@bitmagic/cli 0.1.83-dev.1 → 0.1.83-dev.2

package/dist/steam/electron-cache.js

@@ -0,0 +1,105 @@
+/**
+ * The prebuilt Electron releases the desktop shells are stamped from — downloaded once per machine
+ * into `~/.bitmagic/cache/electron/v<version>/`, checked against the release's SHASUMS256.txt, and
+ * extracted with the symlinks and executable bits an .app needs.
+ *
+ * The version is pinned in one constant. It IS the Chromium the game ships with, so bumps are
+ * deliberate (retest WebGPU, WebGL and fullscreen on both platforms) but should not lag: Electron
+ * supports its three newest majors, and an unsupported one stops getting Chromium's security fixes.
+ */
+import { spawnSync } from 'child_process';
+import { createHash } from 'crypto';
+import * as fs from 'fs';
+import * as os from 'os';
+import * as path from 'path';
+import { unzipSync } from 'fflate';
+import { CliError } from '../errors.js';
+export const ELECTRON_VERSION = '44.5.1';
+const DOWNLOAD_BASE = process.env.ELECTRON_MIRROR ?? 'https://github.com/electron/electron/releases/download';
+export function electronCacheDir(baseDir = path.join(os.homedir(), '.bitmagic')) {
+    return path.join(baseDir, 'cache', 'electron', `v${ELECTRON_VERSION}`);
+}
+async function download(url) {
+    let response;
+    try {
+        response = await fetch(url, { redirect: 'follow', signal: AbortSignal.timeout(15 * 60_000) });
+    }
+    catch (error) {
+        throw new CliError(`Could not download ${url}: ${error instanceof Error ? error.message : String(error)}`);
+    }
+    if (!response.ok)
+        throw new CliError(`Could not download ${url} (HTTP ${response.status}).`);
+    return Buffer.from(await response.arrayBuffer());
+}
+/** `SHASUMS256.txt` → file name → sha256. Pure. */
+export function parseShaSums(text) {
+    const sums = new Map();
+    for (const line of text.split('\n')) {
+        const match = /^([0-9a-f]{64})\s+\*?(.+)$/.exec(line.trim());
+        if (match)
+            sums.set(match[2].trim(), match[1]);
+    }
+    return sums;
+}
+/** Write every entry of a zip with no symlinks in it (the Windows release). */
+function extractPlainZip(zip, dest) {
+    const files = unzipSync(new Uint8Array(zip));
+    for (const [name, data] of Object.entries(files)) {
+        const target = path.join(dest, ...name.split('/'));
+        if (!target.startsWith(dest + path.sep))
+            throw new CliError(`Refusing a zip entry outside the target: ${name}`);
+        if (name.endsWith('/')) {
+            fs.mkdirSync(target, { recursive: true });
+            continue;
+        }
+        fs.mkdirSync(path.dirname(target), { recursive: true });
+        fs.writeFileSync(target, data);
+    }
+}
+/**
+ * The extracted release for `platform`, downloading and verifying it first if needed. macOS
+ * releases are unpacked with `ditto`, the only extractor that keeps a framework's symlinks as
+ * symlinks — which is also why the macOS build needs a Mac.
+ */
+export async function ensureElectronShell(platform, log) {
+    const root = electronCacheDir();
+    const extracted = path.join(root, platform);
+    const marker = path.join(extracted, '.extracted');
+    if (fs.existsSync(marker))
+        return extracted;
+    fs.mkdirSync(root, { recursive: true });
+    const zipName = `electron-v${ELECTRON_VERSION}-${platform}.zip`;
+    const zipPath = path.join(root, zipName);
+    if (!fs.existsSync(zipPath)) {
+        const shaPath = path.join(root, 'SHASUMS256.txt');
+        if (!fs.existsSync(shaPath))
+            fs.writeFileSync(shaPath, await download(`${DOWNLOAD_BASE}/v${ELECTRON_VERSION}/SHASUMS256.txt`));
+        const expected = parseShaSums(fs.readFileSync(shaPath, 'utf-8')).get(zipName);
+        if (expected === undefined)
+            throw new CliError(`Electron's SHASUMS256.txt has no entry for ${zipName}.`);
+        log(`Downloading Electron ${ELECTRON_VERSION} for ${platform} (about 100 MB, once per machine)…`);
+        const bytes = await download(`${DOWNLOAD_BASE}/v${ELECTRON_VERSION}/${zipName}`);
+        const actual = createHash('sha256').update(bytes).digest('hex');
+        if (actual !== expected)
+            throw new CliError(`${zipName} failed its checksum (expected ${expected}, got ${actual}). Nothing was used.`);
+        const tmp = `${zipPath}.tmp-${process.pid}`;
+        fs.writeFileSync(tmp, bytes);
+        fs.renameSync(tmp, zipPath);
+    }
+    fs.rmSync(extracted, { recursive: true, force: true });
+    fs.mkdirSync(extracted, { recursive: true });
+    if (platform.startsWith('darwin')) {
+        if (process.platform !== 'darwin') {
+            throw new CliError('The macOS build has to be made on a Mac: its app bundle, signing and notarization all need macOS tools.', 3);
+        }
+        const result = spawnSync('ditto', ['-x', '-k', zipPath, extracted], { stdio: ['ignore', 'ignore', 'pipe'] });
+        if (result.status !== 0)
+            throw new CliError(`ditto could not extract ${zipName}: ${result.stderr?.toString() ?? ''}`);
+    }
+    else {
+        extractPlainZip(fs.readFileSync(zipPath), extracted);
+    }
+    fs.writeFileSync(marker, new Date().toISOString());
+    return extracted;
+}
+//# sourceMappingURL=electron-cache.js.map

package/dist/steam/electron-cache.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"electron-cache.js","sourceRoot":"","sources":["../../src/steam/electron-cache.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AACpC,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACnC,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAExC,MAAM,CAAC,MAAM,gBAAgB,GAAG,QAAQ,CAAC;AAIzC,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,wDAAwD,CAAC;AAE9G,MAAM,UAAU,gBAAgB,CAAC,UAAkB,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,WAAW,CAAC;IACrF,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,gBAAgB,EAAE,CAAC,CAAC;AACzE,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,GAAW;IACjC,IAAI,QAAkB,CAAC;IACvB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC;IAChG,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,QAAQ,CAAC,sBAAsB,GAAG,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC7G,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,MAAM,IAAI,QAAQ,CAAC,sBAAsB,GAAG,UAAU,QAAQ,CAAC,MAAM,IAAI,CAAC,CAAC;IAC7F,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;AACnD,CAAC;AAED,mDAAmD;AACnD,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAkB,CAAC;IACvC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACpC,MAAM,KAAK,GAAG,4BAA4B,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QAC7D,IAAI,KAAK;YAAE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,+EAA+E;AAC/E,SAAS,eAAe,CAAC,GAAW,EAAE,IAAY;IAChD,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7C,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACjD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;QACnD,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,QAAQ,CAAC,4CAA4C,IAAI,EAAE,CAAC,CAAC;QAChH,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACvB,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1C,SAAS;QACX,CAAC;QACD,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,EAAE,CAAC,aAAa,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACjC,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,QAAuB,EAAE,GAA8B;IAC/F,MAAM,IAAI,GAAG,gBAAgB,EAAE,CAAC;IAChC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;IAClD,IAAI,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,SAAS,CAAC;IAE5C,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACxC,MAAM,OAAO,GAAG,aAAa,gBAAgB,IAAI,QAAQ,MAAM,CAAC;IAChE,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACzC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;QAClD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC;YAAE,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,MAAM,QAAQ,CAAC,GAAG,aAAa,KAAK,gBAAgB,iBAAiB,CAAC,CAAC,CAAC;QAC/H,MAAM,QAAQ,GAAG,YAAY,CAAC,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC9E,IAAI,QAAQ,KAAK,SAAS;YAAE,MAAM,IAAI,QAAQ,CAAC,8CAA8C,OAAO,GAAG,CAAC,CAAC;QACzG,GAAG,CAAC,wBAAwB,gBAAgB,QAAQ,QAAQ,oCAAoC,CAAC,CAAC;QAClG,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,GAAG,aAAa,KAAK,gBAAgB,IAAI,OAAO,EAAE,CAAC,CAAC;QACjF,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAChE,IAAI,MAAM,KAAK,QAAQ;YAAE,MAAM,IAAI,QAAQ,CAAC,GAAG,OAAO,kCAAkC,QAAQ,SAAS,MAAM,sBAAsB,CAAC,CAAC;QACvI,MAAM,GAAG,GAAG,GAAG,OAAO,QAAQ,OAAO,CAAC,GAAG,EAAE,CAAC;QAC5C,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC7B,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAC9B,CAAC;IAED,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACvD,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7C,IAAI,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAClC,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAClC,MAAM,IAAI,QAAQ,CAAC,yGAAyG,EAAE,CAAC,CAAC,CAAC;QACnI,CAAC;QACD,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;QAC7G,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,IAAI,QAAQ,CAAC,2BAA2B,OAAO,KAAK,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;IACxH,CAAC;SAAM,CAAC;QACN,eAAe,CAAC,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,SAAS,CAAC,CAAC;IACvD,CAAC;IACD,EAAE,CAAC,aAAa,CAAC,MAAM,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;IACnD,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/steam/fuses.d.ts

@@ -0,0 +1,16 @@
+/** Fuse positions on wire version 1. */
+export declare const FUSE: {
+    readonly RunAsNode: 0;
+    readonly EnableCookieEncryption: 1;
+    readonly EnableNodeOptionsEnvironmentVariable: 2;
+    readonly EnableNodeCliInspectArguments: 3;
+    readonly EnableEmbeddedAsarIntegrityValidation: 4;
+    readonly OnlyLoadAppFromAsar: 5;
+};
+/** What a shipped game turns off: running as Node, NODE_OPTIONS, and --inspect. */
+export declare const GAME_FUSES_OFF: readonly number[];
+/** Flip `off` fuses to '0' in place, in every wire found. Returns how many wires were patched. Pure. */
+export declare function flipFuses(binary: Buffer, off: readonly number[]): number;
+/** Read the fuse states of the first wire, for checks and tests. Pure. */
+export declare function readFuses(binary: Buffer): string | null;
+export declare function flipFusesInFile(file: string, off?: readonly number[]): number;

package/dist/steam/fuses.js

@@ -0,0 +1,75 @@
+/**
+ * Electron fuses: switches compiled into the Electron binary that turn whole features off before
+ * any code runs. A shipped game needs none of the developer features they guard, and with them on
+ * the signed, notarized game binary is a general-purpose Node.js runtime anyone can borrow
+ * (`ELECTRON_RUN_AS_NODE=1 "Game.app/..." their-script.js` runs with the game's signature and
+ * permissions). So the three that make that possible are flipped off at build time, before signing.
+ *
+ * The fuse wire is a fixed sentinel followed by a version byte, a length byte and one ASCII byte
+ * per fuse ('0' off, '1' on, 'r' removed). A universal macOS binary carries one wire per
+ * architecture; every occurrence is flipped. The layout is Electron's own (@electron/fuses).
+ */
+import * as fs from 'fs';
+import { CliError } from '../errors.js';
+const SENTINEL = Buffer.from('dL7pKGdnNz796PbbjQWNKmHXBZaB9tsX', 'ascii');
+const SUPPORTED_WIRE_VERSION = 1;
+/** Fuse positions on wire version 1. */
+export const FUSE = {
+    RunAsNode: 0,
+    EnableCookieEncryption: 1,
+    EnableNodeOptionsEnvironmentVariable: 2,
+    EnableNodeCliInspectArguments: 3,
+    EnableEmbeddedAsarIntegrityValidation: 4,
+    OnlyLoadAppFromAsar: 5,
+};
+/** What a shipped game turns off: running as Node, NODE_OPTIONS, and --inspect. */
+export const GAME_FUSES_OFF = [
+    FUSE.RunAsNode,
+    FUSE.EnableNodeOptionsEnvironmentVariable,
+    FUSE.EnableNodeCliInspectArguments,
+];
+/** Flip `off` fuses to '0' in place, in every wire found. Returns how many wires were patched. Pure. */
+export function flipFuses(binary, off) {
+    let wires = 0;
+    let from = 0;
+    for (;;) {
+        const at = binary.indexOf(SENTINEL, from);
+        if (at < 0)
+            break;
+        const versionAt = at + SENTINEL.length;
+        const version = binary[versionAt];
+        const length = binary[versionAt + 1];
+        if (version !== SUPPORTED_WIRE_VERSION) {
+            throw new CliError(`This Electron's fuse wire is version ${version}; the CLI understands version ${SUPPORTED_WIRE_VERSION}.`);
+        }
+        for (const index of off) {
+            if (index >= length)
+                continue;
+            const byteAt = versionAt + 2 + index;
+            // 'r' means removed from this Electron — nothing to flip.
+            if (binary[byteAt] === 0x30 || binary[byteAt] === 0x31)
+                binary[byteAt] = 0x30;
+        }
+        wires += 1;
+        from = versionAt + 2 + length;
+    }
+    return wires;
+}
+/** Read the fuse states of the first wire, for checks and tests. Pure. */
+export function readFuses(binary) {
+    const at = binary.indexOf(SENTINEL);
+    if (at < 0)
+        return null;
+    const versionAt = at + SENTINEL.length;
+    const length = binary[versionAt + 1];
+    return binary.toString('ascii', versionAt + 2, versionAt + 2 + length);
+}
+export function flipFusesInFile(file, off = GAME_FUSES_OFF) {
+    const binary = fs.readFileSync(file);
+    const wires = flipFuses(binary, off);
+    if (wires === 0)
+        throw new CliError(`No Electron fuse wire in ${file} — is this an Electron binary?`);
+    fs.writeFileSync(file, binary);
+    return wires;
+}
+//# sourceMappingURL=fuses.js.map

package/dist/steam/fuses.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fuses.js","sourceRoot":"","sources":["../../src/steam/fuses.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAExC,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,kCAAkC,EAAE,OAAO,CAAC,CAAC;AAC1E,MAAM,sBAAsB,GAAG,CAAC,CAAC;AAEjC,wCAAwC;AACxC,MAAM,CAAC,MAAM,IAAI,GAAG;IAClB,SAAS,EAAE,CAAC;IACZ,sBAAsB,EAAE,CAAC;IACzB,oCAAoC,EAAE,CAAC;IACvC,6BAA6B,EAAE,CAAC;IAChC,qCAAqC,EAAE,CAAC;IACxC,mBAAmB,EAAE,CAAC;CACd,CAAC;AAEX,mFAAmF;AACnF,MAAM,CAAC,MAAM,cAAc,GAAsB;IAC/C,IAAI,CAAC,SAAS;IACd,IAAI,CAAC,oCAAoC;IACzC,IAAI,CAAC,6BAA6B;CACnC,CAAC;AAEF,wGAAwG;AACxG,MAAM,UAAU,SAAS,CAAC,MAAc,EAAE,GAAsB;IAC9D,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,SAAS,CAAC;QACR,MAAM,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC1C,IAAI,EAAE,GAAG,CAAC;YAAE,MAAM;QAClB,MAAM,SAAS,GAAG,EAAE,GAAG,QAAQ,CAAC,MAAM,CAAC;QACvC,MAAM,OAAO,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;QAClC,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;QACrC,IAAI,OAAO,KAAK,sBAAsB,EAAE,CAAC;YACvC,MAAM,IAAI,QAAQ,CAAC,wCAAwC,OAAO,iCAAiC,sBAAsB,GAAG,CAAC,CAAC;QAChI,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,GAAG,EAAE,CAAC;YACxB,IAAI,KAAK,IAAI,MAAM;gBAAE,SAAS;YAC9B,MAAM,MAAM,GAAG,SAAS,GAAG,CAAC,GAAG,KAAK,CAAC;YACrC,0DAA0D;YAC1D,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,IAAI;gBAAE,MAAM,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC;QAChF,CAAC;QACD,KAAK,IAAI,CAAC,CAAC;QACX,IAAI,GAAG,SAAS,GAAG,CAAC,GAAG,MAAM,CAAC;IAChC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,SAAS,CAAC,MAAc;IACtC,MAAM,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACpC,IAAI,EAAE,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACxB,MAAM,SAAS,GAAG,EAAE,GAAG,QAAQ,CAAC,MAAM,CAAC;IACvC,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;IACrC,OAAO,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,SAAS,GAAG,CAAC,EAAE,SAAS,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC;AACzE,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,IAAY,EAAE,MAAyB,cAAc;IACnF,MAAM,MAAM,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACrC,IAAI,KAAK,KAAK,CAAC;QAAE,MAAM,IAAI,QAAQ,CAAC,4BAA4B,IAAI,gCAAgC,CAAC,CAAC;IACtG,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC/B,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/steam/icon-files.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Windows .ico and macOS .icns containers around PNG images.
+ *
+ * Both formats are a small directory in front of PNG payloads, which every Windows since Vista and
+ * every macOS since 10.7 read directly, so writing them is a few dozen lines and needs no image
+ * library — the PNGs themselves come from the raster browser (raster.ts).
+ */
+/** One square PNG and its edge length in pixels. */
+export interface SizedPng {
+    size: number;
+    png: Buffer;
+}
+/** An .ico holding each PNG as its own entry. Sizes above 256 are not representable and are skipped. */
+export declare function buildIco(images: readonly SizedPng[]): Buffer;
+/** An .icns with every slot whose size `images` provides. */
+export declare function buildIcns(images: readonly SizedPng[]): Buffer;

package/dist/steam/icon-files.js

@@ -0,0 +1,70 @@
+/**
+ * Windows .ico and macOS .icns containers around PNG images.
+ *
+ * Both formats are a small directory in front of PNG payloads, which every Windows since Vista and
+ * every macOS since 10.7 read directly, so writing them is a few dozen lines and needs no image
+ * library — the PNGs themselves come from the raster browser (raster.ts).
+ */
+/** An .ico holding each PNG as its own entry. Sizes above 256 are not representable and are skipped. */
+export function buildIco(images) {
+    const entries = images.filter((image) => image.size >= 1 && image.size <= 256)
+        .sort((a, b) => a.size - b.size);
+    const header = Buffer.alloc(6);
+    header.writeUInt16LE(0, 0);
+    header.writeUInt16LE(1, 2);
+    header.writeUInt16LE(entries.length, 4);
+    const directory = Buffer.alloc(16 * entries.length);
+    let offset = header.length + directory.length;
+    entries.forEach((entry, index) => {
+        const at = index * 16;
+        // 256 is stored as 0: the field is one byte.
+        directory[at] = entry.size === 256 ? 0 : entry.size;
+        directory[at + 1] = entry.size === 256 ? 0 : entry.size;
+        directory[at + 2] = 0;
+        directory[at + 3] = 0;
+        directory.writeUInt16LE(1, at + 4);
+        directory.writeUInt16LE(32, at + 6);
+        directory.writeUInt32LE(entry.png.length, at + 8);
+        directory.writeUInt32LE(offset, at + 12);
+        offset += entry.png.length;
+    });
+    return Buffer.concat([header, directory, ...entries.map((entry) => entry.png)]);
+}
+/**
+ * The icns element types that carry PNG data, by pixel size. Retina slots (`ic11`..`ic14`) hold the
+ * same pixels as the next size up, labelled as the smaller point size at 2x, so the Finder and the
+ * Dock pick a sharp image at every scale.
+ */
+const ICNS_TYPES = [
+    ['icp4', 16],
+    ['icp5', 32],
+    ['ic11', 32],
+    ['icp6', 64],
+    ['ic12', 64],
+    ['ic07', 128],
+    ['ic08', 256],
+    ['ic13', 256],
+    ['ic09', 512],
+    ['ic14', 512],
+    ['ic10', 1024],
+];
+/** An .icns with every slot whose size `images` provides. */
+export function buildIcns(images) {
+    const bySize = new Map(images.map((image) => [image.size, image.png]));
+    const elements = [];
+    for (const [type, size] of ICNS_TYPES) {
+        const png = bySize.get(size);
+        if (png === undefined)
+            continue;
+        const head = Buffer.alloc(8);
+        head.write(type, 0, 'ascii');
+        head.writeUInt32BE(png.length + 8, 4);
+        elements.push(head, png);
+    }
+    const body = Buffer.concat(elements);
+    const header = Buffer.alloc(8);
+    header.write('icns', 0, 'ascii');
+    header.writeUInt32BE(body.length + 8, 4);
+    return Buffer.concat([header, body]);
+}
+//# sourceMappingURL=icon-files.js.map

package/dist/steam/icon-files.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"icon-files.js","sourceRoot":"","sources":["../../src/steam/icon-files.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAQH,wGAAwG;AACxG,MAAM,UAAU,QAAQ,CAAC,MAA2B;IAClD,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,IAAI,GAAG,CAAC;SAC3E,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC;IACnC,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC/B,MAAM,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC3B,MAAM,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC3B,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAExC,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACpD,IAAI,MAAM,GAAG,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC;IAC9C,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QAC/B,MAAM,EAAE,GAAG,KAAK,GAAG,EAAE,CAAC;QACtB,6CAA6C;QAC7C,SAAS,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;QACpD,SAAS,CAAC,EAAE,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;QACxD,SAAS,CAAC,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;QACtB,SAAS,CAAC,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;QACtB,SAAS,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC;QACnC,SAAS,CAAC,aAAa,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC;QACpC,SAAS,CAAC,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC;QAClD,SAAS,CAAC,aAAa,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QACzC,MAAM,IAAI,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC;IAC7B,CAAC,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAClF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,GAA6C;IAC3D,CAAC,MAAM,EAAE,EAAE,CAAC;IACZ,CAAC,MAAM,EAAE,EAAE,CAAC;IACZ,CAAC,MAAM,EAAE,EAAE,CAAC;IACZ,CAAC,MAAM,EAAE,EAAE,CAAC;IACZ,CAAC,MAAM,EAAE,EAAE,CAAC;IACZ,CAAC,MAAM,EAAE,GAAG,CAAC;IACb,CAAC,MAAM,EAAE,GAAG,CAAC;IACb,CAAC,MAAM,EAAE,GAAG,CAAC;IACb,CAAC,MAAM,EAAE,GAAG,CAAC;IACb,CAAC,MAAM,EAAE,GAAG,CAAC;IACb,CAAC,MAAM,EAAE,IAAI,CAAC;CACf,CAAC;AAEF,6DAA6D;AAC7D,MAAM,UAAU,SAAS,CAAC,MAA2B;IACnD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACvE,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,UAAU,EAAE,CAAC;QACtC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAI,GAAG,KAAK,SAAS;YAAE,SAAS;QAChC,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC7B,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC;QAC7B,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;QACtC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC3B,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACrC,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC/B,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC;IACjC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IACzC,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;AACvC,CAAC"}

package/dist/steam/image-info.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Read an image's format, size and whether it can be transparent — from the header bytes, with no
+ * decoder. The check needs exactly these three facts about every file in the store kit, and the
+ * CLI deliberately carries no native image library.
+ */
+export interface ImageInfo {
+    format: 'png' | 'jpg' | 'webp';
+    width: number;
+    height: number;
+    /** The format and header allow transparency (PNG colour type 4/6 or a tRNS chunk; WebP alpha). */
+    alpha: boolean;
+}
+/** The image's header facts, or null for bytes that are none of PNG, JPEG or WebP. */
+export declare function readImageInfo(bytes: Buffer): ImageInfo | null;
+/** `image/png` etc., for a data URL. */
+export declare function mimeForImage(info: ImageInfo): string;

package/dist/steam/image-info.js

@@ -0,0 +1,89 @@
+/**
+ * Read an image's format, size and whether it can be transparent — from the header bytes, with no
+ * decoder. The check needs exactly these three facts about every file in the store kit, and the
+ * CLI deliberately carries no native image library.
+ */
+const PNG_SIGNATURE = Buffer.from([0x89, 0x50, 0x4e, 0x47, 0x0d, 0x0a, 0x1a, 0x0a]);
+function readPng(bytes) {
+    if (bytes.length < 33 || !bytes.subarray(0, 8).equals(PNG_SIGNATURE))
+        return null;
+    if (bytes.toString('ascii', 12, 16) !== 'IHDR')
+        return null;
+    const width = bytes.readUInt32BE(16);
+    const height = bytes.readUInt32BE(20);
+    const colourType = bytes[25];
+    let alpha = colourType === 4 || colourType === 6;
+    // A palette or opaque-colour PNG can still be transparent through a tRNS chunk, which sits
+    // between IHDR and the first IDAT.
+    let offset = 8;
+    while (!alpha && offset + 8 <= bytes.length) {
+        const length = bytes.readUInt32BE(offset);
+        const type = bytes.toString('ascii', offset + 4, offset + 8);
+        if (type === 'tRNS')
+            alpha = true;
+        if (type === 'IDAT' || type === 'IEND')
+            break;
+        offset += 12 + length;
+    }
+    return { format: 'png', width, height, alpha };
+}
+/** Start-of-frame markers carry the size; DHT (C4), JPG (C8) and DAC (CC) share the range but do not. */
+function isStartOfFrame(marker) {
+    return marker >= 0xc0 && marker <= 0xcf && marker !== 0xc4 && marker !== 0xc8 && marker !== 0xcc;
+}
+function readJpeg(bytes) {
+    if (bytes.length < 4 || bytes[0] !== 0xff || bytes[1] !== 0xd8)
+        return null;
+    let offset = 2;
+    while (offset + 4 <= bytes.length) {
+        if (bytes[offset] !== 0xff)
+            return null;
+        const marker = bytes[offset + 1];
+        // Fill bytes and standalone markers have no length field.
+        if (marker === 0xff) {
+            offset += 1;
+            continue;
+        }
+        if (marker === 0xd8 || (marker >= 0xd0 && marker <= 0xd7) || marker === 0x01) {
+            offset += 2;
+            continue;
+        }
+        const length = bytes.readUInt16BE(offset + 2);
+        if (isStartOfFrame(marker) && offset + 9 <= bytes.length) {
+            return { format: 'jpg', height: bytes.readUInt16BE(offset + 5), width: bytes.readUInt16BE(offset + 7), alpha: false };
+        }
+        offset += 2 + length;
+    }
+    return null;
+}
+function readWebp(bytes) {
+    if (bytes.length < 30 || bytes.toString('ascii', 0, 4) !== 'RIFF' || bytes.toString('ascii', 8, 12) !== 'WEBP') {
+        return null;
+    }
+    const chunk = bytes.toString('ascii', 12, 16);
+    if (chunk === 'VP8X') {
+        const flags = bytes[20];
+        const width = 1 + bytes.readUIntLE(24, 3);
+        const height = 1 + bytes.readUIntLE(27, 3);
+        return { format: 'webp', width, height, alpha: (flags & 0x10) !== 0 };
+    }
+    if (chunk === 'VP8L') {
+        const b0 = bytes[21], b1 = bytes[22], b2 = bytes[23], b3 = bytes[24];
+        const width = 1 + (((b1 & 0x3f) << 8) | b0);
+        const height = 1 + (((b3 & 0x0f) << 10) | (b2 << 2) | ((b1 & 0xc0) >> 6));
+        return { format: 'webp', width, height, alpha: (b3 & 0x10) !== 0 };
+    }
+    if (chunk === 'VP8 ') {
+        return { format: 'webp', width: bytes.readUInt16LE(26) & 0x3fff, height: bytes.readUInt16LE(28) & 0x3fff, alpha: false };
+    }
+    return null;
+}
+/** The image's header facts, or null for bytes that are none of PNG, JPEG or WebP. */
+export function readImageInfo(bytes) {
+    return readPng(bytes) ?? readJpeg(bytes) ?? readWebp(bytes);
+}
+/** `image/png` etc., for a data URL. */
+export function mimeForImage(info) {
+    return info.format === 'jpg' ? 'image/jpeg' : `image/${info.format}`;
+}
+//# sourceMappingURL=image-info.js.map

package/dist/steam/image-info.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"image-info.js","sourceRoot":"","sources":["../../src/steam/image-info.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAUH,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;AAEpF,SAAS,OAAO,CAAC,KAAa;IAC5B,IAAI,KAAK,CAAC,MAAM,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC;QAAE,OAAO,IAAI,CAAC;IAClF,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,EAAE,EAAE,CAAC,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IAC5D,MAAM,KAAK,GAAG,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;IACrC,MAAM,MAAM,GAAG,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;IACtC,MAAM,UAAU,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC;IAC7B,IAAI,KAAK,GAAG,UAAU,KAAK,CAAC,IAAI,UAAU,KAAK,CAAC,CAAC;IACjD,2FAA2F;IAC3F,mCAAmC;IACnC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,OAAO,CAAC,KAAK,IAAI,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QAC5C,MAAM,MAAM,GAAG,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QAC1C,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,CAAC,EAAE,MAAM,GAAG,CAAC,CAAC,CAAC;QAC7D,IAAI,IAAI,KAAK,MAAM;YAAE,KAAK,GAAG,IAAI,CAAC;QAClC,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,MAAM;YAAE,MAAM;QAC9C,MAAM,IAAI,EAAE,GAAG,MAAM,CAAC;IACxB,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;AACjD,CAAC;AAED,yGAAyG;AACzG,SAAS,cAAc,CAAC,MAAc;IACpC,OAAO,MAAM,IAAI,IAAI,IAAI,MAAM,IAAI,IAAI,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,KAAK,IAAI,CAAC;AACnG,CAAC;AAED,SAAS,QAAQ,CAAC,KAAa;IAC7B,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC5E,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,OAAO,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QAClC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QACxC,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACjC,0DAA0D;QAC1D,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YAAC,MAAM,IAAI,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QAC/C,IAAI,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,IAAI,MAAM,IAAI,IAAI,CAAC,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YAAC,MAAM,IAAI,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QACxG,MAAM,MAAM,GAAG,KAAK,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAC9C,IAAI,cAAc,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;YACzD,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;QACxH,CAAC;QACD,MAAM,IAAI,CAAC,GAAG,MAAM,CAAC;IACvB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,QAAQ,CAAC,KAAa;IAC7B,IAAI,KAAK,CAAC,MAAM,GAAG,EAAE,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC,KAAK,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,EAAE,EAAE,CAAC,KAAK,MAAM,EAAE,CAAC;QAC/G,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IAC9C,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;QACrB,MAAM,KAAK,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC;QACxB,MAAM,KAAK,GAAG,CAAC,GAAG,KAAK,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAG,CAAC,GAAG,KAAK,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QAC3C,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;IACxE,CAAC;IACD,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;QACrB,MAAM,EAAE,GAAG,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,GAAG,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,GAAG,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC;QACrE,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;QAC5C,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC1E,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;IACrE,CAAC;IACD,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;QACrB,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC,GAAG,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC,GAAG,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IAC3H,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,aAAa,CAAC,KAAa;IACzC,OAAO,OAAO,CAAC,KAAK,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC;AAC9D,CAAC;AAED,wCAAwC;AACxC,MAAM,UAAU,YAAY,CAAC,IAAe;IAC1C,OAAO,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,IAAI,CAAC,MAAM,EAAE,CAAC;AACvE,CAAC"}

package/dist/steam/launch-check.d.ts

@@ -0,0 +1,12 @@
+import { type VerifyResult } from '../verify/classify.js';
+export interface LaunchCheckResult {
+    result: VerifyResult;
+    screenshotPath: string;
+    consolePath: string;
+}
+export declare function launchCheckApp(options: {
+    /** The executable inside the app: `<App>.app/Contents/MacOS/<Product>` or `<Game>.exe`. */
+    executable: string;
+    artifactDir: string;
+    settleMs?: number;
+}): Promise<LaunchCheckResult>;

package/dist/steam/launch-check.js

@@ -0,0 +1,101 @@
+/**
+ * Launch the finished desktop app — the real Electron binary, signed and fused as it ships — and
+ * hold it to the same verdict `bitmagic verify` gives a browser tab: the game starts, renders and
+ * reaches gameplay. The payload was already proven offline in headless Chrome; this run proves the
+ * shell around it: the bitmagic:// protocol, the MIME types, the window, Electron's GPU process.
+ *
+ * Only the build machine's own platform can be launched, so a Mac checks the macOS app and the
+ * Windows build is checked for structure only.
+ */
+import { spawn } from 'child_process';
+import * as fs from 'fs';
+import * as net from 'net';
+import * as os from 'os';
+import * as path from 'path';
+import { chromium } from 'playwright-core';
+import { CliError } from '../errors.js';
+import { observeGamePage } from '../verify/browser.js';
+import { classifyVerifyRun } from '../verify/classify.js';
+import { DEFAULT_START_INTERACTION } from '../verify/start.js';
+import { SHELL_HOST, SHELL_SCHEME } from './shell-files.js';
+function freePort() {
+    return new Promise((resolve, reject) => {
+        const server = net.createServer();
+        server.once('error', reject);
+        server.listen(0, '127.0.0.1', () => {
+            const address = server.address();
+            const port = typeof address === 'object' && address !== null ? address.port : 0;
+            server.close(() => resolve(port));
+        });
+    });
+}
+async function waitForEndpoint(port, timeoutMs) {
+    const deadline = Date.now() + timeoutMs;
+    while (Date.now() < deadline) {
+        try {
+            const response = await fetch(`http://127.0.0.1:${port}/json/version`, { signal: AbortSignal.timeout(1000) });
+            if (response.ok)
+                return;
+        }
+        catch {
+            // Not up yet.
+        }
+        await new Promise((resolve) => setTimeout(resolve, 300));
+    }
+    throw new CliError('The packaged app did not open a debugging port — it may have crashed on launch. Run it by hand to see why.', 5);
+}
+export async function launchCheckApp(options) {
+    fs.mkdirSync(options.artifactDir, { recursive: true });
+    const port = await freePort();
+    const profile = fs.mkdtempSync(path.join(os.tmpdir(), 'bitmagic-shell-check-'));
+    // --enable-automation is what makes navigator.webdriver true in the browser verify drives;
+    // games read it (custom start screens press their own Play for a verify run), so the packaged
+    // app has to present the same flag for the same verdict to apply.
+    const child = spawn(options.executable, [`--remote-debugging-port=${port}`, '--remote-debugging-address=127.0.0.1', '--enable-automation'], {
+        env: { ...process.env, BITMAGIC_SHELL_CHECK: profile },
+        stdio: ['ignore', 'ignore', 'pipe'],
+    });
+    let stderr = '';
+    child.stderr?.on('data', (chunk) => { stderr = (stderr + chunk.toString('utf-8')).slice(-8000); });
+    const screenshotPath = path.join(options.artifactDir, 'screenshot.png');
+    const consolePath = path.join(options.artifactDir, 'console.log');
+    try {
+        await waitForEndpoint(port, 30_000);
+        const browser = await chromium.connectOverCDP(`http://127.0.0.1:${port}`);
+        try {
+            const origin = `${SHELL_SCHEME}://${SHELL_HOST}/`;
+            let page;
+            const deadline = Date.now() + 20_000;
+            while (page === undefined && Date.now() < deadline) {
+                page = browser.contexts().flatMap((context) => context.pages()).find((candidate) => candidate.url().startsWith(origin));
+                if (page === undefined)
+                    await new Promise((resolve) => setTimeout(resolve, 300));
+            }
+            if (page === undefined)
+                throw new CliError(`The packaged app never loaded ${origin}index.html.`, 5);
+            // The app loaded its page before anything could attach; reloading runs it again with the
+            // verify probes armed from the first script.
+            const observations = await observeGamePage(page, {
+                url: `${origin}index.html`,
+                screenshotPath,
+                consolePath,
+                settleMs: options.settleMs ?? 25_000,
+                startInteraction: DEFAULT_START_INTERACTION,
+            }, page.viewportSize() ?? { width: 1280, height: 720 }, (target) => target.reload({ waitUntil: 'load', timeout: 45_000 }));
+            return { result: classifyVerifyRun(observations), screenshotPath, consolePath };
+        }
+        finally {
+            await browser.close().catch(() => undefined);
+        }
+    }
+    finally {
+        child.kill('SIGTERM');
+        await new Promise((resolve) => setTimeout(resolve, 500));
+        if (child.exitCode === null)
+            child.kill('SIGKILL');
+        fs.rmSync(profile, { recursive: true, force: true });
+        if (stderr.trim() !== '')
+            fs.writeFileSync(path.join(options.artifactDir, 'app-stderr.log'), stderr);
+    }
+}
+//# sourceMappingURL=launch-check.js.map

package/dist/steam/launch-check.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"launch-check.js","sourceRoot":"","sources":["../../src/steam/launch-check.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AACtC,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,GAAG,MAAM,KAAK,CAAC;AAC3B,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,EAAE,QAAQ,EAAa,MAAM,iBAAiB,CAAC;AACtD,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AACxC,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,iBAAiB,EAAqB,MAAM,uBAAuB,CAAC;AAC7E,OAAO,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAC;AAC/D,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAE5D,SAAS,QAAQ;IACf,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,MAAM,GAAG,GAAG,CAAC,YAAY,EAAE,CAAC;QAClC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC7B,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE;YACjC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;YACjC,MAAM,IAAI,GAAG,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YAChF,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QACpC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,IAAY,EAAE,SAAiB;IAC5D,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IACxC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,oBAAoB,IAAI,eAAe,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAC7G,IAAI,QAAQ,CAAC,EAAE;gBAAE,OAAO;QAC1B,CAAC;QAAC,MAAM,CAAC;YACP,cAAc;QAChB,CAAC;QACD,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;IAC3D,CAAC;IACD,MAAM,IAAI,QAAQ,CAAC,4GAA4G,EAAE,CAAC,CAAC,CAAC;AACtI,CAAC;AAQD,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAKpC;IACC,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACvD,MAAM,IAAI,GAAG,MAAM,QAAQ,EAAE,CAAC;IAC9B,MAAM,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,uBAAuB,CAAC,CAAC,CAAC;IAChF,2FAA2F;IAC3F,8FAA8F;IAC9F,kEAAkE;IAClE,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,2BAA2B,IAAI,EAAE,EAAE,sCAAsC,EAAE,qBAAqB,CAAC,EAAE;QAC1I,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,oBAAoB,EAAE,OAAO,EAAE;QACtD,KAAK,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC;KACpC,CAAC,CAAC;IACH,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,GAAG,MAAM,GAAG,CAAC,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3G,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,gBAAgB,CAAC,CAAC;IACxE,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;IAClE,IAAI,CAAC;QACH,MAAM,eAAe,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACpC,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,cAAc,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAC;QAC1E,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,GAAG,YAAY,MAAM,UAAU,GAAG,CAAC;YAClD,IAAI,IAAsB,CAAC;YAC3B,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC;YACrC,OAAO,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;gBACnD,IAAI,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;gBACxH,IAAI,IAAI,KAAK,SAAS;oBAAE,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;YACnF,CAAC;YACD,IAAI,IAAI,KAAK,SAAS;gBAAE,MAAM,IAAI,QAAQ,CAAC,iCAAiC,MAAM,aAAa,EAAE,CAAC,CAAC,CAAC;YACpG,yFAAyF;YACzF,6CAA6C;YAC7C,MAAM,YAAY,GAAG,MAAM,eAAe,CACxC,IAAI,EACJ;gBACE,GAAG,EAAE,GAAG,MAAM,YAAY;gBAC1B,cAAc;gBACd,WAAW;gBACX,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,MAAM;gBACpC,gBAAgB,EAAE,yBAAyB;aAC5C,EACD,IAAI,CAAC,YAAY,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,EACnD,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAClE,CAAC;YACF,OAAO,EAAE,MAAM,EAAE,iBAAiB,CAAC,YAAY,CAAC,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC;QAClF,CAAC;gBAAS,CAAC;YACT,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;YAAS,CAAC;QACT,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACtB,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;QACzD,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI;YAAE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACnD,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACrD,IAAI,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE;YAAE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,gBAAgB,CAAC,EAAE,MAAM,CAAC,CAAC;IACvG,CAAC;AACH,CAAC"}

package/dist/steam/media.d.ts

@@ -0,0 +1,48 @@
+export interface VideoProbe {
+    width: number;
+    height: number;
+    fps: number;
+    durationSec: number;
+    /** Whole-file bit rate, kbit/s. */
+    bitrateKbps: number;
+    videoCodec: string;
+    audioCodec: string | null;
+    /** ffprobe's format names, e.g. `mov,mp4,m4a,3gp,3g2,mj2`. */
+    container: string;
+}
+/** Pure, so the parsing is testable without ffprobe. */
+export declare function parseVideoProbe(json: string, file: string): VideoProbe;
+export declare function probeVideo(file: string): Promise<VideoProbe>;
+/** The times (seconds) at which the picture cuts, from ffmpeg's scene-change score. */
+export declare function detectCuts(file: string, threshold?: number): Promise<number[]>;
+export declare function parseCutTimes(output: string): number[];
+export interface Shot {
+    from: number;
+    to: number;
+}
+/**
+ * Up to `count` shots worth a screenshot: the longest ones, so every pick is a different moment
+ * and none sits on a transition. `trimEndSec` skips the tail, where trailers put their end card.
+ * Returned in time order. Pure.
+ */
+export declare function pickScreenshotShots(options: {
+    durationSec: number;
+    cuts: readonly number[];
+    count: number;
+    trimStartSec?: number;
+    trimEndSec?: number;
+}): Shot[];
+/** ffmpeg's blurdetect score for the frame at `atSec` — higher is blurrier. */
+export declare function blurScore(file: string, atSec: number): Promise<number>;
+/**
+ * The sharpest of `samples` frames across the middle of a shot. Gameplay footage carries motion
+ * blur on fast moments, and the middle frame of a shot is as likely as any to be the smeared one;
+ * a screenshot is looked at still, so it should be the crispest frame the shot has.
+ */
+export declare function sharpestMoment(file: string, shot: Shot, samples?: number): Promise<number>;
+/** One frame at `atSec`, scaled to cover `width`x`height` and centre-cropped to it, as PNG. */
+export declare function extractFrame(file: string, atSec: number, out: string, width: number, height: number): Promise<void>;
+/** Normalise any still to `width`x`height` PNG the same way. */
+export declare function normaliseStill(file: string, out: string, width: number, height: number): Promise<void>;
+/** A grid of the stills, for the agent to look at in one image instead of eight. */
+export declare function contactSheet(files: readonly string[], out: string): Promise<void>;