@pro-gram/flux 0.0.0-stage → 1.6.0

package/LICENSE

@@ -0,0 +1,23 @@
+MIT License
+
+Copyright (c) 2026 Drum Buddy contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+Third-party programs, libraries and the Zoom driver retain their own licenses.

package/NOTICE.txt

@@ -0,0 +1,33 @@
+Flux 1.6.0 - third-party components
+
+FFmpeg 9.0.2, release essentials build by Gyan Doshi
+Used as a separate command-line decoding process.
+GPL version 3. See licenses\FFmpeg-GPLv3.txt and FFmpeg-build.txt.
+Binary: https://www.gyan.dev/ffmpeg/builds/ffmpeg-release-essentials.zip
+Build information and corresponding upstream source links:
+https://www.gyan.dev/ffmpeg/builds/
+https://github.com/FFmpeg/FFmpeg/tree/946fcce07b
+The build README lists linked third-party libraries and their versions.
+
+NAudio.Core, NAudio.Asio, NAudio.WinMM, NAudio.Wasapi 2.2.1
+Copyright (c) Mark Heath and contributors. MIT license.
+See licenses\NAudio-MIT.txt.
+Source: https://github.com/naudio/NAudio/tree/v2.2.1
+
+Microsoft.Win32.Registry, System.Security.AccessControl,
+System.Security.Principal.Windows 4.7.0
+Copyright (c) .NET Foundation and Contributors. MIT license.
+https://github.com/dotnet/runtime/blob/main/LICENSE.TXT
+
+Zoom H5studio and R16/R24 drivers: linked from Zoom's official support pages, not bundled.
+R16 reference panel image: copyright Zoom Corporation. The reference image
+is included from Zoom's public product website; its source URL and SHA-256
+are recorded in dependency-lock.json.
+Zoom and R16 are trademarks of Zoom Corporation. This is an independent app.
+
+The original drummer mascot was generated for Drum Buddy using OpenAI's
+built-in image-generation tool, then revised to have long curly black hair.
+
+The FluxTempo wave/tempo emblem was generated with OpenAI's built-in
+image-generation tool. The original Drum Buddy mascot is preserved in
+the source archive under brand-archive.

package/README.md

@@ -1,3 +1,126 @@
-# Temporary Holding Version
+# Flux
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+Flux is a compact Windows audio studio with a 16-track editor/recorder, a Media Player and a separate file converter. Near-black surfaces, blue/purple accents, editable keybinds and tempo-grid editing.
+
+## Install
+
+Close the running audio application, then:
+
+```powershell
+npm.cmd install -g @pro-gram/flux@latest
+flux.cmd
+```
+
+Windows 10/11 x64 is supported. macOS is planned. Basic tools work locally without an account.
+
+### Moving from Drum Buddy / FluxTempo
+
+Remove the older npm launcher before installing Flux:
+
+```powershell
+npm.cmd uninstall -g @pro-gram/drumbuddy
+npm.cmd install -g @pro-gram/flux@latest
+flux.cmd
+```
+
+Removing that npm package leaves its separate desktop installation and audio files in place. Flux updates the existing desktop installation and uses its saved folders/settings. The launch command is now `flux.cmd`; older launchers belong to the old npm package and should be removed during migration.
+
+If npm skipped the install script, the first launch completes setup. `flux.cmd --setup` repairs the installation. The Windows executable is unsigned. The npm and standalone installers both include FFmpeg and the R16 panel assets, with payload integrity checks. There is no separate codec download during setup. Vendor audio drivers are linked from their official support pages.
+
+## Editor and recording
+
+Editor opens by default. File contains New, Open session, Save, Save as and Add audio. Home and View open Converter, Media Player and the R16 workspace.
+
+The compact header puts navigation beside the logo. Grid and zoom share one toolbar, and playback/output selection share the bottom strip. Export settings and extra range/import options expand when needed, keeping more tracks visible on smaller displays.
+
+The editor supports 16 tracks, multiple audio regions, selected/all-track edits, mute/solo, levels, split, cut/copy/paste, undo/redo, saved `.dbedit` sessions and PCM/float mix export. Original audio stays unchanged.
+
+Select audio, press **Ctrl+C**, press **Backspace** to delete that section, place the playhead and press **Ctrl+V**. Deleting preserves the timeline gap and the internal audio clipboard. Delete is also available as an editable alternate; Ctrl+X still cuts. Paste starts exactly at the playhead. The Cut/Copy/Paste toolbar buttons are removed.
+
+**V** selects the pointer tool; **S** splits at the playhead. Click a region to select it; Shift-click adds/removes clips, and dragging selects a time range. Selected clips use a brighter purple fill and border. Drag the upper ruler for the playhead and the lower-ruler selection handles to adjust a range. Range exposes numeric selection controls.
+
+Drag a clip's header to move it; selected groups retain their time/track offsets. Drag the left/right edges to trim within the source audio. The waveform body remains available for range selection. **Y** switches to slip editing, which shifts source contents inside a trimmed clip; **F** switches to the fade tool. Selected clips also show fade handles.
+
+**Ctrl+D** duplicates selected clips or time; **Ctrl+L** repeats the selection with a chosen number of additional copies. **M** mutes/unmutes selected clips or isolates and mutes a time range. **X** crossfades two staggered, overlapping clips on the same track. Right-click audio for these tools, clipboard actions and Clear fades. The scissors/split toolbar buttons are removed.
+
+Moves, trims, slip, clip mute and fades are non-destructive and undoable. Fades affect playback and exported mixes; splitting/copying inside a fade preserves the original envelope. Escape cancels a clip drag. The editor's select/slip/fade modes and all default commands have editable keybindings.
+
+### Editor zoom
+
+The visible **- / + buttons and slider** zoom the timeline from a full-project overview to individual samples. **Ctrl+mouse wheel** zooms around the time under the pointer; **Shift+wheel** scrolls sideways. **Fit** shows the full project, and **Selection** fills the pane with the selected time range.
+
+**Ctrl+Plus / Ctrl+Minus** zoom (including Ctrl+= and numeric-keypad keys), **Ctrl+0** fits the project and **Ctrl+Shift+0** fits the selection. These shortcuts are editable in Settings > Keybinds. At close zoom, waveform detail is read from decoded audio in the background, preserving positive/negative peaks and float headroom. The ruler displays fractional seconds when a close-up contains no labeled beat. Zoom changes the view without changing audio, the playhead or undo history.
+
+Record options contains microphone/input channels, sample rate and PCM/float format. Recording saves original takes and inserts them at the starting playhead on the selected track; separate input channels use consecutive tracks. Use hardware direct monitoring. Software overdub latency alignment is not included.
+
+Recording controls, converter output settings and Media Player gain have draggable dividers, Collapse/Show and Side/Bottom positioning.
+
+## Tempo grid and snapping
+
+Use the BPM/division controls in Editor or **Settings > Timeline / grid**. Settings has explicit Save and prompts before leaving with unsaved changes.
+
+- Tempo: 20–400 quarter-note BPM, with fractional values.
+- Time signatures: 1–32 beats per bar; beat units from 1/1 through 1/32.
+- Grid divisions: 1/1, 1/2, 1/4, 1/8, 1/16, 1/32, 1/64, 1/128 and 1/256.
+- Straight and triplet subdivisions; bars/beats or seconds ruler.
+- Snap to grid and snap to clip edges can be switched independently.
+- Hold Alt to bypass both for free placement/cuts at the editor's working sample rate.
+
+The grid restarts at bar boundaries in odd meters. Nearby clip edges take priority when enabled. Fine grid lines simplify when zoomed out; snapping retains the chosen resolution. Zoom in to see every subdivision. Finer-than-grid edits remain possible with snapping off or Alt held.
+
+Tempo changes the grid, without stretching existing audio. Tempo, meter, division and ruler are saved in each project and support undo. Settings also supplies defaults for new sessions. Older projects open with a 120 BPM, 4/4 grid. Custom keybinds are preserved when upgrading defaults.
+
+## Audio devices
+
+Settings > Audio selects speakers/headphones and recording input. Playback output is shared between Editor and Media Player. Windows default displays the current Windows output and resolves it again when playback starts. Named entries select active Windows endpoints; installed ASIO drivers are listed separately. Device changes refresh the selector automatically. Retired compatibility selections migrate to the corresponding real endpoint.
+
+Windows playback uses one shared WASAPI renderer with device activation, initialization, buffering and release on its own audio thread. Audio is resampled/adapted to the endpoint's exact mix format, without an extra Windows automatic converter or WinMM playback fallback. Initialization and runtime errors retain the actual failing stage in diagnostics.
+
+Ordinary Windows/Realtek/USB microphones capture 16-bit PCM. Saving that input in a float or 24-bit container adds no input precision or native float headroom. H5studio ASIO preserves native 32-bit float when the Zoom driver supplies it. Install Drivers links to official H5studio/R16 support. R16 ASIO recording remains available.
+
+Test speakers plays a short quiet tone. Save diagnostics exports device formats and recent output errors without recording. Playback buffer is adjustable from 40 to 250 ms; actual latency depends on hardware and drivers.
+
+## Media Player and Converter
+
+Media Player decodes PCM/float WAV, AIFF, FLAC, MP3 and audio from video without Windows Media Player codecs. Gain / Save provides +/-36 dB adjustment, safe level, protection and compact Save copy for PCM or float WAV. Gain affects playback and saved copies; listening volume affects playback only. Copies receive new names instead of overwriting originals or exports.
+
+The bundled FFmpeg build contains 227 audio decoders, including integer PCM and IEEE float. Both installation paths include the decoder executable. No Windows Media Player codec pack is required. Protected, damaged or unsupported files can still be rejected; supported decoders are listed in the release's audio-decoder inventory.
+
+Open **View > Converter**, drop audio/video, choose the target type and convert. WAV PCM, WAV float, AIFF, FLAC, MP3 and AAC/M4A are supported, including MP3 -> AIFF and AIFF -> WAV. Preserve source rate or choose 44.1/48/96 kHz; MP3 uses at most 48 kHz. Converter contains no gain amplifier or navigation tab.
+
+The Zoom R16 conversion preset writes classic 44.1 kHz 16/24-bit PCM WAV with short compatible filenames. R16 Control also retains the hardware panel, mixer/EQ, MIDI control, MIDI recording/playback and native project-copy tools. Verify edited R16 projects on the hardware. Zoom's internal effect DSP is not emulated.
+
+## Default shortcuts
+
+| Action | Shortcut |
+|---|---|
+| Play/pause; stop active recording | Space |
+| Stop | Shift+Space |
+| Record | R |
+| Split / selection cursor | S / V |
+| Slip / fade tool | Y / F |
+| Duplicate / repeat | Ctrl+D / Ctrl+L |
+| Clip mute / crossfade | M / X |
+| Copy / paste / cut | Ctrl+C / Ctrl+V / Ctrl+X |
+| Delete selected section | Backspace or Delete |
+| Undo / redo | Ctrl+Z / Ctrl+Y |
+| Save / save as | Ctrl+S / Ctrl+Shift+S |
+| Open / new session | Ctrl+O / Ctrl+N |
+| Import / export | Ctrl+I / Ctrl+E |
+| Start / end | Home / End |
+| Zoom in / out | Ctrl+= / Ctrl+- |
+| Fit project / selection | Ctrl+0 / Ctrl+Shift+0 |
+| Home / Editor / Converter / Player | Ctrl+1 / Ctrl+2 / Ctrl+3 / Ctrl+4 |
+| Settings | Ctrl+, |
+
+Keybind Edit immediately focuses/selects the capture field. Save commits changes; leaving unsaved prompts Yes/No. Duplicate shortcuts prevent saving. The defaults preserve normal text-field editing.
+
+## Notes
+
+The editor's working timeline is 44.1 kHz float. Mix exports support 16/24-bit PCM or 32-bit float WAV, with a 4 GB limit. Source-rate conversion reads the original file. Keep original sources alongside saved sessions.
+
+The new Flux PNG is used in the app, executable and versioned shortcut icons. A refined SVG alternative and the original black-haired Drum Buddy mascot are preserved in source; the mascot is archived in `source/brand-archive`. Brand website: https://fluxtempo.ca
+
+Physical H5studio/R16 capture and audible playback on the affected Realtek PC require connected-device acceptance. Automated tests cover generated samples, native project fixtures, grid math, editing workflows, settings and local silent output probes.
+
+Source, build instructions and dependency licence notices are included. Premium authentication/billing is not implemented.

package/bin/flux.js

@@ -0,0 +1,29 @@
+#!/usr/bin/env node
+'use strict';
+const fs = require('node:fs');
+const path = require('node:path');
+const { spawn, execFileSync } = require('node:child_process');
+const pkg = require('../package.json');
+const { install, installRoot } = require('../scripts/install.js');
+const { needsUpdate } = require('../scripts/version.js');
+(async () => {
+  const arg = process.argv[2];
+  if (arg === '--version' || arg === '-v') { console.log(pkg.version); return; }
+  if (arg === '--help' || arg === '-h') {
+    console.log('Flux ' + pkg.version + ' for Windows\n\nflux             Open Flux\nflux --setup     Install or repair Flux\nflux --audio-diagnostics  Save an audio device report\nflux --version   Show the npm package version\n\nAudio: H5studio native 32-bit float recording; 16/24-bit PCM recording and export.\nWindows/Realtek/USB microphones use 16-bit PCM input.\nWorkspaces: PCM/float Media Player and 16-track timeline Editor with recording.\nTempo grid: BPM, time signatures, 1/1 to 1/256 subdivisions, triplets and independent grid/edge snapping.\nCtrl+C copies; Backspace deletes selection; Ctrl+V pastes at the playhead.\nDark/light themes, Converter and editable keybind settings.\nUpdate: close Flux, then npm.cmd install -g @pro-gram/flux@latest\nRun flux.cmd afterward to finish setup if npm skipped the install script.'); return;
+  }
+  if (process.platform !== 'win32' || process.arch !== 'x64') throw new Error('Flux needs Windows x64.');
+  const root = installRoot();
+  const marker = path.join(root, 'npm-version.txt');
+  if (arg === '--setup' || needsUpdate(fs.existsSync(marker) ? fs.readFileSync(marker, 'utf8') : null, pkg.version) || !fs.existsSync(path.join(root, 'tools', 'ffmpeg.exe')) || !fs.existsSync(path.join(root, 'DrumBuddy.exe'))) await install();
+  if (arg === '--setup') return;
+  if (arg === '--audio-diagnostics') {
+    const report = path.resolve(process.argv[3] || 'Flux-Audio-Diagnostics.txt');
+    execFileSync(path.join(root, 'DrumBuddy.exe'), ['--audio-diagnostics', report], { windowsHide: true, stdio: 'inherit' });
+    console.log('Audio device report saved: ' + report);
+    return;
+  }
+  const child = spawn(path.join(root, 'DrumBuddy.exe'), [], { detached: true, stdio: 'ignore', windowsHide: false });
+  child.on('error', err => { console.error('Flux: ' + err.message); process.exitCode = 1; });
+  child.unref();
+})().catch(err => { console.error('Flux: ' + err.message); process.exitCode = 1; });

package/dependencies.json

@@ -0,0 +1,15 @@
+{
+  "ffmpeg": {
+    "url": "https://www.gyan.dev/ffmpeg/builds/packages/ffmpeg-9.0.2-essentials_build.zip",
+    "file": "ffmpeg-9.0.2.zip",
+    "sha256": "60f467265b1e312373dbcd92200c2618a74850f98d3d078e94296bb3fa2047ba"
+  },
+  "panel": {
+    "url": "https://zoomcorp.com/media/original_images/R16_list_0.png",
+    "file": "r16-panel.png",
+    "sha256": "315a71e8942a445c903b2d1aedb703b64aab30f054e46199a2bac447d3d03cb2",
+    "alternateSha256": "5564fa622f101dc27ea402c399c5b9b1e1e039b8771daf40b185dab9772adf38"
+  },
+  "installerSha256": "0a57d2459fdb2c5c0c2917df12ca907b47c5a966006d2680e9d160d16bdfed9c",
+  "bundledAssets": true
+}

package/package.json

@@ -1,6 +1,60 @@
-{
-  "name": "@pro-gram/flux",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+{
+  "name": "@pro-gram/flux",
+  "version": "1.6.0",
+  "description": "Flux: a 16-track Windows audio studio with native shared playback, float/PCM recording, clip editing tools, tempo grids and bundled audio codecs.",
+  "license": "MIT",
+  "author": "pro-gram",
+  "os": [
+    "win32"
+  ],
+  "cpu": [
+    "x64"
+  ],
+  "engines": {
+    "node": ">=18"
+  },
+  "bin": {
+    "flux": "bin/flux.js"
+  },
+  "scripts": {
+    "postinstall": "node scripts/install.js",
+    "test": "node --test test/*.test.js"
+  },
+  "files": [
+    "bin/flux.js",
+    "scripts/",
+    "test/",
+    "payload/DrumBuddy-Setup.exe",
+    "dependencies.json",
+    "source/",
+    "LICENSE",
+    "NOTICE.txt"
+  ],
+  "keywords": [
+    "audio-editor",
+    "media-player",
+    "multitrack",
+    "zoom-h5studio",
+    "32-bit-float",
+    "pcm",
+    "zoom-r16",
+    "drums",
+    "audio",
+    "midi",
+    "wav",
+    "windows",
+    "recording",
+    "fluxtempo",
+    "realtek",
+    "audio-workstation",
+    "flux",
+    "tempo-grid",
+    "beat-grid",
+    "snap-to-grid"
+  ],
+  "publishConfig": {
+    "access": "public",
+    "registry": "https://registry.npmjs.org/"
+  },
+  "homepage": "https://fluxtempo.ca"
+}

package/payload/DrumBuddy-Setup.exe

@@ -0,0 +1,4 @@
+[diffend] Oversized file quarantined before diffing.
+name: package/payload/DrumBuddy-Setup.exe
+size: 42842112 bytes
+sha256: 0a57d2459fdb2c5c0c2917df12ca907b47c5a966006d2680e9d160d16bdfed9c

package/scripts/install.js

@@ -0,0 +1,60 @@
+'use strict';
+const fs = require('node:fs');
+const fsp = fs.promises;
+const path = require('node:path');
+const https = require('node:https');
+const crypto = require('node:crypto');
+const { pipeline } = require('node:stream/promises');
+const { execFileSync } = require('node:child_process');
+const dependencies = require('../dependencies.json');
+const pkg = require('../package.json');
+function installRoot() {
+  if (!process.env.LOCALAPPDATA) throw new Error('Windows LOCALAPPDATA is unavailable.');
+  return path.join(process.env.LOCALAPPDATA, 'Programs', 'DrumBuddy');
+}
+async function hash(file) { const sha = crypto.createHash('sha256'); await pipeline(fs.createReadStream(file), sha); return sha.digest('hex'); }
+function response(url, redirects = 0) {
+  return new Promise((resolve, reject) => {
+    const parsed = new URL(url);
+    if (parsed.protocol !== 'https:' || redirects > 5) return reject(new Error('Invalid dependency download redirect.'));
+    const request = https.get(parsed, { headers: { 'User-Agent': 'DrumBuddy/' + pkg.version } }, res => {
+      if ([301, 302, 303, 307, 308].includes(res.statusCode)) { res.resume(); resolve(response(new URL(res.headers.location, parsed).href, redirects + 1)); }
+      else if (res.statusCode !== 200) { res.resume(); reject(new Error('Dependency download returned HTTP ' + res.statusCode)); }
+      else resolve(res);
+    });
+    request.setTimeout(60000, () => request.destroy(new Error('The dependency download timed out.'))); request.on('error', reject);
+  });
+}
+async function cached(asset, cache) {
+  const accepted = [asset.sha256, asset.alternateSha256].filter(Boolean);
+  const file = path.join(cache, asset.file);
+  if (fs.existsSync(file) && accepted.includes(await hash(file))) return file;
+  console.log('Flux: downloading ' + asset.file + ' from its official source...');
+  const temp = file + '.' + crypto.randomUUID() + '.partial';
+  try {
+    await pipeline(await response(asset.url), fs.createWriteStream(temp, { flags: 'wx' }));
+    if (!accepted.includes(await hash(temp))) throw new Error('Integrity check failed for ' + asset.file + '. Nothing downloaded will be executed.');
+    await fsp.copyFile(temp, file); return file;
+  } finally { await fsp.unlink(temp).catch(() => {}); }
+}
+async function install() {
+  if (process.platform !== 'win32' || process.arch !== 'x64') throw new Error('Flux needs Windows 10/11 x64.');
+  const root = installRoot();
+  const cache = path.join(process.env.LOCALAPPDATA, 'DrumBuddy', 'DependencyCache');
+  await fsp.mkdir(cache, { recursive: true });
+  const installer = path.resolve(__dirname, '..', 'payload', 'DrumBuddy-Setup.exe');
+  if (await hash(installer) !== dependencies.installerSha256) throw new Error('The Flux installer failed its integrity check.');
+  if (!dependencies.bundledAssets) {
+    await cached(dependencies.ffmpeg, cache);
+    await cached(dependencies.panel, cache);
+  }
+  console.log('Flux: installing version ' + pkg.version + ' and the Desktop shortcut...');
+  execFileSync(installer, ['--update-app'], { windowsHide: true, stdio: 'inherit' });
+  await fsp.writeFile(path.join(root, 'npm-version.txt'), pkg.version + '\n');
+  const manifest = path.join(root, 'installed-files.txt');
+  const original = await fsp.readFile(manifest, 'utf8');
+  await fsp.writeFile(manifest, original.trimEnd() + '\nnpm-version.txt\n');
+  console.log('Flux is ready. Open its Desktop shortcut or run flux. Use Install Drivers for the official Zoom driver guide.');
+}
+module.exports = { install, installRoot, hash, cached };
+if (require.main === module) install().catch(err => { console.error('Flux setup: ' + err.message + '\nClose Flux before updating. Retry with flux --setup.'); process.exitCode = 1; });

package/scripts/version.js

@@ -0,0 +1,12 @@
+'use strict';
+function needsUpdate(installed, required) {
+  const parse = value => /^(\d+)\.(\d+)\.(\d+)$/.exec(String(value || '').trim());
+  const current = parse(installed), target = parse(required);
+  if (!current || !target) return true;
+  for (let i = 1; i <= 3; i++) {
+    if (Number(current[i]) < Number(target[i])) return true;
+    if (Number(current[i]) > Number(target[i])) return false;
+  }
+  return false;
+}
+module.exports = { needsUpdate };

package/source/AssetBootstrap.cs

@@ -0,0 +1,49 @@
+using System;
+using System.IO;
+using System.IO.Compression;
+using System.Linq;
+using System.Net;
+using System.Security.Cryptography;
+
+namespace DrumBuddySetup
+{
+    internal static class AssetBootstrap
+    {
+        private const string FfmpegUrl="https://www.gyan.dev/ffmpeg/builds/packages/ffmpeg-9.0.2-essentials_build.zip";
+        private const string FfmpegHash="60F467265B1E312373DBCD92200C2618A74850F98D3D078E94296BB3FA2047BA";
+        private const string PanelUrl="https://zoomcorp.com/media/original_images/R16_list_0.png";
+        private static readonly string[] PanelHashes={"315A71E8942A445C903B2D1AEDB703B64AAB30F054E46199A2BAC447D3D03CB2","5564FA622F101DC27EA402C399C5B9B1E1E039B8771DAF40B185DAB9772ADF38"};
+        private static string Hash(string path) { using(var sha=SHA256.Create())using(var file=File.OpenRead(path))return BitConverter.ToString(sha.ComputeHash(file)).Replace("-",""); }
+        private static string Fetch(string url,string name,string[] expected)
+        {
+            string cache=Path.Combine(Environment.GetFolderPath(Environment.SpecialFolder.LocalApplicationData),"DrumBuddy","DependencyCache");Directory.CreateDirectory(cache);
+            string target=Path.Combine(cache,name);
+            if(File.Exists(target) && expected.Contains(Hash(target),StringComparer.OrdinalIgnoreCase))return target;
+            string temporary=target+"."+Guid.NewGuid().ToString("N")+".partial";
+            try {
+                using(var client=new WebClient()) { client.Headers[HttpRequestHeader.UserAgent]="DrumBuddy/1.6.0";client.DownloadFile(url,temporary); }
+                if(!expected.Contains(Hash(temporary),StringComparer.OrdinalIgnoreCase))throw new IOException("A downloaded component failed its integrity check. Please retry setup or obtain a newer Drum Buddy release.");
+                File.Copy(temporary,target,true);return target;
+            }finally { if(File.Exists(temporary))File.Delete(temporary); }
+        }
+        public static void Ensure(string stage,Action<double> progress)
+        {
+            string tools=Path.Combine(stage,"tools"),licenses=Path.Combine(stage,"licenses");Directory.CreateDirectory(tools);Directory.CreateDirectory(licenses);
+            if(!File.Exists(Path.Combine(tools,"ffmpeg.exe"))) {
+                string zip=Fetch(FfmpegUrl,"ffmpeg-9.0.2.zip",new[] {FfmpegHash});
+                using(var archive=ZipFile.OpenRead(zip)) {
+                    var binaries=archive.Entries.Where(e=>e.FullName.EndsWith("/bin/ffmpeg.exe",StringComparison.OrdinalIgnoreCase)).ToArray();
+                    if(binaries.Length!=1)throw new IOException("The FFmpeg archive does not contain the expected executable.");
+                    string root=binaries[0].FullName.Split('/')[0];
+                    binaries[0].ExtractToFile(Path.Combine(tools,"ffmpeg.exe"),false);
+                    foreach(string name in new[] {"LICENSE","README.txt"}) {
+                        var entry=archive.GetEntry(root+"/"+name);if(entry==null)throw new IOException("The FFmpeg archive is missing its license information.");
+                        entry.ExtractToFile(Path.Combine(licenses,name=="LICENSE"?"FFmpeg-GPLv3.txt":"FFmpeg-build.txt"),true);
+                    }
+                }
+            }
+            if(progress!=null)progress(.9);
+            if(!File.Exists(Path.Combine(stage,"r16-panel.png")))File.Copy(Fetch(PanelUrl,"r16-panel.png",PanelHashes),Path.Combine(stage,"r16-panel.png"),false);
+        }
+    }
+}