@swf2es/format 0.0.0-stage → 0.1.1

package/dist/zip.js

@@ -0,0 +1,92 @@
+// A ZIP archive's files, as an AIR package (`.air`) and any zip of an
+// application's folder hold them: the central directory read from the
+// archive's end, each file stored or deflated. Enough for what packagers
+// write; ZIP64, encryption and the other methods are refused.
+import { zlibUncompress } from "./compression.js";
+import { utf8 } from "./display.js";
+const END_SIGNATURE = 0x06054b50;
+const CENTRAL_SIGNATURE = 0x02014b50;
+const LOCAL_SIGNATURE = 0x04034b50;
+/** The end record's size without its comment, and the most its comment may add. */
+const END_SIZE = 22;
+const MAX_COMMENT = 0xffff;
+const STORED = 0;
+const DEFLATED = 8;
+export class ZipError extends Error {
+    name = "ZipError";
+}
+/** The files of the archive `zip`, in its central directory's order. */
+export function readZip(zip) {
+    const view = new DataView(zip.buffer, zip.byteOffset, zip.byteLength);
+    const end = findEnd(zip, view);
+    const count = view.getUint16(end + 10, true);
+    let at = view.getUint32(end + 16, true);
+    const entries = [];
+    for (let i = 0; i < count; i++) {
+        if (at + 46 > zip.length || view.getUint32(at, true) !== CENTRAL_SIGNATURE) {
+            throw new ZipError("the central directory is cut short");
+        }
+        const method = view.getUint16(at + 10, true);
+        const time = view.getUint16(at + 12, true);
+        const date = view.getUint16(at + 14, true);
+        const compressed = view.getUint32(at + 20, true);
+        const size = view.getUint32(at + 24, true);
+        const nameLength = view.getUint16(at + 28, true);
+        const extraLength = view.getUint16(at + 30, true);
+        const commentLength = view.getUint16(at + 32, true);
+        const local = view.getUint32(at + 42, true);
+        const name = utf8(zip.subarray(at + 46, at + 46 + nameLength));
+        if (compressed === 0xffffffff || size === 0xffffffff || local === 0xffffffff) {
+            throw new ZipError(`${name}: ZIP64 archives are not read`);
+        }
+        if ((view.getUint16(at + 8, true) & 1) !== 0) {
+            throw new ZipError(`${name}: encrypted`);
+        }
+        if (method !== STORED && method !== DEFLATED) {
+            throw new ZipError(`${name}: compression method ${method} is not read`);
+        }
+        entries.push({
+            name,
+            size,
+            modified: dosTime(date, time),
+            bytes: () => entryBytes(zip, view, name, local, method, compressed, size),
+        });
+        at += 46 + nameLength + extraLength + commentLength;
+    }
+    return entries;
+}
+/**
+ * Where the end of central directory record starts: the last signature
+ * whose comment the archive holds, as some tools leave bytes after it.
+ */
+function findEnd(zip, view) {
+    const last = zip.length - END_SIZE;
+    for (let at = last; at >= 0 && at >= last - MAX_COMMENT; at--) {
+        if (view.getUint32(at, true) === END_SIGNATURE &&
+            at + END_SIZE + view.getUint16(at + 20, true) <= zip.length) {
+            return at;
+        }
+    }
+    throw new ZipError("not a ZIP archive: no end of central directory");
+}
+function entryBytes(zip, view, name, local, method, compressed, size) {
+    if (local + 30 > zip.length || view.getUint32(local, true) !== LOCAL_SIGNATURE) {
+        throw new ZipError(`${name}: no local header where the directory says`);
+    }
+    // The local header's own name and extra lengths, which may differ from the directory's.
+    const start = local + 30 + view.getUint16(local + 26, true) + view.getUint16(local + 28, true);
+    if (start + compressed > zip.length) {
+        throw new ZipError(`${name}: cut short`);
+    }
+    const data = zip.subarray(start, start + compressed);
+    const bytes = method === STORED ? data.slice() : zlibUncompress(data, true);
+    if (bytes.length !== size) {
+        throw new ZipError(`${name}: ${bytes.length} bytes where the directory says ${size}`);
+    }
+    return bytes;
+}
+/** A DOS date and time (2-second steps) as ms since 1970, read as local time. */
+function dosTime(date, time) {
+    return new Date(1980 + (date >> 9), ((date >> 5) & 15) - 1, date & 31, time >> 11, (time >> 5) & 63, (time & 31) * 2).getTime();
+}
+//# sourceMappingURL=zip.js.map

package/dist/zip.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"zip.js","sourceRoot":"","sources":["../src/zip.ts"],"names":[],"mappings":"AAAA,sEAAsE;AACtE,sEAAsE;AACtE,yEAAyE;AACzE,8DAA8D;AAC9D,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,IAAI,EAAE,MAAM,cAAc,CAAC;AAEpC,MAAM,aAAa,GAAG,UAAU,CAAC;AACjC,MAAM,iBAAiB,GAAG,UAAU,CAAC;AACrC,MAAM,eAAe,GAAG,UAAU,CAAC;AACnC,mFAAmF;AACnF,MAAM,QAAQ,GAAG,EAAE,CAAC;AACpB,MAAM,WAAW,GAAG,MAAM,CAAC;AAC3B,MAAM,MAAM,GAAG,CAAC,CAAC;AACjB,MAAM,QAAQ,GAAG,CAAC,CAAC;AAEnB,MAAM,OAAO,QAAS,SAAQ,KAAK;IACxB,IAAI,GAAG,UAAU,CAAC;CAC5B;AAcD,wEAAwE;AACxE,MAAM,UAAU,OAAO,CAAC,GAAe;IACrC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC;IACtE,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC/B,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,GAAG,EAAE,EAAE,IAAI,CAAC,CAAC;IAC7C,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,GAAG,EAAE,EAAE,IAAI,CAAC,CAAC;IACxC,MAAM,OAAO,GAAe,EAAE,CAAC;IAC/B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;QAC/B,IAAI,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC,MAAM,IAAI,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,IAAI,CAAC,KAAK,iBAAiB,EAAE,CAAC;YAC3E,MAAM,IAAI,QAAQ,CAAC,oCAAoC,CAAC,CAAC;QAC3D,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,EAAE,IAAI,CAAC,CAAC;QAC7C,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,EAAE,IAAI,CAAC,CAAC;QAC3C,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,EAAE,IAAI,CAAC,CAAC;QAC3C,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,EAAE,IAAI,CAAC,CAAC;QACjD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,EAAE,IAAI,CAAC,CAAC;QAC3C,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,EAAE,IAAI,CAAC,CAAC;QACjD,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,EAAE,IAAI,CAAC,CAAC;QAClD,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,EAAE,IAAI,CAAC,CAAC;QACpD,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,EAAE,IAAI,CAAC,CAAC;QAC5C,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,UAAU,CAAC,CAAC,CAAC;QAC/D,IAAI,UAAU,KAAK,UAAU,IAAI,IAAI,KAAK,UAAU,IAAI,KAAK,KAAK,UAAU,EAAE,CAAC;YAC7E,MAAM,IAAI,QAAQ,CAAC,GAAG,IAAI,+BAA+B,CAAC,CAAC;QAC7D,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7C,MAAM,IAAI,QAAQ,CAAC,GAAG,IAAI,aAAa,CAAC,CAAC;QAC3C,CAAC;QAED,IAAI,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC7C,MAAM,IAAI,QAAQ,CAAC,GAAG,IAAI,wBAAwB,MAAM,cAAc,CAAC,CAAC;QAC1E,CAAC;QAED,OAAO,CAAC,IAAI,CAAC;YACX,IAAI;YACJ,IAAI;YACJ,QAAQ,EAAE,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC;YAC7B,KAAK,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,CAAC;SAC1E,CAAC,CAAC;QACH,EAAE,IAAI,EAAE,GAAG,UAAU,GAAG,WAAW,GAAG,aAAa,CAAC;IACtD,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;GAGG;AACH,SAAS,OAAO,CAAC,GAAe,EAAE,IAAc;IAC9C,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,GAAG,QAAQ,CAAC;IACnC,KAAK,IAAI,EAAE,GAAG,IAAI,EAAE,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,IAAI,GAAG,WAAW,EAAE,EAAE,EAAE,EAAE,CAAC;QAC9D,IACE,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,IAAI,CAAC,KAAK,aAAa;YAC1C,EAAE,GAAG,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,EAAE,IAAI,CAAC,IAAI,GAAG,CAAC,MAAM,EAC3D,CAAC;YACD,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAED,MAAM,IAAI,QAAQ,CAAC,gDAAgD,CAAC,CAAC;AACvE,CAAC;AAED,SAAS,UAAU,CACjB,GAAe,EACf,IAAc,EACd,IAAY,EACZ,KAAa,EACb,MAAc,EACd,UAAkB,EAClB,IAAY;IAEZ,IAAI,KAAK,GAAG,EAAE,GAAG,GAAG,CAAC,MAAM,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,eAAe,EAAE,CAAC;QAC/E,MAAM,IAAI,QAAQ,CAAC,GAAG,IAAI,4CAA4C,CAAC,CAAC;IAC1E,CAAC;IAED,wFAAwF;IACxF,MAAM,KAAK,GAAG,KAAK,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,GAAG,EAAE,EAAE,IAAI,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,GAAG,EAAE,EAAE,IAAI,CAAC,CAAC;IAC/F,IAAI,KAAK,GAAG,UAAU,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC;QACpC,MAAM,IAAI,QAAQ,CAAC,GAAG,IAAI,aAAa,CAAC,CAAC;IAC3C,CAAC;IAED,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,KAAK,EAAE,KAAK,GAAG,UAAU,CAAC,CAAC;IACrD,MAAM,KAAK,GAAG,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC5E,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;QAC1B,MAAM,IAAI,QAAQ,CAAC,GAAG,IAAI,KAAK,KAAK,CAAC,MAAM,mCAAmC,IAAI,EAAE,CAAC,CAAC;IACxF,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,iFAAiF;AACjF,SAAS,OAAO,CAAC,IAAY,EAAE,IAAY;IACzC,OAAO,IAAI,IAAI,CACb,IAAI,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC,EAClB,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,EACtB,IAAI,GAAG,EAAE,EACT,IAAI,IAAI,EAAE,EACV,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,EAAE,EAChB,CAAC,IAAI,GAAG,EAAE,CAAC,GAAG,CAAC,CAChB,CAAC,OAAO,EAAE,CAAC;AACd,CAAC"}

package/package.json

@@ -1,6 +1,36 @@
 {
   "name": "@swf2es/format",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
+  "version": "0.1.1",
+  "description": "SWF, ABC and AVM1 action parsers shared by the compiler and the player",
+  "keywords": [
+    "swf",
+    "flash",
+    "abc",
+    "avm1",
+    "parser"
+  ],
+  "homepage": "https://swf2es.github.io/swf2es/",
+  "bugs": "https://github.com/swf2es/swf2es/issues",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/swf2es/swf2es.git",
+    "directory": "packages/format"
+  },
+  "license": "Apache-2.0 AND (Apache-2.0 OR MIT)",
+  "type": "module",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist",
+    "!dist/**/.tsbuildinfo",
+    "src",
+    "LICENSE.third-party"
+  ],
+  "dependencies": {
+    "@swf2es/native": "0.1.1"
+  }
 }

package/src/abc-names.ts

@@ -0,0 +1,138 @@
+// The names an ABC refers to, read from its constant pool alone: each
+// qualified name, "package::Name" as avmplus writes a definition's (a
+// top-level one bare), from the pool's QNames in a package's namespace,
+// and from each Multiname, once for every package namespace in its set,
+// as a lookup that names the class unqualified finds it in one of them.
+// What it may name is enough to tell which libraries a SWF expects, as the
+// web element tells an AIR application's SWF from one for the browser.
+import { utf8 } from "./display.js";
+
+const CONSTANT_Namespace = 0x08;
+const CONSTANT_PackageNamespace = 0x16;
+const CONSTANT_QName = 0x07;
+const CONSTANT_QNameA = 0x0d;
+const CONSTANT_RTQName = 0x0f;
+const CONSTANT_RTQNameA = 0x10;
+const CONSTANT_RTQNameL = 0x11;
+const CONSTANT_RTQNameLA = 0x12;
+const CONSTANT_Multiname = 0x09;
+const CONSTANT_MultinameA = 0x0e;
+const CONSTANT_MultinameL = 0x1b;
+const CONSTANT_MultinameLA = 0x1c;
+const CONSTANT_TypeName = 0x1d;
+
+/** The qualified names `abc` may refer to; what it cannot read stops the reading, keeping what came before. */
+export function abcReferences(abc: Uint8Array): Set<string> {
+  const names = new Set<string>();
+  let at = 4;
+  const u30 = (): number => {
+    let value = 0;
+    for (let shift = 0; shift < 35; shift += 7) {
+      if (at >= abc.length) {
+        throw new RangeError("ABC cut short");
+      }
+
+      const b = abc[at++];
+      value += (b & 0x7f) * 2 ** shift;
+      if ((b & 0x80) === 0) {
+        break;
+      }
+    }
+
+    return value;
+  };
+  const skipU30s = (count: number) => {
+    for (let i = 1; i < count; i++) {
+      u30();
+    }
+  };
+
+  try {
+    skipU30s(u30()); // ints
+    skipU30s(u30()); // uints
+    const doubles = u30();
+    at += Math.max(0, doubles - 1) * 8;
+    // From 47.16 AIR's ABCs have a pool of 4-byte floats next (codegen's parse.ts).
+    const minor = abc[0] | (abc[1] << 8);
+    const major = abc[2] | (abc[3] << 8);
+    if (major === 47 && minor >= 16) {
+      const floats = u30();
+      at += Math.max(0, floats - 1) * 4;
+    }
+    const strings: string[] = [""];
+    for (let i = 1, n = u30(); i < n; i++) {
+      const length = u30();
+      strings.push(utf8(abc.subarray(at, at + length)));
+      at += length;
+    }
+
+    // A package's namespace by its URI; null for any other kind.
+    const namespaces: (string | null)[] = [null];
+    for (let i = 1, n = u30(); i < n; i++) {
+      const kind = abc[at++];
+      const name = strings[u30()] ?? "";
+      namespaces.push(
+        kind === CONSTANT_PackageNamespace || kind === CONSTANT_Namespace ? name : null,
+      );
+    }
+
+    const sets: number[][] = [[]];
+    for (let i = 1, n = u30(); i < n; i++) {
+      const set: number[] = [];
+      for (let j = 0, count = u30(); j < count; j++) {
+        set.push(u30());
+      }
+
+      sets.push(set);
+    }
+
+    const add = (ns: string | null | undefined, name: string | undefined) => {
+      if (ns !== null && ns !== undefined && name) {
+        names.add(ns === "" ? name : `${ns}::${name}`);
+      }
+    };
+    for (let i = 1, n = u30(); i < n; i++) {
+      const kind = abc[at++];
+      switch (kind) {
+        case CONSTANT_QName:
+        case CONSTANT_QNameA: {
+          const ns = u30();
+          add(namespaces[ns], strings[u30()]);
+          break;
+        }
+        case CONSTANT_RTQName:
+        case CONSTANT_RTQNameA:
+          u30();
+          break;
+        case CONSTANT_RTQNameL:
+        case CONSTANT_RTQNameLA:
+          break;
+        case CONSTANT_Multiname:
+        case CONSTANT_MultinameA: {
+          const name = strings[u30()];
+          for (const ns of sets[u30()] ?? []) {
+            add(namespaces[ns], name);
+          }
+
+          break;
+        }
+        case CONSTANT_MultinameL:
+        case CONSTANT_MultinameLA:
+          u30();
+          break;
+        case CONSTANT_TypeName: {
+          u30();
+          skipU30s(u30() + 1);
+          break;
+        }
+        default:
+          // A kind no ABC has: what follows cannot be read.
+          return names;
+      }
+    }
+  } catch {
+    // Cut short: what was read is what it names.
+  }
+
+  return names;
+}

package/src/actions.ts

@@ -0,0 +1,319 @@
+// A SWF's AVM1 action blocks, listed from its tags: DoAction, DoInitAction,
+// a PlaceObject 2 to 4's clip actions and a button's actions, as Ruffle's
+// (https://github.com/ruffle-rs/ruffle) swf/src/read.rs reads them
+// (read_clip_actions, read_clip_event_flags, read_define_button_1 and 2,
+// read_button_action) and its swf/src/types.rs numbers their flags: MIT OR
+// Apache-2.0, Copyright (c) 2018-2022 Ruffle LLC and Ruffle contributors.
+// Where they differ on clip actions, what adl does decides (clipActions, the
+// list's `corrupt`). A malformed button action ends the button's list and
+// keeps those before it: adl defines the button, and its actions cannot run
+// there without a pointer to check them.
+
+import { buttonActionsOffset } from "./button.js";
+import { clipActionsOffset, readSprite } from "./display.js";
+import { type Swf, SwfReader, type Tag } from "./swf.js";
+import {
+  DefineButton,
+  DefineButton2,
+  DefineSprite,
+  DoAction,
+  DoInitAction,
+  PlaceObject2,
+  PlaceObject3,
+  PlaceObject4,
+  ShowFrame,
+} from "./tags.js";
+
+/** A clip action's events, CLIPEVENTFLAGS' bits; SWF 5 has only the low 16. */
+export const ClipEvent = {
+  load: 1 << 0,
+  enterFrame: 1 << 1,
+  unload: 1 << 2,
+  mouseMove: 1 << 3,
+  mouseDown: 1 << 4,
+  mouseUp: 1 << 5,
+  keyDown: 1 << 6,
+  keyUp: 1 << 7,
+  data: 1 << 8,
+  initialize: 1 << 9,
+  press: 1 << 10,
+  release: 1 << 11,
+  releaseOutside: 1 << 12,
+  rollOver: 1 << 13,
+  rollOut: 1 << 14,
+  dragOver: 1 << 15,
+  dragOut: 1 << 16,
+  keyPress: 1 << 17,
+  construct: 1 << 18,
+} as const;
+
+/** The bits Flash knows; it skips a record with none of them, and only flags of 0 end the list. */
+const CLIP_EVENTS = 0x7ffff;
+
+/** A button's state transitions, BUTTONCONDACTION's low 9 bits; its key code is above them. */
+export const ButtonCondition = {
+  idleToOverUp: 1 << 0,
+  overUpToIdle: 1 << 1,
+  overUpToOverDown: 1 << 2,
+  overDownToOverUp: 1 << 3,
+  overDownToOutDown: 1 << 4,
+  outDownToOverDown: 1 << 5,
+  outDownToIdle: 1 << 6,
+  idleToOverDown: 1 << 7,
+  overDownToIdle: 1 << 8,
+} as const;
+
+/**
+ * What a block belongs to. `timeline` is the sprite whose tags hold it, null
+ * for the main timeline's, and `frame` counts that timeline's frames from 0.
+ */
+export type ActionOwner =
+  /** DoAction: a frame's actions. */
+  | { type: "frame"; timeline: number | null; frame: number }
+  /** DoInitAction: `sprite`'s #initclip actions. */
+  | { type: "init"; sprite: number; timeline: number | null; frame: number }
+  /**
+   * A clip action of the PlaceObject 2 to 4 at `depth`. `events` are those
+   * both its flags and the place's field of all events have, the ones Flash
+   * runs it for; `key` is keyPress's key code, else 0.
+   */
+  | {
+      type: "clip";
+      timeline: number | null;
+      frame: number;
+      depth: number;
+      events: number;
+      key: number;
+    }
+  /** A button's actions; DefineButton's one runs on overDownToOverUp. `key` is 0 without one. */
+  | { type: "button"; button: number; conditions: number; key: number };
+
+/** A block of actions: its bytes are `length` from `offset` in the SWF's decompressed bytes. */
+export interface ActionBlock {
+  /** Its place in the SWF's list, which the JIT and AOT modules both number blocks by. */
+  index: number;
+  owner: ActionOwner;
+  /** The offset of the tag's body that holds it, the key of `ActionList.byTag`. */
+  tag: number;
+  offset: number;
+  length: number;
+}
+
+export interface ActionList {
+  /** The SWF's version, which decides how its actions run and how its clip events are read. */
+  version: number;
+  /** In tag order, a sprite's within its DefineSprite, and a tag's in record order. */
+  blocks: ActionBlock[];
+  /** The indices of each tag's blocks, by the offset of the tag's body. */
+  byTag: Map<number, number[]>;
+  /**
+   * The offsets of the PlaceObject 2 to 4 tags' bodies whose clip actions
+   * run past the tag, which have no blocks: Flash reads a place's records
+   * as the first of its events comes, and stops playing the whole SWF,
+   * every timeline of it, there.
+   */
+  corrupt: number[];
+  /** The events of each of those tags' field of all events, by its offset: when Flash stops. */
+  corruptEvents: Map<number, number>;
+}
+
+/**
+ * A SWF's action blocks, a pure function of its bytes. A block may be empty.
+ * They are listed in an ActionScript 3 SWF too, where Flash runs none.
+ */
+export function readActions(swf: Swf): ActionList {
+  const list: ActionList = {
+    version: swf.header.version,
+    blocks: [],
+    byTag: new Map(),
+    corrupt: [],
+    corruptEvents: new Map(),
+  };
+  walk(swf.bytes, swf.tags, null, list);
+  return list;
+}
+
+function walk(bytes: Uint8Array, tags: Tag[], timeline: number | null, list: ActionList): void {
+  let frame = 0;
+
+  for (const tag of tags) {
+    const end = tag.offset + tag.length;
+    switch (tag.code) {
+      case ShowFrame:
+        frame++;
+        break;
+      case DoAction:
+        add(list, tag, { type: "frame", timeline, frame }, tag.offset, end);
+        break;
+      case DoInitAction:
+        // A tag too short for its sprite id is no block, as Ruffle fails to read it.
+        if (tag.length >= 2) {
+          const sprite = bytes[tag.offset] | (bytes[tag.offset + 1] << 8);
+          add(list, tag, { type: "init", sprite, timeline, frame }, tag.offset + 2, end);
+        }
+        break;
+      case PlaceObject2:
+      case PlaceObject3:
+      case PlaceObject4: {
+        const { depth, offset } = clipActionsOffset(bytes, tag);
+        if (offset >= 0) {
+          clipActions(bytes, tag, offset, list, timeline, frame, depth);
+        }
+        break;
+      }
+      case DefineButton:
+      case DefineButton2:
+        buttonActions(bytes, tag, list);
+        break;
+      case DefineSprite: {
+        const sprite = readSprite(bytes, tag);
+        walk(bytes, sprite.tags, sprite.id, list);
+        break;
+      }
+    }
+  }
+}
+
+function add(list: ActionList, tag: Tag, owner: ActionOwner, offset: number, end: number): void {
+  const index = list.blocks.length;
+  list.blocks.push({ index, owner, tag: tag.offset, offset, length: end - offset });
+
+  const indices = list.byTag.get(tag.offset);
+  if (indices) {
+    indices.push(index);
+  } else {
+    list.byTag.set(tag.offset, [index]);
+  }
+}
+
+function corrupt(list: ActionList, tag: Tag, events: number): void {
+  list.corrupt.push(tag.offset);
+  list.corruptEvents.set(tag.offset, events);
+}
+
+/** CLIPACTIONS: a reserved u16, the events Flash dispatches, then records to one of no events. */
+function clipActions(
+  bytes: Uint8Array,
+  tag: Tag,
+  start: number,
+  list: ActionList,
+  timeline: number | null,
+  frame: number,
+  depth: number,
+): void {
+  const end = tag.offset + tag.length;
+  const r = new SwfReader(bytes, start, end);
+  const wide = list.version >= 6;
+  const flagSize = wide ? 4 : 2;
+  r.u16();
+  // Flags cut short end the list whatever their bytes, in adl as in Ruffle (its #2899).
+  const flags = () => {
+    if (r.pos + flagSize > end) {
+      r.pos = end;
+      return 0;
+    }
+
+    return wide ? r.u32() : r.u16();
+  };
+  // Flash runs a record only for the events this field also has.
+  const all = flags() & CLIP_EVENTS;
+  const records: { owner: ActionOwner; start: number; end: number }[] = [];
+
+  for (;;) {
+    const raw = flags();
+    if (raw === 0) {
+      break;
+    }
+
+    // A record cut short stops the whole SWF in Flash, before any of the place's records runs.
+    if (r.pos + 4 > end) {
+      corrupt(list, tag, all);
+      return;
+    }
+
+    const events = raw & all;
+    const length = r.u32();
+    let start = r.pos;
+    let key = 0;
+    // keyPress's key code is the first byte of the record's length. Flash
+    // reads it even of a length of 0, as the next record's first byte, and
+    // goes on from there: that record keeps its key and has no actions.
+    if (raw & ClipEvent.keyPress) {
+      if (r.pos >= end) {
+        corrupt(list, tag, all);
+        return;
+      }
+
+      key = bytes[r.pos];
+      start += Math.min(length, 1);
+    }
+
+    if (length > end - r.pos) {
+      corrupt(list, tag, all);
+      return;
+    }
+
+    if (events !== 0) {
+      const owner: ActionOwner = { type: "clip", timeline, frame, depth, events, key };
+      records.push({ owner, start, end: r.pos + length });
+    }
+
+    r.pos += length;
+  }
+
+  for (const record of records) {
+    add(list, tag, record.owner, record.start, record.end);
+  }
+}
+
+/**
+ * DefineButton's actions run to the tag's end. DefineButton2's, after its
+ * records when its action offset is not 0, are BUTTONCONDACTIONs: a size,
+ * 0 for the last, which runs to the end, then the conditions and key.
+ */
+function buttonActions(bytes: Uint8Array, tag: Tag, list: ActionList): void {
+  const { id, offset } = buttonActionsOffset(bytes, tag);
+  const end = tag.offset + tag.length;
+  if (offset < 0) {
+    return;
+  }
+
+  if (tag.code === DefineButton) {
+    const owner: ActionOwner = {
+      type: "button",
+      button: id,
+      conditions: ButtonCondition.overDownToOverUp,
+      key: 0,
+    };
+    add(list, tag, owner, offset, end);
+    return;
+  }
+
+  const r = new SwfReader(bytes, offset, end);
+  for (;;) {
+    if (r.pos + 4 > end) {
+      return;
+    }
+
+    const size = r.u16();
+    const conditions = r.u16();
+    // Sizes 1 to 3 are shorter than the record's own head: Ruffle's error, so the end here.
+    if ((size !== 0 && size < 4) || size - 4 > end - r.pos) {
+      return;
+    }
+
+    const blockEnd = size === 0 ? end : r.pos + size - 4;
+    const owner: ActionOwner = {
+      type: "button",
+      button: id,
+      conditions: conditions & 0x1ff,
+      key: conditions >> 9,
+    };
+    add(list, tag, owner, r.pos, blockEnd);
+    if (size === 0) {
+      return;
+    }
+
+    r.pos = blockEnd;
+  }
+}

package/src/air-descriptor.ts

@@ -0,0 +1,84 @@
+// An AIR application's descriptor (`<name>-app.xml`), as adl reads what it
+// needs of one to run it: the application's id, and its first window's
+// content SWF, title and size. Elements are found by name, whatever
+// namespace the descriptor's AIR version gives them; what is not there is
+// left to its default. A desktop app reads it from disk, a page from an
+// AIR package (`.air`) or the files of one.
+
+export interface AirDescriptor {
+  id: string;
+  /** The content SWF's path, relative to the application's directory, "/"-separated. */
+  content: string;
+  title: string | null;
+  width: number | null;
+  height: number | null;
+}
+
+/** The text of the first `<name>` element in `xml`, entities decoded; null for none. */
+function element(xml: string, name: string): string | null {
+  const m = new RegExp(
+    `<(?:[\\w.-]+:)?${name}(?:\\s[^>]*)?>([\\s\\S]*?)</(?:[\\w.-]+:)?${name}\\s*>`,
+  ).exec(xml);
+  return m ? decode(m[1].trim()) : null;
+}
+
+/** XML's five entities and its character references, and a CDATA section's text. */
+function decode(text: string): string {
+  const cdata = /^<!\[CDATA\[([\s\S]*)\]\]>$/.exec(text);
+  if (cdata) {
+    return cdata[1];
+  }
+
+  return text.replace(/&(#x[0-9a-f]+|#\d+|amp|lt|gt|quot|apos);/gi, (_, e: string) => {
+    switch (e.toLowerCase()) {
+      case "amp":
+        return "&";
+      case "lt":
+        return "<";
+      case "gt":
+        return ">";
+      case "quot":
+        return '"';
+      case "apos":
+        return "'";
+      default:
+        return String.fromCodePoint(
+          e[1].toLowerCase() === "x" ? Number.parseInt(e.slice(2), 16) : Number(e.slice(1)),
+        );
+    }
+  });
+}
+
+/** A whole number of pixels, or null for none or nonsense. */
+function size(text: string | null): number | null {
+  const n = text === null ? Number.NaN : Number(text);
+  return Number.isInteger(n) && n > 0 ? n : null;
+}
+
+/** What `xml`, a descriptor, says; an Error naming what it lacks that adl requires. */
+export function readAirDescriptor(xml: string): AirDescriptor {
+  if (!/<(?:[\w.-]+:)?application[\s>]/.test(xml)) {
+    throw new Error("not an AIR application descriptor: no <application>");
+  }
+
+  // The comments out first, which may hold an element of each name.
+  const text = xml.replace(/<!--[\s\S]*?-->/g, "");
+  const id = element(text, "id");
+  const window = element(text, "initialWindow");
+  const content = window === null ? null : element(window, "content");
+  if (!id) {
+    throw new Error("the descriptor names no <id>");
+  }
+
+  if (!content) {
+    throw new Error("the descriptor's <initialWindow> names no <content>");
+  }
+
+  return {
+    id,
+    content: content.replaceAll("\\", "/"),
+    title: window === null ? null : element(window, "title"),
+    width: window === null ? null : size(element(window, "width")),
+    height: window === null ? null : size(element(window, "height")),
+  };
+}