Bump version to 0.9.9

Author: MansiVisuals

CHANGELOG.md

@@ -7,6 +7,24 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.9.9] - 2026-03-26
+
+### Fixed
+- Video downloads now preserve the original file format (e.g. .mov files no longer get served as .mp4).
+- Correct Content-Type headers for all video formats (MP4, MOV, AVI, WebM, MKV) on both the share page and project page.
+
+### Changed
+- Increased maximum upload size limit from 100 GB to 1000 GB.
+- Improved Docker entrypoint to avoid unnecessary `chown` on node_modules during user setup.
+
+### Documentation
+- Added system requirements section to the Installation wiki (CPU, RAM, disk, SSD recommendation).
+- Added CPU thread allocation reference to the Configuration wiki.
+- Updated screenshots for v0.9.8.
+
+### Dependencies
+- Updated Next.js, BullMQ, ioredis, SimpleWebAuthn, file-type, isomorphic-dompurify, and eslint-config-next to latest minor versions.
+
 ## [0.9.8] - 2026-03-22
 
 ### Security

docs/wiki/Home.md

@@ -1,6 +1,6 @@
 # ViTransfer Wiki
 
-Welcome to the ViTransfer documentation wiki. This content reflects the application capabilities and behavior as of version **0.9.8**.
+Welcome to the ViTransfer documentation wiki. This content reflects the application capabilities and behavior as of version **0.9.9**.
 
 The canonical wiki lives on GitHub: https://github.com/MansiVisuals/ViTransfer/wiki
 This folder (`docs/wiki`) is a mirror of those pages for easy versioning in the repo.

package.json

@@ -1,6 +1,6 @@
 {
   "name": "vitransfer",
-  "version": "0.9.8",
+  "version": "0.9.9",
   "private": true,
   "scripts": {
     "dev": "next dev",

src/app/api/content/[token]/route.ts

@@ -3,7 +3,7 @@ import { verifyVideoAccessToken, detectHotlinking, trackVideoAccess, logSecurity
 import { getRedis } from '@/lib/redis'
 import { prisma } from '@/lib/db'
 import { createReadStream, existsSync, statSync, ReadStream } from 'fs'
-import { getFilePath, sanitizeFilenameForHeader } from '@/lib/storage'
+import { getFilePath, sanitizeFilenameForHeader, getVideoContentType } from '@/lib/storage'
 import { rateLimit } from '@/lib/rate-limit'
 import { getClientIpAddress } from '@/lib/utils'
 import { getAuthContext } from '@/lib/auth'
@@ -202,7 +202,7 @@ export async function GET(
     const originalPath = video.originalStoragePath
     let filePath: string | null = null
     let filename: string | null = null
-    let contentType = 'video/mp4'
+    let contentType = getVideoContentType(video.originalFileName || '')
 
     // Handle asset download
     if (assetId && isDownload) {
@@ -278,12 +278,12 @@ export async function GET(
       // Use asset filename if available, otherwise generate from video info
       const rawFilename = filename || (video.approved
         ? video.originalFileName
-        : `${video.project.title.replace(/[^a-z0-9]/gi, '_')}_${verifiedToken.quality}.mp4`)
+        : `${video.project.title.replace(/[^a-z0-9]/gi, '_')}_${verifiedToken.quality}${(video.originalFileName || '.mp4').slice((video.originalFileName || '.mp4').lastIndexOf('.'))}`)
       const sanitizedFilename = sanitizeFilenameForHeader(rawFilename)
 
-      // For non-asset streams, determine Content-Type based on quality
+      // For non-asset downloads, use original file's content type
       if (!assetId) {
-        contentType = isThumbnail ? 'image/jpeg' : 'video/mp4'
+        contentType = isThumbnail ? 'image/jpeg' : getVideoContentType(video.originalFileName || '')
       }
 
       const trackDownloadOnce = async () => {
@@ -371,9 +371,15 @@ export async function GET(
       const fileStream = createReadStream(fullPath, { start, end, highWaterMark: STREAM_HIGH_WATER_MARK_BYTES })
       const readableStream = createWebReadableStream(fileStream)
 
-      // For non-asset streams, determine Content-Type based on quality
+      // For non-asset streams, determine Content-Type
       if (!assetId) {
-        contentType = isThumbnail ? 'image/jpeg' : 'video/mp4'
+        if (isThumbnail) {
+          contentType = 'image/jpeg'
+        } else if (filePath === originalPath) {
+          contentType = getVideoContentType(video.originalFileName || '')
+        } else {
+          contentType = 'video/mp4' // transcoded previews are always mp4
+        }
       }
 
       return new NextResponse(readableStream, {
@@ -395,9 +401,15 @@ export async function GET(
     const fileStream = createReadStream(fullPath, { highWaterMark: STREAM_HIGH_WATER_MARK_BYTES })
     const readableStream = createWebReadableStream(fileStream)
 
-    // For non-asset streams, determine Content-Type based on quality
+    // For non-asset streams, determine Content-Type
     if (!assetId) {
-      contentType = isThumbnail ? 'image/jpeg' : 'video/mp4'
+      if (isThumbnail) {
+        contentType = 'image/jpeg'
+      } else if (filePath === originalPath) {
+        contentType = getVideoContentType(video.originalFileName || '')
+      } else {
+        contentType = 'video/mp4' // transcoded previews are always mp4
+      }
     }
 
     return new NextResponse(readableStream, {

src/app/api/videos/[id]/download/route.ts

@@ -1,6 +1,6 @@
 import { NextRequest, NextResponse } from 'next/server'
 import { prisma } from '@/lib/db'
-import { getFilePath, sanitizeFilenameForHeader } from '@/lib/storage'
+import { getFilePath, sanitizeFilenameForHeader, getVideoContentType } from '@/lib/storage'
 import { verifyProjectAccess } from '@/lib/project-access'
 import { rateLimit } from '@/lib/rate-limit'
 import { getConfiguredLocale, loadLocaleMessages } from '@/i18n/locale'
@@ -89,6 +89,7 @@ export async function GET(
     // Use the original filename from the database, guard against missing values
     const originalFilename = video.originalFileName || 'video.mp4'
     const safeFilename = sanitizeFilenameForHeader(originalFilename)
+    const contentType = getVideoContentType(originalFilename)
 
     const range = request.headers.get('range')
 
@@ -119,7 +120,7 @@ export async function GET(
       return new NextResponse(readableStream, {
         status: 206,
         headers: {
-          'Content-Type': 'video/mp4',
+          'Content-Type': contentType,
           'Content-Disposition': `attachment; filename="${safeFilename}"`,
           'Content-Length': chunkSize.toString(),
           'Content-Range': `bytes ${start}-${end}/${stat.size}`,
@@ -147,7 +148,7 @@ export async function GET(
     // Return file with proper headers for download
     return new NextResponse(readableStream, {
       headers: {
-        'Content-Type': 'video/mp4',
+        'Content-Type': contentType,
         'Content-Disposition': `attachment; filename="${safeFilename}"`,
         'Content-Length': stat.size.toString(),
         'Accept-Ranges': 'bytes',

src/lib/storage.ts

@@ -119,6 +119,23 @@ export function getFilePath(filePath: string): string {
   return validatePath(filePath)
 }
 
+/**
+ * Derive video Content-Type from filename extension
+ */
+const VIDEO_MIME_MAP: Record<string, string> = {
+  '.mp4': 'video/mp4',
+  '.mov': 'video/quicktime',
+  '.avi': 'video/x-msvideo',
+  '.webm': 'video/webm',
+  '.mkv': 'video/x-matroska',
+}
+
+export function getVideoContentType(filename: string): string {
+  if (!filename) return 'video/mp4'
+  const ext = filename.toLowerCase().slice(filename.lastIndexOf('.'))
+  return VIDEO_MIME_MAP[ext] || 'video/mp4'
+}
+
 /**
  * Sanitize filename for Content-Disposition header
  * Prevents CRLF injection and other header injection attacks