@dreamboard-games/cli 0.1.30-alpha.12 → 0.1.30-alpha.13

package/dist/internal.js

@@ -1,29 +1,34 @@
 #!/usr/bin/env node
 import {
   CONFIG_FLAG_ARGS,
-  applyWorkspaceCodegen,
   configureClient,
   configurePlaywrightBrowsersPath,
   ensureReducerNativeTestingFiles,
   findCompiledResultsForAuthoringState,
-  loadManifest,
-  loadProjectConfig,
   parseConfigFlags,
   requireAuth,
   resolveConfig,
   resolveProjectContext,
+  shortHash
+} from "./chunk-EV7Q6BIF.js";
+import {
+  applyWorkspaceCodegen,
+  loadManifest,
+  loadProjectConfig,
+  materializeWorkspaceProject,
   setLatestCompileAttempt,
-  shortHash,
   updateProjectState,
   writeSnapshot
-} from "./chunk-P5TITCD3.js";
+} from "./chunk-GS6A7T53.js";
 import {
-  ENVIRONMENT_CONFIGS,
   getStoredSession,
-  loadGlobalConfig,
+  loadGlobalConfig
+} from "./chunk-AVOAT522.js";
+import {
+  ENVIRONMENT_CONFIGS,
   readJsonFile,
   writeJsonFile
-} from "./chunk-GXM7RRZJ.js";
+} from "./chunk-FFO2IJL3.js";
 import "./chunk-2H7UOFLK.js";
 export {
   CONFIG_FLAG_ARGS,
@@ -37,6 +42,7 @@ export {
   loadGlobalConfig,
   loadManifest,
   loadProjectConfig,
+  materializeWorkspaceProject,
   parseConfigFlags,
   readJsonFile,
   requireAuth,

package/dist/{keychain-backend-JHTXAKWC.js → keychain-backend-47LZ5IX5.js}

@@ -29,11 +29,14 @@ function parsePayload(raw) {
   if (trimmed.length === 0) return null;
   try {
     const parsed = JSON.parse(trimmed);
-    if (!parsed.accessToken && !parsed.refreshToken) return null;
+    const accessToken = parsed.clerkAccessToken ?? parsed.accessToken;
+    if (!accessToken && !parsed.refreshToken) return null;
     return {
-      accessToken: parsed.accessToken || void 0,
+      accessToken: accessToken || void 0,
       refreshToken: parsed.refreshToken || void 0,
-      tokenExpiresAt: parsed.tokenExpiresAt || void 0,
+      tokenExpiresAt: parsed.clerkAccessExpiresAt || parsed.tokenExpiresAt || void 0,
+      dreamboardApiToken: parsed.dreamboardApiToken || void 0,
+      dreamboardApiExpiresAt: parsed.dreamboardApiExpiresAt || void 0,
       clerkOAuthIssuer: parsed.clerkOAuthIssuer || void 0,
       clerkOAuthClientId: parsed.clerkOAuthClientId || void 0,
       clerkOAuthTokenUrl: parsed.clerkOAuthTokenUrl || void 0,
@@ -50,9 +53,11 @@ function writeFull(entry, creds) {
     );
   }
   const payload = {
-    accessToken: creds.accessToken,
+    clerkAccessToken: creds.accessToken,
     refreshToken: creds.refreshToken,
-    tokenExpiresAt: creds.tokenExpiresAt,
+    clerkAccessExpiresAt: creds.tokenExpiresAt,
+    dreamboardApiToken: creds.dreamboardApiToken,
+    dreamboardApiExpiresAt: creds.dreamboardApiExpiresAt,
     clerkOAuthIssuer: creds.clerkOAuthIssuer,
     clerkOAuthClientId: creds.clerkOAuthClientId,
     clerkOAuthTokenUrl: creds.clerkOAuthTokenUrl,
@@ -132,4 +137,4 @@ export {
   _setKeyringModuleForTests,
   tryKeychainBackend
 };
-//# sourceMappingURL=keychain-backend-JHTXAKWC.js.map
+//# sourceMappingURL=keychain-backend-47LZ5IX5.js.map

package/dist/keychain-backend-47LZ5IX5.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/config/keychain-backend.ts"],"sourcesContent":["/**\n * OS keychain-backed `CredentialBackend` built on top of `@napi-rs/keyring`.\n *\n * Keychain is the required storage backend for published builds. Development\n * builds can still opt in with `credentialBackend: \"keychain\"` in\n * `~/.dreamboard/config.json` (see `credential-store.ts` for the resolver).\n * When enabled, it gives us:\n * - A refresh token encrypted at rest by the OS (Keychain on macOS,\n *   Credential Vault on Windows, Secret Service on Linux).\n * - Protection against other processes running as the same user tailing\n *   `~/.dreamboard/auth.json` to scrape the token.\n *\n * This module is loaded optionally: `@napi-rs/keyring` is declared as an\n * `optionalDependencies` entry. Published builds fail closed when the native\n * binary or OS keyring is unavailable; development builds may still use the\n * file backend.\n *\n * One-time migration: when the active backend is keychain and `auth.json` still\n * has tokens, `credential-store.ts` copies them into the keychain, verifies the\n * keychain read, and deletes the file. This is the only path that intentionally\n * mutates both backends.\n */\n\nimport type {\n  CredentialBackend,\n  Credentials,\n  StoredSessionSnapshot,\n} from \"./credential-store.js\";\n\n/** Keychain service id. Shared across all Dreamboard CLI builds. */\nconst KEYCHAIN_SERVICE = \"dreamboard-cli\";\n/**\n * Keychain account id. The `user@host` shape is conventional but we keep\n * it fixed for now because the CLI only cares about \"the session for this\n * OS user\", not per-process sessions.\n */\nconst KEYCHAIN_ACCOUNT = \"session\";\n\ntype EntryInstance = {\n  setPassword(value: string): void;\n  getPassword(): string | null | undefined;\n  deletePassword(): boolean;\n};\n\ntype KeyringModule = {\n  Entry: new (service: string, account: string) => EntryInstance;\n};\n\nlet cachedModule: KeyringModule | null | undefined;\n\nasync function loadKeyringModule(): Promise<KeyringModule | null> {\n  if (cachedModule !== undefined) return cachedModule;\n  try {\n    // `@napi-rs/keyring` is an optional dependency. If the native binary is\n    // missing on this platform the dynamic import throws; resolver policy in\n    // credential-store decides whether that is fatal.\n    const mod = (await import(\"@napi-rs/keyring\")) as unknown as KeyringModule;\n    cachedModule = mod;\n  } catch {\n    cachedModule = null;\n  }\n  return cachedModule;\n}\n\nfunction keychainProbe(entry: EntryInstance): boolean {\n  // Some platforms have the module installed but no accessible keyring\n  // (e.g. headless Linux without DBus). Touch getPassword to verify we\n  // can talk to the service without side effects.\n  try {\n    entry.getPassword();\n    return true;\n  } catch {\n    return false;\n  }\n}\n\ntype KeychainPayload = {\n  clerkAccessToken?: string;\n  accessToken?: string;\n  refreshToken?: string;\n  clerkAccessExpiresAt?: string;\n  tokenExpiresAt?: string;\n  dreamboardApiToken?: string;\n  dreamboardApiExpiresAt?: string;\n  clerkOAuthIssuer?: string;\n  clerkOAuthClientId?: string;\n  clerkOAuthTokenUrl?: string;\n  environment?: string;\n};\n\nfunction parsePayload(\n  raw: string | null | undefined,\n): StoredSessionSnapshot | null {\n  if (raw === null || raw === undefined) return null;\n  const trimmed = raw.trim();\n  if (trimmed.length === 0) return null;\n  try {\n    const parsed = JSON.parse(trimmed) as KeychainPayload;\n    const accessToken = parsed.clerkAccessToken ?? parsed.accessToken;\n    if (!accessToken && !parsed.refreshToken) return null;\n    return {\n      accessToken: accessToken || undefined,\n      refreshToken: parsed.refreshToken || undefined,\n      tokenExpiresAt:\n        parsed.clerkAccessExpiresAt || parsed.tokenExpiresAt || undefined,\n      dreamboardApiToken: parsed.dreamboardApiToken || undefined,\n      dreamboardApiExpiresAt: parsed.dreamboardApiExpiresAt || undefined,\n      clerkOAuthIssuer: parsed.clerkOAuthIssuer || undefined,\n      clerkOAuthClientId: parsed.clerkOAuthClientId || undefined,\n      clerkOAuthTokenUrl: parsed.clerkOAuthTokenUrl || undefined,\n      environment: parsed.environment || undefined,\n    };\n  } catch {\n    return null;\n  }\n}\n\nfunction writeFull(entry: EntryInstance, creds: Credentials): void {\n  if (!creds.accessToken || !creds.refreshToken) {\n    throw new Error(\n      \"Refusing to persist credentials with an empty accessToken or refreshToken.\",\n    );\n  }\n  const payload: KeychainPayload = {\n    clerkAccessToken: creds.accessToken,\n    refreshToken: creds.refreshToken,\n    clerkAccessExpiresAt: creds.tokenExpiresAt,\n    dreamboardApiToken: creds.dreamboardApiToken,\n    dreamboardApiExpiresAt: creds.dreamboardApiExpiresAt,\n    clerkOAuthIssuer: creds.clerkOAuthIssuer,\n    clerkOAuthClientId: creds.clerkOAuthClientId,\n    clerkOAuthTokenUrl: creds.clerkOAuthTokenUrl,\n    environment: creds.environment,\n  };\n  entry.setPassword(JSON.stringify(payload));\n}\n\nfunction writeAccessOnly(entry: EntryInstance, accessToken: string): void {\n  if (!accessToken) {\n    throw new Error(\"Refusing to persist an empty access token.\");\n  }\n  const payload: KeychainPayload = { accessToken };\n  entry.setPassword(JSON.stringify(payload));\n}\n\nfunction clear(entry: EntryInstance): void {\n  try {\n    entry.deletePassword();\n  } catch {\n    // keyring-rs throws when the entry does not exist. That is fine -\n    // `clearCredentials` contracts as idempotent.\n  }\n}\n\nexport type KeychainAvailability =\n  | { available: true; backend: CredentialBackend }\n  | { available: false; reason: string };\n\n/**\n * Attempt to construct a keychain-backed `CredentialBackend`. Returns an\n * `available: false` result (with a reason) if the native module, the\n * OS keyring, or the probe fails.\n */\nexport async function tryKeychainBackend(): Promise<KeychainAvailability> {\n  const mod = await loadKeyringModule();\n  if (!mod) {\n    return {\n      available: false,\n      reason: \"@napi-rs/keyring is not installed for this platform\",\n    };\n  }\n\n  let entry: EntryInstance;\n  try {\n    entry = new mod.Entry(KEYCHAIN_SERVICE, KEYCHAIN_ACCOUNT);\n  } catch (err) {\n    return {\n      available: false,\n      reason: `Failed to construct keyring entry: ${String((err as Error).message ?? err)}`,\n    };\n  }\n\n  if (!keychainProbe(entry)) {\n    return {\n      available: false,\n      reason: \"OS keyring is not accessible from this process\",\n    };\n  }\n\n  const backend: CredentialBackend = {\n    name: \"keychain\",\n    async read() {\n      try {\n        return parsePayload(entry.getPassword());\n      } catch (err) {\n        const message = String((err as Error).message ?? err);\n        // Transient keychain access errors (e.g. Touch ID prompt\n        // cancelled) should not surface as \"session wiped\". Treat the\n        // unreadable state as \"no session\" so the caller can fall back\n        // to prompting for login.\n        if (/no matching entry|not found/i.test(message)) {\n          return null;\n        }\n        throw err;\n      }\n    },\n    async writeFull(creds) {\n      writeFull(entry, creds);\n    },\n    async writeAccessOnly(accessToken) {\n      writeAccessOnly(entry, accessToken);\n    },\n    async clear() {\n      clear(entry);\n    },\n  };\n  return { available: true, backend };\n}\n\n/**\n * Test-only escape hatch so unit tests can install a fake keyring module\n * without going through the dynamic import cache.\n */\nexport function _setKeyringModuleForTests(mod: KeyringModule | null): void {\n  cachedModule = mod;\n}\n\nexport function _resetKeyringModuleForTests(): void {\n  cachedModule = undefined;\n}\n"],"mappings":";;;;AA8BA,IAAM,mBAAmB;AAMzB,IAAM,mBAAmB;AAYzB,IAAI;AAEJ,eAAe,oBAAmD;AAChE,MAAI,iBAAiB,OAAW,QAAO;AACvC,MAAI;AAIF,UAAM,MAAO,MAAM,OAAO,kBAAkB;AAC5C,mBAAe;AAAA,EACjB,QAAQ;AACN,mBAAe;AAAA,EACjB;AACA,SAAO;AACT;AAEA,SAAS,cAAc,OAA+B;AAIpD,MAAI;AACF,UAAM,YAAY;AAClB,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAgBA,SAAS,aACP,KAC8B;AAC9B,MAAI,QAAQ,QAAQ,QAAQ,OAAW,QAAO;AAC9C,QAAM,UAAU,IAAI,KAAK;AACzB,MAAI,QAAQ,WAAW,EAAG,QAAO;AACjC,MAAI;AACF,UAAM,SAAS,KAAK,MAAM,OAAO;AACjC,UAAM,cAAc,OAAO,oBAAoB,OAAO;AACtD,QAAI,CAAC,eAAe,CAAC,OAAO,aAAc,QAAO;AACjD,WAAO;AAAA,MACL,aAAa,eAAe;AAAA,MAC5B,cAAc,OAAO,gBAAgB;AAAA,MACrC,gBACE,OAAO,wBAAwB,OAAO,kBAAkB;AAAA,MAC1D,oBAAoB,OAAO,sBAAsB;AAAA,MACjD,wBAAwB,OAAO,0BAA0B;AAAA,MACzD,kBAAkB,OAAO,oBAAoB;AAAA,MAC7C,oBAAoB,OAAO,sBAAsB;AAAA,MACjD,oBAAoB,OAAO,sBAAsB;AAAA,MACjD,aAAa,OAAO,eAAe;AAAA,IACrC;AAAA,EACF,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,UAAU,OAAsB,OAA0B;AACjE,MAAI,CAAC,MAAM,eAAe,CAAC,MAAM,cAAc;AAC7C,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AACA,QAAM,UAA2B;AAAA,IAC/B,kBAAkB,MAAM;AAAA,IACxB,cAAc,MAAM;AAAA,IACpB,sBAAsB,MAAM;AAAA,IAC5B,oBAAoB,MAAM;AAAA,IAC1B,wBAAwB,MAAM;AAAA,IAC9B,kBAAkB,MAAM;AAAA,IACxB,oBAAoB,MAAM;AAAA,IAC1B,oBAAoB,MAAM;AAAA,IAC1B,aAAa,MAAM;AAAA,EACrB;AACA,QAAM,YAAY,KAAK,UAAU,OAAO,CAAC;AAC3C;AAEA,SAAS,gBAAgB,OAAsB,aAA2B;AACxE,MAAI,CAAC,aAAa;AAChB,UAAM,IAAI,MAAM,4CAA4C;AAAA,EAC9D;AACA,QAAM,UAA2B,EAAE,YAAY;AAC/C,QAAM,YAAY,KAAK,UAAU,OAAO,CAAC;AAC3C;AAEA,SAAS,MAAM,OAA4B;AACzC,MAAI;AACF,UAAM,eAAe;AAAA,EACvB,QAAQ;AAAA,EAGR;AACF;AAWA,eAAsB,qBAAoD;AACxE,QAAM,MAAM,MAAM,kBAAkB;AACpC,MAAI,CAAC,KAAK;AACR,WAAO;AAAA,MACL,WAAW;AAAA,MACX,QAAQ;AAAA,IACV;AAAA,EACF;AAEA,MAAI;AACJ,MAAI;AACF,YAAQ,IAAI,IAAI,MAAM,kBAAkB,gBAAgB;AAAA,EAC1D,SAAS,KAAK;AACZ,WAAO;AAAA,MACL,WAAW;AAAA,MACX,QAAQ,sCAAsC,OAAQ,IAAc,WAAW,GAAG,CAAC;AAAA,IACrF;AAAA,EACF;AAEA,MAAI,CAAC,cAAc,KAAK,GAAG;AACzB,WAAO;AAAA,MACL,WAAW;AAAA,MACX,QAAQ;AAAA,IACV;AAAA,EACF;AAEA,QAAM,UAA6B;AAAA,IACjC,MAAM;AAAA,IACN,MAAM,OAAO;AACX,UAAI;AACF,eAAO,aAAa,MAAM,YAAY,CAAC;AAAA,MACzC,SAAS,KAAK;AACZ,cAAM,UAAU,OAAQ,IAAc,WAAW,GAAG;AAKpD,YAAI,+BAA+B,KAAK,OAAO,GAAG;AAChD,iBAAO;AAAA,QACT;AACA,cAAM;AAAA,MACR;AAAA,IACF;AAAA,IACA,MAAM,UAAU,OAAO;AACrB,gBAAU,OAAO,KAAK;AAAA,IACxB;AAAA,IACA,MAAM,gBAAgB,aAAa;AACjC,sBAAgB,OAAO,WAAW;AAAA,IACpC;AAAA,IACA,MAAM,QAAQ;AACZ,YAAM,KAAK;AAAA,IACb;AAAA,EACF;AACA,SAAO,EAAE,WAAW,MAAM,QAAQ;AACpC;AAMO,SAAS,0BAA0B,KAAiC;AACzE,iBAAe;AACjB;AAEO,SAAS,8BAAoC;AAClD,iBAAe;AACjB;","names":[]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dreamboard-games/cli",
-  "version": "0.1.30-alpha.12",
+  "version": "0.1.30-alpha.13",
   "description": "Design board games with AI and turn ideas into playable digital prototypes.",
   "type": "module",
   "bin": {
@@ -8,6 +8,10 @@
   },
   "exports": {
     ".": "./dist/index.js",
+    "./authoring-compatibility-internal": {
+      "types": "./dist/authoring-compatibility-internal.d.ts",
+      "default": "./dist/authoring-compatibility-internal.js"
+    },
     "./internal": {
       "types": "./dist/internal.d.ts",
       "default": "./dist/internal.js"
@@ -18,6 +22,8 @@
   "files": [
     "dist",
     "README.md",
+    "release",
+    "scaffold",
     "skills"
   ],
   "keywords": [
@@ -34,29 +40,13 @@
     "access": "public"
   },
   "dependencies": {
-    "@dreamboard-games/api-client": "0.3.0-alpha.3",
+    "@dreamboard-games/api-client": "0.3.0-alpha.4",
     "@dreamboard-games/gameplay-authority-client": "0.1.0-alpha.1",
-    "@dreamboard-games/sdk": "0.4.0-alpha.0",
-    "@dreamboard-games/ui-host-runtime": "0.1.0-alpha.2",
-    "@tailwindcss/postcss": "^4.3.0",
-    "@vitejs/plugin-react": "^4.7.0",
     "citty": "^0.2.2",
-    "clsx": "^2.1.1",
     "consola": "^3.4.2",
     "esbuild": "^0.25.12",
-    "lucide-react": "^1.17.0",
     "picocolors": "^1.1.1",
-    "postcss": "^8.5.15",
-    "react": "^19.2.7",
-    "react-dom": "^19.2.7",
-    "sonner": "^2.0.7",
-    "tailwind-merge": "^3.6.0",
-    "tailwindcss": "^4.3.0",
-    "tw-animate-css": "^1.4.0",
-    "vaul": "^1.1.2",
-    "vite": "^5.4.21",
-    "zod": "4.4.3",
-    "zustand": "^5.0.14"
+    "zod": "4.4.3"
   },
   "optionalDependencies": {
     "@napi-rs/keyring": "^1.3.0"

package/release/authoring-release-set.json

@@ -0,0 +1,38 @@
+{
+  "schemaVersion": 1,
+  "channel": "public",
+  "packages": {
+    "cli": {
+      "name": "@dreamboard-games/cli",
+      "version": "0.1.30-alpha.13"
+    },
+    "sdk": {
+      "name": "@dreamboard-games/sdk",
+      "version": "0.4.0-alpha.1"
+    },
+    "apiClient": {
+      "name": "@dreamboard-games/api-client",
+      "version": "0.3.0-alpha.4"
+    },
+    "devHost": {
+      "name": "@dreamboard-games/dev-host",
+      "version": "0.1.30-alpha.13"
+    }
+  },
+  "protocols": {
+    "authoringAdapter": 1,
+    "devHost": 1,
+    "verifier": 1
+  },
+  "schemas": {
+    "scaffold": 2,
+    "manifest": 2,
+    "generatedArtifacts": 1
+  },
+  "registry": {
+    "kind": "public-npm",
+    "portable": true
+  },
+  "packageManager": "pnpm@10.4.1",
+  "releaseSetId": "sha256:e342f47ce36c53d58b4049cc68db5a51f94e940ee1ed39fedd723c837e52822b"
+}

package/skills/dreamboard/references/manifest-authoring.md

@@ -121,14 +121,15 @@ Use `home` on cards, piece seeds, and die seeds to place authored inventory.
 
 ## `cardSets`
 
-`cardSets` define the cards that exist. They do not place cards into zones by themselves.
+`cardSets` define the cards that exist. `defaultHome` or per-card `home` places
+authored inventory into zones.
 
 ### `CardSetDefinition`
 
 | Variant | Required fields | Notes |
 | --- | --- | --- |
-| `type: "manual"` | `id`, `name`, `cardSchema`, `cards` | Define your own cards |
-| `type: "preset"` | `id`, `name` | Use a built-in set |
+| `type: "manual"` | `id`, `name`, `cardSchema`, `cards`, `defaultHome` | Define your own cards |
+| `type: "preset"` | `id`, `name`, `defaultHome` | Use a built-in set |
 
 Current supported preset ID: `standard_52_deck`.
 
@@ -153,6 +154,10 @@ Current supported preset ID: `standard_52_deck`.
       "type": "manual",
       "id": "project-cards",
       "name": "Project cards",
+      "defaultHome": {
+        "type": "zone",
+        "zoneId": "project-deck"
+      },
       "cardSchema": {
         "properties": {
           "cost": { "type": "integer" },
@@ -181,6 +186,9 @@ Current supported preset ID: `standard_52_deck`.
 ## `zones`
 
 Use `zones` for shared piles, per-player hands, pools, bags, and other table-level containers.
+`allowedCardSetIds` controls destination compatibility. `defaultHome` and
+per-card `home` control initial placement. Use reducer setup for dynamic
+distribution and shuffle.
 
 | Field | Required | Notes |
 | --- | --- | --- |