@mpgd/cli 0.20.1 → 0.22.0

package/dist/production-target-readiness.d.ts

@@ -9,10 +9,14 @@ export interface ProductionTargetReadinessInput {
 export interface ProductionTargetPolicy {
   readonly runtime: string;
   readonly features: {
+    readonly iap: boolean;
     readonly rewardedAds: boolean;
+    readonly interstitialAds: boolean;
   };
   readonly monetization: {
+    readonly iap: boolean;
     readonly rewardedAds: boolean;
+    readonly interstitialAds: boolean;
   };
 }
 export declare function assertProductionTargetReadiness(input: ProductionTargetReadinessInput): void;

package/dist/production-target-readiness.js

@@ -19,23 +19,31 @@ export function assertProductionTargetReadiness(input) {
     if (ownerPathKey === undefined && input.targetPolicy === undefined) {
         throw new Error(`Production target ${input.target} requires a target policy.`);
     }
-    const requiresVerse8RewardAuthority = input.targetPolicy?.runtime === 'verse8-web'
-        && (input.targetPolicy.features.rewardedAds
-            || input.targetPolicy.monetization.rewardedAds);
-    if (ownerPathKey === undefined && !requiresVerse8RewardAuthority) {
-        return;
-    }
     const targetConfig = readTargets(input.targetsFile)[input.target];
     if (!isRecord(targetConfig)) {
         throw new Error(`Missing target configuration for ${input.target}.`);
     }
+    const targetPolicy = targetConfig.authoritativeGameServices === false
+        ? disableMonetization(input.targetPolicy)
+        : input.targetPolicy;
+    const requiresVerse8RewardAuthority = targetPolicy?.runtime === 'verse8-web'
+        && (targetPolicy.features.rewardedAds
+            || targetPolicy.monetization.rewardedAds);
+    const requiresWebMonetizationAuthority = (targetPolicy?.runtime === 'web'
+        || targetPolicy?.runtime === 'microsoft-store-pwa')
+        && (targetPolicy.features.iap
+            || targetPolicy.features.rewardedAds
+            || targetPolicy.features.interstitialAds
+            || targetPolicy.monetization.iap
+            || targetPolicy.monetization.rewardedAds
+            || targetPolicy.monetization.interstitialAds);
+    const requiresMonetizationAuthority = requiresVerse8RewardAuthority
+        || requiresWebMonetizationAuthority;
+    if (ownerPathKey === undefined && !requiresMonetizationAuthority) {
+        return;
+    }
     if (ownerPathKey === undefined) {
-        if (requiresVerse8RewardAuthority
-            && targetConfig.authoritativeGameServices === false) {
-            throw new Error(`Production target ${input.target} cannot enable rewarded ads without `
-                + 'authoritative game services.');
-        }
-        if (requiresVerse8RewardAuthority || targetConfig.authoritativeGameServices !== false) {
+        if (requiresMonetizationAuthority || targetConfig.authoritativeGameServices !== false) {
             assertAuthoritativeGameServicesUrl(input.gameServicesUrl, input.target);
         }
         return;
@@ -73,6 +81,26 @@ export function assertProductionTargetReadiness(input) {
         assertAuthoritativeGameServicesUrl(input.gameServicesUrl, input.target);
     }
 }
+function disableMonetization(policy) {
+    if (policy === undefined) {
+        return undefined;
+    }
+    return {
+        ...policy,
+        features: {
+            ...policy.features,
+            iap: false,
+            rewardedAds: false,
+            interstitialAds: false,
+        },
+        monetization: {
+            ...policy.monetization,
+            iap: false,
+            rewardedAds: false,
+            interstitialAds: false,
+        },
+    };
+}
 function readTargets(targetsFile) {
     let parsed;
     try {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mpgd/cli",
-  "version": "0.20.1",
+  "version": "0.22.0",
   "description": "Gunshi CLI for mpgd-kit starter generation and target workflow orchestration.",
   "license": "MIT",
   "repository": {
@@ -43,6 +43,8 @@
     "@gunshi/plugin-completion": "^0.35.1",
     "@gunshi/plugin-i18n": "^0.35.1",
     "@gunshi/resources": "^0.35.1",
+    "entities": "^8.0.0",
+    "esbuild": "^0.28.1",
     "gunshi": "^0.35.1",
     "undici": "^7.28.0"
   },
@@ -50,19 +52,19 @@
     "@types/node": "^24.0.0",
     "ttsc": "0.18.4",
     "typescript": "7.0.2",
-    "@mpgd/adapter-ait": "0.8.0",
-    "@mpgd/adapter-capacitor": "0.4.5",
-    "@mpgd/adapter-devvit": "0.8.6",
-    "@mpgd/adapter-verse8": "0.2.3",
-    "@mpgd/analytics": "0.3.8",
-    "@mpgd/adapter-browser": "0.5.1",
-    "@mpgd/bridge": "0.7.0",
-    "@mpgd/catalog": "0.5.2",
-    "@mpgd/game-services": "0.11.1",
-    "@mpgd/i18n": "0.5.4",
+    "@mpgd/adapter-ait": "0.9.0",
+    "@mpgd/adapter-browser": "0.6.0",
+    "@mpgd/adapter-capacitor": "0.4.6",
+    "@mpgd/adapter-devvit": "0.9.0",
+    "@mpgd/adapter-verse8": "0.3.0",
+    "@mpgd/bridge": "0.8.0",
+    "@mpgd/analytics": "0.3.9",
+    "@mpgd/game-services": "0.12.0",
+    "@mpgd/catalog": "0.6.0",
+    "@mpgd/i18n": "0.5.5",
+    "@mpgd/target-config": "0.12.0",
     "@mpgd/phaser-assets": "0.4.1",
-    "@mpgd/platform": "0.8.0",
-    "@mpgd/target-config": "0.10.1"
+    "@mpgd/platform": "0.9.0"
   },
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",

package/templates/phaser-game/README.md

@@ -65,6 +65,33 @@ pnpm --dir ../mpgd-kit mpgd target build-all \
 into `.mpgd.targets.generated.json` before calling the kit's existing target
 build and smoke scripts.
 
+### Offline test-play copy
+
+When a tester needs to open one local file without a server, package the
+existing browser preview:
+
+```sh
+pnpm exec mpgd target build web-preview staging \
+  --targets-file ./mpgd.targets.json \
+  --kit-path "${MPGD_KIT_PATH:-../mpgd-kit}"
+pnpm exec mpgd game offline-playtest .
+```
+
+Open `artifacts/offline-playtest/index.html` directly. This is a
+network-blocked, test-play-only copy—not a target in `mpgd.targets.json`, PWA,
+deployment artifact, release-manifest entry, or store-submission package.
+Custom output directories must remain below this game's `artifacts` directory.
+`README.txt` and `offline-playtest.json` preserve that boundary and record the
+result hash. Server-backed login, purchases, ads, rewards, leaderboards, and
+cloud saves do not work in this copy. Workers, service workers, WebAssembly
+streaming, dynamic imports, import maps, HTML base elements, CSS `@import`,
+runtime-computed asset URLs, retained inline-module imports, script-driven
+navigation, and browser-dependent `file://` storage are outside this helper's
+contract. Meta-refresh navigation is removed from the copy. glTF files must
+embed their dependencies as data URIs; use GLB for models with external buffers
+or textures. A successful package does not prove that every game path works
+offline; keep unavailable capability fallbacks in the game.
+
 The starter owns its Apps in Toss wrapper under `apps/target-ait`. With
 `authoritativeGameServices: false`, production keeps native identity, storage,
 sharing, and Game Center while disabling IAP and ads; no game-services URL is
@@ -73,6 +100,10 @@ set the authority flag to `true`, add app-owned product or ad IDs, and configure
 `VITE_MPGD_GAME_SERVICES_URL` to a public HTTPS verifier without embedded
 credentials.
 
+The same verifier URL is required when a deployed custom `web` runtime enables
+IAP or ads. This production gate prevents client-only grants even when the
+browser adapter itself is game-owned.
+
 The Capacitor entries still intentionally point at kit reference shells, so
 their reusable validation builds use the `staging` profile. Before an Android
 or iOS production build, copy or create the shell under this game directory and
@@ -92,7 +123,9 @@ Optional targets can add their own config, scripts, runtime wiring, and release
 skill. To enable Microsoft Store after creation, run
 `pnpm exec mpgd target init microsoft-store --game . --kit-path ../mpgd-kit`.
 The initializer is idempotent and stops before writing when it finds conflicting
-game-owned values.
+game-owned values. It requires this generated starter's existing
+`src/platform/runtimeDetector.ts` and `vite.shared.ts` files; custom layouts must
+add equivalent runtime and Vite gateway routing manually.
 
 ## Acceptance Handoff
 
@@ -246,29 +279,19 @@ pnpm build:ait
 pnpm smoke:ait
 ```
 
-The game-owned wrapper includes the Apps in Toss community devtools package for
-SDK mocks and device debugging:
+The game-owned wrapper provides an explicit local SDK mock for browser layout
+and non-native flow checks:
 
 ```sh
 pnpm ait:wrapper:dev
 pnpm ait:wrapper:dev:plain
-pnpm ait:wrapper:dev:phone
-pnpm ait:devtools:mcp
-pnpm ait:devtools:mcp:mobile
 ```
 
-`ait:wrapper:dev` runs `apps/target-ait` with the community Vite plugin enabled.
-It loads the last game bundle copied by `pnpm build:ait` from the wrapper's
-`public/game` directory, so run `pnpm build:ait` again after game changes before
-opening a wrapper devtools session. Use `ait:wrapper:dev:plain` to disable the
-devtools plugin. `ait:wrapper:dev:phone` uses the devtools tunnel and CDP relay
-for phone sandbox checks, and `ait:devtools:mcp:mobile` starts the community MCP
-bridge in the phone tunnel mode after the wrapper prints the tunnel URLs. Use
-`ait:devtools:mcp` for the default local or relay debugging mode. The kit
-intentionally leaves
-`cloudflared` postinstall disabled; the first phone tunnel session downloads the
-binary lazily through the community devtools package instead of during ordinary
-workspace install.
+`ait:wrapper:dev` loads the last game bundle copied by `pnpm build:ait` from the
+wrapper's `public/game` directory, so run `pnpm build:ait` again after game
+changes before opening it. The local mock deliberately keeps ads, promotions,
+and IAP unavailable; test those flows from the Apps in Toss console QR sandbox
+or a real device after uploading the `.ait` bundle.
 
 The starter includes `@ait-co/console-cli`, the Apps in Toss community console
 CLI, as a dev dependency for project-local console automation:
@@ -297,6 +320,13 @@ Apps in Toss console, while the file owns `appName`, `brand.primaryColor`,
 permissions, `webView`, and `webBundleDir`. Do not restore the removed SDK 2
 `granite.config.ts` fields.
 
+Apps in Toss navigation chrome is target-owned. Configure the `ait` target's
+`navigationBar` in `mpgd.targets.json`; `mpgd target build ait` validates the
+supported appearance options and forwards them to `apps-in-toss.config.ts` at
+build time. The Phaser starter uses a transparent dark navigation bar without
+back or home chrome so game content can continue underneath it. Keep
+the game's own safe-area padding clear of Toss controls.
+
 Before the first SDK 3 release, allow both of these exact origins on every API
 called by the mini-app:
 
@@ -330,7 +360,7 @@ HTTPS game-services backend that verifies purchase or reward evidence.
 
 - Browser preview is fully game-owned and writes to `artifacts/web-preview`.
 <!-- mpgd:microsoft-store:start -->
-- Microsoft Store is a game-owned PWA target that reuses the browser adapter and
+- Microsoft Store is a game-owned PWA target with a dedicated Digital Goods adapter and
   writes to `artifacts/microsoft-store` with `manifest.webmanifest` for
   PWABuilder packaging. Replace the starter icon and manifest metadata before
   Store submission. Production builds also emit `pwa-release.json` and an
@@ -341,6 +371,16 @@ HTTPS game-services backend that verifies purchase or reward evidence.
   app; do not force activation with `skipWaiting()`. Keep the web manifest `id`
   game-specific because the cache namespace uses it to isolate apps sharing an
   origin.
+  The generated target starts with `authoritativeGameServices: false` while
+  `mpgd.microsoft-store.json` uses `commerce.mode: "disabled"`, so its effective
+  target contains no enabled IAP products. Switch both settings to their enabled
+  values only after the game supplies consumable
+  `InAppOfferToken` mappings plus an authoritative HTTPS backend. The backend
+  must resolve the renewable User Store ID and a separate stable account-link
+  ID from trusted player identity, query Collections v9, record the grant
+  idempotently, and consume through Collections v8. Never derive the account-link
+  ID from the User Store ID or treat the browser `purchaseToken` as a unique
+  transaction ID.
   Before Partner Center submission, replace every placeholder in
   `mpgd.microsoft-store.json`, add at least one real PNG screenshot per listing
   locale (maximum 50 MB and at least 1366 x 768 in either orientation), and run
@@ -401,9 +441,9 @@ HTTPS game-services backend that verifies purchase or reward evidence.
   bridge fails closed on identity, provider, serialization, and quota errors;
   it never switches progress to browser `localStorage`.
 - Apps in Toss is game-owned in `apps/target-ait`. The wrapper keeps the app
-  name, console state, review metadata, and `@ait-co/devtools` development
-  integration local to the game while reusing `@mpgd/adapter-ait` for the
-  production bridge and game-bundle loader.
+  name, console state, review metadata, and local SDK mock configuration in the
+  game while reusing `@mpgd/adapter-ait` for the production bridge and
+  game-bundle loader.
 - Android and iOS currently use the kit reference Capacitor shell at
   `${MPGD_KIT_PATH}/apps/mobile-capacitor`. That is useful for local artifact
   checks, and final artifacts are copied back to this game's `release-output/`

package/templates/phaser-game/apps/target-ait/apps-in-toss.config.ts

@@ -1,11 +1,14 @@
 import { defineConfig, type AppsInTossConfig } from '@apps-in-toss/web-framework/config';
 
+const navigationBar = readNavigationBar(process.env.MPGD_AIT_NAVIGATION_BAR);
+
 const config: AppsInTossConfig = {
   appName: readEnvString(process.env.MPGD_AIT_APP_NAME) ?? '__GAME_NAME__',
   brand: {
     primaryColor: readEnvString(process.env.MPGD_AIT_PRIMARY_COLOR) ?? '#101820',
   },
   permissions: [],
+  ...(navigationBar === undefined ? {} : { navigationBar }),
   webView: {
     bounces: false,
     pullToRefreshEnabled: false,
@@ -24,3 +27,12 @@ function readEnvString(input: string | undefined): string | undefined {
   const trimmed = input?.trim();
   return trimmed === undefined || trimmed.length === 0 ? undefined : trimmed;
 }
+
+function readNavigationBar(
+  input: string | undefined,
+): AppsInTossConfig['navigationBar'] | undefined {
+  const encoded = readEnvString(input);
+  return encoded === undefined
+    ? undefined
+    : JSON.parse(encoded) as AppsInTossConfig['navigationBar'];
+}

package/templates/phaser-game/apps/target-ait/package.json

@@ -4,30 +4,27 @@
   "version": "0.0.0",
   "type": "module",
   "scripts": {
-    "dev": "vite --host 0.0.0.0",
-    "dev:plain": "MPGD_AIT_DEVTOOLS=0 VITE_MPGD_AIT_MOCK_IDENTITY=1 vite --host 0.0.0.0",
-    "dev:phone": "AIT_TUNNEL=1 AIT_TUNNEL_CDP=1 vite --host 0.0.0.0",
+    "dev": "MPGD_AIT_LOCAL_MOCK=1 VITE_MPGD_AIT_MOCK_IDENTITY=1 vite --host 0.0.0.0",
+    "dev:plain": "pnpm dev",
     "build": "vite build && ait build",
     "ait:build": "ait build",
     "ait:deploy": "ait deploy --api-key \"$AIT_API_KEY\"",
-    "devtools:mcp": "pnpm exec devtools-mcp",
-    "devtools:mcp:mobile": "pnpm exec devtools-mcp --target=mobile",
     "check": "ttsc --noEmit -p tsconfig.json",
     "lint": "ttsc --noEmit -p tsconfig.json",
     "format": "ttsc format",
     "fix": "ttsc fix"
   },
   "dependencies": {
-    "@apps-in-toss/web-framework": "3.0.0-beta.da14818",
+    "@apps-in-toss/web-framework": "3.0.2",
     "@mpgd/adapter-ait": "__MPGD_DEPENDENCY_VERSION_ADAPTER_AIT__"
   },
   "devDependencies": {
     "@ait-co/devtools": "^0.1.140",
-    "@apps-in-toss/cli": "3.0.0-beta.66a479a",
+    "@apps-in-toss/cli": "3.0.2",
     "@ttsc/unplugin": "0.18.4",
     "@types/node": "^24.0.0",
     "ttsc": "0.18.4",
     "typescript": "7.0.2",
-    "vite": "^8.1.3"
+    "vite": "8.1.3"
   }
 }

package/templates/phaser-game/apps/target-ait/vite.config.ts

@@ -1,22 +1,16 @@
 import { readFileSync } from 'node:fs';
 
-import aitDevtools from '@ait-co/devtools/unplugin';
 import { extractAitAdBridgeConfig } from '@mpgd/adapter-ait/ad-config';
 import ttsc from '@ttsc/unplugin/vite';
 import { defineConfig } from 'vite';
 
-const isTruthyEnv = (value: string | undefined): boolean =>
-  value !== undefined && value !== '' && value !== '0' && value.toLowerCase() !== 'false';
-const aitDevtoolsTunnel = isTruthyEnv(process.env.AIT_TUNNEL)
-  ? { cdp: isTruthyEnv(process.env.AIT_TUNNEL_CDP) }
-  : false;
 const aitAppName = process.env.MPGD_AIT_APP_NAME?.trim() || '__GAME_NAME__';
 const aitAdConfig = readAitAdConfig(process.env.MPGD_AD_PLACEMENTS_FILE);
 
 export default defineConfig(({ command, isPreview }) => {
-  const enableAitDevtools = command === 'serve'
+  const enableLocalAitMock = command === 'serve'
     && !isPreview
-    && process.env.MPGD_AIT_DEVTOOLS !== '0';
+    && process.env.MPGD_AIT_LOCAL_MOCK !== '0';
 
   return {
     define: {
@@ -24,21 +18,18 @@ export default defineConfig(({ command, isPreview }) => {
       __MPGD_AIT_AD_GROUP_IDS__: JSON.stringify(aitAdConfig.adGroupIds),
       __MPGD_AIT_AD_PLACEMENT_TYPES__: JSON.stringify(aitAdConfig.adPlacementTypes),
     },
-    // Vite prebundles the Kit host before plugin resolve hooks run. An explicit development
-    // alias keeps that optimized host while replacing its transitive native SDK import.
-    ...(enableAitDevtools
+    // Browser-only local development must not pretend that native rewards or
+    // purchases are available. Production and console builds use the real SDK.
+    ...(enableLocalAitMock
       ? {
           resolve: {
             alias: {
-              '@apps-in-toss/web-framework': '@ait-co/devtools/mock',
+              '@apps-in-toss/web-framework': '@mpgd/adapter-ait/local-mock',
             },
           },
         }
       : {}),
     plugins: [
-      ...(enableAitDevtools
-        ? [aitDevtools.vite({ mcp: true, tunnel: aitDevtoolsTunnel })]
-        : []),
       ttsc({ project: 'tsconfig.json', plugins: false }),
     ],
     build: {

package/templates/phaser-game/apps/target-cloudflare-pages/package.json

@@ -22,7 +22,7 @@
     "@ttsc/unplugin": "0.18.4",
     "ttsc": "0.18.4",
     "typescript": "7.0.2",
-    "vite": "^8.1.3",
+    "vite": "8.1.3",
     "wrangler": "^4.107.0"
   }
 }

package/templates/phaser-game/apps/target-devvit/README.md

@@ -52,7 +52,8 @@ leaderboard. Devvit ranking should be owned by a server completion handler that
 validates the game-specific attempt, records it through the verified leaderboard
 provider from `@mpgd/adapter-devvit/server`, and exposes only an authenticated
 game-scoped snapshot route. Do not enable `nativeLeaderboard` or trust a raw
-client score submission for that flow.
+client score submission for that flow. Keep `remoteLeaderboard` disabled too;
+the verified completion route is not the generic `PlatformGateway` leaderboard.
 
 `devvit playtest` runs the official unified Vite build in watch mode, so a
 separate client/server watcher or staging prebuild is not required.

package/templates/phaser-game/apps/target-devvit/package.json

@@ -30,6 +30,6 @@
     "devvit": "0.13.8",
     "ttsc": "0.18.4",
     "typescript": "7.0.2",
-    "vite": "^8.1.3"
+    "vite": "8.1.3"
   }
 }

package/templates/phaser-game/apps/target-devvit/src/server/index.ts

@@ -141,6 +141,7 @@ async function handleBridgeRequest(input: BridgeRequest): Promise<BridgeResponse
         rewardedAds: false,
         interstitialAds: false,
         nativeLeaderboard: false,
+        remoteLeaderboard: false,
         achievements: false,
         cloudSave: true,
         socialShare: false,

package/templates/phaser-game/docs/MPGD_KIT_WORKFLOWS.md

@@ -74,6 +74,17 @@ Use the browser adapter for local and hosted web behavior. Verify installed-PWA
 updates without forcing service-worker activation while old windows remain
 open.
 
+For direct-file test play, build `web-preview` and run
+`pnpm exec mpgd game offline-playtest .`. Open
+`artifacts/offline-playtest/index.html`. This output is deliberately a
+network-blocked test copy, not another release target, deployable PWA,
+release-manifest entry, or store package. Its README and JSON evidence describe
+server-feature, Worker, dynamic-import, import-map, HTML-base, CSS `@import`,
+dynamic-asset, inline-module-import, script-navigation, and `file://` storage
+limitations. Meta-refresh navigation is removed. Keep server calls behind
+platform or game-service helpers and expose a disabled or local fallback when
+those capabilities are unavailable.
+
 ### Microsoft Store
 
 This target is optional. Enable it in an existing generated game with:

package/templates/phaser-game/mpgd.targets.json

@@ -10,7 +10,8 @@
     "microsoft-store": {
       "kind": "web",
       "gameApp": ".",
-      "adapter": "browser",
+      "adapter": "microsoft-store",
+      "authoritativeGameServices": false,
       "icon": { "profile": "microsoft-pwa" },
       "output": "artifacts/microsoft-store"
     },
@@ -51,6 +52,12 @@
         "primaryColor": "#101820",
         "sdkMajor": 3
       },
+      "navigationBar": {
+        "withBackButton": false,
+        "withHomeButton": false,
+        "transparentBackground": true,
+        "theme": "dark"
+      },
       "icon": { "profile": "ait" },
       "webDir": "apps/target-ait/public/game",
       "artifact": ".ait"

package/templates/phaser-game/package.json

@@ -19,9 +19,6 @@
     "smoke:ait": "pnpm exec mpgd target smoke ait --targets-file ./mpgd.targets.json --kit-path ${MPGD_KIT_PATH:-__DEFAULT_KIT_PATH__}",
     "ait:wrapper:dev": "pnpm --dir apps/target-ait run dev",
     "ait:wrapper:dev:plain": "pnpm --dir apps/target-ait run dev:plain",
-    "ait:wrapper:dev:phone": "pnpm --dir apps/target-ait run dev:phone",
-    "ait:devtools:mcp": "pnpm --dir apps/target-ait run devtools:mcp",
-    "ait:devtools:mcp:mobile": "pnpm --dir apps/target-ait run devtools:mcp:mobile",
     "ait:console:login": "aitcc login",
     "ait:console:whoami": "aitcc whoami",
     "ait:console:init": "aitcc app init",
@@ -58,7 +55,7 @@
   },
   "dependencies": {
     "@ait-co/polyfill": "^0.1.17",
-    "@apps-in-toss/web-framework": "3.0.0-beta.da14818",
+    "@apps-in-toss/web-framework": "3.0.2",
     "@mpgd/adapter-ait": "__MPGD_DEPENDENCY_VERSION_ADAPTER_AIT__",
     "@mpgd/adapter-browser": "__MPGD_DEPENDENCY_VERSION_ADAPTER_BROWSER__",
     "@mpgd/adapter-capacitor": "__MPGD_DEPENDENCY_VERSION_ADAPTER_CAPACITOR__",
@@ -82,7 +79,7 @@
     "@types/node": "^24.0.0",
     "ttsc": "0.18.4",
     "typescript": "7.0.2",
-    "vite": "^8.1.3",
+    "vite": "8.1.3",
     "wrangler": "^4.107.0"
   }
 }

package/templates/phaser-game/pnpm-workspace.yaml

@@ -5,10 +5,11 @@ __PNPM_WORKSPACE_KIT_PACKAGES__
 allowBuilds:
   '@sentry/cli': true
   '@swc/core': true
-  # @ait-co/devtools lazily installs cloudflared when the phone tunnel starts;
-  # keep default workspace installs free of external binary downloads.
   cloudflared: false
   esbuild: true
   protobufjs: true
   sharp: true
   workerd: true
+peerDependencyRules:
+  allowedVersions:
+    '@ait-co/devtools>@apps-in-toss/web-framework': '3.0.2'

package/templates/phaser-game/src/entry.ts

@@ -1,7 +1,13 @@
-if (__APP_TARGET__ === 'reddit') {
-  await import('./platform/devvitEntrypoint');
-} else {
-  await import('./main');
+import { renderEntryFailure } from './runtime/renderEntryFailure';
+
+try {
+  if (__APP_TARGET__ === 'reddit') {
+    await import('./platform/devvitEntrypoint');
+  } else {
+    await import('./main');
+  }
+} catch (error) {
+  renderEntryFailure(error);
 }
 
 export {};

package/templates/phaser-game/src/gameEntry.ts

@@ -1,3 +1,9 @@
-await import('./main');
+import { renderEntryFailure } from './runtime/renderEntryFailure';
+
+try {
+  await import('./main');
+} catch (error) {
+  renderEntryFailure(error);
+}
 
 export {};

package/templates/phaser-game/src/platform/buildGateways/microsoftStore.ts

@@ -0,0 +1,37 @@
+import { createBrowserPlatformGateway } from '@mpgd/adapter-browser';
+import {
+  createMicrosoftStoreCommerceAdapter,
+  withMicrosoftStoreCommerceAdapter,
+} from '@mpgd/adapter-browser/microsoft-store';
+import type { PlatformGateway } from '@mpgd/platform';
+
+import type { RuntimeConfig } from '../runtimeDetector';
+
+const browser = createBrowserPlatformGateway();
+const base: PlatformGateway = { ...browser, target: 'microsoft-store' };
+const commerce = createMicrosoftStoreCommerceAdapter({
+  getRecoveryScope: () => 'configuration-required',
+  products: [],
+  authority: {
+    async getAvailability() {
+      return 'configuration-required';
+    },
+    async claimRecoveryOwnership() {
+      return { status: 'denied' } as const;
+    },
+    async hasRecoveryOwnership() {
+      return { status: 'denied' } as const;
+    },
+    async verifyAndGrant() {
+      return { status: 'failed' };
+    },
+    async getEntitlements() {
+      return [];
+    },
+  },
+});
+
+/** Configure Store products, authenticated recovery scope, and authority before checkout. */
+export async function createBuildGateway(_runtime: RuntimeConfig): Promise<PlatformGateway> {
+  return withMicrosoftStoreCommerceAdapter(base, commerce);
+}

package/templates/phaser-game/src/platform/runtimeDetector.ts

@@ -4,6 +4,7 @@ const validTargets = new Set<string>([
   'android',
   'ios',
   'ait',
+  'microsoft-store',
   'reddit',
   'verse8',
   'telegram',

package/templates/phaser-game/src/runtime/renderEntryFailure.ts

@@ -0,0 +1,24 @@
+export function renderEntryFailure(error: unknown): void {
+  console.error('[entry] Failed to load the game module.', error);
+
+  const root = document.querySelector<HTMLElement>('#game');
+
+  if (root === null) {
+    return;
+  }
+
+  root.replaceChildren();
+  const panel = document.createElement('div');
+  panel.setAttribute('role', 'alert');
+  panel.textContent = 'Failed to load the game. Please refresh and try again.';
+  panel.style.boxSizing = 'border-box';
+  panel.style.width = 'min(720px, calc(100% - 32px))';
+  panel.style.margin = '20dvh auto 0';
+  panel.style.padding = '20px';
+  panel.style.border = '1px solid #dc2626';
+  panel.style.borderRadius = '8px';
+  panel.style.background = '#1f1111';
+  panel.style.color = '#fecaca';
+  panel.style.font = '16px/1.5 Arial, sans-serif';
+  root.append(panel);
+}

package/templates/phaser-game/vite.runtime-target-config.ts

@@ -12,6 +12,7 @@ import type {
 export type { TargetConfigMatrix } from '@mpgd/target-config';
 
 const runtimeKinds = valueSet({
+  web: true,
   'web-preview': true,
   'microsoft-store-pwa': true,
   'capacitor-android': true,
@@ -21,6 +22,7 @@ const runtimeKinds = valueSet({
   'verse8-web': true,
 } satisfies Record<TargetRuntimeKind, true>);
 const releaseProfiles = valueSet({
+  web: true,
   'web-preview': true,
   'microsoft-store': true,
   'google-play': true,