From b6d75d00d78bb3222c3782af5ced3cbe5753e844 Mon Sep 17 00:00:00 2001
From: Sean Moss-Pultz <sean@moss-pultz.com>
Date: Sat, 25 Jul 2026 09:42:23 +0800
Subject: [PATCH 1/2] deps: swap @feralfile/source-resolver git URL for npm
 registry semver

Blocked on the resolver's first npm publish
(feral-file/ff-source-resolver#11). npm 12 defaults allow-git=none, so
the git-URL dependency breaks npm i -g @feralfile/cli for end users and
npm ci for contributors. After the registry publish lands, regenerate
package-lock.json with npm install and drop the README allow-git
workaround note (done here).

Note: ^1.0.0 is cut from current resolver main, two merges ahead of the
old commit pin (playable artwork source resolution + hardening).
---
 README.md    | 3 ---
 package.json | 2 +-
 2 files changed, 1 insertion(+), 4 deletions(-)

diff --git a/README.md b/README.md
index af1028c..6f23532 100644
--- a/README.md
+++ b/README.md
@@ -119,9 +119,6 @@ npm run dev -- setup
 npm run dev -- find https://objkt.com/tokens/hicetnunc/111068 --play
 npm run dev -- play "https://example.com/video.mp4" --skip-verify
 ```
-
-> **npm 12+:** `npm ci`/`npm install` fail with `Fetching packages of type "git" have been disabled` because `@feralfile/source-resolver` is a git-URL dependency and npm 12 blocks those by default. Install with `npm ci --allow-git=all` until the resolver is published to the npm registry.
-
 ## Documentation
 
 - Getting started and usage: `./docs/README.md`
diff --git a/package.json b/package.json
index 938c138..556473c 100644
--- a/package.json
+++ b/package.json
@@ -59,7 +59,7 @@
   "license": "MIT",
   "dependencies": {
     "@napi-rs/keyring": "1.3.0",
-    "@feralfile/source-resolver": "git+https://github.com/feral-file/ff-source-resolver.git#54be943014c8cf7860114510257cdd713bbf4e79",
+    "@feralfile/source-resolver": "^1.0.0",
     "axios": "^1.6.2",
     "bonjour-service": "^1.3.0",
     "chalk": "^4.1.2",

From d752ec6f6f16f4682c9f85d7e6f5b33356b0f5b4 Mon Sep 17 00:00:00 2001
From: Anh Nguyen <ngleanh@gmail.com>
Date: Mon, 27 Jul 2026 14:39:07 +0700
Subject: [PATCH 2/2] chore(deps): refresh source resolver lockfile

---
 package-lock.json | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index ce45039..e4b7472 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -9,7 +9,7 @@
       "version": "2.2.0",
       "license": "MIT",
       "dependencies": {
-        "@feralfile/source-resolver": "git+https://github.com/feral-file/ff-source-resolver.git#54be943014c8cf7860114510257cdd713bbf4e79",
+        "@feralfile/source-resolver": "^1.0.0",
         "@napi-rs/keyring": "1.3.0",
         "axios": "^1.6.2",
         "bonjour-service": "^1.3.0",
@@ -631,8 +631,9 @@
       }
     },
     "node_modules/@feralfile/source-resolver": {
-      "version": "0.0.0",
-      "resolved": "git+https://github.com/feral-file/ff-source-resolver.git#54be943014c8cf7860114510257cdd713bbf4e79",
+      "version": "1.0.0",
+      "resolved": "https://registry.npmjs.org/@feralfile/source-resolver/-/source-resolver-1.0.0.tgz",
+      "integrity": "sha512-GPYhxNgt8EhptgIFVC5wLhHWkVuyxFAiXRldI6wCP1kDAcaos1jmqIT5l9h0XgN1H2MmzZG/sEbDRRpgAM8ZBw==",
       "license": "MIT"
     },
     "node_modules/@humanfs/core": {