@mpgd/cli 0.13.0 → 0.14.0

package/dist/microsoft-store-supported-locales.d.ts

@@ -0,0 +1 @@
+export declare function isMicrosoftStoreSupportedListingLocale(locale: string): boolean;

package/dist/microsoft-store-supported-locales.js

@@ -0,0 +1,33 @@
+// Microsoft Store package and listing language codes documented by Microsoft Learn.
+const microsoftStoreSupportedListingLocales = new Set(`
+af af-za am am-et ar ar-ae ar-bh ar-dz ar-eg ar-iq ar-jo ar-kw ar-lb ar-ly ar-ma
+ar-om ar-qa ar-sa ar-sy ar-tn ar-ye as as-in az-arab az-arab-az az-cyrl az-cyrl-az
+az-latn az-latn-az be be-by bg bg-bg bn bn-bd bn-in bs bs-cyrl bs-cyrl-ba bs-latn
+bs-latn-ba ca ca-es ca-es-valencia chr-cher chr-cher-us chr-latn cs cs-cz cy cy-gb
+da da-dk de de-at de-ch de-de de-li de-lu el el-gr en en-011 en-014 en-018 en-021
+en-029 en-053 en-au en-bz en-ca en-gb en-hk en-id en-ie en-in en-jm en-kz en-mt
+en-my en-nz en-ph en-pk en-sg en-tt en-us en-vn en-za en-zw es es-019 es-419 es-ar
+es-bo es-cl es-co es-cr es-do es-ec es-es es-gt es-hn es-mx es-ni es-pa es-pe es-pr
+es-py es-sv es-us es-uy es-ve et et-ee eu eu-es fa fa-ir fi fi-fi fil fil-latn
+fil-ph fr fr-011 fr-015 fr-021 fr-029 fr-155 fr-be fr-ca fr-cd fr-ch fr-ci fr-cm
+fr-fr fr-ht fr-lu fr-ma fr-mc fr-ml fr-re frc-latn frp-latn ga ga-ie gd-gb
+gd-latn gl gl-es gu gu-in ha ha-latn ha-latn-ng he he-il hi hi-in hr hr-ba hr-hr
+hu hu-hu hy hy-am id id-id ig-latn ig-ng is is-is it it-ch it-it iu-cans iu-latn
+iu-latn-ca ja ja-jp ka ka-ge kk kk-kz km km-kh kn kn-in ko ko-kr kok kok-in
+ku-arab ku-arab-iq ky-cyrl ky-kg lb lb-lu lo lo-la lt lt-lt lv lv-lv mi mi-latn
+mi-nz mk mk-mk ml ml-in mn-cyrl mn-mn mn-mong mn-phag mr mr-in ms ms-bn ms-my mt
+mt-mt nb nb-no ne ne-np nl nl-be nl-nl nn nn-no no no-no nso nso-za or or-in pa
+pa-arab pa-arab-pk pa-deva pa-in pl pl-pl prs prs-af prs-arab pt pt-br pt-pt
+quc-latn qut-gt qut-latn quz quz-bo quz-ec quz-pe ro ro-ro ru ru-ru rw rw-rw
+sd-arab sd-arab-pk sd-deva si si-lk sk sk-sk sl sl-si sq sq-al sr sr-cyrl
+sr-cyrl-ba sr-cyrl-cs sr-cyrl-me sr-cyrl-rs sr-latn sr-latn-ba sr-latn-cs
+sr-latn-me sr-latn-rs sv sv-fi sv-se sw sw-ke ta ta-in te te-in tg-arab tg-cyrl
+tg-cyrl-tj tg-latn th th-th ti ti-et tk-cyrl tk-cyrl-tr tk-latn tk-latn-tr tk-tm
+tn tn-bw tn-za tr tr-tr tt-arab tt-cyrl tt-latn tt-ru ug-arab ug-cn ug-cyrl
+ug-latn uk uk-ua ur ur-pk uz uz-cyrl uz-latn uz-latn-uz vi vi-vn wo wo-sn xh
+xh-za yo-latn yo-ng zh-cn zh-hans zh-hans-cn zh-hans-sg zh-hant zh-hant-hk
+zh-hant-mo zh-hant-tw zh-hk zh-mo zh-sg zh-tw zu zu-za
+`.trim().split(/\s+/u));
+export function isMicrosoftStoreSupportedListingLocale(locale) {
+    return microsoftStoreSupportedListingLocales.has(locale.toLowerCase());
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mpgd/cli",
-  "version": "0.13.0",
+  "version": "0.14.0",
   "description": "Gunshi CLI for mpgd-kit starter generation and target workflow orchestration.",
   "license": "MIT",
   "repository": {
@@ -43,7 +43,8 @@
     "@gunshi/plugin-completion": "^0.35.1",
     "@gunshi/plugin-i18n": "^0.35.1",
     "@gunshi/resources": "^0.35.1",
-    "gunshi": "^0.35.1"
+    "gunshi": "^0.35.1",
+    "undici": "^7.28.0"
   },
   "devDependencies": {
     "@types/node": "^24.0.0",
@@ -53,15 +54,15 @@
     "@mpgd/adapter-browser": "0.5.0",
     "@mpgd/adapter-capacitor": "0.4.4",
     "@mpgd/adapter-devvit": "0.8.4",
-    "@mpgd/adapter-verse8": "0.2.1",
     "@mpgd/analytics": "0.3.7",
+    "@mpgd/adapter-verse8": "0.2.1",
     "@mpgd/bridge": "0.6.1",
     "@mpgd/catalog": "0.5.0",
     "@mpgd/game-services": "0.10.0",
     "@mpgd/i18n": "0.5.3",
-    "@mpgd/platform": "0.7.0",
     "@mpgd/phaser-assets": "0.4.1",
-    "@mpgd/target-config": "0.8.0"
+    "@mpgd/target-config": "0.8.0",
+    "@mpgd/platform": "0.7.0"
   },
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",

package/templates/phaser-game/README.md

@@ -285,6 +285,44 @@ submission.
   app; do not force activation with `skipWaiting()`. Keep the web manifest `id`
   game-specific because the cache namespace uses it to isolate apps sharing an
   origin.
+  Before Partner Center submission, replace every placeholder in
+  `mpgd.microsoft-store.json`, add at least one real PNG screenshot per listing
+  locale (maximum 50 MB and at least 1366 x 768 in either orientation), and run
+  `pnpm preflight:microsoft-store`. The generated script supplies the game
+  target config and the configured kit path. The command
+  validates the game-owned Store identity and listing against the built PWA and
+  writes deterministic JSON and Markdown evidence under
+  `release-output/microsoft-store`. After deploying those exact PWA bytes, set
+  `PWA_URL` and `MANIFEST_URL` to their public production endpoints, then run:
+
+  ```sh
+  pnpm package:microsoft-store -- \
+    --pwa-url "$PWA_URL" \
+    --manifest-url "$MANIFEST_URL" \
+    --package-version 1.2.3.0 \
+    --classic-version 1.2.2.0
+  ```
+
+  Package generation uses PWABuilder's fixed, unversioned production endpoint.
+  It downloads one bounded ZIP without extracting it, verifies the deployed
+  manifest and each deployed manifest icon against preflight evidence before
+  and after the request, and rejects PWA URLs outside that manifest's deployed
+  scope. It also rechecks local icon inputs for mutation. It pins the
+  hash-verified local manifest directly in PWABuilder's custom-manifest request
+  while keeping the manifest URL as the relative-resource base. The command
+  bounds every response, rejects redirects and unsafe ZIP structure, and
+  records request, source-revision, archive, manifest, and icon hashes. Treat
+  the mutable generator and icon URLs as best-effort external boundaries, then
+  inspect the packages in that ZIP with the Microsoft Store acceptance flow
+  before Partner Center submission.
+  After PWABuilder creates the Store packages, run the Windows-only package
+  gate with the current Windows SDK:
+  `pnpm exec mpgd target accept-package microsoft-store --packages <game-relative.msixbundle,game-relative.appxbundle>`.
+  The gate compares every bundle and payload identity with the submission
+  evidence and binds package hashes in `package-acceptance.json`. WACK is a
+  recommended optional local check; from an active administrator user session,
+  pass `--appcert <path-to-appcert.exe>` to require `OVERALL_RESULT="PASS"`
+  and bind its report hash.
 - Verse8 is a game-owned iframe web target that writes to `artifacts/verse8`.
   The adapter verifies the host-provided auth credential and distinguishes
   Verse8-signed accounts from self-signed guest accounts. Ads are available

package/templates/phaser-game/gitignore

@@ -3,6 +3,7 @@ dist/
 apps/*/dist/
 apps/target-devvit/generated/
 artifacts/
+release-input/
 release-output/
 .mpgd.targets.generated.json
 .mpgd/

package/templates/phaser-game/mpgd.microsoft-store.json

@@ -0,0 +1,29 @@
+{
+  "schemaVersion": 1,
+  "productIdentity": {
+    "packageId": "REPLACE_ME",
+    "publisherId": "CN=REPLACE_ME",
+    "publisherDisplayName": "REPLACE_ME",
+    "reservedName": "REPLACE_ME"
+  },
+  "listing": {
+    "category": "Games",
+    "supportUrl": "https://example.com/support",
+    "personalData": {
+      "accessedOrTransmitted": true,
+      "privacyPolicyUrl": "https://example.com/privacy"
+    },
+    "locales": {
+      "en-US": {
+        "description": "REPLACE_ME",
+        "screenshots": ["store-assets/en-US/01.png"]
+      }
+    }
+  },
+  "ageRating": {
+    "questionnaireCompleted": false
+  },
+  "commerce": {
+    "mode": "disabled"
+  }
+}

package/templates/phaser-game/package.json

@@ -30,6 +30,8 @@
     "ait:console:deploy": "aitcc app deploy",
     "build:microsoft-store": "pnpm exec mpgd target build microsoft-store production --targets-file ./mpgd.targets.json --kit-path ${MPGD_KIT_PATH:-__DEFAULT_KIT_PATH__}",
     "smoke:microsoft-store": "pnpm exec mpgd target smoke microsoft-store --targets-file ./mpgd.targets.json --kit-path ${MPGD_KIT_PATH:-__DEFAULT_KIT_PATH__}",
+    "preflight:microsoft-store": "pnpm exec mpgd target preflight microsoft-store --targets-file ./mpgd.targets.json --kit-path ${MPGD_KIT_PATH:-__DEFAULT_KIT_PATH__}",
+    "package:microsoft-store": "pnpm exec mpgd target generate-package microsoft-store --targets-file ./mpgd.targets.json",
     "build:verse8": "pnpm exec mpgd target build verse8 production --targets-file ./mpgd.targets.json --kit-path ${MPGD_KIT_PATH:-__DEFAULT_KIT_PATH__}",
     "smoke:verse8": "pnpm exec mpgd target smoke verse8 --targets-file ./mpgd.targets.json --kit-path ${MPGD_KIT_PATH:-__DEFAULT_KIT_PATH__}",
     "build:devvit": "pnpm exec mpgd target build reddit production --targets-file ./mpgd.targets.json --kit-path ${MPGD_KIT_PATH:-__DEFAULT_KIT_PATH__}",