@mpgd/cli 0.3.2 → 0.4.0

package/templates/phaser-game/README.md

@@ -5,7 +5,7 @@ Standalone Phaser 4 game starter generated by `@mpgd/create-game`.
 ## Local Loop
 
 ```sh
-pnpm install --filter . --filter ./apps/target-devvit
+pnpm install -w
 pnpm dev
 pnpm check
 pnpm build
@@ -15,6 +15,7 @@ The starter keeps game code behind `PlatformGateway` and demonstrates:
 
 - target-aware adapter selection through `APP_TARGET`
 - target-config/effective-config runtime snapshots
+- target-portable Phaser asset manifest loading
 - local translation keys
 - optional `@mpgd/game-services` client wiring
 - best-effort analytics events
@@ -30,12 +31,16 @@ platform-specific artifacts. Keep an `mpgd-kit` checkout nearby and pass it with
 pnpm exec mpgd target build-all \
   --targets-file ./mpgd.targets.json \
   --kit-path ../mpgd-kit \
-  --targets web,ait,reddit \
+  --targets web,microsoft-store,ait,reddit \
   --ait-variant wrapper
 pnpm exec mpgd target smoke-all \
   --targets-file ./mpgd.targets.json \
   --kit-path ../mpgd-kit \
-  --targets web,ait,reddit
+  --targets web,microsoft-store,ait,reddit
+pnpm exec mpgd target doctor \
+  --targets-file ./mpgd.targets.json \
+  --kit-path ../mpgd-kit \
+  --targets web,microsoft-store,ait,reddit
 ```
 
 When developing the kit itself, the same commands work through the repository
@@ -45,7 +50,7 @@ script:
 pnpm --dir ../mpgd-kit mpgd target build-all \
   --targets-file "$PWD/mpgd.targets.json" \
   --kit-path ../mpgd-kit \
-  --targets web,ait,reddit \
+  --targets web,microsoft-store,ait,reddit \
   --ait-variant wrapper
 ```
 
@@ -53,6 +58,19 @@ pnpm --dir ../mpgd-kit mpgd target build-all \
 into `.mpgd.targets.generated.json` before calling the kit's existing target
 build and smoke scripts.
 
+`mpgd target doctor` verifies that release manifest artifact paths stay under
+this game directory, even when a build used the kit reference Apps in Toss or
+Capacitor wrappers.
+
+## Assets
+
+Static assets live under `src/assets` and are declared in
+`src/assets/manifest.ts`. Use stable manifest keys in scenes and pass Vite-
+emitted URLs into the manifest with `?url` imports, or keep static
+`new URL('./file', import.meta.url)` calls directly in the manifest module. The
+starter keeps Vite `base: './'` so generated asset URLs stay portable across web
+preview, Apps in Toss, Devvit, Android, and iOS bundles.
+
 ## Reddit Devvit
 
 This starter owns its Devvit app root in `apps/target-devvit`. That directory
@@ -66,7 +84,7 @@ name.
 First-time Devvit setup:
 
 ```sh
-pnpm install --filter . --filter ./apps/target-devvit
+pnpm install -w
 pnpm devvit:login
 pnpm devvit:whoami
 pnpm devvit:init
@@ -81,9 +99,81 @@ authorization is not available in the current terminal session. After init, use
 `pnpm devvit:playtest`, `pnpm devvit:upload`, and `pnpm devvit:publish` from
 this game root.
 
+## Apps in Toss
+
+Use the target-aware local loop while developing game code for Apps in Toss:
+
+```sh
+pnpm dev:ait
+pnpm build:ait
+pnpm smoke:ait
+```
+
+The kit reference wrapper includes the Apps in Toss community devtools package
+for SDK mock and device debugging while the wrapper is still kit-owned:
+
+```sh
+pnpm ait:wrapper:dev
+pnpm ait:wrapper:dev:plain
+pnpm ait:wrapper:dev:phone
+pnpm ait:devtools:mcp
+pnpm ait:devtools:mcp:mobile
+```
+
+`ait:wrapper:dev` runs the kit wrapper with the community Vite plugin enabled.
+It loads the last game bundle copied by `pnpm build:ait` from the wrapper's
+`public/game` directory, so run `pnpm build:ait` again after game changes before
+opening a wrapper devtools session. Use `ait:wrapper:dev:plain` to disable the
+devtools plugin. `ait:wrapper:dev:phone` uses the devtools tunnel and CDP relay
+for phone sandbox checks, and `ait:devtools:mcp:mobile` starts the community MCP
+bridge in the phone tunnel mode after the wrapper prints the tunnel URLs. Use
+`ait:devtools:mcp` for the default local or relay debugging mode. The kit
+intentionally leaves
+`cloudflared` postinstall disabled; the first phone tunnel session downloads the
+binary lazily through the community devtools package instead of during ordinary
+workspace install.
+
+The starter includes `@ait-co/console-cli`, the Apps in Toss community console
+CLI, as a dev dependency for project-local console automation:
+
+```sh
+pnpm ait:console:login
+pnpm ait:console:whoami
+pnpm ait:console:init
+# add the real logo, thumbnail, and screenshot files referenced by aitcc.yaml
+pnpm ait:console:register
+pnpm ait:console:status
+pnpm build:ait:package
+pnpm ait:console:deploy -- release-output/ait/YOUR_APP.ait
+```
+
+`ait:console:init` creates the game-owned `aitcc.yaml` context, and
+`ait:console:register` creates the mini-app and writes its `miniAppId` back to
+that file. Before registration, add the real logo, thumbnail, and screenshot
+files referenced by `aitcc.yaml` under `./assets/`. Use `pnpm build:ait` for the
+kit wrapper smoke loop, and run `pnpm build:ait:package` before console deploys
+so `release-output/ait/` contains the `.ait` bundle you pass after `--`.
+
+The starter also installs `@apps-in-toss/web-framework` and awaits
+`install()` from `@ait-co/polyfill` only when `__APP_TARGET__` is `ait`. In the
+Apps in Toss WebView runtime, standard Web APIs such as `navigator.clipboard`,
+`navigator.geolocation`, `navigator.share`, `navigator.vibrate`, network status,
+and `_blank` `window.open` calls route through the Apps in Toss SDK. Plain
+browser, Microsoft Store, Reddit, Android, and iOS builds do not import the AIT
+SDK chunk and keep their native browser behavior. `pnpm dev:ait` is useful for
+checking the AIT-gated bundle path, but SDK-backed API behavior should be
+verified in the Apps in Toss sandbox or a game-owned devtools setup. If your
+game uses permission-gated APIs such as clipboard or geolocation, declare the
+matching permissions in the game-owned Apps in Toss `granite.config.ts` before
+submission.
+
 ## Target Ownership Notes
 
 - Browser preview is fully game-owned and writes to `artifacts/web-preview`.
+- Microsoft Store is a game-owned PWA target that reuses the browser adapter and
+  writes to `artifacts/microsoft-store` with `manifest.webmanifest` for
+  PWABuilder packaging. Replace the starter icon and manifest metadata before
+  Store submission.
 - Reddit Devvit is game-owned in `apps/target-devvit`.
 - Apps in Toss currently uses the kit reference wrapper at
   `${MPGD_KIT_PATH}/apps/target-ait` for smoke packaging. Before a real Toss
@@ -91,7 +181,8 @@ this game root.
   review metadata are not shared with the kit demo.
 - Android and iOS currently use the kit reference Capacitor shell at
   `${MPGD_KIT_PATH}/apps/mobile-capacitor`. That is useful for local artifact
-  checks, but production apps should own their bundle ID/package ID, signing,
+  checks, and final artifacts are copied back to this game's `release-output/`
+  directory. Production apps should own their bundle ID/package ID, signing,
   icons, and store metadata in a game-specific shell.
 
 ## Game Services

package/templates/phaser-game/agent/acceptance.md

@@ -5,8 +5,9 @@ Run these checks before handing off a generated game starter:
 ```sh
 pnpm check
 pnpm build
-pnpm --dir ../mpgd-kit mpgd target build-all --targets-file "$PWD/mpgd.targets.json" --targets web,ait,reddit --ait-variant wrapper
-pnpm --dir ../mpgd-kit mpgd target smoke-all --targets-file "$PWD/mpgd.targets.json" --targets web,ait,reddit
+pnpm --dir ../mpgd-kit mpgd target build-all --targets-file "$PWD/mpgd.targets.json" --targets web,microsoft-store,ait,reddit --ait-variant wrapper
+pnpm --dir ../mpgd-kit mpgd target smoke-all --targets-file "$PWD/mpgd.targets.json" --targets web,microsoft-store,ait,reddit
+pnpm --dir ../mpgd-kit mpgd target doctor --targets-file "$PWD/mpgd.targets.json" --targets web,microsoft-store,ait,reddit
 ```
 
 For Apps in Toss changes, use the apps-in-toss MCP before implementation and
@@ -16,3 +17,7 @@ For Reddit Devvit changes, keep Devvit SDK calls inside the target wrapper and
 continue to expose game-facing behavior through `PlatformGateway`. The Devvit
 app root is game-owned in `apps/target-devvit`; run `pnpm devvit:init` once
 after login before upload or playtest.
+
+For Microsoft Store changes, keep the first pass as a PWA/web target that uses
+the browser adapter. Add a dedicated Store commerce adapter only when wiring
+Digital Goods API and Payment Request through backend ledger verification.

package/templates/phaser-game/agent/brief.md

@@ -16,7 +16,7 @@ Useful commands:
 pnpm dev
 pnpm check
 pnpm build
-pnpm exec mpgd target build-all --targets-file ./mpgd.targets.json --kit-path ../mpgd-kit --targets web,ait,reddit --ait-variant wrapper
+pnpm exec mpgd target build-all --targets-file ./mpgd.targets.json --kit-path ../mpgd-kit --targets web,microsoft-store,ait,reddit --ait-variant wrapper
 pnpm devvit:login
 pnpm devvit:init
 pnpm devvit:playtest

package/templates/phaser-game/agent/game-manifest.json

@@ -5,7 +5,7 @@
     "title": "__GAME_TITLE__",
     "engine": "phaser-4"
   },
-  "targets": ["web-preview", "android", "ios", "ait", "reddit"],
+  "targets": ["web-preview", "microsoft-store", "android", "ios", "ait", "reddit"],
   "futureTargets": ["telegram", "tauri"],
   "platformBoundary": "PlatformGateway",
   "mcpRequirements": {
@@ -17,6 +17,10 @@
       "id": "simulation.loop.phase",
       "owner": "src/game/state.ts"
     },
+    {
+      "id": "assets.manifest.phaser-loader",
+      "owner": "src/assets/manifest.ts"
+    },
     {
       "id": "runtime.platform.gateway",
       "owner": "src/platform/installPlatform.ts"

package/templates/phaser-game/apps/target-cloudflare-pages/package.json

@@ -0,0 +1,28 @@
+{
+  "name": "__PACKAGE_NAME__-target-cloudflare-pages",
+  "private": true,
+  "version": "0.0.0",
+  "type": "module",
+  "scripts": {
+    "check": "ttsc --noEmit -p tsconfig.json",
+    "lint": "ttsc --noEmit -p tsconfig.json",
+    "format": "ttsc format",
+    "fix": "ttsc fix",
+    "build": "vite build",
+    "dev": "pnpm build && wrangler pages dev dist --port 8788",
+    "preview": "pnpm build && wrangler pages dev dist --port 8788",
+    "deploy": "pnpm build && wrangler pages deploy dist --project-name __GAME_NAME__",
+    "types": "wrangler types --path ./src/worker-configuration.d.ts"
+  },
+  "dependencies": {
+    "@mpgd/bridge": "__MPGD_DEPENDENCY_VERSION_BRIDGE__"
+  },
+  "devDependencies": {
+    "@cloudflare/workers-types": "^5.20260707.1",
+    "@ttsc/unplugin": "0.16.9",
+    "ttsc": "0.16.9",
+    "typescript": "7.0.1-rc",
+    "vite": "^8.1.3",
+    "wrangler": "^4.107.0"
+  }
+}

package/templates/phaser-game/apps/target-cloudflare-pages/src/worker.ts

@@ -0,0 +1,12 @@
+import {
+  createMpgdCloudflarePagesHostFetchHandler,
+  type MpgdCloudflarePagesHostEnv,
+} from '@mpgd/bridge/cloudflare-pages';
+
+const fetchHandler = createMpgdCloudflarePagesHostFetchHandler();
+
+export default {
+  fetch(request, env, ctx) {
+    return fetchHandler(request, env, ctx);
+  },
+} satisfies ExportedHandler<MpgdCloudflarePagesHostEnv>;

package/templates/phaser-game/apps/target-cloudflare-pages/tsconfig.json

@@ -0,0 +1,8 @@
+{
+  "extends": "../../tsconfig.json",
+  "compilerOptions": {
+    "types": ["@cloudflare/workers-types"],
+    "noEmit": true
+  },
+  "include": ["src/**/*.ts", "vite.config.ts"]
+}

package/templates/phaser-game/apps/target-cloudflare-pages/vite.config.ts

@@ -0,0 +1,28 @@
+import ttsc from '@ttsc/unplugin/vite';
+import { defineConfig } from 'vite';
+
+export default defineConfig({
+  publicDir: '../../artifacts/legal-site',
+  plugins: [
+    ttsc({
+      project: 'tsconfig.json',
+      plugins: false,
+    }),
+  ],
+  build: {
+    outDir: 'dist',
+    emptyOutDir: true,
+    target: 'es2022',
+    sourcemap: false,
+    lib: {
+      entry: 'src/worker.ts',
+      formats: ['es'],
+      fileName: () => '_worker.js',
+    },
+    rollupOptions: {
+      output: {
+        entryFileNames: '_worker.js',
+      },
+    },
+  },
+});

package/templates/phaser-game/apps/target-cloudflare-pages/wrangler.jsonc

@@ -0,0 +1,28 @@
+{
+  "$schema": "../../node_modules/wrangler/config-schema.json",
+  "name": "__GAME_NAME__",
+  "compatibility_date": "2026-07-07",
+  "compatibility_flags": ["nodejs_compat"],
+  "pages_build_output_dir": "./dist",
+  "observability": {
+    "enabled": true,
+    "logs": {
+      "enabled": true,
+      "head_sampling_rate": 1
+    },
+    "traces": {
+      "enabled": true,
+      "head_sampling_rate": 0.01
+    }
+  },
+
+  // Bind an authoritative game-services Worker when this Pages host should
+  // expose /api/game-services/* locally or in production:
+  //
+  // "services": [
+  //   {
+  //     "binding": "GAME_SERVICES",
+  //     "service": "mpgd-game-services"
+  //   }
+  // ]
+}

package/templates/phaser-game/apps/target-devvit/README.md

@@ -10,7 +10,7 @@ if you want a different Reddit app name.
 ## First Playtest
 
 ```sh
-pnpm install --filter . --filter ./apps/target-devvit
+pnpm install -w
 pnpm devvit:login
 pnpm devvit:whoami
 pnpm devvit:init

package/templates/phaser-game/apps/target-devvit/package.json

@@ -23,7 +23,7 @@
   },
   "dependencies": {
     "@devvit/web": "0.13.6",
-    "@mpgd/bridge": "__MPGD_DEPENDENCY_VERSION__",
+    "@mpgd/bridge": "__MPGD_DEPENDENCY_VERSION_BRIDGE__",
     "express": "^5.2.1",
     "helmet": "^8.1.0"
   },

package/templates/phaser-game/apps/target-devvit/src/server/index.ts

@@ -480,7 +480,7 @@ async function acquireLeaderboardLock(lockKey: string, lockToken: string): Promi
 
 function leaderboardLockExpirationDate(): Date {
   // Devvit Redis SetOptions expects a Date and converts it to Redis EX seconds internally.
-  return new Date(Date.now() + leaderboardLockTtlSeconds * 1_000);
+  return new Date(Date.now() + leaderboardLockTtlMs);
 }
 
 async function writeLeaderboardScoreIfLockHeld(
@@ -613,11 +613,11 @@ function expressRequestToFetchRequest(request: ExpressRequest): Request {
   };
 
   if (request.method !== 'GET' && request.method !== 'HEAD') {
-    if (!headers.has('content-type')) {
+    init.body = requestBodyToBodyInit(request.body);
+
+    if (!headers.has('content-type') && !(request.body instanceof Uint8Array)) {
       headers.set('content-type', 'application/json');
     }
-
-    init.body = requestBodyToBodyInit(request.body);
   }
 
   return new Request(expressRequestUrl(request), init);

package/templates/phaser-game/index.html

@@ -3,6 +3,8 @@
   <head>
     <meta charset="UTF-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+    <meta name="theme-color" content="#0f172a" />
+    <link rel="manifest" href="/manifest.webmanifest" />
     <title>__GAME_TITLE__</title>
   </head>
   <body>

package/templates/phaser-game/legal/privacy.html

@@ -0,0 +1,78 @@
+<!doctype html>
+<html lang="en">
+  <head>
+    <meta charset="utf-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1" />
+    <title>__GAME_TITLE__ Privacy Policy</title>
+    <style>
+      :root {
+        color-scheme: light dark;
+        font-family:
+          Inter, ui-sans-serif, system-ui, -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif;
+        line-height: 1.6;
+      }
+
+      body {
+        margin: 0;
+        background: Canvas;
+        color: CanvasText;
+      }
+
+      main {
+        box-sizing: border-box;
+        margin: 0 auto;
+        max-width: 760px;
+        padding: 48px 24px;
+      }
+
+      h1,
+      h2 {
+        line-height: 1.2;
+      }
+
+      a {
+        color: LinkText;
+      }
+
+      nav {
+        display: flex;
+        flex-wrap: wrap;
+        gap: 16px;
+        margin: 0 0 32px;
+      }
+    </style>
+  </head>
+  <body>
+    <main>
+      <nav aria-label="Legal pages">
+        <a href="/privacy/" aria-current="page">Privacy</a>
+        <a href="/support/">Support</a>
+        <a href="/terms/">Terms</a>
+      </nav>
+      <h1>__GAME_TITLE__ Privacy Policy</h1>
+      <p>Last updated: __LEGAL_LAST_UPDATED__</p>
+      <p>
+        __GAME_TITLE__ collects only the information needed to run the game,
+        keep player progress, operate platform features, and respond to support
+        requests.
+      </p>
+      <h2>Information We Process</h2>
+      <p>
+        The game may process platform player identifiers, gameplay progress,
+        leaderboard scores, purchase or reward validation records, coarse
+        device/runtime information, and support messages you choose to send.
+      </p>
+      <h2>How We Use Information</h2>
+      <p>
+        We use this information to provide gameplay features, prevent duplicate
+        grants, maintain leaderboards, troubleshoot issues, and satisfy platform
+        review or safety requirements.
+      </p>
+      <h2>Contact</h2>
+      <p>
+        Replace this template before release with the game owner's support
+        contact and jurisdiction-specific privacy disclosures.
+      </p>
+    </main>
+  </body>
+</html>

package/templates/phaser-game/legal/support.html

@@ -0,0 +1,66 @@
+<!doctype html>
+<html lang="en">
+  <head>
+    <meta charset="utf-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1" />
+    <title>__GAME_TITLE__ Support</title>
+    <style>
+      :root {
+        color-scheme: light dark;
+        font-family:
+          Inter, ui-sans-serif, system-ui, -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif;
+        line-height: 1.6;
+      }
+
+      body {
+        margin: 0;
+        background: Canvas;
+        color: CanvasText;
+      }
+
+      main {
+        box-sizing: border-box;
+        margin: 0 auto;
+        max-width: 760px;
+        padding: 48px 24px;
+      }
+
+      h1,
+      h2 {
+        line-height: 1.2;
+      }
+
+      a {
+        color: LinkText;
+      }
+
+      nav {
+        display: flex;
+        flex-wrap: wrap;
+        gap: 16px;
+        margin: 0 0 32px;
+      }
+    </style>
+  </head>
+  <body>
+    <main>
+      <nav aria-label="Legal pages">
+        <a href="/privacy/">Privacy</a>
+        <a href="/support/" aria-current="page">Support</a>
+        <a href="/terms/">Terms</a>
+      </nav>
+      <h1>__GAME_TITLE__ Support</h1>
+      <p>
+        Replace this template before release with a monitored support email or
+        help desk URL. When contacting support, include your platform, app
+        version, build ID, and a short description of the issue.
+      </p>
+      <h2>Common Requests</h2>
+      <p>
+        Include relevant purchase receipts, reward/ad context, leaderboard run
+        IDs, or save-slot details when reporting account, purchase, reward, or
+        progress problems.
+      </p>
+    </main>
+  </body>
+</html>

package/templates/phaser-game/legal/terms.html

@@ -0,0 +1,70 @@
+<!doctype html>
+<html lang="en">
+  <head>
+    <meta charset="utf-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1" />
+    <title>__GAME_TITLE__ Terms</title>
+    <style>
+      :root {
+        color-scheme: light dark;
+        font-family:
+          Inter, ui-sans-serif, system-ui, -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif;
+        line-height: 1.6;
+      }
+
+      body {
+        margin: 0;
+        background: Canvas;
+        color: CanvasText;
+      }
+
+      main {
+        box-sizing: border-box;
+        margin: 0 auto;
+        max-width: 760px;
+        padding: 48px 24px;
+      }
+
+      h1,
+      h2 {
+        line-height: 1.2;
+      }
+
+      a {
+        color: LinkText;
+      }
+
+      nav {
+        display: flex;
+        flex-wrap: wrap;
+        gap: 16px;
+        margin: 0 0 32px;
+      }
+    </style>
+  </head>
+  <body>
+    <main>
+      <nav aria-label="Legal pages">
+        <a href="/privacy/">Privacy</a>
+        <a href="/support/">Support</a>
+        <a href="/terms/" aria-current="page">Terms</a>
+      </nav>
+      <h1>__GAME_TITLE__ Terms</h1>
+      <p>Last updated: __LEGAL_LAST_UPDATED__</p>
+      <p>
+        These starter terms are placeholders for the game owner's production
+        terms of service.
+      </p>
+      <h2>Gameplay</h2>
+      <p>
+        Players are expected to follow platform rules, avoid abusive behavior,
+        and use the game only through supported clients and stores.
+      </p>
+      <h2>Platform Features</h2>
+      <p>
+        Purchases, rewarded ads, saves, and leaderboards may depend on platform
+        availability and authoritative backend validation.
+      </p>
+    </main>
+  </body>
+</html>

package/templates/phaser-game/mpgd.targets.json

@@ -6,6 +6,12 @@
       "adapter": "browser",
       "output": "artifacts/web-preview"
     },
+    "microsoft-store": {
+      "kind": "web",
+      "gameApp": ".",
+      "adapter": "browser",
+      "output": "artifacts/microsoft-store"
+    },
     "android": {
       "kind": "capacitor-android",
       "gameApp": ".",