From c4d290b0b609c242535581c2baf93e52f8191af8 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Wed, 29 Jul 2026 06:55:44 +0000
Subject: [PATCH 1/7] Merge Windows assets per package instead of across all of
 artifacts

---
 build/AddWindowsAssets.sh | 27 ++++++++++++++++++++++-----
 1 file changed, 22 insertions(+), 5 deletions(-)

diff --git a/build/AddWindowsAssets.sh b/build/AddWindowsAssets.sh
index 44adc97..d4afd7a 100755
--- a/build/AddWindowsAssets.sh
+++ b/build/AddWindowsAssets.sh
@@ -74,10 +74,11 @@ fi
 
 WIN1_DIR="$OUTPUT/.win9-pass"
 WIN2_DIR="$OUTPUT/.win10-pass"
+PRIMARY_DIR="$OUTPUT/.primary"
 MERGED_DIR="$OUTPUT/.merged"
 
 SDK10_DIR="$(mktemp -d)"
-trap 'rm -rf "$SDK10_DIR" "$WIN1_DIR" "$WIN2_DIR" "$MERGED_DIR"' EXIT
+trap 'rm -rf "$SDK10_DIR" "$WIN1_DIR" "$WIN2_DIR" "$PRIMARY_DIR" "$MERGED_DIR"' EXIT
 cat > "$SDK10_DIR/global.json" <<EOF
 { "sdk": { "version": "$PASS2_SDK", "rollForward": "latestFeature" } }
 EOF
@@ -90,7 +91,7 @@ for package in $PACKAGES; do
         exit 1
     fi
 
-    rm -rf "$WIN1_DIR" "$WIN2_DIR" "$MERGED_DIR"
+    rm -rf "$WIN1_DIR" "$WIN2_DIR" "$PRIMARY_DIR" "$MERGED_DIR"
 
     echo "==> packing $package windows heads ($PASS1_BAND band)"
     dotnet pack "$project" \
@@ -108,13 +109,29 @@ for package in $PACKAGES; do
         $VERSION_ARG \
         -o "$WIN2_DIR")
 
+    # merge-packages.py merges every package it finds in the primary directory, so the primary
+    # here cannot be artifacts/ itself: that holds all the packages, while the Windows passes hold
+    # only the one just packed, and every other id would be reported as having no counterpart.
+    # Stage just this package's files — the pass directory names them, so no version is needed.
+    echo "==> merging windows target frameworks into $package"
+    mkdir -p "$PRIMARY_DIR"
+    for asset in "$WIN1_DIR"/*.nupkg "$WIN1_DIR"/*.snupkg; do
+        [ -f "$asset" ] || continue
+        name=$(basename "$asset")
+        if [ ! -f "$OUTPUT/$name" ]; then
+            echo "error: $name is not in $OUTPUT — run build/BuildNugets.sh on macOS first and" >&2
+            echo "       bring its artifacts/ here, at the same version." >&2
+            exit 1
+        fi
+        cp "$OUTPUT/$name" "$PRIMARY_DIR/$name"
+    done
+
     # Merged in two steps because merge-packages.py takes one additional directory at a time, and
     # into a scratch directory because it will not read and write the same place.
-    echo "==> merging windows target frameworks into $package"
-    python3 "$ROOT/build/merge-packages.py" "$OUTPUT" "$WIN1_DIR" "$MERGED_DIR"
+    python3 "$ROOT/build/merge-packages.py" "$PRIMARY_DIR" "$WIN1_DIR" "$MERGED_DIR"
     python3 "$ROOT/build/merge-packages.py" "$MERGED_DIR" "$WIN2_DIR" "$OUTPUT"
 done
 
-rm -rf "$WIN1_DIR" "$WIN2_DIR" "$MERGED_DIR"
+rm -rf "$WIN1_DIR" "$WIN2_DIR" "$PRIMARY_DIR" "$MERGED_DIR"
 
 echo "==> windows assets added to $OUTPUT"

From 0d442689c0adec65930d5c99c4be8bf86f113b02 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Wed, 29 Jul 2026 08:02:38 +0000
Subject: [PATCH 2/7] Keep OpenTok.Client's native payload out of the Windows
 resource indexes

---
 src/OpenTok.Net.Maui/OpenTok.Net.Maui.csproj | 48 ++++++++++++++++++++
 src/OpenTok.Net/OpenTok.Net.csproj           | 26 ++++++++++-
 2 files changed, 72 insertions(+), 2 deletions(-)

diff --git a/src/OpenTok.Net.Maui/OpenTok.Net.Maui.csproj b/src/OpenTok.Net.Maui/OpenTok.Net.Maui.csproj
index c7cfde6..3c16a0a 100644
--- a/src/OpenTok.Net.Maui/OpenTok.Net.Maui.csproj
+++ b/src/OpenTok.Net.Maui/OpenTok.Net.Maui.csproj
@@ -53,4 +53,52 @@
     <PackageReference Include="OpenTok.Net" Version="[$(OpenTokCorePackageVersion)]" />
   </ItemGroup>
 
+  <!--
+    On Windows only, and for the reason spelled out on OpenTok.Net's own Windows references:
+    OpenTok.Client's targets arrive here through OpenTok.Net and add its x64 native payload as
+    @(Content), which MakePri would index into OpenTok.Net.Maui.pri — a package naming files it does
+    not carry, and an MSB3030 in the build of every app that consumes it. Nothing here needs the
+    payload: this is a library being packed, not an app being run.
+
+    Update rather than a second Include, so the reference above stays the single place the version
+    is stated; conditioned per target framework, because the android and ios heads genuinely do need
+    the build assets of the platform bindings underneath. PrivateAssets="none" keeps everything
+    flowing to consumers, where the payload does belong.
+  -->
+  <ItemGroup Condition=" $([MSBuild]::GetTargetPlatformIdentifier('$(TargetFramework)')) == 'windows' ">
+    <PackageReference Update="OpenTok.Net" ExcludeAssets="build" PrivateAssets="none" />
+  </ItemGroup>
+
+  <!--
+    Works around https://github.com/dotnet/maui/issues/32683.
+
+    Microsoft.Maui.Core and Microsoft.Maui.Controls.Core ship a .pri that names
+    Microsoft.Maui/Handlers/HybridWebView/HybridWebView.js, and neither package carries that file.
+    Windows App SDK 1.8 expands a referenced package's .pri into copy-to-output items, so every
+    Windows build that resolves those packages now fails with MSB3030 for a file that has never
+    existed — verified against microsoft.maui.core 9.0.120, whose lib/net9.0-windows10.0.19041/
+    holds Microsoft.Maui.pri and no .js at all.
+
+    Dropping payload items whose file is not on disk rather than matching HybridWebView.js by name,
+    which is the workaround in that issue: the same expansion has been reported to invent
+    WebView2Loader.dll as well, and a name list is a list of the ones seen so far. Nothing is lost —
+    these items exist only to be copied, and a file that is not there cannot be.
+
+    Remove this target once the MAUI packages this builds against stop naming files they do not
+    ship; it is a no-op from then on.
+  -->
+  <Target Name="OpenTokDropMissingPriPayloadFiles"
+          AfterTargets="AddPriPayloadFilesToCopyToOutputDirectoryItems"
+          Condition=" $([MSBuild]::GetTargetPlatformIdentifier('$(TargetFramework)')) == 'windows' ">
+    <ItemGroup>
+      <_OpenTokMissingPriPayloadFiles Include="@(_AllChildProjectItemsWithTargetPath)"
+                                      Condition=" !Exists('%(FullPath)') " />
+      <_AllChildProjectItemsWithTargetPath Remove="@(_OpenTokMissingPriPayloadFiles)" />
+    </ItemGroup>
+
+    <Message Importance="normal"
+             Condition=" '@(_OpenTokMissingPriPayloadFiles)' != '' "
+             Text="Dropped PRI payload files that no referenced package carries: @(_OpenTokMissingPriPayloadFiles->'%(Filename)%(Extension)')" />
+  </Target>
+
 </Project>
diff --git a/src/OpenTok.Net/OpenTok.Net.csproj b/src/OpenTok.Net/OpenTok.Net.csproj
index 9444020..37f447e 100644
--- a/src/OpenTok.Net/OpenTok.Net.csproj
+++ b/src/OpenTok.Net/OpenTok.Net.csproj
@@ -42,8 +42,30 @@
     own reference list rather than arriving transitively.
   -->
   <ItemGroup Condition=" $([MSBuild]::GetTargetPlatformIdentifier('$(TargetFramework)')) == 'windows' ">
-    <PackageReference Include="OpenTok.Net.Win" Version="[$(OpenTokWinPackageVersion)]" />
-    <PackageReference Include="OpenTok.Client" Version="[$(OpenTokClientPackageVersion)]" />
+    <!--
+      ExcludeAssets="build" on both, PrivateAssets="none" on both. The pair is the same one
+      OpenTok.Net.Win uses on its own OpenTok.Client reference, for the same reason one level
+      further out — its comment is the long version of this one.
+
+      OpenTok.Client's build/OpenTok.Client.targets globs its package directory and adds
+      opentok.dll and the three capturers as @(Content). That is right for an application and wrong
+      for this: the Windows head is a WinUI library, so MakePri indexes every @(Content) item into
+      OpenTok.Net.pri under a folder named after the library. The .pri ships in lib/<tfm>/ and the
+      native DLLs deliberately do not, so a consumer — OpenTok.Net.Maui first, an app after it —
+      expands that .pri, resolves each recorded payload file beside it, and fails with MSB3030 for
+      lib/<tfm>/OpenTok.Net/opentok.dll and friends. Excluding the build assets leaves nothing to
+      index. Both references carry it because the targets reach this project by either path, and an
+      exclusion on one edge does nothing about the other.
+
+      PrivateAssets="none" is what still gets the payload into an app: NuGet's default keeps a
+      dependency's build assets private, and under it a consumer would restore OpenTok.Client,
+      never import its targets, and build an app with no opentok.dll in it. Flowing them costs
+      nothing here, because this package carries no copy of the payload.
+    -->
+    <PackageReference Include="OpenTok.Net.Win" Version="[$(OpenTokWinPackageVersion)]"
+                      ExcludeAssets="build" PrivateAssets="none" />
+    <PackageReference Include="OpenTok.Client" Version="[$(OpenTokClientPackageVersion)]"
+                      ExcludeAssets="build" PrivateAssets="none" />
 
     <!--
       Named here even though OpenTok.Net.Win already brings it. The Windows head compiles against

From da63bd387c0506e5c9fd496fdea279d118a1ed55 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Wed, 29 Jul 2026 08:25:43 +0000
Subject: [PATCH 3/7] Check each merged package really carries its Windows
 assets

---
 build/AddWindowsAssets.sh | 52 ++++++++++++++++++++++++++++++++++++++-
 1 file changed, 51 insertions(+), 1 deletion(-)

diff --git a/build/AddWindowsAssets.sh b/build/AddWindowsAssets.sh
index d4afd7a..f17a91e 100755
--- a/build/AddWindowsAssets.sh
+++ b/build/AddWindowsAssets.sh
@@ -50,6 +50,39 @@ esac
 
 PACKAGES=$(grep -v '^#' packages.tsv | grep -v '^[[:space:]]*$' | cut -f1)
 
+# The lib/<tfm>/ folders a package carries for Windows, one per line, or nothing at all.
+#
+# Read from the zip rather than from the merge's own report: merge-packages.py prints the target
+# frameworks it *added*, and a package can advertise a target framework in its nuspec while
+# carrying no assets for it — which restores, and then fails to compile at whoever picked it.
+windows_frameworks() {
+    python3 - "$1" <<'PY'
+import sys
+import zipfile
+
+with zipfile.ZipFile(sys.argv[1]) as package:
+    frameworks = {
+        name.split("/")[1]
+        for name in package.namelist()
+        if name.startswith("lib/") and "-windows" in name.split("/")[1] and name.count("/") > 1
+    }
+
+print("\n".join(sorted(frameworks)))
+PY
+}
+
+# Fails unless the package carries Windows assets, naming it and listing what it does carry.
+require_windows_frameworks() {
+    frameworks=$(windows_frameworks "$1" | tr '\n' ' ')
+
+    if [ -z "$(echo "$frameworks" | tr -d ' ')" ]; then
+        echo "error: $(basename "$1") carries no lib/<tfm>/ assets for Windows." >&2
+        exit 1
+    fi
+
+    echo "    $(basename "$1"): $frameworks"
+}
+
 if [ -z "$PACKAGES" ]; then
     echo "error: no packages found in build/packages.tsv" >&2
     exit 1
@@ -83,6 +116,9 @@ cat > "$SDK10_DIR/global.json" <<EOF
 { "sdk": { "version": "$PASS2_SDK", "rollForward": "latestFeature" } }
 EOF
 
+# Every package this run merged into, by file name, to re-check once the loop is done.
+MERGED_PACKAGES=""
+
 for package in $PACKAGES; do
     project="$ROOT/src/$package/$package.csproj"
 
@@ -115,6 +151,7 @@ for package in $PACKAGES; do
     # Stage just this package's files — the pass directory names them, so no version is needed.
     echo "==> merging windows target frameworks into $package"
     mkdir -p "$PRIMARY_DIR"
+    nupkg=""
     for asset in "$WIN1_DIR"/*.nupkg "$WIN1_DIR"/*.snupkg; do
         [ -f "$asset" ] || continue
         name=$(basename "$asset")
@@ -124,14 +161,27 @@ for package in $PACKAGES; do
             exit 1
         fi
         cp "$OUTPUT/$name" "$PRIMARY_DIR/$name"
+        case "$name" in *.nupkg) nupkg="$name" ;; esac
     done
 
     # Merged in two steps because merge-packages.py takes one additional directory at a time, and
     # into a scratch directory because it will not read and write the same place.
     python3 "$ROOT/build/merge-packages.py" "$PRIMARY_DIR" "$WIN1_DIR" "$MERGED_DIR"
     python3 "$ROOT/build/merge-packages.py" "$MERGED_DIR" "$WIN2_DIR" "$OUTPUT"
+
+    # Straight after the merge rather than only at the end, because the next package is packed
+    # against this one out of artifacts/ — so a package that came out of the merge without its
+    # Windows assets would otherwise be discovered later, having already been built against.
+    require_windows_frameworks "$OUTPUT/$nupkg"
+    MERGED_PACKAGES="$MERGED_PACKAGES $nupkg"
 done
 
 rm -rf "$WIN1_DIR" "$WIN2_DIR" "$PRIMARY_DIR" "$MERGED_DIR"
 
-echo "==> windows assets added to $OUTPUT"
+# And again over the finished directory. Everything above packs and merges one package while the
+# rest sit in the same directory, so "each package was right when it was merged" is not the same
+# claim as "every package is still right now".
+echo "==> windows assets in $OUTPUT"
+for nupkg in $MERGED_PACKAGES; do
+    require_windows_frameworks "$OUTPUT/$nupkg"
+done

From 3bac5eaf729377b8d9340bb56ee7e67ad2742e96 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Wed, 29 Jul 2026 08:36:41 +0000
Subject: [PATCH 4/7] Run the Release build steps under bash on the windows leg

---
 .github/workflows/build.yml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 8592234..677be2e 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -513,7 +513,12 @@ jobs:
       #
       # Unlike the Debug sample job, this cannot be fixed by installing both workloads: that job
       # runs entirely on macOS, where both exist. This one deliberately builds Android on Linux.
+      # shell: bash on this step and the next, because the windows leg would otherwise get pwsh —
+      # which reads the line continuations below as an operator and fails to parse the command
+      # before ever running it. The two legs on macOS and Linux already had bash by default, which
+      # is why this only ever surfaced here.
       - name: Build the sample in Release
+        shell: bash
         run: |
           dotnet build samples/OpenTok.Sample.Maui/OpenTok.Sample.Maui.csproj \
             --configuration Release \
@@ -525,6 +530,7 @@ jobs:
       # .app is assembled, and on Android r8 and the packaging step run before the APK is. A failure
       # in any of them never gets far enough to produce one.
       - name: Check the app was produced
+        shell: bash
         run: |
           case "${{ matrix.platform }}" in
             ios)

From 41f33e8ed49297d43958b6e480f53d9a0fb05983 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Wed, 29 Jul 2026 08:58:29 +0000
Subject: [PATCH 5/7] Drop the Windows-asset re-check that pipefail made a coin
 toss

---
 .github/workflows/build.yml | 27 ++++++++-------------------
 1 file changed, 8 insertions(+), 19 deletions(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 677be2e..4d054fd 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -308,29 +308,18 @@ jobs:
           name: nuget-packages
           path: artifacts
 
+      # The script asserts the result itself: require_windows_frameworks reads the lib/<tfm>/ folders
+      # out of every merged package and fails the step if any of them carries no Windows assets, so
+      # a pack that quietly emitted no -windows target framework cannot reach the upload below.
+      # Repeating that here as a shell one-liner was worse than nothing: with `-o pipefail`, which
+      # this shell sets, `unzip -l pkg | grep -q ...` reports failure whenever grep matches early
+      # enough to exit before unzip has finished writing, because unzip then dies of SIGPIPE and its
+      # 141 becomes the pipeline's status. That is a coin toss on the package's entry order, and it
+      # came up tails on a package that did have its Windows assets.
       - name: Pack the Windows heads and merge them in
         shell: bash
         run: ./build/AddWindowsAssets.sh "${{ inputs.version }}"
 
-      # Asserted rather than assumed: the script merges whatever the pack produced, and a pack that
-      # quietly emitted no Windows target framework — because the workload was missing, or because
-      # the IsOSPlatform condition in OpenTok.Net.props stopped matching — would still exit 0 and
-      # upload the unchanged package.
-      - name: Check the Windows assets are actually in there
-        shell: bash
-        run: |
-          missing=0
-          for id in OpenTok.Net OpenTok.Net.Maui; do
-            pkg="$(ls artifacts/${id}.*.nupkg | grep -v symbols | head -1)"
-            if unzip -l "${pkg}" | grep -q 'lib/net9.0-windows'; then
-              echo "  ok      ${id}"
-            else
-              echo "::error::${pkg} has no lib/net9.0-windows*/ assets after the merge"
-              missing=1
-            fi
-          done
-          exit "${missing}"
-
       - name: Upload packages
         uses: actions/upload-artifact@v4
         with:

From 7f015f4b611c57b56d33f2b7dcb4bf5cde28c779 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Wed, 29 Jul 2026 09:14:10 +0000
Subject: [PATCH 6/7] Point the sample's Windows App.xaml at the namespace, not
 the type

---
 samples/OpenTok.Sample.Maui/Platforms/Windows/App.xaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/samples/OpenTok.Sample.Maui/Platforms/Windows/App.xaml b/samples/OpenTok.Sample.Maui/Platforms/Windows/App.xaml
index f16a475..1e9789f 100644
--- a/samples/OpenTok.Sample.Maui/Platforms/Windows/App.xaml
+++ b/samples/OpenTok.Sample.Maui/Platforms/Windows/App.xaml
@@ -2,5 +2,5 @@
     x:Class="OpenTok.Sample.Maui.WinUI.App"
     xmlns="http://schemas.microsoft.com/winfx/2006/xaml/presentation"
     xmlns:x="http://schemas.microsoft.com/winfx/2006/xaml"
-    xmlns:maui="using:Microsoft.Maui.MauiWinUIApplication">
+    xmlns:maui="using:Microsoft.Maui">
 </maui:MauiWinUIApplication>

From 7294d020c5d3a551d3c60c1d7e466fc739df3786 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Wed, 29 Jul 2026 09:30:06 +0000
Subject: [PATCH 7/7] Apply the MAUI PRI payload workaround to the sample as
 well

---
 .../OpenTok.Sample.Maui.csproj                | 26 +++++++++++++++++++
 1 file changed, 26 insertions(+)

diff --git a/samples/OpenTok.Sample.Maui/OpenTok.Sample.Maui.csproj b/samples/OpenTok.Sample.Maui/OpenTok.Sample.Maui.csproj
index eaf5c48..a19d6b4 100644
--- a/samples/OpenTok.Sample.Maui/OpenTok.Sample.Maui.csproj
+++ b/samples/OpenTok.Sample.Maui/OpenTok.Sample.Maui.csproj
@@ -110,4 +110,30 @@
     <PackageReference Include="OpenTok.Net.Maui" Version="[$(OpenTokPackageVersion)]" />
   </ItemGroup>
 
+  <!--
+    Works around https://github.com/dotnet/maui/issues/32683, the same way and for the same reason
+    as src/OpenTok.Net.Maui/OpenTok.Net.Maui.csproj — see the long version of this comment there.
+
+    In short: Microsoft.Maui.Core and Microsoft.Maui.Controls.Core ship a .pri naming
+    Microsoft.Maui/Handlers/HybridWebView/HybridWebView.js, neither package carries that file, and
+    Windows App SDK 1.8 expands a referenced package's .pri into copy-to-output items. A library
+    that has the target and an app that does not still fails, because the app does its own
+    expansion of the same MAUI packages.
+
+    Remove this once the MAUI packages stop naming files they do not ship.
+  -->
+  <Target Name="OpenTokDropMissingPriPayloadFiles"
+          AfterTargets="AddPriPayloadFilesToCopyToOutputDirectoryItems"
+          Condition=" $([MSBuild]::GetTargetPlatformIdentifier('$(TargetFramework)')) == 'windows' ">
+    <ItemGroup>
+      <_OpenTokMissingPriPayloadFiles Include="@(_AllChildProjectItemsWithTargetPath)"
+                                      Condition=" !Exists('%(FullPath)') " />
+      <_AllChildProjectItemsWithTargetPath Remove="@(_OpenTokMissingPriPayloadFiles)" />
+    </ItemGroup>
+
+    <Message Importance="normal"
+             Condition=" '@(_OpenTokMissingPriPayloadFiles)' != '' "
+             Text="Dropped PRI payload files that no referenced package carries: @(_OpenTokMissingPriPayloadFiles->'%(Filename)%(Extension)')" />
+  </Target>
+
 </Project>