@godot-mcp/control-plane 0.0.0 → 0.1.0

package/dist/index.js

@@ -0,0 +1,37 @@
+export { GodotMcpException } from "./errors.js";
+export { ExtensionRegistry } from "./extensions/extensionRegistry.js";
+export { UNSAFE_CONFIRMATION_PHRASE, approveUnsafeFixtureCopy, consumeUnsafeFixtureActivation, registerUnsafeFixture, stampUnsafeFixtureCopy, } from "./unsafe/unsafeFixtureAuthority.js";
+export { UnsafeFixtureProcess } from "./unsafe/unsafeFixtureProcess.js";
+export { UnsafeFixtureService } from "./unsafe/unsafeFixtureService.js";
+export { EditorMutationService, editorMutationRequestDigest, } from "./editor/editorMutationService.js";
+export { MutationLedger, } from "./editor/mutationLedger.js";
+export { ProjectConfigSchema, createProjectConfig, } from "./project/projectConfig.js";
+export { discoverProject, readProjectIdentity, } from "./project/projectIdentity.js";
+export { resolveProjectPath } from "./project/pathPolicy.js";
+export { ArtifactStore, scanArtifactDirectory, } from "./project/artifactStore.js";
+export { OwnedProjectProcess, projectProcessFingerprint, projectGodotArguments, recoverOwnedProjectProcess, scrubProjectEnvironment, } from "./project/projectProcess.js";
+export { ProjectJobService, } from "./project/projectJobService.js";
+export { ProjectJobJournal, } from "./project/projectJobJournal.js";
+export { ProjectMutationJournal, ProjectMutationService, } from "./project/projectMutationService.js";
+export { ProjectService } from "./project/projectService.js";
+export { assertBuildSolutionsPreflight, assertExportPreflight, projectOperationPreflight, } from "./project/projectPreflight.js";
+export { CORE_CAPABILITIES_POLICY, CORE_CAPTURE_POLICY, CORE_DOCTOR_POLICY, CORE_HELP_POLICY, CORE_POLICIES, CORE_QUERY_POLICY, CORE_SESSION_POLICY, EDITOR_POLICIES, EDITOR_POLICY, INPUT_POLICIES, INPUT_POLICY, PROJECT_POLICIES, PROJECT_POLICY, UNSAFE_POLICIES, UNSAFE_POLICY, PHASE_ONE_POLICIES, RUNTIME_CAPTURE_POLICY, RUNTIME_POLICIES, RUNTIME_POLICY, VISUAL_POLICIES, VISUAL_POLICY, expandPermissionTiers, visibleCapabilities, } from "./policy/capabilities.js";
+export { authorize } from "./policy/authorize.js";
+export { redactAuditValue } from "./audit/redact.js";
+export { EvidenceStore, } from "./evidence/evidenceStore.js";
+export { JsonlAuditSink, } from "./audit/jsonlAuditSink.js";
+export { ensureRuntimeDirectory, runtimeDirectoryPath } from "./auth/runtimeDirectory.js";
+export { PairingDescriptorSchema, consumePairingDescriptor, createPairingDescriptor, } from "./auth/pairingDescriptor.js";
+export { EnvelopeVerifier, deriveSessionKey, envelopeSigningText, signEnvelope, verifyEnvelope, } from "./auth/sessionCrypto.js";
+export { getCoreHelp, } from "./help/coreHelp.js";
+export { SessionService, } from "./session/sessionService.js";
+export { RuntimeDescriptorSchema, consumeRuntimeDescriptor, createRuntimeDescriptor, } from "./runtime/runtimeDescriptor.js";
+export { AUTHENTICATED_DEBUGGER_COMMANDS, DebuggerClientError, } from "./runtime/debuggerClient.js";
+export { DebugTokenStore, DebugTokenStoreError, } from "./runtime/debugTokenStore.js";
+export { assertLoopbackListenerOwnedByProcess, assertLoopbackListenersOwnedByProcess, listenerPortsAreDistinct, OwnedGodotProcess, godotRuntimeArguments, scrubRuntimeEnvironment, } from "./runtime/runtimeProcess.js";
+export { RuntimeService, } from "./runtime/runtimeService.js";
+export { inputTraceEvents, summarizeInputForAudit, traceSha256, } from "./runtime/inputReceipt.js";
+export { comparePng } from "./visual/pngComparison.js";
+export { ScenarioService, } from "./visual/scenarioService.js";
+export { VisualService, } from "./visual/visualService.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,iBAAiB,EAAiF,MAAM,mCAAmC,CAAC;AACrJ,OAAO,EACL,0BAA0B,EAC1B,wBAAwB,EACxB,8BAA8B,EAC9B,qBAAqB,EACrB,sBAAsB,GAEvB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,oBAAoB,EAAmC,MAAM,kCAAkC,CAAC;AACzG,OAAO,EAAE,oBAAoB,EAAyC,MAAM,kCAAkC,CAAC;AAC/G,OAAO,EACL,qBAAqB,EACrB,2BAA2B,GAE5B,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,cAAc,GAIf,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,mBAAmB,EACnB,mBAAmB,GAEpB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,eAAe,EACf,mBAAmB,GAEpB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,kBAAkB,EAAwB,MAAM,yBAAyB,CAAC;AACnF,OAAO,EACL,aAAa,EACb,qBAAqB,GAKtB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,mBAAmB,EACnB,yBAAyB,EACzB,qBAAqB,EACrB,0BAA0B,EAC1B,uBAAuB,GAExB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,iBAAiB,GAGlB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EACL,iBAAiB,GAElB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EACL,sBAAsB,EACtB,sBAAsB,GAEvB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAC7D,OAAO,EACL,6BAA6B,EAC7B,qBAAqB,EACrB,yBAAyB,GAC1B,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACL,wBAAwB,EACxB,mBAAmB,EACnB,kBAAkB,EAClB,gBAAgB,EAChB,aAAa,EACb,iBAAiB,EACjB,mBAAmB,EACnB,eAAe,EACf,aAAa,EACb,cAAc,EACd,YAAY,EACZ,gBAAgB,EAChB,cAAc,EACd,eAAe,EACf,aAAa,EACb,kBAAkB,EAClB,sBAAsB,EACtB,gBAAgB,EAChB,cAAc,EACd,eAAe,EACf,aAAa,EACb,qBAAqB,EACrB,mBAAmB,GAGpB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAClD,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EACL,aAAa,GAMd,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,cAAc,GAGf,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,sBAAsB,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAC1F,OAAO,EACL,uBAAuB,EACvB,wBAAwB,EACxB,uBAAuB,GAGxB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,gBAAgB,EAChB,gBAAgB,EAChB,mBAAmB,EACnB,YAAY,EACZ,cAAc,GAGf,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,WAAW,GAGZ,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,cAAc,GAOf,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,uBAAuB,EACvB,wBAAwB,EACxB,uBAAuB,GAIxB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EACL,+BAA+B,EAC/B,mBAAmB,GAGpB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,eAAe,EACf,oBAAoB,GAErB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,oCAAoC,EACpC,qCAAqC,EACrC,wBAAwB,EACxB,iBAAiB,EACjB,qBAAqB,EACrB,uBAAuB,GAGxB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,cAAc,GAKf,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,gBAAgB,EAChB,sBAAsB,EACtB,WAAW,GAEZ,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,UAAU,EAA+C,MAAM,2BAA2B,CAAC;AACpG,OAAO,EACL,eAAe,GAIhB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,aAAa,GAId,MAAM,2BAA2B,CAAC"}

package/dist/policy/authorize.d.ts

@@ -0,0 +1,5 @@
+import { type CommandPolicy, type SessionGrants } from "./capabilities.js";
+export declare function authorize(grants: SessionGrants, policy: CommandPolicy): {
+    allowed: true;
+};
+//# sourceMappingURL=authorize.d.ts.map

package/dist/policy/authorize.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorize.d.ts","sourceRoot":"","sources":["../../src/policy/authorize.ts"],"names":[],"mappings":"AAGA,OAAO,EAAyB,KAAK,aAAa,EAAE,KAAK,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAElG,wBAAgB,SAAS,CAAC,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,aAAa,GAAG;IAAE,OAAO,EAAE,IAAI,CAAA;CAAE,CAczF"}

package/dist/policy/authorize.js

@@ -0,0 +1,19 @@
+import { randomUUID } from "node:crypto";
+import { GodotMcpException } from "../errors.js";
+import { expandPermissionTiers } from "./capabilities.js";
+export function authorize(grants, policy) {
+    const tiers = expandPermissionTiers(grants.tiers);
+    const requiredPacks = policy.requiredPacks ?? [policy.pack];
+    if (!tiers.includes(policy.tier) || !requiredPacks.every((pack) => grants.packs.includes(pack))) {
+        throw new GodotMcpException({
+            code: "PERMISSION_REQUIRED",
+            message: `${policy.command} requires tier ${policy.tier} and capability packs ${requiredPacks.join(", ")}`,
+            retryable: false,
+            correlationId: randomUUID(),
+            partialEffects: false,
+            rollback: "not_needed",
+        });
+    }
+    return { allowed: true };
+}
+//# sourceMappingURL=authorize.js.map

package/dist/policy/authorize.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorize.js","sourceRoot":"","sources":["../../src/policy/authorize.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,EAAE,qBAAqB,EAA0C,MAAM,mBAAmB,CAAC;AAElG,MAAM,UAAU,SAAS,CAAC,MAAqB,EAAE,MAAqB;IACpE,MAAM,KAAK,GAAG,qBAAqB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAClD,MAAM,aAAa,GAAG,MAAM,CAAC,aAAa,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC5D,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QAChG,MAAM,IAAI,iBAAiB,CAAC;YAC1B,IAAI,EAAE,qBAAqB;YAC3B,OAAO,EAAE,GAAG,MAAM,CAAC,OAAO,kBAAkB,MAAM,CAAC,IAAI,yBAAyB,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;YAC1G,SAAS,EAAE,KAAK;YAChB,aAAa,EAAE,UAAU,EAAE;YAC3B,cAAc,EAAE,KAAK;YACrB,QAAQ,EAAE,YAAY;SACvB,CAAC,CAAC;IACL,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC"}

package/dist/policy/capabilities.d.ts

@@ -0,0 +1,36 @@
+import type { CapabilityPack, PermissionTier } from "@godot-mcp/protocol";
+export interface SessionGrants {
+    tiers: PermissionTier[];
+    packs: CapabilityPack[];
+}
+export interface CommandPolicy {
+    command: string;
+    tier: PermissionTier;
+    pack: CapabilityPack;
+    requiredPacks?: readonly CapabilityPack[];
+    mutating: boolean;
+}
+export declare function expandPermissionTiers(tiers: readonly PermissionTier[]): PermissionTier[];
+export declare const CORE_CAPABILITIES_POLICY: CommandPolicy;
+export declare const CORE_DOCTOR_POLICY: CommandPolicy;
+export declare const CORE_HELP_POLICY: CommandPolicy;
+export declare const CORE_SESSION_POLICY: CommandPolicy;
+export declare const CORE_QUERY_POLICY: CommandPolicy;
+export declare const CORE_CAPTURE_POLICY: CommandPolicy;
+export declare const RUNTIME_POLICY: CommandPolicy;
+export declare const RUNTIME_CAPTURE_POLICY: CommandPolicy;
+export declare const INPUT_POLICY: CommandPolicy;
+export declare const EDITOR_POLICY: CommandPolicy;
+export declare const VISUAL_POLICY: CommandPolicy;
+export declare const PROJECT_POLICY: CommandPolicy;
+export declare const UNSAFE_POLICY: CommandPolicy;
+export declare const PHASE_ONE_POLICIES: readonly CommandPolicy[];
+export declare const CORE_POLICIES: readonly CommandPolicy[];
+export declare const RUNTIME_POLICIES: readonly CommandPolicy[];
+export declare const INPUT_POLICIES: readonly CommandPolicy[];
+export declare const EDITOR_POLICIES: readonly CommandPolicy[];
+export declare const VISUAL_POLICIES: readonly CommandPolicy[];
+export declare const PROJECT_POLICIES: readonly CommandPolicy[];
+export declare const UNSAFE_POLICIES: readonly CommandPolicy[];
+export declare function visibleCapabilities(grants: SessionGrants): CommandPolicy[];
+//# sourceMappingURL=capabilities.d.ts.map

package/dist/policy/capabilities.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"capabilities.d.ts","sourceRoot":"","sources":["../../src/policy/capabilities.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAE1E,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,cAAc,EAAE,CAAC;IACxB,KAAK,EAAE,cAAc,EAAE,CAAC;CACzB;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,cAAc,CAAC;IACrB,IAAI,EAAE,cAAc,CAAC;IACrB,aAAa,CAAC,EAAE,SAAS,cAAc,EAAE,CAAC;IAC1C,QAAQ,EAAE,OAAO,CAAC;CACnB;AAkBD,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,SAAS,cAAc,EAAE,GAAG,cAAc,EAAE,CAMxF;AAED,eAAO,MAAM,wBAAwB,EAAE,aAKtC,CAAC;AACF,eAAO,MAAM,kBAAkB,EAAE,aAKhC,CAAC;AACF,eAAO,MAAM,gBAAgB,EAAE,aAK9B,CAAC;AACF,eAAO,MAAM,mBAAmB,EAAE,aAKjC,CAAC;AACF,eAAO,MAAM,iBAAiB,EAAE,aAK/B,CAAC;AACF,eAAO,MAAM,mBAAmB,EAAE,aAKjC,CAAC;AACF,eAAO,MAAM,cAAc,EAAE,aAK5B,CAAC;AACF,eAAO,MAAM,sBAAsB,EAAE,aAKpC,CAAC;AACF,eAAO,MAAM,YAAY,EAAE,aAK1B,CAAC;AACF,eAAO,MAAM,aAAa,EAAE,aAK3B,CAAC;AACF,eAAO,MAAM,aAAa,EAAE,aAM3B,CAAC;AACF,eAAO,MAAM,cAAc,EAAE,aAK5B,CAAC;AACF,eAAO,MAAM,aAAa,EAAE,aAK3B,CAAC;AAEF,eAAO,MAAM,kBAAkB,EAAE,SAAS,aAAa,EAKtD,CAAC;AAEF,eAAO,MAAM,aAAa,EAAE,SAAS,aAAa,EAOjD,CAAC;AAEF,eAAO,MAAM,gBAAgB,EAAE,SAAS,aAAa,EAGpD,CAAC;AAEF,eAAO,MAAM,cAAc,EAAE,SAAS,aAAa,EAAmB,CAAC;AACvE,eAAO,MAAM,eAAe,EAAE,SAAS,aAAa,EAAoB,CAAC;AACzE,eAAO,MAAM,eAAe,EAAE,SAAS,aAAa,EAAoB,CAAC;AACzE,eAAO,MAAM,gBAAgB,EAAE,SAAS,aAAa,EAAqB,CAAC;AAC3E,eAAO,MAAM,eAAe,EAAE,SAAS,aAAa,EAAoB,CAAC;AAEzE,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,aAAa,GAAG,aAAa,EAAE,CAK1E"}

package/dist/policy/capabilities.js

@@ -0,0 +1,129 @@
+const TIER_EXPANSION = {
+    observe: ["observe"],
+    runtime_control: ["observe", "runtime_control"],
+    project_mutate: ["observe", "runtime_control", "project_mutate"],
+    project_operate: ["observe", "runtime_control", "project_mutate", "project_operate"],
+    unsafe_fixture: ["observe", "unsafe_fixture"],
+};
+const TIER_ORDER = [
+    "observe",
+    "runtime_control",
+    "project_mutate",
+    "project_operate",
+    "unsafe_fixture",
+];
+export function expandPermissionTiers(tiers) {
+    const expanded = new Set();
+    for (const tier of tiers) {
+        for (const implied of TIER_EXPANSION[tier])
+            expanded.add(implied);
+    }
+    return TIER_ORDER.filter((tier) => expanded.has(tier));
+}
+export const CORE_CAPABILITIES_POLICY = {
+    command: "godot_capabilities",
+    tier: "observe",
+    pack: "core",
+    mutating: false,
+};
+export const CORE_DOCTOR_POLICY = {
+    command: "godot_doctor",
+    tier: "observe",
+    pack: "core",
+    mutating: false,
+};
+export const CORE_HELP_POLICY = {
+    command: "godot_help",
+    tier: "observe",
+    pack: "core",
+    mutating: false,
+};
+export const CORE_SESSION_POLICY = {
+    command: "godot_session",
+    tier: "observe",
+    pack: "core",
+    mutating: false,
+};
+export const CORE_QUERY_POLICY = {
+    command: "godot_query",
+    tier: "observe",
+    pack: "core",
+    mutating: false,
+};
+export const CORE_CAPTURE_POLICY = {
+    command: "godot_capture",
+    tier: "observe",
+    pack: "core",
+    mutating: false,
+};
+export const RUNTIME_POLICY = {
+    command: "godot_runtime",
+    tier: "runtime_control",
+    pack: "runtime",
+    mutating: true,
+};
+export const RUNTIME_CAPTURE_POLICY = {
+    command: "godot_runtime_capture",
+    tier: "runtime_control",
+    pack: "runtime",
+    mutating: true,
+};
+export const INPUT_POLICY = {
+    command: "godot_input",
+    tier: "runtime_control",
+    pack: "input",
+    mutating: true,
+};
+export const EDITOR_POLICY = {
+    command: "godot_editor",
+    tier: "project_mutate",
+    pack: "editor",
+    mutating: true,
+};
+export const VISUAL_POLICY = {
+    command: "godot_visual",
+    tier: "runtime_control",
+    pack: "visual",
+    requiredPacks: ["runtime", "input", "visual"],
+    mutating: true,
+};
+export const PROJECT_POLICY = {
+    command: "godot_project",
+    tier: "project_operate",
+    pack: "project",
+    mutating: true,
+};
+export const UNSAFE_POLICY = {
+    command: "godot_unsafe_fixture",
+    tier: "unsafe_fixture",
+    pack: "unsafe",
+    mutating: true,
+};
+export const PHASE_ONE_POLICIES = [
+    CORE_CAPABILITIES_POLICY,
+    CORE_DOCTOR_POLICY,
+    CORE_HELP_POLICY,
+    CORE_SESSION_POLICY,
+];
+export const CORE_POLICIES = [
+    CORE_CAPABILITIES_POLICY,
+    CORE_CAPTURE_POLICY,
+    CORE_DOCTOR_POLICY,
+    CORE_HELP_POLICY,
+    CORE_QUERY_POLICY,
+    CORE_SESSION_POLICY,
+];
+export const RUNTIME_POLICIES = [
+    RUNTIME_CAPTURE_POLICY,
+    RUNTIME_POLICY,
+];
+export const INPUT_POLICIES = [INPUT_POLICY];
+export const EDITOR_POLICIES = [EDITOR_POLICY];
+export const VISUAL_POLICIES = [VISUAL_POLICY];
+export const PROJECT_POLICIES = [PROJECT_POLICY];
+export const UNSAFE_POLICIES = [UNSAFE_POLICY];
+export function visibleCapabilities(grants) {
+    const tiers = expandPermissionTiers(grants.tiers);
+    return [...CORE_POLICIES, ...RUNTIME_POLICIES, ...INPUT_POLICIES, ...EDITOR_POLICIES, ...VISUAL_POLICIES, ...PROJECT_POLICIES, ...UNSAFE_POLICIES].filter((policy) => tiers.includes(policy.tier) && (policy.requiredPacks ?? [policy.pack]).every((pack) => grants.packs.includes(pack)));
+}
+//# sourceMappingURL=capabilities.js.map

package/dist/policy/capabilities.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"capabilities.js","sourceRoot":"","sources":["../../src/policy/capabilities.ts"],"names":[],"mappings":"AAeA,MAAM,cAAc,GAAsD;IACxE,OAAO,EAAE,CAAC,SAAS,CAAC;IACpB,eAAe,EAAE,CAAC,SAAS,EAAE,iBAAiB,CAAC;IAC/C,cAAc,EAAE,CAAC,SAAS,EAAE,iBAAiB,EAAE,gBAAgB,CAAC;IAChE,eAAe,EAAE,CAAC,SAAS,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,iBAAiB,CAAC;IACpF,cAAc,EAAE,CAAC,SAAS,EAAE,gBAAgB,CAAC;CAC9C,CAAC;AAEF,MAAM,UAAU,GAA8B;IAC5C,SAAS;IACT,iBAAiB;IACjB,gBAAgB;IAChB,iBAAiB;IACjB,gBAAgB;CACjB,CAAC;AAEF,MAAM,UAAU,qBAAqB,CAAC,KAAgC;IACpE,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC3C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,KAAK,MAAM,OAAO,IAAI,cAAc,CAAC,IAAI,CAAC;YAAE,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACpE,CAAC;IACD,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;AACzD,CAAC;AAED,MAAM,CAAC,MAAM,wBAAwB,GAAkB;IACrD,OAAO,EAAE,oBAAoB;IAC7B,IAAI,EAAE,SAAS;IACf,IAAI,EAAE,MAAM;IACZ,QAAQ,EAAE,KAAK;CAChB,CAAC;AACF,MAAM,CAAC,MAAM,kBAAkB,GAAkB;IAC/C,OAAO,EAAE,cAAc;IACvB,IAAI,EAAE,SAAS;IACf,IAAI,EAAE,MAAM;IACZ,QAAQ,EAAE,KAAK;CAChB,CAAC;AACF,MAAM,CAAC,MAAM,gBAAgB,GAAkB;IAC7C,OAAO,EAAE,YAAY;IACrB,IAAI,EAAE,SAAS;IACf,IAAI,EAAE,MAAM;IACZ,QAAQ,EAAE,KAAK;CAChB,CAAC;AACF,MAAM,CAAC,MAAM,mBAAmB,GAAkB;IAChD,OAAO,EAAE,eAAe;IACxB,IAAI,EAAE,SAAS;IACf,IAAI,EAAE,MAAM;IACZ,QAAQ,EAAE,KAAK;CAChB,CAAC;AACF,MAAM,CAAC,MAAM,iBAAiB,GAAkB;IAC9C,OAAO,EAAE,aAAa;IACtB,IAAI,EAAE,SAAS;IACf,IAAI,EAAE,MAAM;IACZ,QAAQ,EAAE,KAAK;CAChB,CAAC;AACF,MAAM,CAAC,MAAM,mBAAmB,GAAkB;IAChD,OAAO,EAAE,eAAe;IACxB,IAAI,EAAE,SAAS;IACf,IAAI,EAAE,MAAM;IACZ,QAAQ,EAAE,KAAK;CAChB,CAAC;AACF,MAAM,CAAC,MAAM,cAAc,GAAkB;IAC3C,OAAO,EAAE,eAAe;IACxB,IAAI,EAAE,iBAAiB;IACvB,IAAI,EAAE,SAAS;IACf,QAAQ,EAAE,IAAI;CACf,CAAC;AACF,MAAM,CAAC,MAAM,sBAAsB,GAAkB;IACnD,OAAO,EAAE,uBAAuB;IAChC,IAAI,EAAE,iBAAiB;IACvB,IAAI,EAAE,SAAS;IACf,QAAQ,EAAE,IAAI;CACf,CAAC;AACF,MAAM,CAAC,MAAM,YAAY,GAAkB;IACzC,OAAO,EAAE,aAAa;IACtB,IAAI,EAAE,iBAAiB;IACvB,IAAI,EAAE,OAAO;IACb,QAAQ,EAAE,IAAI;CACf,CAAC;AACF,MAAM,CAAC,MAAM,aAAa,GAAkB;IAC1C,OAAO,EAAE,cAAc;IACvB,IAAI,EAAE,gBAAgB;IACtB,IAAI,EAAE,QAAQ;IACd,QAAQ,EAAE,IAAI;CACf,CAAC;AACF,MAAM,CAAC,MAAM,aAAa,GAAkB;IAC1C,OAAO,EAAE,cAAc;IACvB,IAAI,EAAE,iBAAiB;IACvB,IAAI,EAAE,QAAQ;IACd,aAAa,EAAE,CAAC,SAAS,EAAE,OAAO,EAAE,QAAQ,CAAC;IAC7C,QAAQ,EAAE,IAAI;CACf,CAAC;AACF,MAAM,CAAC,MAAM,cAAc,GAAkB;IAC3C,OAAO,EAAE,eAAe;IACxB,IAAI,EAAE,iBAAiB;IACvB,IAAI,EAAE,SAAS;IACf,QAAQ,EAAE,IAAI;CACf,CAAC;AACF,MAAM,CAAC,MAAM,aAAa,GAAkB;IAC1C,OAAO,EAAE,sBAAsB;IAC/B,IAAI,EAAE,gBAAgB;IACtB,IAAI,EAAE,QAAQ;IACd,QAAQ,EAAE,IAAI;CACf,CAAC;AAEF,MAAM,CAAC,MAAM,kBAAkB,GAA6B;IAC1D,wBAAwB;IACxB,kBAAkB;IAClB,gBAAgB;IAChB,mBAAmB;CACpB,CAAC;AAEF,MAAM,CAAC,MAAM,aAAa,GAA6B;IACrD,wBAAwB;IACxB,mBAAmB;IACnB,kBAAkB;IAClB,gBAAgB;IAChB,iBAAiB;IACjB,mBAAmB;CACpB,CAAC;AAEF,MAAM,CAAC,MAAM,gBAAgB,GAA6B;IACxD,sBAAsB;IACtB,cAAc;CACf,CAAC;AAEF,MAAM,CAAC,MAAM,cAAc,GAA6B,CAAC,YAAY,CAAC,CAAC;AACvE,MAAM,CAAC,MAAM,eAAe,GAA6B,CAAC,aAAa,CAAC,CAAC;AACzE,MAAM,CAAC,MAAM,eAAe,GAA6B,CAAC,aAAa,CAAC,CAAC;AACzE,MAAM,CAAC,MAAM,gBAAgB,GAA6B,CAAC,cAAc,CAAC,CAAC;AAC3E,MAAM,CAAC,MAAM,eAAe,GAA6B,CAAC,aAAa,CAAC,CAAC;AAEzE,MAAM,UAAU,mBAAmB,CAAC,MAAqB;IACvD,MAAM,KAAK,GAAG,qBAAqB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAClD,OAAO,CAAC,GAAG,aAAa,EAAE,GAAG,gBAAgB,EAAE,GAAG,cAAc,EAAE,GAAG,eAAe,EAAE,GAAG,eAAe,EAAE,GAAG,gBAAgB,EAAE,GAAG,eAAe,CAAC,CAAC,MAAM,CACvJ,CAAC,MAAM,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAChI,CAAC;AACJ,CAAC"}

package/dist/project/artifactStore.d.ts

@@ -0,0 +1,32 @@
+import { type ProjectArtifactManifest } from "@godot-mcp/protocol";
+export interface ArtifactScanFinding {
+    relativePath: string;
+    marker: string;
+}
+export interface ArtifactScanEntry {
+    relativePath: string;
+    byteLength: number;
+    sha256: string;
+}
+export interface ArtifactScanResult {
+    leakFree: boolean;
+    findings: ArtifactScanFinding[];
+    entries: ArtifactScanEntry[];
+    byteLength: number;
+    sha256: string;
+}
+export interface ArtifactScanOptions {
+    maxEntries?: number;
+    maxBytes?: number;
+    chunkBytes?: number;
+}
+export declare function scanArtifactDirectory(directory: string, options?: ArtifactScanOptions): Promise<ArtifactScanResult>;
+export declare class ArtifactStore {
+    private readonly projectRoot;
+    constructor(projectRoot: string);
+    allocate(jobToken: string, artifactName: string): Promise<{
+        path: string;
+    }>;
+    finalize(jobToken: string, artifactName: string): Promise<ProjectArtifactManifest>;
+}
+//# sourceMappingURL=artifactStore.d.ts.map

package/dist/project/artifactStore.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifactStore.d.ts","sourceRoot":"","sources":["../../src/project/artifactStore.ts"],"names":[],"mappings":"AAKA,OAAO,EAAgD,KAAK,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AA+DjH,MAAM,WAAW,mBAAmB;IAClC,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,iBAAiB;IAChC,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,OAAO,CAAC;IAClB,QAAQ,EAAE,mBAAmB,EAAE,CAAC;IAChC,OAAO,EAAE,iBAAiB,EAAE,CAAC;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,mBAAmB;IAClC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,wBAAsB,qBAAqB,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,GAAE,mBAAwB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAkE7H;AAED,qBAAa,aAAa;IACZ,OAAO,CAAC,QAAQ,CAAC,WAAW;gBAAX,WAAW,EAAE,MAAM;IAE1C,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IAW3E,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,uBAAuB,CAAC;CAezF"}

package/dist/project/artifactStore.js

@@ -0,0 +1,172 @@
+import { createHash, randomUUID } from "node:crypto";
+import { createReadStream } from "node:fs";
+import { lstat, mkdir, readdir } from "node:fs/promises";
+import { join, relative, resolve, sep } from "node:path";
+import { canonicalJson, ProjectArtifactManifestSchema } from "@godot-mcp/protocol";
+import { GodotMcpException } from "../errors.js";
+const JOB_TOKEN_PATTERN = /^pjob_[A-Za-z0-9_-]{43}$/;
+const ARTIFACT_NAME_PATTERN = /^[A-Za-z0-9][A-Za-z0-9_-]{0,63}$/;
+const DEFAULT_MAX_ENTRIES = 10_000;
+const DEFAULT_MAX_BYTES = 4 * 1024 * 1024 * 1024;
+const DEFAULT_CHUNK_BYTES = 64 * 1024;
+const LEAK_MARKERS = [
+    "addons/godot_mcp",
+    "godot_mcp/runtime",
+    "godot-mcp://",
+    "runtime_harness.gd",
+    "godot_mcp_unsafe",
+    "godotmcpruntimeharness",
+    "godotmcpbridgeclient",
+    "godotmcpprojectoperations",
+    "godot_mcp_runtime:hello",
+    ".godot-mcp-unsafe-fixture",
+];
+function artifactError(code, message) {
+    return new GodotMcpException({
+        code,
+        message,
+        retryable: false,
+        correlationId: randomUUID(),
+        partialEffects: code === "EXPORT_LEAK_DETECTED",
+        rollback: "not_needed",
+    });
+}
+function validateIdentity(jobToken, artifactName) {
+    if (!JOB_TOKEN_PATTERN.test(jobToken) || (artifactName !== undefined && !ARTIFACT_NAME_PATTERN.test(artifactName))) {
+        throw artifactError("PATH_DENIED", "Artifact identity is invalid");
+    }
+}
+async function ensurePlainDirectory(root, segments, create) {
+    let current = root;
+    const rootMetadata = await lstat(current).catch(() => undefined);
+    if (!rootMetadata || rootMetadata.isSymbolicLink() || !rootMetadata.isDirectory()) {
+        throw artifactError("PATH_DENIED", "Artifact root must be a regular non-symlink directory");
+    }
+    for (const segment of segments) {
+        current = join(current, segment);
+        let metadata = await lstat(current).catch(() => undefined);
+        if (!metadata && create) {
+            await mkdir(current, { mode: 0o700 }).catch(async (error) => {
+                if (!(await lstat(current).catch(() => undefined)))
+                    throw error;
+            });
+            metadata = await lstat(current).catch(() => undefined);
+        }
+        if (!metadata)
+            throw artifactError("PRECONDITION_FAILED", "Artifact directory is unavailable");
+        if (metadata.isSymbolicLink() || !metadata.isDirectory())
+            throw artifactError("PATH_DENIED", "Artifact directories must not be symbolic links");
+    }
+    return current;
+}
+export async function scanArtifactDirectory(directory, options = {}) {
+    const root = resolve(directory);
+    const rootMetadata = await lstat(root).catch(() => undefined);
+    if (!rootMetadata || rootMetadata.isSymbolicLink() || !rootMetadata.isDirectory()) {
+        throw artifactError("PATH_DENIED", "Artifact scan root must be a regular non-symlink directory");
+    }
+    const maxEntries = options.maxEntries ?? DEFAULT_MAX_ENTRIES;
+    const maxBytes = options.maxBytes ?? DEFAULT_MAX_BYTES;
+    const chunkBytes = options.chunkBytes ?? DEFAULT_CHUNK_BYTES;
+    if (!Number.isInteger(maxEntries) || maxEntries < 1 || maxEntries > DEFAULT_MAX_ENTRIES)
+        throw artifactError("PAYLOAD_TOO_LARGE", "Artifact entry limit is invalid");
+    if (!Number.isInteger(maxBytes) || maxBytes < 1 || maxBytes > DEFAULT_MAX_BYTES)
+        throw artifactError("PAYLOAD_TOO_LARGE", "Artifact byte limit is invalid");
+    if (!Number.isInteger(chunkBytes) || chunkBytes < 1 || chunkBytes > DEFAULT_CHUNK_BYTES)
+        throw artifactError("PAYLOAD_TOO_LARGE", "Artifact scan chunk is invalid");
+    const paths = [];
+    async function visit(current) {
+        const entries = await readdir(current, { withFileTypes: true });
+        entries.sort((left, right) => left.name.localeCompare(right.name));
+        for (const entry of entries) {
+            const path = join(current, entry.name);
+            const metadata = await lstat(path);
+            if (metadata.isSymbolicLink())
+                throw artifactError("PATH_DENIED", "Artifact trees may not contain symbolic links");
+            if (metadata.isDirectory()) {
+                await visit(path);
+            }
+            else if (metadata.isFile()) {
+                paths.push(path);
+                if (paths.length > maxEntries)
+                    throw artifactError("PAYLOAD_TOO_LARGE", "Artifact contains too many files");
+            }
+            else {
+                throw artifactError("PATH_DENIED", "Artifact trees may contain only regular files and directories");
+            }
+        }
+    }
+    await visit(root);
+    if (paths.length === 0)
+        throw artifactError("PRECONDITION_FAILED", "Artifact directory is empty");
+    const findings = [];
+    const entries = [];
+    let totalBytes = 0;
+    const longestMarker = Math.max(...LEAK_MARKERS.map((marker) => marker.length));
+    for (const path of paths.sort()) {
+        const relativePath = relative(root, path).split(sep).join("/");
+        if (relativePath.startsWith("../") || relativePath === "..")
+            throw artifactError("PATH_DENIED", "Artifact path escaped its owned root");
+        const pathLower = relativePath.toLowerCase();
+        for (const marker of LEAK_MARKERS) {
+            if (pathLower.includes(marker) && findings.length < 64)
+                findings.push({ relativePath, marker });
+        }
+        const hash = createHash("sha256");
+        let byteLength = 0;
+        let tail = "";
+        for await (const rawChunk of createReadStream(path, { highWaterMark: chunkBytes })) {
+            const chunk = rawChunk;
+            hash.update(chunk);
+            byteLength += chunk.byteLength;
+            totalBytes += chunk.byteLength;
+            if (totalBytes > maxBytes)
+                throw artifactError("PAYLOAD_TOO_LARGE", "Artifact exceeds the scan byte limit");
+            const text = `${tail}${chunk.toString("latin1").toLowerCase()}`;
+            for (const marker of LEAK_MARKERS) {
+                if (text.includes(marker) && findings.length < 64 && !findings.some((finding) => finding.relativePath === relativePath && finding.marker === marker)) {
+                    findings.push({ relativePath, marker });
+                }
+            }
+            tail = text.slice(-(longestMarker - 1));
+        }
+        entries.push({ relativePath, byteLength, sha256: hash.digest("hex") });
+    }
+    const sha256 = createHash("sha256").update(canonicalJson(entries)).digest("hex");
+    return { leakFree: findings.length === 0, findings, entries, byteLength: totalBytes, sha256 };
+}
+export class ArtifactStore {
+    projectRoot;
+    constructor(projectRoot) {
+        this.projectRoot = projectRoot;
+    }
+    async allocate(jobToken, artifactName) {
+        validateIdentity(jobToken, artifactName);
+        const parent = await ensurePlainDirectory(this.projectRoot, [".godot", "evidence", "godot-mcp", "artifacts"], true);
+        const path = join(parent, jobToken);
+        if (await lstat(path).catch(() => undefined))
+            throw artifactError("CONFLICT", "Artifact job directory already exists");
+        await mkdir(path, { mode: 0o700 });
+        const metadata = await lstat(path);
+        if (metadata.isSymbolicLink() || !metadata.isDirectory())
+            throw artifactError("PATH_DENIED", "Artifact job directory is invalid");
+        return { path };
+    }
+    async finalize(jobToken, artifactName) {
+        validateIdentity(jobToken, artifactName);
+        const path = await ensurePlainDirectory(this.projectRoot, [".godot", "evidence", "godot-mcp", "artifacts", jobToken], false);
+        const scan = await scanArtifactDirectory(path);
+        if (!scan.leakFree)
+            throw artifactError("EXPORT_LEAK_DETECTED", "Export artifact contains Godot MCP components");
+        const sha256 = createHash("sha256").update(canonicalJson({ name: artifactName, entries: scan.entries })).digest("hex");
+        return ProjectArtifactManifestSchema.parse({
+            uri: `godot-mcp://artifact/${jobToken}/${sha256}`,
+            name: artifactName,
+            byteLength: scan.byteLength,
+            sha256,
+            entryCount: scan.entries.length,
+            leakFree: true,
+        });
+    }
+}
+//# sourceMappingURL=artifactStore.js.map

package/dist/project/artifactStore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifactStore.js","sourceRoot":"","sources":["../../src/project/artifactStore.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAC3C,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAEzD,OAAO,EAAE,aAAa,EAAE,6BAA6B,EAAgC,MAAM,qBAAqB,CAAC;AAEjH,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAEjD,MAAM,iBAAiB,GAAG,0BAA0B,CAAC;AACrD,MAAM,qBAAqB,GAAG,kCAAkC,CAAC;AACjE,MAAM,mBAAmB,GAAG,MAAM,CAAC;AACnC,MAAM,iBAAiB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC;AACjD,MAAM,mBAAmB,GAAG,EAAE,GAAG,IAAI,CAAC;AACtC,MAAM,YAAY,GAAG;IACnB,kBAAkB;IAClB,mBAAmB;IACnB,cAAc;IACd,oBAAoB;IACpB,kBAAkB;IAClB,wBAAwB;IACxB,sBAAsB;IACtB,2BAA2B;IAC3B,yBAAyB;IACzB,2BAA2B;CACnB,CAAC;AAEX,SAAS,aAAa,CACpB,IAAuG,EACvG,OAAe;IAEf,OAAO,IAAI,iBAAiB,CAAC;QAC3B,IAAI;QACJ,OAAO;QACP,SAAS,EAAE,KAAK;QAChB,aAAa,EAAE,UAAU,EAAE;QAC3B,cAAc,EAAE,IAAI,KAAK,sBAAsB;QAC/C,QAAQ,EAAE,YAAY;KACvB,CAAC,CAAC;AACL,CAAC;AAED,SAAS,gBAAgB,CAAC,QAAgB,EAAE,YAAqB;IAC/D,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,YAAY,KAAK,SAAS,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC;QACnH,MAAM,aAAa,CAAC,aAAa,EAAE,8BAA8B,CAAC,CAAC;IACrE,CAAC;AACH,CAAC;AAED,KAAK,UAAU,oBAAoB,CAAC,IAAY,EAAE,QAAkB,EAAE,MAAe;IACnF,IAAI,OAAO,GAAG,IAAI,CAAC;IACnB,MAAM,YAAY,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACjE,IAAI,CAAC,YAAY,IAAI,YAAY,CAAC,cAAc,EAAE,IAAI,CAAC,YAAY,CAAC,WAAW,EAAE,EAAE,CAAC;QAClF,MAAM,aAAa,CAAC,aAAa,EAAE,uDAAuD,CAAC,CAAC;IAC9F,CAAC;IACD,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACjC,IAAI,QAAQ,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC3D,IAAI,CAAC,QAAQ,IAAI,MAAM,EAAE,CAAC;YACxB,MAAM,KAAK,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,KAAc,EAAE,EAAE;gBACnE,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;oBAAE,MAAM,KAAK,CAAC;YAClE,CAAC,CAAC,CAAC;YACH,QAAQ,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACzD,CAAC;QACD,IAAI,CAAC,QAAQ;YAAE,MAAM,aAAa,CAAC,qBAAqB,EAAE,mCAAmC,CAAC,CAAC;QAC/F,IAAI,QAAQ,CAAC,cAAc,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE;YAAE,MAAM,aAAa,CAAC,aAAa,EAAE,iDAAiD,CAAC,CAAC;IAClJ,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AA2BD,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,SAAiB,EAAE,UAA+B,EAAE;IAC9F,MAAM,IAAI,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IAChC,MAAM,YAAY,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC9D,IAAI,CAAC,YAAY,IAAI,YAAY,CAAC,cAAc,EAAE,IAAI,CAAC,YAAY,CAAC,WAAW,EAAE,EAAE,CAAC;QAClF,MAAM,aAAa,CAAC,aAAa,EAAE,4DAA4D,CAAC,CAAC;IACnG,CAAC;IACD,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,mBAAmB,CAAC;IAC7D,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,iBAAiB,CAAC;IACvD,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,mBAAmB,CAAC;IAC7D,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,UAAU,GAAG,CAAC,IAAI,UAAU,GAAG,mBAAmB;QAAE,MAAM,aAAa,CAAC,mBAAmB,EAAE,iCAAiC,CAAC,CAAC;IACrK,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,CAAC,IAAI,QAAQ,GAAG,iBAAiB;QAAE,MAAM,aAAa,CAAC,mBAAmB,EAAE,gCAAgC,CAAC,CAAC;IAC5J,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,UAAU,GAAG,CAAC,IAAI,UAAU,GAAG,mBAAmB;QAAE,MAAM,aAAa,CAAC,mBAAmB,EAAE,gCAAgC,CAAC,CAAC;IAEpK,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,UAAU,KAAK,CAAC,OAAe;QAClC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAChE,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QACnE,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACvC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;YACnC,IAAI,QAAQ,CAAC,cAAc,EAAE;gBAAE,MAAM,aAAa,CAAC,aAAa,EAAE,+CAA+C,CAAC,CAAC;YACnH,IAAI,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC;gBAC3B,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;YACpB,CAAC;iBAAM,IAAI,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;gBAC7B,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACjB,IAAI,KAAK,CAAC,MAAM,GAAG,UAAU;oBAAE,MAAM,aAAa,CAAC,mBAAmB,EAAE,kCAAkC,CAAC,CAAC;YAC9G,CAAC;iBAAM,CAAC;gBACN,MAAM,aAAa,CAAC,aAAa,EAAE,+DAA+D,CAAC,CAAC;YACtG,CAAC;QACH,CAAC;IACH,CAAC;IACD,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;IAClB,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,aAAa,CAAC,qBAAqB,EAAE,6BAA6B,CAAC,CAAC;IAElG,MAAM,QAAQ,GAA0B,EAAE,CAAC;IAC3C,MAAM,OAAO,GAAwB,EAAE,CAAC;IACxC,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IAC/E,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;QAChC,MAAM,YAAY,GAAG,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC/D,IAAI,YAAY,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,YAAY,KAAK,IAAI;YAAE,MAAM,aAAa,CAAC,aAAa,EAAE,sCAAsC,CAAC,CAAC;QACxI,MAAM,SAAS,GAAG,YAAY,CAAC,WAAW,EAAE,CAAC;QAC7C,KAAK,MAAM,MAAM,IAAI,YAAY,EAAE,CAAC;YAClC,IAAI,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,MAAM,GAAG,EAAE;gBAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC,CAAC;QAClG,CAAC;QACD,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;QAClC,IAAI,UAAU,GAAG,CAAC,CAAC;QACnB,IAAI,IAAI,GAAG,EAAE,CAAC;QACd,IAAI,KAAK,EAAE,MAAM,QAAQ,IAAI,gBAAgB,CAAC,IAAI,EAAE,EAAE,aAAa,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;YACnF,MAAM,KAAK,GAAG,QAAkB,CAAC;YACjC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACnB,UAAU,IAAI,KAAK,CAAC,UAAU,CAAC;YAC/B,UAAU,IAAI,KAAK,CAAC,UAAU,CAAC;YAC/B,IAAI,UAAU,GAAG,QAAQ;gBAAE,MAAM,aAAa,CAAC,mBAAmB,EAAE,sCAAsC,CAAC,CAAC;YAC5G,MAAM,IAAI,GAAG,GAAG,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;YAChE,KAAK,MAAM,MAAM,IAAI,YAAY,EAAE,CAAC;gBAClC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,MAAM,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,YAAY,KAAK,YAAY,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,CAAC,EAAE,CAAC;oBACrJ,QAAQ,CAAC,IAAI,CAAC,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC,CAAC;gBAC1C,CAAC;YACH,CAAC;YACD,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,aAAa,GAAG,CAAC,CAAC,CAAC,CAAC;QAC1C,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACzE,CAAC;IACD,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACjF,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;AAChG,CAAC;AAED,MAAM,OAAO,aAAa;IACK;IAA7B,YAA6B,WAAmB;QAAnB,gBAAW,GAAX,WAAW,CAAQ;IAAG,CAAC;IAEpD,KAAK,CAAC,QAAQ,CAAC,QAAgB,EAAE,YAAoB;QACnD,gBAAgB,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;QACzC,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE,UAAU,EAAE,WAAW,EAAE,WAAW,CAAC,EAAE,IAAI,CAAC,CAAC;QACpH,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QACpC,IAAI,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC;YAAE,MAAM,aAAa,CAAC,UAAU,EAAE,uCAAuC,CAAC,CAAC;QACvH,MAAM,KAAK,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACnC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,QAAQ,CAAC,cAAc,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE;YAAE,MAAM,aAAa,CAAC,aAAa,EAAE,mCAAmC,CAAC,CAAC;QAClI,OAAO,EAAE,IAAI,EAAE,CAAC;IAClB,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,QAAgB,EAAE,YAAoB;QACnD,gBAAgB,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;QACzC,MAAM,IAAI,GAAG,MAAM,oBAAoB,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE,UAAU,EAAE,WAAW,EAAE,WAAW,EAAE,QAAQ,CAAC,EAAE,KAAK,CAAC,CAAC;QAC7H,MAAM,IAAI,GAAG,MAAM,qBAAqB,CAAC,IAAI,CAAC,CAAC;QAC/C,IAAI,CAAC,IAAI,CAAC,QAAQ;YAAE,MAAM,aAAa,CAAC,sBAAsB,EAAE,+CAA+C,CAAC,CAAC;QACjH,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvH,OAAO,6BAA6B,CAAC,KAAK,CAAC;YACzC,GAAG,EAAE,wBAAwB,QAAQ,IAAI,MAAM,EAAE;YACjD,IAAI,EAAE,YAAY;YAClB,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,MAAM;YACN,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM;YAC/B,QAAQ,EAAE,IAAI;SACf,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/project/pathPolicy.d.ts

@@ -0,0 +1,4 @@
+import type { ProjectIdentity } from "@godot-mcp/protocol";
+export type ProjectPathMode = "read" | "write";
+export declare function resolveProjectPath(identity: ProjectIdentity, resPath: string, mode: ProjectPathMode): Promise<string>;
+//# sourceMappingURL=pathPolicy.d.ts.map

package/dist/project/pathPolicy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pathPolicy.d.ts","sourceRoot":"","sources":["../../src/project/pathPolicy.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAI3D,MAAM,MAAM,eAAe,GAAG,MAAM,GAAG,OAAO,CAAC;AAsC/C,wBAAsB,kBAAkB,CACtC,QAAQ,EAAE,eAAe,EACzB,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,eAAe,GACpB,OAAO,CAAC,MAAM,CAAC,CA2CjB"}

package/dist/project/pathPolicy.js

@@ -0,0 +1,74 @@
+import { randomUUID } from "node:crypto";
+import { realpath } from "node:fs/promises";
+import { dirname, isAbsolute, relative as relativePath, resolve, sep } from "node:path";
+import { GodotMcpException } from "../errors.js";
+const CREDENTIAL_FILENAME = /(?:credential|secret|token|api[-_.]?key|private[-_.]?key|id_rsa)/i;
+function pathDenied(resourcePath) {
+    return new GodotMcpException({
+        code: "PATH_DENIED",
+        message: `Project path is denied: ${resourcePath}`,
+        retryable: false,
+        correlationId: randomUUID(),
+        partialEffects: false,
+        rollback: "not_needed",
+    });
+}
+function isContained(root, target) {
+    const relative = relativePath(root, target);
+    return relative === "" || (relative !== ".." && !relative.startsWith(`..${sep}`) && !isAbsolute(relative));
+}
+async function nearestExistingRealParent(candidate, root) {
+    let current = candidate;
+    while (isContained(root, current)) {
+        try {
+            return await realpath(current);
+        }
+        catch (error) {
+            if (error.code !== "ENOENT") {
+                throw error;
+            }
+        }
+        if (current === root) {
+            break;
+        }
+        current = dirname(current);
+    }
+    throw pathDenied(candidate);
+}
+export async function resolveProjectPath(identity, resPath, mode) {
+    if (!resPath.startsWith("res://") || resPath.includes("\0")) {
+        throw pathDenied(resPath);
+    }
+    const relative = resPath.slice("res://".length);
+    const parts = relative.split("/");
+    if (relative.length === 0 ||
+        isAbsolute(relative) ||
+        parts.some((part) => part === ".." ||
+            part.toLowerCase() === ".git" ||
+            /^\.env(?:\.|$)/i.test(part) ||
+            CREDENTIAL_FILENAME.test(part))) {
+        throw pathDenied(resPath);
+    }
+    const candidate = resolve(identity.rootRealPath, relative);
+    if (!isContained(identity.rootRealPath, candidate)) {
+        throw pathDenied(resPath);
+    }
+    let anchor;
+    try {
+        anchor =
+            mode === "read"
+                ? await realpath(candidate)
+                : await nearestExistingRealParent(candidate, identity.rootRealPath);
+    }
+    catch (error) {
+        if (error instanceof GodotMcpException) {
+            throw error;
+        }
+        throw pathDenied(resPath);
+    }
+    if (!isContained(identity.rootRealPath, anchor)) {
+        throw pathDenied(resPath);
+    }
+    return candidate;
+}
+//# sourceMappingURL=pathPolicy.js.map

package/dist/project/pathPolicy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pathPolicy.js","sourceRoot":"","sources":["../../src/project/pathPolicy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,IAAI,YAAY,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAIxF,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAIjD,MAAM,mBAAmB,GAAG,mEAAmE,CAAC;AAEhG,SAAS,UAAU,CAAC,YAAoB;IACtC,OAAO,IAAI,iBAAiB,CAAC;QAC3B,IAAI,EAAE,aAAa;QACnB,OAAO,EAAE,2BAA2B,YAAY,EAAE;QAClD,SAAS,EAAE,KAAK;QAChB,aAAa,EAAE,UAAU,EAAE;QAC3B,cAAc,EAAE,KAAK;QACrB,QAAQ,EAAE,YAAY;KACvB,CAAC,CAAC;AACL,CAAC;AAED,SAAS,WAAW,CAAC,IAAY,EAAE,MAAc;IAC/C,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC5C,OAAO,QAAQ,KAAK,EAAE,IAAI,CAAC,QAAQ,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC;AAC7G,CAAC;AAED,KAAK,UAAU,yBAAyB,CAAC,SAAiB,EAAE,IAAY;IACtE,IAAI,OAAO,GAAG,SAAS,CAAC;IACxB,OAAO,WAAW,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,CAAC;QAClC,IAAI,CAAC;YACH,OAAO,MAAM,QAAQ,CAAC,OAAO,CAAC,CAAC;QACjC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACvD,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;QACD,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACrB,MAAM;QACR,CAAC;QACD,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC7B,CAAC;IACD,MAAM,UAAU,CAAC,SAAS,CAAC,CAAC;AAC9B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,QAAyB,EACzB,OAAe,EACf,IAAqB;IAErB,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5D,MAAM,UAAU,CAAC,OAAO,CAAC,CAAC;IAC5B,CAAC;IAED,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAChD,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAClC,IACE,QAAQ,CAAC,MAAM,KAAK,CAAC;QACrB,UAAU,CAAC,QAAQ,CAAC;QACpB,KAAK,CAAC,IAAI,CACR,CAAC,IAAI,EAAE,EAAE,CACP,IAAI,KAAK,IAAI;YACb,IAAI,CAAC,WAAW,EAAE,KAAK,MAAM;YAC7B,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC;YAC5B,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,CACjC,EACD,CAAC;QACD,MAAM,UAAU,CAAC,OAAO,CAAC,CAAC;IAC5B,CAAC;IAED,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;IAC3D,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,YAAY,EAAE,SAAS,CAAC,EAAE,CAAC;QACnD,MAAM,UAAU,CAAC,OAAO,CAAC,CAAC;IAC5B,CAAC;IAED,IAAI,MAAc,CAAC;IACnB,IAAI,CAAC;QACH,MAAM;YACJ,IAAI,KAAK,MAAM;gBACb,CAAC,CAAC,MAAM,QAAQ,CAAC,SAAS,CAAC;gBAC3B,CAAC,CAAC,MAAM,yBAAyB,CAAC,SAAS,EAAE,QAAQ,CAAC,YAAY,CAAC,CAAC;IAC1E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,iBAAiB,EAAE,CAAC;YACvC,MAAM,KAAK,CAAC;QACd,CAAC;QACD,MAAM,UAAU,CAAC,OAAO,CAAC,CAAC;IAC5B,CAAC;IAED,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC,EAAE,CAAC;QAChD,MAAM,UAAU,CAAC,OAAO,CAAC,CAAC;IAC5B,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/project/projectConfig.d.ts

@@ -0,0 +1,10 @@
+import { z } from "zod";
+export declare const ProjectConfigSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    projectId: z.ZodUUID;
+    addonVersion: z.ZodLiteral<"0.1.0">;
+    allowedResourceRoots: z.ZodDefault<z.ZodArray<z.ZodString>>;
+}, z.core.$strip>;
+export type ProjectConfig = z.infer<typeof ProjectConfigSchema>;
+export declare function createProjectConfig(root: string): Promise<ProjectConfig>;
+//# sourceMappingURL=projectConfig.d.ts.map

package/dist/project/projectConfig.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"projectConfig.d.ts","sourceRoot":"","sources":["../../src/project/projectConfig.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAKxB,eAAO,MAAM,mBAAmB;;;;;iBAK9B,CAAC;AAEH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AA6BhE,wBAAsB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CAuB9E"}