@jgengine/assets 0.7.0 → 0.9.0

package/CHANGELOG.md

@@ -11,6 +11,69 @@ Agents building on the published SDK can also read this programmatically:
 same data as typed values, so an updater can diff its installed version against
 the latest and surface the migration steps.
 
+## Unreleased
+
+## 0.9.0
+
+### Added
+
+- Mobile HUD fit — design-resolution UI scaling now applies to every game by default: `HudCanvas` measures the live viewport and scales the whole HUD from `PlayableGame.hudFit.designSize` (default 1600×900, clamps `minScale`/`maxScale` 0.4–1) so desktop-authored layouts shrink to fit a phone instead of overflowing it; `hudFit.mobile` overrides tune the phone fit separately. Pure math lives in `@jgengine/core/ui/hudScale` (`hudScaleForViewport`, `resolveHudFit`, `rectOverflow`, `overflowingPanels`); the shell mounts `@jgengine/react`'s `HudViewportProvider` around `GameUI` so games need no wiring.
+- Graphics → UI scale — a player-facing `graphics.uiScale` slider (0.5–1.5, default 1) multiplies the computed HUD scale on every platform; the same resolution system drives desktop preference and mobile shrink.
+- HUD overflow gate — `HudCanvas` measures every `HudPanel` against the viewport at runtime and reports offenders on a `data-hud-overflow` attribute (plus a console warning); `bun run shoot <game> --device mobile|both` now exits non-zero naming the panels that escape the viewport.
+- Automatic visibility & streaming defaults — an engine-level `VisibilitySystem` (exported from `@jgengine/core`) gives every scene renderer-agnostic culling and asset-streaming policy with no per-object wiring: distance culling, preload margins, hysteresis, delayed unloading, multi-camera awareness (including cameras excluded from streaming), and per-object overrides (always-visible, never-unload, disabled culling/streaming, custom render distance and preload margin).
+- Self-hosted asset mirror — `DEFAULT_RELEASE_BASE` now points at this repo's rolling `packs` release instead of the upstream host; a catalog-driven `mirror-assets` workflow (weekly cron + manual dispatch) keeps the mirror in sync with the asset catalog.
+
+### Changed
+
+- Mobile HUD fit is on by default — design-resolution HUD scaling now applies to every game with no config change (previously opt-in via `platforms: ["web", "mobile"]`). A desktop-only game keeps the legacy fixed 0.85 compact zoom by declaring `platforms: ["web"]` (without `"mobile"`).
+
+## 0.8.0
+
+Transport-agnostic multiplayer (socket.io, WebRTC p2p, LAN/Fly adapters) plus grid/voxel
+and puzzle primitives, HUD-only presentation, cumulative leveling, and a round of
+controller/camera/sensor additions. **Breaking:** the `gameui` component kit moved out of
+`@jgengine/react` onto the shadcn registry.
+
+### Migrate
+
+- Bump every `@jgengine/*` dependency to `^0.8.0` (the eight packages version in lockstep).
+- Additive only, except for `gameui` — every other 0.7.0 API is unchanged; opt into any of the below by importing it directly.
+- **Breaking:** replace any `@jgengine/react/gameui` import with the equivalent registry component (`npx shadcn@latest add https://jgengine.com/r/<name>.json`), and swap `GameUiThemeProvider` for `--jg-*` CSS variables on a wrapper element. `GameIcon` and friends moved to `@jgengine/react/gameIcons`.
+- `leveling({ thresholdMode: 'cumulative' })` is opt-in; the default `perLevel` behavior is unchanged.
+- `defineGame.physics.gravity`/`jumpVelocity` are now read by the built-in kinematics controller every frame — if a game already set them expecting a no-op, jump/fall now actually reflects them; omit both to keep the previous defaults.
+
+### Added
+
+- Cumulative leveling — `leveling({ thresholdMode: 'cumulative' })` tracks xp as a lifetime total that resolves upward across levels and clamps at the max-level threshold once capped (#12).
+- Direction-aware pool depletion — `EffectSystem.canReceive(instanceId, effect, magnitude?)` takes an optional signed magnitude; negative checks the opposite direction and returns `pools-depleted` only when every stat in the receive order is already at max, so heals reach fully-depleted targets (#168).
+- Puzzle primitives — `puzzle/cellGrid` (uniform-cell boards: line-clear, match-3 cascade, run detection) and `puzzle/fallingPiece` (rotation-state shapes, ghost drop, lock delay, classic gravity/level/score curves) for Tetris/match-3 games (#166).
+- Voxel field — `world/voxelField` (`createVoxelField`, chunked block lattice, neighbors/exposedFaces, 3D DDA raycast, dirty-tracked `chunkVersion`) for voxel games and instanced renderers; assert on `field.summary()` the way environment worlds assert on `summarizeEnvironment` (#166).
+- `defineGame` games may omit `assets` (an empty catalog is injected); `PlayableGame.presentation: 'hud'` mounts no 3D canvas/camera/pointer for board/card/menu games; an `environment()` world auto-renders as the shell's backdrop when `PlayableGame.environment` is unset (#166).
+- Declared-action intent board — `turn/intent` `createIntentBoard` for one-turn-ahead intents (Slay-the-Spire style): declare/peek/all/consume/clear (#168).
+- `turnLoop` lifecycle hooks — `config.onTurnStart`/`onTurnEnd` fire on every `advanceTurn()`; `ctx.game.turn.loop(id, config)` lazily creates/returns a notify-wrapped `TurnLoop` so every mutation (`advanceTurn`/`advancePhase`/`advanceRound`/`spend`/`gain`/`refill`/`setOrder`/...) auto-bumps `ctx.version()` with no manual wiring (#163/#168).
+- `ctx.game.store` — a reactive per-game keyed store (`set`/`delete`/`get`/`has`/`subscribe`/`mapSnapshot`/`arraySnapshot`) plus `@jgengine/react`'s `useGameStore` selector hook, replacing hand-rolled module-level stores for ad-hoc reactive game state; `ctx.game.cards.pile(id, config?)` lazily creates/returns a notify-wrapped `CardPile` the same way; `createCardPile` gained an `onChange` hook for headless use; `CommandDefinition.apply` may return void for side-effect-only commands (#163).
+- Camera — `sideScroll` rig (fixed lateral follow for 2.5D platformers/beat-'em-ups), a `none` rig (no camera mounted; pairs with `PlayableGame.presentation: 'hud'`), `rts.pan: false` (static backdrop camera: no pan/edge-scroll/rotate/zoom, still re-centers on the follow target), and the `observer` rig now defaults to the local player when `bind` is unset (#167).
+- Sensors + session — `sensor/concealment` (`colorDistance`/`concealmentScore`/`createConcealmentSensor`), `sensor/freezeMonitor` (`createFreezeMonitor`), `session/roles` (`assignRoles`); `createRoundState`'s `RoundConfig.teams` accepts per-team roles and an optional `winCondition` that `evaluate()` checks each tick, and takes an optional `phaseOrder` for arbitrary named phase cycles (`concludeRound`/`evaluate` settle only while the current phase is neither the first nor the last entry) (#151).
+- Appearance replication — presence rows carry an optional per-slot appearance channel (cosmetic ids, hex tints, model keys) alongside pose, riding the existing pose message with no protocol bump; wire `ctx.player.cosmetics.get(userId)` into the outgoing pose (#151).
+- `ctx.input` — a per-frame held-action snapshot (`publish(held)`/`isDown(action)`/`held()`) without bumping `ctx.version()`; action bindings gained `repeatMs` (repeat-fire while held); every command resolved from a bound action now carries `aim`; `pointer.secondaryCommand` runs a command on right-click off the same raycast as move/ping (#164).
+- Object spatial queries + entity patching — `ctx.scene.object.at`/`inBox`/`raycast`/`raycastAll` over unit-box objects; `ctx.scene.entity.update(id, patch)` for name/position/rotation/role/movement/behaviors/meta; per-instance `renderObject`/`objectStyles` overrides; `pointerService.worldHitCenter()` + pointer-lock center-ray aiming (#165).
+- Controller movement config — `PlayerMovementConfig` (`mode`: free/axis/grid, `axis`, `cellSize`, `collideObjects`, `beforeCommit` pre-commit hook) for the shell-driven walk controller; `defineGame.physics.gravity`/`jumpVelocity` are honored by the built-in walk controller (distinct from the standalone `physics/physicsWorld` rigid-body sim); `ctx.player.motion.impulse`/`setVerticalVelocity`/`setY`/`takePending` (`MotionIntents`); `entity.spawnPoseOf`/`resetToSpawn`/`resetAllToSpawn` (#162).
+- Model material/animation + paint — `ModelConfig.tint`/`metalness`/`roughness`/`animation` (GLTF clip playback, paused pose holds); `PointerHit.uv` + `pointerService.sampleSurface()` for material-aware picking; `ctx.scene.entity.paint` runtime paint layer, auto-rendered via a per-instance canvas texture with no per-game wiring; remote-player appearance tint recolors the shell's default capsule (#151).
+- **Transport pipe seam** (`@jgengine/ws/pipe`) — `createWsBackend` runs over any bidirectional string channel, not just a raw `WebSocket`: `TransportPipe`/`TransportPipeHandlers`/`TransportPipeFactory`, with `webSocketPipe(url, webSocketFactory?)` as the default. `createWsBackend({ userId, url?, pipe? })` — `url` stays the common case, `pipe` opens the seam to socket.io, WebRTC, and in-process loopback below.
+- **Browser-safe authoritative host** — `createGameHost` and `memoryPersistence` moved from `@jgengine/node` to `@jgengine/ws/host` (zero Node dependencies; `@jgengine/node` re-exports both unchanged from `@jgengine/node/host` / `@jgengine/node/persistence`, so existing imports keep working). `@jgengine/ws/hostRouter`'s `createHostRouter({ host, authenticate?, poseRules?, positionHistoryMs?, chatRateLimit?, chatHistoryLimit?, chatMaxBodyLength?, now? })` extracts the ws wire-protocol session logic out of `createGameWsServer` into a transport-agnostic `HostRouter` (`connect(transport) → { handleRaw, close }`, `rewind`, `close`); `@jgengine/node`'s `createGameWsServer` is now a thin binding of this router onto the `ws` npm package, same public API. `loopbackPipe(router): TransportPipeFactory` connects a `createWsBackend` straight into an in-process router.
+- **Socket.IO transport** — `@jgengine/ws/socketIoPipe` (`SocketIoLikeSocket` structural type, `socketIoPipe(socket)`, `createSocketIoBackend({ socket, userId, … })`) and `@jgengine/node/socketIoServer` (`attachGameSocketIoServer({ io, host, …router options }): { rewind, close }`, structural `SocketIoLikeServer`/`SocketIoLikeServerSocket`) ride the existing ws JSON protocol over socket.io's `send`/`message` frames — no socket.io dependency in either package's types. New `socketIo({ topology?, url? })` adapter in `@jgengine/core/runtime/adapter`.
+- **WebRTC peer-to-peer** (`@jgengine/ws/peer`) — one browser tab hosts, authoritatively, with no server process. `createPeerHost({ userId, host?, runtimes?, persistence?, tickMs?, router?, rtc? })` runs a `GameHost` + `HostRouter` in the host tab (`backend` is the host player's own loopback connection, `accept(offerCode) → Promise<answerCode>` per guest); `createPeerGuest({ userId, token?, rtc? })` offers/connects from the joining side. `encodePeerSignal`/`decodePeerSignal` turn SDP into copy-pasteable base64url codes for manual cross-machine signaling; `broadcastChannelSignaling(room)` automates it for same-origin multi-tab play, with `announcePeerHost`/`joinPeerSession` wiring host/guest to a `PeerSignaling` in one call. New `p2p({ topology?, room? })` adapter (topology defaults `"private"`).
+- **LAN adapter + Fly sugar** — `lan({ topology?, port?, path? })` in `@jgengine/core/runtime/adapter` resolves through `@jgengine/shell/multiplayer`'s `resolveShellMultiplayer` to `ws(s)://<page hostname>:<port ?? 8080><path ?? /ws>` derived from `window.location`, so any browser on the LAN auto-connects to whichever machine served the page — no URL configuration. `fly({ app, topology?, path? })` is `ws` sugar for a Fly.io deploy: resolves to `wss://<app>.fly.dev<path ?? "/ws">`. `apps/dev`'s Vite server now listens on the network (`server: { host: true }`) and exposes `?p2p=host` / `?p2p=join` query params wired through the new `resolvePeerShellMultiplayer({ gameId, role, room?, userId?, feedActions? })`.
+- `ws()` (`@jgengine/core/runtime/adapter`) gained an optional `url` field, carried through by `resolveShellMultiplayer` (`args.url ?? adapter.url ?? default`).
+
+### Removed
+
+- **The `gameui` component kit** (`@jgengine/react/gameui`) — the themed HUD kit (bars, slots, feedback, meters, panels, screens, reticles, icons) and its `GameUiThemeProvider`/`useGameUiTheme` theming have been removed. **Breaking** for anyone importing `@jgengine/react/gameui` (or its subpaths/barrel). The components now ship as installable shadcn registry items at `https://jgengine.com/r/<name>.json` (`npx shadcn@latest add https://jgengine.com/r/<name>.json`), styled with Tailwind + `--jg-*` CSS variables instead of a theme object. The icon catalog (`GameIcon`, `iconForAction`, `iconForItemId`, `isGameIconName`, `GameIconName`) moved to `@jgengine/react/gameIcons`. To theme, set the `--jg-*` variables on a wrapper element (the registry's `jg-theme` presets mirror the old `ember`/`synthwave`/`fieldkit` palettes) instead of wrapping in `GameUiThemeProvider`.
+
+### Docs
+
+- Added [CREDITS.md](CREDITS.md) crediting [achrefelouafi](https://github.com/achrefelouafi) for the MIT Three.js reference projects behind the procedural building, water, rain, and snow renderers, with links from the root, `@jgengine/core`, and `@jgengine/shell` READMEs.
+
 ## 0.7.0
 
 The engine-gaps release — 22 system-level additions across turn/tactics, cards & boards,

package/README.md

@@ -18,18 +18,57 @@ A self-generating, license-verified index of thousands of CC0 3D models — host
 
 Everything collapses into the core `AssetCatalog` via `buildCatalog({ basePath })`.
 
+## `add` — one command for anything
+
+`assets add <query>` is the front door. It fuzzy-searches **every** catalog at once — 3D models, whole packs, HUD components (the shadcn registry), and `game-icon` glyphs — then does the fetch and prints the exact copy-paste wiring. One mental model instead of four.
+
+```bash
+assets add astronaut --dir ../../apps/dev/public   # model → pull + reindex + print the assets.ts snippet
+assets add nature    --dir ../../apps/dev/public   # whole pack → pull + reindex + how to wire an id
+assets add "mana bar"                              # HUD component → the `npx shadcn add` cmd + <VitalBar/> usage
+assets add sword                                    # icon → the game-icon name to drop in a slot
+```
+
+- A **model / pack** match is fully automated: if the pack isn't already in `<dir>/models/`, it's pulled and extracted, then `reindex` runs so the id is addressable, then the `buildCatalog` + model-seam snippet is printed.
+- A **component / icon** match prints the one-liner to run and the import + usage — no bytes to pull.
+- Ambiguous query? `add` lists the top matches across kinds; narrow with `--kind model|pack|component|icon` or a more specific term. `--json` emits the ranked matches for scripting.
+
+The same ranking is available programmatically: `import { findAssets } from "@jgengine/assets"`.
+
 ## CLI
 
 ```
+assets add <query> [--kind <k>] [--dir <dir>] [--mirror <baseUrl>] [--json]
+                                               # unified import: models, packs, components, icons
 assets list [--category <c>] [--source <s>]   # browse the generated index
 assets search <term>                          # grep the index
-assets pull <source-id> [--dir public]        # download + extract GLBs into <dir>/models/<source>/
-assets add <path|url> --category <c> --license <l> [--author <a>]
+assets pull <source-id> [--dir public] [--mirror <baseUrl>] [--offline]
+                                               # download + extract a whole pack's GLBs into <dir>/models/<source>/
+assets register <path|url> --category <c> --license <l> [--author <a>]
+                                               # register a one-off single into the shipped index
 assets reindex [public/models]                # regenerate generated/*.json from pulled packs
 assets verify                                 # license + alias-integrity gate
 ```
 
-Run in-repo with `bun run --cwd packages/assets src/cli/pull.ts <verb> …`.
+Run in-repo with `bun run --cwd packages/assets src/cli/pull.ts <verb> …`. (`add <path|url> --license …` still works as an alias for `register`.)
+
+### Mirror fallback and offline pulls
+
+`pull` never has just one path to the bytes. For a given `source-id` it tries, in order, until one succeeds:
+
+1. **Mirror base override** — `--mirror <baseUrl>` (or the `JGENGINE_ASSETS_MIRROR` env var if `--mirror` is not passed) — the archive is expected at `<baseUrl>/<provider>/<source-id>.zip`, e.g. `https://my-mirror.example.com/kenney/kenney-nature.zip`.
+2. **The default GitHub-release mirror** — `https://github.com/Noisemaker111/jgengine/releases/download/packs/<provider>-<source-id>.zip`, on this repo's own rolling `packs` release (no separate assets repo). github.com is reachable from every cloud sandbox with no network-policy change, so zero-setup sessions still pull. `.github/workflows/mirror-assets.yml` (weekly cron + manual dispatch) keeps the release in sync with `src/sources/*.ts` automatically — adding a catalog entry is the whole publishing step, no manual upload. Skip this hop with `JGENGINE_ASSETS_NO_DEFAULT_MIRROR=1`.
+3. **The primary provider path** — the source's pinned `{ url, sha256? }` or, for providers that rotate URLs (Kenney), a scrape of the asset page.
+4. **The pack's own `mirror`** — an optional direct archive URL set on the `AssetSource` entry itself (`src/sources/*.ts`), tried as a last resort.
+
+If every attempt fails, `pull` throws one aggregated error naming every URL it tried and why each one failed. Whenever the source's `download` is pinned with a `sha256`, the downloaded bytes are hashed and checked against it **no matter which path supplied them** — a mirror serving stale or tampered bytes is rejected and the next source in the chain is tried instead.
+
+`--offline` skips the network entirely: it succeeds immediately if `<dir>/models/<source-id>/` already has files in it, and otherwise fails fast with a message telling you to pull once on a connected machine or point `--mirror`/`JGENGINE_ASSETS_MIRROR` at a reachable archive — useful for CI scripts that should error in seconds instead of hanging on a blocked fetch.
+
+**Network-restricted environments** — a `403` on `CONNECT` from an outbound proxy means the environment's network policy blocks that provider host (common in sandboxed cloud sessions); it is a policy decision, not a transient failure, so retrying never helps. Either allowlist the host in the environment settings, or pull once on a machine that can reach the providers, then:
+
+- commit (or otherwise host) the resulting `public/models/<source-id>/` directory so restricted environments read it straight off disk and use `assets pull --offline` as a fast, honest no-op check, or
+- host your own mirror of the zip archives at `<baseUrl>/<provider>/<source-id>.zip` and set `JGENGINE_ASSETS_MIRROR=<baseUrl>` (or pass `--mirror <baseUrl>`) so `pull` fetches from it instead of the original provider.
 
 ## Adding assets
 
@@ -46,7 +85,7 @@ bun src/cli/pull.ts reindex ../../apps/dev/public/models           # regenerate
 bun src/cli/pull.ts verify                                         # license + alias gate
 ```
 
-A **new provider** is just a new `src/sources/<provider>.ts` added to the `sources` array in `src/sources/index.ts`. Pinned providers use `download: { url, sha256? }`; providers that rotate URLs (Kenney) use `download: { scrape: <page> }`.
+A **new provider** is just a new `src/sources/<provider>.ts` added to the `sources` array in `src/sources/index.ts`. Pinned providers use `download: { url, sha256? }`; providers that rotate URLs (Kenney) use `download: { scrape: <page> }`. Any entry can also carry an optional top-level `mirror: <archiveUrl>` — a direct URL `pull` falls back to if both a `--mirror`/`JGENGINE_ASSETS_MIRROR` override and the primary path fail (see "Mirror fallback and offline pulls" above).
 
 **A single one-off** — no code edit, zero bytes stored (URL) or copied into `local/` (path):
 
@@ -78,7 +117,7 @@ export const game: PlayableGame = {
 };
 ```
 
-`buildCatalog({ sources: ["kenney-nature"] })` restricts to chosen packs; `includeAliases` / `includeSingles` default true. Discover ids with `assets search <term>` / `assets list --category <c>` instead of memorizing them. See `packages/games/asset-showcase` for a full working example.
+`buildCatalog({ sources: ["kenney-nature"] })` restricts to chosen packs; `includeAliases` / `includeSingles` default true. Discover ids with `assets add <query>` (or `assets search <term>` / `assets list --category <c>`) instead of memorizing them.
 
 ### Serving the bytes
 
@@ -94,3 +133,4 @@ bun src/cli/pull.ts pull kenney-nature --dir ../../apps/dev/public   # → apps/
 
 - Kenney rotates download URLs, so its sources `scrape` the asset page at pull time.
 - Quaternius / KayKit pages gate downloads behind JS; automated `pull` falls back to a clear error when no archive link is found — download those manually into the staging dir, then `reindex`.
+- `pull`'s mirror fallback and `--offline` guard exist for network-restricted environments (CI, sandboxes without provider access); see "Mirror fallback and offline pulls" above.

package/dist/cli/paths.d.ts

@@ -0,0 +1,4 @@
+/** Sibling of `cli/` under `src/` (dev) or `dist/` (published) so reindex writes the tree consumers import. */
+export declare function resolveGeneratedDir(cliDir: string): string;
+export declare function resolvePackageTreeRoot(cliDir: string): string;
+export declare function resolvePackageRoot(cliDir: string): string;

package/dist/cli/paths.js

@@ -0,0 +1,11 @@
+import { join, resolve } from "node:path";
+/** Sibling of `cli/` under `src/` (dev) or `dist/` (published) so reindex writes the tree consumers import. */
+export function resolveGeneratedDir(cliDir) {
+    return join(resolve(cliDir, ".."), "generated");
+}
+export function resolvePackageTreeRoot(cliDir) {
+    return resolve(cliDir, "..");
+}
+export function resolvePackageRoot(cliDir) {
+    return resolve(cliDir, "..", "..");
+}

package/dist/cli/pull.d.ts

@@ -1,2 +1,8 @@
 #!/usr/bin/env node
-export {};
+/** Sibling of `cli/` under `src/` (dev) or `dist/` (published) so reindex writes the tree consumers import. */
+export declare const generatedDir: string;
+export { resolveGeneratedDir } from "./paths.js";
+export declare function flag(argv: string[], name: string): string | undefined;
+export declare function describeNetworkFailure(error: unknown): string;
+export declare function isPopulated(dir: string): boolean;
+export declare function cmdPull(argv: string[]): Promise<void>;

package/dist/cli/pull.js

@@ -1,21 +1,27 @@
 #!/usr/bin/env node
-import { copyFileSync, existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import { copyFileSync, existsSync, mkdirSync, readdirSync, readFileSync, writeFileSync } from "node:fs";
 import { basename, dirname, join, resolve } from "node:path";
 import { fileURLToPath } from "node:url";
-import { downloadArchive, extractGlbs, extractTextures, resolveArchiveUrl, sha256Hex } from "../download.js";
+import { downloadPackArchive, extractGlbs, extractTextures } from "../download.js";
+import { rankAssets } from "../find.js";
 import { generatedIndex } from "../generated/index.js";
 import { reindex } from "../indexGen.js";
 import { isScrapeDownload } from "../manifest.js";
+import { registryCatalog } from "../registry.js";
+import { componentWiringSnippet, iconWiringSnippet, modelWiringSnippet } from "../snippet.js";
 import { sourceById } from "../sources/index.js";
 import { verifyManifest } from "../verify.js";
+import { resolveGeneratedDir, resolvePackageRoot, resolvePackageTreeRoot } from "./paths.js";
 const here = dirname(fileURLToPath(import.meta.url));
-const pkgRoot = resolve(here, "..", "..");
-const srcDir = join(pkgRoot, "src");
-const generatedDir = join(srcDir, "generated");
-const singlesJson = join(srcDir, "singles.json");
+const packageTreeRoot = resolvePackageTreeRoot(here);
+const pkgRoot = resolvePackageRoot(here);
+/** Sibling of `cli/` under `src/` (dev) or `dist/` (published) so reindex writes the tree consumers import. */
+export const generatedDir = resolveGeneratedDir(here);
+export { resolveGeneratedDir } from "./paths.js";
+const singlesJson = join(packageTreeRoot, "singles.json");
 const localDir = join(pkgRoot, "local");
 const CDN_BASE = "https://cdn.jsdelivr.net/gh/Noisemaker111/jgengine@main/packages/assets/local";
-function flag(argv, name) {
+export function flag(argv, name) {
     const index = argv.indexOf(`--${name}`);
     return index >= 0 ? argv[index + 1] : undefined;
 }
@@ -23,6 +29,19 @@ function fail(message) {
     console.error(`error: ${message}`);
     process.exit(1);
 }
+export function describeNetworkFailure(error) {
+    const chain = [];
+    let current = error;
+    while (current instanceof Error) {
+        chain.push(current.message);
+        current = current.cause;
+    }
+    const text = chain.length > 0 ? chain.join(" — ") : String(error);
+    const looksPolicyBlocked = /\b403\b|CONNECT|proxy|ENOTFOUND|ECONNREFUSED|ETIMEDOUT|fetch failed/i.test(text);
+    return looksPolicyBlocked
+        ? `${text}\nhint: a 403/CONNECT failure here usually means the sandbox network policy blocks this host — not a transient error, retrying won't help. Allowlist the host in the environment settings, point JGENGINE_ASSETS_MIRROR at a reachable mirror, or build with procedural geometry.`
+        : text;
+}
 function cmdList(argv) {
     const category = flag(argv, "category");
     const source = flag(argv, "source");
@@ -46,28 +65,42 @@ function cmdSearch(argv) {
     }
     console.log(`— ${Math.min(rows.length, limit)} of ${rows.length} matches for "${term}"`);
 }
-async function cmdPull(argv) {
+export function isPopulated(dir) {
+    return existsSync(dir) && readdirSync(dir).length > 0;
+}
+export async function cmdPull(argv) {
     const sourceId = argv[0];
-    if (sourceId === undefined)
-        fail("usage: pull <source-id> [--dir <dir>]");
+    if (sourceId === undefined) {
+        fail("usage: pull <source-id> [--dir <dir>] [--mirror <baseUrl>] [--offline]");
+    }
     const source = sourceById.get(sourceId);
     if (source === undefined)
         fail(`unknown source: ${sourceId}`);
     const outRoot = resolve(flag(argv, "dir") ?? "public");
     const outDir = join(outRoot, "models", sourceId);
-    console.log(`resolving ${sourceId}${isScrapeDownload(source.download) ? " (scrape)" : ""}…`);
-    const url = await resolveArchiveUrl(source);
-    console.log(`downloading ${url}`);
-    const archive = await downloadArchive(url);
-    if (!isScrapeDownload(source.download) && source.download.sha256 !== undefined) {
-        const actual = await sha256Hex(archive);
-        if (actual !== source.download.sha256) {
-            fail(`sha256 mismatch for ${sourceId}: expected ${source.download.sha256}, got ${actual}`);
+    const offline = argv.includes("--offline");
+    const mirrorBase = flag(argv, "mirror") ?? process.env.JGENGINE_ASSETS_MIRROR;
+    if (offline) {
+        if (!isPopulated(outDir)) {
+            fail(`--offline set but ${outDir} is empty; pull it once on a connected machine (or via ` +
+                `--mirror/JGENGINE_ASSETS_MIRROR) and commit/host that directory before running offline`);
         }
+        console.log(`offline: ${outDir} already populated, skipping network`);
+        return;
     }
+    const result = await fetchPackInto(source, outRoot, { mirrorBase });
+    const textureNote = result.textures > 0 ? ` + ${result.textures} texture(s)` : "";
+    console.log(`pulled ${result.models} models${textureNote} -> ${result.outDir}`);
+}
+async function fetchPackInto(source, outRoot, options) {
+    const outDir = join(outRoot, "models", source.id);
+    console.log(`resolving ${source.id}${isScrapeDownload(source.download) ? " (scrape)" : ""}` +
+        `${options.mirrorBase !== undefined ? ` [mirror override: ${options.mirrorBase}]` : ""}…`);
+    const { archive, url, attempted } = await downloadPackArchive(source, { mirrorBase: options.mirrorBase });
+    console.log(`downloaded ${url}${attempted.length > 1 ? ` (after ${attempted.length - 1} failed attempt(s))` : ""}`);
     const glbs = extractGlbs(archive);
     if (glbs.length === 0)
-        fail(`no .glb files found in ${sourceId} archive`);
+        fail(`no .glb files found in ${source.id} archive`);
     mkdirSync(outDir, { recursive: true });
     for (const glb of glbs)
         writeFileSync(join(outDir, glb.file), glb.bytes);
@@ -77,8 +110,7 @@ async function cmdPull(argv) {
         mkdirSync(dirname(dest), { recursive: true });
         writeFileSync(dest, texture.bytes);
     }
-    const textureNote = textures.length > 0 ? ` + ${textures.length} texture(s)` : "";
-    console.log(`pulled ${glbs.length} models${textureNote} -> ${outDir}`);
+    return { outDir, models: glbs.length, textures: textures.length, url };
 }
 function readSingles() {
     if (!existsSync(singlesJson))
@@ -88,10 +120,11 @@ function readSingles() {
 function writeSingles(list) {
     writeFileSync(singlesJson, `${JSON.stringify(list, null, 2)}\n`);
 }
-function cmdAdd(argv) {
+function cmdRegisterSingle(argv) {
     const target = argv[0];
-    if (target === undefined)
-        fail("usage: add <path|url> --category <c> --license <l> [--author <a>] [--id <id>]");
+    if (target === undefined) {
+        fail("usage: register <path|url> --category <c> --license <l> [--author <a>] [--id <id>]");
+    }
     const license = flag(argv, "license");
     if (license === undefined)
         fail("add requires --license");
@@ -124,6 +157,95 @@ function cmdAdd(argv) {
     writeSingles(singles);
     console.log(`added single ${id} -> ${url}${isUrl ? " (0 bytes stored)" : " (copied to local/)"}`);
 }
+const KINDS = ["model", "pack", "component", "icon"];
+function describeMatch(match) {
+    switch (match.kind) {
+        case "model":
+            return `[model]     ${match.id}${match.via === "alias" ? "  (alias)" : match.via === "single" ? "  (single)" : ""}`;
+        case "pack":
+            return `[pack]      ${match.source} — ${match.title}`;
+        case "component":
+            return `[component] ${match.name} — ${match.title}`;
+        case "icon":
+            return `[icon]      ${match.name}`;
+    }
+}
+async function performAdd(match, argv) {
+    if (match.kind === "component") {
+        const component = registryCatalog.components.find((entry) => entry.name === match.name);
+        if (component === undefined)
+            fail(`component vanished from catalog: ${match.name}`);
+        console.log(`component: ${component.title} — ${component.description}\n`);
+        console.log(componentWiringSnippet(component));
+        return;
+    }
+    if (match.kind === "icon") {
+        console.log(`icon: ${match.name}\n`);
+        console.log(iconWiringSnippet(match.name));
+        return;
+    }
+    const source = sourceById.get(match.source);
+    if (source === undefined)
+        fail(`match resolves to unknown source: ${match.source}`);
+    const outRoot = resolve(flag(argv, "dir") ?? "public");
+    const outDir = join(outRoot, "models", match.source);
+    const mirrorBase = flag(argv, "mirror") ?? process.env.JGENGINE_ASSETS_MIRROR;
+    if (isPopulated(outDir)) {
+        console.log(`${match.source} already present in ${outDir}`);
+    }
+    else {
+        const result = await fetchPackInto(source, outRoot, { mirrorBase });
+        const textureNote = result.textures > 0 ? ` + ${result.textures} texture(s)` : "";
+        console.log(`pulled ${result.models} models${textureNote} -> ${result.outDir}`);
+    }
+    const result = reindex(join(outRoot, "models"), generatedDir);
+    console.log(`reindexed ${result.total} entries -> ${generatedDir}`);
+    if (match.kind === "model") {
+        console.log(`\nwire it in (characters/enemies go in entityModels instead):\n`);
+        console.log(modelWiringSnippet(match.id));
+    }
+    else {
+        console.log(`\n${match.title}: browse ids with \`assets list --source ${match.source}\`, then wire like:\n`);
+        console.log(modelWiringSnippet(`${match.source}/<model>`));
+    }
+}
+async function cmdAdd(argv) {
+    const query = argv[0];
+    if (query === undefined) {
+        fail("usage: add <query> [--kind model|pack|component|icon] [--dir <dir>] [--mirror <baseUrl>] [--json]\n" +
+            "       add <path|url> --license <l> [--category <c>]   (register a one-off single into the shipped index)");
+    }
+    // Back-compat: the old `add` registered a one-off single, always with --license.
+    if (flag(argv, "license") !== undefined) {
+        cmdRegisterSingle(argv);
+        return;
+    }
+    const kindFlag = flag(argv, "kind");
+    if (kindFlag !== undefined && !KINDS.includes(kindFlag)) {
+        fail(`--kind must be one of ${KINDS.join(", ")}`);
+    }
+    const kind = kindFlag;
+    const ranked = rankAssets(query, { kind, limit: Number(flag(argv, "limit") ?? "12") });
+    if (ranked.length === 0) {
+        fail(`no asset matches "${query}" — try a broader term or \`assets search <term>\``);
+    }
+    if (argv.includes("--json")) {
+        console.log(JSON.stringify(ranked, null, 2));
+        return;
+    }
+    const top = ranked[0];
+    const runnerUp = ranked[1]?.score ?? 0;
+    const decisive = ranked.length === 1 || kind !== undefined || top.score - runnerUp >= 20;
+    if (!decisive) {
+        console.log(`several matches for "${query}" — narrow with --kind or a more specific term:\n`);
+        for (const entry of ranked.slice(0, 8))
+            console.log(`  ${describeMatch(entry.match)}`);
+        console.log(`\nthen re-run, e.g. \`assets add "${query}" --kind ${top.match.kind}\``);
+        return;
+    }
+    console.log(`→ ${describeMatch(top.match)}\n`);
+    await performAdd(top.match, argv);
+}
 function cmdReindex(argv) {
     const modelsDir = resolve(argv[0] ?? join("public", "models"));
     if (!existsSync(modelsDir))
@@ -143,28 +265,33 @@ function cmdVerify() {
         console.error(`  ✗ ${error}`);
     fail(`verify failed with ${result.errors.length} problem(s)`);
 }
-const [command, ...rest] = process.argv.slice(2);
-switch (command) {
-    case "list":
-        cmdList(rest);
-        break;
-    case "search":
-        cmdSearch(rest);
-        break;
-    case "pull":
-        await cmdPull(rest);
-        break;
-    case "add":
-        cmdAdd(rest);
-        break;
-    case "reindex":
-        cmdReindex(rest);
-        break;
-    case "verify":
-        cmdVerify();
-        break;
-    default:
-        console.log("usage: assets <list|search|pull|add|reindex|verify> [...args]");
-        if (command !== undefined && command !== "help")
-            process.exit(1);
+if (import.meta.main) {
+    const [command, ...rest] = process.argv.slice(2);
+    switch (command) {
+        case "list":
+            cmdList(rest);
+            break;
+        case "search":
+            cmdSearch(rest);
+            break;
+        case "pull":
+            await cmdPull(rest).catch((error) => fail(describeNetworkFailure(error)));
+            break;
+        case "add":
+            await cmdAdd(rest).catch((error) => fail(describeNetworkFailure(error)));
+            break;
+        case "register":
+            cmdRegisterSingle(rest);
+            break;
+        case "reindex":
+            cmdReindex(rest);
+            break;
+        case "verify":
+            cmdVerify();
+            break;
+        default:
+            console.log("usage: assets <add|list|search|pull|register|reindex|verify> [...args]");
+            if (command !== undefined && command !== "help")
+                process.exit(1);
+    }
 }

package/dist/download.d.ts

@@ -1,4 +1,5 @@
 import { type AssetSource } from "./manifest.js";
+export type FetchLike = typeof fetch;
 export interface ExtractedGlb {
     file: string;
     bytes: Uint8Array;
@@ -9,8 +10,50 @@ export interface ExtractedTexture {
     bytes: Uint8Array;
 }
 export declare function findArchiveUrl(html: string, pageUrl: string): string | null;
-export declare function resolveArchiveUrl(source: AssetSource): Promise<string>;
-export declare function downloadArchive(url: string): Promise<Uint8Array>;
+export declare function resolveArchiveUrl(source: AssetSource, fetchImpl?: FetchLike): Promise<string>;
+export declare function downloadArchive(url: string, fetchImpl?: FetchLike): Promise<Uint8Array>;
+/**
+ * Layout for the `--mirror` / `JGENGINE_ASSETS_MIRROR` base URL override: the
+ * archive for a pack is expected at `<baseUrl>/<provider>/<packId>.zip`, e.g.
+ * `https://my-mirror.example.com/kenney/kenney-nature.zip`.
+ */
+export declare function mirrorOverrideUrl(baseUrl: string, source: AssetSource): string;
+/**
+ * Default asset mirror: this repo's own GitHub Releases, reachable from every
+ * cloud sandbox without network-policy changes (github.com is on the default
+ * allowlist). Assets live on the rolling `packs` release, one flat zip per
+ * pack named `<provider>-<packId>.zip`, kept in sync with the source catalog
+ * by `.github/workflows/mirror-assets.yml` — adding a catalog entry is the
+ * whole publishing step. Override the chain with `--mirror` /
+ * `JGENGINE_ASSETS_MIRROR`, or disable this hop with
+ * `JGENGINE_ASSETS_NO_DEFAULT_MIRROR=1`.
+ */
+export declare const DEFAULT_RELEASE_BASE = "https://github.com/Noisemaker111/jgengine/releases/download/packs";
+/** URL of `source`'s archive on the default GitHub-release mirror. */
+export declare function defaultReleaseUrl(source: AssetSource): string;
+export interface DownloadPackOptions {
+    /** Explicit mirror base override (CLI `--mirror` / `JGENGINE_ASSETS_MIRROR`), tried before the primary provider path. */
+    mirrorBase?: string;
+    fetchImpl?: FetchLike;
+}
+export interface DownloadPackResult {
+    archive: Uint8Array;
+    url: string;
+    /** Every URL attempted, in order, ending with the one that succeeded. */
+    attempted: readonly string[];
+}
+/**
+ * Resolves and downloads a pack's archive, trying sources in order until one
+ * succeeds: (1) the mirror base override at `mirrorOverrideUrl`, (2) the
+ * default GitHub-release mirror at `defaultReleaseUrl` (skipped when
+ * `JGENGINE_ASSETS_NO_DEFAULT_MIRROR=1`), (3) the primary provider path
+ * (`resolveArchiveUrl`: scrape or pinned URL), (4) the pack's own `mirror`
+ * URL. A pinned `sha256` is verified against whichever
+ * source supplied the bytes; a mismatch is treated as a failed attempt so the
+ * next source in the chain is tried. Throws with every attempted URL and its
+ * failure reason when all sources fail.
+ */
+export declare function downloadPackArchive(source: AssetSource, options?: DownloadPackOptions): Promise<DownloadPackResult>;
 export declare function extractGlbs(archive: Uint8Array): ExtractedGlb[];
 export declare function extractTextures(archive: Uint8Array): ExtractedTexture[];
 export declare function sha256Hex(bytes: Uint8Array): Promise<string>;