--- name: aigamelabs-game-publishing description: > Prepare web builds (Unity Web, Godot, pure web; explain Unreal export limits), connect to the AIGameLabs MCP server at https://aigamelabs.net/mcp, and manage the user's own game entries end to end: create/update drafts, package and upload ZIP archives that pass the baseline-v1 archive validator, upload artwork, preview builds, create/submit/publish approved releases, roll back, and archive. Use when the user wants to publish, update, list, preview, or remove their game on aigamelabs.net, or asks about that sandbox's Unity/Unreal web-export limits. --- # AIGameLabs game publishing via MCP Everything below concerns the user's **own** entries. The server enforces ownership per request (the acting principal is derived from the OAuth token, never from parameters); tools never expose other creators' games, even if the account has a moderator role. ## 1. Connect - Client setup and skill-installation instructions: [AIGameLabs agent setup](https://aigamelabs.net/docs). - Endpoint: **`https://aigamelabs.net/mcp`** (HTTP transport, per-request `Authorization: Bearer`). - Transport/auth follow the MCP authorization spec: the server returns `401` with a `WWW-Authenticate` header pointing at protected-resource metadata; the client performs OAuth 2.1 discovery + PKCE, opens a browser for **user consent**, then exchanges the code (with the `resource` parameter) for a bearer token. Tokens are never sent in the URL. See [MCP Authorization](https://modelcontextprotocol.io/specification/2025-06-18/basic/authorization). - Scopes: request **`games:read`** and **`games:write`** (writes also require read), plus the optional **`offline_access`** if the client should keep a refresh token. The user sees a consent page listing scopes ([Better Auth MCP plugin](https://www.better-auth.com/docs/plugins/mcp)). - There is **no shared site API key**. The client sends its own OAuth access token in the Authorization header after consent. Let the client manage registration credentials and tokens in secure storage; never log, echo, commit them, or put them in URLs. Disconnect a client in AIGameLabs Settings to revoke its grant and refresh tokens. ## 2. Operating rules - **Public beta enrollment.** Sign in with Google or a one-time email link when configured, then choose a public handle in Settings. When public enrollment is open, no creator invitation or additional linked provider is needed. `add_game` grants only the creator capability and creates a private draft; it never grants reviewer authority. Closed deployments retain their invitation gate. - **Manual review and validation.** Hosted builds must pass ZIP/WASM validation. Every release needs human approval. By default, approval requires a later explicit `publish_release`. Only when the user explicitly requests it, pass `autoPublish: true` to `create_release`: approving that exact snapshot then publishes it atomically. Quotas and restrictions still apply; a blocked automatic publication also blocks approval. Do not describe validation, sandboxing or approval as a guarantee of safety. - **Idempotency keys.** For tools accepting `idempotencyKey`, use one stable key per logical operation: 8–100 letters, digits, underscores or hyphens, e.g. `add-my-game-v1` or a UUID you persist. Retry the _same_ operation with the _same_ key and payload. For tools without a key, inspect current state before retrying an ambiguous failure. If a retry must change the payload (e.g. a fresh `expectedRevision`), mint a **new** key and treat the stale attempt as abandoned. - **Revisions.** `update_game`, `remove_game`, `publish_release` and `rollback_release` carry `expectedRevision` = the game's current `rowVersion` (from `get_game`/`list_games`). A `409 REVISION_CONFLICT` means someone/something changed the game: re-run `get_game`, re-check that your edit still applies, then retry with the new `rowVersion` and a new idempotency key. Never loop retries blindly. - **One change at a time.** Update metadata _or_ build _or_ artwork, then `get_game` for the fresh `rowVersion` before the next write. - **Confirm before destructive actions.** `remove_game` is owner-only archive: it revokes access, cancels active uploads, revokes versions/releases as appropriate, removes the game from public eligibility, and retains evidence for moderation. Never call it without the user's explicit confirmation. - **Rights.** `create_release` requires `rightsAccepted: true`. Only assert it when the user has confirmed they own or are licensed to distribute everything in the build, artwork, and description, and that the AI-disclosure fields are accurate. This is a legal attestation, not a checkbox. ## 3. Tools | Tool | Key inputs | Semantics | | -------------------------------------- | ------------------------------------------------------------------------------------------ | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | `list_games` | `cursor?`, `limit?` | Own entries (all states) with draft titles, cursor pagination, and a quota summary (uploads/day used, published count, active upload slot). | | `get_game` | `gameId` | Detail: `game` (`id`, `slug`, `kind`, `state`, `rowVersion`, `accessEpoch`), `draft` metadata, `versions` (incl. `validation` report), `releases`, `uploads`, `media`. | | `add_game` | `kind: hosted\|external`, `slug`, `title`, `idempotencyKey` | Creates a **private draft**. Never auto-publishes. | | `update_game` | `gameId`, `expectedRevision`, complete metadata, `idempotencyKey` | Replaces the **draft** metadata wholesale — send the full object, not a patch. | | `remove_game` | `gameId`, `expectedRevision`, `confirm: true`, `idempotencyKey` | Owner archive. Destructive; requires user confirmation first. | | `start_build_upload` | `gameId`, `size` | Reserves a slot; returns a **signed PUT URL** (short-lived, ~5 minutes), required headers, `uploadId`, `expiresAt`, and the archive limits. PUT the ZIP bytes **directly to that URL** (`Content-Type: application/zip`), never through MCP JSON. A second `start_build_upload` fails with `409 UPLOAD_IN_PROGRESS` until the active upload is completed or cancelled. | | `complete_build_upload` | `uploadId`, `idempotencyKey` | Seals the stored archive for validation. | | `get_upload_status` | `uploadId` | Poll while the version moves through validation to `preview_ready` or failure. | | `cancel_build_upload` | `uploadId`, `idempotencyKey` | Cancels/rescinds a reservation (refunds the daily upload slot). | | `preview_build` | `versionId` | Returns a **secret** preview capability (`iframeUrl`, `expiresAt`) for a `preview_ready` build. Session is short (~10 minutes); request a new one to continue. | | `upload_artwork` | `gameId`, `mimeType` (PNG/JPEG/WebP), `imageBase64`, `altText` | ≤ 10 MiB decoded. Returns the stored media id for `coverMediaId`/`screenshotMediaIds`. No SVG, no video, no remote URL fetching. | | `create_release` | `gameId`, `versionId?`, `releaseNotes`, `rightsAccepted`, `autoPublish?`, `idempotencyKey` | Freezes exact metadata and hosted build. `autoPublish` defaults to false; true requires the user's explicit consent to publication after approval. | | `submit_release` | `releaseId`, `idempotencyKey` | Queues the exact frozen metadata+build for **human review**. | | `publish_release` / `rollback_release` | `gameId`, `releaseId`, `expectedRevision`, `idempotencyKey` | Publish/rollback an **approved** release only; rollback reverts to the previous approved release. | Tool results follow [MCP tools](https://modelcontextprotocol.io/specification/2025-06-18/server/tools) (text content plus structured fields). The examples in this file are **request shapes**, not server transcripts — never treat them as results. ### Draft metadata (full shape for `update_game`) `creationCostUsd` is optional: a finite USD amount from0 through1,000,000, or `null`/omitted when unknown. It records the creator's reported cost of making the game (such as AI tokens, tools and assets), not a price to play. Preserve known costs when replacing the full metadata; never invent a total. Zero and fractional values are valid. The amount is frozen with each release, so editing a private draft never changes an approved public snapshot. | Field | Rule | | -------------------- | -------------------------------------------------------------------------------------------------------------------------------------- | | `title` | 1–100 chars | | `summary` | ≤ 240 chars | | `description` | ≤ 12 000 chars | | `genres` | ≤ 8 lowercase kebab tags (`[a-z0-9-]{1,30}`) | | `devices` | 1–3 of `desktop`, `mobile`, `tablet` — list only what actually runs | | `stage` | `prototype` \| `in-development` \| `released` | | `controls` | ≤ 2000 chars (shown in preview) | | `warnings` | ≤ 2000 chars | | `ai` | `{development ≤1000, assets ≤1000, runtime: none\|creator-funded, tools ≤20×80, human ≤2000, story ≤10000}` — honest AI-use disclosure | | `coverMediaId` | nullable; id of artwork uploaded via `upload_artwork` | | `screenshotMediaIds` | ≤ 8 artwork ids | | `links` | ≤ 8 of `{provider: steam\|discord\|github\|youtube\|itch\|website\|external, url ≤2048, label ≤60}` | | `needsFeedback` | boolean | | `accessibility` | ≤ 10 × 100 chars | | `showcaseVideoUrl` | nullable; HTTPS YouTube/Vimeo video URL (see §10) | ## 4. Quotas and limits | What | Value | | ----------------------- | ----------------------------------------------------------------------------------------------------------------------------- | | Compressed ZIP archive | ≤ 50 MiB (and the reserved size must match the uploaded bytes exactly) | | Expanded archive | ≤ 200 MiB total; expansion ≤ 200× compressed size | | Largest single file | ≤ 64 MiB | | Files per archive | ≤ 1000 | | Directory depth | ≤ 12 | | Uploads | 5/day; **one active upload** per creator at a time (a second `start_build_upload` fails until you cancel or finish the first) | | Published games | 3 per creator; 2 retained builds per game | | Artwork input | ≤ 10 MiB decoded PNG/JPEG/WebP | | Creator preview session | ~10 minutes; public play ticket ~2 h; play starts rate-limited (10/min) | Failed validations, cancellations and expirations refund the daily upload slot; a stored archive whose byte size differs from the reserved `size` is rejected (`UPLOAD_SIZE_MISMATCH`), so measure the finished ZIP before reserving. ## 5. The player sandbox (hard runtime restrictions) The player serves every game file from a dedicated `g-` host with `no-store` caching, `X-Content-Type-Options: nosniff`, fixed content types per extension (no `Content-Encoding`), and this policy — from the repo's security module: ```text Content-Security-Policy: default-src 'none'; script-src 'self' 'unsafe-inline' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob:; media-src 'self' blob:; font-src 'self'; connect-src 'self'; worker-src 'none'; frame-src 'none'; object-src 'none'; base-uri 'none'; form-action 'none'; frame-ancestors ; sandbox allow-scripts allow-same-origin allow-pointer-lock Permissions-Policy: camera/microphone/geolocation/payment/usb/serial/bluetooth/ accelerometer/gyroscope/magnetometer/clipboard denied; fullscreen=(self), gamepad=(self), autoplay=(self) ``` Consequences (all verified in code, not guesses): - **No network beyond the game's own origin.** `connect-src 'self'`: no CDNs, analytics, font CDNs, external APIs, or WebSockets to other hosts at runtime. Bundle everything. - **No workers.** `worker-src 'none'` plus validator scanning of worker code. - **No threads/`SharedArrayBuffer`.** The player sends no COOP/COEP, so the page is never cross-origin isolated, and the validator rejects `SharedArrayBuffer`/`Atomics.*`/shared `WebAssembly.Memory` tokens in text assets. Single-threaded only. - **No service workers.** `serviceWorker.register(` is rejected by validation. - **Fonts must be files** (`font-src 'self'` — no `data:` fonts); images may be `data:`/`blob:`; media only from same origin or `blob:`. - **Iframe embed**: runs inside an iframe on the app origin; popups, forms, downloads and top-level navigation are sandboxed away; pointer lock, gamepad, fullscreen, autoplay are allowed. - Streaming video/audio from remote providers is not reachable from a hosted build (`media-src`). ## 6. Archive contract (validator `baseline-v1`) The uploaded ZIP must satisfy all of these; validation errors are returned per entry — fix the build, re-zip, re-upload (quota applies): - **ZIP only**, Deflate (recommended) or Stored entries. No encrypted entries, no symlinks/special files, no ZIP-nested archives (files that _look_ like zip/gz/7z/xz/tar/ rar/bz2 magic are rejected as `NESTED_ARCHIVE`), no executables/PDF payloads. - **Exactly one `index.html`** and **every other file under that index.html's directory** — put `index.html` at the archive root, with all assets alongside (see §7 packaging). `index.html` must contain a real HTML document; JSON/`.map` files must start with `{` or `[`. - **Allowed extensions only** (anything else, e.g. `.svg` — explicitly refused, `.gz`, `.br`, `.unityweb`, `.pak`, `.exe`, `.db`, `.DS_Store`, editor scratch files — fails `UNSUPPORTED_FORMAT`): `html js mjs css json map txt atlas wasm glb png jpg jpeg webp gif avif ico mp3 ogg wav mp4 webm woff woff2 ttf otf bin data pck` - Content is identity-checked: PNG/JPEG/WebP/GIF/AVIF/ICO/WOFF/WOFF2/TTF/OTF/WAV/OGG/MP3/ MP4/WebM/GLB (glTF 2.0 container)/WASM (`\0asm` v1) must match their extension by magic bytes (`CONTENT_MISMATCH` otherwise); text assets must be valid UTF-8 without NUL bytes. - **Paths**: forward-slash, relative, ≤ 12 segments, ≤ 1024 bytes total; NFC-normalized; no `# % ? : \` or control characters; no `.`/`..` segments; no trailing dot/space in a segment; no Windows reserved names (`con`, `prn`, `aux`, `nul`, `com1-9`, `lpt1-9`); no `__partial`/`__manifest.json`; duplicate or case-colliding paths rejected; file-vs-directory collisions rejected. - **Dependency scanning of text assets** (`html/css/js/json/txt`, and code inside them): absolute (`https://`, `wss://`, `//`), root-relative (`/foo`), and `javascript:` URLs after `fetch(`, `import(`, `importScripts(`, `from`, `src=`, `href=`, `action=`, `url(`, `@import` are rejected (`EXTERNAL_DEPENDENCY`). Use **relative URLs** (`Build/...`, `./assets/...`) and `data:` URLs. `new Worker(` produces only a warning (execution is blocked by CSP). - **Thread/worker tokens rejected in text assets**: `SharedArrayBuffer`, `Atomics.*`, `importScripts(`, `serviceWorker.register(`, `WebAssembly.Memory(... shared: true)` — this includes occurrences inside comments or strings, so don't vendor libraries containing them; check the validation report if a library trips it. - WASM modules: import/memory section counts bounded; truncated/invalid metadata rejected. ## 7. Packaging the ZIP (verified on Windows; cross-platform notes) Zip the **contents** of the build output so `index.html` sits at the archive root — not the parent folder. Verified locally on this machine's Windows build: ```powershell # From the directory that CONTAINS the build output (e.g. ...\MyGame\, build at .\WebGL\): Compress-Archive -Path .\WebGL\* -DestinationPath .\game-build.zip -Force # or the built-in bsdtar, keeping forward slashes: tar -a -cf game-build.zip -C WebGL . ``` - `Compress-Archive -Path dir\*` (wildcard) produced flat, forward-slash entries (`index.html`, `Build/app.js`) on this machine; `Compress-Archive -Path dir` (no wildcard) created a `/` wrapper — avoid that form for uploads. - `tar -a -cf out.zip -C .` (Windows 10+ bsdtar) produced `index.html`, `Build/`, `Build/app.js` — forward slashes, correct root. POSIX: `cd && zip -r ../game-build.zip .` - **Always verify the listing before upload** (catches backslash separators, `./` prefixes, wrapper folders, stray OS files): ```sh python -c "import zipfile,sys; [print(n) for n in zipfile.ZipFile(sys.argv[1]).namelist()]" game-build.zip ``` Every line must use forward slashes, contain no `./` prefix, and match the allowed extensions. - Then **test the actual output**: serve the folder locally (`python -m http.server` in the build directory), open it in a current Chrome/Firefox, play through the core loop, and inspect the browser console and fix errors. What must already work _before_ upload: loading, input (mouse/keyboard/gamepad), audio, fullscreen, pointer lock — and **no** console errors about workers, threads, or cross-origin requests. Do not upload a build you haven't run. - After upload, drive it through `get_upload_status` and then `preview_build` — the private preview runs in the real sandbox (real CSP/iframe), which is the authoritative test of "runs on AIGameLabs". ## 8. Unity Web export Unity provides an official Web export. These settings follow Unity's documentation and this sandbox's restrictions; they are not a guarantee that every Unity version or plugin passes validation. A Unity project export has not been runtime-certified by this skill. 1. **Platform**: Switch platform to **Web** (Unity 6; requires a WebGL 2-capable 64-bit browser with WebAssembly — Safari < 15 lacks WebGL 2 and lacks IndexedDB inside iframes; see [browser compatibility](https://docs.unity3d.com/Manual/webgl-browsercompatibility.html)). 2. **Player Settings → Publishing Settings → Compression Format: `Disabled`** (options are Gzip/Brotli/Disabled; [deploying docs](https://docs.unity3d.com/Manual/webgl-deploying.html)). Gzip/Brotli builds require the server to send matching `Content-Encoding` headers or decompression fallback (`.unityweb`), and neither the header nor the extensions exist in this sandbox — compressed Unity output (`*.data.gz|.br`, `*.unityweb`) fails validation. Shrink via the ZIP's own Deflate instead. Leave **Decompression Fallback** off. 3. **Multithreading off**: "Enable Native C/C++ Multithreading" requires WebAssembly threads (`SharedArrayBuffer`) and COOP/COEP/CORP server headers ([multithreading intro](https://docs.unity3d.com/Manual/web-multithreading-intro.html), [Player settings](https://docs.unity3d.com/Manual/class-PlayerSettingsWebGL)) — unavailable and rejected here. Keep the project single-threaded (C# jobs/Burst multithreading included). 4. **Data Caching off**: caching uses IndexedDB, which is unsupported for iframe content in Safari (same compatibility doc). Disable it for this conservative export profile; HTTP `no-store` alone does not disable application-managed IndexedDB caching. 5. **Template**: use a minimal template and verify the emitted `index.html` references the loader/build files with **relative** URLs (`Build/…`). Root-relative (`/Build/…`) or absolute/CDN references fail the dependency scan and/or CSP. Remove any external fonts, analytics, or social scripts from the template. Keep `Debug Symbols` off (smaller build). 6. **Size budget**: expanded output ≤ 200 MiB and ZIP ≤ 50 MiB; no single file (the `.data` file included) over 64 MiB — cut assets rather than hope (use texture compression and asset stripping). Files in `StreamingAssets/` must use allowed extensions too. 7. **Plugins**: anything spawning workers/threads/SAB (or embedding `importScripts(`) will trip §5/§6. Audit native/plugins before first upload; the validation report names the file. 8. Emit, package per §7, test locally, upload, and use `get_upload_status` → `preview_build` as the final proof. ## 9. Unreal Engine (honest status) - **There is no stock UE5 WebGL/HTML5 exporter.** Epic removed HTML5 from the official platform list in UE 4.24, and community documentation continues from there ([UnrealEngineHTML5/Documentation](https://github.com/UnrealEngineHTML5/Documentation); Epic hosts HTML5 docs only for ≤ 4.27, e.g. [4.27 documentation](https://dev.epicgames.com/documentation/en-us/unreal-engine/unreal-engine-4-27-documentation?application_version=4.27)). UE 5.x has no official HTML5/WebGL target. - **The community HTML5 options below target UE4 and are self-built.** Evidenced options: [UnrealEngineHTML5 4.24.3 plugin branch](https://github.com/UnrealEngineHTML5/Documentation) (last Epic-era snapshot, ES2/WebGL 1), [SpeculativeCoder 4.27 ES3 fork](https://github.com/SpeculativeCoder/UnrealEngine-HTML5-ES3) (UE 4.27.2, WebGL 2/ES3, emscripten 6.0.9) and its 4.24 ES2 branch, and [ufna/UE-HTML5](https://github.com/ufna/UE-HTML5) (4.24/4.27 branches; explicitly _not_ considering UE5). All require building the engine fork yourself, Windows-centric, with explicit at-your-own-risk caveats. This skill does not provide a verified UE5 WebGL toolchain. - If a user _has_ a working UE4-fork build and wants to try hosting it here: this sandbox is **unverified** for UE HTML5 output. At minimum you must disable the fork's default `.gz` asset compression (extension not in the whitelist), keep "Package JQuery and Bootstrap" enabled so those files are bundled locally rather than CDN-loaded, disable engine multithreading, and check every packaged file's extension against §6 before zipping. Treat the first upload as an experiment and let the validation report decide. - **Pixel Streaming is not WebGL.** It renders on a GPU server and streams frames/audio to browsers over WebRTC with a signaling server ([official overview](https://dev.epicgames.com/documentation/unreal-engine/pixel-streaming-in-unreal-engine?lang=en-US)). It cannot be packaged as a hosted ZIP here; a streamed UE game can only be listed as external with a showcase video. - **Recommended default for UE games**: list as **external-only** (§10) with the required showcase video, keeping the game hosted elsewhere. If the user wants a hosted, playable build, migrating/rebuilding in Unity (or another web-native engine — the archive contract also accommodates Godot 4 `.pck`/`.wasm` builds) is the realistic path; that is a product decision for the user, not something to do silently. ## 10. External-only listings `add_game` with `kind: "external"` — no build uploads, no version pipeline. - `showcaseVideoUrl` must be an HTTPS **YouTube or Vimeo video URL** (a `watch`/shorts/embed/ youtu.be video URL, or a Vimeo video URL with optional privacy hash). Channels, playlists, embed HTML/`