Skip to content

Add Plex and Jellyfin clients and repair VLC APK source - #65

Merged
doudar merged 1 commit into
mainfrom
codex/plex-jellyfin-source-audit
Oct 26, 2026
Merged

doudar merged 1 commit into
mainfrom
codex/plex-jellyfin-source-audit

Conversation

@doudar

@doudar doudar commented Oct 26, 2026

Copy link
Copy Markdown
Owner

Changes

Plex and Jellyfin were missing from the application catalog. Add Plex's official archived mobile APK and Jellyfin's latest stable mobile Libre APK, and repair VLC Legacy's delivery source so it passes OpenPelo's required byte-range probe.

  • Plex: official downloads.plex.tv mobile-capable Kepler 10.26.0.2578, ARM64, Android 6+/API 23, with SHA-256. Explicitly labeled archived and retains the publisher's Plex Pass requirement. The current redesigned mobile announcements link to Google Play; no current direct mobile APK update path was verified. This is not a newer TV-only client.
  • Jellyfin: official jellyfin/jellyfin-android latest release, with a narrow jellyfin-android-v*-libre-release.apk selector that excludes debug/proprietary/TV builds and AABs. Currently 2.7.3, Android 5+/API 21, ARM32/ARM64/x86/x86_64.
  • VLC Legacy: replace the mirror dispatcher with VideoLAN's official archive, preserving 3.2.12 and adding SHA-256. The old dispatcher returned HTTP 200 to a Range request; a HEAD redirect reached a live mirror. This was range-incompatible delivery, not a confirmed 404.
  • Add a reusable read-only catalog audit command, catalog validation/asset-selection tests, and correct the contributor documentation: Android API and ABIs come from APK metadata, not a static abi field.

Source audit

Audited all 39 existing entries from main at 27ca5f1. The other 38 passed the production APK probe and remain unchanged. After the additions and VLC repair, all 41 entries passed release resolution and bounded ZIP/manifest inspection.

Full app-by-app results, provenance and limitations: catalog source audit. Working pinned older versions were retained. No login gate or bot challenge was encountered in successful probes; no restrictions were bypassed or arbitrary APK mirrors introduced.

Validation

  • flutter pub get --enforce-lockfile
  • dart format --output=none --set-exit-if-changed lib test tool/audit_catalog.dart — passed
  • flutter analyze --no-pub — no issues
  • flutter test --no-pub — 111 passed
  • python -m unittest discover -s tool/tests -p 'test_*.py' — 7 passed
  • dart run tool/audit_catalog.dart — 41/41 verified, exit 0
  • Full official Plex/VLC downloads hashed locally; no APK binaries committed
  • flutter build windows --release --no-pub — passed; existing media_kit CMake developer warnings only
  • git diff --check and final diff review — passed

No APK installation, device changes, playback/DRM/sign-in tests, or Peloton hardware compatibility claim. Built locally without launching the application. Draft only; no release, merge or deployment.

@doudar
doudar marked this pull request as ready for review October 26, 2026 13:34
@doudar
doudar merged commit 798e0d5 into main Oct 26, 2026
5 checks passed
@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Oct 26, 2026 •

Copy link
Copy Markdown

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review ✅ Completed 2026-10-26T13:35:45.825223Z 0d4e13a Draft marked ready
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

@doudar
doudar deleted the codex/plex-jellyfin-source-audit branch October 26, 2026 13:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant