Filter rcedit input to Windows PE binaries only

The Windows packaging step runs rcedit.exe over every *.node file under
the bundled node_modules to stamp PE metadata. rcedit only understands
Windows PE format and crashes on Mach-O / ELF cross-platform prebuilds
shipped by copilot transitive deps (claude-agent-sdk audio-capture,
foundry-local-sdk, @picovoice/pvrecorder-node, @github/copilot/sdk/
prebuilds, etc.).

Check the first two magic bytes (MZ = 0x4D 0x5A) before invoking rcedit
and skip files that aren't Windows PE. Kills the entire class of bug
without per-package .moduleignore maintenance. Same fix applied in the
REH (server) build path.

Removes the three reactive .moduleignore entries added over the last
24 hours; they're now redundant.

Author: HumbleBee14

build/.moduleignore

@@ -243,18 +243,3 @@ zone.js/dist/**
 # in websocket's browser.js inside a try/catch with a globalThis fallback,
 # so it is unnecessary in the browsers/runtimes VS Code supports.
 es5-ext/**
-
-# claude-agent-sdk ships per-platform audio-capture .node binaries under
-# vendor/audio-capture/{arch-platform}/. Non-Windows binaries break Windows
-# packaging because rcedit only understands Windows PE format.
-@anthropic-ai/claude-agent-sdk/vendor/audio-capture/**
-
-# foundry-local-sdk ships per-platform .node binaries under prebuilds/.
-# Same rcedit incompatibility as above.
-foundry-local-sdk/prebuilds/**
-
-# @picovoice/pvrecorder-node (nested under @github/copilot/pvrecorder) ships
-# pv_recorder.node binaries under lib/{mac,linux,windows}/. Keep windows/ so
-# the Windows build retains its native binary; strip the rest.
-@picovoice/pvrecorder-node/lib/mac/**
-@picovoice/pvrecorder-node/lib/linux/**

build/gulpfile.reh.ts

@@ -443,8 +443,23 @@ function patchWin32DependenciesTask(destinationFolderName: string) {
 
 		const patchPromises = deps.map<Promise<unknown>>(async dep => {
 			const basename = path.basename(dep);
+			const fullPath = path.join(cwd, dep);
+
+			// Roopik: rcedit.exe only handles Windows PE-format binaries. Skip any
+			// file whose first two bytes are not 'MZ' (Mach-O / ELF prebuilds from
+			// cross-platform deps would otherwise crash the packaging step).
+			const handle = await fs.promises.open(fullPath, 'r');
+			try {
+				const header = Buffer.alloc(2);
+				await handle.read(header, 0, 2, 0);
+				if (header[0] !== 0x4D || header[1] !== 0x5A) {
+					return;
+				}
+			} finally {
+				await handle.close();
+			}
 
-			await rcedit(path.join(cwd, dep), {
+			await rcedit(fullPath, {
 				'file-version': baseVersion,
 				'version-string': {
 					'CompanyName': 'Microsoft Corporation',

build/gulpfile.vscode.ts

@@ -556,8 +556,24 @@ function patchWin32DependenciesTask(destinationFolderName: string) {
 
 		const patchPromises = deps.map<Promise<unknown>>(async dep => {
 			const basename = path.basename(dep);
+			const fullPath = path.join(cwd, dep);
+
+			// Roopik: rcedit.exe only handles Windows PE-format binaries. Skip any
+			// file whose first two bytes are not 'MZ' (e.g. Mach-O / ELF prebuilds
+			// shipped by cross-platform deps such as @github/copilot,
+			// @picovoice/pvrecorder-node, foundry-local-sdk, etc.).
+			const handle = await fs.promises.open(fullPath, 'r');
+			try {
+				const header = Buffer.alloc(2);
+				await handle.read(header, 0, 2, 0);
+				if (header[0] !== 0x4D || header[1] !== 0x5A) {
+					return;
+				}
+			} finally {
+				await handle.close();
+			}
 
-			await rcedit(path.join(cwd, dep), {
+			await rcedit(fullPath, {
 				'file-version': baseVersion,
 				'version-string': {
 					'CompanyName': 'Microsoft Corporation',