CouchPotatoPlayer android-tv 1.2.0/377 — sources and notices

EXACT ARTIFACT AND SOURCE
Source commit: de1478c848c82a6d6b2f9b4e410ad73f4baf658e
Upload AAB SHA256: 026412d20b6851cedbb0a54202cce1c00530eb12ef5cead5803297867856b247
Hermes bundle SHA256: 6862befc3c485147c0611b2b47124ab408da9bc658b511ad8d02a1196ff7d379
Local QA APK SHA256: c288c2e3446c3b8b2bdae865f2fd35e2a9b565ff8687e92d033f9d57532123f9
AAB-derived LOCAL QA APK signed with the existing upload key. Not a Google Play app-signing-key APK and not a website download.
A matching Google-signed universal APK has NOT been verified here. This source
index is for the recorded AAB/localQA content and does not publish an APK,
announce website availability or claim a public store rollout.

REASSEMBLY (Python3 standard library; no third-party installation)
1. Extract the index ZIP into a new working directory.
2. Run: python3 REASSEMBLE-377.py --download
3. Ten verified original files are created under reassembled-377/.
Use --verify-only to verify without writing original files. Existing correct
originals are retained; conflicting originals are never overwritten. For offline
use, download the listed ZIP parts into parts/ and omit --download. The ZIPs are
transport containers: do not concatenate the ZIP files themselves. The helper
verifies each ZIP, reads its single stored part, reassembles the original bytes
in manifest order and checks every complete original SHA256.

PROVENANCE AND REUSE
The app source ZIP is a NEW git archive of the exact commit above. Historical373
Git source is not asserted to cover this app runtime. Unchanged native component
sources and notices retain their actual373 filenames/URLs/hashes, with explicit
reuse evidence in COMPONENTS-377.json. All20 shipped provider shared libraries,
10158 FFmpeg/Media3 source files and all7 embedded notice/Billing payloads were
compared. The375 proof for802 installed npm identities and751 supplied notice
payloads is reused because lockfile/patch/all non-script package manifest fields
match375; only updates:export:android changed. No fresh installed-notice audit
is claimed. Current
host/native integration materials and actual rebuilt-library hashes accompany
the source. Reuse does not claim rebuilt wrapper binaries are byte-identical.
No historical367/373 publication bytes are changed. Original app/CPPlayerKit
licenses remain controlling; publication grants no new rights to proprietary code.

LIMITS
This is not a complete all-dependency license audit or legal certification.
The inherited npm pack documents57 missing package-root notice mappings;44 are
in a conservative production graph which includes build/CLI tooling. Monorepo
attribution and exact APK runtime-shipment mapping remain unverified. There is
no Apple source/relink claim. Google-signature/download verification, working
TV Drive sync and real Store transactions are not established by these files.
Google grant/encrypted sync product QA is separately evidenced; this source index
makes no runtime-success claim.

ORIGINAL FILES AND DOWNLOAD PARTS

CouchPotatoPlayer-source-v1.2.0-377-de1478c8.zip
Original bytes: 50546470
Original SHA256: 16af4c1c27ae74343dd7315df438021d160fef60062bc275a40a81497672c5f4
Part 1: https://couchpotatosuite.com/wp-content/uploads/2026/10/cpp-license-377-tv-couchpotatoplayer-source-v1.2.0-377-de1478c8-16af4c1c27-p001of001.zip
ZIP bytes: 50546576
ZIP SHA256: 3c14892ca0421f49629bf479701f2732e007ce060d72a773d1b67a7182a01893

android-tv-377-host-build-materials.zip
Original bytes: 46682
Original SHA256: fd8478de5e11fb0e9d774c4f7ade8dc1bf20aedd41507d1392bbaa151eb5733d
Part 1: https://couchpotatosuite.com/wp-content/uploads/2026/10/cpp-license-377-tv-android-tv-377-host-build-materials-fd8478de5e-p001of001.zip
ZIP bytes: 46788
ZIP SHA256: d8b233fc22cbeb635d24e3b4003154f0b2ea0c0f1ef5220b5e553b2556f34a7e

COMPONENTS-377.json
Original bytes: 25661
Original SHA256: 860c6a97e005970a0bad0b83d8325096ff683bbc2246e6c3012c71d30731e318
Part 1: https://couchpotatosuite.com/wp-content/uploads/2026/10/cpp-license-377-tv-components-377-860c6a97e0-p001of001.zip
ZIP bytes: 25767
ZIP SHA256: 63012638436ca470556bf8793d14441e3645dfe9253994352fdeda5687e68793

SOURCE-AND-RELINK-377.txt
Original bytes: 4711
Original SHA256: 3c8460ae0037293e681b69dc9c62b8ed03f020b0529f1c25fa71a1a7f6019d7a
Part 1: https://couchpotatosuite.com/wp-content/uploads/2026/10/cpp-license-377-tv-source-and-relink-377-3c8460ae00-p001of001.zip
ZIP bytes: 4817
ZIP SHA256: 1f54bb7316b3d6b7d6c744979cb05369f32c4c63ed994f3302fad1e4fb27697f

android-libmpv-lgpl-sources-373.zip
Original bytes: 89473307
Original SHA256: ffbd387508936dc3f1086d4dbaff93d9c823476f493297a85f5dcd269815ca39
Reused unchanged component/notices from build373; current correspondence in COMPONENTS-377.json.
Part 1: https://couchpotatosuite.com/wp-content/uploads/2026/10/cpp-license-373-android-libmpv-lgpl-sources-373-ffbd387508-p001of002.zip
ZIP bytes: 62913642
ZIP SHA256: 51b607612fd0a1f06d1ec92a1c77a4478769653e6a4efd8a88124dc9669885c3
Part 2: https://couchpotatosuite.com/wp-content/uploads/2026/10/cpp-license-373-android-libmpv-lgpl-sources-373-ffbd387508-p002of002.zip
ZIP bytes: 26559877
ZIP SHA256: 28f71dfac242ea03fd9b0bfaf388118d8292e2da7e78ccdc5d0814e235d1d834

android-media3-ffmpeg-8.1.3-source-373.zip
Original bytes: 22131512
Original SHA256: d6b4126bf21abaea8387f64a45995c6670caef5f389572db70b2f7da77f46d6c
Reused unchanged component/notices from build373; current correspondence in COMPONENTS-377.json.
Part 1: https://couchpotatosuite.com/wp-content/uploads/2026/10/cpp-license-373-android-media3-ffmpeg-8.1.3-source-373-d6b4126bf2-p001of001.zip
ZIP bytes: 22131618
ZIP SHA256: 59c9d7d05eb769ad675af505504a729c39a46d9f7ea4aae94505e7b78a176a4d

pro-iap-notices-373.zip
Original bytes: 54959
Original SHA256: 0e5d1253a2d48bc589d84dc09b72f1b9481a44cc2c053420b246b1da8af90566
Reused unchanged component/notices from build373; current correspondence in COMPONENTS-377.json.
Part 1: https://couchpotatosuite.com/wp-content/uploads/2026/10/cpp-license-373-pro-iap-notices-373-0e5d1253a2-p001of001.zip
ZIP bytes: 55065
ZIP SHA256: 4134e8bc40bca37a6faac2b179e2d444a7eb20c3861978904ba56ea114243532

npm-notices-373.zip
Original bytes: 744825
Original SHA256: 8d94c76753306ab7bd136777b079ad437a94e3678db0b64b6e573d09d3ffd8e3
Reused unchanged component/notices from build373; current correspondence in COMPONENTS-377.json.
Part 1: https://couchpotatosuite.com/wp-content/uploads/2026/10/cpp-license-373-npm-notices-373-8d94c76753-p001of001.zip
ZIP bytes: 744931
ZIP SHA256: dcfe0c01a804df8d4bab8a4c9915c7b2350b76d39e5802258f8ebbcd70fad0e8

apk-embedded-notices-373.zip
Original bytes: 19461
Original SHA256: e5d2458c7e1db7b54efa1ad3c3ba8b759ba2806788feba02f2060bdf67ee43b0
Reused unchanged component/notices from build373; current correspondence in COMPONENTS-377.json.
Part 1: https://couchpotatosuite.com/wp-content/uploads/2026/10/cpp-license-373-apk-embedded-notices-373-e5d2458c7e-p001of001.zip
ZIP bytes: 19567
ZIP SHA256: 53423f018e63cfd3de647a71b0e915e6cb5b45f6a7854bdfca2ae9bf0cf7853e

SHA256SUMS-377.txt
Original bytes: 881
Original SHA256: cfeb6f7842406e80dce93014a413b46ea1384f45a652b16f22afcc1c43056063
Part 1: https://couchpotatosuite.com/wp-content/uploads/2026/10/cpp-license-377-tv-sha256sums-cfeb6f7842-p001of001.zip
ZIP bytes: 987
ZIP SHA256: 3776105defed4c82a142cefef4330c6a791cf63ad5191a7087d1de0a00862ba0