OpenH264 Auto-Download + VT Stall Fallback + TCC Fix + Review Hardening
- OpenH264 auto-download: macOS/Linux agents auto-download Cisco OpenH264 on first use with SHA-256 verification. HTTPS tried first, HTTP fallback, 20MB decompression limit.
- VT stall detection: After 5 consecutive VideoToolbox encode failures, swaps to OpenH264 software encoding mid-session with ABR caps. Uses session's current FPS.
- TCC detection:
CGPreflightScreenCaptureAccess()returns false on macOS 26 Tahoe. Falls back to real capture probe viaCGWindowListCreateImage(dlsym at runtime). - Review hardening: HTTPS-first download order, decompression bomb guard, error chain for SCK→CG fallback, consoleUID rejects root, GetScreenBounds error logged.
Fixes SemoTech remote desktop on 2014 Mac mini + macOS 26 TCC banner.
Full Changelog: v0.13.13...v0.13.14