Comprehensive bugfix release v1.6.45

Fix ~70 issues across the entire codebase including security fixes, error handling improvements, test stabilization, and code quality. - Fix TLS race condition with reference-counted acquire/release - Bind debug server to 127.0.0.1 instead of 0.0.0.0 - Add overall timeout to MegaWebFallback - Stream update installer to disk instead of RAM buffering - Add path traversal protection in JVM extractor - Cache DdownloadClient with credential-based invalidation - Add .catch() to all fire-and-forget IPC calls - Wrap app startup, clipboard, session-log in try/catch - Add timeouts to container.ts fetch calls - Fix variable shadowing, tsconfig path, line endings - Stabilize tests with proper cleanup and timing tolerance - Fix installer privileges, scripts, and afterPack null checks - Delete obsolete _upload_release.mjs Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-05 03:53:28 +01:00
parent a3c2680fec
commit a1c8f42435
29 changed files with 381 additions and 272 deletions
@@ -285,7 +285,7 @@ export class AppController {

  public exportBackup(): string {
    const settings = { ...this.settings };
-    const SENSITIVE_KEYS: (keyof AppSettings)[] = ["token", "megaPassword", "bestToken", "allDebridToken", "ddownloadPassword"];
+    const SENSITIVE_KEYS: (keyof AppSettings)[] = ["token", "megaLogin", "megaPassword", "bestToken", "allDebridToken", "ddownloadLogin", "ddownloadPassword"];
    for (const key of SENSITIVE_KEYS) {
      const val = settings[key];
      if (typeof val === "string" && val.length > 0) {
@@ -307,7 +307,7 @@ export class AppController {
      return { restored: false, message: "Kein gültiges Backup (settings/session fehlen)" };
    }
    const importedSettings = parsed.settings as AppSettings;
-    const SENSITIVE_KEYS: (keyof AppSettings)[] = ["token", "megaPassword", "bestToken", "allDebridToken", "ddownloadPassword"];
+    const SENSITIVE_KEYS: (keyof AppSettings)[] = ["token", "megaLogin", "megaPassword", "bestToken", "allDebridToken", "ddownloadLogin", "ddownloadPassword"];
    for (const key of SENSITIVE_KEYS) {
      const val = (importedSettings as Record<string, unknown>)[key];
      if (typeof val === "string" && val.startsWith("***")) {
@@ -164,7 +164,7 @@ async function decryptDlcLocal(filePath: string): Promise<ParsedPackageInput[]>
  const dlcData = content.slice(0, -88);

  const rcUrl = DLC_SERVICE_URL.replace("{KEY}", encodeURIComponent(dlcKey));
-  const rcResponse = await fetch(rcUrl, { method: "GET" });
+  const rcResponse = await fetch(rcUrl, { method: "GET", signal: AbortSignal.timeout(30000) });
  if (!rcResponse.ok) {
    return [];
  }
@@ -217,7 +217,8 @@ async function tryDcryptUpload(fileContent: Buffer, fileName: string): Promise<s

  const response = await fetch(DCRYPT_UPLOAD_URL, {
    method: "POST",
-    body: form
+    body: form,
+    signal: AbortSignal.timeout(30000)
  });
  if (response.status === 413) {
    return null;
@@ -235,7 +236,8 @@ async function tryDcryptPaste(fileContent: Buffer): Promise<string[] | null> {

  const response = await fetch(DCRYPT_PASTE_URL, {
    method: "POST",
-    body: form
+    body: form,
+    signal: AbortSignal.timeout(30000)
  });
  if (response.status === 413) {
    return null;
@@ -1154,6 +1154,9 @@ export class DebridService {

  private options: DebridServiceOptions;

+  private cachedDdownloadClient: DdownloadClient | null = null;
+  private cachedDdownloadKey = "";
+
  public constructor(settings: AppSettings, options: DebridServiceOptions = {}) {
    this.settings = cloneSettings(settings);
    this.options = options;
@@ -1163,6 +1166,16 @@ export class DebridService {
    this.settings = cloneSettings(next);
  }

+  private getDdownloadClient(login: string, password: string): DdownloadClient {
+    const key = `${login}\0${password}`;
+    if (this.cachedDdownloadClient && this.cachedDdownloadKey === key) {
+      return this.cachedDdownloadClient;
+    }
+    this.cachedDdownloadClient = new DdownloadClient(login, password);
+    this.cachedDdownloadKey = key;
+    return this.cachedDdownloadClient;
+  }
+
  public async resolveFilenames(
    links: string[],
    onResolved?: (link: string, fileName: string) => void,
@@ -1338,7 +1351,7 @@ export class DebridService {
      return new AllDebridClient(settings.allDebridToken).unrestrictLink(link, signal);
    }
    if (provider === "ddownload") {
-      return new DdownloadClient(settings.ddownloadLogin, settings.ddownloadPassword).unrestrictLink(link, signal);
+      return this.getDdownloadClient(settings.ddownloadLogin, settings.ddownloadPassword).unrestrictLink(link, signal);
    }
    return new BestDebridClient(settings.bestToken).unrestrictLink(link, signal);
  }
@@ -261,7 +261,7 @@ export function startDebugServer(mgr: DownloadManager, baseDir: string): void {
  const port = getPort(baseDir);

  server = http.createServer(handleRequest);
-  server.listen(port, "0.0.0.0", () => {
+  server.listen(port, "127.0.0.1", () => {
    logger.info(`Debug-Server gestartet auf Port ${port}`);
  });
  server.on("error", (err) => {
@@ -20,6 +20,23 @@ import {
  UiSnapshot
 } from "../shared/types";
 import { REQUEST_RETRIES, SAMPLE_VIDEO_EXTENSIONS, SPEED_WINDOW_SECONDS, WRITE_BUFFER_SIZE, WRITE_FLUSH_TIMEOUT_MS, ALLOCATION_UNIT_SIZE, STREAM_HIGH_WATER_MARK, DISK_BUSY_THRESHOLD_MS } from "./constants";
+
+// Reference counter for NODE_TLS_REJECT_UNAUTHORIZED to avoid race conditions
+// when multiple parallel downloads need TLS verification disabled (e.g. DDownload).
+let tlsSkipRefCount = 0;
+function acquireTlsSkip(): void {
+  tlsSkipRefCount += 1;
+  if (tlsSkipRefCount === 1) {
+    process.env.NODE_TLS_REJECT_UNAUTHORIZED = "0";
+  }
+}
+function releaseTlsSkip(): void {
+  tlsSkipRefCount -= 1;
+  if (tlsSkipRefCount <= 0) {
+    tlsSkipRefCount = 0;
+    delete process.env.NODE_TLS_REJECT_UNAUTHORIZED;
+  }
+}
 import { cleanupCancelledPackageArtifactsAsync } from "./cleanup";
 import { DebridService, MegaWebUnrestrictor, checkRapidgatorOnline } from "./debrid";
 import { clearExtractResumeState, collectArchiveCleanupTargets, extractPackageArchives, findArchiveCandidates } from "./extractor";
@@ -3212,11 +3229,11 @@ export class DownloadManager extends EventEmitter {

    for (const item of Object.values(this.session.items)) {
      if (item.status !== "completed") continue;
-      const fs = item.fullStatus || "";
+      const fullSt = item.fullStatus || "";
      // Only relabel items with active extraction status (e.g. "Entpacken 45%", "Passwort prüfen")
      // Skip items that were merely waiting ("Entpacken - Ausstehend", "Entpacken - Warten auf Parts")
      // as they were never actively extracting and "abgebrochen" would be misleading.
-      if (/^Entpacken\b/i.test(fs) && !/Ausstehend/i.test(fs) && !/Warten/i.test(fs) && !isExtractedLabel(fs)) {
+      if (/^Entpacken\b/i.test(fullSt) && !/Ausstehend/i.test(fullSt) && !/Warten/i.test(fullSt) && !isExtractedLabel(fullSt)) {
        item.fullStatus = "Entpacken abgebrochen (wird fortgesetzt)";
        item.updatedAt = nowMs();
        const pkg = this.session.packages[item.packageId];
@@ -3305,7 +3322,7 @@ export class DownloadManager extends EventEmitter {
    this.session.reconnectReason = "";

    for (const item of Object.values(this.session.items)) {
-      if (item.provider !== "realdebrid" && item.provider !== "megadebrid" && item.provider !== "bestdebrid" && item.provider !== "alldebrid") {
+      if (item.provider !== "realdebrid" && item.provider !== "megadebrid" && item.provider !== "bestdebrid" && item.provider !== "alldebrid" && item.provider !== "ddownload") {
        item.provider = null;
      }
      if (item.status === "cancelled" && item.fullStatus === "Gestoppt") {
@@ -5152,16 +5169,13 @@ export class DownloadManager extends EventEmitter {
      const connectTimeoutMs = getDownloadConnectTimeoutMs();
      let connectTimer: NodeJS.Timeout | null = null;
      const connectAbortController = new AbortController();
-      const prevTlsReject = process.env.NODE_TLS_REJECT_UNAUTHORIZED;
+      if (skipTlsVerify) acquireTlsSkip();
      try {
        if (connectTimeoutMs > 0) {
          connectTimer = setTimeout(() => {
            connectAbortController.abort("connect_timeout");
          }, connectTimeoutMs);
        }
-        if (skipTlsVerify) {
-          process.env.NODE_TLS_REJECT_UNAUTHORIZED = "0";
-        }
        response = await fetch(directUrl, {
          method: "GET",
          headers,
@@ -5181,10 +5195,7 @@ export class DownloadManager extends EventEmitter {
        }
        throw error;
      } finally {
-        if (skipTlsVerify) {
-          if (prevTlsReject === undefined) delete process.env.NODE_TLS_REJECT_UNAUTHORIZED;
-          else process.env.NODE_TLS_REJECT_UNAUTHORIZED = prevTlsReject;
-        }
+        if (skipTlsVerify) releaseTlsSkip();
        if (connectTimer) {
          clearTimeout(connectTimer);
        }
@@ -62,6 +62,26 @@ function removeSubstMapping(mapping: SubstMapping): void {
  logger.info(`subst ${mapping.drive}: entfernt`);
 }

+export function cleanupStaleSubstDrives(): void {
+  if (process.platform !== "win32") return;
+  try {
+    const result = spawnSync("subst", [], { stdio: "pipe", timeout: 5000 });
+    const output = String(result.stdout || "");
+    for (const line of output.split("\n")) {
+      const match = line.match(/^([A-Z]):\\: => (.+)/i);
+      if (!match) continue;
+      const drive = match[1].toUpperCase();
+      const target = match[2].trim();
+      if (/\\rd-extract-|\\Real-Debrid-Downloader/i.test(target)) {
+        spawnSync("subst", [`${drive}:`, "/d"], { stdio: "pipe", timeout: 5000 });
+        logger.info(`Stale subst ${drive}: entfernt (${target})`);
+      }
+    }
+  } catch {
+    // ignore — subst cleanup is best-effort
+  }
+}
+
 let resolvedExtractorCommand: string | null = null;
 let resolveFailureReason = "";
 let resolveFailureAt = 0;
@@ -7,6 +7,7 @@ import { IPC_CHANNELS } from "../shared/ipc";
 import { getLogFilePath, logger } from "./logger";
 import { APP_NAME } from "./constants";
 import { extractHttpLinksFromText } from "./utils";
+import { cleanupStaleSubstDrives } from "./extractor";

 /* ── IPC validation helpers ────────────────────────────────────── */
 function validateString(value: unknown, name: string): string {
@@ -81,7 +82,7 @@ function createWindow(): BrowserWindow {
        responseHeaders: {
          ...details.responseHeaders,
          "Content-Security-Policy": [
-            "default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; connect-src 'self' https://api.real-debrid.com https://codeberg.org https://bestdebrid.com https://api.alldebrid.com https://www.mega-debrid.eu"
+            "default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; connect-src 'self' https://api.real-debrid.com https://codeberg.org https://bestdebrid.com https://api.alldebrid.com https://www.mega-debrid.eu https://git.24-music.de https://ddownload.com https://ddl.to"
          ]
        }
      });
@@ -188,7 +189,12 @@ function startClipboardWatcher(): void {
  }
  lastClipboardText = normalizeClipboardText(clipboard.readText());
  clipboardTimer = setInterval(() => {
-    const text = normalizeClipboardText(clipboard.readText());
+    let text: string;
+    try {
+      text = normalizeClipboardText(clipboard.readText());
+    } catch {
+      return;
+    }
    if (text === lastClipboardText || !text.trim()) {
      return;
    }
@@ -481,6 +487,7 @@ app.on("second-instance", () => {
 });

 app.whenReady().then(() => {
+  cleanupStaleSubstDrives();
  registerIpcHandlers();
  mainWindow = createWindow();
  bindMainWindowLifecycle(mainWindow);
@@ -493,6 +500,9 @@ app.whenReady().then(() => {
      bindMainWindowLifecycle(mainWindow);
    }
  });
+}).catch((error) => {
+  console.error("App startup failed:", error);
+  app.quit();
 });

 app.on("window-all-closed", () => {
@@ -228,22 +228,23 @@ export class MegaWebFallback {
  }

  public async unrestrict(link: string, signal?: AbortSignal): Promise<UnrestrictedLink | null> {
+    const overallSignal = withTimeoutSignal(signal, 180000);
    return this.runExclusive(async () => {
-      throwIfAborted(signal);
+      throwIfAborted(overallSignal);
      const creds = this.getCredentials();
      if (!creds.login.trim() || !creds.password.trim()) {
        return null;
      }

      if (!this.cookie || Date.now() - this.cookieSetAt > 20 * 60 * 1000) {
-        await this.login(creds.login, creds.password, signal);
+        await this.login(creds.login, creds.password, overallSignal);
      }

-      const generated = await this.generate(link, signal);
+      const generated = await this.generate(link, overallSignal);
      if (!generated) {
        this.cookie = "";
-        await this.login(creds.login, creds.password, signal);
-        const retry = await this.generate(link, signal);
+        await this.login(creds.login, creds.password, overallSignal);
+        const retry = await this.generate(link, overallSignal);
        if (!retry) {
          return null;
        }
@@ -261,7 +262,7 @@ export class MegaWebFallback {
        fileSize: null,
        retriesUsed: 0
      };
-    }, signal);
+    }, overallSignal);
  }

  public invalidateSession(): void {
@@ -76,7 +76,12 @@ async function cleanupOldSessionLogs(dir: string, maxAgeDays: number): Promise<v

 export function initSessionLog(baseDir: string): void {
  sessionLogsDir = path.join(baseDir, "session-logs");
-  fs.mkdirSync(sessionLogsDir, { recursive: true });
+  try {
+    fs.mkdirSync(sessionLogsDir, { recursive: true });
+  } catch {
+    sessionLogsDir = null;
+    return;
+  }

  const timestamp = formatTimestamp();
  sessionLogPath = path.join(sessionLogsDir, `session_${timestamp}.txt`);
@@ -113,7 +113,7 @@ export function normalizeSettings(settings: AppSettings): AppSettings {
    allDebridToken: asText(settings.allDebridToken),
    ddownloadLogin: asText(settings.ddownloadLogin),
    ddownloadPassword: asText(settings.ddownloadPassword),
-    archivePasswordList: String(settings.archivePasswordList ?? "").replace(/\r\n/g, "\n"),
+    archivePasswordList: String(settings.archivePasswordList ?? "").replace(/\r\n|\r/g, "\n"),
    rememberToken: Boolean(settings.rememberToken),
    providerPrimary: settings.providerPrimary,
    providerSecondary: settings.providerSecondary,
@@ -794,7 +794,8 @@ async function downloadFile(url: string, targetPath: string, onProgress?: Update
  };

  const reader = response.body.getReader();
-  const chunks: Buffer[] = [];
+  const tempPath = targetPath + ".tmp";
+  const writeStream = fs.createWriteStream(tempPath);

  try {
    resetIdleTimer();
@@ -808,27 +809,39 @@ async function downloadFile(url: string, targetPath: string, onProgress?: Update
        break;
      }
      const buf = Buffer.from(value.buffer, value.byteOffset, value.byteLength);
-      chunks.push(buf);
+      if (!writeStream.write(buf)) {
+        await new Promise<void>((resolve) => writeStream.once("drain", resolve));
+      }
      downloadedBytes += buf.byteLength;
      resetIdleTimer();
      emitDownloadProgress(false);
    }
+  } catch (error) {
+    writeStream.destroy();
+    await fs.promises.rm(tempPath, { force: true }).catch(() => {});
+    throw error;
  } finally {
    clearIdleTimer();
  }

+  await new Promise<void>((resolve, reject) => {
+    writeStream.end(() => resolve());
+    writeStream.on("error", reject);
+  });
+
  if (idleTimedOut) {
+    await fs.promises.rm(tempPath, { force: true }).catch(() => {});
    throw new Error(`Update Download Body Timeout nach ${Math.ceil(idleTimeoutMs / 1000)}s`);
  }

-  const fileBuffer = Buffer.concat(chunks);
-  if (totalBytes && fileBuffer.byteLength !== totalBytes) {
-    throw new Error(`Update Download unvollständig (${fileBuffer.byteLength} / ${totalBytes} Bytes)`);
+  if (totalBytes && downloadedBytes !== totalBytes) {
+    await fs.promises.rm(tempPath, { force: true }).catch(() => {});
+    throw new Error(`Update Download unvollständig (${downloadedBytes} / ${totalBytes} Bytes)`);
  }

-  await fs.promises.writeFile(targetPath, fileBuffer);
+  await fs.promises.rename(tempPath, targetPath);
  emitDownloadProgress(true);
-  logger.info(`Update-Download abgeschlossen: ${targetPath} (${fileBuffer.byteLength} Bytes)`);
+  logger.info(`Update-Download abgeschlossen: ${targetPath} (${downloadedBytes} Bytes)`);

  return { expectedBytes: totalBytes };
 }
@@ -61,7 +61,7 @@ const emptyStats = (): DownloadStats => ({

 const emptySnapshot = (): UiSnapshot => ({
  settings: {
-    token: "", megaLogin: "", megaPassword: "", bestToken: "", allDebridToken: "",
+    token: "", megaLogin: "", megaPassword: "", bestToken: "", allDebridToken: "", ddownloadLogin: "", ddownloadPassword: "",
    archivePasswordList: "",
    rememberToken: true, providerPrimary: "realdebrid", providerSecondary: "megadebrid",
    providerTertiary: "bestdebrid", autoProviderFallback: true, outputDir: "", packageName: "",
@@ -115,15 +115,6 @@ function extractHoster(url: string): string {
  } catch { return ""; }
 }

-function formatHoster(item: DownloadItem): string {
-  const hoster = extractHoster(item.url);
-  const label = hoster || "-";
-  if (item.provider) {
-    return `${label} via ${providerLabels[item.provider]}`;
-  }
-  return label;
-}
-
 const settingsSubTabs: { key: SettingsSubTab; label: string }[] = [
  { key: "allgemein", label: "Allgemein" },
  { key: "accounts", label: "Accounts" },
@@ -1878,10 +1869,12 @@ export function App(): ReactElement {

  const executeDeleteSelection = useCallback((ids: Set<string>): void => {
    const current = snapshotRef.current;
+    const promises: Promise<void>[] = [];
    for (const id of ids) {
-      if (current.session.items[id]) void window.rd.removeItem(id);
-      else if (current.session.packages[id]) void window.rd.cancelPackage(id);
+      if (current.session.items[id]) promises.push(window.rd.removeItem(id));
+      else if (current.session.packages[id]) promises.push(window.rd.cancelPackage(id));
    }
+    void Promise.all(promises).catch(() => {});
    setSelectedIds(new Set());
  }, []);

@@ -1924,28 +1917,28 @@ export function App(): ReactElement {

  const onExportBackup = async (): Promise<void> => {
    closeMenus();
-    try {
+    await performQuickAction(async () => {
      const result = await window.rd.exportBackup();
      if (result.saved) {
        showToast("Sicherung exportiert");
      }
-    } catch (error) {
+    }, (error) => {
      showToast(`Sicherung fehlgeschlagen: ${String(error)}`, 2600);
-    }
+    });
  };

  const onImportBackup = async (): Promise<void> => {
    closeMenus();
-    try {
+    await performQuickAction(async () => {
      const result = await window.rd.importBackup();
      if (result.restored) {
        showToast(result.message, 4000);
      } else if (result.message !== "Abgebrochen") {
        showToast(`Sicherung laden fehlgeschlagen: ${result.message}`, 3000);
      }
-    } catch (error) {
+    }, (error) => {
      showToast(`Sicherung laden fehlgeschlagen: ${String(error)}`, 2600);
-    }
+    });
  };

  const onMenuRestart = (): void => {
@@ -2279,7 +2272,7 @@ export function App(): ReactElement {
            onClick={() => {
              if (snapshot.session.paused) {
                setSnapshot((prev) => ({ ...prev, session: { ...prev.session, paused: false } }));
-                void window.rd.togglePause();
+                void window.rd.togglePause().catch(() => {});
              } else {
                void onStartDownloads();
              }
@@ -2293,7 +2286,7 @@ export function App(): ReactElement {
            disabled={!snapshot.canPause || snapshot.session.paused}
            onClick={() => {
              setSnapshot((prev) => ({ ...prev, session: { ...prev.session, paused: true } }));
-              void window.rd.togglePause();
+              void window.rd.togglePause().catch(() => {});
            }}
          >
            <svg viewBox="0 0 24 24" width="18" height="18"><rect x="5" y="3" width="4.5" height="18" rx="1" fill="currentColor" /><rect x="14.5" y="3" width="4.5" height="18" rx="1" fill="currentColor" /></svg>
@@ -2520,7 +2513,7 @@ export function App(): ReactElement {
                }}>Ausgewählte entfernen ({selectedHistoryIds.size})</button>
              )}
              {historyEntries.length > 0 && (
-                <button className="btn btn-danger" onClick={() => { void window.rd.clearHistory().then(() => { setHistoryEntries([]); setSelectedHistoryIds(new Set()); }); }}>Verlauf leeren</button>
+                <button className="btn btn-danger" onClick={() => { void window.rd.clearHistory().then(() => { setHistoryEntries([]); setSelectedHistoryIds(new Set()); }).catch(() => {}); }}>Verlauf leeren</button>
              )}
            </div>
            {historyEntries.length === 0 && <div className="empty">Noch keine abgeschlossenen Pakete im Verlauf.</div>}
@@ -2607,7 +2600,7 @@ export function App(): ReactElement {
                        <span>{entry.status === "completed" ? "Abgeschlossen" : "Gelöscht"}</span>
                      </div>
                      <div className="history-actions">
-                        <button className="btn" onClick={() => { void window.rd.removeHistoryEntry(entry.id).then(() => { setHistoryEntries((prev) => prev.filter((e) => e.id !== entry.id)); setSelectedHistoryIds((prev) => { const n = new Set(prev); n.delete(entry.id); return n; }); }); }}>Eintrag entfernen</button>
+                        <button className="btn" onClick={() => { void window.rd.removeHistoryEntry(entry.id).then(() => { setHistoryEntries((prev) => prev.filter((e) => e.id !== entry.id)); setSelectedHistoryIds((prev) => { const n = new Set(prev); n.delete(entry.id); return n; }); }).catch(() => {}); }}>Eintrag entfernen</button>
                      </div>
                    </div>
                  )}
@@ -3052,8 +3045,8 @@ export function App(): ReactElement {
            <button className="ctx-menu-item" onClick={() => {
              const pkgIds = [...selectedIds].filter((id) => snapshot.session.packages[id]);
              const itemIds = [...selectedIds].filter((id) => { const it = snapshot.session.items[id]; return it && startableStatuses.has(it.status); });
-              if (pkgIds.length > 0) void window.rd.startPackages(pkgIds);
-              if (itemIds.length > 0) void window.rd.startItems(itemIds);
+              if (pkgIds.length > 0) void window.rd.startPackages(pkgIds).catch(() => {});
+              if (itemIds.length > 0) void window.rd.startItems(itemIds).catch(() => {});
              setContextMenu(null);
            }}>Ausgewählte Downloads starten{multi ? ` (${selectedIds.size})` : ""}</button>
          )}
@@ -3063,7 +3056,7 @@ export function App(): ReactElement {
          <div className="ctx-menu-sep" />
          {hasPackages && !contextMenu.itemId && (
            <button className="ctx-menu-item" onClick={() => {
-              for (const id of selectedIds) { if (snapshot.session.packages[id]) void window.rd.togglePackage(id); }
+              for (const id of selectedIds) { if (snapshot.session.packages[id]) void window.rd.togglePackage(id).catch(() => {}); }
              setContextMenu(null);
            }}>
              {multi ? `Alle ${selectedIds.size} umschalten` : (snapshot.session.packages[contextMenu.packageId]?.enabled ? "Deaktivieren" : "Aktivieren")}
@@ -3088,7 +3081,7 @@ export function App(): ReactElement {
          {hasPackages && !contextMenu.itemId && (
            <button className="ctx-menu-item" onClick={() => {
              const pkgIds = [...selectedIds].filter((id) => snapshot.session.packages[id]);
-              for (const id of pkgIds) void window.rd.resetPackage(id);
+              for (const id of pkgIds) void window.rd.resetPackage(id).catch(() => {});
              setContextMenu(null);
            }}>Zurücksetzen{multi ? ` (${[...selectedIds].filter((id) => snapshot.session.packages[id]).length})` : ""}</button>
          )}
@@ -3097,7 +3090,7 @@ export function App(): ReactElement {
              const itemIds = multi
                ? [...selectedIds].filter((id) => snapshot.session.items[id])
                : [contextMenu.itemId!];
-              void window.rd.resetItems(itemIds);
+              void window.rd.resetItems(itemIds).catch(() => {});
              setContextMenu(null);
            }}>Zurücksetzen{multi ? ` (${[...selectedIds].filter((id) => snapshot.session.items[id]).length})` : ""}</button>
          )}
@@ -3129,7 +3122,7 @@ export function App(): ReactElement {
            const itemIds = [...selectedIds].filter((id) => snapshot.session.items[id]);
            const skippable = itemIds.filter((id) => { const it = snapshot.session.items[id]; return it && (it.status === "queued" || it.status === "reconnect_wait"); });
            if (skippable.length === 0) return null;
-            return <button className="ctx-menu-item" onClick={() => { void window.rd.skipItems(skippable); setContextMenu(null); }}>Überspringen{skippable.length > 1 ? ` (${skippable.length})` : ""}</button>;
+            return <button className="ctx-menu-item" onClick={() => { void window.rd.skipItems(skippable).catch(() => {}); setContextMenu(null); }}>Überspringen{skippable.length > 1 ? ` (${skippable.length})` : ""}</button>;
          })()}
          {hasPackages && (
            <button className="ctx-menu-item ctx-danger" onClick={() => {
@@ -3214,7 +3207,7 @@ export function App(): ReactElement {
            )}
            <div className="ctx-menu-sep" />
            <button className="ctx-menu-item ctx-danger" onClick={() => {
-              void window.rd.clearHistory().then(() => { setHistoryEntries([]); setSelectedHistoryIds(new Set()); });
+              void window.rd.clearHistory().then(() => { setHistoryEntries([]); setSelectedHistoryIds(new Set()); }).catch(() => {});
              setHistoryCtxMenu(null);
            }}>Verlauf leeren</button>
          </div>
@@ -3228,8 +3221,8 @@ export function App(): ReactElement {
            <div className="link-popup-list">
              {linkPopup.links.map((link, i) => (
                <div key={i} className="link-popup-row">
-                  <span className="link-popup-name link-popup-click" title={`${link.name}\nKlicken zum Kopieren`} onClick={() => { void navigator.clipboard.writeText(link.name); showToast("Name kopiert"); }}>{link.name}</span>
-                  <span className="link-popup-url link-popup-click" title={`${link.url}\nKlicken zum Kopieren`} onClick={() => { void navigator.clipboard.writeText(link.url); showToast("Link kopiert"); }}>{link.url}</span>
+                  <span className="link-popup-name link-popup-click" title={`${link.name}\nKlicken zum Kopieren`} onClick={() => { void navigator.clipboard.writeText(link.name).then(() => showToast("Name kopiert")).catch(() => showToast("Kopieren fehlgeschlagen")); }}>{link.name}</span>
+                  <span className="link-popup-url link-popup-click" title={`${link.url}\nKlicken zum Kopieren`} onClick={() => { void navigator.clipboard.writeText(link.url).then(() => showToast("Link kopiert")).catch(() => showToast("Kopieren fehlgeschlagen")); }}>{link.url}</span>
                </div>
              ))}
            </div>
@@ -3237,15 +3230,13 @@ export function App(): ReactElement {
              {linkPopup.isPackage && (
                <button className="btn" onClick={() => {
                  const text = linkPopup.links.map((l) => l.name).join("\n");
-                  void navigator.clipboard.writeText(text);
-                  showToast("Alle Namen kopiert");
+                  void navigator.clipboard.writeText(text).then(() => showToast("Alle Namen kopiert")).catch(() => showToast("Kopieren fehlgeschlagen"));
                }}>Alle Namen kopieren</button>
              )}
              {linkPopup.isPackage && (
                <button className="btn" onClick={() => {
                  const text = linkPopup.links.map((l) => l.url).join("\n");
-                  void navigator.clipboard.writeText(text);
-                  showToast("Alle Links kopiert");
+                  void navigator.clipboard.writeText(text).then(() => showToast("Alle Links kopiert")).catch(() => showToast("Kopieren fehlgeschlagen"));
                }}>Alle Links kopieren</button>
              )}
              <button className="btn" onClick={() => setLinkPopup(null)}>Schließen</button>
@@ -1639,6 +1639,7 @@ td {
  border-radius: 12px;
  padding: 10px 14px;
  box-shadow: 0 16px 30px rgba(0, 0, 0, 0.35);
+  z-index: 50;
 }

 .ctx-menu {