app-builder-lib 27.0.0-alpha.4 → 27.0.0-alpha.6

package/dist/toolsets/icons.js.map

@@ -1 +1 @@
-{"version":3,"file":"icons.js","sourceRoot":"","sources":["../../src/toolsets/icons.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,yBAAyB,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AACvF,OAAO,KAAK,IAAI,MAAM,MAAM,CAAA;AAE5B,OAAO,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAA;AAC/D,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAA;AACtD,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAA;AAElD,MAAM,mBAAmB,GAAG;IAC1B,OAAO,EAAE;QACP,qBAAqB,EAAE,kEAAkE;KAC1F;IACD,OAAO,EAAE;QACP,qBAAqB,EAAE,kEAAkE;KAC1F;IACD,OAAO,EAAE;QACP,qBAAqB,EAAE,kEAAkE;KAC1F;CACO,CAAA;AAEV,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,KAA6B,EAAE,YAAoB;IAC3F,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,IAAI,IAAI,EAAE,CAAC;QAC/C,OAAO,oBAAoB,CAAC,KAAK,EAAE,YAAY,CAAC,CAAA;IAClD,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,IAAI,OAAO,CAAA;IAChC,OAAO,sBAAsB,CAAC;QAC5B,WAAW,EAAE,SAAS,OAAO,EAAE;QAC/B,eAAe,EAAE,qBAAqB;QACtC,SAAS,EAAE,mBAAmB,CAAC,OAAO,CAAC;QACvC,aAAa,EAAE,6CAA6C;KAC7D,CAAC,CAAA;AACJ,CAAC;AAUD,MAAM,oBAAoB,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,CAAU,CAAA;AAE5D,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,YAAY,EAAyB;IACvH,IAAI,CAAE,oBAA0C,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,yBAAyB,CAAC,+BAA+B,YAAY,EAAE,CAAC,CAAA;IACpF,CAAC;IACD,MAAM,SAAS,GAAG,eAAe,CAAC,SAAS,CAAC,CAAA;IAC5C,MAAM,UAAU,GAAG,eAAe,CAAC,MAAM,CAAC,CAAA;IAE1C,MAAM,WAAW,GAAG,MAAM,mBAAmB,CAAC,YAAY,EAAE,YAAY,CAAC,CAAA;IACzE,MAAM,UAAU,GAAG,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,cAAc,CAAC,EAAE,WAAW,CAAC,CAAA;IAC1F,IAAI,CAAC,CAAC,MAAM,MAAM,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,yBAAyB,CAAC,0CAA0C,UAAU,EAAE,CAAC,CAAA;IAC7F,CAAC;IACD,sLAAsL;IACtL,MAAM,aAAa,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,YAAY,EAAE,OAAO,EAAE,UAAU,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,CAAA;AACxJ,CAAC","sourcesContent":["import { exec, exists, InvalidConfigurationError, sanitizeDirPath } from \"builder-util\"\nimport * as path from \"path\"\nimport { ToolsetConfig } from \"../configuration.js\"\nimport { downloadBuilderToolset } from \"../util/electronGet.js\"\nimport { withIconsLock } from \"../util/toolsetLock.js\"\nimport { getCustomToolsetPath } from \"./custom.js\"\n\nconst iconsToolsChecksums = {\n  \"1.1.0\": {\n    \"icons-bundle.tar.gz\": \"2241c9501aa5ddd19317956449f50a1bc311df2c34058aae9bf8bfe62081eaec\",\n  },\n  \"1.2.0\": {\n    \"icons-bundle.tar.gz\": \"788add2400487fe00d5ceac4a8347bd71fc43c8c988fde879f929992ea0c03ea\",\n  },\n  \"1.2.1\": {\n    \"icons-bundle.tar.gz\": \"193241afc7c81ab165fa0af15ef0af88f796eb69e8e5bb4249a49310d8be242a\",\n  },\n} as const\n\nexport async function getIconsToolsetPath(icons: ToolsetConfig[\"icons\"], resourcesDir: string): Promise<string> {\n  if (typeof icons === \"object\" && icons != null) {\n    return getCustomToolsetPath(icons, resourcesDir)\n  }\n  const version = icons ?? \"1.2.1\"\n  return downloadBuilderToolset({\n    releaseName: `icons@${version}`,\n    filenameWithExt: \"icons-bundle.tar.gz\",\n    checksums: iconsToolsChecksums[version],\n    githubOrgRepo: \"electron-userland/electron-builder-binaries\",\n  })\n}\n\ntype IconConversionOptions = {\n  inputFile: string\n  outputFormat: \"icns\" | \"ico\" | \"set\"\n  outDir: string\n  iconsToolset: ToolsetConfig[\"icons\"]\n  resourcesDir: string\n}\n\nconst VALID_OUTPUT_FORMATS = [\"icns\", \"ico\", \"set\"] as const\n\nexport async function runIconsTool({ inputFile, outputFormat, outDir, iconsToolset, resourcesDir }: IconConversionOptions): Promise<void> {\n  if (!(VALID_OUTPUT_FORMATS as readonly string[]).includes(outputFormat)) {\n    throw new InvalidConfigurationError(`Invalid icon output format: ${outputFormat}`)\n  }\n  const safeInput = sanitizeDirPath(inputFile)\n  const safeOutDir = sanitizeDirPath(outDir)\n\n  const toolsetPath = await getIconsToolsetPath(iconsToolset, resourcesDir)\n  const scriptPath = sanitizeDirPath(path.resolve(toolsetPath, \"icon-tool.js\"), toolsetPath)\n  if (!(await exists(scriptPath))) {\n    throw new InvalidConfigurationError(`Icons tool not found at expected path: ${scriptPath}`)\n  }\n  // Serialize icon-tool spawns across processes: each reserves a large WebAssembly.Memory, andrunning many in parallel (e.g. across vitest workers) exhausts memory. See withIconsLock.\n  await withIconsLock(() => exec(process.execPath, [scriptPath, `--input`, safeInput, `--format`, outputFormat, `--out`, safeOutDir], { shell: false }))\n}\n"]}
+{"version":3,"file":"icons.js","sourceRoot":"","sources":["../../src/toolsets/icons.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,yBAAyB,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AACvF,OAAO,KAAK,IAAI,MAAM,MAAM,CAAA;AAE5B,OAAO,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAA;AAC/D,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAA;AACtD,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAA;AAClD,OAAO,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAA;AAEpD,wFAAwF;AACxF,MAAM,YAAY,GAAG,OAAO,CAAA;AAE5B,MAAM,mBAAmB,GAAG;IAC1B,OAAO,EAAE;QACP,qBAAqB,EAAE,kEAAkE;KAC1F;IACD,OAAO,EAAE;QACP,qBAAqB,EAAE,kEAAkE;KAC1F;IACD,OAAO,EAAE;QACP,qBAAqB,EAAE,kEAAkE;KAC1F;CACO,CAAA;AAEV,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,KAA6B,EAAE,YAAoB;IAC3F,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,IAAI,IAAI,EAAE,CAAC;QAC/C,OAAO,oBAAoB,CAAC,KAAK,EAAE,YAAY,CAAC,CAAA;IAClD,CAAC;IACD,MAAM,OAAO,GAAG,qBAAqB,CAAC,KAAK,EAAE,YAAY,CAAC,CAAA;IAC1D,OAAO,sBAAsB,CAAC;QAC5B,WAAW,EAAE,SAAS,OAAO,EAAE;QAC/B,eAAe,EAAE,qBAAqB;QACtC,SAAS,EAAE,mBAAmB,CAAC,OAAO,CAAC;QACvC,aAAa,EAAE,6CAA6C;KAC7D,CAAC,CAAA;AACJ,CAAC;AAUD,MAAM,oBAAoB,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,CAAU,CAAA;AAE5D,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,YAAY,EAAyB;IACvH,IAAI,CAAE,oBAA0C,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,yBAAyB,CAAC,+BAA+B,YAAY,EAAE,CAAC,CAAA;IACpF,CAAC;IACD,MAAM,SAAS,GAAG,eAAe,CAAC,SAAS,CAAC,CAAA;IAC5C,MAAM,UAAU,GAAG,eAAe,CAAC,MAAM,CAAC,CAAA;IAE1C,MAAM,WAAW,GAAG,MAAM,mBAAmB,CAAC,YAAY,EAAE,YAAY,CAAC,CAAA;IACzE,MAAM,UAAU,GAAG,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,cAAc,CAAC,EAAE,WAAW,CAAC,CAAA;IAC1F,IAAI,CAAC,CAAC,MAAM,MAAM,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,yBAAyB,CAAC,0CAA0C,UAAU,EAAE,CAAC,CAAA;IAC7F,CAAC;IACD,sLAAsL;IACtL,MAAM,aAAa,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,YAAY,EAAE,OAAO,EAAE,UAAU,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,CAAA;AACxJ,CAAC","sourcesContent":["import { exec, exists, InvalidConfigurationError, sanitizeDirPath } from \"builder-util\"\nimport * as path from \"path\"\nimport { ToolsetConfig } from \"../configuration.js\"\nimport { downloadBuilderToolset } from \"../util/electronGet.js\"\nimport { withIconsLock } from \"../util/toolsetLock.js\"\nimport { getCustomToolsetPath } from \"./custom.js\"\nimport { resolveToolsetVersion } from \"./version.js\"\n\n// Newest icons-conversion bundle — selected when the config is unset / null / \"latest\".\nconst ICONS_LATEST = \"1.2.1\"\n\nconst iconsToolsChecksums = {\n  \"1.1.0\": {\n    \"icons-bundle.tar.gz\": \"2241c9501aa5ddd19317956449f50a1bc311df2c34058aae9bf8bfe62081eaec\",\n  },\n  \"1.2.0\": {\n    \"icons-bundle.tar.gz\": \"788add2400487fe00d5ceac4a8347bd71fc43c8c988fde879f929992ea0c03ea\",\n  },\n  \"1.2.1\": {\n    \"icons-bundle.tar.gz\": \"193241afc7c81ab165fa0af15ef0af88f796eb69e8e5bb4249a49310d8be242a\",\n  },\n} as const\n\nexport async function getIconsToolsetPath(icons: ToolsetConfig[\"icons\"], resourcesDir: string): Promise<string> {\n  if (typeof icons === \"object\" && icons != null) {\n    return getCustomToolsetPath(icons, resourcesDir)\n  }\n  const version = resolveToolsetVersion(icons, ICONS_LATEST)\n  return downloadBuilderToolset({\n    releaseName: `icons@${version}`,\n    filenameWithExt: \"icons-bundle.tar.gz\",\n    checksums: iconsToolsChecksums[version],\n    githubOrgRepo: \"electron-userland/electron-builder-binaries\",\n  })\n}\n\ntype IconConversionOptions = {\n  inputFile: string\n  outputFormat: \"icns\" | \"ico\" | \"set\"\n  outDir: string\n  iconsToolset: ToolsetConfig[\"icons\"]\n  resourcesDir: string\n}\n\nconst VALID_OUTPUT_FORMATS = [\"icns\", \"ico\", \"set\"] as const\n\nexport async function runIconsTool({ inputFile, outputFormat, outDir, iconsToolset, resourcesDir }: IconConversionOptions): Promise<void> {\n  if (!(VALID_OUTPUT_FORMATS as readonly string[]).includes(outputFormat)) {\n    throw new InvalidConfigurationError(`Invalid icon output format: ${outputFormat}`)\n  }\n  const safeInput = sanitizeDirPath(inputFile)\n  const safeOutDir = sanitizeDirPath(outDir)\n\n  const toolsetPath = await getIconsToolsetPath(iconsToolset, resourcesDir)\n  const scriptPath = sanitizeDirPath(path.resolve(toolsetPath, \"icon-tool.js\"), toolsetPath)\n  if (!(await exists(scriptPath))) {\n    throw new InvalidConfigurationError(`Icons tool not found at expected path: ${scriptPath}`)\n  }\n  // Serialize icon-tool spawns across processes: each reserves a large WebAssembly.Memory, andrunning many in parallel (e.g. across vitest workers) exhausts memory. See withIconsLock.\n  await withIconsLock(() => exec(process.execPath, [scriptPath, `--input`, safeInput, `--format`, outputFormat, `--out`, safeOutDir], { shell: false }))\n}\n"]}

package/dist/toolsets/linuxToolsMac.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"linuxToolsMac.d.ts","sourceRoot":"","sources":["../../src/toolsets/linuxToolsMac.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AAUnD,wBAAsB,iBAAiB,CAAC,OAAO,CAAC,EAAE,aAAa,CAAC,eAAe,CAAC,EAAE,YAAY,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAYxH;AAED,wBAAsB,uBAAuB,CAAC,OAAO,CAAC,EAAE,aAAa,CAAC,eAAe,CAAC,EAAE,YAAY,CAAC,EAAE,MAAM;;;;GAQ5G"}
+{"version":3,"file":"linuxToolsMac.d.ts","sourceRoot":"","sources":["../../src/toolsets/linuxToolsMac.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AAcnD,wBAAsB,iBAAiB,CAAC,OAAO,CAAC,EAAE,aAAa,CAAC,eAAe,CAAC,EAAE,YAAY,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAYxH;AAED,wBAAsB,uBAAuB,CAAC,OAAO,CAAC,EAAE,aAAa,CAAC,eAAe,CAAC,EAAE,YAAY,CAAC,EAAE,MAAM;;;;GAQ5G"}

package/dist/toolsets/linuxToolsMac.js

@@ -1,6 +1,9 @@
 import * as path from "path";
 import { downloadBuilderToolset } from "../util/electronGet.js";
 import { getCustomToolsetPath } from "./custom.js";
+import { resolveToolsetVersion } from "./version.js";
+// Newest linux-tools-mac bundle — selected when the config is unset / null / "latest".
+const LINUX_TOOLS_MAC_LATEST = "1.0.0";
 // no legacy toolset as macos arm64 BSD gtar/ar/lzip are not compatible with linux targets, so we always use newer toolset on macos for linux archives
 const linuxToolsMacChecksums = {
     "linux-tools-mac-darwin-arm64.tar.gz": "204e76f08364352edb28a6a4be87e8f9bd9340213865d9a0d1c664aa46fcf053",
@@ -13,7 +16,7 @@ export async function getLinuxToolsPath(toolset, resourcesDir) {
     const arch = process.arch === "arm64" ? "arm64" : "x86_64";
     const filename = `linux-tools-mac-darwin-${arch}.tar.gz`;
     return downloadBuilderToolset({
-        releaseName: `linux-tools-mac@${toolset ?? "1.0.0"}`,
+        releaseName: `linux-tools-mac@${resolveToolsetVersion(toolset, LINUX_TOOLS_MAC_LATEST)}`,
         filenameWithExt: filename,
         checksums: linuxToolsMacChecksums,
         githubOrgRepo: "electron-userland/electron-builder-binaries",

package/dist/toolsets/linuxToolsMac.js.map

@@ -1 +1 @@
-{"version":3,"file":"linuxToolsMac.js","sourceRoot":"","sources":["../../src/toolsets/linuxToolsMac.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,IAAI,MAAM,MAAM,CAAA;AAE5B,OAAO,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAA;AAC/D,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAA;AAElD,sJAAsJ;AACtJ,MAAM,sBAAsB,GAAG;IAC7B,qCAAqC,EAAE,kEAAkE;IACzG,sCAAsC,EAAE,kEAAkE;CAClG,CAAA;AAEV,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,OAAwC,EAAE,YAAqB;IACrG,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,IAAI,IAAI,EAAE,CAAC;QACnD,OAAO,oBAAoB,CAAC,OAAO,EAAE,YAAY,IAAI,EAAE,CAAC,CAAA;IAC1D,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAA;IAC1D,MAAM,QAAQ,GAAwC,0BAA0B,IAAI,SAAS,CAAA;IAC7F,OAAO,sBAAsB,CAAC;QAC5B,WAAW,EAAE,mBAAmB,OAAO,IAAI,OAAO,EAAE;QACpD,eAAe,EAAE,QAAQ;QACzB,SAAS,EAAE,sBAAsB;QACjC,aAAa,EAAE,6CAA6C;KAC7D,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,OAAwC,EAAE,YAAqB;IAC3G,MAAM,cAAc,GAAG,MAAM,iBAAiB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAA;IACrE,MAAM,GAAG,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,KAAK,EAAE,GAAG,CAAC,CAAA;IAClE,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC;QACb,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC;QACjB,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC;KAClB,CAAA;AACH,CAAC","sourcesContent":["import * as path from \"path\"\nimport { ToolsetConfig } from \"../configuration.js\"\nimport { downloadBuilderToolset } from \"../util/electronGet.js\"\nimport { getCustomToolsetPath } from \"./custom.js\"\n\n// no legacy toolset as macos arm64 BSD gtar/ar/lzip are not compatible with linux targets, so we always use newer toolset on macos for linux archives\nconst linuxToolsMacChecksums = {\n  \"linux-tools-mac-darwin-arm64.tar.gz\": \"204e76f08364352edb28a6a4be87e8f9bd9340213865d9a0d1c664aa46fcf053\",\n  \"linux-tools-mac-darwin-x86_64.tar.gz\": \"7ee26dfbd0d2a4c2c83b55a9416a30cc84876eef01c6497ca49bb016a190c726\",\n} as const\n\nexport async function getLinuxToolsPath(toolset?: ToolsetConfig[\"linuxToolsMac\"], resourcesDir?: string): Promise<string> {\n  if (typeof toolset === \"object\" && toolset != null) {\n    return getCustomToolsetPath(toolset, resourcesDir ?? \"\")\n  }\n  const arch = process.arch === \"arm64\" ? \"arm64\" : \"x86_64\"\n  const filename: keyof typeof linuxToolsMacChecksums = `linux-tools-mac-darwin-${arch}.tar.gz`\n  return downloadBuilderToolset({\n    releaseName: `linux-tools-mac@${toolset ?? \"1.0.0\"}`,\n    filenameWithExt: filename,\n    checksums: linuxToolsMacChecksums,\n    githubOrgRepo: \"electron-userland/electron-builder-binaries\",\n  })\n}\n\nexport async function getLinuxToolsMacToolset(toolset?: ToolsetConfig[\"linuxToolsMac\"], resourcesDir?: string) {\n  const linuxToolsPath = await getLinuxToolsPath(toolset, resourcesDir)\n  const bin = (pkg: string) => path.join(linuxToolsPath, \"bin\", pkg)\n  return {\n    ar: bin(\"ar\"),\n    lzip: bin(\"lzip\"),\n    gtar: bin(\"gtar\"),\n  }\n}\n"]}
+{"version":3,"file":"linuxToolsMac.js","sourceRoot":"","sources":["../../src/toolsets/linuxToolsMac.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,IAAI,MAAM,MAAM,CAAA;AAE5B,OAAO,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAA;AAC/D,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAA;AAClD,OAAO,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAA;AAEpD,uFAAuF;AACvF,MAAM,sBAAsB,GAAG,OAAO,CAAA;AAEtC,sJAAsJ;AACtJ,MAAM,sBAAsB,GAAG;IAC7B,qCAAqC,EAAE,kEAAkE;IACzG,sCAAsC,EAAE,kEAAkE;CAClG,CAAA;AAEV,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,OAAwC,EAAE,YAAqB;IACrG,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,IAAI,IAAI,EAAE,CAAC;QACnD,OAAO,oBAAoB,CAAC,OAAO,EAAE,YAAY,IAAI,EAAE,CAAC,CAAA;IAC1D,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAA;IAC1D,MAAM,QAAQ,GAAwC,0BAA0B,IAAI,SAAS,CAAA;IAC7F,OAAO,sBAAsB,CAAC;QAC5B,WAAW,EAAE,mBAAmB,qBAAqB,CAAC,OAAO,EAAE,sBAAsB,CAAC,EAAE;QACxF,eAAe,EAAE,QAAQ;QACzB,SAAS,EAAE,sBAAsB;QACjC,aAAa,EAAE,6CAA6C;KAC7D,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,OAAwC,EAAE,YAAqB;IAC3G,MAAM,cAAc,GAAG,MAAM,iBAAiB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAA;IACrE,MAAM,GAAG,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,KAAK,EAAE,GAAG,CAAC,CAAA;IAClE,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC;QACb,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC;QACjB,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC;KAClB,CAAA;AACH,CAAC","sourcesContent":["import * as path from \"path\"\nimport { ToolsetConfig } from \"../configuration.js\"\nimport { downloadBuilderToolset } from \"../util/electronGet.js\"\nimport { getCustomToolsetPath } from \"./custom.js\"\nimport { resolveToolsetVersion } from \"./version.js\"\n\n// Newest linux-tools-mac bundle — selected when the config is unset / null / \"latest\".\nconst LINUX_TOOLS_MAC_LATEST = \"1.0.0\"\n\n// no legacy toolset as macos arm64 BSD gtar/ar/lzip are not compatible with linux targets, so we always use newer toolset on macos for linux archives\nconst linuxToolsMacChecksums = {\n  \"linux-tools-mac-darwin-arm64.tar.gz\": \"204e76f08364352edb28a6a4be87e8f9bd9340213865d9a0d1c664aa46fcf053\",\n  \"linux-tools-mac-darwin-x86_64.tar.gz\": \"7ee26dfbd0d2a4c2c83b55a9416a30cc84876eef01c6497ca49bb016a190c726\",\n} as const\n\nexport async function getLinuxToolsPath(toolset?: ToolsetConfig[\"linuxToolsMac\"], resourcesDir?: string): Promise<string> {\n  if (typeof toolset === \"object\" && toolset != null) {\n    return getCustomToolsetPath(toolset, resourcesDir ?? \"\")\n  }\n  const arch = process.arch === \"arm64\" ? \"arm64\" : \"x86_64\"\n  const filename: keyof typeof linuxToolsMacChecksums = `linux-tools-mac-darwin-${arch}.tar.gz`\n  return downloadBuilderToolset({\n    releaseName: `linux-tools-mac@${resolveToolsetVersion(toolset, LINUX_TOOLS_MAC_LATEST)}`,\n    filenameWithExt: filename,\n    checksums: linuxToolsMacChecksums,\n    githubOrgRepo: \"electron-userland/electron-builder-binaries\",\n  })\n}\n\nexport async function getLinuxToolsMacToolset(toolset?: ToolsetConfig[\"linuxToolsMac\"], resourcesDir?: string) {\n  const linuxToolsPath = await getLinuxToolsPath(toolset, resourcesDir)\n  const bin = (pkg: string) => path.join(linuxToolsPath, \"bin\", pkg)\n  return {\n    ar: bin(\"ar\"),\n    lzip: bin(\"lzip\"),\n    gtar: bin(\"gtar\"),\n  }\n}\n"]}

package/dist/toolsets/nsis.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"nsis.d.ts","sourceRoot":"","sources":["../../src/toolsets/nsis.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAA;AAE9C,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AACnD,OAAO,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAA;AAuBjD,eAAO,MAAM,aAAa;;;;;CAQhB,CAAA;AAkBV,wBAAsB,eAAe,CAAC,IAAI,EAAE,aAAa,CAAC,MAAM,CAAC,GAAG,OAAO,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CA4BpH;AAED,wBAAsB,kBAAkB,CAAC,IAAI,EAAE,aAAa,CAAC,MAAM,CAAC,GAAG,OAAO,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAcrH;AAED,wBAAsB,kBAAkB,CAAC,IAAI,EAAE,aAAa,CAAC,MAAM,CAAC,GAAG,OAAO,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CASrH"}
+{"version":3,"file":"nsis.d.ts","sourceRoot":"","sources":["../../src/toolsets/nsis.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAA;AAE9C,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AACnD,OAAO,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAA;AA2BjD,eAAO,MAAM,aAAa;;;;;CAQhB,CAAA;AAkBV,wBAAsB,eAAe,CAAC,IAAI,EAAE,aAAa,CAAC,MAAM,CAAC,GAAG,OAAO,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CA4BpH;AAED,wBAAsB,kBAAkB,CAAC,IAAI,EAAE,aAAa,CAAC,MAAM,CAAC,GAAG,OAAO,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAcrH;AAED,wBAAsB,kBAAkB,CAAC,IAAI,EAAE,aAAa,CAAC,MAAM,CAAC,GAAG,OAAO,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CASrH"}

package/dist/toolsets/nsis.js

@@ -2,8 +2,11 @@ import { exists } from "builder-util";
 import * as path from "path";
 import { downloadBuilderToolset } from "../util/electronGet.js";
 import { getCustomToolsetPath } from "./custom.js";
+import { resolveToolsetVersion } from "./version.js";
 import _fsExtra from "fs-extra";
 const { stat } = _fsExtra;
+// Newest NSIS bundle — selected when the config is unset / null / "latest".
+const NSIS_LATEST = "1.2.1";
 function getLegacyNsisBin() {
     // Warning: Don't use v3.0.4.2 - https://github.com/electron-userland/electron-builder/issues/6334
     return downloadBuilderToolset({
@@ -32,7 +35,7 @@ async function getNsisBundlePath(nsis, resourcesDir) {
     if (typeof nsis === "object" && nsis != null) {
         return getCustomToolsetPath(nsis, resourcesDir);
     }
-    const resolved = nsis ?? "1.2.1";
+    const resolved = resolveToolsetVersion(nsis, NSIS_LATEST);
     if (resolved === "0.0.0") {
         return getLegacyNsisBin();
     }
@@ -60,7 +63,7 @@ export async function getMakeNsisPath(nsis, resourcesDir) {
         return { path: path.resolve(bundlePath, process.platform === "win32" ? "makensis.cmd" : "makensis") };
     };
     const bundlePath = await getNsisBundlePath(nsis, resourcesDir);
-    if ((nsis ?? "1.2.1") === "0.0.0") {
+    if (nsis === "0.0.0") {
         return legacyBundle(bundlePath);
     }
     if (typeof nsis === "object") {
@@ -82,7 +85,7 @@ export async function getNsisPluginsPath(nsis, resourcesDir) {
         }
         throw new Error(`Plugins directory not found in NSIS bundle at: ${bundlePath}. Expected one of: ${potentialPaths.join(", ")}`);
     };
-    if ((nsis ?? "1.2.1") === "0.0.0") {
+    if (nsis === "0.0.0") {
         return path.resolve(await getLegacyNsisResourcesBin(), "plugins");
     }
     return resolvePluginsDir(await getNsisBundlePath(nsis, resourcesDir));

package/dist/toolsets/nsis.js.map

@@ -1 +1 @@
-{"version":3,"file":"nsis.js","sourceRoot":"","sources":["../../src/toolsets/nsis.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAA;AAErC,OAAO,KAAK,IAAI,MAAM,MAAM,CAAA;AAG5B,OAAO,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAA;AAC/D,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAA;AAClD,OAAO,QAAQ,MAAM,UAAU,CAAA;AAC/B,MAAM,EAAE,IAAI,EAAE,GAAG,QAAQ,CAAA;AAEzB,SAAS,gBAAgB;IACvB,kGAAkG;IAClG,OAAO,sBAAsB,CAAC;QAC5B,WAAW,EAAE,cAAc;QAC3B,eAAe,EAAE,iBAAiB;QAClC,SAAS,EAAE,EAAE,iBAAiB,EAAE,kEAAkE,EAAE;KACrG,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,yBAAyB;IAChC,OAAO,sBAAsB,CAAC;QAC5B,WAAW,EAAE,sBAAsB;QACnC,eAAe,EAAE,yBAAyB;QAC1C,SAAS,EAAE,EAAE,yBAAyB,EAAE,kEAAkE,EAAE;KAC7G,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,OAAO,EAAE;IACP,iEAAiE;KAClE;IACD,OAAO,EAAE;QACP,iBAAiB;QACjB,yBAAyB,EAAE,kEAAkE;KAC9F;CACO,CAAA;AAEV,KAAK,UAAU,iBAAiB,CAAC,IAA2B,EAAE,YAAoB;IAChF,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,IAAI,IAAI,EAAE,CAAC;QAC7C,OAAO,oBAAoB,CAAC,IAAI,EAAE,YAAY,CAAC,CAAA;IACjD,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,IAAI,OAAO,CAAA;IAChC,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACzB,OAAO,gBAAgB,EAAE,CAAA;IAC3B,CAAC;IACD,MAAM,IAAI,GAAG,yBAAyB,CAAA;IACtC,OAAO,sBAAsB,CAAC;QAC5B,WAAW,EAAE,QAAQ,QAAQ,EAAE;QAC/B,eAAe,EAAE,IAAI;QACrB,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,aAAa,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,EAAE;KACrD,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAqC,EAAE,YAAoB;IAC/F,MAAM,YAAY,GAAG,CAAC,UAAkB,EAAE,EAAE;QAC1C,kFAAkF;QAClF,MAAM,GAAG,GAAG,EAAE,OAAO,EAAE,UAAU,EAAE,CAAA;QACnC,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAClC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,KAAK,EAAE,UAAU,CAAC,EAAE,GAAG,EAAE,CAAA;QACnE,CAAC;aAAM,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YACxC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,KAAK,EAAE,cAAc,CAAC,EAAE,GAAG,EAAE,CAAA;QACvE,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,EAAE,UAAU,CAAC,EAAE,GAAG,EAAE,CAAA;IACrE,CAAC,CAAA;IACD,MAAM,gBAAgB,GAAG,CAAC,UAAkB,EAAE,EAAE;QAC9C,0CAA0C;QAC1C,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,CAAA;IACvG,CAAC,CAAA;IAED,MAAM,UAAU,GAAG,MAAM,iBAAiB,CAAC,IAAI,EAAE,YAAY,CAAC,CAAA;IAC9D,IAAI,CAAC,IAAI,IAAI,OAAO,CAAC,KAAK,OAAO,EAAE,CAAC;QAClC,OAAO,YAAY,CAAC,UAAU,CAAC,CAAA;IACjC,CAAC;IACD,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,MAAM,UAAU,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAA;QAC/C,IAAI,MAAM,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAClC,OAAO,UAAU,CAAA;QACnB,CAAC;QACD,OAAO,YAAY,CAAC,UAAU,CAAC,CAAA;IACjC,CAAC;IACD,OAAO,gBAAgB,CAAC,UAAU,CAAC,CAAA;AACrC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,IAAqC,EAAE,YAAoB;IAClG,MAAM,iBAAiB,GAAG,KAAK,EAAE,UAAkB,EAAE,EAAE;QACrD,MAAM,cAAc,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,SAAS,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,CAAA;QAC5G,KAAK,MAAM,CAAC,IAAI,cAAc,EAAE,CAAC;YAC/B,IAAI,CAAC,MAAM,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;gBACvD,OAAO,CAAC,CAAA;YACV,CAAC;QACH,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,kDAAkD,UAAU,sBAAsB,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IAChI,CAAC,CAAA;IACD,IAAI,CAAC,IAAI,IAAI,OAAO,CAAC,KAAK,OAAO,EAAE,CAAC;QAClC,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,yBAAyB,EAAE,EAAE,SAAS,CAAC,CAAA;IACnE,CAAC;IACD,OAAO,iBAAiB,CAAC,MAAM,iBAAiB,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC,CAAA;AACvE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,IAAqC,EAAE,YAAoB;IAClG,MAAM,cAAc,GAAG,KAAK,EAAE,GAAW,EAAE,EAAE;QAC3C,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,aAAa,CAAC,CAAA;QAC1C,IAAI,CAAC,MAAM,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;YAClD,OAAO,CAAC,CAAA;QACV,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,4CAA4C,GAAG,oBAAoB,CAAC,EAAE,CAAC,CAAA;IACzF,CAAC,CAAA;IACD,OAAO,cAAc,CAAC,MAAM,iBAAiB,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC,CAAA;AACpE,CAAC","sourcesContent":["import { exists } from \"builder-util\"\nimport { Nullish } from \"builder-util-runtime\"\nimport * as path from \"path\"\nimport { ToolsetConfig } from \"../configuration.js\"\nimport { ToolInfo } from \"../util/bundledTool.js\"\nimport { downloadBuilderToolset } from \"../util/electronGet.js\"\nimport { getCustomToolsetPath } from \"./custom.js\"\nimport _fsExtra from \"fs-extra\"\nconst { stat } = _fsExtra\n\nfunction getLegacyNsisBin(): Promise<string> {\n  // Warning: Don't use v3.0.4.2 - https://github.com/electron-userland/electron-builder/issues/6334\n  return downloadBuilderToolset({\n    releaseName: \"nsis-3.0.4.1\",\n    filenameWithExt: \"nsis-3.0.4.1.7z\",\n    checksums: { \"nsis-3.0.4.1.7z\": \"9877df902530f96357d13a7a31ae2b9df67f48b11ffc9a1700a7c961574ec5fa\" },\n  })\n}\n\nfunction getLegacyNsisResourcesBin(): Promise<string> {\n  return downloadBuilderToolset({\n    releaseName: \"nsis-resources-3.4.1\",\n    filenameWithExt: \"nsis-resources-3.4.1.7z\",\n    checksums: { \"nsis-resources-3.4.1.7z\": \"593a9a92ef958321293ac6a2ee61e64bf1bd543142a5bd6b3d310709cc924103\" },\n  })\n}\n\nexport const nsisChecksums = {\n  \"0.0.0\": {\n    // legacy — uses getLegacyNsisBin() / getLegacyNsisResourcesBin()\n  },\n  \"1.2.1\": {\n    // unified bundle\n    \"nsis-bundle-3.12.tar.gz\": \"56997fdefe25e7928a1a68b4583d08b240b66cf660234053b20131a74cc082f4\",\n  },\n} as const\n\nasync function getNsisBundlePath(nsis: ToolsetConfig[\"nsis\"], resourcesDir: string): Promise<string> {\n  if (typeof nsis === \"object\" && nsis != null) {\n    return getCustomToolsetPath(nsis, resourcesDir)\n  }\n  const resolved = nsis ?? \"1.2.1\"\n  if (resolved === \"0.0.0\") {\n    return getLegacyNsisBin()\n  }\n  const file = \"nsis-bundle-3.12.tar.gz\"\n  return downloadBuilderToolset({\n    releaseName: `nsis@${resolved}`,\n    filenameWithExt: file,\n    checksums: { [file]: nsisChecksums[resolved][file] },\n  })\n}\n\nexport async function getMakeNsisPath(nsis: ToolsetConfig[\"nsis\"] | Nullish, resourcesDir: string): Promise<ToolInfo> {\n  const legacyBundle = (bundlePath: string) => {\n    // legacy bundle: platform-specific subdirectories, NSISDIR must be set explicitly\n    const env = { NSISDIR: bundlePath }\n    if (process.platform === \"darwin\") {\n      return { path: path.resolve(bundlePath, \"mac\", \"makensis\"), env }\n    } else if (process.platform === \"win32\") {\n      return { path: path.resolve(bundlePath, \"Bin\", \"makensis.exe\"), env }\n    }\n    return { path: path.resolve(bundlePath, \"linux\", \"makensis\"), env }\n  }\n  const entrypointBundle = (bundlePath: string) => {\n    // the entrypoint script auto-sets NSISDIR\n    return { path: path.resolve(bundlePath, process.platform === \"win32\" ? \"makensis.cmd\" : \"makensis\") }\n  }\n\n  const bundlePath = await getNsisBundlePath(nsis, resourcesDir)\n  if ((nsis ?? \"1.2.1\") === \"0.0.0\") {\n    return legacyBundle(bundlePath)\n  }\n  if (typeof nsis === \"object\") {\n    const entrypoint = entrypointBundle(bundlePath)\n    if (await exists(entrypoint.path)) {\n      return entrypoint\n    }\n    return legacyBundle(bundlePath)\n  }\n  return entrypointBundle(bundlePath)\n}\n\nexport async function getNsisPluginsPath(nsis: ToolsetConfig[\"nsis\"] | Nullish, resourcesDir: string): Promise<string> {\n  const resolvePluginsDir = async (bundlePath: string) => {\n    const potentialPaths = [path.resolve(bundlePath, \"plugins\"), path.resolve(bundlePath, \"windows\", \"Plugins\")]\n    for (const p of potentialPaths) {\n      if ((await exists(p)) && (await stat(p)).isDirectory()) {\n        return p\n      }\n    }\n    throw new Error(`Plugins directory not found in NSIS bundle at: ${bundlePath}. Expected one of: ${potentialPaths.join(\", \")}`)\n  }\n  if ((nsis ?? \"1.2.1\") === \"0.0.0\") {\n    return path.resolve(await getLegacyNsisResourcesBin(), \"plugins\")\n  }\n  return resolvePluginsDir(await getNsisBundlePath(nsis, resourcesDir))\n}\n\nexport async function getNsisElevatePath(nsis: ToolsetConfig[\"nsis\"] | Nullish, resourcesDir: string): Promise<string> {\n  const resolveElevate = async (dir: string) => {\n    const p = path.resolve(dir, \"elevate.exe\")\n    if ((await exists(p)) && (await stat(p)).isFile()) {\n      return p\n    }\n    throw new Error(`elevate.exe not found in NSIS bundle at: ${dir}. Expected path: ${p}`)\n  }\n  return resolveElevate(await getNsisBundlePath(nsis, resourcesDir))\n}\n"]}
+{"version":3,"file":"nsis.js","sourceRoot":"","sources":["../../src/toolsets/nsis.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAA;AAErC,OAAO,KAAK,IAAI,MAAM,MAAM,CAAA;AAG5B,OAAO,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAA;AAC/D,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAA;AAClD,OAAO,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAA;AACpD,OAAO,QAAQ,MAAM,UAAU,CAAA;AAC/B,MAAM,EAAE,IAAI,EAAE,GAAG,QAAQ,CAAA;AAEzB,4EAA4E;AAC5E,MAAM,WAAW,GAAG,OAAO,CAAA;AAE3B,SAAS,gBAAgB;IACvB,kGAAkG;IAClG,OAAO,sBAAsB,CAAC;QAC5B,WAAW,EAAE,cAAc;QAC3B,eAAe,EAAE,iBAAiB;QAClC,SAAS,EAAE,EAAE,iBAAiB,EAAE,kEAAkE,EAAE;KACrG,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,yBAAyB;IAChC,OAAO,sBAAsB,CAAC;QAC5B,WAAW,EAAE,sBAAsB;QACnC,eAAe,EAAE,yBAAyB;QAC1C,SAAS,EAAE,EAAE,yBAAyB,EAAE,kEAAkE,EAAE;KAC7G,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,OAAO,EAAE;IACP,iEAAiE;KAClE;IACD,OAAO,EAAE;QACP,iBAAiB;QACjB,yBAAyB,EAAE,kEAAkE;KAC9F;CACO,CAAA;AAEV,KAAK,UAAU,iBAAiB,CAAC,IAAqC,EAAE,YAAoB;IAC1F,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,IAAI,IAAI,EAAE,CAAC;QAC7C,OAAO,oBAAoB,CAAC,IAAI,EAAE,YAAY,CAAC,CAAA;IACjD,CAAC;IACD,MAAM,QAAQ,GAAG,qBAAqB,CAAC,IAAI,EAAE,WAAW,CAAC,CAAA;IACzD,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACzB,OAAO,gBAAgB,EAAE,CAAA;IAC3B,CAAC;IACD,MAAM,IAAI,GAAG,yBAAyB,CAAA;IACtC,OAAO,sBAAsB,CAAC;QAC5B,WAAW,EAAE,QAAQ,QAAQ,EAAE;QAC/B,eAAe,EAAE,IAAI;QACrB,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,aAAa,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,EAAE;KACrD,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAqC,EAAE,YAAoB;IAC/F,MAAM,YAAY,GAAG,CAAC,UAAkB,EAAE,EAAE;QAC1C,kFAAkF;QAClF,MAAM,GAAG,GAAG,EAAE,OAAO,EAAE,UAAU,EAAE,CAAA;QACnC,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAClC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,KAAK,EAAE,UAAU,CAAC,EAAE,GAAG,EAAE,CAAA;QACnE,CAAC;aAAM,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YACxC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,KAAK,EAAE,cAAc,CAAC,EAAE,GAAG,EAAE,CAAA;QACvE,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,EAAE,UAAU,CAAC,EAAE,GAAG,EAAE,CAAA;IACrE,CAAC,CAAA;IACD,MAAM,gBAAgB,GAAG,CAAC,UAAkB,EAAE,EAAE;QAC9C,0CAA0C;QAC1C,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,CAAA;IACvG,CAAC,CAAA;IAED,MAAM,UAAU,GAAG,MAAM,iBAAiB,CAAC,IAAI,EAAE,YAAY,CAAC,CAAA;IAC9D,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QACrB,OAAO,YAAY,CAAC,UAAU,CAAC,CAAA;IACjC,CAAC;IACD,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,MAAM,UAAU,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAA;QAC/C,IAAI,MAAM,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAClC,OAAO,UAAU,CAAA;QACnB,CAAC;QACD,OAAO,YAAY,CAAC,UAAU,CAAC,CAAA;IACjC,CAAC;IACD,OAAO,gBAAgB,CAAC,UAAU,CAAC,CAAA;AACrC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,IAAqC,EAAE,YAAoB;IAClG,MAAM,iBAAiB,GAAG,KAAK,EAAE,UAAkB,EAAE,EAAE;QACrD,MAAM,cAAc,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,SAAS,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,CAAA;QAC5G,KAAK,MAAM,CAAC,IAAI,cAAc,EAAE,CAAC;YAC/B,IAAI,CAAC,MAAM,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;gBACvD,OAAO,CAAC,CAAA;YACV,CAAC;QACH,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,kDAAkD,UAAU,sBAAsB,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IAChI,CAAC,CAAA;IACD,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QACrB,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,yBAAyB,EAAE,EAAE,SAAS,CAAC,CAAA;IACnE,CAAC;IACD,OAAO,iBAAiB,CAAC,MAAM,iBAAiB,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC,CAAA;AACvE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,IAAqC,EAAE,YAAoB;IAClG,MAAM,cAAc,GAAG,KAAK,EAAE,GAAW,EAAE,EAAE;QAC3C,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,aAAa,CAAC,CAAA;QAC1C,IAAI,CAAC,MAAM,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;YAClD,OAAO,CAAC,CAAA;QACV,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,4CAA4C,GAAG,oBAAoB,CAAC,EAAE,CAAC,CAAA;IACzF,CAAC,CAAA;IACD,OAAO,cAAc,CAAC,MAAM,iBAAiB,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC,CAAA;AACpE,CAAC","sourcesContent":["import { exists } from \"builder-util\"\nimport { Nullish } from \"builder-util-runtime\"\nimport * as path from \"path\"\nimport { ToolsetConfig } from \"../configuration.js\"\nimport { ToolInfo } from \"../util/bundledTool.js\"\nimport { downloadBuilderToolset } from \"../util/electronGet.js\"\nimport { getCustomToolsetPath } from \"./custom.js\"\nimport { resolveToolsetVersion } from \"./version.js\"\nimport _fsExtra from \"fs-extra\"\nconst { stat } = _fsExtra\n\n// Newest NSIS bundle — selected when the config is unset / null / \"latest\".\nconst NSIS_LATEST = \"1.2.1\"\n\nfunction getLegacyNsisBin(): Promise<string> {\n  // Warning: Don't use v3.0.4.2 - https://github.com/electron-userland/electron-builder/issues/6334\n  return downloadBuilderToolset({\n    releaseName: \"nsis-3.0.4.1\",\n    filenameWithExt: \"nsis-3.0.4.1.7z\",\n    checksums: { \"nsis-3.0.4.1.7z\": \"9877df902530f96357d13a7a31ae2b9df67f48b11ffc9a1700a7c961574ec5fa\" },\n  })\n}\n\nfunction getLegacyNsisResourcesBin(): Promise<string> {\n  return downloadBuilderToolset({\n    releaseName: \"nsis-resources-3.4.1\",\n    filenameWithExt: \"nsis-resources-3.4.1.7z\",\n    checksums: { \"nsis-resources-3.4.1.7z\": \"593a9a92ef958321293ac6a2ee61e64bf1bd543142a5bd6b3d310709cc924103\" },\n  })\n}\n\nexport const nsisChecksums = {\n  \"0.0.0\": {\n    // legacy — uses getLegacyNsisBin() / getLegacyNsisResourcesBin()\n  },\n  \"1.2.1\": {\n    // unified bundle\n    \"nsis-bundle-3.12.tar.gz\": \"56997fdefe25e7928a1a68b4583d08b240b66cf660234053b20131a74cc082f4\",\n  },\n} as const\n\nasync function getNsisBundlePath(nsis: ToolsetConfig[\"nsis\"] | Nullish, resourcesDir: string): Promise<string> {\n  if (typeof nsis === \"object\" && nsis != null) {\n    return getCustomToolsetPath(nsis, resourcesDir)\n  }\n  const resolved = resolveToolsetVersion(nsis, NSIS_LATEST)\n  if (resolved === \"0.0.0\") {\n    return getLegacyNsisBin()\n  }\n  const file = \"nsis-bundle-3.12.tar.gz\"\n  return downloadBuilderToolset({\n    releaseName: `nsis@${resolved}`,\n    filenameWithExt: file,\n    checksums: { [file]: nsisChecksums[resolved][file] },\n  })\n}\n\nexport async function getMakeNsisPath(nsis: ToolsetConfig[\"nsis\"] | Nullish, resourcesDir: string): Promise<ToolInfo> {\n  const legacyBundle = (bundlePath: string) => {\n    // legacy bundle: platform-specific subdirectories, NSISDIR must be set explicitly\n    const env = { NSISDIR: bundlePath }\n    if (process.platform === \"darwin\") {\n      return { path: path.resolve(bundlePath, \"mac\", \"makensis\"), env }\n    } else if (process.platform === \"win32\") {\n      return { path: path.resolve(bundlePath, \"Bin\", \"makensis.exe\"), env }\n    }\n    return { path: path.resolve(bundlePath, \"linux\", \"makensis\"), env }\n  }\n  const entrypointBundle = (bundlePath: string) => {\n    // the entrypoint script auto-sets NSISDIR\n    return { path: path.resolve(bundlePath, process.platform === \"win32\" ? \"makensis.cmd\" : \"makensis\") }\n  }\n\n  const bundlePath = await getNsisBundlePath(nsis, resourcesDir)\n  if (nsis === \"0.0.0\") {\n    return legacyBundle(bundlePath)\n  }\n  if (typeof nsis === \"object\") {\n    const entrypoint = entrypointBundle(bundlePath)\n    if (await exists(entrypoint.path)) {\n      return entrypoint\n    }\n    return legacyBundle(bundlePath)\n  }\n  return entrypointBundle(bundlePath)\n}\n\nexport async function getNsisPluginsPath(nsis: ToolsetConfig[\"nsis\"] | Nullish, resourcesDir: string): Promise<string> {\n  const resolvePluginsDir = async (bundlePath: string) => {\n    const potentialPaths = [path.resolve(bundlePath, \"plugins\"), path.resolve(bundlePath, \"windows\", \"Plugins\")]\n    for (const p of potentialPaths) {\n      if ((await exists(p)) && (await stat(p)).isDirectory()) {\n        return p\n      }\n    }\n    throw new Error(`Plugins directory not found in NSIS bundle at: ${bundlePath}. Expected one of: ${potentialPaths.join(\", \")}`)\n  }\n  if (nsis === \"0.0.0\") {\n    return path.resolve(await getLegacyNsisResourcesBin(), \"plugins\")\n  }\n  return resolvePluginsDir(await getNsisBundlePath(nsis, resourcesDir))\n}\n\nexport async function getNsisElevatePath(nsis: ToolsetConfig[\"nsis\"] | Nullish, resourcesDir: string): Promise<string> {\n  const resolveElevate = async (dir: string) => {\n    const p = path.resolve(dir, \"elevate.exe\")\n    if ((await exists(p)) && (await stat(p)).isFile()) {\n      return p\n    }\n    throw new Error(`elevate.exe not found in NSIS bundle at: ${dir}. Expected path: ${p}`)\n  }\n  return resolveElevate(await getNsisBundlePath(nsis, resourcesDir))\n}\n"]}

package/dist/toolsets/version.d.ts

@@ -0,0 +1,12 @@
+import { Nullish } from "builder-util-runtime";
+/**
+ * Resolve the unset/null/`"latest"` sentinel to the newest concrete version for a toolset.
+ *
+ * `"latest"` is the documented "null"-state for every {@link ToolsetConfig} property: an unset
+ * property, `null`, `undefined`, and the literal `"latest"` all select the newest bundle.
+ *
+ * Callers must handle the {@link ToolsetCustom} (object) form before calling this — only the
+ * string/null/"latest" union is normalized here.
+ */
+export declare function resolveToolsetVersion<T extends string>(value: T | "latest" | Nullish, latest: T): T;
+//# sourceMappingURL=version.d.ts.map

package/dist/toolsets/version.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.d.ts","sourceRoot":"","sources":["../../src/toolsets/version.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAA;AAE9C;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CAAC,CAAC,SAAS,MAAM,EAAE,KAAK,EAAE,CAAC,GAAG,QAAQ,GAAG,OAAO,EAAE,MAAM,EAAE,CAAC,GAAG,CAAC,CAEnG"}

package/dist/toolsets/version.js

@@ -0,0 +1,13 @@
+/**
+ * Resolve the unset/null/`"latest"` sentinel to the newest concrete version for a toolset.
+ *
+ * `"latest"` is the documented "null"-state for every {@link ToolsetConfig} property: an unset
+ * property, `null`, `undefined`, and the literal `"latest"` all select the newest bundle.
+ *
+ * Callers must handle the {@link ToolsetCustom} (object) form before calling this — only the
+ * string/null/"latest" union is normalized here.
+ */
+export function resolveToolsetVersion(value, latest) {
+    return value == null || value === "latest" ? latest : value;
+}
+//# sourceMappingURL=version.js.map

package/dist/toolsets/version.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.js","sourceRoot":"","sources":["../../src/toolsets/version.ts"],"names":[],"mappings":"AAEA;;;;;;;;GAQG;AACH,MAAM,UAAU,qBAAqB,CAAmB,KAA6B,EAAE,MAAS;IAC9F,OAAO,KAAK,IAAI,IAAI,IAAI,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAA;AAC7D,CAAC","sourcesContent":["import { Nullish } from \"builder-util-runtime\"\n\n/**\n * Resolve the unset/null/`\"latest\"` sentinel to the newest concrete version for a toolset.\n *\n * `\"latest\"` is the documented \"null\"-state for every {@link ToolsetConfig} property: an unset\n * property, `null`, `undefined`, and the literal `\"latest\"` all select the newest bundle.\n *\n * Callers must handle the {@link ToolsetCustom} (object) form before calling this — only the\n * string/null/\"latest\" union is normalized here.\n */\nexport function resolveToolsetVersion<T extends string>(value: T | \"latest\" | Nullish, latest: T): T {\n  return value == null || value === \"latest\" ? latest : value\n}\n"]}

package/dist/toolsets/winCodeSign.d.ts

@@ -1,7 +1,7 @@
-import { Arch } from "builder-util";
 import { Nullish } from "builder-util-runtime";
 import { ToolsetConfig } from "../configuration.js";
 import { ToolInfo } from "../util/bundledTool.js";
+export declare const WIN_CODESIGN_LATEST = "1.3.0";
 export declare const wincodesignChecksums: {
     readonly "0.0.0": {};
     readonly "1.0.0": {
@@ -60,15 +60,32 @@ export declare const wincodesignChecksums: {
     };
 };
 export declare function getSignToolPath(winCodeSign: ToolsetConfig["winCodeSign"] | Nullish, isWin: boolean, resourcesDir: string): Promise<ToolInfo>;
-export declare function getWindowsKitsBundle({ winCodeSign, arch, resourcesDir }: {
+/**
+ * Resolve the Windows Kits bundle paths.
+ *
+ * The `kit` subdirectory holds HOST executables (`signtool.exe` / `makeappx.exe` / `makepri.exe`), so
+ * it is always the x64 kit (x86 on 32-bit hosts) — never arm64. x64 binaries run on x64 hosts natively
+ * and on arm64 Windows via emulation, whereas an arm64 binary cannot run on an x64 host and fails with
+ * `spawn UNKNOWN`. The artifact's target arch is irrelevant here.
+ * `appxAssets` is arch-independent (the bundle root).
+ */
+export declare function getWindowsKitsBundle({ winCodeSign, resourcesDir }: {
     winCodeSign: ToolsetConfig["winCodeSign"] | Nullish;
-    arch: Arch;
     resourcesDir?: string;
 }): Promise<{
     kit: string;
     appxAssets: string;
 }>;
 export declare function isOldWin6(): boolean;
+/**
+ * True only for the explicit legacy winCodeSign pin (`"0.0.0"` → winCodeSign-2.6.0). That bundle lacks
+ * the modern Windows Kits SDK (no MSIX-capable `makeappx`/`makepri`), so it cannot build MSIX — only the
+ * MSIX target gates on this. AppX still builds fine with the legacy bundle (it has its own legacy-bundle
+ * `signtool` handling in `getWindowsSignToolExe`). Unset / `null` / `"latest"` and any modern version pin
+ * resolve to a modern bundle; a custom `{ url, … }` toolset is the caller's responsibility and is not
+ * treated as legacy.
+ */
+export declare function isLegacyWinCodeSign(winCodeSign: ToolsetConfig["winCodeSign"] | Nullish): boolean;
 export declare function getAtsBundleDir(winCodeSign: string): Promise<string>;
 export declare function getDotnetRuntimeDir(winCodeSign: string): Promise<string>;
 export declare function getRceditBundle(winCodeSign: ToolsetConfig["winCodeSign"] | Nullish, resourcesDir?: string): Promise<{

package/dist/toolsets/winCodeSign.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"winCodeSign.d.ts","sourceRoot":"","sources":["../../src/toolsets/winCodeSign.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAmB,MAAM,cAAc,CAAA;AACpD,OAAO,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAA;AAG9C,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AACnD,OAAO,EAAE,QAAQ,EAAkB,MAAM,wBAAwB,CAAA;AAYjE,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA0DvB,CAAA;AAaV,wBAAsB,eAAe,CAAC,WAAW,EAAE,aAAa,CAAC,aAAa,CAAC,GAAG,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CASlJ;AAED,wBAAsB,oBAAoB,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,YAAiB,EAAE,EAAE;IAAE,WAAW,EAAE,aAAa,CAAC,aAAa,CAAC,GAAG,OAAO,CAAC;IAAC,IAAI,EAAE,IAAI,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAA;CAAE;;;GAc9K;AAED,wBAAgB,SAAS,YAGxB;AAqDD,wBAAsB,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAU1E;AAED,wBAAsB,mBAAmB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAU9E;AAED,wBAAsB,eAAe,CAAC,WAAW,EAAE,aAAa,CAAC,aAAa,CAAC,GAAG,OAAO,EAAE,YAAY,SAAK;;;GAe3G"}
+{"version":3,"file":"winCodeSign.d.ts","sourceRoot":"","sources":["../../src/toolsets/winCodeSign.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAA;AAG9C,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AACnD,OAAO,EAAE,QAAQ,EAAkB,MAAM,wBAAwB,CAAA;AAMjE,eAAO,MAAM,mBAAmB,UAAU,CAAA;AAU1C,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA0DvB,CAAA;AAaV,wBAAsB,eAAe,CAAC,WAAW,EAAE,aAAa,CAAC,aAAa,CAAC,GAAG,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CAOlJ;AAED;;;;;;;;GAQG;AACH,wBAAsB,oBAAoB,CAAC,EAAE,WAAW,EAAE,YAAY,EAAE,EAAE;IAAE,WAAW,EAAE,aAAa,CAAC,aAAa,CAAC,GAAG,OAAO,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAA;CAAE;;;GAevJ;AAED,wBAAgB,SAAS,YAGxB;AAED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,WAAW,EAAE,aAAa,CAAC,aAAa,CAAC,GAAG,OAAO,GAAG,OAAO,CAEhG;AA2DD,wBAAsB,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAW1E;AAED,wBAAsB,mBAAmB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAW9E;AAED,wBAAsB,eAAe,CAAC,WAAW,EAAE,aAAa,CAAC,aAAa,CAAC,GAAG,OAAO,EAAE,YAAY,SAAK;;;GAgB3G"}

package/dist/toolsets/winCodeSign.js

@@ -1,9 +1,12 @@
-import { Arch, sanitizeDirPath } from "builder-util";
+import { InvalidConfigurationError, sanitizeDirPath } from "builder-util";
 import * as os from "os";
 import * as path from "path";
 import { computeToolEnv } from "../util/bundledTool.js";
 import { downloadBuilderToolset } from "../util/electronGet.js";
 import { getCustomToolsetPath } from "./custom.js";
+import { resolveToolsetVersion } from "./version.js";
+// Newest win-codesign bundle — selected when the config is unset / null / "latest".
+export const WIN_CODESIGN_LATEST = "1.3.0";
 function getLegacyWinCodeSignBin() {
     return downloadBuilderToolset({
         releaseName: "winCodeSign-2.6.0",
@@ -80,35 +83,54 @@ function _getWindowsToolsBin(winCodeSign, file) {
 }
 export async function getSignToolPath(winCodeSign, isWin, resourcesDir) {
     if (isWin) {
-        // windows kits are always the target arch; signtool can be used by either arch.
-        const signtoolArch = process.arch === "x64" ? Arch.x64 : process.arch === "arm64" ? Arch.arm64 : Arch.ia32;
-        return { path: await getWindowsSignToolExe({ winCodeSign, arch: signtoolArch, resourcesDir }) };
+        return { path: await getWindowsSignToolExe({ winCodeSign, resourcesDir }) };
     }
     else {
         const vendor = await getOsslSigncodeBundle(winCodeSign, resourcesDir);
         return { path: vendor.path, env: vendor.env };
     }
 }
-export async function getWindowsKitsBundle({ winCodeSign, arch, resourcesDir = "" }) {
+/**
+ * Resolve the Windows Kits bundle paths.
+ *
+ * The `kit` subdirectory holds HOST executables (`signtool.exe` / `makeappx.exe` / `makepri.exe`), so
+ * it is always the x64 kit (x86 on 32-bit hosts) — never arm64. x64 binaries run on x64 hosts natively
+ * and on arm64 Windows via emulation, whereas an arm64 binary cannot run on an x64 host and fails with
+ * `spawn UNKNOWN`. The artifact's target arch is irrelevant here.
+ * `appxAssets` is arch-independent (the bundle root).
+ */
+export async function getWindowsKitsBundle({ winCodeSign, resourcesDir }) {
+    const kitArch = process.arch === "ia32" ? "x86" : "x64";
     if (typeof winCodeSign === "object" && winCodeSign != null) {
         const vendorPath = sanitizeDirPath(await getCustomToolsetPath(winCodeSign, resourcesDir), resourcesDir || undefined);
-        return { kit: path.join(vendorPath, arch === Arch.ia32 ? "x86" : Arch[arch]), appxAssets: vendorPath };
+        return { kit: path.join(vendorPath, kitArch), appxAssets: vendorPath };
     }
-    const useLegacy = winCodeSign == null || winCodeSign === "0.0.0";
-    if (useLegacy) {
+    const version = resolveToolsetVersion(winCodeSign, WIN_CODESIGN_LATEST);
+    if (version === "0.0.0") {
         const vendorPath = sanitizeDirPath(await getLegacyWinCodeSignBin());
-        return { kit: path.join(vendorPath, "windows-10", arch === Arch.arm64 ? "x64" : Arch[arch]), appxAssets: vendorPath };
+        return { kit: path.join(vendorPath, "windows-10", kitArch), appxAssets: vendorPath };
     }
     const file = "windows-kits-bundle-10_0_26100_0.zip";
-    const vendorPath = sanitizeDirPath(await _getWindowsToolsBin(winCodeSign, file));
-    return { kit: path.join(vendorPath, arch === Arch.ia32 ? "x86" : Arch[arch]), appxAssets: vendorPath };
+    const vendorPath = sanitizeDirPath(await _getWindowsToolsBin(version, file));
+    return { kit: path.join(vendorPath, kitArch), appxAssets: vendorPath };
 }
 export function isOldWin6() {
     const winVersion = os.release();
     return winVersion.startsWith("6.") && !winVersion.startsWith("6.3");
 }
-async function getWindowsSignToolExe({ winCodeSign, arch, resourcesDir = "" }) {
-    if (winCodeSign === "0.0.0" || winCodeSign == null) {
+/**
+ * True only for the explicit legacy winCodeSign pin (`"0.0.0"` → winCodeSign-2.6.0). That bundle lacks
+ * the modern Windows Kits SDK (no MSIX-capable `makeappx`/`makepri`), so it cannot build MSIX — only the
+ * MSIX target gates on this. AppX still builds fine with the legacy bundle (it has its own legacy-bundle
+ * `signtool` handling in `getWindowsSignToolExe`). Unset / `null` / `"latest"` and any modern version pin
+ * resolve to a modern bundle; a custom `{ url, … }` toolset is the caller's responsibility and is not
+ * treated as legacy.
+ */
+export function isLegacyWinCodeSign(winCodeSign) {
+    return typeof winCodeSign !== "object" && resolveToolsetVersion(winCodeSign, WIN_CODESIGN_LATEST) === "0.0.0";
+}
+async function getWindowsSignToolExe({ winCodeSign, resourcesDir = "" }) {
+    if (typeof winCodeSign !== "object" && resolveToolsetVersion(winCodeSign, WIN_CODESIGN_LATEST) === "0.0.0") {
         // use modern signtool on Windows Server 2012 R2 to be able to sign AppX
         const vendorPath = sanitizeDirPath(await getLegacyWinCodeSignBin());
         if (isOldWin6()) {
@@ -119,18 +141,22 @@ async function getWindowsSignToolExe({ winCodeSign, arch, resourcesDir = "" }) {
         }
     }
     // kit is already sanitized by getWindowsKitsBundle
-    const { kit } = await getWindowsKitsBundle({ winCodeSign, arch, resourcesDir });
+    const { kit } = await getWindowsKitsBundle({ winCodeSign, resourcesDir });
     return path.join(kit, "signtool.exe");
 }
 async function getOsslSigncodeBundle(winCodeSign, resourcesDir = "") {
-    if (process.platform === "win32") {
-        return { path: "osslsigncode" };
-    }
+    // A custom toolset is an explicit user override — honored on every platform, before any platform default/fallback.
     if (typeof winCodeSign === "object" && winCodeSign != null) {
         const vendorPath = sanitizeDirPath(await getCustomToolsetPath(winCodeSign, resourcesDir), resourcesDir || undefined);
         return { path: path.join(vendorPath, "osslsigncode") };
     }
-    if (winCodeSign === "0.0.0" || winCodeSign == null) {
+    if (process.platform === "win32") {
+        // Unreachable in normal flow: osslsigncode is only requested when the host is not Windows (Windows signs via
+        // signtool). Kept as defense-in-depth — fail loudly instead of resolving a bare `osslsigncode` from $PATH.
+        throw new InvalidConfigurationError(`osslsigncode is not used on Windows (signing uses signtool). To override, configure a custom toolset: toolsets: { winCodeSign: { url: "file:///absolute/path/to/dir" } }`);
+    }
+    const version = resolveToolsetVersion(winCodeSign, WIN_CODESIGN_LATEST);
+    if (version === "0.0.0") {
         const legacyBase = sanitizeDirPath(await getLegacyWinCodeSignBin());
         const vendorBase = path.join(legacyBase, process.platform);
         const vendorPath = process.platform === "darwin" ? path.join(vendorBase, "10.12") : vendorBase;
@@ -152,27 +178,29 @@ async function getOsslSigncodeBundle(winCodeSign, resourcesDir = "") {
         }
         return "win-codesign-darwin-x86_64.zip";
     })();
-    const vendorPath = sanitizeDirPath(await _getWindowsToolsBin(winCodeSign, file));
+    const vendorPath = sanitizeDirPath(await _getWindowsToolsBin(version, file));
     return { path: path.join(vendorPath, "osslsigncode") };
 }
 export async function getAtsBundleDir(winCodeSign) {
-    const checksum = wincodesignChecksums[winCodeSign]?.["ats-bundle-1_0_95.zip"];
+    const version = winCodeSign === "latest" ? WIN_CODESIGN_LATEST : winCodeSign;
+    const checksum = wincodesignChecksums[version]?.["ats-bundle-1_0_95.zip"];
     if (!checksum) {
-        throw new Error(`winCodeSign version "${winCodeSign}" does not include an ATS bundle (requires >= 1.3.0)`);
+        throw new Error(`winCodeSign version "${version}" does not include an ATS bundle (requires >= 1.3.0)`);
     }
     return downloadBuilderToolset({
-        releaseName: `win-codesign@${winCodeSign}`,
+        releaseName: `win-codesign@${version}`,
         filenameWithExt: "ats-bundle-1_0_95.zip",
         checksums: { "ats-bundle-1_0_95.zip": checksum },
     });
 }
 export async function getDotnetRuntimeDir(winCodeSign) {
-    const checksum = wincodesignChecksums[winCodeSign]?.["dotnet-runtime-win-x64-8_0_28.zip"];
+    const version = winCodeSign === "latest" ? WIN_CODESIGN_LATEST : winCodeSign;
+    const checksum = wincodesignChecksums[version]?.["dotnet-runtime-win-x64-8_0_28.zip"];
     if (!checksum) {
-        throw new Error(`winCodeSign version "${winCodeSign}" does not include a .NET runtime bundle (requires >= 1.3.0)`);
+        throw new Error(`winCodeSign version "${version}" does not include a .NET runtime bundle (requires >= 1.3.0)`);
     }
     return downloadBuilderToolset({
-        releaseName: `win-codesign@${winCodeSign}`,
+        releaseName: `win-codesign@${version}`,
         filenameWithExt: "dotnet-runtime-win-x64-8_0_28.zip",
         checksums: { "dotnet-runtime-win-x64-8_0_28.zip": checksum },
     });
@@ -185,12 +213,13 @@ export async function getRceditBundle(winCodeSign, resourcesDir = "") {
         const vendorPath = sanitizeDirPath(await getCustomToolsetPath(winCodeSign, resourcesDir), resourcesDir || undefined);
         return { x86: path.join(vendorPath, x86), x64: path.join(vendorPath, x64) };
     }
-    if (winCodeSign === "0.0.0" || winCodeSign == null) {
+    const version = resolveToolsetVersion(winCodeSign, WIN_CODESIGN_LATEST);
+    if (version === "0.0.0") {
         const vendorPath = sanitizeDirPath(await getLegacyWinCodeSignBin());
         return { x86: path.join(vendorPath, ia32), x64: path.join(vendorPath, x64) };
     }
     const file = "rcedit-windows-2_0_0.zip";
-    const vendorPath = sanitizeDirPath(await _getWindowsToolsBin(winCodeSign, file));
+    const vendorPath = sanitizeDirPath(await _getWindowsToolsBin(version, file));
     return { x86: path.join(vendorPath, x86), x64: path.join(vendorPath, x64) };
 }
 //# sourceMappingURL=winCodeSign.js.map

package/dist/toolsets/winCodeSign.js.map

@@ -1 +1 @@
-{"version":3,"file":"winCodeSign.js","sourceRoot":"","sources":["../../src/toolsets/winCodeSign.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AAEpD,OAAO,KAAK,EAAE,MAAM,IAAI,CAAA;AACxB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAA;AAE5B,OAAO,EAAY,cAAc,EAAE,MAAM,wBAAwB,CAAA;AACjE,OAAO,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAA;AAC/D,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAA;AAElD,SAAS,uBAAuB;IAC9B,OAAO,sBAAsB,CAAC;QAC5B,WAAW,EAAE,mBAAmB;QAChC,eAAe,EAAE,sBAAsB;QACvC,SAAS,EAAE,EAAE,CAAC,sBAAsB,CAAC,EAAE,kEAAkE,EAAE;KAC5G,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,OAAO,EAAE;IACP,qEAAqE;KACtE;IACD,OAAO,EAAE;QACP,0BAA0B,EAAE,kEAAkE;QAC9F,+BAA+B,EAAE,kEAAkE;QACnG,gCAAgC,EAAE,kEAAkE;QACpG,8BAA8B,EAAE,kEAAkE;QAClG,8BAA8B,EAAE,kEAAkE;QAClG,6BAA6B,EAAE,kEAAkE;QACjG,8BAA8B,EAAE,kEAAkE;QAClG,sCAAsC,EAAE,kEAAkE;KAC3G;IACD,OAAO,EAAE;QACP,0BAA0B,EAAE,kEAAkE;QAC9F,+BAA+B,EAAE,kEAAkE;QACnG,gCAAgC,EAAE,kEAAkE;QACpG,8BAA8B,EAAE,kEAAkE;QAClG,8BAA8B,EAAE,kEAAkE;QAClG,6BAA6B,EAAE,kEAAkE;QACjG,8BAA8B,EAAE,kEAAkE;QAClG,sCAAsC,EAAE,kEAAkE;KAC3G;IACD,OAAO,EAAE;QACP,0BAA0B,EAAE,kEAAkE;QAC9F,+BAA+B,EAAE,kEAAkE;QACnG,gCAAgC,EAAE,kEAAkE;QACpG,8BAA8B,EAAE,kEAAkE;QAClG,8BAA8B,EAAE,kEAAkE;QAClG,6BAA6B,EAAE,kEAAkE;QACjG,8BAA8B,EAAE,kEAAkE;QAClG,sCAAsC,EAAE,kEAAkE;KAC3G;IACD,OAAO,EAAE;QACP,0BAA0B,EAAE,kEAAkE;QAC9F,+BAA+B,EAAE,kEAAkE;QACnG,gCAAgC,EAAE,kEAAkE;QACpG,8BAA8B,EAAE,kEAAkE;QAClG,8BAA8B,EAAE,kEAAkE;QAClG,6BAA6B,EAAE,kEAAkE;QACjG,gCAAgC,EAAE,kEAAkE;QACpG,8BAA8B,EAAE,kEAAkE;QAClG,sCAAsC,EAAE,kEAAkE;KAC3G;IACD,OAAO,EAAE;QACP,uBAAuB,EAAE,kEAAkE,EAAE,MAAM;QACnG,mCAAmC,EAAE,kEAAkE,EAAE,MAAM;QAC/G,0BAA0B,EAAE,kEAAkE;QAC9F,+BAA+B,EAAE,kEAAkE;QACnG,gCAAgC,EAAE,kEAAkE;QACpG,8BAA8B,EAAE,kEAAkE;QAClG,8BAA8B,EAAE,kEAAkE;QAClG,6BAA6B,EAAE,kEAAkE;QACjG,gCAAgC,EAAE,kEAAkE;QACpG,8BAA8B,EAAE,kEAAkE;QAClG,sCAAsC,EAAE,kEAAkE;KAC3G;CACO,CAAA;AAIV,SAAS,mBAAmB,CAA+B,WAAc,EAAE,IAA4C;IACrH,MAAM,eAAe,GAAG,IAAc,CAAA;IACtC,OAAO,sBAAsB,CAAC;QAC5B,WAAW,EAAE,gBAAgB,WAAW,EAAE;QAC1C,eAAe;QACf,SAAS,EAAE,EAAE,CAAC,eAAe,CAAC,EAAE,oBAAoB,CAAC,WAAW,CAAC,CAAC,IAAI,CAAW,EAAE;KACpF,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,WAAmD,EAAE,KAAc,EAAE,YAAoB;IAC7H,IAAI,KAAK,EAAE,CAAC;QACV,gFAAgF;QAChF,MAAM,YAAY,GAAS,OAAO,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAA;QAChH,OAAO,EAAE,IAAI,EAAE,MAAM,qBAAqB,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,YAAY,EAAE,YAAY,EAAE,CAAC,EAAE,CAAA;IACjG,CAAC;SAAM,CAAC;QACN,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,WAAW,EAAE,YAAY,CAAC,CAAA;QACrE,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAA;IAC/C,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,YAAY,GAAG,EAAE,EAA8F;IAC7K,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,WAAW,IAAI,IAAI,EAAE,CAAC;QAC3D,MAAM,UAAU,GAAG,eAAe,CAAC,MAAM,oBAAoB,CAAC,WAAW,EAAE,YAAY,CAAC,EAAE,YAAY,IAAI,SAAS,CAAC,CAAA;QACpH,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,KAAK,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,UAAU,EAAE,UAAU,EAAE,CAAA;IACxG,CAAC;IAED,MAAM,SAAS,GAAG,WAAW,IAAI,IAAI,IAAI,WAAW,KAAK,OAAO,CAAA;IAChE,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,UAAU,GAAG,eAAe,CAAC,MAAM,uBAAuB,EAAE,CAAC,CAAA;QACnE,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,YAAY,EAAE,IAAI,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,UAAU,EAAE,UAAU,EAAE,CAAA;IACvH,CAAC;IACD,MAAM,IAAI,GAAG,sCAAsC,CAAA;IACnD,MAAM,UAAU,GAAG,eAAe,CAAC,MAAM,mBAAmB,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,CAAA;IAChF,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,KAAK,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,UAAU,EAAE,UAAU,EAAE,CAAA;AACxG,CAAC;AAED,MAAM,UAAU,SAAS;IACvB,MAAM,UAAU,GAAG,EAAE,CAAC,OAAO,EAAE,CAAA;IAC/B,OAAO,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC,CAAA;AACrE,CAAC;AAED,KAAK,UAAU,qBAAqB,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,YAAY,GAAG,EAAE,EAA8F;IACvK,IAAI,WAAW,KAAK,OAAO,IAAI,WAAW,IAAI,IAAI,EAAE,CAAC;QACnD,wEAAwE;QACxE,MAAM,UAAU,GAAG,eAAe,CAAC,MAAM,uBAAuB,EAAE,CAAC,CAAA;QACnE,IAAI,SAAS,EAAE,EAAE,CAAC;YAChB,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,WAAW,EAAE,cAAc,CAAC,CAAA;QAC3D,CAAC;aAAM,CAAC;YACN,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,YAAY,EAAE,OAAO,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,EAAE,cAAc,CAAC,CAAA;QACtG,CAAC;IACH,CAAC;IACD,mDAAmD;IACnD,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,oBAAoB,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAA;IAC/E,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAA;AACvC,CAAC;AAED,KAAK,UAAU,qBAAqB,CAAC,WAAmD,EAAE,YAAY,GAAG,EAAE;IACzG,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,CAAA;IACjC,CAAC;IAED,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,WAAW,IAAI,IAAI,EAAE,CAAC;QAC3D,MAAM,UAAU,GAAG,eAAe,CAAC,MAAM,oBAAoB,CAAC,WAAW,EAAE,YAAY,CAAC,EAAE,YAAY,IAAI,SAAS,CAAC,CAAA;QACpH,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,EAAE,CAAA;IACxD,CAAC;IAED,IAAI,WAAW,KAAK,OAAO,IAAI,WAAW,IAAI,IAAI,EAAE,CAAC;QACnD,MAAM,UAAU,GAAG,eAAe,CAAC,MAAM,uBAAuB,EAAE,CAAC,CAAA;QACnE,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAA;QAC1D,MAAM,UAAU,GAAG,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,UAAU,CAAA;QAC9F,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,CAAA;IACzJ,CAAC;IAED,MAAM,IAAI,GAAG,CAAC,GAAG,EAAE;QACjB,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YACjC,IAAI,OAAO,CAAC,IAAI,IAAI,KAAK,EAAE,CAAC;gBAC1B,OAAO,8BAA8B,CAAA;YACvC,CAAC;iBAAM,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;gBACpC,OAAO,8BAA8B,CAAA;YACvC,CAAC;YACD,OAAO,6BAA6B,CAAA;QACtC,CAAC;QACD,eAAe;QACf,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC7B,OAAO,+BAA+B,CAAA;QACxC,CAAC;QACD,OAAO,gCAAgC,CAAA;IACzC,CAAC,CAAC,EAAE,CAAA;IACJ,MAAM,UAAU,GAAG,eAAe,CAAC,MAAM,mBAAmB,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,CAAA;IAChF,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,EAAE,CAAA;AACxD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,WAAmB;IACvD,MAAM,QAAQ,GAAI,oBAA+D,CAAC,WAAW,CAAC,EAAE,CAAC,uBAAuB,CAAC,CAAA;IACzH,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,wBAAwB,WAAW,sDAAsD,CAAC,CAAA;IAC5G,CAAC;IACD,OAAO,sBAAsB,CAAC;QAC5B,WAAW,EAAE,gBAAgB,WAAW,EAAE;QAC1C,eAAe,EAAE,uBAAuB;QACxC,SAAS,EAAE,EAAE,uBAAuB,EAAE,QAAQ,EAAE;KACjD,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,WAAmB;IAC3D,MAAM,QAAQ,GAAI,oBAA+D,CAAC,WAAW,CAAC,EAAE,CAAC,mCAAmC,CAAC,CAAA;IACrI,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,wBAAwB,WAAW,8DAA8D,CAAC,CAAA;IACpH,CAAC;IACD,OAAO,sBAAsB,CAAC;QAC5B,WAAW,EAAE,gBAAgB,WAAW,EAAE;QAC1C,eAAe,EAAE,mCAAmC;QACpD,SAAS,EAAE,EAAE,mCAAmC,EAAE,QAAQ,EAAE;KAC7D,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,WAAmD,EAAE,YAAY,GAAG,EAAE;IAC1G,MAAM,IAAI,GAAG,iBAAiB,CAAA;IAC9B,MAAM,GAAG,GAAG,gBAAgB,CAAA;IAC5B,MAAM,GAAG,GAAG,gBAAgB,CAAA;IAC5B,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,WAAW,IAAI,IAAI,EAAE,CAAC;QAC3D,MAAM,UAAU,GAAG,eAAe,CAAC,MAAM,oBAAoB,CAAC,WAAW,EAAE,YAAY,CAAC,EAAE,YAAY,IAAI,SAAS,CAAC,CAAA;QACpH,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,CAAC,EAAE,CAAA;IAC7E,CAAC;IACD,IAAI,WAAW,KAAK,OAAO,IAAI,WAAW,IAAI,IAAI,EAAE,CAAC;QACnD,MAAM,UAAU,GAAG,eAAe,CAAC,MAAM,uBAAuB,EAAE,CAAC,CAAA;QACnE,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,CAAC,EAAE,CAAA;IAC9E,CAAC;IACD,MAAM,IAAI,GAAG,0BAA0B,CAAA;IACvC,MAAM,UAAU,GAAG,eAAe,CAAC,MAAM,mBAAmB,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,CAAA;IAChF,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,CAAC,EAAE,CAAA;AAC7E,CAAC","sourcesContent":["import { Arch, sanitizeDirPath } from \"builder-util\"\nimport { Nullish } from \"builder-util-runtime\"\nimport * as os from \"os\"\nimport * as path from \"path\"\nimport { ToolsetConfig } from \"../configuration.js\"\nimport { ToolInfo, computeToolEnv } from \"../util/bundledTool.js\"\nimport { downloadBuilderToolset } from \"../util/electronGet.js\"\nimport { getCustomToolsetPath } from \"./custom.js\"\n\nfunction getLegacyWinCodeSignBin(): Promise<string> {\n  return downloadBuilderToolset({\n    releaseName: \"winCodeSign-2.6.0\",\n    filenameWithExt: \"winCodeSign-2.6.0.7z\",\n    checksums: { [\"winCodeSign-2.6.0.7z\"]: \"cdaec7154dda7cc31f88d886e2489379a0625a737d610b5ae7f62a12f16743a4\" },\n  })\n}\n\nexport const wincodesignChecksums = {\n  \"0.0.0\": {\n    // legacy — downloads winCodeSign-2.6.0 via getLegacyWinCodeSignBin()\n  },\n  \"1.0.0\": {\n    \"rcedit-windows-2_0_0.zip\": \"589709935902545a8335190b08644cf61b46a9042e34c0c3ef0660a5aeddeaae\",\n    \"win-codesign-darwin-arm64.zip\": \"7eb41c3e6e48a75ced6b3384de22185da4bb458960fa410970eedd4e838c5c14\",\n    \"win-codesign-darwin-x86_64.zip\": \"3986c97429f002df63490193d7f787281836f055934e3cdd9e69c70a8acb695e\",\n    \"win-codesign-linux-amd64.zip\": \"d362a1a981053841554867e3e9dff51fe420fd577b44653df89bd7d3c916b156\",\n    \"win-codesign-linux-arm64.zip\": \"fb848d498281f081c937be48dd6ddaf49b0201f32210dfc816ad061c47ecd37b\",\n    \"win-codesign-linux-i386.zip\": \"11f8d9ffbf5b01e3bf6321c6d93b9b5e43d0c2d2a9fde1bca07698f2eb967cdf\",\n    \"win-codesign-windows-x64.zip\": \"1bd27f9fa553cb14bec8df530cb3caffcfb095f9dd187dab6eaf5e9b7d6e7bff\",\n    \"windows-kits-bundle-10_0_26100_0.zip\": \"1a12c81024c3499c212fdc5fac34a918e6d199271a39dfc524f6d8da484329bd\",\n  },\n  \"1.1.0\": {\n    \"rcedit-windows-2_0_0.zip\": \"c66591ebe0919c60231f0bf79ff223e6504bfa69bc13edc1fa8bfc6177b73402\",\n    \"win-codesign-darwin-arm64.zip\": \"3f263b0e53cdc5410f6165471b2e808aee3148dc792efa23a7c303e7a01e67b7\",\n    \"win-codesign-darwin-x86_64.zip\": \"143fbdfcbc53bc273fa181356be8416829778452621484d39eadbe1ce49979ba\",\n    \"win-codesign-linux-amd64.zip\": \"65477fe8e40709b0f998928afb8336f82413b123310bf5adaa8efb7ed6ed0eeb\",\n    \"win-codesign-linux-arm64.zip\": \"575b01a966f2b775bbea119de263957378e2bd28cbd064d35f9e981827e37b59\",\n    \"win-codesign-linux-i386.zip\": \"aa3ce90e9aaa3449a228a3fa30633cdeb6b2791913786677a85c59db1d985598\",\n    \"win-codesign-windows-x64.zip\": \"6e5dcc5d7af7c00a7387e2101d1ad986aef80e963a3526da07bd0e65de484c30\",\n    \"windows-kits-bundle-10_0_26100_0.zip\": \"284f18a2fde66e6ecfbefc3065926c9bfdf641761a9e6cd2bd26e18d1e328bf7\",\n  },\n  \"1.1.1\": {\n    \"rcedit-windows-2_0_0.zip\": \"a4133c265a53a8a6d5063c6d92603dc2dcd47546e50bfd79c93bc56692d6fcb3\",\n    \"win-codesign-darwin-arm64.zip\": \"8c655fe77edb326fb6b7051a6f74b0f09843f7d3de7887c1d217088cff47ece6\",\n    \"win-codesign-darwin-x86_64.zip\": \"b5882783c910e10b18792ea8c319fa8d6ce9dbbdd0d6a283a504787b3e9e96c6\",\n    \"win-codesign-linux-amd64.zip\": \"8e0c05c33b3fb24d41ac41d37b0c70ad9f8c1c82bb667ed60c2a6a8d141b7c62\",\n    \"win-codesign-linux-arm64.zip\": \"535f318b8aac1c9487e0f8b58df0a4182103e303ccaca1c9d0ef20b1020e03ca\",\n    \"win-codesign-linux-i386.zip\": \"e432f2819f557f9d1175e26f374eec8a368eb23b519c12c690a969ce369966c5\",\n    \"win-codesign-windows-x64.zip\": \"47d78ed7e229e891866b0d0e10dde6df9617c32a89fc76a9e280ffabfc80e1fe\",\n    \"windows-kits-bundle-10_0_26100_0.zip\": \"f7e67213ce690386b2f0a58e3af986dbf223bc1b45ef4a75e77ff85f66b78c94\",\n  },\n  \"1.2.1\": {\n    \"rcedit-windows-2_0_0.zip\": \"1c2b68b9ae41229566c008ce98c4f6cd2b642ace85284e753d1d3509377f9e67\",\n    \"win-codesign-darwin-arm64.zip\": \"ac7c1d9279490fc88e9e744ed965ad7e1d377e0219142dab0ab49cfba3ede764\",\n    \"win-codesign-darwin-x86_64.zip\": \"7c4188bb301621cde22f918bb2d1a86ef9892ad401a40b7838b80efc9165547d\",\n    \"win-codesign-linux-amd64.zip\": \"69b94f71f9189ded6b962718df102e0ffe0a81d506351fecd3df3d73c7166e31\",\n    \"win-codesign-linux-arm64.zip\": \"c959031605a5ab994bfd9b84d37bc5bcaba8f39d54a6d69bd2541b2a91ecf723\",\n    \"win-codesign-linux-i386.zip\": \"fc937f40655b9839b67ed35cc7b571795b3f7b7b15db10c3026599db43f1c2b1\",\n    \"win-codesign-windows-arm64.zip\": \"96390eb3130e63ea9d3641ef076c941c6f51463125498cf53b2503e52c38082d\",\n    \"win-codesign-windows-x64.zip\": \"40b1d88ea074de58ddc7595a2b6d30ca23f81bcce33f110102304337538fcbeb\",\n    \"windows-kits-bundle-10_0_26100_0.zip\": \"9b198db76ae75b124169aef3369fb96c17b39dbf16f16f1264dbd9fd001d976f\",\n  },\n  \"1.3.0\": {\n    \"ats-bundle-1_0_95.zip\": \"93e1441cd8c60f7b7a57a3e0e20a2109994e33a7f42bd04c998204a1928f9f2f\", // new\n    \"dotnet-runtime-win-x64-8_0_28.zip\": \"71b9aa960ebaae196a62ec0bb1a4d224e1b48e18b6dc5eed89a37b28b72965ee\", // new\n    \"rcedit-windows-2_0_0.zip\": \"84ea279c5d94977fecffbe0f21b073318575dc631a3dae46fadb14309f2eef11\",\n    \"win-codesign-darwin-arm64.zip\": \"c5c1e1e106a5feff27d320c57856e362d8f605c09c7c02fc42d9309b72c56372\",\n    \"win-codesign-darwin-x86_64.zip\": \"4fd5af2c4c655257685fad1769457419e086ec0862ee36f893b3659e1788c8ca\",\n    \"win-codesign-linux-amd64.zip\": \"58c708762b3088a2c6c98494c4813e2a1d030a314a7958c77a2806d58e5efe95\",\n    \"win-codesign-linux-arm64.zip\": \"1e9dd1ae149a4e0c988b5529fb983d7a8265cd71e7f3fb5af4cce501005a670c\",\n    \"win-codesign-linux-i386.zip\": \"b5c3249fb565bb956a48aaff01bc1bbbd9acaf3c981960f2b754210f9df95cd9\",\n    \"win-codesign-windows-arm64.zip\": \"c707709440a07e400b4053d9bab77c9f335505c1701035c2aa8285d880360989\",\n    \"win-codesign-windows-x64.zip\": \"40d621aad7593e6298ce1d24798760dcefb053f358be891d74c95386ac2ac50b\",\n    \"windows-kits-bundle-10_0_26100_0.zip\": \"2eeb955e580103e1bbecf9666dca87b141c3bb73ad99ead64bb8821755694ecd\",\n  },\n} as const\n\ntype CodeSignVersionKey = keyof typeof wincodesignChecksums\n\nfunction _getWindowsToolsBin<V extends CodeSignVersionKey>(winCodeSign: V, file: keyof (typeof wincodesignChecksums)[V]): Promise<string> {\n  const filenameWithExt = file as string\n  return downloadBuilderToolset({\n    releaseName: `win-codesign@${winCodeSign}`,\n    filenameWithExt,\n    checksums: { [filenameWithExt]: wincodesignChecksums[winCodeSign][file] as string },\n  })\n}\n\nexport async function getSignToolPath(winCodeSign: ToolsetConfig[\"winCodeSign\"] | Nullish, isWin: boolean, resourcesDir: string): Promise<ToolInfo> {\n  if (isWin) {\n    // windows kits are always the target arch; signtool can be used by either arch.\n    const signtoolArch: Arch = process.arch === \"x64\" ? Arch.x64 : process.arch === \"arm64\" ? Arch.arm64 : Arch.ia32\n    return { path: await getWindowsSignToolExe({ winCodeSign, arch: signtoolArch, resourcesDir }) }\n  } else {\n    const vendor = await getOsslSigncodeBundle(winCodeSign, resourcesDir)\n    return { path: vendor.path, env: vendor.env }\n  }\n}\n\nexport async function getWindowsKitsBundle({ winCodeSign, arch, resourcesDir = \"\" }: { winCodeSign: ToolsetConfig[\"winCodeSign\"] | Nullish; arch: Arch; resourcesDir?: string }) {\n  if (typeof winCodeSign === \"object\" && winCodeSign != null) {\n    const vendorPath = sanitizeDirPath(await getCustomToolsetPath(winCodeSign, resourcesDir), resourcesDir || undefined)\n    return { kit: path.join(vendorPath, arch === Arch.ia32 ? \"x86\" : Arch[arch]), appxAssets: vendorPath }\n  }\n\n  const useLegacy = winCodeSign == null || winCodeSign === \"0.0.0\"\n  if (useLegacy) {\n    const vendorPath = sanitizeDirPath(await getLegacyWinCodeSignBin())\n    return { kit: path.join(vendorPath, \"windows-10\", arch === Arch.arm64 ? \"x64\" : Arch[arch]), appxAssets: vendorPath }\n  }\n  const file = \"windows-kits-bundle-10_0_26100_0.zip\"\n  const vendorPath = sanitizeDirPath(await _getWindowsToolsBin(winCodeSign, file))\n  return { kit: path.join(vendorPath, arch === Arch.ia32 ? \"x86\" : Arch[arch]), appxAssets: vendorPath }\n}\n\nexport function isOldWin6() {\n  const winVersion = os.release()\n  return winVersion.startsWith(\"6.\") && !winVersion.startsWith(\"6.3\")\n}\n\nasync function getWindowsSignToolExe({ winCodeSign, arch, resourcesDir = \"\" }: { winCodeSign: ToolsetConfig[\"winCodeSign\"] | Nullish; arch: Arch; resourcesDir?: string }) {\n  if (winCodeSign === \"0.0.0\" || winCodeSign == null) {\n    // use modern signtool on Windows Server 2012 R2 to be able to sign AppX\n    const vendorPath = sanitizeDirPath(await getLegacyWinCodeSignBin())\n    if (isOldWin6()) {\n      return path.join(vendorPath, \"windows-6\", \"signtool.exe\")\n    } else {\n      return path.join(vendorPath, \"windows-10\", process.arch === \"ia32\" ? \"ia32\" : \"x64\", \"signtool.exe\")\n    }\n  }\n  // kit is already sanitized by getWindowsKitsBundle\n  const { kit } = await getWindowsKitsBundle({ winCodeSign, arch, resourcesDir })\n  return path.join(kit, \"signtool.exe\")\n}\n\nasync function getOsslSigncodeBundle(winCodeSign: ToolsetConfig[\"winCodeSign\"] | Nullish, resourcesDir = \"\") {\n  if (process.platform === \"win32\") {\n    return { path: \"osslsigncode\" }\n  }\n\n  if (typeof winCodeSign === \"object\" && winCodeSign != null) {\n    const vendorPath = sanitizeDirPath(await getCustomToolsetPath(winCodeSign, resourcesDir), resourcesDir || undefined)\n    return { path: path.join(vendorPath, \"osslsigncode\") }\n  }\n\n  if (winCodeSign === \"0.0.0\" || winCodeSign == null) {\n    const legacyBase = sanitizeDirPath(await getLegacyWinCodeSignBin())\n    const vendorBase = path.join(legacyBase, process.platform)\n    const vendorPath = process.platform === \"darwin\" ? path.join(vendorBase, \"10.12\") : vendorBase\n    return { path: path.join(vendorPath, \"osslsigncode\"), env: process.platform === \"darwin\" ? computeToolEnv([path.join(vendorPath, \"lib\")]) : undefined }\n  }\n\n  const file = (() => {\n    if (process.platform === \"linux\") {\n      if (process.arch == \"x64\") {\n        return \"win-codesign-linux-amd64.zip\"\n      } else if (process.arch === \"arm64\") {\n        return \"win-codesign-linux-arm64.zip\"\n      }\n      return \"win-codesign-linux-i386.zip\"\n    }\n    // darwin arm64\n    if (process.arch === \"arm64\") {\n      return \"win-codesign-darwin-arm64.zip\"\n    }\n    return \"win-codesign-darwin-x86_64.zip\"\n  })()\n  const vendorPath = sanitizeDirPath(await _getWindowsToolsBin(winCodeSign, file))\n  return { path: path.join(vendorPath, \"osslsigncode\") }\n}\n\nexport async function getAtsBundleDir(winCodeSign: string): Promise<string> {\n  const checksum = (wincodesignChecksums as Record<string, Record<string, string>>)[winCodeSign]?.[\"ats-bundle-1_0_95.zip\"]\n  if (!checksum) {\n    throw new Error(`winCodeSign version \"${winCodeSign}\" does not include an ATS bundle (requires >= 1.3.0)`)\n  }\n  return downloadBuilderToolset({\n    releaseName: `win-codesign@${winCodeSign}`,\n    filenameWithExt: \"ats-bundle-1_0_95.zip\",\n    checksums: { \"ats-bundle-1_0_95.zip\": checksum },\n  })\n}\n\nexport async function getDotnetRuntimeDir(winCodeSign: string): Promise<string> {\n  const checksum = (wincodesignChecksums as Record<string, Record<string, string>>)[winCodeSign]?.[\"dotnet-runtime-win-x64-8_0_28.zip\"]\n  if (!checksum) {\n    throw new Error(`winCodeSign version \"${winCodeSign}\" does not include a .NET runtime bundle (requires >= 1.3.0)`)\n  }\n  return downloadBuilderToolset({\n    releaseName: `win-codesign@${winCodeSign}`,\n    filenameWithExt: \"dotnet-runtime-win-x64-8_0_28.zip\",\n    checksums: { \"dotnet-runtime-win-x64-8_0_28.zip\": checksum },\n  })\n}\n\nexport async function getRceditBundle(winCodeSign: ToolsetConfig[\"winCodeSign\"] | Nullish, resourcesDir = \"\") {\n  const ia32 = \"rcedit-ia32.exe\"\n  const x86 = \"rcedit-x86.exe\"\n  const x64 = \"rcedit-x64.exe\"\n  if (typeof winCodeSign === \"object\" && winCodeSign != null) {\n    const vendorPath = sanitizeDirPath(await getCustomToolsetPath(winCodeSign, resourcesDir), resourcesDir || undefined)\n    return { x86: path.join(vendorPath, x86), x64: path.join(vendorPath, x64) }\n  }\n  if (winCodeSign === \"0.0.0\" || winCodeSign == null) {\n    const vendorPath = sanitizeDirPath(await getLegacyWinCodeSignBin())\n    return { x86: path.join(vendorPath, ia32), x64: path.join(vendorPath, x64) }\n  }\n  const file = \"rcedit-windows-2_0_0.zip\"\n  const vendorPath = sanitizeDirPath(await _getWindowsToolsBin(winCodeSign, file))\n  return { x86: path.join(vendorPath, x86), x64: path.join(vendorPath, x64) }\n}\n"]}
+{"version":3,"file":"winCodeSign.js","sourceRoot":"","sources":["../../src/toolsets/winCodeSign.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AAEzE,OAAO,KAAK,EAAE,MAAM,IAAI,CAAA;AACxB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAA;AAE5B,OAAO,EAAY,cAAc,EAAE,MAAM,wBAAwB,CAAA;AACjE,OAAO,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAA;AAC/D,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAA;AAClD,OAAO,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAA;AAEpD,oFAAoF;AACpF,MAAM,CAAC,MAAM,mBAAmB,GAAG,OAAO,CAAA;AAE1C,SAAS,uBAAuB;IAC9B,OAAO,sBAAsB,CAAC;QAC5B,WAAW,EAAE,mBAAmB;QAChC,eAAe,EAAE,sBAAsB;QACvC,SAAS,EAAE,EAAE,CAAC,sBAAsB,CAAC,EAAE,kEAAkE,EAAE;KAC5G,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,OAAO,EAAE;IACP,qEAAqE;KACtE;IACD,OAAO,EAAE;QACP,0BAA0B,EAAE,kEAAkE;QAC9F,+BAA+B,EAAE,kEAAkE;QACnG,gCAAgC,EAAE,kEAAkE;QACpG,8BAA8B,EAAE,kEAAkE;QAClG,8BAA8B,EAAE,kEAAkE;QAClG,6BAA6B,EAAE,kEAAkE;QACjG,8BAA8B,EAAE,kEAAkE;QAClG,sCAAsC,EAAE,kEAAkE;KAC3G;IACD,OAAO,EAAE;QACP,0BAA0B,EAAE,kEAAkE;QAC9F,+BAA+B,EAAE,kEAAkE;QACnG,gCAAgC,EAAE,kEAAkE;QACpG,8BAA8B,EAAE,kEAAkE;QAClG,8BAA8B,EAAE,kEAAkE;QAClG,6BAA6B,EAAE,kEAAkE;QACjG,8BAA8B,EAAE,kEAAkE;QAClG,sCAAsC,EAAE,kEAAkE;KAC3G;IACD,OAAO,EAAE;QACP,0BAA0B,EAAE,kEAAkE;QAC9F,+BAA+B,EAAE,kEAAkE;QACnG,gCAAgC,EAAE,kEAAkE;QACpG,8BAA8B,EAAE,kEAAkE;QAClG,8BAA8B,EAAE,kEAAkE;QAClG,6BAA6B,EAAE,kEAAkE;QACjG,8BAA8B,EAAE,kEAAkE;QAClG,sCAAsC,EAAE,kEAAkE;KAC3G;IACD,OAAO,EAAE;QACP,0BAA0B,EAAE,kEAAkE;QAC9F,+BAA+B,EAAE,kEAAkE;QACnG,gCAAgC,EAAE,kEAAkE;QACpG,8BAA8B,EAAE,kEAAkE;QAClG,8BAA8B,EAAE,kEAAkE;QAClG,6BAA6B,EAAE,kEAAkE;QACjG,gCAAgC,EAAE,kEAAkE;QACpG,8BAA8B,EAAE,kEAAkE;QAClG,sCAAsC,EAAE,kEAAkE;KAC3G;IACD,OAAO,EAAE;QACP,uBAAuB,EAAE,kEAAkE,EAAE,MAAM;QACnG,mCAAmC,EAAE,kEAAkE,EAAE,MAAM;QAC/G,0BAA0B,EAAE,kEAAkE;QAC9F,+BAA+B,EAAE,kEAAkE;QACnG,gCAAgC,EAAE,kEAAkE;QACpG,8BAA8B,EAAE,kEAAkE;QAClG,8BAA8B,EAAE,kEAAkE;QAClG,6BAA6B,EAAE,kEAAkE;QACjG,gCAAgC,EAAE,kEAAkE;QACpG,8BAA8B,EAAE,kEAAkE;QAClG,sCAAsC,EAAE,kEAAkE;KAC3G;CACO,CAAA;AAIV,SAAS,mBAAmB,CAA+B,WAAc,EAAE,IAA4C;IACrH,MAAM,eAAe,GAAG,IAAc,CAAA;IACtC,OAAO,sBAAsB,CAAC;QAC5B,WAAW,EAAE,gBAAgB,WAAW,EAAE;QAC1C,eAAe;QACf,SAAS,EAAE,EAAE,CAAC,eAAe,CAAC,EAAE,oBAAoB,CAAC,WAAW,CAAC,CAAC,IAAI,CAAW,EAAE;KACpF,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,WAAmD,EAAE,KAAc,EAAE,YAAoB;IAC7H,IAAI,KAAK,EAAE,CAAC;QACV,OAAO,EAAE,IAAI,EAAE,MAAM,qBAAqB,CAAC,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC,EAAE,CAAA;IAC7E,CAAC;SAAM,CAAC;QACN,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,WAAW,EAAE,YAAY,CAAC,CAAA;QACrE,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAA;IAC/C,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,EAAE,WAAW,EAAE,YAAY,EAAkF;IACtJ,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAA;IACvD,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,WAAW,IAAI,IAAI,EAAE,CAAC;QAC3D,MAAM,UAAU,GAAG,eAAe,CAAC,MAAM,oBAAoB,CAAC,WAAW,EAAE,YAAY,CAAC,EAAE,YAAY,IAAI,SAAS,CAAC,CAAA;QACpH,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,EAAE,UAAU,EAAE,UAAU,EAAE,CAAA;IACxE,CAAC;IAED,MAAM,OAAO,GAAG,qBAAqB,CAAC,WAAW,EAAE,mBAAmB,CAAC,CAAA;IACvE,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;QACxB,MAAM,UAAU,GAAG,eAAe,CAAC,MAAM,uBAAuB,EAAE,CAAC,CAAA;QACnE,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,YAAY,EAAE,OAAO,CAAC,EAAE,UAAU,EAAE,UAAU,EAAE,CAAA;IACtF,CAAC;IACD,MAAM,IAAI,GAAG,sCAAsC,CAAA;IACnD,MAAM,UAAU,GAAG,eAAe,CAAC,MAAM,mBAAmB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAA;IAC5E,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,EAAE,UAAU,EAAE,UAAU,EAAE,CAAA;AACxE,CAAC;AAED,MAAM,UAAU,SAAS;IACvB,MAAM,UAAU,GAAG,EAAE,CAAC,OAAO,EAAE,CAAA;IAC/B,OAAO,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC,CAAA;AACrE,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB,CAAC,WAAmD;IACrF,OAAO,OAAO,WAAW,KAAK,QAAQ,IAAI,qBAAqB,CAAC,WAAW,EAAE,mBAAmB,CAAC,KAAK,OAAO,CAAA;AAC/G,CAAC;AAED,KAAK,UAAU,qBAAqB,CAAC,EAAE,WAAW,EAAE,YAAY,GAAG,EAAE,EAAkF;IACrJ,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,qBAAqB,CAAC,WAAW,EAAE,mBAAmB,CAAC,KAAK,OAAO,EAAE,CAAC;QAC3G,wEAAwE;QACxE,MAAM,UAAU,GAAG,eAAe,CAAC,MAAM,uBAAuB,EAAE,CAAC,CAAA;QACnE,IAAI,SAAS,EAAE,EAAE,CAAC;YAChB,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,WAAW,EAAE,cAAc,CAAC,CAAA;QAC3D,CAAC;aAAM,CAAC;YACN,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,YAAY,EAAE,OAAO,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,EAAE,cAAc,CAAC,CAAA;QACtG,CAAC;IACH,CAAC;IACD,mDAAmD;IACnD,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,oBAAoB,CAAC,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC,CAAA;IACzE,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAA;AACvC,CAAC;AAED,KAAK,UAAU,qBAAqB,CAAC,WAAmD,EAAE,YAAY,GAAG,EAAE;IACzG,mHAAmH;IACnH,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,WAAW,IAAI,IAAI,EAAE,CAAC;QAC3D,MAAM,UAAU,GAAG,eAAe,CAAC,MAAM,oBAAoB,CAAC,WAAW,EAAE,YAAY,CAAC,EAAE,YAAY,IAAI,SAAS,CAAC,CAAA;QACpH,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,EAAE,CAAA;IACxD,CAAC;IAED,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,6GAA6G;QAC7G,2GAA2G;QAC3G,MAAM,IAAI,yBAAyB,CACjC,0KAA0K,CAC3K,CAAA;IACH,CAAC;IAED,MAAM,OAAO,GAAG,qBAAqB,CAAC,WAAW,EAAE,mBAAmB,CAAC,CAAA;IACvE,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;QACxB,MAAM,UAAU,GAAG,eAAe,CAAC,MAAM,uBAAuB,EAAE,CAAC,CAAA;QACnE,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAA;QAC1D,MAAM,UAAU,GAAG,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,UAAU,CAAA;QAC9F,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,CAAA;IACzJ,CAAC;IAED,MAAM,IAAI,GAAG,CAAC,GAAG,EAAE;QACjB,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YACjC,IAAI,OAAO,CAAC,IAAI,IAAI,KAAK,EAAE,CAAC;gBAC1B,OAAO,8BAA8B,CAAA;YACvC,CAAC;iBAAM,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;gBACpC,OAAO,8BAA8B,CAAA;YACvC,CAAC;YACD,OAAO,6BAA6B,CAAA;QACtC,CAAC;QACD,eAAe;QACf,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC7B,OAAO,+BAA+B,CAAA;QACxC,CAAC;QACD,OAAO,gCAAgC,CAAA;IACzC,CAAC,CAAC,EAAE,CAAA;IACJ,MAAM,UAAU,GAAG,eAAe,CAAC,MAAM,mBAAmB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAA;IAC5E,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,EAAE,CAAA;AACxD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,WAAmB;IACvD,MAAM,OAAO,GAAG,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,WAAW,CAAA;IAC5E,MAAM,QAAQ,GAAI,oBAA+D,CAAC,OAAO,CAAC,EAAE,CAAC,uBAAuB,CAAC,CAAA;IACrH,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,wBAAwB,OAAO,sDAAsD,CAAC,CAAA;IACxG,CAAC;IACD,OAAO,sBAAsB,CAAC;QAC5B,WAAW,EAAE,gBAAgB,OAAO,EAAE;QACtC,eAAe,EAAE,uBAAuB;QACxC,SAAS,EAAE,EAAE,uBAAuB,EAAE,QAAQ,EAAE;KACjD,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,WAAmB;IAC3D,MAAM,OAAO,GAAG,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,WAAW,CAAA;IAC5E,MAAM,QAAQ,GAAI,oBAA+D,CAAC,OAAO,CAAC,EAAE,CAAC,mCAAmC,CAAC,CAAA;IACjI,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,wBAAwB,OAAO,8DAA8D,CAAC,CAAA;IAChH,CAAC;IACD,OAAO,sBAAsB,CAAC;QAC5B,WAAW,EAAE,gBAAgB,OAAO,EAAE;QACtC,eAAe,EAAE,mCAAmC;QACpD,SAAS,EAAE,EAAE,mCAAmC,EAAE,QAAQ,EAAE;KAC7D,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,WAAmD,EAAE,YAAY,GAAG,EAAE;IAC1G,MAAM,IAAI,GAAG,iBAAiB,CAAA;IAC9B,MAAM,GAAG,GAAG,gBAAgB,CAAA;IAC5B,MAAM,GAAG,GAAG,gBAAgB,CAAA;IAC5B,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,WAAW,IAAI,IAAI,EAAE,CAAC;QAC3D,MAAM,UAAU,GAAG,eAAe,CAAC,MAAM,oBAAoB,CAAC,WAAW,EAAE,YAAY,CAAC,EAAE,YAAY,IAAI,SAAS,CAAC,CAAA;QACpH,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,CAAC,EAAE,CAAA;IAC7E,CAAC;IACD,MAAM,OAAO,GAAG,qBAAqB,CAAC,WAAW,EAAE,mBAAmB,CAAC,CAAA;IACvE,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;QACxB,MAAM,UAAU,GAAG,eAAe,CAAC,MAAM,uBAAuB,EAAE,CAAC,CAAA;QACnE,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,CAAC,EAAE,CAAA;IAC9E,CAAC;IACD,MAAM,IAAI,GAAG,0BAA0B,CAAA;IACvC,MAAM,UAAU,GAAG,eAAe,CAAC,MAAM,mBAAmB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAA;IAC5E,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,CAAC,EAAE,CAAA;AAC7E,CAAC","sourcesContent":["import { InvalidConfigurationError, sanitizeDirPath } from \"builder-util\"\nimport { Nullish } from \"builder-util-runtime\"\nimport * as os from \"os\"\nimport * as path from \"path\"\nimport { ToolsetConfig } from \"../configuration.js\"\nimport { ToolInfo, computeToolEnv } from \"../util/bundledTool.js\"\nimport { downloadBuilderToolset } from \"../util/electronGet.js\"\nimport { getCustomToolsetPath } from \"./custom.js\"\nimport { resolveToolsetVersion } from \"./version.js\"\n\n// Newest win-codesign bundle — selected when the config is unset / null / \"latest\".\nexport const WIN_CODESIGN_LATEST = \"1.3.0\"\n\nfunction getLegacyWinCodeSignBin(): Promise<string> {\n  return downloadBuilderToolset({\n    releaseName: \"winCodeSign-2.6.0\",\n    filenameWithExt: \"winCodeSign-2.6.0.7z\",\n    checksums: { [\"winCodeSign-2.6.0.7z\"]: \"cdaec7154dda7cc31f88d886e2489379a0625a737d610b5ae7f62a12f16743a4\" },\n  })\n}\n\nexport const wincodesignChecksums = {\n  \"0.0.0\": {\n    // legacy — downloads winCodeSign-2.6.0 via getLegacyWinCodeSignBin()\n  },\n  \"1.0.0\": {\n    \"rcedit-windows-2_0_0.zip\": \"589709935902545a8335190b08644cf61b46a9042e34c0c3ef0660a5aeddeaae\",\n    \"win-codesign-darwin-arm64.zip\": \"7eb41c3e6e48a75ced6b3384de22185da4bb458960fa410970eedd4e838c5c14\",\n    \"win-codesign-darwin-x86_64.zip\": \"3986c97429f002df63490193d7f787281836f055934e3cdd9e69c70a8acb695e\",\n    \"win-codesign-linux-amd64.zip\": \"d362a1a981053841554867e3e9dff51fe420fd577b44653df89bd7d3c916b156\",\n    \"win-codesign-linux-arm64.zip\": \"fb848d498281f081c937be48dd6ddaf49b0201f32210dfc816ad061c47ecd37b\",\n    \"win-codesign-linux-i386.zip\": \"11f8d9ffbf5b01e3bf6321c6d93b9b5e43d0c2d2a9fde1bca07698f2eb967cdf\",\n    \"win-codesign-windows-x64.zip\": \"1bd27f9fa553cb14bec8df530cb3caffcfb095f9dd187dab6eaf5e9b7d6e7bff\",\n    \"windows-kits-bundle-10_0_26100_0.zip\": \"1a12c81024c3499c212fdc5fac34a918e6d199271a39dfc524f6d8da484329bd\",\n  },\n  \"1.1.0\": {\n    \"rcedit-windows-2_0_0.zip\": \"c66591ebe0919c60231f0bf79ff223e6504bfa69bc13edc1fa8bfc6177b73402\",\n    \"win-codesign-darwin-arm64.zip\": \"3f263b0e53cdc5410f6165471b2e808aee3148dc792efa23a7c303e7a01e67b7\",\n    \"win-codesign-darwin-x86_64.zip\": \"143fbdfcbc53bc273fa181356be8416829778452621484d39eadbe1ce49979ba\",\n    \"win-codesign-linux-amd64.zip\": \"65477fe8e40709b0f998928afb8336f82413b123310bf5adaa8efb7ed6ed0eeb\",\n    \"win-codesign-linux-arm64.zip\": \"575b01a966f2b775bbea119de263957378e2bd28cbd064d35f9e981827e37b59\",\n    \"win-codesign-linux-i386.zip\": \"aa3ce90e9aaa3449a228a3fa30633cdeb6b2791913786677a85c59db1d985598\",\n    \"win-codesign-windows-x64.zip\": \"6e5dcc5d7af7c00a7387e2101d1ad986aef80e963a3526da07bd0e65de484c30\",\n    \"windows-kits-bundle-10_0_26100_0.zip\": \"284f18a2fde66e6ecfbefc3065926c9bfdf641761a9e6cd2bd26e18d1e328bf7\",\n  },\n  \"1.1.1\": {\n    \"rcedit-windows-2_0_0.zip\": \"a4133c265a53a8a6d5063c6d92603dc2dcd47546e50bfd79c93bc56692d6fcb3\",\n    \"win-codesign-darwin-arm64.zip\": \"8c655fe77edb326fb6b7051a6f74b0f09843f7d3de7887c1d217088cff47ece6\",\n    \"win-codesign-darwin-x86_64.zip\": \"b5882783c910e10b18792ea8c319fa8d6ce9dbbdd0d6a283a504787b3e9e96c6\",\n    \"win-codesign-linux-amd64.zip\": \"8e0c05c33b3fb24d41ac41d37b0c70ad9f8c1c82bb667ed60c2a6a8d141b7c62\",\n    \"win-codesign-linux-arm64.zip\": \"535f318b8aac1c9487e0f8b58df0a4182103e303ccaca1c9d0ef20b1020e03ca\",\n    \"win-codesign-linux-i386.zip\": \"e432f2819f557f9d1175e26f374eec8a368eb23b519c12c690a969ce369966c5\",\n    \"win-codesign-windows-x64.zip\": \"47d78ed7e229e891866b0d0e10dde6df9617c32a89fc76a9e280ffabfc80e1fe\",\n    \"windows-kits-bundle-10_0_26100_0.zip\": \"f7e67213ce690386b2f0a58e3af986dbf223bc1b45ef4a75e77ff85f66b78c94\",\n  },\n  \"1.2.1\": {\n    \"rcedit-windows-2_0_0.zip\": \"1c2b68b9ae41229566c008ce98c4f6cd2b642ace85284e753d1d3509377f9e67\",\n    \"win-codesign-darwin-arm64.zip\": \"ac7c1d9279490fc88e9e744ed965ad7e1d377e0219142dab0ab49cfba3ede764\",\n    \"win-codesign-darwin-x86_64.zip\": \"7c4188bb301621cde22f918bb2d1a86ef9892ad401a40b7838b80efc9165547d\",\n    \"win-codesign-linux-amd64.zip\": \"69b94f71f9189ded6b962718df102e0ffe0a81d506351fecd3df3d73c7166e31\",\n    \"win-codesign-linux-arm64.zip\": \"c959031605a5ab994bfd9b84d37bc5bcaba8f39d54a6d69bd2541b2a91ecf723\",\n    \"win-codesign-linux-i386.zip\": \"fc937f40655b9839b67ed35cc7b571795b3f7b7b15db10c3026599db43f1c2b1\",\n    \"win-codesign-windows-arm64.zip\": \"96390eb3130e63ea9d3641ef076c941c6f51463125498cf53b2503e52c38082d\",\n    \"win-codesign-windows-x64.zip\": \"40b1d88ea074de58ddc7595a2b6d30ca23f81bcce33f110102304337538fcbeb\",\n    \"windows-kits-bundle-10_0_26100_0.zip\": \"9b198db76ae75b124169aef3369fb96c17b39dbf16f16f1264dbd9fd001d976f\",\n  },\n  \"1.3.0\": {\n    \"ats-bundle-1_0_95.zip\": \"93e1441cd8c60f7b7a57a3e0e20a2109994e33a7f42bd04c998204a1928f9f2f\", // new\n    \"dotnet-runtime-win-x64-8_0_28.zip\": \"71b9aa960ebaae196a62ec0bb1a4d224e1b48e18b6dc5eed89a37b28b72965ee\", // new\n    \"rcedit-windows-2_0_0.zip\": \"84ea279c5d94977fecffbe0f21b073318575dc631a3dae46fadb14309f2eef11\",\n    \"win-codesign-darwin-arm64.zip\": \"c5c1e1e106a5feff27d320c57856e362d8f605c09c7c02fc42d9309b72c56372\",\n    \"win-codesign-darwin-x86_64.zip\": \"4fd5af2c4c655257685fad1769457419e086ec0862ee36f893b3659e1788c8ca\",\n    \"win-codesign-linux-amd64.zip\": \"58c708762b3088a2c6c98494c4813e2a1d030a314a7958c77a2806d58e5efe95\",\n    \"win-codesign-linux-arm64.zip\": \"1e9dd1ae149a4e0c988b5529fb983d7a8265cd71e7f3fb5af4cce501005a670c\",\n    \"win-codesign-linux-i386.zip\": \"b5c3249fb565bb956a48aaff01bc1bbbd9acaf3c981960f2b754210f9df95cd9\",\n    \"win-codesign-windows-arm64.zip\": \"c707709440a07e400b4053d9bab77c9f335505c1701035c2aa8285d880360989\",\n    \"win-codesign-windows-x64.zip\": \"40d621aad7593e6298ce1d24798760dcefb053f358be891d74c95386ac2ac50b\",\n    \"windows-kits-bundle-10_0_26100_0.zip\": \"2eeb955e580103e1bbecf9666dca87b141c3bb73ad99ead64bb8821755694ecd\",\n  },\n} as const\n\ntype CodeSignVersionKey = keyof typeof wincodesignChecksums\n\nfunction _getWindowsToolsBin<V extends CodeSignVersionKey>(winCodeSign: V, file: keyof (typeof wincodesignChecksums)[V]): Promise<string> {\n  const filenameWithExt = file as string\n  return downloadBuilderToolset({\n    releaseName: `win-codesign@${winCodeSign}`,\n    filenameWithExt,\n    checksums: { [filenameWithExt]: wincodesignChecksums[winCodeSign][file] as string },\n  })\n}\n\nexport async function getSignToolPath(winCodeSign: ToolsetConfig[\"winCodeSign\"] | Nullish, isWin: boolean, resourcesDir: string): Promise<ToolInfo> {\n  if (isWin) {\n    return { path: await getWindowsSignToolExe({ winCodeSign, resourcesDir }) }\n  } else {\n    const vendor = await getOsslSigncodeBundle(winCodeSign, resourcesDir)\n    return { path: vendor.path, env: vendor.env }\n  }\n}\n\n/**\n * Resolve the Windows Kits bundle paths.\n *\n * The `kit` subdirectory holds HOST executables (`signtool.exe` / `makeappx.exe` / `makepri.exe`), so\n * it is always the x64 kit (x86 on 32-bit hosts) — never arm64. x64 binaries run on x64 hosts natively\n * and on arm64 Windows via emulation, whereas an arm64 binary cannot run on an x64 host and fails with\n * `spawn UNKNOWN`. The artifact's target arch is irrelevant here.\n * `appxAssets` is arch-independent (the bundle root).\n */\nexport async function getWindowsKitsBundle({ winCodeSign, resourcesDir }: { winCodeSign: ToolsetConfig[\"winCodeSign\"] | Nullish; resourcesDir?: string }) {\n  const kitArch = process.arch === \"ia32\" ? \"x86\" : \"x64\"\n  if (typeof winCodeSign === \"object\" && winCodeSign != null) {\n    const vendorPath = sanitizeDirPath(await getCustomToolsetPath(winCodeSign, resourcesDir), resourcesDir || undefined)\n    return { kit: path.join(vendorPath, kitArch), appxAssets: vendorPath }\n  }\n\n  const version = resolveToolsetVersion(winCodeSign, WIN_CODESIGN_LATEST)\n  if (version === \"0.0.0\") {\n    const vendorPath = sanitizeDirPath(await getLegacyWinCodeSignBin())\n    return { kit: path.join(vendorPath, \"windows-10\", kitArch), appxAssets: vendorPath }\n  }\n  const file = \"windows-kits-bundle-10_0_26100_0.zip\"\n  const vendorPath = sanitizeDirPath(await _getWindowsToolsBin(version, file))\n  return { kit: path.join(vendorPath, kitArch), appxAssets: vendorPath }\n}\n\nexport function isOldWin6() {\n  const winVersion = os.release()\n  return winVersion.startsWith(\"6.\") && !winVersion.startsWith(\"6.3\")\n}\n\n/**\n * True only for the explicit legacy winCodeSign pin (`\"0.0.0\"` → winCodeSign-2.6.0). That bundle lacks\n * the modern Windows Kits SDK (no MSIX-capable `makeappx`/`makepri`), so it cannot build MSIX — only the\n * MSIX target gates on this. AppX still builds fine with the legacy bundle (it has its own legacy-bundle\n * `signtool` handling in `getWindowsSignToolExe`). Unset / `null` / `\"latest\"` and any modern version pin\n * resolve to a modern bundle; a custom `{ url, … }` toolset is the caller's responsibility and is not\n * treated as legacy.\n */\nexport function isLegacyWinCodeSign(winCodeSign: ToolsetConfig[\"winCodeSign\"] | Nullish): boolean {\n  return typeof winCodeSign !== \"object\" && resolveToolsetVersion(winCodeSign, WIN_CODESIGN_LATEST) === \"0.0.0\"\n}\n\nasync function getWindowsSignToolExe({ winCodeSign, resourcesDir = \"\" }: { winCodeSign: ToolsetConfig[\"winCodeSign\"] | Nullish; resourcesDir?: string }) {\n  if (typeof winCodeSign !== \"object\" && resolveToolsetVersion(winCodeSign, WIN_CODESIGN_LATEST) === \"0.0.0\") {\n    // use modern signtool on Windows Server 2012 R2 to be able to sign AppX\n    const vendorPath = sanitizeDirPath(await getLegacyWinCodeSignBin())\n    if (isOldWin6()) {\n      return path.join(vendorPath, \"windows-6\", \"signtool.exe\")\n    } else {\n      return path.join(vendorPath, \"windows-10\", process.arch === \"ia32\" ? \"ia32\" : \"x64\", \"signtool.exe\")\n    }\n  }\n  // kit is already sanitized by getWindowsKitsBundle\n  const { kit } = await getWindowsKitsBundle({ winCodeSign, resourcesDir })\n  return path.join(kit, \"signtool.exe\")\n}\n\nasync function getOsslSigncodeBundle(winCodeSign: ToolsetConfig[\"winCodeSign\"] | Nullish, resourcesDir = \"\") {\n  // A custom toolset is an explicit user override — honored on every platform, before any platform default/fallback.\n  if (typeof winCodeSign === \"object\" && winCodeSign != null) {\n    const vendorPath = sanitizeDirPath(await getCustomToolsetPath(winCodeSign, resourcesDir), resourcesDir || undefined)\n    return { path: path.join(vendorPath, \"osslsigncode\") }\n  }\n\n  if (process.platform === \"win32\") {\n    // Unreachable in normal flow: osslsigncode is only requested when the host is not Windows (Windows signs via\n    // signtool). Kept as defense-in-depth — fail loudly instead of resolving a bare `osslsigncode` from $PATH.\n    throw new InvalidConfigurationError(\n      `osslsigncode is not used on Windows (signing uses signtool). To override, configure a custom toolset: toolsets: { winCodeSign: { url: \"file:///absolute/path/to/dir\" } }`\n    )\n  }\n\n  const version = resolveToolsetVersion(winCodeSign, WIN_CODESIGN_LATEST)\n  if (version === \"0.0.0\") {\n    const legacyBase = sanitizeDirPath(await getLegacyWinCodeSignBin())\n    const vendorBase = path.join(legacyBase, process.platform)\n    const vendorPath = process.platform === \"darwin\" ? path.join(vendorBase, \"10.12\") : vendorBase\n    return { path: path.join(vendorPath, \"osslsigncode\"), env: process.platform === \"darwin\" ? computeToolEnv([path.join(vendorPath, \"lib\")]) : undefined }\n  }\n\n  const file = (() => {\n    if (process.platform === \"linux\") {\n      if (process.arch == \"x64\") {\n        return \"win-codesign-linux-amd64.zip\"\n      } else if (process.arch === \"arm64\") {\n        return \"win-codesign-linux-arm64.zip\"\n      }\n      return \"win-codesign-linux-i386.zip\"\n    }\n    // darwin arm64\n    if (process.arch === \"arm64\") {\n      return \"win-codesign-darwin-arm64.zip\"\n    }\n    return \"win-codesign-darwin-x86_64.zip\"\n  })()\n  const vendorPath = sanitizeDirPath(await _getWindowsToolsBin(version, file))\n  return { path: path.join(vendorPath, \"osslsigncode\") }\n}\n\nexport async function getAtsBundleDir(winCodeSign: string): Promise<string> {\n  const version = winCodeSign === \"latest\" ? WIN_CODESIGN_LATEST : winCodeSign\n  const checksum = (wincodesignChecksums as Record<string, Record<string, string>>)[version]?.[\"ats-bundle-1_0_95.zip\"]\n  if (!checksum) {\n    throw new Error(`winCodeSign version \"${version}\" does not include an ATS bundle (requires >= 1.3.0)`)\n  }\n  return downloadBuilderToolset({\n    releaseName: `win-codesign@${version}`,\n    filenameWithExt: \"ats-bundle-1_0_95.zip\",\n    checksums: { \"ats-bundle-1_0_95.zip\": checksum },\n  })\n}\n\nexport async function getDotnetRuntimeDir(winCodeSign: string): Promise<string> {\n  const version = winCodeSign === \"latest\" ? WIN_CODESIGN_LATEST : winCodeSign\n  const checksum = (wincodesignChecksums as Record<string, Record<string, string>>)[version]?.[\"dotnet-runtime-win-x64-8_0_28.zip\"]\n  if (!checksum) {\n    throw new Error(`winCodeSign version \"${version}\" does not include a .NET runtime bundle (requires >= 1.3.0)`)\n  }\n  return downloadBuilderToolset({\n    releaseName: `win-codesign@${version}`,\n    filenameWithExt: \"dotnet-runtime-win-x64-8_0_28.zip\",\n    checksums: { \"dotnet-runtime-win-x64-8_0_28.zip\": checksum },\n  })\n}\n\nexport async function getRceditBundle(winCodeSign: ToolsetConfig[\"winCodeSign\"] | Nullish, resourcesDir = \"\") {\n  const ia32 = \"rcedit-ia32.exe\"\n  const x86 = \"rcedit-x86.exe\"\n  const x64 = \"rcedit-x64.exe\"\n  if (typeof winCodeSign === \"object\" && winCodeSign != null) {\n    const vendorPath = sanitizeDirPath(await getCustomToolsetPath(winCodeSign, resourcesDir), resourcesDir || undefined)\n    return { x86: path.join(vendorPath, x86), x64: path.join(vendorPath, x64) }\n  }\n  const version = resolveToolsetVersion(winCodeSign, WIN_CODESIGN_LATEST)\n  if (version === \"0.0.0\") {\n    const vendorPath = sanitizeDirPath(await getLegacyWinCodeSignBin())\n    return { x86: path.join(vendorPath, ia32), x64: path.join(vendorPath, x64) }\n  }\n  const file = \"rcedit-windows-2_0_0.zip\"\n  const vendorPath = sanitizeDirPath(await _getWindowsToolsBin(version, file))\n  return { x86: path.join(vendorPath, x86), x64: path.join(vendorPath, x64) }\n}\n"]}

package/dist/toolsets/wine.d.ts

@@ -1,5 +1,6 @@
+import { Nullish } from "builder-util-runtime";
 import { ToolsetConfig } from "../configuration.js";
-export declare function getWineToolset(wine: ToolsetConfig["wine"], resourcesDir: string): Promise<{
+export declare function getWineToolset(wine: ToolsetConfig["wine"] | Nullish, resourcesDir: string): Promise<{
     execPath: string;
     env: Record<string, string>;
 }>;

package/dist/toolsets/wine.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"wine.d.ts","sourceRoot":"","sources":["../../src/toolsets/wine.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AAgBnD,wBAAsB,cAAc,CAAC,IAAI,EAAE,aAAa,CAAC,MAAM,CAAC,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,CAAC,CAiDlJ"}
+{"version":3,"file":"wine.d.ts","sourceRoot":"","sources":["../../src/toolsets/wine.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAA;AAE9C,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AAmBnD,wBAAsB,cAAc,CAAC,IAAI,EAAE,aAAa,CAAC,MAAM,CAAC,GAAG,OAAO,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,CAAC,CAiD5J"}

package/dist/toolsets/wine.js

@@ -3,6 +3,8 @@ import * as path from "path";
 import { downloadBuilderToolset } from "../util/electronGet.js";
 import { getCustomToolsetPath } from "./custom.js";
 const githubOrgRepo = "electron-userland/electron-builder-binaries";
+// Newest wine bundle — selected when the config is unset / null / "latest".
+const WINE_LATEST = "1.0.1";
 const wineToolsChecksums = {
     "0.0.0": {
         "wine-4.0.1-mac.7z": "1baac808a67975b68b9226beea7b64ad0acc3e598a4b45c25bb5d2ae8cac655e",
@@ -28,27 +30,27 @@ export async function getWineToolset(wine, resourcesDir) {
         // Linux ships no portable bundle for string/null configs → fall back to the host wine binary.
         return { execPath: "wine", env: defaultEnv };
     }
-    else if (wine === "1.0.1") {
-        // Explicit opt-in to the bundled wine@1.0.1 (wine 11; arm64 macOS via Rosetta).
-        // Not the default yet — request it explicitly via `toolsets.wine = "1.0.1"`.
-        const file = process.platform === "darwin" ? "wine-11.0-darwin-x86_64.tar.xz" : "wine-11.0-linux-x86_64.tar.xz";
+    else if (wine === "0.0.0") {
+        // Explicit opt-in to the legacy wine-4.0.1-mac bundle (pre-v27).
         toolsetPath = await downloadBuilderToolset({
-            releaseName: "wine@1.0.1",
-            filenameWithExt: file,
-            checksums: wineToolsChecksums["1.0.1"],
+            releaseName: "wine-4.0.1-mac",
+            filenameWithExt: "wine-4.0.1-mac.7z",
+            checksums: wineToolsChecksums["0.0.0"],
             githubOrgRepo,
         });
-        execSubPath = (await exists(path.join(toolsetPath, "bin", "wine"))) ? "bin/wine" : "bin/wine64";
+        execSubPath = path.join("bin", "wine64");
     }
     else {
-        // Default (null / undefined) and "0.0.0" → legacy wine-4.0.1-mac bundle.
+        // Default (null / undefined / "latest") and explicit "1.0.1" → bundled wine@1.0.1
+        // (wine 11; arm64 macOS via Rosetta).
+        const file = process.platform === "darwin" ? "wine-11.0-darwin-x86_64.tar.xz" : "wine-11.0-linux-x86_64.tar.xz";
         toolsetPath = await downloadBuilderToolset({
-            releaseName: "wine-4.0.1-mac",
-            filenameWithExt: "wine-4.0.1-mac.7z",
-            checksums: wineToolsChecksums["0.0.0"],
+            releaseName: `wine@${WINE_LATEST}`,
+            filenameWithExt: file,
+            checksums: wineToolsChecksums[WINE_LATEST],
             githubOrgRepo,
         });
-        execSubPath = path.join("bin", "wine64");
+        execSubPath = (await exists(path.join(toolsetPath, "bin", "wine"))) ? "bin/wine" : "bin/wine64";
     }
     const { execPath, winePrefix, wineLibPath } = await createWineEnvironment(toolsetPath, execSubPath);
     return {