app-builder-lib 27.0.0-alpha.3 → 27.0.0-alpha.5

package/dist/options/SnapOptions.js.map

@@ -1 +1 @@
-{"version":3,"file":"SnapOptions.js","sourceRoot":"","sources":["../../src/options/SnapOptions.ts"],"names":[],"mappings":"","sourcesContent":["import { TargetSpecificOptions } from \"../core.js\"\nimport { SnapcraftYAML } from \"../targets/linux/snap/snapcraft.js\"\nimport { CommonLinuxOptions } from \"./linuxOptions.js\"\n\n/**\n * New-style snap configuration. Use this via the `snapcraft` key in your build config.\n * Selects the snapcraft core version and its per-core options.\n */\nexport interface SnapcraftOptions extends TargetSpecificOptions {\n  /**\n   * The snap base to use as the execution environment. Determines which set of per-core options\n   * (`core18`, `core20`, `core22`, `core24`, `custom`) is active.\n   *\n   * Only one core may be selected per build target.\n   */\n  readonly base: \"core18\" | \"core20\" | \"core22\" | \"core24\" | \"custom\"\n\n  /**\n   * Snapcraft Store credentials — base64-encoded credentials string or file path.\n   * Accepts the same formats as `WIN_CSC_LINK` / `CSC_LINK`: base64 data,\n   * absolute/relative/`~/` file paths, and `file://` URIs.\n   * Relative paths are resolved against the build resources directory.\n   *\n   * Injected as `SNAPCRAFT_STORE_CREDENTIALS` into every snapcraft subprocess\n   * (core18/core20/core22/core24 builds and `snapcraft upload`).\n   * Not applied for `base: \"custom\"` — inject credentials manually via environment variables.\n   *\n   * The `SNAP_CSC_LINK` environment variable is the CI-friendly alternative.\n   * Generate with: `snapcraft export-login - | base64 -w0`\n   */\n  readonly cscLink?: string\n\n  /**\n   * Configuration for a core18 build. Only active when `base` is `\"core18\"`.\n   */\n  readonly core18?: SnapOptionsLegacy | null\n  /**\n   * Configuration for a core20 build. Only active when `base` is `\"core20\"`.\n   */\n  readonly core20?: SnapOptionsLegacy | null\n  /**\n   * Configuration for a core22 build. Only active when `base` is `\"core22\"`.\n   */\n  readonly core22?: SnapOptionsLegacy | null\n\n  /**\n   * **[Beta]** Options for building a core24 snap. Uses the snapcraft CLI directly.\n   * Inherits desktop-entry fields from `CommonLinuxOptions` and publish config from `TargetSpecificOptions`.\n   * @beta\n   */\n  readonly core24?: SnapOptions24 | null\n  /**\n   * **[Beta]** Pass-through custom snap configuration. electron-builder will read the\n   * snapcraft.yaml at `yamlPath` and use it verbatim — no plugs, extensions,\n   * organize mappings, or desktop files are injected.\n   * @beta\n   */\n  readonly custom?: SnapOptionsCustom | null\n}\n\nexport interface SnapOptionsCustom {\n  /**\n   * Supports 2 routes:\n   * - Path to an existing `snapcraft.yaml` file, relative to `buildResourcesDir`. electron-builder reads the file and passes it through without modification.\n   * - A `SnapcraftYAML` object directly in the configuration. electron-builder uses the object to generate a `snapcraft.yaml` file, which is then passed through without modification.\n   */\n  readonly yaml?: string | SnapcraftYAML | null\n}\n\nexport interface SnapOptionsLegacy extends CommonLinuxOptions, TargetSpecificOptions {\n  /**\n   * Whether to use the pre-built Electron snap template for faster builds.\n   * When `true`, electron-builder delegates snap assembly to the upstream Electron snap\n   * template rather than running a full snapcraft build, significantly reducing build time.\n   * Defaults to `true` when `stagePackages` is not customised.\n   * Only applicable to x64 and armv7l builds.\n   */\n  readonly useTemplateApp?: boolean\n\n  /**\n   * The type of [snap confinement](https://snapcraft.io/docs/reference/confinement).\n   * - `strict` — recommended; the snap runs in a fully isolated sandbox.\n   * - `devmode` — sandbox violations are logged but not enforced; for development only.\n   * - `classic` — no confinement; equivalent to a traditionally packaged application.\n   *   Requires Snap Store approval before publishing.\n   * @default strict\n   */\n  readonly confinement?: \"devmode\" | \"strict\" | \"classic\" | null\n\n  /**\n   * Environment variables injected into the snap's runtime environment.\n   * Merged with the electron-builder default `{ TMPDIR: \"$XDG_RUNTIME_DIR\" }`.\n   * User-supplied values take precedence.\n   */\n  readonly environment?: { [key: string]: string } | null\n\n  /**\n   * A short summary of the snap (max 78 characters).\n   * Defaults to [productName](./configuration.md#productName).\n   */\n  readonly summary?: string | null\n\n  /**\n   * The quality grade of the snap.\n   * - `stable` — suitable for all channels, including `stable` and `candidate`.\n   * - `devel` — development snapshot; cannot be promoted to `stable` or `candidate`.\n   * @default stable\n   */\n  readonly grade?: \"devel\" | \"stable\" | null\n\n  /**\n   * [Snapd features](https://snapcraft.io/docs/snapcraft-yaml-reference#assumes) that must\n   * be present on the host before the snap can be installed.\n   */\n  readonly assumes?: Array<string> | string | null\n\n  /**\n   * Debian packages required at **build** time (installed inside the build environment).\n   */\n  readonly buildPackages?: Array<string> | null\n\n  /**\n   * Ubuntu packages to **stage** alongside the app (equivalent to `depends` for deb).\n   * Defaults to `[\"libnspr4\", \"libnss3\", \"libxss1\", \"libappindicator3-1\", \"libsecret-1-0\"]`.\n   *\n   * Use the `\"default\"` keyword to extend the default list:\n   * `[\"default\", \"my-extra-lib\"]` appends `my-extra-lib` to the defaults.\n   */\n  readonly stagePackages?: Array<string> | null\n\n  /**\n   * Directory containing [snap hooks](https://snapcraft.io/docs/snap-hooks), relative to\n   * the build resources directory (`build/`).\n   * @default build/snap-hooks\n   */\n  readonly hooks?: string | null\n\n  /**\n   * [Plugs](https://snapcraft.io/docs/reference/interfaces) (consumed interfaces) to declare\n   * for the app entry point.\n   * Defaults to `[\"desktop\", \"desktop-legacy\", \"home\", \"x11\", \"wayland\", \"unity7\",\n   * \"browser-support\", \"network\", \"gsettings\", \"audio-playback\", \"pulseaudio\", \"opengl\"]`.\n   *\n   * Use `\"default\"` in the list to keep the defaults and append extras:\n   * `[\"default\", \"camera\"]` adds `camera` to the standard set.\n   *\n   * To configure plug attributes (e.g. `allow-sandbox` for Chromium's internal sandbox),\n   * use a descriptor object:\n   * ```json\n   * [\n   *   { \"browser-sandbox\": { \"interface\": \"browser-support\", \"allow-sandbox\": true } },\n   *   \"another-simple-plug-name\"\n   * ]\n   * ```\n   */\n  readonly plugs?: Array<string | PlugDescriptor> | PlugDescriptor | null\n\n  /**\n   * [Slots](https://snapcraft.io/docs/reference/interfaces) (provided interfaces) to declare\n   * for the app.\n   *\n   * To expose an MPRIS player under the Chromium bus name (required for strict confinement):\n   * ```json\n   * [{ \"mpris\": { \"name\": \"chromium\" } }]\n   * ```\n   * Chromium [hard-codes](https://source.chromium.org/chromium/chromium/src/+/master:components/system_media_controls/linux/system_media_controls_linux.cc;l=51;bpv=0;bpt=1)\n   * the bus name `chromium`, so the slot name must match for snapd to\n   * [allow it](https://forum.snapcraft.io/t/unable-to-use-mpris-interface/15360/7).\n   */\n  readonly slots?: Array<string | SlotDescriptor> | SlotDescriptor | null\n\n  /**\n   * Names of snapcraft parts that must be built before the app part.\n   * Defaults to `[\"desktop-gtk2\"]`.\n   *\n   * Use `\"default\"` to keep the default and add extras:\n   * `[\"default\", \"my-helper-part\"]`.\n   */\n  readonly after?: Array<string> | null\n\n  /**\n   * Whether the snap should automatically start on login.\n   * @default false\n   */\n  readonly autoStart?: boolean\n\n  /**\n   * [Snap layouts](https://snapcraft.io/docs/snap-layouts) — bind-mount or symlink host paths\n   * into the snap's namespace, making libraries or config at `/usr`, `/var`, `/etc`, etc.\n   * accessible inside the confined environment.\n   */\n  readonly layout?: { [key: string]: { [key: string]: string } } | null\n\n  /**\n   * Filesets controlling which files from the app part are staged into the snap.\n   * Supports individual files, directories, globs, globstars, and exclusions (prefix `!`).\n   * See [Snapcraft filesets](https://snapcraft.io/docs/snapcraft-filesets).\n   * When not set, the snap template's default stage list is used for legacy bases (core18/core20/core22).\n   */\n  readonly appPartStage?: Array<string> | null\n\n  /**\n   * Display title for the snap (may contain uppercase letters and spaces).\n   * Defaults to `productName`.\n   * See [snap format](https://snapcraft.io/docs/snap-format).\n   */\n  readonly title?: string | null\n\n  /**\n   * Compression algorithm for the snap SquashFS image.\n   * - `xz` — smaller file, slower decompression (good for distribution).\n   * - `lzo` — larger file, faster decompression (good for development iteration).\n   * Omit to use snapcraft's default (`xz`).\n   *\n   * When not set, `linux.compression` is mapped automatically:\n   * `\"store\"` → `\"lzo\"`, `\"maximum\"` → `\"xz\"`, `\"normal\"` → snapcraft default.\n   * Explicitly setting this field always overrides the mapped value.\n   */\n  readonly compression?: \"xz\" | \"lzo\" | null\n\n  /**\n   * Allow the snap to run with native Wayland support (`--ozone-platform=wayland`).\n   * Defaults to `false` for Electron < 38 (legacy behaviour); `true` for Electron ≥ 38.\n   * Set explicitly to override the version-based default.\n   */\n  readonly allowNativeWayland?: boolean | null\n}\n\n/**\n * Configuration for a remote snap build on [Launchpad](https://launchpad.net/).\n * Remote builds run on Canonical's infrastructure without requiring native hardware or nested virtualisation.\n *\n * Each electron-builder build invocation targets exactly one architecture — to build for multiple\n * architectures, configure the top-level `arch` option (e.g. `arch: [\"x64\", \"arm64\"]`); each arch\n * spawns a separate `snapcraft remote-build` job on Launchpad.\n *\n * Authentication is resolved in this order:\n * 1. `cscLink` config field — base64-encoded credentials or a file path\n * 2. `SNAP_CSC_LINK` environment variable — same format as `cscLink`\n *    (CI-recommended; follows the same pattern as `WIN_CSC_LINK` for Windows code signing)\n * 3. `SNAPCRAFT_STORE_CREDENTIALS` environment variable (read directly by snapcraft)\n * 4. An active interactive `snapcraft login` session\n *\n * **CI setup** (set once as a CI secret):\n * ```sh\n * export SNAP_CSC_LINK=$(snapcraft export-login - | base64 -w0)\n * ```\n * The resolved credentials are injected only into the spawned `snapcraft` subprocess\n * environment and never exposed through `process.env`.\n */\nexport interface RemoteBuildOptions {\n  /**\n   * Whether to enable remote build on Launchpad. Must be set explicitly to `true` to opt in.\n   */\n  enabled: boolean\n\n  /**\n   * Your Launchpad username. Used to select the correct Launchpad account when more than\n   * one set of credentials is available.\n   */\n  launchpadUsername?: string\n\n  /**\n   * Target architecture for the remote build. Accepts a single snapcraft arch string\n   * (e.g. `\"amd64\"`, `\"arm64\"`, `\"armhf\"`).\n   *\n   * To build for multiple architectures, configure electron-builder's top-level `arch` option\n   * (e.g. `arch: [\"x64\", \"arm64\"]`) — each arch spawns a separate remote-build job on Launchpad,\n   * keeping the one-build-per-artifact contract intact.\n   * @example \"amd64\"\n   */\n  buildFor?: string\n\n  /**\n   * Suppress the Launchpad public-upload consent prompt by automatically accepting it.\n   * Your source code will be uploaded to a **public** Launchpad repository.\n   * Set to `true` in CI once you understand the implications.\n   */\n  acceptPublicUpload?: boolean\n\n  /**\n   * Launchpad project name to use for a **private** source upload.\n   * The project must already exist and you must have write access.\n   */\n  privateProject?: string\n\n  /**\n   * Resume a previously interrupted remote build rather than starting a new one.\n   */\n  recover?: boolean\n\n  /**\n   * Maximum time in seconds to wait for the remote build to complete before aborting.\n   * Passed to `snapcraft remote-build` as `--timeout <seconds>`.\n   *\n   * @example 1800  // 30 minutes\n   */\n  timeout?: number\n\n  /**\n   * Controls whether snapcraft may fall back to a different remote build strategy.\n   * - `\"disable-fallback\"` — always use the primary strategy, fail if unavailable.\n   * - `\"force-fallback\"` — always use the fallback strategy.\n   */\n  strategy?: \"disable-fallback\" | \"force-fallback\"\n}\n\n/**\n * **[Beta]** Options for building a core24 snap. This interface does not extend the legacy\n * `SnapBaseOptions` — it uses the snapcraft CLI directly.\n *\n * Fields inherited from {@link CommonLinuxOptions} (`description`, `category`, `mimeTypes`,\n * `executableArgs`, `desktop`, `synopsis`) are automatically populated from the root `linux.*`\n * configuration. You do not need to duplicate them here; values set directly on this interface\n * take precedence over the cascaded `linux.*` values.\n *\n * @beta\n */\nexport interface SnapOptions24 extends CommonLinuxOptions, TargetSpecificOptions {\n  // ─── Build environment (mutually exclusive) ─────────────────────────────────\n\n  /**\n   * Use [LXD](https://canonical.com/lxd) as the isolated build environment.\n   * Preferred over Multipass on most Linux CI systems where nested virtualisation is unavailable.\n   * Mutually exclusive with `useMultipass` and `useDestructiveMode`.\n   */\n  readonly useLXD?: boolean | null\n\n  /**\n   * Use [Multipass](https://multipass.run/) as the isolated build environment.\n   * Mutually exclusive with `useLXD` and `useDestructiveMode`.\n   */\n  readonly useMultipass?: boolean | null\n\n  /**\n   * Build directly on the host without an isolated VM or container (snapcraft `--destructive-mode`).\n   * Equivalent to setting `SNAPCRAFT_BUILD_ENVIRONMENT=host`.\n   *\n   * **Not recommended for most use cases.** Destructive mode pollutes the host environment\n   * and produces builds that are difficult to reproduce — any library or tool present on the\n   * host at build time can silently end up in the snap. Prefer `useLXD` or `useMultipass`\n   * for clean, reproducible builds; use `remoteBuild` for multi-architecture CI.\n   *\n   * Valid reasons to enable this option:\n   * - Building inside a Docker container where nested virtualisation (LXD / Multipass) is\n   *   unavailable and a remote Launchpad build is not acceptable.\n   * - Running test suites in CI where the environment is already fully controlled.\n   *\n   * The `gnome` extension is incompatible with this mode enabled — do not include it in `extensions`.\n   * @see https://snapcraft.io/docs/build-options\n   */\n  readonly useDestructiveMode?: boolean | null\n\n  /**\n   * Configuration for a remote build on [Launchpad](https://launchpad.net/).\n   * Enables cross-architecture builds in CI without native hardware or nested virtualisation.\n   * Each build invocation targets one arch; use `arch: [\"x64\", \"arm64\"]` to build for multiple.\n   */\n  readonly remoteBuild?: RemoteBuildOptions | null\n\n  // ─── Snapcraft extensions ────────────────────────────────────────────────────\n\n  /**\n   * [Snapcraft extensions](https://snapcraft.io/docs/snapcraft-extensions) to apply to the app.\n   * Defaults to `[\"gnome\"]` in normal builds (recommended for Electron apps on Ubuntu 24.04+).\n   * Automatically set to `[]` in `useDestructiveMode` builds, where the gnome extension is\n   * incompatible. Explicitly including `\"gnome\"` while `useDestructiveMode` is set will throw.\n   * See: https://snapcraft.io/docs/gnome-extension\n   */\n  readonly extensions?: Array<string> | null\n\n  // ─── Snap metadata ───────────────────────────────────────────────────────────\n\n  /**\n   * The type of [confinement](https://snapcraft.io/docs/reference/confinement) supported by the snap.\n   * @default strict\n   */\n  readonly confinement?: \"devmode\" | \"strict\" | \"classic\" | null\n\n  /**\n   * The quality grade of the snap.\n   * `devel` — not publishable to stable/candidate channels.\n   * `stable` — suitable for all channels.\n   * @default stable\n   */\n  readonly grade?: \"devel\" | \"stable\" | null\n\n  /**\n   * A short summary of the snap (max 78 characters). Defaults to `productName`.\n   */\n  readonly summary?: string | null\n\n  /**\n   * An optional display title (may contain uppercase letters and spaces). Defaults to `productName`.\n   * See [snap format](https://snapcraft.io/docs/snap-format).\n   */\n  readonly title?: string | null\n\n  /**\n   * Compression algorithm for the snap SquashFS image.\n   * - `xz` — smaller file, slower decompression (recommended for distribution).\n   * - `lzo` — larger file, faster decompression (useful for development iteration).\n   * Omit to use snapcraft's default (`xz`).\n   *\n   * When not set, `linux.compression` is mapped automatically:\n   * `\"store\"` → `\"lzo\"`, `\"maximum\"` → `\"xz\"`, `\"normal\"` → snapcraft default.\n   * Explicitly setting this field always overrides the mapped value.\n   */\n  readonly compression?: \"xz\" | \"lzo\" | null\n\n  /**\n   * Features that must be supported by the host snapd before the snap can be installed.\n   * See [assumes](https://snapcraft.io/docs/snapcraft-yaml-reference#assumes).\n   */\n  readonly assumes?: Array<string> | string | null\n\n  // ─── Build packages / stage packages ────────────────────────────────────────\n\n  /**\n   * Debian packages required at **build** time (installed inside the build environment).\n   */\n  readonly buildPackages?: Array<string> | null\n\n  /**\n   * Ubuntu packages to **stage** alongside the app (equivalent to `depends` for deb).\n   * Defaults to `[\"libnspr4\", \"libnss3\", \"libxss1\", \"libappindicator3-1\", \"libsecret-1-0\"]`.\n   * Supports the `\"default\"` keyword to reference the default list:\n   * `[\"default\", \"my-extra-lib\"]` appends `my-extra-lib` to the defaults.\n   */\n  readonly stagePackages?: Array<string> | null\n\n  /**\n   * Filesets controlling which files from the app part are staged into the snap.\n   * Supports glob patterns and exclusions. See [filesets](https://snapcraft.io/docs/snapcraft-filesets).\n   */\n  readonly appPartStage?: Array<string> | null\n\n  /**\n   * Names of other snapcraft parts that must be built before the app part.\n   */\n  readonly after?: Array<string> | null\n\n  // ─── Snap interfaces ─────────────────────────────────────────────────────────\n\n  /**\n   * [Plugs](https://snapcraft.io/docs/reference/interfaces) (consumed interfaces) for the app.\n   * When the `gnome` extension is active, content-snap plugs (themes, GNOME platform, GPU)\n   * are added automatically — only list custom plugs here.\n   * Without any extension, defaults to the standard Electron plug set.\n   *\n   * Supports descriptor objects for plugs with attributes:\n   * ```json\n   * [{ \"browser-sandbox\": { \"interface\": \"browser-support\", \"allow-sandbox\": true } }]\n   * ```\n   */\n  readonly plugs?: Array<string | PlugDescriptor> | PlugDescriptor | null\n\n  /**\n   * [Slots](https://snapcraft.io/docs/reference/interfaces) (provided interfaces) for the app.\n   * Use for MPRIS, D-Bus services, etc.\n   *\n   * Example — expose MPRIS under the Chromium bus name:\n   * ```json\n   * [{ \"mpris\": { \"name\": \"chromium\" } }]\n   * ```\n   */\n  readonly slots?: Array<string | SlotDescriptor> | SlotDescriptor | null\n\n  /**\n   * [Snap layouts](https://snapcraft.io/docs/snap-layouts) — bind-mount or symlink host paths\n   * into the snap's namespace. User-provided layouts always override the extension defaults.\n   */\n  readonly layout?: { [key: string]: { [key: string]: string } } | null\n\n  // ─── Runtime environment ─────────────────────────────────────────────────────\n\n  /**\n   * Additional environment variables injected into the snap's runtime environment.\n   * Merged with the electron-builder defaults (`TMPDIR=$XDG_RUNTIME_DIR`).\n   * User-supplied values take precedence.\n   */\n  readonly environment?: { [key: string]: string } | null\n\n  /**\n   * Whether the app should auto-start on login (creates an autostart desktop entry).\n   * @default false\n   */\n  readonly autoStart?: boolean\n\n  /**\n   * Set to `true` to force X11 by injecting `--ozone-platform=x11` into the snap command line.\n   * When unset or `false`, no flag is injected and native Wayland is allowed.\n   * Unlike the legacy `snap.allowNativeWayland`, there is no electron-version-based default here —\n   * core24 always allows Wayland unless this is explicitly `true`.\n   */\n  readonly forceX11?: boolean | null\n\n  // ─── Hooks ───────────────────────────────────────────────────────────────────\n\n  /**\n   * Directory containing [snap hooks](https://snapcraft.io/docs/snap-hooks), relative to\n   * the build resources directory.\n   * @default build/snap-hooks\n   */\n  readonly hooks?: string | null\n}\n\n/**\n * Maps a named plug to its attribute object.\n * `null` uses snapd defaults for that interface.\n *\n * @example\n * ```json\n * { \"browser-sandbox\": { \"interface\": \"browser-support\", \"allow-sandbox\": true } }\n * ```\n */\nexport interface PlugDescriptor {\n  [key: string]: { [key: string]: any } | null\n}\n\n/**\n * Maps a named slot to its attribute object.\n * `null` uses snapd defaults for that interface.\n *\n * @example\n * ```json\n * { \"mpris\": { \"name\": \"chromium\" } }\n * ```\n */\nexport interface SlotDescriptor {\n  [key: string]: { [key: string]: any } | null\n}\n"]}
+{"version":3,"file":"SnapOptions.js","sourceRoot":"","sources":["../../src/options/SnapOptions.ts"],"names":[],"mappings":"","sourcesContent":["import { TargetSpecificOptions } from \"../core.js\"\nimport { SnapcraftYAML } from \"../targets/linux/snap/snapcraft.js\"\nimport { CommonLinuxOptions } from \"./linuxOptions.js\"\n\n/**\n * New-style snap configuration. Use this via the `snapcraft` key in your build config.\n * Selects the snapcraft core version and its per-core options.\n */\nexport interface SnapcraftOptions extends TargetSpecificOptions {\n  /**\n   * The snap base to use as the execution environment. Determines which set of per-core options\n   * (`core18`, `core20`, `core22`, `core24`, `custom`) is active.\n   *\n   * Only one core may be selected per build target.\n   */\n  readonly base: \"core18\" | \"core20\" | \"core22\" | \"core24\" | \"custom\"\n\n  /**\n   * Snapcraft Store credentials — base64-encoded credentials string or file path.\n   * Accepts the same formats as `WIN_CSC_LINK` / `CSC_LINK`: base64 data,\n   * absolute/relative/`~/` file paths, and `file://` URIs.\n   * Relative paths are resolved against the build resources directory.\n   *\n   * Injected as `SNAPCRAFT_STORE_CREDENTIALS` into every snapcraft subprocess\n   * (core18/core20/core22/core24 builds and `snapcraft upload`).\n   * Not applied for `base: \"custom\"` — inject credentials manually via environment variables.\n   *\n   * The `SNAP_CSC_LINK` environment variable is the CI-friendly alternative.\n   * Generate with: `snapcraft export-login - | base64 -w0`\n   */\n  readonly cscLink?: string\n\n  /**\n   * Configuration for a core18 build. Only active when `base` is `\"core18\"`.\n   */\n  readonly core18?: SnapOptionsLegacy | null\n  /**\n   * Configuration for a core20 build. Only active when `base` is `\"core20\"`.\n   */\n  readonly core20?: SnapOptionsLegacy | null\n  /**\n   * Configuration for a core22 build. Only active when `base` is `\"core22\"`.\n   */\n  readonly core22?: SnapOptionsLegacy | null\n\n  /**\n   * Options for building a core24 snap. Uses the snapcraft CLI directly.\n   * Inherits desktop-entry fields from `CommonLinuxOptions` and publish config from `TargetSpecificOptions`.\n   */\n  readonly core24?: SnapOptions24 | null\n  /**\n   * Pass-through custom snap configuration. electron-builder will read the\n   * snapcraft.yaml at `yamlPath` and use it verbatim — no plugs, extensions,\n   * organize mappings, or desktop files are injected.\n   */\n  readonly custom?: SnapOptionsCustom | null\n}\n\nexport interface SnapOptionsCustom {\n  /**\n   * Supports 2 routes:\n   * - Path to an existing `snapcraft.yaml` file, relative to `buildResourcesDir`. electron-builder reads the file and passes it through without modification.\n   * - A `SnapcraftYAML` object directly in the configuration. electron-builder uses the object to generate a `snapcraft.yaml` file, which is then passed through without modification.\n   */\n  readonly yaml?: string | SnapcraftYAML | null\n}\n\nexport interface SnapOptionsLegacy extends CommonLinuxOptions, TargetSpecificOptions {\n  /**\n   * Whether to use the pre-built Electron snap template for faster builds.\n   * When `true`, electron-builder delegates snap assembly to the upstream Electron snap\n   * template rather than running a full snapcraft build, significantly reducing build time.\n   * Defaults to `true` when `stagePackages` is not customised.\n   * Only applicable to x64 and armv7l builds.\n   */\n  readonly useTemplateApp?: boolean\n\n  /**\n   * The type of [snap confinement](https://snapcraft.io/docs/reference/confinement).\n   * - `strict` — recommended; the snap runs in a fully isolated sandbox.\n   * - `devmode` — sandbox violations are logged but not enforced; for development only.\n   * - `classic` — no confinement; equivalent to a traditionally packaged application.\n   *   Requires Snap Store approval before publishing.\n   * @default strict\n   */\n  readonly confinement?: \"devmode\" | \"strict\" | \"classic\" | null\n\n  /**\n   * Environment variables injected into the snap's runtime environment.\n   * Merged with the electron-builder default `{ TMPDIR: \"$XDG_RUNTIME_DIR\" }`.\n   * User-supplied values take precedence.\n   */\n  readonly environment?: { [key: string]: string } | null\n\n  /**\n   * A short summary of the snap (max 78 characters).\n   * Defaults to [productName](./configuration.md#productName).\n   */\n  readonly summary?: string | null\n\n  /**\n   * The quality grade of the snap.\n   * - `stable` — suitable for all channels, including `stable` and `candidate`.\n   * - `devel` — development snapshot; cannot be promoted to `stable` or `candidate`.\n   * @default stable\n   */\n  readonly grade?: \"devel\" | \"stable\" | null\n\n  /**\n   * [Snapd features](https://snapcraft.io/docs/snapcraft-yaml-reference#assumes) that must\n   * be present on the host before the snap can be installed.\n   */\n  readonly assumes?: Array<string> | string | null\n\n  /**\n   * Debian packages required at **build** time (installed inside the build environment).\n   */\n  readonly buildPackages?: Array<string> | null\n\n  /**\n   * Ubuntu packages to **stage** alongside the app (equivalent to `depends` for deb).\n   * Defaults to `[\"libnspr4\", \"libnss3\", \"libxss1\", \"libappindicator3-1\", \"libsecret-1-0\"]`.\n   *\n   * Use the `\"default\"` keyword to extend the default list:\n   * `[\"default\", \"my-extra-lib\"]` appends `my-extra-lib` to the defaults.\n   */\n  readonly stagePackages?: Array<string> | null\n\n  /**\n   * Directory containing [snap hooks](https://snapcraft.io/docs/snap-hooks), relative to\n   * the build resources directory (`build/`).\n   * @default build/snap-hooks\n   */\n  readonly hooks?: string | null\n\n  /**\n   * [Plugs](https://snapcraft.io/docs/reference/interfaces) (consumed interfaces) to declare\n   * for the app entry point.\n   * Defaults to `[\"desktop\", \"desktop-legacy\", \"home\", \"x11\", \"wayland\", \"unity7\",\n   * \"browser-support\", \"network\", \"gsettings\", \"audio-playback\", \"pulseaudio\", \"opengl\"]`.\n   *\n   * Use `\"default\"` in the list to keep the defaults and append extras:\n   * `[\"default\", \"camera\"]` adds `camera` to the standard set.\n   *\n   * To configure plug attributes (e.g. `allow-sandbox` for Chromium's internal sandbox),\n   * use a descriptor object:\n   * ```json\n   * [\n   *   { \"browser-sandbox\": { \"interface\": \"browser-support\", \"allow-sandbox\": true } },\n   *   \"another-simple-plug-name\"\n   * ]\n   * ```\n   */\n  readonly plugs?: Array<string | PlugDescriptor> | PlugDescriptor | null\n\n  /**\n   * [Slots](https://snapcraft.io/docs/reference/interfaces) (provided interfaces) to declare\n   * for the app.\n   *\n   * To expose an MPRIS player under the Chromium bus name (required for strict confinement):\n   * ```json\n   * [{ \"mpris\": { \"name\": \"chromium\" } }]\n   * ```\n   * Chromium [hard-codes](https://source.chromium.org/chromium/chromium/src/+/master:components/system_media_controls/linux/system_media_controls_linux.cc;l=51;bpv=0;bpt=1)\n   * the bus name `chromium`, so the slot name must match for snapd to\n   * [allow it](https://forum.snapcraft.io/t/unable-to-use-mpris-interface/15360/7).\n   */\n  readonly slots?: Array<string | SlotDescriptor> | SlotDescriptor | null\n\n  /**\n   * Names of snapcraft parts that must be built before the app part.\n   * Defaults to `[\"desktop-gtk2\"]`.\n   *\n   * Use `\"default\"` to keep the default and add extras:\n   * `[\"default\", \"my-helper-part\"]`.\n   */\n  readonly after?: Array<string> | null\n\n  /**\n   * Whether the snap should automatically start on login.\n   * @default false\n   */\n  readonly autoStart?: boolean\n\n  /**\n   * [Snap layouts](https://snapcraft.io/docs/snap-layouts) — bind-mount or symlink host paths\n   * into the snap's namespace, making libraries or config at `/usr`, `/var`, `/etc`, etc.\n   * accessible inside the confined environment.\n   */\n  readonly layout?: { [key: string]: { [key: string]: string } } | null\n\n  /**\n   * Filesets controlling which files from the app part are staged into the snap.\n   * Supports individual files, directories, globs, globstars, and exclusions (prefix `!`).\n   * See [Snapcraft filesets](https://snapcraft.io/docs/snapcraft-filesets).\n   * When not set, the snap template's default stage list is used for legacy bases (core18/core20/core22).\n   */\n  readonly appPartStage?: Array<string> | null\n\n  /**\n   * Display title for the snap (may contain uppercase letters and spaces).\n   * Defaults to `productName`.\n   * See [snap format](https://snapcraft.io/docs/snap-format).\n   */\n  readonly title?: string | null\n\n  /**\n   * Compression algorithm for the snap SquashFS image.\n   * - `xz` — smaller file, slower decompression (good for distribution).\n   * - `lzo` — larger file, faster decompression (good for development iteration).\n   * Omit to use snapcraft's default (`xz`).\n   *\n   * When not set, `linux.compression` is mapped automatically:\n   * `\"store\"` → `\"lzo\"`, `\"maximum\"` → `\"xz\"`, `\"normal\"` → snapcraft default.\n   * Explicitly setting this field always overrides the mapped value.\n   */\n  readonly compression?: \"xz\" | \"lzo\" | null\n\n  /**\n   * Allow the snap to run with native Wayland support (`--ozone-platform=wayland`).\n   * Defaults to `false` for Electron < 38 (legacy behaviour); `true` for Electron ≥ 38.\n   * Set explicitly to override the version-based default.\n   */\n  readonly allowNativeWayland?: boolean | null\n}\n\n/**\n * Configuration for a remote snap build on [Launchpad](https://launchpad.net/).\n * Remote builds run on Canonical's infrastructure without requiring native hardware or nested virtualisation.\n *\n * Each electron-builder build invocation targets exactly one architecture — to build for multiple\n * architectures, configure the top-level `arch` option (e.g. `arch: [\"x64\", \"arm64\"]`); each arch\n * spawns a separate `snapcraft remote-build` job on Launchpad.\n *\n * Authentication is resolved in this order:\n * 1. `cscLink` config field — base64-encoded credentials or a file path\n * 2. `SNAP_CSC_LINK` environment variable — same format as `cscLink`\n *    (CI-recommended; follows the same pattern as `WIN_CSC_LINK` for Windows code signing)\n * 3. `SNAPCRAFT_STORE_CREDENTIALS` environment variable (read directly by snapcraft)\n * 4. An active interactive `snapcraft login` session\n *\n * **CI setup** (set once as a CI secret):\n * ```sh\n * export SNAP_CSC_LINK=$(snapcraft export-login - | base64 -w0)\n * ```\n * The resolved credentials are injected only into the spawned `snapcraft` subprocess\n * environment and never exposed through `process.env`.\n */\nexport interface RemoteBuildOptions {\n  /**\n   * Whether to enable remote build on Launchpad. Must be set explicitly to `true` to opt in.\n   */\n  enabled: boolean\n\n  /**\n   * Your Launchpad username. Used to select the correct Launchpad account when more than\n   * one set of credentials is available.\n   */\n  launchpadUsername?: string\n\n  /**\n   * Target architecture (or architectures) for the remote build.\n   *\n   * - **Single string** (e.g. `\"amd64\"`): one Launchpad job, one output snap.\n   * - **Array** (e.g. `[\"amd64\", \"arm64\"]`): one Launchpad job that builds all listed\n   *   architectures and downloads each resulting snap. All produced snaps are emitted as\n   *   separate build artifacts.\n   *\n   * Using an array here is mutually exclusive with setting `arch: [\"x64\", \"arm64\"]` at the\n   * electron-builder top level — the top-level `arch` option spawns a separate remote-build\n   * job per architecture, which would duplicate work.\n   *\n   * @example \"amd64\"\n   * @example [\"amd64\", \"arm64\"]\n   */\n  buildFor?: string | string[]\n\n  /**\n   * Suppress the Launchpad public-upload consent prompt by automatically accepting it.\n   * Your source code will be uploaded to a **public** Launchpad repository.\n   * Set to `true` in CI once you understand the implications.\n   */\n  acceptPublicUpload?: boolean\n\n  /**\n   * Launchpad project name to use for a **private** source upload.\n   * The project must already exist and you must have write access.\n   */\n  privateProject?: string\n\n  /**\n   * Resume a previously interrupted remote build rather than starting a new one.\n   */\n  recover?: boolean\n\n  /**\n   * Maximum time in seconds to wait for the remote build to complete before aborting.\n   * Passed to `snapcraft remote-build` as `--timeout <seconds>`.\n   *\n   * @example 1800  // 30 minutes\n   */\n  timeout?: number\n\n  /**\n   * Controls whether snapcraft may fall back to a different remote build strategy.\n   * - `\"disable-fallback\"` — always use the primary strategy, fail if unavailable.\n   * - `\"force-fallback\"` — always use the fallback strategy.\n   */\n  strategy?: \"disable-fallback\" | \"force-fallback\"\n}\n\n/**\n * Options for building a core24 snap. This interface does not extend the legacy\n * `SnapBaseOptions` — it uses the snapcraft CLI directly.\n *\n * Fields inherited from {@link CommonLinuxOptions} (`description`, `category`, `mimeTypes`,\n * `executableArgs`, `desktop`, `synopsis`) are automatically populated from the root `linux.*`\n * configuration. You do not need to duplicate them here; values set directly on this interface\n * take precedence over the cascaded `linux.*` values.\n */\nexport interface SnapOptions24 extends CommonLinuxOptions, TargetSpecificOptions {\n  // ─── Build environment (mutually exclusive) ─────────────────────────────────\n\n  /**\n   * Use [LXD](https://canonical.com/lxd) as the isolated build environment.\n   * Preferred over Multipass on most Linux CI systems where nested virtualisation is unavailable.\n   * Mutually exclusive with `useMultipass` and `useDestructiveMode`.\n   */\n  readonly useLXD?: boolean | null\n\n  /**\n   * Use [Multipass](https://multipass.run/) as the isolated build environment.\n   * Mutually exclusive with `useLXD` and `useDestructiveMode`.\n   */\n  readonly useMultipass?: boolean | null\n\n  /**\n   * Build directly on the host without an isolated VM or container (snapcraft `--destructive-mode`).\n   * Equivalent to setting `SNAPCRAFT_BUILD_ENVIRONMENT=host`.\n   *\n   * **Not recommended for most use cases.** Destructive mode pollutes the host environment\n   * and produces builds that are difficult to reproduce — any library or tool present on the\n   * host at build time can silently end up in the snap. Prefer `useLXD` or `useMultipass`\n   * for clean, reproducible builds; use `remoteBuild` for multi-architecture CI.\n   *\n   * Valid reasons to enable this option:\n   * - Building inside a Docker container where nested virtualisation (LXD / Multipass) is\n   *   unavailable and a remote Launchpad build is not acceptable.\n   * - Running test suites in CI where the environment is already fully controlled.\n   *\n   * The `gnome` extension is incompatible with this mode enabled — do not include it in `extensions`.\n   * @see https://snapcraft.io/docs/build-options\n   */\n  readonly useDestructiveMode?: boolean | null\n\n  /**\n   * Configuration for a remote build on [Launchpad](https://launchpad.net/).\n   * Enables cross-architecture builds in CI without native hardware or nested virtualisation.\n   * Each build invocation targets one arch; use `arch: [\"x64\", \"arm64\"]` to build for multiple.\n   */\n  readonly remoteBuild?: RemoteBuildOptions | null\n\n  // ─── Snapcraft extensions ────────────────────────────────────────────────────\n\n  /**\n   * [Snapcraft extensions](https://snapcraft.io/docs/snapcraft-extensions) to apply to the app.\n   * Defaults to `[\"gnome\"]` in normal builds (recommended for Electron apps on Ubuntu 24.04+).\n   * Automatically set to `[]` in `useDestructiveMode` builds, where the gnome extension is\n   * incompatible. Explicitly including `\"gnome\"` while `useDestructiveMode` is set will throw.\n   * See: https://snapcraft.io/docs/gnome-extension\n   */\n  readonly extensions?: Array<string> | null\n\n  // ─── Snap metadata ───────────────────────────────────────────────────────────\n\n  /**\n   * The type of [confinement](https://snapcraft.io/docs/reference/confinement) supported by the snap.\n   * @default strict\n   */\n  readonly confinement?: \"devmode\" | \"strict\" | \"classic\" | null\n\n  /**\n   * The quality grade of the snap.\n   * `devel` — not publishable to stable/candidate channels.\n   * `stable` — suitable for all channels.\n   * @default stable\n   */\n  readonly grade?: \"devel\" | \"stable\" | null\n\n  /**\n   * A short summary of the snap (max 78 characters). Defaults to `productName`.\n   */\n  readonly summary?: string | null\n\n  /**\n   * An optional display title (may contain uppercase letters and spaces). Defaults to `productName`.\n   * See [snap format](https://snapcraft.io/docs/snap-format).\n   */\n  readonly title?: string | null\n\n  /**\n   * Compression algorithm for the snap SquashFS image.\n   * - `xz` — smaller file, slower decompression (recommended for distribution).\n   * - `lzo` — larger file, faster decompression (useful for development iteration).\n   * Omit to use snapcraft's default (`xz`).\n   *\n   * When not set, `linux.compression` is mapped automatically:\n   * `\"store\"` → `\"lzo\"`, `\"maximum\"` → `\"xz\"`, `\"normal\"` → snapcraft default.\n   * Explicitly setting this field always overrides the mapped value.\n   */\n  readonly compression?: \"xz\" | \"lzo\" | null\n\n  /**\n   * Features that must be supported by the host snapd before the snap can be installed.\n   * See [assumes](https://snapcraft.io/docs/snapcraft-yaml-reference#assumes).\n   */\n  readonly assumes?: Array<string> | string | null\n\n  // ─── Build packages / stage packages ────────────────────────────────────────\n\n  /**\n   * Debian packages required at **build** time (installed inside the build environment).\n   */\n  readonly buildPackages?: Array<string> | null\n\n  /**\n   * Ubuntu packages to **stage** alongside the app (equivalent to `depends` for deb).\n   * Defaults to `[\"libnspr4\", \"libnss3\", \"libxss1\", \"libappindicator3-1\", \"libsecret-1-0\"]`.\n   * Supports the `\"default\"` keyword to reference the default list:\n   * `[\"default\", \"my-extra-lib\"]` appends `my-extra-lib` to the defaults.\n   */\n  readonly stagePackages?: Array<string> | null\n\n  /**\n   * Filesets controlling which files from the app part are staged into the snap.\n   * Supports glob patterns and exclusions. See [filesets](https://snapcraft.io/docs/snapcraft-filesets).\n   */\n  readonly appPartStage?: Array<string> | null\n\n  /**\n   * Names of other snapcraft parts that must be built before the app part.\n   */\n  readonly after?: Array<string> | null\n\n  // ─── Snap interfaces ─────────────────────────────────────────────────────────\n\n  /**\n   * [Plugs](https://snapcraft.io/docs/reference/interfaces) (consumed interfaces) for the app.\n   * When the `gnome` extension is active, content-snap plugs (themes, GNOME platform, GPU)\n   * are added automatically — only list custom plugs here.\n   * Without any extension, defaults to the standard Electron plug set.\n   *\n   * Supports descriptor objects for plugs with attributes:\n   * ```json\n   * [{ \"browser-sandbox\": { \"interface\": \"browser-support\", \"allow-sandbox\": true } }]\n   * ```\n   */\n  readonly plugs?: Array<string | PlugDescriptor> | PlugDescriptor | null\n\n  /**\n   * [Slots](https://snapcraft.io/docs/reference/interfaces) (provided interfaces) for the app.\n   * Use for MPRIS, D-Bus services, etc.\n   *\n   * Example — expose MPRIS under the Chromium bus name:\n   * ```json\n   * [{ \"mpris\": { \"name\": \"chromium\" } }]\n   * ```\n   */\n  readonly slots?: Array<string | SlotDescriptor> | SlotDescriptor | null\n\n  /**\n   * [Snap layouts](https://snapcraft.io/docs/snap-layouts) — bind-mount or symlink host paths\n   * into the snap's namespace. User-provided layouts always override the extension defaults.\n   */\n  readonly layout?: { [key: string]: { [key: string]: string } } | null\n\n  // ─── Runtime environment ─────────────────────────────────────────────────────\n\n  /**\n   * Additional environment variables injected into the snap's runtime environment.\n   * Merged with the electron-builder defaults (`TMPDIR=$XDG_RUNTIME_DIR`).\n   * User-supplied values take precedence.\n   */\n  readonly environment?: { [key: string]: string } | null\n\n  /**\n   * Whether the app should auto-start on login (creates an autostart desktop entry).\n   * @default false\n   */\n  readonly autoStart?: boolean\n\n  /**\n   * Set to `true` to force X11 by injecting `--ozone-platform=x11` into the snap command line.\n   * When unset or `false`, no flag is injected and native Wayland is allowed.\n   * Unlike the legacy `snap.allowNativeWayland`, there is no electron-version-based default here —\n   * core24 always allows Wayland unless this is explicitly `true`.\n   */\n  readonly forceX11?: boolean | null\n\n  // ─── Hooks ───────────────────────────────────────────────────────────────────\n\n  /**\n   * Directory containing [snap hooks](https://snapcraft.io/docs/snap-hooks), relative to\n   * the build resources directory.\n   * @default build/snap-hooks\n   */\n  readonly hooks?: string | null\n}\n\n/**\n * Maps a named plug to its attribute object.\n * `null` uses snapd defaults for that interface.\n *\n * @example\n * ```json\n * { \"browser-sandbox\": { \"interface\": \"browser-support\", \"allow-sandbox\": true } }\n * ```\n */\nexport interface PlugDescriptor {\n  [key: string]: { [key: string]: any } | null\n}\n\n/**\n * Maps a named slot to its attribute object.\n * `null` uses snapd defaults for that interface.\n *\n * @example\n * ```json\n * { \"mpris\": { \"name\": \"chromium\" } }\n * ```\n */\nexport interface SlotDescriptor {\n  [key: string]: { [key: string]: any } | null\n}\n"]}

package/dist/options/linuxOptions.d.ts

@@ -50,16 +50,6 @@ export interface LinuxConfiguration extends CommonLinuxOptions, PlatformSpecific
      * By default will be generated automatically based on the macOS icns file.
      */
     readonly icon?: string;
-    /**
-     * When `true`, the installed `.desktop` filename is derived from `desktopName` in `package.json`
-     * (minus the `.desktop` suffix) so that it matches `StartupWMClass` and Electron's `app_id`.
-     * Falls back to `executableName` when `desktopName` is absent.
-     *
-     * @default false
-     * @see https://github.com/electron-userland/electron-builder/issues/9103
-     * @remarks In v27 the default will change to `true`.
-     */
-    readonly syncDesktopName?: boolean;
 }
 /**
  * Desktop-entry and runtime fields shared by all Linux targets and all snap core strategies.

package/dist/options/linuxOptions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"linuxOptions.d.ts","sourceRoot":"","sources":["../../src/options/linuxOptions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAA;AACpE,OAAO,EAAE,4BAA4B,EAAE,MAAM,mCAAmC,CAAA;AAEhF;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B;;OAEG;IACH,KAAK,CAAC,EAAE;QACN,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAAA;KACpB,GAAG,IAAI,CAAA;IACR;;;;;;;;;;;;OAYG;IACH,cAAc,CAAC,EAAE;QACf,CAAC,UAAU,EAAE,MAAM,GAAG,GAAG,CAAA;KAC1B,GAAG,IAAI,CAAA;CACT;AAED,MAAM,WAAW,kBAAmB,SAAQ,kBAAkB,EAAE,4BAA4B;IAC1F;;;;;;;OAOG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,gBAAgB,CAAA;IAElC;;OAEG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAEnC;;OAEG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAE/B;;;OAGG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;IAStB;;;;;;;;OAQG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,OAAO,CAAA;CACnC;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,kBAAkB;IACjC;;OAEG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAEjC;;OAEG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAEpC;;OAEG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAEjC;;OAEG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,IAAI,CAAA;IAEzC;;OAEG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,gBAAgB,GAAG,IAAI,CAAA;IAE1C;;OAEG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,IAAI,CAAA;CAC/C;AAGD,MAAM,WAAW,0BAA2B,SAAQ,kBAAkB,EAAE,qBAAqB;IAC3F;;;;OAIG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,IAAI,CAAA;IAEvC;;;;;OAKG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,IAAI,GAAG,OAAO,GAAG,IAAI,GAAG,MAAM,GAAG,MAAM,GAAG,KAAK,GAAG,MAAM,GAAG,IAAI,CAAA;IAEtF,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;IAEtB;;OAEG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAExC;;OAEG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAEpC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC/B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAEnC;;OAEG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACrC;;OAEG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACpC;;OAEG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAExC;;;;OAIG;IACH,QAAQ,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,IAAI,CAAA;CACpC;AACD,MAAM,WAAW,UAAW,SAAQ,0BAA0B;IAC5D;;;;;OAKG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,IAAI,CAAA;IAEvC;;;OAGG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,IAAI,CAAA;IAE1C;;OAEG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAExC;;OAEG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAEjC,kBAAkB;IAClB,QAAQ,CAAC,WAAW,CAAC,EAAE,IAAI,GAAG,OAAO,GAAG,IAAI,GAAG,KAAK,GAAG,IAAI,CAAA;CAC5D;AAED,MAAM,WAAW,UAAW,SAAQ,0BAA0B;IAC5D;;;;OAIG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,IAAI,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,CAAA;CAC/D;AAED,MAAM,WAAW,aAAc,SAAQ,0BAA0B;IAC/D,kBAAkB;IAClB,QAAQ,CAAC,WAAW,CAAC,EAAE,IAAI,GAAG,OAAO,GAAG,IAAI,GAAG,MAAM,GAAG,IAAI,CAAA;CAC7D;AAED,MAAM,WAAW,eAAgB,SAAQ,kBAAkB,EAAE,qBAAqB;IAChF;;OAEG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAChC;;;;;;;;;;;;;;OAcG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,GAAG,IAAI,CAAA;CACrD;AAED,MAAM,WAAW,cAAe,SAAQ,kBAAkB,EAAE,qBAAqB;IAC/E;;OAEG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAEhC;;;;OAIG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;IAEzB;;;;OAIG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAA;IAEhC;;;;OAIG;IACH,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAA;IAErB;;;;;OAKG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;IAEtB;;;;OAIG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;IAE7B;;;;OAIG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;IAExB;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,CAAA;IAE9B;;;;OAIG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,GAAG,GAAG,CAAC,EAAE,CAAA;IAEnC;;;;OAIG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAA;IAEnC;;;;OAIG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAA;IAEtC;;OAEG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,OAAO,CAAA;CACnC"}
+{"version":3,"file":"linuxOptions.d.ts","sourceRoot":"","sources":["../../src/options/linuxOptions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAA;AACpE,OAAO,EAAE,4BAA4B,EAAE,MAAM,mCAAmC,CAAA;AAEhF;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B;;OAEG;IACH,KAAK,CAAC,EAAE;QACN,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAAA;KACpB,GAAG,IAAI,CAAA;IACR;;;;;;;;;;;;OAYG;IACH,cAAc,CAAC,EAAE;QACf,CAAC,UAAU,EAAE,MAAM,GAAG,GAAG,CAAA;KAC1B,GAAG,IAAI,CAAA;CACT;AAED,MAAM,WAAW,kBAAmB,SAAQ,kBAAkB,EAAE,4BAA4B;IAC1F;;;;;;;OAOG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,gBAAgB,CAAA;IAElC;;OAEG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAEnC;;OAEG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAE/B;;;OAGG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAQvB;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,kBAAkB;IACjC;;OAEG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAEjC;;OAEG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAEpC;;OAEG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAEjC;;OAEG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,IAAI,CAAA;IAEzC;;OAEG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,gBAAgB,GAAG,IAAI,CAAA;IAE1C;;OAEG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,IAAI,CAAA;CAC/C;AAGD,MAAM,WAAW,0BAA2B,SAAQ,kBAAkB,EAAE,qBAAqB;IAC3F;;;;OAIG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,IAAI,CAAA;IAEvC;;;;;OAKG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,IAAI,GAAG,OAAO,GAAG,IAAI,GAAG,MAAM,GAAG,MAAM,GAAG,KAAK,GAAG,MAAM,GAAG,IAAI,CAAA;IAEtF,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;IAEtB;;OAEG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAExC;;OAEG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAEpC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC/B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAEnC;;OAEG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACrC;;OAEG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACpC;;OAEG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAExC;;;;OAIG;IACH,QAAQ,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,IAAI,CAAA;CACpC;AACD,MAAM,WAAW,UAAW,SAAQ,0BAA0B;IAC5D;;;;;OAKG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,IAAI,CAAA;IAEvC;;;OAGG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,IAAI,CAAA;IAE1C;;OAEG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAExC;;OAEG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAEjC,kBAAkB;IAClB,QAAQ,CAAC,WAAW,CAAC,EAAE,IAAI,GAAG,OAAO,GAAG,IAAI,GAAG,KAAK,GAAG,IAAI,CAAA;CAC5D;AAED,MAAM,WAAW,UAAW,SAAQ,0BAA0B;IAC5D;;;;OAIG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,IAAI,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,CAAA;CAC/D;AAED,MAAM,WAAW,aAAc,SAAQ,0BAA0B;IAC/D,kBAAkB;IAClB,QAAQ,CAAC,WAAW,CAAC,EAAE,IAAI,GAAG,OAAO,GAAG,IAAI,GAAG,MAAM,GAAG,IAAI,CAAA;CAC7D;AAED,MAAM,WAAW,eAAgB,SAAQ,kBAAkB,EAAE,qBAAqB;IAChF;;OAEG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAChC;;;;;;;;;;;;;;OAcG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,GAAG,IAAI,CAAA;CACrD;AAED,MAAM,WAAW,cAAe,SAAQ,kBAAkB,EAAE,qBAAqB;IAC/E;;OAEG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAEhC;;;;OAIG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;IAEzB;;;;OAIG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAA;IAEhC;;;;OAIG;IACH,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAA;IAErB;;;;;OAKG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;IAEtB;;;;OAIG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;IAE7B;;;;OAIG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;IAExB;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,CAAA;IAE9B;;;;OAIG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,GAAG,GAAG,CAAC,EAAE,CAAA;IAEnC;;;;OAIG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAA;IAEnC;;;;OAIG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAA;IAEtC;;OAEG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,OAAO,CAAA;CACnC"}

package/dist/options/linuxOptions.js.map

@@ -1 +1 @@
-{"version":3,"file":"linuxOptions.js","sourceRoot":"","sources":["../../src/options/linuxOptions.ts"],"names":[],"mappings":"","sourcesContent":["import { TargetConfigType, TargetSpecificOptions } from \"../core.js\"\nimport { PlatformSpecificBuildOptions } from \"./PlatformSpecificBuildOptions.js\"\n\n/**\n * Example Spec: https://specifications.freedesktop.org/desktop-entry-spec/latest/example.html\n */\nexport interface LinuxDesktopFile {\n  /**\n   * `[Desktop Entry]` metadata entries (name to value). Overwrites default values calculated by electron-builder\n   */\n  entry?: {\n    [k: string]: string\n  } | null\n  /**\n   * `[Desktop Actions <ActionName>]` metadata entries (name to value).\n   *\n   * Config Example:\n   * ```js\n   * desktopActions: {\n   *    NewWindow: {\n   *       Name: 'New Window',\n   *       Exec: 'app --new-window',\n   *    }\n   * }\n   * ```\n   */\n  desktopActions?: {\n    [ActionName: string]: any\n  } | null\n}\n\nexport interface LinuxConfiguration extends CommonLinuxOptions, PlatformSpecificBuildOptions {\n  /**\n   * Target package type: list of `AppImage`, `flatpak`, `snap`, `deb`, `rpm`, `freebsd`, `pacman`, `p5p`, `apk`, `7z`, `zip`, `tar.xz`, `tar.lz`, `tar.gz`, `tar.bz2`, `dir`.\n   *\n   * electron-builder [docker image](https://www.electron.build/multi-platform-build#docker) can be used to build Linux targets on any platform.\n   *\n   * Please [do not put an AppImage into another archive](https://github.com/probonopd/AppImageKit/wiki/Creating-AppImages#common-mistake) like a .zip or .tar.gz.\n   * @default AppImage\n   */\n  readonly target?: TargetConfigType\n\n  /**\n   * The maintainer. Defaults to [author](https://www.electron.build/configuration#author).\n   */\n  readonly maintainer?: string | null\n\n  /**\n   * The vendor. Defaults to [author](https://www.electron.build/configuration#author).\n   */\n  readonly vendor?: string | null\n\n  /**\n   * The path to icon set directory or one png file, relative to the [build resources](https://www.electron.build/contents#extraresources) or to the project directory. The icon filename must contain the size (e.g. 32x32.png) of the icon.\n   * By default will be generated automatically based on the macOS icns file.\n   */\n  readonly icon?: string\n\n  /**\n   * @private\n   * @internal Allows specifying an FPM-only package category for all FPM targets in one place.\n   * For user-facing category configuration use the target-specific options (e.g. {@link DebOptions}).\n   */\n  readonly packageCategory?: string | null\n\n  /**\n   * When `true`, the installed `.desktop` filename is derived from `desktopName` in `package.json`\n   * (minus the `.desktop` suffix) so that it matches `StartupWMClass` and Electron's `app_id`.\n   * Falls back to `executableName` when `desktopName` is absent.\n   *\n   * @default false\n   * @see https://github.com/electron-userland/electron-builder/issues/9103\n   * @remarks In v27 the default will change to `true`.\n   */\n  readonly syncDesktopName?: boolean\n}\n\n/**\n * Desktop-entry and runtime fields shared by all Linux targets and all snap core strategies.\n *\n * Fields set under `linux.*` in your build config (i.e. on {@link LinuxConfiguration}) are\n * automatically cascaded into each snap core's options by `LinuxTargetHelper.getSnapCore()`.\n * You do not need to duplicate them under `snapcraft.core24.*`, `snapcraft.core22.*`, etc.\n * Per-core values always take precedence when both are set.\n */\nexport interface CommonLinuxOptions {\n  /**\n   * The [short description](https://www.debian.org/doc/debian-policy/ch-controlfields.html#s-f-Description).\n   */\n  readonly synopsis?: string | null\n\n  /**\n   * As [description](https://www.electron.build/configuration#description) from application package.json, but allows you to specify different for Linux.\n   */\n  readonly description?: string | null\n\n  /**\n   * The [application category](https://specifications.freedesktop.org/menu-spec/latest/apa.html#main-category-registry).\n   */\n  readonly category?: string | null\n\n  /**\n   * The mime types in addition to specified in the file associations. Use it if you don't want to register a new mime type, but reuse existing.\n   */\n  readonly mimeTypes?: Array<string> | null\n\n  /**\n   * The [Desktop file](https://developer.gnome.org/documentation/guidelines/maintainer/integrating.html#desktop-files)\n   */\n  readonly desktop?: LinuxDesktopFile | null\n\n  /**\n   * The executable parameters. Pass to executableName\n   */\n  readonly executableArgs?: Array<string> | null\n}\n\n// fpm-only specific options\nexport interface LinuxTargetSpecificOptions extends CommonLinuxOptions, TargetSpecificOptions {\n  /**\n   * Package dependencies.\n   * `rpm` defaults to `[\"gtk3\", \"libnotify\", \"nss\", \"libXScrnSaver\", \"(libXtst or libXtst6)\", \"xdg-utils\", \"at-spi2-core\", \"(libuuid or libuuid1)\"]`\n   * `pacman` defaults to `[\"c-ares\", \"ffmpeg\", \"gtk3\", \"http-parser\", \"libevent\", \"libvpx\", \"libxslt\", \"libxss\", \"minizip\", \"nss\", \"re2\", \"snappy\", \"libnotify\", \"libappindicator-gtk3\"]`\n   */\n  readonly depends?: Array<string> | null\n\n  /**\n   * The compression type passed to fpm. For `deb`, `rpm`, and `pacman` targets prefer the\n   * typed per-format interfaces (`DebOptions`, `RpmOptions`, `PacmanOptions`) which narrow\n   * this to only the values that fpm actually accepts for that format.\n   * @default xz\n   */\n  readonly compression?: \"gz\" | \"bzip2\" | \"xz\" | \"xzmt\" | \"gzip\" | \"zst\" | \"zstd\" | null\n\n  readonly icon?: string\n\n  /**\n   * The package category.\n   */\n  readonly packageCategory?: string | null\n\n  /**\n   * The name of the package.\n   */\n  readonly packageName?: string | null\n\n  readonly vendor?: string | null\n  readonly maintainer?: string | null\n\n  /**\n   * File path to script to be passed to FPM for `--after-install` arg.\n   */\n  readonly afterInstall?: string | null\n  /**\n   * File path to script to be passed to FPM for `--after-remove` arg.\n   */\n  readonly afterRemove?: string | null\n  /**\n   * File path to custom AppArmor profile (Ubuntu 24+)\n   */\n  readonly appArmorProfile?: string | null\n\n  /**\n   * *Advanced only* The [fpm](https://fpm.readthedocs.io/en/latest/cli-reference.html) options.\n   *\n   * Example: `[\"--before-install=build/deb-preinstall.sh\", \"--after-upgrade=build/deb-postinstall.sh\"]`\n   */\n  readonly fpm?: Array<string> | null\n}\nexport interface DebOptions extends LinuxTargetSpecificOptions {\n  /**\n   * Package dependencies.\n   * If need to support Debian, `libappindicator1` should be removed, it is [deprecated in Debian](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=895037).\n   * If need to support KDE, `gconf2` and `gconf-service` should be removed as it's no longer used [by GNOME](https://packages.debian.org/bullseye/gconf2).\n   * @default [\"libgtk-3-0\", \"libnotify4\", \"libnss3\", \"libxss1\", \"libxtst6\", \"xdg-utils\", \"libatspi2.0-0\", \"libuuid1\", \"libsecret-1-0\"]\n   */\n  readonly depends?: Array<string> | null\n\n  /**\n   * The [recommended package dependencies](https://www.debian.org/doc/debian-policy/ch-relationships.html#s-binarydeps).\n   * @default [\"libappindicator3-1\"]\n   */\n  readonly recommends?: Array<string> | null\n\n  /**\n   * The [package category](https://www.debian.org/doc/debian-policy/ch-controlfields.html#s-f-Section).\n   */\n  readonly packageCategory?: string | null\n\n  /**\n   * The [Priority](https://www.debian.org/doc/debian-policy/ch-controlfields.html#s-f-Priority) attribute.\n   */\n  readonly priority?: string | null\n\n  /** @default xz */\n  readonly compression?: \"gz\" | \"bzip2\" | \"xz\" | \"zst\" | null\n}\n\nexport interface RpmOptions extends LinuxTargetSpecificOptions {\n  /**\n   * Passed to fpm via `--rpm-compression`. `\"xzmt\"` uses multi-threaded xz (fpm's RPM default).\n   * `\"xz\"` is automatically promoted to `\"xzmt\"`. `\"gzip\"` and `\"bzip2\"` pass through as-is.\n   * @default xzmt\n   */\n  readonly compression?: \"xz\" | \"xzmt\" | \"gzip\" | \"bzip2\" | null\n}\n\nexport interface PacmanOptions extends LinuxTargetSpecificOptions {\n  /** @default xz */\n  readonly compression?: \"gz\" | \"bzip2\" | \"xz\" | \"zstd\" | null\n}\n\nexport interface AppImageOptions extends CommonLinuxOptions, TargetSpecificOptions {\n  /**\n   * The path to EULA license file. Defaults to `license.txt` or `eula.txt` (or uppercase variants). Only plain text is supported.\n   */\n  readonly license?: string | null\n  /**\n   * The compression algorithm passed to the AppImage build tool.\n   *\n   * **FUSE2 toolset (`\"0.0.0\"` or unset):** only `\"xz\"` and `\"gzip\"` are forwarded\n   * to mksquashfs (`-comp <value>`); `\"xz\"` additionally passes `-Xdict-size 100% -b 1048576`.\n   * `\"zstd\"`, `null`, and unset fall through to the root-level `compression` option:\n   * - `\"maximum\"` → `\"xz\"`\n   * - anything else → flag omitted (mksquashfs defaults to gzip)\n   *\n   * **Static-runtime toolsets (`>= 1.0.0`):** `\"gzip\"` and `\"zstd\"` are forwarded\n   * directly. `\"xz\"` is mapped to `\"zstd\"` (nearest supported equivalent). `null`\n   * or unset falls through to the root-level `compression` option:\n   * - `\"store\"` → `\"gzip\"`\n   * - `\"normal\"` / `\"maximum\"` / unset → `\"zstd\"`\n   */\n  readonly compression?: \"gzip\" | \"xz\" | \"zstd\" | null\n}\n\nexport interface FlatpakOptions extends CommonLinuxOptions, TargetSpecificOptions {\n  /**\n   * The path to EULA license file. Defaults to `license.txt` or `eula.txt` (or uppercase variants). Only plain text is supported.\n   */\n  readonly license?: string | null\n\n  /**\n   * The name of the runtime that the application uses. Defaults to `org.freedesktop.Platform`.\n   *\n   * See [flatpak manifest documentation](https://docs.flatpak.org/en/latest/flatpak-builder-command-reference.html#flatpak-manifest).\n   */\n  readonly runtime?: string\n\n  /**\n   * The version of the runtime that the application uses. Defaults to `20.08`.\n   *\n   * See [flatpak manifest documentation](https://docs.flatpak.org/en/latest/flatpak-builder-command-reference.html#flatpak-manifest).\n   */\n  readonly runtimeVersion?: string\n\n  /**\n   * The name of the development runtime that the application builds with. Defaults to `org.freedesktop.Sdk`.\n   *\n   * See [flatpak manifest documentation](https://docs.flatpak.org/en/latest/flatpak-builder-command-reference.html#flatpak-manifest).\n   */\n  readonly sdk?: string\n\n  /**\n   * Start with the files from the specified application. This can be used to create applications that extend another application.\n   * Defaults to [org.electronjs.Electron2.BaseApp](https://github.com/flathub/org.electronjs.Electron2.BaseApp).\n   *\n   * See [flatpak manifest documentation](https://docs.flatpak.org/en/latest/flatpak-builder-command-reference.html#flatpak-manifest).\n   */\n  readonly base?: string\n\n  /**\n   * Use this specific version of the application specified in base. Defaults to `20.08`.\n   *\n   * See [flatpak manifest documentation](https://docs.flatpak.org/en/latest/flatpak-builder-command-reference.html#flatpak-manifest).\n   */\n  readonly baseVersion?: string\n\n  /**\n   * The branch to use when exporting the application. Defaults to `master`.\n   *\n   * See [flatpak manifest documentation](https://docs.flatpak.org/en/latest/flatpak-builder-command-reference.html#flatpak-manifest).\n   */\n  readonly branch?: string\n\n  /**\n   * An array of arguments passed to the flatpak build-finish command. Defaults to:\n   * ```json\n   * [\n   *   // Wayland/X11 Rendering\n   *   \"--socket=wayland\",\n   *   \"--socket=x11\",\n   *   \"--share=ipc\",\n   *   // Open GL\n   *   \"--device=dri\",\n   *   // Audio output\n   *   \"--socket=pulseaudio\",\n   *   // Read/write home directory access\n   *   \"--filesystem=home\",\n   *   // Allow communication with network\n   *   \"--share=network\",\n   *   // System notifications with libnotify\n   *   \"--talk-name=org.freedesktop.Notifications\",\n   * ]\n   * ```\n   *\n   * See [flatpak manifest documentation](https://docs.flatpak.org/en/latest/flatpak-builder-command-reference.html#flatpak-manifest).\n   */\n  readonly finishArgs?: string[]\n\n  /**\n   * An array of objects specifying the modules to be built in order.\n   *\n   * See [flatpak manifest documentation](https://docs.flatpak.org/en/latest/flatpak-builder-command-reference.html#flatpak-manifest).\n   */\n  readonly modules?: (string | any)[]\n\n  /**\n   * Files to copy directly into the app. Should be a list of [source, dest] tuples. Source should be a relative/absolute path to a file/directory to copy into the flatpak, and dest should be the path inside the app install prefix (e.g. /share/applications/).\n   *\n   * See [@malept/flatpak-bundler documentation](https://github.com/malept/flatpak-bundler#build-options).\n   */\n  readonly files?: [string, string][]\n\n  /**\n   * Symlinks to create in the app files. Should be a list of [target, location] symlink tuples. Target can be either a relative or absolute path inside the app install prefix, and location should be a absolute path inside the prefix to create the symlink at.\n   *\n   * See [@malept/flatpak-bundler documentation](https://github.com/malept/flatpak-bundler#build-options).\n   */\n  readonly symlinks?: [string, string][]\n\n  /**\n   * Whether to enable the Wayland specific flags (`--enable-features=UseOzonePlatform --ozone-platform=wayland`) in the wrapper script. These flags are only available starting with Electron version 12. Defaults to `false`.\n   */\n  readonly useWaylandFlags?: boolean\n}\n"]}
+{"version":3,"file":"linuxOptions.js","sourceRoot":"","sources":["../../src/options/linuxOptions.ts"],"names":[],"mappings":"","sourcesContent":["import { TargetConfigType, TargetSpecificOptions } from \"../core.js\"\nimport { PlatformSpecificBuildOptions } from \"./PlatformSpecificBuildOptions.js\"\n\n/**\n * Example Spec: https://specifications.freedesktop.org/desktop-entry-spec/latest/example.html\n */\nexport interface LinuxDesktopFile {\n  /**\n   * `[Desktop Entry]` metadata entries (name to value). Overwrites default values calculated by electron-builder\n   */\n  entry?: {\n    [k: string]: string\n  } | null\n  /**\n   * `[Desktop Actions <ActionName>]` metadata entries (name to value).\n   *\n   * Config Example:\n   * ```js\n   * desktopActions: {\n   *    NewWindow: {\n   *       Name: 'New Window',\n   *       Exec: 'app --new-window',\n   *    }\n   * }\n   * ```\n   */\n  desktopActions?: {\n    [ActionName: string]: any\n  } | null\n}\n\nexport interface LinuxConfiguration extends CommonLinuxOptions, PlatformSpecificBuildOptions {\n  /**\n   * Target package type: list of `AppImage`, `flatpak`, `snap`, `deb`, `rpm`, `freebsd`, `pacman`, `p5p`, `apk`, `7z`, `zip`, `tar.xz`, `tar.lz`, `tar.gz`, `tar.bz2`, `dir`.\n   *\n   * electron-builder [docker image](https://www.electron.build/multi-platform-build#docker) can be used to build Linux targets on any platform.\n   *\n   * Please [do not put an AppImage into another archive](https://github.com/probonopd/AppImageKit/wiki/Creating-AppImages#common-mistake) like a .zip or .tar.gz.\n   * @default AppImage\n   */\n  readonly target?: TargetConfigType\n\n  /**\n   * The maintainer. Defaults to [author](https://www.electron.build/configuration#author).\n   */\n  readonly maintainer?: string | null\n\n  /**\n   * The vendor. Defaults to [author](https://www.electron.build/configuration#author).\n   */\n  readonly vendor?: string | null\n\n  /**\n   * The path to icon set directory or one png file, relative to the [build resources](https://www.electron.build/contents#extraresources) or to the project directory. The icon filename must contain the size (e.g. 32x32.png) of the icon.\n   * By default will be generated automatically based on the macOS icns file.\n   */\n  readonly icon?: string\n\n  /**\n   * @private\n   * @internal Allows specifying an FPM-only package category for all FPM targets in one place.\n   * For user-facing category configuration use the target-specific options (e.g. {@link DebOptions}).\n   */\n  readonly packageCategory?: string | null\n}\n\n/**\n * Desktop-entry and runtime fields shared by all Linux targets and all snap core strategies.\n *\n * Fields set under `linux.*` in your build config (i.e. on {@link LinuxConfiguration}) are\n * automatically cascaded into each snap core's options by `LinuxTargetHelper.getSnapCore()`.\n * You do not need to duplicate them under `snapcraft.core24.*`, `snapcraft.core22.*`, etc.\n * Per-core values always take precedence when both are set.\n */\nexport interface CommonLinuxOptions {\n  /**\n   * The [short description](https://www.debian.org/doc/debian-policy/ch-controlfields.html#s-f-Description).\n   */\n  readonly synopsis?: string | null\n\n  /**\n   * As [description](https://www.electron.build/configuration#description) from application package.json, but allows you to specify different for Linux.\n   */\n  readonly description?: string | null\n\n  /**\n   * The [application category](https://specifications.freedesktop.org/menu-spec/latest/apa.html#main-category-registry).\n   */\n  readonly category?: string | null\n\n  /**\n   * The mime types in addition to specified in the file associations. Use it if you don't want to register a new mime type, but reuse existing.\n   */\n  readonly mimeTypes?: Array<string> | null\n\n  /**\n   * The [Desktop file](https://developer.gnome.org/documentation/guidelines/maintainer/integrating.html#desktop-files)\n   */\n  readonly desktop?: LinuxDesktopFile | null\n\n  /**\n   * The executable parameters. Pass to executableName\n   */\n  readonly executableArgs?: Array<string> | null\n}\n\n// fpm-only specific options\nexport interface LinuxTargetSpecificOptions extends CommonLinuxOptions, TargetSpecificOptions {\n  /**\n   * Package dependencies.\n   * `rpm` defaults to `[\"gtk3\", \"libnotify\", \"nss\", \"libXScrnSaver\", \"(libXtst or libXtst6)\", \"xdg-utils\", \"at-spi2-core\", \"(libuuid or libuuid1)\"]`\n   * `pacman` defaults to `[\"c-ares\", \"ffmpeg\", \"gtk3\", \"http-parser\", \"libevent\", \"libvpx\", \"libxslt\", \"libxss\", \"minizip\", \"nss\", \"re2\", \"snappy\", \"libnotify\", \"libappindicator-gtk3\"]`\n   */\n  readonly depends?: Array<string> | null\n\n  /**\n   * The compression type passed to fpm. For `deb`, `rpm`, and `pacman` targets prefer the\n   * typed per-format interfaces (`DebOptions`, `RpmOptions`, `PacmanOptions`) which narrow\n   * this to only the values that fpm actually accepts for that format.\n   * @default xz\n   */\n  readonly compression?: \"gz\" | \"bzip2\" | \"xz\" | \"xzmt\" | \"gzip\" | \"zst\" | \"zstd\" | null\n\n  readonly icon?: string\n\n  /**\n   * The package category.\n   */\n  readonly packageCategory?: string | null\n\n  /**\n   * The name of the package.\n   */\n  readonly packageName?: string | null\n\n  readonly vendor?: string | null\n  readonly maintainer?: string | null\n\n  /**\n   * File path to script to be passed to FPM for `--after-install` arg.\n   */\n  readonly afterInstall?: string | null\n  /**\n   * File path to script to be passed to FPM for `--after-remove` arg.\n   */\n  readonly afterRemove?: string | null\n  /**\n   * File path to custom AppArmor profile (Ubuntu 24+)\n   */\n  readonly appArmorProfile?: string | null\n\n  /**\n   * *Advanced only* The [fpm](https://fpm.readthedocs.io/en/latest/cli-reference.html) options.\n   *\n   * Example: `[\"--before-install=build/deb-preinstall.sh\", \"--after-upgrade=build/deb-postinstall.sh\"]`\n   */\n  readonly fpm?: Array<string> | null\n}\nexport interface DebOptions extends LinuxTargetSpecificOptions {\n  /**\n   * Package dependencies.\n   * If need to support Debian, `libappindicator1` should be removed, it is [deprecated in Debian](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=895037).\n   * If need to support KDE, `gconf2` and `gconf-service` should be removed as it's no longer used [by GNOME](https://packages.debian.org/bullseye/gconf2).\n   * @default [\"libgtk-3-0\", \"libnotify4\", \"libnss3\", \"libxss1\", \"libxtst6\", \"xdg-utils\", \"libatspi2.0-0\", \"libuuid1\", \"libsecret-1-0\"]\n   */\n  readonly depends?: Array<string> | null\n\n  /**\n   * The [recommended package dependencies](https://www.debian.org/doc/debian-policy/ch-relationships.html#s-binarydeps).\n   * @default [\"libappindicator3-1\"]\n   */\n  readonly recommends?: Array<string> | null\n\n  /**\n   * The [package category](https://www.debian.org/doc/debian-policy/ch-controlfields.html#s-f-Section).\n   */\n  readonly packageCategory?: string | null\n\n  /**\n   * The [Priority](https://www.debian.org/doc/debian-policy/ch-controlfields.html#s-f-Priority) attribute.\n   */\n  readonly priority?: string | null\n\n  /** @default xz */\n  readonly compression?: \"gz\" | \"bzip2\" | \"xz\" | \"zst\" | null\n}\n\nexport interface RpmOptions extends LinuxTargetSpecificOptions {\n  /**\n   * Passed to fpm via `--rpm-compression`. `\"xzmt\"` uses multi-threaded xz (fpm's RPM default).\n   * `\"xz\"` is automatically promoted to `\"xzmt\"`. `\"gzip\"` and `\"bzip2\"` pass through as-is.\n   * @default xzmt\n   */\n  readonly compression?: \"xz\" | \"xzmt\" | \"gzip\" | \"bzip2\" | null\n}\n\nexport interface PacmanOptions extends LinuxTargetSpecificOptions {\n  /** @default xz */\n  readonly compression?: \"gz\" | \"bzip2\" | \"xz\" | \"zstd\" | null\n}\n\nexport interface AppImageOptions extends CommonLinuxOptions, TargetSpecificOptions {\n  /**\n   * The path to EULA license file. Defaults to `license.txt` or `eula.txt` (or uppercase variants). Only plain text is supported.\n   */\n  readonly license?: string | null\n  /**\n   * The compression algorithm passed to the AppImage build tool.\n   *\n   * **FUSE2 toolset (`\"0.0.0\"` or unset):** only `\"xz\"` and `\"gzip\"` are forwarded\n   * to mksquashfs (`-comp <value>`); `\"xz\"` additionally passes `-Xdict-size 100% -b 1048576`.\n   * `\"zstd\"`, `null`, and unset fall through to the root-level `compression` option:\n   * - `\"maximum\"` → `\"xz\"`\n   * - anything else → flag omitted (mksquashfs defaults to gzip)\n   *\n   * **Static-runtime toolsets (`>= 1.0.0`):** `\"gzip\"` and `\"zstd\"` are forwarded\n   * directly. `\"xz\"` is mapped to `\"zstd\"` (nearest supported equivalent). `null`\n   * or unset falls through to the root-level `compression` option:\n   * - `\"store\"` → `\"gzip\"`\n   * - `\"normal\"` / `\"maximum\"` / unset → `\"zstd\"`\n   */\n  readonly compression?: \"gzip\" | \"xz\" | \"zstd\" | null\n}\n\nexport interface FlatpakOptions extends CommonLinuxOptions, TargetSpecificOptions {\n  /**\n   * The path to EULA license file. Defaults to `license.txt` or `eula.txt` (or uppercase variants). Only plain text is supported.\n   */\n  readonly license?: string | null\n\n  /**\n   * The name of the runtime that the application uses. Defaults to `org.freedesktop.Platform`.\n   *\n   * See [flatpak manifest documentation](https://docs.flatpak.org/en/latest/flatpak-builder-command-reference.html#flatpak-manifest).\n   */\n  readonly runtime?: string\n\n  /**\n   * The version of the runtime that the application uses. Defaults to `20.08`.\n   *\n   * See [flatpak manifest documentation](https://docs.flatpak.org/en/latest/flatpak-builder-command-reference.html#flatpak-manifest).\n   */\n  readonly runtimeVersion?: string\n\n  /**\n   * The name of the development runtime that the application builds with. Defaults to `org.freedesktop.Sdk`.\n   *\n   * See [flatpak manifest documentation](https://docs.flatpak.org/en/latest/flatpak-builder-command-reference.html#flatpak-manifest).\n   */\n  readonly sdk?: string\n\n  /**\n   * Start with the files from the specified application. This can be used to create applications that extend another application.\n   * Defaults to [org.electronjs.Electron2.BaseApp](https://github.com/flathub/org.electronjs.Electron2.BaseApp).\n   *\n   * See [flatpak manifest documentation](https://docs.flatpak.org/en/latest/flatpak-builder-command-reference.html#flatpak-manifest).\n   */\n  readonly base?: string\n\n  /**\n   * Use this specific version of the application specified in base. Defaults to `20.08`.\n   *\n   * See [flatpak manifest documentation](https://docs.flatpak.org/en/latest/flatpak-builder-command-reference.html#flatpak-manifest).\n   */\n  readonly baseVersion?: string\n\n  /**\n   * The branch to use when exporting the application. Defaults to `master`.\n   *\n   * See [flatpak manifest documentation](https://docs.flatpak.org/en/latest/flatpak-builder-command-reference.html#flatpak-manifest).\n   */\n  readonly branch?: string\n\n  /**\n   * An array of arguments passed to the flatpak build-finish command. Defaults to:\n   * ```json\n   * [\n   *   // Wayland/X11 Rendering\n   *   \"--socket=wayland\",\n   *   \"--socket=x11\",\n   *   \"--share=ipc\",\n   *   // Open GL\n   *   \"--device=dri\",\n   *   // Audio output\n   *   \"--socket=pulseaudio\",\n   *   // Read/write home directory access\n   *   \"--filesystem=home\",\n   *   // Allow communication with network\n   *   \"--share=network\",\n   *   // System notifications with libnotify\n   *   \"--talk-name=org.freedesktop.Notifications\",\n   * ]\n   * ```\n   *\n   * See [flatpak manifest documentation](https://docs.flatpak.org/en/latest/flatpak-builder-command-reference.html#flatpak-manifest).\n   */\n  readonly finishArgs?: string[]\n\n  /**\n   * An array of objects specifying the modules to be built in order.\n   *\n   * See [flatpak manifest documentation](https://docs.flatpak.org/en/latest/flatpak-builder-command-reference.html#flatpak-manifest).\n   */\n  readonly modules?: (string | any)[]\n\n  /**\n   * Files to copy directly into the app. Should be a list of [source, dest] tuples. Source should be a relative/absolute path to a file/directory to copy into the flatpak, and dest should be the path inside the app install prefix (e.g. /share/applications/).\n   *\n   * See [@malept/flatpak-bundler documentation](https://github.com/malept/flatpak-bundler#build-options).\n   */\n  readonly files?: [string, string][]\n\n  /**\n   * Symlinks to create in the app files. Should be a list of [target, location] symlink tuples. Target can be either a relative or absolute path inside the app install prefix, and location should be a absolute path inside the prefix to create the symlink at.\n   *\n   * See [@malept/flatpak-bundler documentation](https://github.com/malept/flatpak-bundler#build-options).\n   */\n  readonly symlinks?: [string, string][]\n\n  /**\n   * Whether to enable the Wayland specific flags (`--enable-features=UseOzonePlatform --ozone-platform=wayland`) in the wrapper script. These flags are only available starting with Electron version 12. Defaults to `false`.\n   */\n  readonly useWaylandFlags?: boolean\n}\n"]}

package/dist/options/winOptions.d.ts

@@ -21,25 +21,50 @@ export interface WindowsConfiguration extends PlatformSpecificBuildOptions {
      */
     readonly legalTrademarks?: string | null;
     /**
-     * Code signing configuration. Set to `false` or `null` to disable Windows code signing
-     * (executable resources such as the icon and metadata are still edited). Leave unset to
-     * sign using credentials discovered from the environment (e.g. `WIN_CSC_LINK`). Otherwise
-     * provide exactly one of the following signing modes:
+     * Code signing configuration. Code signing stamps every installer and executable
+     * electron-builder produces with an Authenticode signature, so that Windows (SmartScreen / UAC)
+     * and your auto-updater can verify the publisher and that the files were not tampered with.
+     *
+     * How this option behaves:
+     * - Leave **unset** to sign using credentials discovered from the environment — primarily a
+     *   certificate supplied via `WIN_CSC_LINK` (or `CSC_LINK`) with its password in
+     *   `WIN_CSC_KEY_PASSWORD` (or `CSC_KEY_PASSWORD`). `WIN_CSC_LINK` accepts a file path, an
+     *   `https://` URL, or a base64-encoded certificate. This is the recommended setup for CI.
+     * - Set to `false` or `null` to **disable** code signing entirely (executable resources such as
+     *   the icon and metadata are still edited).
+     * - Set to an **object** to configure signing explicitly. The `type` field selects the signing
+     *   backend (`signtool` is the implicit default) and dispatches to a dedicated sign manager;
+     *   provide exactly one of the modes below. Each output artifact is signed individually, and by
+     *   default executables are dual-signed (see `signingHashAlgorithms`).
      *
      * - `{ type: "signtool", ... }` — Sign with a local certificate file (.pfx/.p12) or a
-     *   certificate from the Windows certificate store.
+     *   certificate from the Windows certificate store. Uses Microsoft `signtool.exe` on Windows and
+     *   `osslsigncode` on macOS/Linux.
      * - `{ type: "hsm", ... }` — Sign using a Hardware Security Module (HSM) or FIPS-compliant
      *   hardware token via signtool's `/csp` (cryptographic service provider) and `/kc` (key
-     *   container) flags. Requires `toolsets.winCodeSign: "1.x"`. Windows-only.
+     *   container) flags. Requires a modern `winCodeSign` toolset (the default — only the legacy
+     *   `"0.0.0"` pin is unsupported). Windows-only.
      * - `{ type: "pkcs11", ... }` — Sign using a PKCS#11 hardware token via osslsigncode.
      *   Available on macOS and Linux CI without a Windows VM.
      * - `{ type: "azure", ... }` — Sign via Azure Trusted Signing (cloud service). Requires
      *   Azure Entra ID environment variables for authentication.
+     *
+     * See [Code Signing](https://www.electron.build/code-signing).
      */
     readonly sign?: WindowsSigningConfiguration | false | null;
     /**
-     * Whether to verify the signature of an available update before installation.
-     * The [publisher name](#publisherName) will be used for the signature verification.
+     * Whether the NSIS auto-updater should verify the Authenticode signature of a downloaded update
+     * before installing it. This is a **runtime** check performed by your app via electron-updater,
+     * not a build-time check.
+     *
+     * When enabled (the default), the resolved [publisher name](#publisherName) is embedded into
+     * `app-update.yml` at build time. At update time electron-updater inspects the certificate that
+     * signed the downloaded installer and compares its subject (Distinguished Name / Common Name)
+     * against that publisher name, refusing to install on a mismatch. This prevents a tampered or
+     * maliciously substituted update from being installed.
+     *
+     * Set to `false` to skip verification — in which case the publisher name is **not** embedded.
+     * Disable this only if your updates are not Authenticode-signed.
      *
      * @default true
      */
@@ -51,63 +76,146 @@ export interface WindowsConfiguration extends PlatformSpecificBuildOptions {
      */
     readonly requestedExecutionLevel?: RequestedExecutionLevel | null;
     /**
-     * Explicit file name/extensions (`str.endsWith`) to also sign. Advanced option.
-     * Supports negative patterns, e.g. example that excludes `.appx` files: `["somefilename", ".dll", "!.appx"]`.
+     * Additional file name suffixes to code sign, beyond the default. By default electron-builder
+     * only signs `.exe` files; list extra suffixes here to also sign e.g. `.dll`, `.node`, or
+     * specific file names. Advanced option — most apps do not need it.
+     *
+     * Each entry is matched with `String.endsWith`, so both bare extensions (`".dll"`) and full file
+     * names (`"mybinary.dll"`) work. Prefix a pattern with `!` to *exclude* a suffix that would
+     * otherwise be signed. Positive patterns are evaluated first, then negative ones. For example,
+     * `["somefilename", ".dll", "!.appx"]` signs `.dll` files (and anything ending in `somefilename`)
+     * but never signs `.appx` files.
+     *
      * @see https://github.com/electron-userland/electron-builder/issues/7329
      * @default null
      */
     readonly signExts?: string[] | null;
 }
 export type RequestedExecutionLevel = "asInvoker" | "highestAvailable" | "requireAdministrator";
+/**
+ * Options shared by every certificate-based signing mode (`signtool`, `hsm`, `pkcs11`). These
+ * control the signature itself — publisher identity, digest algorithms, timestamping, and the
+ * extra certificates added to the signature block — independently of where the private key lives.
+ */
 interface WindowsSigningSharedOptions {
     /**
-     * [The publisher name](https://github.com/electron-userland/electron-builder/issues/1187#issuecomment-278972073), exactly as in your code signed certificate. Several names can be provided.
-     * Defaults to common name from your code signing certificate.
+     * The publisher name(s) to associate with the signature, written exactly as the subject appears
+     * in your code signing certificate. May be a single string or an array — an array is useful when
+     * rotating certificates, so updates signed by either the old or the new certificate still verify.
+     *
+     * This value is not a `signtool` argument; it is consumed in two places:
+     * - **Update verification** — when [verifyUpdateCodeSignature](#verifyUpdateCodeSignature) is
+     *   enabled, it is written into `app-update.yml` and electron-updater checks it against the
+     *   certificate that signed each downloaded update.
+     * - **AppX / MSIX identity** — the package `Publisher` attribute must equal the certificate
+     *   subject, so electron-builder derives it from this value (or the certificate) to keep them
+     *   in sync; a mismatch makes packaging fail with `ERROR_BAD_FORMAT`.
+     *
+     * Defaults to the Common Name (CN) extracted from your code signing certificate. Set to `null`
+     * to opt out.
+     *
+     * @see https://github.com/electron-userland/electron-builder/issues/1187#issuecomment-278972073
      */
     readonly publisherName?: string | Array<string> | null;
     /**
-     * Array of signing algorithms used. For AppX `sha256` is always used.
+     * The digest (hash) algorithms to sign with, applied via signtool's `/fd` flag (or
+     * osslsigncode's `-h`). One signing pass runs per entry, in order; listing more than one
+     * **dual-signs** the file, with each additional signature appended as a nested signature
+     * (signtool `/as`). Signing with both `sha1` and `sha256` lets a single binary validate on
+     * legacy (pre-SHA-2) Windows as well as modern Windows.
+     *
+     * Some targets override this: `.msi` cannot be dual-signed (a single hash is used) and AppX/MSIX
+     * is always `sha256` only.
+     *
      * @default ['sha1', 'sha256']
      */
     readonly signingHashAlgorithms?: Array<"sha1" | "sha256"> | null;
     /**
-     * The URL of the RFC 3161 time stamp server.
+     * The URL of the [RFC 3161](https://www.ietf.org/rfc/rfc3161.txt) timestamp server, used for
+     * SHA-256 and nested/appended signatures (signtool's `/tr` flag). Timestamping records *when*
+     * the file was signed so the signature stays valid after the signing certificate expires.
+     * Ignored when the build runs with `ELECTRON_BUILDER_OFFLINE=true`.
+     *
      * @default http://timestamp.digicert.com
      */
     readonly rfc3161TimeStampServer?: string | null;
     /**
-     * The URL of the time stamp server.
+     * The URL of the legacy Authenticode timestamp server, used for SHA-1 signatures (signtool's
+     * `/t` flag). This is also the timestamp server used by `osslsigncode` (`-t`) when signing on
+     * macOS/Linux. See [rfc3161TimeStampServer](#rfc3161TimeStampServer) for SHA-256 / nested
+     * signatures. Ignored when the build runs with `ELECTRON_BUILDER_OFFLINE=true`.
+     *
      * @default http://timestamp.digicert.com
      */
     readonly timeStampServer?: string | null;
     /**
-     * The path to an additional certificate file you want to add to the signature block.
+     * Path to an additional certificate file (typically an intermediate / cross-signing CA
+     * certificate) whose contents are added to the signature block via signtool's `/ac` flag. Use
+     * this when the signing certificate's full chain is not already present on target machines and
+     * you want it embedded in the signature so the chain can be validated.
      */
     readonly additionalCertificateFile?: string | null;
     /**
-     * The custom function (or path to file or module id) to sign Windows executables.
+     * A custom signing hook that **replaces** electron-builder's built-in `signtool` /
+     * `osslsigncode` invocation. Provide a function, or the path / module id of a file that exports
+     * a `sign` function (resolved relative to the project, then as a module).
+     *
+     * The hook is invoked once per signing pass (i.e. once per entry in
+     * [signingHashAlgorithms](#signingHashAlgorithms)) and receives a configuration object describing
+     * the file to sign (`path`), the resolved certificate info (`cscInfo`), the current `hash`, and
+     * whether this pass is a nested signature (`isNest`), plus a `computeSignToolArgs(isWin)` helper
+     * that returns the default arguments electron-builder would otherwise have used. Use this to
+     * integrate an external or cloud signing service. See
+     * [Code Signing](https://www.electron.build/code-signing).
      */
     readonly sign?: CustomWindowsSign | string | null;
 }
+/**
+ * Sign with a certificate file (`.pfx` / `.p12`) or with a certificate from the Windows
+ * certificate store, using Microsoft `signtool.exe` on Windows and `osslsigncode` on macOS/Linux.
+ * This is the default mode when `win.sign` is unset. Supply the certificate one of four ways:
+ * a file via `certificateFile` (or the `WIN_CSC_LINK` env var), or a store lookup via
+ * `certificateSubjectName` or `certificateSha1`.
+ */
 export interface WindowsSigntoolSigningConfig extends WindowsSigningSharedOptions {
+    /** Discriminator selecting the default file/store signing mode. */
     readonly type: "signtool";
     /**
-     * The path to the *.pfx or *.p12 certificate file. Prefer the `WIN_CSC_LINK` environment
-     * variable when possible. See [Code Signing](https://www.electron.build/code-signing).
+     * Path to the PKCS#12 certificate file (`.pfx` or `.p12`) holding both the signing certificate
+     * and its private key. Passed to signtool via `/f` (or osslsigncode via `-pkcs12`).
+     *
+     * Prefer supplying this out-of-band via the `WIN_CSC_LINK` (or `CSC_LINK`) environment variable
+     * instead of hardcoding a path — that variable also accepts an `https://` URL or a base64-encoded
+     * certificate, which is safer and more convenient on CI. See
+     * [Code Signing](https://www.electron.build/code-signing).
      */
     readonly certificateFile?: string | null;
     /**
-     * The password to the certificate provided in `certificateFile`. Prefer the
-     * `WIN_CSC_KEY_PASSWORD` environment variable when possible.
+     * The password protecting the private key in `certificateFile`. Passed to signtool via `/p`
+     * (or osslsigncode via `-pass`).
+     *
+     * Prefer the `WIN_CSC_KEY_PASSWORD` (or `CSC_KEY_PASSWORD`) environment variable so the secret
+     * never lands in your build configuration.
      */
     readonly certificatePassword?: string | null;
     /**
-     * The name of the subject of the signing certificate. Required for EV Code Signing.
-     * Works only on Windows (or macOS with Parallels Desktop).
+     * Select the signing certificate from the Windows certificate store by (a substring of) its
+     * subject name, instead of pointing at a `.pfx` file. electron-builder enumerates the installed
+     * code-signing certificates, picks the match, and signs by its thumbprint
+     * (`/sha1 <thumbprint> /s <store>`). **Required for EV (Extended Validation) certificates**,
+     * whose private keys live on a hardware token and cannot be exported to a file.
+     *
+     * Works only on Windows (or macOS with Parallels Desktop, via the bundled Windows VM).
      */
     readonly certificateSubjectName?: string | null;
     /**
-     * The SHA1 hash of the signing certificate. Works only on Windows (or macOS with Parallels Desktop).
+     * Select the signing certificate from the Windows certificate store by its SHA-1 thumbprint,
+     * instead of pointing at a `.pfx` file. electron-builder looks the certificate up in the store
+     * and signs with `/sha1 <thumbprint> /s <store>`. Like
+     * [certificateSubjectName](#certificateSubjectName), this suits EV certificates backed by a
+     * hardware token; if both are set, both must resolve to the same certificate.
+     *
+     * Works only on Windows (or macOS with Parallels Desktop, via the bundled Windows VM).
      */
     readonly certificateSha1?: string | null;
 }
@@ -116,6 +224,7 @@ export interface WindowsSigntoolSigningConfig extends WindowsSigningSharedOption
  * real-hardware test coverage is limited.
  */
 export interface WindowsHsmSigningConfig extends WindowsSigningSharedOptions {
+    /** Discriminator selecting HSM / hardware-token signing via signtool's `/csp` and `/kc` flags. */
     readonly type: "hsm";
     /**
      * The name of the cryptographic service provider (CSP) that holds the private key.
@@ -123,7 +232,8 @@ export interface WindowsHsmSigningConfig extends WindowsSigningSharedOptions {
      * - Google Cloud KMS: `"Google Cloud KMS Provider"`
      * - Smart card / FIPS token: `"Microsoft Base Smart Card Crypto Provider"`
      *
-     * Requires `toolsets.winCodeSign: "1.x"`. Windows-only — use `type: "pkcs11"` on macOS/Linux.
+     * Requires a modern `winCodeSign` toolset (the default; only the legacy `"0.0.0"` pin is
+     * unsupported). Windows-only — use `type: "pkcs11"` on macOS/Linux.
      */
     readonly cryptoServiceProvider: string;
     /**
@@ -139,19 +249,31 @@ export interface WindowsHsmSigningConfig extends WindowsSigningSharedOptions {
      */
     readonly certificateFile?: string | null;
     /**
-     * The SHA1 thumbprint of the certificate in the Windows certificate store.
+     * Alternative to `certificateFile`: locate the public certificate in the Windows certificate
+     * store by its SHA-1 thumbprint. The private key still comes from the HSM via
+     * `cryptoServiceProvider` / `keyContainer`; this only identifies which public certificate to sign
+     * with.
      */
     readonly certificateSha1?: string | null;
     /**
-     * The subject name of the certificate in the Windows certificate store.
+     * Alternative to `certificateFile`: locate the public certificate in the Windows certificate
+     * store by (a substring of) its subject name. The private key still comes from the HSM via
+     * `cryptoServiceProvider` / `keyContainer`; this only identifies which public certificate to sign
+     * with.
      */
     readonly certificateSubjectName?: string | null;
 }
 /**
+ * Sign with a PKCS#11 hardware token (smart card, USB HSM, cloud KMS exposed via a PKCS#11
+ * provider) using `osslsigncode`. Unlike `hsm`, this mode does **not** require Windows or a
+ * Windows VM, so it can sign Windows binaries directly from macOS/Linux CI. The token PIN is read
+ * from the `WIN_CSC_KEY_PASSWORD` (or `CSC_KEY_PASSWORD`) environment variable.
+ *
  * @beta PKCS#11 signing is available in v27 as a beta feature. The interface is stable but
  * real-hardware test coverage is limited.
  */
 export interface WindowsPkcs11SigningConfig extends WindowsSigningSharedOptions {
+    /** Discriminator selecting cross-platform PKCS#11 token signing via `osslsigncode`. */
     readonly type: "pkcs11";
     /**
      * Path to the PKCS#11 shared library (`.so` on Linux, `.dylib` on macOS).
@@ -178,14 +300,19 @@ export interface WindowsPkcs11SigningConfig extends WindowsSigningSharedOptions
     readonly certificateFile?: string | null;
 }
 /**
- * @beta The `signtool /dlib` Azure Trusted Signing integration introduced in v27 is a beta
- * feature. The legacy PowerShell fallback (triggered when `toolsets.winCodeSign` is unset or
- * `"0.0.0"`) remains supported for migration.
+ * The `signtool /dlib` Azure Trusted Signing integration was introduced in `toolsets.winCodeSign: 1.3.0`.
+ * The legacy PowerShell integration is deprecated, but leverages the same underlying Azure APIs, so both interfaces share the same config shape.
  */
 export interface WindowsAzureSigningConfig {
+    /** Discriminator selecting Azure Trusted Signing (cloud signing — no local certificate). */
     readonly type: "azure";
     /**
-     * [The publisher name](https://github.com/electron-userland/electron-builder/issues/1187#issuecomment-278972073), exactly as in your code signed certificate. Several names can be provided.
+     * The publisher name to associate with the signature, exactly as it appears in the certificate
+     * issued by your Trusted Signing certificate profile. Required. Used for
+     * [update verification](#verifyUpdateCodeSignature) (embedded in `app-update.yml` and checked by
+     * electron-updater) and must match the certificate subject.
+     *
+     * @see https://github.com/electron-userland/electron-builder/issues/1187#issuecomment-278972073
      */
     readonly publisherName: string;
     /**
@@ -197,15 +324,18 @@ export interface WindowsAzureSigningConfig {
      */
     readonly endpoint: string;
     /**
-     * The Certificate Profile name. Translates to field: CertificateProfileName.
+     * The name of the Trusted Signing Certificate Profile to sign with, as created in your Azure
+     * Code Signing Account. Maps to the DLib metadata field `CertificateProfileName`.
      */
     readonly certificateProfileName: string;
     /**
-     * The Code Signing Account name. Translates to field: CodeSigningAccountName.
+     * The name of the Azure Trusted Signing (Code Signing) Account that owns the certificate profile.
+     * Maps to the DLib metadata field `CodeSigningAccountName`.
      */
     readonly codeSigningAccountName: string;
     /**
-     * The file digest algorithm. Translates to field: FileDigest.
+     * The digest algorithm used to hash the files being signed. Maps to the DLib metadata field
+     * `FileDigest`.
      * @default SHA256
      */
     readonly fileDigest?: string;

package/dist/options/winOptions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"winOptions.d.ts","sourceRoot":"","sources":["../../src/options/winOptions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,2CAA2C,CAAA;AAC7E,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAA;AAC7C,OAAO,EAAE,4BAA4B,EAAE,MAAM,mCAAmC,CAAA;AAEhF,MAAM,WAAW,oBAAqB,SAAQ,4BAA4B;IACxE;;;;;;;OAOG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,gBAAgB,CAAA;IAElC;;;OAGG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAE7B;;OAEG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAExC;;;;;;;;;;;;;;;OAeG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,2BAA2B,GAAG,KAAK,GAAG,IAAI,CAAA;IAE1D;;;;;OAKG;IACH,QAAQ,CAAC,yBAAyB,CAAC,EAAE,OAAO,CAAA;IAE5C;;;;OAIG;IACH,QAAQ,CAAC,uBAAuB,CAAC,EAAE,uBAAuB,GAAG,IAAI,CAAA;IAEjE;;;;;OAKG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,GAAG,IAAI,CAAA;CACpC;AAED,MAAM,MAAM,uBAAuB,GAAG,WAAW,GAAG,kBAAkB,GAAG,sBAAsB,CAAA;AAI/F,UAAU,2BAA2B;IACnC;;;OAGG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,GAAG,IAAI,CAAA;IAEtD;;;OAGG;IACH,QAAQ,CAAC,qBAAqB,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG,QAAQ,CAAC,GAAG,IAAI,CAAA;IAEhE;;;OAGG;IACH,QAAQ,CAAC,sBAAsB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAE/C;;;OAGG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAExC;;OAEG;IACH,QAAQ,CAAC,yBAAyB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAElD;;OAEG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,iBAAiB,GAAG,MAAM,GAAG,IAAI,CAAA;CAClD;AAID,MAAM,WAAW,4BAA6B,SAAQ,2BAA2B;IAC/E,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAA;IAEzB;;;OAGG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAExC;;;OAGG;IACH,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAE5C;;;OAGG;IACH,QAAQ,CAAC,sBAAsB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAE/C;;OAEG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CACzC;AAID;;;GAGG;AACH,MAAM,WAAW,uBAAwB,SAAQ,2BAA2B;IAC1E,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAA;IAEpB;;;;;;;OAOG;IACH,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAA;IAEtC;;;;;OAKG;IACH,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAE7B;;;OAGG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAExC;;OAEG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAExC;;OAEG;IACH,QAAQ,CAAC,sBAAsB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAChD;AAID;;;GAGG;AACH,MAAM,WAAW,0BAA2B,SAAQ,2BAA2B;IAC7E,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;IAEvB;;;;;;;OAOG;IACH,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAE7B;;;;;;;OAOG;IACH,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAE7B;;;OAGG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CACzC;AAID;;;;GAIG;AACH,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAA;IAEtB;;OAEG;IACH,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;IAE9B;;;;;;OAMG;IACH,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IAEzB;;OAEG;IACH,QAAQ,CAAC,sBAAsB,EAAE,MAAM,CAAA;IAEvC;;OAEG;IACH,QAAQ,CAAC,sBAAsB,EAAE,MAAM,CAAA;IAEvC;;;OAGG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAA;IAE5B;;;OAGG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;IAElC;;;OAGG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAA;IAEjC;;;;OAIG;IACH,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CACrD;AAID,MAAM,MAAM,2BAA2B,GAAG,4BAA4B,GAAG,uBAAuB,GAAG,0BAA0B,GAAG,yBAAyB,CAAA;AAEzJ,uEAAuE;AACvE,MAAM,MAAM,2BAA2B,GAAG,4BAA4B,GAAG,uBAAuB,GAAG,0BAA0B,CAAA;AAE7H;;;GAGG;AACH,wBAAgB,kCAAkC,CAAC,MAAM,EAAE,oBAAoB,GAAG,2BAA2B,GAAG,IAAI,CAGnH;AAED,0FAA0F;AAC1F,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,oBAAoB,GAAG,OAAO,CAE9E"}
+{"version":3,"file":"winOptions.d.ts","sourceRoot":"","sources":["../../src/options/winOptions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,2CAA2C,CAAA;AAC7E,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAA;AAC7C,OAAO,EAAE,4BAA4B,EAAE,MAAM,mCAAmC,CAAA;AAEhF,MAAM,WAAW,oBAAqB,SAAQ,4BAA4B;IACxE;;;;;;;OAOG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,gBAAgB,CAAA;IAElC;;;OAGG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAE7B;;OAEG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAExC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA8BG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,2BAA2B,GAAG,KAAK,GAAG,IAAI,CAAA;IAE1D;;;;;;;;;;;;;;;OAeG;IACH,QAAQ,CAAC,yBAAyB,CAAC,EAAE,OAAO,CAAA;IAE5C;;;;OAIG;IACH,QAAQ,CAAC,uBAAuB,CAAC,EAAE,uBAAuB,GAAG,IAAI,CAAA;IAEjE;;;;;;;;;;;;;OAaG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,GAAG,IAAI,CAAA;CACpC;AAED,MAAM,MAAM,uBAAuB,GAAG,WAAW,GAAG,kBAAkB,GAAG,sBAAsB,CAAA;AAI/F;;;;GAIG;AACH,UAAU,2BAA2B;IACnC;;;;;;;;;;;;;;;;;OAiBG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,GAAG,IAAI,CAAA;IAEtD;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,qBAAqB,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG,QAAQ,CAAC,GAAG,IAAI,CAAA;IAEhE;;;;;;;OAOG;IACH,QAAQ,CAAC,sBAAsB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAE/C;;;;;;;OAOG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAExC;;;;;OAKG;IACH,QAAQ,CAAC,yBAAyB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAElD;;;;;;;;;;;;OAYG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,iBAAiB,GAAG,MAAM,GAAG,IAAI,CAAA;CAClD;AAID;;;;;;GAMG;AACH,MAAM,WAAW,4BAA6B,SAAQ,2BAA2B;IAC/E,mEAAmE;IACnE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAA;IAEzB;;;;;;;;OAQG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAExC;;;;;;OAMG;IACH,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAE5C;;;;;;;;OAQG;IACH,QAAQ,CAAC,sBAAsB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAE/C;;;;;;;;OAQG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CACzC;AAID;;;GAGG;AACH,MAAM,WAAW,uBAAwB,SAAQ,2BAA2B;IAC1E,kGAAkG;IAClG,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAA;IAEpB;;;;;;;;OAQG;IACH,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAA;IAEtC;;;;;OAKG;IACH,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAE7B;;;OAGG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAExC;;;;;OAKG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAExC;;;;;OAKG;IACH,QAAQ,CAAC,sBAAsB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAChD;AAID;;;;;;;;GAQG;AACH,MAAM,WAAW,0BAA2B,SAAQ,2BAA2B;IAC7E,uFAAuF;IACvF,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;IAEvB;;;;;;;OAOG;IACH,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAE7B;;;;;;;OAOG;IACH,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAE7B;;;OAGG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CACzC;AAID;;;GAGG;AACH,MAAM,WAAW,yBAAyB;IACxC,4FAA4F;IAC5F,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAA;IAEtB;;;;;;;OAOG;IACH,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;IAE9B;;;;;;OAMG;IACH,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IAEzB;;;OAGG;IACH,QAAQ,CAAC,sBAAsB,EAAE,MAAM,CAAA;IAEvC;;;OAGG;IACH,QAAQ,CAAC,sBAAsB,EAAE,MAAM,CAAA;IAEvC;;;;OAIG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAA;IAE5B;;;OAGG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;IAElC;;;OAGG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAA;IAEjC;;;;OAIG;IACH,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CACrD;AAID,MAAM,MAAM,2BAA2B,GAAG,4BAA4B,GAAG,uBAAuB,GAAG,0BAA0B,GAAG,yBAAyB,CAAA;AAEzJ,uEAAuE;AACvE,MAAM,MAAM,2BAA2B,GAAG,4BAA4B,GAAG,uBAAuB,GAAG,0BAA0B,CAAA;AAE7H;;;GAGG;AACH,wBAAgB,kCAAkC,CAAC,MAAM,EAAE,oBAAoB,GAAG,2BAA2B,GAAG,IAAI,CAGnH;AAED,0FAA0F;AAC1F,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,oBAAoB,GAAG,OAAO,CAE9E"}