@forgeax/game 0.3.3 → 0.3.4

package/README.md

@@ -60,7 +60,7 @@ npx -y @forgeax/game@latest update --ide codex
 ```
 
 `update` reports the configured transition, for example
-`plugin 0.3.2 -> 0.3.3`. It refreshes configuration, skills, and routing from the
+`plugin 0.3.3 -> 0.3.4`. It refreshes configuration, skills, and routing from the
 package being executed; it does not independently fetch another package.
 
 > [!NOTE]
@@ -203,8 +203,9 @@ environment contract. The Provider access check returns only the exact download
 origins required by the sandbox. Failed validation or installation rolls back a
 newly written credential.
 
-The npm package carries the digest-pinned Darwin arm64 Provider archive as an inert
-asset. `enable` reuses the exact verified Provider from
+The npm package carries digest-pinned Darwin arm64 and Linux x64 Provider archives
+as inert assets. `enable` selects only the archive matching the current host and
+reuses the exact verified Provider from
 `~/.forgeax/providers/asset3d-search/<sha256>/`, or provisions that packaged archive
 when the cache is absent. It never downloads Provider code from GitHub or another
 repository. Only after Provider verification and its MCP handshake succeed does it merge the `forgeax` and
@@ -278,7 +279,9 @@ and evidence boundaries.
 
 See [docs/runtime.md](docs/runtime.md) for the exact artifact and lifecycle contract.
 For the current AW-default plus explicit EA environment contract and maintainer
-publish checklist, see [docs/release-0.3.3.md](docs/release-0.3.3.md). The original AW
+publish checklist, see [docs/release-0.3.4.md](docs/release-0.3.4.md). The AW-default
+plus explicit EA environment contract was introduced in
+[docs/release-0.3.3.md](docs/release-0.3.3.md). The original AW
 production default is recorded in [docs/release-0.3.2.md](docs/release-0.3.2.md), authenticated Provider
 delivery is documented in [docs/release-0.3.1.md](docs/release-0.3.1.md),
 and the original two-command onboarding contract remains documented in

package/dist/main.js

@@ -2946,7 +2946,7 @@ var RELEASE_IDENTITY_MIME = "application/vnd.forgeax.game-release-identity+json"
 var RELEASE_IDENTITY = Object.freeze({
   schema: RELEASE_IDENTITY_SCHEMA,
   gamePackage: "@forgeax/game",
-  gameVersion: "0.3.3",
+  gameVersion: "0.3.4",
   gameBin: "forgeax-game",
   engineSdkPackage: ENGINE_SDK_PACKAGE,
   engineSdkVersion: ENGINE_VERSION,
@@ -3356,7 +3356,7 @@ function launchSpec(mode) {
   }
   return {
     command: "npx",
-    args: ["-y", "-p", "@forgeax/game@0.3.3", "forgeax-game", "mcp"]
+    args: ["-y", "-p", "@forgeax/game@0.3.4", "forgeax-game", "mcp"]
   };
 }
 function asset3dLaunchSpec(mode) {
@@ -4275,8 +4275,12 @@ var RECEIPT_SCHEMA_SHA256 = "e0dc9e9fe9872f09af9fca6d0c17d22aca63c2b546c55c0b669
 var ASSET3D_PROVIDER_COMMIT = "c181c48fbffc933a7ce9a0836f7878ca5e6d77e1";
 var BUNDLED_ASSET3D_PROVIDERS = Object.freeze({
   "darwin-arm64": {
-    sha256: "c8d2afd7ba68ae4b3540c927a2ff7133a82ea90975d09cab1d10b003fbbdeed3",
+    sha256: "9492c507a3afe5cafcd50b5f782b313c8716c2e52f5def06592c6a100c0459db",
     relativePath: "asset3d/provider/asset3d-search-provider-c181c48fbffc933a7ce9a0836f7878ca5e6d77e1-darwin-arm64.tar.gz"
+  },
+  "linux-x64": {
+    sha256: "e6ac3df76c8b82f9fe2c063dd3f221324a9dad5176fd52535a5144b0ff6002d8",
+    relativePath: "asset3d/provider/asset3d-search-provider-c181c48fbffc933a7ce9a0836f7878ca5e6d77e1-linux-x64.tar.gz"
   }
 });
 var INSTALL_SCHEMA = "forgeax.asset3d-install/1.0.0";
@@ -5868,7 +5872,7 @@ async function runDormantAsset3dMcp() {
           result: {
             protocolVersion,
             capabilities: { tools: {} },
-            serverInfo: { name: "asset3d-search", version: "0.3.3" }
+            serverInfo: { name: "asset3d-search", version: "0.3.4" }
           }
         };
       } else if (request2.method === "tools/list") {

package/docs/asset3d.md

@@ -14,11 +14,13 @@ second importer or Preview server.
 
 > [!IMPORTANT]
 > Provider archives are platform-specific artifacts. The npm package embeds the
-> currently released Darwin arm64 archive so a cache-empty user does not depend on a
-> private source repository or release download. Installation deliberately returns
+> currently released Darwin arm64 and Linux x64 archives so a cache-empty user does
+> not depend on a private source repository or release download. Linux requires an
+> x86-64 host and Python 3.11 or 3.12. Installation deliberately returns
 > `provider_platform_mismatch` when an archive target differs from the current host.
-> Each bundled target therefore needs its own digest, offline verification, MCP
-> handshake, and real service-path evidence.
+> Unsupported targets such as Linux arm64 and Windows fail closed. Each bundled
+> target therefore needs its own digest, offline verification, MCP handshake, and
+> real service-path evidence.
 
 ## Trust and data flow
 
@@ -178,11 +180,12 @@ successful; `asset3d abort` removes only its transaction quarantine.
 ## Distribution and evidence boundary
 
 The packed Game Plugin includes the self-contained CLI bundle, existing connector
-Skill, exact K0 TGZ, checked P0 result/receipt schemas, and the immutable URL/digest
-table for supported Provider targets. It does not embed the Provider runtime archive,
-Engine payload, source checkout, credentials, or workspace links. Provider archives
-are separate release assets so a disabled installation downloads nothing. The package
-artifact gate recomputes every embedded predecessor digest.
+Skill, exact K0 TGZ, checked P0 result/receipt schemas, and an inert, digest-pinned
+Provider archive for every supported target. It does not embed a provisioned Python
+environment, managed Provider cache, Engine payload, source checkout, credentials, or
+workspace links. A disabled installation neither extracts an archive nor contacts a
+network service. The package artifact gate recomputes every embedded predecessor
+digest.
 
 Controlled external-consumer evidence may establish package installation, raw MCP
 framing, local redirect/ZIP handling, multi-GLB and texture import, reuse, refresh,

package/docs/release-0.3.4.md

@@ -0,0 +1,66 @@
+# @forgeax/game 0.3.4 release contract
+
+Version `0.3.4` adds a self-contained Linux x64 Asset3D Provider while preserving
+the existing opt-in workflow. Ordinary `install` and `init` remain platform-neutral
+and keep Asset3D disabled. A user enables Asset3D only from an initialized game:
+
+```bash
+npx -y @forgeax/game@0.3.4 asset3d enable
+npx -y @forgeax/game@0.3.4 asset3d doctor --json
+```
+
+## Supported Provider targets
+
+| Host | Provider archive SHA-256 | Status |
+|---|---|---|
+| Darwin arm64 | `9492c507a3afe5cafcd50b5f782b313c8716c2e52f5def06592c6a100c0459db` | Supported |
+| Linux x64 | `e6ac3df76c8b82f9fe2c063dd3f221324a9dad5176fd52535a5144b0ff6002d8` | Supported; Python 3.11 or 3.12 required |
+
+Both archives bind Provider commit
+`c181c48fbffc933a7ce9a0836f7878ca5e6d77e1`. The package build fails if either
+source archive is absent, is a symlink, or differs from its approved digest. The npm
+artifact gate repeats those checks against the packed bytes.
+
+The offline wheelhouses omit upstream dependency test suites and redact
+credential-shaped user-info from dependency documentation examples. Runtime modules
+and package metadata remain present, each rewritten wheel is re-RECORDed and
+hash-locked, and the resulting platform archives are byte-reproducible. This keeps
+test-only public tokens and false credential patterns out of the npm payload.
+
+Linux arm64 and Windows are not part of this release. `asset3d enable` fails closed
+with `asset3d_provider_target_unreleased` on those hosts; it does not install a
+different target or fall back to downloaded Provider code.
+
+## Linux release gate
+
+The Ubuntu x64 CI job performs the Linux-specific verification from the same package
+assets that are published:
+
+1. Provision the Provider into an empty managed cache without downloading Provider
+   code or Python dependencies.
+2. Verify the archive manifest, target, file digests, wheel lock, and converter.
+3. Execute the bundled Linux x64 `FBX2glTF` binary.
+4. Launch the installed Provider over stdio MCP and require `search_asset` in
+   `tools/list`.
+
+This proves Linux provisioning and MCP capability discovery. It does not substitute
+for an authenticated request to the internal AW service, which requires network
+reachability and user credentials and remains a separate environment acceptance
+gate.
+
+## Maintainer checklist
+
+- [ ] `bun run typecheck`
+- [ ] `bun test`
+- [ ] `bun run build`
+- [ ] `npm pack --ignore-scripts --pack-destination <empty-directory>`
+- [ ] `bun run release:check -- <exact-tarball>`
+- [ ] Ubuntu x64 `asset3d-linux-x64` CI job is green on the exact release commit.
+- [ ] The packed artifact contains both Provider archives and no credential, source
+      checkout, managed cache, or provisioned Python environment.
+- [ ] The exact tarball passes the repository secret and private-path scans before
+      publication.
+
+The AW production default and explicit EA override remain as documented in
+[`release-0.3.3.md`](release-0.3.3.md). Credential storage and real search/import
+acceptance boundaries remain unchanged and are defined in [`asset3d.md`](asset3d.md).

package/package.json

@@ -1,7 +1,7 @@
 {
   "packageManager": "bun@1.3.14",
   "name": "@forgeax/game",
-  "version": "0.3.3",
+  "version": "0.3.4",
   "private": false,
   "type": "module",
   "description": "@forgeax/game — an MCP/CLI connector for exact released ForgeaX Engine games and Engine-owned Preview.",
@@ -25,6 +25,7 @@
     "docs/release-0.3.1.md",
     "docs/release-0.3.2.md",
     "docs/release-0.3.3.md",
+    "docs/release-0.3.4.md",
     "README.md"
   ],
   "scripts": {
@@ -32,6 +33,7 @@
     "release:check": "bun scripts/check-package-artifact.ts",
     "acceptance": "bun scripts/accept-packed-consumer.ts",
     "acceptance:asset3d": "bun scripts/accept-asset3d-packed-consumer.ts",
+    "verify:asset3d-linux": "bun scripts/verify-linux-asset3d-provider.ts",
     "release:publish": "bun scripts/publish-package.ts",
     "prepack": "bun build.mjs",
     "typecheck": "tsc --noEmit",