SNATCH 0.6.0 — Windows x64

SNATCH stays lightweight: a portable Windows downloader with a native GUI, an interactive CLI and automatic engine selection.

• Threads and Instagram CDN support: a bundled yt-dlp extractor plugin downloads Threads posts and share links, and instagram/cdninstagram/fbcdn/facebook/threads hosts are routed through yt-dlp on Windows, where aria2's TLS stack cannot handshake with them. Direct links are saved under the name from the response headers.
• Automatic retry when aria2 is turned away: if a host refuses aria2 (TLS failure or a raw 403/429 that yt-dlp does not get), the link is retried once with yt-dlp and that host is remembered for the rest of the run; whatever the refused attempt left behind is cleared first, so a half-download can never be taken for finished.
• Typed engines and a modular tree: the string-typed engine/format pairs became Engine and Format enums (the command-line identifiers are unchanged), and the large engines.rs / snatch-app.rs / snatch-cli.rs files were split into modules with their tests.
• Audit hardening: download and browse folders that are symlinks or junctions to a UNC share are rejected; $VAR and ~ expansions in link-supplied names can no longer place files outside the download folder; secrets in URL fragments and signed-link keys are dropped before a link is remembered; the installer marker now records the executable's SHA-256 so "update" repairs a damaged tool; finished direct downloads are stamped with Mark-of-the-Web.

Download snatch-windows-x64.zip, extract it and run snatch-app.exe for the GUI or snatch.exe for the CLI. The application downloads yt-dlp, aria2c, ffmpeg and Deno separately when needed.

The ZIP includes an Ed25519-signed manifest covering its files and their SHA-256 hashes. This is separate from Windows Authenticode: SmartScreen may still warn. See the README and release verification instructions.