dominus-cli 2.1.0 → 2.2.0

package/CHANGELOG.md

@@ -1,5 +1,49 @@
 # Changelog
 
+## 2.2.0 (2026-07-13)
+
+### MCP-native multi-agent coordinator
+
+- Added `run_parallel_task` to the published MCP server. It uses the MCP client's
+  model through standard Sampling, so Dominus still requires no AI provider key.
+- Added deterministic path-based task partitioning. UI and generic roots are split
+  by immediate child branches and distributed across one to five workers.
+- Workers run concurrently and receive bounded hierarchy plus live typed property
+  evidence for only their owned scopes. Workers are proposal-only and never receive
+  Studio mutation tools.
+- Added strict worker proposal and coordinator decision schemas. Existing instance
+  refs must exactly match supplied ID/path pairs, and every mutation must remain
+  inside the worker's owned branches.
+- Added ancestor/descendant conflict detection and coordinator-only operation
+  ordering. The coordinator may select complete validated proposals but cannot
+  invent, rewrite, or partially accept worker operations.
+- Final writes use one atomic `studio_apply` batch. Dominus then reads the root and
+  affected properties back, checks creates and moves, and performs at most one
+  bounded repair pass before reporting verification evidence.
+- Parallel planning refuses truncated hierarchy evidence, and generic property
+  mutations can no longer bypass revision checks by writing script `Source`.
+- Added summary-level MCP logging events for worker starts/completions, proposal
+  decisions, application, and verification without exposing full model traces.
+- Clients without Sampling receive a clear capability response and keep the normal
+  single-agent inspect-plan-apply-verify workflow.
+
+### Studio connection reliability
+
+- Made pending WebStream connection attempts cancellable so overlapping retries
+  cannot strand a waiting coroutine or deadlock future reconnects.
+- Serialized reconnect attempts and reset failed open transports explicitly.
+- Changed the Dominus 2 toolbar button to always force an immediate reconnect
+  instead of toggling automatic reconnection off.
+
+### Typed mutations and packaging
+
+- Fixed valid Enum values such as `Slate`, `Wood`, `Glass`, and `Ball` being
+  rejected by resolving names against the live Enum type's items.
+- Removed the stale binary `.rbxm` build artifact. The package and installer now
+  use the single canonical `.rbxmx` plugin build.
+- Corrected documentation for the 17-tool MCP catalog, canonical plugin format,
+  and optional Studio restart behavior.
+
 ## 2.1.0 (2026-07-12)
 
 Dominus has been rewritten as an MCP-first Roblox Studio engineering server.
@@ -8,7 +52,7 @@ Dominus has been rewritten as an MCP-first Roblox Studio engineering server.
 
 - Removed the Ink/TUI command from the published binaries. Dominus now relies on
   the MCP host's model, context, consent UI, and agent runtime.
-- Replaced the monolithic legacy catalog with 17 focused tools for connection
+- Replaced the monolithic legacy catalog with 16 focused tools for connection
   management, inspection, transactional changes, UI, scripts, tests, and docs.
 - Added strict input schemas, output schemas, `structuredContent`, text fallbacks,
   `isError`, and accurate read-only/destructive/idempotent/open-world annotations.
@@ -20,7 +64,8 @@ Dominus has been rewritten as an MCP-first Roblox Studio engineering server.
 ### Secure Studio bridge
 
 - Bound the WebSocket bridge to `127.0.0.1` instead of every network interface.
-- Added a persistent 256-bit bridge token and six-digit first-use pairing flow.
+- Added a persistent 256-bit bridge token that is provisioned directly into the
+  local plugin by `dominus-install-plugin`; users do not complete a pairing flow.
 - Authenticated relay/controller processes as well as Studio plugin connections.
 - Added one MiB payload limits, socket rate limits, handshake timeouts, bounded
   request timeouts, and strict message-envelope validation.
@@ -36,7 +81,7 @@ Dominus has been rewritten as an MCP-first Roblox Studio engineering server.
   same place ID are now safe and independently selectable.
 - Relay clients carry their selected connection on each request, so separate MCP
   processes cannot overwrite each other's active target.
-- Added `dominus_status`, `dominus_pair_studio`, and `dominus_select_studio`.
+- Added `dominus_status` and `dominus_select_studio`.
 
 ### Studio plugin harness
 
@@ -66,7 +111,7 @@ Dominus has been rewritten as an MCP-first Roblox Studio engineering server.
   installer implementation.
 - The published runtime dependency set is MCP-only; old CLI dependencies are
   development-only and excluded from the MCP bundle.
-- Added transport tests for auth, pairing, relays, duplicate places, wrong-target
+- Added transport tests for auth, credential rejection, relays, duplicate places, wrong-target
   responses, and disconnect isolation.
 - Added in-memory MCP conformance tests for the tool catalog, structured outputs,
   resources, prompts, routing, and error results.
@@ -81,95 +126,95 @@ Dominus has been rewritten as an MCP-first Roblox Studio engineering server.
   `instanceId` and/or `pathSegments`.
 - Script updates require `expectedRevision` from `studio_read_script`.
 - Existing UI is not replaced unless `replaceExisting: true` is supplied.
-
-## 0.5.5 (2026-04-23)
-
-### New MCP Tools (30 total, up from 24)
-
-- **`move_instance`** — Reparent an instance preserving all descendants. Sets ChangeHistoryService waypoint.
-- **`bulk_set_properties`** — Set properties on multiple instances in one call. Explicit paths or className filter mode.
-- **`find_replace_scripts`** — Find and replace across all scripts with optional Lua pattern matching and dry run preview.
-- **`undo`** — Undo last action (ChangeHistoryService). Like Ctrl+Z.
-- **`redo`** — Redo last undone action. Like Ctrl+Y.
-
-### Improvements
-
-- **`get_properties` now supports compact mode** — Same filtering as `get_descendants_properties`. Strips read-only, nil, deprecated, and default-valued properties by default. The previous version returned all ~50 properties per instance even though most were noise.
-- **Fixed code injection in `clone_instance`, `group_instances`, `build_multiple`** — Instance names and paths with special characters (quotes, backslashes) no longer break generated Luau code.
-- **`build_multiple` now supports `rgb()` colors and `canCollide`** — Previously only handled `#hex` and BrickColor names; `rgb(255,0,0)` would silently fail.
-- **Better tool descriptions** — More specific descriptions help AI models pick the right tool. `get_properties` disambiguates vs `serialize_ui` and `get_descendants_properties`.
-- **Shared `luaStr()` and `resolvePath()` helpers** — Centralized safe string generation for all code-gen tools.
-
-## 0.5.4 (2026-04-23)
-
-### Fixes
-
-- **Rebuilt plugin** — 0.5.3 shipped a stale `Dominus.rbxm` missing the compact property filtering and protocol changes. This release includes the correctly built plugin.
-
-## 0.5.3 (2026-04-23)
-
-### Improvements
-
-- **Compact `get_descendants_properties`** — Now strips read-only, nil, deprecated, and default-valued properties by default, reducing response size by ~80%. Pass `compact: false` for the full dump.
-- **`serialize_ui` exposed as MCP tool** — Was previously only in the internal tool registry. Now available to all MCP clients (Copilot, Cursor, Claude, etc.) for converting existing Roblox UI into clean JSON trees.
-- **UI → Roact/React conversion guidance** — System prompt and internal memory now teach the agent the full workflow: `serialize_ui` → JSON tree → Roact/React component with correct type mappings (UDim2, Color3, Vector2, enums, FontFace).
-- **Smarter tool selection** — Agent now prefers `serialize_ui` over `get_descendants_properties` for UI conversion tasks, avoiding context bloat.
-
-## 0.2.1 (2026-02-24)
-
-### New
-
-- **Auto-update checker** — On startup, Dominus checks npm for newer versions
-  and prints an upgrade notice. Cached for 4 hours, non-blocking, never throws.
-
-### Bug Fixes
-
-- **MCP server crashes on EADDRINUSE** — `dominus mcp` would crash if port 18088
-  was already held by a running `dominus start` (or another MCP instance). The MCP
-  server now checks for an existing listener and connects as a relay client instead
-  of trying to bind the same port.
-
-### New MCP Tools (22 total, up from 14)
-
-- **`get_class_info`** — Look up the full schema of any Roblox class via
-  ReflectionService (properties, methods, events with types).
-- **`create_ui`** — Create an entire UI tree in one call with a declarative JSON
-  spec. Auto-coerces UDim2, Color3, Font, and enums. ~10x faster than `run_code`.
-- **`create_part`** — One-call Part creation with position, size, color, material,
-  shape, transparency, anchored, and collision settings.
-- **`clone_instance`** — Clone an instance with optional rename, reparent, and
-  position offset.
-- **`group_instances`** — Group multiple instances into a Model or Folder.
-- **`build_multiple`** — Batch-create many parts/instances in a single round-trip.
-- **`execute_run_test`** — Enter Run mode via `StudioTestService:ExecuteRunModeAsync()`
-  with pass-through args and result capture.
-- **`execute_play_test`** — Enter Play mode via `StudioTestService:ExecutePlayModeAsync()`
-  for full client-server simulation tests.
-
-### New CLI Features
-
-- **`dominus mcp-install`** — Auto-install MCP config into Cursor, VS Code,
-  Claude Desktop, Windsurf, and Claude Code with one command.
-- **`dominus mcp-setup`** — Print manual MCP configuration instructions.
-- **Relay client architecture** — `dominus start` can now connect as a relay
-  client to an existing MCP-owned WebSocket server, allowing the TUI and MCP
-  to coexist on the same port.
-
-### Plugin Improvements
-
-- Enhanced `Properties.lua` with broader property type support.
-- Improved `Reflection.lua` for richer class metadata.
-- Updated `TestRunner.lua` with Run/Play mode test support.
-- New `UIBuilder.lua` module for server-side declarative UI construction.
-
-### Other Changes
-
-- Multi-provider AI config improvements (OpenRouter, xAI, Gemini, custom).
-- TUI setup wizard for first-run API key and provider configuration.
-- Improved system prompt with builder-tool awareness.
-- WebSocket server now supports controller relay connections.
-
-## 0.1.0 (2026-02-23)
-
-- Initial release — 14 MCP tools, TUI agent, persistent memory, Roblox Studio
-  WebSocket bridge.
+
+## 0.5.5 (2026-04-23)
+
+### New MCP Tools (30 total, up from 24)
+
+- **`move_instance`** — Reparent an instance preserving all descendants. Sets ChangeHistoryService waypoint.
+- **`bulk_set_properties`** — Set properties on multiple instances in one call. Explicit paths or className filter mode.
+- **`find_replace_scripts`** — Find and replace across all scripts with optional Lua pattern matching and dry run preview.
+- **`undo`** — Undo last action (ChangeHistoryService). Like Ctrl+Z.
+- **`redo`** — Redo last undone action. Like Ctrl+Y.
+
+### Improvements
+
+- **`get_properties` now supports compact mode** — Same filtering as `get_descendants_properties`. Strips read-only, nil, deprecated, and default-valued properties by default. The previous version returned all ~50 properties per instance even though most were noise.
+- **Fixed code injection in `clone_instance`, `group_instances`, `build_multiple`** — Instance names and paths with special characters (quotes, backslashes) no longer break generated Luau code.
+- **`build_multiple` now supports `rgb()` colors and `canCollide`** — Previously only handled `#hex` and BrickColor names; `rgb(255,0,0)` would silently fail.
+- **Better tool descriptions** — More specific descriptions help AI models pick the right tool. `get_properties` disambiguates vs `serialize_ui` and `get_descendants_properties`.
+- **Shared `luaStr()` and `resolvePath()` helpers** — Centralized safe string generation for all code-gen tools.
+
+## 0.5.4 (2026-04-23)
+
+### Fixes
+
+- **Rebuilt plugin** — 0.5.3 shipped a stale `Dominus.rbxm` missing the compact property filtering and protocol changes. This release includes the correctly built plugin.
+
+## 0.5.3 (2026-04-23)
+
+### Improvements
+
+- **Compact `get_descendants_properties`** — Now strips read-only, nil, deprecated, and default-valued properties by default, reducing response size by ~80%. Pass `compact: false` for the full dump.
+- **`serialize_ui` exposed as MCP tool** — Was previously only in the internal tool registry. Now available to all MCP clients (Copilot, Cursor, Claude, etc.) for converting existing Roblox UI into clean JSON trees.
+- **UI → Roact/React conversion guidance** — System prompt and internal memory now teach the agent the full workflow: `serialize_ui` → JSON tree → Roact/React component with correct type mappings (UDim2, Color3, Vector2, enums, FontFace).
+- **Smarter tool selection** — Agent now prefers `serialize_ui` over `get_descendants_properties` for UI conversion tasks, avoiding context bloat.
+
+## 0.2.1 (2026-02-24)
+
+### New
+
+- **Auto-update checker** — On startup, Dominus checks npm for newer versions
+  and prints an upgrade notice. Cached for 4 hours, non-blocking, never throws.
+
+### Bug Fixes
+
+- **MCP server crashes on EADDRINUSE** — `dominus mcp` would crash if port 18088
+  was already held by a running `dominus start` (or another MCP instance). The MCP
+  server now checks for an existing listener and connects as a relay client instead
+  of trying to bind the same port.
+
+### New MCP Tools (22 total, up from 14)
+
+- **`get_class_info`** — Look up the full schema of any Roblox class via
+  ReflectionService (properties, methods, events with types).
+- **`create_ui`** — Create an entire UI tree in one call with a declarative JSON
+  spec. Auto-coerces UDim2, Color3, Font, and enums. ~10x faster than `run_code`.
+- **`create_part`** — One-call Part creation with position, size, color, material,
+  shape, transparency, anchored, and collision settings.
+- **`clone_instance`** — Clone an instance with optional rename, reparent, and
+  position offset.
+- **`group_instances`** — Group multiple instances into a Model or Folder.
+- **`build_multiple`** — Batch-create many parts/instances in a single round-trip.
+- **`execute_run_test`** — Enter Run mode via `StudioTestService:ExecuteRunModeAsync()`
+  with pass-through args and result capture.
+- **`execute_play_test`** — Enter Play mode via `StudioTestService:ExecutePlayModeAsync()`
+  for full client-server simulation tests.
+
+### New CLI Features
+
+- **`dominus mcp-install`** — Auto-install MCP config into Cursor, VS Code,
+  Claude Desktop, Windsurf, and Claude Code with one command.
+- **`dominus mcp-setup`** — Print manual MCP configuration instructions.
+- **Relay client architecture** — `dominus start` can now connect as a relay
+  client to an existing MCP-owned WebSocket server, allowing the TUI and MCP
+  to coexist on the same port.
+
+### Plugin Improvements
+
+- Enhanced `Properties.lua` with broader property type support.
+- Improved `Reflection.lua` for richer class metadata.
+- Updated `TestRunner.lua` with Run/Play mode test support.
+- New `UIBuilder.lua` module for server-side declarative UI construction.
+
+### Other Changes
+
+- Multi-provider AI config improvements (OpenRouter, xAI, Gemini, custom).
+- TUI setup wizard for first-run API key and provider configuration.
+- Improved system prompt with builder-tool awareness.
+- WebSocket server now supports controller relay connections.
+
+## 0.1.0 (2026-02-23)
+
+- Initial release — 14 MCP tools, TUI agent, persistent memory, Roblox Studio
+  WebSocket bridge.

package/README.md

@@ -9,11 +9,13 @@ Luau execution.
 
 - MCP-only product: the old Ink chat CLI is no longer published.
 - 17 focused tools with input/output schemas, structured results, and risk hints.
+- MCP-native parallel coordination uses the host's model through Sampling, with
+  proposal-only workers and coordinator-owned Studio writes.
 - Stable instance refs survive dots in names, renames, reparenting, and duplicate
   sibling names for the life of the Studio session.
 - Script writes require a revision from `studio_read_script`.
 - Mutation batches and UI replacement are undoable and roll back on failure.
-- The loopback Studio bridge requires a persistent token and first-use pairing.
+- The installer provisions a private bridge token into the local Studio plugin.
 - Multiple Studio windows are selected by unique connection ID, not place ID.
 - Roblox Creator Docs API lookup is built in.
 
@@ -39,7 +41,8 @@ Install or update the Studio plugin:
 dominus-install-plugin
 ```
 
-Restart Roblox Studio after installing the plugin.
+Roblox Studio normally reloads the local plugin automatically. Restart Studio
+only if the Dominus 2 toolbar button does not appear or reconnect.
 
 ## MCP configuration
 
@@ -62,7 +65,7 @@ For a version-pinned configuration that does not require a global install:
   "mcpServers": {
     "dominus": {
       "command": "npx",
-      "args": ["-y", "-p", "dominus-cli@2.1.0", "dominus-mcp"]
+      "args": ["-y", "-p", "dominus-cli@2.2.0", "dominus-mcp"]
     }
   }
 }
@@ -72,12 +75,9 @@ Restart the MCP client after changing its configuration.
 
 ## First connection
 
-1. Start the MCP client so `dominus-mcp` is running.
-2. Open Roblox Studio. The Dominus 2 plugin connects to `127.0.0.1:18088`.
-3. On first use, Studio Output prints a connection ID and six-digit pairing code.
-4. Ask the MCP agent to call `dominus_status`, then `dominus_pair_studio` with
-   that connection ID and code.
-5. Pairing is saved. Future Studio sessions authenticate automatically.
+1. Run `dominus-install-plugin`; restart Roblox Studio only if it does not reload.
+2. Start the MCP client so `dominus-mcp` is running.
+3. Open Roblox Studio. The plugin connects and authenticates automatically.
 
 If several Studio windows are open, call `dominus_select_studio` with the exact
 connection ID before editing. Two windows on the same place ID remain distinct.
@@ -96,14 +96,24 @@ For UI fidelity work, use `studio_snapshot_ui` after `studio_build_ui` and compa
 fonts, UDim2 values, colors, strokes, and hierarchy rather than relying on a
 successful write response alone.
 
+For broad tasks with independent branches, use `run_parallel_task`. Dominus
+partitions immediate child scopes, supplies each worker with hierarchy and typed
+property evidence, runs up to five Sampling workers concurrently, validates their
+proposals, and applies only the coordinator-approved atomic plan. Workers never
+receive direct write access. Clients without Sampling continue to use the normal
+single-agent workflow.
+
 ## Tool catalog
 
 Connection tools:
 
 - `dominus_status`
-- `dominus_pair_studio`
 - `dominus_select_studio`
 
+Parallel coordination:
+
+- `run_parallel_task`
+
 Studio inspection:
 
 - `studio_get_tree`
@@ -131,9 +141,10 @@ Roblox documentation:
 
 The MCP transport is stdio. The separate Studio WebSocket bridge binds only to
 `127.0.0.1`, limits messages to one MiB, rate-limits sockets, times out incomplete
-handshakes, and authenticates both Studio plugins and relay controllers. First-use
-pairing requires a code visible in Studio. The plugin only accepts an explicit
-command allowlist and contains no `loadstring` executor.
+handshakes, and authenticates both Studio plugins and relay controllers. The local
+installer injects a user-specific token into the plugin, so no manual pairing flow
+is needed. The plugin only accepts an explicit command allowlist and contains no
+`loadstring` executor.
 
 The bridge token protects against accidental or opportunistic access by unrelated
 local processes. Like other user-level credentials, it cannot protect against a

package/dist/install-plugin.js

@@ -1,30 +1,77 @@
 #!/usr/bin/env node
-import fs from 'fs';
-import os from 'os';
-import path from 'path';
+import fs3 from 'fs';
+import os2 from 'os';
+import path3 from 'path';
 import { fileURLToPath } from 'url';
+import * as crypto from 'crypto';
 
+var DOMINUS_DIR = path3.join(os2.homedir(), ".dominus");
+path3.join(DOMINUS_DIR, "config.json");
+path3.join(DOMINUS_DIR, "dominus.db");
+path3.join(DOMINUS_DIR, "rules.json");
+function ensureDir() {
+  if (!fs3.existsSync(DOMINUS_DIR)) {
+    fs3.mkdirSync(DOMINUS_DIR, { recursive: true });
+  }
+}
+function getDominusDir() {
+  ensureDir();
+  return DOMINUS_DIR;
+}
+
+// src/transport/auth.ts
+var TOKEN_FILE = "bridge-token";
+function loadOrCreateBridgeToken() {
+  const tokenPath = path3.join(getDominusDir(), TOKEN_FILE);
+  try {
+    const existing = fs3.readFileSync(tokenPath, "utf8").trim();
+    if (existing.length >= 32) return existing;
+  } catch {
+  }
+  const token = crypto.randomBytes(32).toString("base64url");
+  fs3.writeFileSync(tokenPath, `${token}
+`, { encoding: "utf8", mode: 384 });
+  try {
+    fs3.chmodSync(tokenPath, 384);
+  } catch {
+  }
+  return token;
+}
+
+// src/install-plugin.ts
+var TOKEN_PLACEHOLDER = "__DOMINUS_BRIDGE_TOKEN__";
 function getPluginDirectory() {
   if (process.platform === "win32") {
     const localAppData = process.env.LOCALAPPDATA;
     if (!localAppData) throw new Error("LOCALAPPDATA is not set");
-    return path.join(localAppData, "Roblox", "Plugins");
+    return path3.join(localAppData, "Roblox", "Plugins");
   }
   if (process.platform === "darwin") {
-    return path.join(os.homedir(), "Documents", "Roblox", "Plugins");
+    return path3.join(os2.homedir(), "Documents", "Roblox", "Plugins");
   }
-  return path.join(os.homedir(), ".local", "share", "Roblox", "Plugins");
+  return path3.join(os2.homedir(), ".local", "share", "Roblox", "Plugins");
 }
-var distDirectory = path.dirname(fileURLToPath(import.meta.url));
-var source = path.resolve(distDirectory, "..", "plugin", "Dominus.rbxm");
+var distDirectory = path3.dirname(fileURLToPath(import.meta.url));
+var source = path3.resolve(distDirectory, "..", "plugin", "Dominus.rbxmx");
 var destinationDirectory = getPluginDirectory();
-var destination = path.join(destinationDirectory, "Dominus2.rbxm");
-if (!fs.existsSync(source)) {
+var destination = path3.join(destinationDirectory, "Dominus2.rbxmx");
+if (!fs3.existsSync(source)) {
   throw new Error(`Packaged plugin not found at ${source}. Run pnpm build:plugin first.`);
 }
-fs.mkdirSync(destinationDirectory, { recursive: true });
-fs.copyFileSync(source, destination);
+var template = fs3.readFileSync(source, "utf8");
+if (!template.includes(TOKEN_PLACEHOLDER)) {
+  throw new Error("Packaged plugin template is missing its bridge token placeholder");
+}
+var personalizedPlugin = template.replaceAll(TOKEN_PLACEHOLDER, loadOrCreateBridgeToken());
+fs3.mkdirSync(destinationDirectory, { recursive: true });
+fs3.writeFileSync(destination, personalizedPlugin, "utf8");
+for (const obsoleteName of ["Dominus2.rbxm", "Dominus.rbxm", "Dominus.rbxmx"]) {
+  const obsoletePath = path3.join(destinationDirectory, obsoleteName);
+  if (obsoletePath !== destination) fs3.rmSync(obsoletePath, { force: true });
+}
 console.log(`Installed Dominus 2 Studio plugin to ${destination}`);
-console.log("Restart Roblox Studio, start dominus-mcp, then approve the pairing code shown in Studio Output.");
+console.log(
+  "Roblox Studio normally reloads Dominus 2 automatically. Restart Studio only if the toolbar does not reconnect."
+);
 //# sourceMappingURL=install-plugin.js.map
 //# sourceMappingURL=install-plugin.js.map

package/dist/install-plugin.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/install-plugin.ts"],"names":[],"mappings":";;;;;;AAKA,SAAS,kBAAA,GAA6B;AACpC,EAAA,IAAI,OAAA,CAAQ,aAAa,OAAA,EAAS;AAChC,IAAA,MAAM,YAAA,GAAe,QAAQ,GAAA,CAAI,YAAA;AACjC,IAAA,IAAI,CAAC,YAAA,EAAc,MAAM,IAAI,MAAM,yBAAyB,CAAA;AAC5D,IAAA,OAAO,IAAA,CAAK,IAAA,CAAK,YAAA,EAAc,QAAA,EAAU,SAAS,CAAA;AAAA,EACpD;AACA,EAAA,IAAI,OAAA,CAAQ,aAAa,QAAA,EAAU;AACjC,IAAA,OAAO,KAAK,IAAA,CAAK,EAAA,CAAG,SAAQ,EAAG,WAAA,EAAa,UAAU,SAAS,CAAA;AAAA,EACjE;AACA,EAAA,OAAO,IAAA,CAAK,KAAK,EAAA,CAAG,OAAA,IAAW,QAAA,EAAU,OAAA,EAAS,UAAU,SAAS,CAAA;AACvE;AAEA,IAAM,gBAAgB,IAAA,CAAK,OAAA,CAAQ,aAAA,CAAc,MAAA,CAAA,IAAA,CAAY,GAAG,CAAC,CAAA;AACjE,IAAM,SAAS,IAAA,CAAK,OAAA,CAAQ,aAAA,EAAe,IAAA,EAAM,UAAU,cAAc,CAAA;AACzE,IAAM,uBAAuB,kBAAA,EAAmB;AAChD,IAAM,WAAA,GAAc,IAAA,CAAK,IAAA,CAAK,oBAAA,EAAsB,eAAe,CAAA;AAEnE,IAAI,CAAC,EAAA,CAAG,UAAA,CAAW,MAAM,CAAA,EAAG;AAC1B,EAAA,MAAM,IAAI,KAAA,CAAM,CAAA,6BAAA,EAAgC,MAAM,CAAA,8BAAA,CAAgC,CAAA;AACxF;AAEA,EAAA,CAAG,SAAA,CAAU,oBAAA,EAAsB,EAAE,SAAA,EAAW,MAAM,CAAA;AACtD,EAAA,CAAG,YAAA,CAAa,QAAQ,WAAW,CAAA;AACnC,OAAA,CAAQ,GAAA,CAAI,CAAA,qCAAA,EAAwC,WAAW,CAAA,CAAE,CAAA;AACjE,OAAA,CAAQ,IAAI,iGAAiG,CAAA","file":"install-plugin.js","sourcesContent":["import fs from 'node:fs';\nimport os from 'node:os';\nimport path from 'node:path';\nimport { fileURLToPath } from 'node:url';\n\nfunction getPluginDirectory(): string {\n  if (process.platform === 'win32') {\n    const localAppData = process.env.LOCALAPPDATA;\n    if (!localAppData) throw new Error('LOCALAPPDATA is not set');\n    return path.join(localAppData, 'Roblox', 'Plugins');\n  }\n  if (process.platform === 'darwin') {\n    return path.join(os.homedir(), 'Documents', 'Roblox', 'Plugins');\n  }\n  return path.join(os.homedir(), '.local', 'share', 'Roblox', 'Plugins');\n}\n\nconst distDirectory = path.dirname(fileURLToPath(import.meta.url));\nconst source = path.resolve(distDirectory, '..', 'plugin', 'Dominus.rbxm');\nconst destinationDirectory = getPluginDirectory();\nconst destination = path.join(destinationDirectory, 'Dominus2.rbxm');\n\nif (!fs.existsSync(source)) {\n  throw new Error(`Packaged plugin not found at ${source}. Run pnpm build:plugin first.`);\n}\n\nfs.mkdirSync(destinationDirectory, { recursive: true });\nfs.copyFileSync(source, destination);\nconsole.log(`Installed Dominus 2 Studio plugin to ${destination}`);\nconsole.log('Restart Roblox Studio, start dominus-mcp, then approve the pairing code shown in Studio Output.');\n"]}
+{"version":3,"sources":["../src/config/config.ts","../src/transport/auth.ts","../src/install-plugin.ts"],"names":["path","os","fs"],"mappings":";;;;;;;AAKA,IAAM,cAAcA,KAAA,CAAK,IAAA,CAAKC,GAAA,CAAG,OAAA,IAAW,UAAU,CAAA;AAClCD,KAAA,CAAK,IAAA,CAAK,WAAA,EAAa,aAAa;AACxCA,KAAA,CAAK,IAAA,CAAK,WAAA,EAAa,YAAY;AAChCA,KAAA,CAAK,IAAA,CAAK,WAAA,EAAa,YAAY;AA6HtD,SAAS,SAAA,GAAkB;AACzB,EAAA,IAAI,CAACE,GAAA,CAAG,UAAA,CAAW,WAAW,CAAA,EAAG;AAC/B,IAAAA,GAAA,CAAG,SAAA,CAAU,WAAA,EAAa,EAAE,SAAA,EAAW,MAAM,CAAA;AAAA,EAC/C;AACF;AAoDO,SAAS,aAAA,GAAwB;AACtC,EAAA,SAAA,EAAU;AACV,EAAA,OAAO,WAAA;AACT;;;AC3LA,IAAM,UAAA,GAAa,cAAA;AAEZ,SAAS,uBAAA,GAAkC;AAChD,EAAA,MAAM,SAAA,GAAYF,KAAAA,CAAK,IAAA,CAAK,aAAA,IAAiB,UAAU,CAAA;AACvD,EAAA,IAAI;AACF,IAAA,MAAM,WAAWE,GAAAA,CAAG,YAAA,CAAa,SAAA,EAAW,MAAM,EAAE,IAAA,EAAK;AACzD,IAAA,IAAI,QAAA,CAAS,MAAA,IAAU,EAAA,EAAI,OAAO,QAAA;AAAA,EACpC,CAAA,CAAA,MAAQ;AAAA,EAER;AAEA,EAAA,MAAM,KAAA,GAAe,MAAA,CAAA,WAAA,CAAY,EAAE,CAAA,CAAE,SAAS,WAAW,CAAA;AACzD,EAAAA,GAAAA,CAAG,aAAA,CAAc,SAAA,EAAW,CAAA,EAAG,KAAK;AAAA,CAAA,EAAM,EAAE,QAAA,EAAU,MAAA,EAAQ,IAAA,EAAM,KAAO,CAAA;AAC3E,EAAA,IAAI;AACF,IAAAA,GAAAA,CAAG,SAAA,CAAU,SAAA,EAAW,GAAK,CAAA;AAAA,EAC/B,CAAA,CAAA,MAAQ;AAAA,EAER;AACA,EAAA,OAAO,KAAA;AACT;;;AClBA,IAAM,iBAAA,GAAoB,0BAAA;AAE1B,SAAS,kBAAA,GAA6B;AACpC,EAAA,IAAI,OAAA,CAAQ,aAAa,OAAA,EAAS;AAChC,IAAA,MAAM,YAAA,GAAe,QAAQ,GAAA,CAAI,YAAA;AACjC,IAAA,IAAI,CAAC,YAAA,EAAc,MAAM,IAAI,MAAM,yBAAyB,CAAA;AAC5D,IAAA,OAAOF,KAAAA,CAAK,IAAA,CAAK,YAAA,EAAc,QAAA,EAAU,SAAS,CAAA;AAAA,EACpD;AACA,EAAA,IAAI,OAAA,CAAQ,aAAa,QAAA,EAAU;AACjC,IAAA,OAAOA,MAAK,IAAA,CAAKC,GAAAA,CAAG,SAAQ,EAAG,WAAA,EAAa,UAAU,SAAS,CAAA;AAAA,EACjE;AACA,EAAA,OAAOD,KAAAA,CAAK,KAAKC,GAAAA,CAAG,OAAA,IAAW,QAAA,EAAU,OAAA,EAAS,UAAU,SAAS,CAAA;AACvE;AAEA,IAAM,gBAAgBD,KAAAA,CAAK,OAAA,CAAQ,aAAA,CAAc,MAAA,CAAA,IAAA,CAAY,GAAG,CAAC,CAAA;AACjE,IAAM,SAASA,KAAAA,CAAK,OAAA,CAAQ,aAAA,EAAe,IAAA,EAAM,UAAU,eAAe,CAAA;AAC1E,IAAM,uBAAuB,kBAAA,EAAmB;AAChD,IAAM,WAAA,GAAcA,KAAAA,CAAK,IAAA,CAAK,oBAAA,EAAsB,gBAAgB,CAAA;AAEpE,IAAI,CAACE,GAAAA,CAAG,UAAA,CAAW,MAAM,CAAA,EAAG;AAC1B,EAAA,MAAM,IAAI,KAAA,CAAM,CAAA,6BAAA,EAAgC,MAAM,CAAA,8BAAA,CAAgC,CAAA;AACxF;AAEA,IAAM,QAAA,GAAWA,GAAAA,CAAG,YAAA,CAAa,MAAA,EAAQ,MAAM,CAAA;AAC/C,IAAI,CAAC,QAAA,CAAS,QAAA,CAAS,iBAAiB,CAAA,EAAG;AACzC,EAAA,MAAM,IAAI,MAAM,kEAAkE,CAAA;AACpF;AACA,IAAM,kBAAA,GAAqB,QAAA,CAAS,UAAA,CAAW,iBAAA,EAAmB,yBAAyB,CAAA;AAE3FA,GAAAA,CAAG,SAAA,CAAU,oBAAA,EAAsB,EAAE,SAAA,EAAW,MAAM,CAAA;AACtDA,GAAAA,CAAG,aAAA,CAAc,WAAA,EAAa,kBAAA,EAAoB,MAAM,CAAA;AACxD,KAAA,MAAW,YAAA,IAAgB,CAAC,eAAA,EAAiB,cAAA,EAAgB,eAAe,CAAA,EAAG;AAC7E,EAAA,MAAM,YAAA,GAAeF,KAAAA,CAAK,IAAA,CAAK,oBAAA,EAAsB,YAAY,CAAA;AACjE,EAAA,IAAI,YAAA,KAAiB,aAAaE,GAAAA,CAAG,OAAO,YAAA,EAAc,EAAE,KAAA,EAAO,IAAA,EAAM,CAAA;AAC3E;AACA,OAAA,CAAQ,GAAA,CAAI,CAAA,qCAAA,EAAwC,WAAW,CAAA,CAAE,CAAA;AACjE,OAAA,CAAQ,GAAA;AAAA,EACN;AACF,CAAA","file":"install-plugin.js","sourcesContent":["import fs from 'node:fs';\nimport path from 'node:path';\nimport os from 'node:os';\nimport type { ConfigAccess } from '../tools/types.js';\n\nconst DOMINUS_DIR = path.join(os.homedir(), '.dominus');\nconst CONFIG_PATH = path.join(DOMINUS_DIR, 'config.json');\nconst DB_PATH = path.join(DOMINUS_DIR, 'dominus.db');\nconst RULES_PATH = path.join(DOMINUS_DIR, 'rules.json');\n\nexport type AIProviderType =\n  | 'openai'\n  | 'anthropic'\n  | 'gemini'\n  | 'xai'\n  | 'openrouter'\n  | 'custom';\n\nexport interface ProviderConfig {\n  name: string;\n  baseUrl: string;\n  envVar: string;\n  defaultModel: string;\n}\n\nexport const PROVIDERS: Record<AIProviderType, ProviderConfig> = {\n  openai: {\n    name: 'OpenAI',\n    baseUrl: 'https://api.openai.com/v1',\n    envVar: 'OPENAI_API_KEY',\n    defaultModel: 'gpt-5.3-codex',\n  },\n  anthropic: {\n    name: 'Anthropic',\n    baseUrl: 'https://api.anthropic.com/v1/',\n    envVar: 'ANTHROPIC_API_KEY',\n    defaultModel: 'claude-sonnet-4-6',\n  },\n  gemini: {\n    name: 'Google Gemini',\n    baseUrl: 'https://generativelanguage.googleapis.com/v1beta/openai',\n    envVar: 'GEMINI_API_KEY',\n    defaultModel: 'gemini-3.1-pro',\n  },\n  xai: {\n    name: 'xAI (Grok)',\n    baseUrl: 'https://api.x.ai/v1',\n    envVar: 'XAI_API_KEY',\n    defaultModel: 'grok-4.2',\n  },\n  openrouter: {\n    name: 'OpenRouter',\n    baseUrl: 'https://openrouter.ai/api/v1',\n    envVar: 'OPENROUTER_API_KEY',\n    defaultModel: 'anthropic/claude-sonnet-4-6',\n  },\n  custom: {\n    name: 'Custom',\n    baseUrl: '',\n    envVar: '',\n    defaultModel: '',\n  },\n};\n\nexport interface DominusConfig {\n  provider: AIProviderType;\n  apiKey?: string;\n  apiBaseUrl: string;\n  model: string;\n  port: number;\n  maxToolIterations: number;\n  maxVerifyRetries: number;\n  tokenBudget: number;\n  autoIndex: boolean;\n  autoLearn: boolean;\n  userName: string;\n  openCloudApiKey?: string;\n}\n\nconst DEFAULTS: DominusConfig = {\n  provider: 'openai',\n  apiBaseUrl: '',\n  model: '',\n  port: 18088,\n  maxToolIterations: 25,\n  maxVerifyRetries: 3,\n  tokenBudget: 128000,\n  autoIndex: true,\n  autoLearn: true,\n  userName: 'Developer',\n};\n\n/**\n * Auto-detect provider from environment variables.\n * Returns the first provider whose env var is set, or null.\n */\nexport function detectProviderFromEnv(): { provider: AIProviderType; apiKey: string } | null {\n  const priority: AIProviderType[] = ['openai', 'anthropic', 'gemini', 'xai', 'openrouter'];\n  for (const p of priority) {\n    const key = process.env[PROVIDERS[p].envVar];\n    if (key) return { provider: p, apiKey: key };\n  }\n  return null;\n}\n\n/**\n * Resolve the effective base URL and model for a provider config.\n */\nexport function resolveProviderSettings(config: DominusConfig): {\n  baseUrl: string;\n  model: string;\n} {\n  const providerInfo = PROVIDERS[config.provider];\n  return {\n    baseUrl: config.apiBaseUrl || providerInfo?.baseUrl || PROVIDERS.openrouter.baseUrl,\n    model: config.model || providerInfo?.defaultModel || 'gpt-4o',\n  };\n}\n\nexport interface DominusRules {\n  do: string[];\n  dont: string[];\n  conventions: string[];\n  context: string;\n}\n\nconst DEFAULT_RULES: DominusRules = {\n  do: [],\n  dont: [],\n  conventions: [],\n  context: '',\n};\n\nfunction ensureDir(): void {\n  if (!fs.existsSync(DOMINUS_DIR)) {\n    fs.mkdirSync(DOMINUS_DIR, { recursive: true });\n  }\n}\n\nfunction readJson<T>(filePath: string, defaults: T): T {\n  try {\n    if (fs.existsSync(filePath)) {\n      const raw = fs.readFileSync(filePath, 'utf-8');\n      return { ...defaults, ...JSON.parse(raw) };\n    }\n  } catch {\n    // Corrupted file; reset to defaults\n  }\n  return { ...defaults };\n}\n\nfunction writeJson(filePath: string, data: unknown): void {\n  ensureDir();\n  fs.writeFileSync(filePath, JSON.stringify(data, null, 2), 'utf-8');\n}\n\nexport function loadConfig(): DominusConfig {\n  ensureDir();\n  return readJson(CONFIG_PATH, DEFAULTS);\n}\n\nexport function saveConfig(config: DominusConfig): void {\n  writeJson(CONFIG_PATH, config);\n}\n\nexport function getConfigValue<K extends keyof DominusConfig>(key: K): DominusConfig[K] {\n  const config = loadConfig();\n  return config[key];\n}\n\nexport function setConfigValue<K extends keyof DominusConfig>(\n  key: K,\n  value: DominusConfig[K],\n): void {\n  const config = loadConfig();\n  // eslint-disable-next-line @typescript-eslint/no-explicit-any\n  (config as any)[key] = value;\n  saveConfig(config);\n}\n\nexport function loadRules(): DominusRules {\n  ensureDir();\n  return readJson(RULES_PATH, DEFAULT_RULES);\n}\n\nexport function saveRules(rules: DominusRules): void {\n  writeJson(RULES_PATH, rules);\n}\n\nexport function getDominusDir(): string {\n  ensureDir();\n  return DOMINUS_DIR;\n}\n\nexport function getDbPath(): string {\n  ensureDir();\n  return DB_PATH;\n}\n\nexport function createConfigAccess(): ConfigAccess {\n  return {\n    get<T>(key: string): T | undefined {\n      const config = loadConfig() as unknown as Record<string, unknown>;\n      return config[key] as T | undefined;\n    },\n    set(key: string, value: unknown): void {\n      const config = loadConfig() as unknown as Record<string, unknown>;\n      config[key] = value;\n      saveConfig(config as unknown as DominusConfig);\n    },\n    getAll(): Record<string, unknown> {\n      return loadConfig() as unknown as Record<string, unknown>;\n    },\n  };\n}\n","import fs from 'node:fs';\nimport path from 'node:path';\nimport * as crypto from 'node:crypto';\nimport { getDominusDir } from '../config/config.js';\n\nconst TOKEN_FILE = 'bridge-token';\n\nexport function loadOrCreateBridgeToken(): string {\n  const tokenPath = path.join(getDominusDir(), TOKEN_FILE);\n  try {\n    const existing = fs.readFileSync(tokenPath, 'utf8').trim();\n    if (existing.length >= 32) return existing;\n  } catch {\n    // First run or an unreadable token is repaired below.\n  }\n\n  const token = crypto.randomBytes(32).toString('base64url');\n  fs.writeFileSync(tokenPath, `${token}\\n`, { encoding: 'utf8', mode: 0o600 });\n  try {\n    fs.chmodSync(tokenPath, 0o600);\n  } catch {\n    // Windows ACLs do not map directly to POSIX modes.\n  }\n  return token;\n}\n\nexport function tokensEqual(actual: unknown, expected: string): boolean {\n  if (typeof actual !== 'string') return false;\n  const actualBuffer = Buffer.from(actual);\n  const expectedBuffer = Buffer.from(expected);\n  return actualBuffer.length === expectedBuffer.length\n    && crypto.timingSafeEqual(actualBuffer, expectedBuffer);\n}\n","import fs from 'node:fs';\nimport os from 'node:os';\nimport path from 'node:path';\nimport { fileURLToPath } from 'node:url';\nimport { loadOrCreateBridgeToken } from './transport/auth.js';\n\nconst TOKEN_PLACEHOLDER = '__DOMINUS_BRIDGE_TOKEN__';\n\nfunction getPluginDirectory(): string {\n  if (process.platform === 'win32') {\n    const localAppData = process.env.LOCALAPPDATA;\n    if (!localAppData) throw new Error('LOCALAPPDATA is not set');\n    return path.join(localAppData, 'Roblox', 'Plugins');\n  }\n  if (process.platform === 'darwin') {\n    return path.join(os.homedir(), 'Documents', 'Roblox', 'Plugins');\n  }\n  return path.join(os.homedir(), '.local', 'share', 'Roblox', 'Plugins');\n}\n\nconst distDirectory = path.dirname(fileURLToPath(import.meta.url));\nconst source = path.resolve(distDirectory, '..', 'plugin', 'Dominus.rbxmx');\nconst destinationDirectory = getPluginDirectory();\nconst destination = path.join(destinationDirectory, 'Dominus2.rbxmx');\n\nif (!fs.existsSync(source)) {\n  throw new Error(`Packaged plugin not found at ${source}. Run pnpm build:plugin first.`);\n}\n\nconst template = fs.readFileSync(source, 'utf8');\nif (!template.includes(TOKEN_PLACEHOLDER)) {\n  throw new Error('Packaged plugin template is missing its bridge token placeholder');\n}\nconst personalizedPlugin = template.replaceAll(TOKEN_PLACEHOLDER, loadOrCreateBridgeToken());\n\nfs.mkdirSync(destinationDirectory, { recursive: true });\nfs.writeFileSync(destination, personalizedPlugin, 'utf8');\nfor (const obsoleteName of ['Dominus2.rbxm', 'Dominus.rbxm', 'Dominus.rbxmx']) {\n  const obsoletePath = path.join(destinationDirectory, obsoleteName);\n  if (obsoletePath !== destination) fs.rmSync(obsoletePath, { force: true });\n}\nconsole.log(`Installed Dominus 2 Studio plugin to ${destination}`);\nconsole.log(\n  'Roblox Studio normally reloads Dominus 2 automatically. Restart Studio only if the toolbar does not reconnect.',\n);\n"]}