GamePKG 0.1.13 — Signed game descriptions and metadata

Packages can now carry optional signed title, description, author, homepage and genre metadata. Game pages display the description and project details, library rows use friendly titles with IDs retained, CLI lists expose the fields, and the browser library persists them through Hindsight/IndexedDB.

Catalog entries can include unverified descriptions before downloading a game. Installed pages use the signed package metadata instead of catalog claims. Descriptions are bounded plain text with optional line breaks; markup is displayed literally. Metadata controls, unsafe homepage URLs, excessive lengths and duplicate genres are rejected. Existing packages without these fields continue to load and use their IDs as titles.

Require GamePKG 0.1.13 or newer when creating packages or catalogs with the new fields. Update the host before importing the Ports 0.1.4 catalog. Developer instructions and the format specification include examples and byte limits.

Validation: 199 Rust tests, metadata signature-tamper rejection, offline catalog persistence, signed-over-catalog desktop precedence, actual Hindsight/IndexedDB persistence and literal HTML/XSS handling, all 19 good/seven bad examples, formatting, Clippy, extracted Linux archive build/play, Windows cross-build/startup, checksums and private-file exclusions.

Direct native game compilation remains Linux-only; Windows retains its explicit Wasm workflow. No ROMs, WADs or signing keys are included.