fix(app): ship checksum worker sidecar across all bundle formats

app/build.bat

@@ -610,6 +610,13 @@ if errorlevel 1 (
     endlocal & exit /b 1
 )
 
+rem ── Pre-build verification (typecheck + tests across packages) ──
+call :run_pre_build_tests
+if errorlevel 1 (
+    for %%f in (!_all_expected!) do echo FAIL %%f>>"!BUILD_RESULTS_FILE!"
+    endlocal & exit /b 1
+)
+
 rem ── Build frontend ──
 call :build_frontend
 if errorlevel 1 (
@@ -721,6 +728,40 @@ call :elapsed_since !_icons_start! _icons_elapsed
 echo === Icons done ^(!_icons_elapsed!^) ===
 exit /b 0
 
+rem ─── run_pre_build_tests ─────────────────────────────────────────────────
+rem Pre-build verification: ensure source quality across packages before producing artifacts.
+rem Backend unit tests run inside backend\build.bat, here we cover the rest.
+rem Skip with SKIP_TESTS=1 only in emergencies (e.g. broken upstream tooling); CI must never set it.
+
+:run_pre_build_tests
+if "%SKIP_TESTS%"=="1" (
+    echo === Pre-build tests skipped ^(SKIP_TESTS=1^) ===
+    exit /b 0
+)
+set "_test_start=0"
+call :get_timestamp _test_start
+echo === Running pre-build verification ===
+cd /d "!ROOT_DIR!\shared"
+call bun install --frozen-lockfile
+if errorlevel 1 exit /b 1
+call bun run typecheck
+if errorlevel 1 exit /b 1
+cd /d "!ROOT_DIR!\cli"
+call bun install --frozen-lockfile
+if errorlevel 1 exit /b 1
+call bun run typecheck
+if errorlevel 1 exit /b 1
+cd /d "!ROOT_DIR!\frontend"
+call bun install --frozen-lockfile
+if errorlevel 1 exit /b 1
+call bun run check
+if errorlevel 1 exit /b 1
+cd /d "!SCRIPT_DIR!"
+set "_test_elapsed=0"
+call :elapsed_since !_test_start! _test_elapsed
+echo === Pre-build verification done ^(!_test_elapsed!^) ===
+exit /b 0
+
 rem ─── build_frontend ──────────────────────────────────────────────────────
 
 :build_frontend
@@ -732,8 +773,11 @@ set "_fe_start=0"
 call :get_timestamp _fe_start
 echo === Building frontend ===
 cd /d "!ROOT_DIR!\frontend"
-call build.bat
+call bun i --frozen-lockfile
 if errorlevel 1 exit /b 1
+call bun --bun run build
+if errorlevel 1 exit /b 1
+cd /d "!SCRIPT_DIR!"
 set "_fe_elapsed=0"
 call :elapsed_since !_fe_start! _fe_elapsed
 echo === Frontend done ^(!_fe_elapsed!^) ===
@@ -749,10 +793,24 @@ call :get_timestamp _be_start
 echo === Building backend ^(target: !BUN_TGT!^) ===
 cd /d "!ROOT_DIR!\backend"
 if exist build rmdir /s /q build
-bun i --frozen-lockfile
+call bun i --frozen-lockfile
 if errorlevel 1 ( endlocal & exit /b 1 )
+
+rem Pre-build verification: typecheck + unit tests must pass before producing artifacts.
+rem Mirrors the gate inside backend\build.bat (used when invoking it directly) so Tauri
+rem builds don't bypass tests. Skip with SKIP_TESTS=1 only in emergencies; CI must never set it.
+if not "%SKIP_TESTS%"=="1" (
+	call bun run typecheck
+	if errorlevel 1 ( endlocal & exit /b 1 )
+	call bun run test
+	if errorlevel 1 ( endlocal & exit /b 1 )
+)
+
 mkdir build
-bun build --compile --target !BUN_TGT! src/app.ts --outfile build\lish-backend.exe
+call bun build --compile --target !BUN_TGT! ./src/app.ts --outfile build\lish-backend.exe
+if errorlevel 1 ( endlocal & exit /b 1 )
+mkdir build\lish
+call bun build ./src/lish/checksum-worker.ts --target bun --outfile build\lish\checksum-worker.js
 if errorlevel 1 ( endlocal & exit /b 1 )
 set "_be_elapsed=0"
 call :elapsed_since !_be_start! _be_elapsed
@@ -764,19 +822,19 @@ rem ─── sync_product_info ────────────────
 
 :sync_product_info
 set "PRODUCT_JSON=!ROOT_DIR!\shared\src\product.json"
-for /f "tokens=*" %%v in ('bun -e "process.stdout.write(require(process.argv[1]).version)" "!PRODUCT_JSON!"') do set "PRODUCT_VERSION=%%v"
-for /f "tokens=*" %%n in ('bun -e "process.stdout.write(require(process.argv[1]).name)" "!PRODUCT_JSON!"') do set "PRODUCT_NAME=%%n"
-for /f "tokens=*" %%d in ('bun -e "process.stdout.write(require(process.argv[1]).identifier)" "!PRODUCT_JSON!"') do set "PRODUCT_IDENTIFIER=%%d"
+for /f "tokens=*" %%v in ('call bun -e "process.stdout.write(require(process.argv[1]).version)" "!PRODUCT_JSON!"') do set "PRODUCT_VERSION=%%v"
+for /f "tokens=*" %%n in ('call bun -e "process.stdout.write(require(process.argv[1]).name)" "!PRODUCT_JSON!"') do set "PRODUCT_NAME=%%n"
+for /f "tokens=*" %%d in ('call bun -e "process.stdout.write(require(process.argv[1]).identifier)" "!PRODUCT_JSON!"') do set "PRODUCT_IDENTIFIER=%%d"
 echo Product: !PRODUCT_NAME! v!PRODUCT_VERSION! (!PRODUCT_IDENTIFIER!)
 
 rem Sync tauri.conf.json
-bun -e "var f=require('fs'),p=require(process.argv[1]),t=process.argv[2],c=JSON.parse(f.readFileSync(t,'utf8'));c.productName=p.name;c.mainBinaryName=p.name;c.version=p.version;c.identifier=p.identifier;c.bundle.windows.nsis.startMenuFolder=p.name;f.writeFileSync(t,JSON.stringify(c,null,'\t')+'\n')" "!PRODUCT_JSON!" "!SCRIPT_DIR!tauri.conf.json"
+call bun -e "var f=require('fs'),p=require(process.argv[1]),t=process.argv[2],c=JSON.parse(f.readFileSync(t,'utf8'));c.productName=p.name;c.mainBinaryName=p.name;c.version=p.version;c.identifier=p.identifier;c.bundle.windows.nsis.startMenuFolder=p.name;f.writeFileSync(t,JSON.stringify(c,null,'\t')+'\n')" "!PRODUCT_JSON!" "!SCRIPT_DIR!tauri.conf.json"
 
 rem Sync Cargo.toml version
-bun -e "var f=require('fs'),v=process.argv[1],t=process.argv[2],s=f.readFileSync(t,'utf8').replace(/^version = \"[^\"]*\"/m,'version = \"'+v+'\"');f.writeFileSync(t,s)" "!PRODUCT_VERSION!" "!SCRIPT_DIR!Cargo.toml"
+call bun -e "var f=require('fs'),v=process.argv[1],t=process.argv[2],s=f.readFileSync(t,'utf8').replace(/^version = \"[^\"]*\"/m,'version = \"'+v+'\"');f.writeFileSync(t,s)" "!PRODUCT_VERSION!" "!SCRIPT_DIR!Cargo.toml"
 
 rem Sync wix-fragment-debug.wxs
-bun -e "var f=require('fs'),n=process.argv[1],s=f.readFileSync(process.argv[2],'utf8').replace(/\{\{product_name\}\}/g,n);f.writeFileSync(process.argv[2],s)" "!PRODUCT_NAME!" "!SCRIPT_DIR!wix-fragment-debug.wxs"
+call bun -e "var f=require('fs'),n=process.argv[1],s=f.readFileSync(process.argv[2],'utf8').replace(/\{\{product_name\}\}/g,n);f.writeFileSync(process.argv[2],s)" "!PRODUCT_NAME!" "!SCRIPT_DIR!wix-fragment-debug.wxs"
 exit /b 0
 
 rem ─── build_zip ────────────────────────────────────────────────────────────
@@ -788,6 +846,8 @@ if exist "!ZIP_STAGING!" rmdir /s /q "!ZIP_STAGING!"
 mkdir "!ZIP_STAGING!"
 copy /y "!BUILD_RELEASE_DIR!\!PRODUCT_NAME!.exe" "!ZIP_STAGING!\!PRODUCT_NAME!.exe" >nul
 copy /y "!ROOT_DIR!\backend\build\lish-backend.exe" "!ZIP_STAGING!\lish-backend.exe" >nul
+mkdir "!ZIP_STAGING!\lish"
+xcopy /e /i /y "!ROOT_DIR!\backend\build\lish" "!ZIP_STAGING!\lish" >nul
 rem Create Debug.bat from template
 powershell -Command "(Get-Content '!SCRIPT_DIR!bundle-scripts\Debug.bat' -Raw) -replace '\{\{product_name\}\}','!PRODUCT_NAME!' | Set-Content '!ZIP_STAGING!\Debug.bat' -NoNewline"
 powershell -Command "Compress-Archive -Path '!ZIP_STAGING!\*' -DestinationPath '!FINAL_DIR!\!PRODUCT_NAME!_!PRODUCT_VERSION!_windows_!_arch!.zip' -CompressionLevel !ZIP_PS_LEVEL! -Force"

app/build.sh

@@ -334,6 +334,22 @@ build_frontend() {
 	echo "=== Frontend done ($(elapsed_since $_t)) ==="
 }
 
+# Pre-build verification: ensure source quality across packages before producing artifacts.
+# Backend unit tests run inside backend/build.sh, here we cover the rest.
+# Skip with SKIP_TESTS=1 only in emergencies (e.g. broken upstream tooling); CI must never set it.
+run_pre_build_tests() {
+	if [ "${SKIP_TESTS:-0}" = "1" ]; then
+		echo "=== Pre-build tests skipped (SKIP_TESTS=1) ==="
+		return 0
+	fi
+	_t=$(date +%s)
+	echo "=== Running pre-build verification ==="
+	(cd "$ROOT_DIR/shared" && bun install --frozen-lockfile && bun run typecheck)
+	(cd "$ROOT_DIR/cli" && bun install --frozen-lockfile && bun run typecheck)
+	(cd "$ROOT_DIR/frontend" && bun install --frozen-lockfile && bun run check)
+	echo "=== Pre-build verification done ($(elapsed_since $_t)) ==="
+}
+
 build_backend() {
 	if [ "$BUILD_OS" = "macos" ] && [ "$BUILD_ARCH" = "universal" ]; then
 		_t=$(date +%s)
@@ -563,6 +579,7 @@ ${PRODUCT_NAME} - peer-to-peer file sharing application
 %files
 /usr/bin/${PRODUCT_NAME_LOWER}
 /usr/bin/lish-backend
+/usr/bin/lish
 /usr/share/applications/${PRODUCT_NAME_LOWER}.desktop
 /usr/share/applications/${PRODUCT_NAME_LOWER}-debug.desktop
 /usr/share/icons/hicolor/256x256/apps/${PRODUCT_NAME_LOWER}.png
@@ -646,13 +663,17 @@ APPRUN_EOF
 _stage_zip_linux() {
 	cp "$BUILD_RELEASE_DIR/$PRODUCT_NAME_LOWER" "$ZIP_STAGING/"
 	cp "$ROOT_DIR/backend/build/lish-backend" "$ZIP_STAGING/lish-backend"
+	mkdir -p "$ZIP_STAGING/lish"
+	cp -r "$ROOT_DIR/backend/build/lish/." "$ZIP_STAGING/lish/"
 	_copy_debug_script
 	chmod +x "$ZIP_STAGING/$PRODUCT_NAME_LOWER" "$ZIP_STAGING/lish-backend"
 }
 
 _stage_zip_windows() {
 	cp "$BUILD_RELEASE_DIR/${PRODUCT_NAME}.exe" "$ZIP_STAGING/"
 	cp "$ROOT_DIR/backend/build/lish-backend.exe" "$ZIP_STAGING/lish-backend.exe"
+	mkdir -p "$ZIP_STAGING/lish"
+	cp -r "$ROOT_DIR/backend/build/lish/." "$ZIP_STAGING/lish/"
 	sed "s/{{product_name}}/$PRODUCT_NAME/g" \
 		"$SCRIPT_DIR/bundle-scripts/Debug.bat" >"$ZIP_STAGING/Debug.bat"
 }
@@ -694,6 +715,8 @@ build_linux_packages() {
 	chmod +x "$PKG_STAGING/usr/bin/$PRODUCT_NAME_LOWER"
 	cp "$ROOT_DIR/backend/build/lish-backend" "$PKG_STAGING/usr/bin/"
 	chmod +x "$PKG_STAGING/usr/bin/lish-backend"
+	mkdir -p "$PKG_STAGING/usr/bin/lish"
+	cp -r "$ROOT_DIR/backend/build/lish/." "$PKG_STAGING/usr/bin/lish/"
 
 	generate_desktop_entry "$PKG_STAGING/usr/share/applications/${PRODUCT_NAME_LOWER}.desktop"
 	generate_desktop_entry "$PKG_STAGING/usr/share/applications/${PRODUCT_NAME_LOWER}-debug.desktop" --debug
@@ -914,6 +937,7 @@ docker_inner_build() {
 	_inner_fail=0
 
 	build_icons
+	run_pre_build_tests
 	build_frontend
 	build_backend
 	sync_product_info

app/tauri.conf.json

@@ -34,119 +34,61 @@
 				"startMenuFolder": "LiberShare",
 				"installerHooks": "nsis-hooks.nsh",
 				"languages": [
-					"Afrikaans",
 					"Albanian",
 					"Arabic",
 					"Asturian",
 					"Basque",
 					"Belarusian",
-					"Bosnian",
-					"Breton",
-					"Bulgarian",
-					"Catalan",
 					"Corsican",
-					"Croatian",
 					"Czech",
 					"Danish",
 					"Dutch",
 					"English",
 					"Esperanto",
-					"Estonian",
-					"Farsi",
-					"Finnish",
 					"French",
-					"Galician",
 					"German",
-					"Greek",
 					"Hebrew",
-					"Hungarian",
-					"Icelandic",
 					"Indonesian",
-					"Irish",
 					"Italian",
 					"Japanese",
-					"Korean",
-					"Kurdish",
-					"Latvian",
-					"Lithuanian",
-					"Luxembourgish",
-					"Macedonian",
-					"Malay",
 					"Mongolian",
 					"Norwegian",
 					"NorwegianNynorsk",
-					"Pashto",
 					"Polish",
 					"Portuguese",
 					"PortugueseBR",
-					"Romanian",
 					"Russian",
 					"ScotsGaelic",
-					"Serbian",
-					"SerbianLatin",
 					"SimpChinese",
 					"Slovak",
 					"Slovenian",
 					"Spanish",
 					"SpanishInternational",
 					"Swedish",
 					"Tatar",
-					"Thai",
 					"TradChinese",
-					"Turkish",
 					"Ukrainian",
-					"Uzbek",
-					"Vietnamese",
-					"Welsh"
+					"Vietnamese"
 				],
 				"customLanguageFiles": {
-					"Afrikaans": "nsis-langs/Afrikaans.nsh",
 					"Albanian": "nsis-langs/Albanian.nsh",
 					"Asturian": "nsis-langs/Asturian.nsh",
 					"Basque": "nsis-langs/Basque.nsh",
 					"Belarusian": "nsis-langs/Belarusian.nsh",
-					"Bosnian": "nsis-langs/Bosnian.nsh",
-					"Breton": "nsis-langs/Breton.nsh",
-					"Bulgarian": "nsis-langs/Bulgarian.nsh",
-					"Catalan": "nsis-langs/Catalan.nsh",
 					"Corsican": "nsis-langs/Corsican.nsh",
-					"Croatian": "nsis-langs/Croatian.nsh",
 					"Czech": "nsis-langs/Czech.nsh",
 					"Danish": "nsis-langs/Danish.nsh",
 					"Esperanto": "nsis-langs/Esperanto.nsh",
-					"Estonian": "nsis-langs/Estonian.nsh",
-					"Farsi": "nsis-langs/Farsi.nsh",
-					"Finnish": "nsis-langs/Finnish.nsh",
-					"Galician": "nsis-langs/Galician.nsh",
-					"Greek": "nsis-langs/Greek.nsh",
 					"Hebrew": "nsis-langs/Hebrew.nsh",
-					"Hungarian": "nsis-langs/Hungarian.nsh",
-					"Icelandic": "nsis-langs/Icelandic.nsh",
 					"Indonesian": "nsis-langs/Indonesian.nsh",
-					"Irish": "nsis-langs/Irish.nsh",
-					"Korean": "nsis-langs/Korean.nsh",
-					"Kurdish": "nsis-langs/Kurdish.nsh",
-					"Latvian": "nsis-langs/Latvian.nsh",
-					"Lithuanian": "nsis-langs/Lithuanian.nsh",
-					"Luxembourgish": "nsis-langs/Luxembourgish.nsh",
-					"Macedonian": "nsis-langs/Macedonian.nsh",
-					"Malay": "nsis-langs/Malay.nsh",
 					"Mongolian": "nsis-langs/Mongolian.nsh",
 					"NorwegianNynorsk": "nsis-langs/NorwegianNynorsk.nsh",
-					"Pashto": "nsis-langs/Pashto.nsh",
 					"Polish": "nsis-langs/Polish.nsh",
-					"Romanian": "nsis-langs/Romanian.nsh",
 					"ScotsGaelic": "nsis-langs/ScotsGaelic.nsh",
-					"Serbian": "nsis-langs/Serbian.nsh",
-					"SerbianLatin": "nsis-langs/SerbianLatin.nsh",
 					"Slovak": "nsis-langs/Slovak.nsh",
 					"Slovenian": "nsis-langs/Slovenian.nsh",
 					"Tatar": "nsis-langs/Tatar.nsh",
-					"Thai": "nsis-langs/Thai.nsh",
-					"Turkish": "nsis-langs/Turkish.nsh",
-					"Uzbek": "nsis-langs/Uzbek.nsh",
-					"Vietnamese": "nsis-langs/Vietnamese.nsh",
-					"Welsh": "nsis-langs/Welsh.nsh"
+					"Vietnamese": "nsis-langs/Vietnamese.nsh"
 				}
 			}
 		}

app/tauri.linux.conf.json

@@ -3,7 +3,8 @@
 	"mainBinaryName": "libershare",
 	"bundle": {
 		"resources": {
-			"../backend/build/lish-backend": "./lish-backend"
+			"../backend/build/lish-backend": "./lish-backend",
+			"../backend/build/lish/checksum-worker.js": "./lish/checksum-worker.js"
 		},
 		"linux": {
 			"deb": {

app/tauri.macos.conf.json

@@ -1,7 +1,8 @@
 {
 	"bundle": {
 		"resources": {
-			"../backend/build/lish-backend": "./lish-backend"
+			"../backend/build/lish-backend": "./lish-backend",
+			"../backend/build/lish/checksum-worker.js": "./lish/checksum-worker.js"
 		}
 	}
 }

app/tauri.windows.conf.json

@@ -1,7 +1,8 @@
 {
 	"bundle": {
 		"resources": {
-			"../backend/build/lish-backend.exe": "./lish-backend.exe"
+			"../backend/build/lish-backend.exe": "./lish-backend.exe",
+			"../backend/build/lish/checksum-worker.js": "./lish/checksum-worker.js"
 		},
 		"windows": {
 			"wix": {

backend/build.bat

@@ -1,8 +1,24 @@
 @echo off
 if exist build rmdir /s /q build
-bun i --frozen-lockfile
+call bun i --frozen-lockfile
+if errorlevel 1 exit /b 1
+
+rem Pre-build verification: typecheck + unit tests must pass before producing artifacts.
+rem Skip with SKIP_TESTS=1 only in emergencies (e.g. broken upstream tooling); CI must never set it.
+if not "%SKIP_TESTS%"=="1" (
+	call bun run typecheck
+	if errorlevel 1 exit /b 1
+	call bun run test
+	if errorlevel 1 exit /b 1
+)
+
 mkdir build
-bun build --compile src/app.ts --outfile build\lish-backend.exe
+call bun build --compile ./src/app.ts --outfile build\lish-backend.exe
+if errorlevel 1 exit /b 1
+mkdir build\lish
+call bun build ./src/lish/checksum-worker.ts --target bun --outfile build\lish\checksum-worker.js
+if errorlevel 1 exit /b 1
 
 rem Patch PE subsystem from CONSOLE (3) to WINDOWS_GUI (2) to prevent console window
 powershell -Command "$f='%~dp0build\lish-backend.exe'; $b=[IO.File]::ReadAllBytes($f); $pe=[BitConverter]::ToInt32($b,0x3C); $b[$pe+0x5C]=2; $b[$pe+0x5D]=0; [IO.File]::WriteAllBytes($f,$b)"
+if errorlevel 1 exit /b 1