Check downloaded originals against their recorded content hash (closes #68)

downloadFile, shared by quak get, the content cache and backup, hashes the decrypted bytes (unkeyed BLAKE2b-512, standard base64) and stores nothing on a mismatch, failing with an error naming the file ID. A live photo ZIP is unpacked with fflate and its image and video hashed separately as <imageHash>:<videoHash>. decryptFile reads the older imageHash/videoHash fields for live photos. A file with no recorded hash is stored unchecked. Model: opus-5-5
2026-09-23 03:32:05 +00:00
parent d05b53d560
commit 474298272a
13 changed files with 300 additions and 17 deletions
@@ -42,6 +42,7 @@
        "env-paths": "4.0.0",
        "exif-reader": "2.0.3",
        "fast-srp-hap": "2.0.4",
+        "fflate": "0.8.3",
        "jpeg-js": "0.4.4",
        "libsodium-wrappers-sumo": "0.8.4"
    }