Video Search: media dependency source review package

Candidate only. These files do not authorize commercial release.
FFmpeg is a separate third-party component, not owned by the product seller.
This candidate uses dynamically linked FFmpeg under LGPL 2.1 or later,
with GPL and nonfree components disabled. No libx264 or libx265 is included.
Original FFmpeg and Intel oneVPL source archives are included with hashes.
Configure flags and the build script describe the actual source build.
No FFmpeg source files were intentionally patched; generated Makefile and
config.mak paths were adjusted to Windows drive-qualified paths for make.
The PyAV binding's PE import names were retargeted to the corresponding DLL
names; binding import-name changes and binary hashes are in the stage record.

Included: PyAV source/license, GCC 15.2.0 and MinGW-w64 13.0.0 source,
dated maintainer compiler recipes and actual compiler configuration,
NASM 2.16.03 source, and oneVPL notices. Compiler recipes describe upstream
patches and build options; a byte-for-byte compiler rebuild is NOT verified.
The MinGW source matches the maintainer's archive URL, but its archive digest
has not been compared with an independently published digest.

The standard launcher remains strict. The separate RelinkThirdPartyMedia.exe
entry supports replacement of the seven FFmpeg DLLs with compatible builds.
All other application files and account authorization remain enforced.
The explicit modified-media entry was executed with a harmless compatible PE
overlay: all 26 search requirements and exact output hashes passed. The normal
launcher rejected the changed DLL and native analysis without an authenticated
session remained blocked. Final notice integration and public source delivery
remain release gates. This archive alone is not commercial approval.

Rebuild layout (Windows x64, Python 3.12+ for the build scripts):
1. Extract the FFmpeg archive into ffmpeg-9.0.2-source/ffmpeg-9.0.2,
   oneVPL into libvpl-2.16.0-source/libvpl-2.16.0, and NASM into
   nasm-source/nasm-2.16.03 beside this README. Keep archives unchanged.
2. Use the included WinLibs compiler configuration and dated recipes for
   the x86_64-msvcrt-posix-seh GCC 15.2.0 / MinGW-w64 13.0.0 toolchain.
   Configure oneVPL with CMake's MinGW Makefiles generator, Release,
   BUILD_EXAMPLES=OFF, BUILD_EXPERIMENTAL=OFF, BUILD_SHARED_LIBS=ON,
   BUILD_TESTS=OFF and CMAKE_INSTALL_PREFIX set to the absolute lgpl-prefix
   directory beside this README. Set CMAKE_C_COMPILER to gcc.exe and
   CMAKE_CXX_COMPILER to g++.exe. Build and install with that toolchain.
3. build-assembler.py records the actual NASM configure/make commands.
   Its local tools and shell paths must be adjusted to the build machine;
   these are build-time paths, not runtime dependencies of the product.
4. Run build-lgpl-media.py --tools <absolute compiler bin directory>
   --shell <absolute POSIX sh.exe path> --with-assembler <absolute nasm.exe path>.
   The script validates source hashes, applies the included configure flags,
   and normalizes generated make paths for native Windows make.
5. stage-media-candidate.py records the PyAV DLL import-name retargeting.
   Do not execute its product-specific staging paths on another installation;
   adapt the binding/library output paths for your own compatible build.
6. Verify compatible FFmpeg DLL APIs before choosing the optional modified
   media entry. The product cannot guarantee third-party modified binaries.

These instructions record the actual commands and prerequisites; a clean-PC
rebuild from this archive has NOT yet been completed. Before distribution,
finish that check and publish this source archive alongside the binary
download on the same server, with complete dependency notices.

The product's terms must preserve rights granted by third-party licenses,
including modification and reverse engineering for debugging permitted
modifications. Do not impose the product's proprietary-code restrictions on
third-party components where their licenses provide different rights.


PUBLIC DELIVERY UPDATE (2026-11-11)
The unchanged original archive was rebuilt successfully in a clean directory on 2026-11-06. This was not a clean operating-system test. The compiler toolchain and assembler prerequisites were not rebuilt in that test. Rebuilt output need not be byte-identical; original shipped binary hashes are recorded in candidate-stage-asm.json.
Local machine paths in build records are replaced by <BUILD_ROOT> and <USER_HOME>. These placeholders document the original build location, not executable shell substitutions. Build scripts and upstream source tarballs are unchanged. Supply local tool and work directories when reproducing the build.
This archive contains third-party source and build materials only; it is not the proprietary application source. Source delivery does not assert Store approval, payment readiness, or legal certification.
