@adiholick/nvstudio-mcp 2.2.3 → 2.3.0

package/dist/index.js

@@ -12,6 +12,7 @@ const task_queue_1 = require("./task-queue");
 const fs_1 = __importDefault(require("fs"));
 const path_1 = __importDefault(require("path"));
 const luau_validator_1 = require("./luau-validator");
+const roblox_docs_1 = require("./roblox-docs");
 const HISTORY_DIR = path_1.default.join(__dirname, '..', '.history');
 if (!fs_1.default.existsSync(HISTORY_DIR)) {
     fs_1.default.mkdirSync(HISTORY_DIR, { recursive: true });
@@ -377,9 +378,64 @@ const TOOLS = [
             required: ["material", "position", "size"],
         },
     },
+    {
+        name: "preview_asset",
+        description: "Pratinjau hierarki dan pemindaian keamanan aset Creator Store secara terisolasi sebelum dimasukkan ke dalam game. Mendeteksi skrip backdoor, require eksternal numerik, obfuscation, webhook discord, dan virus script tanpa risiko mengeksekusi kode berbahaya.",
+        inputSchema: {
+            type: "object",
+            properties: {
+                asset_id: {
+                    type: "string",
+                    description: "Roblox Asset ID angka (atau rbxassetid://) dari Creator Store.",
+                },
+                deep_scan: {
+                    type: "boolean",
+                    description: "Jika true (default), memindai dan menganalisis source code seluruh skrip di dalam model.",
+                },
+                placeId: {
+                    type: "number",
+                    description: "Target Place ID untuk multi-Studio routing.",
+                },
+                studioId: {
+                    type: "string",
+                    description: "Target Studio session ID.",
+                },
+            },
+            required: ["asset_id"],
+        },
+    },
+    {
+        name: "scan_security",
+        description: "Audit keamanan instance atau model yang sudah ada di dalam game (Workspace, ServerScriptService, dll.) untuk mendeteksi skrip backdoor, virus, webhook discord, dan kode berbahaya.",
+        inputSchema: {
+            type: "object",
+            properties: {
+                target: {
+                    type: "string",
+                    description: "Path instance atau folder yang ingin diaudit (default: 'Workspace').",
+                },
+                deep_scan: {
+                    type: "boolean",
+                    description: "Jika true (default), memindai isi source code skrip.",
+                },
+                clean_threats: {
+                    type: "boolean",
+                    description: "Jika true, secara otomatis menghapus skrip berbahaya yang terdeteksi (default: false).",
+                },
+                placeId: {
+                    type: "number",
+                    description: "Target Place ID untuk multi-Studio routing.",
+                },
+                studioId: {
+                    type: "string",
+                    description: "Target Studio session ID.",
+                },
+            },
+        },
+    },
     {
         name: "insert_asset",
-        description: "Muat dan masukkan aset Roblox (Model/Package) berdasarkan Asset ID ke dalam Workspace atau target tertentu.",
+        description: "Muat dan masukkan aset Roblox (Model/Package) berdasarkan Asset ID ke dalam Workspace atau target tertentu dengan proteksi sanitasi skrip otomatis.",
         inputSchema: {
             type: "object",
             properties: {
@@ -391,6 +447,14 @@ const TOOLS = [
                     type: "string",
                     description: "Parent tujuan tempat menempatkan model (default: 'Workspace').",
                 },
+                strip_scripts: {
+                    type: "boolean",
+                    description: "Jika true (default: true), secara otomatis menghapus semua skrip dari model sebelum dimasukkan ke game demi keamanan mutlak dari backdoor.",
+                },
+                scan_security: {
+                    type: "boolean",
+                    description: "Jika true (default: true), memindai potensi ancaman keamanan sebelum insert.",
+                },
                 placeId: {
                     type: "number",
                     description: "Target Place ID untuk multi-Studio routing.",
@@ -475,7 +539,7 @@ const TOOLS = [
     },
     {
         name: "call_mcp_tool",
-        description: "Legacy tool dispatcher untuk kompatibilitas mundur. Mendukung semua command: execute_luau, get_children, get_full_tree, get_script_source, update_script_source, patch_script_source, rollback_script, get_properties, set_properties, create_instance, delete_instance, search_instance, generate_terrain, insert_asset, search_asset, script_grep, get_logs.",
+        description: "Legacy tool dispatcher untuk kompatibilitas mundur. Mendukung semua command: execute_luau, get_children, get_full_tree, get_script_source, update_script_source, patch_script_source, rollback_script, get_properties, set_properties, create_instance, delete_instance, search_instance, generate_terrain, insert_asset, preview_asset, scan_security, batch_create_instances, batch_set_properties, search_asset, script_grep, get_roblox_docs, get_logs.",
         inputSchema: {
             type: "object",
             properties: {
@@ -503,6 +567,80 @@ const TOOLS = [
             required: ["command"],
         },
     },
+    {
+        name: "get_roblox_docs",
+        description: "Ambil dokumentasi resmi Roblox Engine API langsung dari Creator Docs (Classes, Services, Data types, Enums, dan Libraries). Mengembalikan format Markdown lengkap beserta signature fungsi, deskripsi parameter, properti, event, dan contoh kode untuk mencegah halusinasi kode Luau.",
+        inputSchema: {
+            type: "object",
+            properties: {
+                query: {
+                    type: "string",
+                    description: "Nama Class, Service, Data type, Enum, atau Library Roblox (contoh: 'TweenService', 'CanvasGroup', 'Vector3', 'EasingStyle', 'task').",
+                },
+                member: {
+                    type: "string",
+                    description: "Opsional: Nama method, property, event, atau enum item spesifik untuk menghemat token (contoh: 'Create', 'GroupTransparency', 'Completed').",
+                },
+                category: {
+                    type: "string",
+                    enum: ["class", "datatype", "enum", "library", "auto"],
+                    description: "Opsional: Kategori dokumentasi (default: 'auto').",
+                },
+            },
+            required: ["query"],
+        },
+    },
+    {
+        name: "batch_create_instances",
+        description: "Pembangun instance massal dan deklaratif dalam satu kali pemanggilan. Mendukung mode hierarki bersarang (tree) atau daftar array datar (instances) lengkap dengan penyetelan properti langsung (UDim, Vector2, UDim2, Color3, Enum, dll.) untuk menghemat token dan latensi jaringan.",
+        inputSchema: {
+            type: "object",
+            properties: {
+                target: {
+                    type: "string",
+                    description: "Path root tujuan tempat menaruh instance (contoh: 'StarterGui.MyScreen', 'Workspace.Map').",
+                },
+                tree: {
+                    type: "object",
+                    description: "Objek hierarki bersarang { className, name, properties, children: [...] } untuk membangun struktur pohon secara rekursif.",
+                },
+                instances: {
+                    type: "array",
+                    description: "Daftar array datar [{ className, name, parent, properties }] jika tidak menggunakan mode tree.",
+                },
+                placeId: {
+                    type: "number",
+                    description: "Target Place ID untuk multi-Studio routing.",
+                },
+                studioId: {
+                    type: "string",
+                    description: "Target Studio session ID.",
+                },
+            },
+        },
+    },
+    {
+        name: "batch_set_properties",
+        description: "Ubah properti pada banyak instance sekaligus dalam satu kali request atomik.",
+        inputSchema: {
+            type: "object",
+            properties: {
+                updates: {
+                    type: "array",
+                    description: "Array objek pembaruan: [{ target: 'Path.To.Instance', properties: { PropName: value, ... } }].",
+                },
+                placeId: {
+                    type: "number",
+                    description: "Target Place ID untuk multi-Studio routing.",
+                },
+                studioId: {
+                    type: "string",
+                    description: "Target Studio session ID.",
+                },
+            },
+            required: ["updates"],
+        },
+    },
 ];
 server.setRequestHandler(types_js_1.ListToolsRequestSchema, async () => {
     return { tools: TOOLS };
@@ -752,11 +890,41 @@ server.setRequestHandler(types_js_1.CallToolRequestSchema, async (request) => {
                 });
                 break;
             }
+            case "preview_asset": {
+                const assetId = String(args.asset_id ?? "");
+                if (!assetId)
+                    throw new Error("Parameter 'asset_id' wajib diisi.");
+                const payload = JSON.stringify({
+                    asset_id: assetId,
+                    deep_scan: args.deep_scan !== false,
+                });
+                result = await dispatchTaskToStudio("preview_asset", "", payload, {
+                    placeId: args.placeId,
+                    studioId: args.studioId,
+                });
+                break;
+            }
+            case "scan_security": {
+                const payload = JSON.stringify({
+                    deep_scan: args.deep_scan !== false,
+                    clean_threats: args.clean_threats === true,
+                });
+                result = await dispatchTaskToStudio("scan_security", args.target || "Workspace", payload, {
+                    placeId: args.placeId,
+                    studioId: args.studioId,
+                });
+                break;
+            }
             case "insert_asset": {
                 const assetId = String(args.asset_id ?? "");
                 if (!assetId)
                     throw new Error("Parameter 'asset_id' wajib diisi.");
-                result = await dispatchTaskToStudio("insert_asset", args.target || "Workspace", assetId, {
+                const payload = JSON.stringify({
+                    asset_id: assetId,
+                    strip_scripts: args.strip_scripts !== false,
+                    scan_security: args.scan_security !== false,
+                });
+                result = await dispatchTaskToStudio("insert_asset", args.target || "Workspace", payload, {
                     placeId: args.placeId,
                     studioId: args.studioId,
                 });
@@ -802,6 +970,39 @@ server.setRequestHandler(types_js_1.CallToolRequestSchema, async (request) => {
                 }
                 break;
             }
+            case "get_roblox_docs": {
+                const query = String(args.query ?? "").trim();
+                if (!query)
+                    throw new Error("Parameter 'query' wajib diisi.");
+                const member = args.member ? String(args.member).trim() : undefined;
+                const category = args.category ? String(args.category).trim() : "auto";
+                result = await (0, roblox_docs_1.getRobloxDocs)(query, member, category);
+                break;
+            }
+            case "batch_create_instances": {
+                const payload = JSON.stringify({
+                    target: args.target,
+                    tree: args.tree,
+                    instances: args.instances,
+                });
+                result = await dispatchTaskToStudio("batch_create_instances", args.target || "Workspace", payload, {
+                    placeId: args.placeId,
+                    studioId: args.studioId,
+                });
+                break;
+            }
+            case "batch_set_properties": {
+                if (!args.updates || !Array.isArray(args.updates))
+                    throw new Error("Parameter 'updates' wajib berupa array.");
+                const payload = JSON.stringify({
+                    updates: args.updates,
+                });
+                result = await dispatchTaskToStudio("batch_set_properties", "", payload, {
+                    placeId: args.placeId,
+                    studioId: args.studioId,
+                });
+                break;
+            }
             case "call_mcp_tool": {
                 const { command, target, data, placeId, studioId } = args;
                 if (!command)
@@ -815,6 +1016,18 @@ server.setRequestHandler(types_js_1.CallToolRequestSchema, async (request) => {
                     if (target)
                         backupScript(target, String(data));
                 }
+                // Intercept get_roblox_docs di Node.js
+                if (command === "get_roblox_docs") {
+                    const queryParams = typeof data === "string" ? (function () { try {
+                        return JSON.parse(data);
+                    }
+                    catch {
+                        return { query: data };
+                    } })() : (data || {});
+                    const q = String(queryParams.query || target || "").trim();
+                    result = await (0, roblox_docs_1.getRobloxDocs)(q, queryParams.member, queryParams.category);
+                    break;
+                }
                 // Intercept search_asset di Node.js
                 if (command === "search_asset" && data) {
                     const queryParams = typeof data === "string" ? JSON.parse(data) : data;

package/dist/luau-validator.js

@@ -1,15 +1,18 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.validateLuauSyntax = validateLuauSyntax;
+/**
+ * Heuristic pre-commit syntax validator for Luau.
+ * Validates bracket parity, string literals, multiline comments,
+ * and block keywords (function, do, statement if ... then, repeat ... until, end).
+ */
 function validateLuauSyntax(source) {
     const lines = source.split('\n');
-    // Stack for blocks: function, do, if, for, while, repeat
-    // We'll keep it simple: just count block openers vs block closers (end, until)
-    // Note: This is a heuristic pre-commit check. It doesn't replace a full AST parser,
-    // Bracket stacks
     let parenDepth = 0; // ()
     let braceDepth = 0; // {}
     let bracketDepth = 0; // []
+    let blockDepth = 0; // function, do, if ... then -> end
+    let repeatDepth = 0; // repeat -> until
     let inString = false;
     let stringChar = '';
     let inMultilineString = false;
@@ -18,10 +21,11 @@ function validateLuauSyntax(source) {
     for (let i = 0; i < lines.length; i++) {
         const line = lines[i];
         let j = 0;
+        const lineTokens = [];
         while (j < line.length) {
             const char = line[j];
             const nextChar = line[j + 1] || '';
-            // Handle multiline comments
+            // Multiline comment start: --[[ or --[===[
             if (!inString && !inMultilineString && !inMultilineComment) {
                 if (char === '-' && nextChar === '-') {
                     const nextNextChar = line[j + 2] || '';
@@ -39,7 +43,7 @@ function validateLuauSyntax(source) {
                             continue;
                         }
                     }
-                    // Single line comment, skip rest of line
+                    // Single-line comment, ignore rest of line
                     break;
                 }
             }
@@ -60,7 +64,7 @@ function validateLuauSyntax(source) {
                 j++;
                 continue;
             }
-            // Handle strings
+            // String literals
             if (!inString && !inMultilineString) {
                 if (char === '"' || char === "'") {
                     inString = true;
@@ -81,10 +85,6 @@ function validateLuauSyntax(source) {
                         j = k + 1;
                         continue;
                     }
-                    // If it ended at end of line, we can't reliably detect it. Let's just avoid bracket counting
-                    if (line[k] === undefined) {
-                        break;
-                    }
                 }
             }
             if (inString) {
@@ -115,36 +115,97 @@ function validateLuauSyntax(source) {
                 j++;
                 continue;
             }
-            // At this point, we are outside strings and comments.
-            // Check brackets
-            if (!inString && !inMultilineString && !inMultilineComment) {
-                if (char === '(')
-                    parenDepth++;
-                else if (char === ')') {
-                    parenDepth--;
-                    if (parenDepth < 0)
-                        return { valid: false, error: 'Kelebihan tutup kurung ")"', line: i + 1 };
-                }
-                else if (char === '{')
-                    braceDepth++;
-                else if (char === '}') {
-                    braceDepth--;
-                    if (braceDepth < 0)
-                        return { valid: false, error: 'Kelebihan tutup kurawal "}"', line: i + 1 };
-                }
-                else if (char === '[')
-                    bracketDepth++;
-                else if (char === ']') {
-                    bracketDepth--;
-                    if (bracketDepth < 0)
-                        return { valid: false, error: 'Kelebihan tutup siku "]"', line: i + 1 };
+            // Outside strings & comments: collect bracket depth & tokens
+            if (char === '(') {
+                parenDepth++;
+                lineTokens.push('(');
+            }
+            else if (char === ')') {
+                parenDepth--;
+                lineTokens.push(')');
+                if (parenDepth < 0)
+                    return { valid: false, error: 'Kelebihan tutup kurung ")"', line: i + 1 };
+            }
+            else if (char === '{') {
+                braceDepth++;
+                lineTokens.push('{');
+            }
+            else if (char === '}') {
+                braceDepth--;
+                lineTokens.push('}');
+                if (braceDepth < 0)
+                    return { valid: false, error: 'Kelebihan tutup kurawal "}"', line: i + 1 };
+            }
+            else if (char === '[') {
+                bracketDepth++;
+                lineTokens.push('[');
+            }
+            else if (char === ']') {
+                bracketDepth--;
+                lineTokens.push(']');
+                if (bracketDepth < 0)
+                    return { valid: false, error: 'Kelebihan tutup siku "]"', line: i + 1 };
+            }
+            else if (char === '=') {
+                lineTokens.push('=');
+            }
+            else if (char === ',') {
+                lineTokens.push(',');
+            }
+            else if (/[a-zA-Z_]/.test(char)) {
+                let start = j;
+                while (j < line.length && /[a-zA-Z0-9_]/.test(line[j])) {
+                    j++;
                 }
+                lineTokens.push(line.substring(start, j));
+                continue;
             }
             j++;
         }
         if (inString) {
             return { valid: false, error: 'String tidak ditutup (unclosed string literal)', line: i + 1 };
         }
+        // Process line tokens for block balance
+        let statementIfCount = 0;
+        for (let t = 0; t < lineTokens.length; t++) {
+            const tok = lineTokens[t];
+            const prevTok = t > 0 ? lineTokens[t - 1] : null;
+            if (tok === 'function') {
+                blockDepth++;
+            }
+            else if (tok === 'do') {
+                blockDepth++;
+            }
+            else if (tok === 'if') {
+                // Luau expression if is preceded by '=', 'return', '(', ',', '{', '[', 'and', 'or', 'not'
+                const isExpr = prevTok && ['=', 'return', '(', ',', '{', '[', 'and', 'or', 'not'].includes(prevTok);
+                if (!isExpr) {
+                    statementIfCount++;
+                }
+            }
+            else if (tok === 'then') {
+                const isElseIf = lineTokens.includes('elseif');
+                if (!isElseIf) {
+                    if (statementIfCount > 0) {
+                        blockDepth++;
+                        statementIfCount--;
+                    }
+                }
+            }
+            else if (tok === 'repeat') {
+                repeatDepth++;
+            }
+            else if (tok === 'until') {
+                repeatDepth--;
+                if (repeatDepth < 0)
+                    return { valid: false, error: 'Kelebihan kata kunci "until"', line: i + 1 };
+            }
+            else if (tok === 'end') {
+                blockDepth--;
+                if (blockDepth < 0)
+                    return { valid: false, error: 'Kelebihan kata kunci "end"', line: i + 1 };
+            }
+        }
     }
     if (inMultilineString)
         return { valid: false, error: 'Multiline string tidak ditutup (unclosed [[ ]])' };
@@ -156,5 +217,9 @@ function validateLuauSyntax(source) {
         return { valid: false, error: 'Kekurangan tutup kurawal "}"' };
     if (bracketDepth > 0)
         return { valid: false, error: 'Kekurangan tutup siku "]"' };
+    if (repeatDepth > 0)
+        return { valid: false, error: 'Kekurangan kata kunci "until"' };
+    if (blockDepth > 0)
+        return { valid: false, error: 'Kekurangan kata kunci "end" (blok tidak ditutup)' };
     return { valid: true };
 }

package/dist/roblox-bridge.js

@@ -18,6 +18,7 @@ const path_1 = __importDefault(require("path"));
 const child_process_1 = require("child_process");
 const task_queue_1 = require("./task-queue");
 const ws_gateway_1 = require("./ws-gateway");
+const roblox_docs_1 = require("./roblox-docs");
 const { version: SERVER_VERSION } = require('../package.json');
 exports.isBridgeHosting = false;
 let resolveBridgeReady;
@@ -349,7 +350,17 @@ function addLog(io, type, message) {
         activityLogs.pop();
     if (io.engine && io.engine.clientsCount > 0) {
         io.emit('log', log);
-        io.emit('stats', { totalTasks, successCount, errorCount, sessionStart });
+        io.emit('stats', {
+            totalTasks,
+            successCount,
+            errorCount,
+            sessionStart,
+            studioConnected: isStudioConnected(),
+            studioCount: getConnectedStudioCount(),
+            wsStudios: (0, ws_gateway_1.getWsPeerCount)(),
+            connectedStudios: getConnectedStudios(),
+            version: SERVER_VERSION
+        });
     }
 }
 /**
@@ -422,7 +433,12 @@ function startBridgeServer(port, isDaemon = false) {
         onStudioStatusChange: () => {
             const connected = isStudioConnected();
             const studioCount = getConnectedStudioCount();
-            io.emit('studio-status', { connected, studioCount });
+            io.emit('studio-status', {
+                connected,
+                studioCount,
+                connectedStudios: getConnectedStudios(),
+                version: SERVER_VERSION
+            });
             broadcastStatus();
             if (!connected && (0, task_queue_1.hasPendingTasks)()) {
                 checkPendingTasksOnStudioDisconnect();
@@ -464,10 +480,28 @@ function startBridgeServer(port, isDaemon = false) {
                 studioConnected: isStudioConnected(),
                 studioCount: getConnectedStudioCount(),
                 wsStudios: (0, ws_gateway_1.getWsPeerCount)(),
-                port
+                port,
+                version: SERVER_VERSION,
+                connectedStudios: getConnectedStudios(),
             },
         });
     });
+    // ── /api/docs (Endpoint pencarian dokumentasi engine untuk web dashboard) ──
+    app.get('/api/docs', async (req, res) => {
+        try {
+            const query = String(req.query.query || '').trim();
+            const member = req.query.member ? String(req.query.member).trim() : undefined;
+            const category = req.query.category ? String(req.query.category).trim() : 'auto';
+            if (!query) {
+                return res.status(400).json({ error: "Parameter 'query' wajib diisi." });
+            }
+            const result = await (0, roblox_docs_1.getRobloxDocs)(query, member, category);
+            res.json({ success: true, result });
+        }
+        catch (err) {
+            res.status(500).json({ error: err.message });
+        }
+    });
     // ── /api/stats ─────────────────────────────────────────────────────────────
     app.get('/api/stats', (req, res) => {
         const activeStudios = getConnectedStudioCount();
@@ -514,7 +548,13 @@ function startBridgeServer(port, isDaemon = false) {
         // Daftarkan studio jika belum ada
         if (!studioEventQueues.has(studioId)) {
             studioEventQueues.set(studioId, []);
-            io.emit('studio-status', { connected: true, studioCount: Math.max(studioEventQueues.size, 1), studioId });
+            io.emit('studio-status', {
+                connected: true,
+                studioCount: Math.max(studioEventQueues.size, 1),
+                studioId,
+                connectedStudios: getConnectedStudios(),
+                version: SERVER_VERSION
+            });
             addLog(io, 'system', `Studio terdaftar. (ID: ${studioId.substring(0, 8)}…, Place: ${placeId ?? 'Local'}, Total: ${studioEventQueues.size})`);
             if (!isDaemon && !dashboardOpened) {
                 dashboardOpened = true;