@bitmagic/cli 0.1.70-dev.1 → 0.1.70-dev.3

package/dist/poki/assets.d.ts

@@ -0,0 +1,25 @@
+/** Only static resources may be downloaded by discovery; never vendor API responses. */
+export declare function isStaticAsset(url: string): boolean;
+export declare function scanAssetUrls(text: string): string[];
+/** HTML resource attributes, excluding dormant URL strings in bundled engine code. */
+export declare function scanHtmlAssets(html: string): string[];
+/** Preserve sibling layout, but never merge distinct query resources or unsafe decoded paths. */
+export declare function pokiAssetPath(url: string): string | null;
+/**
+ * Where a BASE url's rewrite points: the same mapping, minus the appended 'index' — the Poki
+ * counterpart of vendor.ts's `vendorBasePathFor`.
+ */
+export declare function pokiBasePath(baseUrl: string): string | null;
+/** References inside a sidecar, retained with their original spelling for rewriting. */
+export declare function sidecarReferences(text: string, url: string): Map<string, string>;
+/** Rewrite resource references only; short names must not replace arbitrary CSS or GLTF text. */
+export declare function rewriteSidecar(text: string, url: string, replacements: ReadonlyMap<string, string>): string;
+export interface PackageAssetsOptions {
+    urls: Iterable<string>;
+    payloadDir: string;
+    cacheDir: string;
+    fetch: typeof globalThis.fetch;
+    log: (message: string) => void;
+}
+/** Walk GLTF/CSS dependencies as well as direct URLs; a missing declared asset is an error. */
+export declare function packageAssets(options: PackageAssetsOptions): Promise<Map<string, string>>;

package/dist/poki/assets.js

@@ -0,0 +1,163 @@
+import { createHash } from 'crypto';
+import * as fs from 'fs';
+import * as path from 'path';
+import { CliError } from '../errors.js';
+import { vendorPathFor, vendorUrls } from '../package/vendor.js';
+import { POKI_SDK_URL } from './transform.js';
+/** Only static resources may be downloaded by discovery; never vendor API responses. */
+export function isStaticAsset(url) {
+    if (url === POKI_SDK_URL)
+        return false;
+    try {
+        const parsed = new URL(url);
+        return /^https?:$/.test(parsed.protocol) && (/\.(?:glb|gltf|bin|vxl|vwld|spz|splat|ksplat|ply|png|jpe?g|webp|gif|svg|ico|ktx2|hdr|exr|woff2?|ttf|otf|mp3|ogg|opus|wav|mp4|webm|json|js|mjs|wasm|css)(?:\.br|\.gz)?$/i.test(parsed.pathname)
+            || (parsed.hostname === 'fonts.googleapis.com' && /^\/css2?$/.test(parsed.pathname)));
+    }
+    catch {
+        return false;
+    }
+}
+export function scanAssetUrls(text) {
+    return [...new Set((text.match(/https?:\/\/[^\s"'`<>\\)]+/g) ?? [])
+            .filter((url) => !url.includes('${') && isStaticAsset(url)))];
+}
+/** HTML resource attributes, excluding dormant URL strings in bundled engine code. */
+export function scanHtmlAssets(html) {
+    const markup = html.replace(/<script\b[^>]*>[\s\S]*?<\/script>/gi, (tag) => tag.slice(0, tag.indexOf('>') + 1));
+    return [...new Set([...markup.matchAll(/(?:src|href)=["'](https?:\/\/[^"']+)["']/gi)]
+            .map((match) => match[1].replace(/&amp;/g, '&')).filter(isStaticAsset))];
+}
+/** Preserve sibling layout, but never merge distinct query resources or unsafe decoded paths. */
+export function pokiAssetPath(url) {
+    const normal = vendorPathFor(url);
+    if (normal === null)
+        return null;
+    const parsed = new URL(url);
+    if (parsed.username || parsed.password)
+        return null;
+    const segments = normal.split('/').map((segment) => segment.replace(/[^a-zA-Z0-9._-]/g, (char) => '~' + char.charCodeAt(0).toString(16)));
+    let result = segments.join('/');
+    if (parsed.hostname === 'fonts.googleapis.com')
+        result += '.css';
+    if (parsed.search) {
+        const suffix = createHash('sha256').update(parsed.search).digest('hex').slice(0, 16);
+        const ext = path.posix.extname(result);
+        result = `${ext ? result.slice(0, -ext.length) : result}~${suffix}${ext}`;
+    }
+    return parsed.protocol === 'http:' ? result.replace(/^vendor\//, 'vendor-http/') : result;
+}
+/**
+ * Where a BASE url's rewrite points: the same mapping, minus the appended 'index' — the Poki
+ * counterpart of vendor.ts's `vendorBasePathFor`.
+ */
+export function pokiBasePath(baseUrl) {
+    const mapped = pokiAssetPath(baseUrl.endsWith('/') ? baseUrl : `${baseUrl}/`);
+    return mapped === null ? null : mapped.replace(/\/index$/, '');
+}
+/** Every `uri` string in a GLTF document, in place: the visitor's return value replaces it. */
+function walkGltfUris(value, visit) {
+    if (Array.isArray(value)) {
+        for (const child of value)
+            walkGltfUris(child, visit);
+    }
+    else if (typeof value === 'object' && value !== null) {
+        for (const [key, child] of Object.entries(value)) {
+            if (key === 'uri' && typeof child === 'string') {
+                const replacement = visit(child);
+                if (replacement !== undefined)
+                    value[key] = replacement;
+            }
+            else
+                walkGltfUris(child, visit);
+        }
+    }
+}
+/** The sidecar kinds whose references are followed and rewritten. */
+function sidecarKind(url) {
+    const parsed = new URL(url);
+    if (/\.gltf$/i.test(parsed.pathname))
+        return 'gltf';
+    if (/\.css$/i.test(parsed.pathname) || parsed.hostname === 'fonts.googleapis.com')
+        return 'css';
+    return null;
+}
+/** `url(...)` and `@import` references in a stylesheet. Group 1 or 2 holds the reference. */
+const CSS_REFERENCE = /url\(\s*["']?([^\s"')]+)["']?\s*\)|@import\s+["']([^"']+)["']/gi;
+/** References inside a sidecar, retained with their original spelling for rewriting. */
+export function sidecarReferences(text, url) {
+    const refs = new Set();
+    const kind = sidecarKind(url);
+    if (kind === 'gltf') {
+        walkGltfUris(JSON.parse(text), (uri) => { refs.add(uri); });
+    }
+    else if (kind === 'css') {
+        for (const match of text.matchAll(CSS_REFERENCE))
+            refs.add(match[1] ?? match[2]);
+    }
+    const result = new Map();
+    for (const ref of refs) {
+        if (/^(data:|blob:|#)/.test(ref))
+            continue;
+        const absolute = new URL(ref, url).href;
+        if (!/^https?:/.test(absolute))
+            throw new CliError(`Unsupported dependency ${ref} in ${url}.`);
+        result.set(ref, absolute);
+    }
+    return result;
+}
+/** Rewrite resource references only; short names must not replace arbitrary CSS or GLTF text. */
+export function rewriteSidecar(text, url, replacements) {
+    if (sidecarKind(url) === 'gltf') {
+        const data = JSON.parse(text);
+        walkGltfUris(data, (uri) => replacements.get(uri));
+        return JSON.stringify(data);
+    }
+    return text.replace(CSS_REFERENCE, (match, urlRef, importRef) => {
+        const ref = urlRef ?? importRef;
+        if (ref === undefined)
+            return match;
+        const replacement = replacements.get(ref);
+        return replacement === undefined ? match : match.replace(ref, () => replacement);
+    });
+}
+/** Walk GLTF/CSS dependencies as well as direct URLs; a missing declared asset is an error. */
+export async function packageAssets(options) {
+    const entries = new Map();
+    let pending = [...new Set(options.urls)].filter((url) => url !== POKI_SDK_URL);
+    for (let depth = 0; pending.length > 0; depth++) {
+        if (depth >= 12 || entries.size + pending.length > 10_000) {
+            throw new CliError('Asset dependency discovery exceeded its limit. Check the reported asset URLs.');
+        }
+        const result = await vendorUrls({
+            ...options, urls: pending, fetchImpl: options.fetch, pathForUrl: pokiAssetPath,
+            // Correct for mutable URLs too; cache files are diagnostics, not proof of freshness.
+            reuseCache: false,
+        });
+        if (result.failures.length > 0) {
+            throw new CliError(`Could not package assets:\n${result.failures.map((f) => `  ${f.url}: ${f.error}`).join('\n')}`);
+        }
+        for (const [url, rel] of result.entries)
+            entries.set(url, rel);
+        const next = new Set();
+        for (const [url, rel] of result.entries) {
+            if (sidecarKind(url) === null)
+                continue;
+            const file = path.join(options.payloadDir, rel);
+            const text = fs.readFileSync(file, 'utf-8');
+            const refs = sidecarReferences(text, url);
+            const rewrites = new Map();
+            for (const [ref, absolute] of refs) {
+                const dependency = pokiAssetPath(absolute);
+                if (dependency === null)
+                    throw new CliError(`Cannot package dependency ${absolute}.`);
+                rewrites.set(ref, path.posix.relative(path.posix.dirname(rel), dependency) + new URL(absolute).hash);
+                if (!entries.has(absolute))
+                    next.add(absolute);
+            }
+            fs.writeFileSync(file, rewriteSidecar(text, url, rewrites));
+        }
+        pending = [...next];
+    }
+    return entries;
+}
+//# sourceMappingURL=assets.js.map

package/dist/poki/assets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"assets.js","sourceRoot":"","sources":["../../src/poki/assets.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AACpC,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AACxC,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AACjE,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAE9C,wFAAwF;AACxF,MAAM,UAAU,aAAa,CAAC,GAAW;IACvC,IAAI,GAAG,KAAK,YAAY;QAAE,OAAO,KAAK,CAAC;IACvC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QAC5B,OAAO,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAC1C,wKAAwK,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;eAC3L,CAAC,MAAM,CAAC,QAAQ,KAAK,sBAAsB,IAAI,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CACrF,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,KAAK,CAAC;IAAC,CAAC;AAC3B,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,4BAA4B,CAAC,IAAI,EAAE,CAAC;aAChE,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AAClE,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,qCAAqC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAChH,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,4CAA4C,CAAC,CAAC;aAClF,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;AAC7E,CAAC;AAED,iGAAiG;AACjG,MAAM,UAAU,aAAa,CAAC,GAAW;IACvC,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACjC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IAC5B,IAAI,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IACpD,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,kBAAkB,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC1I,IAAI,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChC,IAAI,MAAM,CAAC,QAAQ,KAAK,sBAAsB;QAAE,MAAM,IAAI,MAAM,CAAC;IACjE,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClB,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACrF,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACvC,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,MAAM,GAAG,GAAG,EAAE,CAAC;IAC5E,CAAC;IACD,OAAO,MAAM,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;AAC5F,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,OAAe;IAC1C,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,GAAG,CAAC,CAAC;IAC9E,OAAO,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;AACjE,CAAC;AAED,+FAA+F;AAC/F,SAAS,YAAY,CAAC,KAAc,EAAE,KAAqC;IACzE,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,KAAK,MAAM,KAAK,IAAI,KAAK;YAAE,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACxD,CAAC;SAAM,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACvD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACjD,IAAI,GAAG,KAAK,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC/C,MAAM,WAAW,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;gBACjC,IAAI,WAAW,KAAK,SAAS;oBAAG,KAAiC,CAAC,GAAG,CAAC,GAAG,WAAW,CAAC;YACvF,CAAC;;gBAAM,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;AACH,CAAC;AAED,qEAAqE;AACrE,SAAS,WAAW,CAAC,GAAW;IAC9B,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IAC5B,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;QAAE,OAAO,MAAM,CAAC;IACpD,IAAI,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,QAAQ,KAAK,sBAAsB;QAAE,OAAO,KAAK,CAAC;IAChG,OAAO,IAAI,CAAC;AACd,CAAC;AAED,6FAA6F;AAC7F,MAAM,aAAa,GAAG,iEAAiE,CAAC;AAExF,wFAAwF;AACxF,MAAM,UAAU,iBAAiB,CAAC,IAAY,EAAE,GAAW;IACzD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QACpB,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,EAAE,CAAC,GAAG,EAAE,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACzE,CAAC;SAAM,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;QAC1B,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC;YAAE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACnF,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,SAAS;QAC3C,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC;QACxC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC;YAAE,MAAM,IAAI,QAAQ,CAAC,0BAA0B,GAAG,OAAO,GAAG,GAAG,CAAC,CAAC;QAC/F,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC5B,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,iGAAiG;AACjG,MAAM,UAAU,cAAc,CAAC,IAAY,EAAE,GAAW,EAAE,YAAyC;IACjG,IAAI,WAAW,CAAC,GAAG,CAAC,KAAK,MAAM,EAAE,CAAC;QAChC,MAAM,IAAI,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACvC,YAAY,CAAC,IAAI,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;QACnD,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC;IACD,OAAO,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC,KAAa,EAAE,MAAe,EAAE,SAAkB,EAAE,EAAE;QACxF,MAAM,GAAG,GAAG,MAAM,IAAI,SAAS,CAAC;QAChC,IAAI,GAAG,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QACpC,MAAM,WAAW,GAAG,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC1C,OAAO,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,CAAC;IACnF,CAAC,CAAC,CAAC;AACL,CAAC;AAUD,+FAA+F;AAC/F,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAA6B;IAC/D,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC1C,IAAI,OAAO,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,YAAY,CAAC,CAAC;IAC/E,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC;QAChD,IAAI,KAAK,IAAI,EAAE,IAAI,OAAO,CAAC,IAAI,GAAG,OAAO,CAAC,MAAM,GAAG,MAAM,EAAE,CAAC;YAC1D,MAAM,IAAI,QAAQ,CAAC,+EAA+E,CAAC,CAAC;QACtG,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC;YAC9B,GAAG,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,KAAK,EAAE,UAAU,EAAE,aAAa;YAC9E,qFAAqF;YACrF,UAAU,EAAE,KAAK;SAClB,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,QAAQ,CAAC,8BAA8B,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACtH,CAAC;QACD,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO;YAAE,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC/D,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACxC,IAAI,WAAW,CAAC,GAAG,CAAC,KAAK,IAAI;gBAAE,SAAS;YACxC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;YAChD,MAAM,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YAC5C,MAAM,IAAI,GAAG,iBAAiB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YAC1C,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;YAC3C,KAAK,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,IAAI,IAAI,EAAE,CAAC;gBACnC,MAAM,UAAU,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;gBAC3C,IAAI,UAAU,KAAK,IAAI;oBAAE,MAAM,IAAI,QAAQ,CAAC,6BAA6B,QAAQ,GAAG,CAAC,CAAC;gBACtF,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC;gBACrG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;oBAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACjD,CAAC;YACD,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,cAAc,CAAC,IAAI,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC;QAC9D,CAAC;QACD,OAAO,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;IACtB,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/poki/check.d.ts

@@ -0,0 +1,24 @@
+import { type VerifyResult } from '../verify/classify.js';
+import type { MobileOrientation } from '../project/platform-declaration.js';
+import { type PokiPlaytest } from './playtest.js';
+export declare const POKI_SDK_STUB = "(() => {\n  let playing = false, advertising = false;\n  const event = (name) => console.info('BM_POKI_EVENT:' + name);\n  window.PokiSDK = {\n    init: async () => { event('init'); },\n    gameLoadingStart: () => {},\n    gameLoadingFinished: () => event('loaded'),\n    gameplayStart: () => {\n      if (playing || advertising) throw new Error('Poki: invalid gameplayStart');\n      playing = true; event('start');\n    },\n    gameplayStop: () => {\n      if (!playing || advertising) throw new Error('Poki: invalid gameplayStop');\n      playing = false; event('stop');\n    },\n    commercialBreak: () => {\n      if (playing || advertising) throw new Error('Poki: ad during gameplay');\n      advertising = true; event('ad');\n      return new Promise(resolve => setTimeout(() => { advertising = false; event('ad-end'); resolve(); }, 150));\n    },\n    setDebug: () => {}\n  };\n})();";
+export interface PokiCheckOptions {
+    root: string;
+    payloadDir: string;
+    artifactDir: string;
+    mode: 'record' | 'restricted';
+    platform: 'desktop' | 'mobile';
+    orientation?: MobileOrientation;
+    nested?: boolean;
+    settleMs?: number;
+    playtest?: PokiPlaytest;
+    log: (message: string) => void;
+}
+export interface PokiCheckResult {
+    result: VerifyResult;
+    misses: string[];
+    localFailures: string[];
+    sdkEvents: string[];
+    nonAssetRequests?: string[];
+}
+export declare function runPokiCheck(options: PokiCheckOptions): Promise<PokiCheckResult>;

package/dist/poki/check.js

@@ -0,0 +1,168 @@
+import * as fs from 'fs';
+import * as path from 'path';
+import { browserLaunchPlan } from '../browser-gl.js';
+import { startPayloadServer } from '../package/local-server.js';
+import { runHeadlessCheck } from '../verify/browser.js';
+import { classifyVerifyRun } from '../verify/classify.js';
+import { mobileContextOptions } from '../verify/device.js';
+import { DEFAULT_START_INTERACTION } from '../verify/start.js';
+import { withVerifyLock } from '../verify/lock.js';
+import { POKI_SDK_URL } from './transform.js';
+import { isStaticAsset } from './assets.js';
+import { runPokiPlaytest } from './playtest.js';
+import { readPokiSources, requestSourceFiles } from './source-diagnostics.js';
+// Only the intercepted SDK response uses this stub. It never enters the delivered ZIP.
+export const POKI_SDK_STUB = `(() => {
+  let playing = false, advertising = false;
+  const event = (name) => console.info('BM_POKI_EVENT:' + name);
+  window.PokiSDK = {
+    init: async () => { event('init'); },
+    gameLoadingStart: () => {},
+    gameLoadingFinished: () => event('loaded'),
+    gameplayStart: () => {
+      if (playing || advertising) throw new Error('Poki: invalid gameplayStart');
+      playing = true; event('start');
+    },
+    gameplayStop: () => {
+      if (!playing || advertising) throw new Error('Poki: invalid gameplayStop');
+      playing = false; event('stop');
+    },
+    commercialBreak: () => {
+      if (playing || advertising) throw new Error('Poki: ad during gameplay');
+      advertising = true; event('ad');
+      return new Promise(resolve => setTimeout(() => { advertising = false; event('ad-end'); resolve(); }, 150));
+    },
+    setDebug: () => {}
+  };
+})();`;
+/** Every healthy boot reaches all three, in any order. */
+const REQUIRED_SDK_EVENTS = ['init', 'loaded', 'start'];
+/** Exercise the engine state contract after starting through actual UI, inside its iframe. */
+async function pauseAndResume(frame) {
+    await frame.evaluate(async () => {
+        /* eslint-disable no-undef -- browser callback */
+        const w = window;
+        const state = w.gameTemplate?.getGameEngine?.().gameStateManager;
+        if (!state || state.getCurrentState() !== 'playing')
+            throw new Error('Poki check: game never entered PLAYING.');
+        state.setPaused(true, 'manual');
+        await new Promise((resolve) => setTimeout(resolve, 0));
+        state.setPaused(false, 'manual');
+        await new Promise((resolve) => setTimeout(resolve, 400));
+        if (state.getCurrentState() !== 'playing')
+            throw new Error('Poki check: game did not resume after the advertisement.');
+        /* eslint-enable no-undef */
+    });
+}
+export async function runPokiCheck(options) {
+    return withVerifyLock(options.root, 'publish --target poki', { info: options.log }, async () => {
+        fs.mkdirSync(options.artifactDir, { recursive: true });
+        const mountPath = options.nested ? '/poki/game/' : '/';
+        const sources = readPokiSources(options.root);
+        const server = await startPayloadServer(options.payloadDir, { mountPath });
+        const misses = new Set();
+        const localFailures = new Set();
+        const nonAssetRequests = new Set();
+        const requests = new Map();
+        const recordRequest = (url, method, resourceType, status) => {
+            requests.set(`${method} ${url}`, { url, method, resourceType, ...(status === undefined ? {} : { status }), sourceFiles: requestSourceFiles(sources, url) });
+            if (new URL(url).origin !== server.origin && (method !== 'GET' || !isStaticAsset(url))) {
+                nonAssetRequests.add(`${method} ${url}`);
+            }
+        };
+        const gameUrl = `${server.origin}${mountPath}index.html?platform=${options.platform}&renderer=webgl`;
+        const harnessUrl = `${server.origin}/__poki_check__.html`;
+        const routes = async (context) => {
+            context.on('response', (response) => {
+                if (new URL(response.url()).origin === server.origin && response.status() >= 400) {
+                    const request = response.request();
+                    recordRequest(response.url(), request.method(), request.resourceType(), response.status());
+                    const files = requestSourceFiles(sources, response.url());
+                    localFailures.add(`${response.status()} ${response.url()}${files.length > 0 ? ` — source references: ${files.join(', ')}` : ''}`);
+                }
+            });
+            await context.routeWebSocket('**', (socket) => {
+                misses.add(socket.url());
+                recordRequest(socket.url(), 'GET', 'websocket');
+                socket.close();
+            });
+            await context.route('**/*', async (route) => {
+                const request = route.request();
+                const url = request.url();
+                if (url === POKI_SDK_URL) {
+                    await route.fulfill({ contentType: 'text/javascript', body: POKI_SDK_STUB });
+                }
+                else if (url === harnessUrl) {
+                    await route.fulfill({ contentType: 'text/html', body: `<html><head><meta name="viewport" content="width=device-width,initial-scale=1"></head>`
+                            + `<body style="margin:0"><iframe allow="fullscreen; autoplay" src="${gameUrl.replace(/&/g, '&amp;')}" `
+                            + 'style="position:fixed;inset:0;width:100%;height:100%;border:0"></iframe></body></html>',
+                    });
+                }
+                else if (new URL(url).origin === server.origin) {
+                    await route.continue();
+                }
+                else {
+                    misses.add(url);
+                    recordRequest(url, request.method(), request.resourceType());
+                    if (options.mode === 'record' && request.method() === 'GET' && isStaticAsset(url))
+                        await route.continue();
+                    else
+                        await route.abort('blockedbyclient');
+                }
+            });
+        };
+        const recordOutcome = (outcome) => {
+            fs.writeFileSync(path.join(options.artifactDir, 'result.json'), JSON.stringify(outcome, null, 2) + '\n');
+            return outcome;
+        };
+        try {
+            const observations = await runHeadlessCheck({
+                url: harnessUrl, probeFrameUrlIncludes: `${server.origin}${mountPath}index.html`,
+                screenshotPath: path.join(options.artifactDir, 'screenshot.png'),
+                consolePath: path.join(options.artifactDir, 'console.log'),
+                settleMs: options.settleMs ?? 25_000,
+                startInteraction: DEFAULT_START_INTERACTION,
+                launch: browserLaunchPlan(process.env, 'webgl'),
+                ...(options.platform === 'mobile' ? { device: mobileContextOptions(options.orientation ?? 'landscape') } : {}),
+                routes, blockServiceWorkers: true,
+                afterSettle: async (frame) => {
+                    if (options.playtest) {
+                        options.log(`Running ${options.platform} Poki playtest: ${options.playtest.file}`);
+                        await runPokiPlaytest(options.playtest, { frame, platform: options.platform });
+                    }
+                    if (options.mode === 'restricted')
+                        await pauseAndResume(frame);
+                },
+            });
+            const sdkEvents = observations.consoleLines.flatMap((line) => {
+                const event = /BM_POKI_EVENT:(\S+)/.exec(line);
+                return event ? [event[1]] : [];
+            });
+            const result = classifyVerifyRun(observations, { bundled: true, platform: options.platform });
+            if (!REQUIRED_SDK_EVENTS.every((event) => sdkEvents.includes(event))) {
+                result.failures.push('The Poki SDK did not initialize, finish loading, and report gameplay.');
+            }
+            if (options.mode === 'restricted' && !sdkEvents.includes('ad-end')) {
+                result.failures.push('The Poki pause/resume advertisement was not observed.');
+            }
+            result.ok = result.failures.length === 0;
+            return recordOutcome({ result, misses: [...misses], localFailures: [...localFailures], sdkEvents, nonAssetRequests: [...nonAssetRequests] });
+        }
+        catch (error) {
+            return recordOutcome({
+                result: { ok: false, failures: [error instanceof Error ? error.message : String(error)], warnings: [] },
+                misses: [...misses], localFailures: [...localFailures], sdkEvents: [],
+                nonAssetRequests: [...nonAssetRequests],
+            });
+        }
+        finally {
+            try {
+                fs.writeFileSync(path.join(options.artifactDir, 'requests.json'), JSON.stringify([...requests.values()], null, 2) + '\n');
+            }
+            finally {
+                await server.close();
+            }
+        }
+    });
+}
+//# sourceMappingURL=check.js.map

package/dist/poki/check.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"check.js","sourceRoot":"","sources":["../../src/poki/check.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAE7B,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,iBAAiB,EAAqB,MAAM,uBAAuB,CAAC;AAC7E,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAC;AAE/D,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,eAAe,EAAqB,MAAM,eAAe,CAAC;AACnE,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAE9E,uFAAuF;AACvF,MAAM,CAAC,MAAM,aAAa,GAAG;;;;;;;;;;;;;;;;;;;;;;MAsBvB,CAAC;AAEP,0DAA0D;AAC1D,MAAM,mBAAmB,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;AAuBxD,8FAA8F;AAC9F,KAAK,UAAU,cAAc,CAAC,KAAmB;IAC/C,MAAM,KAAK,CAAC,QAAQ,CAAC,KAAK,IAAI,EAAE;QAC9B,iDAAiD;QACjD,MAAM,CAAC,GAAG,MAIT,CAAC;QACF,MAAM,KAAK,GAAG,CAAC,CAAC,YAAY,EAAE,aAAa,EAAE,EAAE,CAAC,gBAAgB,CAAC;QACjE,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,eAAe,EAAE,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QAChH,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAChC,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;QACvD,KAAK,CAAC,SAAS,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QACjC,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;QACzD,IAAI,KAAK,CAAC,eAAe,EAAE,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;QACvH,4BAA4B;IAC9B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,OAAyB;IAC1D,OAAO,cAAc,CAAC,OAAO,CAAC,IAAI,EAAE,uBAAuB,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,KAAK,IAAI,EAAE;QAC7F,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACvD,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC;QACvD,MAAM,OAAO,GAAG,eAAe,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC9C,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;QAC3E,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;QACjC,MAAM,aAAa,GAAG,IAAI,GAAG,EAAU,CAAC;QACxC,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAU,CAAC;QAC3C,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAyG,CAAC;QAClI,MAAM,aAAa,GAAG,CAAC,GAAW,EAAE,MAAc,EAAE,YAAoB,EAAE,MAAe,EAAQ,EAAE;YACjG,QAAQ,CAAC,GAAG,CAAC,GAAG,MAAM,IAAI,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,WAAW,EAAE,kBAAkB,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;YAC5J,IAAI,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,IAAI,CAAC,MAAM,KAAK,KAAK,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;gBACvF,gBAAgB,CAAC,GAAG,CAAC,GAAG,MAAM,IAAI,GAAG,EAAE,CAAC,CAAC;YAC3C,CAAC;QACH,CAAC,CAAC;QACF,MAAM,OAAO,GAAG,GAAG,MAAM,CAAC,MAAM,GAAG,SAAS,uBAAuB,OAAO,CAAC,QAAQ,iBAAiB,CAAC;QACrG,MAAM,UAAU,GAAG,GAAG,MAAM,CAAC,MAAM,sBAAsB,CAAC;QAC1D,MAAM,MAAM,GAAG,KAAK,EAAE,OAAuB,EAAiB,EAAE;YAC9D,OAAO,CAAC,EAAE,CAAC,UAAU,EAAE,CAAC,QAAQ,EAAE,EAAE;gBAClC,IAAI,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,IAAI,QAAQ,CAAC,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;oBACjF,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,EAAE,CAAC;oBACnC,aAAa,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,OAAO,CAAC,YAAY,EAAE,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;oBAC3F,MAAM,KAAK,GAAG,kBAAkB,CAAC,OAAO,EAAE,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC;oBAC1D,aAAa,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,IAAI,QAAQ,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,yBAAyB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACpI,CAAC;YACH,CAAC,CAAC,CAAC;YACH,MAAM,OAAO,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,MAAM,EAAE,EAAE;gBAC5C,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;gBAAC,aAAa,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC;gBAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YAC5F,CAAC,CAAC,CAAC;YACH,MAAM,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;gBAC1C,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC;gBAChC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;gBAC1B,IAAI,GAAG,KAAK,YAAY,EAAE,CAAC;oBACzB,MAAM,KAAK,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,iBAAiB,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,CAAC;gBAC/E,CAAC;qBAAM,IAAI,GAAG,KAAK,UAAU,EAAE,CAAC;oBAC9B,MAAM,KAAK,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,WAAW,EAAE,IAAI,EAClD,wFAAwF;8BACtF,oEAAoE,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI;8BACtG,wFAAwF;qBAC3F,CAAC,CAAC;gBACL,CAAC;qBAAM,IAAI,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC;oBACjD,MAAM,KAAK,CAAC,QAAQ,EAAE,CAAC;gBACzB,CAAC;qBAAM,CAAC;oBACN,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;oBAChB,aAAa,CAAC,GAAG,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC;oBAC7D,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,EAAE,KAAK,KAAK,IAAI,aAAa,CAAC,GAAG,CAAC;wBAAE,MAAM,KAAK,CAAC,QAAQ,EAAE,CAAC;;wBACrG,MAAM,KAAK,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;gBAC5C,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC,CAAC;QACF,MAAM,aAAa,GAAG,CAAC,OAAwB,EAAmB,EAAE;YAClE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,aAAa,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;YACzG,OAAO,OAAO,CAAC;QACjB,CAAC,CAAC;QACF,IAAI,CAAC;YACH,MAAM,YAAY,GAAG,MAAM,gBAAgB,CAAC;gBAC1C,GAAG,EAAE,UAAU,EAAE,qBAAqB,EAAE,GAAG,MAAM,CAAC,MAAM,GAAG,SAAS,YAAY;gBAChF,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,gBAAgB,CAAC;gBAChE,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,aAAa,CAAC;gBAC1D,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,MAAM;gBACpC,gBAAgB,EAAE,yBAAyB;gBAC3C,MAAM,EAAE,iBAAiB,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC;gBAC/C,GAAG,CAAC,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,oBAAoB,CAAC,OAAO,CAAC,WAAW,IAAI,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC9G,MAAM,EAAE,mBAAmB,EAAE,IAAI;gBACjC,WAAW,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;oBAC3B,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;wBACrB,OAAO,CAAC,GAAG,CAAC,WAAW,OAAO,CAAC,QAAQ,mBAAmB,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;wBACnF,MAAM,eAAe,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;oBACjF,CAAC;oBACD,IAAI,OAAO,CAAC,IAAI,KAAK,YAAY;wBAAE,MAAM,cAAc,CAAC,KAAK,CAAC,CAAC;gBACjE,CAAC;aACF,CAAC,CAAC;YACH,MAAM,SAAS,GAAG,YAAY,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;gBAC3D,MAAM,KAAK,GAAG,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC/C,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACjC,CAAC,CAAC,CAAC;YACH,MAAM,MAAM,GAAG,iBAAiB,CAAC,YAAY,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;YAC9F,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;gBACrE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,uEAAuE,CAAC,CAAC;YAChG,CAAC;YACD,IAAI,OAAO,CAAC,IAAI,KAAK,YAAY,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACnE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,uDAAuD,CAAC,CAAC;YAChF,CAAC;YACD,MAAM,CAAC,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC;YACzC,OAAO,aAAa,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,GAAG,MAAM,CAAC,EAAE,aAAa,EAAE,CAAC,GAAG,aAAa,CAAC,EAAE,SAAS,EAAE,gBAAgB,EAAE,CAAC,GAAG,gBAAgB,CAAC,EAAE,CAAC,CAAC;QAC/I,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,aAAa,CAAC;gBACnB,MAAM,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE;gBACvG,MAAM,EAAE,CAAC,GAAG,MAAM,CAAC,EAAE,aAAa,EAAE,CAAC,GAAG,aAAa,CAAC,EAAE,SAAS,EAAE,EAAE;gBACrE,gBAAgB,EAAE,CAAC,GAAG,gBAAgB,CAAC;aACxC,CAAC,CAAC;QACL,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC;gBAAC,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,eAAe,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;YAAC,CAAC;oBAC1H,CAAC;gBAAC,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;YAAC,CAAC;QACnC,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/poki/handoff.d.ts

@@ -0,0 +1,22 @@
+import type { PokiServiceRisk } from './source-diagnostics.js';
+interface PokiHandoff {
+    zipPath: string;
+    payloadDir: string;
+    manifestPath: string;
+    checksDir: string;
+    sha256: string;
+    engineVersion: string;
+    cliVersion: string;
+    zipBytes: number;
+    unpackedBytes: number;
+    builtAt: string;
+    playtest: {
+        file: string;
+        sha256: string;
+    } | null;
+    serviceRisks: PokiServiceRisk[];
+    warnings: string[];
+}
+/** Generated separately from UPLOAD-HANDOFF.md so re-export never overwrites manual QA notes. */
+export declare function renderPokiHandoff(result: PokiHandoff): string;
+export {};

package/dist/poki/handoff.js

@@ -0,0 +1,56 @@
+/** Generated separately from UPLOAD-HANDOFF.md so re-export never overwrites manual QA notes. */
+export function renderPokiHandoff(result) {
+    return `# Poki export handoff
+
+Export complete; upload pending. This command did not upload or release a Poki version.
+
+- Built: ${result.builtAt}
+- Engine: ${result.engineVersion}
+- CLI: ${result.cliVersion}
+- ZIP: ${JSON.stringify(result.zipPath)}
+- ZIP SHA-256: ${result.sha256}
+- Upload directory: ${JSON.stringify(result.payloadDir)}
+- Manifest: ${JSON.stringify(result.manifestPath)}
+- Diagnostics: ${JSON.stringify(result.checksDir)}
+- Compressed: ${result.zipBytes} bytes; unpacked: ${result.unpackedBytes} bytes.
+
+## What was checked
+
+The extracted ZIP passed desktop and mobile **emulation** at root and nested iframe paths,
+with an SDK stub and a pause/ad/resume cycle. Network checks cover only the paths exercised.
+${result.playtest
+        ? `Game-specific playtest: ${JSON.stringify(result.playtest.file)} (SHA-256 ${result.playtest.sha256}).`
+        : 'No game-specific playtest was supplied. Custom menus, chapters, score submission, and later levels may be untested. Use --poki-playtest to exercise them during export.'}
+
+Real SDK/Inspector QA, physical-phone QA, upload, moderation, and public release remain unverified.
+
+## External-service review
+
+${result.serviceRisks.length > 0
+        ? result.serviceRisks.map((risk) => `- ${risk.file}: ${risk.api}() may use an external service.`).join('\n')
+        : 'No known Bitmagic service calls were found by the source scan. This is not proof that the game has no external dependencies.'}
+
+Exercise an actual session, chapter transitions, end screens, and leaderboards in Inspector.
+Resolve blocked services with the creator: use an agreed offline design or seek Poki approval.
+Do not silently remove features or claim that no external resources are used from a smoke pass.
+
+## Upload and real-device QA
+
+When an upload is requested, use the [official Poki CLI](https://github.com/poki/poki-cli).
+Read its upload help and supply the Poki UUID and only the upload directory above.
+Preserve the validated assets by disabling image recompression; keep public release disabled
+unless requested. Initial login opens the system browser, so arrange that browser handoff first.
+
+Check the returned version ID, not only the uploader's exit code. Record it and check processing status before retrying an apparently missing
+upload. Ready, moderation approval, and public release are separate states.
+
+Test the real SDK using [Poki Inspector](https://developers.poki.com/guide/inspector).
+Open the payload folder, or use the uploaded version's Inspector link. Check folder-selection
+permissions before browser automation; if unavailable, use a manual selection or an already
+authorized hosted upload. An HTTP 200 from a local server does not prove its iframe loaded.
+Inspector Mobile mode requires a connected phone via QR; emulation is not physical-device QA.
+
+Keep observed upload/QA results in a separate UPLOAD-HANDOFF.md; this file is regenerated on export.
+${result.warnings.length > 0 ? '\n## Export warnings\n\n' + result.warnings.map((warning) => `- ${warning}`).join('\n') + '\n' : ''}`;
+}
+//# sourceMappingURL=handoff.js.map

package/dist/poki/handoff.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"handoff.js","sourceRoot":"","sources":["../../src/poki/handoff.ts"],"names":[],"mappings":"AAkBA,iGAAiG;AACjG,MAAM,UAAU,iBAAiB,CAAC,MAAmB;IACnD,OAAO;;;;WAIE,MAAM,CAAC,OAAO;YACb,MAAM,CAAC,aAAa;SACvB,MAAM,CAAC,UAAU;SACjB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC;iBACtB,MAAM,CAAC,MAAM;sBACR,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,UAAU,CAAC;cACzC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,YAAY,CAAC;iBAChC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC;gBACjC,MAAM,CAAC,QAAQ,qBAAqB,MAAM,CAAC,aAAa;;;;;;EAMtE,MAAM,CAAC,QAAQ;QACb,CAAC,CAAC,2BAA2B,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,aAAa,MAAM,CAAC,QAAQ,CAAC,MAAM,IAAI;QACxG,CAAC,CAAC,yKAAyK;;;;;;EAM7K,MAAM,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC;QAC5B,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,GAAG,iCAAiC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;QAC5G,CAAC,CAAC,8HAA8H;;;;;;;;;;;;;;;;;;;;;;;EAuBlI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,0BAA0B,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,KAAK,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;AACtI,CAAC"}

package/dist/poki/playtest.d.ts

@@ -0,0 +1,15 @@
+import type { Frame, Page } from 'playwright-core';
+export interface PokiPlaytestContext {
+    frame: Page | Frame;
+    platform: 'desktop' | 'mobile';
+}
+export interface PokiPlaytest {
+    file: string;
+    sha256: string;
+    run: (context: PokiPlaytestContext) => Promise<void>;
+}
+export declare function playtestHash(file: string): string;
+/** Explicit opt-in: game-specific UI actions run against every staged/extracted package check. */
+export declare function loadPokiPlaytest(file: string | undefined, cwd: string): Promise<PokiPlaytest | undefined>;
+/** A stalled selector must not hang an export. Closing the browser cancels outstanding actions. */
+export declare function runPokiPlaytest(playtest: PokiPlaytest, context: PokiPlaytestContext, timeoutMs?: number): Promise<void>;

package/dist/poki/playtest.js

@@ -0,0 +1,45 @@
+import * as fs from 'fs';
+import * as path from 'path';
+import { createHash } from 'crypto';
+import { pathToFileURL } from 'url';
+import { CliError } from '../errors.js';
+export function playtestHash(file) {
+    return createHash('sha256').update(fs.readFileSync(file)).digest('hex');
+}
+/** Explicit opt-in: game-specific UI actions run against every staged/extracted package check. */
+export async function loadPokiPlaytest(file, cwd) {
+    if (file === undefined)
+        return undefined;
+    const resolved = path.resolve(cwd, file);
+    if (path.extname(resolved) !== '.mjs' || !fs.statSync(resolved, { throwIfNoEntry: false })?.isFile()) {
+        throw new CliError('--poki-playtest must name an existing .mjs file exporting a default async function.', 4);
+    }
+    const sha256 = playtestHash(resolved);
+    let loaded;
+    try {
+        loaded = await import(`${pathToFileURL(resolved).href}?sha256=${sha256}`);
+    }
+    catch (error) {
+        throw new CliError(`Cannot load Poki playtest ${resolved}: ${error instanceof Error ? error.message : String(error)}`, 4);
+    }
+    const run = loaded.default;
+    if (typeof run !== 'function')
+        throw new CliError('The Poki playtest must export a default async function receiving { frame, platform }.', 4);
+    return { file: resolved, sha256, run: async (context) => { await run(context); } };
+}
+/** A stalled selector must not hang an export. Closing the browser cancels outstanding actions. */
+export async function runPokiPlaytest(playtest, context, timeoutMs = 30_000) {
+    let timer;
+    try {
+        await Promise.race([
+            Promise.resolve().then(() => playtest.run(context)),
+            new Promise((_, reject) => {
+                timer = setTimeout(() => reject(new Error(`Poki playtest timed out after ${timeoutMs} ms: ${playtest.file}`)), timeoutMs);
+            }),
+        ]);
+    }
+    finally {
+        clearTimeout(timer);
+    }
+}
+//# sourceMappingURL=playtest.js.map

package/dist/poki/playtest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"playtest.js","sourceRoot":"","sources":["../../src/poki/playtest.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AACpC,OAAO,EAAE,aAAa,EAAE,MAAM,KAAK,CAAC;AAEpC,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAaxC,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1E,CAAC;AAED,kGAAkG;AAClG,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,IAAwB,EAAE,GAAW;IAC1E,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACzC,IAAI,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,MAAM,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,CAAC;QACrG,MAAM,IAAI,QAAQ,CAAC,qFAAqF,EAAE,CAAC,CAAC,CAAC;IAC/G,CAAC;IACD,MAAM,MAAM,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;IACtC,IAAI,MAA6B,CAAC;IAClC,IAAI,CAAC;QAAC,MAAM,GAAG,MAAM,MAAM,CAAC,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC,IAAI,WAAW,MAAM,EAAE,CAA0B,CAAC;IAAC,CAAC;IAC3G,OAAO,KAAK,EAAE,CAAC;QAAC,MAAM,IAAI,QAAQ,CAAC,6BAA6B,QAAQ,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IAAC,CAAC;IAC5I,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC;IAC3B,IAAI,OAAO,GAAG,KAAK,UAAU;QAAE,MAAM,IAAI,QAAQ,CAAC,uFAAuF,EAAE,CAAC,CAAC,CAAC;IAC9I,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACrF,CAAC;AAED,mGAAmG;AACnG,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,QAAsB,EAAE,OAA4B,EAAE,SAAS,GAAG,MAAM;IAC5G,IAAI,KAAgD,CAAC;IACrD,IAAI,CAAC;QACH,MAAM,OAAO,CAAC,IAAI,CAAC;YACjB,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACnD,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;gBAC/B,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,iCAAiC,SAAS,QAAQ,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;YAC5H,CAAC,CAAC;SACH,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QAAC,YAAY,CAAC,KAAK,CAAC,CAAC;IAAC,CAAC;AACpC,CAAC"}

package/dist/poki/publish.d.ts

@@ -0,0 +1,23 @@
+import { type Output } from '../output.js';
+import { runBuild } from '../publish/bundle.js';
+import { collectUrls } from '../package/collect-urls.js';
+import type { PokiCheckOptions, PokiCheckResult } from './check.js';
+export interface PokiPublishArgs {
+    name?: string;
+    output?: string;
+    'poki-playtest'?: string;
+    force?: boolean;
+    json?: boolean;
+}
+export interface PokiPublishDeps {
+    startDir?: string;
+    output?: Output;
+    fetch: typeof globalThis.fetch;
+    build: typeof runBuild;
+    collect: typeof collectUrls;
+    check: (options: PokiCheckOptions) => Promise<PokiCheckResult>;
+}
+/** Capability metadata lives in the engine tarball, including locally built engines. */
+export declare function requirePokiCapability(root: string): void;
+export declare function pokiOutputPath(root: string, output: string | undefined, cwd: string): string;
+export declare function runPokiPublish(args: PokiPublishArgs, deps?: PokiPublishDeps): Promise<void>;