Recognize macOS executables when auditing diagnostics packages

tools/ci/audit_playtest_diagnostics_package.py

@@ -62,7 +62,16 @@ def audit(path, game_id, diagnostics_id):
             if name.lower().endswith(".exe"):
                 return entry.file_size > 0
             with archive.open(entry) as stream:
-                return stream.read(4) == b"\x7fELF"
+                magic = stream.read(4)
+            return magic in {
+                b"\x7fELF",
+                # Thin Mach-O 32/64-bit, both byte orders.
+                b"\xfe\xed\xfa\xce", b"\xce\xfa\xed\xfe",
+                b"\xfe\xed\xfa\xcf", b"\xcf\xfa\xed\xfe",
+                # Universal Mach-O fat/fat64, both byte orders.
+                b"\xca\xfe\xba\xbe", b"\xbe\xba\xfe\xca",
+                b"\xca\xfe\xba\xbf", b"\xbf\xba\xfe\xca",
+            }
 
         recipe = tomllib.loads(read("game.toml").decode("utf-8-sig"))
         if recipe.get("game", {}).get("id") != game_id:

tools/tests/test_audit_playtest_diagnostics_package.py

@@ -79,6 +79,33 @@ class ArchiveTests(unittest.TestCase):
         self.assertEqual(result.returncode, 0, result.stderr)
         self.assertIn("audit passed", result.stdout)
 
+    def test_complete_native_macos_archives(self):
+        del self.files["Game.exe"]
+        self.files[SOURCE] = TEXT
+        self.files["game.toml"] += '[runtime]\nopenbios=false\n'
+        for magic in (b"\xfe\xed\xfa\xce", b"\xce\xfa\xed\xfe",
+                      b"\xfe\xed\xfa\xcf", b"\xcf\xfa\xed\xfe",
+                      b"\xca\xfe\xba\xbe", b"\xbe\xba\xfe\xca",
+                      b"\xca\xfe\xba\xbf", b"\xbf\xba\xfe\xca"):
+            for prefix in ("", "Release/"):
+                with self.subTest(magic=magic.hex(), prefix=prefix):
+                    self.files["Game"] = magic + b"synthetic Mach-O fixture"
+                    self.write(prefix)
+                    self.assertEqual(audit.audit(self.zip, GAME, DIAG), 1)
+
+    def test_plain_truncated_or_nested_binaries_are_not_adjacent_executables(self):
+        del self.files["Game.exe"]
+        for name, content in (("Game", b"ordinary text"),
+                              ("Game", b"\xcf\xfa\xed"),
+                              ("Game", b"\x89PNGfixture"),
+                              ("tools/Game", b"\xcf\xfa\xed\xfefixture"),
+                              ("tools/Game.exe", b"MZfixture")):
+            with self.subTest(name=name, content=content):
+                self.files[name] = content
+                with self.assertRaisesRegex(ValueError, "no executable adjacent"):
+                    self.check()
+                del self.files[name]
+
     def test_python38_syntax_and_tomli_fallback(self):
         original_import = builtins.__import__