app-builder-lib 27.0.0-alpha.6 → 27.0.0-alpha.7

package/dist/targets/linux/snap/core24.js.map

@@ -1 +1 @@
-{"version":3,"file":"core24.js","sourceRoot":"","sources":["../../../../src/targets/linux/snap/core24.ts"],"names":[],"mappings":"AAAA,OAAO,EAAQ,cAAc,EAAE,OAAO,EAAE,yBAAyB,EAAE,GAAG,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAA;AAE9H,OAAO,EAAE,UAAU,EAAE,UAAU,EAAW,MAAM,sBAAsB,CAAA;AACtE,OAAO,QAAQ,MAAM,UAAU,CAAA;AAC/B,OAAO,KAAK,IAAI,MAAM,SAAS,CAAA;AAC/B,OAAO,KAAK,IAAI,MAAM,MAAM,CAAA;AAE5B,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAA;AAC1C,OAAO,EAAE,8BAA8B,EAAE,MAAM,kBAAkB,CAAA;AAEjE,OAAO,EAAE,SAAS,EAAE,sBAAsB,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAA;AACjG,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,QAAQ,CAAA;AAEnE,wFAAwF;AACxF,gGAAgG;AAChG,MAAM,cAAc,GAAG,gBAAgB,CAAA;AACvC,sGAAsG;AACtG,MAAM,qBAAqB,GAAG,YAAY,CAAA;AAE1C,wGAAwG;AACxG,MAAM,OAAO,UAAW,SAAQ,QAAuB;IAAvD;;QACE,qGAAqG;QACrG,oGAAoG;QACpG,iBAAY,GAAG,CAAC,SAAS,EAAE,gBAAgB,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,WAAW,EAAE,gBAAgB,EAAE,YAAY,EAAE,QAAQ,CAAC,CAAA;QAElJ,uBAAuB;QACvB,uEAAuE;QACvE,6DAA6D;QACpD,uBAAkB,GAAG,MAAM,CAAA;QAC3B,oBAAe,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,KAAK,CAAC,CAAA;QAEpE,0FAA0F;QAC1F,yFAAyF;QACzF,8BAA8B;QACtB,wBAAmB,GAAG,KAAK,CAAA;QACnC,iGAAiG;QACzF,gBAAW,GAAa,EAAE,CAAA;IA+fpC,CAAC;IA7fC,KAAK,CAAC,gBAAgB,CAAC,IAAU;QAC/B,OAAO,MAAM,IAAI,CAAC,6BAA6B,CAAC,IAAI,CAAC,CAAA;IACvD,CAAC;IAEO,UAAU;QAChB,OAAO,IAAI,CAAC,OAAO,CAAC,kBAAkB,KAAK,IAAI,CAAA;IACjD,CAAC;IAED,iHAAiH;IACjH,KAAK,CAAC,SAAS,CAAC,MAA0G;QACxH,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,GAAG,MAAM,CAAA;QAE1D,MAAM,eAAe,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,kBAAkB,CAAC,CAAA;QACvE,MAAM,iBAAiB,GAAG,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,gBAAgB,CAAC,CAAA;QAEtE,wDAAwD;QACxD,sFAAsF;QACtF,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,eAAe,CAAC,CAAA;QAC9D,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAE3C,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,sBAAsB,CAAC,CAAA;QAC3D,MAAM,SAAS,CAAC,iBAAiB,EAAE,WAAW,EAAE,MAAM,CAAC,CAAA;QACvD,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,0BAA0B,CAAC,CAAA;QAE3C,mCAAmC;QACnC,wEAAwE;QACxE,MAAM,iBAAiB,GAA2B,EAAE,CAAA;QACpD,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAA;QACpC,IAAI,IAAI,EAAE,CAAC;YACT,MAAM,YAAY,GAAG,GAAG,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAA;YACxD,MAAM,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC,CAAA;YACpD,iFAAiF;YACjF,iBAAiB,CAAC,IAAI,GAAG,qBAAqB,YAAY,EAAE,CAAA;QAC9D,CAAC;QAED,6CAA6C;QAC7C,wEAAwE;QACxE,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;QACpG,MAAM,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,cAAc,GAAG,KAAK,EAAE,eAAe,EAAE,iBAAiB,CAAC,CAAA;QAE3H,sEAAsE;QACtE,oEAAoE;QACpE,0DAA0D;QAC1D,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAA;QAC5C,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;YACrD,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,EAAE,iDAAiD,CAAC,CAAA;YACzH,MAAM,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,CAAA;QAClC,CAAC;QAED,+FAA+F;QAC/F,gFAAgF;QAChF,IAAI,IAAI,CAAC,mBAAmB,EAAE,CAAC;YAC7B,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC,CAAA;QACjD,CAAC;QAED,sFAAsF;QACtF,8FAA8F;QAC9F,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAA;QAC7D,MAAM,SAAS,CAAC,YAAY,EAAE,8BAA8B,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,IAAI,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;QAClJ,MAAM,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,CAAA;QAEhC,wEAAwE;QACxE,yEAAyE;QACzE,sEAAsE;QACtE,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YACrC,IAAI,OAAO,EAAE,CAAC;gBACZ,MAAM,OAAO,GAAG,CAAC,MAAM,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;gBACjD,sFAAsF;gBACtF,0FAA0F;gBAC1F,uFAAuF;gBACvF,MAAM,QAAQ,GAA2B,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAA;gBAC7F,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;oBAC5B,IAAI,CAAC,KAAK,EAAE,CAAC;wBACX,SAAQ;oBACV,CAAC;oBACD,sFAAsF;oBACtF,8DAA8D;oBAC9D,IAAI,IAAI,CAAC,mBAAmB,IAAI,KAAK,KAAK,cAAc,EAAE,CAAC;wBACzD,SAAQ;oBACV,CAAC;oBACD,2FAA2F;oBAC3F,sFAAsF;oBACtF,sDAAsD;oBACtD,IAAI,KAAK,KAAK,qBAAqB,EAAE,CAAC;wBACpC,SAAQ;oBACV,CAAC;oBACD,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;wBACpB,SAAQ;oBACV,CAAC;oBACD,QAAQ,CAAC,KAAK,CAAC,GAAG,OAAO,KAAK,EAAE,CAAA;gBAClC,CAAC;gBACD,OAAO,CAAC,QAAQ,GAAG,QAAQ,CAAA;gBAE3B,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,sBAAsB,CAAC,CAAA;gBAC3D,MAAM,SAAS,CAAC,iBAAiB,EAAE,WAAW,EAAE,MAAM,CAAC,CAAA;gBACvD,GAAG,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,EAAE,8CAA8C,CAAC,CAAA;YACzE,CAAC;QACH,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,gDAAgD,CAAC,CAAA;QAClF,CAAC;QAED,MAAM,SAAS,GAAG;YAChB,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,IAAI;YACpC,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,YAAY,KAAK,IAAI;YAChD,kBAAkB,EAAE,IAAI,CAAC,OAAO,CAAC,kBAAkB,KAAK,IAAI;YAC5D,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW,IAAI,SAAS;SACnD,CAAA;QAED,IAAI,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,uBAAuB,IAAI,IAAI,EAAE,CAAC;YAClE,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,uBAAuB,CAAC,EAAE,IAAI,EAAE,GAAG,SAAS,EAAE,CAAC,CAAA;YACtG,IAAI,UAAU,EAAE,CAAC;gBACf,OAAO,CAAC,YAAY,CAAC,CAAA;YACvB,CAAC;QACH,CAAC;QAED,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAA;QAClD,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC;YAC5B,eAAe,EAAE,IAAI;YACrB,YAAY;YACZ,QAAQ;YACR,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,OAAO,EAAE,WAAW,EAAE,OAAO;YAC7B,GAAG,SAAS;SACb,CAAC,CAAA;QACF,OAAO,KAAK,CAAA;IACd,CAAC;IAED,4GAA4G;IAC5G,KAAK,CAAC,6BAA6B,CAAC,IAAU;QAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAA;QACrC,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,WAAW,EAAE,CAAA;QAC1D,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAA;QAE5B,2FAA2F;QAC3F,gGAAgG;QAChG,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,EAAE,CAAA;QAClC,MAAM,cAAc,GAAa,OAAO,CAAC,UAAU,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAA;QACjH,IAAI,QAAQ,IAAI,cAAc,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YACjD,MAAM,IAAI,yBAAyB,CACjC,sFAAsF;gBACpF,6EAA6E;gBAC7E,4EAA4E;gBAC5E,mCAAmC;gBACnC,sFAAsF;gBACtF,0CAA0C;gBAC1C,yFAAyF;gBACzF,gFAAgF;gBAChF,gDAAgD,CACnD,CAAA;QACH,CAAC;QACD,MAAM,kBAAkB,GAAG,cAAc,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAA;QACjF,MAAM,iBAAiB,GAAG,cAAc,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAA;QAE1D,sBAAsB;QACtB,MAAM,OAAO,GAAS;YACpB,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,KAAK;YACb,gBAAgB,EAAE,OAAO,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS;YACnF,gBAAgB,EAAE,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC,aAAa,EAAE,sBAAsB,CAAC;YAC3F,KAAK,EAAE,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;YACpD,KAAK,EAAE,OAAO,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS;SACvE,CAAA;QAED,0BAA0B;QAC1B,gFAAgF;QAChF,oFAAoF;QACpF,IAAI,SAA0C,CAAA;QAC9C,IAAI,QAA8B,CAAA;QAElC,IAAI,iBAAiB,EAAE,CAAC;YACtB,gEAAgE;YAChE,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,CAAA;YAC3G,SAAS,GAAG,MAAM,CAAC,IAAI,CAAA;YACvB,wEAAwE;YACxE,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAA;QACvB,CAAC;aAAM,CAAC;YACN,wDAAwD;YACxD,MAAM,gBAAgB,GAAwB;gBAC5C,cAAc,EAAE;oBACd,SAAS,EAAE,SAAS;oBACpB,MAAM,EAAE,uBAAuB;oBAC/B,kBAAkB,EAAE,mBAAmB;iBACxC;gBACD,aAAa,EAAE;oBACb,SAAS,EAAE,SAAS;oBACpB,MAAM,EAAE,sBAAsB;oBAC9B,kBAAkB,EAAE,mBAAmB;iBACxC;gBACD,cAAc,EAAE;oBACd,SAAS,EAAE,SAAS;oBACpB,MAAM,EAAE,uBAAuB;oBAC/B,kBAAkB,EAAE,mBAAmB;iBACxC;gBACD,eAAe,EAAE;oBACf,SAAS,EAAE,SAAS;oBACpB,MAAM,EAAE,sBAAsB;oBAC9B,kBAAkB,EAAE,eAAe;iBACpC;gBACD,UAAU,EAAE;oBACV,SAAS,EAAE,SAAS;oBACpB,MAAM,EAAE,gBAAgB;oBACxB,kBAAkB,EAAE,WAAW;iBAChC;aACF,CAAA;YAED,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK;gBAC1B,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,KAAK,CAAC;gBACxC,CAAC,CAAC,QAAQ;oBACR,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,IAAI,CAAC,YAAY,EAAE;oBAC7C,CAAC,CAAC;wBACE,IAAI,EAAE,gBAAgB;wBACtB,GAAG,EAAE,IAAI,CAAC,YAAY;qBACvB,CAAA;YACP,SAAS,GAAG,MAAM,CAAC,IAAI,CAAA;YACvB,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAA;QACvB,CAAC;QAED,+EAA+E;QAC/E,oFAAoF;QACpF,sFAAsF;QACtF,gFAAgF;QAChF,qEAAqE;QACrE,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YACnB,SAAS,GAAG,EAAE,GAAG,SAAS,EAAE,iBAAiB,EAAE,EAAE,SAAS,EAAE,iBAAiB,EAAE,eAAe,EAAE,IAAI,EAAE,EAAE,CAAA;YACxG,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC;gBAC3C,QAAQ,GAAG,CAAC,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,iBAAiB,CAAC,CAAA;YACrD,CAAC;QACH,CAAC;QAED,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,CAAA;QAEvI,qDAAqD;QACrD,mFAAmF;QACnF,kFAAkF;QAClF,wDAAwD;QACxD,MAAM,SAAS,GAAa,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,CAAA;QACpE,IAAI,IAAI,CAAC,OAAO,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;YACnC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,sBAAsB,CAAC,EAAE,CAAC;gBAChD,SAAS,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAA;YACxC,CAAC;QACH,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,mCAAmC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,uBAAuB,CAAC,SAAS,CAAC,CAAA;QACtH,IAAI,SAAS,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;YACrD,SAAS,CAAC,IAAI,CAAC,cAAc,CAAC,CAAA;QAChC,CAAC;QACD,wFAAwF;QACxF,IAAI,CAAC,mBAAmB,GAAG,SAAS,CAAA;QAEpC,gGAAgG;QAChG,2FAA2F;QAC3F,+DAA+D;QAC/D,IAAI,CAAC,WAAW,GAAG,SAAS,CAAA;QAE5B,+BAA+B;QAC/B,MAAM,eAAe,GAAG,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAA;QAC/D,MAAM,GAAG,GAAQ;YACf,OAAO,EAAE,qBAAqB;YAC9B,eAAe,EAAE,SAAS,EAAE,6FAA6F;YACzH,KAAK,EAAE,QAAQ;YACf,KAAK,EAAE,QAAQ;YACf,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,eAAe,UAAU,CAAC,CAAC,CAAC,SAAS;YACvE,OAAO,EAAE,YAAY,eAAe,UAAU;YAC9C,UAAU,EAAE,kBAAkB;SAC/B,CAAA;QAED,mFAAmF;QACnF,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAA;QACvB,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,IAAI,CAAC,CAAC,CAAC,YAAY,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAA;QAE5H,8BAA8B;QAC9B,MAAM,WAAW,GAAG,OAAO,CAAC,KAAK,CAAA;QACjC,MAAM,KAAK,GAAG,WAAW,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;QAE5E,0EAA0E;QAC1E,6DAA6D;QAC7D,MAAM,KAAK,GAAyB;YAClC,CAAC,OAAO,CAAC,EAAE,OAAO;SACnB,CAAA;QAED,uEAAuE;QACvE,oEAAoE;QACpE,8DAA8D;QAE9D,oCAAoC;QACpC,MAAM,SAAS,GAAkB;YAC/B,kBAAkB;YAClB,IAAI,EAAE,OAAO;YACb,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,QAAQ;YAC5C,KAAK,EAAE,KAAK;YAEZ,yEAAyE;YACzE,qEAAqE;YACrE,GAAG,CAAC,IAAI,KAAK,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC;gBACvC,CAAC,CAAC;oBACE,SAAS,EAAE;wBACT,CAAC,iBAAiB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,EAAE;4BACjC,WAAW,EAAE,iBAAiB,CAAC,IAAI,EAAE,MAAM,CAAC;4BAC5C,UAAU,EAAE,iBAAiB,CAAC,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;yBACpE;qBACF;iBACF;gBACH,CAAC,CAAC,EAAE,CAAC;YAEP,yCAAyC;YACzC,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,WAAW;YAC/C,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,OAAO,CAAC;YAChD,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,QAAQ;YAChC,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,WAAW;YAC3C,IAAI,EAAE,QAAQ;YAEd,sBAAsB;YACtB,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,SAAS;YAC7C,OAAO,EAAE,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC,OAAO,CAAC;YAEnD,cAAc;YACd,WAAW,EAAE,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC;YAE3C,sHAAsH;YACtH,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,CAAC,iBAAiB,IAAI,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;YAExG,aAAa;YACb,KAAK,EAAE,SAAS;YAChB,KAAK,EAAE,SAAS;YAEhB,QAAQ;YACR,KAAK,EAAE,KAAK;YAEZ,OAAO;YACP,IAAI,EAAE;gBACJ,CAAC,OAAO,CAAC,EAAE,GAAG;aACf;SACF,CAAA;QAED,OAAO,aAAa,CAAC,SAAS,CAAC,CAAA;IACjC,CAAC;IAED;;OAEG;IACK,gBAAgB,CAAC,OAAsB;QAC7C,MAAM,GAAG,GAAkC,EAAE,CAAA;QAE7C,gDAAgD;QAChD,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,MAAM,EAAE,CAAC;YACjC,GAAG,CAAC,MAAM,GAAG,kBAAkB,CAAA;QACjC,CAAC;QAED,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;YACxB,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,WAAW,CAAC,CAAA;QACtC,CAAC;QAED,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAA;IACtD,CAAC;IAED;;;OAGG;IACK,kBAAkB,CAAC,OAAsB;QAC/C,mDAAmD;QACnD,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,OAAO,OAAO,CAAC,MAAM,CAAA;QACvB,CAAC;QAED,sFAAsF;QACtF,OAAO;YACL,uDAAuD,EAAE;gBACvD,IAAI,EAAE,2EAA2E;aAClF;YACD,uDAAuD,EAAE;gBACvD,IAAI,EAAE,2EAA2E;aAClF;YACD,0BAA0B,EAAE;gBAC1B,IAAI,EAAE,8CAA8C;aACrD;YACD,mBAAmB,EAAE;gBACnB,IAAI,EAAE,uBAAuB;aAC9B;YACD,oBAAoB,EAAE;gBACpB,OAAO,EAAE,wBAAwB;aAClC;SACF,CAAA;IACH,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,YAAY,CAAC,SAAiB;QAC1C,IAAI,CAAC;YACH,MAAM,iBAAiB,GAAG,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAA;YACzD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,iBAAiB,EAAE,SAAS,CAAC,CAAA;YAC3D,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,iBAAiB,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,KAAK,iBAAiB,EAAE,CAAC;gBACzF,MAAM,IAAI,yBAAyB,CAAC,kFAAkF,QAAQ,IAAI,CAAC,CAAA;YACrI,CAAC;YACD,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,CAAA;YAEzC,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC3B,OAAO,SAAS,CAAA;YAClB,CAAC;YAED,MAAM,KAAK,GAAwB,EAAE,CAAA;YACrC,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;gBACjC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAA;gBAChE,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAC1B,MAAM,IAAI,yBAAyB,CAAC,sBAAsB,QAAQ,EAAE,CAAC,CAAA;gBACvE,CAAC;gBACD,KAAK,CAAC,QAAQ,CAAC,GAAG;gBAChB,iEAAiE;gBACjE,uCAAuC;iBACxC,CAAA;YACH,CAAC;YAED,OAAO,KAAK,CAAA;QACd,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,GAAG,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,uCAAuC,CAAC,CAAA;YAC1E,MAAM,CAAC,CAAA;QACT,CAAC;IACH,CAAC;IAED;;OAEG;IACH,oBAAoB,CAAC,OAAyC;QAC5D,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,SAAS,CAAA;QAClB,CAAC;QACD,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAChC,OAAO,CAAC,OAAO,CAAC,CAAA;QAClB,CAAC;QACD,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAA;IACjD,CAAC;IAED;;OAEG;IACH,kBAAkB,CAChB,KAAQ;QAKR,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,EAAE,CAAC;YAC3D,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,CAAA;QAC5C,CAAC;QACD,MAAM,IAAI,GAA4B,EAAE,CAAA;QACxC,MAAM,GAAG,GAAa,EAAE,CAAA;QAExB,kCAAkC;QAClC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1B,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE;gBAC/C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;oBACtB,MAAM,IAAI,KAAK,CAAC,2BAA2B,IAAI,EAAE,CAAC,CAAA;gBACpD,CAAC;gBACD,IAAI,CAAC,IAAI,CAAC,GAAG,MAAM,CAAA;gBACnB,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YAChB,CAAC,CAAC,CAAA;YACF,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAA;QACtB,CAAC;QAED,2CAA2C;QAC3C,MAAM,cAAc,GAAG,IAAI,CAAC,qBAAqB,CAAC,KAAK,EAAE,IAAI,CAAC,YAAY,CAAC,CAAA;QAC3E,KAAK,MAAM,IAAI,IAAI,cAAc,IAAI,EAAE,EAAE,CAAC;YACxC,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC7B,0BAA0B;gBAC1B,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YAChB,CAAC;iBAAM,CAAC;gBACN,uCAAuC;gBACvC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE;oBAC9C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;wBACtB,MAAM,IAAI,KAAK,CAAC,2BAA2B,IAAI,EAAE,CAAC,CAAA;oBACpD,CAAC;oBACD,IAAI,CAAC,IAAI,CAAC,GAAG,MAAM,CAAA;oBACnB,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;gBAChB,CAAC,CAAC,CAAA;YACJ,CAAC;QACH,CAAC;QAED,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,GAAG,EAAE,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,EAAE,CAAA;IACzG,CAAC;IAEO,uBAAuB,CAAC,KAAsC;QACpE,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,KAAK,CAAA;QACd,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YACxC,IAAI,IAAI,EAAE,SAAS,KAAK,iBAAiB,IAAI,IAAI,CAAC,eAAe,CAAC,KAAK,IAAI,EAAE,CAAC;gBAC5E,OAAO,IAAI,CAAA;YACb,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAA;IACd,CAAC;IAED;;OAEG;IACK,qBAAqB,CAAI,KAAoB,EAAE,QAAa;QAClE,MAAM,MAAM,GAAa,EAAE,CAAA;QAC3B,KAAK,MAAM,IAAI,IAAI,KAAK,IAAI,EAAE,EAAE,CAAC;YAC/B,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBACnD,MAAM,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,CAAA;YAC1B,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YACnB,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAA;IAC/C,CAAC;CACF","sourcesContent":["import { Arch, archFromString, copyDir, InvalidConfigurationError, log, removeNullish, toLinuxArchString } from \"builder-util\"\n\nimport { deepAssign, isValidKey, Nullish } from \"builder-util-runtime\"\nimport _fsExtra from \"fs-extra\"\nimport * as yaml from \"js-yaml\"\nimport * as path from \"path\"\nimport { PlugDescriptor, SlotDescriptor, SnapOptions24 } from \"../../../options/SnapOptions.js\"\nimport { SnapCore } from \"./SnapTarget.js\"\nimport { buildSnapCommandLauncherScript } from \"./snapCommand.js\"\nimport { App, Part, SnapcraftYAML } from \"./snapcraft.js\"\nimport { buildSnap, DEFAULT_STAGE_PACKAGES, SNAPCRAFT_YAML_OPTIONS } from \"./snapcraftBuilder.js\"\nconst { chmod, copy, mkdir, readdir, remove, writeFile } = _fsExtra\n\n// Electron's setuid sandbox helper. Removed from the staged app when the snap runs with\n// `--no-sandbox` (snap confinement supplies its own sandbox via the browser-support interface).\nconst CHROME_SANDBOX = \"chrome-sandbox\"\n// Launcher script name used when the app command cannot be expressed inline (see resolveSnapCommand).\nconst SNAP_COMMAND_LAUNCHER = \"command.sh\"\n\n/** Snap build strategy for core24 — generates a native snapcraft.yaml and invokes the snapcraft CLI. */\nexport class SnapCore24 extends SnapCore<SnapOptions24> {\n  // browser-support is intentionally absent here; it is auto-injected in mapSnapOptionsToSnapcraftYAML\n  // when the user has not provided custom plugs, so it always lands in both root plugs and app plugs.\n  defaultPlugs = [\"desktop\", \"desktop-legacy\", \"home\", \"x11\", \"wayland\", \"unity7\", \"network\", \"gsettings\", \"audio-playback\", \"pulseaudio\", \"opengl\"]\n\n  // Snap file hierarchy:\n  // - snap/gui/ gets automatically copied to meta/gui/ in the final snap\n  // - Desktop files in meta/gui/ are used for menu integration\n  readonly configRelativePath = \"snap\"\n  readonly guiRelativePath = path.join(this.configRelativePath, \"gui\")\n\n  // Computed in createDescriptor (mapSnapOptionsToSnapcraftYAML) and consumed in buildSnap.\n  // getSnapCore() returns a fresh SnapCore24 per arch build, so this per-instance state is\n  // never shared across builds.\n  private removeChromeSandbox = false\n  // Args embedded into the generated launcher script (executableArgs + forceX11/no-sandbox flags).\n  private commandArgs: string[] = []\n\n  async createDescriptor(arch: Arch): Promise<SnapcraftYAML> {\n    return await this.mapSnapOptionsToSnapcraftYAML(arch)\n  }\n\n  private isHostMode(): boolean {\n    return this.options.useDestructiveMode === true\n  }\n\n  /** Writes the snapcraft.yaml, stages app files, then invokes `buildSnap()` to run the actual snapcraft build. */\n  async buildSnap(params: { snap: SnapcraftYAML; appOutDir: string; stageDir: string; snapArch: Arch; artifactPath: string }): Promise<string[]> {\n    const { snap, appOutDir, stageDir, artifactPath } = params\n\n    const snapDirResolved = path.resolve(stageDir, this.configRelativePath)\n    const snapcraftYamlPath = path.join(snapDirResolved, \"snapcraft.yaml\")\n\n    // Create snap/gui directory for desktop files and icons\n    // Snapcraft will automatically copy snap/gui/ contents to meta/gui/ in the final snap\n    const guiOutput = path.resolve(stageDir, this.guiRelativePath)\n    await mkdir(guiOutput, { recursive: true })\n\n    const yamlContent = yaml.dump(snap, SNAPCRAFT_YAML_OPTIONS)\n    await writeFile(snapcraftYamlPath, yamlContent, \"utf8\")\n    log.debug(snap, \"generated snapcraft.yaml\")\n\n    // Copy icon to snap/gui/ directory\n    // Snapcraft will automatically copy this to meta/gui/ in the final snap\n    const desktopExtraProps: Record<string, string> = {}\n    const icon = this.helper.maxIconPath\n    if (icon) {\n      const iconFileName = `${snap.name}${path.extname(icon)}`\n      await copy(icon, path.join(guiOutput, iconFileName))\n      // Icon path will be available at ${SNAP}/meta/gui/<icon-file> after installation\n      desktopExtraProps.Icon = `\\${SNAP}/meta/gui/${iconFileName}`\n    }\n\n    // Create desktop file in snap/gui/ directory\n    // Snapcraft will automatically copy this to meta/gui/ in the final snap\n    const desktopFilePath = path.join(guiOutput, `${this.helper.getDesktopFileName(snap.name)}.desktop`)\n    await this.helper.writeDesktopEntry(this.options, this.packager.executableName + \" %U\", desktopFilePath, desktopExtraProps)\n\n    // Copy app files to the project root `app` directory so `source: app`\n    // in the generated `snapcraft.yaml` (which is under `snap/`) can be\n    // resolved by snapcraft running in the build environment.\n    const appDir = path.resolve(stageDir, \"app\")\n    if (path.resolve(appDir) !== path.resolve(appOutDir)) {\n      log.debug({ to: log.filePath(appDir), from: log.filePath(appOutDir) }, \"copying app files to project root app directory\")\n      await copyDir(appOutDir, appDir)\n    }\n\n    // Drop the setuid chrome-sandbox helper before snapcraft stages the app — it is unusable under\n    // strict confinement when launching with --no-sandbox (mirrors SnapCoreLegacy).\n    if (this.removeChromeSandbox) {\n      await remove(path.join(appDir, CHROME_SANDBOX))\n    }\n\n    // Write the launcher script the command always points at (see SNAP_COMMAND_LAUNCHER).\n    // It lands at the snap root ($SNAP/command.sh) — it is intentionally not added to `organize`.\n    const launcherPath = path.join(appDir, SNAP_COMMAND_LAUNCHER)\n    await writeFile(launcherPath, buildSnapCommandLauncherScript({ execName: this.packager.executableName, args: this.commandArgs }), { mode: 0o755 })\n    await chmod(launcherPath, 0o755)\n\n    // Auto-generate `organize` mapping for the app part so top-level helper\n    // binaries and resources are placed under `app/` inside the snap. Update\n    // the already-written `snapcraft.yaml` so the build sees the mapping.\n    try {\n      const appPart = snap.parts[snap.name]\n      if (appPart) {\n        const entries = (await readdir(appOutDir)).sort()\n        // Null-prototype map: entry names come from the filesystem, so a top-level file named\n        // \"__proto__\" / \"constructor\" / \"toString\" must not read inherited keys (which would make\n        // the membership check below skip it) or interact with Object.prototype on assignment.\n        const organize: Record<string, string> = Object.assign(Object.create(null), appPart.organize)\n        for (const entry of entries) {\n          if (!entry) {\n            continue\n          }\n          // Skip files no longer present in the staged app dir (e.g. removed chrome-sandbox) so\n          // snapcraft doesn't fail trying to organize a missing source.\n          if (this.removeChromeSandbox && entry === CHROME_SANDBOX) {\n            continue\n          }\n          // Never organize the launcher under app/. It must stay at the snap root ($SNAP/command.sh)\n          // to match apps.<name>.command. This matters when appOutDir === appDir, where readdir\n          // would otherwise pick up the launcher we just wrote.\n          if (entry === SNAP_COMMAND_LAUNCHER) {\n            continue\n          }\n          if (organize[entry]) {\n            continue\n          }\n          organize[entry] = `app/${entry}`\n        }\n        appPart.organize = organize\n\n        const updatedYaml = yaml.dump(snap, SNAPCRAFT_YAML_OPTIONS)\n        await writeFile(snapcraftYamlPath, updatedYaml, \"utf8\")\n        log.debug({ organize }, \"updated snapcraft.yaml with organize mapping\")\n      }\n    } catch (e: any) {\n      log.warn({ error: e.message }, \"failed to generate and update organize mapping\")\n    }\n\n    const buildMode = {\n      useLXD: this.options.useLXD === true,\n      useMultipass: this.options.useMultipass === true,\n      useDestructiveMode: this.options.useDestructiveMode === true,\n      remoteBuild: this.options.remoteBuild || undefined,\n    }\n\n    if (this.packager.packagerOptions.effectiveOptionComputed != null) {\n      const shouldSkip = await this.packager.packagerOptions.effectiveOptionComputed({ snap, ...buildMode })\n      if (shouldSkip) {\n        return [artifactPath]\n      }\n    }\n\n    const rootOptions = this.packager.config.snapcraft\n    const snaps = await buildSnap({\n      snapcraftConfig: snap,\n      artifactPath,\n      stageDir,\n      packager: this.packager,\n      cscLink: rootOptions?.cscLink,\n      ...buildMode,\n    })\n    return snaps\n  }\n\n  /** Converts `SnapOptions24` into a fully resolved `SnapcraftYAML` descriptor for the given architecture. */\n  async mapSnapOptionsToSnapcraftYAML(arch: Arch): Promise<SnapcraftYAML> {\n    const appInfo = this.packager.appInfo\n    const appName = this.packager.executableName.toLowerCase()\n    const options = this.options\n\n    // Default to [\"gnome\"] in normal builds; no extensions in host/destructive-mode (where the\n    // gnome extension is incompatible). Throw if the user explicitly includes \"gnome\" in host mode.\n    const hostMode = this.isHostMode()\n    const extensionsList: string[] = options.extensions != null ? [...options.extensions] : hostMode ? [] : [\"gnome\"]\n    if (hostMode && extensionsList.includes(\"gnome\")) {\n      throw new InvalidConfigurationError(\n        `The \"gnome\" snapcraft extension is incompatible with host/destructive-mode builds.\\n` +\n          `In this mode snapcraft cannot resolve the extension's command-chain source ` +\n          `(/usr/share/snapcraft/extensions/desktop/command-chain) and will fail.\\n\\n` +\n          `To resolve this, choose one of:\\n` +\n          `  1. Remove \"gnome\" from snapcraft.core24.extensions (or set it to []) and add any\\n` +\n          `     required stage-packages manually.\\n` +\n          `  2. Switch to an isolated build environment by setting snapcraft.core24.useLXD: true\\n` +\n          `     or snapcraft.core24.useMultipass: true instead of useDestructiveMode.\\n\\n` +\n          `See: https://snapcraft.io/docs/gnome-extension`\n      )\n    }\n    const resolvedExtensions = extensionsList.length > 0 ? extensionsList : undefined\n    const useGnomeExtension = extensionsList.includes(\"gnome\")\n\n    // Create the app part\n    const appPart: Part = {\n      plugin: \"dump\",\n      source: \"app\",\n      \"build-packages\": options.buildPackages?.length ? options.buildPackages : undefined,\n      \"stage-packages\": this.expandDefaultsInArray(options.stagePackages, DEFAULT_STAGE_PACKAGES),\n      after: this.expandDefaultsInArray(options.after, []),\n      stage: options.appPartStage?.length ? options.appPartStage : undefined,\n    }\n\n    // Process plugs and slots\n    // When using GNOME extension, we don't need to manually configure content snaps\n    // The extension will handle: gnome-46-2404, gtk-3-themes, icon-themes, sound-themes\n    let rootPlugs: Record<string, any> | undefined\n    let appPlugs: string[] | undefined\n\n    if (useGnomeExtension) {\n      // With GNOME extension, only process user-provided custom plugs\n      const result = options.plugs ? this.processPlugOrSlots(options.plugs) : { root: undefined, app: undefined }\n      rootPlugs = result.root\n      // Extension automatically adds common plugs, so we only add custom ones\n      appPlugs = result.app\n    } else {\n      // Without GNOME extension, we need manual content snaps\n      const defaultRootPlugs: Record<string, any> = {\n        \"gtk-3-themes\": {\n          interface: \"content\",\n          target: \"$SNAP/data-dir/themes\",\n          \"default-provider\": \"gtk-common-themes\",\n        },\n        \"icon-themes\": {\n          interface: \"content\",\n          target: \"$SNAP/data-dir/icons\",\n          \"default-provider\": \"gtk-common-themes\",\n        },\n        \"sound-themes\": {\n          interface: \"content\",\n          target: \"$SNAP/data-dir/sounds\",\n          \"default-provider\": \"gtk-common-themes\",\n        },\n        \"gnome-46-2404\": {\n          interface: \"content\",\n          target: \"$SNAP/gnome-platform\",\n          \"default-provider\": \"gnome-46-2404\",\n        },\n        \"gpu-2404\": {\n          interface: \"content\",\n          target: \"$SNAP/gpu-2404\",\n          \"default-provider\": \"mesa-2404\",\n        },\n      }\n\n      const result = options.plugs\n        ? this.processPlugOrSlots(options.plugs)\n        : hostMode\n          ? { root: undefined, app: this.defaultPlugs }\n          : {\n              root: defaultRootPlugs,\n              app: this.defaultPlugs,\n            }\n      rootPlugs = result.root\n      appPlugs = result.app\n    }\n\n    // Always add browser-support with allow-sandbox so Chromium's internal sandbox\n    // can create user namespaces under strict confinement.  Without allow-sandbox: true\n    // the app crashes immediately with \"FATAL: Permission denied (13)\" in credentials.cc.\n    // Skip the injection only when the user has explicitly provided their own plugs\n    // (they are responsible for including browser-support in that case).\n    if (!options.plugs) {\n      rootPlugs = { ...rootPlugs, \"browser-support\": { interface: \"browser-support\", \"allow-sandbox\": true } }\n      if (!appPlugs?.includes(\"browser-support\")) {\n        appPlugs = [...(appPlugs ?? []), \"browser-support\"]\n      }\n    }\n\n    const { root: rootSlots, app: appSlots } = options.slots ? this.processPlugOrSlots(options.slots) : { root: undefined, app: undefined }\n\n    // Build the effective arg list for the snap command.\n    // Start with any user-supplied executableArgs, then conditionally add --no-sandbox\n    // if browser-support with allow-sandbox:true is not present in the resolved plugs\n    // (mirrors the same logic in SnapCoreLegacy.buildSnap).\n    const extraArgs: string[] = [...(this.options.executableArgs ?? [])]\n    if (this.options.forceX11 === true) {\n      if (!extraArgs.includes(\"--ozone-platform=x11\")) {\n        extraArgs.push(\"--ozone-platform=x11\")\n      }\n    }\n    const noSandbox = this.helper.isElectronVersionGreaterOrEqualThan(\"5.0.0\") && !this.isBrowserSandboxAllowed(rootPlugs)\n    if (noSandbox && !extraArgs.includes(\"--no-sandbox\")) {\n      extraArgs.push(\"--no-sandbox\")\n    }\n    // With --no-sandbox the setuid chrome-sandbox helper is unused; strip it from the snap.\n    this.removeChromeSandbox = noSandbox\n\n    // The command always points at a generated launcher script (written in buildSnap). This keeps a\n    // single uniform command path and sidesteps snapd's character/word-splitting rules for the\n    // command field (e.g. --ozone-platform=x11, --js-flags=\"...\").\n    this.commandArgs = extraArgs\n\n    // Create the app configuration\n    const desktopBaseName = this.helper.getDesktopFileName(appName)\n    const app: App = {\n      command: SNAP_COMMAND_LAUNCHER,\n      \"command-chain\": undefined, // explicitly undefined so removeNullish strips it; extensions supply their own command-chain\n      plugs: appPlugs,\n      slots: appSlots,\n      autostart: options.autoStart ? `${desktopBaseName}.desktop` : undefined,\n      desktop: `meta/gui/${desktopBaseName}.desktop`,\n      extensions: resolvedExtensions,\n    }\n\n    // Icon path — build-time relative path so snapcraft can find the file in snap/gui/\n    await this.helper.icons\n    const iconPath = this.helper.maxIconPath != null ? `snap/gui/${appName}${path.extname(this.helper.maxIconPath)}` : undefined\n\n    // Process hooks if configured\n    const hooksConfig = options.hooks\n    const hooks = hooksConfig ? await this.processHooks(hooksConfig) : undefined\n\n    // Parts configuration - the extension automatically adds a gnome/sdk part\n    // Don't manually add desktop-launch when using the extension\n    const parts: Record<string, Part> = {\n      [appName]: appPart,\n    }\n\n    // Note: `organize` will be generated later in `buildSnap` based on the\n    // actual contents of the built app directory so helper binaries and\n    // resources are automatically moved under `app/` in the snap.\n\n    // Build the snapcraft configuration\n    const snapcraft: SnapcraftYAML = {\n      // Required fields\n      name: appName,\n      base: \"core24\",\n      confinement: options.confinement || \"strict\",\n      parts: parts,\n\n      // Architecture/Platform — only needed for cross-compilation; snapcraft 8\n      // defaults to host arch and snapcraft 7 rejects this field entirely.\n      ...(arch !== archFromString(process.arch)\n        ? {\n            platforms: {\n              [toLinuxArchString(arch, \"snap\")]: {\n                \"build-for\": toLinuxArchString(arch, \"snap\"),\n                \"build-on\": toLinuxArchString(archFromString(process.arch), \"snap\"),\n              },\n            },\n          }\n        : {}),\n\n      // Metadata - with fallbacks from appInfo\n      version: appInfo.version,\n      summary: options.summary || appInfo.productName,\n      description: this.helper.getDescription(options),\n      grade: options.grade || \"stable\",\n      title: options.title || appInfo.productName,\n      icon: iconPath,\n\n      // Build configuration\n      compression: options.compression || undefined,\n      assumes: this.normalizeAssumesList(options.assumes),\n\n      // Environment\n      environment: this.buildEnvironment(options),\n\n      // User-supplied layout always wins. Without gnome extension and not in host mode, fall back to content-snap defaults.\n      layout: options.layout ?? (useGnomeExtension || hostMode ? undefined : this.buildDefaultLayout(options)),\n\n      // Interfaces\n      plugs: rootPlugs,\n      slots: rootSlots,\n\n      // Hooks\n      hooks: hooks,\n\n      // Apps\n      apps: {\n        [appName]: app,\n      },\n    }\n\n    return removeNullish(snapcraft)\n  }\n\n  /**\n   * Build environment variables with proper defaults\n   */\n  private buildEnvironment(options: SnapOptions24): Record<string, string | null> | undefined {\n    const env: Record<string, string | null> = {}\n\n    // Add default TMPDIR for Electron/Chromium apps\n    if (!options.environment?.TMPDIR) {\n      env.TMPDIR = \"$XDG_RUNTIME_DIR\"\n    }\n\n    if (options.environment) {\n      deepAssign(env, options.environment)\n    }\n\n    return Object.keys(env).length > 0 ? env : undefined\n  }\n\n  /**\n   * Build default layout for core24 with GNOME platform content snaps (non-extension mode)\n   * This allows the app to access libraries from the gnome-46-2404 and mesa-2404 content snaps\n   */\n  private buildDefaultLayout(options: SnapOptions24): Record<string, any> | undefined {\n    // If user provides custom layout, use that instead\n    if (options.layout) {\n      return options.layout\n    }\n\n    // Default layout for core24 Electron apps using GNOME content snaps WITHOUT extension\n    return {\n      \"/usr/lib/$CRAFT_ARCH_TRIPLET_BUILD_FOR/webkit2gtk-4.0\": {\n        bind: \"$SNAP/gnome-platform/usr/lib/$CRAFT_ARCH_TRIPLET_BUILD_FOR/webkit2gtk-4.0\",\n      },\n      \"/usr/lib/$CRAFT_ARCH_TRIPLET_BUILD_FOR/webkit2gtk-4.1\": {\n        bind: \"$SNAP/gnome-platform/usr/lib/$CRAFT_ARCH_TRIPLET_BUILD_FOR/webkit2gtk-4.1\",\n      },\n      \"/usr/share/xml/iso-codes\": {\n        bind: \"$SNAP/gnome-platform/usr/share/xml/iso-codes\",\n      },\n      \"/usr/share/libdrm\": {\n        bind: \"$SNAP/gpu-2404/libdrm\",\n      },\n      \"/usr/share/drirc.d\": {\n        symlink: \"$SNAP/gpu-2404/drirc.d\",\n      },\n    }\n  }\n\n  /**\n   * Process hooks directory into hook definitions\n   */\n  private async processHooks(hooksPath: string): Promise<Record<string, any> | undefined> {\n    try {\n      const buildResourcesDir = this.packager.buildResourcesDir\n      const hooksDir = path.resolve(buildResourcesDir, hooksPath)\n      if (!hooksDir.startsWith(buildResourcesDir + path.sep) && hooksDir !== buildResourcesDir) {\n        throw new InvalidConfigurationError(`snapcraft.core24.hooks must resolve within the build resources directory (got \"${hooksDir}\")`)\n      }\n      const hookFiles = await readdir(hooksDir)\n\n      if (hookFiles.length === 0) {\n        return undefined\n      }\n\n      const hooks: Record<string, any> = {}\n      for (const hookFile of hookFiles) {\n        const hookName = path.basename(hookFile, path.extname(hookFile))\n        if (!isValidKey(hookName)) {\n          throw new InvalidConfigurationError(`Invalid hook name: ${hookName}`)\n        }\n        hooks[hookName] = {\n          // Hook definitions will be populated by snapcraft from the files\n          // Just register that these hooks exist\n        }\n      }\n\n      return hooks\n    } catch (e: any) {\n      log.error({ message: e.message }, \"error processing Snap hooks directory\")\n      throw e\n    }\n  }\n\n  /**\n   * Normalize assumes list (can be string or array)\n   */\n  normalizeAssumesList(assumes: Array<string> | string | Nullish): string[] | undefined {\n    if (!assumes) {\n      return undefined\n    }\n    if (typeof assumes === \"string\") {\n      return [assumes]\n    }\n    return assumes.length > 0 ? assumes : undefined\n  }\n\n  /**\n   * Process plugs or slots into root-level definitions and app-level references\n   */\n  processPlugOrSlots<T extends Array<string | SlotDescriptor | PlugDescriptor> | SlotDescriptor | PlugDescriptor | null>(\n    items: T\n  ): {\n    root: Record<string, unknown> | undefined\n    app: string[] | undefined\n  } {\n    if (!items || (Array.isArray(items) && items.length === 0)) {\n      return { root: undefined, app: undefined }\n    }\n    const root: Record<string, unknown> = {}\n    const app: string[] = []\n\n    // Handle single descriptor object\n    if (!Array.isArray(items)) {\n      Object.entries(items).forEach(([name, config]) => {\n        if (!isValidKey(name)) {\n          throw new Error(`Invalid plug/slot name: ${name}`)\n        }\n        root[name] = config\n        app.push(name)\n      })\n      return { root, app }\n    }\n\n    // Handle array - support \"default\" keyword\n    const processedItems = this.expandDefaultsInArray(items, this.defaultPlugs)\n    for (const item of processedItems ?? []) {\n      if (typeof item === \"string\") {\n        // Simple string reference\n        app.push(item)\n      } else {\n        // Descriptor object with configuration\n        Object.entries(item).forEach(([name, config]) => {\n          if (!isValidKey(name)) {\n            throw new Error(`Invalid plug/slot name: ${name}`)\n          }\n          root[name] = config\n          app.push(name)\n        })\n      }\n    }\n\n    return { root: Object.keys(root).length > 0 ? root : undefined, app: app.length > 0 ? app : undefined }\n  }\n\n  private isBrowserSandboxAllowed(plugs: Record<string, any> | undefined): boolean {\n    if (!plugs) {\n      return false\n    }\n    for (const plug of Object.values(plugs)) {\n      if (plug?.interface === \"browser-support\" && plug[\"allow-sandbox\"] === true) {\n        return true\n      }\n    }\n    return false\n  }\n\n  /**\n   * Expand \"default\" keyword in arrays of anything\n   */\n  private expandDefaultsInArray<T>(items: T[] | Nullish, defaults: T[]): T[] | undefined {\n    const result: Array<T> = []\n    for (const item of items ?? []) {\n      if (typeof item === \"string\" && item === \"default\") {\n        result.push(...defaults)\n      } else {\n        result.push(item)\n      }\n    }\n    return result.length > 0 ? result : undefined\n  }\n}\n"]}
+{"version":3,"file":"core24.js","sourceRoot":"","sources":["../../../../src/targets/linux/snap/core24.ts"],"names":[],"mappings":"AAAA,OAAO,EAAQ,cAAc,EAAE,OAAO,EAAE,yBAAyB,EAAE,GAAG,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAA;AAE9H,OAAO,EAAE,UAAU,EAAE,UAAU,EAAW,MAAM,sBAAsB,CAAA;AACtE,OAAO,QAAQ,MAAM,UAAU,CAAA;AAC/B,OAAO,KAAK,IAAI,MAAM,SAAS,CAAA;AAC/B,OAAO,KAAK,IAAI,MAAM,MAAM,CAAA;AAE5B,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAA;AAC1C,OAAO,EAAE,8BAA8B,EAAE,MAAM,kBAAkB,CAAA;AAEjE,OAAO,EAAE,SAAS,EAAE,sBAAsB,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAA;AACjG,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,QAAQ,CAAA;AAEnE,wFAAwF;AACxF,gGAAgG;AAChG,MAAM,cAAc,GAAG,gBAAgB,CAAA;AACvC,sGAAsG;AACtG,MAAM,qBAAqB,GAAG,YAAY,CAAA;AAE1C,wGAAwG;AACxG,MAAM,OAAO,UAAW,SAAQ,QAAuB;IAAvD;;QACE,qGAAqG;QACrG,oGAAoG;QACpG,iBAAY,GAAG,CAAC,SAAS,EAAE,gBAAgB,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,WAAW,EAAE,gBAAgB,EAAE,YAAY,EAAE,QAAQ,CAAC,CAAA;QAElJ,uBAAuB;QACvB,uEAAuE;QACvE,6DAA6D;QACpD,uBAAkB,GAAG,MAAM,CAAA;QAC3B,oBAAe,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,KAAK,CAAC,CAAA;QAEpE,0FAA0F;QAC1F,yFAAyF;QACzF,8BAA8B;QACtB,wBAAmB,GAAG,KAAK,CAAA;QACnC,iGAAiG;QACzF,gBAAW,GAAa,EAAE,CAAA;IAkjBpC,CAAC;IAhjBC,KAAK,CAAC,gBAAgB,CAAC,IAAU;QAC/B,OAAO,MAAM,IAAI,CAAC,6BAA6B,CAAC,IAAI,CAAC,CAAA;IACvD,CAAC;IAEO,UAAU;QAChB,OAAO,IAAI,CAAC,OAAO,CAAC,kBAAkB,KAAK,IAAI,CAAA;IACjD,CAAC;IAED,iHAAiH;IACjH,KAAK,CAAC,SAAS,CAAC,MAA0G;QACxH,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,GAAG,MAAM,CAAA;QAE1D,MAAM,eAAe,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,kBAAkB,CAAC,CAAA;QACvE,MAAM,iBAAiB,GAAG,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,gBAAgB,CAAC,CAAA;QAEtE,wDAAwD;QACxD,sFAAsF;QACtF,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,eAAe,CAAC,CAAA;QAC9D,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAE3C,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,sBAAsB,CAAC,CAAA;QAC3D,MAAM,SAAS,CAAC,iBAAiB,EAAE,WAAW,EAAE,MAAM,CAAC,CAAA;QACvD,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,0BAA0B,CAAC,CAAA;QAE3C,mCAAmC;QACnC,wEAAwE;QACxE,MAAM,iBAAiB,GAA2B,EAAE,CAAA;QACpD,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAA;QACpC,IAAI,IAAI,EAAE,CAAC;YACT,MAAM,YAAY,GAAG,GAAG,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAA;YACxD,MAAM,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC,CAAA;YACpD,iFAAiF;YACjF,iBAAiB,CAAC,IAAI,GAAG,qBAAqB,YAAY,EAAE,CAAA;QAC9D,CAAC;QAED,6CAA6C;QAC7C,wEAAwE;QACxE,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;QACpG,MAAM,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,cAAc,GAAG,KAAK,EAAE,eAAe,EAAE,iBAAiB,CAAC,CAAA;QAE3H,sEAAsE;QACtE,oEAAoE;QACpE,0DAA0D;QAC1D,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAA;QAC5C,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;YACrD,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,EAAE,iDAAiD,CAAC,CAAA;YACzH,MAAM,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,CAAA;QAClC,CAAC;QAED,+FAA+F;QAC/F,gFAAgF;QAChF,IAAI,IAAI,CAAC,mBAAmB,EAAE,CAAC;YAC7B,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC,CAAA;QACjD,CAAC;QAED,sFAAsF;QACtF,8FAA8F;QAC9F,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAA;QAC7D,MAAM,SAAS,CAAC,YAAY,EAAE,8BAA8B,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,IAAI,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;QAClJ,MAAM,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,CAAA;QAEhC,wEAAwE;QACxE,yEAAyE;QACzE,sEAAsE;QACtE,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YACrC,IAAI,OAAO,EAAE,CAAC;gBACZ,MAAM,OAAO,GAAG,CAAC,MAAM,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;gBACjD,sFAAsF;gBACtF,0FAA0F;gBAC1F,uFAAuF;gBACvF,MAAM,QAAQ,GAA2B,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAA;gBAC7F,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;oBAC5B,IAAI,CAAC,KAAK,EAAE,CAAC;wBACX,SAAQ;oBACV,CAAC;oBACD,sFAAsF;oBACtF,8DAA8D;oBAC9D,IAAI,IAAI,CAAC,mBAAmB,IAAI,KAAK,KAAK,cAAc,EAAE,CAAC;wBACzD,SAAQ;oBACV,CAAC;oBACD,2FAA2F;oBAC3F,sFAAsF;oBACtF,sDAAsD;oBACtD,IAAI,KAAK,KAAK,qBAAqB,EAAE,CAAC;wBACpC,SAAQ;oBACV,CAAC;oBACD,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;wBACpB,SAAQ;oBACV,CAAC;oBACD,QAAQ,CAAC,KAAK,CAAC,GAAG,OAAO,KAAK,EAAE,CAAA;gBAClC,CAAC;gBACD,OAAO,CAAC,QAAQ,GAAG,QAAQ,CAAA;gBAE3B,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,sBAAsB,CAAC,CAAA;gBAC3D,MAAM,SAAS,CAAC,iBAAiB,EAAE,WAAW,EAAE,MAAM,CAAC,CAAA;gBACvD,GAAG,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,EAAE,8CAA8C,CAAC,CAAA;YACzE,CAAC;QACH,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,gDAAgD,CAAC,CAAA;QAClF,CAAC;QAED,MAAM,SAAS,GAAG;YAChB,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,IAAI;YACpC,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,YAAY,KAAK,IAAI;YAChD,kBAAkB,EAAE,IAAI,CAAC,OAAO,CAAC,kBAAkB,KAAK,IAAI;YAC5D,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW,IAAI,SAAS;SACnD,CAAA;QAED,IAAI,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,uBAAuB,IAAI,IAAI,EAAE,CAAC;YAClE,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,uBAAuB,CAAC,EAAE,IAAI,EAAE,GAAG,SAAS,EAAE,CAAC,CAAA;YACtG,IAAI,UAAU,EAAE,CAAC;gBACf,OAAO,CAAC,YAAY,CAAC,CAAA;YACvB,CAAC;QACH,CAAC;QAED,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAA;QAClD,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC;YAC5B,eAAe,EAAE,IAAI;YACrB,YAAY;YACZ,QAAQ;YACR,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,OAAO,EAAE,WAAW,EAAE,OAAO;YAC7B,GAAG,SAAS;SACb,CAAC,CAAA;QACF,OAAO,KAAK,CAAA;IACd,CAAC;IAED,4GAA4G;IAC5G,KAAK,CAAC,6BAA6B,CAAC,IAAU;QAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAA;QACrC,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,WAAW,EAAE,CAAA;QAC1D,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAA;QAE5B,2FAA2F;QAC3F,gGAAgG;QAChG,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,EAAE,CAAA;QAClC,MAAM,cAAc,GAAa,OAAO,CAAC,UAAU,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAA;QACjH,IAAI,QAAQ,IAAI,cAAc,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YACjD,MAAM,IAAI,yBAAyB,CACjC,sFAAsF;gBACpF,6EAA6E;gBAC7E,4EAA4E;gBAC5E,mCAAmC;gBACnC,sFAAsF;gBACtF,0CAA0C;gBAC1C,yFAAyF;gBACzF,gFAAgF;gBAChF,gDAAgD,CACnD,CAAA;QACH,CAAC;QACD,MAAM,kBAAkB,GAAG,cAAc,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAA;QACjF,MAAM,iBAAiB,GAAG,cAAc,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAA;QAE1D,4FAA4F;QAC5F,4FAA4F;QAC5F,8DAA8D;QAC9D,MAAM,SAAS,GAAG,OAAO,CAAC,WAAW,KAAK,SAAS,CAAA;QACnD,IAAI,SAAS,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,IAAI,IAAI,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,EAAE,CAAC;YACnE,GAAG,CAAC,IAAI,CACN,EAAE,WAAW,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,IAAI,EAAE,EACxF,oJAAoJ,CACrJ,CAAA;QACH,CAAC;QAED,sBAAsB;QACtB,MAAM,OAAO,GAAS;YACpB,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,KAAK;YACb,gBAAgB,EAAE,OAAO,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS;YACnF,gBAAgB,EAAE,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC,aAAa,EAAE,sBAAsB,CAAC;YAC3F,KAAK,EAAE,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;YACpD,KAAK,EAAE,OAAO,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS;SACvE,CAAA;QAED,4EAA4E;QAC5E,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAyE,IAAI,CAAC,YAAY,CAC9H,OAAO,EACP,SAAS,EACT,QAAQ,EACR,iBAAiB,CAClB,CAAA;QAED,+EAA+E;QAC/E,oFAAoF;QACpF,sFAAsF;QACtF,2EAA2E;QAC3E,4EAA4E;QAC5E,gEAAgE;QAChE,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC,SAAS,EAAE,CAAC;YACjC,SAAS,GAAG,EAAE,GAAG,SAAS,EAAE,iBAAiB,EAAE,EAAE,SAAS,EAAE,iBAAiB,EAAE,eAAe,EAAE,IAAI,EAAE,EAAE,CAAA;YACxG,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC;gBAC3C,QAAQ,GAAG,CAAC,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,iBAAiB,CAAC,CAAA;YACrD,CAAC;QACH,CAAC;QAED,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,CAAA;QAEvI,qDAAqD;QACrD,mFAAmF;QACnF,kFAAkF;QAClF,wDAAwD;QACxD,MAAM,SAAS,GAAa,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,CAAA;QACpE,IAAI,IAAI,CAAC,OAAO,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;YACnC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,sBAAsB,CAAC,EAAE,CAAC;gBAChD,SAAS,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAA;YACxC,CAAC;QACH,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,mCAAmC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,uBAAuB,CAAC,SAAS,CAAC,CAAA;QACtH,IAAI,SAAS,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;YACrD,SAAS,CAAC,IAAI,CAAC,cAAc,CAAC,CAAA;QAChC,CAAC;QACD,wFAAwF;QACxF,IAAI,CAAC,mBAAmB,GAAG,SAAS,CAAA;QAEpC,gGAAgG;QAChG,2FAA2F;QAC3F,+DAA+D;QAC/D,IAAI,CAAC,WAAW,GAAG,SAAS,CAAA;QAE5B,+BAA+B;QAC/B,MAAM,eAAe,GAAG,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAA;QAC/D,MAAM,GAAG,GAAQ;YACf,OAAO,EAAE,qBAAqB;YAC9B,eAAe,EAAE,SAAS,EAAE,6FAA6F;YACzH,KAAK,EAAE,QAAQ;YACf,KAAK,EAAE,QAAQ;YACf,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,eAAe,UAAU,CAAC,CAAC,CAAC,SAAS;YACvE,OAAO,EAAE,YAAY,eAAe,UAAU;YAC9C,UAAU,EAAE,kBAAkB;SAC/B,CAAA;QAED,mFAAmF;QACnF,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAA;QACvB,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,IAAI,CAAC,CAAC,CAAC,YAAY,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAA;QAE5H,8BAA8B;QAC9B,MAAM,WAAW,GAAG,OAAO,CAAC,KAAK,CAAA;QACjC,MAAM,KAAK,GAAG,WAAW,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;QAE5E,0EAA0E;QAC1E,6DAA6D;QAC7D,MAAM,KAAK,GAAyB;YAClC,CAAC,OAAO,CAAC,EAAE,OAAO;SACnB,CAAA;QAED,uEAAuE;QACvE,oEAAoE;QACpE,8DAA8D;QAE9D,oCAAoC;QACpC,MAAM,SAAS,GAAkB;YAC/B,kBAAkB;YAClB,IAAI,EAAE,OAAO;YACb,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,QAAQ;YAC5C,KAAK,EAAE,KAAK;YAEZ,yEAAyE;YACzE,qEAAqE;YACrE,GAAG,CAAC,IAAI,KAAK,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC;gBACvC,CAAC,CAAC;oBACE,SAAS,EAAE;wBACT,CAAC,iBAAiB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,EAAE;4BACjC,WAAW,EAAE,iBAAiB,CAAC,IAAI,EAAE,MAAM,CAAC;4BAC5C,UAAU,EAAE,iBAAiB,CAAC,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;yBACpE;qBACF;iBACF;gBACH,CAAC,CAAC,EAAE,CAAC;YAEP,yCAAyC;YACzC,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,WAAW;YAC/C,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,OAAO,CAAC;YAChD,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,QAAQ;YAChC,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,WAAW;YAC3C,IAAI,EAAE,QAAQ;YAEd,sBAAsB;YACtB,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,SAAS;YAC7C,OAAO,EAAE,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC,OAAO,CAAC;YAEnD,cAAc;YACd,WAAW,EAAE,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC;YAE3C,4DAA4D;YAC5D,MAAM,EAAE,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,iBAAiB,CAAC;YAE3E,aAAa;YACb,KAAK,EAAE,SAAS;YAChB,KAAK,EAAE,SAAS;YAEhB,QAAQ;YACR,KAAK,EAAE,KAAK;YAEZ,OAAO;YACP,IAAI,EAAE;gBACJ,CAAC,OAAO,CAAC,EAAE,GAAG;aACf;SACF,CAAA;QAED,OAAO,aAAa,CAAC,SAAS,CAAC,CAAA;IACjC,CAAC;IAED;;;;;;;;;;OAUG;IACK,YAAY,CAClB,OAAsB,EACtB,SAAkB,EAClB,QAAiB,EACjB,iBAA0B;QAE1B,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;YAClB,OAAO,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;QAC/C,CAAC;QACD,IAAI,SAAS,EAAE,CAAC;YACd,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,CAAA;QAC5C,CAAC;QACD,IAAI,iBAAiB,EAAE,CAAC;YACtB,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,CAAA;QAC5C,CAAC;QACD,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,IAAI,CAAC,YAAY,EAAE,CAAA;QACpD,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,qBAAqB,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,YAAY,EAAE,CAAA;IACvE,CAAC;IAED;;;OAGG;IACK,qBAAqB;QAC3B,OAAO;YACL,cAAc,EAAE;gBACd,SAAS,EAAE,SAAS;gBACpB,MAAM,EAAE,uBAAuB;gBAC/B,kBAAkB,EAAE,mBAAmB;aACxC;YACD,aAAa,EAAE;gBACb,SAAS,EAAE,SAAS;gBACpB,MAAM,EAAE,sBAAsB;gBAC9B,kBAAkB,EAAE,mBAAmB;aACxC;YACD,cAAc,EAAE;gBACd,SAAS,EAAE,SAAS;gBACpB,MAAM,EAAE,uBAAuB;gBAC/B,kBAAkB,EAAE,mBAAmB;aACxC;YACD,eAAe,EAAE;gBACf,SAAS,EAAE,SAAS;gBACpB,MAAM,EAAE,sBAAsB;gBAC9B,kBAAkB,EAAE,eAAe;aACpC;YACD,UAAU,EAAE;gBACV,SAAS,EAAE,SAAS;gBACpB,MAAM,EAAE,gBAAgB;gBACxB,kBAAkB,EAAE,WAAW;aAChC;SACF,CAAA;IACH,CAAC;IAED;;;;;;;;OAQG;IACK,aAAa,CAAC,OAAsB,EAAE,SAAkB,EAAE,QAAiB,EAAE,iBAA0B;QAC7G,IAAI,OAAO,CAAC,MAAM,IAAI,IAAI,EAAE,CAAC;YAC3B,OAAO,OAAO,CAAC,MAAM,CAAA;QACvB,CAAC;QACD,IAAI,SAAS,IAAI,iBAAiB,IAAI,QAAQ,EAAE,CAAC;YAC/C,OAAO,SAAS,CAAA;QAClB,CAAC;QACD,OAAO,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAA;IACzC,CAAC;IAED;;OAEG;IACK,gBAAgB,CAAC,OAAsB;QAC7C,MAAM,GAAG,GAAkC,EAAE,CAAA;QAE7C,gDAAgD;QAChD,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,MAAM,EAAE,CAAC;YACjC,GAAG,CAAC,MAAM,GAAG,kBAAkB,CAAA;QACjC,CAAC;QAED,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;YACxB,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,WAAW,CAAC,CAAA;QACtC,CAAC;QAED,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAA;IACtD,CAAC;IAED;;;OAGG;IACK,kBAAkB,CAAC,OAAsB;QAC/C,mDAAmD;QACnD,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,OAAO,OAAO,CAAC,MAAM,CAAA;QACvB,CAAC;QAED,sFAAsF;QACtF,OAAO;YACL,uDAAuD,EAAE;gBACvD,IAAI,EAAE,2EAA2E;aAClF;YACD,uDAAuD,EAAE;gBACvD,IAAI,EAAE,2EAA2E;aAClF;YACD,0BAA0B,EAAE;gBAC1B,IAAI,EAAE,8CAA8C;aACrD;YACD,mBAAmB,EAAE;gBACnB,IAAI,EAAE,uBAAuB;aAC9B;YACD,oBAAoB,EAAE;gBACpB,OAAO,EAAE,wBAAwB;aAClC;SACF,CAAA;IACH,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,YAAY,CAAC,SAAiB;QAC1C,IAAI,CAAC;YACH,MAAM,iBAAiB,GAAG,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAA;YACzD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,iBAAiB,EAAE,SAAS,CAAC,CAAA;YAC3D,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,iBAAiB,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,KAAK,iBAAiB,EAAE,CAAC;gBACzF,MAAM,IAAI,yBAAyB,CAAC,kFAAkF,QAAQ,IAAI,CAAC,CAAA;YACrI,CAAC;YACD,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,CAAA;YAEzC,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC3B,OAAO,SAAS,CAAA;YAClB,CAAC;YAED,MAAM,KAAK,GAAwB,EAAE,CAAA;YACrC,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;gBACjC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAA;gBAChE,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAC1B,MAAM,IAAI,yBAAyB,CAAC,sBAAsB,QAAQ,EAAE,CAAC,CAAA;gBACvE,CAAC;gBACD,KAAK,CAAC,QAAQ,CAAC,GAAG;gBAChB,iEAAiE;gBACjE,uCAAuC;iBACxC,CAAA;YACH,CAAC;YAED,OAAO,KAAK,CAAA;QACd,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,GAAG,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,uCAAuC,CAAC,CAAA;YAC1E,MAAM,CAAC,CAAA;QACT,CAAC;IACH,CAAC;IAED;;OAEG;IACH,oBAAoB,CAAC,OAAyC;QAC5D,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,SAAS,CAAA;QAClB,CAAC;QACD,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAChC,OAAO,CAAC,OAAO,CAAC,CAAA;QAClB,CAAC;QACD,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAA;IACjD,CAAC;IAED;;OAEG;IACH,kBAAkB,CAChB,KAAQ;QAKR,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,EAAE,CAAC;YAC3D,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,CAAA;QAC5C,CAAC;QACD,MAAM,IAAI,GAA4B,EAAE,CAAA;QACxC,MAAM,GAAG,GAAa,EAAE,CAAA;QAExB,kCAAkC;QAClC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1B,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE;gBAC/C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;oBACtB,MAAM,IAAI,KAAK,CAAC,2BAA2B,IAAI,EAAE,CAAC,CAAA;gBACpD,CAAC;gBACD,IAAI,CAAC,IAAI,CAAC,GAAG,MAAM,CAAA;gBACnB,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YAChB,CAAC,CAAC,CAAA;YACF,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAA;QACtB,CAAC;QAED,2CAA2C;QAC3C,MAAM,cAAc,GAAG,IAAI,CAAC,qBAAqB,CAAC,KAAK,EAAE,IAAI,CAAC,YAAY,CAAC,CAAA;QAC3E,KAAK,MAAM,IAAI,IAAI,cAAc,IAAI,EAAE,EAAE,CAAC;YACxC,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC7B,0BAA0B;gBAC1B,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YAChB,CAAC;iBAAM,CAAC;gBACN,uCAAuC;gBACvC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE;oBAC9C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;wBACtB,MAAM,IAAI,KAAK,CAAC,2BAA2B,IAAI,EAAE,CAAC,CAAA;oBACpD,CAAC;oBACD,IAAI,CAAC,IAAI,CAAC,GAAG,MAAM,CAAA;oBACnB,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;gBAChB,CAAC,CAAC,CAAA;YACJ,CAAC;QACH,CAAC;QAED,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,GAAG,EAAE,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,EAAE,CAAA;IACzG,CAAC;IAEO,uBAAuB,CAAC,KAAsC;QACpE,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,KAAK,CAAA;QACd,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YACxC,IAAI,IAAI,EAAE,SAAS,KAAK,iBAAiB,IAAI,IAAI,CAAC,eAAe,CAAC,KAAK,IAAI,EAAE,CAAC;gBAC5E,OAAO,IAAI,CAAA;YACb,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAA;IACd,CAAC;IAED;;OAEG;IACK,qBAAqB,CAAI,KAAoB,EAAE,QAAa;QAClE,MAAM,MAAM,GAAa,EAAE,CAAA;QAC3B,KAAK,MAAM,IAAI,IAAI,KAAK,IAAI,EAAE,EAAE,CAAC;YAC/B,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBACnD,MAAM,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,CAAA;YAC1B,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YACnB,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAA;IAC/C,CAAC;CACF","sourcesContent":["import { Arch, archFromString, copyDir, InvalidConfigurationError, log, removeNullish, toLinuxArchString } from \"builder-util\"\n\nimport { deepAssign, isValidKey, Nullish } from \"builder-util-runtime\"\nimport _fsExtra from \"fs-extra\"\nimport * as yaml from \"js-yaml\"\nimport * as path from \"path\"\nimport { PlugDescriptor, SlotDescriptor, SnapOptions24 } from \"../../../options/SnapOptions.js\"\nimport { SnapCore } from \"./SnapTarget.js\"\nimport { buildSnapCommandLauncherScript } from \"./snapCommand.js\"\nimport { App, Part, SnapcraftYAML } from \"./snapcraft.js\"\nimport { buildSnap, DEFAULT_STAGE_PACKAGES, SNAPCRAFT_YAML_OPTIONS } from \"./snapcraftBuilder.js\"\nconst { chmod, copy, mkdir, readdir, remove, writeFile } = _fsExtra\n\n// Electron's setuid sandbox helper. Removed from the staged app when the snap runs with\n// `--no-sandbox` (snap confinement supplies its own sandbox via the browser-support interface).\nconst CHROME_SANDBOX = \"chrome-sandbox\"\n// Launcher script name used when the app command cannot be expressed inline (see resolveSnapCommand).\nconst SNAP_COMMAND_LAUNCHER = \"command.sh\"\n\n/** Snap build strategy for core24 — generates a native snapcraft.yaml and invokes the snapcraft CLI. */\nexport class SnapCore24 extends SnapCore<SnapOptions24> {\n  // browser-support is intentionally absent here; it is auto-injected in mapSnapOptionsToSnapcraftYAML\n  // when the user has not provided custom plugs, so it always lands in both root plugs and app plugs.\n  defaultPlugs = [\"desktop\", \"desktop-legacy\", \"home\", \"x11\", \"wayland\", \"unity7\", \"network\", \"gsettings\", \"audio-playback\", \"pulseaudio\", \"opengl\"]\n\n  // Snap file hierarchy:\n  // - snap/gui/ gets automatically copied to meta/gui/ in the final snap\n  // - Desktop files in meta/gui/ are used for menu integration\n  readonly configRelativePath = \"snap\"\n  readonly guiRelativePath = path.join(this.configRelativePath, \"gui\")\n\n  // Computed in createDescriptor (mapSnapOptionsToSnapcraftYAML) and consumed in buildSnap.\n  // getSnapCore() returns a fresh SnapCore24 per arch build, so this per-instance state is\n  // never shared across builds.\n  private removeChromeSandbox = false\n  // Args embedded into the generated launcher script (executableArgs + forceX11/no-sandbox flags).\n  private commandArgs: string[] = []\n\n  async createDescriptor(arch: Arch): Promise<SnapcraftYAML> {\n    return await this.mapSnapOptionsToSnapcraftYAML(arch)\n  }\n\n  private isHostMode(): boolean {\n    return this.options.useDestructiveMode === true\n  }\n\n  /** Writes the snapcraft.yaml, stages app files, then invokes `buildSnap()` to run the actual snapcraft build. */\n  async buildSnap(params: { snap: SnapcraftYAML; appOutDir: string; stageDir: string; snapArch: Arch; artifactPath: string }): Promise<string[]> {\n    const { snap, appOutDir, stageDir, artifactPath } = params\n\n    const snapDirResolved = path.resolve(stageDir, this.configRelativePath)\n    const snapcraftYamlPath = path.join(snapDirResolved, \"snapcraft.yaml\")\n\n    // Create snap/gui directory for desktop files and icons\n    // Snapcraft will automatically copy snap/gui/ contents to meta/gui/ in the final snap\n    const guiOutput = path.resolve(stageDir, this.guiRelativePath)\n    await mkdir(guiOutput, { recursive: true })\n\n    const yamlContent = yaml.dump(snap, SNAPCRAFT_YAML_OPTIONS)\n    await writeFile(snapcraftYamlPath, yamlContent, \"utf8\")\n    log.debug(snap, \"generated snapcraft.yaml\")\n\n    // Copy icon to snap/gui/ directory\n    // Snapcraft will automatically copy this to meta/gui/ in the final snap\n    const desktopExtraProps: Record<string, string> = {}\n    const icon = this.helper.maxIconPath\n    if (icon) {\n      const iconFileName = `${snap.name}${path.extname(icon)}`\n      await copy(icon, path.join(guiOutput, iconFileName))\n      // Icon path will be available at ${SNAP}/meta/gui/<icon-file> after installation\n      desktopExtraProps.Icon = `\\${SNAP}/meta/gui/${iconFileName}`\n    }\n\n    // Create desktop file in snap/gui/ directory\n    // Snapcraft will automatically copy this to meta/gui/ in the final snap\n    const desktopFilePath = path.join(guiOutput, `${this.helper.getDesktopFileName(snap.name)}.desktop`)\n    await this.helper.writeDesktopEntry(this.options, this.packager.executableName + \" %U\", desktopFilePath, desktopExtraProps)\n\n    // Copy app files to the project root `app` directory so `source: app`\n    // in the generated `snapcraft.yaml` (which is under `snap/`) can be\n    // resolved by snapcraft running in the build environment.\n    const appDir = path.resolve(stageDir, \"app\")\n    if (path.resolve(appDir) !== path.resolve(appOutDir)) {\n      log.debug({ to: log.filePath(appDir), from: log.filePath(appOutDir) }, \"copying app files to project root app directory\")\n      await copyDir(appOutDir, appDir)\n    }\n\n    // Drop the setuid chrome-sandbox helper before snapcraft stages the app — it is unusable under\n    // strict confinement when launching with --no-sandbox (mirrors SnapCoreLegacy).\n    if (this.removeChromeSandbox) {\n      await remove(path.join(appDir, CHROME_SANDBOX))\n    }\n\n    // Write the launcher script the command always points at (see SNAP_COMMAND_LAUNCHER).\n    // It lands at the snap root ($SNAP/command.sh) — it is intentionally not added to `organize`.\n    const launcherPath = path.join(appDir, SNAP_COMMAND_LAUNCHER)\n    await writeFile(launcherPath, buildSnapCommandLauncherScript({ execName: this.packager.executableName, args: this.commandArgs }), { mode: 0o755 })\n    await chmod(launcherPath, 0o755)\n\n    // Auto-generate `organize` mapping for the app part so top-level helper\n    // binaries and resources are placed under `app/` inside the snap. Update\n    // the already-written `snapcraft.yaml` so the build sees the mapping.\n    try {\n      const appPart = snap.parts[snap.name]\n      if (appPart) {\n        const entries = (await readdir(appOutDir)).sort()\n        // Null-prototype map: entry names come from the filesystem, so a top-level file named\n        // \"__proto__\" / \"constructor\" / \"toString\" must not read inherited keys (which would make\n        // the membership check below skip it) or interact with Object.prototype on assignment.\n        const organize: Record<string, string> = Object.assign(Object.create(null), appPart.organize)\n        for (const entry of entries) {\n          if (!entry) {\n            continue\n          }\n          // Skip files no longer present in the staged app dir (e.g. removed chrome-sandbox) so\n          // snapcraft doesn't fail trying to organize a missing source.\n          if (this.removeChromeSandbox && entry === CHROME_SANDBOX) {\n            continue\n          }\n          // Never organize the launcher under app/. It must stay at the snap root ($SNAP/command.sh)\n          // to match apps.<name>.command. This matters when appOutDir === appDir, where readdir\n          // would otherwise pick up the launcher we just wrote.\n          if (entry === SNAP_COMMAND_LAUNCHER) {\n            continue\n          }\n          if (organize[entry]) {\n            continue\n          }\n          organize[entry] = `app/${entry}`\n        }\n        appPart.organize = organize\n\n        const updatedYaml = yaml.dump(snap, SNAPCRAFT_YAML_OPTIONS)\n        await writeFile(snapcraftYamlPath, updatedYaml, \"utf8\")\n        log.debug({ organize }, \"updated snapcraft.yaml with organize mapping\")\n      }\n    } catch (e: any) {\n      log.warn({ error: e.message }, \"failed to generate and update organize mapping\")\n    }\n\n    const buildMode = {\n      useLXD: this.options.useLXD === true,\n      useMultipass: this.options.useMultipass === true,\n      useDestructiveMode: this.options.useDestructiveMode === true,\n      remoteBuild: this.options.remoteBuild || undefined,\n    }\n\n    if (this.packager.packagerOptions.effectiveOptionComputed != null) {\n      const shouldSkip = await this.packager.packagerOptions.effectiveOptionComputed({ snap, ...buildMode })\n      if (shouldSkip) {\n        return [artifactPath]\n      }\n    }\n\n    const rootOptions = this.packager.config.snapcraft\n    const snaps = await buildSnap({\n      snapcraftConfig: snap,\n      artifactPath,\n      stageDir,\n      packager: this.packager,\n      cscLink: rootOptions?.cscLink,\n      ...buildMode,\n    })\n    return snaps\n  }\n\n  /** Converts `SnapOptions24` into a fully resolved `SnapcraftYAML` descriptor for the given architecture. */\n  async mapSnapOptionsToSnapcraftYAML(arch: Arch): Promise<SnapcraftYAML> {\n    const appInfo = this.packager.appInfo\n    const appName = this.packager.executableName.toLowerCase()\n    const options = this.options\n\n    // Default to [\"gnome\"] in normal builds; no extensions in host/destructive-mode (where the\n    // gnome extension is incompatible). Throw if the user explicitly includes \"gnome\" in host mode.\n    const hostMode = this.isHostMode()\n    const extensionsList: string[] = options.extensions != null ? [...options.extensions] : hostMode ? [] : [\"gnome\"]\n    if (hostMode && extensionsList.includes(\"gnome\")) {\n      throw new InvalidConfigurationError(\n        `The \"gnome\" snapcraft extension is incompatible with host/destructive-mode builds.\\n` +\n          `In this mode snapcraft cannot resolve the extension's command-chain source ` +\n          `(/usr/share/snapcraft/extensions/desktop/command-chain) and will fail.\\n\\n` +\n          `To resolve this, choose one of:\\n` +\n          `  1. Remove \"gnome\" from snapcraft.core24.extensions (or set it to []) and add any\\n` +\n          `     required stage-packages manually.\\n` +\n          `  2. Switch to an isolated build environment by setting snapcraft.core24.useLXD: true\\n` +\n          `     or snapcraft.core24.useMultipass: true instead of useDestructiveMode.\\n\\n` +\n          `See: https://snapcraft.io/docs/gnome-extension`\n      )\n    }\n    const resolvedExtensions = extensionsList.length > 0 ? extensionsList : undefined\n    const useGnomeExtension = extensionsList.includes(\"gnome\")\n\n    // Snap store review rejects classic-confinement snaps that declare plugs or layout, so skip\n    // the generated defaults for classic (mirrors SnapCoreLegacy). Explicitly configured values\n    // are kept, but warn that the store is likely to reject them.\n    const isClassic = options.confinement === \"classic\"\n    if (isClassic && (options.plugs != null || options.layout != null)) {\n      log.warn(\n        { confinement: \"classic\", plugs: options.plugs != null, layout: options.layout != null },\n        \"classic confinement does not support plugs or layout; keeping the explicitly configured values, but the snap store review is likely to reject them\"\n      )\n    }\n\n    // Create the app part\n    const appPart: Part = {\n      plugin: \"dump\",\n      source: \"app\",\n      \"build-packages\": options.buildPackages?.length ? options.buildPackages : undefined,\n      \"stage-packages\": this.expandDefaultsInArray(options.stagePackages, DEFAULT_STAGE_PACKAGES),\n      after: this.expandDefaultsInArray(options.after, []),\n      stage: options.appPartStage?.length ? options.appPartStage : undefined,\n    }\n\n    // Process plugs and slots (see resolvePlugs for the per-build-flavor rules)\n    let { root: rootPlugs, app: appPlugs }: { root: Record<string, any> | undefined; app: string[] | undefined } = this.resolvePlugs(\n      options,\n      isClassic,\n      hostMode,\n      useGnomeExtension\n    )\n\n    // Always add browser-support with allow-sandbox so Chromium's internal sandbox\n    // can create user namespaces under strict confinement.  Without allow-sandbox: true\n    // the app crashes immediately with \"FATAL: Permission denied (13)\" in credentials.cc.\n    // Skip the injection when the user has explicitly provided their own plugs\n    // (they are responsible for including browser-support in that case) and for\n    // classic confinement, where plugs must not be declared at all.\n    if (!options.plugs && !isClassic) {\n      rootPlugs = { ...rootPlugs, \"browser-support\": { interface: \"browser-support\", \"allow-sandbox\": true } }\n      if (!appPlugs?.includes(\"browser-support\")) {\n        appPlugs = [...(appPlugs ?? []), \"browser-support\"]\n      }\n    }\n\n    const { root: rootSlots, app: appSlots } = options.slots ? this.processPlugOrSlots(options.slots) : { root: undefined, app: undefined }\n\n    // Build the effective arg list for the snap command.\n    // Start with any user-supplied executableArgs, then conditionally add --no-sandbox\n    // if browser-support with allow-sandbox:true is not present in the resolved plugs\n    // (mirrors the same logic in SnapCoreLegacy.buildSnap).\n    const extraArgs: string[] = [...(this.options.executableArgs ?? [])]\n    if (this.options.forceX11 === true) {\n      if (!extraArgs.includes(\"--ozone-platform=x11\")) {\n        extraArgs.push(\"--ozone-platform=x11\")\n      }\n    }\n    const noSandbox = this.helper.isElectronVersionGreaterOrEqualThan(\"5.0.0\") && !this.isBrowserSandboxAllowed(rootPlugs)\n    if (noSandbox && !extraArgs.includes(\"--no-sandbox\")) {\n      extraArgs.push(\"--no-sandbox\")\n    }\n    // With --no-sandbox the setuid chrome-sandbox helper is unused; strip it from the snap.\n    this.removeChromeSandbox = noSandbox\n\n    // The command always points at a generated launcher script (written in buildSnap). This keeps a\n    // single uniform command path and sidesteps snapd's character/word-splitting rules for the\n    // command field (e.g. --ozone-platform=x11, --js-flags=\"...\").\n    this.commandArgs = extraArgs\n\n    // Create the app configuration\n    const desktopBaseName = this.helper.getDesktopFileName(appName)\n    const app: App = {\n      command: SNAP_COMMAND_LAUNCHER,\n      \"command-chain\": undefined, // explicitly undefined so removeNullish strips it; extensions supply their own command-chain\n      plugs: appPlugs,\n      slots: appSlots,\n      autostart: options.autoStart ? `${desktopBaseName}.desktop` : undefined,\n      desktop: `meta/gui/${desktopBaseName}.desktop`,\n      extensions: resolvedExtensions,\n    }\n\n    // Icon path — build-time relative path so snapcraft can find the file in snap/gui/\n    await this.helper.icons\n    const iconPath = this.helper.maxIconPath != null ? `snap/gui/${appName}${path.extname(this.helper.maxIconPath)}` : undefined\n\n    // Process hooks if configured\n    const hooksConfig = options.hooks\n    const hooks = hooksConfig ? await this.processHooks(hooksConfig) : undefined\n\n    // Parts configuration - the extension automatically adds a gnome/sdk part\n    // Don't manually add desktop-launch when using the extension\n    const parts: Record<string, Part> = {\n      [appName]: appPart,\n    }\n\n    // Note: `organize` will be generated later in `buildSnap` based on the\n    // actual contents of the built app directory so helper binaries and\n    // resources are automatically moved under `app/` in the snap.\n\n    // Build the snapcraft configuration\n    const snapcraft: SnapcraftYAML = {\n      // Required fields\n      name: appName,\n      base: \"core24\",\n      confinement: options.confinement || \"strict\",\n      parts: parts,\n\n      // Architecture/Platform — only needed for cross-compilation; snapcraft 8\n      // defaults to host arch and snapcraft 7 rejects this field entirely.\n      ...(arch !== archFromString(process.arch)\n        ? {\n            platforms: {\n              [toLinuxArchString(arch, \"snap\")]: {\n                \"build-for\": toLinuxArchString(arch, \"snap\"),\n                \"build-on\": toLinuxArchString(archFromString(process.arch), \"snap\"),\n              },\n            },\n          }\n        : {}),\n\n      // Metadata - with fallbacks from appInfo\n      version: appInfo.version,\n      summary: options.summary || appInfo.productName,\n      description: this.helper.getDescription(options),\n      grade: options.grade || \"stable\",\n      title: options.title || appInfo.productName,\n      icon: iconPath,\n\n      // Build configuration\n      compression: options.compression || undefined,\n      assumes: this.normalizeAssumesList(options.assumes),\n\n      // Environment\n      environment: this.buildEnvironment(options),\n\n      // Layout (see resolveLayout for the per-build-flavor rules)\n      layout: this.resolveLayout(options, isClassic, hostMode, useGnomeExtension),\n\n      // Interfaces\n      plugs: rootPlugs,\n      slots: rootSlots,\n\n      // Hooks\n      hooks: hooks,\n\n      // Apps\n      apps: {\n        [appName]: app,\n      },\n    }\n\n    return removeNullish(snapcraft)\n  }\n\n  /**\n   * Resolve the root-level plug definitions and the app-level plug references for the build flavor.\n   *\n   * Explicitly configured plugs always win — they are kept even under classic confinement\n   * (with the warning logged in mapSnapOptionsToSnapcraftYAML). Otherwise:\n   * - classic confinement: no plugs at all — the snap store review rejects classic snaps that declare plugs\n   * - GNOME extension: no defaults — the extension supplies the common plugs and content snaps\n   *   (gnome-46-2404, gtk-3-themes, icon-themes, sound-themes) itself\n   * - host/destructive mode: app-level default plugs only, no content-snap root plugs\n   * - default (strict, no extension): manual content-snap root plugs plus the app-level default plugs\n   */\n  private resolvePlugs(\n    options: SnapOptions24,\n    isClassic: boolean,\n    hostMode: boolean,\n    useGnomeExtension: boolean\n  ): { root: Record<string, any> | undefined; app: string[] | undefined } {\n    if (options.plugs) {\n      return this.processPlugOrSlots(options.plugs)\n    }\n    if (isClassic) {\n      return { root: undefined, app: undefined }\n    }\n    if (useGnomeExtension) {\n      return { root: undefined, app: undefined }\n    }\n    if (hostMode) {\n      return { root: undefined, app: this.defaultPlugs }\n    }\n    return { root: this.buildDefaultRootPlugs(), app: this.defaultPlugs }\n  }\n\n  /**\n   * Default root-level content-snap plugs used without the GNOME extension, wiring up the\n   * GNOME platform, theme, and GPU content snaps manually.\n   */\n  private buildDefaultRootPlugs(): Record<string, any> {\n    return {\n      \"gtk-3-themes\": {\n        interface: \"content\",\n        target: \"$SNAP/data-dir/themes\",\n        \"default-provider\": \"gtk-common-themes\",\n      },\n      \"icon-themes\": {\n        interface: \"content\",\n        target: \"$SNAP/data-dir/icons\",\n        \"default-provider\": \"gtk-common-themes\",\n      },\n      \"sound-themes\": {\n        interface: \"content\",\n        target: \"$SNAP/data-dir/sounds\",\n        \"default-provider\": \"gtk-common-themes\",\n      },\n      \"gnome-46-2404\": {\n        interface: \"content\",\n        target: \"$SNAP/gnome-platform\",\n        \"default-provider\": \"gnome-46-2404\",\n      },\n      \"gpu-2404\": {\n        interface: \"content\",\n        target: \"$SNAP/gpu-2404\",\n        \"default-provider\": \"mesa-2404\",\n      },\n    }\n  }\n\n  /**\n   * Resolve the snap-wide layout for the build flavor.\n   *\n   * An explicitly configured layout always wins — it is kept even under classic confinement\n   * (with the warning logged in mapSnapOptionsToSnapcraftYAML). Otherwise:\n   * - classic confinement: no layout — the snap store review rejects classic snaps that declare one\n   * - GNOME extension or host/destructive mode: no layout needed\n   * - default (strict, no extension): content-snap default layout\n   */\n  private resolveLayout(options: SnapOptions24, isClassic: boolean, hostMode: boolean, useGnomeExtension: boolean): Record<string, any> | undefined {\n    if (options.layout != null) {\n      return options.layout\n    }\n    if (isClassic || useGnomeExtension || hostMode) {\n      return undefined\n    }\n    return this.buildDefaultLayout(options)\n  }\n\n  /**\n   * Build environment variables with proper defaults\n   */\n  private buildEnvironment(options: SnapOptions24): Record<string, string | null> | undefined {\n    const env: Record<string, string | null> = {}\n\n    // Add default TMPDIR for Electron/Chromium apps\n    if (!options.environment?.TMPDIR) {\n      env.TMPDIR = \"$XDG_RUNTIME_DIR\"\n    }\n\n    if (options.environment) {\n      deepAssign(env, options.environment)\n    }\n\n    return Object.keys(env).length > 0 ? env : undefined\n  }\n\n  /**\n   * Build default layout for core24 with GNOME platform content snaps (non-extension mode)\n   * This allows the app to access libraries from the gnome-46-2404 and mesa-2404 content snaps\n   */\n  private buildDefaultLayout(options: SnapOptions24): Record<string, any> | undefined {\n    // If user provides custom layout, use that instead\n    if (options.layout) {\n      return options.layout\n    }\n\n    // Default layout for core24 Electron apps using GNOME content snaps WITHOUT extension\n    return {\n      \"/usr/lib/$CRAFT_ARCH_TRIPLET_BUILD_FOR/webkit2gtk-4.0\": {\n        bind: \"$SNAP/gnome-platform/usr/lib/$CRAFT_ARCH_TRIPLET_BUILD_FOR/webkit2gtk-4.0\",\n      },\n      \"/usr/lib/$CRAFT_ARCH_TRIPLET_BUILD_FOR/webkit2gtk-4.1\": {\n        bind: \"$SNAP/gnome-platform/usr/lib/$CRAFT_ARCH_TRIPLET_BUILD_FOR/webkit2gtk-4.1\",\n      },\n      \"/usr/share/xml/iso-codes\": {\n        bind: \"$SNAP/gnome-platform/usr/share/xml/iso-codes\",\n      },\n      \"/usr/share/libdrm\": {\n        bind: \"$SNAP/gpu-2404/libdrm\",\n      },\n      \"/usr/share/drirc.d\": {\n        symlink: \"$SNAP/gpu-2404/drirc.d\",\n      },\n    }\n  }\n\n  /**\n   * Process hooks directory into hook definitions\n   */\n  private async processHooks(hooksPath: string): Promise<Record<string, any> | undefined> {\n    try {\n      const buildResourcesDir = this.packager.buildResourcesDir\n      const hooksDir = path.resolve(buildResourcesDir, hooksPath)\n      if (!hooksDir.startsWith(buildResourcesDir + path.sep) && hooksDir !== buildResourcesDir) {\n        throw new InvalidConfigurationError(`snapcraft.core24.hooks must resolve within the build resources directory (got \"${hooksDir}\")`)\n      }\n      const hookFiles = await readdir(hooksDir)\n\n      if (hookFiles.length === 0) {\n        return undefined\n      }\n\n      const hooks: Record<string, any> = {}\n      for (const hookFile of hookFiles) {\n        const hookName = path.basename(hookFile, path.extname(hookFile))\n        if (!isValidKey(hookName)) {\n          throw new InvalidConfigurationError(`Invalid hook name: ${hookName}`)\n        }\n        hooks[hookName] = {\n          // Hook definitions will be populated by snapcraft from the files\n          // Just register that these hooks exist\n        }\n      }\n\n      return hooks\n    } catch (e: any) {\n      log.error({ message: e.message }, \"error processing Snap hooks directory\")\n      throw e\n    }\n  }\n\n  /**\n   * Normalize assumes list (can be string or array)\n   */\n  normalizeAssumesList(assumes: Array<string> | string | Nullish): string[] | undefined {\n    if (!assumes) {\n      return undefined\n    }\n    if (typeof assumes === \"string\") {\n      return [assumes]\n    }\n    return assumes.length > 0 ? assumes : undefined\n  }\n\n  /**\n   * Process plugs or slots into root-level definitions and app-level references\n   */\n  processPlugOrSlots<T extends Array<string | SlotDescriptor | PlugDescriptor> | SlotDescriptor | PlugDescriptor | null>(\n    items: T\n  ): {\n    root: Record<string, unknown> | undefined\n    app: string[] | undefined\n  } {\n    if (!items || (Array.isArray(items) && items.length === 0)) {\n      return { root: undefined, app: undefined }\n    }\n    const root: Record<string, unknown> = {}\n    const app: string[] = []\n\n    // Handle single descriptor object\n    if (!Array.isArray(items)) {\n      Object.entries(items).forEach(([name, config]) => {\n        if (!isValidKey(name)) {\n          throw new Error(`Invalid plug/slot name: ${name}`)\n        }\n        root[name] = config\n        app.push(name)\n      })\n      return { root, app }\n    }\n\n    // Handle array - support \"default\" keyword\n    const processedItems = this.expandDefaultsInArray(items, this.defaultPlugs)\n    for (const item of processedItems ?? []) {\n      if (typeof item === \"string\") {\n        // Simple string reference\n        app.push(item)\n      } else {\n        // Descriptor object with configuration\n        Object.entries(item).forEach(([name, config]) => {\n          if (!isValidKey(name)) {\n            throw new Error(`Invalid plug/slot name: ${name}`)\n          }\n          root[name] = config\n          app.push(name)\n        })\n      }\n    }\n\n    return { root: Object.keys(root).length > 0 ? root : undefined, app: app.length > 0 ? app : undefined }\n  }\n\n  private isBrowserSandboxAllowed(plugs: Record<string, any> | undefined): boolean {\n    if (!plugs) {\n      return false\n    }\n    for (const plug of Object.values(plugs)) {\n      if (plug?.interface === \"browser-support\" && plug[\"allow-sandbox\"] === true) {\n        return true\n      }\n    }\n    return false\n  }\n\n  /**\n   * Expand \"default\" keyword in arrays of anything\n   */\n  private expandDefaultsInArray<T>(items: T[] | Nullish, defaults: T[]): T[] | undefined {\n    const result: Array<T> = []\n    for (const item of items ?? []) {\n      if (typeof item === \"string\" && item === \"default\") {\n        result.push(...defaults)\n      } else {\n        result.push(item)\n      }\n    }\n    return result.length > 0 ? result : undefined\n  }\n}\n"]}

package/dist/targets/mac/MacTargetHelper.d.ts

@@ -1,5 +1,5 @@
 import { type NotarizeOptions } from "@electron/notarize";
-import type { PerFileSignOptions, SignOptions } from "@electron/osx-sign";
+import type { PerFileSignOptions, SigningDistributionType, SignOptions } from "@electron/osx-sign";
 import { Arch } from "builder-util";
 import { Nullish } from "builder-util-runtime";
 import { CertType, Identity } from "../../codeSign/mac/macCodeSign.js";
@@ -20,7 +20,17 @@ export declare class MacTargetHelper {
     buildSignOptions(appPath: string, identity: Identity, config: ElectronSignOptions | null | undefined, keychainFile: string | Nullish, arch: Arch, targetPlatform: PlatformType): Promise<SignOptions>;
     createMasInstaller(appPath: string, outDir: string, masOptions: MasConfiguration, keychainFile: string | Nullish, targetPlatform: PlatformType, arch: Arch, identityQualifier?: string | null): Promise<void>;
     getOptionsForFile(appPath: string, targetPlatform: PlatformType, customSignOptions: ElectronSignOptions | Nullish): Promise<(filePath: string) => PerFileSignOptions>;
-    static getCertificateTypes(targetPlatform: PlatformType): CertType[];
+    /**
+     * The effective signing type: an explicit `sign.type` wins, otherwise derived from the build flavor
+     * (`mas-dev` → `development`, otherwise `distribution`).
+     */
+    static resolveSigningType(targetPlatform: PlatformType, configType: SigningDistributionType | Nullish): SigningDistributionType;
+    static getCertificateTypes(targetPlatform: PlatformType, type: SigningDistributionType): CertType[];
+    /**
+     * The MAS `.pkg` installer is only built for distribution signing — a development-signed build
+     * (`mas-dev`, or an explicit `sign.type: "development"` on a `mas` build) is installed directly.
+     */
+    static shouldCreateMasInstaller(targetPlatform: PlatformType, configType: SigningDistributionType | Nullish): boolean;
     static isMasTarget(targetName: string): boolean;
     static isMasDevelopment(targetName: string): boolean;
     static getPlatformTypeFromTarget(targetName: string): PlatformType;

package/dist/targets/mac/MacTargetHelper.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"MacTargetHelper.d.ts","sourceRoot":"","sources":["../../../src/targets/mac/MacTargetHelper.ts"],"names":[],"mappings":"AAAA,OAAO,EAAY,KAAK,eAAe,EAAsC,MAAM,oBAAoB,CAAA;AACvG,OAAO,KAAK,EAAE,kBAAkB,EAA2B,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAClG,OAAO,EAAE,IAAI,EAA8C,MAAM,cAAc,CAAA;AAC/E,OAAO,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAA;AAE9C,OAAO,EAAE,QAAQ,EAAgB,QAAQ,EAAe,MAAM,mCAAmC,CAAA;AACjG,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAA;AACvD,OAAO,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAA;AAInF,MAAM,MAAM,YAAY,GAAG,KAAK,GAAG,SAAS,GAAG,KAAK,CAAA;AAEpD,qBAAa,eAAe;IACd,OAAO,CAAC,QAAQ;gBAAR,QAAQ,EAAE,WAAW;IAEzC,kBAAkB,IAAI,OAAO;IAQvB,mBAAmB,CACvB,cAAc,EAAE,YAAY,EAC5B,SAAS,EAAE,MAAM,GAAG,SAAS,EAC7B,YAAY,EAAE,MAAM,GAAG,OAAO,EAC9B,aAAa,EAAE,OAAO,EACtB,QAAQ,EAAE,mBAAmB,GAAG,IAAI,GAAG,SAAS,GAC/C,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;IAgC3B;;;;OAIG;IACG,2BAA2B,CAAC,cAAc,EAAE,YAAY,EAAE,QAAQ,EAAE,mBAAmB,GAAG,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAepH,gBAAgB,CACpB,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,QAAQ,EAClB,MAAM,EAAE,mBAAmB,GAAG,IAAI,GAAG,SAAS,EAC9C,YAAY,EAAE,MAAM,GAAG,OAAO,EAC9B,IAAI,EAAE,IAAI,EACV,cAAc,EAAE,YAAY,GAC3B,OAAO,CAAC,WAAW,CAAC;IAyFjB,kBAAkB,CACtB,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,EACd,UAAU,EAAE,gBAAgB,EAC5B,YAAY,EAAE,MAAM,GAAG,OAAO,EAC9B,cAAc,EAAE,YAAY,EAC5B,IAAI,EAAE,IAAI,EACV,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,GAChC,OAAO,CAAC,IAAI,CAAC;IAyBV,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,YAAY,EAAE,iBAAiB,EAAE,mBAAmB,GAAG,OAAO,GAAG,OAAO,CAAC,CAAC,QAAQ,EAAE,MAAM,KAAK,kBAAkB,CAAC;IA+C3K,MAAM,CAAC,mBAAmB,CAAC,cAAc,EAAE,YAAY,GAAG,QAAQ,EAAE;IAWpE,MAAM,CAAC,WAAW,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO;IAI/C,MAAM,CAAC,gBAAgB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO;IAIpD,MAAM,CAAC,yBAAyB,CAAC,UAAU,EAAE,MAAM,GAAG,YAAY;IAWlE;;;OAGG;IACH,MAAM,CAAC,kCAAkC,CAAC,cAAc,EAAE,YAAY,EAAE,eAAe,EAAE,OAAO,GAAG,IAAI,GAAG,SAAS,GAAG,OAAO;IAI7H,MAAM,CAAC,6BAA6B,CAAC,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,IAAI;IAMlF,MAAM,CAAC,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,eAAe,GAAG,SAAS;IAyCjE,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAczD"}
+{"version":3,"file":"MacTargetHelper.d.ts","sourceRoot":"","sources":["../../../src/targets/mac/MacTargetHelper.ts"],"names":[],"mappings":"AAAA,OAAO,EAAY,KAAK,eAAe,EAAsC,MAAM,oBAAoB,CAAA;AACvG,OAAO,KAAK,EAAE,kBAAkB,EAAE,uBAAuB,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAClG,OAAO,EAAE,IAAI,EAA8C,MAAM,cAAc,CAAA;AAC/E,OAAO,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAA;AAE9C,OAAO,EAAE,QAAQ,EAAgB,QAAQ,EAAe,MAAM,mCAAmC,CAAA;AACjG,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAA;AACvD,OAAO,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAA;AAInF,MAAM,MAAM,YAAY,GAAG,KAAK,GAAG,SAAS,GAAG,KAAK,CAAA;AAEpD,qBAAa,eAAe;IACd,OAAO,CAAC,QAAQ;gBAAR,QAAQ,EAAE,WAAW;IAEzC,kBAAkB,IAAI,OAAO;IAQvB,mBAAmB,CACvB,cAAc,EAAE,YAAY,EAC5B,SAAS,EAAE,MAAM,GAAG,SAAS,EAC7B,YAAY,EAAE,MAAM,GAAG,OAAO,EAC9B,aAAa,EAAE,OAAO,EACtB,QAAQ,EAAE,mBAAmB,GAAG,IAAI,GAAG,SAAS,GAC/C,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;IAgC3B;;;;OAIG;IACG,2BAA2B,CAAC,cAAc,EAAE,YAAY,EAAE,QAAQ,EAAE,mBAAmB,GAAG,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAepH,gBAAgB,CACpB,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,QAAQ,EAClB,MAAM,EAAE,mBAAmB,GAAG,IAAI,GAAG,SAAS,EAC9C,YAAY,EAAE,MAAM,GAAG,OAAO,EAC9B,IAAI,EAAE,IAAI,EACV,cAAc,EAAE,YAAY,GAC3B,OAAO,CAAC,WAAW,CAAC;IAwFjB,kBAAkB,CACtB,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,EACd,UAAU,EAAE,gBAAgB,EAC5B,YAAY,EAAE,MAAM,GAAG,OAAO,EAC9B,cAAc,EAAE,YAAY,EAC5B,IAAI,EAAE,IAAI,EACV,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,GAChC,OAAO,CAAC,IAAI,CAAC;IAyBV,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,YAAY,EAAE,iBAAiB,EAAE,mBAAmB,GAAG,OAAO,GAAG,OAAO,CAAC,CAAC,QAAQ,EAAE,MAAM,KAAK,kBAAkB,CAAC;IA+C3K;;;OAGG;IACH,MAAM,CAAC,kBAAkB,CAAC,cAAc,EAAE,YAAY,EAAE,UAAU,EAAE,uBAAuB,GAAG,OAAO,GAAG,uBAAuB;IAI/H,MAAM,CAAC,mBAAmB,CAAC,cAAc,EAAE,YAAY,EAAE,IAAI,EAAE,uBAAuB,GAAG,QAAQ,EAAE;IAOnG;;;OAGG;IACH,MAAM,CAAC,wBAAwB,CAAC,cAAc,EAAE,YAAY,EAAE,UAAU,EAAE,uBAAuB,GAAG,OAAO,GAAG,OAAO;IAIrH,MAAM,CAAC,WAAW,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO;IAI/C,MAAM,CAAC,gBAAgB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO;IAIpD,MAAM,CAAC,yBAAyB,CAAC,UAAU,EAAE,MAAM,GAAG,YAAY;IAWlE;;;OAGG;IACH,MAAM,CAAC,kCAAkC,CAAC,cAAc,EAAE,YAAY,EAAE,eAAe,EAAE,OAAO,GAAG,IAAI,GAAG,SAAS,GAAG,OAAO;IAI7H,MAAM,CAAC,6BAA6B,CAAC,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,IAAI;IAMlF,MAAM,CAAC,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,eAAe,GAAG,SAAS;IAyCjE,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAczD"}

package/dist/targets/mac/MacTargetHelper.js

@@ -17,7 +17,7 @@ export class MacTargetHelper {
     }
     async findSigningIdentity(targetPlatform, qualifier, keychainFile, hasCustomSign, signOpts) {
         const isMas = MacTargetHelper.isMasTarget(targetPlatform);
-        const certificateTypes = MacTargetHelper.getCertificateTypes(targetPlatform);
+        const certificateTypes = MacTargetHelper.getCertificateTypes(targetPlatform, MacTargetHelper.resolveSigningType(targetPlatform, signOpts?.type));
         let identity = null;
         for (const certificateType of certificateTypes) {
             identity = await findIdentity(certificateType, qualifier, keychainFile);
@@ -63,8 +63,7 @@ export class MacTargetHelper {
     }
     async buildSignOptions(appPath, identity, config, keychainFile, arch, targetPlatform) {
         const isMas = MacTargetHelper.isMasTarget(targetPlatform);
-        // `type` is derived from the build flavor, never from user config: mas-dev → development, otherwise distribution.
-        const type = MacTargetHelper.isMasDevelopment(targetPlatform) ? "development" : "distribution";
+        const type = MacTargetHelper.resolveSigningType(targetPlatform, config?.type);
         let binaries = config?.binaries || undefined;
         if (binaries) {
             // Accept absolute paths for external binaries, else resolve relative paths from the artifact's app Contents path.
@@ -201,15 +200,25 @@ export class MacTargetHelper {
             };
         };
     }
-    static getCertificateTypes(targetPlatform) {
-        switch (targetPlatform) {
-            case "mas-dev":
-                return ["Mac Developer", "Apple Development"];
-            case "mas":
-                return ["Apple Distribution", "3rd Party Mac Developer Application"];
-            default:
-                return ["Developer ID Application"];
+    /**
+     * The effective signing type: an explicit `sign.type` wins, otherwise derived from the build flavor
+     * (`mas-dev` → `development`, otherwise `distribution`).
+     */
+    static resolveSigningType(targetPlatform, configType) {
+        return configType ?? (MacTargetHelper.isMasDevelopment(targetPlatform) ? "development" : "distribution");
+    }
+    static getCertificateTypes(targetPlatform, type) {
+        if (type === "development") {
+            return ["Mac Developer", "Apple Development"];
         }
+        return MacTargetHelper.isMasTarget(targetPlatform) ? ["Apple Distribution", "3rd Party Mac Developer Application"] : ["Developer ID Application"];
+    }
+    /**
+     * The MAS `.pkg` installer is only built for distribution signing — a development-signed build
+     * (`mas-dev`, or an explicit `sign.type: "development"` on a `mas` build) is installed directly.
+     */
+    static shouldCreateMasInstaller(targetPlatform, configType) {
+        return MacTargetHelper.isMasTarget(targetPlatform) && MacTargetHelper.resolveSigningType(targetPlatform, configType) !== "development";
     }
     static isMasTarget(targetName) {
         return targetName === "mas" || targetName === "mas-dev";

package/dist/targets/mac/MacTargetHelper.js.map

@@ -1 +1 @@
-{"version":3,"file":"MacTargetHelper.js","sourceRoot":"","sources":["../../../src/targets/mac/MacTargetHelper.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAA4D,MAAM,oBAAoB,CAAA;AAEvG,OAAO,EAAE,IAAI,EAAE,yBAAyB,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AAE/E,OAAO,KAAK,IAAI,MAAM,MAAM,CAAA;AAC5B,OAAO,EAAY,YAAY,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,mCAAmC,CAAA;AAGjG,OAAO,EAAE,cAAc,EAAe,MAAM,yBAAyB,CAAA;AACrE,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAA;AAI3D,MAAM,OAAO,eAAe;IAC1B,YAAoB,QAAqB;QAArB,aAAQ,GAAR,QAAQ,CAAa;IAAG,CAAC;IAE7C,kBAAkB;QAChB,IAAI,IAAI,CAAC,QAAQ,CAAC,gBAAgB,EAAE,CAAC;YACnC,MAAM,IAAI,yBAAyB,CAAC,yEAAyE,CAAC,CAAA;QAChH,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,oCAAoC,EAAE,EAAE,4BAA4B,CAAC,CAAA;QACxF,OAAO,KAAK,CAAA;IACd,CAAC;IAED,KAAK,CAAC,mBAAmB,CACvB,cAA4B,EAC5B,SAA6B,EAC7B,YAA8B,EAC9B,aAAsB,EACtB,QAAgD;QAEhD,MAAM,KAAK,GAAG,eAAe,CAAC,WAAW,CAAC,cAAc,CAAC,CAAA;QACzD,MAAM,gBAAgB,GAAG,eAAe,CAAC,mBAAmB,CAAC,cAAc,CAAC,CAAA;QAE5E,IAAI,QAAQ,GAAoB,IAAI,CAAA;QACpC,KAAK,MAAM,eAAe,IAAI,gBAAgB,EAAE,CAAC;YAC/C,QAAQ,GAAG,MAAM,YAAY,CAAC,eAAe,EAAE,SAAS,EAAE,YAAY,CAAC,CAAA;YACvE,IAAI,QAAQ,IAAI,IAAI,EAAE,CAAC;gBACrB,MAAK;YACP,CAAC;QACH,CAAC;QAED,IAAI,QAAQ,IAAI,IAAI,EAAE,CAAC;YACrB,MAAM,UAAU,GAAG,CAAC,aAAa,CAAA;YACjC,IAAI,SAAS,KAAK,GAAG,EAAE,CAAC;gBACtB,IAAI,eAAe,CAAC,kCAAkC,CAAC,cAAc,EAAE,QAAQ,EAAE,eAAe,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,2BAA2B,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC;oBACzK,GAAG,CAAC,IAAI,CACN,IAAI,EACJ,wHAAwH;wBACtH,gHAAgH,CACnH,CAAA;gBACH,CAAC;gBACD,QAAQ,GAAG,IAAI,QAAQ,CAAC,GAAG,EAAE,SAAS,CAAC,CAAA;YACzC,CAAC;iBAAM,IAAI,UAAU,EAAE,CAAC;gBACtB,MAAM,WAAW,CAAC,KAAK,EAAE,gBAAgB,EAAE,SAAS,EAAE,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAA;gBACnG,OAAO,IAAI,CAAA;YACb,CAAC;QACH,CAAC;QAED,OAAO,QAAQ,CAAA;IACjB,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,2BAA2B,CAAC,cAA4B,EAAE,QAAuC;QACrG,IAAI,IAAI,GAAG,QAAQ,EAAE,YAAY,CAAA;QACjC,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,CAAC,GAAG,gBAAgB,eAAe,CAAC,WAAW,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAA;YAC7F,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,wBAAwB,CAAC,CAAA;QACnJ,CAAC;QACD,IAAI,CAAC;YACH,MAAM,YAAY,GAAG,MAAM,cAAc,CAAc,IAAI,CAAC,CAAA;YAC5D,OAAO,YAAY,CAAC,kDAAkD,CAAC,KAAK,IAAI,CAAA;QAClF,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,GAAG,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,uDAAuD,CAAC,CAAA;YAC9F,OAAO,KAAK,CAAA;QACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,gBAAgB,CACpB,OAAe,EACf,QAAkB,EAClB,MAA8C,EAC9C,YAA8B,EAC9B,IAAU,EACV,cAA4B;QAE5B,MAAM,KAAK,GAAG,eAAe,CAAC,WAAW,CAAC,cAAc,CAAC,CAAA;QACzD,kHAAkH;QAClH,MAAM,IAAI,GAA4B,eAAe,CAAC,gBAAgB,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,cAAc,CAAA;QAEvH,IAAI,QAAQ,GAAG,MAAM,EAAE,QAAQ,IAAI,SAAS,CAAA;QAC5C,IAAI,QAAQ,EAAE,CAAC;YACb,kHAAkH;YAClH,QAAQ,GAAG,CACT,MAAM,OAAO,CAAC,GAAG,CACf,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAC,WAAW,EAAC,EAAE;gBACnC,MAAM,mBAAmB,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,WAAW,EAAE,IAAI,CAAC,CAAA;gBACvE,OAAO,MAAM,OAAO,CAAC,GAAG,CACtB,mBAAmB,CAAC,GAAG,CAAC,KAAK,EAAC,CAAC,EAAC,EAAE;oBAChC,IAAI,MAAM,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;wBACxB,OAAO,CAAC,CAAA;oBACV,CAAC;oBACD,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAA;gBACjC,CAAC,CAAC,CACH,CAAA;YACH,CAAC,CAAC,CACH,CACF,CAAC,IAAI,EAAE,CAAA;YACR,GAAG,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,mDAAmD,CAAC,CAAA;QACrH,CAAC;QAED,IAAI,MAAM,GAAG,MAAM,EAAE,MAAM,CAAA;QAC3B,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC1B,IAAI,MAAM,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;gBACvB,MAAM,GAAG,SAAS,CAAA;YACpB,CAAC;QACH,CAAC;aAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YACtC,MAAM,GAAG,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAA;QACrD,CAAC;QAED,MAAM,QAAQ,GACZ,OAAO,MAAM,KAAK,UAAU;YAC1B,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC,EAAE;gBACf,IAAI,CAAC;oBACH,OAAO,IAAI,MAAM,CAAC,EAAE,CAAC,CAAA;gBACvB,CAAC;gBAAC,OAAO,CAAM,EAAE,CAAC;oBAChB,MAAM,IAAI,yBAAyB,CAAC,iCAAiC,EAAE,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAA;gBAC1F,CAAC;YACH,CAAC,CAAC,CAAA;QAER,OAAO;YACL,kBAAkB,EAAE,KAAK;YACzB,oEAAoE;YACpE,+IAA+I;YAC/I,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE;gBACvB,IAAI,QAAQ,IAAI,IAAI,EAAE,CAAC;oBACrB,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;wBAC9B,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;4BACtB,OAAO,IAAI,CAAA;wBACb,CAAC;oBACH,CAAC;gBACH,CAAC;gBACD,IAAI,OAAO,MAAM,KAAK,UAAU,IAAI,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;oBACjD,OAAO,IAAI,CAAA;gBACb,CAAC;gBACD,OAAO,CACL,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;oBACtB,IAAI,CAAC,UAAU,CAAC,mBAAmB,EAAE,OAAO,CAAC,MAAM,CAAC;oBACpD,IAAI,CAAC,QAAQ,CAAC,yCAAyC,CAAC;oBACxD,IAAI,CAAC,QAAQ,CAAC,kDAAkD,CAAC;oBACjE,IAAI,CAAC,QAAQ,CAAC,0CAA0C,CAAC,CAC1D,CAAA;gBAED;;;oBAGI;YACN,CAAC;YACD,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;YAC/D,IAAI;YACJ,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ;YAClC,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,eAAe,IAAI,SAAS;YAC1D,GAAG,EAAE,OAAO;YACZ,QAAQ,EAAE,YAAY,IAAI,SAAS;YACnC,QAAQ;YACR,oEAAoE;YACpE,YAAY,EAAE,MAAM,EAAE,YAAY;YAClC,mBAAmB,EAAE,MAAM,EAAE,mBAAmB;YAChD,cAAc,EAAE,MAAM,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,cAAc,EAAE,MAAM,CAAC;YAC7E,mBAAmB,EAAE,MAAM,EAAE,mBAAmB,IAAI,SAAS;SAC9D,CAAA;IACH,CAAC;IAED,KAAK,CAAC,kBAAkB,CACtB,OAAe,EACf,MAAc,EACd,UAA4B,EAC5B,YAA8B,EAC9B,cAA4B,EAC5B,IAAU,EACV,iBAAiC;QAEjC,MAAM,QAAQ,GAAG,eAAe,CAAC,gBAAgB,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,mCAAmC,CAAA;QACzH,MAAM,oBAAoB,GAAG,MAAM,YAAY,CAAC,QAAQ,EAAE,iBAAiB,EAAE,YAAY,CAAC,CAAA;QAE1F,IAAI,oBAAoB,IAAI,IAAI,EAAE,CAAC;YACjC,MAAM,IAAI,yBAAyB,CAAC,sBAAsB,QAAQ,kFAAkF,CAAC,CAAA;QACvJ,CAAC;QAED,eAAe,CAAC,6BAA6B,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAA;QAEzE,kEAAkE;QAClE,oFAAoF;QACpF,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,yBAAyB,CAAC,UAAU,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAA;QACpG,eAAe,CAAC,6BAA6B,CAAC,YAAY,EAAE,eAAe,CAAC,CAAA;QAC5E,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,YAAY,CAAC,CAAA;QACvD,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,YAAY,EAAE,oBAAoB,EAAE,YAAY,CAAC,CAAA;QACrF,MAAM,IAAI,CAAC,QAAQ,CAAC,0BAA0B,CAAC;YAC7C,IAAI,EAAE,YAAY;YAClB,MAAM,EAAE,IAAI;YACZ,IAAI,EAAE,IAAI,CAAC,GAAG;YACd,gBAAgB,EAAE,IAAI,CAAC,QAAQ,CAAC,uBAAuB,CAAC,YAAY,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,WAAW,CAAC;YACnI,QAAQ,EAAE,IAAI,CAAC,QAAQ;SACxB,CAAC,CAAA;IACJ,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,OAAe,EAAE,cAA4B,EAAE,iBAAgD;QACrH,MAAM,KAAK,GAAG,eAAe,CAAC,WAAW,CAAC,cAAc,CAAC,CAAA;QACzD,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAA;QACrD,MAAM,kBAAkB,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAA;QAEhD,MAAM,eAAe,GAAG,CAAC,QAAgB,EAAE,EAAE;YAC3C,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;gBACzB,IAAI,iBAAiB,EAAE,YAAY,EAAE,CAAC;oBACpC,OAAO,iBAAiB,CAAC,YAAY,CAAA;gBACvC,CAAC;gBACD,MAAM,CAAC,GAAG,gBAAgB,kBAAkB,QAAQ,CAAA;gBACpD,IAAI,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC7B,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAA;gBACtD,CAAC;qBAAM,CAAC;oBACN,OAAO,eAAe,CAAC,wBAAwB,CAAC,CAAA;gBAClD,CAAC;YACH,CAAC;YAED,IAAI,QAAQ,CAAC,QAAQ,CAAC,oBAAoB,CAAC,EAAE,CAAC;gBAC5C,OAAO,iBAAiB,EAAE,uBAAuB,CAAA;YACnD,CAAC;YAED,IAAI,iBAAiB,EAAE,mBAAmB,EAAE,CAAC;gBAC3C,OAAO,iBAAiB,CAAC,mBAAmB,CAAA;YAC9C,CAAC;YACD,MAAM,CAAC,GAAG,gBAAgB,kBAAkB,gBAAgB,CAAA;YAC5D,IAAI,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC7B,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAA;YACtD,CAAC;iBAAM,CAAC;gBACN,OAAO,eAAe,CAAC,wBAAwB,CAAC,CAAA;YAClD,CAAC;QACH,CAAC,CAAA;QAED,MAAM,YAAY,GAAG,KAAK,IAAI,iBAAiB,EAAE,YAAY,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,iBAAiB,CAAC,YAAY,CAAC,CAAA;QAEnJ,OAAO,CAAC,QAAgB,EAAsB,EAAE;YAC9C,MAAM,YAAY,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAA;YAC9C,OAAO;gBACL,YAAY,EAAE,YAAY,IAAI,SAAS;gBACvC,eAAe,EAAE,eAAe,CAAC,kCAAkC,CAAC,cAAc,EAAE,iBAAiB,EAAE,eAAe,CAAC,IAAI,SAAS;gBACpI,SAAS,EAAE,iBAAiB,EAAE,SAAS,IAAI,SAAS;gBACpD,YAAY,EAAE,YAAY,IAAI,SAAS;gBACvC,mBAAmB,EAAE,iBAAiB,EAAE,mBAAmB,IAAI,SAAS;aACzE,CAAA;QACH,CAAC,CAAA;IACH,CAAC;IAED,MAAM,CAAC,mBAAmB,CAAC,cAA4B;QACrD,QAAQ,cAAc,EAAE,CAAC;YACvB,KAAK,SAAS;gBACZ,OAAO,CAAC,eAAe,EAAE,mBAAmB,CAAC,CAAA;YAC/C,KAAK,KAAK;gBACR,OAAO,CAAC,oBAAoB,EAAE,qCAAqC,CAAC,CAAA;YACtE;gBACE,OAAO,CAAC,0BAA0B,CAAC,CAAA;QACvC,CAAC;IACH,CAAC;IAED,MAAM,CAAC,WAAW,CAAC,UAAkB;QACnC,OAAO,UAAU,KAAK,KAAK,IAAI,UAAU,KAAK,SAAS,CAAA;IACzD,CAAC;IAED,MAAM,CAAC,gBAAgB,CAAC,UAAkB;QACxC,OAAO,UAAU,KAAK,SAAS,CAAA;IACjC,CAAC;IAED,MAAM,CAAC,yBAAyB,CAAC,UAAkB;QACjD,+BAA+B;QAC/B,IAAI,eAAe,CAAC,gBAAgB,CAAC,UAAU,CAAC,EAAE,CAAC;YACjD,OAAO,SAAS,CAAA;QAClB,CAAC;QACD,IAAI,eAAe,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE,CAAC;YAC5C,OAAO,KAAK,CAAA;QACd,CAAC;QACD,OAAO,KAAK,CAAA;IACd,CAAC;IAED;;;OAGG;IACH,MAAM,CAAC,kCAAkC,CAAC,cAA4B,EAAE,eAA2C;QACjH,OAAO,eAAe,CAAC,WAAW,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,eAAe,KAAK,IAAI,CAAC,CAAC,CAAC,eAAe,KAAK,KAAK,CAAA;IAC3G,CAAC;IAED,MAAM,CAAC,6BAA6B,CAAC,SAAiB,EAAE,WAAmB;QACzE,IAAI,mBAAmB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YACxC,MAAM,IAAI,yBAAyB,CAAC,WAAW,WAAW,iDAAiD,CAAC,CAAA;QAC9G,CAAC;IACH,CAAC;IAED,MAAM,CAAC,kBAAkB,CAAC,OAAe;QACvC,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,CAAA;QACxC,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAA;QACpC,MAAM,eAAe,GAAG,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAA;QAE/D,IAAI,OAAO,IAAI,eAAe,EAAE,CAAC;YAC/B,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,IAAI,yBAAyB,CAAC,kCAAkC,CAAC,CAAA;YACzE,CAAC;YACD,IAAI,CAAC,eAAe,EAAE,CAAC;gBACrB,MAAM,IAAI,yBAAyB,CAAC,qDAAqD,CAAC,CAAA;YAC5F,CAAC;YACD,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,IAAI,yBAAyB,CAAC,uCAAuC,CAAC,CAAA;YAC9E,CAAC;YACD,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,EAAE,CAAA;QACtD,CAAC;QAED,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,CAAA;QAC7C,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAA;QAClD,MAAM,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAA;QACnD,IAAI,WAAW,IAAI,aAAa,IAAI,cAAc,EAAE,CAAC;YACnD,IAAI,CAAC,WAAW,IAAI,CAAC,aAAa,IAAI,CAAC,cAAc,EAAE,CAAC;gBACtD,MAAM,IAAI,yBAAyB,CAAC,8EAA8E,CAAC,CAAA;YACrH,CAAC;YACD,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,cAAc,EAAE,CAAA;QAChE,CAAC;QAED,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAA;QAC3C,MAAM,eAAe,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAA;QAC1D,IAAI,eAAe,EAAE,CAAC;YACpB,IAAI,IAAI,GAAkC,EAAE,eAAe,EAAE,CAAA;YAC7D,IAAI,QAAQ,EAAE,CAAC;gBACb,IAAI,GAAG,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,CAAA;YAC9B,CAAC;YACD,OAAO,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,CAAA;QAC7B,CAAC;QAED,OAAO,SAAS,CAAA;IAClB,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,OAAe;QACtC,MAAM,eAAe,GAAG,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,QAAQ,CAAA;QAC9D,IAAI,eAAe,KAAK,KAAK,EAAE,CAAC;YAC9B,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,gDAAgD,EAAE,EAAE,4BAA4B,CAAC,CAAA;YACpG,OAAM;QACR,CAAC;QACD,MAAM,OAAO,GAAG,eAAe,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAA;QAC3D,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,gDAAgD,EAAE,EAAE,4BAA4B,CAAC,CAAA;YACpG,OAAM;QACR,CAAC;QACD,MAAM,QAAQ,CAAC,OAAO,CAAC,CAAA;QACvB,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,yBAAyB,CAAC,CAAA;IAC3C,CAAC;CACF","sourcesContent":["import { notarize, type NotarizeOptions, type NotaryToolKeychainCredentials } from \"@electron/notarize\"\nimport type { PerFileSignOptions, SigningDistributionType, SignOptions } from \"@electron/osx-sign\"\nimport { Arch, InvalidConfigurationError, log, statOrNull } from \"builder-util\"\nimport { Nullish } from \"builder-util-runtime\"\nimport * as path from \"path\"\nimport { CertType, findIdentity, Identity, reportError } from \"../../codeSign/mac/macCodeSign.js\"\nimport type { MacPackager } from \"../../macPackager.js\"\nimport { ElectronSignOptions, MasConfiguration } from \"../../options/macOptions.js\"\nimport { parsePlistFile, PlistObject } from \"../../util/mac/plist.js\"\nimport { getTemplatePath } from \"../../util/pathManager.js\"\n\nexport type PlatformType = \"mas\" | \"mas-dev\" | \"mac\"\n\nexport class MacTargetHelper {\n  constructor(private packager: MacPackager) {}\n\n  handleNullIdentity(): boolean {\n    if (this.packager.forceCodeSigning) {\n      throw new InvalidConfigurationError(\"identity explicitly is set to null, but forceCodeSigning is set to true\")\n    }\n    log.info({ reason: \"identity explicitly is set to null\" }, \"skipped macOS code signing\")\n    return false\n  }\n\n  async findSigningIdentity(\n    targetPlatform: PlatformType,\n    qualifier: string | undefined,\n    keychainFile: string | Nullish,\n    hasCustomSign: boolean,\n    signOpts: ElectronSignOptions | null | undefined\n  ): Promise<Identity | null> {\n    const isMas = MacTargetHelper.isMasTarget(targetPlatform)\n    const certificateTypes = MacTargetHelper.getCertificateTypes(targetPlatform)\n\n    let identity: Identity | null = null\n    for (const certificateType of certificateTypes) {\n      identity = await findIdentity(certificateType, qualifier, keychainFile)\n      if (identity != null) {\n        break\n      }\n    }\n\n    if (identity == null) {\n      const noIdentity = !hasCustomSign\n      if (qualifier === \"-\") {\n        if (MacTargetHelper.isHardenedRuntimeEnabledForSigning(targetPlatform, signOpts?.hardenedRuntime) && !(await this.isLibraryValidationDisabled(targetPlatform, signOpts))) {\n          log.warn(\n            null,\n            \"ad-hoc signing with hardenedRuntime enabled requires the com.apple.security.cs.disable-library-validation entitlement \" +\n              \"to prevent app launch failures due to library validation. See https://electron.build/code-signing for details.\"\n          )\n        }\n        identity = new Identity(\"-\", undefined)\n      } else if (noIdentity) {\n        await reportError(isMas, certificateTypes, qualifier, keychainFile, this.packager.forceCodeSigning)\n        return null\n      }\n    }\n\n    return identity\n  }\n\n  /**\n   * Resolves the effective app entitlements file — same precedence as `getOptionsForFile()` — and\n   * returns whether it grants `com.apple.security.cs.disable-library-validation`.\n   * Fails open: returns false (so callers still warn) when the file cannot be read or parsed.\n   */\n  async isLibraryValidationDisabled(targetPlatform: PlatformType, signOpts: ElectronSignOptions | Nullish): Promise<boolean> {\n    let file = signOpts?.entitlements\n    if (!file) {\n      const p = `entitlements.${MacTargetHelper.isMasTarget(targetPlatform) ? \"mas\" : \"mac\"}.plist`\n      file = (await this.packager.resourceList).includes(p) ? path.join(this.packager.buildResourcesDir, p) : getTemplatePath(\"entitlements.mac.plist\")\n    }\n    try {\n      const entitlements = await parsePlistFile<PlistObject>(file)\n      return entitlements[\"com.apple.security.cs.disable-library-validation\"] === true\n    } catch (e: any) {\n      log.debug({ file, error: e.message }, \"cannot read entitlements to verify library validation\")\n      return false\n    }\n  }\n\n  async buildSignOptions(\n    appPath: string,\n    identity: Identity,\n    config: ElectronSignOptions | null | undefined,\n    keychainFile: string | Nullish,\n    arch: Arch,\n    targetPlatform: PlatformType\n  ): Promise<SignOptions> {\n    const isMas = MacTargetHelper.isMasTarget(targetPlatform)\n    // `type` is derived from the build flavor, never from user config: mas-dev → development, otherwise distribution.\n    const type: SigningDistributionType = MacTargetHelper.isMasDevelopment(targetPlatform) ? \"development\" : \"distribution\"\n\n    let binaries = config?.binaries || undefined\n    if (binaries) {\n      // Accept absolute paths for external binaries, else resolve relative paths from the artifact's app Contents path.\n      binaries = (\n        await Promise.all(\n          binaries.flatMap(async destination => {\n            const expandedDestination = this.packager.expandArch(destination, arch)\n            return await Promise.all(\n              expandedDestination.map(async d => {\n                if (await statOrNull(d)) {\n                  return d\n                }\n                return path.resolve(appPath, d)\n              })\n            )\n          })\n        )\n      ).flat()\n      log.info({ binaries, arch: arch == null ? null : Arch[arch] }, \"signing additional user-defined binaries for arch\")\n    }\n\n    let filter = config?.ignore\n    if (Array.isArray(filter)) {\n      if (filter.length == 0) {\n        filter = undefined\n      }\n    } else if (typeof filter === \"string\") {\n      filter = filter.length === 0 ? undefined : [filter]\n    }\n\n    const filterRe =\n      typeof filter === \"function\"\n        ? null\n        : filter?.map(it => {\n            try {\n              return new RegExp(it)\n            } catch (e: any) {\n              throw new InvalidConfigurationError(`Invalid regex filter pattern: ${it}. ${e.message}`)\n            }\n          })\n\n    return {\n      identityValidation: false,\n      // https://github.com/electron-userland/electron-builder/issues/1699\n      // kext are signed by the chipset manufacturers. You need a special certificate (only available on request) from Apple to be able to sign kext.\n      ignore: (file: string) => {\n        if (filterRe != null) {\n          for (const regExp of filterRe) {\n            if (regExp.test(file)) {\n              return true\n            }\n          }\n        }\n        if (typeof filter === \"function\" && filter(file)) {\n          return true\n        }\n        return (\n          file.endsWith(\".kext\") ||\n          file.startsWith(\"/Contents/PlugIns\", appPath.length) ||\n          file.includes(\"/node_modules/puppeteer/.local-chromium\") ||\n          file.includes(\"/node_modules/playwright-firefox/.local-browsers\") ||\n          file.includes(\"/node_modules/playwright/.local-browsers\")\n        )\n\n        /* Those are browser automating modules, browser (chromium, nightly) cannot be signed\n          https://github.com/electron-userland/electron-builder/issues/2010\n          https://github.com/electron-userland/electron-builder/issues/5383\n          */\n      },\n      identity: identity ? identity.hash || identity.name : undefined,\n      type,\n      platform: isMas ? \"mas\" : \"darwin\",\n      version: this.packager.config.electronVersion || undefined,\n      app: appPath,\n      keychain: keychainFile || undefined,\n      binaries,\n      // https://github.com/electron-userland/electron-builder/issues/1480\n      strictVerify: config?.strictVerify,\n      preAutoEntitlements: config?.preAutoEntitlements,\n      optionsForFile: await this.getOptionsForFile(appPath, targetPlatform, config),\n      provisioningProfile: config?.provisioningProfile || undefined,\n    }\n  }\n\n  async createMasInstaller(\n    appPath: string,\n    outDir: string,\n    masOptions: MasConfiguration,\n    keychainFile: string | Nullish,\n    targetPlatform: PlatformType,\n    arch: Arch,\n    identityQualifier?: string | null\n  ): Promise<void> {\n    const certType = MacTargetHelper.isMasDevelopment(targetPlatform) ? \"Mac Developer\" : \"3rd Party Mac Developer Installer\"\n    const masInstallerIdentity = await findIdentity(certType, identityQualifier, keychainFile)\n\n    if (masInstallerIdentity == null) {\n      throw new InvalidConfigurationError(`Cannot find valid \"${certType}\" identity to sign MAS installer, please see https://electron.build/code-signing`)\n    }\n\n    MacTargetHelper.assertSafePathForCommandUsage(outDir, \"output directory\")\n\n    // mas uploaded to AppStore, so, use \"-\" instead of space for name\n    // path.basename prevents path traversal if a crafted artifactName contains \"../../\"\n    const artifactName = path.basename(this.packager.expandArtifactNamePattern(masOptions, \"pkg\", arch))\n    MacTargetHelper.assertSafePathForCommandUsage(artifactName, \"artifact name\")\n    const artifactPath = path.resolve(outDir, artifactName)\n    await this.packager.doFlat(appPath, artifactPath, masInstallerIdentity, keychainFile)\n    await this.packager.emitArtifactBuildCompleted({\n      file: artifactPath,\n      target: null,\n      arch: Arch.x64,\n      safeArtifactName: this.packager.computeSafeArtifactName(artifactName, \"pkg\", arch, true, this.packager.platformOptions.defaultArch),\n      packager: this.packager,\n    })\n  }\n\n  async getOptionsForFile(appPath: string, targetPlatform: PlatformType, customSignOptions: ElectronSignOptions | Nullish): Promise<(filePath: string) => PerFileSignOptions> {\n    const isMas = MacTargetHelper.isMasTarget(targetPlatform)\n    const resourceList = await this.packager.resourceList\n    const entitlementsSuffix = isMas ? \"mas\" : \"mac\"\n\n    const getEntitlements = (filePath: string) => {\n      if (filePath === appPath) {\n        if (customSignOptions?.entitlements) {\n          return customSignOptions.entitlements\n        }\n        const p = `entitlements.${entitlementsSuffix}.plist`\n        if (resourceList.includes(p)) {\n          return path.join(this.packager.buildResourcesDir, p)\n        } else {\n          return getTemplatePath(\"entitlements.mac.plist\")\n        }\n      }\n\n      if (filePath.includes(\"Library/LoginItems\")) {\n        return customSignOptions?.entitlementsLoginHelper\n      }\n\n      if (customSignOptions?.entitlementsInherit) {\n        return customSignOptions.entitlementsInherit\n      }\n      const p = `entitlements.${entitlementsSuffix}.inherit.plist`\n      if (resourceList.includes(p)) {\n        return path.join(this.packager.buildResourcesDir, p)\n      } else {\n        return getTemplatePath(\"entitlements.mac.plist\")\n      }\n    }\n\n    const requirements = isMas || customSignOptions?.requirements == null ? undefined : await this.packager.getResource(customSignOptions.requirements)\n\n    return (filePath: string): PerFileSignOptions => {\n      const entitlements = getEntitlements(filePath)\n      return {\n        entitlements: entitlements || undefined,\n        hardenedRuntime: MacTargetHelper.isHardenedRuntimeEnabledForSigning(targetPlatform, customSignOptions?.hardenedRuntime) ?? undefined,\n        timestamp: customSignOptions?.timestamp || undefined,\n        requirements: requirements || undefined,\n        additionalArguments: customSignOptions?.additionalArguments || undefined,\n      }\n    }\n  }\n\n  static getCertificateTypes(targetPlatform: PlatformType): CertType[] {\n    switch (targetPlatform) {\n      case \"mas-dev\":\n        return [\"Mac Developer\", \"Apple Development\"]\n      case \"mas\":\n        return [\"Apple Distribution\", \"3rd Party Mac Developer Application\"]\n      default:\n        return [\"Developer ID Application\"]\n    }\n  }\n\n  static isMasTarget(targetName: string): boolean {\n    return targetName === \"mas\" || targetName === \"mas-dev\"\n  }\n\n  static isMasDevelopment(targetName: string): boolean {\n    return targetName === \"mas-dev\"\n  }\n\n  static getPlatformTypeFromTarget(targetName: string): PlatformType {\n    // must check for mas-dev first\n    if (MacTargetHelper.isMasDevelopment(targetName)) {\n      return \"mas-dev\"\n    }\n    if (MacTargetHelper.isMasTarget(targetName)) {\n      return \"mas\"\n    }\n    return \"mac\"\n  }\n\n  /**\n   * Returns true when hardened runtime will be active for signing.\n   * For non-MAS builds it defaults to on; for MAS it defaults to off.\n   */\n  static isHardenedRuntimeEnabledForSigning(targetPlatform: PlatformType, hardenedRuntime: boolean | null | undefined): boolean {\n    return MacTargetHelper.isMasTarget(targetPlatform) ? hardenedRuntime === true : hardenedRuntime !== false\n  }\n\n  static assertSafePathForCommandUsage(pathValue: string, description: string): void {\n    if (/[\\0\\r\\n\"'`$;&|<>]/.test(pathValue)) {\n      throw new InvalidConfigurationError(`Invalid ${description}: contains unsupported shell-special characters`)\n    }\n  }\n\n  static getNotarizeOptions(appPath: string): NotarizeOptions | undefined {\n    const teamId = process.env.APPLE_TEAM_ID\n    const appleId = process.env.APPLE_ID\n    const appleIdPassword = process.env.APPLE_APP_SPECIFIC_PASSWORD\n\n    if (appleId || appleIdPassword) {\n      if (!appleId) {\n        throw new InvalidConfigurationError(`APPLE_ID env var needs to be set`)\n      }\n      if (!appleIdPassword) {\n        throw new InvalidConfigurationError(`APPLE_APP_SPECIFIC_PASSWORD env var needs to be set`)\n      }\n      if (!teamId) {\n        throw new InvalidConfigurationError(`APPLE_TEAM_ID env var needs to be set`)\n      }\n      return { appPath, appleId, appleIdPassword, teamId }\n    }\n\n    const appleApiKey = process.env.APPLE_API_KEY\n    const appleApiKeyId = process.env.APPLE_API_KEY_ID\n    const appleApiIssuer = process.env.APPLE_API_ISSUER\n    if (appleApiKey || appleApiKeyId || appleApiIssuer) {\n      if (!appleApiKey || !appleApiKeyId || !appleApiIssuer) {\n        throw new InvalidConfigurationError(`Env vars APPLE_API_KEY, APPLE_API_KEY_ID and APPLE_API_ISSUER need to be set`)\n      }\n      return { appPath, appleApiKey, appleApiKeyId, appleApiIssuer }\n    }\n\n    const keychain = process.env.APPLE_KEYCHAIN\n    const keychainProfile = process.env.APPLE_KEYCHAIN_PROFILE\n    if (keychainProfile) {\n      let args: NotaryToolKeychainCredentials = { keychainProfile }\n      if (keychain) {\n        args = { ...args, keychain }\n      }\n      return { appPath, ...args }\n    }\n\n    return undefined\n  }\n\n  async notarizeIfProvided(appPath: string): Promise<void> {\n    const notarizeOptions = this.packager.platformOptions.notarize\n    if (notarizeOptions === false) {\n      log.info({ reason: \"`notarize` options were set explicitly `false`\" }, \"skipped macOS notarization\")\n      return\n    }\n    const options = MacTargetHelper.getNotarizeOptions(appPath)\n    if (!options) {\n      log.warn({ reason: \"`notarize` options were unable to be generated\" }, \"skipped macOS notarization\")\n      return\n    }\n    await notarize(options)\n    log.info(null, \"notarization successful\")\n  }\n}\n"]}
+{"version":3,"file":"MacTargetHelper.js","sourceRoot":"","sources":["../../../src/targets/mac/MacTargetHelper.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAA4D,MAAM,oBAAoB,CAAA;AAEvG,OAAO,EAAE,IAAI,EAAE,yBAAyB,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AAE/E,OAAO,KAAK,IAAI,MAAM,MAAM,CAAA;AAC5B,OAAO,EAAY,YAAY,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,mCAAmC,CAAA;AAGjG,OAAO,EAAE,cAAc,EAAe,MAAM,yBAAyB,CAAA;AACrE,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAA;AAI3D,MAAM,OAAO,eAAe;IAC1B,YAAoB,QAAqB;QAArB,aAAQ,GAAR,QAAQ,CAAa;IAAG,CAAC;IAE7C,kBAAkB;QAChB,IAAI,IAAI,CAAC,QAAQ,CAAC,gBAAgB,EAAE,CAAC;YACnC,MAAM,IAAI,yBAAyB,CAAC,yEAAyE,CAAC,CAAA;QAChH,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,oCAAoC,EAAE,EAAE,4BAA4B,CAAC,CAAA;QACxF,OAAO,KAAK,CAAA;IACd,CAAC;IAED,KAAK,CAAC,mBAAmB,CACvB,cAA4B,EAC5B,SAA6B,EAC7B,YAA8B,EAC9B,aAAsB,EACtB,QAAgD;QAEhD,MAAM,KAAK,GAAG,eAAe,CAAC,WAAW,CAAC,cAAc,CAAC,CAAA;QACzD,MAAM,gBAAgB,GAAG,eAAe,CAAC,mBAAmB,CAAC,cAAc,EAAE,eAAe,CAAC,kBAAkB,CAAC,cAAc,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAA;QAEhJ,IAAI,QAAQ,GAAoB,IAAI,CAAA;QACpC,KAAK,MAAM,eAAe,IAAI,gBAAgB,EAAE,CAAC;YAC/C,QAAQ,GAAG,MAAM,YAAY,CAAC,eAAe,EAAE,SAAS,EAAE,YAAY,CAAC,CAAA;YACvE,IAAI,QAAQ,IAAI,IAAI,EAAE,CAAC;gBACrB,MAAK;YACP,CAAC;QACH,CAAC;QAED,IAAI,QAAQ,IAAI,IAAI,EAAE,CAAC;YACrB,MAAM,UAAU,GAAG,CAAC,aAAa,CAAA;YACjC,IAAI,SAAS,KAAK,GAAG,EAAE,CAAC;gBACtB,IAAI,eAAe,CAAC,kCAAkC,CAAC,cAAc,EAAE,QAAQ,EAAE,eAAe,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,2BAA2B,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC;oBACzK,GAAG,CAAC,IAAI,CACN,IAAI,EACJ,wHAAwH;wBACtH,gHAAgH,CACnH,CAAA;gBACH,CAAC;gBACD,QAAQ,GAAG,IAAI,QAAQ,CAAC,GAAG,EAAE,SAAS,CAAC,CAAA;YACzC,CAAC;iBAAM,IAAI,UAAU,EAAE,CAAC;gBACtB,MAAM,WAAW,CAAC,KAAK,EAAE,gBAAgB,EAAE,SAAS,EAAE,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAA;gBACnG,OAAO,IAAI,CAAA;YACb,CAAC;QACH,CAAC;QAED,OAAO,QAAQ,CAAA;IACjB,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,2BAA2B,CAAC,cAA4B,EAAE,QAAuC;QACrG,IAAI,IAAI,GAAG,QAAQ,EAAE,YAAY,CAAA;QACjC,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,CAAC,GAAG,gBAAgB,eAAe,CAAC,WAAW,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAA;YAC7F,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,wBAAwB,CAAC,CAAA;QACnJ,CAAC;QACD,IAAI,CAAC;YACH,MAAM,YAAY,GAAG,MAAM,cAAc,CAAc,IAAI,CAAC,CAAA;YAC5D,OAAO,YAAY,CAAC,kDAAkD,CAAC,KAAK,IAAI,CAAA;QAClF,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,GAAG,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,uDAAuD,CAAC,CAAA;YAC9F,OAAO,KAAK,CAAA;QACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,gBAAgB,CACpB,OAAe,EACf,QAAkB,EAClB,MAA8C,EAC9C,YAA8B,EAC9B,IAAU,EACV,cAA4B;QAE5B,MAAM,KAAK,GAAG,eAAe,CAAC,WAAW,CAAC,cAAc,CAAC,CAAA;QACzD,MAAM,IAAI,GAAG,eAAe,CAAC,kBAAkB,CAAC,cAAc,EAAE,MAAM,EAAE,IAAI,CAAC,CAAA;QAE7E,IAAI,QAAQ,GAAG,MAAM,EAAE,QAAQ,IAAI,SAAS,CAAA;QAC5C,IAAI,QAAQ,EAAE,CAAC;YACb,kHAAkH;YAClH,QAAQ,GAAG,CACT,MAAM,OAAO,CAAC,GAAG,CACf,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAC,WAAW,EAAC,EAAE;gBACnC,MAAM,mBAAmB,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,WAAW,EAAE,IAAI,CAAC,CAAA;gBACvE,OAAO,MAAM,OAAO,CAAC,GAAG,CACtB,mBAAmB,CAAC,GAAG,CAAC,KAAK,EAAC,CAAC,EAAC,EAAE;oBAChC,IAAI,MAAM,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;wBACxB,OAAO,CAAC,CAAA;oBACV,CAAC;oBACD,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAA;gBACjC,CAAC,CAAC,CACH,CAAA;YACH,CAAC,CAAC,CACH,CACF,CAAC,IAAI,EAAE,CAAA;YACR,GAAG,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,mDAAmD,CAAC,CAAA;QACrH,CAAC;QAED,IAAI,MAAM,GAAG,MAAM,EAAE,MAAM,CAAA;QAC3B,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC1B,IAAI,MAAM,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;gBACvB,MAAM,GAAG,SAAS,CAAA;YACpB,CAAC;QACH,CAAC;aAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YACtC,MAAM,GAAG,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAA;QACrD,CAAC;QAED,MAAM,QAAQ,GACZ,OAAO,MAAM,KAAK,UAAU;YAC1B,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC,EAAE;gBACf,IAAI,CAAC;oBACH,OAAO,IAAI,MAAM,CAAC,EAAE,CAAC,CAAA;gBACvB,CAAC;gBAAC,OAAO,CAAM,EAAE,CAAC;oBAChB,MAAM,IAAI,yBAAyB,CAAC,iCAAiC,EAAE,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAA;gBAC1F,CAAC;YACH,CAAC,CAAC,CAAA;QAER,OAAO;YACL,kBAAkB,EAAE,KAAK;YACzB,oEAAoE;YACpE,+IAA+I;YAC/I,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE;gBACvB,IAAI,QAAQ,IAAI,IAAI,EAAE,CAAC;oBACrB,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;wBAC9B,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;4BACtB,OAAO,IAAI,CAAA;wBACb,CAAC;oBACH,CAAC;gBACH,CAAC;gBACD,IAAI,OAAO,MAAM,KAAK,UAAU,IAAI,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;oBACjD,OAAO,IAAI,CAAA;gBACb,CAAC;gBACD,OAAO,CACL,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;oBACtB,IAAI,CAAC,UAAU,CAAC,mBAAmB,EAAE,OAAO,CAAC,MAAM,CAAC;oBACpD,IAAI,CAAC,QAAQ,CAAC,yCAAyC,CAAC;oBACxD,IAAI,CAAC,QAAQ,CAAC,kDAAkD,CAAC;oBACjE,IAAI,CAAC,QAAQ,CAAC,0CAA0C,CAAC,CAC1D,CAAA;gBAED;;;oBAGI;YACN,CAAC;YACD,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;YAC/D,IAAI;YACJ,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ;YAClC,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,eAAe,IAAI,SAAS;YAC1D,GAAG,EAAE,OAAO;YACZ,QAAQ,EAAE,YAAY,IAAI,SAAS;YACnC,QAAQ;YACR,oEAAoE;YACpE,YAAY,EAAE,MAAM,EAAE,YAAY;YAClC,mBAAmB,EAAE,MAAM,EAAE,mBAAmB;YAChD,cAAc,EAAE,MAAM,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,cAAc,EAAE,MAAM,CAAC;YAC7E,mBAAmB,EAAE,MAAM,EAAE,mBAAmB,IAAI,SAAS;SAC9D,CAAA;IACH,CAAC;IAED,KAAK,CAAC,kBAAkB,CACtB,OAAe,EACf,MAAc,EACd,UAA4B,EAC5B,YAA8B,EAC9B,cAA4B,EAC5B,IAAU,EACV,iBAAiC;QAEjC,MAAM,QAAQ,GAAG,eAAe,CAAC,gBAAgB,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,mCAAmC,CAAA;QACzH,MAAM,oBAAoB,GAAG,MAAM,YAAY,CAAC,QAAQ,EAAE,iBAAiB,EAAE,YAAY,CAAC,CAAA;QAE1F,IAAI,oBAAoB,IAAI,IAAI,EAAE,CAAC;YACjC,MAAM,IAAI,yBAAyB,CAAC,sBAAsB,QAAQ,kFAAkF,CAAC,CAAA;QACvJ,CAAC;QAED,eAAe,CAAC,6BAA6B,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAA;QAEzE,kEAAkE;QAClE,oFAAoF;QACpF,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,yBAAyB,CAAC,UAAU,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAA;QACpG,eAAe,CAAC,6BAA6B,CAAC,YAAY,EAAE,eAAe,CAAC,CAAA;QAC5E,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,YAAY,CAAC,CAAA;QACvD,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,YAAY,EAAE,oBAAoB,EAAE,YAAY,CAAC,CAAA;QACrF,MAAM,IAAI,CAAC,QAAQ,CAAC,0BAA0B,CAAC;YAC7C,IAAI,EAAE,YAAY;YAClB,MAAM,EAAE,IAAI;YACZ,IAAI,EAAE,IAAI,CAAC,GAAG;YACd,gBAAgB,EAAE,IAAI,CAAC,QAAQ,CAAC,uBAAuB,CAAC,YAAY,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,WAAW,CAAC;YACnI,QAAQ,EAAE,IAAI,CAAC,QAAQ;SACxB,CAAC,CAAA;IACJ,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,OAAe,EAAE,cAA4B,EAAE,iBAAgD;QACrH,MAAM,KAAK,GAAG,eAAe,CAAC,WAAW,CAAC,cAAc,CAAC,CAAA;QACzD,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAA;QACrD,MAAM,kBAAkB,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAA;QAEhD,MAAM,eAAe,GAAG,CAAC,QAAgB,EAAE,EAAE;YAC3C,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;gBACzB,IAAI,iBAAiB,EAAE,YAAY,EAAE,CAAC;oBACpC,OAAO,iBAAiB,CAAC,YAAY,CAAA;gBACvC,CAAC;gBACD,MAAM,CAAC,GAAG,gBAAgB,kBAAkB,QAAQ,CAAA;gBACpD,IAAI,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC7B,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAA;gBACtD,CAAC;qBAAM,CAAC;oBACN,OAAO,eAAe,CAAC,wBAAwB,CAAC,CAAA;gBAClD,CAAC;YACH,CAAC;YAED,IAAI,QAAQ,CAAC,QAAQ,CAAC,oBAAoB,CAAC,EAAE,CAAC;gBAC5C,OAAO,iBAAiB,EAAE,uBAAuB,CAAA;YACnD,CAAC;YAED,IAAI,iBAAiB,EAAE,mBAAmB,EAAE,CAAC;gBAC3C,OAAO,iBAAiB,CAAC,mBAAmB,CAAA;YAC9C,CAAC;YACD,MAAM,CAAC,GAAG,gBAAgB,kBAAkB,gBAAgB,CAAA;YAC5D,IAAI,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC7B,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAA;YACtD,CAAC;iBAAM,CAAC;gBACN,OAAO,eAAe,CAAC,wBAAwB,CAAC,CAAA;YAClD,CAAC;QACH,CAAC,CAAA;QAED,MAAM,YAAY,GAAG,KAAK,IAAI,iBAAiB,EAAE,YAAY,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,iBAAiB,CAAC,YAAY,CAAC,CAAA;QAEnJ,OAAO,CAAC,QAAgB,EAAsB,EAAE;YAC9C,MAAM,YAAY,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAA;YAC9C,OAAO;gBACL,YAAY,EAAE,YAAY,IAAI,SAAS;gBACvC,eAAe,EAAE,eAAe,CAAC,kCAAkC,CAAC,cAAc,EAAE,iBAAiB,EAAE,eAAe,CAAC,IAAI,SAAS;gBACpI,SAAS,EAAE,iBAAiB,EAAE,SAAS,IAAI,SAAS;gBACpD,YAAY,EAAE,YAAY,IAAI,SAAS;gBACvC,mBAAmB,EAAE,iBAAiB,EAAE,mBAAmB,IAAI,SAAS;aACzE,CAAA;QACH,CAAC,CAAA;IACH,CAAC;IAED;;;OAGG;IACH,MAAM,CAAC,kBAAkB,CAAC,cAA4B,EAAE,UAA6C;QACnG,OAAO,UAAU,IAAI,CAAC,eAAe,CAAC,gBAAgB,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,cAAc,CAAC,CAAA;IAC1G,CAAC;IAED,MAAM,CAAC,mBAAmB,CAAC,cAA4B,EAAE,IAA6B;QACpF,IAAI,IAAI,KAAK,aAAa,EAAE,CAAC;YAC3B,OAAO,CAAC,eAAe,EAAE,mBAAmB,CAAC,CAAA;QAC/C,CAAC;QACD,OAAO,eAAe,CAAC,WAAW,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,oBAAoB,EAAE,qCAAqC,CAAC,CAAC,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAA;IACnJ,CAAC;IAED;;;OAGG;IACH,MAAM,CAAC,wBAAwB,CAAC,cAA4B,EAAE,UAA6C;QACzG,OAAO,eAAe,CAAC,WAAW,CAAC,cAAc,CAAC,IAAI,eAAe,CAAC,kBAAkB,CAAC,cAAc,EAAE,UAAU,CAAC,KAAK,aAAa,CAAA;IACxI,CAAC;IAED,MAAM,CAAC,WAAW,CAAC,UAAkB;QACnC,OAAO,UAAU,KAAK,KAAK,IAAI,UAAU,KAAK,SAAS,CAAA;IACzD,CAAC;IAED,MAAM,CAAC,gBAAgB,CAAC,UAAkB;QACxC,OAAO,UAAU,KAAK,SAAS,CAAA;IACjC,CAAC;IAED,MAAM,CAAC,yBAAyB,CAAC,UAAkB;QACjD,+BAA+B;QAC/B,IAAI,eAAe,CAAC,gBAAgB,CAAC,UAAU,CAAC,EAAE,CAAC;YACjD,OAAO,SAAS,CAAA;QAClB,CAAC;QACD,IAAI,eAAe,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE,CAAC;YAC5C,OAAO,KAAK,CAAA;QACd,CAAC;QACD,OAAO,KAAK,CAAA;IACd,CAAC;IAED;;;OAGG;IACH,MAAM,CAAC,kCAAkC,CAAC,cAA4B,EAAE,eAA2C;QACjH,OAAO,eAAe,CAAC,WAAW,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,eAAe,KAAK,IAAI,CAAC,CAAC,CAAC,eAAe,KAAK,KAAK,CAAA;IAC3G,CAAC;IAED,MAAM,CAAC,6BAA6B,CAAC,SAAiB,EAAE,WAAmB;QACzE,IAAI,mBAAmB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YACxC,MAAM,IAAI,yBAAyB,CAAC,WAAW,WAAW,iDAAiD,CAAC,CAAA;QAC9G,CAAC;IACH,CAAC;IAED,MAAM,CAAC,kBAAkB,CAAC,OAAe;QACvC,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,CAAA;QACxC,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAA;QACpC,MAAM,eAAe,GAAG,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAA;QAE/D,IAAI,OAAO,IAAI,eAAe,EAAE,CAAC;YAC/B,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,IAAI,yBAAyB,CAAC,kCAAkC,CAAC,CAAA;YACzE,CAAC;YACD,IAAI,CAAC,eAAe,EAAE,CAAC;gBACrB,MAAM,IAAI,yBAAyB,CAAC,qDAAqD,CAAC,CAAA;YAC5F,CAAC;YACD,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,IAAI,yBAAyB,CAAC,uCAAuC,CAAC,CAAA;YAC9E,CAAC;YACD,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,EAAE,CAAA;QACtD,CAAC;QAED,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,CAAA;QAC7C,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAA;QAClD,MAAM,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAA;QACnD,IAAI,WAAW,IAAI,aAAa,IAAI,cAAc,EAAE,CAAC;YACnD,IAAI,CAAC,WAAW,IAAI,CAAC,aAAa,IAAI,CAAC,cAAc,EAAE,CAAC;gBACtD,MAAM,IAAI,yBAAyB,CAAC,8EAA8E,CAAC,CAAA;YACrH,CAAC;YACD,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,cAAc,EAAE,CAAA;QAChE,CAAC;QAED,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAA;QAC3C,MAAM,eAAe,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAA;QAC1D,IAAI,eAAe,EAAE,CAAC;YACpB,IAAI,IAAI,GAAkC,EAAE,eAAe,EAAE,CAAA;YAC7D,IAAI,QAAQ,EAAE,CAAC;gBACb,IAAI,GAAG,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,CAAA;YAC9B,CAAC;YACD,OAAO,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,CAAA;QAC7B,CAAC;QAED,OAAO,SAAS,CAAA;IAClB,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,OAAe;QACtC,MAAM,eAAe,GAAG,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,QAAQ,CAAA;QAC9D,IAAI,eAAe,KAAK,KAAK,EAAE,CAAC;YAC9B,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,gDAAgD,EAAE,EAAE,4BAA4B,CAAC,CAAA;YACpG,OAAM;QACR,CAAC;QACD,MAAM,OAAO,GAAG,eAAe,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAA;QAC3D,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,gDAAgD,EAAE,EAAE,4BAA4B,CAAC,CAAA;YACpG,OAAM;QACR,CAAC;QACD,MAAM,QAAQ,CAAC,OAAO,CAAC,CAAA;QACvB,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,yBAAyB,CAAC,CAAA;IAC3C,CAAC;CACF","sourcesContent":["import { notarize, type NotarizeOptions, type NotaryToolKeychainCredentials } from \"@electron/notarize\"\nimport type { PerFileSignOptions, SigningDistributionType, SignOptions } from \"@electron/osx-sign\"\nimport { Arch, InvalidConfigurationError, log, statOrNull } from \"builder-util\"\nimport { Nullish } from \"builder-util-runtime\"\nimport * as path from \"path\"\nimport { CertType, findIdentity, Identity, reportError } from \"../../codeSign/mac/macCodeSign.js\"\nimport type { MacPackager } from \"../../macPackager.js\"\nimport { ElectronSignOptions, MasConfiguration } from \"../../options/macOptions.js\"\nimport { parsePlistFile, PlistObject } from \"../../util/mac/plist.js\"\nimport { getTemplatePath } from \"../../util/pathManager.js\"\n\nexport type PlatformType = \"mas\" | \"mas-dev\" | \"mac\"\n\nexport class MacTargetHelper {\n  constructor(private packager: MacPackager) {}\n\n  handleNullIdentity(): boolean {\n    if (this.packager.forceCodeSigning) {\n      throw new InvalidConfigurationError(\"identity explicitly is set to null, but forceCodeSigning is set to true\")\n    }\n    log.info({ reason: \"identity explicitly is set to null\" }, \"skipped macOS code signing\")\n    return false\n  }\n\n  async findSigningIdentity(\n    targetPlatform: PlatformType,\n    qualifier: string | undefined,\n    keychainFile: string | Nullish,\n    hasCustomSign: boolean,\n    signOpts: ElectronSignOptions | null | undefined\n  ): Promise<Identity | null> {\n    const isMas = MacTargetHelper.isMasTarget(targetPlatform)\n    const certificateTypes = MacTargetHelper.getCertificateTypes(targetPlatform, MacTargetHelper.resolveSigningType(targetPlatform, signOpts?.type))\n\n    let identity: Identity | null = null\n    for (const certificateType of certificateTypes) {\n      identity = await findIdentity(certificateType, qualifier, keychainFile)\n      if (identity != null) {\n        break\n      }\n    }\n\n    if (identity == null) {\n      const noIdentity = !hasCustomSign\n      if (qualifier === \"-\") {\n        if (MacTargetHelper.isHardenedRuntimeEnabledForSigning(targetPlatform, signOpts?.hardenedRuntime) && !(await this.isLibraryValidationDisabled(targetPlatform, signOpts))) {\n          log.warn(\n            null,\n            \"ad-hoc signing with hardenedRuntime enabled requires the com.apple.security.cs.disable-library-validation entitlement \" +\n              \"to prevent app launch failures due to library validation. See https://electron.build/code-signing for details.\"\n          )\n        }\n        identity = new Identity(\"-\", undefined)\n      } else if (noIdentity) {\n        await reportError(isMas, certificateTypes, qualifier, keychainFile, this.packager.forceCodeSigning)\n        return null\n      }\n    }\n\n    return identity\n  }\n\n  /**\n   * Resolves the effective app entitlements file — same precedence as `getOptionsForFile()` — and\n   * returns whether it grants `com.apple.security.cs.disable-library-validation`.\n   * Fails open: returns false (so callers still warn) when the file cannot be read or parsed.\n   */\n  async isLibraryValidationDisabled(targetPlatform: PlatformType, signOpts: ElectronSignOptions | Nullish): Promise<boolean> {\n    let file = signOpts?.entitlements\n    if (!file) {\n      const p = `entitlements.${MacTargetHelper.isMasTarget(targetPlatform) ? \"mas\" : \"mac\"}.plist`\n      file = (await this.packager.resourceList).includes(p) ? path.join(this.packager.buildResourcesDir, p) : getTemplatePath(\"entitlements.mac.plist\")\n    }\n    try {\n      const entitlements = await parsePlistFile<PlistObject>(file)\n      return entitlements[\"com.apple.security.cs.disable-library-validation\"] === true\n    } catch (e: any) {\n      log.debug({ file, error: e.message }, \"cannot read entitlements to verify library validation\")\n      return false\n    }\n  }\n\n  async buildSignOptions(\n    appPath: string,\n    identity: Identity,\n    config: ElectronSignOptions | null | undefined,\n    keychainFile: string | Nullish,\n    arch: Arch,\n    targetPlatform: PlatformType\n  ): Promise<SignOptions> {\n    const isMas = MacTargetHelper.isMasTarget(targetPlatform)\n    const type = MacTargetHelper.resolveSigningType(targetPlatform, config?.type)\n\n    let binaries = config?.binaries || undefined\n    if (binaries) {\n      // Accept absolute paths for external binaries, else resolve relative paths from the artifact's app Contents path.\n      binaries = (\n        await Promise.all(\n          binaries.flatMap(async destination => {\n            const expandedDestination = this.packager.expandArch(destination, arch)\n            return await Promise.all(\n              expandedDestination.map(async d => {\n                if (await statOrNull(d)) {\n                  return d\n                }\n                return path.resolve(appPath, d)\n              })\n            )\n          })\n        )\n      ).flat()\n      log.info({ binaries, arch: arch == null ? null : Arch[arch] }, \"signing additional user-defined binaries for arch\")\n    }\n\n    let filter = config?.ignore\n    if (Array.isArray(filter)) {\n      if (filter.length == 0) {\n        filter = undefined\n      }\n    } else if (typeof filter === \"string\") {\n      filter = filter.length === 0 ? undefined : [filter]\n    }\n\n    const filterRe =\n      typeof filter === \"function\"\n        ? null\n        : filter?.map(it => {\n            try {\n              return new RegExp(it)\n            } catch (e: any) {\n              throw new InvalidConfigurationError(`Invalid regex filter pattern: ${it}. ${e.message}`)\n            }\n          })\n\n    return {\n      identityValidation: false,\n      // https://github.com/electron-userland/electron-builder/issues/1699\n      // kext are signed by the chipset manufacturers. You need a special certificate (only available on request) from Apple to be able to sign kext.\n      ignore: (file: string) => {\n        if (filterRe != null) {\n          for (const regExp of filterRe) {\n            if (regExp.test(file)) {\n              return true\n            }\n          }\n        }\n        if (typeof filter === \"function\" && filter(file)) {\n          return true\n        }\n        return (\n          file.endsWith(\".kext\") ||\n          file.startsWith(\"/Contents/PlugIns\", appPath.length) ||\n          file.includes(\"/node_modules/puppeteer/.local-chromium\") ||\n          file.includes(\"/node_modules/playwright-firefox/.local-browsers\") ||\n          file.includes(\"/node_modules/playwright/.local-browsers\")\n        )\n\n        /* Those are browser automating modules, browser (chromium, nightly) cannot be signed\n          https://github.com/electron-userland/electron-builder/issues/2010\n          https://github.com/electron-userland/electron-builder/issues/5383\n          */\n      },\n      identity: identity ? identity.hash || identity.name : undefined,\n      type,\n      platform: isMas ? \"mas\" : \"darwin\",\n      version: this.packager.config.electronVersion || undefined,\n      app: appPath,\n      keychain: keychainFile || undefined,\n      binaries,\n      // https://github.com/electron-userland/electron-builder/issues/1480\n      strictVerify: config?.strictVerify,\n      preAutoEntitlements: config?.preAutoEntitlements,\n      optionsForFile: await this.getOptionsForFile(appPath, targetPlatform, config),\n      provisioningProfile: config?.provisioningProfile || undefined,\n    }\n  }\n\n  async createMasInstaller(\n    appPath: string,\n    outDir: string,\n    masOptions: MasConfiguration,\n    keychainFile: string | Nullish,\n    targetPlatform: PlatformType,\n    arch: Arch,\n    identityQualifier?: string | null\n  ): Promise<void> {\n    const certType = MacTargetHelper.isMasDevelopment(targetPlatform) ? \"Mac Developer\" : \"3rd Party Mac Developer Installer\"\n    const masInstallerIdentity = await findIdentity(certType, identityQualifier, keychainFile)\n\n    if (masInstallerIdentity == null) {\n      throw new InvalidConfigurationError(`Cannot find valid \"${certType}\" identity to sign MAS installer, please see https://electron.build/code-signing`)\n    }\n\n    MacTargetHelper.assertSafePathForCommandUsage(outDir, \"output directory\")\n\n    // mas uploaded to AppStore, so, use \"-\" instead of space for name\n    // path.basename prevents path traversal if a crafted artifactName contains \"../../\"\n    const artifactName = path.basename(this.packager.expandArtifactNamePattern(masOptions, \"pkg\", arch))\n    MacTargetHelper.assertSafePathForCommandUsage(artifactName, \"artifact name\")\n    const artifactPath = path.resolve(outDir, artifactName)\n    await this.packager.doFlat(appPath, artifactPath, masInstallerIdentity, keychainFile)\n    await this.packager.emitArtifactBuildCompleted({\n      file: artifactPath,\n      target: null,\n      arch: Arch.x64,\n      safeArtifactName: this.packager.computeSafeArtifactName(artifactName, \"pkg\", arch, true, this.packager.platformOptions.defaultArch),\n      packager: this.packager,\n    })\n  }\n\n  async getOptionsForFile(appPath: string, targetPlatform: PlatformType, customSignOptions: ElectronSignOptions | Nullish): Promise<(filePath: string) => PerFileSignOptions> {\n    const isMas = MacTargetHelper.isMasTarget(targetPlatform)\n    const resourceList = await this.packager.resourceList\n    const entitlementsSuffix = isMas ? \"mas\" : \"mac\"\n\n    const getEntitlements = (filePath: string) => {\n      if (filePath === appPath) {\n        if (customSignOptions?.entitlements) {\n          return customSignOptions.entitlements\n        }\n        const p = `entitlements.${entitlementsSuffix}.plist`\n        if (resourceList.includes(p)) {\n          return path.join(this.packager.buildResourcesDir, p)\n        } else {\n          return getTemplatePath(\"entitlements.mac.plist\")\n        }\n      }\n\n      if (filePath.includes(\"Library/LoginItems\")) {\n        return customSignOptions?.entitlementsLoginHelper\n      }\n\n      if (customSignOptions?.entitlementsInherit) {\n        return customSignOptions.entitlementsInherit\n      }\n      const p = `entitlements.${entitlementsSuffix}.inherit.plist`\n      if (resourceList.includes(p)) {\n        return path.join(this.packager.buildResourcesDir, p)\n      } else {\n        return getTemplatePath(\"entitlements.mac.plist\")\n      }\n    }\n\n    const requirements = isMas || customSignOptions?.requirements == null ? undefined : await this.packager.getResource(customSignOptions.requirements)\n\n    return (filePath: string): PerFileSignOptions => {\n      const entitlements = getEntitlements(filePath)\n      return {\n        entitlements: entitlements || undefined,\n        hardenedRuntime: MacTargetHelper.isHardenedRuntimeEnabledForSigning(targetPlatform, customSignOptions?.hardenedRuntime) ?? undefined,\n        timestamp: customSignOptions?.timestamp || undefined,\n        requirements: requirements || undefined,\n        additionalArguments: customSignOptions?.additionalArguments || undefined,\n      }\n    }\n  }\n\n  /**\n   * The effective signing type: an explicit `sign.type` wins, otherwise derived from the build flavor\n   * (`mas-dev` → `development`, otherwise `distribution`).\n   */\n  static resolveSigningType(targetPlatform: PlatformType, configType: SigningDistributionType | Nullish): SigningDistributionType {\n    return configType ?? (MacTargetHelper.isMasDevelopment(targetPlatform) ? \"development\" : \"distribution\")\n  }\n\n  static getCertificateTypes(targetPlatform: PlatformType, type: SigningDistributionType): CertType[] {\n    if (type === \"development\") {\n      return [\"Mac Developer\", \"Apple Development\"]\n    }\n    return MacTargetHelper.isMasTarget(targetPlatform) ? [\"Apple Distribution\", \"3rd Party Mac Developer Application\"] : [\"Developer ID Application\"]\n  }\n\n  /**\n   * The MAS `.pkg` installer is only built for distribution signing — a development-signed build\n   * (`mas-dev`, or an explicit `sign.type: \"development\"` on a `mas` build) is installed directly.\n   */\n  static shouldCreateMasInstaller(targetPlatform: PlatformType, configType: SigningDistributionType | Nullish): boolean {\n    return MacTargetHelper.isMasTarget(targetPlatform) && MacTargetHelper.resolveSigningType(targetPlatform, configType) !== \"development\"\n  }\n\n  static isMasTarget(targetName: string): boolean {\n    return targetName === \"mas\" || targetName === \"mas-dev\"\n  }\n\n  static isMasDevelopment(targetName: string): boolean {\n    return targetName === \"mas-dev\"\n  }\n\n  static getPlatformTypeFromTarget(targetName: string): PlatformType {\n    // must check for mas-dev first\n    if (MacTargetHelper.isMasDevelopment(targetName)) {\n      return \"mas-dev\"\n    }\n    if (MacTargetHelper.isMasTarget(targetName)) {\n      return \"mas\"\n    }\n    return \"mac\"\n  }\n\n  /**\n   * Returns true when hardened runtime will be active for signing.\n   * For non-MAS builds it defaults to on; for MAS it defaults to off.\n   */\n  static isHardenedRuntimeEnabledForSigning(targetPlatform: PlatformType, hardenedRuntime: boolean | null | undefined): boolean {\n    return MacTargetHelper.isMasTarget(targetPlatform) ? hardenedRuntime === true : hardenedRuntime !== false\n  }\n\n  static assertSafePathForCommandUsage(pathValue: string, description: string): void {\n    if (/[\\0\\r\\n\"'`$;&|<>]/.test(pathValue)) {\n      throw new InvalidConfigurationError(`Invalid ${description}: contains unsupported shell-special characters`)\n    }\n  }\n\n  static getNotarizeOptions(appPath: string): NotarizeOptions | undefined {\n    const teamId = process.env.APPLE_TEAM_ID\n    const appleId = process.env.APPLE_ID\n    const appleIdPassword = process.env.APPLE_APP_SPECIFIC_PASSWORD\n\n    if (appleId || appleIdPassword) {\n      if (!appleId) {\n        throw new InvalidConfigurationError(`APPLE_ID env var needs to be set`)\n      }\n      if (!appleIdPassword) {\n        throw new InvalidConfigurationError(`APPLE_APP_SPECIFIC_PASSWORD env var needs to be set`)\n      }\n      if (!teamId) {\n        throw new InvalidConfigurationError(`APPLE_TEAM_ID env var needs to be set`)\n      }\n      return { appPath, appleId, appleIdPassword, teamId }\n    }\n\n    const appleApiKey = process.env.APPLE_API_KEY\n    const appleApiKeyId = process.env.APPLE_API_KEY_ID\n    const appleApiIssuer = process.env.APPLE_API_ISSUER\n    if (appleApiKey || appleApiKeyId || appleApiIssuer) {\n      if (!appleApiKey || !appleApiKeyId || !appleApiIssuer) {\n        throw new InvalidConfigurationError(`Env vars APPLE_API_KEY, APPLE_API_KEY_ID and APPLE_API_ISSUER need to be set`)\n      }\n      return { appPath, appleApiKey, appleApiKeyId, appleApiIssuer }\n    }\n\n    const keychain = process.env.APPLE_KEYCHAIN\n    const keychainProfile = process.env.APPLE_KEYCHAIN_PROFILE\n    if (keychainProfile) {\n      let args: NotaryToolKeychainCredentials = { keychainProfile }\n      if (keychain) {\n        args = { ...args, keychain }\n      }\n      return { appPath, ...args }\n    }\n\n    return undefined\n  }\n\n  async notarizeIfProvided(appPath: string): Promise<void> {\n    const notarizeOptions = this.packager.platformOptions.notarize\n    if (notarizeOptions === false) {\n      log.info({ reason: \"`notarize` options were set explicitly `false`\" }, \"skipped macOS notarization\")\n      return\n    }\n    const options = MacTargetHelper.getNotarizeOptions(appPath)\n    if (!options) {\n      log.warn({ reason: \"`notarize` options were unable to be generated\" }, \"skipped macOS notarization\")\n      return\n    }\n    await notarize(options)\n    log.info(null, \"notarization successful\")\n  }\n}\n"]}

package/dist/targets/win/MsiTarget.js

@@ -245,8 +245,8 @@ export default class MsiTarget extends Target {
                 for (const item of fileAssociations) {
                     const extensions = asArray(item.ext).map(normalizeExt);
                     for (const ext of extensions) {
-                        result += `${fileSpace}  <ProgId Id="${this.productMsiIdPrefix}.${ext}" Advertise="yes" Icon="${this.iconId}" ${item.description ? `Description="${item.description}"` : ""}>\n`;
-                        result += `${fileSpace}    <Extension Id="${ext}" Advertise="yes">\n`;
+                        result += `${fileSpace}  <ProgId Id="${this.productMsiIdPrefix}.${escapeForXml(ext)}" Advertise="yes" Icon="${this.iconId}" ${item.description ? `Description="${escapeForXml(item.description)}"` : ""}>\n`;
+                        result += `${fileSpace}    <Extension Id="${escapeForXml(ext)}" Advertise="yes">\n`;
                         result += `${fileSpace}      <Verb Id="open" Command="Open with ${escapeForXml(this.packager.appInfo.productName)}" Argument="&quot;%1&quot;"/>\n`;
                         result += `${fileSpace}    </Extension>\n`;
                         result += `${fileSpace}  </ProgId>\n`;

package/dist/targets/win/MsiTarget.js.map

@@ -1 +1 @@
-{"version":3,"file":"MsiTarget.js","sourceRoot":"","sources":["../../../src/targets/win/MsiTarget.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AACrE,OAAO,EAAE,IAAI,EAAE,MAAM,sBAAsB,CAAA;AAC3C,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAA;AACnC,OAAO,GAAG,MAAM,KAAK,CAAA;AACrB,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AACjD,OAAO,EAAE,IAAI,EAAE,MAAM,UAAU,CAAA;AAC/B,OAAO,IAAI,MAAM,MAAM,CAAA;AACvB,OAAO,EAAE,MAAM,EAAE,MAAM,eAAe,CAAA;AAEtC,OAAO,EAAE,6BAA6B,EAAsC,mBAAmB,EAAE,MAAM,sDAAsD,CAAA;AAC7J,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAA;AACxD,OAAO,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAA;AAClE,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAA;AAC3D,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAA;AAC3D,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAElD,OAAO,EAAE,cAAc,EAAE,6BAA6B,EAAE,MAAM,kBAAkB,CAAA;AAEhF,MAAM,qCAAqC,GAAG,IAAI,CAAC,KAAK,CAAC,sCAAsC,CAAC,CAAA;AAChG,MAAM,WAAW,GAAG,mBAAmB,CAAA;AAEvC,mHAAmH;AACnH,MAAM,CAAC,OAAO,OAAO,SAAU,SAAQ,MAAM;IAK3C,YACqB,QAAqB,EAC/B,MAAc,EACvB,IAAI,GAAG,KAAK,EACZ,gBAAgB,GAAG,IAAI;QAEvB,KAAK,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAA;QALV,aAAQ,GAAR,QAAQ,CAAa;QAC/B,WAAM,GAAN,MAAM,CAAQ;QANN,OAAE,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,SAAS,EAAE,CAAC,CAAC,CAAC,IAAI,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAA;QAEvJ,YAAO,GAAe,IAAI,CAAC,QAAQ,CAAC,mBAAmB,CAAa,KAAK,CAAC,CAAA;QAWzE,oBAAe,GAAG,IAAI,IAAI,CAAwB,KAAK,IAAI,EAAE;YACrE,MAAM,QAAQ,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAC;iBAC7F,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC;iBACpB,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC;iBACpB,OAAO,CAAC,cAAc,EAAE,SAAS,CAAC,CAAA;YACrC,OAAO,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;QAC9B,CAAC,CAAC,CAAA;IARF,CAAC;IAUD;;OAEG;IACH,IAAY,kBAAkB;QAC5B,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,eAAe,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAA;QAC5G,OAAO,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;IAC1F,CAAC;IAED,IAAc,MAAM;QAClB,OAAO,GAAG,IAAI,CAAC,kBAAkB,UAAU,CAAA;IAC7C,CAAC;IAED,IAAc,WAAW;QACvB,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,IAAI,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,EAAE,qCAAqC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAA;IAC7H,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,SAAiB,EAAE,IAAU;QACvC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAA;QAC9B,MAAM,YAAY,GAAG,QAAQ,CAAC,+BAA+B,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,CAAA;QACxF,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,CAAA;QACzD,MAAM,QAAQ,CAAC,wBAAwB,CAAC;YACtC,qBAAqB,EAAE,KAAK;YAC5B,IAAI,EAAE,YAAY;YAClB,IAAI;SACL,CAAC,CAAA;QAEF,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAA;QAC3D,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,CAAA;QAElB,MAAM,aAAa,GAAG,mBAAmB,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAA;QAEtE,qGAAqG;QACrG,wGAAwG;QACxG,wGAAwG;QACxG,oEAAoE;QACpE,MAAM,OAAO,GAAG,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAA;QAEpD,MAAM,WAAW,GAAG,QAAQ,CAAC,WAAW,CAAC,aAAa,CAAC,CAAA;QACvD,MAAM,WAAW,GAAG,CAAC,gBAAgB,CAAC,CAAA;QACtC,MAAM,SAAS,CAAC,WAAW,EAAE,MAAM,IAAI,CAAC,aAAa,CAAC,SAAS,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC,CAAA;QAEzF,MAAM,QAAQ,CAAC,qBAAqB,CAAC,WAAW,CAAC,CAAA;QAEjD,uCAAuC;QACvC,MAAM,UAAU,GAAG,MAAM,sBAAsB,CAAC;YAC9C,WAAW,EAAE,kBAAkB;YAC/B,eAAe,EAAE,qBAAqB;YACtC,SAAS,EAAE,EAAE,qBAAqB,EAAE,kEAAkE,EAAE;SACzG,CAAC,CAAA;QAEF,uCAAuC;QACvC,MAAM,UAAU,GAAG,CAAC,OAAO,EAAE,OAAO,KAAK,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,YAAY,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC,CAAA;QACzI,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,CAAA;QAC9B,MAAM,eAAe,CAAC,KAAK,IAAI,EAAE;YAC/B,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC,EAAE,UAAU,EAAE;gBAC1E,GAAG,EAAE,QAAQ,CAAC,GAAG;aAClB,CAAC,CAAA;YACF,MAAM,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,EAAE,YAAY,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAA;QACtF,CAAC,CAAC,CAAA;QAEF,MAAM,QAAQ,CAAC,OAAO,EAAE,CAAA;QAExB,MAAM,QAAQ,CAAC,MAAM,CAAC,YAAY,CAAC,CAAA;QAEnC,MAAM,QAAQ,CAAC,0BAA0B,CAAC;YACxC,IAAI,EAAE,YAAY;YAClB,QAAQ;YACR,IAAI;YACJ,gBAAgB,EAAE,QAAQ,CAAC,uBAAuB,CAAC,YAAY,EAAE,KAAK,CAAC;YACvE,MAAM,EAAE,IAAI;YACZ,iBAAiB,EAAE,KAAK;SACzB,CAAC,CAAA;IACJ,CAAC;IAEO,KAAK,CAAC,KAAK,CAAC,WAA0B,EAAE,EAAa,EAAE,YAAoB,EAAE,SAAiB,EAAE,UAAkB,EAAE,OAAe;QACzI,uCAAuC;QACvC,MAAM,SAAS,GAAG;YAChB,MAAM;YACN,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC;YACzB,IAAI;YACJ,mDAAmD;YACnD,OAAO;YACP,2CAA2C;YAC3C,kKAAkK;YAClK,SAAS;YACT,YAAY,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE;YACpC,eAAe;SAChB;aACE,MAAM,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC;aAC/B,MAAM,CAAC,IAAI,CAAC,sBAAsB,EAAE,CAAC,CAAA;QAExC,qLAAqL;QACrL,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YACjC,uCAAuC;YACvC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QACzB,CAAC;QAED,IAAI,IAAI,CAAC,OAAO,CAAC,QAAQ,KAAK,KAAK,EAAE,CAAC;YACpC,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAA;QAC1C,CAAC;QAED,+EAA+E;QAC/E,SAAS,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,CAAA;QAC9B,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC,EAAE,SAAS,EAAE;YACxE,GAAG,EAAE,OAAO;SACb,CAAC,CAAA;IACJ,CAAC;IAEO,sBAAsB;QAC5B,MAAM,IAAI,GAAkB,EAAE,CAAA;QAC9B,IAAI,IAAI,CAAC,OAAO,CAAC,mBAAmB,IAAI,IAAI,EAAE,CAAC;YAC7C,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAA;QAChD,CAAC;QACD,OAAO,IAAI,CAAA;IACb,CAAC;IAEO,gBAAgB;QACtB,MAAM,IAAI,GAAkB,CAAC,WAAW,CAAC,CAAA;QACzC,IAAI,IAAI,CAAC,OAAO,CAAC,gBAAgB,KAAK,KAAK,EAAE,CAAC;YAC5C,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAClB,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,CAAC,iBAAiB,IAAI,IAAI,EAAE,CAAC;YAC3C,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAA;QAC9C,CAAC;QACD,OAAO,IAAI,CAAA;IACb,CAAC;IAES,KAAK,CAAC,aAAa,CAAC,SAAiB,EAAE,OAAa,EAAE,aAAiD;QAC/G,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAA;QACrC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,SAAS,CAAC,CAAA;QACpE,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAA;QAE5B,OAAO,CAAC,MAAM,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;YACxC,GAAG,CAAC,MAAM,IAAI,CAAC,cAAc,CAAC,aAAa,CAAC,CAAC;YAC7C,uBAAuB,EAAE,aAAa,CAAC,uBAAuB,KAAK,6BAA6B,CAAC,KAAK;YACtG,gBAAgB,EAAE,OAAO,CAAC,cAAc,KAAK,KAAK;YAClD,6GAA6G;YAC7G,cAAc,EAAE,OAAO,KAAK,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,oBAAoB;YACpF,qEAAqE;YACrE,4BAA4B,EAAE,6BAA6B,CAAC,OAAO,EAAE,aAAa,CAAC,UAAU,IAAI,aAAa,CAAC,YAAY,KAAK,IAAI,CAAC;YACrI,IAAI;YACJ,KAAK;SACN,CAAC,CAAA;IACJ,CAAC;IAES,KAAK,CAAC,cAAc,CAAC,aAAiD;QAC9E,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAA;QACrC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAA;QAClD,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAA;QAE7C,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,CAAA;QACvC,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,GAAG,CAAC,IAAI,CAAC,2EAA2E,CAAC,CAAA;QACvF,CAAC;QAED,OAAO;YACL,GAAG,aAAa;YAChB,QAAQ,EAAE,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAC9D,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,gBAAgB,EAAE,WAAW,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;YAC3D,OAAO,EAAE,OAAO,CAAC,4BAA4B,EAAE;YAC/C,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,YAAY,EAAE,WAAW,IAAI,OAAO,CAAC,WAAW;YAChD,cAAc,EAAE,OAAO,CAAC,WAAW;SACpC,CAAA;IACH,CAAC;IAEO,KAAK,CAAC,sBAAsB,CAAC,SAAiB;QACpD,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAA;QACrC,IAAI,2BAA2B,GAAG,KAAK,CAAA;QACvC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAA;QAClC,MAAM,IAAI,GAAkB,EAAE,CAAA;QAC9B,MAAM,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;QAC/B,MAAM,aAAa,GAAG,mBAAmB,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAA;QACtE,MAAM,KAAK,GAAG,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE;YAC/C,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;YAExD,MAAM,SAAS,GAAG,WAAW,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YACnD,MAAM,QAAQ,GAAG,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,SAAS,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAA;YACnF,IAAI,WAAW,GAAkB,IAAI,CAAA;YACrC,IAAI,OAAO,GAAG,EAAE,CAAA;YAChB,gHAAgH;YAChH,IAAI,SAAS,GAAG,CAAC,EAAE,CAAC;gBAClB,8FAA8F;gBAC9F,+OAA+O;gBAC/O,2FAA2F;gBAC3F,OAAO,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC,EAAE,SAAS,CAAC,CAAA;gBAC7C,oEAAoE;gBACpE,WAAW,GAAG,GAAG,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;gBACnF,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;oBAC3B,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;oBACrB,IAAI,CAAC,IAAI,CAAC,kBAAkB,WAAW,WAAW,WAAW,MAAM,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,CAAA;gBACzG,CAAC;YACH,CAAC;iBAAM,IAAI,CAAC,2BAA2B,EAAE,CAAC;gBACxC,2BAA2B,GAAG,IAAI,CAAA;YACpC,CAAC;YAED,kHAAkH;YAClH,8EAA8E;YAC9E,IAAI,MAAM,GAAG,aAAa,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,eAAe,WAAW,GAAG,GAAG,CAAA;YACtF,MAAM,IAAI,KAAK,SAAS,iBAAiB,YAAY,CAAC,QAAQ,CAAC,0BAA0B,IAAI,CAAC,GAAG,GAAG,YAAY,CAAC,WAAW,CAAC,gCAAgC,CAAA;YAC7J,MAAM,gBAAgB,GAAG,WAAW,KAAK,GAAG,OAAO,CAAC,eAAe,MAAM,CAAA;YACzE,IAAI,gBAAgB,EAAE,CAAC;gBACrB,MAAM,IAAI,sBAAsB,CAAA;YAClC,CAAC;iBAAM,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;gBAChC,MAAM,IAAI,QAAQ,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,CAAA;YACnD,CAAC;YAED,MAAM,uBAAuB,GAAG,aAAa,CAAC,uBAAuB,KAAK,6BAA6B,CAAC,KAAK,CAAA;YAC7G,IAAI,gBAAgB,IAAI,CAAC,uBAAuB,IAAI,aAAa,CAAC,yBAAyB,CAAC,EAAE,CAAC;gBAC7F,MAAM,IAAI,KAAK,CAAA;gBACf,MAAM,YAAY,GAAG,aAAa,CAAC,YAAY,CAAA;gBAC/C,IAAI,uBAAuB,EAAE,CAAC;oBAC5B,MAAM,IAAI,GAAG,SAAS,oEAAoE,YAAY,CACpG,YAAY,CACb,gEAAgE,IAAI,CAAC,MAAM,OAAO,CAAA;gBACrF,CAAC;gBAED,MAAM,eAAe,GAAG,aAAa,CAAC,YAAY,IAAI,IAAI,CAAA;gBAC1D,MAAM,4BAA4B,GAAG,eAAe,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,mBAAmB,CAAA;gBAChG,IAAI,aAAa,CAAC,yBAAyB,EAAE,CAAC;oBAC5C,IAAI,eAAe,EAAE,CAAC;wBACpB,IAAI,CAAC,IAAI,CAAC,kBAAkB,4BAA4B,+BAA+B,aAAa,CAAC,YAAY,OAAO,CAAC,CAAA;oBAC3H,CAAC;oBACD,MAAM,IAAI,GAAG,SAAS,iDAAiD,4BAA4B,WAAW,YAAY,CACxH,YAAY,CACb,gEAAgE,IAAI,CAAC,MAAM,MAAM,CAAA;oBAClF,MAAM,IAAI,GAAG,SAAS,6DAA6D,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAA;oBAChI,MAAM,IAAI,GAAG,SAAS,iBAAiB,CAAA;gBACzC,CAAC;gBACD,MAAM,IAAI,GAAG,SAAS,SAAS,CAAA;gBAE/B,IAAI,eAAe,EAAE,CAAC;oBACpB,MAAM,IAAI,qBAAqB,4BAA4B,gBAAgB,4BAA4B,sBAAsB,CAAA;gBAC/H,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,IAAI,CAAA;YAChB,CAAC;YAED,MAAM,gBAAgB,GAAG,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAA;YACvD,IAAI,gBAAgB,IAAI,gBAAgB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACtD,KAAK,MAAM,IAAI,IAAI,gBAAgB,EAAE,CAAC;oBACpC,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAA;oBACtD,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;wBAC7B,MAAM,IAAI,GAAG,SAAS,iBAAiB,IAAI,CAAC,kBAAkB,IAAI,GAAG,2BAA2B,IAAI,CAAC,MAAM,KACzG,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,gBAAgB,IAAI,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC,EAC3D,KAAK,CAAA;wBACL,MAAM,IAAI,GAAG,SAAS,sBAAsB,GAAG,sBAAsB,CAAA;wBACrE,MAAM,IAAI,GAAG,SAAS,4CAA4C,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,WAAW,CAAC,iCAAiC,CAAA;wBAClJ,MAAM,IAAI,GAAG,SAAS,oBAAoB,CAAA;wBAC1C,MAAM,IAAI,GAAG,SAAS,eAAe,CAAA;oBACvC,CAAC;gBACH,CAAC;YACH,CAAC;YAED,OAAO,GAAG,MAAM,KAAK,SAAS,cAAc,CAAA;QAC9C,CAAC,CAAC,CAAA;QAEF,OAAO,EAAE,IAAI,EAAE,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,YAAY,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,CAAA;IACvE,CAAC;CACF;AAED,SAAS,YAAY,CAAC,IAAmB,EAAE,WAAmB;IAC5D,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,WAAW,GAAG,CAAC,CAAC,CAAA;IACzC,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,KAAK,EAAE,CAAC,CAAA;AAChC,CAAC","sourcesContent":["import { Arch, asArray, log, walk, escapeForXml } from \"builder-util\"\nimport { UUID } from \"builder-util-runtime\"\nimport { createHash } from \"crypto\"\nimport ejs from \"ejs\"\nimport { readFile, writeFile } from \"fs/promises\"\nimport { Lazy } from \"lazy-val\"\nimport path from \"path\"\nimport { Target } from \"../../core.js\"\nimport { MsiOptions } from \"../../index.js\"\nimport { DesktopShortcutCreationPolicy, FinalCommonWindowsInstallerOptions, getEffectiveOptions } from \"../../options/CommonWindowsInstallerConfiguration.js\"\nimport { normalizeExt } from \"../../platformPackager.js\"\nimport { downloadBuilderToolset } from \"../../util/electronGet.js\"\nimport { getTemplatePath } from \"../../util/pathManager.js\"\nimport { withToolsetLock } from \"../../util/toolsetLock.js\"\nimport { VmManager } from \"../../vm/vm.js\"\nimport { WineVmManager } from \"../../vm/WineVm.js\"\nimport { WinPackager } from \"../../winPackager.js\"\nimport { createStageDir, getWindowsInstallationDirName } from \"../targetUtil.js\"\n\nconst ELECTRON_BUILDER_UPGRADE_CODE_NS_UUID = UUID.parse(\"d752fe43-5d44-44d5-9fc9-6dd1bf19d5cc\")\nconst ROOT_DIR_ID = \"APPLICATIONFOLDER\"\n\n// WiX doesn't support Mono, so, dontnet462 is required to be installed for wine (preinstalled in our bundled wine)\nexport default class MsiTarget extends Target {\n  protected readonly vm = process.platform === \"win32\" ? new VmManager() : new WineVmManager(this.packager.config.toolsets?.wine, this.packager.buildResourcesDir)\n\n  readonly options: MsiOptions = this.packager.getOptionsForTarget<MsiOptions>(\"msi\")\n\n  constructor(\n    protected readonly packager: WinPackager,\n    readonly outDir: string,\n    name = \"msi\",\n    isAsyncSupported = true\n  ) {\n    super(name, isAsyncSupported)\n  }\n\n  protected projectTemplate = new Lazy<(data: any) => string>(async () => {\n    const template = (await readFile(path.join(getTemplatePath(this.name), \"template.xml\"), \"utf8\"))\n      .replace(/{{/g, \"<%\")\n      .replace(/}}/g, \"%>\")\n      .replace(/\\${([^}]+)}/g, \"<%=$1%>\")\n    return ejs.compile(template)\n  })\n\n  /**\n   * A product-specific string that can be used in an [MSI Identifier](https://docs.microsoft.com/en-us/windows/win32/msi/identifier).\n   */\n  private get productMsiIdPrefix() {\n    const sanitizedId = this.packager.appInfo.productFilename.replace(/[^\\w.]/g, \"\").replace(/^[^A-Za-z_]+/, \"\")\n    return sanitizedId.length > 0 ? sanitizedId : \"App\" + this.upgradeCode.replace(/-/g, \"\")\n  }\n\n  protected get iconId() {\n    return `${this.productMsiIdPrefix}Icon.exe`\n  }\n\n  protected get upgradeCode(): string {\n    return (this.options.upgradeCode || UUID.v5(this.packager.appInfo.id, ELECTRON_BUILDER_UPGRADE_CODE_NS_UUID)).toUpperCase()\n  }\n\n  async build(appOutDir: string, arch: Arch) {\n    const packager = this.packager\n    const artifactName = packager.expandArtifactBeautyNamePattern(this.options, \"msi\", arch)\n    const artifactPath = path.join(this.outDir, artifactName)\n    await packager.emitArtifactBuildStarted({\n      targetPresentableName: \"MSI\",\n      file: artifactPath,\n      arch,\n    })\n\n    const stageDir = await createStageDir(this, packager, arch)\n    const vm = this.vm\n\n    const commonOptions = getEffectiveOptions(this.options, this.packager)\n\n    // wix 4.0.0.5512.2 doesn't support the arm64 architecture so default to x64 when building for arm64.\n    // This will result in an x64 MSI installer that installs an arm64 version of the application. This is a\n    // stopgap until the electron-builder-binaries wix version is upgraded to a version that supports arm64:\n    // https://github.com/electron-userland/electron-builder/issues/6077\n    const wixArch = arch == Arch.arm64 ? Arch.x64 : arch\n\n    const projectFile = stageDir.getTempFile(\"project.wxs\")\n    const objectFiles = [\"project.wixobj\"]\n    await writeFile(projectFile, await this.writeManifest(appOutDir, wixArch, commonOptions))\n\n    await packager.emitMsiProjectCreated(projectFile)\n\n    // noinspection SpellCheckingInspection\n    const vendorPath = await downloadBuilderToolset({\n      releaseName: \"wix-4.0.0.5512.2\",\n      filenameWithExt: \"wix-4.0.0.5512.2.7z\",\n      checksums: { \"wix-4.0.0.5512.2.7z\": \"fe677fcd837b18c9b912985d91636bbd8a1e800c3b3a6a841b6f96e89624e839\" },\n    })\n\n    // noinspection SpellCheckingInspection\n    const candleArgs = [\"-arch\", wixArch === Arch.ia32 ? \"x86\" : \"x64\", `-dappDir=${vm.toVmFile(appOutDir)}`].concat(this.getCommonWixArgs())\n    candleArgs.push(\"project.wxs\")\n    await withToolsetLock(async () => {\n      await vm.exec(vm.toVmFile(path.join(vendorPath, \"candle.exe\")), candleArgs, {\n        cwd: stageDir.dir,\n      })\n      await this.light(objectFiles, vm, artifactPath, appOutDir, vendorPath, stageDir.dir)\n    })\n\n    await stageDir.cleanup()\n\n    await packager.signIf(artifactPath)\n\n    await packager.emitArtifactBuildCompleted({\n      file: artifactPath,\n      packager,\n      arch,\n      safeArtifactName: packager.computeSafeArtifactName(artifactName, \"msi\"),\n      target: this,\n      isWriteUpdateInfo: false,\n    })\n  }\n\n  private async light(objectFiles: Array<string>, vm: VmManager, artifactPath: string, appOutDir: string, vendorPath: string, tempDir: string) {\n    // noinspection SpellCheckingInspection\n    const lightArgs = [\n      \"-out\",\n      vm.toVmFile(artifactPath),\n      \"-v\",\n      // https://github.com/wixtoolset/issues/issues/5169\n      \"-spdb\",\n      // https://sourceforge.net/p/wix/bugs/2405/\n      // error LGHT1076 : ICE61: This product should remove only older versions of itself. The Maximum version is not less than the current product. (1.1.0.42 1.1.0.42)\n      \"-sw1076\",\n      `-dappDir=${vm.toVmFile(appOutDir)}`,\n      // \"-dcl:high\",\n    ]\n      .concat(this.getCommonWixArgs())\n      .concat(this.getAdditionalLightArgs())\n\n    // http://windows-installer-xml-wix-toolset.687559.n2.nabble.com/Build-3-5-2229-0-give-me-the-following-error-error-LGHT0216-An-unexpected-Win32-exception-with-errorn-td5707443.html\n    if (process.platform !== \"win32\") {\n      // noinspection SpellCheckingInspection\n      lightArgs.push(\"-sval\")\n    }\n\n    if (this.options.oneClick === false) {\n      lightArgs.push(\"-ext\", \"WixUIExtension\")\n    }\n\n    // objectFiles - only filenames, we set current directory to our temp stage dir\n    lightArgs.push(...objectFiles)\n    await vm.exec(vm.toVmFile(path.join(vendorPath, \"light.exe\")), lightArgs, {\n      cwd: tempDir,\n    })\n  }\n\n  private getAdditionalLightArgs() {\n    const args: Array<string> = []\n    if (this.options.additionalLightArgs != null) {\n      args.push(...this.options.additionalLightArgs)\n    }\n    return args\n  }\n\n  private getCommonWixArgs() {\n    const args: Array<string> = [\"-pedantic\"]\n    if (this.options.warningsAsErrors !== false) {\n      args.push(\"-wx\")\n    }\n    if (this.options.additionalWixArgs != null) {\n      args.push(...this.options.additionalWixArgs)\n    }\n    return args\n  }\n\n  protected async writeManifest(appOutDir: string, wixArch: Arch, commonOptions: FinalCommonWindowsInstallerOptions) {\n    const appInfo = this.packager.appInfo\n    const { files, dirs } = await this.computeFileDeclaration(appOutDir)\n    const options = this.options\n\n    return (await this.projectTemplate.value)({\n      ...(await this.getBaseOptions(commonOptions)),\n      isCreateDesktopShortcut: commonOptions.isCreateDesktopShortcut !== DesktopShortcutCreationPolicy.NEVER,\n      isRunAfterFinish: options.runAfterFinish !== false,\n      // https://stackoverflow.com/questions/1929038/compilation-error-ice80-the-64bitcomponent-uses-32bitdirectory\n      programFilesId: wixArch === Arch.x64 ? \"ProgramFiles64Folder\" : \"ProgramFilesFolder\",\n      // wix in the name because special wix format can be used in the name\n      installationDirectoryWixName: getWindowsInstallationDirName(appInfo, commonOptions.isAssisted || commonOptions.isPerMachine === true),\n      dirs,\n      files,\n    })\n  }\n\n  protected async getBaseOptions(commonOptions: FinalCommonWindowsInstallerOptions): Promise<any> {\n    const appInfo = this.packager.appInfo\n    const iconPath = await this.packager.getIconPath()\n    const compression = this.packager.compression\n\n    const companyName = appInfo.companyName\n    if (!companyName) {\n      log.warn(`Manufacturer is not set for MSI — please set \"author\" in the package.json`)\n    }\n\n    return {\n      ...commonOptions,\n      iconPath: iconPath == null ? null : this.vm.toVmFile(iconPath),\n      iconId: this.iconId,\n      compressionLevel: compression === \"store\" ? \"none\" : \"high\",\n      version: appInfo.getVersionInWeirdWindowsForm(),\n      productName: appInfo.productName,\n      upgradeCode: this.upgradeCode,\n      manufacturer: companyName || appInfo.productName,\n      appDescription: appInfo.description,\n    }\n  }\n\n  private async computeFileDeclaration(appOutDir: string) {\n    const appInfo = this.packager.appInfo\n    let isRootDirAddedToRemoveTable = false\n    const dirNames = new Set<string>()\n    const dirs: Array<string> = []\n    const fileSpace = \" \".repeat(6)\n    const commonOptions = getEffectiveOptions(this.options, this.packager)\n    const files = (await walk(appOutDir)).map(file => {\n      const packagePath = file.substring(appOutDir.length + 1)\n\n      const lastSlash = packagePath.lastIndexOf(path.sep)\n      const fileName = lastSlash > 0 ? packagePath.substring(lastSlash + 1) : packagePath\n      let directoryId: string | null = null\n      let dirName = \"\"\n      // Wix Directory.FileSource doesn't work - https://stackoverflow.com/questions/21519388/wix-filesource-confusion\n      if (lastSlash > 0) {\n        // This Name attribute may also define multiple directories using the inline directory syntax.\n        // For example, \"ProgramFilesFolder:\\My Company\\My Product\\bin\" would create a reference to a Directory element with Id=\"ProgramFilesFolder\" then create directories named \"My Company\" then \"My Product\" then \"bin\" nested beneath each other.\n        // This syntax is a shortcut to defining each directory in an individual Directory element.\n        dirName = packagePath.substring(0, lastSlash)\n        // https://github.com/electron-userland/electron-builder/issues/3027\n        directoryId = \"d\" + createHash(\"sha256\").update(dirName).digest(\"hex\").slice(0, 16)\n        if (!dirNames.has(dirName)) {\n          dirNames.add(dirName)\n          dirs.push(`<Directory Id=\"${directoryId}\" Name=\"${ROOT_DIR_ID}:\\\\${dirName.replace(/\\//g, \"\\\\\")}\\\\\"/>`)\n        }\n      } else if (!isRootDirAddedToRemoveTable) {\n        isRootDirAddedToRemoveTable = true\n      }\n\n      // since RegistryValue can be part of Component, *** *** *** *** *** *** *** *** *** wix cannot auto generate guid\n      // https://stackoverflow.com/questions/1405100/change-my-component-guid-in-wix\n      let result = `<Component${directoryId === null ? \"\" : ` Directory=\"${directoryId}\"`}>`\n      result += `\\n${fileSpace}  <File Name=\"${escapeForXml(fileName)}\" Source=\"$(var.appDir)${path.sep}${escapeForXml(packagePath)}\" ReadOnly=\"yes\" KeyPath=\"yes\"`\n      const isMainExecutable = packagePath === `${appInfo.productFilename}.exe`\n      if (isMainExecutable) {\n        result += ' Id=\"mainExecutable\"'\n      } else if (directoryId === null) {\n        result += ` Id=\"${path.basename(packagePath)}_f\"`\n      }\n\n      const isCreateDesktopShortcut = commonOptions.isCreateDesktopShortcut !== DesktopShortcutCreationPolicy.NEVER\n      if (isMainExecutable && (isCreateDesktopShortcut || commonOptions.isCreateStartMenuShortcut)) {\n        result += `>\\n`\n        const shortcutName = commonOptions.shortcutName\n        if (isCreateDesktopShortcut) {\n          result += `${fileSpace}  <Shortcut Id=\"desktopShortcut\" Directory=\"DesktopFolder\" Name=\"${escapeForXml(\n            shortcutName\n          )}\" WorkingDirectory=\"APPLICATIONFOLDER\" Advertise=\"yes\" Icon=\"${this.iconId}\"/>\\n`\n        }\n\n        const hasMenuCategory = commonOptions.menuCategory != null\n        const startMenuShortcutDirectoryId = hasMenuCategory ? \"AppProgramMenuDir\" : \"ProgramMenuFolder\"\n        if (commonOptions.isCreateStartMenuShortcut) {\n          if (hasMenuCategory) {\n            dirs.push(`<Directory Id=\"${startMenuShortcutDirectoryId}\" Name=\"ProgramMenuFolder:\\\\${commonOptions.menuCategory}\\\\\"/>`)\n          }\n          result += `${fileSpace}  <Shortcut Id=\"startMenuShortcut\" Directory=\"${startMenuShortcutDirectoryId}\" Name=\"${escapeForXml(\n            shortcutName\n          )}\" WorkingDirectory=\"APPLICATIONFOLDER\" Advertise=\"yes\" Icon=\"${this.iconId}\">\\n`\n          result += `${fileSpace}    <ShortcutProperty Key=\"System.AppUserModel.ID\" Value=\"${escapeForXml(this.packager.appInfo.id)}\"/>\\n`\n          result += `${fileSpace}  </Shortcut>\\n`\n        }\n        result += `${fileSpace}</File>`\n\n        if (hasMenuCategory) {\n          result += `<RemoveFolder Id=\"${startMenuShortcutDirectoryId}\" Directory=\"${startMenuShortcutDirectoryId}\" On=\"uninstall\"/>\\n`\n        }\n      } else {\n        result += `/>`\n      }\n\n      const fileAssociations = this.packager.fileAssociations\n      if (isMainExecutable && fileAssociations.length !== 0) {\n        for (const item of fileAssociations) {\n          const extensions = asArray(item.ext).map(normalizeExt)\n          for (const ext of extensions) {\n            result += `${fileSpace}  <ProgId Id=\"${this.productMsiIdPrefix}.${ext}\" Advertise=\"yes\" Icon=\"${this.iconId}\" ${\n              item.description ? `Description=\"${item.description}\"` : \"\"\n            }>\\n`\n            result += `${fileSpace}    <Extension Id=\"${ext}\" Advertise=\"yes\">\\n`\n            result += `${fileSpace}      <Verb Id=\"open\" Command=\"Open with ${escapeForXml(this.packager.appInfo.productName)}\" Argument=\"&quot;%1&quot;\"/>\\n`\n            result += `${fileSpace}    </Extension>\\n`\n            result += `${fileSpace}  </ProgId>\\n`\n          }\n        }\n      }\n\n      return `${result}\\n${fileSpace}</Component>`\n    })\n\n    return { dirs: listToString(dirs, 2), files: listToString(files, 3) }\n  }\n}\n\nfunction listToString(list: Array<string>, indentLevel: number) {\n  const space = \" \".repeat(indentLevel * 2)\n  return list.join(`\\n${space}`)\n}\n"]}
+{"version":3,"file":"MsiTarget.js","sourceRoot":"","sources":["../../../src/targets/win/MsiTarget.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AACrE,OAAO,EAAE,IAAI,EAAE,MAAM,sBAAsB,CAAA;AAC3C,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAA;AACnC,OAAO,GAAG,MAAM,KAAK,CAAA;AACrB,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AACjD,OAAO,EAAE,IAAI,EAAE,MAAM,UAAU,CAAA;AAC/B,OAAO,IAAI,MAAM,MAAM,CAAA;AACvB,OAAO,EAAE,MAAM,EAAE,MAAM,eAAe,CAAA;AAEtC,OAAO,EAAE,6BAA6B,EAAsC,mBAAmB,EAAE,MAAM,sDAAsD,CAAA;AAC7J,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAA;AACxD,OAAO,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAA;AAClE,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAA;AAC3D,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAA;AAC3D,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAElD,OAAO,EAAE,cAAc,EAAE,6BAA6B,EAAE,MAAM,kBAAkB,CAAA;AAEhF,MAAM,qCAAqC,GAAG,IAAI,CAAC,KAAK,CAAC,sCAAsC,CAAC,CAAA;AAChG,MAAM,WAAW,GAAG,mBAAmB,CAAA;AAEvC,mHAAmH;AACnH,MAAM,CAAC,OAAO,OAAO,SAAU,SAAQ,MAAM;IAK3C,YACqB,QAAqB,EAC/B,MAAc,EACvB,IAAI,GAAG,KAAK,EACZ,gBAAgB,GAAG,IAAI;QAEvB,KAAK,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAA;QALV,aAAQ,GAAR,QAAQ,CAAa;QAC/B,WAAM,GAAN,MAAM,CAAQ;QANN,OAAE,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,SAAS,EAAE,CAAC,CAAC,CAAC,IAAI,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAA;QAEvJ,YAAO,GAAe,IAAI,CAAC,QAAQ,CAAC,mBAAmB,CAAa,KAAK,CAAC,CAAA;QAWzE,oBAAe,GAAG,IAAI,IAAI,CAAwB,KAAK,IAAI,EAAE;YACrE,MAAM,QAAQ,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAC;iBAC7F,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC;iBACpB,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC;iBACpB,OAAO,CAAC,cAAc,EAAE,SAAS,CAAC,CAAA;YACrC,OAAO,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;QAC9B,CAAC,CAAC,CAAA;IARF,CAAC;IAUD;;OAEG;IACH,IAAY,kBAAkB;QAC5B,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,eAAe,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAA;QAC5G,OAAO,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;IAC1F,CAAC;IAED,IAAc,MAAM;QAClB,OAAO,GAAG,IAAI,CAAC,kBAAkB,UAAU,CAAA;IAC7C,CAAC;IAED,IAAc,WAAW;QACvB,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,IAAI,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,EAAE,qCAAqC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAA;IAC7H,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,SAAiB,EAAE,IAAU;QACvC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAA;QAC9B,MAAM,YAAY,GAAG,QAAQ,CAAC,+BAA+B,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,CAAA;QACxF,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,CAAA;QACzD,MAAM,QAAQ,CAAC,wBAAwB,CAAC;YACtC,qBAAqB,EAAE,KAAK;YAC5B,IAAI,EAAE,YAAY;YAClB,IAAI;SACL,CAAC,CAAA;QAEF,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAA;QAC3D,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,CAAA;QAElB,MAAM,aAAa,GAAG,mBAAmB,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAA;QAEtE,qGAAqG;QACrG,wGAAwG;QACxG,wGAAwG;QACxG,oEAAoE;QACpE,MAAM,OAAO,GAAG,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAA;QAEpD,MAAM,WAAW,GAAG,QAAQ,CAAC,WAAW,CAAC,aAAa,CAAC,CAAA;QACvD,MAAM,WAAW,GAAG,CAAC,gBAAgB,CAAC,CAAA;QACtC,MAAM,SAAS,CAAC,WAAW,EAAE,MAAM,IAAI,CAAC,aAAa,CAAC,SAAS,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC,CAAA;QAEzF,MAAM,QAAQ,CAAC,qBAAqB,CAAC,WAAW,CAAC,CAAA;QAEjD,uCAAuC;QACvC,MAAM,UAAU,GAAG,MAAM,sBAAsB,CAAC;YAC9C,WAAW,EAAE,kBAAkB;YAC/B,eAAe,EAAE,qBAAqB;YACtC,SAAS,EAAE,EAAE,qBAAqB,EAAE,kEAAkE,EAAE;SACzG,CAAC,CAAA;QAEF,uCAAuC;QACvC,MAAM,UAAU,GAAG,CAAC,OAAO,EAAE,OAAO,KAAK,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,YAAY,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC,CAAA;QACzI,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,CAAA;QAC9B,MAAM,eAAe,CAAC,KAAK,IAAI,EAAE;YAC/B,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC,EAAE,UAAU,EAAE;gBAC1E,GAAG,EAAE,QAAQ,CAAC,GAAG;aAClB,CAAC,CAAA;YACF,MAAM,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,EAAE,YAAY,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAA;QACtF,CAAC,CAAC,CAAA;QAEF,MAAM,QAAQ,CAAC,OAAO,EAAE,CAAA;QAExB,MAAM,QAAQ,CAAC,MAAM,CAAC,YAAY,CAAC,CAAA;QAEnC,MAAM,QAAQ,CAAC,0BAA0B,CAAC;YACxC,IAAI,EAAE,YAAY;YAClB,QAAQ;YACR,IAAI;YACJ,gBAAgB,EAAE,QAAQ,CAAC,uBAAuB,CAAC,YAAY,EAAE,KAAK,CAAC;YACvE,MAAM,EAAE,IAAI;YACZ,iBAAiB,EAAE,KAAK;SACzB,CAAC,CAAA;IACJ,CAAC;IAEO,KAAK,CAAC,KAAK,CAAC,WAA0B,EAAE,EAAa,EAAE,YAAoB,EAAE,SAAiB,EAAE,UAAkB,EAAE,OAAe;QACzI,uCAAuC;QACvC,MAAM,SAAS,GAAG;YAChB,MAAM;YACN,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC;YACzB,IAAI;YACJ,mDAAmD;YACnD,OAAO;YACP,2CAA2C;YAC3C,kKAAkK;YAClK,SAAS;YACT,YAAY,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE;YACpC,eAAe;SAChB;aACE,MAAM,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC;aAC/B,MAAM,CAAC,IAAI,CAAC,sBAAsB,EAAE,CAAC,CAAA;QAExC,qLAAqL;QACrL,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YACjC,uCAAuC;YACvC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QACzB,CAAC;QAED,IAAI,IAAI,CAAC,OAAO,CAAC,QAAQ,KAAK,KAAK,EAAE,CAAC;YACpC,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAA;QAC1C,CAAC;QAED,+EAA+E;QAC/E,SAAS,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,CAAA;QAC9B,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC,EAAE,SAAS,EAAE;YACxE,GAAG,EAAE,OAAO;SACb,CAAC,CAAA;IACJ,CAAC;IAEO,sBAAsB;QAC5B,MAAM,IAAI,GAAkB,EAAE,CAAA;QAC9B,IAAI,IAAI,CAAC,OAAO,CAAC,mBAAmB,IAAI,IAAI,EAAE,CAAC;YAC7C,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAA;QAChD,CAAC;QACD,OAAO,IAAI,CAAA;IACb,CAAC;IAEO,gBAAgB;QACtB,MAAM,IAAI,GAAkB,CAAC,WAAW,CAAC,CAAA;QACzC,IAAI,IAAI,CAAC,OAAO,CAAC,gBAAgB,KAAK,KAAK,EAAE,CAAC;YAC5C,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAClB,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,CAAC,iBAAiB,IAAI,IAAI,EAAE,CAAC;YAC3C,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAA;QAC9C,CAAC;QACD,OAAO,IAAI,CAAA;IACb,CAAC;IAES,KAAK,CAAC,aAAa,CAAC,SAAiB,EAAE,OAAa,EAAE,aAAiD;QAC/G,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAA;QACrC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,SAAS,CAAC,CAAA;QACpE,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAA;QAE5B,OAAO,CAAC,MAAM,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;YACxC,GAAG,CAAC,MAAM,IAAI,CAAC,cAAc,CAAC,aAAa,CAAC,CAAC;YAC7C,uBAAuB,EAAE,aAAa,CAAC,uBAAuB,KAAK,6BAA6B,CAAC,KAAK;YACtG,gBAAgB,EAAE,OAAO,CAAC,cAAc,KAAK,KAAK;YAClD,6GAA6G;YAC7G,cAAc,EAAE,OAAO,KAAK,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,oBAAoB;YACpF,qEAAqE;YACrE,4BAA4B,EAAE,6BAA6B,CAAC,OAAO,EAAE,aAAa,CAAC,UAAU,IAAI,aAAa,CAAC,YAAY,KAAK,IAAI,CAAC;YACrI,IAAI;YACJ,KAAK;SACN,CAAC,CAAA;IACJ,CAAC;IAES,KAAK,CAAC,cAAc,CAAC,aAAiD;QAC9E,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAA;QACrC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAA;QAClD,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAA;QAE7C,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,CAAA;QACvC,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,GAAG,CAAC,IAAI,CAAC,2EAA2E,CAAC,CAAA;QACvF,CAAC;QAED,OAAO;YACL,GAAG,aAAa;YAChB,QAAQ,EAAE,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAC9D,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,gBAAgB,EAAE,WAAW,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;YAC3D,OAAO,EAAE,OAAO,CAAC,4BAA4B,EAAE;YAC/C,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,YAAY,EAAE,WAAW,IAAI,OAAO,CAAC,WAAW;YAChD,cAAc,EAAE,OAAO,CAAC,WAAW;SACpC,CAAA;IACH,CAAC;IAEO,KAAK,CAAC,sBAAsB,CAAC,SAAiB;QACpD,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAA;QACrC,IAAI,2BAA2B,GAAG,KAAK,CAAA;QACvC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAA;QAClC,MAAM,IAAI,GAAkB,EAAE,CAAA;QAC9B,MAAM,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;QAC/B,MAAM,aAAa,GAAG,mBAAmB,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAA;QACtE,MAAM,KAAK,GAAG,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE;YAC/C,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;YAExD,MAAM,SAAS,GAAG,WAAW,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YACnD,MAAM,QAAQ,GAAG,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,SAAS,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAA;YACnF,IAAI,WAAW,GAAkB,IAAI,CAAA;YACrC,IAAI,OAAO,GAAG,EAAE,CAAA;YAChB,gHAAgH;YAChH,IAAI,SAAS,GAAG,CAAC,EAAE,CAAC;gBAClB,8FAA8F;gBAC9F,+OAA+O;gBAC/O,2FAA2F;gBAC3F,OAAO,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC,EAAE,SAAS,CAAC,CAAA;gBAC7C,oEAAoE;gBACpE,WAAW,GAAG,GAAG,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;gBACnF,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;oBAC3B,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;oBACrB,IAAI,CAAC,IAAI,CAAC,kBAAkB,WAAW,WAAW,WAAW,MAAM,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,CAAA;gBACzG,CAAC;YACH,CAAC;iBAAM,IAAI,CAAC,2BAA2B,EAAE,CAAC;gBACxC,2BAA2B,GAAG,IAAI,CAAA;YACpC,CAAC;YAED,kHAAkH;YAClH,8EAA8E;YAC9E,IAAI,MAAM,GAAG,aAAa,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,eAAe,WAAW,GAAG,GAAG,CAAA;YACtF,MAAM,IAAI,KAAK,SAAS,iBAAiB,YAAY,CAAC,QAAQ,CAAC,0BAA0B,IAAI,CAAC,GAAG,GAAG,YAAY,CAAC,WAAW,CAAC,gCAAgC,CAAA;YAC7J,MAAM,gBAAgB,GAAG,WAAW,KAAK,GAAG,OAAO,CAAC,eAAe,MAAM,CAAA;YACzE,IAAI,gBAAgB,EAAE,CAAC;gBACrB,MAAM,IAAI,sBAAsB,CAAA;YAClC,CAAC;iBAAM,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;gBAChC,MAAM,IAAI,QAAQ,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,CAAA;YACnD,CAAC;YAED,MAAM,uBAAuB,GAAG,aAAa,CAAC,uBAAuB,KAAK,6BAA6B,CAAC,KAAK,CAAA;YAC7G,IAAI,gBAAgB,IAAI,CAAC,uBAAuB,IAAI,aAAa,CAAC,yBAAyB,CAAC,EAAE,CAAC;gBAC7F,MAAM,IAAI,KAAK,CAAA;gBACf,MAAM,YAAY,GAAG,aAAa,CAAC,YAAY,CAAA;gBAC/C,IAAI,uBAAuB,EAAE,CAAC;oBAC5B,MAAM,IAAI,GAAG,SAAS,oEAAoE,YAAY,CACpG,YAAY,CACb,gEAAgE,IAAI,CAAC,MAAM,OAAO,CAAA;gBACrF,CAAC;gBAED,MAAM,eAAe,GAAG,aAAa,CAAC,YAAY,IAAI,IAAI,CAAA;gBAC1D,MAAM,4BAA4B,GAAG,eAAe,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,mBAAmB,CAAA;gBAChG,IAAI,aAAa,CAAC,yBAAyB,EAAE,CAAC;oBAC5C,IAAI,eAAe,EAAE,CAAC;wBACpB,IAAI,CAAC,IAAI,CAAC,kBAAkB,4BAA4B,+BAA+B,aAAa,CAAC,YAAY,OAAO,CAAC,CAAA;oBAC3H,CAAC;oBACD,MAAM,IAAI,GAAG,SAAS,iDAAiD,4BAA4B,WAAW,YAAY,CACxH,YAAY,CACb,gEAAgE,IAAI,CAAC,MAAM,MAAM,CAAA;oBAClF,MAAM,IAAI,GAAG,SAAS,6DAA6D,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAA;oBAChI,MAAM,IAAI,GAAG,SAAS,iBAAiB,CAAA;gBACzC,CAAC;gBACD,MAAM,IAAI,GAAG,SAAS,SAAS,CAAA;gBAE/B,IAAI,eAAe,EAAE,CAAC;oBACpB,MAAM,IAAI,qBAAqB,4BAA4B,gBAAgB,4BAA4B,sBAAsB,CAAA;gBAC/H,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,IAAI,CAAA;YAChB,CAAC;YAED,MAAM,gBAAgB,GAAG,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAA;YACvD,IAAI,gBAAgB,IAAI,gBAAgB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACtD,KAAK,MAAM,IAAI,IAAI,gBAAgB,EAAE,CAAC;oBACpC,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAA;oBACtD,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;wBAC7B,MAAM,IAAI,GAAG,SAAS,iBAAiB,IAAI,CAAC,kBAAkB,IAAI,YAAY,CAAC,GAAG,CAAC,2BAA2B,IAAI,CAAC,MAAM,KACvH,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,gBAAgB,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EACzE,KAAK,CAAA;wBACL,MAAM,IAAI,GAAG,SAAS,sBAAsB,YAAY,CAAC,GAAG,CAAC,sBAAsB,CAAA;wBACnF,MAAM,IAAI,GAAG,SAAS,4CAA4C,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,WAAW,CAAC,iCAAiC,CAAA;wBAClJ,MAAM,IAAI,GAAG,SAAS,oBAAoB,CAAA;wBAC1C,MAAM,IAAI,GAAG,SAAS,eAAe,CAAA;oBACvC,CAAC;gBACH,CAAC;YACH,CAAC;YAED,OAAO,GAAG,MAAM,KAAK,SAAS,cAAc,CAAA;QAC9C,CAAC,CAAC,CAAA;QAEF,OAAO,EAAE,IAAI,EAAE,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,YAAY,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,CAAA;IACvE,CAAC;CACF;AAED,SAAS,YAAY,CAAC,IAAmB,EAAE,WAAmB;IAC5D,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,WAAW,GAAG,CAAC,CAAC,CAAA;IACzC,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,KAAK,EAAE,CAAC,CAAA;AAChC,CAAC","sourcesContent":["import { Arch, asArray, log, walk, escapeForXml } from \"builder-util\"\nimport { UUID } from \"builder-util-runtime\"\nimport { createHash } from \"crypto\"\nimport ejs from \"ejs\"\nimport { readFile, writeFile } from \"fs/promises\"\nimport { Lazy } from \"lazy-val\"\nimport path from \"path\"\nimport { Target } from \"../../core.js\"\nimport { MsiOptions } from \"../../index.js\"\nimport { DesktopShortcutCreationPolicy, FinalCommonWindowsInstallerOptions, getEffectiveOptions } from \"../../options/CommonWindowsInstallerConfiguration.js\"\nimport { normalizeExt } from \"../../platformPackager.js\"\nimport { downloadBuilderToolset } from \"../../util/electronGet.js\"\nimport { getTemplatePath } from \"../../util/pathManager.js\"\nimport { withToolsetLock } from \"../../util/toolsetLock.js\"\nimport { VmManager } from \"../../vm/vm.js\"\nimport { WineVmManager } from \"../../vm/WineVm.js\"\nimport { WinPackager } from \"../../winPackager.js\"\nimport { createStageDir, getWindowsInstallationDirName } from \"../targetUtil.js\"\n\nconst ELECTRON_BUILDER_UPGRADE_CODE_NS_UUID = UUID.parse(\"d752fe43-5d44-44d5-9fc9-6dd1bf19d5cc\")\nconst ROOT_DIR_ID = \"APPLICATIONFOLDER\"\n\n// WiX doesn't support Mono, so, dontnet462 is required to be installed for wine (preinstalled in our bundled wine)\nexport default class MsiTarget extends Target {\n  protected readonly vm = process.platform === \"win32\" ? new VmManager() : new WineVmManager(this.packager.config.toolsets?.wine, this.packager.buildResourcesDir)\n\n  readonly options: MsiOptions = this.packager.getOptionsForTarget<MsiOptions>(\"msi\")\n\n  constructor(\n    protected readonly packager: WinPackager,\n    readonly outDir: string,\n    name = \"msi\",\n    isAsyncSupported = true\n  ) {\n    super(name, isAsyncSupported)\n  }\n\n  protected projectTemplate = new Lazy<(data: any) => string>(async () => {\n    const template = (await readFile(path.join(getTemplatePath(this.name), \"template.xml\"), \"utf8\"))\n      .replace(/{{/g, \"<%\")\n      .replace(/}}/g, \"%>\")\n      .replace(/\\${([^}]+)}/g, \"<%=$1%>\")\n    return ejs.compile(template)\n  })\n\n  /**\n   * A product-specific string that can be used in an [MSI Identifier](https://docs.microsoft.com/en-us/windows/win32/msi/identifier).\n   */\n  private get productMsiIdPrefix() {\n    const sanitizedId = this.packager.appInfo.productFilename.replace(/[^\\w.]/g, \"\").replace(/^[^A-Za-z_]+/, \"\")\n    return sanitizedId.length > 0 ? sanitizedId : \"App\" + this.upgradeCode.replace(/-/g, \"\")\n  }\n\n  protected get iconId() {\n    return `${this.productMsiIdPrefix}Icon.exe`\n  }\n\n  protected get upgradeCode(): string {\n    return (this.options.upgradeCode || UUID.v5(this.packager.appInfo.id, ELECTRON_BUILDER_UPGRADE_CODE_NS_UUID)).toUpperCase()\n  }\n\n  async build(appOutDir: string, arch: Arch) {\n    const packager = this.packager\n    const artifactName = packager.expandArtifactBeautyNamePattern(this.options, \"msi\", arch)\n    const artifactPath = path.join(this.outDir, artifactName)\n    await packager.emitArtifactBuildStarted({\n      targetPresentableName: \"MSI\",\n      file: artifactPath,\n      arch,\n    })\n\n    const stageDir = await createStageDir(this, packager, arch)\n    const vm = this.vm\n\n    const commonOptions = getEffectiveOptions(this.options, this.packager)\n\n    // wix 4.0.0.5512.2 doesn't support the arm64 architecture so default to x64 when building for arm64.\n    // This will result in an x64 MSI installer that installs an arm64 version of the application. This is a\n    // stopgap until the electron-builder-binaries wix version is upgraded to a version that supports arm64:\n    // https://github.com/electron-userland/electron-builder/issues/6077\n    const wixArch = arch == Arch.arm64 ? Arch.x64 : arch\n\n    const projectFile = stageDir.getTempFile(\"project.wxs\")\n    const objectFiles = [\"project.wixobj\"]\n    await writeFile(projectFile, await this.writeManifest(appOutDir, wixArch, commonOptions))\n\n    await packager.emitMsiProjectCreated(projectFile)\n\n    // noinspection SpellCheckingInspection\n    const vendorPath = await downloadBuilderToolset({\n      releaseName: \"wix-4.0.0.5512.2\",\n      filenameWithExt: \"wix-4.0.0.5512.2.7z\",\n      checksums: { \"wix-4.0.0.5512.2.7z\": \"fe677fcd837b18c9b912985d91636bbd8a1e800c3b3a6a841b6f96e89624e839\" },\n    })\n\n    // noinspection SpellCheckingInspection\n    const candleArgs = [\"-arch\", wixArch === Arch.ia32 ? \"x86\" : \"x64\", `-dappDir=${vm.toVmFile(appOutDir)}`].concat(this.getCommonWixArgs())\n    candleArgs.push(\"project.wxs\")\n    await withToolsetLock(async () => {\n      await vm.exec(vm.toVmFile(path.join(vendorPath, \"candle.exe\")), candleArgs, {\n        cwd: stageDir.dir,\n      })\n      await this.light(objectFiles, vm, artifactPath, appOutDir, vendorPath, stageDir.dir)\n    })\n\n    await stageDir.cleanup()\n\n    await packager.signIf(artifactPath)\n\n    await packager.emitArtifactBuildCompleted({\n      file: artifactPath,\n      packager,\n      arch,\n      safeArtifactName: packager.computeSafeArtifactName(artifactName, \"msi\"),\n      target: this,\n      isWriteUpdateInfo: false,\n    })\n  }\n\n  private async light(objectFiles: Array<string>, vm: VmManager, artifactPath: string, appOutDir: string, vendorPath: string, tempDir: string) {\n    // noinspection SpellCheckingInspection\n    const lightArgs = [\n      \"-out\",\n      vm.toVmFile(artifactPath),\n      \"-v\",\n      // https://github.com/wixtoolset/issues/issues/5169\n      \"-spdb\",\n      // https://sourceforge.net/p/wix/bugs/2405/\n      // error LGHT1076 : ICE61: This product should remove only older versions of itself. The Maximum version is not less than the current product. (1.1.0.42 1.1.0.42)\n      \"-sw1076\",\n      `-dappDir=${vm.toVmFile(appOutDir)}`,\n      // \"-dcl:high\",\n    ]\n      .concat(this.getCommonWixArgs())\n      .concat(this.getAdditionalLightArgs())\n\n    // http://windows-installer-xml-wix-toolset.687559.n2.nabble.com/Build-3-5-2229-0-give-me-the-following-error-error-LGHT0216-An-unexpected-Win32-exception-with-errorn-td5707443.html\n    if (process.platform !== \"win32\") {\n      // noinspection SpellCheckingInspection\n      lightArgs.push(\"-sval\")\n    }\n\n    if (this.options.oneClick === false) {\n      lightArgs.push(\"-ext\", \"WixUIExtension\")\n    }\n\n    // objectFiles - only filenames, we set current directory to our temp stage dir\n    lightArgs.push(...objectFiles)\n    await vm.exec(vm.toVmFile(path.join(vendorPath, \"light.exe\")), lightArgs, {\n      cwd: tempDir,\n    })\n  }\n\n  private getAdditionalLightArgs() {\n    const args: Array<string> = []\n    if (this.options.additionalLightArgs != null) {\n      args.push(...this.options.additionalLightArgs)\n    }\n    return args\n  }\n\n  private getCommonWixArgs() {\n    const args: Array<string> = [\"-pedantic\"]\n    if (this.options.warningsAsErrors !== false) {\n      args.push(\"-wx\")\n    }\n    if (this.options.additionalWixArgs != null) {\n      args.push(...this.options.additionalWixArgs)\n    }\n    return args\n  }\n\n  protected async writeManifest(appOutDir: string, wixArch: Arch, commonOptions: FinalCommonWindowsInstallerOptions) {\n    const appInfo = this.packager.appInfo\n    const { files, dirs } = await this.computeFileDeclaration(appOutDir)\n    const options = this.options\n\n    return (await this.projectTemplate.value)({\n      ...(await this.getBaseOptions(commonOptions)),\n      isCreateDesktopShortcut: commonOptions.isCreateDesktopShortcut !== DesktopShortcutCreationPolicy.NEVER,\n      isRunAfterFinish: options.runAfterFinish !== false,\n      // https://stackoverflow.com/questions/1929038/compilation-error-ice80-the-64bitcomponent-uses-32bitdirectory\n      programFilesId: wixArch === Arch.x64 ? \"ProgramFiles64Folder\" : \"ProgramFilesFolder\",\n      // wix in the name because special wix format can be used in the name\n      installationDirectoryWixName: getWindowsInstallationDirName(appInfo, commonOptions.isAssisted || commonOptions.isPerMachine === true),\n      dirs,\n      files,\n    })\n  }\n\n  protected async getBaseOptions(commonOptions: FinalCommonWindowsInstallerOptions): Promise<any> {\n    const appInfo = this.packager.appInfo\n    const iconPath = await this.packager.getIconPath()\n    const compression = this.packager.compression\n\n    const companyName = appInfo.companyName\n    if (!companyName) {\n      log.warn(`Manufacturer is not set for MSI — please set \"author\" in the package.json`)\n    }\n\n    return {\n      ...commonOptions,\n      iconPath: iconPath == null ? null : this.vm.toVmFile(iconPath),\n      iconId: this.iconId,\n      compressionLevel: compression === \"store\" ? \"none\" : \"high\",\n      version: appInfo.getVersionInWeirdWindowsForm(),\n      productName: appInfo.productName,\n      upgradeCode: this.upgradeCode,\n      manufacturer: companyName || appInfo.productName,\n      appDescription: appInfo.description,\n    }\n  }\n\n  private async computeFileDeclaration(appOutDir: string) {\n    const appInfo = this.packager.appInfo\n    let isRootDirAddedToRemoveTable = false\n    const dirNames = new Set<string>()\n    const dirs: Array<string> = []\n    const fileSpace = \" \".repeat(6)\n    const commonOptions = getEffectiveOptions(this.options, this.packager)\n    const files = (await walk(appOutDir)).map(file => {\n      const packagePath = file.substring(appOutDir.length + 1)\n\n      const lastSlash = packagePath.lastIndexOf(path.sep)\n      const fileName = lastSlash > 0 ? packagePath.substring(lastSlash + 1) : packagePath\n      let directoryId: string | null = null\n      let dirName = \"\"\n      // Wix Directory.FileSource doesn't work - https://stackoverflow.com/questions/21519388/wix-filesource-confusion\n      if (lastSlash > 0) {\n        // This Name attribute may also define multiple directories using the inline directory syntax.\n        // For example, \"ProgramFilesFolder:\\My Company\\My Product\\bin\" would create a reference to a Directory element with Id=\"ProgramFilesFolder\" then create directories named \"My Company\" then \"My Product\" then \"bin\" nested beneath each other.\n        // This syntax is a shortcut to defining each directory in an individual Directory element.\n        dirName = packagePath.substring(0, lastSlash)\n        // https://github.com/electron-userland/electron-builder/issues/3027\n        directoryId = \"d\" + createHash(\"sha256\").update(dirName).digest(\"hex\").slice(0, 16)\n        if (!dirNames.has(dirName)) {\n          dirNames.add(dirName)\n          dirs.push(`<Directory Id=\"${directoryId}\" Name=\"${ROOT_DIR_ID}:\\\\${dirName.replace(/\\//g, \"\\\\\")}\\\\\"/>`)\n        }\n      } else if (!isRootDirAddedToRemoveTable) {\n        isRootDirAddedToRemoveTable = true\n      }\n\n      // since RegistryValue can be part of Component, *** *** *** *** *** *** *** *** *** wix cannot auto generate guid\n      // https://stackoverflow.com/questions/1405100/change-my-component-guid-in-wix\n      let result = `<Component${directoryId === null ? \"\" : ` Directory=\"${directoryId}\"`}>`\n      result += `\\n${fileSpace}  <File Name=\"${escapeForXml(fileName)}\" Source=\"$(var.appDir)${path.sep}${escapeForXml(packagePath)}\" ReadOnly=\"yes\" KeyPath=\"yes\"`\n      const isMainExecutable = packagePath === `${appInfo.productFilename}.exe`\n      if (isMainExecutable) {\n        result += ' Id=\"mainExecutable\"'\n      } else if (directoryId === null) {\n        result += ` Id=\"${path.basename(packagePath)}_f\"`\n      }\n\n      const isCreateDesktopShortcut = commonOptions.isCreateDesktopShortcut !== DesktopShortcutCreationPolicy.NEVER\n      if (isMainExecutable && (isCreateDesktopShortcut || commonOptions.isCreateStartMenuShortcut)) {\n        result += `>\\n`\n        const shortcutName = commonOptions.shortcutName\n        if (isCreateDesktopShortcut) {\n          result += `${fileSpace}  <Shortcut Id=\"desktopShortcut\" Directory=\"DesktopFolder\" Name=\"${escapeForXml(\n            shortcutName\n          )}\" WorkingDirectory=\"APPLICATIONFOLDER\" Advertise=\"yes\" Icon=\"${this.iconId}\"/>\\n`\n        }\n\n        const hasMenuCategory = commonOptions.menuCategory != null\n        const startMenuShortcutDirectoryId = hasMenuCategory ? \"AppProgramMenuDir\" : \"ProgramMenuFolder\"\n        if (commonOptions.isCreateStartMenuShortcut) {\n          if (hasMenuCategory) {\n            dirs.push(`<Directory Id=\"${startMenuShortcutDirectoryId}\" Name=\"ProgramMenuFolder:\\\\${commonOptions.menuCategory}\\\\\"/>`)\n          }\n          result += `${fileSpace}  <Shortcut Id=\"startMenuShortcut\" Directory=\"${startMenuShortcutDirectoryId}\" Name=\"${escapeForXml(\n            shortcutName\n          )}\" WorkingDirectory=\"APPLICATIONFOLDER\" Advertise=\"yes\" Icon=\"${this.iconId}\">\\n`\n          result += `${fileSpace}    <ShortcutProperty Key=\"System.AppUserModel.ID\" Value=\"${escapeForXml(this.packager.appInfo.id)}\"/>\\n`\n          result += `${fileSpace}  </Shortcut>\\n`\n        }\n        result += `${fileSpace}</File>`\n\n        if (hasMenuCategory) {\n          result += `<RemoveFolder Id=\"${startMenuShortcutDirectoryId}\" Directory=\"${startMenuShortcutDirectoryId}\" On=\"uninstall\"/>\\n`\n        }\n      } else {\n        result += `/>`\n      }\n\n      const fileAssociations = this.packager.fileAssociations\n      if (isMainExecutable && fileAssociations.length !== 0) {\n        for (const item of fileAssociations) {\n          const extensions = asArray(item.ext).map(normalizeExt)\n          for (const ext of extensions) {\n            result += `${fileSpace}  <ProgId Id=\"${this.productMsiIdPrefix}.${escapeForXml(ext)}\" Advertise=\"yes\" Icon=\"${this.iconId}\" ${\n              item.description ? `Description=\"${escapeForXml(item.description)}\"` : \"\"\n            }>\\n`\n            result += `${fileSpace}    <Extension Id=\"${escapeForXml(ext)}\" Advertise=\"yes\">\\n`\n            result += `${fileSpace}      <Verb Id=\"open\" Command=\"Open with ${escapeForXml(this.packager.appInfo.productName)}\" Argument=\"&quot;%1&quot;\"/>\\n`\n            result += `${fileSpace}    </Extension>\\n`\n            result += `${fileSpace}  </ProgId>\\n`\n          }\n        }\n      }\n\n      return `${result}\\n${fileSpace}</Component>`\n    })\n\n    return { dirs: listToString(dirs, 2), files: listToString(files, 3) }\n  }\n}\n\nfunction listToString(list: Array<string>, indentLevel: number) {\n  const space = \" \".repeat(indentLevel * 2)\n  return list.join(`\\n${space}`)\n}\n"]}

package/dist/toolsets/custom.js

@@ -69,8 +69,10 @@ async function _resolveCustomToolsetPath(custom, resourcesDir) {
         const cacheDir = await cacheDirectoryOverrideAllowed.value;
         const customToolsetDir = path.join(cacheDir, "custom-toolsets");
         await mkdir(customToolsetDir, { recursive: true });
-        // wipe first to ensure idempotent extraction if the source file changed since last extraction
-        const toolsetTarget = path.join(customToolsetDir, releaseName);
+        // wipe first to ensure idempotent extraction if the source file changed since last extraction.
+        // Contain the destination within customToolsetDir (mirrors the `url` branch): `version` is a free-form
+        // config field, so a `../…` value must not let rmdir/extract escape the cache directory.
+        const toolsetTarget = sanitizeDirPath(path.join(customToolsetDir, releaseName), customToolsetDir);
         if (await exists(toolsetTarget)) {
             await rmdir(toolsetTarget, { recursive: true });
         }