Dr. McKay

readFile gives you a Buffer, not a string. You need to stringify it using toString('utf8').

That's normal. As of version 3 (if I remember correctly), npm flattens dependencies by putting them all in the first-level node_modules where possible. This both helps to avoid duplicate installations, and prevents issues where paths get too long.

I don't believe you could do that without editing the module's code directly. If you run the bot and send an offer manually, it'll trigger unknownOfferSent.

It might be a better idea to throw a more descriptive error, but the behavior is pretty much undefined for calling any method (except for offline ones like settings and logon) while logged off.

You should use the API to get details about trade offers. Scraping the sent offers page is asking for trouble. Also, there's a getOffersContainingItems method in the latest version anyway.

Why are you scraping your sent offers page?

If you're getting a "Not Logged In" error, then you're not logged in and you should relog.

The only way I was able to reproduce this was by trying to log off without first being logged on. Please make sure you aren't doing that.

Yes.

You can either use steam-totp with your shared_secret to provide the code to logOn as twoFactorCode, or you can use a loginKey. Both of these are documented on the readme.

Sure, add a bad item to the offer.

Send and receive offers using what? steam-tradeoffer-manager?

You can use steam-totp along with your shared_secret.

Yes.

I'm not 100% certain that that error definitely means that you're not logged in, but it seems to be likely.

Yes.

"Modules" are self-contained bits of code. Each module (generally) performs a specific task. In essence, "modules" are Node's version of "libraries". They're pretty much the cornerstone of Node so yes, they're rather important. You can't make a bot without using at least the built-in modules (like net which provides network communication). You could definitely make a bot using only the built in modules, but only if you're insane. You'd have a lot of work ahead of you if you decided to make a bot without using any third-party modules. For example, the steam-user module exposes an interface with which you can log into and interact with Steam. You could do that yourself, but then you'd need to implement the crypto, protobuf, protocol, and more yourself. Not a small task by any measure.

Yes.

Try relogging your web session.

Yes. You won't be able to get codes on your phone, though. You'll need to use SteamTotp to generate the codes in node.

You have to login on the client and request a validation email if your email isn't verified yet.

Yes, once your email is verified.

You don't need to do anything else. Are you getting an error?

Personally all my offers are sent by my bots, so I don't have an answer for that.

Which script are you using? The enable_twofactor.js example in steamcommunity?