@mpgd/cli 0.11.0 → 0.12.0

package/dist/index.js

@@ -18,13 +18,18 @@ const packageRoot = resolvePackageRoot(sourceDir);
 const detectedKitRoot = resolveDefaultKitRoot();
 const gameTemplateDir = path.resolve(packageRoot, 'templates/phaser-game');
 const cliVersion = readPackageVersion(packageRoot);
-const recommendedMatrixTargets = 'web,microsoft-store,ait,reddit';
+const recommendedMatrixTargets = 'web,microsoft-store,verse8,ait,reddit';
 const defaultDependencyVersion = `^${cliVersion}`;
+const standaloneTemplateDependencyVersionFallbacks = {
+    // Initial-published independently from the CLI release line; package metadata wins once concrete.
+    '@mpgd/adapter-verse8': '^0.1.0',
+};
 const mpgdTemplateDependencyPackages = [
     { name: '@mpgd/adapter-ait', packageDir: 'adapters/ait' },
     { name: '@mpgd/adapter-browser', packageDir: 'adapters/browser' },
     { name: '@mpgd/adapter-capacitor', packageDir: 'adapters/capacitor' },
     { name: '@mpgd/adapter-devvit', packageDir: 'adapters/devvit' },
+    { name: '@mpgd/adapter-verse8', packageDir: 'adapters/verse8' },
     { name: '@mpgd/analytics', packageDir: 'packages/analytics' },
     { name: '@mpgd/bridge', packageDir: 'packages/bridge' },
     { name: '@mpgd/catalog', packageDir: 'packages/catalog' },
@@ -35,10 +40,17 @@ const mpgdTemplateDependencyPackages = [
     { name: '@mpgd/platform', packageDir: 'packages/platform' },
     { name: '@mpgd/target-config', packageDir: 'packages/target-config' },
 ];
-const recommendedMatrixTargetOrder = ['web-preview', 'microsoft-store', 'ait', 'reddit'];
+const recommendedMatrixTargetOrder = [
+    'web-preview',
+    'microsoft-store',
+    'verse8',
+    'ait',
+    'reddit',
+];
 const allMatrixTargetOrder = [
     'web-preview',
     'microsoft-store',
+    'verse8',
     'android',
     'ios',
     'ait',
@@ -50,6 +62,7 @@ const supportedBuildTargets = [
     'web-preview',
     'microsoft-store',
     'msstore',
+    'verse8',
     'android',
     'ios',
     'ait',
@@ -1256,6 +1269,7 @@ function resolveMpgdDependencyVersionReplacements(input) {
             ?? (input.workspace ? 'workspace:*' : undefined)
             ?? resolvePublishedTemplateDependencyVersion(dependency.name, packageJson)
             ?? resolveWorkspaceTemplateDependencyVersion(kitRoot, dependency.packageDir)
+            ?? standaloneTemplateDependencyVersionFallbacks[dependency.name]
             ?? defaultDependencyVersion;
         return {
             placeholder: mpgdDependencyVersionPlaceholder(dependency.name),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mpgd/cli",
-  "version": "0.11.0",
+  "version": "0.12.0",
   "description": "Gunshi CLI for mpgd-kit starter generation and target workflow orchestration.",
   "license": "MIT",
   "repository": {
@@ -49,18 +49,19 @@
     "@types/node": "^24.0.0",
     "ttsc": "0.18.4",
     "typescript": "7.0.2",
-    "@mpgd/adapter-ait": "0.4.3",
-    "@mpgd/adapter-capacitor": "0.4.3",
-    "@mpgd/adapter-devvit": "0.8.2",
-    "@mpgd/adapter-browser": "0.4.3",
-    "@mpgd/analytics": "0.3.6",
-    "@mpgd/bridge": "0.6.0",
-    "@mpgd/i18n": "0.5.2",
-    "@mpgd/catalog": "0.4.0",
-    "@mpgd/target-config": "0.7.0",
-    "@mpgd/game-services": "0.8.2",
-    "@mpgd/phaser-assets": "0.4.1",
-    "@mpgd/platform": "0.6.0"
+    "@mpgd/adapter-browser": "0.5.0",
+    "@mpgd/adapter-capacitor": "0.4.4",
+    "@mpgd/adapter-devvit": "0.8.3",
+    "@mpgd/adapter-verse8": "0.2.0",
+    "@mpgd/adapter-ait": "0.4.4",
+    "@mpgd/bridge": "0.6.1",
+    "@mpgd/catalog": "0.5.0",
+    "@mpgd/analytics": "0.3.7",
+    "@mpgd/game-services": "0.9.0",
+    "@mpgd/i18n": "0.5.3",
+    "@mpgd/target-config": "0.8.0",
+    "@mpgd/platform": "0.7.0",
+    "@mpgd/phaser-assets": "0.4.1"
   },
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",

package/templates/phaser-game/README.md

@@ -31,17 +31,17 @@ platform-specific artifacts. Keep an `mpgd-kit` checkout nearby and pass it with
 pnpm exec mpgd target build-all \
   --targets-file ./mpgd.targets.json \
   --kit-path ../mpgd-kit \
-  --targets web,microsoft-store,ait,reddit \
+  --targets web,microsoft-store,verse8,ait,reddit \
   --profile staging \
   --ait-variant wrapper
 pnpm exec mpgd target smoke-all \
   --targets-file ./mpgd.targets.json \
   --kit-path ../mpgd-kit \
-  --targets web,microsoft-store,ait,reddit
+  --targets web,microsoft-store,verse8,ait,reddit
 pnpm exec mpgd target doctor \
   --targets-file ./mpgd.targets.json \
   --kit-path ../mpgd-kit \
-  --targets web,microsoft-store,ait,reddit
+  --targets web,microsoft-store,verse8,ait,reddit
 ```
 
 When developing the kit itself, the same commands work through the repository
@@ -51,7 +51,7 @@ script:
 pnpm --dir ../mpgd-kit mpgd target build-all \
   --targets-file "$PWD/mpgd.targets.json" \
   --kit-path ../mpgd-kit \
-  --targets web,microsoft-store,ait,reddit \
+  --targets web,microsoft-store,verse8,ait,reddit \
   --profile staging \
   --ait-variant wrapper
 ```
@@ -285,7 +285,26 @@ submission.
   app; do not force activation with `skipWaiting()`. Keep the web manifest `id`
   game-specific because the cache namespace uses it to isolate apps sharing an
   origin.
-- Reddit Devvit is game-owned in `apps/target-devvit`.
+- Verse8 is a game-owned iframe web target that writes to `artifacts/verse8`.
+  The adapter verifies the host-provided auth credential and distinguishes
+  Verse8-signed accounts from self-signed guest accounts. Ads are available
+  only when placement mappings are present. VXShop stays capability-disabled
+  until the gateway receives the literal `purchaseEventAuthority:
+  'agent8-server'`, catalog product mappings, and an authenticated Agent8
+  entitlement reader. The client purchase result is always `pending`; grants
+  belong only in the reserved Agent8 `$onItemPurchased` event. Do not use
+  `VXShop.onClose`, client metadata, or a client-created transaction ID as
+  purchase evidence. Keep `@agent8/gameserver-node` in the separate Agent8
+  server project and use `@mpgd/adapter-verse8/agent8` there for the locked,
+  consume-once catalog grant. Authenticated-encrypted Agent8 cloud state is
+  available only after the gateway receives a game-owned remote storage client;
+  the starter does not install the React browser SDK, configure that client, or
+  ship server persistence secrets. Agent8 verified
+  leaderboards stay server-only and require a game-specific completion
+  verifier, so the generic platform leaderboard capability remains disabled.
+- Reddit Devvit is game-owned in `apps/target-devvit`. Its Redis-backed storage
+  bridge fails closed on identity, provider, serialization, and quota errors;
+  it never switches progress to browser `localStorage`.
 - Apps in Toss currently uses the kit reference wrapper at
   `${MPGD_KIT_PATH}/apps/target-ait` for smoke packaging. Before a real Toss
   submission, create a game-owned wrapper/config so the app name, CLI state, and

package/templates/phaser-game/agent/acceptance.md

@@ -36,5 +36,19 @@ For Microsoft Store changes, keep the first pass as a PWA/web target that uses
 the browser adapter. Add a dedicated Store commerce adapter only when wiring
 Digital Goods API and Payment Request through backend ledger verification.
 
+## Verse8 Agent8 Structured Server
+
+Keep the Agent8 server in a separate game-owned project. Its acceptance flow
+must call `createVerse8Agent8LeaderboardBoundary` with an authenticated sender
+account and a game-specific completion verifier, then cover rejected malformed
+submissions, verified recording, and account-scoped snapshot reads.
+
+Inject endpoints, persistence secrets, encryption keys, and authentication at
+runtime. Do not commit personal MCP configuration, `.env` files, credentials,
+tokens, or Agent8 authentication state to this generated game. The kit command
+`pnpm smoke:verse8-agent8-acceptance` validates the generic structured-server
+contract and generated Verse8 target surface; it does not validate a deployed
+game server or replace game-owned production evidence.
+
 Verify the first screen reports the viewport orientation policy, and treat
 locked orientation modes as soft prompts instead of unsafe WebView hard locks.

package/templates/phaser-game/agent/brief.md

@@ -20,7 +20,7 @@ pnpm check
 pnpm build
 pnpm icons:generate
 pnpm icons:verify
-pnpm exec mpgd target build-all --targets-file ./mpgd.targets.json --kit-path ../mpgd-kit --targets web,microsoft-store,ait,reddit --profile staging --ait-variant wrapper
+pnpm exec mpgd target build-all --targets-file ./mpgd.targets.json --kit-path ../mpgd-kit --targets web,microsoft-store,verse8,ait,reddit --profile staging --ait-variant wrapper
 pnpm devvit:login
 pnpm devvit:init
 pnpm devvit:playtest

package/templates/phaser-game/agent/game-manifest.json

@@ -5,7 +5,7 @@
     "title": "__GAME_TITLE__",
     "engine": "phaser-4"
   },
-  "targets": ["web-preview", "microsoft-store", "android", "ios", "ait", "reddit"],
+  "targets": ["web-preview", "microsoft-store", "verse8", "android", "ios", "ait", "reddit"],
   "futureTargets": ["telegram", "tauri"],
   "platformBoundary": "PlatformGateway",
   "mcpRequirements": {

package/templates/phaser-game/apps/target-devvit/src/server/index.ts

@@ -3,9 +3,11 @@ import type { IncomingMessage, ServerResponse } from 'node:http';
 import { createServer, context, getServerPort, reddit, redis } from '@devvit/web/server';
 import type { UiResponse } from '@devvit/web/shared';
 import {
+  bridgeStorageLoadProtocol,
   createBridgeError,
   type BridgeRequest,
   type BridgeResponse,
+  type BridgeStorageLoadData,
 } from '@mpgd/bridge';
 import {
   createBridgeRpcRouter,
@@ -15,6 +17,7 @@ import { createBridgeRpcNodeHandler } from '@mpgd/bridge/orpc/node';
 
 const maxStorageKeyLength = 128;
 const maxEncodedStorageKeyLength = 384;
+const maxStorageValueBytes = 262_144;
 const maxRequestBodySize = 1_048_576;
 const gameName = '__GAME_NAME__';
 const gameTitle = __GAME_TITLE_TS_LITERAL__;
@@ -263,7 +266,11 @@ async function loadStorage(input: BridgeRequest): Promise<BridgeResponse> {
   const playerId = currentPlayerId();
 
   if (playerId === undefined) {
-    return ok(input, null);
+    return createBridgeError(
+      input.id,
+      'DEVVIT_STORAGE_IDENTITY_REQUIRED',
+      'A current Reddit player is required to load storage.',
+    );
   }
 
   const key = storageKey(input, playerId);
@@ -272,14 +279,36 @@ async function loadStorage(input: BridgeRequest): Promise<BridgeResponse> {
     return key;
   }
 
-  const stored = await redis.get(key);
+  let stored: string | null | undefined;
+
+  try {
+    stored = await redis.get(key);
+  } catch (error) {
+    console.warn(`devvit storage load failed: ${errorMessage(error)}`);
+    return createBridgeError(
+      input.id,
+      'DEVVIT_STORAGE_LOAD_FAILED',
+      'Devvit storage could not be loaded.',
+      true,
+    );
+  }
 
   if (stored === undefined || stored === null) {
-    return ok(input, null);
+    return ok(input, {
+      __mpgdBridgeProtocol: bridgeStorageLoadProtocol,
+      found: false,
+    } satisfies BridgeStorageLoadData);
   }
 
   try {
-    return ok(input, JSON.parse(stored));
+    return ok(
+      input,
+      {
+        __mpgdBridgeProtocol: bridgeStorageLoadProtocol,
+        found: true,
+        value: JSON.parse(stored),
+      } satisfies BridgeStorageLoadData,
+    );
   } catch {
     return createBridgeError(input.id, 'CORRUPTED_STORAGE_VALUE', 'Stored data is not valid JSON.');
   }
@@ -289,9 +318,11 @@ async function saveStorage(input: BridgeRequest): Promise<BridgeResponse> {
   const playerId = currentPlayerId();
 
   if (playerId === undefined) {
-    return ok(input, {
-      saved: false,
-    });
+    return createBridgeError(
+      input.id,
+      'DEVVIT_STORAGE_IDENTITY_REQUIRED',
+      'A current Reddit player is required to save storage.',
+    );
   }
 
   const key = storageKey(input, playerId);
@@ -301,16 +332,42 @@ async function saveStorage(input: BridgeRequest): Promise<BridgeResponse> {
   }
 
   const payload = optionalObjectPayload(input.payload) as { readonly value?: unknown };
+  let serialized: string;
 
   try {
-    await redis.set(key, JSON.stringify(payload.value ?? null));
-  } catch (error) {
-    console.warn(`devvit storage save was not persisted for key ${key}: ${errorMessage(error)}`);
+    const candidate = JSON.stringify(payload.value);
 
-    return ok(input, {
-      saved: false,
-      playerId,
-    });
+    if (typeof candidate !== 'string') {
+      throw new Error('JSON serialization did not produce a string.');
+    }
+
+    serialized = candidate;
+  } catch {
+    return createBridgeError(
+      input.id,
+      'INVALID_STORAGE_VALUE',
+      'Storage values must be JSON serializable.',
+    );
+  }
+
+  if (new TextEncoder().encode(serialized).length > maxStorageValueBytes) {
+    return createBridgeError(
+      input.id,
+      'DEVVIT_STORAGE_QUOTA_EXCEEDED',
+      `Storage values must not exceed ${String(maxStorageValueBytes)} UTF-8 bytes.`,
+    );
+  }
+
+  try {
+    await redis.set(key, serialized);
+  } catch (error) {
+    console.warn(`devvit storage save was not persisted: ${errorMessage(error)}`);
+    return createBridgeError(
+      input.id,
+      'DEVVIT_STORAGE_SAVE_FAILED',
+      'Devvit storage could not be saved.',
+      true,
+    );
   }
 
   return ok(input, {

package/templates/phaser-game/mpgd.targets.json

@@ -14,6 +14,13 @@
       "icon": { "profile": "microsoft-pwa" },
       "output": "artifacts/microsoft-store"
     },
+    "verse8": {
+      "kind": "web",
+      "gameApp": ".",
+      "adapter": "verse8",
+      "icon": { "profile": "web-preview" },
+      "output": "artifacts/verse8"
+    },
     "android": {
       "kind": "capacitor-android",
       "gameApp": ".",

package/templates/phaser-game/package.json

@@ -30,6 +30,8 @@
     "ait:console:deploy": "aitcc app deploy",
     "build:microsoft-store": "pnpm exec mpgd target build microsoft-store production --targets-file ./mpgd.targets.json --kit-path ${MPGD_KIT_PATH:-__DEFAULT_KIT_PATH__}",
     "smoke:microsoft-store": "pnpm exec mpgd target smoke microsoft-store --targets-file ./mpgd.targets.json --kit-path ${MPGD_KIT_PATH:-__DEFAULT_KIT_PATH__}",
+    "build:verse8": "pnpm exec mpgd target build verse8 production --targets-file ./mpgd.targets.json --kit-path ${MPGD_KIT_PATH:-__DEFAULT_KIT_PATH__}",
+    "smoke:verse8": "pnpm exec mpgd target smoke verse8 --targets-file ./mpgd.targets.json --kit-path ${MPGD_KIT_PATH:-__DEFAULT_KIT_PATH__}",
     "build:devvit": "pnpm exec mpgd target build reddit production --targets-file ./mpgd.targets.json --kit-path ${MPGD_KIT_PATH:-__DEFAULT_KIT_PATH__}",
     "build:devvit:staging": "pnpm exec mpgd target build reddit staging --targets-file ./mpgd.targets.json --kit-path ${MPGD_KIT_PATH:-__DEFAULT_KIT_PATH__}",
     "smoke:devvit": "pnpm exec mpgd target smoke reddit --targets-file ./mpgd.targets.json --kit-path ${MPGD_KIT_PATH:-__DEFAULT_KIT_PATH__}",
@@ -59,6 +61,7 @@
     "@mpgd/adapter-browser": "__MPGD_DEPENDENCY_VERSION_ADAPTER_BROWSER__",
     "@mpgd/adapter-capacitor": "__MPGD_DEPENDENCY_VERSION_ADAPTER_CAPACITOR__",
     "@mpgd/adapter-devvit": "__MPGD_DEPENDENCY_VERSION_ADAPTER_DEVVIT__",
+    "@mpgd/adapter-verse8": "__MPGD_DEPENDENCY_VERSION_ADAPTER_VERSE8__",
     "@mpgd/analytics": "__MPGD_DEPENDENCY_VERSION_ANALYTICS__",
     "@mpgd/bridge": "__MPGD_DEPENDENCY_VERSION_BRIDGE__",
     "@mpgd/catalog": "__MPGD_DEPENDENCY_VERSION_CATALOG__",

package/templates/phaser-game/src/platform/buildGateways/verse8.ts

@@ -0,0 +1,25 @@
+import { createVerse8PlatformGateway } from '@mpgd/adapter-verse8';
+import type { AdPlacements } from '@mpgd/catalog';
+import adPlacementsJson from '@mpgd/catalog/placements.json';
+import type { PlatformGateway } from '@mpgd/platform';
+
+import type { RuntimeConfig } from '../runtimeDetector';
+
+export async function createBuildGateway(_runtime: RuntimeConfig): Promise<PlatformGateway> {
+  const adPlacements = adPlacementsJson as AdPlacements;
+  const placementIds = new Map(
+    adPlacements.placements.flatMap((placement) => {
+      const platformPlacementId = placement.platformPlacementIds.verse8;
+
+      return platformPlacementId === undefined
+        ? []
+        : [[placement.id, platformPlacementId] as const];
+    }),
+  );
+
+  return createVerse8PlatformGateway({
+    resolveAdPlacementId(placementId) {
+      return placementIds.get(placementId);
+    },
+  });
+}

package/templates/phaser-game/src/platform/runtimeDetector.ts

@@ -5,6 +5,7 @@ const validTargets = new Set<string>([
   'ios',
   'ait',
   'reddit',
+  'verse8',
   'telegram',
   'tauri',
 ] satisfies readonly PlatformTarget[]);

package/templates/phaser-game/vite.shared.ts

@@ -88,6 +88,8 @@ export function resolveBuildGatewayModule(input: {
       return input.debug && input.buildId === devvitSandboxBuildId
         ? 'src/platform/buildGateways/redditSandbox.ts'
         : 'src/platform/buildGateways/reddit.ts';
+    case 'verse8':
+      return 'src/platform/buildGateways/verse8.ts';
     default:
       return 'src/platform/buildGateways/browser.ts';
   }