app-builder-lib 27.0.0-alpha.2 → 27.0.0-alpha.4

package/dist/targets/linux/appimage/appLauncher.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"appLauncher.d.ts","sourceRoot":"","sources":["../../../../src/targets/linux/appimage/appLauncher.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAA;AAY1D,wBAAsB,SAAS,CAAC,OAAO,EAAE,sBAAsB,GAAG,OAAO,CAAC,IAAI,CAAC,CA2C9E;AAED,wBAAsB,aAAa,CACjC,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,IAAI,CAAC,sBAAsB,CAAC,SAAS,CAAC,EAAE,kBAAkB,GAAG,aAAa,GAAG,gBAAgB,CAAC,GACtG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAuDxB"}
+{"version":3,"file":"appLauncher.d.ts","sourceRoot":"","sources":["../../../../src/targets/linux/appimage/appLauncher.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAA;AAK1D,wBAAsB,SAAS,CAAC,OAAO,EAAE,sBAAsB,GAAG,OAAO,CAAC,IAAI,CAAC,CA2C9E;AAED,wBAAsB,aAAa,CACjC,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,IAAI,CAAC,sBAAsB,CAAC,SAAS,CAAC,EAAE,kBAAkB,GAAG,aAAa,GAAG,gBAAgB,CAAC,GACtG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAuDxB"}

package/dist/targets/linux/appimage/appLauncher.js

@@ -1,14 +1,8 @@
-import * as path from "path";
+import path from "path";
 import fs from "fs-extra";
-import { copyOrLinkFile, log } from "builder-util";
+import { copyOrLinkFile, log, escapeForXml } from "builder-util";
 const ICON_DIR_RELATIVE_PATH = "usr/share/icons/hicolor";
 const MIME_TYPE_DIR_RELATIVE_PATH = "usr/share/mime/packages";
-/**
- * Escapes special XML characters to prevent injection
- */
-function xmlEscape(str) {
-    return str.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&apos;");
-}
 export async function copyIcons(options) {
     const { stageDir, options: configuration } = options;
     const iconCommonDir = path.join(stageDir, ICON_DIR_RELATIVE_PATH);
@@ -60,8 +54,8 @@ export async function copyMimeTypes(stageDir, options) {
             continue;
         }
         // XML-escape to prevent injection
-        mimeTypeParts.push(`<mime-type type="${xmlEscape(fileAssociation.mimeType)}">`);
-        mimeTypeParts.push(`  <comment>${xmlEscape(productName)} document</comment>`);
+        mimeTypeParts.push(`<mime-type type="${escapeForXml(fileAssociation.mimeType)}">`);
+        mimeTypeParts.push(`  <comment>${escapeForXml(productName)} document</comment>`);
         // Handle extension(s)
         const extensions = Array.isArray(fileAssociation.ext) ? fileAssociation.ext : [fileAssociation.ext];
         for (const ext of extensions) {
@@ -70,7 +64,7 @@ export async function copyMimeTypes(stageDir, options) {
                 log.warn({ extension: ext }, `file extension contains unexpected characters and will be skipped`);
                 continue;
             }
-            mimeTypeParts.push(`  <glob pattern="*.${xmlEscape(ext)}"/>`);
+            mimeTypeParts.push(`  <glob pattern="*.${escapeForXml(ext)}"/>`);
         }
         mimeTypeParts.push('  <generic-icon name="x-office-document"/>');
         mimeTypeParts.push("</mime-type>");

package/dist/targets/linux/appimage/appLauncher.js.map

@@ -1 +1 @@
-{"version":3,"file":"appLauncher.js","sourceRoot":"","sources":["../../../../src/targets/linux/appimage/appLauncher.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,IAAI,MAAM,MAAM,CAAA;AAC5B,OAAO,EAAE,MAAM,UAAU,CAAA;AACzB,OAAO,EAAE,cAAc,EAAE,GAAG,EAAE,MAAM,cAAc,CAAA;AAGlD,MAAM,sBAAsB,GAAG,yBAAyB,CAAA;AACxD,MAAM,2BAA2B,GAAG,yBAAyB,CAAA;AAE7D;;GAEG;AACH,SAAS,SAAS,CAAC,GAAW;IAC5B,OAAO,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;AAC/H,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,OAA+B;IAC7D,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,aAAa,EAAE,GAAG,OAAO,CAAA;IACpD,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,sBAAsB,CAAC,CAAA;IAEjE,MAAM,EAAE,CAAC,SAAS,CAAC,aAAa,CAAC,CAAA;IAEjC,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,CAAA;IACjC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAA;IAC/D,CAAC;IAED,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;IAClD,MAAM,YAAY,GAAG,GAAG,aAAa,CAAC,cAAc,GAAG,cAAc,EAAE,CAAA;IACvE,MAAM,YAAY,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAA;IAErC,MAAM,YAAY,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE;QACpC,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,cAAc,EAAE,CAAC;YAC/C,MAAM,IAAI,KAAK,CAAC,oDAAoD,cAAc,aAAa,IAAI,CAAC,IAAI,EAAE,CAAC,CAAA;QAC7G,CAAC;QACD,IAAI,WAAmB,CAAA;QAEvB,IAAI,cAAc,KAAK,MAAM,EAAE,CAAC;YAC9B,0EAA0E;YAC1E,WAAW,GAAG,eAAe,CAAA;QAC/B,CAAC;aAAM,CAAC;YACN,WAAW,GAAG,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,OAAO,CAAA;QAChD,CAAC;QAED,MAAM,uBAAuB,GAAG,IAAI,CAAC,IAAI,CAAC,sBAAsB,EAAE,WAAW,EAAE,YAAY,CAAC,CAAA;QAC5F,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,WAAW,CAAC,CAAA;QACrD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,CAAA;QACjD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,uBAAuB,EAAE,CAAA;IAC7D,CAAC,CAAC,CAAA;IACF,MAAM,OAAO,CAAC,GAAG,CACf,YAAY,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE;QACrD,MAAM,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,CAAA;QAC3B,MAAM,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;IAC3C,CAAC,CAAC,CACH,CAAA;IACD,8CAA8C;IAC9C,MAAM,EAAE,uBAAuB,EAAE,GAAG,YAAY,CAAC,YAAY,CAAC,CAAA;IAC9D,MAAM,EAAE,CAAC,OAAO,CAAC,uBAAuB,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC,CAAA;IAC5E,MAAM,EAAE,CAAC,OAAO,CAAC,uBAAuB,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAA;AAC5E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,QAAgB,EAChB,OAAuG;IAEvG,MAAM,EAAE,gBAAgB,EAAE,WAAW,EAAE,cAAc,EAAE,GAAG,OAAO,CAAA;IAEjE,IAAI,CAAC,gBAAgB,IAAI,gBAAgB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvD,OAAO,IAAI,CAAA;IACb,CAAC;IAED,IAAI,CAAC,gBAAgB,IAAI,gBAAgB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvD,OAAO,IAAI,CAAA;IACb,CAAC;IAED,MAAM,aAAa,GAAa,EAAE,CAAA;IAElC,KAAK,MAAM,eAAe,IAAI,gBAAgB,EAAE,CAAC;QAC/C,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,CAAC;YAC9B,SAAQ;QACV,CAAC;QAED,kCAAkC;QAClC,aAAa,CAAC,IAAI,CAAC,oBAAoB,SAAS,CAAC,eAAe,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAA;QAC/E,aAAa,CAAC,IAAI,CAAC,cAAc,SAAS,CAAC,WAAW,CAAC,qBAAqB,CAAC,CAAA;QAE7E,sBAAsB;QACtB,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,GAAG,CAAC,CAAA;QAEnG,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;YAC7B,0DAA0D;YAC1D,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBAClC,GAAG,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,mEAAmE,CAAC,CAAA;gBACjG,SAAQ;YACV,CAAC;YACD,aAAa,CAAC,IAAI,CAAC,sBAAsB,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;QAC/D,CAAC;QAED,aAAa,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAA;QAChE,aAAa,CAAC,IAAI,CAAC,cAAc,CAAC,CAAA;IACpC,CAAC;IAED,+CAA+C;IAC/C,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/B,OAAO,IAAI,CAAA;IACb,CAAC;IAED,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,2BAA2B,CAAC,CAAA;IACpE,MAAM,QAAQ,GAAG,GAAG,cAAc,MAAM,CAAA;IACxC,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAA;IAErD,MAAM,EAAE,CAAC,SAAS,CAAC,WAAW,CAAC,CAAA;IAE/B,MAAM,UAAU,GAAG,CAAC,uBAAuB,EAAE,2EAA2E,EAAE,GAAG,aAAa,EAAE,cAAc,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAEtK,6EAA6E;IAC7E,MAAM,EAAE,CAAC,SAAS,CAAC,YAAY,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IAE7D,OAAO,IAAI,CAAC,IAAI,CAAC,2BAA2B,EAAE,QAAQ,CAAC,CAAA;AACzD,CAAC","sourcesContent":["import * as path from \"path\"\nimport fs from \"fs-extra\"\nimport { copyOrLinkFile, log } from \"builder-util\"\nimport { AppImageBuilderOptions } from \"./appImageUtil.js\"\n\nconst ICON_DIR_RELATIVE_PATH = \"usr/share/icons/hicolor\"\nconst MIME_TYPE_DIR_RELATIVE_PATH = \"usr/share/mime/packages\"\n\n/**\n * Escapes special XML characters to prevent injection\n */\nfunction xmlEscape(str: string): string {\n  return str.replace(/&/g, \"&amp;\").replace(/</g, \"&lt;\").replace(/>/g, \"&gt;\").replace(/\"/g, \"&quot;\").replace(/'/g, \"&apos;\")\n}\n\nexport async function copyIcons(options: AppImageBuilderOptions): Promise<void> {\n  const { stageDir, options: configuration } = options\n  const iconCommonDir = path.join(stageDir, ICON_DIR_RELATIVE_PATH)\n\n  await fs.ensureDir(iconCommonDir)\n\n  const icons = configuration.icons\n  if (!icons || icons.length === 0) {\n    throw new Error(\"At least one icon is required for AppImage\")\n  }\n\n  const iconExtWithDot = path.extname(icons[0].file)\n  const iconFileName = `${configuration.executableName}${iconExtWithDot}`\n  const maxIconIndex = icons.length - 1\n\n  const iconInfoList = icons.map(icon => {\n    if (path.extname(icon.file) !== iconExtWithDot) {\n      throw new Error(`All icons must have the same extension: expected ${iconExtWithDot}, but got ${icon.file}`)\n    }\n    let iconSizeDir: string\n\n    if (iconExtWithDot === \".svg\") {\n      // SVG icons go in scalable/apps directory per freedesktop icon theme spec\n      iconSizeDir = \"scalable/apps\"\n    } else {\n      iconSizeDir = `${icon.size}x${icon.size}/apps`\n    }\n\n    const iconRelativeToStageFile = path.join(ICON_DIR_RELATIVE_PATH, iconSizeDir, iconFileName)\n    const iconDir = path.join(iconCommonDir, iconSizeDir)\n    const iconFile = path.join(iconDir, iconFileName)\n    return { icon, iconDir, iconFile, iconRelativeToStageFile }\n  })\n  await Promise.all(\n    iconInfoList.map(async ({ icon, iconDir, iconFile }) => {\n      await fs.ensureDir(iconDir)\n      await copyOrLinkFile(icon.file, iconFile)\n    })\n  )\n  // Create symlinks for the last (largest) icon\n  const { iconRelativeToStageFile } = iconInfoList[maxIconIndex]\n  await fs.symlink(iconRelativeToStageFile, path.join(stageDir, iconFileName))\n  await fs.symlink(iconRelativeToStageFile, path.join(stageDir, \".DirIcon\"))\n}\n\nexport async function copyMimeTypes(\n  stageDir: string,\n  options: Pick<AppImageBuilderOptions[\"options\"], \"fileAssociations\" | \"productName\" | \"executableName\">\n): Promise<string | null> {\n  const { fileAssociations, productName, executableName } = options\n\n  if (!fileAssociations || fileAssociations.length === 0) {\n    return null\n  }\n\n  if (!fileAssociations || fileAssociations.length === 0) {\n    return null\n  }\n\n  const mimeTypeParts: string[] = []\n\n  for (const fileAssociation of fileAssociations) {\n    if (!fileAssociation.mimeType) {\n      continue\n    }\n\n    // XML-escape to prevent injection\n    mimeTypeParts.push(`<mime-type type=\"${xmlEscape(fileAssociation.mimeType)}\">`)\n    mimeTypeParts.push(`  <comment>${xmlEscape(productName)} document</comment>`)\n\n    // Handle extension(s)\n    const extensions = Array.isArray(fileAssociation.ext) ? fileAssociation.ext : [fileAssociation.ext]\n\n    for (const ext of extensions) {\n      // Validate extension doesn't contain dangerous characters\n      if (!/^[a-zA-Z0-9_-]+$/.test(ext)) {\n        log.warn({ extension: ext }, `file extension contains unexpected characters and will be skipped`)\n        continue\n      }\n      mimeTypeParts.push(`  <glob pattern=\"*.${xmlEscape(ext)}\"/>`)\n    }\n\n    mimeTypeParts.push('  <generic-icon name=\"x-office-document\"/>')\n    mimeTypeParts.push(\"</mime-type>\")\n  }\n\n  // If no mime-types were generated, return null\n  if (mimeTypeParts.length === 0) {\n    return null\n  }\n\n  const mimeTypeDir = path.join(stageDir, MIME_TYPE_DIR_RELATIVE_PATH)\n  const fileName = `${executableName}.xml`\n  const mimeTypeFile = path.join(mimeTypeDir, fileName)\n\n  await fs.ensureDir(mimeTypeDir)\n\n  const xmlContent = ['<?xml version=\"1.0\"?>', '<mime-info xmlns=\"http://www.freedesktop.org/standards/shared-mime-info\">', ...mimeTypeParts, \"</mime-info>\"].join(\"\\n\")\n\n  // Use 0o644 (rw-r--r--) instead of 0o666 to avoid world-writable permissions\n  await fs.writeFile(mimeTypeFile, xmlContent, { mode: 0o644 })\n\n  return path.join(MIME_TYPE_DIR_RELATIVE_PATH, fileName)\n}\n"]}
+{"version":3,"file":"appLauncher.js","sourceRoot":"","sources":["../../../../src/targets/linux/appimage/appLauncher.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,MAAM,CAAA;AACvB,OAAO,EAAE,MAAM,UAAU,CAAA;AACzB,OAAO,EAAE,cAAc,EAAE,GAAG,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAGhE,MAAM,sBAAsB,GAAG,yBAAyB,CAAA;AACxD,MAAM,2BAA2B,GAAG,yBAAyB,CAAA;AAE7D,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,OAA+B;IAC7D,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,aAAa,EAAE,GAAG,OAAO,CAAA;IACpD,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,sBAAsB,CAAC,CAAA;IAEjE,MAAM,EAAE,CAAC,SAAS,CAAC,aAAa,CAAC,CAAA;IAEjC,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,CAAA;IACjC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAA;IAC/D,CAAC;IAED,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;IAClD,MAAM,YAAY,GAAG,GAAG,aAAa,CAAC,cAAc,GAAG,cAAc,EAAE,CAAA;IACvE,MAAM,YAAY,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAA;IAErC,MAAM,YAAY,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE;QACpC,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,cAAc,EAAE,CAAC;YAC/C,MAAM,IAAI,KAAK,CAAC,oDAAoD,cAAc,aAAa,IAAI,CAAC,IAAI,EAAE,CAAC,CAAA;QAC7G,CAAC;QACD,IAAI,WAAmB,CAAA;QAEvB,IAAI,cAAc,KAAK,MAAM,EAAE,CAAC;YAC9B,0EAA0E;YAC1E,WAAW,GAAG,eAAe,CAAA;QAC/B,CAAC;aAAM,CAAC;YACN,WAAW,GAAG,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,OAAO,CAAA;QAChD,CAAC;QAED,MAAM,uBAAuB,GAAG,IAAI,CAAC,IAAI,CAAC,sBAAsB,EAAE,WAAW,EAAE,YAAY,CAAC,CAAA;QAC5F,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,WAAW,CAAC,CAAA;QACrD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,CAAA;QACjD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,uBAAuB,EAAE,CAAA;IAC7D,CAAC,CAAC,CAAA;IACF,MAAM,OAAO,CAAC,GAAG,CACf,YAAY,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE;QACrD,MAAM,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,CAAA;QAC3B,MAAM,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;IAC3C,CAAC,CAAC,CACH,CAAA;IACD,8CAA8C;IAC9C,MAAM,EAAE,uBAAuB,EAAE,GAAG,YAAY,CAAC,YAAY,CAAC,CAAA;IAC9D,MAAM,EAAE,CAAC,OAAO,CAAC,uBAAuB,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC,CAAA;IAC5E,MAAM,EAAE,CAAC,OAAO,CAAC,uBAAuB,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAA;AAC5E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,QAAgB,EAChB,OAAuG;IAEvG,MAAM,EAAE,gBAAgB,EAAE,WAAW,EAAE,cAAc,EAAE,GAAG,OAAO,CAAA;IAEjE,IAAI,CAAC,gBAAgB,IAAI,gBAAgB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvD,OAAO,IAAI,CAAA;IACb,CAAC;IAED,IAAI,CAAC,gBAAgB,IAAI,gBAAgB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvD,OAAO,IAAI,CAAA;IACb,CAAC;IAED,MAAM,aAAa,GAAa,EAAE,CAAA;IAElC,KAAK,MAAM,eAAe,IAAI,gBAAgB,EAAE,CAAC;QAC/C,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,CAAC;YAC9B,SAAQ;QACV,CAAC;QAED,kCAAkC;QAClC,aAAa,CAAC,IAAI,CAAC,oBAAoB,YAAY,CAAC,eAAe,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAA;QAClF,aAAa,CAAC,IAAI,CAAC,cAAc,YAAY,CAAC,WAAW,CAAC,qBAAqB,CAAC,CAAA;QAEhF,sBAAsB;QACtB,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,GAAG,CAAC,CAAA;QAEnG,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;YAC7B,0DAA0D;YAC1D,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBAClC,GAAG,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,mEAAmE,CAAC,CAAA;gBACjG,SAAQ;YACV,CAAC;YACD,aAAa,CAAC,IAAI,CAAC,sBAAsB,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;QAClE,CAAC;QAED,aAAa,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAA;QAChE,aAAa,CAAC,IAAI,CAAC,cAAc,CAAC,CAAA;IACpC,CAAC;IAED,+CAA+C;IAC/C,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/B,OAAO,IAAI,CAAA;IACb,CAAC;IAED,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,2BAA2B,CAAC,CAAA;IACpE,MAAM,QAAQ,GAAG,GAAG,cAAc,MAAM,CAAA;IACxC,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAA;IAErD,MAAM,EAAE,CAAC,SAAS,CAAC,WAAW,CAAC,CAAA;IAE/B,MAAM,UAAU,GAAG,CAAC,uBAAuB,EAAE,2EAA2E,EAAE,GAAG,aAAa,EAAE,cAAc,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAEtK,6EAA6E;IAC7E,MAAM,EAAE,CAAC,SAAS,CAAC,YAAY,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IAE7D,OAAO,IAAI,CAAC,IAAI,CAAC,2BAA2B,EAAE,QAAQ,CAAC,CAAA;AACzD,CAAC","sourcesContent":["import path from \"path\"\nimport fs from \"fs-extra\"\nimport { copyOrLinkFile, log, escapeForXml } from \"builder-util\"\nimport { AppImageBuilderOptions } from \"./appImageUtil.js\"\n\nconst ICON_DIR_RELATIVE_PATH = \"usr/share/icons/hicolor\"\nconst MIME_TYPE_DIR_RELATIVE_PATH = \"usr/share/mime/packages\"\n\nexport async function copyIcons(options: AppImageBuilderOptions): Promise<void> {\n  const { stageDir, options: configuration } = options\n  const iconCommonDir = path.join(stageDir, ICON_DIR_RELATIVE_PATH)\n\n  await fs.ensureDir(iconCommonDir)\n\n  const icons = configuration.icons\n  if (!icons || icons.length === 0) {\n    throw new Error(\"At least one icon is required for AppImage\")\n  }\n\n  const iconExtWithDot = path.extname(icons[0].file)\n  const iconFileName = `${configuration.executableName}${iconExtWithDot}`\n  const maxIconIndex = icons.length - 1\n\n  const iconInfoList = icons.map(icon => {\n    if (path.extname(icon.file) !== iconExtWithDot) {\n      throw new Error(`All icons must have the same extension: expected ${iconExtWithDot}, but got ${icon.file}`)\n    }\n    let iconSizeDir: string\n\n    if (iconExtWithDot === \".svg\") {\n      // SVG icons go in scalable/apps directory per freedesktop icon theme spec\n      iconSizeDir = \"scalable/apps\"\n    } else {\n      iconSizeDir = `${icon.size}x${icon.size}/apps`\n    }\n\n    const iconRelativeToStageFile = path.join(ICON_DIR_RELATIVE_PATH, iconSizeDir, iconFileName)\n    const iconDir = path.join(iconCommonDir, iconSizeDir)\n    const iconFile = path.join(iconDir, iconFileName)\n    return { icon, iconDir, iconFile, iconRelativeToStageFile }\n  })\n  await Promise.all(\n    iconInfoList.map(async ({ icon, iconDir, iconFile }) => {\n      await fs.ensureDir(iconDir)\n      await copyOrLinkFile(icon.file, iconFile)\n    })\n  )\n  // Create symlinks for the last (largest) icon\n  const { iconRelativeToStageFile } = iconInfoList[maxIconIndex]\n  await fs.symlink(iconRelativeToStageFile, path.join(stageDir, iconFileName))\n  await fs.symlink(iconRelativeToStageFile, path.join(stageDir, \".DirIcon\"))\n}\n\nexport async function copyMimeTypes(\n  stageDir: string,\n  options: Pick<AppImageBuilderOptions[\"options\"], \"fileAssociations\" | \"productName\" | \"executableName\">\n): Promise<string | null> {\n  const { fileAssociations, productName, executableName } = options\n\n  if (!fileAssociations || fileAssociations.length === 0) {\n    return null\n  }\n\n  if (!fileAssociations || fileAssociations.length === 0) {\n    return null\n  }\n\n  const mimeTypeParts: string[] = []\n\n  for (const fileAssociation of fileAssociations) {\n    if (!fileAssociation.mimeType) {\n      continue\n    }\n\n    // XML-escape to prevent injection\n    mimeTypeParts.push(`<mime-type type=\"${escapeForXml(fileAssociation.mimeType)}\">`)\n    mimeTypeParts.push(`  <comment>${escapeForXml(productName)} document</comment>`)\n\n    // Handle extension(s)\n    const extensions = Array.isArray(fileAssociation.ext) ? fileAssociation.ext : [fileAssociation.ext]\n\n    for (const ext of extensions) {\n      // Validate extension doesn't contain dangerous characters\n      if (!/^[a-zA-Z0-9_-]+$/.test(ext)) {\n        log.warn({ extension: ext }, `file extension contains unexpected characters and will be skipped`)\n        continue\n      }\n      mimeTypeParts.push(`  <glob pattern=\"*.${escapeForXml(ext)}\"/>`)\n    }\n\n    mimeTypeParts.push('  <generic-icon name=\"x-office-document\"/>')\n    mimeTypeParts.push(\"</mime-type>\")\n  }\n\n  // If no mime-types were generated, return null\n  if (mimeTypeParts.length === 0) {\n    return null\n  }\n\n  const mimeTypeDir = path.join(stageDir, MIME_TYPE_DIR_RELATIVE_PATH)\n  const fileName = `${executableName}.xml`\n  const mimeTypeFile = path.join(mimeTypeDir, fileName)\n\n  await fs.ensureDir(mimeTypeDir)\n\n  const xmlContent = ['<?xml version=\"1.0\"?>', '<mime-info xmlns=\"http://www.freedesktop.org/standards/shared-mime-info\">', ...mimeTypeParts, \"</mime-info>\"].join(\"\\n\")\n\n  // Use 0o644 (rw-r--r--) instead of 0o666 to avoid world-writable permissions\n  await fs.writeFile(mimeTypeFile, xmlContent, { mode: 0o644 })\n\n  return path.join(MIME_TYPE_DIR_RELATIVE_PATH, fileName)\n}\n"]}

package/dist/targets/linux/launcherScript.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Shared launcher-entrypoint helpers for the Linux targets.
+ *
+ * Every Linux target (deb/rpm, AppImage, snap, flatpak) launches the app through a generated
+ * launcher script rather than inlining `executableArgs` into the freedesktop `.desktop` Exec key.
+ * Routing through a launcher keeps the Exec key a plain command (no fragile freedesktop quoting),
+ * injects the arguments in a single, consistent place, and lets `"$@"` forward the launch-time
+ * arguments (desktop field-code expansions) on to the app.
+ */
+/** Single-quote a shell argument, escaping any embedded single quotes. */
+export declare function shellQuote(arg: string): string;
+export interface LauncherScriptOptions {
+    /**
+     * The already-safe exec target tokens, joined with a space to form the start of the `exec` line
+     * (e.g. `['"$SNAP/app/foo"']` or `['zypak-wrapper', '"foo"']`). Callers are responsible for
+     * quoting these tokens — they are emitted verbatim so that shell variables such as `$SNAP`
+     * remain expandable.
+     */
+    command: ReadonlyArray<string>;
+    /** User/derived arguments. Each is single-quoted so embedded characters are passed literally. */
+    args?: ReadonlyArray<string>;
+    /** Shebang line. Defaults to `#!/bin/sh`. */
+    shebang?: string;
+    /** Optional lines inserted between the shebang and the `exec` line (e.g. `export` statements). */
+    preamble?: string;
+}
+/**
+ * Build a launcher entrypoint script that execs `command` with `args` (single-quoted) and always
+ * forwards `"$@"`.
+ */
+export declare function buildLauncherScript(opts: LauncherScriptOptions): string;
+//# sourceMappingURL=launcherScript.d.ts.map

package/dist/targets/linux/launcherScript.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"launcherScript.d.ts","sourceRoot":"","sources":["../../../src/targets/linux/launcherScript.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,0EAA0E;AAC1E,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAE9C;AAED,MAAM,WAAW,qBAAqB;IACpC;;;;;OAKG;IACH,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,CAAA;IAC9B,iGAAiG;IACjG,IAAI,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAA;IAC5B,6CAA6C;IAC7C,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,kGAAkG;IAClG,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,qBAAqB,GAAG,MAAM,CAKvE"}

package/dist/targets/linux/launcherScript.js

@@ -0,0 +1,24 @@
+/**
+ * Shared launcher-entrypoint helpers for the Linux targets.
+ *
+ * Every Linux target (deb/rpm, AppImage, snap, flatpak) launches the app through a generated
+ * launcher script rather than inlining `executableArgs` into the freedesktop `.desktop` Exec key.
+ * Routing through a launcher keeps the Exec key a plain command (no fragile freedesktop quoting),
+ * injects the arguments in a single, consistent place, and lets `"$@"` forward the launch-time
+ * arguments (desktop field-code expansions) on to the app.
+ */
+/** Single-quote a shell argument, escaping any embedded single quotes. */
+export function shellQuote(arg) {
+    return "'" + arg.replace(/'/g, "'\\''") + "'";
+}
+/**
+ * Build a launcher entrypoint script that execs `command` with `args` (single-quoted) and always
+ * forwards `"$@"`.
+ */
+export function buildLauncherScript(opts) {
+    const shebang = opts.shebang ?? "#!/bin/sh";
+    const argsPart = opts.args && opts.args.length > 0 ? " " + opts.args.map(shellQuote).join(" ") : "";
+    const preamble = opts.preamble ? `\n${opts.preamble}\n` : "\n";
+    return `${shebang}${preamble}exec ${opts.command.join(" ")}${argsPart} "$@"\n`;
+}
+//# sourceMappingURL=launcherScript.js.map

package/dist/targets/linux/launcherScript.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"launcherScript.js","sourceRoot":"","sources":["../../../src/targets/linux/launcherScript.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,0EAA0E;AAC1E,MAAM,UAAU,UAAU,CAAC,GAAW;IACpC,OAAO,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,GAAG,CAAA;AAC/C,CAAC;AAkBD;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAA2B;IAC7D,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,WAAW,CAAA;IAC3C,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;IACnG,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,IAAI,CAAA;IAC9D,OAAO,GAAG,OAAO,GAAG,QAAQ,QAAQ,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,QAAQ,SAAS,CAAA;AAChF,CAAC","sourcesContent":["/**\n * Shared launcher-entrypoint helpers for the Linux targets.\n *\n * Every Linux target (deb/rpm, AppImage, snap, flatpak) launches the app through a generated\n * launcher script rather than inlining `executableArgs` into the freedesktop `.desktop` Exec key.\n * Routing through a launcher keeps the Exec key a plain command (no fragile freedesktop quoting),\n * injects the arguments in a single, consistent place, and lets `\"$@\"` forward the launch-time\n * arguments (desktop field-code expansions) on to the app.\n */\n\n/** Single-quote a shell argument, escaping any embedded single quotes. */\nexport function shellQuote(arg: string): string {\n  return \"'\" + arg.replace(/'/g, \"'\\\\''\") + \"'\"\n}\n\nexport interface LauncherScriptOptions {\n  /**\n   * The already-safe exec target tokens, joined with a space to form the start of the `exec` line\n   * (e.g. `['\"$SNAP/app/foo\"']` or `['zypak-wrapper', '\"foo\"']`). Callers are responsible for\n   * quoting these tokens — they are emitted verbatim so that shell variables such as `$SNAP`\n   * remain expandable.\n   */\n  command: ReadonlyArray<string>\n  /** User/derived arguments. Each is single-quoted so embedded characters are passed literally. */\n  args?: ReadonlyArray<string>\n  /** Shebang line. Defaults to `#!/bin/sh`. */\n  shebang?: string\n  /** Optional lines inserted between the shebang and the `exec` line (e.g. `export` statements). */\n  preamble?: string\n}\n\n/**\n * Build a launcher entrypoint script that execs `command` with `args` (single-quoted) and always\n * forwards `\"$@\"`.\n */\nexport function buildLauncherScript(opts: LauncherScriptOptions): string {\n  const shebang = opts.shebang ?? \"#!/bin/sh\"\n  const argsPart = opts.args && opts.args.length > 0 ? \" \" + opts.args.map(shellQuote).join(\" \") : \"\"\n  const preamble = opts.preamble ? `\\n${opts.preamble}\\n` : \"\\n\"\n  return `${shebang}${preamble}exec ${opts.command.join(\" \")}${argsPart} \"$@\"\\n`\n}\n"]}

package/dist/targets/linux/snap/core24.d.ts

@@ -8,6 +8,8 @@ export declare class SnapCore24 extends SnapCore<SnapOptions24> {
     defaultPlugs: string[];
     readonly configRelativePath = "snap";
     readonly guiRelativePath: string;
+    private removeChromeSandbox;
+    private commandArgs;
     createDescriptor(arch: Arch): Promise<SnapcraftYAML>;
     private isHostMode;
     /** Writes the snapcraft.yaml, stages app files, then invokes `buildSnap()` to run the actual snapcraft build. */

package/dist/targets/linux/snap/core24.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"core24.d.ts","sourceRoot":"","sources":["../../../../src/targets/linux/snap/core24.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAA6F,MAAM,cAAc,CAAA;AAE9H,OAAO,EAA0B,OAAO,EAAE,MAAM,sBAAsB,CAAA;AAItE,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAA;AAC/F,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAA;AAC1C,OAAO,EAAa,aAAa,EAAE,MAAM,gBAAgB,CAAA;AAIzD,wGAAwG;AACxG,qBAAa,UAAW,SAAQ,QAAQ,CAAC,aAAa,CAAC;IAGrD,YAAY,WAAsI;IAKlJ,QAAQ,CAAC,kBAAkB,UAAS;IACpC,QAAQ,CAAC,eAAe,SAA4C;IAE9D,gBAAgB,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,aAAa,CAAC;IAI1D,OAAO,CAAC,UAAU;IAIlB,iHAAiH;IAC3G,SAAS,CAAC,MAAM,EAAE;QAAE,IAAI,EAAE,aAAa,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,IAAI,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IA4F1I,4GAA4G;IACtG,6BAA6B,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,aAAa,CAAC;IA6MvE;;OAEG;IACH,OAAO,CAAC,gBAAgB;IAexB;;;OAGG;IACH,OAAO,CAAC,kBAAkB;IA0B1B;;OAEG;YACW,YAAY;IAgC1B;;OAEG;IACH,oBAAoB,CAAC,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,MAAM,GAAG,OAAO,GAAG,MAAM,EAAE,GAAG,SAAS;IAUrF;;OAEG;IACH,kBAAkB,CAAC,CAAC,SAAS,KAAK,CAAC,MAAM,GAAG,cAAc,GAAG,cAAc,CAAC,GAAG,cAAc,GAAG,cAAc,GAAG,IAAI,EACnH,KAAK,EAAE,CAAC,GACP;QACD,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAA;QACzC,GAAG,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;KAC1B;IAwCD,OAAO,CAAC,uBAAuB;IAY/B;;OAEG;IACH,OAAO,CAAC,qBAAqB;CAW9B"}
+{"version":3,"file":"core24.d.ts","sourceRoot":"","sources":["../../../../src/targets/linux/snap/core24.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAA6F,MAAM,cAAc,CAAA;AAE9H,OAAO,EAA0B,OAAO,EAAE,MAAM,sBAAsB,CAAA;AAItE,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAA;AAC/F,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAA;AAE1C,OAAO,EAAa,aAAa,EAAE,MAAM,gBAAgB,CAAA;AAUzD,wGAAwG;AACxG,qBAAa,UAAW,SAAQ,QAAQ,CAAC,aAAa,CAAC;IAGrD,YAAY,WAAsI;IAKlJ,QAAQ,CAAC,kBAAkB,UAAS;IACpC,QAAQ,CAAC,eAAe,SAA4C;IAKpE,OAAO,CAAC,mBAAmB,CAAQ;IAEnC,OAAO,CAAC,WAAW,CAAe;IAE5B,gBAAgB,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,aAAa,CAAC;IAI1D,OAAO,CAAC,UAAU;IAIlB,iHAAiH;IAC3G,SAAS,CAAC,MAAM,EAAE;QAAE,IAAI,EAAE,aAAa,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,IAAI,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAsH1I,4GAA4G;IACtG,6BAA6B,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,aAAa,CAAC;IAkNvE;;OAEG;IACH,OAAO,CAAC,gBAAgB;IAexB;;;OAGG;IACH,OAAO,CAAC,kBAAkB;IA0B1B;;OAEG;YACW,YAAY;IAgC1B;;OAEG;IACH,oBAAoB,CAAC,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,MAAM,GAAG,OAAO,GAAG,MAAM,EAAE,GAAG,SAAS;IAUrF;;OAEG;IACH,kBAAkB,CAAC,CAAC,SAAS,KAAK,CAAC,MAAM,GAAG,cAAc,GAAG,cAAc,CAAC,GAAG,cAAc,GAAG,cAAc,GAAG,IAAI,EACnH,KAAK,EAAE,CAAC,GACP;QACD,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAA;QACzC,GAAG,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;KAC1B;IAwCD,OAAO,CAAC,uBAAuB;IAY/B;;OAEG;IACH,OAAO,CAAC,qBAAqB;CAW9B"}

package/dist/targets/linux/snap/core24.js

@@ -4,8 +4,14 @@ import _fsExtra from "fs-extra";
 import * as yaml from "js-yaml";
 import * as path from "path";
 import { SnapCore } from "./SnapTarget.js";
+import { buildSnapCommandLauncherScript } from "./snapCommand.js";
 import { buildSnap, DEFAULT_STAGE_PACKAGES, SNAPCRAFT_YAML_OPTIONS } from "./snapcraftBuilder.js";
-const { copy, mkdir, readdir, writeFile } = _fsExtra;
+const { chmod, copy, mkdir, readdir, remove, writeFile } = _fsExtra;
+// Electron's setuid sandbox helper. Removed from the staged app when the snap runs with
+// `--no-sandbox` (snap confinement supplies its own sandbox via the browser-support interface).
+const CHROME_SANDBOX = "chrome-sandbox";
+// Launcher script name used when the app command cannot be expressed inline (see resolveSnapCommand).
+const SNAP_COMMAND_LAUNCHER = "command.sh";
 /** Snap build strategy for core24 — generates a native snapcraft.yaml and invokes the snapcraft CLI. */
 export class SnapCore24 extends SnapCore {
     constructor() {
@@ -18,6 +24,12 @@ export class SnapCore24 extends SnapCore {
         // - Desktop files in meta/gui/ are used for menu integration
         this.configRelativePath = "snap";
         this.guiRelativePath = path.join(this.configRelativePath, "gui");
+        // Computed in createDescriptor (mapSnapOptionsToSnapcraftYAML) and consumed in buildSnap.
+        // getSnapCore() returns a fresh SnapCore24 per arch build, so this per-instance state is
+        // never shared across builds.
+        this.removeChromeSandbox = false;
+        // Args embedded into the generated launcher script (executableArgs + forceX11/no-sandbox flags).
+        this.commandArgs = [];
     }
     async createDescriptor(arch) {
         return await this.mapSnapOptionsToSnapcraftYAML(arch);
@@ -59,6 +71,16 @@ export class SnapCore24 extends SnapCore {
             log.debug({ to: log.filePath(appDir), from: log.filePath(appOutDir) }, "copying app files to project root app directory");
             await copyDir(appOutDir, appDir);
         }
+        // Drop the setuid chrome-sandbox helper before snapcraft stages the app — it is unusable under
+        // strict confinement when launching with --no-sandbox (mirrors SnapCoreLegacy).
+        if (this.removeChromeSandbox) {
+            await remove(path.join(appDir, CHROME_SANDBOX));
+        }
+        // Write the launcher script the command always points at (see SNAP_COMMAND_LAUNCHER).
+        // It lands at the snap root ($SNAP/command.sh) — it is intentionally not added to `organize`.
+        const launcherPath = path.join(appDir, SNAP_COMMAND_LAUNCHER);
+        await writeFile(launcherPath, buildSnapCommandLauncherScript({ execName: this.packager.executableName, args: this.commandArgs }), { mode: 0o755 });
+        await chmod(launcherPath, 0o755);
         // Auto-generate `organize` mapping for the app part so top-level helper
         // binaries and resources are placed under `app/` inside the snap. Update
         // the already-written `snapcraft.yaml` so the build sees the mapping.
@@ -66,11 +88,25 @@ export class SnapCore24 extends SnapCore {
             const appPart = snap.parts[snap.name];
             if (appPart) {
                 const entries = (await readdir(appOutDir)).sort();
-                const organize = appPart.organize || {};
+                // Null-prototype map: entry names come from the filesystem, so a top-level file named
+                // "__proto__" / "constructor" / "toString" must not read inherited keys (which would make
+                // the membership check below skip it) or interact with Object.prototype on assignment.
+                const organize = Object.assign(Object.create(null), appPart.organize);
                 for (const entry of entries) {
                     if (!entry) {
                         continue;
                     }
+                    // Skip files no longer present in the staged app dir (e.g. removed chrome-sandbox) so
+                    // snapcraft doesn't fail trying to organize a missing source.
+                    if (this.removeChromeSandbox && entry === CHROME_SANDBOX) {
+                        continue;
+                    }
+                    // Never organize the launcher under app/. It must stay at the snap root ($SNAP/command.sh)
+                    // to match apps.<name>.command. This matters when appOutDir === appDir, where readdir
+                    // would otherwise pick up the launcher we just wrote.
+                    if (entry === SNAP_COMMAND_LAUNCHER) {
+                        continue;
+                    }
                     if (organize[entry]) {
                         continue;
                     }
@@ -212,16 +248,20 @@ export class SnapCore24 extends SnapCore {
                 extraArgs.push("--ozone-platform=x11");
             }
         }
-        if (this.helper.isElectronVersionGreaterOrEqualThan("5.0.0") && !this.isBrowserSandboxAllowed(rootPlugs)) {
-            if (!extraArgs.includes("--no-sandbox")) {
-                extraArgs.push("--no-sandbox");
-            }
+        const noSandbox = this.helper.isElectronVersionGreaterOrEqualThan("5.0.0") && !this.isBrowserSandboxAllowed(rootPlugs);
+        if (noSandbox && !extraArgs.includes("--no-sandbox")) {
+            extraArgs.push("--no-sandbox");
         }
-        const commandSuffix = extraArgs.length > 0 ? ` ${extraArgs.join(" ")}` : "";
+        // With --no-sandbox the setuid chrome-sandbox helper is unused; strip it from the snap.
+        this.removeChromeSandbox = noSandbox;
+        // The command always points at a generated launcher script (written in buildSnap). This keeps a
+        // single uniform command path and sidesteps snapd's character/word-splitting rules for the
+        // command field (e.g. --ozone-platform=x11, --js-flags="...").
+        this.commandArgs = extraArgs;
         // Create the app configuration
         const desktopBaseName = this.helper.getDesktopFileName(appName);
         const app = {
-            command: `app/${this.packager.executableName}${commandSuffix}`,
+            command: SNAP_COMMAND_LAUNCHER,
             "command-chain": undefined, // explicitly undefined so removeNullish strips it; extensions supply their own command-chain
             plugs: appPlugs,
             slots: appSlots,

package/dist/targets/linux/snap/core24.js.map

@@ -1 +1 @@
-{"version":3,"file":"core24.js","sourceRoot":"","sources":["../../../../src/targets/linux/snap/core24.ts"],"names":[],"mappings":"AAAA,OAAO,EAAQ,cAAc,EAAE,OAAO,EAAE,yBAAyB,EAAE,GAAG,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAA;AAE9H,OAAO,EAAE,UAAU,EAAE,UAAU,EAAW,MAAM,sBAAsB,CAAA;AACtE,OAAO,QAAQ,MAAM,UAAU,CAAA;AAC/B,OAAO,KAAK,IAAI,MAAM,SAAS,CAAA;AAC/B,OAAO,KAAK,IAAI,MAAM,MAAM,CAAA;AAE5B,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAA;AAE1C,OAAO,EAAE,SAAS,EAAE,sBAAsB,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAA;AACjG,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,QAAQ,CAAA;AAEpD,wGAAwG;AACxG,MAAM,OAAO,UAAW,SAAQ,QAAuB;IAAvD;;QACE,qGAAqG;QACrG,oGAAoG;QACpG,iBAAY,GAAG,CAAC,SAAS,EAAE,gBAAgB,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,WAAW,EAAE,gBAAgB,EAAE,YAAY,EAAE,QAAQ,CAAC,CAAA;QAElJ,uBAAuB;QACvB,uEAAuE;QACvE,6DAA6D;QACpD,uBAAkB,GAAG,MAAM,CAAA;QAC3B,oBAAe,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,KAAK,CAAC,CAAA;IA+dtE,CAAC;IA7dC,KAAK,CAAC,gBAAgB,CAAC,IAAU;QAC/B,OAAO,MAAM,IAAI,CAAC,6BAA6B,CAAC,IAAI,CAAC,CAAA;IACvD,CAAC;IAEO,UAAU;QAChB,OAAO,IAAI,CAAC,OAAO,CAAC,kBAAkB,KAAK,IAAI,CAAA;IACjD,CAAC;IAED,iHAAiH;IACjH,KAAK,CAAC,SAAS,CAAC,MAA0G;QACxH,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,GAAG,MAAM,CAAA;QAE1D,MAAM,eAAe,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,kBAAkB,CAAC,CAAA;QACvE,MAAM,iBAAiB,GAAG,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,gBAAgB,CAAC,CAAA;QAEtE,wDAAwD;QACxD,sFAAsF;QACtF,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,eAAe,CAAC,CAAA;QAC9D,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAE3C,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,sBAAsB,CAAC,CAAA;QAC3D,MAAM,SAAS,CAAC,iBAAiB,EAAE,WAAW,EAAE,MAAM,CAAC,CAAA;QACvD,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,0BAA0B,CAAC,CAAA;QAE3C,mCAAmC;QACnC,wEAAwE;QACxE,MAAM,iBAAiB,GAA2B,EAAE,CAAA;QACpD,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAA;QACpC,IAAI,IAAI,EAAE,CAAC;YACT,MAAM,YAAY,GAAG,GAAG,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAA;YACxD,MAAM,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC,CAAA;YACpD,iFAAiF;YACjF,iBAAiB,CAAC,IAAI,GAAG,qBAAqB,YAAY,EAAE,CAAA;QAC9D,CAAC;QAED,6CAA6C;QAC7C,wEAAwE;QACxE,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;QACpG,MAAM,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,cAAc,GAAG,KAAK,EAAE,eAAe,EAAE,iBAAiB,CAAC,CAAA;QAE3H,sEAAsE;QACtE,oEAAoE;QACpE,0DAA0D;QAC1D,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAA;QAC5C,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;YACrD,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,EAAE,iDAAiD,CAAC,CAAA;YACzH,MAAM,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,CAAA;QAClC,CAAC;QAED,wEAAwE;QACxE,yEAAyE;QACzE,sEAAsE;QACtE,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YACrC,IAAI,OAAO,EAAE,CAAC;gBACZ,MAAM,OAAO,GAAG,CAAC,MAAM,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;gBACjD,MAAM,QAAQ,GAA4B,OAAO,CAAC,QAAmC,IAAI,EAAE,CAAA;gBAC3F,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;oBAC5B,IAAI,CAAC,KAAK,EAAE,CAAC;wBACX,SAAQ;oBACV,CAAC;oBACD,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;wBACpB,SAAQ;oBACV,CAAC;oBACD,QAAQ,CAAC,KAAK,CAAC,GAAG,OAAO,KAAK,EAAE,CAAA;gBAClC,CAAC;gBACD,OAAO,CAAC,QAAQ,GAAG,QAAQ,CAAA;gBAE3B,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,sBAAsB,CAAC,CAAA;gBAC3D,MAAM,SAAS,CAAC,iBAAiB,EAAE,WAAW,EAAE,MAAM,CAAC,CAAA;gBACvD,GAAG,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,EAAE,8CAA8C,CAAC,CAAA;YACzE,CAAC;QACH,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,gDAAgD,CAAC,CAAA;QAClF,CAAC;QAED,MAAM,SAAS,GAAG;YAChB,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,IAAI;YACpC,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,YAAY,KAAK,IAAI;YAChD,kBAAkB,EAAE,IAAI,CAAC,OAAO,CAAC,kBAAkB,KAAK,IAAI;YAC5D,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW,IAAI,SAAS;SACnD,CAAA;QAED,IAAI,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,uBAAuB,IAAI,IAAI,EAAE,CAAC;YAClE,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,uBAAuB,CAAC,EAAE,IAAI,EAAE,GAAG,SAAS,EAAE,CAAC,CAAA;YACtG,IAAI,UAAU,EAAE,CAAC;gBACf,OAAM;YACR,CAAC;QACH,CAAC;QAED,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAA;QAClD,MAAM,SAAS,CAAC;YACd,eAAe,EAAE,IAAI;YACrB,YAAY;YACZ,QAAQ;YACR,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,OAAO,EAAE,WAAW,EAAE,OAAO;YAC7B,GAAG,SAAS;SACb,CAAC,CAAA;IACJ,CAAC;IAED,4GAA4G;IAC5G,KAAK,CAAC,6BAA6B,CAAC,IAAU;QAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAA;QACrC,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,WAAW,EAAE,CAAA;QAC1D,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAA;QAE5B,2FAA2F;QAC3F,gGAAgG;QAChG,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,EAAE,CAAA;QAClC,MAAM,cAAc,GAAa,OAAO,CAAC,UAAU,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAA;QACjH,IAAI,QAAQ,IAAI,cAAc,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YACjD,MAAM,IAAI,yBAAyB,CACjC,sFAAsF;gBACpF,6EAA6E;gBAC7E,4EAA4E;gBAC5E,mCAAmC;gBACnC,sFAAsF;gBACtF,0CAA0C;gBAC1C,yFAAyF;gBACzF,gFAAgF;gBAChF,gDAAgD,CACnD,CAAA;QACH,CAAC;QACD,MAAM,kBAAkB,GAAG,cAAc,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAA;QACjF,MAAM,iBAAiB,GAAG,cAAc,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAA;QAE1D,sBAAsB;QACtB,MAAM,OAAO,GAAS;YACpB,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,KAAK;YACb,gBAAgB,EAAE,OAAO,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS;YACnF,gBAAgB,EAAE,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC,aAAa,EAAE,sBAAsB,CAAC;YAC3F,KAAK,EAAE,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;YACpD,KAAK,EAAE,OAAO,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS;SACvE,CAAA;QAED,0BAA0B;QAC1B,gFAAgF;QAChF,oFAAoF;QACpF,IAAI,SAA0C,CAAA;QAC9C,IAAI,QAA8B,CAAA;QAElC,IAAI,iBAAiB,EAAE,CAAC;YACtB,gEAAgE;YAChE,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,CAAA;YAC3G,SAAS,GAAG,MAAM,CAAC,IAAI,CAAA;YACvB,wEAAwE;YACxE,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAA;QACvB,CAAC;aAAM,CAAC;YACN,wDAAwD;YACxD,MAAM,gBAAgB,GAAwB;gBAC5C,cAAc,EAAE;oBACd,SAAS,EAAE,SAAS;oBACpB,MAAM,EAAE,uBAAuB;oBAC/B,kBAAkB,EAAE,mBAAmB;iBACxC;gBACD,aAAa,EAAE;oBACb,SAAS,EAAE,SAAS;oBACpB,MAAM,EAAE,sBAAsB;oBAC9B,kBAAkB,EAAE,mBAAmB;iBACxC;gBACD,cAAc,EAAE;oBACd,SAAS,EAAE,SAAS;oBACpB,MAAM,EAAE,uBAAuB;oBAC/B,kBAAkB,EAAE,mBAAmB;iBACxC;gBACD,eAAe,EAAE;oBACf,SAAS,EAAE,SAAS;oBACpB,MAAM,EAAE,sBAAsB;oBAC9B,kBAAkB,EAAE,eAAe;iBACpC;gBACD,UAAU,EAAE;oBACV,SAAS,EAAE,SAAS;oBACpB,MAAM,EAAE,gBAAgB;oBACxB,kBAAkB,EAAE,WAAW;iBAChC;aACF,CAAA;YAED,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK;gBAC1B,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,KAAK,CAAC;gBACxC,CAAC,CAAC,QAAQ;oBACR,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,IAAI,CAAC,YAAY,EAAE;oBAC7C,CAAC,CAAC;wBACE,IAAI,EAAE,gBAAgB;wBACtB,GAAG,EAAE,IAAI,CAAC,YAAY;qBACvB,CAAA;YACP,SAAS,GAAG,MAAM,CAAC,IAAI,CAAA;YACvB,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAA;QACvB,CAAC;QAED,+EAA+E;QAC/E,oFAAoF;QACpF,sFAAsF;QACtF,gFAAgF;QAChF,qEAAqE;QACrE,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YACnB,SAAS,GAAG,EAAE,GAAG,SAAS,EAAE,iBAAiB,EAAE,EAAE,SAAS,EAAE,iBAAiB,EAAE,eAAe,EAAE,IAAI,EAAE,EAAE,CAAA;YACxG,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC;gBAC3C,QAAQ,GAAG,CAAC,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,iBAAiB,CAAC,CAAA;YACrD,CAAC;QACH,CAAC;QAED,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,CAAA;QAEvI,qDAAqD;QACrD,mFAAmF;QACnF,kFAAkF;QAClF,wDAAwD;QACxD,MAAM,SAAS,GAAa,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,CAAA;QACpE,IAAI,IAAI,CAAC,OAAO,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;YACnC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,sBAAsB,CAAC,EAAE,CAAC;gBAChD,SAAS,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAA;YACxC,CAAC;QACH,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,CAAC,mCAAmC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,uBAAuB,CAAC,SAAS,CAAC,EAAE,CAAC;YACzG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;gBACxC,SAAS,CAAC,IAAI,CAAC,cAAc,CAAC,CAAA;YAChC,CAAC;QACH,CAAC;QACD,MAAM,aAAa,GAAG,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;QAE3E,+BAA+B;QAC/B,MAAM,eAAe,GAAG,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAA;QAC/D,MAAM,GAAG,GAAQ;YACf,OAAO,EAAE,OAAO,IAAI,CAAC,QAAQ,CAAC,cAAc,GAAG,aAAa,EAAE;YAC9D,eAAe,EAAE,SAAS,EAAE,6FAA6F;YACzH,KAAK,EAAE,QAAQ;YACf,KAAK,EAAE,QAAQ;YACf,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,eAAe,UAAU,CAAC,CAAC,CAAC,SAAS;YACvE,OAAO,EAAE,YAAY,eAAe,UAAU;YAC9C,UAAU,EAAE,kBAAkB;SAC/B,CAAA;QAED,mFAAmF;QACnF,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAA;QACvB,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,IAAI,CAAC,CAAC,CAAC,YAAY,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAA;QAE5H,8BAA8B;QAC9B,MAAM,WAAW,GAAG,OAAO,CAAC,KAAK,CAAA;QACjC,MAAM,KAAK,GAAG,WAAW,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;QAE5E,0EAA0E;QAC1E,6DAA6D;QAC7D,MAAM,KAAK,GAAyB;YAClC,CAAC,OAAO,CAAC,EAAE,OAAO;SACnB,CAAA;QAED,uEAAuE;QACvE,oEAAoE;QACpE,8DAA8D;QAE9D,oCAAoC;QACpC,MAAM,SAAS,GAAkB;YAC/B,kBAAkB;YAClB,IAAI,EAAE,OAAO;YACb,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,QAAQ;YAC5C,KAAK,EAAE,KAAK;YAEZ,yEAAyE;YACzE,qEAAqE;YACrE,GAAG,CAAC,IAAI,KAAK,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC;gBACvC,CAAC,CAAC;oBACE,SAAS,EAAE;wBACT,CAAC,iBAAiB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,EAAE;4BACjC,WAAW,EAAE,iBAAiB,CAAC,IAAI,EAAE,MAAM,CAAC;4BAC5C,UAAU,EAAE,iBAAiB,CAAC,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;yBACpE;qBACF;iBACF;gBACH,CAAC,CAAC,EAAE,CAAC;YAEP,yCAAyC;YACzC,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,WAAW;YAC/C,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,OAAO,CAAC;YAChD,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,QAAQ;YAChC,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,WAAW;YAC3C,IAAI,EAAE,QAAQ;YAEd,sBAAsB;YACtB,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,SAAS;YAC7C,OAAO,EAAE,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC,OAAO,CAAC;YAEnD,cAAc;YACd,WAAW,EAAE,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC;YAE3C,sHAAsH;YACtH,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,CAAC,iBAAiB,IAAI,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;YAExG,aAAa;YACb,KAAK,EAAE,SAAS;YAChB,KAAK,EAAE,SAAS;YAEhB,QAAQ;YACR,KAAK,EAAE,KAAK;YAEZ,OAAO;YACP,IAAI,EAAE;gBACJ,CAAC,OAAO,CAAC,EAAE,GAAG;aACf;SACF,CAAA;QAED,OAAO,aAAa,CAAC,SAAS,CAAC,CAAA;IACjC,CAAC;IAED;;OAEG;IACK,gBAAgB,CAAC,OAAsB;QAC7C,MAAM,GAAG,GAAkC,EAAE,CAAA;QAE7C,gDAAgD;QAChD,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,MAAM,EAAE,CAAC;YACjC,GAAG,CAAC,MAAM,GAAG,kBAAkB,CAAA;QACjC,CAAC;QAED,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;YACxB,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,WAAW,CAAC,CAAA;QACtC,CAAC;QAED,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAA;IACtD,CAAC;IAED;;;OAGG;IACK,kBAAkB,CAAC,OAAsB;QAC/C,mDAAmD;QACnD,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,OAAO,OAAO,CAAC,MAAM,CAAA;QACvB,CAAC;QAED,sFAAsF;QACtF,OAAO;YACL,uDAAuD,EAAE;gBACvD,IAAI,EAAE,2EAA2E;aAClF;YACD,uDAAuD,EAAE;gBACvD,IAAI,EAAE,2EAA2E;aAClF;YACD,0BAA0B,EAAE;gBAC1B,IAAI,EAAE,8CAA8C;aACrD;YACD,mBAAmB,EAAE;gBACnB,IAAI,EAAE,uBAAuB;aAC9B;YACD,oBAAoB,EAAE;gBACpB,OAAO,EAAE,wBAAwB;aAClC;SACF,CAAA;IACH,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,YAAY,CAAC,SAAiB;QAC1C,IAAI,CAAC;YACH,MAAM,iBAAiB,GAAG,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAA;YACzD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,iBAAiB,EAAE,SAAS,CAAC,CAAA;YAC3D,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,iBAAiB,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,KAAK,iBAAiB,EAAE,CAAC;gBACzF,MAAM,IAAI,yBAAyB,CAAC,kFAAkF,QAAQ,IAAI,CAAC,CAAA;YACrI,CAAC;YACD,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,CAAA;YAEzC,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC3B,OAAO,SAAS,CAAA;YAClB,CAAC;YAED,MAAM,KAAK,GAAwB,EAAE,CAAA;YACrC,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;gBACjC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAA;gBAChE,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAC1B,MAAM,IAAI,yBAAyB,CAAC,sBAAsB,QAAQ,EAAE,CAAC,CAAA;gBACvE,CAAC;gBACD,KAAK,CAAC,QAAQ,CAAC,GAAG;gBAChB,iEAAiE;gBACjE,uCAAuC;iBACxC,CAAA;YACH,CAAC;YAED,OAAO,KAAK,CAAA;QACd,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,GAAG,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,uCAAuC,CAAC,CAAA;YAC1E,MAAM,CAAC,CAAA;QACT,CAAC;IACH,CAAC;IAED;;OAEG;IACH,oBAAoB,CAAC,OAAyC;QAC5D,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,SAAS,CAAA;QAClB,CAAC;QACD,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAChC,OAAO,CAAC,OAAO,CAAC,CAAA;QAClB,CAAC;QACD,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAA;IACjD,CAAC;IAED;;OAEG;IACH,kBAAkB,CAChB,KAAQ;QAKR,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,EAAE,CAAC;YAC3D,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,CAAA;QAC5C,CAAC;QACD,MAAM,IAAI,GAA4B,EAAE,CAAA;QACxC,MAAM,GAAG,GAAa,EAAE,CAAA;QAExB,kCAAkC;QAClC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1B,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE;gBAC/C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;oBACtB,MAAM,IAAI,KAAK,CAAC,2BAA2B,IAAI,EAAE,CAAC,CAAA;gBACpD,CAAC;gBACD,IAAI,CAAC,IAAI,CAAC,GAAG,MAAM,CAAA;gBACnB,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YAChB,CAAC,CAAC,CAAA;YACF,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAA;QACtB,CAAC;QAED,2CAA2C;QAC3C,MAAM,cAAc,GAAG,IAAI,CAAC,qBAAqB,CAAC,KAAK,EAAE,IAAI,CAAC,YAAY,CAAC,CAAA;QAC3E,KAAK,MAAM,IAAI,IAAI,cAAc,IAAI,EAAE,EAAE,CAAC;YACxC,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC7B,0BAA0B;gBAC1B,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YAChB,CAAC;iBAAM,CAAC;gBACN,uCAAuC;gBACvC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE;oBAC9C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;wBACtB,MAAM,IAAI,KAAK,CAAC,2BAA2B,IAAI,EAAE,CAAC,CAAA;oBACpD,CAAC;oBACD,IAAI,CAAC,IAAI,CAAC,GAAG,MAAM,CAAA;oBACnB,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;gBAChB,CAAC,CAAC,CAAA;YACJ,CAAC;QACH,CAAC;QAED,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,GAAG,EAAE,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,EAAE,CAAA;IACzG,CAAC;IAEO,uBAAuB,CAAC,KAAsC;QACpE,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,KAAK,CAAA;QACd,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YACxC,IAAI,IAAI,EAAE,SAAS,KAAK,iBAAiB,IAAI,IAAI,CAAC,eAAe,CAAC,KAAK,IAAI,EAAE,CAAC;gBAC5E,OAAO,IAAI,CAAA;YACb,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAA;IACd,CAAC;IAED;;OAEG;IACK,qBAAqB,CAAI,KAAoB,EAAE,QAAa;QAClE,MAAM,MAAM,GAAa,EAAE,CAAA;QAC3B,KAAK,MAAM,IAAI,IAAI,KAAK,IAAI,EAAE,EAAE,CAAC;YAC/B,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBACnD,MAAM,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,CAAA;YAC1B,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YACnB,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAA;IAC/C,CAAC;CACF","sourcesContent":["import { Arch, archFromString, copyDir, InvalidConfigurationError, log, removeNullish, toLinuxArchString } from \"builder-util\"\n\nimport { deepAssign, isValidKey, Nullish } from \"builder-util-runtime\"\nimport _fsExtra from \"fs-extra\"\nimport * as yaml from \"js-yaml\"\nimport * as path from \"path\"\nimport { PlugDescriptor, SlotDescriptor, SnapOptions24 } from \"../../../options/SnapOptions.js\"\nimport { SnapCore } from \"./SnapTarget.js\"\nimport { App, Part, SnapcraftYAML } from \"./snapcraft.js\"\nimport { buildSnap, DEFAULT_STAGE_PACKAGES, SNAPCRAFT_YAML_OPTIONS } from \"./snapcraftBuilder.js\"\nconst { copy, mkdir, readdir, writeFile } = _fsExtra\n\n/** Snap build strategy for core24 — generates a native snapcraft.yaml and invokes the snapcraft CLI. */\nexport class SnapCore24 extends SnapCore<SnapOptions24> {\n  // browser-support is intentionally absent here; it is auto-injected in mapSnapOptionsToSnapcraftYAML\n  // when the user has not provided custom plugs, so it always lands in both root plugs and app plugs.\n  defaultPlugs = [\"desktop\", \"desktop-legacy\", \"home\", \"x11\", \"wayland\", \"unity7\", \"network\", \"gsettings\", \"audio-playback\", \"pulseaudio\", \"opengl\"]\n\n  // Snap file hierarchy:\n  // - snap/gui/ gets automatically copied to meta/gui/ in the final snap\n  // - Desktop files in meta/gui/ are used for menu integration\n  readonly configRelativePath = \"snap\"\n  readonly guiRelativePath = path.join(this.configRelativePath, \"gui\")\n\n  async createDescriptor(arch: Arch): Promise<SnapcraftYAML> {\n    return await this.mapSnapOptionsToSnapcraftYAML(arch)\n  }\n\n  private isHostMode(): boolean {\n    return this.options.useDestructiveMode === true\n  }\n\n  /** Writes the snapcraft.yaml, stages app files, then invokes `buildSnap()` to run the actual snapcraft build. */\n  async buildSnap(params: { snap: SnapcraftYAML; appOutDir: string; stageDir: string; snapArch: Arch; artifactPath: string }): Promise<void> {\n    const { snap, appOutDir, stageDir, artifactPath } = params\n\n    const snapDirResolved = path.resolve(stageDir, this.configRelativePath)\n    const snapcraftYamlPath = path.join(snapDirResolved, \"snapcraft.yaml\")\n\n    // Create snap/gui directory for desktop files and icons\n    // Snapcraft will automatically copy snap/gui/ contents to meta/gui/ in the final snap\n    const guiOutput = path.resolve(stageDir, this.guiRelativePath)\n    await mkdir(guiOutput, { recursive: true })\n\n    const yamlContent = yaml.dump(snap, SNAPCRAFT_YAML_OPTIONS)\n    await writeFile(snapcraftYamlPath, yamlContent, \"utf8\")\n    log.debug(snap, \"generated snapcraft.yaml\")\n\n    // Copy icon to snap/gui/ directory\n    // Snapcraft will automatically copy this to meta/gui/ in the final snap\n    const desktopExtraProps: Record<string, string> = {}\n    const icon = this.helper.maxIconPath\n    if (icon) {\n      const iconFileName = `${snap.name}${path.extname(icon)}`\n      await copy(icon, path.join(guiOutput, iconFileName))\n      // Icon path will be available at ${SNAP}/meta/gui/<icon-file> after installation\n      desktopExtraProps.Icon = `\\${SNAP}/meta/gui/${iconFileName}`\n    }\n\n    // Create desktop file in snap/gui/ directory\n    // Snapcraft will automatically copy this to meta/gui/ in the final snap\n    const desktopFilePath = path.join(guiOutput, `${this.helper.getDesktopFileName(snap.name)}.desktop`)\n    await this.helper.writeDesktopEntry(this.options, this.packager.executableName + \" %U\", desktopFilePath, desktopExtraProps)\n\n    // Copy app files to the project root `app` directory so `source: app`\n    // in the generated `snapcraft.yaml` (which is under `snap/`) can be\n    // resolved by snapcraft running in the build environment.\n    const appDir = path.resolve(stageDir, \"app\")\n    if (path.resolve(appDir) !== path.resolve(appOutDir)) {\n      log.debug({ to: log.filePath(appDir), from: log.filePath(appOutDir) }, \"copying app files to project root app directory\")\n      await copyDir(appOutDir, appDir)\n    }\n\n    // Auto-generate `organize` mapping for the app part so top-level helper\n    // binaries and resources are placed under `app/` inside the snap. Update\n    // the already-written `snapcraft.yaml` so the build sees the mapping.\n    try {\n      const appPart = snap.parts[snap.name]\n      if (appPart) {\n        const entries = (await readdir(appOutDir)).sort()\n        const organize: Record<string, string> = (appPart.organize as Record<string, string>) || {}\n        for (const entry of entries) {\n          if (!entry) {\n            continue\n          }\n          if (organize[entry]) {\n            continue\n          }\n          organize[entry] = `app/${entry}`\n        }\n        appPart.organize = organize\n\n        const updatedYaml = yaml.dump(snap, SNAPCRAFT_YAML_OPTIONS)\n        await writeFile(snapcraftYamlPath, updatedYaml, \"utf8\")\n        log.debug({ organize }, \"updated snapcraft.yaml with organize mapping\")\n      }\n    } catch (e: any) {\n      log.warn({ error: e.message }, \"failed to generate and update organize mapping\")\n    }\n\n    const buildMode = {\n      useLXD: this.options.useLXD === true,\n      useMultipass: this.options.useMultipass === true,\n      useDestructiveMode: this.options.useDestructiveMode === true,\n      remoteBuild: this.options.remoteBuild || undefined,\n    }\n\n    if (this.packager.packagerOptions.effectiveOptionComputed != null) {\n      const shouldSkip = await this.packager.packagerOptions.effectiveOptionComputed({ snap, ...buildMode })\n      if (shouldSkip) {\n        return\n      }\n    }\n\n    const rootOptions = this.packager.config.snapcraft\n    await buildSnap({\n      snapcraftConfig: snap,\n      artifactPath,\n      stageDir,\n      packager: this.packager,\n      cscLink: rootOptions?.cscLink,\n      ...buildMode,\n    })\n  }\n\n  /** Converts `SnapOptions24` into a fully resolved `SnapcraftYAML` descriptor for the given architecture. */\n  async mapSnapOptionsToSnapcraftYAML(arch: Arch): Promise<SnapcraftYAML> {\n    const appInfo = this.packager.appInfo\n    const appName = this.packager.executableName.toLowerCase()\n    const options = this.options\n\n    // Default to [\"gnome\"] in normal builds; no extensions in host/destructive-mode (where the\n    // gnome extension is incompatible). Throw if the user explicitly includes \"gnome\" in host mode.\n    const hostMode = this.isHostMode()\n    const extensionsList: string[] = options.extensions != null ? [...options.extensions] : hostMode ? [] : [\"gnome\"]\n    if (hostMode && extensionsList.includes(\"gnome\")) {\n      throw new InvalidConfigurationError(\n        `The \"gnome\" snapcraft extension is incompatible with host/destructive-mode builds.\\n` +\n          `In this mode snapcraft cannot resolve the extension's command-chain source ` +\n          `(/usr/share/snapcraft/extensions/desktop/command-chain) and will fail.\\n\\n` +\n          `To resolve this, choose one of:\\n` +\n          `  1. Remove \"gnome\" from snapcraft.core24.extensions (or set it to []) and add any\\n` +\n          `     required stage-packages manually.\\n` +\n          `  2. Switch to an isolated build environment by setting snapcraft.core24.useLXD: true\\n` +\n          `     or snapcraft.core24.useMultipass: true instead of useDestructiveMode.\\n\\n` +\n          `See: https://snapcraft.io/docs/gnome-extension`\n      )\n    }\n    const resolvedExtensions = extensionsList.length > 0 ? extensionsList : undefined\n    const useGnomeExtension = extensionsList.includes(\"gnome\")\n\n    // Create the app part\n    const appPart: Part = {\n      plugin: \"dump\",\n      source: \"app\",\n      \"build-packages\": options.buildPackages?.length ? options.buildPackages : undefined,\n      \"stage-packages\": this.expandDefaultsInArray(options.stagePackages, DEFAULT_STAGE_PACKAGES),\n      after: this.expandDefaultsInArray(options.after, []),\n      stage: options.appPartStage?.length ? options.appPartStage : undefined,\n    }\n\n    // Process plugs and slots\n    // When using GNOME extension, we don't need to manually configure content snaps\n    // The extension will handle: gnome-46-2404, gtk-3-themes, icon-themes, sound-themes\n    let rootPlugs: Record<string, any> | undefined\n    let appPlugs: string[] | undefined\n\n    if (useGnomeExtension) {\n      // With GNOME extension, only process user-provided custom plugs\n      const result = options.plugs ? this.processPlugOrSlots(options.plugs) : { root: undefined, app: undefined }\n      rootPlugs = result.root\n      // Extension automatically adds common plugs, so we only add custom ones\n      appPlugs = result.app\n    } else {\n      // Without GNOME extension, we need manual content snaps\n      const defaultRootPlugs: Record<string, any> = {\n        \"gtk-3-themes\": {\n          interface: \"content\",\n          target: \"$SNAP/data-dir/themes\",\n          \"default-provider\": \"gtk-common-themes\",\n        },\n        \"icon-themes\": {\n          interface: \"content\",\n          target: \"$SNAP/data-dir/icons\",\n          \"default-provider\": \"gtk-common-themes\",\n        },\n        \"sound-themes\": {\n          interface: \"content\",\n          target: \"$SNAP/data-dir/sounds\",\n          \"default-provider\": \"gtk-common-themes\",\n        },\n        \"gnome-46-2404\": {\n          interface: \"content\",\n          target: \"$SNAP/gnome-platform\",\n          \"default-provider\": \"gnome-46-2404\",\n        },\n        \"gpu-2404\": {\n          interface: \"content\",\n          target: \"$SNAP/gpu-2404\",\n          \"default-provider\": \"mesa-2404\",\n        },\n      }\n\n      const result = options.plugs\n        ? this.processPlugOrSlots(options.plugs)\n        : hostMode\n          ? { root: undefined, app: this.defaultPlugs }\n          : {\n              root: defaultRootPlugs,\n              app: this.defaultPlugs,\n            }\n      rootPlugs = result.root\n      appPlugs = result.app\n    }\n\n    // Always add browser-support with allow-sandbox so Chromium's internal sandbox\n    // can create user namespaces under strict confinement.  Without allow-sandbox: true\n    // the app crashes immediately with \"FATAL: Permission denied (13)\" in credentials.cc.\n    // Skip the injection only when the user has explicitly provided their own plugs\n    // (they are responsible for including browser-support in that case).\n    if (!options.plugs) {\n      rootPlugs = { ...rootPlugs, \"browser-support\": { interface: \"browser-support\", \"allow-sandbox\": true } }\n      if (!appPlugs?.includes(\"browser-support\")) {\n        appPlugs = [...(appPlugs ?? []), \"browser-support\"]\n      }\n    }\n\n    const { root: rootSlots, app: appSlots } = options.slots ? this.processPlugOrSlots(options.slots) : { root: undefined, app: undefined }\n\n    // Build the effective arg list for the snap command.\n    // Start with any user-supplied executableArgs, then conditionally add --no-sandbox\n    // if browser-support with allow-sandbox:true is not present in the resolved plugs\n    // (mirrors the same logic in SnapCoreLegacy.buildSnap).\n    const extraArgs: string[] = [...(this.options.executableArgs ?? [])]\n    if (this.options.forceX11 === true) {\n      if (!extraArgs.includes(\"--ozone-platform=x11\")) {\n        extraArgs.push(\"--ozone-platform=x11\")\n      }\n    }\n    if (this.helper.isElectronVersionGreaterOrEqualThan(\"5.0.0\") && !this.isBrowserSandboxAllowed(rootPlugs)) {\n      if (!extraArgs.includes(\"--no-sandbox\")) {\n        extraArgs.push(\"--no-sandbox\")\n      }\n    }\n    const commandSuffix = extraArgs.length > 0 ? ` ${extraArgs.join(\" \")}` : \"\"\n\n    // Create the app configuration\n    const desktopBaseName = this.helper.getDesktopFileName(appName)\n    const app: App = {\n      command: `app/${this.packager.executableName}${commandSuffix}`,\n      \"command-chain\": undefined, // explicitly undefined so removeNullish strips it; extensions supply their own command-chain\n      plugs: appPlugs,\n      slots: appSlots,\n      autostart: options.autoStart ? `${desktopBaseName}.desktop` : undefined,\n      desktop: `meta/gui/${desktopBaseName}.desktop`,\n      extensions: resolvedExtensions,\n    }\n\n    // Icon path — build-time relative path so snapcraft can find the file in snap/gui/\n    await this.helper.icons\n    const iconPath = this.helper.maxIconPath != null ? `snap/gui/${appName}${path.extname(this.helper.maxIconPath)}` : undefined\n\n    // Process hooks if configured\n    const hooksConfig = options.hooks\n    const hooks = hooksConfig ? await this.processHooks(hooksConfig) : undefined\n\n    // Parts configuration - the extension automatically adds a gnome/sdk part\n    // Don't manually add desktop-launch when using the extension\n    const parts: Record<string, Part> = {\n      [appName]: appPart,\n    }\n\n    // Note: `organize` will be generated later in `buildSnap` based on the\n    // actual contents of the built app directory so helper binaries and\n    // resources are automatically moved under `app/` in the snap.\n\n    // Build the snapcraft configuration\n    const snapcraft: SnapcraftYAML = {\n      // Required fields\n      name: appName,\n      base: \"core24\",\n      confinement: options.confinement || \"strict\",\n      parts: parts,\n\n      // Architecture/Platform — only needed for cross-compilation; snapcraft 8\n      // defaults to host arch and snapcraft 7 rejects this field entirely.\n      ...(arch !== archFromString(process.arch)\n        ? {\n            platforms: {\n              [toLinuxArchString(arch, \"snap\")]: {\n                \"build-for\": toLinuxArchString(arch, \"snap\"),\n                \"build-on\": toLinuxArchString(archFromString(process.arch), \"snap\"),\n              },\n            },\n          }\n        : {}),\n\n      // Metadata - with fallbacks from appInfo\n      version: appInfo.version,\n      summary: options.summary || appInfo.productName,\n      description: this.helper.getDescription(options),\n      grade: options.grade || \"stable\",\n      title: options.title || appInfo.productName,\n      icon: iconPath,\n\n      // Build configuration\n      compression: options.compression || undefined,\n      assumes: this.normalizeAssumesList(options.assumes),\n\n      // Environment\n      environment: this.buildEnvironment(options),\n\n      // User-supplied layout always wins. Without gnome extension and not in host mode, fall back to content-snap defaults.\n      layout: options.layout ?? (useGnomeExtension || hostMode ? undefined : this.buildDefaultLayout(options)),\n\n      // Interfaces\n      plugs: rootPlugs,\n      slots: rootSlots,\n\n      // Hooks\n      hooks: hooks,\n\n      // Apps\n      apps: {\n        [appName]: app,\n      },\n    }\n\n    return removeNullish(snapcraft)\n  }\n\n  /**\n   * Build environment variables with proper defaults\n   */\n  private buildEnvironment(options: SnapOptions24): Record<string, string | null> | undefined {\n    const env: Record<string, string | null> = {}\n\n    // Add default TMPDIR for Electron/Chromium apps\n    if (!options.environment?.TMPDIR) {\n      env.TMPDIR = \"$XDG_RUNTIME_DIR\"\n    }\n\n    if (options.environment) {\n      deepAssign(env, options.environment)\n    }\n\n    return Object.keys(env).length > 0 ? env : undefined\n  }\n\n  /**\n   * Build default layout for core24 with GNOME platform content snaps (non-extension mode)\n   * This allows the app to access libraries from the gnome-46-2404 and mesa-2404 content snaps\n   */\n  private buildDefaultLayout(options: SnapOptions24): Record<string, any> | undefined {\n    // If user provides custom layout, use that instead\n    if (options.layout) {\n      return options.layout\n    }\n\n    // Default layout for core24 Electron apps using GNOME content snaps WITHOUT extension\n    return {\n      \"/usr/lib/$CRAFT_ARCH_TRIPLET_BUILD_FOR/webkit2gtk-4.0\": {\n        bind: \"$SNAP/gnome-platform/usr/lib/$CRAFT_ARCH_TRIPLET_BUILD_FOR/webkit2gtk-4.0\",\n      },\n      \"/usr/lib/$CRAFT_ARCH_TRIPLET_BUILD_FOR/webkit2gtk-4.1\": {\n        bind: \"$SNAP/gnome-platform/usr/lib/$CRAFT_ARCH_TRIPLET_BUILD_FOR/webkit2gtk-4.1\",\n      },\n      \"/usr/share/xml/iso-codes\": {\n        bind: \"$SNAP/gnome-platform/usr/share/xml/iso-codes\",\n      },\n      \"/usr/share/libdrm\": {\n        bind: \"$SNAP/gpu-2404/libdrm\",\n      },\n      \"/usr/share/drirc.d\": {\n        symlink: \"$SNAP/gpu-2404/drirc.d\",\n      },\n    }\n  }\n\n  /**\n   * Process hooks directory into hook definitions\n   */\n  private async processHooks(hooksPath: string): Promise<Record<string, any> | undefined> {\n    try {\n      const buildResourcesDir = this.packager.buildResourcesDir\n      const hooksDir = path.resolve(buildResourcesDir, hooksPath)\n      if (!hooksDir.startsWith(buildResourcesDir + path.sep) && hooksDir !== buildResourcesDir) {\n        throw new InvalidConfigurationError(`snapcraft.core24.hooks must resolve within the build resources directory (got \"${hooksDir}\")`)\n      }\n      const hookFiles = await readdir(hooksDir)\n\n      if (hookFiles.length === 0) {\n        return undefined\n      }\n\n      const hooks: Record<string, any> = {}\n      for (const hookFile of hookFiles) {\n        const hookName = path.basename(hookFile, path.extname(hookFile))\n        if (!isValidKey(hookName)) {\n          throw new InvalidConfigurationError(`Invalid hook name: ${hookName}`)\n        }\n        hooks[hookName] = {\n          // Hook definitions will be populated by snapcraft from the files\n          // Just register that these hooks exist\n        }\n      }\n\n      return hooks\n    } catch (e: any) {\n      log.error({ message: e.message }, \"error processing Snap hooks directory\")\n      throw e\n    }\n  }\n\n  /**\n   * Normalize assumes list (can be string or array)\n   */\n  normalizeAssumesList(assumes: Array<string> | string | Nullish): string[] | undefined {\n    if (!assumes) {\n      return undefined\n    }\n    if (typeof assumes === \"string\") {\n      return [assumes]\n    }\n    return assumes.length > 0 ? assumes : undefined\n  }\n\n  /**\n   * Process plugs or slots into root-level definitions and app-level references\n   */\n  processPlugOrSlots<T extends Array<string | SlotDescriptor | PlugDescriptor> | SlotDescriptor | PlugDescriptor | null>(\n    items: T\n  ): {\n    root: Record<string, unknown> | undefined\n    app: string[] | undefined\n  } {\n    if (!items || (Array.isArray(items) && items.length === 0)) {\n      return { root: undefined, app: undefined }\n    }\n    const root: Record<string, unknown> = {}\n    const app: string[] = []\n\n    // Handle single descriptor object\n    if (!Array.isArray(items)) {\n      Object.entries(items).forEach(([name, config]) => {\n        if (!isValidKey(name)) {\n          throw new Error(`Invalid plug/slot name: ${name}`)\n        }\n        root[name] = config\n        app.push(name)\n      })\n      return { root, app }\n    }\n\n    // Handle array - support \"default\" keyword\n    const processedItems = this.expandDefaultsInArray(items, this.defaultPlugs)\n    for (const item of processedItems ?? []) {\n      if (typeof item === \"string\") {\n        // Simple string reference\n        app.push(item)\n      } else {\n        // Descriptor object with configuration\n        Object.entries(item).forEach(([name, config]) => {\n          if (!isValidKey(name)) {\n            throw new Error(`Invalid plug/slot name: ${name}`)\n          }\n          root[name] = config\n          app.push(name)\n        })\n      }\n    }\n\n    return { root: Object.keys(root).length > 0 ? root : undefined, app: app.length > 0 ? app : undefined }\n  }\n\n  private isBrowserSandboxAllowed(plugs: Record<string, any> | undefined): boolean {\n    if (!plugs) {\n      return false\n    }\n    for (const plug of Object.values(plugs)) {\n      if (plug?.interface === \"browser-support\" && plug[\"allow-sandbox\"] === true) {\n        return true\n      }\n    }\n    return false\n  }\n\n  /**\n   * Expand \"default\" keyword in arrays of anything\n   */\n  private expandDefaultsInArray<T>(items: T[] | Nullish, defaults: T[]): T[] | undefined {\n    const result: Array<T> = []\n    for (const item of items ?? []) {\n      if (typeof item === \"string\" && item === \"default\") {\n        result.push(...defaults)\n      } else {\n        result.push(item)\n      }\n    }\n    return result.length > 0 ? result : undefined\n  }\n}\n"]}
+{"version":3,"file":"core24.js","sourceRoot":"","sources":["../../../../src/targets/linux/snap/core24.ts"],"names":[],"mappings":"AAAA,OAAO,EAAQ,cAAc,EAAE,OAAO,EAAE,yBAAyB,EAAE,GAAG,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAA;AAE9H,OAAO,EAAE,UAAU,EAAE,UAAU,EAAW,MAAM,sBAAsB,CAAA;AACtE,OAAO,QAAQ,MAAM,UAAU,CAAA;AAC/B,OAAO,KAAK,IAAI,MAAM,SAAS,CAAA;AAC/B,OAAO,KAAK,IAAI,MAAM,MAAM,CAAA;AAE5B,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAA;AAC1C,OAAO,EAAE,8BAA8B,EAAE,MAAM,kBAAkB,CAAA;AAEjE,OAAO,EAAE,SAAS,EAAE,sBAAsB,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAA;AACjG,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,QAAQ,CAAA;AAEnE,wFAAwF;AACxF,gGAAgG;AAChG,MAAM,cAAc,GAAG,gBAAgB,CAAA;AACvC,sGAAsG;AACtG,MAAM,qBAAqB,GAAG,YAAY,CAAA;AAE1C,wGAAwG;AACxG,MAAM,OAAO,UAAW,SAAQ,QAAuB;IAAvD;;QACE,qGAAqG;QACrG,oGAAoG;QACpG,iBAAY,GAAG,CAAC,SAAS,EAAE,gBAAgB,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,WAAW,EAAE,gBAAgB,EAAE,YAAY,EAAE,QAAQ,CAAC,CAAA;QAElJ,uBAAuB;QACvB,uEAAuE;QACvE,6DAA6D;QACpD,uBAAkB,GAAG,MAAM,CAAA;QAC3B,oBAAe,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,KAAK,CAAC,CAAA;QAEpE,0FAA0F;QAC1F,yFAAyF;QACzF,8BAA8B;QACtB,wBAAmB,GAAG,KAAK,CAAA;QACnC,iGAAiG;QACzF,gBAAW,GAAa,EAAE,CAAA;IA8fpC,CAAC;IA5fC,KAAK,CAAC,gBAAgB,CAAC,IAAU;QAC/B,OAAO,MAAM,IAAI,CAAC,6BAA6B,CAAC,IAAI,CAAC,CAAA;IACvD,CAAC;IAEO,UAAU;QAChB,OAAO,IAAI,CAAC,OAAO,CAAC,kBAAkB,KAAK,IAAI,CAAA;IACjD,CAAC;IAED,iHAAiH;IACjH,KAAK,CAAC,SAAS,CAAC,MAA0G;QACxH,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,GAAG,MAAM,CAAA;QAE1D,MAAM,eAAe,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,kBAAkB,CAAC,CAAA;QACvE,MAAM,iBAAiB,GAAG,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,gBAAgB,CAAC,CAAA;QAEtE,wDAAwD;QACxD,sFAAsF;QACtF,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,eAAe,CAAC,CAAA;QAC9D,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAE3C,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,sBAAsB,CAAC,CAAA;QAC3D,MAAM,SAAS,CAAC,iBAAiB,EAAE,WAAW,EAAE,MAAM,CAAC,CAAA;QACvD,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,0BAA0B,CAAC,CAAA;QAE3C,mCAAmC;QACnC,wEAAwE;QACxE,MAAM,iBAAiB,GAA2B,EAAE,CAAA;QACpD,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAA;QACpC,IAAI,IAAI,EAAE,CAAC;YACT,MAAM,YAAY,GAAG,GAAG,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAA;YACxD,MAAM,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC,CAAA;YACpD,iFAAiF;YACjF,iBAAiB,CAAC,IAAI,GAAG,qBAAqB,YAAY,EAAE,CAAA;QAC9D,CAAC;QAED,6CAA6C;QAC7C,wEAAwE;QACxE,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;QACpG,MAAM,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,cAAc,GAAG,KAAK,EAAE,eAAe,EAAE,iBAAiB,CAAC,CAAA;QAE3H,sEAAsE;QACtE,oEAAoE;QACpE,0DAA0D;QAC1D,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAA;QAC5C,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;YACrD,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,EAAE,iDAAiD,CAAC,CAAA;YACzH,MAAM,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,CAAA;QAClC,CAAC;QAED,+FAA+F;QAC/F,gFAAgF;QAChF,IAAI,IAAI,CAAC,mBAAmB,EAAE,CAAC;YAC7B,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC,CAAA;QACjD,CAAC;QAED,sFAAsF;QACtF,8FAA8F;QAC9F,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAA;QAC7D,MAAM,SAAS,CAAC,YAAY,EAAE,8BAA8B,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,IAAI,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;QAClJ,MAAM,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,CAAA;QAEhC,wEAAwE;QACxE,yEAAyE;QACzE,sEAAsE;QACtE,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YACrC,IAAI,OAAO,EAAE,CAAC;gBACZ,MAAM,OAAO,GAAG,CAAC,MAAM,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;gBACjD,sFAAsF;gBACtF,0FAA0F;gBAC1F,uFAAuF;gBACvF,MAAM,QAAQ,GAA2B,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAA;gBAC7F,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;oBAC5B,IAAI,CAAC,KAAK,EAAE,CAAC;wBACX,SAAQ;oBACV,CAAC;oBACD,sFAAsF;oBACtF,8DAA8D;oBAC9D,IAAI,IAAI,CAAC,mBAAmB,IAAI,KAAK,KAAK,cAAc,EAAE,CAAC;wBACzD,SAAQ;oBACV,CAAC;oBACD,2FAA2F;oBAC3F,sFAAsF;oBACtF,sDAAsD;oBACtD,IAAI,KAAK,KAAK,qBAAqB,EAAE,CAAC;wBACpC,SAAQ;oBACV,CAAC;oBACD,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;wBACpB,SAAQ;oBACV,CAAC;oBACD,QAAQ,CAAC,KAAK,CAAC,GAAG,OAAO,KAAK,EAAE,CAAA;gBAClC,CAAC;gBACD,OAAO,CAAC,QAAQ,GAAG,QAAQ,CAAA;gBAE3B,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,sBAAsB,CAAC,CAAA;gBAC3D,MAAM,SAAS,CAAC,iBAAiB,EAAE,WAAW,EAAE,MAAM,CAAC,CAAA;gBACvD,GAAG,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,EAAE,8CAA8C,CAAC,CAAA;YACzE,CAAC;QACH,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,gDAAgD,CAAC,CAAA;QAClF,CAAC;QAED,MAAM,SAAS,GAAG;YAChB,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,IAAI;YACpC,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,YAAY,KAAK,IAAI;YAChD,kBAAkB,EAAE,IAAI,CAAC,OAAO,CAAC,kBAAkB,KAAK,IAAI;YAC5D,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW,IAAI,SAAS;SACnD,CAAA;QAED,IAAI,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,uBAAuB,IAAI,IAAI,EAAE,CAAC;YAClE,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,uBAAuB,CAAC,EAAE,IAAI,EAAE,GAAG,SAAS,EAAE,CAAC,CAAA;YACtG,IAAI,UAAU,EAAE,CAAC;gBACf,OAAM;YACR,CAAC;QACH,CAAC;QAED,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAA;QAClD,MAAM,SAAS,CAAC;YACd,eAAe,EAAE,IAAI;YACrB,YAAY;YACZ,QAAQ;YACR,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,OAAO,EAAE,WAAW,EAAE,OAAO;YAC7B,GAAG,SAAS;SACb,CAAC,CAAA;IACJ,CAAC;IAED,4GAA4G;IAC5G,KAAK,CAAC,6BAA6B,CAAC,IAAU;QAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAA;QACrC,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,WAAW,EAAE,CAAA;QAC1D,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAA;QAE5B,2FAA2F;QAC3F,gGAAgG;QAChG,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,EAAE,CAAA;QAClC,MAAM,cAAc,GAAa,OAAO,CAAC,UAAU,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAA;QACjH,IAAI,QAAQ,IAAI,cAAc,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YACjD,MAAM,IAAI,yBAAyB,CACjC,sFAAsF;gBACpF,6EAA6E;gBAC7E,4EAA4E;gBAC5E,mCAAmC;gBACnC,sFAAsF;gBACtF,0CAA0C;gBAC1C,yFAAyF;gBACzF,gFAAgF;gBAChF,gDAAgD,CACnD,CAAA;QACH,CAAC;QACD,MAAM,kBAAkB,GAAG,cAAc,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAA;QACjF,MAAM,iBAAiB,GAAG,cAAc,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAA;QAE1D,sBAAsB;QACtB,MAAM,OAAO,GAAS;YACpB,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,KAAK;YACb,gBAAgB,EAAE,OAAO,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS;YACnF,gBAAgB,EAAE,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC,aAAa,EAAE,sBAAsB,CAAC;YAC3F,KAAK,EAAE,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;YACpD,KAAK,EAAE,OAAO,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS;SACvE,CAAA;QAED,0BAA0B;QAC1B,gFAAgF;QAChF,oFAAoF;QACpF,IAAI,SAA0C,CAAA;QAC9C,IAAI,QAA8B,CAAA;QAElC,IAAI,iBAAiB,EAAE,CAAC;YACtB,gEAAgE;YAChE,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,CAAA;YAC3G,SAAS,GAAG,MAAM,CAAC,IAAI,CAAA;YACvB,wEAAwE;YACxE,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAA;QACvB,CAAC;aAAM,CAAC;YACN,wDAAwD;YACxD,MAAM,gBAAgB,GAAwB;gBAC5C,cAAc,EAAE;oBACd,SAAS,EAAE,SAAS;oBACpB,MAAM,EAAE,uBAAuB;oBAC/B,kBAAkB,EAAE,mBAAmB;iBACxC;gBACD,aAAa,EAAE;oBACb,SAAS,EAAE,SAAS;oBACpB,MAAM,EAAE,sBAAsB;oBAC9B,kBAAkB,EAAE,mBAAmB;iBACxC;gBACD,cAAc,EAAE;oBACd,SAAS,EAAE,SAAS;oBACpB,MAAM,EAAE,uBAAuB;oBAC/B,kBAAkB,EAAE,mBAAmB;iBACxC;gBACD,eAAe,EAAE;oBACf,SAAS,EAAE,SAAS;oBACpB,MAAM,EAAE,sBAAsB;oBAC9B,kBAAkB,EAAE,eAAe;iBACpC;gBACD,UAAU,EAAE;oBACV,SAAS,EAAE,SAAS;oBACpB,MAAM,EAAE,gBAAgB;oBACxB,kBAAkB,EAAE,WAAW;iBAChC;aACF,CAAA;YAED,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK;gBAC1B,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,KAAK,CAAC;gBACxC,CAAC,CAAC,QAAQ;oBACR,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,IAAI,CAAC,YAAY,EAAE;oBAC7C,CAAC,CAAC;wBACE,IAAI,EAAE,gBAAgB;wBACtB,GAAG,EAAE,IAAI,CAAC,YAAY;qBACvB,CAAA;YACP,SAAS,GAAG,MAAM,CAAC,IAAI,CAAA;YACvB,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAA;QACvB,CAAC;QAED,+EAA+E;QAC/E,oFAAoF;QACpF,sFAAsF;QACtF,gFAAgF;QAChF,qEAAqE;QACrE,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YACnB,SAAS,GAAG,EAAE,GAAG,SAAS,EAAE,iBAAiB,EAAE,EAAE,SAAS,EAAE,iBAAiB,EAAE,eAAe,EAAE,IAAI,EAAE,EAAE,CAAA;YACxG,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC;gBAC3C,QAAQ,GAAG,CAAC,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,iBAAiB,CAAC,CAAA;YACrD,CAAC;QACH,CAAC;QAED,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,CAAA;QAEvI,qDAAqD;QACrD,mFAAmF;QACnF,kFAAkF;QAClF,wDAAwD;QACxD,MAAM,SAAS,GAAa,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,CAAA;QACpE,IAAI,IAAI,CAAC,OAAO,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;YACnC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,sBAAsB,CAAC,EAAE,CAAC;gBAChD,SAAS,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAA;YACxC,CAAC;QACH,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,mCAAmC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,uBAAuB,CAAC,SAAS,CAAC,CAAA;QACtH,IAAI,SAAS,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;YACrD,SAAS,CAAC,IAAI,CAAC,cAAc,CAAC,CAAA;QAChC,CAAC;QACD,wFAAwF;QACxF,IAAI,CAAC,mBAAmB,GAAG,SAAS,CAAA;QAEpC,gGAAgG;QAChG,2FAA2F;QAC3F,+DAA+D;QAC/D,IAAI,CAAC,WAAW,GAAG,SAAS,CAAA;QAE5B,+BAA+B;QAC/B,MAAM,eAAe,GAAG,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAA;QAC/D,MAAM,GAAG,GAAQ;YACf,OAAO,EAAE,qBAAqB;YAC9B,eAAe,EAAE,SAAS,EAAE,6FAA6F;YACzH,KAAK,EAAE,QAAQ;YACf,KAAK,EAAE,QAAQ;YACf,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,eAAe,UAAU,CAAC,CAAC,CAAC,SAAS;YACvE,OAAO,EAAE,YAAY,eAAe,UAAU;YAC9C,UAAU,EAAE,kBAAkB;SAC/B,CAAA;QAED,mFAAmF;QACnF,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAA;QACvB,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,IAAI,CAAC,CAAC,CAAC,YAAY,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAA;QAE5H,8BAA8B;QAC9B,MAAM,WAAW,GAAG,OAAO,CAAC,KAAK,CAAA;QACjC,MAAM,KAAK,GAAG,WAAW,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;QAE5E,0EAA0E;QAC1E,6DAA6D;QAC7D,MAAM,KAAK,GAAyB;YAClC,CAAC,OAAO,CAAC,EAAE,OAAO;SACnB,CAAA;QAED,uEAAuE;QACvE,oEAAoE;QACpE,8DAA8D;QAE9D,oCAAoC;QACpC,MAAM,SAAS,GAAkB;YAC/B,kBAAkB;YAClB,IAAI,EAAE,OAAO;YACb,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,QAAQ;YAC5C,KAAK,EAAE,KAAK;YAEZ,yEAAyE;YACzE,qEAAqE;YACrE,GAAG,CAAC,IAAI,KAAK,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC;gBACvC,CAAC,CAAC;oBACE,SAAS,EAAE;wBACT,CAAC,iBAAiB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,EAAE;4BACjC,WAAW,EAAE,iBAAiB,CAAC,IAAI,EAAE,MAAM,CAAC;4BAC5C,UAAU,EAAE,iBAAiB,CAAC,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;yBACpE;qBACF;iBACF;gBACH,CAAC,CAAC,EAAE,CAAC;YAEP,yCAAyC;YACzC,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,WAAW;YAC/C,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,OAAO,CAAC;YAChD,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,QAAQ;YAChC,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,WAAW;YAC3C,IAAI,EAAE,QAAQ;YAEd,sBAAsB;YACtB,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,SAAS;YAC7C,OAAO,EAAE,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC,OAAO,CAAC;YAEnD,cAAc;YACd,WAAW,EAAE,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC;YAE3C,sHAAsH;YACtH,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,CAAC,iBAAiB,IAAI,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;YAExG,aAAa;YACb,KAAK,EAAE,SAAS;YAChB,KAAK,EAAE,SAAS;YAEhB,QAAQ;YACR,KAAK,EAAE,KAAK;YAEZ,OAAO;YACP,IAAI,EAAE;gBACJ,CAAC,OAAO,CAAC,EAAE,GAAG;aACf;SACF,CAAA;QAED,OAAO,aAAa,CAAC,SAAS,CAAC,CAAA;IACjC,CAAC;IAED;;OAEG;IACK,gBAAgB,CAAC,OAAsB;QAC7C,MAAM,GAAG,GAAkC,EAAE,CAAA;QAE7C,gDAAgD;QAChD,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,MAAM,EAAE,CAAC;YACjC,GAAG,CAAC,MAAM,GAAG,kBAAkB,CAAA;QACjC,CAAC;QAED,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;YACxB,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,WAAW,CAAC,CAAA;QACtC,CAAC;QAED,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAA;IACtD,CAAC;IAED;;;OAGG;IACK,kBAAkB,CAAC,OAAsB;QAC/C,mDAAmD;QACnD,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,OAAO,OAAO,CAAC,MAAM,CAAA;QACvB,CAAC;QAED,sFAAsF;QACtF,OAAO;YACL,uDAAuD,EAAE;gBACvD,IAAI,EAAE,2EAA2E;aAClF;YACD,uDAAuD,EAAE;gBACvD,IAAI,EAAE,2EAA2E;aAClF;YACD,0BAA0B,EAAE;gBAC1B,IAAI,EAAE,8CAA8C;aACrD;YACD,mBAAmB,EAAE;gBACnB,IAAI,EAAE,uBAAuB;aAC9B;YACD,oBAAoB,EAAE;gBACpB,OAAO,EAAE,wBAAwB;aAClC;SACF,CAAA;IACH,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,YAAY,CAAC,SAAiB;QAC1C,IAAI,CAAC;YACH,MAAM,iBAAiB,GAAG,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAA;YACzD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,iBAAiB,EAAE,SAAS,CAAC,CAAA;YAC3D,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,iBAAiB,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,KAAK,iBAAiB,EAAE,CAAC;gBACzF,MAAM,IAAI,yBAAyB,CAAC,kFAAkF,QAAQ,IAAI,CAAC,CAAA;YACrI,CAAC;YACD,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,CAAA;YAEzC,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC3B,OAAO,SAAS,CAAA;YAClB,CAAC;YAED,MAAM,KAAK,GAAwB,EAAE,CAAA;YACrC,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;gBACjC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAA;gBAChE,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAC1B,MAAM,IAAI,yBAAyB,CAAC,sBAAsB,QAAQ,EAAE,CAAC,CAAA;gBACvE,CAAC;gBACD,KAAK,CAAC,QAAQ,CAAC,GAAG;gBAChB,iEAAiE;gBACjE,uCAAuC;iBACxC,CAAA;YACH,CAAC;YAED,OAAO,KAAK,CAAA;QACd,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,GAAG,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,uCAAuC,CAAC,CAAA;YAC1E,MAAM,CAAC,CAAA;QACT,CAAC;IACH,CAAC;IAED;;OAEG;IACH,oBAAoB,CAAC,OAAyC;QAC5D,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,SAAS,CAAA;QAClB,CAAC;QACD,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAChC,OAAO,CAAC,OAAO,CAAC,CAAA;QAClB,CAAC;QACD,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAA;IACjD,CAAC;IAED;;OAEG;IACH,kBAAkB,CAChB,KAAQ;QAKR,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,EAAE,CAAC;YAC3D,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,CAAA;QAC5C,CAAC;QACD,MAAM,IAAI,GAA4B,EAAE,CAAA;QACxC,MAAM,GAAG,GAAa,EAAE,CAAA;QAExB,kCAAkC;QAClC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1B,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE;gBAC/C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;oBACtB,MAAM,IAAI,KAAK,CAAC,2BAA2B,IAAI,EAAE,CAAC,CAAA;gBACpD,CAAC;gBACD,IAAI,CAAC,IAAI,CAAC,GAAG,MAAM,CAAA;gBACnB,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YAChB,CAAC,CAAC,CAAA;YACF,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAA;QACtB,CAAC;QAED,2CAA2C;QAC3C,MAAM,cAAc,GAAG,IAAI,CAAC,qBAAqB,CAAC,KAAK,EAAE,IAAI,CAAC,YAAY,CAAC,CAAA;QAC3E,KAAK,MAAM,IAAI,IAAI,cAAc,IAAI,EAAE,EAAE,CAAC;YACxC,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC7B,0BAA0B;gBAC1B,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YAChB,CAAC;iBAAM,CAAC;gBACN,uCAAuC;gBACvC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE;oBAC9C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;wBACtB,MAAM,IAAI,KAAK,CAAC,2BAA2B,IAAI,EAAE,CAAC,CAAA;oBACpD,CAAC;oBACD,IAAI,CAAC,IAAI,CAAC,GAAG,MAAM,CAAA;oBACnB,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;gBAChB,CAAC,CAAC,CAAA;YACJ,CAAC;QACH,CAAC;QAED,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,GAAG,EAAE,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,EAAE,CAAA;IACzG,CAAC;IAEO,uBAAuB,CAAC,KAAsC;QACpE,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,KAAK,CAAA;QACd,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YACxC,IAAI,IAAI,EAAE,SAAS,KAAK,iBAAiB,IAAI,IAAI,CAAC,eAAe,CAAC,KAAK,IAAI,EAAE,CAAC;gBAC5E,OAAO,IAAI,CAAA;YACb,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAA;IACd,CAAC;IAED;;OAEG;IACK,qBAAqB,CAAI,KAAoB,EAAE,QAAa;QAClE,MAAM,MAAM,GAAa,EAAE,CAAA;QAC3B,KAAK,MAAM,IAAI,IAAI,KAAK,IAAI,EAAE,EAAE,CAAC;YAC/B,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBACnD,MAAM,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,CAAA;YAC1B,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YACnB,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAA;IAC/C,CAAC;CACF","sourcesContent":["import { Arch, archFromString, copyDir, InvalidConfigurationError, log, removeNullish, toLinuxArchString } from \"builder-util\"\n\nimport { deepAssign, isValidKey, Nullish } from \"builder-util-runtime\"\nimport _fsExtra from \"fs-extra\"\nimport * as yaml from \"js-yaml\"\nimport * as path from \"path\"\nimport { PlugDescriptor, SlotDescriptor, SnapOptions24 } from \"../../../options/SnapOptions.js\"\nimport { SnapCore } from \"./SnapTarget.js\"\nimport { buildSnapCommandLauncherScript } from \"./snapCommand.js\"\nimport { App, Part, SnapcraftYAML } from \"./snapcraft.js\"\nimport { buildSnap, DEFAULT_STAGE_PACKAGES, SNAPCRAFT_YAML_OPTIONS } from \"./snapcraftBuilder.js\"\nconst { chmod, copy, mkdir, readdir, remove, writeFile } = _fsExtra\n\n// Electron's setuid sandbox helper. Removed from the staged app when the snap runs with\n// `--no-sandbox` (snap confinement supplies its own sandbox via the browser-support interface).\nconst CHROME_SANDBOX = \"chrome-sandbox\"\n// Launcher script name used when the app command cannot be expressed inline (see resolveSnapCommand).\nconst SNAP_COMMAND_LAUNCHER = \"command.sh\"\n\n/** Snap build strategy for core24 — generates a native snapcraft.yaml and invokes the snapcraft CLI. */\nexport class SnapCore24 extends SnapCore<SnapOptions24> {\n  // browser-support is intentionally absent here; it is auto-injected in mapSnapOptionsToSnapcraftYAML\n  // when the user has not provided custom plugs, so it always lands in both root plugs and app plugs.\n  defaultPlugs = [\"desktop\", \"desktop-legacy\", \"home\", \"x11\", \"wayland\", \"unity7\", \"network\", \"gsettings\", \"audio-playback\", \"pulseaudio\", \"opengl\"]\n\n  // Snap file hierarchy:\n  // - snap/gui/ gets automatically copied to meta/gui/ in the final snap\n  // - Desktop files in meta/gui/ are used for menu integration\n  readonly configRelativePath = \"snap\"\n  readonly guiRelativePath = path.join(this.configRelativePath, \"gui\")\n\n  // Computed in createDescriptor (mapSnapOptionsToSnapcraftYAML) and consumed in buildSnap.\n  // getSnapCore() returns a fresh SnapCore24 per arch build, so this per-instance state is\n  // never shared across builds.\n  private removeChromeSandbox = false\n  // Args embedded into the generated launcher script (executableArgs + forceX11/no-sandbox flags).\n  private commandArgs: string[] = []\n\n  async createDescriptor(arch: Arch): Promise<SnapcraftYAML> {\n    return await this.mapSnapOptionsToSnapcraftYAML(arch)\n  }\n\n  private isHostMode(): boolean {\n    return this.options.useDestructiveMode === true\n  }\n\n  /** Writes the snapcraft.yaml, stages app files, then invokes `buildSnap()` to run the actual snapcraft build. */\n  async buildSnap(params: { snap: SnapcraftYAML; appOutDir: string; stageDir: string; snapArch: Arch; artifactPath: string }): Promise<void> {\n    const { snap, appOutDir, stageDir, artifactPath } = params\n\n    const snapDirResolved = path.resolve(stageDir, this.configRelativePath)\n    const snapcraftYamlPath = path.join(snapDirResolved, \"snapcraft.yaml\")\n\n    // Create snap/gui directory for desktop files and icons\n    // Snapcraft will automatically copy snap/gui/ contents to meta/gui/ in the final snap\n    const guiOutput = path.resolve(stageDir, this.guiRelativePath)\n    await mkdir(guiOutput, { recursive: true })\n\n    const yamlContent = yaml.dump(snap, SNAPCRAFT_YAML_OPTIONS)\n    await writeFile(snapcraftYamlPath, yamlContent, \"utf8\")\n    log.debug(snap, \"generated snapcraft.yaml\")\n\n    // Copy icon to snap/gui/ directory\n    // Snapcraft will automatically copy this to meta/gui/ in the final snap\n    const desktopExtraProps: Record<string, string> = {}\n    const icon = this.helper.maxIconPath\n    if (icon) {\n      const iconFileName = `${snap.name}${path.extname(icon)}`\n      await copy(icon, path.join(guiOutput, iconFileName))\n      // Icon path will be available at ${SNAP}/meta/gui/<icon-file> after installation\n      desktopExtraProps.Icon = `\\${SNAP}/meta/gui/${iconFileName}`\n    }\n\n    // Create desktop file in snap/gui/ directory\n    // Snapcraft will automatically copy this to meta/gui/ in the final snap\n    const desktopFilePath = path.join(guiOutput, `${this.helper.getDesktopFileName(snap.name)}.desktop`)\n    await this.helper.writeDesktopEntry(this.options, this.packager.executableName + \" %U\", desktopFilePath, desktopExtraProps)\n\n    // Copy app files to the project root `app` directory so `source: app`\n    // in the generated `snapcraft.yaml` (which is under `snap/`) can be\n    // resolved by snapcraft running in the build environment.\n    const appDir = path.resolve(stageDir, \"app\")\n    if (path.resolve(appDir) !== path.resolve(appOutDir)) {\n      log.debug({ to: log.filePath(appDir), from: log.filePath(appOutDir) }, \"copying app files to project root app directory\")\n      await copyDir(appOutDir, appDir)\n    }\n\n    // Drop the setuid chrome-sandbox helper before snapcraft stages the app — it is unusable under\n    // strict confinement when launching with --no-sandbox (mirrors SnapCoreLegacy).\n    if (this.removeChromeSandbox) {\n      await remove(path.join(appDir, CHROME_SANDBOX))\n    }\n\n    // Write the launcher script the command always points at (see SNAP_COMMAND_LAUNCHER).\n    // It lands at the snap root ($SNAP/command.sh) — it is intentionally not added to `organize`.\n    const launcherPath = path.join(appDir, SNAP_COMMAND_LAUNCHER)\n    await writeFile(launcherPath, buildSnapCommandLauncherScript({ execName: this.packager.executableName, args: this.commandArgs }), { mode: 0o755 })\n    await chmod(launcherPath, 0o755)\n\n    // Auto-generate `organize` mapping for the app part so top-level helper\n    // binaries and resources are placed under `app/` inside the snap. Update\n    // the already-written `snapcraft.yaml` so the build sees the mapping.\n    try {\n      const appPart = snap.parts[snap.name]\n      if (appPart) {\n        const entries = (await readdir(appOutDir)).sort()\n        // Null-prototype map: entry names come from the filesystem, so a top-level file named\n        // \"__proto__\" / \"constructor\" / \"toString\" must not read inherited keys (which would make\n        // the membership check below skip it) or interact with Object.prototype on assignment.\n        const organize: Record<string, string> = Object.assign(Object.create(null), appPart.organize)\n        for (const entry of entries) {\n          if (!entry) {\n            continue\n          }\n          // Skip files no longer present in the staged app dir (e.g. removed chrome-sandbox) so\n          // snapcraft doesn't fail trying to organize a missing source.\n          if (this.removeChromeSandbox && entry === CHROME_SANDBOX) {\n            continue\n          }\n          // Never organize the launcher under app/. It must stay at the snap root ($SNAP/command.sh)\n          // to match apps.<name>.command. This matters when appOutDir === appDir, where readdir\n          // would otherwise pick up the launcher we just wrote.\n          if (entry === SNAP_COMMAND_LAUNCHER) {\n            continue\n          }\n          if (organize[entry]) {\n            continue\n          }\n          organize[entry] = `app/${entry}`\n        }\n        appPart.organize = organize\n\n        const updatedYaml = yaml.dump(snap, SNAPCRAFT_YAML_OPTIONS)\n        await writeFile(snapcraftYamlPath, updatedYaml, \"utf8\")\n        log.debug({ organize }, \"updated snapcraft.yaml with organize mapping\")\n      }\n    } catch (e: any) {\n      log.warn({ error: e.message }, \"failed to generate and update organize mapping\")\n    }\n\n    const buildMode = {\n      useLXD: this.options.useLXD === true,\n      useMultipass: this.options.useMultipass === true,\n      useDestructiveMode: this.options.useDestructiveMode === true,\n      remoteBuild: this.options.remoteBuild || undefined,\n    }\n\n    if (this.packager.packagerOptions.effectiveOptionComputed != null) {\n      const shouldSkip = await this.packager.packagerOptions.effectiveOptionComputed({ snap, ...buildMode })\n      if (shouldSkip) {\n        return\n      }\n    }\n\n    const rootOptions = this.packager.config.snapcraft\n    await buildSnap({\n      snapcraftConfig: snap,\n      artifactPath,\n      stageDir,\n      packager: this.packager,\n      cscLink: rootOptions?.cscLink,\n      ...buildMode,\n    })\n  }\n\n  /** Converts `SnapOptions24` into a fully resolved `SnapcraftYAML` descriptor for the given architecture. */\n  async mapSnapOptionsToSnapcraftYAML(arch: Arch): Promise<SnapcraftYAML> {\n    const appInfo = this.packager.appInfo\n    const appName = this.packager.executableName.toLowerCase()\n    const options = this.options\n\n    // Default to [\"gnome\"] in normal builds; no extensions in host/destructive-mode (where the\n    // gnome extension is incompatible). Throw if the user explicitly includes \"gnome\" in host mode.\n    const hostMode = this.isHostMode()\n    const extensionsList: string[] = options.extensions != null ? [...options.extensions] : hostMode ? [] : [\"gnome\"]\n    if (hostMode && extensionsList.includes(\"gnome\")) {\n      throw new InvalidConfigurationError(\n        `The \"gnome\" snapcraft extension is incompatible with host/destructive-mode builds.\\n` +\n          `In this mode snapcraft cannot resolve the extension's command-chain source ` +\n          `(/usr/share/snapcraft/extensions/desktop/command-chain) and will fail.\\n\\n` +\n          `To resolve this, choose one of:\\n` +\n          `  1. Remove \"gnome\" from snapcraft.core24.extensions (or set it to []) and add any\\n` +\n          `     required stage-packages manually.\\n` +\n          `  2. Switch to an isolated build environment by setting snapcraft.core24.useLXD: true\\n` +\n          `     or snapcraft.core24.useMultipass: true instead of useDestructiveMode.\\n\\n` +\n          `See: https://snapcraft.io/docs/gnome-extension`\n      )\n    }\n    const resolvedExtensions = extensionsList.length > 0 ? extensionsList : undefined\n    const useGnomeExtension = extensionsList.includes(\"gnome\")\n\n    // Create the app part\n    const appPart: Part = {\n      plugin: \"dump\",\n      source: \"app\",\n      \"build-packages\": options.buildPackages?.length ? options.buildPackages : undefined,\n      \"stage-packages\": this.expandDefaultsInArray(options.stagePackages, DEFAULT_STAGE_PACKAGES),\n      after: this.expandDefaultsInArray(options.after, []),\n      stage: options.appPartStage?.length ? options.appPartStage : undefined,\n    }\n\n    // Process plugs and slots\n    // When using GNOME extension, we don't need to manually configure content snaps\n    // The extension will handle: gnome-46-2404, gtk-3-themes, icon-themes, sound-themes\n    let rootPlugs: Record<string, any> | undefined\n    let appPlugs: string[] | undefined\n\n    if (useGnomeExtension) {\n      // With GNOME extension, only process user-provided custom plugs\n      const result = options.plugs ? this.processPlugOrSlots(options.plugs) : { root: undefined, app: undefined }\n      rootPlugs = result.root\n      // Extension automatically adds common plugs, so we only add custom ones\n      appPlugs = result.app\n    } else {\n      // Without GNOME extension, we need manual content snaps\n      const defaultRootPlugs: Record<string, any> = {\n        \"gtk-3-themes\": {\n          interface: \"content\",\n          target: \"$SNAP/data-dir/themes\",\n          \"default-provider\": \"gtk-common-themes\",\n        },\n        \"icon-themes\": {\n          interface: \"content\",\n          target: \"$SNAP/data-dir/icons\",\n          \"default-provider\": \"gtk-common-themes\",\n        },\n        \"sound-themes\": {\n          interface: \"content\",\n          target: \"$SNAP/data-dir/sounds\",\n          \"default-provider\": \"gtk-common-themes\",\n        },\n        \"gnome-46-2404\": {\n          interface: \"content\",\n          target: \"$SNAP/gnome-platform\",\n          \"default-provider\": \"gnome-46-2404\",\n        },\n        \"gpu-2404\": {\n          interface: \"content\",\n          target: \"$SNAP/gpu-2404\",\n          \"default-provider\": \"mesa-2404\",\n        },\n      }\n\n      const result = options.plugs\n        ? this.processPlugOrSlots(options.plugs)\n        : hostMode\n          ? { root: undefined, app: this.defaultPlugs }\n          : {\n              root: defaultRootPlugs,\n              app: this.defaultPlugs,\n            }\n      rootPlugs = result.root\n      appPlugs = result.app\n    }\n\n    // Always add browser-support with allow-sandbox so Chromium's internal sandbox\n    // can create user namespaces under strict confinement.  Without allow-sandbox: true\n    // the app crashes immediately with \"FATAL: Permission denied (13)\" in credentials.cc.\n    // Skip the injection only when the user has explicitly provided their own plugs\n    // (they are responsible for including browser-support in that case).\n    if (!options.plugs) {\n      rootPlugs = { ...rootPlugs, \"browser-support\": { interface: \"browser-support\", \"allow-sandbox\": true } }\n      if (!appPlugs?.includes(\"browser-support\")) {\n        appPlugs = [...(appPlugs ?? []), \"browser-support\"]\n      }\n    }\n\n    const { root: rootSlots, app: appSlots } = options.slots ? this.processPlugOrSlots(options.slots) : { root: undefined, app: undefined }\n\n    // Build the effective arg list for the snap command.\n    // Start with any user-supplied executableArgs, then conditionally add --no-sandbox\n    // if browser-support with allow-sandbox:true is not present in the resolved plugs\n    // (mirrors the same logic in SnapCoreLegacy.buildSnap).\n    const extraArgs: string[] = [...(this.options.executableArgs ?? [])]\n    if (this.options.forceX11 === true) {\n      if (!extraArgs.includes(\"--ozone-platform=x11\")) {\n        extraArgs.push(\"--ozone-platform=x11\")\n      }\n    }\n    const noSandbox = this.helper.isElectronVersionGreaterOrEqualThan(\"5.0.0\") && !this.isBrowserSandboxAllowed(rootPlugs)\n    if (noSandbox && !extraArgs.includes(\"--no-sandbox\")) {\n      extraArgs.push(\"--no-sandbox\")\n    }\n    // With --no-sandbox the setuid chrome-sandbox helper is unused; strip it from the snap.\n    this.removeChromeSandbox = noSandbox\n\n    // The command always points at a generated launcher script (written in buildSnap). This keeps a\n    // single uniform command path and sidesteps snapd's character/word-splitting rules for the\n    // command field (e.g. --ozone-platform=x11, --js-flags=\"...\").\n    this.commandArgs = extraArgs\n\n    // Create the app configuration\n    const desktopBaseName = this.helper.getDesktopFileName(appName)\n    const app: App = {\n      command: SNAP_COMMAND_LAUNCHER,\n      \"command-chain\": undefined, // explicitly undefined so removeNullish strips it; extensions supply their own command-chain\n      plugs: appPlugs,\n      slots: appSlots,\n      autostart: options.autoStart ? `${desktopBaseName}.desktop` : undefined,\n      desktop: `meta/gui/${desktopBaseName}.desktop`,\n      extensions: resolvedExtensions,\n    }\n\n    // Icon path — build-time relative path so snapcraft can find the file in snap/gui/\n    await this.helper.icons\n    const iconPath = this.helper.maxIconPath != null ? `snap/gui/${appName}${path.extname(this.helper.maxIconPath)}` : undefined\n\n    // Process hooks if configured\n    const hooksConfig = options.hooks\n    const hooks = hooksConfig ? await this.processHooks(hooksConfig) : undefined\n\n    // Parts configuration - the extension automatically adds a gnome/sdk part\n    // Don't manually add desktop-launch when using the extension\n    const parts: Record<string, Part> = {\n      [appName]: appPart,\n    }\n\n    // Note: `organize` will be generated later in `buildSnap` based on the\n    // actual contents of the built app directory so helper binaries and\n    // resources are automatically moved under `app/` in the snap.\n\n    // Build the snapcraft configuration\n    const snapcraft: SnapcraftYAML = {\n      // Required fields\n      name: appName,\n      base: \"core24\",\n      confinement: options.confinement || \"strict\",\n      parts: parts,\n\n      // Architecture/Platform — only needed for cross-compilation; snapcraft 8\n      // defaults to host arch and snapcraft 7 rejects this field entirely.\n      ...(arch !== archFromString(process.arch)\n        ? {\n            platforms: {\n              [toLinuxArchString(arch, \"snap\")]: {\n                \"build-for\": toLinuxArchString(arch, \"snap\"),\n                \"build-on\": toLinuxArchString(archFromString(process.arch), \"snap\"),\n              },\n            },\n          }\n        : {}),\n\n      // Metadata - with fallbacks from appInfo\n      version: appInfo.version,\n      summary: options.summary || appInfo.productName,\n      description: this.helper.getDescription(options),\n      grade: options.grade || \"stable\",\n      title: options.title || appInfo.productName,\n      icon: iconPath,\n\n      // Build configuration\n      compression: options.compression || undefined,\n      assumes: this.normalizeAssumesList(options.assumes),\n\n      // Environment\n      environment: this.buildEnvironment(options),\n\n      // User-supplied layout always wins. Without gnome extension and not in host mode, fall back to content-snap defaults.\n      layout: options.layout ?? (useGnomeExtension || hostMode ? undefined : this.buildDefaultLayout(options)),\n\n      // Interfaces\n      plugs: rootPlugs,\n      slots: rootSlots,\n\n      // Hooks\n      hooks: hooks,\n\n      // Apps\n      apps: {\n        [appName]: app,\n      },\n    }\n\n    return removeNullish(snapcraft)\n  }\n\n  /**\n   * Build environment variables with proper defaults\n   */\n  private buildEnvironment(options: SnapOptions24): Record<string, string | null> | undefined {\n    const env: Record<string, string | null> = {}\n\n    // Add default TMPDIR for Electron/Chromium apps\n    if (!options.environment?.TMPDIR) {\n      env.TMPDIR = \"$XDG_RUNTIME_DIR\"\n    }\n\n    if (options.environment) {\n      deepAssign(env, options.environment)\n    }\n\n    return Object.keys(env).length > 0 ? env : undefined\n  }\n\n  /**\n   * Build default layout for core24 with GNOME platform content snaps (non-extension mode)\n   * This allows the app to access libraries from the gnome-46-2404 and mesa-2404 content snaps\n   */\n  private buildDefaultLayout(options: SnapOptions24): Record<string, any> | undefined {\n    // If user provides custom layout, use that instead\n    if (options.layout) {\n      return options.layout\n    }\n\n    // Default layout for core24 Electron apps using GNOME content snaps WITHOUT extension\n    return {\n      \"/usr/lib/$CRAFT_ARCH_TRIPLET_BUILD_FOR/webkit2gtk-4.0\": {\n        bind: \"$SNAP/gnome-platform/usr/lib/$CRAFT_ARCH_TRIPLET_BUILD_FOR/webkit2gtk-4.0\",\n      },\n      \"/usr/lib/$CRAFT_ARCH_TRIPLET_BUILD_FOR/webkit2gtk-4.1\": {\n        bind: \"$SNAP/gnome-platform/usr/lib/$CRAFT_ARCH_TRIPLET_BUILD_FOR/webkit2gtk-4.1\",\n      },\n      \"/usr/share/xml/iso-codes\": {\n        bind: \"$SNAP/gnome-platform/usr/share/xml/iso-codes\",\n      },\n      \"/usr/share/libdrm\": {\n        bind: \"$SNAP/gpu-2404/libdrm\",\n      },\n      \"/usr/share/drirc.d\": {\n        symlink: \"$SNAP/gpu-2404/drirc.d\",\n      },\n    }\n  }\n\n  /**\n   * Process hooks directory into hook definitions\n   */\n  private async processHooks(hooksPath: string): Promise<Record<string, any> | undefined> {\n    try {\n      const buildResourcesDir = this.packager.buildResourcesDir\n      const hooksDir = path.resolve(buildResourcesDir, hooksPath)\n      if (!hooksDir.startsWith(buildResourcesDir + path.sep) && hooksDir !== buildResourcesDir) {\n        throw new InvalidConfigurationError(`snapcraft.core24.hooks must resolve within the build resources directory (got \"${hooksDir}\")`)\n      }\n      const hookFiles = await readdir(hooksDir)\n\n      if (hookFiles.length === 0) {\n        return undefined\n      }\n\n      const hooks: Record<string, any> = {}\n      for (const hookFile of hookFiles) {\n        const hookName = path.basename(hookFile, path.extname(hookFile))\n        if (!isValidKey(hookName)) {\n          throw new InvalidConfigurationError(`Invalid hook name: ${hookName}`)\n        }\n        hooks[hookName] = {\n          // Hook definitions will be populated by snapcraft from the files\n          // Just register that these hooks exist\n        }\n      }\n\n      return hooks\n    } catch (e: any) {\n      log.error({ message: e.message }, \"error processing Snap hooks directory\")\n      throw e\n    }\n  }\n\n  /**\n   * Normalize assumes list (can be string or array)\n   */\n  normalizeAssumesList(assumes: Array<string> | string | Nullish): string[] | undefined {\n    if (!assumes) {\n      return undefined\n    }\n    if (typeof assumes === \"string\") {\n      return [assumes]\n    }\n    return assumes.length > 0 ? assumes : undefined\n  }\n\n  /**\n   * Process plugs or slots into root-level definitions and app-level references\n   */\n  processPlugOrSlots<T extends Array<string | SlotDescriptor | PlugDescriptor> | SlotDescriptor | PlugDescriptor | null>(\n    items: T\n  ): {\n    root: Record<string, unknown> | undefined\n    app: string[] | undefined\n  } {\n    if (!items || (Array.isArray(items) && items.length === 0)) {\n      return { root: undefined, app: undefined }\n    }\n    const root: Record<string, unknown> = {}\n    const app: string[] = []\n\n    // Handle single descriptor object\n    if (!Array.isArray(items)) {\n      Object.entries(items).forEach(([name, config]) => {\n        if (!isValidKey(name)) {\n          throw new Error(`Invalid plug/slot name: ${name}`)\n        }\n        root[name] = config\n        app.push(name)\n      })\n      return { root, app }\n    }\n\n    // Handle array - support \"default\" keyword\n    const processedItems = this.expandDefaultsInArray(items, this.defaultPlugs)\n    for (const item of processedItems ?? []) {\n      if (typeof item === \"string\") {\n        // Simple string reference\n        app.push(item)\n      } else {\n        // Descriptor object with configuration\n        Object.entries(item).forEach(([name, config]) => {\n          if (!isValidKey(name)) {\n            throw new Error(`Invalid plug/slot name: ${name}`)\n          }\n          root[name] = config\n          app.push(name)\n        })\n      }\n    }\n\n    return { root: Object.keys(root).length > 0 ? root : undefined, app: app.length > 0 ? app : undefined }\n  }\n\n  private isBrowserSandboxAllowed(plugs: Record<string, any> | undefined): boolean {\n    if (!plugs) {\n      return false\n    }\n    for (const plug of Object.values(plugs)) {\n      if (plug?.interface === \"browser-support\" && plug[\"allow-sandbox\"] === true) {\n        return true\n      }\n    }\n    return false\n  }\n\n  /**\n   * Expand \"default\" keyword in arrays of anything\n   */\n  private expandDefaultsInArray<T>(items: T[] | Nullish, defaults: T[]): T[] | undefined {\n    const result: Array<T> = []\n    for (const item of items ?? []) {\n      if (typeof item === \"string\" && item === \"default\") {\n        result.push(...defaults)\n      } else {\n        result.push(item)\n      }\n    }\n    return result.length > 0 ? result : undefined\n  }\n}\n"]}

package/dist/targets/linux/snap/coreLegacy.d.ts

@@ -1,7 +1,9 @@
 import { Arch } from "builder-util";
 import { SnapOptionsLegacy } from "../../../options/SnapOptions.js";
 import { SnapCore } from "./SnapTarget.js";
+import { shellQuote } from "./snapCommand.js";
 import { SnapcraftYAML } from "./snapcraft.js";
+export { shellQuote };
 export declare class SnapCoreLegacy extends SnapCore<SnapOptionsLegacy & {
     base: "core18" | "core20" | "core22";
 }> {
@@ -23,8 +25,6 @@ export declare class SnapCoreLegacy extends SnapCore<SnapOptionsLegacy & {
     private isBrowserSandboxAllowed;
     private archNameToTriplet;
 }
-/** Single-quote a shell argument, escaping any embedded single quotes. */
-export declare function shellQuote(arg: string): string;
 /**
  * Builds the content of command.sh for a snap package.
  *

package/dist/targets/linux/snap/coreLegacy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"coreLegacy.d.ts","sourceRoot":"","sources":["../../../../src/targets/linux/snap/coreLegacy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAqC,IAAI,EAAmF,MAAM,cAAc,CAAA;AAMvJ,OAAO,EAAkB,iBAAiB,EAAE,MAAM,iCAAiC,CAAA;AAKnF,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAA;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAA;AAoB9C,qBAAa,cAAe,SAAQ,QAAQ,CAAC,iBAAiB,GAAG;IAAE,IAAI,EAAE,QAAQ,GAAG,QAAQ,GAAG,QAAQ,CAAA;CAAE,CAAC;IACxG,OAAO,CAAC,gBAAgB,CAAQ;IAEhC,YAAY,WAAyJ;IAErK,OAAO,CAAC,cAAc;IAQhB,gBAAgB,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,aAAa,CAAC;IA8IpD,SAAS,CAAC,KAAK,EAAE;QAAE,IAAI,EAAE,GAAG,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,IAAI,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;YA+EjH,iBAAiB;YA+CjB,oBAAoB;YAoCpB,cAAc;IA4B5B,OAAO,CAAC,0BAA0B;IAmBlC,OAAO,CAAC,uBAAuB;IAY/B,OAAO,CAAC,iBAAiB;CAe1B;AAaD,0EAA0E;AAC1E,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAE9C;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE;IAAE,UAAU,EAAE,OAAO,CAAC;IAAC,cAAc,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,EAAE,CAAA;CAAE,GAAG,MAAM,CAU3H"}
+{"version":3,"file":"coreLegacy.d.ts","sourceRoot":"","sources":["../../../../src/targets/linux/snap/coreLegacy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAqC,IAAI,EAAmF,MAAM,cAAc,CAAA;AAMvJ,OAAO,EAAkB,iBAAiB,EAAE,MAAM,iCAAiC,CAAA;AAMnF,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAA;AAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAA;AAK9C,OAAO,EAAE,UAAU,EAAE,CAAA;AAkBrB,qBAAa,cAAe,SAAQ,QAAQ,CAAC,iBAAiB,GAAG;IAAE,IAAI,EAAE,QAAQ,GAAG,QAAQ,GAAG,QAAQ,CAAA;CAAE,CAAC;IACxG,OAAO,CAAC,gBAAgB,CAAQ;IAEhC,YAAY,WAAyJ;IAErK,OAAO,CAAC,cAAc;IAQhB,gBAAgB,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,aAAa,CAAC;IA8IpD,SAAS,CAAC,KAAK,EAAE;QAAE,IAAI,EAAE,GAAG,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,IAAI,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;YA+EjH,iBAAiB;YA+CjB,oBAAoB;YAoCpB,cAAc;IA4B5B,OAAO,CAAC,0BAA0B;IAmBlC,OAAO,CAAC,uBAAuB;IAY/B,OAAO,CAAC,iBAAiB;CAe1B;AAaD;;;;;;;;;;;;GAYG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE;IAAE,UAAU,EAAE,OAAO,CAAC;IAAC,cAAc,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,EAAE,CAAA;CAAE,GAAG,MAAM,CAS3H"}

package/dist/targets/linux/snap/coreLegacy.js

@@ -8,9 +8,13 @@ import { getAppImageTools } from "../../../toolsets/appimage.js";
 import { downloadBuilderToolset } from "../../../util/electronGet.js";
 import { isSnapDestructiveMode } from "../../../util/flags.js";
 import { getTemplatePath } from "../../../util/pathManager.js";
+import { buildLauncherScript } from "../launcherScript.js";
 import { SnapCore } from "./SnapTarget.js";
+import { shellQuote } from "./snapCommand.js";
 import { DEFAULT_STAGE_PACKAGES } from "./snapcraftBuilder.js";
 const { outputFile, readFile } = _fsExtra;
+// Re-exported for backwards compatibility with existing imports/tests.
+export { shellQuote };
 // Snap template release info from electron-userland/electron-builder-binaries
 const SNAP_TEMPLATES = {
     amd64: {
@@ -371,10 +375,6 @@ async function readDirPaths(dir, filter) {
     }
     return result;
 }
-/** Single-quote a shell argument, escaping any embedded single quotes. */
-export function shellQuote(arg) {
-    return "'" + arg.replace(/'/g, "'\\''") + "'";
-}
 /**
  * Builds the content of command.sh for a snap package.
  *
@@ -392,11 +392,10 @@ export function buildCommandShContent(opts) {
     const { isTemplate, executableName, extraAppArgs } = opts;
     validateShellEmbeddable(executableName, "executableName");
     const appPrefix = isTemplate ? "" : "app/";
-    let content = `#!/bin/bash -e\nexec "$SNAP/desktop-init.sh" "$SNAP/desktop-common.sh" "$SNAP/desktop-gnome-specific.sh" "$SNAP/${appPrefix}${executableName}"`;
-    if (extraAppArgs.length > 0) {
-        content += " " + extraAppArgs.map(shellQuote).join(" ");
-    }
-    content += ' "$@"';
-    return content;
+    return buildLauncherScript({
+        shebang: "#!/bin/bash -e",
+        command: ['"$SNAP/desktop-init.sh"', '"$SNAP/desktop-common.sh"', '"$SNAP/desktop-gnome-specific.sh"', `"$SNAP/${appPrefix}${executableName}"`],
+        args: extraAppArgs,
+    });
 }
 //# sourceMappingURL=coreLegacy.js.map