app-builder-lib 26.15.2 → 27.0.0-alpha.0

package/dist/winPackager.js

@@ -0,0 +1,270 @@
+import { CopyFileTransformer, exists, InvalidConfigurationError, log, walk } from "builder-util";
+import { createRequire } from "node:module";
+import { isCI } from "ci-info";
+import { createHash } from "crypto";
+import { readdir } from "fs/promises";
+import { Lazy } from "lazy-val";
+import * as path from "path";
+import { readAsarHeader } from "./asar/asar.js";
+import { signWindows } from "./codeSign/win/windowsCodeSign.js";
+import { WindowsSignAzureManager } from "./codeSign/win/windowsSignAzureManager.js";
+import { WindowsSignToolManager } from "./codeSign/win/windowsSignToolManager.js";
+import { DIR_TARGET, Platform } from "./core.js";
+import { chooseNotNull, PlatformPackager } from "./platformPackager.js";
+import AppXTarget from "./targets/win/AppxTarget.js";
+import MsiTarget from "./targets/win/MsiTarget.js";
+import MsiWrappedTarget from "./targets/win/MsiWrappedTarget.js";
+import { NsisTarget } from "./targets/win/nsis/NsisTarget.js";
+import { AppPackageHelper, CopyElevateHelper } from "./targets/win/nsis/nsisUtil.js";
+import { WebInstallerTarget } from "./targets/win/nsis/WebInstallerTarget.js";
+import { createCommonTarget } from "./targets/targetFactory.js";
+import { BuildCacheManager, digest } from "./util/cacheManager.js";
+import { isBuildCacheEnabled } from "./util/flags.js";
+import { editWindowsResources } from "./util/win/resEdit.js";
+import { time } from "./util/timer.js";
+import { getWindowsVm, VmManager } from "./vm/vm.js";
+const _require = createRequire(import.meta.url);
+export class WinPackager extends PlatformPackager {
+    get isForceCodeSigningVerification() {
+        return this.platformSpecificBuildOptions.verifyUpdateCodeSignature !== false;
+    }
+    constructor(info) {
+        super(info, Platform.WINDOWS);
+        this._iconPath = new Lazy(() => this.getOrConvertIcon("ico"));
+        this.vm = new Lazy(() => (process.platform === "win32" ? Promise.resolve(new VmManager()) : getWindowsVm(this.debugLogger)));
+        this.signingManager = new Lazy(async () => {
+            let manager;
+            if (this.platformSpecificBuildOptions.azureSignOptions != null) {
+                manager = new WindowsSignAzureManager(this);
+            }
+            else {
+                manager = new WindowsSignToolManager(this);
+            }
+            await manager.initialize();
+            return manager;
+        });
+        this.signingQueue = Promise.resolve(true);
+    }
+    get defaultTarget() {
+        return ["nsis"];
+    }
+    createTargets(targets, mapper) {
+        let copyElevateHelper;
+        const getCopyElevateHelper = () => {
+            if (copyElevateHelper == null) {
+                copyElevateHelper = new CopyElevateHelper();
+            }
+            return copyElevateHelper;
+        };
+        let helper;
+        const getHelper = () => {
+            if (helper == null) {
+                helper = new AppPackageHelper(getCopyElevateHelper());
+            }
+            return helper;
+        };
+        for (const name of targets) {
+            if (name === DIR_TARGET) {
+                continue;
+            }
+            if (name === "nsis" || name === "portable") {
+                mapper(name, outDir => new NsisTarget(this, outDir, name, getHelper()));
+            }
+            else if (name === "nsis-web") {
+                // package file format differs from nsis target
+                mapper(name, outDir => new WebInstallerTarget(this, path.join(outDir, name), name, new AppPackageHelper(getCopyElevateHelper())));
+            }
+            else {
+                const targetClass = (() => {
+                    switch (name) {
+                        case "squirrel":
+                            try {
+                                return _require("electron-builder-squirrel-windows").default;
+                            }
+                            catch (e) {
+                                throw new InvalidConfigurationError(`Module electron-builder-squirrel-windows must be installed in addition to build Squirrel.Windows: ${e.stack || e}`);
+                            }
+                        case "appx":
+                            return AppXTarget;
+                        case "msi":
+                            return MsiTarget;
+                        case "msiwrapped":
+                            return MsiWrappedTarget;
+                        default:
+                            return null;
+                    }
+                })();
+                mapper(name, outDir => (targetClass === null ? createCommonTarget(name, outDir, this) : new targetClass(this, outDir, name)));
+            }
+        }
+    }
+    getIconPath() {
+        return this._iconPath.value;
+    }
+    doGetCscPassword() {
+        return chooseNotNull(chooseNotNull(this.platformSpecificBuildOptions.signtoolOptions?.certificatePassword, process.env.WIN_CSC_KEY_PASSWORD), super.doGetCscPassword());
+    }
+    async signIf(file) {
+        const logFields = { file: log.filePath(file) };
+        if (!this.shouldSignFile(file, true)) {
+            log.info(logFields, "file signing skipped via signExts configuration");
+            return false;
+        }
+        if (this.platformSpecificBuildOptions.signExecutable === false) {
+            log.info(logFields, "file signing skipped via signExecutable configuration");
+            return false;
+        }
+        const promise = this.signingQueue.then(() => this._sign(file));
+        this.signingQueue = promise.catch(e => {
+            log.warn({ file: log.filePath(file), error: e.message }, "signing failed for file, queue will continue to next file");
+            return false;
+        });
+        return promise;
+    }
+    async _sign(file) {
+        const signOptions = {
+            path: file,
+            options: this.platformSpecificBuildOptions,
+        };
+        const didSignSuccessfully = await signWindows(signOptions, this);
+        if (!didSignSuccessfully && this.forceCodeSigning) {
+            throw new InvalidConfigurationError(`App is not signed and "forceCodeSigning" is set to true, please ensure that code signing configuration is correct, please see https://electron.build/code-signing`);
+        }
+        return didSignSuccessfully;
+    }
+    async signAndEditResources(file, arch, outDir, internalName, requestedExecutionLevel) {
+        const appInfo = this.appInfo;
+        const files = [];
+        const versionStrings = {
+            FileDescription: appInfo.productName,
+            ProductName: appInfo.productName,
+            LegalCopyright: appInfo.copyright,
+        };
+        if (internalName != null) {
+            versionStrings.InternalName = internalName;
+            versionStrings.OriginalFilename = "";
+        }
+        if (appInfo.companyName != null) {
+            versionStrings.CompanyName = appInfo.companyName;
+        }
+        if (this.platformSpecificBuildOptions.legalTrademarks != null) {
+            versionStrings.LegalTrademarks = this.platformSpecificBuildOptions.legalTrademarks;
+        }
+        const iconPath = await this.getIconPath();
+        if (iconPath != null) {
+            files.push(iconPath);
+        }
+        const opts = {
+            file,
+            versionStrings,
+            fileVersion: appInfo.shortVersion || appInfo.buildVersion,
+            productVersion: appInfo.shortVersionWindows || appInfo.getVersionInWeirdWindowsForm(),
+            requestedExecutionLevel,
+            iconPath,
+        };
+        const config = this.config;
+        const cscInfoForCacheDigest = !isBuildCacheEnabled() || isCI || config.electronDist != null ? null : await (await this.signingManager.value).cscInfo.value;
+        let buildCacheManager = null;
+        // resources editing doesn't change executable for the same input and executed quickly - no need to complicate
+        if (cscInfoForCacheDigest != null) {
+            const cscFile = cscInfoForCacheDigest.file;
+            if (cscFile != null) {
+                files.push(cscFile);
+            }
+            const timer = time("executable cache");
+            const hash = createHash("sha512");
+            hash.update(config.electronVersion || "no electronVersion");
+            hash.update(JSON.stringify(this.platformSpecificBuildOptions));
+            hash.update(JSON.stringify(opts));
+            hash.update(this.platformSpecificBuildOptions.signtoolOptions?.certificateSha1 || "no certificateSha1");
+            hash.update(this.platformSpecificBuildOptions.signtoolOptions?.certificateSubjectName || "no subjectName");
+            const asar = path.resolve(this.getResourcesDir(outDir), "app.asar");
+            if (await exists(asar)) {
+                hash.update((await readAsarHeader(asar)).header);
+            }
+            else {
+                hash.update("no asar");
+            }
+            buildCacheManager = new BuildCacheManager(outDir, file, arch);
+            if (await buildCacheManager.copyIfValid(await digest(hash, files))) {
+                timer.end();
+                return;
+            }
+            timer.end();
+        }
+        const timer = time("resource-edit&sign");
+        await editWindowsResources(opts);
+        await this.signIf(file);
+        timer.end();
+        if (buildCacheManager != null) {
+            await buildCacheManager.save();
+        }
+    }
+    shouldSignFile(file, fallbackValue = false) {
+        const isExe = file.endsWith(".exe");
+        const signExts = this.platformSpecificBuildOptions.signExts;
+        if (!signExts?.length) {
+            return isExe || fallbackValue;
+        }
+        // process patterns ( !exe => exclude .exe, .dll => include .dll )
+        // we process first to allow literal negatives in case a filename matches "help!.txt" or similar
+        if (signExts.some(ext => file.endsWith(ext))) {
+            return true;
+        }
+        // process negative patterns
+        if (signExts.some(ext => ext.startsWith("!") && file.endsWith(ext.substring(1)))) {
+            return false;
+        }
+        return isExe || fallbackValue;
+    }
+    createTransformerForExtraFiles(packContext) {
+        if (this.platformSpecificBuildOptions.signAndEditExecutable === false || this.platformSpecificBuildOptions.signExecutable === false) {
+            return null;
+        }
+        return file => {
+            if (this.shouldSignFile(file)) {
+                const parentDir = path.dirname(file);
+                if (parentDir !== packContext.appOutDir) {
+                    return new CopyFileTransformer(file => this.signIf(file));
+                }
+            }
+            return null;
+        };
+    }
+    async signApp(packContext, isAsar) {
+        const exeFileName = `${this.appInfo.productFilename}.exe`;
+        const signingDisabled = this.platformSpecificBuildOptions.signExecutable === false || this.platformSpecificBuildOptions.signAndEditExecutable === false;
+        if (signingDisabled && this.forceCodeSigning) {
+            throw new InvalidConfigurationError("Signing is disabled (`signExecutable: false` or `signAndEditExecutable: false`) but `forceCodeSigning` is enabled. Remove one of these options.");
+        }
+        if (this.platformSpecificBuildOptions.signAndEditExecutable === false) {
+            log.info({ exe: log.filePath(path.join(packContext.appOutDir, exeFileName)) }, "executable resource editing and code signing skipped — signAndEditExecutable is false. To skip only code signing while keeping icon and metadata applied, use signExecutable: false instead.");
+            return false;
+        }
+        const files = await readdir(packContext.appOutDir);
+        for (const file of files) {
+            if (file === exeFileName) {
+                await this.signAndEditResources(path.join(packContext.appOutDir, exeFileName), packContext.arch, packContext.outDir, path.basename(exeFileName, ".exe"), this.platformSpecificBuildOptions.requestedExecutionLevel);
+            }
+            else if (this.shouldSignFile(file)) {
+                await this.signIf(path.join(packContext.appOutDir, file));
+            }
+        }
+        if (!isAsar || this.platformSpecificBuildOptions.signExecutable === false) {
+            return true;
+        }
+        const filesToSign = await Promise.all([
+            this.walkSignableFiles(packContext.appOutDir, "resources", "app.asar.unpacked"),
+            // Note: The `swiftshader` directory is absent in modern electron versions. `swiftshader/` held Chromium's legacy SwiftShader GL fallback (libEGL.dll / libGLESv2.dll), removed in Chromium 102 (Electron 19+) in favor of SwANGLE (ANGLE + SwiftShader Vulkan). This is kept here only for backwards compat with older Electron; `walk` no-ops on a missing dir (readdir ENOENT is swallowed), so this is harmless when the directory is absent.
+            this.walkSignableFiles(packContext.appOutDir, "swiftshader"),
+        ]);
+        for (const file of filesToSign.flat(1)) {
+            await this.signIf(file);
+        }
+        return true;
+    }
+    walkSignableFiles(baseDir, ...subpath) {
+        return walk(path.join(baseDir, ...subpath), (file, stat) => stat.isDirectory() || this.shouldSignFile(file));
+    }
+}
+//# sourceMappingURL=winPackager.js.map

package/dist/winPackager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"winPackager.js","sourceRoot":"","sources":["../src/winPackager.ts"],"names":[],"mappings":"AAAA,OAAO,EAAQ,mBAAmB,EAAE,MAAM,EAAmB,yBAAyB,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,cAAc,CAAA;AACvH,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAE3C,OAAO,EAAE,IAAI,EAAE,MAAM,SAAS,CAAA;AAC9B,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAA;AACnC,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAA;AACrC,OAAO,EAAE,IAAI,EAAE,MAAM,UAAU,CAAA;AAC/B,OAAO,KAAK,IAAI,MAAM,MAAM,CAAA;AAC5B,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAA;AAE/C,OAAO,EAAE,WAAW,EAAsB,MAAM,mCAAmC,CAAA;AACnF,OAAO,EAAE,uBAAuB,EAAE,MAAM,2CAA2C,CAAA;AACnF,OAAO,EAAuB,sBAAsB,EAAE,MAAM,0CAA0C,CAAA;AAEtG,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAU,MAAM,WAAW,CAAA;AAGxD,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AACvE,OAAO,UAAU,MAAM,6BAA6B,CAAA;AACpD,OAAO,SAAS,MAAM,4BAA4B,CAAA;AAClD,OAAO,gBAAgB,MAAM,mCAAmC,CAAA;AAChE,OAAO,EAAE,UAAU,EAAE,MAAM,kCAAkC,CAAA;AAC7D,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAA;AACpF,OAAO,EAAE,kBAAkB,EAAE,MAAM,0CAA0C,CAAA;AAC7E,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAA;AAC/D,OAAO,EAAE,iBAAiB,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAA;AAClE,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAA;AACrD,OAAO,EAAE,oBAAoB,EAAuB,MAAM,uBAAuB,CAAA;AACjF,OAAO,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAA;AACtC,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,YAAY,CAAA;AAEpD,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;AAE/C,MAAM,OAAO,WAAY,SAAQ,gBAAsC;IAiBrE,IAAI,8BAA8B;QAChC,OAAO,IAAI,CAAC,4BAA4B,CAAC,yBAAyB,KAAK,KAAK,CAAA;IAC9E,CAAC;IAED,YAAY,IAAc;QACxB,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAA;QArB/B,cAAS,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAA;QAE/C,OAAE,GAAG,IAAI,IAAI,CAAY,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAA;QAElI,mBAAc,GAAG,IAAI,IAAI,CAAC,KAAK,IAAI,EAAE;YAC5C,IAAI,OAAoB,CAAA;YACxB,IAAI,IAAI,CAAC,4BAA4B,CAAC,gBAAgB,IAAI,IAAI,EAAE,CAAC;gBAC/D,OAAO,GAAG,IAAI,uBAAuB,CAAC,IAAI,CAAC,CAAA;YAC7C,CAAC;iBAAM,CAAC;gBACN,OAAO,GAAG,IAAI,sBAAsB,CAAC,IAAI,CAAC,CAAA;YAC5C,CAAC;YACD,MAAM,OAAO,CAAC,UAAU,EAAE,CAAA;YAC1B,OAAO,OAAO,CAAA;QAChB,CAAC,CAAC,CAAA;QACM,iBAAY,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IAQ5C,CAAC;IAED,IAAI,aAAa;QACf,OAAO,CAAC,MAAM,CAAC,CAAA;IACjB,CAAC;IAED,aAAa,CAAC,OAAsB,EAAE,MAAmE;QACvG,IAAI,iBAA2C,CAAA;QAC/C,MAAM,oBAAoB,GAAG,GAAG,EAAE;YAChC,IAAI,iBAAiB,IAAI,IAAI,EAAE,CAAC;gBAC9B,iBAAiB,GAAG,IAAI,iBAAiB,EAAE,CAAA;YAC7C,CAAC;YACD,OAAO,iBAAiB,CAAA;QAC1B,CAAC,CAAA;QAED,IAAI,MAA+B,CAAA;QACnC,MAAM,SAAS,GAAG,GAAG,EAAE;YACrB,IAAI,MAAM,IAAI,IAAI,EAAE,CAAC;gBACnB,MAAM,GAAG,IAAI,gBAAgB,CAAC,oBAAoB,EAAE,CAAC,CAAA;YACvD,CAAC;YACD,OAAO,MAAM,CAAA;QACf,CAAC,CAAA;QAED,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;YAC3B,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;gBACxB,SAAQ;YACV,CAAC;YAED,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;gBAC3C,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,IAAI,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,CAAA;YACzE,CAAC;iBAAM,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;gBAC/B,+CAA+C;gBAC/C,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,IAAI,kBAAkB,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,gBAAgB,CAAC,oBAAoB,EAAE,CAAC,CAAC,CAAC,CAAA;YACnI,CAAC;iBAAM,CAAC;gBACN,MAAM,WAAW,GAA8F,CAAC,GAAG,EAAE;oBACnH,QAAQ,IAAI,EAAE,CAAC;wBACb,KAAK,UAAU;4BACb,IAAI,CAAC;gCACH,OAAO,QAAQ,CAAC,mCAAmC,CAAC,CAAC,OAAO,CAAA;4BAC9D,CAAC;4BAAC,OAAO,CAAM,EAAE,CAAC;gCAChB,MAAM,IAAI,yBAAyB,CAAC,qGAAqG,CAAC,CAAC,KAAK,IAAI,CAAC,EAAE,CAAC,CAAA;4BAC1J,CAAC;wBAEH,KAAK,MAAM;4BACT,OAAO,UAAU,CAAA;wBAEnB,KAAK,KAAK;4BACR,OAAO,SAAS,CAAA;wBAElB,KAAK,YAAY;4BACf,OAAO,gBAAgB,CAAA;wBAEzB;4BACE,OAAO,IAAI,CAAA;oBACf,CAAC;gBACH,CAAC,CAAC,EAAE,CAAA;gBAEJ,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAK,WAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,CAAA;YACxI,CAAC;QACH,CAAC;IACH,CAAC;IAED,WAAW;QACT,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAA;IAC7B,CAAC;IAED,gBAAgB;QACd,OAAO,aAAa,CAAC,aAAa,CAAC,IAAI,CAAC,4BAA4B,CAAC,eAAe,EAAE,mBAAmB,EAAE,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,EAAE,KAAK,CAAC,gBAAgB,EAAE,CAAC,CAAA;IACzK,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAAY;QACvB,MAAM,SAAS,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAA;QAC9C,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;YACrC,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,iDAAiD,CAAC,CAAA;YACtE,OAAO,KAAK,CAAA;QACd,CAAC;QACD,IAAI,IAAI,CAAC,4BAA4B,CAAC,cAAc,KAAK,KAAK,EAAE,CAAC;YAC/D,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,uDAAuD,CAAC,CAAA;YAC5E,OAAO,KAAK,CAAA;QACd,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAA;QAC9D,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;YACpC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,2DAA2D,CAAC,CAAA;YACrH,OAAO,KAAK,CAAA;QACd,CAAC,CAAC,CAAA;QACF,OAAO,OAAO,CAAA;IAChB,CAAC;IAEO,KAAK,CAAC,KAAK,CAAC,IAAY;QAC9B,MAAM,WAAW,GAAuB;YACtC,IAAI,EAAE,IAAI;YACV,OAAO,EAAE,IAAI,CAAC,4BAA4B;SAC3C,CAAA;QAED,MAAM,mBAAmB,GAAG,MAAM,WAAW,CAAC,WAAW,EAAE,IAAI,CAAC,CAAA;QAChE,IAAI,CAAC,mBAAmB,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAClD,MAAM,IAAI,yBAAyB,CACjC,mKAAmK,CACpK,CAAA;QACH,CAAC;QACD,OAAO,mBAAmB,CAAA;IAC5B,CAAC;IAED,KAAK,CAAC,oBAAoB,CAAC,IAAY,EAAE,IAAU,EAAE,MAAc,EAAE,YAA4B,EAAE,uBAAwD;QACzJ,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAA;QAE5B,MAAM,KAAK,GAAkB,EAAE,CAAA;QAE/B,MAAM,cAAc,GAA2B;YAC7C,eAAe,EAAE,OAAO,CAAC,WAAW;YACpC,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,cAAc,EAAE,OAAO,CAAC,SAAS;SAClC,CAAA;QAED,IAAI,YAAY,IAAI,IAAI,EAAE,CAAC;YACzB,cAAc,CAAC,YAAY,GAAG,YAAY,CAAA;YAC1C,cAAc,CAAC,gBAAgB,GAAG,EAAE,CAAA;QACtC,CAAC;QAED,IAAI,OAAO,CAAC,WAAW,IAAI,IAAI,EAAE,CAAC;YAChC,cAAc,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAA;QAClD,CAAC;QACD,IAAI,IAAI,CAAC,4BAA4B,CAAC,eAAe,IAAI,IAAI,EAAE,CAAC;YAC9D,cAAc,CAAC,eAAe,GAAG,IAAI,CAAC,4BAA4B,CAAC,eAAe,CAAA;QACpF,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAA;QACzC,IAAI,QAAQ,IAAI,IAAI,EAAE,CAAC;YACrB,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QACtB,CAAC;QAED,MAAM,IAAI,GAAwB;YAChC,IAAI;YACJ,cAAc;YACd,WAAW,EAAE,OAAO,CAAC,YAAY,IAAI,OAAO,CAAC,YAAY;YACzD,cAAc,EAAE,OAAO,CAAC,mBAAmB,IAAI,OAAO,CAAC,4BAA4B,EAAE;YACrF,uBAAuB;YACvB,QAAQ;SACT,CAAA;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAA;QAC1B,MAAM,qBAAqB,GAAG,CAAC,mBAAmB,EAAE,IAAI,IAAI,IAAI,MAAM,CAAC,YAAY,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,CAAA;QAC1J,IAAI,iBAAiB,GAA6B,IAAI,CAAA;QACtD,8GAA8G;QAC9G,IAAI,qBAAqB,IAAI,IAAI,EAAE,CAAC;YAClC,MAAM,OAAO,GAAI,qBAA6C,CAAC,IAAI,CAAA;YACnE,IAAI,OAAO,IAAI,IAAI,EAAE,CAAC;gBACpB,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;YACrB,CAAC;YAED,MAAM,KAAK,GAAG,IAAI,CAAC,kBAAkB,CAAC,CAAA;YACtC,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAA;YACjC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,eAAe,IAAI,oBAAoB,CAAC,CAAA;YAC3D,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC,CAAA;YAC9D,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAA;YACjC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,4BAA4B,CAAC,eAAe,EAAE,eAAe,IAAI,oBAAoB,CAAC,CAAA;YACvG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,4BAA4B,CAAC,eAAe,EAAE,sBAAsB,IAAI,gBAAgB,CAAC,CAAA;YAE1G,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,UAAU,CAAC,CAAA;YACnE,IAAI,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;gBACvB,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAA;YAClD,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;YACxB,CAAC;YAED,iBAAiB,GAAG,IAAI,iBAAiB,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAAA;YAC7D,IAAI,MAAM,iBAAiB,CAAC,WAAW,CAAC,MAAM,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC;gBACnE,KAAK,CAAC,GAAG,EAAE,CAAA;gBACX,OAAM;YACR,CAAC;YACD,KAAK,CAAC,GAAG,EAAE,CAAA;QACb,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,oBAAoB,CAAC,CAAA;QACxC,MAAM,oBAAoB,CAAC,IAAI,CAAC,CAAA;QAChC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;QACvB,KAAK,CAAC,GAAG,EAAE,CAAA;QAEX,IAAI,iBAAiB,IAAI,IAAI,EAAE,CAAC;YAC9B,MAAM,iBAAiB,CAAC,IAAI,EAAE,CAAA;QAChC,CAAC;IACH,CAAC;IAEO,cAAc,CAAC,IAAY,EAAE,aAAa,GAAG,KAAK;QACxD,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;QACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,4BAA4B,CAAC,QAAQ,CAAA;QAC3D,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;YACtB,OAAO,KAAK,IAAI,aAAa,CAAA;QAC/B,CAAC;QACD,kEAAkE;QAClE,gGAAgG;QAChG,IAAI,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YAC7C,OAAO,IAAI,CAAA;QACb,CAAC;QACD,4BAA4B;QAC5B,IAAI,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACjF,OAAO,KAAK,CAAA;QACd,CAAC;QACD,OAAO,KAAK,IAAI,aAAa,CAAA;IAC/B,CAAC;IAES,8BAA8B,CAAC,WAA6B;QACpE,IAAI,IAAI,CAAC,4BAA4B,CAAC,qBAAqB,KAAK,KAAK,IAAI,IAAI,CAAC,4BAA4B,CAAC,cAAc,KAAK,KAAK,EAAE,CAAC;YACpI,OAAO,IAAI,CAAA;QACb,CAAC;QAED,OAAO,IAAI,CAAC,EAAE;YACZ,IAAI,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC9B,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;gBACpC,IAAI,SAAS,KAAK,WAAW,CAAC,SAAS,EAAE,CAAC;oBACxC,OAAO,IAAI,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAA;gBAC3D,CAAC;YACH,CAAC;YACD,OAAO,IAAI,CAAA;QACb,CAAC,CAAA;IACH,CAAC;IAES,KAAK,CAAC,OAAO,CAAC,WAA6B,EAAE,MAAe;QACpE,MAAM,WAAW,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,eAAe,MAAM,CAAA;QACzD,MAAM,eAAe,GAAG,IAAI,CAAC,4BAA4B,CAAC,cAAc,KAAK,KAAK,IAAI,IAAI,CAAC,4BAA4B,CAAC,qBAAqB,KAAK,KAAK,CAAA;QACvJ,IAAI,eAAe,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC7C,MAAM,IAAI,yBAAyB,CACjC,iJAAiJ,CAClJ,CAAA;QACH,CAAC;QACD,IAAI,IAAI,CAAC,4BAA4B,CAAC,qBAAqB,KAAK,KAAK,EAAE,CAAC;YACtE,GAAG,CAAC,IAAI,CACN,EAAE,GAAG,EAAE,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,EAAE,EACpE,8LAA8L,CAC/L,CAAA;YACD,OAAO,KAAK,CAAA;QACd,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,SAAS,CAAC,CAAA;QAClD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;gBACzB,MAAM,IAAI,CAAC,oBAAoB,CAC7B,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,WAAW,CAAC,EAC7C,WAAW,CAAC,IAAI,EAChB,WAAW,CAAC,MAAM,EAClB,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,EAClC,IAAI,CAAC,4BAA4B,CAAC,uBAAuB,CAC1D,CAAA;YACH,CAAC;iBAAM,IAAI,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC;gBACrC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAA;YAC3D,CAAC;QACH,CAAC;QAED,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,4BAA4B,CAAC,cAAc,KAAK,KAAK,EAAE,CAAC;YAC1E,OAAO,IAAI,CAAA;QACb,CAAC;QAED,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACpC,IAAI,CAAC,iBAAiB,CAAC,WAAW,CAAC,SAAS,EAAE,WAAW,EAAE,mBAAmB,CAAC;YAC/E,ibAAib;YACjb,IAAI,CAAC,iBAAiB,CAAC,WAAW,CAAC,SAAS,EAAE,aAAa,CAAC;SAC7D,CAAC,CAAA;QACF,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YACvC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;QACzB,CAAC;QAED,OAAO,IAAI,CAAA;IACb,CAAC;IAEO,iBAAiB,CAAC,OAAe,EAAE,GAAG,OAAiB;QAC7D,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,OAAO,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAA;IAC9G,CAAC;CACF","sourcesContent":["import { Arch, CopyFileTransformer, exists, FileTransformer, InvalidConfigurationError, log, walk } from \"builder-util\"\nimport { createRequire } from \"node:module\"\nimport { Nullish } from \"builder-util-runtime\"\nimport { isCI } from \"ci-info\"\nimport { createHash } from \"crypto\"\nimport { readdir } from \"fs/promises\"\nimport { Lazy } from \"lazy-val\"\nimport * as path from \"path\"\nimport { readAsarHeader } from \"./asar/asar.js\"\nimport { SignManager } from \"./codeSign/signManager.js\"\nimport { signWindows, WindowsSignOptions } from \"./codeSign/win/windowsCodeSign.js\"\nimport { WindowsSignAzureManager } from \"./codeSign/win/windowsSignAzureManager.js\"\nimport { FileCodeSigningInfo, WindowsSignToolManager } from \"./codeSign/win/windowsSignToolManager.js\"\nimport { AfterPackContext } from \"./configuration.js\"\nimport { DIR_TARGET, Platform, Target } from \"./core.js\"\nimport { RequestedExecutionLevel, WindowsConfiguration } from \"./options/winOptions.js\"\nimport { Packager } from \"./packager.js\"\nimport { chooseNotNull, PlatformPackager } from \"./platformPackager.js\"\nimport AppXTarget from \"./targets/win/AppxTarget.js\"\nimport MsiTarget from \"./targets/win/MsiTarget.js\"\nimport MsiWrappedTarget from \"./targets/win/MsiWrappedTarget.js\"\nimport { NsisTarget } from \"./targets/win/nsis/NsisTarget.js\"\nimport { AppPackageHelper, CopyElevateHelper } from \"./targets/win/nsis/nsisUtil.js\"\nimport { WebInstallerTarget } from \"./targets/win/nsis/WebInstallerTarget.js\"\nimport { createCommonTarget } from \"./targets/targetFactory.js\"\nimport { BuildCacheManager, digest } from \"./util/cacheManager.js\"\nimport { isBuildCacheEnabled } from \"./util/flags.js\"\nimport { editWindowsResources, ResourceEditOptions } from \"./util/win/resEdit.js\"\nimport { time } from \"./util/timer.js\"\nimport { getWindowsVm, VmManager } from \"./vm/vm.js\"\n\nconst _require = createRequire(import.meta.url)\n\nexport class WinPackager extends PlatformPackager<WindowsConfiguration> {\n  _iconPath = new Lazy(() => this.getOrConvertIcon(\"ico\"))\n\n  readonly vm = new Lazy<VmManager>(() => (process.platform === \"win32\" ? Promise.resolve(new VmManager()) : getWindowsVm(this.debugLogger)))\n\n  readonly signingManager = new Lazy(async () => {\n    let manager: SignManager\n    if (this.platformSpecificBuildOptions.azureSignOptions != null) {\n      manager = new WindowsSignAzureManager(this)\n    } else {\n      manager = new WindowsSignToolManager(this)\n    }\n    await manager.initialize()\n    return manager\n  })\n  private signingQueue = Promise.resolve(true)\n\n  get isForceCodeSigningVerification(): boolean {\n    return this.platformSpecificBuildOptions.verifyUpdateCodeSignature !== false\n  }\n\n  constructor(info: Packager) {\n    super(info, Platform.WINDOWS)\n  }\n\n  get defaultTarget(): Array<string> {\n    return [\"nsis\"]\n  }\n\n  createTargets(targets: Array<string>, mapper: (name: string, factory: (outDir: string) => Target) => void): void {\n    let copyElevateHelper: CopyElevateHelper | null\n    const getCopyElevateHelper = () => {\n      if (copyElevateHelper == null) {\n        copyElevateHelper = new CopyElevateHelper()\n      }\n      return copyElevateHelper\n    }\n\n    let helper: AppPackageHelper | null\n    const getHelper = () => {\n      if (helper == null) {\n        helper = new AppPackageHelper(getCopyElevateHelper())\n      }\n      return helper\n    }\n\n    for (const name of targets) {\n      if (name === DIR_TARGET) {\n        continue\n      }\n\n      if (name === \"nsis\" || name === \"portable\") {\n        mapper(name, outDir => new NsisTarget(this, outDir, name, getHelper()))\n      } else if (name === \"nsis-web\") {\n        // package file format differs from nsis target\n        mapper(name, outDir => new WebInstallerTarget(this, path.join(outDir, name), name, new AppPackageHelper(getCopyElevateHelper())))\n      } else {\n        const targetClass: typeof NsisTarget | typeof AppXTarget | typeof MsiTarget | typeof MsiWrappedTarget | null = (() => {\n          switch (name) {\n            case \"squirrel\":\n              try {\n                return _require(\"electron-builder-squirrel-windows\").default\n              } catch (e: any) {\n                throw new InvalidConfigurationError(`Module electron-builder-squirrel-windows must be installed in addition to build Squirrel.Windows: ${e.stack || e}`)\n              }\n\n            case \"appx\":\n              return AppXTarget\n\n            case \"msi\":\n              return MsiTarget\n\n            case \"msiwrapped\":\n              return MsiWrappedTarget\n\n            default:\n              return null\n          }\n        })()\n\n        mapper(name, outDir => (targetClass === null ? createCommonTarget(name, outDir, this) : new (targetClass as any)(this, outDir, name)))\n      }\n    }\n  }\n\n  getIconPath() {\n    return this._iconPath.value\n  }\n\n  doGetCscPassword(): string | Nullish {\n    return chooseNotNull(chooseNotNull(this.platformSpecificBuildOptions.signtoolOptions?.certificatePassword, process.env.WIN_CSC_KEY_PASSWORD), super.doGetCscPassword())\n  }\n\n  async signIf(file: string): Promise<boolean> {\n    const logFields = { file: log.filePath(file) }\n    if (!this.shouldSignFile(file, true)) {\n      log.info(logFields, \"file signing skipped via signExts configuration\")\n      return false\n    }\n    if (this.platformSpecificBuildOptions.signExecutable === false) {\n      log.info(logFields, \"file signing skipped via signExecutable configuration\")\n      return false\n    }\n\n    const promise = this.signingQueue.then(() => this._sign(file))\n    this.signingQueue = promise.catch(e => {\n      log.warn({ file: log.filePath(file), error: e.message }, \"signing failed for file, queue will continue to next file\")\n      return false\n    })\n    return promise\n  }\n\n  private async _sign(file: string): Promise<boolean> {\n    const signOptions: WindowsSignOptions = {\n      path: file,\n      options: this.platformSpecificBuildOptions,\n    }\n\n    const didSignSuccessfully = await signWindows(signOptions, this)\n    if (!didSignSuccessfully && this.forceCodeSigning) {\n      throw new InvalidConfigurationError(\n        `App is not signed and \"forceCodeSigning\" is set to true, please ensure that code signing configuration is correct, please see https://electron.build/code-signing`\n      )\n    }\n    return didSignSuccessfully\n  }\n\n  async signAndEditResources(file: string, arch: Arch, outDir: string, internalName?: string | null, requestedExecutionLevel?: RequestedExecutionLevel | null) {\n    const appInfo = this.appInfo\n\n    const files: Array<string> = []\n\n    const versionStrings: Record<string, string> = {\n      FileDescription: appInfo.productName,\n      ProductName: appInfo.productName,\n      LegalCopyright: appInfo.copyright,\n    }\n\n    if (internalName != null) {\n      versionStrings.InternalName = internalName\n      versionStrings.OriginalFilename = \"\"\n    }\n\n    if (appInfo.companyName != null) {\n      versionStrings.CompanyName = appInfo.companyName\n    }\n    if (this.platformSpecificBuildOptions.legalTrademarks != null) {\n      versionStrings.LegalTrademarks = this.platformSpecificBuildOptions.legalTrademarks\n    }\n\n    const iconPath = await this.getIconPath()\n    if (iconPath != null) {\n      files.push(iconPath)\n    }\n\n    const opts: ResourceEditOptions = {\n      file,\n      versionStrings,\n      fileVersion: appInfo.shortVersion || appInfo.buildVersion,\n      productVersion: appInfo.shortVersionWindows || appInfo.getVersionInWeirdWindowsForm(),\n      requestedExecutionLevel,\n      iconPath,\n    }\n\n    const config = this.config\n    const cscInfoForCacheDigest = !isBuildCacheEnabled() || isCI || config.electronDist != null ? null : await (await this.signingManager.value).cscInfo.value\n    let buildCacheManager: BuildCacheManager | null = null\n    // resources editing doesn't change executable for the same input and executed quickly - no need to complicate\n    if (cscInfoForCacheDigest != null) {\n      const cscFile = (cscInfoForCacheDigest as FileCodeSigningInfo).file\n      if (cscFile != null) {\n        files.push(cscFile)\n      }\n\n      const timer = time(\"executable cache\")\n      const hash = createHash(\"sha512\")\n      hash.update(config.electronVersion || \"no electronVersion\")\n      hash.update(JSON.stringify(this.platformSpecificBuildOptions))\n      hash.update(JSON.stringify(opts))\n      hash.update(this.platformSpecificBuildOptions.signtoolOptions?.certificateSha1 || \"no certificateSha1\")\n      hash.update(this.platformSpecificBuildOptions.signtoolOptions?.certificateSubjectName || \"no subjectName\")\n\n      const asar = path.resolve(this.getResourcesDir(outDir), \"app.asar\")\n      if (await exists(asar)) {\n        hash.update((await readAsarHeader(asar)).header)\n      } else {\n        hash.update(\"no asar\")\n      }\n\n      buildCacheManager = new BuildCacheManager(outDir, file, arch)\n      if (await buildCacheManager.copyIfValid(await digest(hash, files))) {\n        timer.end()\n        return\n      }\n      timer.end()\n    }\n\n    const timer = time(\"resource-edit&sign\")\n    await editWindowsResources(opts)\n    await this.signIf(file)\n    timer.end()\n\n    if (buildCacheManager != null) {\n      await buildCacheManager.save()\n    }\n  }\n\n  private shouldSignFile(file: string, fallbackValue = false): boolean {\n    const isExe = file.endsWith(\".exe\")\n    const signExts = this.platformSpecificBuildOptions.signExts\n    if (!signExts?.length) {\n      return isExe || fallbackValue\n    }\n    // process patterns ( !exe => exclude .exe, .dll => include .dll )\n    // we process first to allow literal negatives in case a filename matches \"help!.txt\" or similar\n    if (signExts.some(ext => file.endsWith(ext))) {\n      return true\n    }\n    // process negative patterns\n    if (signExts.some(ext => ext.startsWith(\"!\") && file.endsWith(ext.substring(1)))) {\n      return false\n    }\n    return isExe || fallbackValue\n  }\n\n  protected createTransformerForExtraFiles(packContext: AfterPackContext): FileTransformer | null {\n    if (this.platformSpecificBuildOptions.signAndEditExecutable === false || this.platformSpecificBuildOptions.signExecutable === false) {\n      return null\n    }\n\n    return file => {\n      if (this.shouldSignFile(file)) {\n        const parentDir = path.dirname(file)\n        if (parentDir !== packContext.appOutDir) {\n          return new CopyFileTransformer(file => this.signIf(file))\n        }\n      }\n      return null\n    }\n  }\n\n  protected async signApp(packContext: AfterPackContext, isAsar: boolean): Promise<boolean> {\n    const exeFileName = `${this.appInfo.productFilename}.exe`\n    const signingDisabled = this.platformSpecificBuildOptions.signExecutable === false || this.platformSpecificBuildOptions.signAndEditExecutable === false\n    if (signingDisabled && this.forceCodeSigning) {\n      throw new InvalidConfigurationError(\n        \"Signing is disabled (`signExecutable: false` or `signAndEditExecutable: false`) but `forceCodeSigning` is enabled. Remove one of these options.\"\n      )\n    }\n    if (this.platformSpecificBuildOptions.signAndEditExecutable === false) {\n      log.info(\n        { exe: log.filePath(path.join(packContext.appOutDir, exeFileName)) },\n        \"executable resource editing and code signing skipped — signAndEditExecutable is false. To skip only code signing while keeping icon and metadata applied, use signExecutable: false instead.\"\n      )\n      return false\n    }\n\n    const files = await readdir(packContext.appOutDir)\n    for (const file of files) {\n      if (file === exeFileName) {\n        await this.signAndEditResources(\n          path.join(packContext.appOutDir, exeFileName),\n          packContext.arch,\n          packContext.outDir,\n          path.basename(exeFileName, \".exe\"),\n          this.platformSpecificBuildOptions.requestedExecutionLevel\n        )\n      } else if (this.shouldSignFile(file)) {\n        await this.signIf(path.join(packContext.appOutDir, file))\n      }\n    }\n\n    if (!isAsar || this.platformSpecificBuildOptions.signExecutable === false) {\n      return true\n    }\n\n    const filesToSign = await Promise.all([\n      this.walkSignableFiles(packContext.appOutDir, \"resources\", \"app.asar.unpacked\"),\n      // Note: The `swiftshader` directory is absent in modern electron versions. `swiftshader/` held Chromium's legacy SwiftShader GL fallback (libEGL.dll / libGLESv2.dll), removed in Chromium 102 (Electron 19+) in favor of SwANGLE (ANGLE + SwiftShader Vulkan). This is kept here only for backwards compat with older Electron; `walk` no-ops on a missing dir (readdir ENOENT is swallowed), so this is harmless when the directory is absent.\n      this.walkSignableFiles(packContext.appOutDir, \"swiftshader\"),\n    ])\n    for (const file of filesToSign.flat(1)) {\n      await this.signIf(file)\n    }\n\n    return true\n  }\n\n  private walkSignableFiles(baseDir: string, ...subpath: string[]): Promise<string[]> {\n    return walk(path.join(baseDir, ...subpath), (file, stat) => stat.isDirectory() || this.shouldSignFile(file))\n  }\n}\n"]}

package/helpers/package.json

@@ -0,0 +1,6 @@
+{
+  "name": "@electron-builder/app-builder-lib-helpers",
+  "version": "0.0.0",
+  "private": true,
+  "type": "commonjs"
+}

package/helpers/remote-rebuild.js

@@ -25,11 +25,9 @@ const rebuilder = rebuilder => {
     })
 }
 
-const main = () => {
+const main = async () => {
   const options = JSON.parse(process.argv[2])
-
-  const dynamicImport = require("./dynamic-import").dynamicImportMaybe
-  return dynamicImport("@electron/rebuild").then(module => {
+  return import("@electron/rebuild").then(module => {
     const { rebuild } = module
     return rebuilder(rebuild(options))
   })

package/package.json

@@ -1,10 +1,23 @@
 {
   "name": "app-builder-lib",
   "description": "electron-builder lib",
-  "version": "26.15.2",
-  "main": "out/index.js",
+  "version": "27.0.0-alpha.0",
+  "type": "module",
+  "main": "./dist/index.js",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js",
+      "require": "./dist/index.js"
+    },
+    "./internal": {
+      "types": "./dist/indexInternal.d.ts",
+      "import": "./dist/indexInternal.js",
+      "require": "./dist/indexInternal.js"
+    }
+  },
   "files": [
-    "out",
+    "dist",
     "templates",
     "helpers",
     "scheme.json",
@@ -16,7 +29,7 @@
     "directory": "packages/app-builder-lib"
   },
   "engines": {
-    "node": ">=14.0.0"
+    "node": ">=22.12.0"
   },
   "keywords": [
     "electron",
@@ -60,14 +73,13 @@
     "@types/fs-extra": "9.0.13",
     "ajv": "^8.18.0",
     "asn1js": "^3.0.10",
-    "async-exit-hook": "^2.0.1",
     "chromium-pickle-js": "^0.2.0",
     "ci-info": "4.3.1",
     "debug": "^4.3.4",
     "dotenv": "^16.4.5",
     "dotenv-expand": "^11.0.6",
     "ejs": "^3.1.8",
-    "fs-extra": "^10.1.0",
+    "fs-extra": "^11.3.0",
     "hosted-git-info": "^4.1.0",
     "isbinaryfile": "^5.0.0",
     "jiti": "^2.4.2",
@@ -85,31 +97,12 @@
     "tiny-async-pool": "1.3.0",
     "unzipper": "^0.12.3",
     "which": "^5.0.0",
-    "builder-util-runtime": "9.7.0",
-    "electron-publish": "26.15.1",
-    "builder-util": "26.15.0"
+    "builder-util": "27.0.0-alpha.0",
+    "builder-util-runtime": "10.0.0-alpha.0",
+    "electron-publish": "27.0.0-alpha.0"
   },
   "///": "babel in devDependencies for proton tests",
   "devDependencies": {
-    "@babel/core": "7.24.9",
-    "@babel/plugin-proposal-class-properties": "7.18.6",
-    "@babel/plugin-proposal-decorators": "7.24.7",
-    "@babel/plugin-proposal-do-expressions": "7.24.7",
-    "@babel/plugin-proposal-export-default-from": "7.24.7",
-    "@babel/plugin-proposal-export-namespace-from": "7.18.9",
-    "@babel/plugin-proposal-function-bind": "7.24.7",
-    "@babel/plugin-proposal-function-sent": "7.24.7",
-    "@babel/plugin-proposal-json-strings": "7.18.6",
-    "@babel/plugin-proposal-logical-assignment-operators": "7.20.7",
-    "@babel/plugin-proposal-nullish-coalescing-operator": "7.18.6",
-    "@babel/plugin-proposal-numeric-separator": "7.18.6",
-    "@babel/plugin-proposal-optional-chaining": "7.21.0",
-    "@babel/plugin-proposal-pipeline-operator": "7.24.7",
-    "@babel/plugin-proposal-throw-expressions": "7.24.7",
-    "@babel/plugin-syntax-dynamic-import": "7.8.3",
-    "@babel/plugin-syntax-import-meta": "7.10.4",
-    "@babel/preset-env": "7.24.8",
-    "@babel/preset-react": "7.24.7",
     "@types/debug": "4.1.7",
     "@types/ejs": "3.1.0",
     "@types/hosted-git-info": "3.0.2",
@@ -121,13 +114,17 @@
     "@types/unzipper": "^0.10.11",
     "@types/which": "^3.0.4",
     "toml": "^3.0.0",
-    "electron-builder-squirrel-windows": "26.15.2",
-    "dmg-builder": "26.15.2"
+    "dmg-builder": "27.0.0-alpha.0",
+    "electron-builder-squirrel-windows": "27.0.0-alpha.0"
   },
   "peerDependencies": {
-    "dmg-builder": "26.15.2",
-    "electron-builder-squirrel-windows": "26.15.2"
+    "dmg-builder": "27.0.0-alpha.0",
+    "electron-builder-squirrel-windows": "27.0.0-alpha.0"
   },
   "//": "electron-builder-squirrel-windows and dmg-builder added as dev dep for tests (as otherwise `require` doesn't work using Yarn 2)",
-  "typings": "./out/index.d.ts"
+  "types": "./dist/index.d.ts",
+  "scripts": {
+    "build": "tsc --build tsconfig.build.json --force",
+    "watch": "tsc --build tsconfig.build.json --watch"
+  }
 }