@forgeax/game 0.3.2 → 0.3.3

package/README.md

@@ -52,6 +52,17 @@ game there, binds the exact release identity, and reports the canonical root and
 host-skill result. Existing exact games are read back and bound without recreation;
 unknown non-empty directories fail closed.
 
+Check the package being executed, or refresh an existing project's configured hosts:
+
+```bash
+npx -y @forgeax/game@latest version
+npx -y @forgeax/game@latest update --ide codex
+```
+
+`update` reports the configured transition, for example
+`plugin 0.3.2 -> 0.3.3`. It refreshes configuration, skills, and routing from the
+package being executed; it does not independently fetch another package.
+
 > [!NOTE]
 > Asset3D is optional and **disabled by default**. The two commands above never contact
 > the internal asset catalog, provision the bundled platform Provider, or add
@@ -61,9 +72,10 @@ unknown non-empty directories fail closed.
 > npx -y @forgeax/game asset3d enable
 > ```
 >
-> With no override, `enable` uses the documented AW production service. Pass
-> `--base-url <test-gateway-or-service-url>` only to select a test environment. The
-> first enable prompts for the AW Sandbox Key with hidden input, validates it through
+> With no override, `enable` keeps the public AW depot. On the office network, pass
+> `--library ea` to select the EA depot and its local gateway. `--base-url` overrides
+> only the selected library's gateway. The first enable prompts for the Sandbox Key
+> with hidden input, validates it through
 > the packaged Provider, and stores it outside the project in a private user
 > credential file.
 
@@ -157,30 +169,39 @@ a live unverifiable PID fails closed as `preview_ownership_unverified`.
 
 ## Asset3D installation and transaction
 
-Asset3D is an opt-in, project-local MCP integration for AW HybridSearch. Run it only
-after `init`, while connected to the internal network. The no-argument command uses
-the documented production service:
+Asset3D is an opt-in, project-local MCP integration for AW or EA HybridSearch. Run it
+only after `init`. The no-argument command remains public-network compatible; select
+EA explicitly when connected to the office network:
 
 ```bash
+# Public/default
 npx -y @forgeax/game asset3d enable
+
+# Office network
+npx -y @forgeax/game asset3d enable --library ea
+
 forgeax-game asset3d doctor --json
 ```
 
-The service selection precedence is explicit `--base-url`, then
-`FORGEAX_ASSET_LIBRARY_BASE_URL`, then the built-in production service. An override
+The library selection precedence is `--library`, then
+`FORGEAX_ASSET_LIBRARY`, then `aw`. Each library selects its matching built-in
+gateway. Gateway precedence is explicit `--base-url`, then
+`FORGEAX_ASSET_LIBRARY_BASE_URL`, then that library's built-in service. An override
 accepts either a gateway root or the full
 `trpc.oasismetric.omcontentserver.http` service root. On first use, `enable` reads the
 key with hidden TTY input. Non-interactive automation must inject
 `FORGEAX_ASSET3D_AW_SANDBOX_KEY` from its secret store. The key is validated by the
-Provider against the selected environment's `HybridSearch` before the command
+Provider against the selected depot's `HybridSearch` before the command
 reports success.
 
 The validated key is stored in
 `~/.forgeax/credentials/asset3d-aw.json` as an owned, non-symlink `0600` file. Project
-`.forgeax/mcp.json` contains only the AW service URL and the credential-file path; it
-never contains the key or a signed asset URL. The Provider access check returns only
-the exact download origins required by the sandbox. Failed validation or installation
-rolls back a newly written credential.
+`.forgeax/mcp.json` contains only the selected service URL, matching
+`AW_API_DEPOT_NAME=aw|ea`, and the credential-file path; it never contains the key or
+a signed asset URL. The `AW_API_*` names are the packaged Provider's legacy
+environment contract. The Provider access check returns only the exact download
+origins required by the sandbox. Failed validation or installation rolls back a
+newly written credential.
 
 The npm package carries the digest-pinned Darwin arm64 Provider archive as an inert
 asset. `enable` reuses the exact verified Provider from
@@ -190,8 +211,14 @@ repository. Only after Provider verification and its MCP handshake succeed does
 `asset3d-search` entries into `.forgeax/mcp.json` and project the approved Asset3D
 workflow into the Agent hosts selected during `install`.
 
+`enable` also registers a project-aware `asset3d-search` bridge in those hosts. The
+bridge entry contains no project path or credential: on each new Agent session it
+resolves the current directory's project-local Provider. In projects where Asset3D
+has not been enabled, the bridge connects normally but advertises no tools. Restart
+the selected Agent after the first successful `enable` so it discovers `search_asset`.
+
 > [!IMPORTANT]
-> Asset3D uses the AW-specific `X-Sandbox-Key` contract. It never reads
+> Asset3D uses the shared `X-Sandbox-Key` contract. It never reads
 > `ANTHROPIC_API_KEY` or another model-provider key. Do not pass keys as command-line
 > arguments, commit the user credential file, or copy a key into project MCP config.
 
@@ -200,9 +227,10 @@ The transaction commands are normally driven by the installed Agent workflow:
 ```bash
 
 forgeax-game asset3d begin --query "weathered oak tree" --json
-# Call the configured asset3d-search/search_asset MCP tool with the returned output_dir.
-# Pass its complete TextContent JSON to commit on stdin:
-forgeax-game asset3d commit --execution <uuid> --provider-result-stdin --json < result.json
+# Call asset3d-search/search_asset with the exact queries and returned execution UUID.
+# The bridge validates the transaction, injects its private output directory, and
+# stores the exact provider result for commit:
+forgeax-game asset3d commit --execution <uuid> --json
 
 forgeax-game asset3d doctor --json
 forgeax-game asset3d uninstall
@@ -219,7 +247,7 @@ forgeax-game asset3d install \
   --provider-bundle ./asset3d-search-provider-<commit>-<os>-<arch>.tar.gz \
   --sha256 <archive-sha256> \
   --download-origin https://<approved-download-host>:443 \
-  --aw-base-url <aw-gateway-or-service-url> \
+  --aw-base-url <ea-gateway-or-service-url> \
   --aw-credential-file /absolute/path/to/private-credential.json
 ```
 
@@ -249,8 +277,9 @@ and evidence boundaries.
 > acceptance gates.
 
 See [docs/runtime.md](docs/runtime.md) for the exact artifact and lifecycle contract.
-For the current production-default environment contract and maintainer publish
-checklist, see [docs/release-0.3.2.md](docs/release-0.3.2.md). The authenticated AW
-Provider delivery is documented in [docs/release-0.3.1.md](docs/release-0.3.1.md),
+For the current AW-default plus explicit EA environment contract and maintainer
+publish checklist, see [docs/release-0.3.3.md](docs/release-0.3.3.md). The original AW
+production default is recorded in [docs/release-0.3.2.md](docs/release-0.3.2.md), authenticated Provider
+delivery is documented in [docs/release-0.3.1.md](docs/release-0.3.1.md),
 and the original two-command onboarding contract remains documented in
 [docs/release-0.3.0.md](docs/release-0.3.0.md).

package/assets/asset3d/vibegame-art-3d-asset-library-2.0.0.tgz.sha256

@@ -0,0 +1 @@
+4937fe00e2b919319c70c82db53ebe359b275ed662c026153ecb97f7601262b4  vibegame-art-3d-asset-library-2.0.0.tgz