@mpgd/cli 0.49.0 → 0.50.0

package/dist/asset-pack-build.js

@@ -1,6 +1,6 @@
 import { createHash } from 'node:crypto';
 import { existsSync, linkSync, lstatSync, mkdirSync, readFileSync, realpathSync, renameSync, rmSync, writeFileSync, } from 'node:fs';
-import { dirname, isAbsolute, join, relative, resolve } from 'node:path';
+import { dirname, isAbsolute, join, relative, resolve, sep } from 'node:path';
 import { deflateRawSync } from 'node:zlib';
 import { PHASER_PACK_DELIVERY_FORMAT, PHASER_PACK_DELIVERY_VERSION, phaserPackMediaTypeForPath, validatePhaserPackBuildConfig, validatePhaserPackDeliveryManifest, } from '@mpgd/phaser-assets/pack-format';
 import { createDeterministicZip } from './asset-pack-zip.js';
@@ -92,7 +92,7 @@ function readSourceFile(rootPath, entryPath) {
     }
     const relativeToRoot = relative(realpathSync(rootPath), realpathSync(current));
     // Exact '..' components only: names like '..dots' stay inside the root.
-    if (relativeToRoot === '..' || relativeToRoot.startsWith('../') || isAbsolute(relativeToRoot)) {
+    if (relativeToRoot === '..' || relativeToRoot.startsWith(`..${sep}`) || isAbsolute(relativeToRoot)) {
         throw new Error(`Pack source path escapes the source root: ${entryPath}`);
     }
     const data = readFileSync(current);
@@ -185,7 +185,7 @@ export function buildAssetPacks(options) {
         if (isAbsolute(step)) {
             return false;
         }
-        return step === '' || (step !== '..' && !step.startsWith('../'));
+        return step === '' || (step !== '..' && !step.startsWith(`..${sep}`));
     };
     if (overlaps(realOutPath, realRootPath) || overlaps(realRootPath, realOutPath)) {
         throw new Error(`Output directory must be outside the pack source root: ${outPath} vs ${rootPath}`);

package/dist/index.js

@@ -2923,9 +2923,6 @@ function liteTemplateGameManifest(content) {
 function createGameApp(input) {
     const appDir = resolveAppDirectory(input.directory);
     const gameName = path.basename(appDir);
-    if (input.template === 'lite' && !input.workspace) {
-        throw new Error('The lite template requires --workspace until @mpgd/lite-shell is published.');
-    }
     assertValidGameName(gameName);
     const packageName = input.packageName ?? gameName;
     assertValidPackageName(packageName);

package/dist/native-build-info.json

@@ -1,5 +1,5 @@
 {
-  "kitGitSha": "88c1eb8846cc699d328d94d9c374b088c123e4c1",
+  "kitGitSha": "188055521b51d40705be086439f123401d3d2a1d",
   "kitDirty": false,
-  "packageVersion": "0.49.0"
+  "packageVersion": "0.50.0"
 }

package/dist/native-build-target.js

@@ -16,7 +16,7 @@ import { createHash as createHash3 } from "node:crypto";
 import { createReadStream } from "node:fs";
 import { copyFile, lstat as lstat2, mkdir, mkdtemp, readdir, readFile, realpath as realpath2, rename, rm, writeFile } from "node:fs/promises";
 import { tmpdir } from "node:os";
-import { dirname as dirname2, isAbsolute as isAbsolute3, join as join3, relative as relative3, resolve as resolve3, sep as sep2 } from "node:path";
+import { dirname as dirname2, isAbsolute as isAbsolute3, join as join3, relative as relative3, resolve as resolve3, sep as sep3 } from "node:path";
 
 // node_modules/.cache/mpgd-native-build/packages/phaser-assets/src/pack-format.js
 var PHASER_PACK_DELIVERY_FORMAT = "mpgd-asset-packs";
@@ -588,7 +588,7 @@ function resolveAssetPackLocations(policy, packs) {
 // node_modules/.cache/mpgd-native-build/packages/cli/src/asset-pack-build.js
 import { createHash } from "node:crypto";
 import { existsSync, linkSync, lstatSync, mkdirSync, readFileSync, realpathSync, renameSync, rmSync, writeFileSync } from "node:fs";
-import { dirname, isAbsolute, join, relative, resolve } from "node:path";
+import { dirname, isAbsolute, join, relative, resolve, sep } from "node:path";
 import { deflateRawSync as deflateRawSync2 } from "node:zlib";
 
 // node_modules/.cache/mpgd-native-build/packages/cli/src/asset-pack-zip.js
@@ -749,7 +749,7 @@ function readSourceFile(rootPath, entryPath) {
     throw new Error(`Pack source path is not a regular file: ${entryPath}`);
   }
   const relativeToRoot = relative(realpathSync(rootPath), realpathSync(current));
-  if (relativeToRoot === ".." || relativeToRoot.startsWith("../") || isAbsolute(relativeToRoot)) {
+  if (relativeToRoot === ".." || relativeToRoot.startsWith(`..${sep}`) || isAbsolute(relativeToRoot)) {
     throw new Error(`Pack source path escapes the source root: ${entryPath}`);
   }
   const data = readFileSync(current);
@@ -831,7 +831,7 @@ function buildAssetPacks(options) {
     if (isAbsolute(step)) {
       return false;
     }
-    return step === "" || step !== ".." && !step.startsWith("../");
+    return step === "" || step !== ".." && !step.startsWith(`..${sep}`);
   };
   if (overlaps(realOutPath, realRootPath) || overlaps(realRootPath, realOutPath)) {
     throw new Error(`Output directory must be outside the pack source root: ${outPath} vs ${rootPath}`);
@@ -1032,7 +1032,7 @@ function buildAssetPacks(options) {
 import { createHash as createHash2 } from "node:crypto";
 import { constants } from "node:fs";
 import { lstat, open, opendir, realpath, stat } from "node:fs/promises";
-import { isAbsolute as isAbsolute2, join as join2, relative as relative2, resolve as resolve2, sep } from "node:path";
+import { isAbsolute as isAbsolute2, join as join2, relative as relative2, resolve as resolve2, sep as sep2 } from "node:path";
 
 // node_modules/.cache/mpgd-native-build/packages/phaser-assets/src/archive-errors.js
 var ZipDecodeError = class extends Error {
@@ -1627,7 +1627,7 @@ var resolveArtifactPath = async (root, realRoot, artifactPath, deadline) => {
     throw new Error(`Artifact path is not a regular file: ${artifactPath}`);
   }
   const rel = relative2(realRoot, await deadline.race(realpath(current)));
-  if (rel === ".." || rel.startsWith(`..${sep}`) || isAbsolute2(rel)) {
+  if (rel === ".." || rel.startsWith(`..${sep2}`) || isAbsolute2(rel)) {
     throw new Error(`Artifact path escapes the root: ${artifactPath}`);
   }
   return { path: current, dev: stat2.dev, ino: stat2.ino };
@@ -2278,7 +2278,7 @@ async function fileDigest(path10) {
 }
 function inside(parent, child) {
   const step = relative3(parent, child);
-  return step === "" || !isAbsolute3(step) && step !== ".." && !step.startsWith(`..${sep2}`);
+  return step === "" || !isAbsolute3(step) && step !== ".." && !step.startsWith(`..${sep3}`);
 }
 async function noSymlink(path10) {
   let current = resolve3(path10);
@@ -3646,7 +3646,7 @@ import sharp3 from "sharp";
 
 // node_modules/.cache/mpgd-native-build/tools/target/web-artifact.js
 import { cpSync, existsSync as existsSync5, lstatSync as lstatSync3, mkdirSync as mkdirSync3, readdirSync, readFileSync as readFileSync6, realpathSync as realpathSync5, rmSync as rmSync3, writeFileSync as writeFileSync3 } from "node:fs";
-import { basename as basename2, dirname as dirname4, isAbsolute as isAbsolute5, join as join6, relative as relative7, resolve as resolve7, sep as sep3 } from "node:path";
+import { basename as basename2, dirname as dirname4, isAbsolute as isAbsolute5, join as join6, relative as relative7, resolve as resolve7, sep as sep4 } from "node:path";
 var installableManifestNames = /* @__PURE__ */ new Set(["manifest.json", "manifest.webmanifest"]);
 var generatedWebArtifactEvidenceNames = [
   "mpgd-effective-target.json",
@@ -4197,7 +4197,7 @@ function assertExistingWebOutputsAreGeneratedArtifacts(outputs) {
 }
 function isPathWithin(root, candidate) {
   const path10 = relative7(root, candidate);
-  return path10 === "" || path10 !== ".." && !path10.startsWith(`..${sep3}`) && !isAbsolute5(path10);
+  return path10 === "" || path10 !== ".." && !path10.startsWith(`..${sep4}`) && !isAbsolute5(path10);
 }
 function pathsOverlap(first, second) {
   return isPathWithin(first, second) || isPathWithin(second, first);
@@ -7039,7 +7039,7 @@ function isValidHostname(hostname) {
 
 // node_modules/.cache/mpgd-native-build/tools/target/minigame-package-budget.js
 import { lstatSync as lstatSync6, readdirSync as readdirSync3 } from "node:fs";
-import { isAbsolute as isAbsolute6, relative as relative8, resolve as resolve10, sep as sep4 } from "node:path";
+import { isAbsolute as isAbsolute6, relative as relative8, resolve as resolve10, sep as sep5 } from "node:path";
 var miniGameMainPackageLimitBytes = 4 * 1024 * 1024;
 function assertMiniGamePackageBudget(input) {
   const artifactRoot = resolve10(input.artifactRoot);
@@ -7186,7 +7186,7 @@ function assertSubpackageRoots(subpackages) {
 function resolveArtifactPath2(root, path10) {
   const resolved = resolve10(root, path10);
   const relativePath = relative8(root, resolved);
-  if (relativePath.length === 0 || relativePath === ".." || relativePath.startsWith(`..${sep4}`) || isAbsolute6(relativePath)) {
+  if (relativePath.length === 0 || relativePath === ".." || relativePath.startsWith(`..${sep5}`) || isAbsolute6(relativePath)) {
     throw new Error(`Mini-game path escapes its artifact root: ${path10}`);
   }
   try {
@@ -10371,7 +10371,7 @@ function requireNonEmptyString(input, label) {
 // node_modules/.cache/mpgd-native-build/packages/cli/src/microsoft-store-pwa-release.js
 import { createHash as createHash9 } from "node:crypto";
 import { closeSync as closeSync2, existsSync as existsSync11, openSync as openSync2, readdirSync as readdirSync4, readFileSync as readFileSync15, readSync, statSync as statSync2 } from "node:fs";
-import { relative as relative10, resolve as resolve13, sep as sep5 } from "node:path";
+import { relative as relative10, resolve as resolve13, sep as sep6 } from "node:path";
 function assertMicrosoftStorePwaProvenance(input) {
   return {
     appVersion: requireNonEmptyString2(input.appVersion, "PWA app version"),
@@ -10553,7 +10553,7 @@ function listPrecacheEntries(artifactRoot) {
       }
     }
   }
-  return files.filter((path10) => !path10.endsWith(".map") && !path10.endsWith(`${sep5}pwa-release.json`) && !path10.endsWith(`${sep5}service-worker.js`)).map((path10) => ({
+  return files.filter((path10) => !path10.endsWith(".map") && !path10.endsWith(`${sep6}pwa-release.json`) && !path10.endsWith(`${sep6}service-worker.js`)).map((path10) => ({
     url: toPrecacheUrl(artifactRoot, path10),
     source: readFileSync15(path10)
   })).sort((left, right) => compareCodeUnits(left.url, right.url));
@@ -10580,7 +10580,7 @@ function normalizePrecacheUrls(urls) {
   return normalized.sort(compareCodeUnits);
 }
 function toPrecacheUrl(root, path10) {
-  const portablePath = relative10(root, path10).split(sep5).join("/");
+  const portablePath = relative10(root, path10).split(sep6).join("/");
   return assertMicrosoftStorePwaPrecacheUrl(`./${portablePath}`);
 }
 function requireGameSpecificPwaId(value) {
@@ -10657,7 +10657,7 @@ function readPwaId(input) {
 // node_modules/.cache/mpgd-native-build/tools/target/minigame-artifact.js
 import { createHash as createHash10 } from "node:crypto";
 import { copyFileSync as copyFileSync2, cpSync as cpSync2, existsSync as existsSync12, constants as fsConstants, lstatSync as lstatSync8, mkdirSync as mkdirSync7, mkdtempSync, readdirSync as readdirSync5, readFileSync as readFileSync16, realpathSync as realpathSync7, renameSync as renameSync3, rmSync as rmSync6, writeFileSync as writeFileSync10 } from "node:fs";
-import { basename as basename4, dirname as dirname8, extname as extname2, isAbsolute as isAbsolute9, join as join11, relative as relative11, resolve as resolve15, sep as sep6 } from "node:path";
+import { basename as basename4, dirname as dirname8, extname as extname2, isAbsolute as isAbsolute9, join as join11, relative as relative11, resolve as resolve15, sep as sep7 } from "node:path";
 import { parse } from "acorn";
 var miniGameArtifactEvidenceFileName = "mpgd-minigame-artifact.json";
 var miniGameEffectiveTargetConfigFileName = "mpgd-effective-target-config.json";
@@ -10753,9 +10753,9 @@ function assertMiniGameArtifactOutputDirectory(artifactRoot, projectRoot) {
   const project = resolve15(projectRoot);
   const artifact = resolve15(artifactRoot);
   const projectRelativePath = relative11(project, artifact);
-  const portableProjectRelativePath = projectRelativePath.replaceAll(sep6, "/");
+  const portableProjectRelativePath = projectRelativePath.replaceAll(sep7, "/");
   const segments = portableProjectRelativePath.split("/");
-  if (projectRelativePath.length === 0 || projectRelativePath === ".." || projectRelativePath.startsWith(`..${sep6}`) || sep6 === "/" && projectRelativePath.includes("\\") || isAbsolute9(projectRelativePath) || segments[0] !== "artifacts" || segments.length < 2) {
+  if (projectRelativePath.length === 0 || projectRelativePath === ".." || projectRelativePath.startsWith(`..${sep7}`) || sep7 === "/" && projectRelativePath.includes("\\") || isAbsolute9(projectRelativePath) || segments[0] !== "artifacts" || segments.length < 2) {
     throw new Error(`Mini-game artifact output must be a dedicated artifacts/ child: ${artifactRoot}`);
   }
   assertMiniGameArtifactRelativePath(portableProjectRelativePath, "Mini-game artifact output");
@@ -10982,7 +10982,7 @@ function pathsOverlap2(first, second) {
 }
 function isPathWithin2(root, candidate) {
   const path10 = relative11(root, candidate);
-  return path10 === "" || path10 !== ".." && !path10.startsWith(`..${sep6}`) && !isAbsolute9(path10);
+  return path10 === "" || path10 !== ".." && !path10.startsWith(`..${sep7}`) && !isAbsolute9(path10);
 }
 function portablePathComparisonKey(path10) {
   const portablePath = path10.replaceAll("\\", "/").split("/").map((segment) => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mpgd/cli",
-  "version": "0.49.0",
+  "version": "0.50.0",
   "description": "Gunshi CLI for mpgd-kit starter generation and target workflow orchestration.",
   "license": "MIT",
   "repository": {
@@ -88,10 +88,11 @@
     "@mpgd/adapter-verse8": "0.7.1",
     "@mpgd/analytics": "0.4.10",
     "@mpgd/capacitor-play-billing": "0.3.1",
-    "@mpgd/bridge": "0.13.1",
     "@mpgd/capacitor-storekit": "0.3.1",
-    "@mpgd/game-runtime": "0.7.1",
+    "@mpgd/bridge": "0.13.1",
     "@mpgd/game-services": "0.24.1",
+    "@mpgd/game-runtime": "0.7.1",
+    "@mpgd/lite-shell": "0.1.0",
     "@mpgd/i18n": "0.6.15"
   },
   "main": "./dist/index.js",

package/templates/lite-overlay/README.md

@@ -1,6 +1,6 @@
 # __GAME_TITLE__
 
-Standalone Canvas2D lite game generated by `@mpgd/create-game --template lite --workspace`.
+Canvas2D lite game generated by `@mpgd/create-game --template lite`.
 It uses `@mpgd/lite-shell`, `PlatformGateway`, and the shared mpgd game runtime.
 
 ## Start
@@ -13,7 +13,7 @@ pnpm build
 pnpm accept
 ```
 
-The lite-shell package is private until its initial npm registration. Create lite games with `--workspace` and a local kit checkout.
+Standalone games install the public `@mpgd/lite-shell` package. Add `--workspace --kit-path <mpgd-kit>` to generate a game linked to a local Kit checkout.
 The CLI supports the canvas renderer; DOM and SVG renderers are planned.
 
 ## Ownership