For Agents
Living index of themes for this project. Each H2 is a topic; bullets are wikilinks to related notes. Updated by
obsidian-documenterwhen documenting work. Read byhistorianat bootstrap. Topics kept alphabetical.
Authentication and Login
- Auth v2 Login Flow — Unified Messages transport,
GetPasswordRSAPublicKey(PKCS#1 v1.5 password RSA),BeginAuthSessionViaCredentials, Steam Guard viaUpdateAuthSessionWithSteamGuardCode, JWT poll viaPollAuthSessionStatus, finalCMsgClientLogonwith refresh-token-as-access_token. - Steam Protocol Overview §6 — Auth v2 login synthesis and state machine.
- Validation Report §5 — per-claim verification of the Auth v2 sequence, including the
heartbeat_secondscorrection.
CS2 / Game Coordinator
- CS2 Game Coordinator —
CMsgGCClientenvelope, mounting appid 730 viaCMsgClientGamesPlayed, two-hello dance (4006 / 9109), parsing the 9110 response forplayer_level,player_cur_xp, Prime bit (bit 4 ofplayer_xp_bonus_flags— unverified), Premier rating (rankings[rank_type_id==11].rank_id — unverified). - Steam Protocol Overview §7-§8 — GC envelope synthesis and end-to-end CS2 fetch byte sequence.
- Validation Report §8 — explicitly downgrades the Prime-via-bit-4 and Premier-rank_type_id-11 claims to “unverified” with reasoning.
Cryptography
- TCP Transport and Handshake §C–§D — RSA-OAEP-SHA1 handshake key wrap, AES-256-CBC bulk encryption, HMAC-SHA1 IV derivation, key-split (first 16 bytes for HMAC, all 32 for AES).
- Auth v2 Login Flow §B — separate password RSA (PKCS#1 v1.5, per-account, rotates) — distinct from transport RSA.
Project Overview
- README — hypelevels landing page; project description, read order, companion notes, quick-reference constants.
- Steam Protocol Overview — top-level synthesis of the layered protocol model, end-to-end byte sequence, common pitfalls.
Transport and Framing
- TCP Transport and Handshake — 8-byte
VT01TCP frame, three-messageChannelEncryptRequest/Response/Resulthandshake, MsgHdr vs MsgHdrProtoBuf, post-handshake AES bulk encryption. - Steam Protocol Overview §2-§5 — frame, handshake, and CM header format synthesis.
Validation and Audit
- Validation Report — per-claim audit trail across all four protocol notes. Lists the four wrong EMsg values (ClientGamesPlayed, ServiceMethodCallFromClient, ServiceMethodResponse, plus ClientHello added), the heartbeat field correction (
out_of_game_heartbeat_seconds→heartbeat_seconds), and the two unverified CS2 GC claims (Prime via bit 4 ofplayer_xp_bonus_flags, Premier asrank_type_id == 11).