For Agents

Living index of themes for this project. Each H2 is a topic; bullets are wikilinks to related notes. Updated by obsidian-documenter when documenting work. Read by historian at bootstrap. Topics kept alphabetical.

Authentication and Login

  • Auth v2 Login Flow — Unified Messages transport, GetPasswordRSAPublicKey (PKCS#1 v1.5 password RSA), BeginAuthSessionViaCredentials, Steam Guard via UpdateAuthSessionWithSteamGuardCode, JWT poll via PollAuthSessionStatus, final CMsgClientLogon with refresh-token-as-access_token.
  • Steam Protocol Overview §6 — Auth v2 login synthesis and state machine.
  • Validation Report §5 — per-claim verification of the Auth v2 sequence, including the heartbeat_seconds correction.

CS2 / Game Coordinator

  • CS2 Game CoordinatorCMsgGCClient envelope, mounting appid 730 via CMsgClientGamesPlayed, two-hello dance (4006 / 9109), parsing the 9110 response for player_level, player_cur_xp, Prime bit (bit 4 of player_xp_bonus_flags — unverified), Premier rating (rankings[rank_type_id==11].rank_id — unverified).
  • Steam Protocol Overview §7-§8 — GC envelope synthesis and end-to-end CS2 fetch byte sequence.
  • Validation Report §8 — explicitly downgrades the Prime-via-bit-4 and Premier-rank_type_id-11 claims to “unverified” with reasoning.

Cryptography

  • TCP Transport and Handshake §C–§D — RSA-OAEP-SHA1 handshake key wrap, AES-256-CBC bulk encryption, HMAC-SHA1 IV derivation, key-split (first 16 bytes for HMAC, all 32 for AES).
  • Auth v2 Login Flow §B — separate password RSA (PKCS#1 v1.5, per-account, rotates) — distinct from transport RSA.

Project Overview

  • README — hypelevels landing page; project description, read order, companion notes, quick-reference constants.
  • Steam Protocol Overview — top-level synthesis of the layered protocol model, end-to-end byte sequence, common pitfalls.

Transport and Framing

Validation and Audit

  • Validation Report — per-claim audit trail across all four protocol notes. Lists the four wrong EMsg values (ClientGamesPlayed, ServiceMethodCallFromClient, ServiceMethodResponse, plus ClientHello added), the heartbeat field correction (out_of_game_heartbeat_secondsheartbeat_seconds), and the two unverified CS2 GC claims (Prime via bit 4 of player_xp_bonus_flags, Premier as rank_type_id == 11).