@chrrxs/robloxstudio-mcp-inspector 2.10.1 → 2.11.0

package/dist/index.js

@@ -372,6 +372,9 @@ var init_http_server = __esm({
       simulate_mouse_input: (tools, body) => tools.simulateMouseInput(body.action, body.x, body.y, body.button, body.scrollDirection, body.target),
       simulate_keyboard_input: (tools, body) => tools.simulateKeyboardInput(body.keyCode, body.action, body.duration, body.target),
       character_navigation: (tools, body) => tools.characterNavigation(body.position, body.instancePath, body.waitForCompletion, body.timeout, body.target),
+      get_memory_breakdown: (tools, body) => tools.getMemoryBreakdown(body.target, body.tags),
+      export_rbxm: (tools, body) => tools.exportRbxm(body.instance_paths, body.output_path, body.target),
+      import_rbxm: (tools, body) => tools.importRbxm(body.source, body.parent_path, body.target),
       find_and_replace_in_scripts: (tools, body) => tools.findAndReplaceInScripts(body.pattern, body.replacement, {
         caseSensitive: body.caseSensitive,
         usePattern: body.usePattern,
@@ -2777,6 +2780,139 @@ ${code}`
           }]
         };
       }
+      async getMemoryBreakdown(target, tags) {
+        const tgt = target ?? "all";
+        const data = {};
+        if (tags !== void 0)
+          data.tags = tags;
+        if (tgt !== "all") {
+          const response = await this.client.request("/api/get-memory-breakdown", data, tgt);
+          return { content: [{ type: "text", text: JSON.stringify(response) }] };
+        }
+        const targets = this.bridge.getInstances().filter((i) => i.role !== "edit-proxy").map((i) => i.role);
+        const responses = await Promise.allSettled(targets.map(async (t) => ({
+          peer: t,
+          result: await this.client.request("/api/get-memory-breakdown", data, t)
+        })));
+        const body = {};
+        for (let i = 0; i < responses.length; i++) {
+          const r = responses[i];
+          const peer = targets[i];
+          if (r.status === "fulfilled") {
+            body[peer] = r.value.result;
+          } else {
+            body[peer] = { error: "disconnected" };
+          }
+        }
+        return { content: [{ type: "text", text: JSON.stringify(body) }] };
+      }
+      async exportRbxm(instancePaths, outputPath, target) {
+        if (!Array.isArray(instancePaths) || instancePaths.length === 0) {
+          throw new Error("instance_paths must be a non-empty array for export_rbxm");
+        }
+        if (!outputPath || typeof outputPath !== "string") {
+          throw new Error("output_path is required for export_rbxm");
+        }
+        const tgt = target || "edit";
+        if (tgt !== "edit" && tgt !== "server") {
+          throw new Error(`export_rbxm target must be "edit" or "server" (got: ${tgt})`);
+        }
+        const response = await this.client.request("/api/export-rbxm", { instance_paths: instancePaths }, tgt);
+        if (response.error) {
+          return { content: [{ type: "text", text: JSON.stringify({ error: response.error }) }] };
+        }
+        if (!response.base64) {
+          return { content: [{ type: "text", text: JSON.stringify({ error: "plugin returned no base64 payload" }) }] };
+        }
+        const bytes = Buffer.from(response.base64, "base64");
+        const resolved = path.resolve(outputPath);
+        try {
+          fs.mkdirSync(path.dirname(resolved), { recursive: true });
+          fs.writeFileSync(resolved, bytes);
+        } catch (err) {
+          return { content: [{ type: "text", text: JSON.stringify({ error: `failed to write ${resolved}: ${err.message}` }) }] };
+        }
+        return {
+          content: [{
+            type: "text",
+            text: JSON.stringify({
+              bytes_written: bytes.length,
+              instance_count: response.instance_count ?? instancePaths.length,
+              output_path: resolved
+            })
+          }]
+        };
+      }
+      async importRbxm(source, parentPath, target) {
+        if (!source || typeof source !== "object") {
+          throw new Error("source is required for import_rbxm");
+        }
+        if (!parentPath || typeof parentPath !== "string") {
+          throw new Error("parent_path is required for import_rbxm");
+        }
+        const tgt = target || "edit";
+        if (tgt !== "edit" && tgt !== "server") {
+          throw new Error(`import_rbxm target must be "edit" or "server" (got: ${tgt})`);
+        }
+        const modes = ["path", "url", "base64"].filter((k) => source[k] !== void 0);
+        if (modes.length !== 1) {
+          throw new Error(`source must contain exactly one of { path, url, base64 } (got: ${modes.join(", ") || "none"})`);
+        }
+        let bytes;
+        let sourceLabel;
+        if (source.path !== void 0) {
+          const resolved = path.resolve(source.path);
+          try {
+            bytes = fs.readFileSync(resolved);
+          } catch (err) {
+            return { content: [{ type: "text", text: JSON.stringify({ error: `failed to read ${resolved}: ${err.message}` }) }] };
+          }
+          sourceLabel = resolved;
+        } else if (source.url !== void 0) {
+          let parsedUrl;
+          try {
+            parsedUrl = new URL(source.url);
+          } catch {
+            return { content: [{ type: "text", text: JSON.stringify({ error: `import_rbxm url is not a valid URL: ${source.url}` }) }] };
+          }
+          if (parsedUrl.protocol !== "http:" && parsedUrl.protocol !== "https:") {
+            return { content: [{ type: "text", text: JSON.stringify({ error: `import_rbxm url must use http(s); got ${parsedUrl.protocol}` }) }] };
+          }
+          const MAX_IMPORT_BYTES = 50 * 1024 * 1024;
+          try {
+            const res = await fetch(source.url);
+            if (!res.ok) {
+              const snippet = (await res.text()).slice(0, 500);
+              return { content: [{ type: "text", text: JSON.stringify({ error: `fetch ${source.url} returned ${res.status}: ${snippet}` }) }] };
+            }
+            const claimed = Number(res.headers.get("content-length") ?? "0");
+            if (claimed > MAX_IMPORT_BYTES) {
+              return { content: [{ type: "text", text: JSON.stringify({ error: `fetch ${source.url}: content-length ${claimed} exceeds ${MAX_IMPORT_BYTES} byte cap` }) }] };
+            }
+            const arr = await res.arrayBuffer();
+            if (arr.byteLength > MAX_IMPORT_BYTES) {
+              return { content: [{ type: "text", text: JSON.stringify({ error: `fetch ${source.url}: downloaded ${arr.byteLength} bytes exceeds ${MAX_IMPORT_BYTES} byte cap` }) }] };
+            }
+            bytes = Buffer.from(arr);
+          } catch (err) {
+            return { content: [{ type: "text", text: JSON.stringify({ error: `fetch ${source.url} failed: ${err.message}` }) }] };
+          }
+          sourceLabel = source.url;
+        } else {
+          try {
+            bytes = Buffer.from(source.base64, "base64");
+          } catch (err) {
+            return { content: [{ type: "text", text: JSON.stringify({ error: `base64 decode failed: ${err.message}` }) }] };
+          }
+          sourceLabel = `base64(${bytes.length}B)`;
+        }
+        const response = await this.client.request("/api/import-rbxm", {
+          base64: bytes.toString("base64"),
+          parent_path: parentPath,
+          source_label: sourceLabel
+        }, tgt);
+        return { content: [{ type: "text", text: JSON.stringify(response) }] };
+      }
       async captureScreenshot() {
         const response = await this.client.request("/api/capture-screenshot", {});
         if (response.error) {
@@ -4746,6 +4882,86 @@ part(0,2,0,2,1,1,"b")`,
           required: ["instancePath", "attributes"]
         }
       },
+      // === Per-peer memory breakdown ===
+      {
+        name: "get_memory_breakdown",
+        category: "read",
+        description: `Read per-category memory usage by iterating Enum.DeveloperMemoryTag and calling Stats:GetMemoryUsageMbForTag per item (workaround for Stats:GetMemoryUsageMbAllCategories being gated by Capabilities: InternalTest and not callable from plugin context), plus Stats:GetTotalMemoryUsageMb for the rollup. target="all" (default) returns { peer: { total_mb, categories, timestamp } } for every connected peer except edit-proxy; single-peer targets return that peer's object directly. Optional tags whitelist filters to only those DeveloperMemoryTag entries; unknown tags come back with value 0 and are listed in unknown_tags so cross-version drift doesn't error. timestamp is Unix milliseconds (DateTime.now().UnixTimestampMillis). Per-peer MemoryTrackingEnabled=false surfaces as { error } on that peer only.`,
+        inputSchema: {
+          type: "object",
+          properties: {
+            target: {
+              type: "string",
+              description: 'Peer to read from: "edit", "server", "client-N", or "all" (default).'
+            },
+            tags: {
+              type: "array",
+              items: { type: "string" },
+              description: "Optional DeveloperMemoryTag whitelist. Unknown tag names return 0 + unknown_tags list."
+            }
+          }
+        }
+      },
+      // === SerializationService round-trip ===
+      {
+        name: "export_rbxm",
+        category: "read",
+        description: "Serialize one or more instances to a .rbxm file on disk via SerializationService:SerializeInstancesAsync (engine v668+, PluginSecurity). Throws if any path resolves to nil, a service, or a non-creatable instance.",
+        inputSchema: {
+          type: "object",
+          properties: {
+            instance_paths: {
+              type: "array",
+              items: { type: "string" },
+              description: 'DataModel paths to serialize (e.g. ["Workspace.TestRig", "ServerStorage.Templates.NPC"])'
+            },
+            output_path: {
+              type: "string",
+              description: "Absolute filesystem path where the .rbxm should be written"
+            },
+            target: {
+              type: "string",
+              enum: ["edit", "server"],
+              description: 'Which DataModel to read from (default: "edit"). "server" serializes live runtime state during a playtest.'
+            }
+          },
+          required: ["instance_paths", "output_path"]
+        }
+      },
+      {
+        name: "import_rbxm",
+        category: "write",
+        description: "Deserialize a .rbxm via SerializationService:DeserializeInstancesAsync (engine v668+, PluginSecurity) and parent the resulting instances under parent_path. All-or-nothing parenting: if any single instance fails to parent, every already-parented sibling is unparented and the call errors. Wrapped in ChangeHistoryService for edit target so one Ctrl+Z reverses the whole import.",
+        inputSchema: {
+          type: "object",
+          properties: {
+            source: {
+              type: "object",
+              description: "Exactly one of { path }, { url }, or { base64 }. path = read from local disk; url = http(s) only, fetched by the MCP server process, capped at 50 MiB; base64 = raw bytes inline.",
+              properties: {
+                path: { type: "string" },
+                url: { type: "string" },
+                base64: { type: "string" }
+              },
+              oneOf: [
+                { required: ["path"] },
+                { required: ["url"] },
+                { required: ["base64"] }
+              ]
+            },
+            parent_path: {
+              type: "string",
+              description: 'DataModel path of the Instance to parent imported instances under (e.g. "ServerStorage.Imported")'
+            },
+            target: {
+              type: "string",
+              enum: ["edit", "server"],
+              description: 'Which DataModel to import into (default: "edit"). "server" parents into the live play-server DM.'
+            }
+          },
+          required: ["source", "parent_path"]
+        }
+      },
       // === Find and Replace ===
       {
         name: "find_and_replace_in_scripts",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@chrrxs/robloxstudio-mcp-inspector",
-  "version": "2.10.1",
+  "version": "2.11.0",
   "description": "Read-only MCP Server for Roblox Studio (fork of boshyxd/robloxstudio-mcp-inspector with per-peer execute_luau fixes baked in)",
   "main": "dist/index.js",
   "type": "module",

package/studio-plugin/MCPInspectorPlugin.rbxmx

@@ -86,6 +86,7 @@ local Players = _services.Players
 local ReplicatedStorage = _services.ReplicatedStorage
 local RunService = _services.RunService
 local RuntimeLogBuffer = TS.import(script, script.Parent, "RuntimeLogBuffer")
+local MemoryHandlers = TS.import(script, script.Parent, "handlers", "MemoryHandlers")
 -- The client peer cannot reach the MCP HTTP server - Roblox forbids
 -- HttpService:RequestAsync from the client DM even under PluginSecurity, and
 -- HttpEnabled reads as false there regardless of identity. So the server peer
@@ -107,6 +108,7 @@ local BROKER_NAME = "__MCPClientBroker"
 local CLIENT_BROKER_ALLOWED_ENDPOINTS = {
 	["/api/execute-luau"] = true,
 	["/api/get-runtime-logs"] = true,
+	["/api/get-memory-breakdown"] = true,
 }
 -- Throttle re-ready calls per proxyId so a brief window of unknownInstance
 -- polls doesn't cause a re-register stampede.
@@ -219,6 +221,9 @@ local function setupClientBroker()
 		if payload and payload.endpoint == "/api/get-runtime-logs" then
 			return handleGetRuntimeLogs(payload.data)
 		end
+		if payload and payload.endpoint == "/api/get-memory-breakdown" then
+			return MemoryHandlers.getMemoryBreakdown(payload.data or {})
+		end
 		if payload and payload.endpoint == "/api/execute-luau" then
 			return handleExecuteLuau(payload.data)
 		end
@@ -443,6 +448,8 @@ local AssetHandlers = TS.import(script, script.Parent, "handlers", "AssetHandler
 local CaptureHandlers = TS.import(script, script.Parent, "handlers", "CaptureHandlers")
 local InputHandlers = TS.import(script, script.Parent, "handlers", "InputHandlers")
 local LogHandlers = TS.import(script, script.Parent, "handlers", "LogHandlers")
+local SerializationHandlers = TS.import(script, script.Parent, "handlers", "SerializationHandlers")
+local MemoryHandlers = TS.import(script, script.Parent, "handlers", "MemoryHandlers")
 local instanceId = HttpService:GenerateGUID(false)
 local assignedRole
 local function detectRole()
@@ -512,6 +519,9 @@ local routeMap = {
 	["/api/simulate-keyboard-input"] = InputHandlers.simulateKeyboardInput,
 	["/api/find-and-replace-in-scripts"] = ScriptHandlers.findAndReplaceInScripts,
 	["/api/get-runtime-logs"] = LogHandlers.getRuntimeLogs,
+	["/api/export-rbxm"] = SerializationHandlers.exportRbxm,
+	["/api/import-rbxm"] = SerializationHandlers.importRbxm,
+	["/api/get-memory-breakdown"] = MemoryHandlers.getMemoryBreakdown,
 }
 local function processRequest(request)
 	local endpoint = request.endpoint
@@ -2788,6 +2798,74 @@ return {
           </Properties>
         </Item>
         <Item class="ModuleScript" referent="12">
+          <Properties>
+            <string name="Name">MemoryHandlers</string>
+            <string name="Source"><![CDATA[-- Compiled with roblox-ts v3.0.0
+local Stats = game:GetService("Stats")
+-- GetMemoryUsageMbAllCategories is gated by capability "InternalTest" and not
+-- callable from plugin context. GetMemoryUsageMbForTag is not - so we iterate
+-- Enum.DeveloperMemoryTag and ask per-tag.
+local function getMemoryBreakdown(requestData)
+	if not Stats.MemoryTrackingEnabled then
+		return {
+			error = "MemoryTrackingEnabled is false on this peer",
+		}
+	end
+	local requested = requestData.tags
+	local _result
+	if requested and #requested > 0 then
+		local _set = {}
+		for _, _v in requested do
+			_set[_v] = true
+		end
+		_result = _set
+	else
+		_result = nil
+	end
+	local requestedSet = _result
+	local categories = {}
+	for _, item in Enum.DeveloperMemoryTag:GetEnumItems() do
+		local name = item.Name
+		if requestedSet and not (requestedSet[name] ~= nil) then
+			continue
+		end
+		local ok, mb = pcall(function()
+			return Stats:GetMemoryUsageMbForTag(item)
+		end)
+		categories[name] = if ok then mb else 0
+	end
+	local unknownTags = {}
+	if requestedSet then
+		local known = {}
+		for _, i in Enum.DeveloperMemoryTag:GetEnumItems() do
+			local _name = i.Name
+			known[_name] = true
+		end
+		for t in requestedSet do
+			if not (known[t] ~= nil) then
+				table.insert(unknownTags, t)
+				categories[t] = 0
+			end
+		end
+	end
+	local result = {
+		total_mb = Stats:GetTotalMemoryUsageMb(),
+		categories = categories,
+		memory_tracking_enabled = true,
+		timestamp = DateTime.now().UnixTimestampMillis,
+	}
+	if #unknownTags > 0 then
+		result.unknown_tags = unknownTags
+	end
+	return result
+end
+return {
+	getMemoryBreakdown = getMemoryBreakdown,
+}
+]]></string>
+          </Properties>
+        </Item>
+        <Item class="ModuleScript" referent="13">
           <Properties>
             <string name="Name">MetadataHandlers</string>
             <string name="Source"><![CDATA[-- Compiled with roblox-ts v3.0.0
@@ -3424,7 +3502,7 @@ return {
 ]]></string>
           </Properties>
         </Item>
-        <Item class="ModuleScript" referent="13">
+        <Item class="ModuleScript" referent="14">
           <Properties>
             <string name="Name">PropertyHandlers</string>
             <string name="Source"><![CDATA[-- Compiled with roblox-ts v3.0.0
@@ -3676,7 +3754,7 @@ return {
 ]]></string>
           </Properties>
         </Item>
-        <Item class="ModuleScript" referent="14">
+        <Item class="ModuleScript" referent="15">
           <Properties>
             <string name="Name">QueryHandlers</string>
             <string name="Source"><![CDATA[-- Compiled with roblox-ts v3.0.0
@@ -4718,7 +4796,7 @@ return {
 ]]></string>
           </Properties>
         </Item>
-        <Item class="ModuleScript" referent="15">
+        <Item class="ModuleScript" referent="16">
           <Properties>
             <string name="Name">ScriptHandlers</string>
             <string name="Source"><![CDATA[-- Compiled with roblox-ts v3.0.0
@@ -5414,7 +5492,193 @@ return {
 ]]></string>
           </Properties>
         </Item>
-        <Item class="ModuleScript" referent="16">
+        <Item class="ModuleScript" referent="17">
+          <Properties>
+            <string name="Name">SerializationHandlers</string>
+            <string name="Source"><![CDATA[-- Compiled with roblox-ts v3.0.0
+local TS = require(script.Parent.Parent.Parent.include.RuntimeLib)
+local RunService = TS.import(script, script.Parent.Parent.Parent, "node_modules", "@rbxts", "services").RunService
+local Utils = TS.import(script, script.Parent.Parent, "Utils")
+local Recording = TS.import(script, script.Parent.Parent, "Recording")
+-- SerializationService:SerializeInstancesAsync / DeserializeInstancesAsync were
+-- added in engine v668 and are PluginSecurity. They are not in @rbxts/types yet,
+-- so we resolve the service through an untyped GetService cast and treat the
+-- methods as opaque (buffer in / buffer out).
+local SerializationService = game:GetService("SerializationService")
+-- EncodingService:Base64Encode / Base64Decode take and return `buffer` (not
+-- `string`). The signature is in @rbxts/types under None.d.ts so a normal
+-- GetService("EncodingService") would already give correct types, but @rbxts
+-- generates a per-service nominal interface and roblox.d.ts doesn't re-export
+-- EncodingService from the services barrel module - so the typed cast below
+-- matches what GetService would give us if it did.
+local EncodingService = game:GetService("EncodingService")
+local _binding = Utils
+local getInstanceByPath = _binding.getInstanceByPath
+local getInstancePath = _binding.getInstancePath
+local _binding_1 = Recording
+local beginRecording = _binding_1.beginRecording
+local finishRecording = _binding_1.finishRecording
+local function exportRbxm(requestData)
+	local instancePaths = requestData.instance_paths
+	if not instancePaths or not (type(instancePaths) == "table") or #instancePaths == 0 then
+		return {
+			error = "instance_paths must be a non-empty array",
+		}
+	end
+	local instances = {}
+	for _, p in instancePaths do
+		local inst = getInstanceByPath(p)
+		if not inst then
+			return {
+				error = `instance not found: {p}`,
+			}
+		end
+		table.insert(instances, inst)
+	end
+	local serializeOk, serializeResult = pcall(function()
+		return SerializationService:SerializeInstancesAsync(instances)
+	end)
+	if not serializeOk then
+		return {
+			error = `SerializeInstancesAsync failed: {tostring(serializeResult)}`,
+		}
+	end
+	local buf = serializeResult
+	local encodeOk, encodeResult = pcall(function()
+		return EncodingService:Base64Encode(buf)
+	end)
+	if not encodeOk then
+		return {
+			error = `EncodingService:Base64Encode failed: {tostring(encodeResult)}`,
+		}
+	end
+	-- Base64Encode returns a buffer of ASCII bytes; convert to a Lua string so
+	-- HttpService:JSONEncode (called by the harness in Communication.ts) accepts
+	-- it. Base64 is by definition pure ASCII so this round-trips cleanly.
+	local base64Str = buffer.tostring(encodeResult)
+	return {
+		base64 = base64Str,
+		instance_count = #instances,
+	}
+end
+local function importRbxm(requestData)
+	local b64 = requestData.base64
+	local parentPath = requestData.parent_path
+	local _condition = (requestData.source_label)
+	if _condition == nil then
+		_condition = "unknown"
+	end
+	local sourceLabel = _condition
+	if not (b64 ~= "" and b64) or not (type(b64) == "string") then
+		return {
+			error = "base64 payload is required",
+		}
+	end
+	if not (parentPath ~= "" and parentPath) or not (type(parentPath) == "string") then
+		return {
+			error = "parent_path is required",
+		}
+	end
+	local parentInstance = getInstanceByPath(parentPath)
+	if not parentInstance then
+		return {
+			error = `parent instance not found: {parentPath}`,
+		}
+	end
+	-- b64 is an ASCII-only Lua string from the wire; lift it into a buffer for
+	-- EncodingService:Base64Decode, which returns a buffer of raw rbxm bytes
+	-- ready for DeserializeInstancesAsync.
+	local b64BufOk, b64BufResult = pcall(function()
+		return buffer.fromstring(b64)
+	end)
+	if not b64BufOk then
+		return {
+			error = `buffer.fromstring(base64) failed: {tostring(b64BufResult)}`,
+		}
+	end
+	local decodeOk, decodeResult = pcall(function()
+		return EncodingService:Base64Decode(b64BufResult)
+	end)
+	if not decodeOk then
+		return {
+			error = `EncodingService:Base64Decode failed: {tostring(decodeResult)}`,
+		}
+	end
+	local buf = decodeResult
+	local deserOk, deserResult = pcall(function()
+		return SerializationService:DeserializeInstancesAsync(buf)
+	end)
+	if not deserOk then
+		return {
+			error = `DeserializeInstancesAsync failed: {tostring(deserResult)}`,
+		}
+	end
+	local deserialized = deserResult
+	-- All-or-nothing parenting. Track every instance we've attached and roll back
+	-- (unparent + Destroy) if any later one fails - partial imports leave the DM
+	-- in a worse state than failing cleanly.
+	local isEdit = not RunService:IsRunning()
+	local recordingId = if isEdit then beginRecording(`Import rbxm`) else nil
+	local attached = {}
+	local failureMessage
+	for _, inst in deserialized do
+		local parentOk, parentErr = pcall(function()
+			inst.Parent = parentInstance
+		end)
+		if not parentOk then
+			failureMessage = `failed to parent {inst.Name} ({inst.ClassName}) under {parentPath}: {tostring(parentErr)}`
+			break
+		end
+		table.insert(attached, inst)
+	end
+	if failureMessage ~= nil then
+		for _, inst in attached do
+			pcall(function()
+				inst.Parent = nil
+				inst:Destroy()
+			end)
+		end
+		-- Also destroy any unparented deserialized instances so they don't leak.
+		for _, inst in deserialized do
+			if inst.Parent == nil then
+				pcall(function()
+					return inst:Destroy()
+				end)
+			end
+		end
+		finishRecording(recordingId, false)
+		return {
+			error = failureMessage,
+		}
+	end
+	local names = {}
+	local paths = {}
+	for _, inst in attached do
+		local _name = inst.Name
+		table.insert(names, _name)
+		local _arg0 = getInstancePath(inst)
+		table.insert(paths, _arg0)
+	end
+	-- The recording shows "MCP: Import rbxm" in Studio's undo stack -
+	-- ChangeHistoryService doesn't expose a way to set a richer displayName
+	-- after TryBeginRecording, so the count/source only land in the JSON response.
+	finishRecording(recordingId, true)
+	return {
+		instance_count = #attached,
+		instance_names = names,
+		instance_paths = paths,
+		parent_path = parentPath,
+		source = sourceLabel,
+	}
+end
+return {
+	exportRbxm = exportRbxm,
+	importRbxm = importRbxm,
+}
+]]></string>
+          </Properties>
+        </Item>
+        <Item class="ModuleScript" referent="18">
           <Properties>
             <string name="Name">TestHandlers</string>
             <string name="Source"><![CDATA[-- Compiled with roblox-ts v3.0.0
@@ -5724,7 +5988,7 @@ return {
           </Properties>
         </Item>
       </Item>
-      <Item class="ModuleScript" referent="17">
+      <Item class="ModuleScript" referent="19">
         <Properties>
           <string name="Name">Recording</string>
           <string name="Source"><![CDATA[-- Compiled with roblox-ts v3.0.0
@@ -5754,7 +6018,7 @@ return {
 ]]></string>
         </Properties>
       </Item>
-      <Item class="ModuleScript" referent="18">
+      <Item class="ModuleScript" referent="20">
         <Properties>
           <string name="Name">RuntimeLogBuffer</string>
           <string name="Source"><![CDATA[-- Compiled with roblox-ts v3.0.0
@@ -5935,11 +6199,11 @@ return {
 ]]></string>
         </Properties>
       </Item>
-      <Item class="ModuleScript" referent="19">
+      <Item class="ModuleScript" referent="21">
         <Properties>
           <string name="Name">State</string>
           <string name="Source"><![CDATA[-- Compiled with roblox-ts v3.0.0
-local CURRENT_VERSION = "2.10.1"
+local CURRENT_VERSION = "2.11.0"
 local MAX_CONNECTIONS = 5
 local BASE_PORT = 58741
 local activeTabIndex = 0
@@ -6031,7 +6295,7 @@ return {
 ]]></string>
         </Properties>
       </Item>
-      <Item class="ModuleScript" referent="20">
+      <Item class="ModuleScript" referent="22">
         <Properties>
           <string name="Name">UI</string>
           <string name="Source"><![CDATA[-- Compiled with roblox-ts v3.0.0
@@ -6782,7 +7046,7 @@ return {
 ]]></string>
         </Properties>
       </Item>
-      <Item class="ModuleScript" referent="21">
+      <Item class="ModuleScript" referent="23">
         <Properties>
           <string name="Name">Utils</string>
           <string name="Source"><![CDATA[-- Compiled with roblox-ts v3.0.0
@@ -7312,11 +7576,11 @@ return {
         </Properties>
       </Item>
     </Item>
-    <Item class="Folder" referent="25">
+    <Item class="Folder" referent="27">
       <Properties>
         <string name="Name">include</string>
       </Properties>
-      <Item class="ModuleScript" referent="22">
+      <Item class="ModuleScript" referent="24">
         <Properties>
           <string name="Name">Promise</string>
           <string name="Source"><![CDATA[--[[
@@ -9390,7 +9654,7 @@ return Promise
 ]]></string>
         </Properties>
       </Item>
-      <Item class="ModuleScript" referent="23">
+      <Item class="ModuleScript" referent="25">
         <Properties>
           <string name="Name">RuntimeLib</string>
           <string name="Source"><![CDATA[local Promise = require(script.Parent.Promise)
@@ -9657,15 +9921,15 @@ return TS
         </Properties>
       </Item>
     </Item>
-    <Item class="Folder" referent="26">
+    <Item class="Folder" referent="28">
       <Properties>
         <string name="Name">node_modules</string>
       </Properties>
-      <Item class="Folder" referent="27">
+      <Item class="Folder" referent="29">
         <Properties>
           <string name="Name">@rbxts</string>
         </Properties>
-      <Item class="ModuleScript" referent="24">
+      <Item class="ModuleScript" referent="26">
         <Properties>
           <string name="Name">services</string>
           <string name="Source"><![CDATA[return setmetatable({}, {

package/studio-plugin/MCPPlugin.rbxmx

@@ -86,6 +86,7 @@ local Players = _services.Players
 local ReplicatedStorage = _services.ReplicatedStorage
 local RunService = _services.RunService
 local RuntimeLogBuffer = TS.import(script, script.Parent, "RuntimeLogBuffer")
+local MemoryHandlers = TS.import(script, script.Parent, "handlers", "MemoryHandlers")
 -- The client peer cannot reach the MCP HTTP server - Roblox forbids
 -- HttpService:RequestAsync from the client DM even under PluginSecurity, and
 -- HttpEnabled reads as false there regardless of identity. So the server peer
@@ -107,6 +108,7 @@ local BROKER_NAME = "__MCPClientBroker"
 local CLIENT_BROKER_ALLOWED_ENDPOINTS = {
 	["/api/execute-luau"] = true,
 	["/api/get-runtime-logs"] = true,
+	["/api/get-memory-breakdown"] = true,
 }
 -- Throttle re-ready calls per proxyId so a brief window of unknownInstance
 -- polls doesn't cause a re-register stampede.
@@ -219,6 +221,9 @@ local function setupClientBroker()
 		if payload and payload.endpoint == "/api/get-runtime-logs" then
 			return handleGetRuntimeLogs(payload.data)
 		end
+		if payload and payload.endpoint == "/api/get-memory-breakdown" then
+			return MemoryHandlers.getMemoryBreakdown(payload.data or {})
+		end
 		if payload and payload.endpoint == "/api/execute-luau" then
 			return handleExecuteLuau(payload.data)
 		end
@@ -443,6 +448,8 @@ local AssetHandlers = TS.import(script, script.Parent, "handlers", "AssetHandler
 local CaptureHandlers = TS.import(script, script.Parent, "handlers", "CaptureHandlers")
 local InputHandlers = TS.import(script, script.Parent, "handlers", "InputHandlers")
 local LogHandlers = TS.import(script, script.Parent, "handlers", "LogHandlers")
+local SerializationHandlers = TS.import(script, script.Parent, "handlers", "SerializationHandlers")
+local MemoryHandlers = TS.import(script, script.Parent, "handlers", "MemoryHandlers")
 local instanceId = HttpService:GenerateGUID(false)
 local assignedRole
 local function detectRole()
@@ -512,6 +519,9 @@ local routeMap = {
 	["/api/simulate-keyboard-input"] = InputHandlers.simulateKeyboardInput,
 	["/api/find-and-replace-in-scripts"] = ScriptHandlers.findAndReplaceInScripts,
 	["/api/get-runtime-logs"] = LogHandlers.getRuntimeLogs,
+	["/api/export-rbxm"] = SerializationHandlers.exportRbxm,
+	["/api/import-rbxm"] = SerializationHandlers.importRbxm,
+	["/api/get-memory-breakdown"] = MemoryHandlers.getMemoryBreakdown,
 }
 local function processRequest(request)
 	local endpoint = request.endpoint
@@ -2788,6 +2798,74 @@ return {
           </Properties>
         </Item>
         <Item class="ModuleScript" referent="12">
+          <Properties>
+            <string name="Name">MemoryHandlers</string>
+            <string name="Source"><![CDATA[-- Compiled with roblox-ts v3.0.0
+local Stats = game:GetService("Stats")
+-- GetMemoryUsageMbAllCategories is gated by capability "InternalTest" and not
+-- callable from plugin context. GetMemoryUsageMbForTag is not - so we iterate
+-- Enum.DeveloperMemoryTag and ask per-tag.
+local function getMemoryBreakdown(requestData)
+	if not Stats.MemoryTrackingEnabled then
+		return {
+			error = "MemoryTrackingEnabled is false on this peer",
+		}
+	end
+	local requested = requestData.tags
+	local _result
+	if requested and #requested > 0 then
+		local _set = {}
+		for _, _v in requested do
+			_set[_v] = true
+		end
+		_result = _set
+	else
+		_result = nil
+	end
+	local requestedSet = _result
+	local categories = {}
+	for _, item in Enum.DeveloperMemoryTag:GetEnumItems() do
+		local name = item.Name
+		if requestedSet and not (requestedSet[name] ~= nil) then
+			continue
+		end
+		local ok, mb = pcall(function()
+			return Stats:GetMemoryUsageMbForTag(item)
+		end)
+		categories[name] = if ok then mb else 0
+	end
+	local unknownTags = {}
+	if requestedSet then
+		local known = {}
+		for _, i in Enum.DeveloperMemoryTag:GetEnumItems() do
+			local _name = i.Name
+			known[_name] = true
+		end
+		for t in requestedSet do
+			if not (known[t] ~= nil) then
+				table.insert(unknownTags, t)
+				categories[t] = 0
+			end
+		end
+	end
+	local result = {
+		total_mb = Stats:GetTotalMemoryUsageMb(),
+		categories = categories,
+		memory_tracking_enabled = true,
+		timestamp = DateTime.now().UnixTimestampMillis,
+	}
+	if #unknownTags > 0 then
+		result.unknown_tags = unknownTags
+	end
+	return result
+end
+return {
+	getMemoryBreakdown = getMemoryBreakdown,
+}
+]]></string>
+          </Properties>
+        </Item>
+        <Item class="ModuleScript" referent="13">
           <Properties>
             <string name="Name">MetadataHandlers</string>
             <string name="Source"><![CDATA[-- Compiled with roblox-ts v3.0.0
@@ -3424,7 +3502,7 @@ return {
 ]]></string>
           </Properties>
         </Item>
-        <Item class="ModuleScript" referent="13">
+        <Item class="ModuleScript" referent="14">
           <Properties>
             <string name="Name">PropertyHandlers</string>
             <string name="Source"><![CDATA[-- Compiled with roblox-ts v3.0.0
@@ -3676,7 +3754,7 @@ return {
 ]]></string>
           </Properties>
         </Item>
-        <Item class="ModuleScript" referent="14">
+        <Item class="ModuleScript" referent="15">
           <Properties>
             <string name="Name">QueryHandlers</string>
             <string name="Source"><![CDATA[-- Compiled with roblox-ts v3.0.0
@@ -4718,7 +4796,7 @@ return {
 ]]></string>
           </Properties>
         </Item>
-        <Item class="ModuleScript" referent="15">
+        <Item class="ModuleScript" referent="16">
           <Properties>
             <string name="Name">ScriptHandlers</string>
             <string name="Source"><![CDATA[-- Compiled with roblox-ts v3.0.0
@@ -5414,7 +5492,193 @@ return {
 ]]></string>
           </Properties>
         </Item>
-        <Item class="ModuleScript" referent="16">
+        <Item class="ModuleScript" referent="17">
+          <Properties>
+            <string name="Name">SerializationHandlers</string>
+            <string name="Source"><![CDATA[-- Compiled with roblox-ts v3.0.0
+local TS = require(script.Parent.Parent.Parent.include.RuntimeLib)
+local RunService = TS.import(script, script.Parent.Parent.Parent, "node_modules", "@rbxts", "services").RunService
+local Utils = TS.import(script, script.Parent.Parent, "Utils")
+local Recording = TS.import(script, script.Parent.Parent, "Recording")
+-- SerializationService:SerializeInstancesAsync / DeserializeInstancesAsync were
+-- added in engine v668 and are PluginSecurity. They are not in @rbxts/types yet,
+-- so we resolve the service through an untyped GetService cast and treat the
+-- methods as opaque (buffer in / buffer out).
+local SerializationService = game:GetService("SerializationService")
+-- EncodingService:Base64Encode / Base64Decode take and return `buffer` (not
+-- `string`). The signature is in @rbxts/types under None.d.ts so a normal
+-- GetService("EncodingService") would already give correct types, but @rbxts
+-- generates a per-service nominal interface and roblox.d.ts doesn't re-export
+-- EncodingService from the services barrel module - so the typed cast below
+-- matches what GetService would give us if it did.
+local EncodingService = game:GetService("EncodingService")
+local _binding = Utils
+local getInstanceByPath = _binding.getInstanceByPath
+local getInstancePath = _binding.getInstancePath
+local _binding_1 = Recording
+local beginRecording = _binding_1.beginRecording
+local finishRecording = _binding_1.finishRecording
+local function exportRbxm(requestData)
+	local instancePaths = requestData.instance_paths
+	if not instancePaths or not (type(instancePaths) == "table") or #instancePaths == 0 then
+		return {
+			error = "instance_paths must be a non-empty array",
+		}
+	end
+	local instances = {}
+	for _, p in instancePaths do
+		local inst = getInstanceByPath(p)
+		if not inst then
+			return {
+				error = `instance not found: {p}`,
+			}
+		end
+		table.insert(instances, inst)
+	end
+	local serializeOk, serializeResult = pcall(function()
+		return SerializationService:SerializeInstancesAsync(instances)
+	end)
+	if not serializeOk then
+		return {
+			error = `SerializeInstancesAsync failed: {tostring(serializeResult)}`,
+		}
+	end
+	local buf = serializeResult
+	local encodeOk, encodeResult = pcall(function()
+		return EncodingService:Base64Encode(buf)
+	end)
+	if not encodeOk then
+		return {
+			error = `EncodingService:Base64Encode failed: {tostring(encodeResult)}`,
+		}
+	end
+	-- Base64Encode returns a buffer of ASCII bytes; convert to a Lua string so
+	-- HttpService:JSONEncode (called by the harness in Communication.ts) accepts
+	-- it. Base64 is by definition pure ASCII so this round-trips cleanly.
+	local base64Str = buffer.tostring(encodeResult)
+	return {
+		base64 = base64Str,
+		instance_count = #instances,
+	}
+end
+local function importRbxm(requestData)
+	local b64 = requestData.base64
+	local parentPath = requestData.parent_path
+	local _condition = (requestData.source_label)
+	if _condition == nil then
+		_condition = "unknown"
+	end
+	local sourceLabel = _condition
+	if not (b64 ~= "" and b64) or not (type(b64) == "string") then
+		return {
+			error = "base64 payload is required",
+		}
+	end
+	if not (parentPath ~= "" and parentPath) or not (type(parentPath) == "string") then
+		return {
+			error = "parent_path is required",
+		}
+	end
+	local parentInstance = getInstanceByPath(parentPath)
+	if not parentInstance then
+		return {
+			error = `parent instance not found: {parentPath}`,
+		}
+	end
+	-- b64 is an ASCII-only Lua string from the wire; lift it into a buffer for
+	-- EncodingService:Base64Decode, which returns a buffer of raw rbxm bytes
+	-- ready for DeserializeInstancesAsync.
+	local b64BufOk, b64BufResult = pcall(function()
+		return buffer.fromstring(b64)
+	end)
+	if not b64BufOk then
+		return {
+			error = `buffer.fromstring(base64) failed: {tostring(b64BufResult)}`,
+		}
+	end
+	local decodeOk, decodeResult = pcall(function()
+		return EncodingService:Base64Decode(b64BufResult)
+	end)
+	if not decodeOk then
+		return {
+			error = `EncodingService:Base64Decode failed: {tostring(decodeResult)}`,
+		}
+	end
+	local buf = decodeResult
+	local deserOk, deserResult = pcall(function()
+		return SerializationService:DeserializeInstancesAsync(buf)
+	end)
+	if not deserOk then
+		return {
+			error = `DeserializeInstancesAsync failed: {tostring(deserResult)}`,
+		}
+	end
+	local deserialized = deserResult
+	-- All-or-nothing parenting. Track every instance we've attached and roll back
+	-- (unparent + Destroy) if any later one fails - partial imports leave the DM
+	-- in a worse state than failing cleanly.
+	local isEdit = not RunService:IsRunning()
+	local recordingId = if isEdit then beginRecording(`Import rbxm`) else nil
+	local attached = {}
+	local failureMessage
+	for _, inst in deserialized do
+		local parentOk, parentErr = pcall(function()
+			inst.Parent = parentInstance
+		end)
+		if not parentOk then
+			failureMessage = `failed to parent {inst.Name} ({inst.ClassName}) under {parentPath}: {tostring(parentErr)}`
+			break
+		end
+		table.insert(attached, inst)
+	end
+	if failureMessage ~= nil then
+		for _, inst in attached do
+			pcall(function()
+				inst.Parent = nil
+				inst:Destroy()
+			end)
+		end
+		-- Also destroy any unparented deserialized instances so they don't leak.
+		for _, inst in deserialized do
+			if inst.Parent == nil then
+				pcall(function()
+					return inst:Destroy()
+				end)
+			end
+		end
+		finishRecording(recordingId, false)
+		return {
+			error = failureMessage,
+		}
+	end
+	local names = {}
+	local paths = {}
+	for _, inst in attached do
+		local _name = inst.Name
+		table.insert(names, _name)
+		local _arg0 = getInstancePath(inst)
+		table.insert(paths, _arg0)
+	end
+	-- The recording shows "MCP: Import rbxm" in Studio's undo stack -
+	-- ChangeHistoryService doesn't expose a way to set a richer displayName
+	-- after TryBeginRecording, so the count/source only land in the JSON response.
+	finishRecording(recordingId, true)
+	return {
+		instance_count = #attached,
+		instance_names = names,
+		instance_paths = paths,
+		parent_path = parentPath,
+		source = sourceLabel,
+	}
+end
+return {
+	exportRbxm = exportRbxm,
+	importRbxm = importRbxm,
+}
+]]></string>
+          </Properties>
+        </Item>
+        <Item class="ModuleScript" referent="18">
           <Properties>
             <string name="Name">TestHandlers</string>
             <string name="Source"><![CDATA[-- Compiled with roblox-ts v3.0.0
@@ -5724,7 +5988,7 @@ return {
           </Properties>
         </Item>
       </Item>
-      <Item class="ModuleScript" referent="17">
+      <Item class="ModuleScript" referent="19">
         <Properties>
           <string name="Name">Recording</string>
           <string name="Source"><![CDATA[-- Compiled with roblox-ts v3.0.0
@@ -5754,7 +6018,7 @@ return {
 ]]></string>
         </Properties>
       </Item>
-      <Item class="ModuleScript" referent="18">
+      <Item class="ModuleScript" referent="20">
         <Properties>
           <string name="Name">RuntimeLogBuffer</string>
           <string name="Source"><![CDATA[-- Compiled with roblox-ts v3.0.0
@@ -5935,11 +6199,11 @@ return {
 ]]></string>
         </Properties>
       </Item>
-      <Item class="ModuleScript" referent="19">
+      <Item class="ModuleScript" referent="21">
         <Properties>
           <string name="Name">State</string>
           <string name="Source"><![CDATA[-- Compiled with roblox-ts v3.0.0
-local CURRENT_VERSION = "2.10.1"
+local CURRENT_VERSION = "2.11.0"
 local MAX_CONNECTIONS = 5
 local BASE_PORT = 58741
 local activeTabIndex = 0
@@ -6031,7 +6295,7 @@ return {
 ]]></string>
         </Properties>
       </Item>
-      <Item class="ModuleScript" referent="20">
+      <Item class="ModuleScript" referent="22">
         <Properties>
           <string name="Name">UI</string>
           <string name="Source"><![CDATA[-- Compiled with roblox-ts v3.0.0
@@ -6782,7 +7046,7 @@ return {
 ]]></string>
         </Properties>
       </Item>
-      <Item class="ModuleScript" referent="21">
+      <Item class="ModuleScript" referent="23">
         <Properties>
           <string name="Name">Utils</string>
           <string name="Source"><![CDATA[-- Compiled with roblox-ts v3.0.0
@@ -7312,11 +7576,11 @@ return {
         </Properties>
       </Item>
     </Item>
-    <Item class="Folder" referent="25">
+    <Item class="Folder" referent="27">
       <Properties>
         <string name="Name">include</string>
       </Properties>
-      <Item class="ModuleScript" referent="22">
+      <Item class="ModuleScript" referent="24">
         <Properties>
           <string name="Name">Promise</string>
           <string name="Source"><![CDATA[--[[
@@ -9390,7 +9654,7 @@ return Promise
 ]]></string>
         </Properties>
       </Item>
-      <Item class="ModuleScript" referent="23">
+      <Item class="ModuleScript" referent="25">
         <Properties>
           <string name="Name">RuntimeLib</string>
           <string name="Source"><![CDATA[local Promise = require(script.Parent.Promise)
@@ -9657,15 +9921,15 @@ return TS
         </Properties>
       </Item>
     </Item>
-    <Item class="Folder" referent="26">
+    <Item class="Folder" referent="28">
       <Properties>
         <string name="Name">node_modules</string>
       </Properties>
-      <Item class="Folder" referent="27">
+      <Item class="Folder" referent="29">
         <Properties>
           <string name="Name">@rbxts</string>
         </Properties>
-      <Item class="ModuleScript" referent="24">
+      <Item class="ModuleScript" referent="26">
         <Properties>
           <string name="Name">services</string>
           <string name="Source"><![CDATA[return setmetatable({}, {

package/studio-plugin/src/modules/ClientBroker.ts

@@ -1,5 +1,6 @@
 import { HttpService, Players, ReplicatedStorage, RunService } from "@rbxts/services";
 import RuntimeLogBuffer from "./RuntimeLogBuffer";
+import MemoryHandlers from "./handlers/MemoryHandlers";
 
 // The client peer cannot reach the MCP HTTP server - Roblox forbids
 // HttpService:RequestAsync from the client DM even under PluginSecurity, and
@@ -45,6 +46,7 @@ interface ExecuteResult {
 const CLIENT_BROKER_ALLOWED_ENDPOINTS = new Set<string>([
 	"/api/execute-luau",
 	"/api/get-runtime-logs",
+	"/api/get-memory-breakdown",
 ]);
 
 interface ReadyResponseBody {
@@ -145,6 +147,9 @@ function setupClientBroker() {
 		if (payload && payload.endpoint === "/api/get-runtime-logs") {
 			return handleGetRuntimeLogs(payload.data);
 		}
+		if (payload && payload.endpoint === "/api/get-memory-breakdown") {
+			return MemoryHandlers.getMemoryBreakdown(payload.data ?? {});
+		}
 		if (payload && payload.endpoint === "/api/execute-luau") {
 			return handleExecuteLuau(payload.data);
 		}

package/studio-plugin/src/modules/Communication.ts

@@ -13,6 +13,8 @@ import AssetHandlers from "./handlers/AssetHandlers";
 import CaptureHandlers from "./handlers/CaptureHandlers";
 import InputHandlers from "./handlers/InputHandlers";
 import LogHandlers from "./handlers/LogHandlers";
+import SerializationHandlers from "./handlers/SerializationHandlers";
+import MemoryHandlers from "./handlers/MemoryHandlers";
 import { Connection, RequestPayload, PollResponse, ReadyResponse } from "../types";
 
 const instanceId = HttpService.GenerateGUID(false);
@@ -95,6 +97,11 @@ const routeMap: Record<string, Handler> = {
 	"/api/find-and-replace-in-scripts": ScriptHandlers.findAndReplaceInScripts,
 
 	"/api/get-runtime-logs": LogHandlers.getRuntimeLogs,
+
+	"/api/export-rbxm": SerializationHandlers.exportRbxm,
+	"/api/import-rbxm": SerializationHandlers.importRbxm,
+
+	"/api/get-memory-breakdown": MemoryHandlers.getMemoryBreakdown,
 };
 
 function processRequest(request: RequestPayload): unknown {

package/studio-plugin/src/modules/handlers/MemoryHandlers.ts

@@ -0,0 +1,44 @@
+const Stats = game.GetService("Stats");
+
+// GetMemoryUsageMbAllCategories is gated by capability "InternalTest" and not
+// callable from plugin context. GetMemoryUsageMbForTag is not - so we iterate
+// Enum.DeveloperMemoryTag and ask per-tag.
+function getMemoryBreakdown(requestData: Record<string, unknown>): unknown {
+	if (!Stats.MemoryTrackingEnabled) {
+		return { error: "MemoryTrackingEnabled is false on this peer" };
+	}
+
+	const requested = requestData.tags as string[] | undefined;
+	const requestedSet = requested && requested.size() > 0 ? new Set(requested) : undefined;
+
+	const categories: Record<string, number> = {};
+	for (const item of Enum.DeveloperMemoryTag.GetEnumItems()) {
+		const name = item.Name;
+		if (requestedSet && !requestedSet.has(name)) continue;
+		const [ok, mb] = pcall(() => Stats.GetMemoryUsageMbForTag(item));
+		categories[name] = ok ? (mb as number) : 0;
+	}
+
+	const unknownTags: string[] = [];
+	if (requestedSet) {
+		const known = new Set<string>();
+		for (const i of Enum.DeveloperMemoryTag.GetEnumItems()) known.add(i.Name);
+		for (const t of requestedSet) {
+			if (!known.has(t)) {
+				unknownTags.push(t);
+				categories[t] = 0;
+			}
+		}
+	}
+
+	const result: Record<string, unknown> = {
+		total_mb: Stats.GetTotalMemoryUsageMb(),
+		categories,
+		memory_tracking_enabled: true,
+		timestamp: DateTime.now().UnixTimestampMillis,
+	};
+	if (unknownTags.size() > 0) result.unknown_tags = unknownTags;
+	return result;
+}
+
+export = { getMemoryBreakdown };

package/studio-plugin/src/modules/handlers/SerializationHandlers.ts

@@ -0,0 +1,172 @@
+import { RunService } from "@rbxts/services";
+import Utils from "../Utils";
+import Recording from "../Recording";
+
+// SerializationService:SerializeInstancesAsync / DeserializeInstancesAsync were
+// added in engine v668 and are PluginSecurity. They are not in @rbxts/types yet,
+// so we resolve the service through an untyped GetService cast and treat the
+// methods as opaque (buffer in / buffer out).
+type SerializationServiceShape = {
+	SerializeInstancesAsync(this: SerializationServiceShape, instances: Instance[]): buffer;
+	DeserializeInstancesAsync(this: SerializationServiceShape, b: buffer): Instance[];
+};
+
+const SerializationService = (game as unknown as {
+	GetService(name: string): SerializationServiceShape;
+}).GetService("SerializationService");
+
+// EncodingService:Base64Encode / Base64Decode take and return `buffer` (not
+// `string`). The signature is in @rbxts/types under None.d.ts so a normal
+// GetService("EncodingService") would already give correct types, but @rbxts
+// generates a per-service nominal interface and roblox.d.ts doesn't re-export
+// EncodingService from the services barrel module - so the typed cast below
+// matches what GetService would give us if it did.
+type EncodingServiceShape = {
+	Base64Encode(this: EncodingServiceShape, input: buffer): buffer;
+	Base64Decode(this: EncodingServiceShape, input: buffer): buffer;
+};
+
+const EncodingService = (game as unknown as {
+	GetService(name: string): EncodingServiceShape;
+}).GetService("EncodingService");
+
+const { getInstanceByPath, getInstancePath } = Utils;
+const { beginRecording, finishRecording } = Recording;
+
+function exportRbxm(requestData: Record<string, unknown>): unknown {
+	const instancePaths = requestData.instance_paths as string[] | undefined;
+	if (!instancePaths || !typeIs(instancePaths, "table") || instancePaths.size() === 0) {
+		return { error: "instance_paths must be a non-empty array" };
+	}
+
+	const instances: Instance[] = [];
+	for (const p of instancePaths) {
+		const inst = getInstanceByPath(p);
+		if (!inst) {
+			return { error: `instance not found: ${p}` };
+		}
+		instances.push(inst);
+	}
+
+	const [serializeOk, serializeResult] = pcall(() => {
+		return SerializationService.SerializeInstancesAsync(instances);
+	});
+	if (!serializeOk) {
+		return { error: `SerializeInstancesAsync failed: ${tostring(serializeResult)}` };
+	}
+
+	const buf = serializeResult as buffer;
+	const [encodeOk, encodeResult] = pcall(() => EncodingService.Base64Encode(buf));
+	if (!encodeOk) {
+		return { error: `EncodingService:Base64Encode failed: ${tostring(encodeResult)}` };
+	}
+	// Base64Encode returns a buffer of ASCII bytes; convert to a Lua string so
+	// HttpService:JSONEncode (called by the harness in Communication.ts) accepts
+	// it. Base64 is by definition pure ASCII so this round-trips cleanly.
+	const base64Str = buffer.tostring(encodeResult as buffer);
+
+	return {
+		base64: base64Str,
+		instance_count: instances.size(),
+	};
+}
+
+function importRbxm(requestData: Record<string, unknown>): unknown {
+	const b64 = requestData.base64 as string | undefined;
+	const parentPath = requestData.parent_path as string | undefined;
+	const sourceLabel = (requestData.source_label as string | undefined) ?? "unknown";
+
+	if (!b64 || !typeIs(b64, "string")) {
+		return { error: "base64 payload is required" };
+	}
+	if (!parentPath || !typeIs(parentPath, "string")) {
+		return { error: "parent_path is required" };
+	}
+
+	const parentInstance = getInstanceByPath(parentPath);
+	if (!parentInstance) {
+		return { error: `parent instance not found: ${parentPath}` };
+	}
+
+	// b64 is an ASCII-only Lua string from the wire; lift it into a buffer for
+	// EncodingService:Base64Decode, which returns a buffer of raw rbxm bytes
+	// ready for DeserializeInstancesAsync.
+	const [b64BufOk, b64BufResult] = pcall(() => buffer.fromstring(b64));
+	if (!b64BufOk) {
+		return { error: `buffer.fromstring(base64) failed: ${tostring(b64BufResult)}` };
+	}
+	const [decodeOk, decodeResult] = pcall(() => EncodingService.Base64Decode(b64BufResult as buffer));
+	if (!decodeOk) {
+		return { error: `EncodingService:Base64Decode failed: ${tostring(decodeResult)}` };
+	}
+	const buf = decodeResult as buffer;
+
+	const [deserOk, deserResult] = pcall(() => {
+		return SerializationService.DeserializeInstancesAsync(buf);
+	});
+	if (!deserOk) {
+		return { error: `DeserializeInstancesAsync failed: ${tostring(deserResult)}` };
+	}
+	const deserialized = deserResult as Instance[];
+
+	// All-or-nothing parenting. Track every instance we've attached and roll back
+	// (unparent + Destroy) if any later one fails - partial imports leave the DM
+	// in a worse state than failing cleanly.
+	const isEdit = !RunService.IsRunning();
+	const recordingId = isEdit ? beginRecording(`Import rbxm`) : undefined;
+
+	const attached: Instance[] = [];
+	let failureMessage: string | undefined;
+	for (const inst of deserialized) {
+		const [parentOk, parentErr] = pcall(() => {
+			inst.Parent = parentInstance;
+		});
+		if (!parentOk) {
+			failureMessage = `failed to parent ${inst.Name} (${inst.ClassName}) under ${parentPath}: ${tostring(parentErr)}`;
+			break;
+		}
+		attached.push(inst);
+	}
+
+	if (failureMessage !== undefined) {
+		for (const inst of attached) {
+			pcall(() => {
+				inst.Parent = undefined;
+				inst.Destroy();
+			});
+		}
+		// Also destroy any unparented deserialized instances so they don't leak.
+		for (const inst of deserialized) {
+			if (inst.Parent === undefined) {
+				pcall(() => inst.Destroy());
+			}
+		}
+		finishRecording(recordingId, false);
+		return { error: failureMessage };
+	}
+
+	const names: string[] = [];
+	const paths: string[] = [];
+	for (const inst of attached) {
+		names.push(inst.Name);
+		paths.push(getInstancePath(inst));
+	}
+
+	// The recording shows "MCP: Import rbxm" in Studio's undo stack -
+	// ChangeHistoryService doesn't expose a way to set a richer displayName
+	// after TryBeginRecording, so the count/source only land in the JSON response.
+	finishRecording(recordingId, true);
+
+	return {
+		instance_count: attached.size(),
+		instance_names: names,
+		instance_paths: paths,
+		parent_path: parentPath,
+		source: sourceLabel,
+	};
+}
+
+export = {
+	exportRbxm,
+	importRbxm,
+};