feat(launcher): harden native caching and telemetry; consolidate documentation

- Implemented SHA-256 integrity checks and stale temp purge in native download logic.\n- Enabled strict hash verification in background sync cycle.\n- Made CPU load gauge dynamic using real-time loadavg metadata.\n- Consolidated native app documentation into single master manual.\n- Marked legacy electron_native.js as deprecated.\n- Updated roadmap with temp cleanup and launch protection tasks.
This commit is contained in:
Scott Idem
2026-02-10 14:07:45 -05:00
parent 6abfff293c
commit b5b44e4016
16 changed files with 990 additions and 48 deletions

View File

@@ -150,7 +150,8 @@
const exists = await native.check_hash_file_cache({
cache_root,
hash: file_obj.hash_sha256,
hash_prefix_length: prefix_len
hash_prefix_length: prefix_len,
verify_hash: true // Hardened check: Perform full SHA-256 verify if file exists
});
if (exists) {
@@ -238,7 +239,10 @@
if (info) {
update_payload.info_hostname = info.hostname;
update_payload.info_ip_list = info.ip_addresses.join(', ');
// Safely handle IP list (bridge may return ip_addresses or networkInterfaces)
const ips = info.ip_addresses || [];
update_payload.info_ip_list = Array.isArray(ips) ? ips.join(', ') : 'Unknown';
update_payload.meta_json = {
platform: info.platform,
release: info.release,