@forgeax/game 0.3.2 → 0.3.4

package/README.md

@@ -52,6 +52,17 @@ game there, binds the exact release identity, and reports the canonical root and
 host-skill result. Existing exact games are read back and bound without recreation;
 unknown non-empty directories fail closed.
 
+Check the package being executed, or refresh an existing project's configured hosts:
+
+```bash
+npx -y @forgeax/game@latest version
+npx -y @forgeax/game@latest update --ide codex
+```
+
+`update` reports the configured transition, for example
+`plugin 0.3.3 -> 0.3.4`. It refreshes configuration, skills, and routing from the
+package being executed; it does not independently fetch another package.
+
 > [!NOTE]
 > Asset3D is optional and **disabled by default**. The two commands above never contact
 > the internal asset catalog, provision the bundled platform Provider, or add
@@ -61,9 +72,10 @@ unknown non-empty directories fail closed.
 > npx -y @forgeax/game asset3d enable
 > ```
 >
-> With no override, `enable` uses the documented AW production service. Pass
-> `--base-url <test-gateway-or-service-url>` only to select a test environment. The
-> first enable prompts for the AW Sandbox Key with hidden input, validates it through
+> With no override, `enable` keeps the public AW depot. On the office network, pass
+> `--library ea` to select the EA depot and its local gateway. `--base-url` overrides
+> only the selected library's gateway. The first enable prompts for the Sandbox Key
+> with hidden input, validates it through
 > the packaged Provider, and stores it outside the project in a private user
 > credential file.
 
@@ -157,41 +169,57 @@ a live unverifiable PID fails closed as `preview_ownership_unverified`.
 
 ## Asset3D installation and transaction
 
-Asset3D is an opt-in, project-local MCP integration for AW HybridSearch. Run it only
-after `init`, while connected to the internal network. The no-argument command uses
-the documented production service:
+Asset3D is an opt-in, project-local MCP integration for AW or EA HybridSearch. Run it
+only after `init`. The no-argument command remains public-network compatible; select
+EA explicitly when connected to the office network:
 
 ```bash
+# Public/default
 npx -y @forgeax/game asset3d enable
+
+# Office network
+npx -y @forgeax/game asset3d enable --library ea
+
 forgeax-game asset3d doctor --json
 ```
 
-The service selection precedence is explicit `--base-url`, then
-`FORGEAX_ASSET_LIBRARY_BASE_URL`, then the built-in production service. An override
+The library selection precedence is `--library`, then
+`FORGEAX_ASSET_LIBRARY`, then `aw`. Each library selects its matching built-in
+gateway. Gateway precedence is explicit `--base-url`, then
+`FORGEAX_ASSET_LIBRARY_BASE_URL`, then that library's built-in service. An override
 accepts either a gateway root or the full
 `trpc.oasismetric.omcontentserver.http` service root. On first use, `enable` reads the
 key with hidden TTY input. Non-interactive automation must inject
 `FORGEAX_ASSET3D_AW_SANDBOX_KEY` from its secret store. The key is validated by the
-Provider against the selected environment's `HybridSearch` before the command
+Provider against the selected depot's `HybridSearch` before the command
 reports success.
 
 The validated key is stored in
 `~/.forgeax/credentials/asset3d-aw.json` as an owned, non-symlink `0600` file. Project
-`.forgeax/mcp.json` contains only the AW service URL and the credential-file path; it
-never contains the key or a signed asset URL. The Provider access check returns only
-the exact download origins required by the sandbox. Failed validation or installation
-rolls back a newly written credential.
-
-The npm package carries the digest-pinned Darwin arm64 Provider archive as an inert
-asset. `enable` reuses the exact verified Provider from
+`.forgeax/mcp.json` contains only the selected service URL, matching
+`AW_API_DEPOT_NAME=aw|ea`, and the credential-file path; it never contains the key or
+a signed asset URL. The `AW_API_*` names are the packaged Provider's legacy
+environment contract. The Provider access check returns only the exact download
+origins required by the sandbox. Failed validation or installation rolls back a
+newly written credential.
+
+The npm package carries digest-pinned Darwin arm64 and Linux x64 Provider archives
+as inert assets. `enable` selects only the archive matching the current host and
+reuses the exact verified Provider from
 `~/.forgeax/providers/asset3d-search/<sha256>/`, or provisions that packaged archive
 when the cache is absent. It never downloads Provider code from GitHub or another
 repository. Only after Provider verification and its MCP handshake succeed does it merge the `forgeax` and
 `asset3d-search` entries into `.forgeax/mcp.json` and project the approved Asset3D
 workflow into the Agent hosts selected during `install`.
 
+`enable` also registers a project-aware `asset3d-search` bridge in those hosts. The
+bridge entry contains no project path or credential: on each new Agent session it
+resolves the current directory's project-local Provider. In projects where Asset3D
+has not been enabled, the bridge connects normally but advertises no tools. Restart
+the selected Agent after the first successful `enable` so it discovers `search_asset`.
+
 > [!IMPORTANT]
-> Asset3D uses the AW-specific `X-Sandbox-Key` contract. It never reads
+> Asset3D uses the shared `X-Sandbox-Key` contract. It never reads
 > `ANTHROPIC_API_KEY` or another model-provider key. Do not pass keys as command-line
 > arguments, commit the user credential file, or copy a key into project MCP config.
 
@@ -200,9 +228,10 @@ The transaction commands are normally driven by the installed Agent workflow:
 ```bash
 
 forgeax-game asset3d begin --query "weathered oak tree" --json
-# Call the configured asset3d-search/search_asset MCP tool with the returned output_dir.
-# Pass its complete TextContent JSON to commit on stdin:
-forgeax-game asset3d commit --execution <uuid> --provider-result-stdin --json < result.json
+# Call asset3d-search/search_asset with the exact queries and returned execution UUID.
+# The bridge validates the transaction, injects its private output directory, and
+# stores the exact provider result for commit:
+forgeax-game asset3d commit --execution <uuid> --json
 
 forgeax-game asset3d doctor --json
 forgeax-game asset3d uninstall
@@ -219,7 +248,7 @@ forgeax-game asset3d install \
   --provider-bundle ./asset3d-search-provider-<commit>-<os>-<arch>.tar.gz \
   --sha256 <archive-sha256> \
   --download-origin https://<approved-download-host>:443 \
-  --aw-base-url <aw-gateway-or-service-url> \
+  --aw-base-url <ea-gateway-or-service-url> \
   --aw-credential-file /absolute/path/to/private-credential.json
 ```
 
@@ -249,8 +278,11 @@ and evidence boundaries.
 > acceptance gates.
 
 See [docs/runtime.md](docs/runtime.md) for the exact artifact and lifecycle contract.
-For the current production-default environment contract and maintainer publish
-checklist, see [docs/release-0.3.2.md](docs/release-0.3.2.md). The authenticated AW
-Provider delivery is documented in [docs/release-0.3.1.md](docs/release-0.3.1.md),
+For the current AW-default plus explicit EA environment contract and maintainer
+publish checklist, see [docs/release-0.3.4.md](docs/release-0.3.4.md). The AW-default
+plus explicit EA environment contract was introduced in
+[docs/release-0.3.3.md](docs/release-0.3.3.md). The original AW
+production default is recorded in [docs/release-0.3.2.md](docs/release-0.3.2.md), authenticated Provider
+delivery is documented in [docs/release-0.3.1.md](docs/release-0.3.1.md),
 and the original two-command onboarding contract remains documented in
 [docs/release-0.3.0.md](docs/release-0.3.0.md).

package/assets/asset3d/vibegame-art-3d-asset-library-2.0.0.tgz.sha256

@@ -0,0 +1 @@
+4937fe00e2b919319c70c82db53ebe359b275ed662c026153ecb97f7601262b4  vibegame-art-3d-asset-library-2.0.0.tgz