Add camerautils 1.1.1

Submitted by @dumbnully through the form.

Submission: TTnxixIvSJ-NBqyyUOJbgB0Oa-IkmLWf0-8wMUFMeA8
Co-authored-by: dumbnully <[email protected]>

.github/CODEOWNERS

@@ -0,0 +1,6 @@
+# Every change needs a review from one of these before it merges (branch protection:
+# "Require review from Code Owners"). The reviewers are the Horizon Team, GitHub team horizon-rust/horizon-team
+# (Ludovic decides who is in it). /.github/ and takedowns stay Ludovic's.
+*            @ludovic111 @horizon-rust/horizon-team
+/.github/    @ludovic111
+/revoked.toml @ludovic111

.github/ISSUE_TEMPLATE/config.yml

@@ -0,0 +1,8 @@
+blank_issues_enabled: false
+contact_links:
+  - name: Submit a project
+    url: https://playhorizon.dev/mods/submit
+    about: Mods, modpacks and resource packs for Horizon. Each submission is reviewed.
+  - name: Horizon itself
+    url: https://github.com/horizon-rust/horizon/issues
+    about: Bugs in the game or the launcher.

.github/ISSUE_TEMPLATE/report.yml

@@ -0,0 +1,43 @@
+name: Report a project
+description: Something in the registry does harm, breaks the game, isn't what it says, or isn't its author's to publish.
+title: "Report: "
+labels: [report]
+body:
+  - type: markdown
+    attributes:
+      value: |
+        Thanks. Reviewers read every report. If it is dangerous (it deletes files, steals
+        accounts, spreads), say so in the first line: it can be taken down within hours, and
+        the launcher then turns installed copies off. Bugs in a mod go to its source repository.
+  - type: input
+    id: project
+    attributes:
+      label: Project id
+      description: The last part of its page's address, playhorizon.dev/mods/<id>
+      placeholder: coords_hud
+    validations:
+      required: true
+  - type: input
+    id: version
+    attributes:
+      label: Version
+      placeholder: 0.1.0, or "all"
+  - type: dropdown
+    id: why
+    attributes:
+      label: What is wrong
+      options:
+        - It does harm (files, accounts, chat it shouldn't send, anything malicious)
+        - It isn't what its page says
+        - It breaks the game or other mods
+        - It isn't the submitter's to publish (copyright, licence, stolen)
+        - Something else
+    validations:
+      required: true
+  - type: textarea
+    id: details
+    attributes:
+      label: What happened
+      description: Steps, what you saw, and logs if you have them (the game's log is latest.log in its folder).
+    validations:
+      required: true

.github/ISSUE_TEMPLATE/takedown.yml

@@ -0,0 +1,37 @@
+name: Takedown request (copyright)
+description: A project in the registry uses your work without your permission.
+title: "Takedown: "
+labels: [takedown]
+body:
+  - type: markdown
+    attributes:
+      value: |
+        Thanks for telling us. A project that uses your work without permission is removed
+        (see [MOD-POLICY.md](https://github.com/horizon-rust/horizon-mods/blob/main/MOD-POLICY.md)).
+        This issue is public: to write privately instead, use [lu4ovic.com](https://lu4ovic.com/#contact).
+  - type: input
+    id: project
+    attributes:
+      label: Project id
+      description: The last part of its page's address, playhorizon.dev/mods/<id>
+    validations:
+      required: true
+  - type: textarea
+    id: work
+    attributes:
+      label: Your work
+      description: What it is, where it is published, and what the project copies from it.
+    validations:
+      required: true
+  - type: input
+    id: contact
+    attributes:
+      label: How to reach you
+      description: An email or profile, if not this GitHub account.
+  - type: checkboxes
+    id: rights
+    attributes:
+      label: Statement
+      options:
+        - label: I own the rights to this work, or I act for whoever does, and I believe this use is not allowed.
+          required: true

.github/PULL_REQUEST_TEMPLATE.md

@@ -0,0 +1,14 @@
+<!-- Changing mods/<id>.toml by hand? The form at https://playhorizon.dev/mods/submit does this for you. -->
+
+**Project:** <!-- id, and new project or update -->
+
+- [ ] I made it, or I am allowed to publish it, under the licence the entry names.
+- [ ] If it ports or translates another mod, the original's licence allows it (or its authors agreed), and my page
+      credits and links the original.
+- [ ] It has no code, assets or data from Minecraft, Mojang or Microsoft, and nothing that harms players.
+- [ ] I read and accept the [mod policy](https://github.com/horizon-rust/horizon-mods/blob/main/MOD-POLICY.md): I am this
+      project's author or publisher and responsible for it; the Horizon project is not.
+- [ ] The `source` link has the code this file was built from.
+- [ ] I ran `cargo horizon-mod check <file>` and it passed.
+
+The file goes in the `staging` release as `<sha256>.<extension>` (the form uploads it; by hand, ask a reviewer).

.github/workflows/check.yml

@@ -0,0 +1,89 @@
+# A pull request's checks: what it changes compared with main, each new file's
+# own check (its kind's, its signature, a trial run of a mod in the sandbox), and
+# the index it would publish. Runs with a read-only token and no secrets; the tool
+# comes from Horizon, never from the pull request, and a submission's code only
+# runs inside Horizon's mod sandbox.
+name: check
+on:
+  pull_request:
+    branches: [main]
+permissions:
+  contents: read
+concurrency:
+  group: check-${{ github.event.pull_request.number }}
+  cancel-in-progress: true
+jobs:
+  check:
+    runs-on: ubuntu-latest
+    timeout-minutes: 30
+    env:
+      GH_TOKEN: ${{ github.token }}
+      GH_REPO: ${{ github.repository }}
+      HORIZON_REV: ${{ vars.HORIZON_REV || 'main' }}
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          ref: ${{ github.event.pull_request.base.sha }}
+          path: base
+      - uses: actions/checkout@v4
+        with:
+          path: head
+          persist-credentials: false
+      - uses: actions/cache@v4
+        with:
+          path: |
+            ~/.cargo/bin
+            ~/.cargo/horizon-rev
+          key: cargo-horizon-mod-${{ env.HORIZON_REV }}
+      # main's scripts, not the pull request's.
+      - run: base/scripts/install-tool.sh
+      - name: Who submitted it
+        id: author
+        env:
+          LOGIN: ${{ github.event.pull_request.user.login }}
+          BODY: ${{ github.event.pull_request.body }}
+          BOT: ${{ vars.REGISTRY_BOT || 'horizon-mods-bot' }}
+        run: |
+          # The submission form opens pull requests as the bot and names the
+          # GitHub account that signed in to it.
+          author="$LOGIN"
+          if [ "$LOGIN" = "$BOT" ] || [ "$LOGIN" = "${BOT}[bot]" ]; then
+            author="$(printf '%s' "$BODY" | sed -n 's/.*<!-- submitted-by: \([A-Za-z0-9-]*\) -->.*/\1/p' | head -1)"
+          fi
+          echo "login=${author:-$LOGIN}" >> "$GITHUB_OUTPUT"
+      - name: What it changes
+        run: |
+          set -o pipefail
+          { echo "## Changes"; echo '```'; } >> "$GITHUB_STEP_SUMMARY"
+          status=0
+          cargo horizon-mod registry review base head --author "${{ steps.author.outputs.login }}" 2>&1 \
+            | tee -a "$GITHUB_STEP_SUMMARY" || status=1
+          echo '```' >> "$GITHUB_STEP_SUMMARY"
+          exit $status
+      # main's files, kept by publish: each download from a release counts as a
+      # player's.
+      - uses: actions/cache/restore@v4
+        with:
+          path: files
+          key: files-${{ hashFiles('head/mods/*.toml') }}
+          restore-keys: files-
+      - name: Download its files
+        run: base/scripts/fetch.sh head
+      - name: Check each new file
+        run: |
+          set -o pipefail
+          { echo "## New files"; echo '```'; } >> "$GITHUB_STEP_SUMMARY"
+          status=0
+          cargo horizon-mod registry check base head --files files 2>&1 | tee -a "$GITHUB_STEP_SUMMARY" || status=1
+          echo '```' >> "$GITHUB_STEP_SUMMARY"
+          exit $status
+      - name: The index it would publish
+        run: |
+          cargo horizon-mod registry build head --files files --out index.json --generated "$(date -u +%FT%TZ)"
+          python3 - >> "$GITHUB_STEP_SUMMARY" <<'PY'
+          import json
+          index = json.load(open("index.json"))
+          print("## index.json")
+          for p in index["projects"]:
+              print(f"- {p['kind']} `{p['id']}` {p['versions'][0]['version']}")
+          PY

.github/workflows/cleanup.yml

@@ -0,0 +1,43 @@
+# The submission form uploads files to the `staging` prerelease as
+# <sha256>.<extension>. Once a version is published in its own release, or when
+# no open pull request lists a file any more, its staging copy goes:
+# published ones after 7 days, abandoned ones after 30.
+name: cleanup
+on:
+  schedule:
+    - cron: "17 4 * * 1"
+  workflow_dispatch:
+permissions:
+  contents: write
+  pull-requests: read
+jobs:
+  cleanup:
+    runs-on: ubuntu-latest
+    env:
+      GH_TOKEN: ${{ github.token }}
+      GH_REPO: ${{ github.repository }}
+    steps:
+      - uses: actions/checkout@v4
+      - name: Delete staging files nobody needs
+        run: |
+          set -euo pipefail
+          # Hashes main lists (published), and those open pull requests add.
+          grep -ho 'sha256 = "[0-9a-f]\{64\}"' mods/*.toml | cut -d'"' -f2 | sort -u > published.txt || true
+          : > pending.txt
+          for pr in $(gh pr list --state open --json number --jq '.[].number'); do
+            gh pr diff "$pr" | grep -o '^+sha256 = "[0-9a-f]\{64\}"' | cut -d'"' -f2 >> pending.txt || true
+          done
+          now=$(date +%s)
+          gh api --paginate "repos/$GH_REPO/releases/tags/staging" --jq '.assets[] | [.id, .name, .created_at] | @tsv' |
+          while IFS=$'\t' read -r id name created; do
+            sha="${name%%.*}"
+            age=$(( (now - $(date -d "$created" +%s)) / 86400 ))
+            grep -qx "$sha" pending.txt && continue
+            if grep -qx "$sha" published.txt; then
+              [ "$age" -ge 7 ] || continue
+            else
+              [ "$age" -ge 30 ] || continue
+            fi
+            echo "Deleting $name ($age days)"
+            gh api -X DELETE "repos/$GH_REPO/releases/assets/$id"
+          done

.github/workflows/native-compat.yml

@@ -0,0 +1,103 @@
+# Native mods on the newest Nightly, as players' launchers build them (scripts/native_compat.py):
+# - on a pull request, each new native-mod version, applied together with the most downloaded native mods
+#   and compiled (`cargo check`); its support modules' names against every registry mod's;
+# - every day after the Nightly, every native mod's newest version, applied, then the rest compiled
+#   (`cargo check`): the ones horizon-mixins refuses alone and the ones whose own code doesn't compile go
+#   to the `native-health` release, which publish adds to the index (`broken_on`) so the launcher warns
+#   before an install.
+# The check compiles the submission, whose crates may have build scripts: it runs with a token that can
+# only read, and main's script, never the pull request's.
+name: native-compat
+on:
+  pull_request:
+    branches: [main]
+    paths: ["mods/*.toml"]
+  schedule:
+    - cron: "40 18 * * *"
+  workflow_dispatch:
+    inputs:
+      horizon:
+        description: "Horizon commit, or `latest` (the newest Nightly)"
+        default: latest
+      upload:
+        description: "Publish the result (native-health release); `false` for a trial run"
+        default: "true"
+permissions:
+  contents: read
+concurrency:
+  group: native-compat-${{ github.event.pull_request.number || github.ref }}
+  cancel-in-progress: true
+env:
+  # The Rust the launcher builds native mods with (Horizon's launcher/src/rust_toolchain.rs).
+  RUST: "1.99.1"
+jobs:
+  check:
+    if: github.event_name == 'pull_request'
+    runs-on: ubuntu-latest
+    timeout-minutes: 120
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          ref: ${{ github.event.pull_request.base.sha }}
+          path: base
+      - uses: actions/checkout@v4
+        with:
+          path: head
+          persist-credentials: false
+      - name: Does it change a native mod?
+        id: native
+        run: |
+          if [ -n "$(python3 base/scripts/native_compat.py new base head)" ]; then
+            echo "changed=true" >> "$GITHUB_OUTPUT"
+          fi
+      - if: steps.native.outputs.changed == 'true'
+        run: rustup toolchain install $RUST --profile minimal && rustup default $RUST
+      - if: steps.native.outputs.changed == 'true'
+        run: sudo apt-get update && sudo apt-get install -y libasound2-dev libudev-dev pkg-config
+      - if: steps.native.outputs.changed == 'true'
+        name: On the newest Nightly, with the popular native mods
+        env:
+          GITHUB_TOKEN: ${{ github.token }}
+        run: |
+          set -o pipefail
+          python3 base/scripts/native_compat.py check base head | tee -a "$GITHUB_STEP_SUMMARY"
+  health:
+    if: github.event_name != 'pull_request'
+    runs-on: ubuntu-latest
+    # Each mod horizon-mixins refuses costs one more apply of the whole set.
+    timeout-minutes: 300
+    permissions:
+      contents: write
+    env:
+      GH_TOKEN: ${{ github.token }}
+      GH_REPO: ${{ github.repository }}
+    steps:
+      - uses: actions/checkout@v4
+      - run: python3 -m unittest discover -s scripts -p 'test_*.py'
+      - run: rustup toolchain install $RUST --profile minimal && rustup default $RUST
+      - run: sudo apt-get update && sudo apt-get install -y libasound2-dev libudev-dev pkg-config
+      # Yesterday's dependencies, checked, and horizon-mixins: only Horizon's own crates and the mods compile again.
+      - uses: actions/cache@v4
+        with:
+          path: |
+            ~/.cargo/registry/index
+            ~/.cargo/registry/cache
+            ~/.cargo/git/db
+            native/target/compat/cargo
+            native/target/horizon-mixins
+          key: native-health-${{ env.RUST }}-${{ github.run_id }}
+          restore-keys: native-health-${{ env.RUST }}-
+      - name: Every native mod's newest version on the newest Nightly
+        env:
+          GITHUB_TOKEN: ${{ github.token }}
+          HORIZON: ${{ inputs.horizon || 'latest' }}
+        run: |
+          set -o pipefail
+          python3 scripts/native_compat.py health --horizon "$HORIZON" --out native-health.json | tee -a "$GITHUB_STEP_SUMMARY"
+      - name: Keep it for publish
+        if: inputs.upload != 'false'
+        run: |
+          gh release view native-health >/dev/null 2>&1 \
+            || gh release create native-health --prerelease --title "Native mods' health" \
+                 --notes "native-health.json: the native mods that don't apply on the newest Nightly (native-compat.yml). publish adds them to the index as broken_on."
+          gh release upload native-health native-health.json --clobber

.github/workflows/native.yml

@@ -0,0 +1,119 @@
+# Horizon's own native mods (native/<name>/): each changed folder's tests and .hnmod, and the game with it applied
+# on the Horizon it was tested on; every mod together, as a player's set. Every Monday, all of them on the newest
+# Nightly, to catch a change of the hook points early.
+name: native
+on:
+  pull_request:
+    branches: [main]
+    paths: ["native/**", ".github/workflows/native.yml"]
+  push:
+    branches: [main]
+    paths: ["native/**", ".github/workflows/native.yml"]
+  schedule:
+    - cron: "17 5 * * 1"
+  workflow_dispatch:
+    inputs:
+      horizon:
+        description: "Horizon commit, tag, or `latest` (the newest Nightly); empty: the mods' tested commit"
+        default: latest
+permissions:
+  contents: read
+concurrency:
+  group: native-${{ github.event.pull_request.number || github.ref }}
+  cancel-in-progress: true
+env:
+  # The Rust the launcher builds native mods with (launcher/src/rust_toolchain.rs).
+  RUST: "1.99.1"
+jobs:
+  changes:
+    runs-on: ubuntu-latest
+    outputs:
+      mods: ${{ steps.mods.outputs.mods }}
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+      - id: mods
+        env:
+          BASE: ${{ github.event.pull_request.base.sha || github.event.before }}
+          EVENT: ${{ github.event_name }}
+        run: |
+          all=$(ls -d native/*/compatibility.json | cut -d/ -f2 | jq -R . | jq -sc .)
+          if [ "$EVENT" = schedule ] || [ "$EVENT" = workflow_dispatch ] || [ -z "$BASE" ] \
+             || ! git cat-file -e "$BASE" 2>/dev/null; then
+            echo "mods=$all" >> "$GITHUB_OUTPUT"; exit 0
+          fi
+          changed=$(git diff --name-only "$BASE" HEAD)
+          # The shared tools or this workflow: every mod.
+          if grep -qE '^(native/tools/|\.github/workflows/native\.yml)' <<< "$changed"; then
+            echo "mods=$all" >> "$GITHUB_OUTPUT"; exit 0
+          fi
+          mods=$(grep -oE '^native/[^/]+/' <<< "$changed" | cut -d/ -f2 | sort -u \
+            | while read -r m; do [ -f "native/$m/compatibility.json" ] && echo "$m"; done | jq -R . | jq -sc .)
+          echo "mods=$mods" >> "$GITHUB_OUTPUT"
+  mod:
+    needs: changes
+    if: needs.changes.outputs.mods != '[]'
+    strategy:
+      fail-fast: false
+      matrix:
+        mod: ${{ fromJson(needs.changes.outputs.mods) }}
+    runs-on: ubuntu-latest
+    defaults:
+      run:
+        working-directory: native/${{ matrix.mod }}
+    steps:
+      - uses: actions/checkout@v4
+      - run: rustup toolchain install $RUST --profile minimal --component rustfmt --component clippy && rustup default $RUST
+      - run: cargo fmt --check
+      - run: cargo clippy --all-targets --locked -- -D warnings
+      - run: cargo test --locked
+      - name: Package the .hnmod and check what it holds
+        working-directory: .
+        run: |
+          python3 native/tools/native.py package ${{ matrix.mod }}
+          python3 - <<'PY'
+          import json, zipfile, glob
+          path, = glob.glob("native/target/*.hnmod")
+          names = zipfile.ZipFile(path).namelist()
+          manifest = json.loads(zipfile.ZipFile(path).read("horizon-native.json"))
+          assert manifest["hooks"] >= 1, manifest
+          bundle = f"mixins/{manifest['id']}/"
+          assert all(n == "horizon-native.json" or n == bundle + "LICENSE" or (n.startswith(bundle) and n.endswith((".rs", ".toml"))) for n in names), names
+          assert bundle + "LICENSE" in names, "the mod's LICENSE travels in its package"
+          print(path, manifest)
+          PY
+      - uses: actions/upload-artifact@v4
+        with:
+          name: hnmod-${{ matrix.mod }}
+          path: native/target/*.hnmod
+  horizon:
+    needs: changes
+    if: needs.changes.outputs.mods != '[]'
+    strategy:
+      fail-fast: false
+      matrix:
+        mod: ${{ fromJson(needs.changes.outputs.mods) }}
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - run: rustup toolchain install $RUST --profile minimal && rustup default $RUST
+      - run: sudo apt-get update && sudo apt-get install -y libasound2-dev libudev-dev pkg-config
+      - name: Apply on Horizon and check the game
+        env:
+          GITHUB_TOKEN: ${{ github.token }}
+          HORIZON: ${{ github.event_name == 'schedule' && 'latest' || inputs.horizon || '' }}
+        run: python3 native/tools/native.py check ${{ matrix.mod }} ${HORIZON:+--horizon "$HORIZON"}
+  together:
+    needs: changes
+    if: needs.changes.outputs.mods != '[]'
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - run: rustup toolchain install $RUST --profile minimal && rustup default $RUST
+      - run: sudo apt-get update && sudo apt-get install -y libasound2-dev libudev-dev pkg-config
+      - name: Every native mod applied together, on Horizon
+        env:
+          GITHUB_TOKEN: ${{ github.token }}
+          HORIZON: ${{ github.event_name == 'schedule' && 'latest' || inputs.horizon || '' }}
+        run: python3 native/tools/native.py check all ${HORIZON:+--horizon "$HORIZON"}

.github/workflows/publish.yml

@@ -0,0 +1,104 @@
+# Merging publishes: each new version's file becomes a release asset
+# (<id>-<version>/<file>), then index.json and the icons go to GitHub Pages
+# (https://horizon-rust.github.io/horizon-mods/index.json), which the launcher and
+# playhorizon.dev/mods read. Nothing is published if any entry fails its checks.
+# Every hour it runs again to refresh each project's `downloads`: GitHub's
+# download counts of its release assets.
+name: publish
+on:
+  push:
+    branches: [main]
+  schedule:
+    - cron: "23 * * * *"
+  workflow_dispatch:
+permissions:
+  contents: write
+  pages: write
+  id-token: write
+concurrency:
+  group: publish
+  cancel-in-progress: false
+jobs:
+  publish:
+    runs-on: ubuntu-latest
+    timeout-minutes: 30
+    environment:
+      name: github-pages
+      url: ${{ steps.pages.outputs.page_url }}
+    env:
+      GH_TOKEN: ${{ github.token }}
+      GH_REPO: ${{ github.repository }}
+      HORIZON_REV: ${{ vars.HORIZON_REV || 'main' }}
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/cache@v4
+        with:
+          path: |
+            ~/.cargo/bin
+            ~/.cargo/horizon-rev
+          key: cargo-horizon-mod-${{ env.HORIZON_REV }}
+      - run: scripts/install-tool.sh
+      # Files kept from the last run: GitHub counts every download of a release
+      # asset, so fetching them all again each hour would count as players.
+      - uses: actions/cache@v4
+        with:
+          path: files
+          key: files-${{ hashFiles('mods/*.toml') }}
+          restore-keys: files-
+      - run: scripts/fetch.sh .
+      - name: Build the index
+        run: |
+          mkdir -p site
+          cargo horizon-mod registry build . --files files --out site/index.json --site https://horizon-rust.github.io/horizon-mods/ --generated "$(date -u +%FT%TZ)"
+      - name: Publish new files as releases
+        run: |
+          cargo horizon-mod registry list . | while read -r sha id version file; do
+            tag="$id-$version"
+            gh release view "$tag" >/dev/null 2>&1 && continue
+            dir="$(mktemp -d)"
+            cp "files/$sha" "$dir/$file"
+            gh release create "$tag" "$dir/$file" --title "$id $version" --latest=false \
+              --notes "Reviewed in the registry: mods/$id.toml. SHA-256 $sha."
+          done
+      - name: Download counts
+        run: |
+          # Each version's file is the asset at its URL: a project's downloads
+          # are its files' counts, every version together.
+          gh api --paginate "repos/$GH_REPO/releases?per_page=100" \
+            --jq '.[].assets[] | {key: .browser_download_url, value: .download_count}' \
+            | jq -s from_entries > counts.json
+          jq --slurpfile counts counts.json '
+            .projects |= map(
+              ([.versions[].file.url | $counts[0][.] // 0] | add) as $n
+              | if $n > 0 then .downloads = $n else . end)' site/index.json > index.counted.json
+          mv index.counted.json site/index.json
+          jq -r '.projects[] | "\(.id) \(.downloads // 0)"' site/index.json
+      - name: Native mods that don't apply on the newest Nightly
+        run: |
+          # native-compat.yml's daily health: the version each names gets `broken_on`, the Horizon
+          # commit horizon-mixins refused it on and its code, so the launcher warns before an install.
+          if gh release download native-health --pattern native-health.json --dir health 2>/dev/null; then
+            jq --slurpfile h health/native-health.json '
+              $h[0] as $health
+              | .projects |= map(. as $p | .versions |= map(
+                  ($health.broken[$p.id] // null) as $b
+                  | if $b != null and $b.version == .version
+                    then .broken_on = [{horizon: $health.horizon, code: $b.code}] else . end))' \
+              site/index.json > index.health.json
+            mv index.health.json site/index.json
+            jq -r '.projects[] | select(.versions[0].broken_on) | "\(.id) \(.versions[0].version): \(.versions[0].broken_on[0].code)"' site/index.json
+          fi
+      - name: The site
+        run: |
+          cp -R icons site/icons
+          cat > site/index.html <<'HTML'
+          <!doctype html><meta charset="utf-8"><title>Horizon mods</title>
+          <meta http-equiv="refresh" content="0; url=https://playhorizon.dev/mods">
+          <p><a href="https://playhorizon.dev/mods">playhorizon.dev/mods</a> · <a href="index.json">index.json</a></p>
+          HTML
+      - uses: actions/configure-pages@v5
+      - uses: actions/upload-pages-artifact@v3
+        with:
+          path: site
+      - id: pages
+        uses: actions/deploy-pages@v4

.gitignore

@@ -1,3 +1,5 @@
 /files/
 /site/
 /bootstrap/
+/native/target/
+/native/*/target/

MOD-POLICY.md

@@ -0,0 +1,70 @@
+# Mod policy
+
+This registry lists mods, modpacks and packs for [Horizon](https://github.com/horizon-rust/horizon). This page says
+who makes them, who is responsible for them, and how to have one removed. By submitting to the registry you accept it.
+
+## Who makes the mods
+
+- **Mods made by the Horizon project** are marked **Official**: their author is "Horizon" and their source is in a
+  [horizon-rust](https://github.com/horizon-rust) repository. They are the only mods the Horizon
+  project makes and is responsible for.
+- **Every other mod is made, owned and maintained by its own authors**, named on its page. The Horizon project and
+  its maintainers are not their authors. They don't own these mods, sell them, or license them to you; each mod's
+  licence is the one its authors chose.
+- **A listing is not an endorsement.** Reviewers check that an entry is complete, that its files match their pinned
+  hashes, that it builds or loads against the Horizon version it names, and that nothing obviously harmful is in it.
+  That review is not a legal review, a security audit or a guarantee. Mods are provided as they are, without
+  warranty, by their authors.
+- **Native mods** (built into the game with [horizon-mixins](https://github.com/horizon-rust/horizon-mixins)) run
+  with the same access to your computer as the game. Install them only from authors you trust.
+
+## What authors promise when they submit
+
+Submitting a project, through the form or a pull request, means you confirm that:
+
+1. You made it, or you have the right to publish it, under the licence its entry names.
+2. **If it is a port or a translation of another mod** (for example from Java Edition), the original's licence allows
+   that, or its authors gave you permission. You keep the original's copyright and licence notices, and you credit
+   its authors and link the original on your page. A port of a mod whose licence reserves all rights needs its
+   authors' written permission.
+3. It contains no code, assets or data from Minecraft, Mojang or Microsoft beyond what their
+   [usage guidelines](https://www.minecraft.net/usage-guidelines) and EULA allow. Horizon players bring their own
+   copy of the game.
+4. It contains nothing that harms players: no malware, no stealing of accounts or data, no hidden network access.
+5. The `source` link has the code the published files were built from.
+
+You alone are responsible for what you publish and for any claim about it. The Horizon project may refuse, hide or
+remove any project, at any time, without having to give a reason.
+
+## Licences reviewers can read
+
+Reviewers read a project's source before each version is listed; that is how they check it holds nothing harmful.
+They may only read source under a licence that lets them, so a new project, and every new version of a listed one,
+needs source under one of:
+
+- MIT, MIT-0, BSD-2-Clause, BSD-3-Clause, 0BSD, Apache-2.0, ISC, zlib, Unlicense or CC0-1.0;
+- or any licence, with a written grant from its authors that lets the Horizon reviewers read the source to review it
+  (say so in the pull request, with a link to the grant).
+
+Source under GPL, LGPL, MPL or all rights reserved, without such a grant, can't be reviewed, so it can't be listed or
+updated. The projects already listed under other licences when this rule was written (classic_zoom,
+distant_horizons, fly_speed, serverify) stay listed as they are; their next version needs a licence above or a
+grant. A port also has to follow promise 2 above.
+
+## Copyright and takedowns
+
+If a project in this registry uses your work without your permission:
+
+- [Open a takedown request](../../issues/new?template=takedown.yml) (public), or
+- write privately to the maintainer through [lu4ovic.com](https://lu4ovic.com/#contact).
+
+Say which project, which of your work it uses, and how to reach you. A claim that holds gets the project removed and
+listed in [`revoked.toml`](revoked.toml): the registry stops listing it and the launcher stops offering it and turns
+installed copies off. Clear claims are acted on quickly. The project's author is told, and can answer the claim in the
+same issue.
+
+Authors whose project was removed by mistake can ask for it back in that issue.
+
+## Changes
+
+This policy can change. The version in this repository's `main` branch is the one that applies.

README.md

@@ -1,12 +1,26 @@
 # Horizon mods
 
-The registry of what is made for [Horizon](https://github.com/ludovic111/horizon): mods (`.hmod`), modpacks (`.hpack`)
+The registry of what is made for [Horizon](https://github.com/horizon-rust/horizon): mods (`.hmod`), modpacks (`.hpack`)
 and resource packs, each one reviewed before it is published. Browse them at
 [playhorizon.dev/mods](https://playhorizon.dev/mods) or in the launcher (Mods, then Horizon beside Modrinth).
 
 Players install from here through the launcher, which checks every file's SHA-256 and, when the author signs, its
-signature before the game sees it. Mods run in Horizon's sandbox, with no file, network or clock access, and can only
-do what their page lists.
+signature before the game sees it. Sandboxed `.hmod` mods run in Horizon's sandbox,
+with no file, network or clock access, and can only do what their page lists.
+
+Native source mods (`.hnmod`, kind `native-mod`) are built into an isolated game by
+a launcher with native-mod support. They run with the player’s account permissions.
+Their bundles pin the exact Horizon and Horizon Mixins revisions used for the build.
+Other revisions have not been validated. Registry checks inspect the source bundle and compile it
+on the newest Nightly with the most downloaded native mods (in a job whose token
+can only read) without running it; reviewers must also examine the source and
+pinned-build validation. Publishing these requires the native-mod changes to `cargo-horizon-mod`
+and the launcher to have shipped first.
+
+**Who is responsible.** Except the projects marked Official (made by the Horizon project), everything here is made and
+owned by its own authors, not by the Horizon project or its maintainers. A listing is not an endorsement. See the
+[mod policy](MOD-POLICY.md): what authors promise when they submit (ports of other mods included), the licences
+whose source reviewers can read, and how to have a project taken down.
 
 ## Submit
 
@@ -24,19 +38,21 @@ What the registry takes now: mods, modpacks of registry mods, and resource packs
 shader pack format is out (Iris and OptiFine packs are on Modrinth). Before you submit a mod, run what the checks run:
 
 ```sh
-cargo install --git https://github.com/ludovic111/horizon cargo-horizon-mod
+cargo install --git https://github.com/horizon-rust/horizon cargo-horizon-mod
 cargo horizon-mod check target/horizon-mod/my_mod.hmod
 ```
 
-**Updates** come the same way: the form adds a version to your entry. Only an entry's `owners` publish its updates
-without a reviewer's extra look. A published file never changes: publish a new version.
+**Updates** come the same way: the form adds a version to your entry, and a reviewer reads it before it is
+published. Only an entry's `owners` can add versions, and every version of a native mod is reviewed, owner or
+not: its code runs with the player's account permissions. A published file never changes: publish a new version.
 
 **Signing** is optional and recommended: put your [minisign](https://jedisct1.github.io/minisign/) public key in your
 entry, and every later version must be signed with it, so nobody else can publish an update in your name.
 
 ## Report
 
-Something wrong with a project? [Report it](../../issues/new?template=report.yml). A project that does harm is taken
+Something wrong with a project? [Report it](../../issues/new?template=report.yml). Your work published without your
+permission? [Ask for a takedown](../../issues/new?template=takedown.yml) ([mod policy](MOD-POLICY.md)). A project that does harm is taken
 down in [`revoked.toml`](revoked.toml): the launcher then refuses it and turns installed copies off, telling players
 why.
 
@@ -50,11 +66,33 @@ why.
 | `.github/workflows/check.yml` | A pull request's checks |
 | `.github/workflows/publish.yml` | On merge: releases, then `index.json` on Pages |
 | `.github/workflows/cleanup.yml` | Weekly: staging files nobody needs any more |
+| `.github/workflows/native-compat.yml` | Native mods on the newest Nightly, as the launcher builds them: a pull request's new version applied and compiled with the most downloaded native mods, its module names against every mod's; daily, every mod's newest version, the ones that don't apply marked `broken_on` in the index (`scripts/native_compat.py`) |
+| `.github/workflows/native.yml` | Horizon's native mods: each changed one's tests, `.hnmod` and game check, all of them together, and weekly on the newest Nightly |
+| `native/<name>/` | Horizon's own native mods (Zoom, FPS Counter, Keystrokes, Minimap, Recipes, Coordinates HUD): the source of their `.hnmod` files |
+| `native/tools/` | Shared by them: apply on Horizon, check, build, package, prove (`native/tools/native.py`) |
 | `scripts/` | What the workflows share |
 
 The format of the entries and of `index.json` is
-[docs/api/mod-index.md](https://github.com/ludovic111/horizon/blob/main/docs/api/mod-index.md) in Horizon's repository;
+[docs/api/mod-index.md](https://github.com/horizon-rust/horizon/blob/main/docs/api/mod-index.md) in Horizon's repository;
 the checks are `cargo horizon-mod check` and `cargo horizon-mod registry`, from Horizon at the commit in the
 repository variable `HORIZON_REV` (else `main`).
 
-The index: `https://ludovic111.github.io/horizon-mods/index.json`.
+The index: `https://horizon-rust.github.io/horizon-mods/index.json`.
+
+## Horizon's native mods
+
+`native/<name>/` holds the source of Horizon's official mods, as
+[horizon-mixins](https://github.com/horizon-rust/horizon-mixins) bundles on Horizon's native hook points
+([docs/native-mods.md](https://github.com/horizon-rust/horizon/blob/main/docs/native-mods.md)). Each folder keeps the
+history of the repository it came from. A mod builds on any Horizon whose hook points are at least the version its
+`compatibility.json` names; `horizon_revision` is the commit it was last tested on. `smp` and `voicechat-server`
+are server mods, built into the official server's engine (see their READMEs).
+
+```sh
+python3 native/tools/native.py check zoom          # apply on the tested Horizon and cargo check the game
+python3 native/tools/native.py check all           # every native mod together
+python3 native/tools/native.py package all         # native/target/<id>-<version>.hnmod, for a registry entry
+python3 native/tools/native.py proof zoom --resources /path/to/.local/horizon-client/26.3
+```
+
+To make your own, start from [horizon-native-mod-template](https://github.com/horizon-rust/horizon-native-mod-template).