godot-cli 0.16.1 → 0.17.0

package/dist/utils/project-marker.d.ts

@@ -0,0 +1,64 @@
+/**
+ * The tool-neutral, committable **project marker** `<project>/.ai-game-dev/project.json`
+ * (design 06 / D15). It is NON-secret — credentials NEVER go here — and records:
+ *
+ * - `serverTarget` — the hub URL the enrolled plugin should connect to (hosted
+ *   `https://ai-game.dev` or a local `http://localhost:<port>`), returned by the
+ *   enrollment-redeem endpoint.
+ * - `pin` — the D14 routing pin (first 8 hex of the ProjectIdentity SHA256), so
+ *   the plugin, the CLIs, and `configure` all agree which project the session
+ *   routes to.
+ * - `port` — the deterministic local port (SHA256→20000–29999) recorded for a
+ *   localhost target so a terminal-written config and the plugin never diverge.
+ * - `portOverride` — an explicit user port override (D15) that always wins.
+ *
+ * ProjectIdentity resolution and every config writer consult it, so an override
+ * or target can never silently diverge between the plugin and a terminal-written
+ * config.
+ */
+export declare const PROJECT_MARKER_RELATIVE_PATH: string;
+export interface ProjectMarker {
+    /** The enrolled server target URL (hosted or local). */
+    serverTarget?: string;
+    /** The D14 routing pin (first 8 hex of the ProjectIdentity hash). */
+    pin?: string;
+    /** The deterministic local port (recorded for localhost targets). */
+    port?: number;
+    /** An explicit user port override (always wins over the derived port). */
+    portOverride?: number;
+    /** Forward-compatible: unknown keys are preserved on rewrite. */
+    [key: string]: unknown;
+}
+/** Absolute path of the marker file for a project. */
+export declare function getProjectMarkerPath(projectPath: string): string;
+/** Read the marker, or null when absent / empty / malformed. Never throws. */
+export declare function readProjectMarker(projectPath: string): ProjectMarker | null;
+/**
+ * Write the marker, MERGING over any existing document so a re-enroll never drops
+ * a previously-set `portOverride` or forward-compatible key. Creates the
+ * `.ai-game-dev/` directory if needed. The supplied `patch` fields overwrite the
+ * existing values; every other existing field is preserved.
+ */
+export declare function writeProjectMarker(projectPath: string, patch: ProjectMarker): ProjectMarker;
+/** True when `url`'s host is a loopback address (localhost / 127.0.0.1 / ::1). Never throws. */
+export declare function isLocalhostUrl(url: string): boolean;
+/**
+ * Append (or replace) the `/p/<pin>` routing segment on an MCP-server URL —
+ * the D14 project pin the plugin routes on. A URL already ending in `/p/<hex>`
+ * has its pin REPLACED (idempotent re-enroll); otherwise `/p/<pin>` is appended
+ * to the existing path. Query/hash are preserved. Returns the input unchanged on
+ * a malformed URL. Pure.
+ */
+export declare function applyPinToUrl(url: string, pin: string): string;
+/**
+ * Upsert the D14 pin into the URL of the `ai-game-developer` entry of every
+ * EXISTING project-local agent config (design 06 — "upserts the D14 pin into any
+ * existing project-local agent config entry"), so a hosted/local server the user
+ * added manually before enrolling becomes pinned. Best-effort: user-global
+ * configs (Claude Desktop, Cline, …) are skipped; a config with no
+ * `ai-game-developer` entry or no URL is left untouched; a malformed/unreadable
+ * file is skipped without throwing. Returns the absolute paths that were
+ * rewritten. JSON configs rewrite the `url`/`serverUrl` value; the Codex TOML
+ * config rewrites its `url = "…"` line.
+ */
+export declare function upsertPinIntoAgentConfigs(projectPath: string, pin: string): string[];

package/dist/utils/project-marker.js

@@ -0,0 +1,192 @@
+import * as fs from 'fs';
+import * as path from 'path';
+import { PIN_LENGTH } from './project-identity.js';
+import { agentRegistry, MCP_SERVER_NAME } from './agents.js';
+/**
+ * The tool-neutral, committable **project marker** `<project>/.ai-game-dev/project.json`
+ * (design 06 / D15). It is NON-secret — credentials NEVER go here — and records:
+ *
+ * - `serverTarget` — the hub URL the enrolled plugin should connect to (hosted
+ *   `https://ai-game.dev` or a local `http://localhost:<port>`), returned by the
+ *   enrollment-redeem endpoint.
+ * - `pin` — the D14 routing pin (first 8 hex of the ProjectIdentity SHA256), so
+ *   the plugin, the CLIs, and `configure` all agree which project the session
+ *   routes to.
+ * - `port` — the deterministic local port (SHA256→20000–29999) recorded for a
+ *   localhost target so a terminal-written config and the plugin never diverge.
+ * - `portOverride` — an explicit user port override (D15) that always wins.
+ *
+ * ProjectIdentity resolution and every config writer consult it, so an override
+ * or target can never silently diverge between the plugin and a terminal-written
+ * config.
+ */
+export const PROJECT_MARKER_RELATIVE_PATH = path.join('.ai-game-dev', 'project.json');
+/** Absolute path of the marker file for a project. */
+export function getProjectMarkerPath(projectPath) {
+    return path.join(projectPath, PROJECT_MARKER_RELATIVE_PATH);
+}
+/** Read the marker, or null when absent / empty / malformed. Never throws. */
+export function readProjectMarker(projectPath) {
+    const markerPath = getProjectMarkerPath(projectPath);
+    if (!fs.existsSync(markerPath))
+        return null;
+    try {
+        const raw = fs.readFileSync(markerPath, 'utf-8');
+        if (raw.trim().length === 0)
+            return null;
+        const parsed = JSON.parse(raw);
+        if (!parsed || typeof parsed !== 'object' || Array.isArray(parsed))
+            return null;
+        return parsed;
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Write the marker, MERGING over any existing document so a re-enroll never drops
+ * a previously-set `portOverride` or forward-compatible key. Creates the
+ * `.ai-game-dev/` directory if needed. The supplied `patch` fields overwrite the
+ * existing values; every other existing field is preserved.
+ */
+export function writeProjectMarker(projectPath, patch) {
+    const markerPath = getProjectMarkerPath(projectPath);
+    const dir = path.dirname(markerPath);
+    if (!fs.existsSync(dir)) {
+        fs.mkdirSync(dir, { recursive: true });
+    }
+    const existing = readProjectMarker(projectPath) ?? {};
+    const merged = { ...existing, ...patch };
+    fs.writeFileSync(markerPath, JSON.stringify(merged, null, 2) + '\n');
+    return merged;
+}
+/** True when `url`'s host is a loopback address (localhost / 127.0.0.1 / ::1). Never throws. */
+export function isLocalhostUrl(url) {
+    try {
+        const host = new URL(url).hostname.toLowerCase();
+        return host === 'localhost' || host === '127.0.0.1' || host === '::1' || host === '[::1]';
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Append (or replace) the `/p/<pin>` routing segment on an MCP-server URL —
+ * the D14 project pin the plugin routes on. A URL already ending in `/p/<hex>`
+ * has its pin REPLACED (idempotent re-enroll); otherwise `/p/<pin>` is appended
+ * to the existing path. Query/hash are preserved. Returns the input unchanged on
+ * a malformed URL. Pure.
+ */
+export function applyPinToUrl(url, pin) {
+    let parsed;
+    try {
+        parsed = new URL(url);
+    }
+    catch {
+        return url;
+    }
+    const segments = parsed.pathname.split('/').filter((s) => s.length > 0);
+    const hexLen = PIN_LENGTH; // 8
+    const isPinHex = (s) => new RegExp(`^[0-9a-f]{${hexLen}}$`, 'i').test(s);
+    if (segments.length >= 2 && segments[segments.length - 2] === 'p' && isPinHex(segments[segments.length - 1])) {
+        segments[segments.length - 1] = pin;
+    }
+    else {
+        segments.push('p', pin);
+    }
+    parsed.pathname = '/' + segments.join('/');
+    return parsed.toString();
+}
+/** True when `configPath` resolves INSIDE `projectPath` (a project-local, not user-global, config). */
+function isProjectLocalConfig(configPath, projectPath) {
+    const root = path.resolve(projectPath) + path.sep;
+    return path.resolve(configPath).startsWith(root);
+}
+/**
+ * Upsert the D14 pin into the URL of the `ai-game-developer` entry of every
+ * EXISTING project-local agent config (design 06 — "upserts the D14 pin into any
+ * existing project-local agent config entry"), so a hosted/local server the user
+ * added manually before enrolling becomes pinned. Best-effort: user-global
+ * configs (Claude Desktop, Cline, …) are skipped; a config with no
+ * `ai-game-developer` entry or no URL is left untouched; a malformed/unreadable
+ * file is skipped without throwing. Returns the absolute paths that were
+ * rewritten. JSON configs rewrite the `url`/`serverUrl` value; the Codex TOML
+ * config rewrites its `url = "…"` line.
+ */
+export function upsertPinIntoAgentConfigs(projectPath, pin) {
+    const updated = [];
+    for (const agent of agentRegistry) {
+        let configPath;
+        try {
+            configPath = agent.getConfigPath(projectPath);
+        }
+        catch {
+            continue;
+        }
+        if (!isProjectLocalConfig(configPath, projectPath))
+            continue;
+        if (!fs.existsSync(configPath))
+            continue;
+        try {
+            if (agent.configFormat === 'toml') {
+                if (upsertPinInTomlConfig(configPath, pin))
+                    updated.push(configPath);
+            }
+            else {
+                if (upsertPinInJsonConfig(configPath, agent.bodyPath, pin))
+                    updated.push(configPath);
+            }
+        }
+        catch {
+            // Best-effort: a single unreadable/malformed config never fails enrollment.
+        }
+    }
+    return updated;
+}
+/** Rewrite the `url`/`serverUrl` of `bodyPath.ai-game-developer` in a JSON config. Returns true when changed. */
+function upsertPinInJsonConfig(configPath, bodyPath, pin) {
+    const root = JSON.parse(fs.readFileSync(configPath, 'utf-8'));
+    if (!root || typeof root !== 'object' || Array.isArray(root))
+        return false;
+    const body = root[bodyPath];
+    if (!body || typeof body !== 'object' || Array.isArray(body))
+        return false;
+    const entry = body[MCP_SERVER_NAME];
+    if (!entry || typeof entry !== 'object' || Array.isArray(entry))
+        return false;
+    // The registry uses `url` for most agents and `serverUrl` for Antigravity.
+    const urlKey = typeof entry['url'] === 'string' ? 'url' : typeof entry['serverUrl'] === 'string' ? 'serverUrl' : null;
+    if (!urlKey)
+        return false;
+    const current = entry[urlKey];
+    const pinned = applyPinToUrl(current, pin);
+    if (pinned === current)
+        return false;
+    entry[urlKey] = pinned;
+    fs.writeFileSync(configPath, JSON.stringify(root, null, 2) + '\n');
+    return true;
+}
+/** Rewrite the `url = "…"` line under `[mcp_servers.ai-game-developer]` in a Codex TOML config. Returns true when changed. */
+function upsertPinInTomlConfig(configPath, pin) {
+    const lines = fs.readFileSync(configPath, 'utf-8').split('\n');
+    const header = `[mcp_servers.${MCP_SERVER_NAME}]`;
+    const sectionIdx = lines.findIndex((l) => l.trim() === header);
+    if (sectionIdx < 0)
+        return false;
+    for (let i = sectionIdx + 1; i < lines.length; i++) {
+        const trimmed = lines[i].trim();
+        if (trimmed.startsWith('['))
+            break; // next section
+        const m = trimmed.match(/^url\s*=\s*"([^"]*)"\s*$/);
+        if (m) {
+            const pinned = applyPinToUrl(m[1], pin);
+            if (pinned === m[1])
+                return false;
+            lines[i] = `url = "${pinned}"`;
+            fs.writeFileSync(configPath, lines.join('\n'));
+            return true;
+        }
+    }
+    return false;
+}
+//# sourceMappingURL=project-marker.js.map

package/dist/utils/project-marker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-marker.js","sourceRoot":"","sources":["../../src/utils/project-marker.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAE7D;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,cAAc,CAAC,CAAC;AAetF,sDAAsD;AACtD,MAAM,UAAU,oBAAoB,CAAC,WAAmB;IACtD,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,4BAA4B,CAAC,CAAC;AAC9D,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,iBAAiB,CAAC,WAAmB;IACnD,MAAM,UAAU,GAAG,oBAAoB,CAAC,WAAW,CAAC,CAAC;IACrD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QACjD,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACzC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAkB,CAAC;QAChD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC;QAChF,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,WAAmB,EAAE,KAAoB;IAC1E,MAAM,UAAU,GAAG,oBAAoB,CAAC,WAAW,CAAC,CAAC;IACrD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACrC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACxB,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzC,CAAC;IACD,MAAM,QAAQ,GAAG,iBAAiB,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;IACtD,MAAM,MAAM,GAAkB,EAAE,GAAG,QAAQ,EAAE,GAAG,KAAK,EAAE,CAAC;IACxD,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IACrE,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,gGAAgG;AAChG,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;QACjD,OAAO,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,OAAO,CAAC;IAC5F,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAAC,GAAW,EAAE,GAAW;IACpD,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,CAAC;IACb,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACxE,MAAM,MAAM,GAAG,UAAU,CAAC,CAAC,IAAI;IAC/B,MAAM,QAAQ,GAAG,CAAC,CAAS,EAAW,EAAE,CAAC,IAAI,MAAM,CAAC,aAAa,MAAM,IAAI,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC1F,IAAI,QAAQ,CAAC,MAAM,IAAI,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,GAAG,IAAI,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7G,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC;IACtC,CAAC;SAAM,CAAC;QACN,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC1B,CAAC;IACD,MAAM,CAAC,QAAQ,GAAG,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3C,OAAO,MAAM,CAAC,QAAQ,EAAE,CAAC;AAC3B,CAAC;AAED,uGAAuG;AACvG,SAAS,oBAAoB,CAAC,UAAkB,EAAE,WAAmB;IACnE,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC;IAClD,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;AACnD,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,yBAAyB,CAAC,WAAmB,EAAE,GAAW;IACxE,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,KAAK,IAAI,aAAa,EAAE,CAAC;QAClC,IAAI,UAAkB,CAAC;QACvB,IAAI,CAAC;YACH,UAAU,GAAG,KAAK,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC;QAChD,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,IAAI,CAAC,oBAAoB,CAAC,UAAU,EAAE,WAAW,CAAC;YAAE,SAAS;QAC7D,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC;YAAE,SAAS;QAEzC,IAAI,CAAC;YACH,IAAI,KAAK,CAAC,YAAY,KAAK,MAAM,EAAE,CAAC;gBAClC,IAAI,qBAAqB,CAAC,UAAU,EAAE,GAAG,CAAC;oBAAE,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YACvE,CAAC;iBAAM,CAAC;gBACN,IAAI,qBAAqB,CAAC,UAAU,EAAE,KAAK,CAAC,QAAQ,EAAE,GAAG,CAAC;oBAAE,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YACvF,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,4EAA4E;QAC9E,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,iHAAiH;AACjH,SAAS,qBAAqB,CAAC,UAAkB,EAAE,QAAgB,EAAE,GAAW;IAC9E,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAA4B,CAAC;IACzF,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3E,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAwC,CAAC;IACnE,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3E,MAAM,KAAK,GAAG,IAAI,CAAC,eAAe,CAAwC,CAAC;IAC3E,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAE9E,2EAA2E;IAC3E,MAAM,MAAM,GAAG,OAAO,KAAK,CAAC,KAAK,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC,WAAW,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC;IACtH,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAE1B,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAW,CAAC;IACxC,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IAC3C,IAAI,MAAM,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC;IAErC,KAAK,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC;IACvB,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IACnE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,8HAA8H;AAC9H,SAAS,qBAAqB,CAAC,UAAkB,EAAE,GAAW;IAC5D,MAAM,KAAK,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC/D,MAAM,MAAM,GAAG,gBAAgB,eAAe,GAAG,CAAC;IAClD,MAAM,UAAU,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,MAAM,CAAC,CAAC;IAC/D,IAAI,UAAU,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAEjC,KAAK,IAAI,CAAC,GAAG,UAAU,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACnD,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAChC,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,MAAM,CAAC,eAAe;QACnD,MAAM,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;QACpD,IAAI,CAAC,EAAE,CAAC;YACN,MAAM,MAAM,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YACxC,IAAI,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC;gBAAE,OAAO,KAAK,CAAC;YAClC,KAAK,CAAC,CAAC,CAAC,GAAG,UAAU,MAAM,GAAG,CAAC;YAC/B,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;YAC/C,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/utils/server-source.d.ts

@@ -0,0 +1,84 @@
+/**
+ * The DEFAULT shared-server version `--with-server` downloads. Single-sourced
+ * from the addon's `GodotMcpServerView.ServerVersion` constant (parity-tested).
+ * `--server-version <v>` overrides it; `--server-source <path>` skips the
+ * download entirely (offline / CI). Bumping the addon's server pin requires
+ * bumping this in the same PR or the parity test goes red.
+ */
+export declare const DEFAULT_SERVER_VERSION = "9.0.0";
+/** GitHub-release host the server zip + manifest are downloaded from. NOTHING else is trusted. */
+export declare const TRUSTED_DOWNLOAD_HOST = "github.com";
+/** The `owner/repo` the shared server releases live under. */
+export declare const SERVER_RELEASE_REPO = "IvanMurzak/GameDev-MCP-Server";
+/** The server-binary base name (matches the addon's `GodotMcpServerView.ExecutableName`). */
+export declare const SERVER_EXECUTABLE_NAME = "gamedev-mcp-server";
+/** The release-asset / RID prefix (matches the addon's `AssetPrefix`). */
+export declare const SERVER_ASSET_PREFIX = "gamedev-mcp-server";
+/** The integrity-manifest asset attached to every GameDev-MCP-Server release. */
+export declare const SHA256SUMS_ASSET_NAME = "SHA256SUMS";
+/** Map a Node `process.platform` token to the .NET RID os segment (`win`/`osx`/`linux`). */
+export declare function osToken(platform?: NodeJS.Platform): string;
+/** Map a Node `process.arch` token to the .NET RID arch segment (`x86`/`x64`/`arm`/`arm64`). */
+export declare function archToken(arch?: string): string;
+/**
+ * The RID-style platform name `<os>-<arch>` (e.g. `win-x64`) for the given (or
+ * current) host. Matches the addon's `GodotMcpServerView.PlatformName` and the
+ * GameDev-MCP-Server release asset RIDs (linux-arm64/linux-x64/osx-arm64/osx-x64/
+ * win-arm64/win-x64/win-x86). Pure.
+ */
+export declare function detectHostRid(platform?: NodeJS.Platform, arch?: string): string;
+/** The on-disk executable file name for an os: `gamedev-mcp-server.exe` on Windows, else `gamedev-mcp-server`. */
+export declare function serverExecutableFileName(platform?: NodeJS.Platform): string;
+/** The GitHub release-zip asset name for a RID: `gamedev-mcp-server-<rid>.zip`. Pure. */
+export declare function serverAssetName(rid: string): string;
+/** The git release TAG for a server version: the version with a leading `v` (`9.0.0` → `v9.0.0`). Pure. */
+export declare function serverReleaseTag(version: string): string;
+/**
+ * The download URL for a server version's per-RID zip:
+ * `https://github.com/IvanMurzak/GameDev-MCP-Server/releases/download/v<version>/gamedev-mcp-server-<rid>.zip`.
+ * Mirrors `GodotMcpServerView.DownloadUrl`. The host is always `github.com` by
+ * construction; `assertTrustedServerUrl` re-checks a URL before any network call. Pure.
+ */
+export declare function serverDownloadUrl(version: string, rid: string): string;
+/**
+ * The `SHA256SUMS` manifest URL — the sibling of the per-RID zip under the SAME
+ * `v<version>` release tag. Mirrors `GodotMcpServerView.Sha256SumsUrl`. Pure.
+ */
+export declare function sha256SumsUrl(version: string): string;
+/**
+ * Fail-closed host trust check: throw unless `url` is an HTTPS URL whose host is
+ * EXACTLY `github.com` (no subdomains, no `github.com.evil.test`, no http). The
+ * security boundary the task requires for the server download. Returns the parsed
+ * URL on success. Pure (throws on the unhappy path; callers turn it into a
+ * structured failure so nothing escapes the public boundary).
+ */
+export declare function assertTrustedServerUrl(url: string): URL;
+/**
+ * Parse a coreutils `sha256sum` manifest into a `{filename → lowercase-hex-digest}`
+ * map. One line per file: a 64-char hex digest, whitespace, then the file name.
+ * Tolerances (matching the C# reference): CRLF + bare-LF; blank lines skipped;
+ * leading/trailing whitespace trimmed; the binary-mode `*` marker before the
+ * filename stripped; a line whose first token is not 64-hex, or which has no
+ * filename, is skipped (never a spurious entry — fail-closed at lookup). On a
+ * duplicate filename the LAST entry wins. Never throws. Pure.
+ */
+export declare function parseSha256Sums(sha256SumsText: string | null | undefined): Map<string, string>;
+/** Look up the expected digest for an asset zip name in a parsed manifest, or null when absent. Pure. */
+export declare function lookupDigest(parsed: Map<string, string>, assetZipName: string): string | null;
+/** Case-insensitive hex-digest equality (both trimmed). A null/empty side is NEVER a match (fail-closed). Pure. */
+export declare function digestMatches(expectedHexDigest: string | null | undefined, actualHexDigest: string | null | undefined): boolean;
+/** The verdict of verifying a downloaded zip against a release `SHA256SUMS` manifest. */
+export type ChecksumVerdict = 'verified' | 'manifest-unparsable' | 'missing-entry' | 'digest-mismatch';
+/**
+ * The single fail-closed integrity decision the installer calls BEFORE extract:
+ * parse the release `SHA256SUMS`, find the entry for `assetZipName`, and compare
+ * it (case-insensitive hex) against the locally-computed SHA256 of the downloaded
+ * zip. Returns `'verified'` ONLY when the manifest parsed, contained the asset,
+ * and the digest matched; every other outcome is a distinct fail-closed verdict
+ * the caller MUST treat as "do NOT extract". Never throws. Pure.
+ */
+export declare function verifyZipChecksum(sha256SumsText: string | null | undefined, assetZipName: string, actualZipHexDigest: string | null | undefined): ChecksumVerdict;
+/** A short, actionable reason for a non-`verified` verdict, for the installer's fail-closed error. Pure. */
+export declare function checksumFailureReason(verdict: ChecksumVerdict, assetZipName: string): string;
+/** The lowercase hex SHA256 of a byte buffer (the downloaded zip). Pure. */
+export declare function sha256Hex(bytes: Buffer): string;

package/dist/utils/server-source.js

@@ -0,0 +1,217 @@
+// Pure helpers for resolving WHERE the shared `gamedev-mcp-server` binary comes
+// from when `install-plugin --with-server` materializes it: RID detection, the
+// trusted GitHub-release download URL, the `SHA256SUMS` integrity manifest, and
+// the fail-closed verify verdict. These MIRROR the addon's own server logic in
+// `addons/godot_mcp/Runtime/Connection/GodotMcpServerView.cs` (github.com only,
+// `releases/download/v<version>/gamedev-mcp-server-<rid>.zip`, verify-before-
+// extract against `SHA256SUMS`). No side effects; unit-testable with no network.
+//
+// The DEFAULT server version is single-sourced from the addon's pinned
+// `ServerVersion` constant (a parity test — `cli/tests/server-source-parity.test.ts`
+// — reads `GodotMcpServerView.cs` and FAILS the build if this drifts), so the CLI
+// and the addon can never download two different server versions.
+import { createHash } from 'crypto';
+/**
+ * The DEFAULT shared-server version `--with-server` downloads. Single-sourced
+ * from the addon's `GodotMcpServerView.ServerVersion` constant (parity-tested).
+ * `--server-version <v>` overrides it; `--server-source <path>` skips the
+ * download entirely (offline / CI). Bumping the addon's server pin requires
+ * bumping this in the same PR or the parity test goes red.
+ */
+export const DEFAULT_SERVER_VERSION = '9.0.0';
+/** GitHub-release host the server zip + manifest are downloaded from. NOTHING else is trusted. */
+export const TRUSTED_DOWNLOAD_HOST = 'github.com';
+/** The `owner/repo` the shared server releases live under. */
+export const SERVER_RELEASE_REPO = 'IvanMurzak/GameDev-MCP-Server';
+/** The server-binary base name (matches the addon's `GodotMcpServerView.ExecutableName`). */
+export const SERVER_EXECUTABLE_NAME = 'gamedev-mcp-server';
+/** The release-asset / RID prefix (matches the addon's `AssetPrefix`). */
+export const SERVER_ASSET_PREFIX = SERVER_EXECUTABLE_NAME;
+/** The integrity-manifest asset attached to every GameDev-MCP-Server release. */
+export const SHA256SUMS_ASSET_NAME = 'SHA256SUMS';
+/** Map a Node `process.platform` token to the .NET RID os segment (`win`/`osx`/`linux`). */
+export function osToken(platform = process.platform) {
+    switch (platform) {
+        case 'win32':
+            return 'win';
+        case 'darwin':
+            return 'osx';
+        case 'linux':
+            return 'linux';
+        default:
+            return 'unknown';
+    }
+}
+/** Map a Node `process.arch` token to the .NET RID arch segment (`x86`/`x64`/`arm`/`arm64`). */
+export function archToken(arch = process.arch) {
+    switch (arch) {
+        case 'x64':
+            return 'x64';
+        case 'arm64':
+            return 'arm64';
+        case 'ia32':
+            return 'x86';
+        case 'arm':
+            return 'arm';
+        default:
+            return 'unknown';
+    }
+}
+/**
+ * The RID-style platform name `<os>-<arch>` (e.g. `win-x64`) for the given (or
+ * current) host. Matches the addon's `GodotMcpServerView.PlatformName` and the
+ * GameDev-MCP-Server release asset RIDs (linux-arm64/linux-x64/osx-arm64/osx-x64/
+ * win-arm64/win-x64/win-x86). Pure.
+ */
+export function detectHostRid(platform = process.platform, arch = process.arch) {
+    return `${osToken(platform)}-${archToken(arch)}`;
+}
+/** The on-disk executable file name for an os: `gamedev-mcp-server.exe` on Windows, else `gamedev-mcp-server`. */
+export function serverExecutableFileName(platform = process.platform) {
+    return platform === 'win32' ? `${SERVER_EXECUTABLE_NAME}.exe` : SERVER_EXECUTABLE_NAME;
+}
+/** The GitHub release-zip asset name for a RID: `gamedev-mcp-server-<rid>.zip`. Pure. */
+export function serverAssetName(rid) {
+    return `${SERVER_ASSET_PREFIX}-${rid}.zip`;
+}
+/** The git release TAG for a server version: the version with a leading `v` (`9.0.0` → `v9.0.0`). Pure. */
+export function serverReleaseTag(version) {
+    const v = (version ?? '').trim();
+    return v.startsWith('v') ? v : `v${v}`;
+}
+/**
+ * The download URL for a server version's per-RID zip:
+ * `https://github.com/IvanMurzak/GameDev-MCP-Server/releases/download/v<version>/gamedev-mcp-server-<rid>.zip`.
+ * Mirrors `GodotMcpServerView.DownloadUrl`. The host is always `github.com` by
+ * construction; `assertTrustedServerUrl` re-checks a URL before any network call. Pure.
+ */
+export function serverDownloadUrl(version, rid) {
+    return `https://${TRUSTED_DOWNLOAD_HOST}/${SERVER_RELEASE_REPO}/releases/download/${serverReleaseTag(version)}/${serverAssetName(rid)}`;
+}
+/**
+ * The `SHA256SUMS` manifest URL — the sibling of the per-RID zip under the SAME
+ * `v<version>` release tag. Mirrors `GodotMcpServerView.Sha256SumsUrl`. Pure.
+ */
+export function sha256SumsUrl(version) {
+    return `https://${TRUSTED_DOWNLOAD_HOST}/${SERVER_RELEASE_REPO}/releases/download/${serverReleaseTag(version)}/${SHA256SUMS_ASSET_NAME}`;
+}
+/**
+ * Fail-closed host trust check: throw unless `url` is an HTTPS URL whose host is
+ * EXACTLY `github.com` (no subdomains, no `github.com.evil.test`, no http). The
+ * security boundary the task requires for the server download. Returns the parsed
+ * URL on success. Pure (throws on the unhappy path; callers turn it into a
+ * structured failure so nothing escapes the public boundary).
+ */
+export function assertTrustedServerUrl(url) {
+    let parsed;
+    try {
+        parsed = new URL(url);
+    }
+    catch {
+        throw new Error(`Refusing to download server: malformed URL "${url}".`);
+    }
+    if (parsed.protocol !== 'https:') {
+        throw new Error(`Refusing to download server: only https is allowed, got "${parsed.protocol}" (${url}).`);
+    }
+    if (parsed.hostname.toLowerCase() !== TRUSTED_DOWNLOAD_HOST) {
+        throw new Error(`Refusing to download server from untrusted host "${parsed.hostname}". Only ${TRUSTED_DOWNLOAD_HOST} is trusted.`);
+    }
+    return parsed;
+}
+// --- SHA256SUMS integrity manifest (download-verify-before-extract, fail-closed) ---
+// Ported from GodotMcpServerView.{ParseSha256Sums,LookupDigest,DigestMatches,VerifyZipChecksum}
+// so the CLI and the addon apply byte-identical integrity rules.
+/** True when `value` is exactly 64 ASCII hex characters (a SHA256 hex digest). */
+function isHex64(value) {
+    if (value.length !== 64)
+        return false;
+    return /^[0-9a-fA-F]{64}$/.test(value);
+}
+/**
+ * Parse a coreutils `sha256sum` manifest into a `{filename → lowercase-hex-digest}`
+ * map. One line per file: a 64-char hex digest, whitespace, then the file name.
+ * Tolerances (matching the C# reference): CRLF + bare-LF; blank lines skipped;
+ * leading/trailing whitespace trimmed; the binary-mode `*` marker before the
+ * filename stripped; a line whose first token is not 64-hex, or which has no
+ * filename, is skipped (never a spurious entry — fail-closed at lookup). On a
+ * duplicate filename the LAST entry wins. Never throws. Pure.
+ */
+export function parseSha256Sums(sha256SumsText) {
+    const map = new Map();
+    if (!sha256SumsText)
+        return map;
+    for (const rawLine of sha256SumsText.replace(/\r\n/g, '\n').split('\n')) {
+        const line = rawLine.trim();
+        if (line.length === 0)
+            continue;
+        // Split into the digest token and the remainder (the filename) on the FIRST
+        // run of whitespace, so single-space/tab variants still parse.
+        let sepIndex = -1;
+        for (let i = 0; i < line.length; i++) {
+            if (line[i] === ' ' || line[i] === '\t') {
+                sepIndex = i;
+                break;
+            }
+        }
+        if (sepIndex <= 0 || sepIndex >= line.length - 1)
+            continue;
+        const digestToken = line.slice(0, sepIndex);
+        if (!isHex64(digestToken))
+            continue;
+        let fileName = line.slice(sepIndex + 1).replace(/^[ \t]+/, '');
+        if (fileName.startsWith('*'))
+            fileName = fileName.slice(1);
+        fileName = fileName.trim();
+        if (fileName.length === 0)
+            continue;
+        map.set(fileName, digestToken.toLowerCase());
+    }
+    return map;
+}
+/** Look up the expected digest for an asset zip name in a parsed manifest, or null when absent. Pure. */
+export function lookupDigest(parsed, assetZipName) {
+    if (!parsed || !assetZipName)
+        return null;
+    return parsed.get(assetZipName) ?? null;
+}
+/** Case-insensitive hex-digest equality (both trimmed). A null/empty side is NEVER a match (fail-closed). Pure. */
+export function digestMatches(expectedHexDigest, actualHexDigest) {
+    if (!expectedHexDigest || !expectedHexDigest.trim() || !actualHexDigest || !actualHexDigest.trim())
+        return false;
+    return expectedHexDigest.trim().toLowerCase() === actualHexDigest.trim().toLowerCase();
+}
+/**
+ * The single fail-closed integrity decision the installer calls BEFORE extract:
+ * parse the release `SHA256SUMS`, find the entry for `assetZipName`, and compare
+ * it (case-insensitive hex) against the locally-computed SHA256 of the downloaded
+ * zip. Returns `'verified'` ONLY when the manifest parsed, contained the asset,
+ * and the digest matched; every other outcome is a distinct fail-closed verdict
+ * the caller MUST treat as "do NOT extract". Never throws. Pure.
+ */
+export function verifyZipChecksum(sha256SumsText, assetZipName, actualZipHexDigest) {
+    const parsed = parseSha256Sums(sha256SumsText);
+    if (parsed.size === 0)
+        return 'manifest-unparsable';
+    const expected = lookupDigest(parsed, assetZipName);
+    if (expected === null)
+        return 'missing-entry';
+    return digestMatches(expected, actualZipHexDigest) ? 'verified' : 'digest-mismatch';
+}
+/** A short, actionable reason for a non-`verified` verdict, for the installer's fail-closed error. Pure. */
+export function checksumFailureReason(verdict, assetZipName) {
+    switch (verdict) {
+        case 'manifest-unparsable':
+            return `the downloaded ${SHA256SUMS_ASSET_NAME} manifest was empty or unparsable`;
+        case 'missing-entry':
+            return `the ${SHA256SUMS_ASSET_NAME} manifest has no entry for '${assetZipName}'`;
+        case 'digest-mismatch':
+            return `the downloaded '${assetZipName}' SHA256 did not match the ${SHA256SUMS_ASSET_NAME} manifest entry`;
+        default:
+            return 'the checksum was verified';
+    }
+}
+/** The lowercase hex SHA256 of a byte buffer (the downloaded zip). Pure. */
+export function sha256Hex(bytes) {
+    return createHash('sha256').update(bytes).digest('hex');
+}
+//# sourceMappingURL=server-source.js.map

package/dist/utils/server-source.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-source.js","sourceRoot":"","sources":["../../src/utils/server-source.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,+EAA+E;AAC/E,gFAAgF;AAChF,+EAA+E;AAC/E,gFAAgF;AAChF,8EAA8E;AAC9E,iFAAiF;AACjF,EAAE;AACF,uEAAuE;AACvE,qFAAqF;AACrF,kFAAkF;AAClF,kEAAkE;AAElE,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAEpC;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,OAAO,CAAC;AAE9C,kGAAkG;AAClG,MAAM,CAAC,MAAM,qBAAqB,GAAG,YAAY,CAAC;AAElD,8DAA8D;AAC9D,MAAM,CAAC,MAAM,mBAAmB,GAAG,+BAA+B,CAAC;AAEnE,6FAA6F;AAC7F,MAAM,CAAC,MAAM,sBAAsB,GAAG,oBAAoB,CAAC;AAE3D,0EAA0E;AAC1E,MAAM,CAAC,MAAM,mBAAmB,GAAG,sBAAsB,CAAC;AAE1D,iFAAiF;AACjF,MAAM,CAAC,MAAM,qBAAqB,GAAG,YAAY,CAAC;AAElD,4FAA4F;AAC5F,MAAM,UAAU,OAAO,CAAC,WAA4B,OAAO,CAAC,QAAQ;IAClE,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,OAAO;YACV,OAAO,KAAK,CAAC;QACf,KAAK,QAAQ;YACX,OAAO,KAAK,CAAC;QACf,KAAK,OAAO;YACV,OAAO,OAAO,CAAC;QACjB;YACE,OAAO,SAAS,CAAC;IACrB,CAAC;AACH,CAAC;AAED,gGAAgG;AAChG,MAAM,UAAU,SAAS,CAAC,OAAe,OAAO,CAAC,IAAI;IACnD,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,KAAK;YACR,OAAO,KAAK,CAAC;QACf,KAAK,OAAO;YACV,OAAO,OAAO,CAAC;QACjB,KAAK,MAAM;YACT,OAAO,KAAK,CAAC;QACf,KAAK,KAAK;YACR,OAAO,KAAK,CAAC;QACf;YACE,OAAO,SAAS,CAAC;IACrB,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,WAA4B,OAAO,CAAC,QAAQ,EAAE,OAAe,OAAO,CAAC,IAAI;IACrG,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;AACnD,CAAC;AAED,kHAAkH;AAClH,MAAM,UAAU,wBAAwB,CAAC,WAA4B,OAAO,CAAC,QAAQ;IACnF,OAAO,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,sBAAsB,MAAM,CAAC,CAAC,CAAC,sBAAsB,CAAC;AACzF,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,eAAe,CAAC,GAAW;IACzC,OAAO,GAAG,mBAAmB,IAAI,GAAG,MAAM,CAAC;AAC7C,CAAC;AAED,2GAA2G;AAC3G,MAAM,UAAU,gBAAgB,CAAC,OAAe;IAC9C,MAAM,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACjC,OAAO,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;AACzC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAAe,EAAE,GAAW;IAC5D,OAAO,WAAW,qBAAqB,IAAI,mBAAmB,sBAAsB,gBAAgB,CAAC,OAAO,CAAC,IAAI,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC;AAC1I,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,OAAe;IAC3C,OAAO,WAAW,qBAAqB,IAAI,mBAAmB,sBAAsB,gBAAgB,CAAC,OAAO,CAAC,IAAI,qBAAqB,EAAE,CAAC;AAC3I,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CAAC,GAAW;IAChD,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,+CAA+C,GAAG,IAAI,CAAC,CAAC;IAC1E,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,4DAA4D,MAAM,CAAC,QAAQ,MAAM,GAAG,IAAI,CAAC,CAAC;IAC5G,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,qBAAqB,EAAE,CAAC;QAC5D,MAAM,IAAI,KAAK,CACb,oDAAoD,MAAM,CAAC,QAAQ,WAAW,qBAAqB,cAAc,CAClH,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,sFAAsF;AACtF,gGAAgG;AAChG,iEAAiE;AAEjE,kFAAkF;AAClF,SAAS,OAAO,CAAC,KAAa;IAC5B,IAAI,KAAK,CAAC,MAAM,KAAK,EAAE;QAAE,OAAO,KAAK,CAAC;IACtC,OAAO,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACzC,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,eAAe,CAAC,cAAyC;IACvE,MAAM,GAAG,GAAG,IAAI,GAAG,EAAkB,CAAC;IACtC,IAAI,CAAC,cAAc;QAAE,OAAO,GAAG,CAAC;IAEhC,KAAK,MAAM,OAAO,IAAI,cAAc,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAEhC,4EAA4E;QAC5E,+DAA+D;QAC/D,IAAI,QAAQ,GAAG,CAAC,CAAC,CAAC;QAClB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACrC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;gBACxC,QAAQ,GAAG,CAAC,CAAC;gBACb,MAAM;YACR,CAAC;QACH,CAAC;QACD,IAAI,QAAQ,IAAI,CAAC,IAAI,QAAQ,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;YAAE,SAAS;QAE3D,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;QAC5C,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC;YAAE,SAAS;QAEpC,IAAI,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QAC/D,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC3D,QAAQ,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC3B,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAEpC,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,WAAW,CAAC,WAAW,EAAE,CAAC,CAAC;IAC/C,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC;AAED,yGAAyG;AACzG,MAAM,UAAU,YAAY,CAAC,MAA2B,EAAE,YAAoB;IAC5E,IAAI,CAAC,MAAM,IAAI,CAAC,YAAY;QAAE,OAAO,IAAI,CAAC;IAC1C,OAAO,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,IAAI,CAAC;AAC1C,CAAC;AAED,mHAAmH;AACnH,MAAM,UAAU,aAAa,CAAC,iBAA4C,EAAE,eAA0C;IACpH,IAAI,CAAC,iBAAiB,IAAI,CAAC,iBAAiB,CAAC,IAAI,EAAE,IAAI,CAAC,eAAe,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE;QAAE,OAAO,KAAK,CAAC;IACjH,OAAO,iBAAiB,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,eAAe,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;AACzF,CAAC;AAKD;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB,CAC/B,cAAyC,EACzC,YAAoB,EACpB,kBAA6C;IAE7C,MAAM,MAAM,GAAG,eAAe,CAAC,cAAc,CAAC,CAAC;IAC/C,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,qBAAqB,CAAC;IAEpD,MAAM,QAAQ,GAAG,YAAY,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IACpD,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,eAAe,CAAC;IAE9C,OAAO,aAAa,CAAC,QAAQ,EAAE,kBAAkB,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,iBAAiB,CAAC;AACtF,CAAC;AAED,4GAA4G;AAC5G,MAAM,UAAU,qBAAqB,CAAC,OAAwB,EAAE,YAAoB;IAClF,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,qBAAqB;YACxB,OAAO,kBAAkB,qBAAqB,mCAAmC,CAAC;QACpF,KAAK,eAAe;YAClB,OAAO,OAAO,qBAAqB,+BAA+B,YAAY,GAAG,CAAC;QACpF,KAAK,iBAAiB;YACpB,OAAO,mBAAmB,YAAY,8BAA8B,qBAAqB,iBAAiB,CAAC;QAC7G;YACE,OAAO,2BAA2B,CAAC;IACvC,CAAC;AACH,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,SAAS,CAAC,KAAa;IACrC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "godot-cli",
-  "version": "0.16.1",
+  "version": "0.17.0",
   "description": "Cross-platform CLI tool for Godot-MCP (Skills & MCP). Resolves and launches the Godot editor with MCP connection env vars, runs MCP/system tools over HTTP, probes server health, configures AI agents (Claude Code, Cursor, VS Code, …), and enables/disables the godot_mcp addon. Works with Claude Code, Cursor, Copilot, and any MCP client.",
   "type": "module",
   "main": "dist/lib.js",