feat(web-player): copy media links with middle-click

[stackia]

Summary

Middle-click a channel in the channel list, or a program in the EPG, to copy a directly requestable HTTP media URL. A toast confirms success.

This addresses the download workflow in #718: IDM cannot sniff MSE playback, but users can now copy the live or catch-up URL into FFmpeg, N_m3u8DL-RE, IDM, or another player.

Copied multicast and RTSP links also include r2h-filename. The daemon emits Content-Disposition: attachment on MPEG-TS responses so a browser download uses a friendly .ts name (channel, source label, program title, time range). The parameter is local to rtp2httpd: it is stripped before upstream RTP/RTSP/HTTP requests and is ignored by HLS/HTTP proxying.

Rebased onto latest main so this shares catch-up helpers from #736:

• Playback segments and copied program links both call buildCatchupUrl (extracted from the nested parser copy)
• Copied program windows reuse CATCHUP_MIN_DURATION_MS / CatchupProgramBound from catchup-windows.ts
• Copy still emits a single program [start, end] URL; it does not use planCatchupSegmentWindows (that planner is for multi-chunk playback)

Behavior:

• Channel middle-click copies the live URL of the current/last-used source
• Program middle-click copies the catch-up URL for that program's time range (playseek placeholders filled)
• On-air programs without catch-up copy the live URL
• Copied URLs are absolute, $label suffixes are stripped, and r2h-token is preserved when present on the page
• Copied live/catch-up URLs include r2h-filename; multicast HEAD/GET and RTSP HEAD/GET return Content-Disposition
• Simple appearance toasts use a dedicated light/dark surface instead of the always-dark video overlay background

Test plan

• Open /player with a playlist that has live channels and catch-up + EPG
• Middle-click a channel: toast “Media link copied”, clipboard contains the live HTTP URL with r2h-filename
• In light + simple, the toast background is light (not slate-900); dark + simple and light + fancy stay as before
• Middle-click a past/on-air catch-up program: clipboard contains the catch-up URL with that program’s time range and a filename that includes the title/time range
• Open the copied URL in a browser (or curl -I): Content-Disposition uses the .ts name
• Middle-click a future program without catch-up: error toast, clipboard unchanged
• Confirm left-click still selects/plays as before (playback URLs do not add r2h-filename)
• If the player URL has r2h-token, confirm the copied link includes it
• pnpm run web-ui:test covers buildCatchupUrl, getProgramMediaUrl, filename sanitizing, and r2h-filename
• ./scripts/run-e2e.sh covers multicast/RTSP Content-Disposition, header injection sanitizing, empty param omission, and HTTP/RTSP upstream stripping

  

[github-actions]

Documentation preview

The documentation preview has been deployed for this pull request.

• Preview: https://thankful-water-0a297bf00-737.eastasia.1.azurestaticapps.net
• Commit: d809823

[cursor]

Cursor Bugbot has reviewed your changes using high effort and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit 74c0b43. Configure here.}