create-eigen-game 0.14.0 → 0.14.2

package/README.md

@@ -67,6 +67,10 @@ public values from `app/app-config.json` through Flutter's native
 it contains its own `package.json`, `wrangler.jsonc`, TypeScript entry point,
 generated Wrangler types, and game module. The combined CLI renders that same
 template under `server/`; it does not maintain a second Worker skeleton.
+The template approves only the `esbuild` and `workerd` install scripts that its
+toolchain requires, using npm's `allowScripts` in `package.json` and pnpm's
+`allowBuilds` in `pnpm-workspace.yaml`; npm explicitly declines the unnecessary
+optional `fsevents` fallback build.
 
 `templates/app-overlay` is applied after
 `flutter create --empty --platforms android,web`. It supplies the Firebase

package/dist/index.d.ts

@@ -8,8 +8,8 @@ interface FirebaseLink {
 }
 //#endregion
 //#region src/index.d.ts
-type PackageManager = "npm" | "pnpm";
-type Runner = (command: string, args: string[], cwd: string) => void;
+export type PackageManager = "npm" | "pnpm";
+export type Runner = (command: string, args: string[], cwd: string) => void;
 /**
  * Where a scaffold says what it is doing, so that presentation belongs to the
  * caller and this module only has to name things.
@@ -19,7 +19,7 @@ type Runner = (command: string, args: string[], cwd: string) => void;
  * substitutes one that captures each step's output and shows it only if the
  * step fails.
  */
-interface Reporter {
+export interface Reporter {
   /** Runs `body` as one named step. Its subprocesses can be captured. */
   step<T>(label: string, body: () => T): T;
   /**
@@ -44,12 +44,12 @@ interface Reporter {
  * with `RangeError: Invalid string length`. Supplying the default its check
  * misses is better than giving up the drawing.
  */
-declare function normaliseTerminalWidth(stream: {
+export declare function normaliseTerminalWidth(stream: {
   isTTY?: boolean;
   columns?: number;
 }): void;
 /** Runs every step plainly, which is what a library caller gets by default. */
-declare const plainReporter: Reporter;
+export declare const plainReporter: Reporter;
 /**
  * The runner a scaffold uses when the caller has not supplied one: it asks the
  * reporter whether the terminal is spoken for.
@@ -59,8 +59,8 @@ declare const plainReporter: Reporter;
  * handed to the reporter: on success so it can discard them, and on failure
  * so the reason survives.
  */
-declare function capturingRunner(reporter: Reporter): Runner;
-interface ScaffoldOptions {
+export declare function capturingRunner(reporter: Reporter): Runner;
+export interface ScaffoldOptions {
   directory: string;
   org?: string;
   packageManager?: PackageManager;
@@ -109,8 +109,8 @@ interface ScaffoldOptions {
  * than guess. `failed` has already warned by the time it is returned, and
  * carries no advice of its own.
  */
-type GitOutcome = "committed" | "existing" | "skipped" | "failed";
-interface ScaffoldResult {
+export type GitOutcome = "committed" | "existing" | "skipped" | "failed";
+export interface ScaffoldResult {
   root: string;
   name: string;
   git: GitOutcome;
@@ -134,10 +134,10 @@ interface ScaffoldResult {
  * the *prefix*, not the whole identifier, which is the part worth seeing
  * before answering: Google Play makes it permanent at first upload.
  */
-declare function applicationId(directory: string, org?: string): string;
-declare function detectPackageManager(userAgent?: string | undefined): PackageManager | undefined;
-declare function decodeUtf8(bytes: Buffer): string | undefined;
-interface AddContinuousIntegrationOptions {
+export declare function applicationId(directory: string, org?: string): string;
+export declare function detectPackageManager(userAgent?: string | undefined): PackageManager | undefined;
+export declare function decodeUtf8(bytes: Buffer): string | undefined;
+export interface AddContinuousIntegrationOptions {
   directory: string;
   /** Overrides the manager recorded in the project's own package.json. */
   packageManager?: PackageManager;
@@ -149,23 +149,23 @@ interface AddContinuousIntegrationOptions {
  * long as its author likes, then gain the same PR gate and signed release
  * pipeline a `--ci` scaffold would have produced.
  */
-declare function addContinuousIntegration(options: AddContinuousIntegrationOptions): {
+export declare function addContinuousIntegration(options: AddContinuousIntegrationOptions): {
   root: string;
   files: string[];
 };
 /** Asks a command a question. `ok` is "ran and succeeded"; a tool that is not installed and one that fails are both `false`, because neither can be used. */
-type Probe = (command: string, args: string[]) => {
+export type Probe = (command: string, args: string[]) => {
   ok: boolean;
   stdout: string;
 };
 /** One thing standing between this machine and a configured Firebase project, and the single command that clears it. */
-interface FirebaseProblem {
+export interface FirebaseProblem {
   /** Said as a sentence fragment, so it reads after "Firebase is not set up here:". */
   reason: string;
   /** The one command that fixes this, and nothing else. */
   fix: string;
 }
-type FirebaseReadiness = {
+export type FirebaseReadiness = {
   ready: true;
 } | {
   ready: false;
@@ -191,7 +191,7 @@ type FirebaseReadiness = {
  * that errors or grows a different output shape is left to the command that
  * actually needs the credentials.
  */
-declare function firebaseReadiness(probe?: Probe): FirebaseReadiness;
+export declare function firebaseReadiness(probe?: Probe): FirebaseReadiness;
 /**
  * Whether the scaffold would land inside a repository that already exists.
  *
@@ -224,9 +224,9 @@ declare function firebaseReadiness(probe?: Probe): FirebaseReadiness;
  * the last one. {@link scaffoldGame} asks it again, for callers that are not
  * the CLI.
  */
-declare function destinationProblem(directory: string): string | undefined;
-declare function insideWorkTree(directory: string, probe?: Probe): boolean;
-declare function scaffoldGame(options: ScaffoldOptions): ScaffoldResult;
+export declare function destinationProblem(directory: string): string | undefined;
+export declare function insideWorkTree(directory: string, probe?: Probe): boolean;
+export declare function scaffoldGame(options: ScaffoldOptions): ScaffoldResult;
 //#endregion
-export { AddContinuousIntegrationOptions, type FirebaseLink, FirebaseProblem, FirebaseReadiness, GitOutcome, PackageManager, Probe, Reporter, Runner, ScaffoldOptions, ScaffoldResult, addContinuousIntegration, applicationId, capturingRunner, decodeUtf8, destinationProblem, detectPackageManager, firebaseReadiness, insideWorkTree, normaliseTerminalWidth, plainReporter, scaffoldGame };
+export type { FirebaseLink };
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","names":[],"sources":["../src/link-firebase.ts","../src/index.ts"],"mappings":";;UAkBiB;;EAEf;;EAEA;;;;KCbU;KAEA,UAAU,iBAAiB,gBAAgB;;;;;;;;;;UAWtC;;EAEf,KAAK,GAAG,eAAe,YAAY,IAAI;;;;;EAKvC,SAAS,GAAG,eAAe,YAAY,IAAI;;EAE3C,KAAK;;EAEL,KAAK;;WAEI;;;;;;;;;;;;iBAaK,uBAAuB;EAAU;EAAiB;;;cAKrD,eAAe;;;;;;;;;;iBAiBZ,gBAAgB,UAAU,WAAW;UAkBpC;EACf;EACA;EACA,iBAAiB;;;;;;EAMjB;;;;;;EAMA;;;;;EAKA;;;;;;;;;;;EAWA;;;;;;EAMA,MAAM;;;;;EAKN,WAAW;;;;;;;KAQD;UAEK;EACf;EACA;EACA,KAAK;;;;;EAKL;;;;;;EAMA,OAAO;;;;;;;;;;iBA2HO,cAAc,mBAAmB;iBAkBjC,qBAAqB,iCAAgD;iBAoErE,WAAW,OAAO;UAoNjB;EACf;;EAEA,iBAAiB;;;;;;;;;iBAUH,yBAAyB,SAAS;EAAoC;EAAc;;;KAqCxF,SAAS,iBAAiB;EAAqB;EAAa;;;UAWvD;;EAEf;;EAEA;;KAGU;EAAsB;;EAAkB;EAAc,UAAU;;;;;;;;;;;;;;;;;;;;;;iBAsB5D,kBAAkB,QAAO,QAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA0EhD,mBAAmB;iBAiBnB,eAAe,mBAAmB,QAAO;iBAyGzC,aAAa,SAAS,kBAAkB"}
+{"version":3,"file":"index.d.ts","names":[],"sources":["../src/link-firebase.ts","../src/index.ts"],"mappings":";;UAkBiB;;EAEf;;EAEA;;;;YCbU;YAEA,UAAU,iBAAiB,gBAAgB;;;;;;;;;;iBAWtC;;EAEf,KAAK,GAAG,eAAe,YAAY,IAAI;;;;;EAKvC,SAAS,GAAG,eAAe,YAAY,IAAI;;EAE3C,KAAK;;EAEL,KAAK;;WAEI;;;;;;;;;;;;wBAaK,uBAAuB;EAAU;EAAiB;;;qBAKrD,eAAe;;;;;;;;;;wBAiBZ,gBAAgB,UAAU,WAAW;iBAkBpC;EACf;EACA;EACA,iBAAiB;;;;;;EAMjB;;;;;;EAMA;;;;;EAKA;;;;;;;;;;;EAWA;;;;;;EAMA,MAAM;;;;;EAKN,WAAW;;;;;;;YAQD;iBAEK;EACf;EACA;EACA,KAAK;;;;;EAKL;;;;;;EAMA,OAAO;;;;;;;;;;wBA2HO,cAAc,mBAAmB;wBAkBjC,qBAAqB,iCAAgD;wBAoErE,WAAW,OAAO;iBAoNjB;EACf;;EAEA,iBAAiB;;;;;;;;;wBAUH,yBAAyB,SAAS;EAAoC;EAAc;;;YAqCxF,SAAS,iBAAiB;EAAqB;EAAa;;;iBAWvD;;EAEf;;EAEA;;YAGU;EAAsB;;EAAkB;EAAc,UAAU;;;;;;;;;;;;;;;;;;;;;;wBAsB5D,kBAAkB,QAAO,QAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;wBA0EhD,mBAAmB;wBAiBnB,eAAe,mBAAmB,QAAO;wBAyGzC,aAAa,SAAS,kBAAkB"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-eigen-game",
-  "version": "0.14.0",
+  "version": "0.14.2",
   "license": "MIT",
   "description": "Scaffold an EigenInteractive game Worker and Flutter app without cloning the engine repositories.",
   "type": "module",
@@ -24,14 +24,14 @@
     "picocolors": "^1.1.1"
   },
   "devDependencies": {
-    "@types/node": "^26.2.0",
+    "@types/node": "^26.4.1",
     "typescript": "~6.0.2",
-    "vitest": "^4.1.10",
-    "wrangler": "^4.123.0",
+    "vitest": "^4.1.11",
+    "wrangler": "^4.129.0",
     "zod": "^4.4.3",
-    "@eigeninteractive/rules": "0.6.0",
-    "@eigeninteractive/server": "0.6.0",
-    "@eigeninteractive/testkit": "0.6.0"
+    "@eigeninteractive/rules": "0.6.1",
+    "@eigeninteractive/server": "0.6.1",
+    "@eigeninteractive/testkit": "0.6.1"
   },
   "engines": {
     "node": ">=22"

package/templates/project/biome.json.template

@@ -1,5 +1,5 @@
 {
-  "$schema": "https://biomejs.dev/schemas/2.5.4/schema.json",
+  "$schema": "https://biomejs.dev/schemas/2.5.12/schema.json",
   "vcs": {
     "enabled": true,
     "clientKind": "git",

package/templates/project/package.json

@@ -12,6 +12,6 @@
     "lint": "biome check ."
   },
   "devDependencies": {
-    "@biomejs/biome": "^2.5.3"
+    "@biomejs/biome": "2.5.12"
   }
 }

package/templates/worker/README.md

@@ -62,8 +62,12 @@ formatter is free to move anything written there.
 refuses to run them unless the project asks, and fails the install outright
 when one is skipped (`ERR_PNPM_IGNORED_BUILDS`). Two need theirs: `esbuild`
 fetches its platform binary, and `workerd` is the runtime `vitest` and
-`wrangler dev` execute against. npm runs install scripts by default and ignores
-the file entirely, so the scaffold is correct under both.
+`wrangler dev` execute against. npm ignores this file, so `package.json`
+declares the same two names in npm's `allowScripts` policy. Keeping both
+policies beside the Worker dependencies makes installs work without granting
+every dependency permission to run code. npm's policy also explicitly declines
+the optional `fsevents` fallback build: its package already carries a universal
+macOS binary, so compiling another one is unnecessary.
 
 `minimumReleaseAgeExclude` appears on its own. pnpm 11 will not install a
 version published less than a day ago, a quarantine against a compromised

package/templates/worker/package.json

@@ -4,6 +4,11 @@
   "private": true,
   "description": "The authoritative Example Game server on Cloudflare Workers.",
   "type": "module",
+  "allowScripts": {
+    "esbuild": true,
+    "fsevents": false,
+    "workerd": true
+  },
   "eigen": {
     "game": "Example Game"
   },