@genex-ai/cli-demo 1.31.0 → 1.31.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@genex-ai/cli-demo",
-  "version": "1.31.0",
+  "version": "1.31.2",
   "description": "Set up your project's agent workspace (.claude/.codex/.cursor in the game folder), authorize, create a game project, generate AI assets, and publish (genex CLI).",
   "type": "module",
   "bin": {

package/templates/skills/genex-monetization/SKILL.md

@@ -323,12 +323,14 @@ generateButton.addEventListener('click', async () => {
 
 Call `generate()` before any await in the click handler. The SDK opens Genex's
 trusted modal or popup, showing the game, frozen request, fixed attempt price and
-USD equivalent. `estimateCoins` is required (integer 0..1,000,000); the player
+USD equivalent. `estimateCoins` is required (integer 1..1,000,000 for API-backed selections); the player
 approves this fixed amount and the game cannot confirm. New `declared-v1`
 quotes charge the full price once model work starts, even if usage costs less,
 generation fails, is canceled, or reaches its budget limit before a usable result.
-Fixed 5 charges 5 even if actual usage would bill 2. No model work means zero;
-zero is accepted only for server-authorized free or personal options. Unknown
+Fixed 5 charges 5 even if actual usage would bill 2. No model work means zero; an
+unsuccessful attempt with verified zero model cost is also uncharged.
+Every Genex API model requires a positive price, including Gemini and GLM;
+personal funding in the Genex modal remains zero coin. Unknown
 provider expense keeps billing pending and its hold intact. The provider budget
 fits inside these coins after the frozen platform tariff. This
 compute price is independent of the shop's item grid and pays no developer share.
@@ -338,9 +340,12 @@ text/JSON data, not meshes or images. Validate the data before using it and neve
 execute generated code. Creature appearance or narrative may vary; keep gameplay
 stats and rewards governed by game rules rather than a paid random rarity roll.
 
-`allowExternal: true` offers configured personal Claude/ChatGPT options beside
-coins on the same quote. Each uses the player's own account and plan limits for
-zero coin, with no paid fallback. Genex freezes the choices and gives connector
+`allowExternal: true` offers the configured personal plan matching the selected
+model beside coins: Claude for Claude models, ChatGPT for ChatGPT models, and
+neither for other model families. The choice belongs only in the trusted Genex approval modal;
+never add a "Your Plan" row to the game's model picker. Each uses the player's
+own account and plan limits for zero coin, with no paid fallback. Genex freezes
+the matching choices and gives connector
 instructions; never collect subscription tokens. `source: 'external'` and
 `modelProvenance: 'unverified'` mean user-supplied output, not proof of a model
 or authority for rewards. Omit `allowExternal` to disable optional personal choices.
@@ -413,13 +418,19 @@ Previously issued `consumed-v1` quotes keep their actual-usage billing and
 untagged quotes keep original success/refund terms. Never substitute a current
 catalog policy for a saved quote. `resumeWorkflow(generationId)` reopens a
 saved approval from a click using GET only, with no new price or operation.
+Already-approved zero-price API requests retain their terms. An old unconfirmed
+zero-price API quote needs a fresh price review before coin approval; never
+silently reprice it or launch paid work during recovery.
 The trusted UI sends the exact policy acknowledgement. Backend validation and
 staging remain required before delivery; the browser cannot submit costs or
 settle a bill.
 
-The designated `google/gemini-3.8-flash` and `z-ai/glm-5.3-flash` offerings
-and personal Claude/ChatGPT offerings are **0 coins**. Do not infer free status
-from a low price or a client flag. Personal options use the player's own account
+The public workflow catalog contains paid API/model rows, including
+`google/gemini-3.8-flash` and `z-ai/glm-5.3-flash`. Airena sponsors those models
+through its own direct OpenRouter path, outside the Genex runtime API.
+Personal Claude/ChatGPT funding in the Genex modal costs **0 coins**, but is
+not an in-game model option. Do not infer a free API tariff from a low price or a
+client flag. Personal choices use the player's own account
 through the provider-specific connector shown by Genex: `/player/mcp` for Claude,
 `/player/chatgpt/mcp` for ChatGPT. Account/plan limits apply; ChatGPT connector
 availability also depends on workspace policy. Genex gives the stage-by-stage
@@ -427,13 +438,14 @@ instructions and keeps them open when the SDK returns approval. One external
 request may be active per player. Never collect subscription tokens, use the
 creator's subscription on a player's behalf, or silently switch to paid API
 work. Outputs remain user-supplied and must pass the registered backend's
-validation before delivery. Generic and workflow `allowExternal` can offer both configured providers.
+validation before delivery. Both APIs restrict personal funding to the selected
+model's provider; already-approved personal requests keep their connector for recovery.
 
 Persist the exact input, offering, idempotency key and generation ID through
 sign-in, cancellation and reload; never store the embed token. Recovery reads
 existing state and never auto-charges. A changed input or expired quote requires
 a new intentional request. The Genex workflow API requires signed-in production
-play even for zero-coin offerings. Keep a game's separately sponsored free guest
+play even for personal funding. Keep Airena's separately sponsored direct guest
 path separate; do not weaken Genex's paid or session checks.
 
 ### Calibrate before choosing the public fixed price
@@ -444,8 +456,8 @@ maxCoins, request: { modelId, prompt, outputFormat, schema?, idempotencyKey? } }
 The full creator credential spends only your own wallet; never put it in a game,
 Vite environment or logs. No play token is needed. The browser export is blocked.
 Development bills actual usage under `consumed-v1`, including failed work,
-within your explicit maximum. A maximum 5 may charge 2. Public-sponsored API
-models are developer-paid at the normal tariff in this lane; personal-only
+within your explicit maximum. A maximum 5 may charge 2. Every API model is
+developer-paid at the normal tariff in this lane; personal-only
 options are rejected. Inspect the authoritative charged coins/USD and `usage`
 cost/unknown-exposure receipt before choosing the public fixed `estimateCoins`.
 

package/templates/skills/genex-threejs-embed-auth/SKILL.md

@@ -159,8 +159,10 @@ Runtime generation (SDK 0.21.0+, signed-in production play, default-off service)
 - Required `estimateCoins` is the fixed price of a started attempt, despite its
   name: fixed 5 charges 5 even if usage would cost 2. New `declared-v1` quotes
   charge that full price on failure, cancellation or a budget limit after work
-  starts. No model work is zero; a usable result is not guaranteed. Zero is
-  accepted only when the server allows a free or personal-only option.
+  starts. No model work is zero; an unsuccessful attempt with verified zero model
+  cost is also uncharged. A usable result is not guaranteed. Every API
+  model requires a positive price, including Gemini and GLM. Personal funding
+  selected in the trusted Genex modal remains zero coin.
 - `getGeneration(id)` reads the private player/game-scoped receipt;
   `waitForGeneration(id)` waits for execution. A timeout does not cancel.
   Keep reading while billing is pending; unknown expense retains the hold and
@@ -171,6 +173,8 @@ Registered workflows require an existing trusted, operator-registered executor:
 - `getWorkflowOfferings(workflowId)` supplies model, bundle, availability,
   suggested prices and frozen operator tariff. Calibrate the game's fixed price
   with development benchmarks, then show coin and USD beside the selected option.
+  Its public offerings contain paid API/model rows;
+  personal plan funding appears only in the trusted Genex approval modal.
 - `requestWorkflow({ workflowId, offeringId, input, estimateCoins, allowExternal?,
   idempotencyKey?, timeoutMs? })` returns **approval**, not completion. Call from
   the click, then send its generation ID, exact input and fresh `getEmbedToken()`
@@ -179,14 +183,19 @@ Registered workflows require an existing trusted, operator-registered executor:
   reloads. Never persist the token or auto-charge on boot. Use
   `resumeWorkflow(generationId)` from a click to reopen saved approval through
   GET only, preserving pre-0.21 quotes without a replacement price.
+  Already-approved zero-price API requests retain their terms; an old unconfirmed
+  zero-price API quote needs a fresh price review before coin approval.
 - The server derives the hard model budget from the fixed price after its tariff.
   Only the selected model runs. The trusted executor validates staged artifacts;
   the browser cannot submit costs, settle a bill or claim delivery.
 
-Both APIs with `allowExternal: true` can offer the quote's configured personal
-Claude/ChatGPT choices alongside coins. Each costs zero, uses that player's own
-plan limits and never falls back to paid work. Personal-only offerings cannot
-become free coin execution. Submitted results are `source: 'external'` and
+Both APIs with `allowExternal: true` can offer a configured personal plan beside
+coins: Claude for Claude models, ChatGPT for ChatGPT models, and neither for
+other model families. Keep this choice in the trusted Genex approval modal; never
+render a "Your Plan" entry in the game's model picker. Each costs zero, uses that
+player's own plan limits and never falls back to paid work. Approved personal
+requests retain their connector for recovery; historical personal-only offerings
+cannot become free coin execution. Submitted results are `source: 'external'` and
 `modelProvenance: 'unverified'`; never treat them as authority for rewards.
 Genex handles connector setup; games never collect subscription credentials.
 
@@ -194,7 +203,7 @@ For calibration, server-only `@genex-ai/embed-sdk/development` uses your full
 creator bearer credential, owned project and explicit `maxCoins` to benchmark
 actual usage against your own wallet, with no production-play token. It uses
 `consumed-v1`, including failed work, and returns charged coins, output and
-actual/unknown provider cost. Public-sponsored API models are paid at the normal
+actual/unknown provider cost. All API models are paid at the normal
 tariff here; personal-only options are refused. Never bundle a creator credential
 or expose it through Vite variables. Read `$genex-monetization` for generic and
 registered-workflow examples. Native WebViews and local-test player identity