From e7709e8756c6fd1511675cc77627ed7ae1d945f9 Mon Sep 17 00:00:00 2001
From: christian <christian@waterschurch.org>
Date: Wed, 21 Oct 2026 21:07:41 -0400
Subject: [PATCH] Fix the damaged uninstaller that blocked every update from
 1.4.35 on
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

On the TV the update stopped at "Bible App cannot be closed", and uninstalling
from Windows Settings showed "Installer integrity check has failed". The cause is
the uninstaller, not anything running.

An update runs the PREVIOUS version's uninstaller first. Versions 1.4.35-1.4.37
were built on macOS, where electron-builder can't run NSIS to write the uninstaller
and rebuilds it in JavaScript (UninstallerReader) from the installer's stub — without
NSIS's icon patch. makensis computes the uninstaller's CRC over the stub WITH the
uninstaller icon in it, so whenever the two icons differ the result fails NSIS's
integrity check. With no app icon configured, NSIS uses its two different default
icons, so every Mac-built uninstaller was damaged. Verified with a reimplementation
of NSIS's loadHeaders() check: the shipped installers pass; the captured uninstaller
failed (0x4235c8f5 vs stored 0x90f7de2c) and passes with this fix (0xb37e533c).

- build/installerIcon.ico: NSIS's own default install icon, so electron-builder uses
  ONE icon for installer and uninstaller (nothing looks different; the app's icon is
  unchanged). tools/build-win.cjs refuses to build without it.
- build/installer.nsh: for installs of 1.4.35-1.4.37 only, clear the old
  UninstallString so the damaged uninstaller is not run; the new files are copied over
  the old ones and a fresh, valid uninstaller is written. Every other version keeps
  the normal uninstall-then-install path.
- BUILD-AND-DEPLOY.md: why the icon file must stay.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
---
 BUILD-AND-DEPLOY.md     |   6 ++++++
 build/installer.nsh     |  29 +++++++++++++++++++++++++++++
 build/installerIcon.ico | Bin 0 -> 13902 bytes
 tools/build-win.cjs     |  13 +++++++++++++
 4 files changed, 48 insertions(+)
 create mode 100644 build/installerIcon.ico

diff --git a/BUILD-AND-DEPLOY.md b/BUILD-AND-DEPLOY.md
index 0bc6e83..eafe674 100644
--- a/BUILD-AND-DEPLOY.md
+++ b/BUILD-AND-DEPLOY.md
@@ -70,6 +70,12 @@ Notes:
   for you. The TV's updater compares versions numerically and only offers a HIGHER version.
 - If `WIN_CSC_LINK` / `CSC_LINK` / `CSC_KEY_PASSWORD` / `CSC_KEYCHAIN` exist in your environment,
   `build-win.cjs` removes them for the build (electron-builder aborts on an EMPTY `WIN_CSC_LINK`).
+- **Keep `build/installerIcon.ico`.** On macOS electron-builder rebuilds the uninstaller in JavaScript
+  and leaves out NSIS's icon patch; if the installer and uninstaller icons differ, the uninstaller fails
+  NSIS's integrity check, and that version can then never be updated or uninstalled. This file makes
+  both use one icon (NSIS's own default, so nothing looks different). `build-win.cjs` refuses to build
+  without it. Versions 1.4.35–1.4.37 shipped without it; `build/installer.nsh` installs over their
+  damaged uninstallers instead of running them.
 - On Windows, if the build fails while extracting `winCodeSign` (symlink / permission errors), run the
   terminal as administrator or turn on Developer Mode, delete
   `%LOCALAPPDATA%\electron-builder\Cache\winCodeSign`, and build again.
diff --git a/build/installer.nsh b/build/installer.nsh
index 98ca94e..1c674c3 100644
--- a/build/installer.nsh
+++ b/build/installer.nsh
@@ -42,4 +42,33 @@
   nsExec::Exec $2
   Pop $0
   Sleep 1000
+  !insertmacro bibleAppSkipDamagedUninstaller SHELL_CONTEXT
+  !insertmacro bibleAppSkipDamagedUninstaller HKCU
+!macroend
+
+; ---------------------------------------------------------------------------------------------------
+; Versions 1.4.35 - 1.4.37 were built on macOS before build/installerIcon.ico existed, and their
+; uninstallers are damaged: they fail NSIS's own integrity check ("Installer integrity check has
+; failed"). electron-builder rebuilds the uninstaller in JavaScript on macOS and leaves out NSIS's
+; icon patch, so whenever the installer and uninstaller icons differ (NSIS's two defaults do), the
+; checksum is wrong. An update runs the PREVIOUS version's uninstaller first, so those versions could
+; never be updated: the damaged uninstaller fails, and the installer reports "Bible App cannot be
+; closed" (it also cannot be uninstalled from Windows Settings).
+;
+; For exactly those versions, the old uninstaller is not run: its UninstallString is cleared, so
+; electron-builder's uninstallOldVersion finds nothing to run, and the new files are copied over the
+; old ones. This installer then writes a fresh, valid uninstaller and registry entry. Every other
+; version still goes through the normal uninstall-then-install path.
+; ---------------------------------------------------------------------------------------------------
+!macro bibleAppSkipDamagedUninstaller ROOT
+  ReadRegStr $3 ${ROOT} "${UNINSTALL_REGISTRY_KEY}" DisplayVersion
+  ${If} $3 == "1.4.35"
+  ${OrIf} $3 == "1.4.36"
+  ${OrIf} $3 == "1.4.37"
+    DetailPrint `Version $3's uninstaller is damaged; installing over it instead.`
+    DeleteRegValue ${ROOT} "${UNINSTALL_REGISTRY_KEY}" UninstallString
+    !ifdef UNINSTALL_REGISTRY_KEY_2
+      DeleteRegValue ${ROOT} "${UNINSTALL_REGISTRY_KEY_2}" UninstallString
+    !endif
+  ${EndIf}
 !macroend
diff --git a/build/installerIcon.ico b/build/installerIcon.ico
new file mode 100644
index 0000000000000000000000000000000000000000..f8fbd5ffa910bd7e090becb3ec78fda3cfa4dd8f
GIT binary patch
literal 13902
zcmeHtcVJsZw)Y8P2`sR*WtXxK!tT<RU6zH=TVN@h1V|tugaGNqX^s>3-fg*e%a$xx
z$&%c=+$}d*l1psMvLwqz?lq3%#Mp6Sop-Kmvmp!YKHmHO`^Fy4ojYgdoS8fK&Tr=Y
z0M@`dxclzAfeBBo0kENz$*zH0!R!|R@pNzf`sMPmn*eTE$K;pGMYjS>-v;p9b1V5@
z0Yu-sT7Ny5-3;*7W2^G(K}5}@K2CZV9Tce<SOX+PL2CM4{#n+xdczHX{=v;{IiX*=
z1gTU?DN}%^e?VleDAFHui}_gzzP6?SzAPsAy7^Ke1vl18`K_j6JGj+!o6>KO9656O
zXQV6j!K8;;U$blpW6f%GqkI2Jl&(em{y5!gvUVdqkM9C=y^=q+Zxfgw-40HtcY?Xg
z9!Pe20%BZuf}8UxI1~IeoQyvWrxGln&F3cQiM$6e?kR|4Z3iBeMa6vyyvTjP3qJ}8
zAr`=kv4JF#4bC_Y-j#<SDb*43`PQH+a|A3m2ds1jPnjbeGmijs+eEN+<%5f78o2mp
zKx~L7_=fsYdn|~Gjt4#`5Cl9nBnX2cS?mo-A{OuqSx}N60%BnVB#I*;Jv{~zbHagN
z6b-565s;F@1HZsD2#rpJC|(J$1S0S)PJx0{K1i}sAU87;_>x4(EX;!RDiP%6WI#bx
zCM0E*Q@goPT2utN`Q?x!se;nN5>Vv(fUGP4YRglgwm<~+k_?a+mw<1BFXUJILq=05
zq)K^^(i#Z?iWK0;DnTR@f>4$T74jqysgj^XD}>C(Tu5&&hqA6b=&t61qM8qirX;AX
zO^0*!nV@LN2DMBC?aB=3ZWKYcRsibmY^Xk00Q#0(P;}>lytfQGG?Z`4hjvvZs5>e^
zt0{-J?n>zGs)GL3Oc?B}0PHG+Xr2nfa}*$!NI{sX2Vr&(h_bptnA-&fl{&~P?S-PM
zK8pQhn-tQT8=y#04aGHbsH{^$wyp(=)QwQuu7GmoAe6UELUX+o<P9>A%VnTyu7UO@
zIaI4!pp{~MV;eLyt3cJ>3Y~3j(AutnR!s+}be%BJT@M3&El^`<gQk8xG!6HFdbAe|
z{f#g@tc9N5e$e#JK+pIfXvc=YFgXGvqZ2SVJ_*B9lQ21X0Vbx-!xY8Q*=aaGJp<=2
zUHon;|No2s^#}w7Uf0CNXZM*0fBf3tS8hH27xTo;H$_GLo%yB!{NcevoIQ8kz9uT{
zttTn_#$Eq77W>e{cm5)X?fKW&0oL8U>9Ey)>))+qhq}LcAHdDO*}C`CLCbHRV|}&r
z`Flg)m!ItV`otLvv)!M6`of>@{RnRRug|_be)Px}&p-302k!sX7P$4d+s-7MJ$c}r
zw>Lcf>stcgkK4H!S%UbK^z`&(e_MbLU*$PJ`ttABzxdcAnSSq*0Z;h4IXKgwqfNRU
zV;{Wa&KHTq>6xisrYyh*uk7&QC3$_Yl4X+c@aW~7(G_6kE&v0qP13crRM0ok6sg$l
z`nYnRkzr(+I>xt`*Q50$w~^xNdgMlH-D>#1UXNDWT}jv3+FC4MhTsehKC>Dv-=Mt3
z^5R5;MuGCSH|ANU#cR0&Q%;MW#cGQyd4QD$e<XjS{C5U0@+<9sr{8W_AE{Wjhf!#1
z-qy`zpY5%T1-G(TtNFVYSga7!dQ0n~o2@MsnS!s|a^BQ3^J78l@4~v(4%*t8mQgp`
z<y9GxnHW@eooRJ8t<Q9WTKry~guj<(1en!)Ri0_%|8?Gk0+#J1b&QS60noS(r3-6N
zY5^!+53W)$#kVP?xNjvg*QU6Z(lr!K*y#GyZF$vSvq0%JibjeAFxKG0PsD4mmU;Kr
zQ`|_A!FNn>yV;a1|IqtE1*Y)oD=)(7&u#_VFK>a<U)%#9{QXU^-1Q{9`JOEtwb=qk
zT(^U@<yWv{w>|7R-~xvZ?FajlN5SswVQ}Al9|YUp37j);0`K%k5NQ2(;5dB%(biu;
zlGQd~I~@dHdcMgn``~EY9xxMs4o;<C!5Q!4U=d&eX1V5YL}CpN)u+Iz)&b&u-U3nJ
ztAN34VJvzLEV2nr@ty}vdKS1|AAxto#}MSZ9pZd;f=Arf5FfS|QvBZm5qmdqSVtf}
z`Upg@>>)1J4pL%|K}xU#@VU0Y5g!Nloa2y?Vhb^4_8<@(f}G@Iki@rx(lk2|<vT-l
z-d-5b*$kMs4P@EQfCa~3Jj)t_tIZ&=-UirpHt_TYZ+PJi5BOkP4D3C^ffF{taN0f!
z92_Izq)irBIA?>kYXR&zUJqxTo59=82b@AYz`>6P*6E($P{IK#fdE{Jv%#_65B$75
zAw19v;@LhB;L8S|m?+>xvmqtI6Oy9>AdwdY0!}n!#1ejD$5EaGS#dGIO9_DZOu|})
z9Ku;Xke}uQDFp#gD)ED)^l-?^jDX}6E{GF(ker<W#p%(&FNp$Hv<Sju#K4NnA<R(<
ztc)~ZCuM?1UOL3*3V|aig22KY;FT8wUyulCd_E+LQa~i)LzYkkS?L*&pPmM(B?8DP
zPJ*(sWZ;W(Aup>CGV+R{ATN(_SU!|f{d`F!6c-jld1)zBXZaEy^MS^4HmJ%YVXQnF
zs?*a!UYG|BW#tgq=m#-MZ*Z&UKxk78#J92ulleocG6p2gY)Eg7fP#*A2x-iQh$ayP
z$R!ZlR0yf{A`o_@LXk!UV!9`3Dh08+3`+Hc1#8*RCXE7=M?rOU5-95hP+OM{iUu)g
zlwzps6oN*R2GZIBXqFLXYb*e%tQ6`R%b<y(swEGUT?L?3OJJ}$1BTS8fGRQctBV2k
z67UUafgpAhgeBBMV3Z2{gi?qQOM%PRKxDBB1Zho>UQ`FgrPYv<u7}jZZYU`4gOaL2
z;Hv5fUsgkjLI(V{S}4>sLSmf(N@PRO&`<|zg%ax2O3-!HLqlT+G<LRwM$2F`8T5B|
zgVIn3ZH9V~4QilsxC@5+TVQxd19i#)P<D=iMn4KF{S4^GMqq4W5=Lgu!{pR54x737
z^RQT?zppRtt0I@b8aMn#o;0%wEw8OjOb9w|7kfh?z~KWnrL|*Iv$K;UBS{Izk9}Vt
zaQ~}T6=SoPF6r*{J%4_3IEr;N=sF43i&U(by>vzP$D7v#F#<8Z*9k<vxZ$0+hN(-J
zWPg0}$(w#b0wco_wy%8G!iz7w&1q0f&dMHt@~NkuTDvCl{NzMku=y)18V*13{5!l#
zMf2?6-+TX0PdxGDJ%=YJCr0!A4;(QG#6I|!=Re?8HaE{seb7|$;nR1&I7#&leZl50
zL@@$~fBEOPxlDQUtV2sn$%nV>W2zhae5^N^8hG&5Kfm^lq*D3M@`;H7Lw{e6^-C`#
z0mS_3w!gmiu9ZpPtWp{Ok6-&u3=H(;=LcK9`m6&$;9U>D{-#h|RYew7HY=qy)dr?C
zC)m;Qjc2I~tVh=WAtfz6uSzagG&j@K=_{bp97ji{{2?lT^s&8y)WV{oqUq@i7cR(i
za&kmeD73VE_vL4PYbyUka%yf~o?I@MN*kq)mX_A<zH7O0<Hk2O+)sEg;E~6EznK(J
z`%H0FsD<?zCcN?T%g^0U^@HyE-G6P`BCe8On3`&&oqA|+u!XhxnKQ4xyy4k<9{`A@
z@-4!=3$vGIXD^JAlKT3Bg8VSQ)8?<d@EbE4zX!kKXBN&ZE?!$)yhz~+6Rs}K&&>@D
zsti<q@=Jd902N=mws>XX;>E=)SDA2Ser|Bkg^B@oeVs9|IHR4rJ;Li#r)}ChMs_=Y
z=6v<)+@NY1P#!)+<#X-ZKX(0mN83lPACG^c*}87&>b!orIyK<dzc}CiMVJ1vTCKjk
z^Rm9{oMvh1d`E<-d3r<#eFnbO_sm`H)?e<LQ_rh=y4tUv*SfD1(-<7|9+<nbxNzm$
zg@vnRAJYYc^LNDnk)L_=&s<zwys~)p>eABE)hp+9t6+CU>fmmV?17nug$0thGCAz3
zy{@+DQs=z;n>|@sy_1vU5zaSMUXcxRa{9)_#oe8j%>Ou;0L;u?%Lf&-)Dp&cdja54
z0;hK|(Lf+o3c%nK6Gm|()bLZ0<QN>Y*03DcF(8*|hiQ{(o3M+k=}=^5ok=x=Q=X%^
zkK%VY<(HIM4QuFvi4<OX_D*=?Z+F65uRH>Oe&!i?al;09=cPMg`=*EBy?0)MhacMs
zzkljWc;c_8;k9?|3A_9Qjvd<xhY5>Vp8X8$P96d~TQhJZJR7v<*AVY?H}LImhdk#s
z5WVMb5P0+{h&lQSaL&F3GRHL#dFVah*uM|n_FqA)-520_>NEt|9fv3vGjKPz1(uBi
z9P`}*&JkO{%zqb{vA+bD*j;ce<3q5Qd;~|cc7Y9H9c%Ana3tX<xcJ$@Q30ii2jN8i
zQLryHg9BnqI96&6_Ej!mS7QsstUI89^&7$_8$eB;Q3eN1#oPpoQELFh?gLDC0*t&D
z;GFn%FbZA+ub_{B>;4J&cx{6?-yOhZ?*c*8SCE^q7ebQ00l%`(f$Mh!;v$biu$vP^
z``AKU6yY%j8wFZJQmie6h)zI!>Iv|w*ar!z_7GHh7I?WfAWl6Bd4l7ROc<#|Y(p5y
z5hVFeP$T&U=Ca-cW7b}1&OZU#l4DRqn>l5%Js1lPf>+H+h^Rge{&jW`Tki;bnLVha
z4)B*(!(hvfVEFowKUi1>!scC7u<JlN;ifz=w^tHQ^aGo~7_cb{2J4VCuoa8oRJ9w}
z$^5{njtwp~h2ZGj0)E~;5bozsef0+)A2!4UMgccE8U)dPkji0GUjiUb7!C0SF@%kL
zp*YhY1QLHJmIOdbDjUkvA|a)i4H8KV_(i8f3Qq_T8CisJgiw?&CfO7^R}unWTm&LI
zUn(gshK3@4!YNUps)&K55)Y`!NQb)0ERYelnJ?vopMnJ(!Z1DxHn5vwfZG-esf{cU
zHSnNN8404c7$|Au(m9j>BAZ3PYZm}ZUJUF;2_&>u5snc;C7mw`I|NYN$p?`_0!4M@
zAXF7XDV-11*RY|zmIKCmA22Gp(BBmY^7>T5F(POn?4#9+p+Q~<x|V!UXbVBxSqz5e
zOfYmNgHe?ZhI6?vuP8TR7h`uZG#bhvAhI2z($7I=kqQdR3?QwPLTgnG#7TQ0y|Ef3
z%6dps%jjH5L1$xKAn9#`^1gPcFsMM%FbXm{TWW7?1X+g?G@UZ2SE>o8s6eaJz<|CU
z=5@``-_r&2R7YWuLr1?H6oWcY4|l_mL21G(^ZjZ#M|edyG6Z9j6EH?NWoG6AVU`(~
zq%)(Li}dyQzYDtmxT%EL@NgFW`BRAfchz*UEboBusJMECLcr%lFjam+kuKKDJ2<Ld
z(bP0Lc5$q$t1Fey@%Q`D8nG;|y&+PCa%^n!^4#S~0#GAV!{6U8;fHkS!o79|hf(7f
zFVD@*DLlPKrl+SzMp9Erh5x@+(6K(<zAvm^)^u@t?#kToqib(|eB{dX^yG*xfkW@u
zjUCr{eYSl^n3P&)#K*S3e*c<Zcrg`5Muro3tnD{eV12rEhnciqIdysZ+qtoAufP5F
z{Wq;v&?UsOKKJ{cN&cU1-LfySUZxzIo->JW-1zoyZ~28M^?@)|MSQsT_UrqQ;Q5Em
zd-f&OE61iTuZS}h7?TzzCr5`XxZ&QPbN;D;_4`d*_L(Kil<iYfm!<C=djH*b2<L2k
zbKQNqNdj%d73Hx3+dm&(tq}XiM>l_DmYA$mwzp4RK6vzKP0jK5-+AkI_rDQK;$%=y
zIX8U!*6%Fxy5}ET_K<vYGoxTm5pnKZZO!5Le|>B0^z;HF-cueQ6tMO4l|hYt{O%7n
z?=eeGmNhps1}P&{s&lm|#~&nl5}z3F>+UY+25jH7qQLi_J3rX`&4HxkYQmaikiaBg
zbC~4Gn2FK8p6+r+e(Q1%bdTSC=aV0Qb0Dm`TGrf33IvI!_DMdRj3H~N`C@M1-mRPX
zOpjy#_^YS>^zp9K2c%S?wY9CiKH}SN&$kIv9{v@NTJP=crRIx+LU(RkZ+d9{_uTc=
z3txP_KRa7mB9pbZx7V9lSXdl8a%4yN@aSl7H`97CmyzG}InzGto~NIG@hkJp?Cjiz
zh6ZI*YioPEl3sx>GKJ|WNf&b?BSUv@+q6EFk-zu3mrtA$XXccZl{GXpHjR-AB~_?U
zP(LM%bR>mPlRVP_-+Nzr`4y2UqqMAwLPtl(SQE)B6y@E;#f)?oH;WM``9~g#BYFS7
zzU1PXmR?X=NzyY+VBqJ)vW%?K;+#;D%p~E^{kwN<e&nH*_FY~PrDc>ZD`@O!=#b0n
z8X5vaLxbrrbbs*f{q(nM%jQQOVCI}Z+4JftkvJ!(l<5E?Ew7WyOM-#|L;ZqHVfWtM
zJN9nd^vDB@JxqUJJaNiAGbgvKp`%0IUdM<xl*BO=0!V&u@ZOy}c5K_W>EQ>MH{buB
zr~mTomnUgJ8S$wp8XnRhZ-|Nwq8b4dcJAG|ZO67vA3pS7%y_czdE%Kre{%A4CW%kc
zbfX||BKf#DF1MJ=B^{yOdv|QxvgwhBP2<mb?5`Whp3KsQi<jo+2%9%u9P4Oo932}Q
z8y#)z>51pX#K#1(ytjXL&u7#;3_t!i7uUS}%D&l!MN^o&bcrzk0t1Gbuyk#n!qAXj
z9}~~WgYSKgX?c~sgCtIv*tobbw?H*Wei`6jy~b2v<fAK0@|?#V-0~{>E}6uaj7y7z
zmKQEDfSdUvai#*vJFgrSgV%j-c}2Y>uODBEvEp6gImA0TROqbO(>xy@+ef!VCJpI3
zotDi3!g>yQ`MtACi%y-oJ8rWYKYK^K<?U9{w^=RRaR<-#HcNu;B(HWJH<`oqz%#F~
zcVTHst@b!`)^^_3)?jzWrt^&Lw2j@k?d@mDrlt8#C*G<!=<I!BB!f#!dbOQhr^n*F
zzSE=Apt1J2Hm^~8*o`xNFsN6pXKJzSos0Sxu4&ckA#LZpT5TB8Xoo!1S3Eq13~Dv)
z6sF@>24_WwuTN}u|Ll-ndu?93pw-W7^h5I+?KQ1tUhAPDaZU6M%Z#rNX)w$)V@Lnf
z^Yd4k3mQl!nbtYQd}sWs2CL|z{?(^?&Ge{Ney&ZA-`F}+hh-J*ZmO|(<=WLN*Os3y
zb@f{^=AT1zotgxDE9aOZ$>8jz#f8P?*+8aDYI)J$eVMP5W-i%24$jU+MZLZK{e!bK
z)uyMrH0&R4e7WW@)o^llc6WC#?42AR*YKjFd80QpdP9~M?cm_xL?N02`v;fa8)^Xb
zP#7N{`Iq}Y<HqtqGviq{(j}9+Eqk14Q{~F!2_`+tqz2k>F{vAEz?hWLML$L+b^T{b
z)o3>cK>ISPxRR2O#Dun1Q}UY_nDW(>d?`{U|6?ib(@f?6+w{8j4J-OgDcNDN@4D1v
zKiRw54^zLWKc@at|B$Kgx;!3C2Box}WKwF-G(J@EE+$VEP2)!cw>-WJv?-?hrf?&V
zVLdfUXX`hclArt;8X9_t7M~9|oES@5emtWh!aNhW+%x6n<?oJ;j?w|j4+r`>|FX2S
z^gWihD?fqfGgwoTwn#o?Bl&TSa!K*k3?6qRI?zv4Sy{R9+i$;JKHy(zig4d;sRI69
zf44Jg^1U0$?~LTPMe>Ow@dl9my{Mr`zH^KTVfAEXr0u!B4W><R`x70+12B?*8_5@p
z<o`zE5+HF3koX5keq$s*GLl~&V}hLfrBzk$FzT5;c{)2K5ZAy+zIY^GIFdgZiBEvU
zCqUvNAn_GYp=dzzHzWD5k$3?Z6X2A`)TO0+<C#-m4-!uS$&ZiZTSxMdBl+Bs{NzY{
z1SH-AlAjvMmyP5LN8$${$N$)@w6fwueq!?B6OLb9AwC0=zaPnGkK}(x^3@~x+mU?v
zNE`$tKRJ?rAIa~J#6>{jLl}kJaJTpvjs@{2t`T1Vi3@<_|3~uUqpG_K$#;+B-zS~9
zNSpyA9sv@E0g2;)#Hqlf0DE3yEa&tIp7}N6OdxR#khla$TmU3)01`(4iDQ7of50RW
z3yC9v#J51=Um)=_Fu~V4LCjCxZyxyN72;wbaTTz&rxMBUj>H#0;u0Y74v_c{NL&ac
z?gSFo0*S+c#Q#7(J19`0P`qsCVK+eB1|<JIlK&ma_m1SFNAlq#`RtKae>{KwJWftc
zBl+=>xB?iOEnlpts@_INgm(pc`Nt3k!$^LAB<=wc?*oaOfyDVh;(s9VHIO(UNSqKP
z-#!xG09mo=3VMDIFms@#rR8~dj{r6C5sbuFK;kkWaTk!d3`jf%Bz^-Dw*iUsKsHQa
zYC+{?(!G_byBZ{g#h<!(hjkIp!AKkfBwhg$zW~R{?y2(^kT?cNoC7SZl3fyJ<yl=n
ze^=XRZf@D&>(A!9#wSe?&tr)=5=P=P7>U1Ntf*BiaQRvC%9^^5f2i(i8_akRT75G~
zkYmG6&J2u8%?;s;^F7O}YCk0;^e^u(<7bxA_sfmGflT~&fsv6?G*BI;E^{8Xp5jJ|
zYfM+v&fS#x8G-2+^G*>K{u8}dZ|CLZeMD~g?IMwACli_Lf`Wq0H8nMFXtmlWCMG6+
z{WH}3OBLq(L)(S*bQ=6tVq)SRA0HokCrA5eCnp=Rvx`lxtDAkko4b9!hl5?Nr-Pl?
z)5VERTV`v4K=5T<UEON~0|USNsb}&p3a`5{K0bawq2QOeT<#%fC&xes+p|Ss!A{*`
zQP50jY2qUJf0h)D`9@_^p^<z~#_F`Rs|AUPvne6|27ecaGH(yJK(cu+ZL$7F?+G#7
z{_|ik7#_*b&)?$V;o)R;##|B^WIvIc6<{Ra6P`O)j9P6S_VhMkpP`jvJ9f9Xp|+_R
zRWdn}4-CuF(~Y9Y;8}l1n;P=8*p`%(yw9v3|A_@Uo$m4E<m9hytgP5>cBggXco$<y
zK?sts3p>?PG?31rAq|d>b|d-bkbJl(7VzoY+>HZ0J*XvHn(Ad(R#=2-f)tDkbRYM2
zao`Ds!Y>HLJoZyIFwcw6=kK<)vP=wewiru^IkQxj?~mkf!%kXz41MQtbVQHi<9(=9
zR3iC!k^Ic~#%nKOc18vc8w^N3E!3z~sBDlSowp%hkZg<#cE1?l?wH2R)gK!N<{2^T
ztF5(7q?hf9;UxNwOVS)sQ5A>ezr$X=9ES%xaeS-?74kA9UonowuEkOIS|p!0lCRrj
zLw_%Q8}(hNQnjK?QIFY0`Iwj-gWMp;OTMlS$;`9(q4_}Hy64E{Z|iJ+qKoUdZ;5=$
zSXbbW?KJLPsxmZmlm3A=Y*bbt`L%H}njl5Ya-5-S^10*7FTIHQxw+WW-Gw@RC$^}X
zvAjWwqJnfxNC?Jwf6Lh*e?M17*Y(d~aB%S9l$4aOEsmee4|UvsjeOu(nP!76CE=)5
zW?_%21PwYVl5Y^nw~gf6M)GYV`O*<XZb1wN91Eu-X4^ZF9TkB(odz{s8f;Owp|qs|
zGi!>Ge8<RRyJEP@$&Qrdr2UM}RU2qi`-;1(o3G8$1H<H#$E<_{NPcr9|1RnYH}tmV
zVZWvVhx(M*uP;OL0VB5Y5gXZvg(r~w`bhi%3=gy+-JRIgqo;LUgNlweT9f3M)lh-_
z(lks+_QyD%ql>}bE}Z)M`d1nKbpCQ5&5JM2o;aCrb$aJDR@f()&Od^+g&s&gU)0M5
zXrQ%npraUvx@9=r*NA0Vk%&E|h@Dx84Rl>_42kD}EFT~2?&(5xmlm5eDy(jA!GdNP
zrYkE^AkD($^l;>cox~`YqiSJl>Q~HnQm@zlf%fE9)&~yu5Jv(%qCdvO)Pq=D<VIL2
z5<44`u(vr42igj7NK=giUA0)65r)`Xj;P5Y{ZTXqjQ*$4%gYm0S~V&=+X&M%W6?Rn
zCQUUcR+gfmCX?3rNLu49G1mQ?Z`mRKEaqKrYHE7k-PtwB;=ni4#LqzDLLhM*FssNJ
zE2@G~A>*LBNkq>e8wY6~40e=bq0k-2+cR*qS&Za=N8&ah@imbA``D;y$BK?d%xj~5
zw^XCJsRV`c928XYF(oey6L?k_=ef%m;$o4(e50A@Y;DK2IK6kCcpXUG3M5_yifdUY
zq32uG5{HU50k)mXr1wCA{q2P`CkTJF=Aedb>S)hK^0_1V-m$W|9*f%Km_d3)%3>5M
z@-S7Fj{K@*dj7GPk{f^tNw$QMzQl0rJ?({sg`1eQ#rdptl7+{SMdFa4OSLUVD!nn~
zTsY>cldx1LLTOh9Hgx6SxgH62c9&px2fYvN64bR8VrxeslCPg^mC|!ALs63iMU4e0
zs1>82n)Ft3Nq02zi^Gt36__9({WQnfr#~6W$jJDN!N@KamMP}`=2y+ioRGL2NW2A1
zr1_me^Gnht!HVv3tnHJc+)#&2hI(x6m!XQT)m>6l>Pj$OkxDv+C~oAVxIP|*RZ%Fc
zj6_jo1PaSSQCJ#?sS*}Fe;4`=97E#2V653Y6U_IJS<hW9ER)UsPh34(VoCa4kT?`b
zya^Oj|MRqBEYoLWbx$7F_vB(zZ$7pY2JPw+qd}X9Z8{;fAB%~3A()izPtg~XGidxW
zDQ0+La+(Xx3kOUV*kDrf8BAdBM~>@1FzVo&CjAU%a5-z8VBu=EcsTzo5`PDYBZF~`
z-bh>xB(4TlYem?k&mq0}*hLt)hn`8VCY5ls5SukANc<5@$me20b_6D*24W)Lm+-I;
zMK4U^yI@ix>5e;%iQE%NJRjuPzlRZr-y37bpIPJGY#n0GSni%bBHn?HrMr-LIvC&J
zh`BA{SlubabNV9G^;OaOBc(O26#KgJQLm%9r%S`uE+LkcrJy*E@OVDqXbA@sGa~36
z4#p&bA10-EU?R^J6QfRGLfAp%`RqXAIAQ4VZ3YH2sZ^?GSngha*2lk@Ig$1SI+yLm
z(3-O-PzGYDN`&ow4cIf(frG<39O&=Bo-PIIHTBq`uEb_lF)C^PojX^K4UJ`3(^Q6~
z&1G27SVG_20veMv<mK>@m(E3QQUG#dosk`I3d8Jnqo2LGqPDj7b>=(FiHSX7cj&mD
zctu7x85@ZgL(jep6+>F=KR<?}7tiCw#c7<lFpUF~qo^J2!;X<2Y^SxjZMX|ZCdP1T
za?-RPVD<#2Ncehq>^!#XXRuj&0c%y~v8Z_xiJO8!>C&apC@zP=igZ$Xr$i#zWPj2!
z-yz6t(XF0`oaS7bbB)+NHG*T8XK;G{GS1A;;f2eWaGY%Doft;l_yFxg$d0i-9GjXj
z?L(No2stUPix+Tg`~vNnW>D5XjXAPWBt8wgMx{;hQ$;6MaVmN1pQe*hXRD)@!^EpH
z5;q7X-7VNZGl?x-!zjvY!iIAiB;FdP<&<Nbpcsj(g{&wM5^oE03#CYWHf(O`Kxg*^
z3<(#by)zp_!URai!8kfTgG$vDy^nq9lOi>`2XU%s{UOrqav;0!AzsC18#Bv%Z+7Ih
z;D#J}@0xMs;stC{jUjP^kT_xZ!W*6#6JLqM3q#_EA@PNfcw}_13OBszfwlD=NPIFB
zrYn#*Wk|d`ll}`AX0XRFPWxL8I)-OlN=O!1(R2UZs(vPAuo;gVXJ&oKu8WnHdX3*+
zi+xjL*r}hwz$i5m2MrTNdQ8pk!Ya7|*~x0;3e^~&)`{gc1|*&uHnt3*nD%1{sX8Q1
z6Y|C9O!}GU(%ol3;xrjO0wU9zX<v6EE~gXQ+i5L&!Q0s<!rdugf_P)blCBnP?iog5
zPA?MI3EMT}C~X)(;y%$Hup4U{2k2X)$ELOs<Ro{|w_yS~Njj{m9i%<6p6qVN3(TAy
z9K@{h>LvRicBiDc_@f`fU(6UV&w<WLK5(=1OmcAwnk4?(QjVqxoBI0EFg}69lT$b_
zHi3f^6WB92j@?6J*hhQE3EKY-4WBpdVaLXouLlOFaE#{v@bCzh)+?7Bf?~UqY0mu^
z{$%tsf%byGAsaq)v-jqlJmEFuo0Yjlye?zyKqqQx&pkXnfn(EC^d8VVNpX_;cY)>@
zy+<o?hWdQL^bQUT4q?7jdCfhH*TENxk28BIlahb)!;Ay-EMnQ*v*yR#>&|#b%@D6|
zDYmH;^Y!#D(08Go-aF02Aibl*I61xi-km=`Mf-wL)Dixys8brllX7P~gJXmxrDa=&
zhld~hH)_9E%$!@1y^j?Z6m9kM4G%eM<u5<u8$ErN&tG&d&R+7VD>jBSR~m``hAlds
zvAsiQlquVm((|hp{h|buuKw(bgydAK*4EbN=$r5}cfQMWqO-H}>B2(E)`)PftG!ED
z_Gzc^#*?m5+EYGpJ!b-v`#gdLJs$pvS{D{a=^GrIlq^U))gYI@_CM|O_XgmG%<Sy!
z9n9Qe_TbE##jKmm+Rfkx!Z2?$IEuk?<SzUDkInBJnlxq6Z7tFnrz;&>e#h4_0IZYJ
mu_hDU==gw%@IMTz^`umn;#vc>NoTHi(J|>Ne+N;z7XKSu^X9ey

literal 0
HcmV?d00001

diff --git a/tools/build-win.cjs b/tools/build-win.cjs
index 54c2a13..b22118d 100644
--- a/tools/build-win.cjs
+++ b/tools/build-win.cjs
@@ -12,8 +12,14 @@
  *  - a clean signing environment. There is no code-signing certificate. electron-builder aborts on
  *    an EMPTY WIN_CSC_LINK ("Env WIN_CSC_LINK is not correct"), so those variables are removed
  *    rather than blanked, and identity auto-discovery is turned off.
+ *  - a working uninstaller. On macOS electron-builder rebuilds the NSIS uninstaller in JavaScript and
+ *    skips NSIS's icon patch, so unless the installer and uninstaller use the SAME icon the uninstaller
+ *    fails NSIS's integrity check — and then that version can never be updated or uninstalled
+ *    (1.4.35-1.4.37 shipped like that). build/installerIcon.ico makes electron-builder use one icon for
+ *    both, so this refuses to build without it.
  */
 const { spawnSync } = require('child_process');
+const fs = require('fs');
 const path = require('path');
 
 const env = { ...process.env, CSC_IDENTITY_AUTO_DISCOVERY: 'false' };
@@ -21,6 +27,13 @@ for (const key of ['CSC_LINK', 'WIN_CSC_LINK', 'CSC_KEY_PASSWORD', 'WIN_CSC_KEY_
   delete env[key];
 }
 
+const ICON = path.join(__dirname, '..', 'build', 'installerIcon.ico');
+if (!fs.existsSync(ICON)) {
+  console.error('build/installerIcon.ico is missing. Without it the uninstaller built on macOS is damaged');
+  console.error('("Installer integrity check has failed") and the version could never be updated. See tools/build-win.cjs.');
+  process.exit(1);
+}
+
 const extra = process.argv.slice(2);
 const args = ['electron-builder', '--win', '--x64', ...extra];