@godot-mcp/cli 0.0.0 → 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Godot MCP contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,3 +1,106 @@
-# @godot-mcp/cli
+# Godot MCP
 
-Namespace bootstrap only. Install the first supported release from the `latest` tag.
+Godot MCP is an open-source, security-first MCP server and Godot editor addon. Phase 7 provides reversible installation, authenticated Godot 4.7 editor attachment, six default observe-only tools, explicitly gated runtime/input surfaces, permission-scoped editor authoring, native read-only GDScript debugging, and bounded structured performance evidence.
+
+## Requirements
+
+- macOS (the currently certified platform)
+- Node.js 22
+- pnpm 11.13.0
+- Godot 4.7 stable
+
+Compatibility is evidence-gated by `release/compatibility-matrix.json`. Godot 4.4–4.6 and Linux/Windows remain experimental until their exact matrix cells carry trusted certification receipts; pending cells are not advertised as supported.
+
+## Source quick start
+
+```bash
+pnpm install --frozen-lockfile
+pnpm build
+node /absolute/path/to/godot-mcp/packages/cli/dist/bin.js init --project /absolute/path/to/godot-project
+node /absolute/path/to/godot-mcp/packages/cli/dist/bin.js doctor --project /absolute/path/to/godot-project
+node /absolute/path/to/godot-mcp/packages/cli/dist/bin.js editor --project /absolute/path/to/godot-project
+```
+
+For a verified release-to-release replacement, run `godot-mcp upgrade --project /absolute/path/to/godot-project --source /absolute/path/to/new/addons/godot_mcp`. Upgrade and rollback refuse independently modified installed files and preserve the original uninstall preimage.
+
+Use the `editor` command for the Phase 7-certified launch. It writes a short-lived owner-only startup attestation, then starts Godot with the authenticated editor debugger and native DAP assigned to one loopback port; the debugger binds first, so unauthenticated DAP never acquires a listener. The addon consumes the attestation and connects outward only when a matching MCP runtime publishes a short-lived pairing descriptor. Opening the project through another launcher keeps earlier editor features available, but runtime debugging fails closed because secure startup cannot be proven by copied user arguments alone.
+
+Register the source checkout with Codex using absolute paths:
+
+```bash
+codex mcp add godot -- node /absolute/path/to/godot-mcp/packages/cli/dist/bin.js connect --project /absolute/path/to/godot-project
+```
+
+The default registration remains observe-only. To opt into one MCP-owned instrumented runtime, explicitly grant both its tier and pack:
+
+```bash
+codex mcp add godot-runtime -- node /absolute/path/to/godot-mcp/packages/cli/dist/bin.js connect --project /absolute/path/to/godot-project --grant runtime_control --pack runtime
+```
+
+To launch and automate the owned runtime, grant the input pack separately:
+
+```bash
+codex mcp add godot-runtime-input -- node /absolute/path/to/godot-mcp/packages/cli/dist/bin.js connect --project /absolute/path/to/godot-project --grant runtime_control --pack runtime --pack input
+```
+
+To preview and apply bounded editor mutations, explicitly grant both the mutation tier and editor pack:
+
+```bash
+codex mcp add godot-editor -- node /absolute/path/to/godot-mcp/packages/cli/dist/bin.js connect --project /absolute/path/to/godot-project --grant project_mutate --pack editor
+```
+
+Start a fresh Codex task after registration so the newly registered MCP server is exposed. To stop using the addon while retaining its files, or remove the verified installation completely:
+
+```bash
+node /absolute/path/to/godot-mcp/packages/cli/dist/bin.js disable --project /absolute/path/to/godot-project
+node /absolute/path/to/godot-mcp/packages/cli/dist/bin.js uninstall --project /absolute/path/to/godot-project
+```
+
+Uninstall refuses to remove the addon, project configuration, or `project.godot` if they changed independently after installation.
+
+## Implemented MCP tools
+
+- `godot_session` — attachment, project identity, versions, and grants
+- `godot_capabilities` — currently visible observe/core capabilities
+- `godot_doctor` — installation, plugin, identity, and attachment diagnostics
+- `godot_help` — built-in usage and security-boundary help
+- `godot_query` — bounded editor state, open scene/tree/node metadata, indexed resources, approved project settings, and redacted diagnostics
+- `godot_capture` — bounded PNG from the current 2D or selected 3D editor viewport, returned as MCP image content and persisted as session evidence
+
+The default six tools are read-only and closed-world. A runtime-authorized session additionally exposes:
+
+- `godot_runtime` — launch, bounded runtime queries/control, native GDScript breakpoints/stacks/variables/selector watches, monitor snapshots, and cancellable structured profiles for one authenticated child runtime
+- `godot_runtime_capture` — one to eight ordered running-game PNG frames with verified evidence metadata
+- `godot_input` — bounded events, frame-indexed sequences, non-passive recording, and deterministic replay for the owned runtime
+- `godot_editor` — preview, apply, undo, and redo one bounded scene/node/resource/source authoring batch with durable idempotency and native editor history
+
+For example:
+
+```json
+{ "operation": "scene_tree", "scenePath": "res://main.tscn", "maxDepth": 8, "maxNodes": 250 }
+{ "viewport": "2d", "maxWidth": 1280, "maxHeight": 720 }
+{ "operation": "launch", "scenePath": "res://main.tscn" }
+{ "operation": "debug_breakpoints_set", "handle": { "runId": "<run UUID>", "generation": 1 }, "breakpoints": [{ "sourcePath": "res://player.gd", "line": 42 }] }
+{ "operation": "profile_start", "handle": { "runId": "<run UUID>", "generation": 1 }, "durationMs": 1000, "intervalFrames": 1, "groups": ["frame", "memory"], "retainRaw": false }
+{ "operation": "sequence", "handle": { "runId": "<run UUID>", "generation": 1 }, "mode": "deterministic", "events": [{ "frameOffset": 0, "event": { "type": "action", "action": "jump", "pressed": true, "strengthMillionths": 1000000 } }, { "frameOffset": 1, "event": { "type": "action", "action": "jump", "pressed": false, "strengthMillionths": 0 } }] }
+```
+
+Runtime control and input are off unless their explicit flags are present. Deterministic sequences/replay require a paused owned runtime; offsets are zero-based, so offsets 0–1 process across two rendered frames and leave it paused. Recording captures only MCP-injected events. Receipts and audit summaries omit raw action names, keycodes, coordinates, and trace payloads. There is no OS-global/editor input, arbitrary text, process, filesystem, network, method-call, or GDScript-evaluation primitive.
+
+## Development and certification
+
+```bash
+GODOT_BIN=/opt/homebrew/bin/godot pnpm qa:phase-0-1
+GODOT_BIN=/opt/homebrew/bin/godot pnpm qa:phase-2
+GODOT_BIN=/opt/homebrew/bin/godot pnpm qa:phase-3
+GODOT_BIN=/opt/homebrew/bin/godot pnpm qa:phase-4
+GODOT_BIN=/opt/homebrew/bin/godot pnpm qa:phase-5
+GODOT_BIN=/opt/homebrew/bin/godot pnpm qa:phase-6
+GODOT_BIN=/opt/homebrew/bin/godot pnpm qa:phase-7
+```
+
+The Phase 7 gate certifies secure shared-port editor startup, native-DAP inertness, authenticated editor-session debugging, breakpoints/stacks/variables/selector watches, bounded public monitor snapshots, completed and cancelled profiles, hostile-input rejection, published stdio behavior, and zero owned-state or fixture residue. Earlier gates remain required regressions. See [Phase 7 testing](docs/testing/phase-7.md), [Phase 6 testing](docs/testing/phase-6.md), the [threat model](docs/security/threat-model.md), the [bridge protocol](docs/protocol/bridge-v1.md), and the [master design](docs/superpowers/specs/2026-07-15-godot-mcp-master-design.md).
+
+## Roadmap
+
+Later phases add declarative playtests, imports/builds/exports, evidence retrieval, compatibility lanes, and explicitly gated disposable-fixture unsafe mode. None of those capabilities are claimed by Phase 7.

package/dist/bin.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=bin.d.ts.map

package/dist/bin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bin.d.ts","sourceRoot":"","sources":["../src/bin.ts"],"names":[],"mappings":""}

package/dist/bin.js

@@ -0,0 +1,88 @@
+#!/usr/bin/env node
+import { parseArgs } from "node:util";
+import { resolve } from "node:path";
+import { connectProject, approveUnsafeFixtureCommand, defaultUnsafeRegistryPath, disableAddon, doctorProject, initProject, launchSecureEditor, registerUnsafeFixtureCommand, stampUnsafeFixtureCopyCommand, uninstallProject, upgradeProject, } from "./index.js";
+import { parseConnectGrants } from "./commands/connect.js";
+async function main() {
+    const parsed = parseArgs({
+        allowPositionals: true,
+        options: {
+            project: { type: "string", short: "p", default: process.cwd() },
+            source: { type: "string", default: resolve(process.cwd(), "addons/godot_mcp") },
+            godot: { type: "string" },
+            grant: { type: "string", multiple: true, default: [] },
+            pack: { type: "string", multiple: true, default: [] },
+            registry: { type: "string", default: defaultUnsafeRegistryPath() },
+            activation: { type: "string" },
+            "activation-dir": { type: "string" },
+            confirmation: { type: "string" },
+            registration: { type: "string" },
+            "ttl-ms": { type: "string" },
+            extension: { type: "string", multiple: true, default: [] },
+        },
+    });
+    const [command, ...extra] = parsed.positionals;
+    if (!command || extra.length > 0 || !["init", "upgrade", "doctor", "disable", "uninstall", "connect", "editor", "unsafe-register", "unsafe-stamp-copy", "unsafe-approve"].includes(command)) {
+        process.stderr.write("Usage: godot-mcp <init|upgrade|doctor|disable|uninstall|connect|editor|unsafe-register|unsafe-stamp-copy|unsafe-approve> [--project PATH]\n");
+        return 2;
+    }
+    if (command === "init") {
+        const report = await initProject(parsed.values.project, parsed.values.source, parsed.values.godot);
+        process.stdout.write(`${JSON.stringify(report)}\n`);
+        return report.healthy ? 0 : 4;
+    }
+    if (command === "doctor") {
+        const report = await doctorProject(parsed.values.project);
+        process.stdout.write(`${JSON.stringify(report)}\n`);
+        return report.healthy ? 0 : 4;
+    }
+    if (command === "upgrade") {
+        const result = await upgradeProject(parsed.values.project, parsed.values.source);
+        process.stdout.write(`${JSON.stringify({ ok: true, command, ...result })}\n`);
+        return 0;
+    }
+    if (command === "editor") {
+        return launchSecureEditor(parsed.values.project, parsed.values.godot);
+    }
+    if (command === "connect") {
+        await connectProject(parsed.values.project, parseConnectGrants(parsed.values.grant, parsed.values.pack), parsed.values.godot, parsed.values.activation === undefined ? undefined : { registryPath: parsed.values.registry, leasePath: parsed.values.activation }, parsed.values.extension);
+        return 0;
+    }
+    if (command === "unsafe-register") {
+        const result = await registerUnsafeFixtureCommand(parsed.values.project, parsed.values.registry, parsed.values.confirmation ?? "");
+        process.stdout.write(`${JSON.stringify(result)}\n`);
+        return 0;
+    }
+    if (command === "unsafe-stamp-copy") {
+        if (!parsed.values.registration)
+            throw new Error("--registration is required");
+        const result = await stampUnsafeFixtureCopyCommand(parsed.values.project, parsed.values.registry, parsed.values.registration);
+        process.stdout.write(`${JSON.stringify(result)}\n`);
+        return 0;
+    }
+    if (command === "unsafe-approve") {
+        if (!parsed.values["activation-dir"])
+            throw new Error("--activation-dir is required");
+        const ttlMs = parsed.values["ttl-ms"] === undefined ? undefined : Number(parsed.values["ttl-ms"]);
+        const result = await approveUnsafeFixtureCommand(parsed.values.project, parsed.values.registry, parsed.values["activation-dir"], parsed.values.confirmation ?? "", ttlMs);
+        process.stdout.write(`${JSON.stringify(result)}\n`);
+        return 0;
+    }
+    if (command === "disable") {
+        await disableAddon(parsed.values.project, parsed.values.godot);
+    }
+    else {
+        await uninstallProject(parsed.values.project);
+    }
+    process.stdout.write(`${JSON.stringify({ ok: true, command })}\n`);
+    return 0;
+}
+try {
+    process.exitCode = await main();
+}
+catch (error) {
+    const code = error.code;
+    process.stderr.write(`${error.message}\n`);
+    process.exitCode = code === "CONFLICT" ? 3 : 4;
+}
+//# sourceMappingURL=bin.js.map

package/dist/bin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bin.js","sourceRoot":"","sources":["../src/bin.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EACL,cAAc,EACd,2BAA2B,EAC3B,yBAAyB,EACzB,YAAY,EACZ,aAAa,EACb,WAAW,EACX,kBAAkB,EAClB,4BAA4B,EAC5B,6BAA6B,EAC7B,gBAAgB,EAChB,cAAc,GACf,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAE3D,KAAK,UAAU,IAAI;IACjB,MAAM,MAAM,GAAG,SAAS,CAAC;QACvB,gBAAgB,EAAE,IAAI;QACtB,OAAO,EAAE;YACP,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE;YAC/D,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,kBAAkB,CAAC,EAAE;YAC/E,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACzB,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE;YACtD,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE;YACrD,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,yBAAyB,EAAE,EAAE;YAClE,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC9B,gBAAgB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACpC,YAAY,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAChC,YAAY,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAChC,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC5B,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE;SAC3D;KACF,CAAC,CAAC;IACH,MAAM,CAAC,OAAO,EAAE,GAAG,KAAK,CAAC,GAAG,MAAM,CAAC,WAAW,CAAC;IAC/C,IAAI,CAAC,OAAO,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,WAAW,EAAE,SAAS,EAAE,QAAQ,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,gBAAgB,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5L,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,6IAA6I,CAAC,CAAC;QACpK,OAAO,CAAC,CAAC;IACX,CAAC;IAED,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACnG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACpD,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAChC,CAAC;IACD,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC1D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACpD,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAChC,CAAC;IACD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACjF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC;QAC9E,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;QACzB,OAAO,kBAAkB,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,MAAM,cAAc,CAClB,MAAM,CAAC,MAAM,CAAC,OAAO,EACrB,kBAAkB,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAC3D,MAAM,CAAC,MAAM,CAAC,KAAK,EACnB,MAAM,CAAC,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,EAClI,MAAM,CAAC,MAAM,CAAC,SAAS,CACxB,CAAC;QACF,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,OAAO,KAAK,iBAAiB,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,MAAM,4BAA4B,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;QACnI,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAAC,OAAO,CAAC,CAAC;IAChE,CAAC;IACD,IAAI,OAAO,KAAK,mBAAmB,EAAE,CAAC;QACpC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,YAAY;YAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAC/E,MAAM,MAAM,GAAG,MAAM,6BAA6B,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QAC9H,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAAC,OAAO,CAAC,CAAC;IAChE,CAAC;IACD,IAAI,OAAO,KAAK,gBAAgB,EAAE,CAAC;QACjC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QACtF,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QAClG,MAAM,MAAM,GAAG,MAAM,2BAA2B,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,YAAY,IAAI,EAAE,EAAE,KAAK,CAAC,CAAC;QAC1K,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAAC,OAAO,CAAC,CAAC;IAChE,CAAC;IACD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,MAAM,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACjE,CAAC;SAAM,CAAC;QACN,MAAM,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAChD,CAAC;IACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC;IACnE,OAAO,CAAC,CAAC;AACX,CAAC;AAED,IAAI,CAAC;IACH,OAAO,CAAC,QAAQ,GAAG,MAAM,IAAI,EAAE,CAAC;AAClC,CAAC;AAAC,OAAO,KAAK,EAAE,CAAC;IACf,MAAM,IAAI,GAAI,KAA2B,CAAC,IAAI,CAAC;IAC/C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAI,KAAe,CAAC,OAAO,IAAI,CAAC,CAAC;IACtD,OAAO,CAAC,QAAQ,GAAG,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACjD,CAAC"}

package/dist/commands/connect.d.ts

@@ -0,0 +1,7 @@
+import { type SessionGrants } from "@godot-mcp/control-plane";
+export declare function parseConnectGrants(grants: readonly string[], packs: readonly string[]): SessionGrants;
+export declare function connectProject(project: string, grants?: SessionGrants, godotBin?: string, unsafeActivation?: {
+    registryPath: string;
+    leasePath: string;
+}, extensionModules?: readonly string[]): Promise<void>;
+//# sourceMappingURL=connect.d.ts.map

package/dist/commands/connect.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"connect.d.ts","sourceRoot":"","sources":["../../src/commands/connect.ts"],"names":[],"mappings":"AAGA,OAAO,EAAqB,KAAK,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAMjF,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,EAAE,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,aAAa,CAyCrG;AAED,wBAAsB,cAAc,CAClC,OAAO,EAAE,MAAM,EACf,MAAM,GAAE,aAA0C,EAClD,QAAQ,CAAC,EAAE,MAAM,EACjB,gBAAgB,CAAC,EAAE;IAAE,YAAY,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,EAC9D,gBAAgB,GAAE,SAAS,MAAM,EAAO,GACvC,OAAO,CAAC,IAAI,CAAC,CAgBf"}

package/dist/commands/connect.js

@@ -0,0 +1,71 @@
+import { resolve } from "node:path";
+import { pathToFileURL } from "node:url";
+import { ExtensionRegistry } from "@godot-mcp/control-plane";
+import { connectStdio } from "@godot-mcp/mcp-server";
+import { runDoctor } from "../install/doctor.js";
+import { createRuntime } from "../runtime/createRuntime.js";
+export function parseConnectGrants(grants, packs) {
+    const normalizedGrants = [...new Set(grants.flatMap((value) => value.split(",")).filter(Boolean))];
+    const normalizedPacks = [...new Set(packs.flatMap((value) => value.split(",")).filter(Boolean))];
+    for (const grant of normalizedGrants) {
+        if (grant !== "runtime_control" && grant !== "project_mutate" && grant !== "project_operate" && grant !== "unsafe_fixture")
+            throw new Error(`Unsupported connect grant: ${grant}`);
+    }
+    for (const pack of normalizedPacks) {
+        if (pack !== "runtime" && pack !== "input" && pack !== "editor" && pack !== "visual" && pack !== "project" && pack !== "unsafe")
+            throw new Error(`Unsupported connect pack: ${pack}`);
+    }
+    const hasRuntimePack = normalizedPacks.includes("runtime") || normalizedPacks.includes("input");
+    if (normalizedGrants.includes("runtime_control") !== hasRuntimePack) {
+        throw new Error("runtime_control must be granted with runtime or input packs");
+    }
+    const hasEditorPack = normalizedPacks.includes("editor");
+    if (normalizedGrants.includes("project_mutate") !== hasEditorPack) {
+        throw new Error("project_mutate must be granted with the editor pack");
+    }
+    if (normalizedPacks.includes("visual") && (!normalizedPacks.includes("runtime") || !normalizedPacks.includes("input")))
+        throw new Error("visual requires runtime and input packs");
+    const hasProjectPack = normalizedPacks.includes("project");
+    if (normalizedGrants.includes("project_operate") !== hasProjectPack)
+        throw new Error("project_operate must be granted with the project pack");
+    const hasUnsafePack = normalizedPacks.includes("unsafe");
+    if (normalizedGrants.includes("unsafe_fixture") !== hasUnsafePack)
+        throw new Error("unsafe_fixture must be granted with the unsafe pack");
+    if (!hasRuntimePack && !hasEditorPack && !hasProjectPack && !hasUnsafePack)
+        return { tiers: ["observe"], packs: ["core"] };
+    return {
+        tiers: [
+            "observe",
+            ...(normalizedGrants.includes("runtime_control") ? ["runtime_control"] : []),
+            ...(normalizedGrants.includes("project_mutate") ? ["project_mutate"] : []),
+            ...(normalizedGrants.includes("project_operate") ? ["project_operate"] : []),
+            ...(normalizedGrants.includes("unsafe_fixture") ? ["unsafe_fixture"] : []),
+        ],
+        packs: [
+            "core",
+            ...(normalizedPacks.includes("runtime") ? ["runtime"] : []),
+            ...(normalizedPacks.includes("input") ? ["input"] : []),
+            ...(normalizedPacks.includes("editor") ? ["editor"] : []),
+            ...(normalizedPacks.includes("visual") ? ["visual"] : []),
+            ...(normalizedPacks.includes("project") ? ["project"] : []),
+            ...(normalizedPacks.includes("unsafe") ? ["unsafe"] : []),
+        ],
+    };
+}
+export async function connectProject(project, grants = parseConnectGrants([], []), godotBin, unsafeActivation, extensionModules = []) {
+    const doctor = await runDoctor(project, godotBin);
+    if (!doctor.healthy) {
+        throw new Error("Godot MCP installation is unhealthy; run godot-mcp doctor before connect");
+    }
+    const extensions = new ExtensionRegistry();
+    for (const modulePath of extensionModules) {
+        const module = await import(pathToFileURL(resolve(modulePath)).href);
+        if (typeof module.registerGodotMcpExtension !== "function")
+            throw new Error(`Extension module does not export registerGodotMcpExtension: ${modulePath}`);
+        await module.registerGodotMcpExtension(extensions);
+    }
+    const runtime = await createRuntime({ project, grants, ...(godotBin === undefined ? {} : { godotBin }), ...(unsafeActivation === undefined ? {} : { unsafeRegistryPath: unsafeActivation.registryPath, unsafeActivationPath: unsafeActivation.leasePath }), ...(extensionModules.length === 0 ? {} : { extensions }) });
+    process.stderr.write(`Godot MCP waiting for project ${runtime.project.projectId} on loopback port ${runtime.bridge.port}\n`);
+    await connectStdio(runtime.mcp, () => runtime.close("stdio-closed"));
+}
+//# sourceMappingURL=connect.js.map

package/dist/commands/connect.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connect.js","sourceRoot":"","sources":["../../src/commands/connect.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EAAE,iBAAiB,EAAsB,MAAM,0BAA0B,CAAC;AACjF,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAErD,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAE5D,MAAM,UAAU,kBAAkB,CAAC,MAAyB,EAAE,KAAwB;IACpF,MAAM,gBAAgB,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IACnG,MAAM,eAAe,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IACjG,KAAK,MAAM,KAAK,IAAI,gBAAgB,EAAE,CAAC;QACrC,IAAI,KAAK,KAAK,iBAAiB,IAAI,KAAK,KAAK,gBAAgB,IAAI,KAAK,KAAK,iBAAiB,IAAI,KAAK,KAAK,gBAAgB;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,KAAK,EAAE,CAAC,CAAC;IACrL,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,eAAe,EAAE,CAAC;QACnC,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,IAAI,EAAE,CAAC,CAAC;IACxL,CAAC;IACD,MAAM,cAAc,GAAG,eAAe,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,eAAe,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAChG,IAAI,gBAAgB,CAAC,QAAQ,CAAC,iBAAiB,CAAC,KAAK,cAAc,EAAE,CAAC;QACpE,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;IACjF,CAAC;IACD,MAAM,aAAa,GAAG,eAAe,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACzD,IAAI,gBAAgB,CAAC,QAAQ,CAAC,gBAAgB,CAAC,KAAK,aAAa,EAAE,CAAC;QAClE,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,CAAC;IACD,IAAI,eAAe,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,eAAe,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IACnL,MAAM,cAAc,GAAG,eAAe,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IAC3D,IAAI,gBAAgB,CAAC,QAAQ,CAAC,iBAAiB,CAAC,KAAK,cAAc;QAAE,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC9I,MAAM,aAAa,GAAG,eAAe,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACzD,IAAI,gBAAgB,CAAC,QAAQ,CAAC,gBAAgB,CAAC,KAAK,aAAa;QAAE,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IAC1I,IAAI,CAAC,cAAc,IAAI,CAAC,aAAa,IAAI,CAAC,cAAc,IAAI,CAAC,aAAa;QAAE,OAAO,EAAE,KAAK,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC;IAC3H,OAAO;QACL,KAAK,EAAE;YACL,SAAS;YACT,GAAG,CAAC,gBAAgB,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,iBAA0B,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACrF,GAAG,CAAC,gBAAgB,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,gBAAyB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACnF,GAAG,CAAC,gBAAgB,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,iBAA0B,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACrF,GAAG,CAAC,gBAAgB,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,gBAAyB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;SACpF;QACD,KAAK,EAAE;YACL,MAAM;YACN,GAAG,CAAC,eAAe,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,SAAkB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACpE,GAAG,CAAC,eAAe,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,OAAgB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAChE,GAAG,CAAC,eAAe,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,QAAiB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAClE,GAAG,CAAC,eAAe,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,QAAiB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAClE,GAAG,CAAC,eAAe,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,SAAkB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACpE,GAAG,CAAC,eAAe,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,QAAiB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;SACnE;KACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,OAAe,EACf,SAAwB,kBAAkB,CAAC,EAAE,EAAE,EAAE,CAAC,EAClD,QAAiB,EACjB,gBAA8D,EAC9D,mBAAsC,EAAE;IAExC,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAClD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,0EAA0E,CAAC,CAAC;IAC9F,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,iBAAiB,EAAE,CAAC;IAC3C,KAAK,MAAM,UAAU,IAAI,gBAAgB,EAAE,CAAC;QAC1C,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAA0F,CAAC;QAC9J,IAAI,OAAO,MAAM,CAAC,yBAAyB,KAAK,UAAU;YAAE,MAAM,IAAI,KAAK,CAAC,+DAA+D,UAAU,EAAE,CAAC,CAAC;QACzJ,MAAM,MAAM,CAAC,yBAAyB,CAAC,UAAU,CAAC,CAAC;IACrD,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,GAAG,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,gBAAgB,CAAC,YAAY,EAAE,oBAAoB,EAAE,gBAAgB,CAAC,SAAS,EAAE,CAAC,EAAE,GAAG,CAAC,gBAAgB,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,CAAC;IACxT,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,iCAAiC,OAAO,CAAC,OAAO,CAAC,SAAS,qBAAqB,OAAO,CAAC,MAAM,CAAC,IAAI,IAAI,CACvG,CAAC;IACF,MAAM,YAAY,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC;AACvE,CAAC"}

package/dist/commands/disable.d.ts

@@ -0,0 +1,2 @@
+export declare function disableAddon(project: string, godotBin?: string): Promise<void>;
+//# sourceMappingURL=disable.d.ts.map

package/dist/commands/disable.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"disable.d.ts","sourceRoot":"","sources":["../../src/commands/disable.ts"],"names":[],"mappings":"AAEA,wBAAsB,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAEpF"}

package/dist/commands/disable.js

@@ -0,0 +1,5 @@
+import { setPluginState } from "../install/pluginState.js";
+export async function disableAddon(project, godotBin) {
+    await setPluginState(project, "disable", godotBin);
+}
+//# sourceMappingURL=disable.js.map

package/dist/commands/disable.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"disable.js","sourceRoot":"","sources":["../../src/commands/disable.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAE3D,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,OAAe,EAAE,QAAiB;IACnE,MAAM,cAAc,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;AACrD,CAAC"}

package/dist/commands/doctor.d.ts

@@ -0,0 +1,3 @@
+import { type DoctorReport } from "../install/doctor.js";
+export declare function doctorProject(project: string): Promise<DoctorReport>;
+//# sourceMappingURL=doctor.d.ts.map

package/dist/commands/doctor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor.d.ts","sourceRoot":"","sources":["../../src/commands/doctor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAa,KAAK,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAEpE,wBAAsB,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAE1E"}

package/dist/commands/doctor.js

@@ -0,0 +1,5 @@
+import { runDoctor } from "../install/doctor.js";
+export async function doctorProject(project) {
+    return runDoctor(project);
+}
+//# sourceMappingURL=doctor.js.map

package/dist/commands/doctor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor.js","sourceRoot":"","sources":["../../src/commands/doctor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAqB,MAAM,sBAAsB,CAAC;AAEpE,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAAe;IACjD,OAAO,SAAS,CAAC,OAAO,CAAC,CAAC;AAC5B,CAAC"}

package/dist/commands/editor.d.ts

@@ -0,0 +1,7 @@
+export declare function secureEditorArguments(project: string, sharedPort: number, attestationPath: string): string[];
+export declare function createSecureEditorLaunchAttestation(projectId: string, sharedPort: number): Promise<{
+    path: string;
+    cleanup(): Promise<void>;
+}>;
+export declare function launchSecureEditor(projectInput: string, explicitGodot?: string): Promise<number>;
+//# sourceMappingURL=editor.d.ts.map

package/dist/commands/editor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"editor.d.ts","sourceRoot":"","sources":["../../src/commands/editor.ts"],"names":[],"mappings":"AAWA,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,GAAG,MAAM,EAAE,CAgB5G;AAED,wBAAsB,mCAAmC,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CAAE,CAAC,CAgBpJ;AAqBD,wBAAsB,kBAAkB,CAAC,YAAY,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAgBtG"}

package/dist/commands/editor.js

@@ -0,0 +1,84 @@
+import { spawn } from "node:child_process";
+import { randomUUID } from "node:crypto";
+import { rm, writeFile } from "node:fs/promises";
+import { createServer } from "node:net";
+import { join } from "node:path";
+import { discoverProject, ensureRuntimeDirectory, readProjectIdentity } from "@godot-mcp/control-plane";
+import { runDoctor } from "../install/doctor.js";
+import { findGodotBinary } from "../install/pluginState.js";
+export function secureEditorArguments(project, sharedPort, attestationPath) {
+    if (!Number.isInteger(sharedPort) || sharedPort < 1 || sharedPort > 65_535) {
+        throw new Error("Secure editor shared port is invalid");
+    }
+    if (!attestationPath)
+        throw new Error("Secure editor launch attestation is required");
+    return [
+        "--editor",
+        "--debug-server", `tcp://127.0.0.1:${sharedPort}`,
+        "--dap-port", String(sharedPort),
+        "--path", project,
+        "--",
+        `--godot-mcp-debug-port=${sharedPort}`,
+        `--godot-mcp-dap-port=${sharedPort}`,
+        "--godot-mcp-secure-editor-launch=1",
+        `--godot-mcp-editor-attestation=${attestationPath}`,
+    ];
+}
+export async function createSecureEditorLaunchAttestation(projectId, sharedPort) {
+    if (!projectId || !Number.isInteger(sharedPort) || sharedPort < 1 || sharedPort > 65_535) {
+        throw new Error("Secure editor launch attestation input is invalid");
+    }
+    const directory = await ensureRuntimeDirectory();
+    const path = join(directory, `editor-launch-${randomUUID()}.json`);
+    const createdAtUnixMs = Date.now();
+    await writeFile(path, `${JSON.stringify({
+        schemaVersion: 1,
+        projectId,
+        debugPort: sharedPort,
+        dapPort: sharedPort,
+        createdAtUnixMs,
+        expiresAtUnixMs: createdAtUnixMs + 10_000,
+    })}\n`, { flag: "wx", mode: 0o600 });
+    return { path, cleanup: async () => { await rm(path, { force: true }); } };
+}
+async function reserveSharedPort() {
+    const server = createServer();
+    const port = await new Promise((resolvePromise, reject) => {
+        server.once("error", reject);
+        server.listen(0, "127.0.0.1", () => {
+            const address = server.address();
+            if (address === null || typeof address === "string") {
+                reject(new Error("Could not reserve a secure editor port"));
+                return;
+            }
+            resolvePromise(address.port);
+        });
+    });
+    await new Promise((resolvePromise, reject) => {
+        server.close((error) => error ? reject(error) : resolvePromise());
+    });
+    return port;
+}
+export async function launchSecureEditor(projectInput, explicitGodot) {
+    const project = await discoverProject(projectInput);
+    const godot = await findGodotBinary(explicitGodot);
+    const doctor = await runDoctor(project.rootRealPath, godot);
+    if (!doctor.healthy)
+        throw new Error("Godot MCP installation is unhealthy; run godot-mcp doctor before editor");
+    const port = await reserveSharedPort();
+    const identity = await readProjectIdentity(project.rootRealPath);
+    const attestation = await createSecureEditorLaunchAttestation(identity.projectId, port);
+    const child = spawn(godot, secureEditorArguments(project.rootRealPath, port, attestation.path), { stdio: "inherit", env: process.env });
+    return new Promise((resolvePromise, reject) => {
+        child.once("error", (error) => { void attestation.cleanup().finally(() => reject(error)); });
+        child.once("close", (code, signal) => {
+            void attestation.cleanup().then(() => {
+                if (code !== null)
+                    resolvePromise(code);
+                else
+                    reject(new Error(`Godot editor exited from signal ${signal ?? "unknown"}`));
+            }, reject);
+        });
+    });
+}
+//# sourceMappingURL=editor.js.map

package/dist/commands/editor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"editor.js","sourceRoot":"","sources":["../../src/commands/editor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AACxC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,eAAe,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAExG,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAE5D,MAAM,UAAU,qBAAqB,CAAC,OAAe,EAAE,UAAkB,EAAE,eAAuB;IAChG,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,UAAU,GAAG,CAAC,IAAI,UAAU,GAAG,MAAM,EAAE,CAAC;QAC3E,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;IACD,IAAI,CAAC,eAAe;QAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IACtF,OAAO;QACL,UAAU;QACV,gBAAgB,EAAE,mBAAmB,UAAU,EAAE;QACjD,YAAY,EAAE,MAAM,CAAC,UAAU,CAAC;QAChC,QAAQ,EAAE,OAAO;QACjB,IAAI;QACJ,0BAA0B,UAAU,EAAE;QACtC,wBAAwB,UAAU,EAAE;QACpC,oCAAoC;QACpC,kCAAkC,eAAe,EAAE;KACpD,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mCAAmC,CAAC,SAAiB,EAAE,UAAkB;IAC7F,IAAI,CAAC,SAAS,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,UAAU,GAAG,CAAC,IAAI,UAAU,GAAG,MAAM,EAAE,CAAC;QACzF,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACvE,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,sBAAsB,EAAE,CAAC;IACjD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,iBAAiB,UAAU,EAAE,OAAO,CAAC,CAAC;IACnE,MAAM,eAAe,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACnC,MAAM,SAAS,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC;QACtC,aAAa,EAAE,CAAC;QAChB,SAAS;QACT,SAAS,EAAE,UAAU;QACrB,OAAO,EAAE,UAAU;QACnB,eAAe;QACf,eAAe,EAAE,eAAe,GAAG,MAAM;KAC1C,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACrC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,IAAI,EAAE,GAAG,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAC7E,CAAC;AAED,KAAK,UAAU,iBAAiB;IAC9B,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;IAC9B,MAAM,IAAI,GAAG,MAAM,IAAI,OAAO,CAAS,CAAC,cAAc,EAAE,MAAM,EAAE,EAAE;QAChE,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC7B,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE;YACjC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;YACjC,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;gBACpD,MAAM,CAAC,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC,CAAC;gBAC5D,OAAO;YACT,CAAC;YACD,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC/B,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,MAAM,IAAI,OAAO,CAAO,CAAC,cAAc,EAAE,MAAM,EAAE,EAAE;QACjD,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;IACH,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,YAAoB,EAAE,aAAsB;IACnF,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,YAAY,CAAC,CAAC;IACpD,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,aAAa,CAAC,CAAC;IACnD,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;IAC5D,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,yEAAyE,CAAC,CAAC;IAChH,MAAM,IAAI,GAAG,MAAM,iBAAiB,EAAE,CAAC;IACvC,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IACjE,MAAM,WAAW,GAAG,MAAM,mCAAmC,CAAC,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IACxF,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,EAAE,qBAAqB,CAAC,OAAO,CAAC,YAAY,EAAE,IAAI,EAAE,WAAW,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IACxI,OAAO,IAAI,OAAO,CAAS,CAAC,cAAc,EAAE,MAAM,EAAE,EAAE;QACpD,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,GAAG,KAAK,WAAW,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7F,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;YAAG,KAAK,WAAW,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC3E,IAAI,IAAI,KAAK,IAAI;oBAAE,cAAc,CAAC,IAAI,CAAC,CAAC;;oBACnC,MAAM,CAAC,IAAI,KAAK,CAAC,mCAAmC,MAAM,IAAI,SAAS,EAAE,CAAC,CAAC,CAAC;YACnF,CAAC,EAAE,MAAM,CAAC,CAAC;QAAC,CAAC,CAAC,CAAC;IACjB,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/commands/init.d.ts

@@ -0,0 +1,3 @@
+import { type DoctorReport } from "../install/doctor.js";
+export declare function initProject(project: string, sourceDir: string, godotBin?: string): Promise<DoctorReport>;
+//# sourceMappingURL=init.d.ts.map

package/dist/commands/init.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../../src/commands/init.ts"],"names":[],"mappings":"AACA,OAAO,EAAa,KAAK,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAGpE,wBAAsB,WAAW,CAC/B,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,MAAM,EACjB,QAAQ,CAAC,EAAE,MAAM,GAChB,OAAO,CAAC,YAAY,CAAC,CAIvB"}

package/dist/commands/init.js

@@ -0,0 +1,9 @@
+import { installAddon } from "../install/addonInstaller.js";
+import { runDoctor } from "../install/doctor.js";
+import { setPluginState } from "../install/pluginState.js";
+export async function initProject(project, sourceDir, godotBin) {
+    const install = await installAddon(project, sourceDir);
+    await setPluginState(install.projectRoot, "enable", godotBin);
+    return runDoctor(install.projectRoot, godotBin);
+}
+//# sourceMappingURL=init.js.map

package/dist/commands/init.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"init.js","sourceRoot":"","sources":["../../src/commands/init.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAC5D,OAAO,EAAE,SAAS,EAAqB,MAAM,sBAAsB,CAAC;AACpE,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAE3D,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,OAAe,EACf,SAAiB,EACjB,QAAiB;IAEjB,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IACvD,MAAM,cAAc,CAAC,OAAO,CAAC,WAAW,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC9D,OAAO,SAAS,CAAC,OAAO,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;AAClD,CAAC"}

package/dist/commands/uninstall.d.ts

@@ -0,0 +1,2 @@
+export declare function uninstallProject(project: string): Promise<void>;
+//# sourceMappingURL=uninstall.d.ts.map

package/dist/commands/uninstall.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"uninstall.d.ts","sourceRoot":"","sources":["../../src/commands/uninstall.ts"],"names":[],"mappings":"AAEA,wBAAsB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAErE"}

package/dist/commands/uninstall.js

@@ -0,0 +1,5 @@
+import { uninstallAddon } from "../install/addonInstaller.js";
+export async function uninstallProject(project) {
+    await uninstallAddon(project);
+}
+//# sourceMappingURL=uninstall.js.map

package/dist/commands/uninstall.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"uninstall.js","sourceRoot":"","sources":["../../src/commands/uninstall.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAE9D,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,OAAe;IACpD,MAAM,cAAc,CAAC,OAAO,CAAC,CAAC;AAChC,CAAC"}

package/dist/commands/unsafeFixture.d.ts

@@ -0,0 +1,5 @@
+export declare function defaultUnsafeRegistryPath(): string;
+export declare function registerUnsafeFixtureCommand(project: string, registryPath: string, confirmation: string): Promise<unknown>;
+export declare function stampUnsafeFixtureCopyCommand(project: string, registryPath: string, registrationId: string): Promise<unknown>;
+export declare function approveUnsafeFixtureCommand(project: string, registryPath: string, activationDirectory: string, confirmation: string, ttlMs?: number): Promise<unknown>;
+//# sourceMappingURL=unsafeFixture.d.ts.map

package/dist/commands/unsafeFixture.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"unsafeFixture.d.ts","sourceRoot":"","sources":["../../src/commands/unsafeFixture.ts"],"names":[],"mappings":"AAKA,wBAAgB,yBAAyB,IAAI,MAAM,CAA4E;AAE/H,wBAAsB,4BAA4B,CAAC,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAEhI;AAED,wBAAsB,6BAA6B,CAAC,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAEnI;AAED,wBAAsB,2BAA2B,CAAC,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,mBAAmB,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAE5K"}

package/dist/commands/unsafeFixture.js

@@ -0,0 +1,14 @@
+import { homedir } from "node:os";
+import { join } from "node:path";
+import { approveUnsafeFixtureCopy, registerUnsafeFixture, stampUnsafeFixtureCopy } from "@godot-mcp/control-plane";
+export function defaultUnsafeRegistryPath() { return join(homedir(), ".config", "godot-mcp", "unsafe-fixtures.json"); }
+export async function registerUnsafeFixtureCommand(project, registryPath, confirmation) {
+    return registerUnsafeFixture(registryPath, project, confirmation);
+}
+export async function stampUnsafeFixtureCopyCommand(project, registryPath, registrationId) {
+    return stampUnsafeFixtureCopy(registryPath, project, registrationId);
+}
+export async function approveUnsafeFixtureCommand(project, registryPath, activationDirectory, confirmation, ttlMs) {
+    return approveUnsafeFixtureCopy(registryPath, project, activationDirectory, confirmation, ttlMs);
+}
+//# sourceMappingURL=unsafeFixture.js.map

package/dist/commands/unsafeFixture.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"unsafeFixture.js","sourceRoot":"","sources":["../../src/commands/unsafeFixture.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,wBAAwB,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAEnH,MAAM,UAAU,yBAAyB,KAAa,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,WAAW,EAAE,sBAAsB,CAAC,CAAC,CAAC,CAAC;AAE/H,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAAC,OAAe,EAAE,YAAoB,EAAE,YAAoB;IAC5G,OAAO,qBAAqB,CAAC,YAAY,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC;AACpE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,6BAA6B,CAAC,OAAe,EAAE,YAAoB,EAAE,cAAsB;IAC/G,OAAO,sBAAsB,CAAC,YAAY,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC;AACvE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,OAAe,EAAE,YAAoB,EAAE,mBAA2B,EAAE,YAAoB,EAAE,KAAc;IACxJ,OAAO,wBAAwB,CAAC,YAAY,EAAE,OAAO,EAAE,mBAAmB,EAAE,YAAY,EAAE,KAAK,CAAC,CAAC;AACnG,CAAC"}

package/dist/commands/upgrade.d.ts

@@ -0,0 +1,2 @@
+export declare function upgradeProject(project: string, source: string): Promise<import("../install/addonInstaller.js").InstallAddonResult>;
+//# sourceMappingURL=upgrade.d.ts.map

package/dist/commands/upgrade.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"upgrade.d.ts","sourceRoot":"","sources":["../../src/commands/upgrade.ts"],"names":[],"mappings":"AAEA,wBAAsB,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,sEAEnE"}

package/dist/commands/upgrade.js

@@ -0,0 +1,5 @@
+import { upgradeAddon } from "../install/addonInstaller.js";
+export async function upgradeProject(project, source) {
+    return upgradeAddon(project, source);
+}
+//# sourceMappingURL=upgrade.js.map

package/dist/commands/upgrade.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"upgrade.js","sourceRoot":"","sources":["../../src/commands/upgrade.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAE5D,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAAe,EAAE,MAAc;IAClE,OAAO,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;AACvC,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,12 @@
+export { initProject } from "./commands/init.js";
+export { createSecureEditorLaunchAttestation, launchSecureEditor, secureEditorArguments } from "./commands/editor.js";
+export { disableAddon } from "./commands/disable.js";
+export { doctorProject } from "./commands/doctor.js";
+export { uninstallProject } from "./commands/uninstall.js";
+export { upgradeProject } from "./commands/upgrade.js";
+export { installAddon, upgradeAddon, uninstallAddon, type InstallAddonResult, } from "./install/addonInstaller.js";
+export { runDoctor, type DoctorCheck, type DoctorReport } from "./install/doctor.js";
+export { GodotMcpRuntime, createRuntime, type RuntimeOptions, } from "./runtime/createRuntime.js";
+export { connectProject } from "./commands/connect.js";
+export { approveUnsafeFixtureCommand, defaultUnsafeRegistryPath, registerUnsafeFixtureCommand, stampUnsafeFixtureCopyCommand } from "./commands/unsafeFixture.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,mCAAmC,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AACtH,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EACL,YAAY,EACZ,YAAY,EACZ,cAAc,EACd,KAAK,kBAAkB,GACxB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,SAAS,EAAE,KAAK,WAAW,EAAE,KAAK,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACrF,OAAO,EACL,eAAe,EACf,aAAa,EACb,KAAK,cAAc,GACpB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,2BAA2B,EAAE,yBAAyB,EAAE,4BAA4B,EAAE,6BAA6B,EAAE,MAAM,6BAA6B,CAAC"}

package/dist/index.js

@@ -0,0 +1,12 @@
+export { initProject } from "./commands/init.js";
+export { createSecureEditorLaunchAttestation, launchSecureEditor, secureEditorArguments } from "./commands/editor.js";
+export { disableAddon } from "./commands/disable.js";
+export { doctorProject } from "./commands/doctor.js";
+export { uninstallProject } from "./commands/uninstall.js";
+export { upgradeProject } from "./commands/upgrade.js";
+export { installAddon, upgradeAddon, uninstallAddon, } from "./install/addonInstaller.js";
+export { runDoctor } from "./install/doctor.js";
+export { GodotMcpRuntime, createRuntime, } from "./runtime/createRuntime.js";
+export { connectProject } from "./commands/connect.js";
+export { approveUnsafeFixtureCommand, defaultUnsafeRegistryPath, registerUnsafeFixtureCommand, stampUnsafeFixtureCopyCommand } from "./commands/unsafeFixture.js";
+//# sourceMappingURL=index.js.map