Dr. McKay

getExchangeDetails.

Steam sends the data differently sometimes. Update to 2.8.1 and I've made the tags objects all be standard (that is, they have all the properties).

There's nothing in the module right now to parse comments.

Cookies obtained from a CM are invalidated as soon as the connection drops. You should pause your queue when you get disconnected, and only restart it once webSession gets emitted after reconnection.
No, I don't believe that would be a problem.

\n

Listen for the sentOfferChanged event and see if the new state is Accepted.

https://steamerrors.com/26

No. Steam does not support IPv6 at this time.

1. For authenticating users through Steam's OpenID provider, you can use the attached PHP class. I don't know where it originally came from, but it works well (although it could benefit from being updated to use curl instead of file_get_contents). This particular version of it was edited by me to authenticate the return domain, otherwise you could be vulnerable to spoof attacks. For logging in a bot to Steam, you can use steam-user or steamcommunity. Or if you really want to, you can look at the source of those to see what they do to implement it yourself.
 
2. It polls however frequently you tell it to. The rate-limit on the API domain is much higher than on the community domain. You can reasonably safely poll every 1-2 seconds, although for sake of being a good citizen, you probably don't want to do that.
SteamSignIn.php

loadUserInventory is deprecated. Use getUserInventoryContents instead.

Fetch the inventory for only tradable items, then call addTheirItems with the raw array of items. I believe there is an example in the repo that does exactly this.

You'd need to retrieve the TradeOffer object using getOffer or getOffers then call cancel() on that object.

No, not really. I see in your output that tradable is also false (which obviously cannot be true if it's in a trade offer). You may consider just failing the entire trade and trying again later if any item has that property as false.

Per-IP.

The npm name is just steamcommunity.

You really, really shouldn't be getting family shared games. I'll have to look into this when I get a chance.

No, bot voting is not something I will support.

You need to call community.setCookies inside of SteamUser's webSession event in order to get steamcommunity to use a login session.

You need to wait for the disconnected event to know that you're logged off. You can't log back on using the same object until then. My suggestion is to just create a new SteamUser object for each login.

Yes, use the WebAPI: https://lab.xpaw.me/steam_api_documentation.html#ISteamUser_GetFriendList_v1

Please give 3.21.0 a shot.

Thanks. Looks like there's an expiry time in those packages which is being ignored. Let me take a look at the code.

Does your account own CS:GO?

Do this instead:
community.setCookies(["steamLogin=1||invalid", "steamLoginSecure=1||invalid"]);

You should make it stop restarting the script a lot of times.