[wwboyer]

Summary

Adds Square Enix sign-in support for FINAL FANTASY XIV library entries, so the game can start from Madeira without Square Enix's launcher. Square Enix's launcher doesn't run in Madeira's Wine setup (It's a CEF/WebView2 app that just shows a webpage), but the actual game itself runs incredibly well in Wine.

What it does

• Recognizes FFXIV automatically. A library entry that names one of the game's own programs, next to its version files, gets a Square Enix section on its details page. Pressing "Play" then shows the user a sign-in sheet before launching. Everything else is identical to other library entries.
• Signs in from a sheet on Play. The sheet runs the sign-in (server status, boot version check, credentials, session registration), shows progress and Square Enix's own error messages, and starts game/ffxiv_dx11.exe with that launch's session.
  • One-time passwords and free trial accounts are supported.
  • A refused password is not retried automatically, as repeated failures can lock the account.
  • Canceling or failing doesn't use the app run's Wine session.
• License: Windows or Mac. The game decides which version to run by looking up Wine's wine_get_host_version, which returns Darwin under Mac OS and (obviously) doesn't exist on Windows.
  • Under Mac, the game starts with no issue, as Madeira also returns Darwin.
  • Under Windows, a small patch to the PE ntdll (build/wine-pe/patches/ntdll-hide-wine-host-version.patch, applied by build-ntdll.sh for its build only) hides that function from GetProcAddress. Load-time imports still resolve.
  • The game's Windows version then restarts itself, so a Windows-license launch always starts in the Wine desktop to prevent the Wine session from ending early.
• Remember sign-in (opt-in). The Square Enix ID and password are stored in the iOS Keychain, on the local device only. A one-time password is never stored. Turning it off or removing the entry deletes the item.

What it doesn't do (for now)

• No downloading: it doesn't install the game files. An existing game install must be manually copied over to drive_c.
• No patching: when the game is outdated (the boot check or session registration says so), it stops and tells the user. It doesn't apply updates.
• No Steam version support: the Steam version of the game has its own quirks in the sign-in flow (specifically requiring a session ticket from the Steamworks API). I do not own the game on Steam, so I cannot test this.

Downloading and patching would fit on top of this later: the boot check already parses the patch list (target version and download URL).

Details

• Protocol and provenance: docs/SQUARE_ENIX_SIGNIN.md covers the protocol, the license findings and where every fact came from.
  • The code is an independent implementation, written from that document and first-hand observation.
  • No third-party launcher code was used or referenced for this implementation.
• New files:
  • app/Madeira/SquareEnixSignIn.swift (the protocol; Foundation and CryptoKit only)
  • app/Madeira/SquareEnixSignInView.swift (the UI and Keychain)
  • tests/host/check-square-enix-signin.py
  • tools/sqex-signin-probe.py (runs the sign-in once from a Mac, without starting the game)
• Other changes:
  • LibraryEntry gains three optional fields, plus a transient program next to its transient arguments.
  • Info.plist allows plain HTTP to patch-bootver.ffxiv.com only. In the login process, there is a specific boot update check that requires a GET request to an HTTP endpoint. HTTPS requests will fail, so an exception needs to be made for patch-bootver.ffxiv.com.
  • Log redaction hides DEV.TestSID.
  • The settings catalog is regenerated.
  • The arm64ec ntdll.dll, rebuilt with the patch, is committed.

Testing

• Host tests: check-square-enix-signin.py --require-swift passes, along with check-frontend, check-epic-games, check-game-recommendations, check-runtime-settings, check-control-presets, check-config-catalog, check-log-redaction's new case and check-doc-links.
  • check-steam-games ("no Launch arguments for a Steam game") fails on main as well, and so does check-log-redaction's ntdll wiring count.
• On an iPhone:
  • Mac license: signed in and played normally.
  • Windows license: the game ran its Windows version, starting in the Wine desktop automatically.
  • The test account has both licenses, so a refusal under the wrong setting for a single-license account hasn't been observed.

Disclosure

The code, documentation, and this pull request were written with the help of Claude Opus 5.5 (Anthropic).

[wwboyer]

Closing this for now - I got a lot closer to a full download and patching system much more quickly than I thought I would given that I'm no longer trying to utilize code from other projects, so I'm going to continue working on that and open a PR for a complete solution rather than have this half-baked one merged.