fix(jellyfin): fix overlay toggle sync, redirect reload, and AppImage bi

- Sync visible-overlay state back to plugin via script messages to avoid toggle/hide drift
- Collapse duplicate toggle events within 250ms to prevent hide-then-show on single keypress
- Preserve manual hide across Jellyfin path-changing redirects even when media-title drops
- Rearm managed subtitle defaults on path-changing redirects
- Route toggleVisibleOverlay session binding through plugin toggle instead of app-side IPC
- Show Linux/Hyprland overlay passively (showInactive) to avoid stealing mpv keyboard focus
- Fix AppImage binary resolution to prefer $APPIMAGE env over mounted inner binary
- Add stats window layer management so delete/update dialogs appear above stats window
- Fix Jellyfin remote progress sync during Linux websocket reconnect windows

src/main-entry-runtime.test.ts

@@ -15,6 +15,9 @@ import {
   shouldHandleLaunchMpvAtEntry,
   shouldHandleStatsDaemonCommandAtEntry,
   hasTransportedStartupArgs,
+  shouldForwardStartupArgvViaAppControl,
+  applyEarlyLinuxCommandLineSwitches,
+  resolveLinuxPasswordStoreValue,
 } from './main-entry-runtime';
 
 test('normalizeStartupArgv defaults no-arg startup to --start --background on non-Windows', () => {
@@ -106,6 +109,64 @@ test('hasTransportedStartupArgs detects env-carried app args', () => {
   assert.equal(hasTransportedStartupArgs({}), false);
 });
 
+test('resolveLinuxPasswordStoreValue defaults Linux safeStorage to gnome-libsecret', () => {
+  assert.equal(resolveLinuxPasswordStoreValue(['SubMiner.AppImage'], 'linux'), 'gnome-libsecret');
+  assert.equal(
+    resolveLinuxPasswordStoreValue(['SubMiner.AppImage', '--password-store', 'gnome'], 'linux'),
+    'gnome-libsecret',
+  );
+  assert.equal(resolveLinuxPasswordStoreValue(['SubMiner.exe'], 'win32'), null);
+});
+
+test('applyEarlyLinuxCommandLineSwitches appends password store before main startup', () => {
+  const switches: Array<[string, string | undefined]> = [];
+  applyEarlyLinuxCommandLineSwitches(
+    {
+      appendSwitch: (name, value) => {
+        switches.push([name, value]);
+      },
+    },
+    ['SubMiner.AppImage', '--password-store=kwallet6'],
+    'linux',
+  );
+
+  assert.deepEqual(switches, [
+    ['enable-features', 'GlobalShortcutsPortal'],
+    ['password-store', 'kwallet6'],
+  ]);
+});
+
+test('transported AppImage visibility commands should forward through app control', () => {
+  assert.equal(
+    shouldForwardStartupArgvViaAppControl(['SubMiner.AppImage', '--hide-visible-overlay'], {
+      SUBMINER_APP_ARGC: '1',
+      SUBMINER_APP_ARG_0: '--hide-visible-overlay',
+    }),
+    true,
+  );
+});
+
+test('app control forwarding is only for transported runtime commands', () => {
+  assert.equal(
+    shouldForwardStartupArgvViaAppControl(['SubMiner.AppImage', '--hide-visible-overlay'], {}),
+    false,
+  );
+  assert.equal(
+    shouldForwardStartupArgvViaAppControl(['SubMiner.AppImage', '--app-ping'], {
+      SUBMINER_APP_ARGC: '1',
+      SUBMINER_APP_ARG_0: '--app-ping',
+    }),
+    false,
+  );
+  assert.equal(
+    shouldForwardStartupArgvViaAppControl(['SubMiner.AppImage', '--launch-mpv'], {
+      SUBMINER_APP_ARGC: '1',
+      SUBMINER_APP_ARG_0: '--launch-mpv',
+    }),
+    false,
+  );
+});
+
 test('shouldHandleHelpOnlyAtEntry detects help-only invocation', () => {
   assert.equal(shouldHandleHelpOnlyAtEntry(['--help'], {}), true);
   assert.equal(shouldHandleHelpOnlyAtEntry(['--help', '--start'], {}), false);