@genex-ai/cli-demo 1.32.0-dev.650 → 1.32.0-dev.654

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@genex-ai/cli-demo",
-  "version": "1.32.0-dev.650",
+  "version": "1.32.0-dev.654",
   "description": "Set up your project's agent workspace (.claude/.codex/.cursor in the game folder), authorize, create a game project, generate AI assets, and publish (genex CLI).",
   "type": "module",
   "bin": {

package/templates/skills/genex-monetization/SKILL.md

@@ -323,12 +323,14 @@ generateButton.addEventListener('click', async () => {
 
 Call `generate()` before any await in the click handler. The SDK opens Genex's
 trusted modal or popup, showing the game, frozen request, fixed attempt price and
-USD equivalent. `estimateCoins` is required (integer 0..1,000,000); the player
+USD equivalent. `estimateCoins` is required (integer 1..1,000,000 for API-backed selections); the player
 approves this fixed amount and the game cannot confirm. New `declared-v1`
 quotes charge the full price once model work starts, even if usage costs less,
 generation fails, is canceled, or reaches its budget limit before a usable result.
-Fixed 5 charges 5 even if actual usage would bill 2. No model work means zero;
-zero is accepted only for server-authorized free or personal options. Unknown
+Fixed 5 charges 5 even if actual usage would bill 2. No model work means zero; an
+unsuccessful attempt with verified zero model cost is also uncharged.
+Every Genex API model requires a positive price, including Gemini and GLM;
+personal funding in the Genex modal remains zero coin. Unknown
 provider expense keeps billing pending and its hold intact. The provider budget
 fits inside these coins after the frozen platform tariff. This
 compute price is independent of the shop's item grid and pays no developer share.
@@ -416,15 +418,19 @@ Previously issued `consumed-v1` quotes keep their actual-usage billing and
 untagged quotes keep original success/refund terms. Never substitute a current
 catalog policy for a saved quote. `resumeWorkflow(generationId)` reopens a
 saved approval from a click using GET only, with no new price or operation.
+Already-approved zero-price API requests retain their terms. An old unconfirmed
+zero-price API quote needs a fresh price review before coin approval; never
+silently reprice it or launch paid work during recovery.
 The trusted UI sends the exact policy acknowledgement. Backend validation and
 staging remain required before delivery; the browser cannot submit costs or
 settle a bill.
 
-The public workflow catalog contains API/model rows, including the designated
-`google/gemini-3.8-flash` and `z-ai/glm-5.3-flash` offerings at **0 coins**.
-Personal Claude/ChatGPT funding in the Genex modal also costs **0 coins**, but is
-not an in-game model option. Do not infer free status from a low price or a client
-flag. Personal choices use the player's own account
+The public workflow catalog contains paid API/model rows, including
+`google/gemini-3.8-flash` and `z-ai/glm-5.3-flash`. Airena sponsors those models
+through its own direct OpenRouter path, outside the Genex runtime API.
+Personal Claude/ChatGPT funding in the Genex modal costs **0 coins**, but is
+not an in-game model option. Do not infer a free API tariff from a low price or a
+client flag. Personal choices use the player's own account
 through the provider-specific connector shown by Genex: `/player/mcp` for Claude,
 `/player/chatgpt/mcp` for ChatGPT. Account/plan limits apply; ChatGPT connector
 availability also depends on workspace policy. Genex gives the stage-by-stage
@@ -439,7 +445,7 @@ Persist the exact input, offering, idempotency key and generation ID through
 sign-in, cancellation and reload; never store the embed token. Recovery reads
 existing state and never auto-charges. A changed input or expired quote requires
 a new intentional request. The Genex workflow API requires signed-in production
-play even for zero-coin offerings. Keep a game's separately sponsored free guest
+play even for personal funding. Keep Airena's separately sponsored direct guest
 path separate; do not weaken Genex's paid or session checks.
 
 ### Calibrate before choosing the public fixed price
@@ -450,8 +456,8 @@ maxCoins, request: { modelId, prompt, outputFormat, schema?, idempotencyKey? } }
 The full creator credential spends only your own wallet; never put it in a game,
 Vite environment or logs. No play token is needed. The browser export is blocked.
 Development bills actual usage under `consumed-v1`, including failed work,
-within your explicit maximum. A maximum 5 may charge 2. Public-sponsored API
-models are developer-paid at the normal tariff in this lane; personal-only
+within your explicit maximum. A maximum 5 may charge 2. Every API model is
+developer-paid at the normal tariff in this lane; personal-only
 options are rejected. Inspect the authoritative charged coins/USD and `usage`
 cost/unknown-exposure receipt before choosing the public fixed `estimateCoins`.
 

package/templates/skills/genex-threejs-embed-auth/SKILL.md

@@ -167,8 +167,10 @@ Runtime generation (SDK 0.21.0+, signed-in production play, default-off service)
 - Required `estimateCoins` is the fixed price of a started attempt, despite its
   name: fixed 5 charges 5 even if usage would cost 2. New `declared-v1` quotes
   charge that full price on failure, cancellation or a budget limit after work
-  starts. No model work is zero; a usable result is not guaranteed. Zero is
-  accepted only when the server allows a free or personal-only option.
+  starts. No model work is zero; an unsuccessful attempt with verified zero model
+  cost is also uncharged. A usable result is not guaranteed. Every API
+  model requires a positive price, including Gemini and GLM. Personal funding
+  selected in the trusted Genex modal remains zero coin.
 - `getGeneration(id)` reads the private player/game-scoped receipt;
   `waitForGeneration(id)` waits for execution. A timeout does not cancel.
   Keep reading while billing is pending; unknown expense retains the hold and
@@ -179,7 +181,7 @@ Registered workflows require an existing trusted, operator-registered executor:
 - `getWorkflowOfferings(workflowId)` supplies model, bundle, availability,
   suggested prices and frozen operator tariff. Calibrate the game's fixed price
   with development benchmarks, then show coin and USD beside the selected option.
-  Its public offerings contain API/model rows, including sponsored free models;
+  Its public offerings contain paid API/model rows;
   personal plan funding appears only in the trusted Genex approval modal.
 - `requestWorkflow({ workflowId, offeringId, input, estimateCoins, allowExternal?,
   idempotencyKey?, timeoutMs? })` returns **approval**, not completion. Call from
@@ -189,6 +191,8 @@ Registered workflows require an existing trusted, operator-registered executor:
   reloads. Never persist the token or auto-charge on boot. Use
   `resumeWorkflow(generationId)` from a click to reopen saved approval through
   GET only, preserving pre-0.21 quotes without a replacement price.
+  Already-approved zero-price API requests retain their terms; an old unconfirmed
+  zero-price API quote needs a fresh price review before coin approval.
 - The server derives the hard model budget from the fixed price after its tariff.
   Only the selected model runs. The trusted executor validates staged artifacts;
   the browser cannot submit costs, settle a bill or claim delivery.
@@ -207,7 +211,7 @@ For calibration, server-only `@genex-ai/embed-sdk/development` uses your full
 creator bearer credential, owned project and explicit `maxCoins` to benchmark
 actual usage against your own wallet, with no production-play token. It uses
 `consumed-v1`, including failed work, and returns charged coins, output and
-actual/unknown provider cost. Public-sponsored API models are paid at the normal
+actual/unknown provider cost. All API models are paid at the normal
 tariff here; personal-only options are refused. Never bundle a creator credential
 or expose it through Vite variables. Read `$genex-monetization` for generic and
 registered-workflow examples. Native WebViews and local-test player identity