@adiholick/nvstudio-mcp 2.2.3 → 2.3.0

package/studio-plugin/Main.server.lua

@@ -1,5 +1,5 @@
 -- ══════════════════════════════════════════════════════════════════════
--- NVStudio MCP Plugin v2.2.2
+-- NVStudio MCP Plugin v2.3.0
 -- Arsitektur: Dual-Mode WebSocket Duplex (Port 3055/ws) + Fallback Long-Polling
 -- Plugin auto-connect saat dimuat via WebSocket native, dengan fallback otomatis
 -- ke HTTP stream jika WebSocket tidak tersedia di environment Roblox Studio ini.

package/studio-plugin/batch_create_instances.lua

@@ -0,0 +1,128 @@
+--!strict
+-- ============================================================================
+-- Skill Module: batch_create_instances
+-- Deskripsi: Pembangun Hierarki Instance Massal & Deklaratif (Tree / Batch List)
+-- ============================================================================
+
+local HttpService = game:GetService("HttpService")
+
+return function(targetInstance: Instance?, data: any, ctx: any, targetPath: string?)
+    local success, config = pcall(function()
+        if type(data) == "table" then return data end
+        return HttpService:JSONDecode(tostring(data))
+    end)
+
+    if not success or type(config) ~= "table" then
+        return { status = "error", error = "Format data JSON tidak valid untuk batch_create_instances." }
+    end
+
+    local setPropsFunc = require(script.Parent:WaitForChild("set_properties"))
+    local defaultParent = targetInstance or game.Workspace
+
+    if config.target and ctx and ctx.getInstanceFromPath then
+        local resolved = ctx.getInstanceFromPath(config.target)
+        if resolved then defaultParent = resolved end
+    end
+
+    local createdList = {}
+    local errors = {}
+    local createdCount = 0
+
+    local function applyProps(inst: Instance, props: any)
+        if not props or type(props) ~= "table" or not next(props) then return end
+        local propJson = HttpService:JSONEncode(props)
+        local res = setPropsFunc(inst, propJson, ctx, inst:GetFullName())
+        if res and res.status == "error" then
+            table.insert(errors, string.format("[%s] Error properti: %s", inst.Name, tostring(res.result or res.error)))
+        end
+    end
+
+    -- 1. MODE HIERARCHICAL TREE (Pohon Bersarang)
+    local function buildTreeNode(parentInst: Instance, node: any): Instance?
+        local className = node.className or node.ClassName
+        if not className or type(className) ~= "string" then
+            table.insert(errors, "Node pohon tidak memiliki ClassName yang valid.")
+            return nil
+        end
+
+        local ok, inst = pcall(function()
+            local newObj = Instance.new(className)
+            if node.name or node.Name then
+                newObj.Name = tostring(node.name or node.Name)
+            end
+            newObj.Parent = parentInst
+            return newObj
+        end)
+
+        if not ok or not inst then
+            table.insert(errors, string.format("Gagal membuat instance '%s': %s", className, tostring(inst)))
+            return nil
+        end
+
+        createdCount = createdCount + 1
+        table.insert(createdList, inst:GetFullName())
+
+        -- Terapkan properti
+        applyProps(inst, node.properties or node.Properties)
+
+        -- Rekursif untuk seluruh child
+        local children = node.children or node.Children
+        if children and type(children) == "table" then
+            for _, childNode in ipairs(children) do
+                buildTreeNode(inst, childNode)
+            end
+        end
+
+        return inst
+    end
+
+    -- Eksekusi Mode Tree jika disediakan
+    if config.tree and type(config.tree) == "table" then
+        buildTreeNode(defaultParent, config.tree)
+    end
+
+    -- 2. MODE FLAT ARRAY (Daftar Instance Terpisah)
+    local instancesArray = config.instances or config.items
+    if instancesArray and type(instancesArray) == "table" then
+        for idx, item in ipairs(instancesArray) do
+            local parentInst = defaultParent
+            if item.parent and ctx and ctx.getInstanceFromPath then
+                local resParent = ctx.getInstanceFromPath(item.parent)
+                if resParent then parentInst = resParent end
+            end
+
+            local className = item.className or item.ClassName
+            if className then
+                local ok, inst = pcall(function()
+                    local newObj = Instance.new(className)
+                    if item.name or item.Name then
+                        newObj.Name = tostring(item.name or item.Name)
+                    end
+                    newObj.Parent = parentInst
+                    return newObj
+                end)
+
+                if ok and inst then
+                    createdCount = createdCount + 1
+                    table.insert(createdList, inst:GetFullName())
+                    applyProps(inst, item.properties or item.Properties)
+                else
+                    table.insert(errors, string.format("Item #%d (%s) gagal dibuat: %s", idx, tostring(className), tostring(inst)))
+                end
+            end
+        end
+    end
+
+    local status = (createdCount > 0 or #errors == 0) and "success" or "error"
+    return {
+        status = status,
+        result = {
+            totalCreated = createdCount,
+            created = createdList,
+            hasErrors = (#errors > 0),
+            errors = errors,
+            message = string.format("Berhasil membuat %d instance secara batch.", createdCount)
+        }
+    }
+end
+

package/studio-plugin/batch_set_properties.lua

@@ -0,0 +1,69 @@
+--!strict
+-- ============================================================================
+-- Skill Module: batch_set_properties
+-- Deskripsi: Modifikasi Properti Massal untuk Beberapa Instance Sekaligus
+-- ============================================================================
+
+local HttpService = game:GetService("HttpService")
+
+return function(targetInstance: Instance?, data: any, ctx: any, targetPath: string?)
+    local success, config = pcall(function()
+        if type(data) == "table" then return data end
+        return HttpService:JSONDecode(tostring(data))
+    end)
+
+    if not success or type(config) ~= "table" then
+        return { status = "error", error = "Format data JSON tidak valid untuk batch_set_properties." }
+    end
+
+    local setPropsFunc = require(script.Parent:WaitForChild("set_properties"))
+    local updates = config.updates or config
+    if type(updates) ~= "table" then
+        return { status = "error", error = "Parameter 'updates' harus berupa array pembaruan properti." }
+    end
+
+    local updatedCount = 0
+    local successfulTargets = {}
+    local errors = {}
+
+    for idx, updateItem in ipairs(updates) do
+        local inst = targetInstance
+        local instPath = updateItem.target or updateItem.path
+        if instPath and ctx and ctx.getInstanceFromPath then
+            local resolved = ctx.getInstanceFromPath(instPath)
+            if resolved then
+                inst = resolved
+            else
+                table.insert(errors, string.format("Item #%d: Target path '%s' tidak ditemukan.", idx, tostring(instPath)))
+                continue
+            end
+        end
+
+        local props = updateItem.properties or updateItem.props
+        if inst and props and type(props) == "table" then
+            local propJson = HttpService:JSONEncode(props)
+            local res = setPropsFunc(inst, propJson, ctx, inst:GetFullName())
+            if res and res.status == "error" then
+                table.insert(errors, string.format("[%s]: %s", inst.Name, tostring(res.result or res.error)))
+            else
+                updatedCount = updatedCount + 1
+                table.insert(successfulTargets, inst:GetFullName())
+            end
+        else
+            table.insert(errors, string.format("Item #%d: Instance atau properties tidak valid.", idx))
+        end
+    end
+
+    local status = (updatedCount > 0 or #errors == 0) and "success" or "error"
+    return {
+        status = status,
+        result = {
+            totalUpdated = updatedCount,
+            updatedInstances = successfulTargets,
+            hasErrors = (#errors > 0),
+            errors = errors,
+            message = string.format("Berhasil memperbarui properti untuk %d instance.", updatedCount)
+        }
+    }
+end
+

package/studio-plugin/insert_asset.lua

@@ -1,23 +1,96 @@
-return function(targetInstance, data, ctx, targetPath)
-    local InsertService = game:GetService("InsertService")
-    local rawId = tostring(data or ""):gsub("rbxassetid://", ""):gsub("%s+", "")
+--!strict
+-- ============================================================================
+-- Skill Module: insert_asset (Upgraded with Asset Security Scanner & Script Stripper)
+-- ============================================================================
+
+local HttpService = game:GetService("HttpService")
+local InsertService = game:GetService("InsertService")
+
+local SecurityScanner = require(script.Parent:WaitForChild("security_scanner"))
+
+return function(targetInstance: Instance?, data: any, ctx: any, targetPath: string?)
+    local assetIdStr = ""
+    local stripScripts = true  -- Default TRUE demi keamanan mutlak
+    local scanSecurity = true
+
+    if typeof(data) == "string" then
+        local success, parsed = pcall(function()
+            return HttpService:JSONDecode(data)
+        end)
+        if success and typeof(parsed) == "table" then
+            assetIdStr = tostring(parsed.asset_id or parsed.assetId or "")
+            if parsed.strip_scripts ~= nil then stripScripts = parsed.strip_scripts end
+            if parsed.scan_security ~= nil then scanSecurity = parsed.scan_security end
+        else
+            assetIdStr = data
+        end
+    elseif typeof(data) == "table" then
+        assetIdStr = tostring(data.asset_id or data.assetId or "")
+        if data.strip_scripts ~= nil then stripScripts = data.strip_scripts end
+        if data.scan_security ~= nil then scanSecurity = data.scan_security end
+    end
+
+    local rawId = string.gsub(assetIdStr, "rbxassetid://", "")
+    rawId = string.gsub(rawId, "%s+", "")
     local assetId = tonumber(rawId)
-    if not assetId then
+
+    if not assetId or assetId <= 0 then
         return { status = "error", error = "Asset ID harus berupa angka yang valid." }
     end
-    
+
     local success, model = pcall(function()
         return InsertService:LoadAsset(assetId)
     end)
-    
-    if success and model then
-        if targetInstance == game or targetInstance.ClassName == "DataModel" then
-            model.Parent = game.Workspace
+
+    if not success or not model then
+        return {
+            status = "error",
+            error = "Gagal memuat aset. Pastikan Asset ID benar dan model berstatus publik di Creator Store."
+        }
+    end
+
+    local securityNotes = {}
+    local removedScripts = {}
+
+    -- 1. Scan keamanan jika diaktifkan
+    if scanSecurity then
+        local scanResult = SecurityScanner.scanInstance(model, true)
+        if scanResult.riskLevel == "DANGEROUS" then
+            table.insert(securityNotes, string.format("⚠️ PERINGATAN: Aset ini memiliki %d ancaman BERBAHAYA (Backdoor/Obfuscation/Webhook)!", scanResult.highThreats))
+        end
+    end
+
+    -- 2. Sanitasi: Hapus skrip jika strip_scripts = true
+    if stripScripts then
+        removedScripts = SecurityScanner.stripScripts(model)
+        if #removedScripts > 0 then
+            table.insert(securityNotes, string.format("🛡️ Keamanan: %d skrip bawaan telah dihapus secara otomatis demi keamanan game Anda.", #removedScripts))
         else
-            model.Parent = targetInstance
+            table.insert(securityNotes, "🛡️ Keamanan: Aset bersih, tidak ditemukan skrip berbahaya.")
         end
-        return { status = "success", result = "Aset berhasil dimasukkan ke " .. model.Parent.Name .. "." }
     else
-        return { status = "error", error = "Gagal memuat aset. Pastikan Asset ID benar dan akun/plugin Anda memiliki izin (Ownership/Public)." }
+        table.insert(securityNotes, "ℹ️ Catatan: strip_scripts = false, skrip bawaan model dipertahankan.")
+    end
+
+    -- 3. Masukkan model ke target
+    local parentTarget = targetInstance
+    if not parentTarget or parentTarget == game or parentTarget.ClassName == "DataModel" then
+        parentTarget = game.Workspace
     end
+
+    model.Parent = parentTarget
+
+    return {
+        status = "success",
+        result = {
+            message = string.format("Aset '%s' (ID: %d) berhasil dimasukkan ke %s.", model.Name, assetId, parentTarget.Name),
+            assetName = model.Name,
+            assetId = assetId,
+            parent = parentTarget:GetFullName(),
+            stripScriptsApplied = stripScripts,
+            removedScriptsCount = #removedScripts,
+            removedScripts = removedScripts,
+            securityNotes = table.concat(securityNotes, "\n"),
+        }
+    }
 end