@stage5/lumine 0.2.9 → 0.2.11

package/lib/assets.js

@@ -296,39 +296,77 @@ export async function assetsUpload(options) {
   // second asset with a new URL, and the old one keeps eating quota. Project-
   // owner assets are checked too: re-uploading media the project already has
   // defeats the reuse flow.
+  const referencedGltfAssetUrls = candidates.flatMap(
+    (candidate) => candidate.referencedGltfAssetUrls || [],
+  );
+  let existingAssets = [];
+  let existingProjectAssets = [];
   try {
-    const { assets: existingAssets, projectAssets: existingProjectAssets } =
-      await fetchAllRuntimeAssets({
-        options,
-        auth,
-        buildId,
-        buildApiToken: token,
-      });
-    const nameMatches = (asset, fileName) =>
-      asset.originalFileName === fileName || asset.fileName === fileName;
-    for (const candidate of candidates) {
-      const existing = existingAssets.find((asset) =>
-        nameMatches(asset, candidate.fileName),
+    const listedAssets = await fetchAllRuntimeAssets({
+      options,
+      auth,
+      buildId,
+      buildApiToken: token,
+    });
+    existingAssets = listedAssets.assets;
+    existingProjectAssets = listedAssets.projectAssets || [];
+  } catch (error) {
+    if (referencedGltfAssetUrls.length > 0) {
+      throw new Error(
+        "Could not verify this glTF's Twinkle asset URLs. Refresh the asset list and try again.",
+        { cause: error },
       );
-      if (existing) {
-        console.error(
-          `lumine: note — an asset named "${candidate.fileName}" already exists (#${existing.id}). ` +
-            `Uploading creates a NEW asset with a new URL; if this replaces #${existing.id}, update the code and run \`lumine assets delete ${existing.id}\` (or \`lumine assets prune\`).`,
-        );
-        continue;
-      }
-      const projectExisting = (existingProjectAssets || []).find((asset) =>
-        nameMatches(asset, candidate.fileName),
+    }
+  }
+  if (referencedGltfAssetUrls.length > 0) {
+    const knownAssets = [...existingAssets, ...existingProjectAssets];
+    const unverifiedUrls = referencedGltfAssetUrls.filter(
+      (referencedUrl) =>
+        !knownAssets.some((asset) =>
+          runtimeAssetUrlMatchesGltfReference(asset, referencedUrl),
+        ),
+    );
+    if (unverifiedUrls.length > 0) {
+      throw new Error(
+        `The glTF references Twinkle asset URL${
+          unverifiedUrls.length === 1 ? "" : "s"
+        } that do not belong to this Build: ${unverifiedUrls
+          .slice(0, 3)
+          .map((url) => `"${url}"`)
+          .join(
+            ", ",
+          )}${unverifiedUrls.length > 3 ? ", ..." : ""}. Upload or reuse assets listed by \`lumine assets list\`, then use their exact URLs.`,
       );
-      if (projectExisting) {
-        console.error(
-          `lumine: note — the project owner already has an asset named "${candidate.fileName}" (#${projectExisting.id}). ` +
-            `Consider reusing its URL instead of uploading a duplicate:\n  ${projectExisting.url}`,
+    }
+  }
+  if (existingAssets.length > 0 || existingProjectAssets.length > 0) {
+    try {
+      const nameMatches = (asset, fileName) =>
+        asset.originalFileName === fileName || asset.fileName === fileName;
+      for (const candidate of candidates) {
+        const existing = existingAssets.find((asset) =>
+          nameMatches(asset, candidate.fileName),
+        );
+        if (existing) {
+          console.error(
+            `lumine: note — an asset named "${candidate.fileName}" already exists (#${existing.id}). ` +
+              `Uploading creates a NEW asset with a new URL; if this replaces #${existing.id}, update the code and run \`lumine assets delete ${existing.id}\` (or \`lumine assets prune\`).`,
+          );
+          continue;
+        }
+        const projectExisting = existingProjectAssets.find((asset) =>
+          nameMatches(asset, candidate.fileName),
         );
+        if (projectExisting) {
+          console.error(
+            `lumine: note — the project owner already has an asset named "${candidate.fileName}" (#${projectExisting.id}). ` +
+              `Consider reusing its URL instead of uploading a duplicate:\n  ${projectExisting.url}`,
+          );
+        }
       }
+    } catch {
+      // Duplicate-name warnings are advisory only.
     }
-  } catch {
-    // Advisory only — never block an upload on the pre-listing.
   }
   const uploaded = [];
   for (const candidate of candidates) {
@@ -503,7 +541,9 @@ export async function assetsPrune(options) {
       body: { assetId: asset.id },
     });
     lastUsage = result?.usage || lastUsage;
-    console.log(`Deleted #${asset.id} ${asset.originalFileName || asset.fileName}`);
+    console.log(
+      `Deleted #${asset.id} ${asset.originalFileName || asset.fileName}`,
+    );
   }
   printAssetUsage(lastUsage);
   await refreshWorkspaceAssetsManifest({
@@ -529,7 +569,12 @@ export async function confirmPrompt(question) {
 // 5MB on slow links) — mirrors the web workspace uploader, plus bounded
 // retries for transient network/5xx failures. 4xx means the presigned URL
 // itself is bad; retrying cannot help.
-export async function putAssetPartWithRetry({ url, chunk, mimeType, partLabel }) {
+export async function putAssetPartWithRetry({
+  url,
+  chunk,
+  mimeType,
+  partLabel,
+}) {
   let lastError = null;
   for (let attempt = 1; attempt <= 3; attempt += 1) {
     try {
@@ -574,59 +619,104 @@ export async function readAssetUploadCandidate(filePath) {
   if (!buffer.length) {
     throw new Error(`Asset file is empty: ${filePath}`);
   }
-  if (extension === ".gltf") {
-    assertGltfUploadCandidateHasNoRelativeUris({ fileName, buffer });
-  }
-  return { absolutePath, fileName, mimeType, buffer };
+  const referencedGltfAssetUrls =
+    extension === ".gltf"
+      ? assertGltfUploadCandidateHasOnlySupportedUris({ fileName, buffer })
+      : [];
+  return {
+    absolutePath,
+    fileName,
+    mimeType,
+    buffer,
+    referencedGltfAssetUrls,
+  };
 }
 
-function isExternalOrEmbeddedGltfUri(uri) {
+const TWINKLE_GLTF_ASSET_HOSTS = new Set([
+  "d3jvoamd2k4p0s.cloudfront.net",
+  "www.twin-kle.com",
+  "twin-kle.com",
+]);
+const TWINKLE_GLTF_ASSET_PATH_PREFIXES = [
+  "/attachments/build-runtime/",
+  "/attachments/optimized/",
+];
+
+function isSupportedGltfUri(uri) {
   const normalizedUri = String(uri || "").trim();
   if (!normalizedUri) return true;
-  if (normalizedUri.startsWith("/") || normalizedUri.startsWith("//")) {
-    return true;
-  }
   const schemeMatch = normalizedUri.match(/^([A-Za-z][A-Za-z0-9+.-]*):/);
   if (!schemeMatch) return false;
-  return ["http", "https", "data"].includes(schemeMatch[1].toLowerCase());
+  if (schemeMatch[1].toLowerCase() === "data") return true;
+  let parsedUri;
+  try {
+    parsedUri = new URL(normalizedUri);
+  } catch {
+    return false;
+  }
+  return (
+    parsedUri.protocol === "https:" &&
+    !parsedUri.port &&
+    !parsedUri.username &&
+    !parsedUri.password &&
+    !parsedUri.search &&
+    !parsedUri.hash &&
+    TWINKLE_GLTF_ASSET_HOSTS.has(parsedUri.hostname.toLowerCase()) &&
+    TWINKLE_GLTF_ASSET_PATH_PREFIXES.some((prefix) =>
+      parsedUri.pathname.startsWith(prefix),
+    )
+  );
 }
 
-function collectRelativeGltfUris(parsedGltf) {
-  const relativeUris = [];
+function collectUnsupportedGltfUris(parsedGltf) {
+  const unsupportedUris = [];
   if (!parsedGltf || typeof parsedGltf !== "object") {
-    return relativeUris;
+    return unsupportedUris;
   }
   for (const entry of [
     ...(Array.isArray(parsedGltf.buffers) ? parsedGltf.buffers : []),
     ...(Array.isArray(parsedGltf.images) ? parsedGltf.images : []),
   ]) {
     const uri = typeof entry?.uri === "string" ? entry.uri.trim() : "";
-    if (uri && !isExternalOrEmbeddedGltfUri(uri)) {
-      relativeUris.push(uri);
+    if (uri && !isSupportedGltfUri(uri)) {
+      unsupportedUris.push(uri);
     }
   }
-  return relativeUris;
+  return unsupportedUris;
 }
 
-function assertGltfUploadCandidateHasNoRelativeUris({ fileName, buffer }) {
+function assertGltfUploadCandidateHasOnlySupportedUris({ fileName, buffer }) {
   let parsedGltf;
   try {
     parsedGltf = JSON.parse(buffer.toString("utf8"));
   } catch {
     throw new Error(`Invalid .gltf JSON in ${fileName}.`);
   }
-  const relativeUris = collectRelativeGltfUris(parsedGltf);
-  if (relativeUris.length === 0) {
-    return;
+  const unsupportedUris = collectUnsupportedGltfUris(parsedGltf);
+  if (unsupportedUris.length === 0) {
+    return [
+      ...(Array.isArray(parsedGltf.buffers) ? parsedGltf.buffers : []),
+      ...(Array.isArray(parsedGltf.images) ? parsedGltf.images : []),
+    ]
+      .map((entry) => (typeof entry?.uri === "string" ? entry.uri.trim() : ""))
+      .filter((uri) => uri && !uri.toLowerCase().startsWith("data:"));
   }
-  const sampleUris = relativeUris
+  const sampleUris = unsupportedUris
     .slice(0, 3)
     .map((uri) => `"${uri}"`)
     .join(", ");
   throw new Error(
-    `${fileName} contains relative glTF URI${
-      relativeUris.length === 1 ? "" : "s"
-    } (${sampleUris}${relativeUris.length > 3 ? ", ..." : ""}). Raw .gltf companion files are stored under separate asset URLs and will not resolve relative to the .gltf. Use .glb, embed data URIs, or rewrite .gltf URIs to absolute uploaded asset URLs before uploading.`,
+    `${fileName} contains unsupported glTF URI${
+      unsupportedUris.length === 1 ? "" : "s"
+    } (${sampleUris}${unsupportedUris.length > 3 ? ", ..." : ""}). Raw .gltf companion files are stored under separate asset URLs, and Build apps cannot load arbitrary external URLs. Use .glb, embed data URIs, or rewrite .gltf URIs to Twinkle runtime attachment URLs before uploading.`,
+  );
+}
+
+function runtimeAssetUrlMatchesGltfReference(asset, referencedUrl) {
+  const normalizedReference = String(referencedUrl || "").trim();
+  if (!normalizedReference) return false;
+  return [asset?.url, asset?.thumbUrl].some(
+    (assetUrl) => String(assetUrl || "").trim() === normalizedReference,
   );
 }
 
@@ -661,7 +751,10 @@ export async function uploadRuntimeAsset({
     const parts = [];
     for (let partNumber = 0; partNumber < urls.length; partNumber += 1) {
       const start = partNumber * ASSET_UPLOAD_CHUNK_BYTES;
-      const end = Math.min(start + ASSET_UPLOAD_CHUNK_BYTES, candidate.buffer.length);
+      const end = Math.min(
+        start + ASSET_UPLOAD_CHUNK_BYTES,
+        candidate.buffer.length,
+      );
       const response = await putAssetPartWithRetry({
         url: urls[partNumber],
         chunk: candidate.buffer.subarray(start, end),
@@ -690,7 +783,9 @@ export async function uploadRuntimeAsset({
     });
     const asset = completed?.asset || prepared?.asset;
     if (!asset?.url) {
-      throw new Error(`Upload of ${candidate.fileName} completed without an asset URL.`);
+      throw new Error(
+        `Upload of ${candidate.fileName} completed without an asset URL.`,
+      );
     }
     return asset;
   } catch (error) {
@@ -799,7 +894,9 @@ export async function writeAssetsManifest({
   const unmatchedReferences = refs
     ? refs.filter(
         (ref) =>
-          !knownAssets.some((asset) => runtimeAssetMatchesReference(asset, ref)),
+          !knownAssets.some((asset) =>
+            runtimeAssetMatchesReference(asset, ref),
+          ),
       )
     : null;
   const metadataDir = path.join(dir, PROJECT_METADATA_DIR);
@@ -814,7 +911,9 @@ export async function writeAssetsManifest({
         fetchedAt: new Date().toISOString(),
         usage: usage || null,
         assets: annotatedAssets,
-        ...(annotatedProjectAssets ? { projectAssets: annotatedProjectAssets } : {}),
+        ...(annotatedProjectAssets
+          ? { projectAssets: annotatedProjectAssets }
+          : {}),
         ...(unmatchedReferences ? { unmatchedReferences } : {}),
       },
       null,

package/lib/constants.js

@@ -75,7 +75,8 @@ export const ASSET_MIME_BY_EXTENSION = {
 export const PROJECT_MAX_FILES = 100;
 export const PROJECT_MAX_EFFECTIVE_FILE_LINES = 500;
 export const PROJECT_EFFECTIVE_LINE_MAX_COLUMNS = 160;
-export const PROJECT_MAX_TOTAL_BYTES_DEFAULT = 300 * 1024;
+export const PROJECT_MAX_TOTAL_BYTES_DEFAULT = 1024 * 1024;
+export const PROJECT_WARN_TOTAL_BYTES = 500 * 1024;
 // Matches asset references in project files: absolute CloudFront URLs and
 // relative /attachments/build-runtime|optimized/... paths.
 export const RUNTIME_ASSET_REFERENCE_PATTERN =
@@ -218,7 +219,8 @@ lumine save --summary "Describe the change"
 
 - Max ${PROJECT_MAX_FILES} files per project; each file max ${PROJECT_MAX_EFFECTIVE_FILE_LINES} effective lines
   (a physical line counts once per ${PROJECT_EFFECTIVE_LINE_MAX_COLUMNS} characters, so minified one-liners
-  blow the limit). Default total project size ~${Math.floor(PROJECT_MAX_TOTAL_BYTES_DEFAULT / 1024)} KB.
+  blow the limit). Default total project size cap ${Math.floor(PROJECT_MAX_TOTAL_BYTES_DEFAULT / 1024)} KB,
+  with a soft warning from ${Math.floor(PROJECT_WARN_TOTAL_BYTES / 1024)} KB.
 - Plan file splits BEFORE writing code; \`lumine check\` validates the local
   workspace against these limits without saving, and \`lumine save\` fails fast
   locally listing every violation.

package/lib/workspace.js

@@ -15,6 +15,7 @@ import {
   PROJECT_MAX_EFFECTIVE_FILE_LINES,
   PROJECT_MAX_FILES,
   PROJECT_MAX_TOTAL_BYTES_DEFAULT,
+  PROJECT_WARN_TOTAL_BYTES,
   PROJECT_METADATA_DIR,
   PROJECT_METADATA_FILE,
   SDK_REFERENCE_FALLBACK,
@@ -304,6 +305,14 @@ export function collectProjectLimitFindings(files) {
         PROJECT_MAX_TOTAL_BYTES_DEFAULT / 1024,
       )} KB project limit — the server may reject this save.`,
     );
+  } else if (totalBytes > PROJECT_WARN_TOTAL_BYTES) {
+    warnings.push(
+      `Project files total ${formatBytes(totalBytes)} — approaching the ${Math.floor(
+        PROJECT_MAX_TOTAL_BYTES_DEFAULT / 1024,
+      )} KB project cap (soft warning from ${Math.floor(
+        PROJECT_WARN_TOTAL_BYTES / 1024,
+      )} KB). Keep files lean where structure allows.`,
+    );
   }
   return { errors, warnings };
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stage5/lumine",
-  "version": "0.2.9",
+  "version": "0.2.11",
   "description": "Command line tools for launching Lumine builds on Twinkle.",
   "type": "module",
   "bin": {

package/sdk/BUILD_SDK_INDEX.md

@@ -1,8 +1,8 @@
 # Build SDK Index
 
 Version: 1.26.3
-Updated: 2026-07-08
-Generated: 2026-07-08T09:25:17.959Z
+Updated: 2026-07-10
+Generated: 2026-07-10T05:52:15.007Z
 
 ## Notes
 - This SDK is injected into Build iframes via the Build preview/runtime.
@@ -277,7 +277,7 @@ console.log(analysis.bestMove, analysis.evaluation, analysis.mate);
   - Returns: { text, response, model, aiUsagePolicy }
   - Generate text with the default Lumine text model, optionally streaming text updates through onText.
   - Signed-in viewers only.
-  - Uses gpt-5.4 by default.
+  - Uses Grok 4.5 by default.
   - Each successful text generation consumes AI Energy from the signed-in viewer.
   - history must be an array of { role: 'user' | 'assistant', content: string }. Twinkle.ai.chat does not read a text field.
   - The server keeps the latest 12 valid history entries.
@@ -294,9 +294,9 @@ const result = await Twinkle.ai.chat({ message, history: chatHistory, systemProm
   - Use this instead of asking Twinkle.ai.chat to return JSON.
   - expectedStructure must be a JSON object that describes the exact returned object shape.
   - mode is accepted as an alias for thinkingMode, and mid is accepted as an alias for medium.
-  - thinkingMode low uses GPT nano and records free low-energy usage.
-  - thinkingMode medium uses GPT mini and normal AI Energy while AI Energy remains.
-  - thinkingMode high uses the full GPT model and high AI Energy while AI Energy remains.
+  - thinkingMode low uses GPT-5.6 Luna and records free low-energy usage.
+  - thinkingMode medium uses GPT-5.6 Luna and normal AI Energy while AI Energy remains.
+  - thinkingMode high uses Grok 4.5 with high reasoning and high AI Energy while AI Energy remains.
   - If medium or high is requested after AI Energy is empty, the server falls back to low and returns thinkingMode: low.
   - The SDK validates shape and retries malformed JSON, but app code should still validate business-specific enum values.
   - Example: const { object } = await Twinkle.ai.generateObject({ thinkingMode: 'medium', prompt: 'Classify the player intent from: ' + playerText, expectedStructure: { action: 'string', targetCharacter: 'string', confidence: 0, shouldAskFollowUp: false } });
@@ -335,10 +335,9 @@ const result = await Twinkle.ai.chat({ message, history: chatHistory, systemProm
   - The character route also accepts text or message fields for compatibility, but generated apps should use content.
   - The server keeps the latest 16 valid character history entries.
   - Pass onText/onStatus for streaming dialogue. Omit callbacks for non-streaming dialogue where the promise resolves with the final response.
-  - thinkingMode low uses Lite Mode and records free low-energy usage.
-  - thinkingMode medium uses normal AI Energy: Zero uses GPT mini and Ciel uses Claude Sonnet while AI Energy remains.
-  - thinkingMode high uses high AI Energy: Zero uses the full GPT model and Ciel uses Claude Opus 4.8 while AI Energy remains.
-  - Zero maps low/medium/high to GPT nano/GPT mini/full GPT. Ciel maps low/medium/high to Claude Haiku/Claude Sonnet/Claude Opus 4.8.
+  - thinkingMode low uses Lite Mode: Zero uses Grok 4.5 with low reasoning and Ciel uses Claude Haiku 4.5; usage is recorded as free low-energy usage.
+  - thinkingMode medium uses normal AI Energy: Zero uses Grok 4.5 with medium reasoning and Ciel uses Claude Sonnet 5 while AI Energy remains.
+  - thinkingMode high uses high AI Energy: Zero uses Grok 4.5 with high reasoning and Ciel uses Claude Opus 4.8 with extended thinking while AI Energy remains.
   - If medium or high is requested after AI Energy is empty, the server falls back to low and returns thinkingMode: low.
   - Pass roomContext as a short shared scene transcript so Zero and Ciel can know what happened in the same room.
   - includeWebsiteContext defaults to true. Set includeWebsiteContext: false for in-world NPC dialogue that should only use Zero/Ciel's basic character identity plus your scene/instructions.