GC: delete unreferenced blobs. Keeps manifest-referenced canonical and legacy-SHA blobs; deletes everything else. Requires complete listing. Returns c

Returns: 0 already patched, 1 needs patch, -1 not found / unrecognized.

Legacy EMsg 818: CMsgClientGetUserStats (game_id, crc, schema, stats, ach_blocks).

One-time consent gate; not shown again on later mode switches.

Like HasFailedWorkForPrefix but ignores bestEffort items.

Like HasPendingWorkForPrefixLocked but ignores bestEffort items. Used by commit drains so gap-repair uploads don't block CN advance.

Import native UserGameStats + schema blobs. Caller holds g_mutex.

Path validation

Reject binary content (NUL bytes in the first 8KB)

Returns true and sets outPath if the file was read and DisableCloud == false. Adds any newly-seen appIds to g_namespaceApps. Existing entries are neve

Default reporter: shows a synchronous MessageBox. Extracted into a named function so Init(provider) can reference it.

Defer persistence to HandleCompleteBatch.

Fold `incoming` onto `base` (same app) with the in-store monotonic rules: union playtime, union achievements, stat-value merge. Pure function.

Merge cached cloud blob for one app. Caller holds g_mutex.

Observe CMsgClientGamesPlayed (EMsg 5410) for playtime session tracking.

Observe StoreUserStats2 (EMsg 5466) -- re-read native blob for new unlocks.

append, binary - text mode intermixes \r\n translation with UTF-8, breaking single-fwrite semantics

Parse "/upload/<account>/<app>/<file>" or "/download/..."; rejects "../" after URL decoding.

Extract logical filename from a blob path, stripping SHA leaf for canonical paths. Returns trailing component as-is for legacy layouts.

Parse the first-format playtime JSON ({"LastPlayed","Playtime","Playtime2wks"}).

Parse manifest JSON. Handles both new format ({ "f.lua": { "mod": N, "del": N } }) and old format ({ "f.lua": N }) for migration.

Parse "tokens_gdrive.json" -> provider="gdrive", account from path

SEH helper: read/write depot entry (can't mix SEH with C++ object unwinding)

Inline detour on CUserAppManager::BuildDepotDependency: call original then rewrite manifest IDs for pinned depots in the output vectors.

Writes both files; rolls back settings.json if pin-config write fails.

Porcelain mode: tab-separated machine output (QUOTA/CLOUD/FILE/DEL/COUNT).

Remove finished client threads (call with g_clientMtx held)

Read a whole file and SHA1 it in one pass, returning the bytes in outBytes so the caller can reuse them without a second read. Returns empty on error.

Quick JSON bool lookup for early-init config reads (before the full JSON parser is available). Returns defaultVal if the key is absent.

Jobid of the running coroutine (correlates outbound 818 with injected 819). SEH-isolated: no C++ objects in scope.

Read-only probe of g_pJobCur (non-NULL = on cooperative job fiber, yield legal).

Pull account blob into g_cloudBlobByApp. Caller must NOT hold g_mutex.

Re-import native blob, merging new unlocks. Caller holds mutex.

Fetch one app's schema. Background thread only (HTTP). Sends queued for net thread.

Resolve the actual cloud path for a blob by consulting the per-app index. Populates the index with a single ListChecked on first call per app. Returns

Rewrite skip file from in-memory map. Caller must hold g_schemaSkipMutex.

Streaming SHA1 (UTF-8 path).

Strip Steam root token prefix plus any \r\n between token and path. Sanitize control chars in RPC-sourced strings before logging to prevent log inject

Signature scanning.