A WebGPU retro game engine for TypeScript, inspired by RetroBlit. Build pixel-perfect 2D games with a clean, fantasy-console-style API.

Commits on main

fix(assets): validate embedded btfont data uris case-insensitively
Signed-off-by: Vaclav Vancura <commit@vancura.dev>
Vaclav Vancura committed
test(core): expand render dimension limit coverage for VV-513
Signed-off-by: Vaclav Vancura <commit@vancura.dev>
Vaclav Vancura committed
docs(security): document ci action sha pinning and publish provenance
Signed-off-by: Vaclav Vancura <commit@vancura.dev>
Vaclav Vancura committed
docs(security): clarify runbook triage and VV-522 fallback wording
Signed-off-by: Vaclav Vancura <commit@vancura.dev>
Vaclav Vancura committed
docs(security): document solo-maintainer incident triage (VV-517)
Signed-off-by: Vaclav Vancura <commit@vancura.dev>
Vaclav Vancura committed
fix(security): remediate brace-expansion and ws dev CVEs (VV-524)
Signed-off-by: Václav Vančura <commit@vancura.dev>
Vaclav Vancura committed
fix(security): run audit on every pr and bound override ranges
Signed-off-by: Vaclav Vancura <commit@vancura.dev>
Vaclav Vancura committed
ci(security): add continuous dependency audit gate (VV-519)
Signed-off-by: Vaclav Vancura <commit@vancura.dev>
Vaclav Vancura committed
docs(security): use portable blit-tech-root path in runbook
Signed-off-by: Vaclav Vancura <commit@vancura.dev>
Vaclav Vancura committed
fix(security): harden mcp preflight and use portable runbook paths
Signed-off-by: Vaclav Vancura <commit@vancura.dev>
Vaclav Vancura committed
Vaclav Vancura committed
feat(examples): use partial configure() in basics demo
Signed-off-by: Vaclav Vancura <commit@vancura.dev>
Vaclav Vancura committed
chore: fix claude launch config with node type and integrated terminal
Signed-off-by: Vaclav Vancura <commit@vancura.dev>
Vaclav Vancura committed
chore(docs): normalize em and en dashes to ascii hyphens
Signed-off-by: Vaclav Vancura <commit@vancura.dev>
Vaclav Vancura committed
chore: add claude launch config for demos dev server
Signed-off-by: Vaclav Vancura <commit@vancura.dev>
Vaclav Vancura committed
feat: release 1.0.4
Signed-off-by: Vaclav Vancura <commit@vancura.dev>
Vaclav Vancura committed
docs: add security limits utils to CLAUDE.md architecture map
Signed-off-by: Vaclav Vancura <commit@vancura.dev>
Vaclav Vancura committed
ci(ci): pin third-party actions to commit SHAs and explicit permissions
Signed-off-by: Vaclav Vancura <commit@vancura.dev>
Vaclav Vancura committed
fix(assets): sanitize btfont metadata and test partial sprite clips
Signed-off-by: Vaclav Vancura <commit@vancura.dev>
Vaclav Vancura committed
feat(assets): cap sprite and bitmap font asset dimensions
Signed-off-by: Vaclav Vancura <commit@vancura.dev>
Vaclav Vancura committed
fix(ci): replace ignoredBuiltDependencies with allowBuilds for esbuild
Signed-off-by: Vaclav Vancura <commit@vancura.dev>
Vaclav Vancura committed
chore(ci): add pnpm 10 supply-chain hardening
Signed-off-by: Vaclav Vancura <commit@vancura.dev>
Vaclav Vancura committed
test(api): add clone-per-read contract tests for BT snapshot getters
Signed-off-by: Vaclav Vancura <commit@vancura.dev>
Vaclav Vancura committed
fix(utils): clear stale canvas inline styles and sync lockfile
Signed-off-by: Vaclav Vancura <commit@vancura.dev>
Vaclav Vancura committed
feat(api): convert BT namespace accessors to ES getters
Signed-off-by: Vaclav Vancura <commit@vancura.dev>
Vaclav Vancura committed
chore: upgrade biome from 2.4.13 to 2.4.15
Signed-off-by: Vaclav Vancura <commit@vancura.dev>
Vaclav Vancura committed
chore(release): release 1.0.3
Signed-off-by: Vaclav Vancura <commit@vancura.dev>
Vaclav Vancura committed
chore: update package URL
Signed-off-by: Vaclav Vancura <commit@vancura.dev>
Vaclav Vancura committed
chore: bump to 1.0.2
Signed-off-by: Vaclav Vancura <commit@vancura.dev>
Vaclav Vancura committed
chore(ci): ignore npm package links and sync btapi patch version
Signed-off-by: Vaclav Vancura <commit@vancura.dev>
Vaclav Vancura committed
chore(release): prepare 1.0.1 docs split for npm consumers
Signed-off-by: Vaclav Vancura <commit@vancura.dev>
Vaclav Vancura committed
feat(api): export fullscreen effect bases for npm consumers
Signed-off-by: Vaclav Vancura <commit@vancura.dev>
Vaclav Vancura committed
docs(security): update supported versions policy for 1.x
Signed-off-by: Vaclav Vancura <commit@vancura.dev>
Vaclav Vancura committed