExternalUrl(url) {
+        if (window.__TAURI__ && window.__TAURI__.opener) {
+            window.__TAURI__.opener.openUrl(url);
+        } else if (window.__TAURI__ && window.__TAURI__.shell) {
+            window.__TAURI__.shell.open(url);
+        } else {
+            window.open(url, '_blank');
+        }
+    }
+
+    window.open = function(url, target, features) {
+        doInvoke('open_new_window', { url: url });
         return null;
     };
 
@@ -77,20 +176,423 @@ const LINK_HANDLER_SCRIPT: &str = r#"
         const a = e.target.closest('a');
         if (!a || !a.href) return;
 
-        const isLocal = a.href.startsWith('http://localhost') || a.href.startsWith('tauri://') || a.href.startsWith(window.location.origin) || a.href.startsWith('/');
-
-        if (a.target === '_blank') {
+        if (a.href.includes('discord.gg') || a.href.includes('discord.com')) {
             e.preventDefault();
-            if (isLocal) {
-                window.location.href = a.href;
-            } else if (window.__TAURI__ && window.__TAURI__.opener) {
-                window.__TAURI__.opener.openUrl(a.href);
-            } else if (window.__TAURI_INTERNALS__) {
-                window.__TAURI_INTERNALS__.invoke('plugin:opener|open_url', { rule: { url: a.href } });
-            }
+            e.stopPropagation();
+            openExternalUrl(a.href);
+            return;
+        }
+
+        if (a.target === '_blank' || e.ctrlKey || e.metaKey || e.button === 1) {
+            e.preventDefault();
+            e.stopPropagation();
+            doInvoke('open_new_window', { url: a.href });
         }
     }, true);
-"#;
+
+    function injectLiquidNavBar() {
+        if (document.getElementById('vyla-floating-nav')) return;
+        if (!document.body) return;
+
+        const style = document.createElement('style');
+        style.innerHTML = `
+            #vyla-nav-filter-svg {
+                position: fixed !important;
+                top: 0 !important;
+                left: 0 !important;
+                width: 0 !important;
+                height: 0 !important;
+                pointer-events: none !important;
+                opacity: 0 !important;
+                z-index: -1 !important;
+            }
+
+            #vyla-floating-nav {
+                position: fixed !important;
+                top: 12px !important;
+                left: 12px !important;
+                z-index: 2147483647 !important;
+                height: 42px !important;
+                width: 42px !important;
+                border-radius: 9999px !important;
+                display: flex !important;
+                align-items: center !important;
+                background: rgba(255, 255, 255, 0.04) !important;
+                backdrop-filter: url(#vyla-glass-filter) blur(16px) saturate(1.8) contrast(1.1) !important;
+                -webkit-backdrop-filter: blur(16px) saturate(1.8) contrast(1.1) !important;
+                box-shadow: 0 8px 32px rgba(0, 0, 0, 0.45) !important;
+                transition: width 0.3s cubic-bezier(0.16, 1, 0.3, 1), padding 0.3s cubic-bezier(0.16, 1, 0.3, 1) !important;
+                overflow: hidden !important;
+                padding: 0 !important;
+                user-select: none !important;
+                pointer-events: auto !important;
+                -webkit-app-region: no-drag !important;
+            }
+
+            #vyla-floating-nav:hover {
+                width: 82px !important;
+                padding-right: 6px !important;
+            }
+
+            .vyla-nav-logo-wrap {
+                width: 42px !important;
+                min-width: 42px !important;
+                height: 42px !important;
+                display: flex !important;
+                align-items: center !important;
+                justify-content: center !important;
+                cursor: pointer !important;
+                border-radius: 9999px !important;
+                position: relative !important;
+                z-index: 2147483647 !important;
+                pointer-events: auto !important;
+                padding: 0 !important;
+            }
+
+            .vyla-nav-logo-wrap img {
+                width: 26px !important;
+                height: 26px !important;
+                min-width: 26px !important;
+                min-height: 26px !important;
+                object-fit: contain !important;
+                pointer-events: none !important;
+                display: block !important;
+            }
+
+            .vyla-nav-links {
+                display: flex !important;
+                align-items: center !important;
+                gap: 4px !important;
+                opacity: 0 !important;
+                transform: translateX(-6px) !important;
+                transition: opacity 0.2s ease, transform 0.25s cubic-bezier(0.16, 1, 0.3, 1) !important;
+                pointer-events: none !important;
+                position: relative !important;
+                z-index: 2 !important;
+                margin-left: 2px !important;
+            }
+
+            #vyla-floating-nav:hover .vyla-nav-links {
+                opacity: 1 !important;
+                transform: translateX(0) !important;
+                pointer-events: auto !important;
+            }
+
+            .vyla-nav-btn {
+                width: 32px !important;
+                min-width: 32px !important;
+                height: 32px !important;
+                border-radius: 9999px !important;
+                border: none !important;
+                outline: none !important;
+                background: transparent !important;
+                box-shadow: none !important;
+                color: #ffffff !important;
+                display: flex !important;
+                align-items: center !important;
+                justify-content: center !important;
+                cursor: pointer !important;
+                transition: transform 0.15s ease, opacity 0.2s ease !important;
+                opacity: 0.85 !important;
+                padding: 0 !important;
+            }
+
+            .vyla-nav-btn:hover {
+                opacity: 1 !important;
+            }
+
+            .vyla-nav-btn svg {
+                width: 20px !important;
+                height: 20px !important;
+                fill: #ffffff !important;
+                pointer-events: none !important;
+                display: block !important;
+            }
+
+            #tauri-custom-titlebar {
+                position: fixed !important;
+                top: 0 !important;
+                left: 0 !important;
+                right: 0 !important;
+                height: 32px !important;
+                max-height: 32px !important;
+                display: flex !important;
+                justify-content: flex-end !important;
+                align-items: center !important;
+                z-index: 2147483647 !important;
+                background: transparent !important;
+                pointer-events: none !important;
+                box-sizing: border-box !important;
+                margin: 0 !important;
+                padding: 0 !important;
+            }
+
+            .tauri-drag-region {
+                position: absolute !important;
+                inset: 0 !important;
+                height: 32px !important;
+                cursor: default !important;
+                pointer-events: auto !important;
+            }
+
+            .tauri-window-controls {
+                display: flex !important;
+                height: 32px !important;
+                margin: 0 !important;
+                padding: 0 !important;
+                pointer-events: auto !important;
+                z-index: 2147483648 !important;
+            }
+
+            button.tauri-btn {
+                width: 46px !important;
+                min-width: 46px !important;
+                max-width: 46px !important;
+                height: 32px !important;
+                background: transparent !important;
+                border: none !important;
+                color: #ffffff !important;
+                display: flex !important;
+                align-items: center !important;
+                justify-content: center !important;
+                cursor: pointer !important;
+                outline: none !important;
+            }
+
+            button.tauri-btn:hover { background: rgba(255, 255, 255, 0.2) !important; }
+            button#tauri-btn-close:hover { background: #e81123 !important; color: #ffffff !important; }
+            button.tauri-btn svg { width: 10px !important; height: 10px !important; fill: currentColor !important; pointer-events: none !important; }
+        `;
+        document.head.appendChild(style);
+
+        const filterSvg = document.createElementNS('http://www.w3.org/2000/svg', 'svg');
+        filterSvg.id = 'vyla-nav-filter-svg';
+        filterSvg.innerHTML = `
+            <defs>
+                <filter id="vyla-glass-filter" color-interpolation-filters="sRGB" x="0%" y="0%" width="100%" height="100%">
+                    <feImage id="vyla-nav-fe-img" x="0" y="0" width="100%" height="100%" preserveAspectRatio="none" result="map" />
+                    <feDisplacementMap id="vyla-nav-red" in="SourceGraphic" in2="map" result="dispRed" />
+                    <feColorMatrix in="dispRed" type="matrix" values="1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 0" result="red" />
+                    <feDisplacementMap id="vyla-nav-green" in="SourceGraphic" in2="map" result="dispGreen" />
+                    <feColorMatrix in="dispGreen" type="matrix" values="0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 0 0 0 1 0" result="green" />
+                    <feDisplacementMap id="vyla-nav-blue" in="SourceGraphic" in2="map" result="dispBlue" />
+                    <feColorMatrix in="dispBlue" type="matrix" values="0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0 0 0 1 0" result="blue" />
+                    <feBlend in="red" in2="green" mode="screen" result="rg" />
+                    <feBlend in="rg" in2="blue" mode="screen" result="output" />
+                    <feGaussianBlur in="output" stdDeviation="0.8" />
+                </filter>
+            </defs>
+        `;
+        document.body.appendChild(filterSvg);
+
+        const nav = document.createElement('div');
+        nav.id = 'vyla-floating-nav';
+        nav.innerHTML = `
+            <div class="vyla-nav-logo-wrap" title="Go to Home">
+                <img src="https://gitlab.com/vyla-entertainment/home-frontend/-/raw/main/assets/images/icons/logo_white.png" alt="Logo" />
+            </div>
+            <div class="vyla-nav-links">
+                <button class="vyla-nav-btn" id="vyla-btn-discord" title="Discord Community">
+                    <svg viewBox="0 0 127.14 96.36"><path d="M107.7,8.07A105.15,105.15,0,0,0,81.47,0a72.06,72.06,0,0,0-3.36,6.83A97.68,97.68,0,0,0,49,6.83,72.37,72.37,0,0,0,45.64,0,105.89,105.89,0,0,0,19.39,8.09C2.79,32.65-1.71,56.6.54,80.21h0A105.73,105.73,0,0,0,32.71,96.36,77.7,77.7,0,0,0,39.6,85.25a68.42,68.42,0,0,1-10.85-5.18c.91-.66,1.8-1.34,2.66-2a75.57,75.57,0,0,0,64.32,0c.87.71,1.76,1.39,2.66,2a68.68,68.68,0,0,1-10.87,5.19,77,77,0,0,0,6.89,11.1A105.25,105.25,0,0,0,126.6,80.22h0C129.24,52.84,122.09,29.11,107.7,8.07ZM42.45,65.69C36.18,65.69,31,60,31,53s5-12.74,11.43-12.74S54,45.91,53.89,53,48.84,65.69,42.45,65.69Zm42.24,0C78.41,65.69,73.25,60,73.25,53s5-12.74,11.44-12.74S96.23,45.91,96.12,53,91.08,65.69,84.69,65.69Z"/></svg>
+                </button>
+            </div>
+        `;
+        document.body.appendChild(nav);
+
+        const logoBtn = nav.querySelector('.vyla-nav-logo-wrap');
+        if (logoBtn) {
+            logoBtn.onclick = (e) => {
+                e.preventDefault();
+                e.stopPropagation();
+                window.location.href = 'http://localhost:4890';
+            };
+        }
+
+        const btnDiscord = nav.querySelector('#vyla-btn-discord');
+        if (btnDiscord) {
+            btnDiscord.onclick = (e) => {
+                e.preventDefault();
+                e.stopPropagation();
+                openExternalUrl('https://discord.gg/5eqRhKeywG');
+            };
+        }
+
+        const feImage = document.getElementById('vyla-nav-fe-img');
+        const redChannel = document.getElementById('vyla-nav-red');
+        const greenChannel = document.getElementById('vyla-nav-green');
+        const blueChannel = document.getElementById('vyla-nav-blue');
+
+        function generateNavMap() {
+            const rect = nav.getBoundingClientRect();
+            const w = Math.round(rect.width) || 42;
+            const h = Math.round(rect.height) || 42;
+            const edgeSize = Math.min(w, h) * 0.08;
+            const svgContent = `
+                <svg viewBox="0 0 ${w} ${h}" xmlns="http://www.w3.org/2000/svg">
+                    <defs>
+                        <linearGradient id="vyla-nav-red-g" x1="100%" y1="0%" x2="0%" y2="0%">
+                            <stop offset="0%" stop-color="#000000" stop-opacity="0"/>
+                            <stop offset="100%" stop-color="red"/>
+                        </linearGradient>
+                        <linearGradient id="vyla-nav-blue-g" x1="0%" y1="0%" x2="0%" y2="100%">
+                            <stop offset="0%" stop-color="#000000" stop-opacity="0"/>
+                            <stop offset="100%" stop-color="blue"/>
+                        </linearGradient>
+                    </defs>
+                    <rect width="${w}" height="${h}" fill="black"/>
+                    <rect width="${w}" height="${h}" rx="9999" fill="url(#vyla-nav-red-g)"/>
+                    <rect width="${w}" height="${h}" rx="9999" fill="url(#vyla-nav-blue-g)" style="mix-blend-mode: screen;"/>
+                    <rect x="${edgeSize}" y="${edgeSize}" width="${w - edgeSize * 2}" height="${h - edgeSize * 2}" rx="9999" fill="rgba(255,255,255,0.4)" style="filter: blur(4px);"/>
+                </svg>
+            `;
+            return "data:image/svg+xml," + encodeURIComponent(svgContent);
+        }
+
+        function updateNavGlass() {
+            if (!feImage) return;
+            feImage.setAttribute("href", generateNavMap());
+            const distortionScale = -180;
+            redChannel.setAttribute("scale", distortionScale - 10);
+            greenChannel.setAttribute("scale", distortionScale);
+            blueChannel.setAttribute("scale", distortionScale + 10);
+            [redChannel, greenChannel, blueChannel].forEach((ch) => {
+                ch.setAttribute("xChannelSelector", "R");
+                ch.setAttribute("yChannelSelector", "G");
+            });
+        }
+
+        updateNavGlass();
+        const obs = new ResizeObserver(() => setTimeout(updateNavGlass, 0));
+        obs.observe(nav);
+
+        const tb = document.createElement('div');
+        tb.id = 'tauri-custom-titlebar';
+        tb.innerHTML = `
+            <div class="tauri-drag-region"></div>
+            <div class="tauri-window-controls">
+                <button class="tauri-btn" id="tauri-btn-min" title="Minimize"><svg viewBox="0 0 10 10"><rect x="1" y="4" width="8" height="1"/></svg></button>
+                <button class="tauri-btn" id="tauri-btn-max" title="Maximize"><svg viewBox="0 0 10 10"><path d="M1,1v8h8V1H1z M8,8H2V2h6V8z"/></svg></button>
+                <button class="tauri-btn" id="tauri-btn-close" title="Close"><svg viewBox="0 0 10 10"><path d="M10,1.4L8.6,0L5,3.6L1.4,0L0,1.4L3.6,5L0,8.6L1.4,10L5,6.4L8.6,10L10,8.6L6.4,5L10,1.4z"/></svg></button>
+            </div>
+        `;
+        document.body.appendChild(tb);
+
+        const btnMin = tb.querySelector('#tauri-btn-min');
+        const btnMax = tb.querySelector('#tauri-btn-max');
+        const btnClose = tb.querySelector('#tauri-btn-close');
+        const dragEl = tb.querySelector('.tauri-drag-region');
+
+        if (btnMin) btnMin.onclick = (e) => { e.preventDefault(); e.stopPropagation(); minimizeWindow(); };
+        if (btnMax) btnMax.onclick = (e) => { e.preventDefault(); e.stopPropagation(); maximizeWindow(); };
+        if (btnClose) btnClose.onclick = (e) => { e.preventDefault(); e.stopPropagation(); closeWindow(); };
+        if (dragEl) {
+            dragEl.onmousedown = (e) => {
+                if (e.buttons === 1) {
+                    e.preventDefault();
+                    dragWindow();
+                }
+            };
+        }
+    }
+
+  if (document.readyState === 'loading') {
+        document.addEventListener('DOMContentLoaded', injectLiquidNavBar);
+    } else {
+        injectLiquidNavBar();
+    }
+    const navObserver = new MutationObserver(() => {
+        if (!document.getElementById('vyla-floating-nav')) {
+            injectLiquidNavBar();
+        }
+    });
+    navObserver.observe(document.documentElement, { childList: true, subtree: true });
+"##;
+
+#[tauri::command]
+fn win_minimize(window: tauri::Window) -> Result<(), String> {
+    window.minimize().map_err(|e| e.to_string())
+}
+
+#[tauri::command]
+fn win_maximize(window: tauri::Window) -> Result<(), String> {
+    if let Ok(is_max) = window.is_maximized() {
+        if is_max {
+            window.unmaximize().map_err(|e| e.to_string())
+        } else {
+            window.maximize().map_err(|e| e.to_string())
+        }
+    } else {
+        Ok(())
+    }
+}
+
+#[tauri::command]
+fn win_close(window: tauri::Window) -> Result<(), String> {
+    window.close().map_err(|e| e.to_string())
+}
+
+#[tauri::command]
+fn win_drag(window: tauri::Window) -> Result<(), String> {
+    window.start_dragging().map_err(|e| e.to_string())
+}
+
+#[tauri::command]
+fn open_new_window(app: tauri::AppHandle, url: String) -> Result<(), String> {
+    debug_log(&format!("[SAME-TAB] Redirecting main window to: {}", url));
+
+    let final_url = if url.starts_with("http") || url.starts_with("tauri://") {
+        url.clone()
+    } else if url.starts_with('/') {
+        format!("http://localhost:4890{}", url)
+    } else {
+        format!("http://localhost:4890/{}", url)
+    };
+
+    if let Some(window) = app.get_webview_window("main") {
+        window
+            .eval(&format!(
+                "window.location.href = '{}';",
+                final_url.replace('\'', "\\'")
+            ))
+            .map_err(|e| e.to_string())?;
+        Ok(())
+    } else {
+        Err("main window not found".to_string())
+    }
+}
+
+#[tauri::command]
+fn get_logo_base64(app: tauri::AppHandle) -> Result<String, String> {
+    use std::io::Read;
+    let mut candidate_paths = Vec::new();
+
+    if let Ok(res_dir) = app.path().resource_dir() {
+        candidate_paths.push(res_dir.join("build").join("icon_white.png"));
+        candidate_paths.push(res_dir.join("_up_").join("build").join("icon_white.png"));
+    }
+
+    if let Ok(mut cur) = std::env::current_dir() {
+        candidate_paths.push(cur.join("build").join("icon_white.png"));
+        if cur.ends_with("src-tauri") {
+            cur.pop();
+            candidate_paths.push(cur.join("build").join("icon_white.png"));
+        }
+    }
+
+    for path in candidate_paths {
+        if path.exists() {
+            if let Ok(mut file) = std::fs::File::open(&path) {
+                let mut buffer = Vec::new();
+                if file.read_to_end(&mut buffer).is_ok() {
+                    use base64::Engine;
+                    return Ok(base64::engine::general_purpose::STANDARD.encode(buffer));
+                }
+            }
+        }
+    }
+
+    Err("icon_white.png not found".to_string())
+}
 
 fn main() {
     debug_log("=== Vyla Home Executable Started ===");
@@ -99,31 +601,50 @@ fn main() {
         .plugin(tauri_plugin_shell::init())
         .plugin(tauri_plugin_process::init())
         .plugin(tauri_plugin_opener::init())
+        .invoke_handler(tauri::generate_handler![
+            win_minimize,
+            win_maximize,
+            win_close,
+            win_drag,
+            open_new_window,
+            get_logo_base64
+        ])
         .manage(NodeServices(Mutex::new(None)))
-        .setup(|app| {
+.setup(|app| {
             debug_log("Tauri setup started");
             let app_data = app.path().app_data_dir().unwrap_or_default();
             let app_data_str = clean_path(&app_data);
-            debug_log(&format!("AppData path: {}", app_data_str));
 
             let window = WebviewWindowBuilder::new(app, "main", WebviewUrl::App("index.html".into()))
                 .title("Vyla Home")
                 .inner_size(1280.0, 800.0)
-                .decorations(true)
+                .decorations(false)
+                .transparent(true)
                 .resizable(true)
+                .devtools(cfg!(debug_assertions))
+                .initialization_script("window.__VYLA_WINDOW_LABEL = 'main';")
                 .initialization_script(LINK_HANDLER_SCRIPT)
                 .build()?;
-            
-            debug_log("Webview created");
 
             let (main_js, root_dir) = resolve_script_and_root(app);
+            let node_bin = match find_node_binary(app) {
+                Some(bin) => bin,
+                None => {
+                    let _ = window.emit(
+                        "error",
+                        serde_json::json!({
+                            "message": "Node.js runtime not found. Please ensure Node.js is installed or bundled correctly."
+                        }),
+                    );
+                    return Ok(());
+                }
+            };
 
-            debug_log(&format!("Spawning node with script: {}", main_js));
-
-            let mut cmd = Command::new("node");
+            let mut cmd = Command::new(&node_bin);
             cmd.arg(&main_js)
                 .current_dir(&root_dir)
                 .env("APPDATA_PATH", &app_data_str)
+                .env("NODE_EXE", &node_bin)
                 .stdout(Stdio::piped())
                 .stderr(Stdio::piped());
 
@@ -136,34 +657,171 @@ fn main() {
 
             match cmd.spawn() {
                 Ok(mut child) => {
-                    debug_log("Node spawned successfully");
+                    debug_log(&format!(
+                        "Node child process spawned successfully, PID: {}",
+                        child.id()
+                    ));
+                    if let Some(stderr) = child.stderr.take() {
+                        std::thread::spawn(move || {
+                            use std::io::{BufRead, BufReader};
+                            let reader = BufReader::new(stderr);
+                            for line in reader.lines().flatten() {
+                                debug_log(&format!("[NODE STDERR] {}", line));
+                            }
+                        });
+                    }
+
                     if let Some(stdout) = child.stdout.take() {
                         let w = window.clone();
                         std::thread::spawn(move || {
                             use std::io::{BufRead, BufReader};
                             let reader = BufReader::new(stdout);
                             for line in reader.lines().flatten() {
-                                debug_log(&format!("Node stdout: {}", line));
+                                debug_log(&format!("[NODE STDOUT] {}", line));
                                 if let Ok(msg) = serde_json::from_str::<BackendMessage>(&line) {
-                                    let _ = w.emit(&msg.event, msg.data.clone());
-                                    if msg.event == "ready" {
-                                        if let Some(url) = msg.data.get("url").and_then(|u| u.as_str()) {
-                                            let _ = w.eval(&format!("window.location.href = '{}';", url));
+                                    debug_log(&format!("[MAIN-DEBUG] Received event: {}", msg.event));
+                                    debug_log(&format!(
+                                        "[MAIN-DEBUG] Event data: {}",
+                                        serde_json::to_string(&msg.data).unwrap_or_default()
+                                    ));
+                                    if msg.event == "tauri-cmd" {
+                                        let window_label = msg
+                                            .data
+                                            .get("window")
+                                            .and_then(|val| val.as_str())
+                                            .unwrap_or("main");
+                                        debug_log(&format!(
+                                            "[MAIN-DEBUG] Finding window by label: {}",
+                                            window_label
+                                        ));
+
+                                        if let Some(cmd_window) =
+                                            w.app_handle().get_webview_window(window_label)
+                                        {
+                                            if let Some(cmd) =
+                                                msg.data.get("cmd").and_then(|c| c.as_str())
+                                            {
+                                                debug_log(&format!(
+                                                    "[TAURI-CMD] Executing action: {}",
+                                                    cmd
+                                                ));
+                                                match cmd {
+                                                    "win_minimize" => {
+                                                        let res = cmd_window.minimize();
+                                                        debug_log(&format!(
+                                                            "[TAURI-CMD] Minimize result: {:?}",
+                                                            res
+                                                        ));
+                                                    }
+                                                    "win_maximize" => {
+                                                        let is_max = cmd_window
+                                                            .is_maximized()
+                                                            .unwrap_or(false);
+                                                        debug_log(&format!(
+                                                            "[TAURI-CMD] Currently maximized: {}",
+                                                            is_max
+                                                        ));
+                                                        let res = if is_max {
+                                                            cmd_window.unmaximize()
+                                                        } else {
+                                                            cmd_window.maximize()
+                                                        };
+                                                        debug_log(&format!(
+                                                            "[TAURI-CMD] Maximize/Unmaximize result: {:?}",
+                                                            res
+                                                        ));
+                                                    }
+                                                    "win_close" => {
+                                                        let res = cmd_window.close();
+                                                        debug_log(&format!(
+                                                            "[TAURI-CMD] Close result: {:?}",
+                                                            res
+                                                        ));
+                                                    }
+                                                    "win_drag" => {
+                                                        let res = cmd_window.start_dragging();
+                                                        debug_log(&format!(
+                                                            "[TAURI-CMD] Drag result: {:?}",
+                                                            res
+                                                        ));
+                                                    }
+                                                    "open_new_window" => {
+                                                        debug_log("[TAURI-CMD-DEBUG] open_new_window command received");
+                                                        debug_log(&format!(
+                                                            "[TAURI-CMD-DEBUG] Full message data: {}",
+                                                            serde_json::to_string(&msg.data)
+                                                                .unwrap_or_default()
+                                                        ));
+                                                        if let Some(url) = msg
+                                                            .data
+                                                            .get("url")
+                                                            .and_then(|u| u.as_str())
+                                                        {
+                                                            debug_log(&format!(
+                                                                "[TAURI-CMD-DEBUG] URL extracted: {}",
+                                                                url
+                                                            ));
+                                                            debug_log(&format!(
+                                                                "[TAURI-CMD-DEBUG] URL length: {}",
+                                                                url.len()
+                                                            ));
+                                                            debug_log("[TAURI-CMD-DEBUG] Attempting to dispatch to main thread");
+                                                            let app_handle = w.app_handle().clone();
+                                                            let closure_handle = app_handle.clone();
+                                                            let url_owned = url.to_string();
+                                                            let dispatch_result = app_handle
+                                                                .run_on_main_thread(move || {
+                                                                    debug_log("[TAURI-CMD-DEBUG] Now on main thread, calling open_new_window");
+                                                                    match open_new_window(
+                                                                        closure_handle,
+                                                                        url_owned,
+                                                                    ) {
+                                                                        Ok(_) => {
+                                                                            debug_log("[TAURI-CMD-DEBUG] open_new_window succeeded");
+                                                                        }
+                                                                        Err(e) => {
+                                                                            debug_log(&format!(
+                                                                                "[TAURI-CMD-DEBUG] open_new_window error: {}",
+                                                                                e
+                                                                            ));
+                                                                        }
+                                                                    }
+                                                                });
+                                                            match dispatch_result {
+                                                                Ok(_) => debug_log(
+                                                                    "[TAURI-CMD-DEBUG] Main thread dispatch succeeded",
+                                                                ),
+                                                                Err(e) => debug_log(&format!(
+                                                                    "[TAURI-CMD-DEBUG] Main thread dispatch failed: {}",
+                                                                    e
+                                                                )),
+                                                            }
+                                                        } else {
+                                                            debug_log("[TAURI-CMD-DEBUG] ERROR: No URL found in message data");
+                                                            debug_log(&format!(
+                                                                "[TAURI-CMD-DEBUG] Available keys: {:?}",
+                                                                msg.data
+                                                                    .as_object()
+                                                                    .map(|o| o.keys().collect::<Vec<_>>())
+                                                            ));
+                                                        }
+                                                    }
+                                                    _ => {}
+                                                }
+                                            }
+                                        } else {
+                                            debug_log(&format!(
+                                                "[TAURI-CMD] Window '{}' NOT FOUND!",
+                                                window_label
+                                            ));
                                         }
+                                    } else {
+                                        let _ = w.emit(&msg.event, msg.data.clone());
                                     }
                                 }
                             }
                         });
                     }
-                    if let Some(stderr) = child.stderr.take() {
-                        std::thread::spawn(move || {
-                            use std::io::{BufRead, BufReader};
-                            let reader = BufReader::new(stderr);
-                            for line in reader.lines().flatten() {
-                                debug_log(&format!("Node STDERR: {}", line));
-                            }
-                        });
-                    }
 
                     let state: State<NodeServices> = app.state();
                     if let Ok(mut lock) = state.0.lock() {
@@ -171,20 +829,29 @@ fn main() {
                     };
                 }
                 Err(e) => {
-                    debug_log(&format!("FAILED to spawn Node: {}", e));
+                    debug_log(&format!("Failed to spawn node: {}", e));
+                    let _ = window.emit(
+                        "error",
+                        serde_json::json!({
+                            "message": format!("Failed to launch backend runtime: {}", e)
+                        }),
+                    );
                 }
             }
 
             Ok(())
         })
-        .on_window_event(|window, event| {
+ .on_window_event(|window, event| {
             if let tauri::WindowEvent::Destroyed = event {
-                let state: State<NodeServices> = window.state();
-                if let Ok(mut lock) = state.0.lock() {
-                    if let Some(mut child) = lock.take() {
-                        let _ = child.kill();
-                    }
-                };
+                if window.label() == "main" {
+                    let state: State<NodeServices> = window.state();
+                    if let Ok(mut lock) = state.0.lock() {
+                        if let Some(mut child) = lock.take() {
+                            debug_log("[SHUTDOWN] Main window destroyed, terminating node process natively");
+                            kill_child_process(&mut child);
+                        }
+                    };
+                }
             }
         })
         .run(tauri::generate_context!())

src-tauri/tauri.conf.json

@@ -1,7 +1,7 @@
 {
-    "$schema": "https://raw.githubusercontent.com/tauri-apps/tauri/dev/tooling/cli/schema.json",
+    "$schema": "https://schema.tauri.app/config/2",
     "productName": "Vyla Home",
-    "version": "1.0.0",
+    "version": "1.1.8",
     "identifier": "com.vyla.home",
     "build": {
         "frontendDist": "../ui"
@@ -22,7 +22,14 @@
             "icons/icon.icns",
             "icons/icon.ico"
         ],
+        "windows": {
+            "webviewInstallMode": {
+                "type": "downloadBootstrapper"
+            }
+        },
         "resources": [
+            "WebView2Loader.dll",
+            "../bin/*",
             "../main.js",
             "../service-manager.js",
             "../patcher.js",
@@ -33,4 +40,4 @@
             "../node_modules/**/*"
         ]
     }
-}
+}

update-client.js

@@ -10,6 +10,8 @@ const ALLOWED_REDIRECT_HOSTS = [
   'storage.googleapis.com'
 ];
 
+const httpsAgent = new https.Agent({ keepAlive: true, maxSockets: 32 });
+
 function isAllowedHost(url) {
   try {
     const hostname = new URL(url).hostname;
@@ -46,7 +48,8 @@ class UpdateClient {
         port: 443,
         path: urlObj.pathname + urlObj.search,
         method: 'GET',
-        headers
+        headers,
+        agent: httpsAgent
       };
 
       const req = https.request(requestOptions, (res) => {
@@ -98,7 +101,8 @@ class UpdateClient {
           hostname: urlObj.hostname,
           port: urlObj.port || (urlObj.protocol === 'https:' ? 443 : 80),
           path: urlObj.pathname + urlObj.search,
-          headers
+          headers,
+          agent: httpsAgent
         };
 
         const req = https.get(requestOptions, (res) => {
@@ -180,7 +184,8 @@ class UpdateClient {
           hostname: urlObj.hostname,
           port: urlObj.port || (urlObj.protocol === 'https:' ? 443 : 80),
           path: urlObj.pathname + urlObj.search,
-          headers
+          headers,
+          agent: httpsAgent
         };
 
         const req = https.get(requestOptions, (res) => {