godot-cli 0.16.2 → 0.17.1

package/dist/utils/machine-credentials.js

@@ -0,0 +1,182 @@
+import * as fs from 'fs';
+import * as os from 'os';
+import * as path from 'path';
+import { execFileSync } from 'child_process';
+/**
+ * The shared **machine credential store** at `~/.ai-game-dev/` — a single per-machine home for the
+ * ai-game.dev account credential (`credentials.json`). Engines, CLIs, and the local server all read
+ * this store, so **sign-in happens once per machine** (design `06-engine-plugins.md` / D12).
+ *
+ * This is the TypeScript peer of the shared C# `MachineCredentialStore`
+ * (`MCP-Plugin-dotnet/McpPlugin/src/AgentConfig/MachineCredentialStore.cs`). The on-disk contract is
+ * matched byte-for-byte so a credential written by `godot-cli login` is read by the engine plugin
+ * (which auto-adopts it on editor boot) and vice-versa:
+ *
+ * - **POSIX** — `credentials.json` is written plaintext with `0600` permissions inside a `0700`
+ *   directory.
+ * - **Windows** — the file content is **DPAPI-encrypted** with the current user's key
+ *   (`CryptProtectData`, `CurrentUser` scope, no entropy) so the on-disk bytes are never plaintext.
+ *   Node has no built-in DPAPI, so we interop via PowerShell's `System.Security.Cryptography.
+ *   ProtectedData`, which is a managed wrapper over the very same `CryptProtectData`/
+ *   `CryptUnprotectData` calls the C# store uses — the blobs are cross-readable.
+ *
+ * Credentials are NEVER written to a project file / VCS. The optional `--project` per-project override
+ * (project-local `.godot-mcp/credentials.json`, gitignored) is handled by `credentials.ts`, not here.
+ */
+/** Directory name under the user home that holds the store (matches C# `MachineCredentialStore.DirectoryName`). */
+export const MACHINE_STORE_DIR_NAME = '.ai-game-dev';
+/** File name of the secret credential document. */
+export const MACHINE_CREDENTIALS_FILE_NAME = 'credentials.json';
+/**
+ * Optional env override for the store directory (advanced use / tests). When set, this exact
+ * directory is used verbatim; otherwise the store lives at `~/.ai-game-dev`. The DEFAULT matches the
+ * C# store so cross-tool interop holds — the override never changes the production path.
+ */
+export const MACHINE_STORE_DIR_ENV = 'AI_GAME_DEV_CREDENTIALS_DIR';
+// Schema version of the persisted document (matches C# `MachineCredentials.Version`).
+const SCHEMA_VERSION = 1;
+/** Absolute path of the store directory (honoring the env override). */
+export function getMachineStoreDir(baseDirOverride) {
+    if (baseDirOverride)
+        return baseDirOverride;
+    const envDir = process.env[MACHINE_STORE_DIR_ENV];
+    if (envDir && envDir.trim().length > 0)
+        return envDir;
+    return path.join(os.homedir(), MACHINE_STORE_DIR_NAME);
+}
+/** Absolute path of the secret credential file. */
+export function getMachineCredentialsPath(baseDirOverride) {
+    return path.join(getMachineStoreDir(baseDirOverride), MACHINE_CREDENTIALS_FILE_NAME);
+}
+/** True when a credential file exists in the store. */
+export function machineCredentialsExist(baseDirOverride) {
+    return fs.existsSync(getMachineCredentialsPath(baseDirOverride));
+}
+/**
+ * Read and (on Windows) decrypt the stored credentials, or `null` when none are present / empty.
+ * Throws on a decryption failure or malformed JSON (a corrupt or foreign-user credential); callers on
+ * a hot path should use {@link readMachineAccessToken}, which swallows those.
+ */
+export function readMachineCredentials(baseDirOverride) {
+    const credentialsPath = getMachineCredentialsPath(baseDirOverride);
+    if (!fs.existsSync(credentialsPath)) {
+        return null;
+    }
+    const raw = fs.readFileSync(credentialsPath);
+    if (raw.length === 0) {
+        return null;
+    }
+    const plaintext = isWindows() ? unprotectDpapi(raw) : raw;
+    const json = plaintext.toString('utf8');
+    if (json.trim().length === 0) {
+        return null;
+    }
+    const parsed = JSON.parse(json);
+    return parsed;
+}
+/**
+ * Encrypt (Windows) / restrict (POSIX) and write `credentials` to the store, creating the store
+ * directory with owner-only permissions if needed.
+ */
+export function writeMachineCredentials(credentials, baseDirOverride) {
+    const dir = getMachineStoreDir(baseDirOverride);
+    const credentialsPath = path.join(dir, MACHINE_CREDENTIALS_FILE_NAME);
+    ensureStoreDirectory(dir);
+    const json = serialize(credentials);
+    const plaintext = Buffer.from(json, 'utf8');
+    const bytes = isWindows() ? protectDpapi(plaintext) : plaintext;
+    fs.writeFileSync(credentialsPath, bytes, { mode: 0o600 });
+    setPosixPermissions(credentialsPath, 0o600);
+}
+/**
+ * Convenience reader for the persisted access token. Swallows a missing / malformed / undecryptable
+ * file (returns undefined) so a broken store can never crash a command; `login` re-authenticates and
+ * overwrites it.
+ */
+export function readMachineAccessToken(baseDirOverride) {
+    let credentials;
+    try {
+        credentials = readMachineCredentials(baseDirOverride);
+    }
+    catch {
+        return undefined;
+    }
+    const token = credentials?.accessToken;
+    return typeof token === 'string' && token.trim().length > 0 ? token : undefined;
+}
+/** Delete the stored credentials (sign-out). No-op when none exist. */
+export function deleteMachineCredentials(baseDirOverride) {
+    const credentialsPath = getMachineCredentialsPath(baseDirOverride);
+    if (fs.existsSync(credentialsPath)) {
+        fs.rmSync(credentialsPath, { force: true });
+    }
+}
+// ── Serialization ────────────────────────────────────────────────────────────────────────────────
+function serialize(credentials) {
+    // Mirror the C# store's camelCase + WhenWritingNull: always emit `version`, omit null/undefined
+    // optional fields. Indentation is cosmetic (the reader is whitespace-insensitive).
+    const doc = { version: credentials.version ?? SCHEMA_VERSION };
+    if (credentials.accessToken != null)
+        doc.accessToken = credentials.accessToken;
+    if (credentials.refreshToken != null)
+        doc.refreshToken = credentials.refreshToken;
+    if (credentials.expiresAt != null)
+        doc.expiresAt = credentials.expiresAt;
+    if (credentials.serverTarget != null)
+        doc.serverTarget = credentials.serverTarget;
+    if (credentials.subject != null)
+        doc.subject = credentials.subject;
+    return JSON.stringify(doc, null, 2) + '\n';
+}
+// ── Filesystem permissions ───────────────────────────────────────────────────────────────────────
+function ensureStoreDirectory(dir) {
+    fs.mkdirSync(dir, { recursive: true, mode: 0o700 });
+    setPosixPermissions(dir, 0o700);
+}
+function setPosixPermissions(target, mode) {
+    if (isWindows())
+        return; // chmod is a no-op on Windows; DPAPI provides at-rest protection there.
+    try {
+        fs.chmodSync(target, mode);
+    }
+    catch {
+        // Best-effort only — never fail persistence over a chmod (e.g. exotic filesystems).
+    }
+}
+// ── Windows DPAPI via PowerShell (System.Security.Cryptography.ProtectedData) ───────────────────────
+// ProtectedData.Protect/Unprotect wrap CryptProtectData/CryptUnprotectData with the SAME CurrentUser
+// scope + null entropy the C# MachineCredentialStore uses, so the on-disk blobs are cross-readable.
+function isWindows() {
+    return process.platform === 'win32';
+}
+const DPAPI_PROTECT_SCRIPT = "Add-Type -AssemblyName System.Security; " +
+    "$in = [Console]::In.ReadToEnd().Trim(); " +
+    "$bytes = [Convert]::FromBase64String($in); " +
+    "$prot = [System.Security.Cryptography.ProtectedData]::Protect($bytes, $null, 'CurrentUser'); " +
+    "[Console]::Out.Write([Convert]::ToBase64String($prot))";
+const DPAPI_UNPROTECT_SCRIPT = "Add-Type -AssemblyName System.Security; " +
+    "$in = [Console]::In.ReadToEnd().Trim(); " +
+    "$bytes = [Convert]::FromBase64String($in); " +
+    "$plain = [System.Security.Cryptography.ProtectedData]::Unprotect($bytes, $null, 'CurrentUser'); " +
+    "[Console]::Out.Write([Convert]::ToBase64String($plain))";
+function protectDpapi(plaintext) {
+    return runDpapi(DPAPI_PROTECT_SCRIPT, plaintext, 'encrypt');
+}
+function unprotectDpapi(cipher) {
+    return runDpapi(DPAPI_UNPROTECT_SCRIPT, cipher, 'decrypt');
+}
+function runDpapi(script, input, op) {
+    try {
+        const out = execFileSync('powershell', ['-NoProfile', '-NonInteractive', '-Command', script], {
+            input: input.toString('base64'),
+            encoding: 'utf8',
+            windowsHide: true,
+        });
+        return Buffer.from(out.trim(), 'base64');
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        throw new Error(`Failed to ${op} the machine credential store via DPAPI: ${message}`);
+    }
+}
+//# sourceMappingURL=machine-credentials.js.map

package/dist/utils/machine-credentials.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"machine-credentials.js","sourceRoot":"","sources":["../../src/utils/machine-credentials.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAE7C;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,mHAAmH;AACnH,MAAM,CAAC,MAAM,sBAAsB,GAAG,cAAc,CAAC;AAErD,mDAAmD;AACnD,MAAM,CAAC,MAAM,6BAA6B,GAAG,kBAAkB,CAAC;AAEhE;;;;GAIG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,6BAA6B,CAAC;AAEnE,sFAAsF;AACtF,MAAM,cAAc,GAAG,CAAC,CAAC;AAqBzB,wEAAwE;AACxE,MAAM,UAAU,kBAAkB,CAAC,eAAwB;IACzD,IAAI,eAAe;QAAE,OAAO,eAAe,CAAC;IAC5C,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;IAClD,IAAI,MAAM,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,MAAM,CAAC;IACtD,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,sBAAsB,CAAC,CAAC;AACzD,CAAC;AAED,mDAAmD;AACnD,MAAM,UAAU,yBAAyB,CAAC,eAAwB;IAChE,OAAO,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,eAAe,CAAC,EAAE,6BAA6B,CAAC,CAAC;AACvF,CAAC;AAED,uDAAuD;AACvD,MAAM,UAAU,uBAAuB,CAAC,eAAwB;IAC9D,OAAO,EAAE,CAAC,UAAU,CAAC,yBAAyB,CAAC,eAAe,CAAC,CAAC,CAAC;AACnE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CAAC,eAAwB;IAC7D,MAAM,eAAe,GAAG,yBAAyB,CAAC,eAAe,CAAC,CAAC;IACnE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;QACpC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,eAAe,CAAC,CAAC;IAC7C,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,SAAS,GAAG,SAAS,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IAC1D,MAAM,IAAI,GAAG,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACxC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAuB,CAAC;IACtD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CAAC,WAA+B,EAAE,eAAwB;IAC/F,MAAM,GAAG,GAAG,kBAAkB,CAAC,eAAe,CAAC,CAAC;IAChD,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,6BAA6B,CAAC,CAAC;IAEtE,oBAAoB,CAAC,GAAG,CAAC,CAAC;IAE1B,MAAM,IAAI,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC;IACpC,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC5C,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAEhE,EAAE,CAAC,aAAa,CAAC,eAAe,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1D,mBAAmB,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC;AAC9C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CAAC,eAAwB;IAC7D,IAAI,WAAsC,CAAC;IAC3C,IAAI,CAAC;QACH,WAAW,GAAG,sBAAsB,CAAC,eAAe,CAAC,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,KAAK,GAAG,WAAW,EAAE,WAAW,CAAC;IACvC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAClF,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,wBAAwB,CAAC,eAAwB;IAC/D,MAAM,eAAe,GAAG,yBAAyB,CAAC,eAAe,CAAC,CAAC;IACnE,IAAI,EAAE,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;QACnC,EAAE,CAAC,MAAM,CAAC,eAAe,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,CAAC;AACH,CAAC;AAED,oGAAoG;AAEpG,SAAS,SAAS,CAAC,WAA+B;IAChD,gGAAgG;IAChG,mFAAmF;IACnF,MAAM,GAAG,GAA4B,EAAE,OAAO,EAAE,WAAW,CAAC,OAAO,IAAI,cAAc,EAAE,CAAC;IACxF,IAAI,WAAW,CAAC,WAAW,IAAI,IAAI;QAAE,GAAG,CAAC,WAAW,GAAG,WAAW,CAAC,WAAW,CAAC;IAC/E,IAAI,WAAW,CAAC,YAAY,IAAI,IAAI;QAAE,GAAG,CAAC,YAAY,GAAG,WAAW,CAAC,YAAY,CAAC;IAClF,IAAI,WAAW,CAAC,SAAS,IAAI,IAAI;QAAE,GAAG,CAAC,SAAS,GAAG,WAAW,CAAC,SAAS,CAAC;IACzE,IAAI,WAAW,CAAC,YAAY,IAAI,IAAI;QAAE,GAAG,CAAC,YAAY,GAAG,WAAW,CAAC,YAAY,CAAC;IAClF,IAAI,WAAW,CAAC,OAAO,IAAI,IAAI;QAAE,GAAG,CAAC,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC;IACnE,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC;AAC7C,CAAC;AAED,oGAAoG;AAEpG,SAAS,oBAAoB,CAAC,GAAW;IACvC,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACpD,mBAAmB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;AAClC,CAAC;AAED,SAAS,mBAAmB,CAAC,MAAc,EAAE,IAAY;IACvD,IAAI,SAAS,EAAE;QAAE,OAAO,CAAC,wEAAwE;IACjG,IAAI,CAAC;QACH,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,oFAAoF;IACtF,CAAC;AACH,CAAC;AAED,uGAAuG;AACvG,qGAAqG;AACrG,oGAAoG;AAEpG,SAAS,SAAS;IAChB,OAAO,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC;AACtC,CAAC;AAED,MAAM,oBAAoB,GACxB,0CAA0C;IAC1C,0CAA0C;IAC1C,6CAA6C;IAC7C,+FAA+F;IAC/F,wDAAwD,CAAC;AAE3D,MAAM,sBAAsB,GAC1B,0CAA0C;IAC1C,0CAA0C;IAC1C,6CAA6C;IAC7C,kGAAkG;IAClG,yDAAyD,CAAC;AAE5D,SAAS,YAAY,CAAC,SAAiB;IACrC,OAAO,QAAQ,CAAC,oBAAoB,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;AAC9D,CAAC;AAED,SAAS,cAAc,CAAC,MAAc;IACpC,OAAO,QAAQ,CAAC,sBAAsB,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;AAC7D,CAAC;AAED,SAAS,QAAQ,CAAC,MAAc,EAAE,KAAa,EAAE,EAAyB;IACxE,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,YAAY,EAAE,CAAC,YAAY,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,CAAC,EAAE;YAC5F,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAC/B,QAAQ,EAAE,MAAM;YAChB,WAAW,EAAE,IAAI;SAClB,CAAC,CAAC;QACH,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,QAAQ,CAAC,CAAC;IAC3C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,MAAM,IAAI,KAAK,CAAC,aAAa,EAAE,4CAA4C,OAAO,EAAE,CAAC,CAAC;IACxF,CAAC;AACH,CAAC"}

package/dist/utils/project-identity.d.ts

@@ -0,0 +1,76 @@
+/**
+ * The single canonical derivation of a project's **routing pin** and its
+ * **deterministic local port** from the project root path — the TypeScript port of the
+ * shared 7.0 library `com.IvanMurzak.McpPlugin.AgentConfig.ProjectIdentity`
+ * (`MCP-Plugin-dotnet/McpPlugin/src/AgentConfig/ProjectIdentity.cs`), which the Godot addon
+ * consumes via `GodotProjectIdentity`. Every runtime (Unity/Godot/Unreal plugins, the .NET
+ * sidecar, and the engine CLIs) derives identical values with no shared state and no probing,
+ * so an agent session launched in a project folder routes strictly to that project's engine
+ * instance (design `06-engine-plugins.md` § D14/D15).
+ *
+ * Algorithm (kept verbatim from the shipped Unity `GeneratePortFromDirectory` / the C# reference):
+ *   1. Trim trailing directory separators (`/` and `\`) so `/a/b` and `/a/b/` are the same project.
+ *      Separators are NOT converted — `C:\a` and `C:/a` hash differently (do NOT `path.normalize`).
+ *   2. Lowercase with an invariant fold (`ToLowerInvariant`-equivalent — see {@link toLowerInvariant}).
+ *   3. UTF-8 encode, then SHA-256 hash.
+ *   4. pin  = the first 4 bytes of the hash as 8 lowercase hex chars.
+ *   5. port = 20000 + (littleEndianUInt32(first 4 bytes) % 10000).  Range 20000-29999.
+ *
+ * Cross-language parity (C# vs TS) is pinned by the committed golden-vector file
+ * (`ProjectIdentity.GoldenVectors.json`) and reproduced byte-for-byte by
+ * `tests/project-identity.test.ts`.
+ */
+/** Inclusive lower bound of the deterministic local-port range. */
+export declare const MIN_PORT = 20000;
+/** Inclusive upper bound of the deterministic local-port range. */
+export declare const MAX_PORT = 29999;
+/** Number of ports in the deterministic range (10000). */
+export declare const PORT_RANGE: number;
+/** Number of hex characters in the routing pin (first 4 bytes of the hash). */
+export declare const PIN_LENGTH = 8;
+/** The resolved identity for a project root. */
+export interface ProjectIdentity {
+    /** The routing pin: first 8 lowercase hex chars of the SHA-256 of the normalized project root. */
+    pin: string;
+    /** The resolved local port — the hash-derived port unless an explicit override was supplied. */
+    port: number;
+    /** True when {@link port} came from an explicit user override rather than the hash. */
+    portIsOverridden: boolean;
+}
+/**
+ * Invariant lowercasing that matches C# `string.ToLowerInvariant()`.
+ *
+ * JS `String.prototype.toLowerCase()` and C# `ToLowerInvariant()` disagree on some Unicode
+ * characters. The one that matters for real project paths — and the one the golden-vector file
+ * explicitly pins (`unicodeDivergence`) — is **U+0130 LATIN CAPITAL LETTER I WITH DOT ABOVE**:
+ * C# `ToLowerInvariant` leaves it unchanged, whereas a naive JS `toLowerCase()` folds it to
+ * `i` + U+0307 (COMBINING DOT ABOVE), producing a DIFFERENT hash. Preserve U+0130 so the TS
+ * derivation reproduces the canonical C# value byte-for-byte; every other character lowercases
+ * identically under both implementations.
+ */
+export declare function toLowerInvariant(value: string): string;
+/**
+ * The exact string that is UTF-8/SHA-256 hashed: the project root with trailing directory
+ * separators trimmed, then invariant-lowercased. Exposed so callers/tests can reproduce the
+ * pre-hash string.
+ */
+export declare function normalize(projectRoot: string): string;
+/** The routing pin only (first 8 lowercase hex chars of the hash). Never affected by overrides. */
+export declare function derivePin(projectRoot: string): string;
+/**
+ * The pure hash-derived port (ignores any override). Byte-for-byte equivalent of the shipped
+ * Unity `GeneratePortFromDirectory` when given the same directory string.
+ */
+export declare function derivePort(projectRoot: string): number;
+/**
+ * The FULL project-path hash: the complete 64-char lowercase hex SHA-256 of the normalized
+ * project root — the `projectPathHash` an engine plugin sends in its hub instance-metadata
+ * handshake. The routing pin is a case-insensitive prefix of this value by construction.
+ */
+export declare function deriveProjectPathHash(projectRoot: string): string;
+/**
+ * Derive the identity for `projectRoot`. When `portOverride` is non-null (the user's explicit
+ * override from the project marker) it always wins for {@link ProjectIdentity.port}; the
+ * {@link ProjectIdentity.pin} is always hash-derived.
+ */
+export declare function deriveProjectIdentity(projectRoot: string, portOverride?: number | null): ProjectIdentity;

package/dist/utils/project-identity.js

@@ -0,0 +1,111 @@
+import { createHash } from 'crypto';
+/**
+ * The single canonical derivation of a project's **routing pin** and its
+ * **deterministic local port** from the project root path — the TypeScript port of the
+ * shared 7.0 library `com.IvanMurzak.McpPlugin.AgentConfig.ProjectIdentity`
+ * (`MCP-Plugin-dotnet/McpPlugin/src/AgentConfig/ProjectIdentity.cs`), which the Godot addon
+ * consumes via `GodotProjectIdentity`. Every runtime (Unity/Godot/Unreal plugins, the .NET
+ * sidecar, and the engine CLIs) derives identical values with no shared state and no probing,
+ * so an agent session launched in a project folder routes strictly to that project's engine
+ * instance (design `06-engine-plugins.md` § D14/D15).
+ *
+ * Algorithm (kept verbatim from the shipped Unity `GeneratePortFromDirectory` / the C# reference):
+ *   1. Trim trailing directory separators (`/` and `\`) so `/a/b` and `/a/b/` are the same project.
+ *      Separators are NOT converted — `C:\a` and `C:/a` hash differently (do NOT `path.normalize`).
+ *   2. Lowercase with an invariant fold (`ToLowerInvariant`-equivalent — see {@link toLowerInvariant}).
+ *   3. UTF-8 encode, then SHA-256 hash.
+ *   4. pin  = the first 4 bytes of the hash as 8 lowercase hex chars.
+ *   5. port = 20000 + (littleEndianUInt32(first 4 bytes) % 10000).  Range 20000-29999.
+ *
+ * Cross-language parity (C# vs TS) is pinned by the committed golden-vector file
+ * (`ProjectIdentity.GoldenVectors.json`) and reproduced byte-for-byte by
+ * `tests/project-identity.test.ts`.
+ */
+/** Inclusive lower bound of the deterministic local-port range. */
+export const MIN_PORT = 20000;
+/** Inclusive upper bound of the deterministic local-port range. */
+export const MAX_PORT = 29999;
+/** Number of ports in the deterministic range (10000). */
+export const PORT_RANGE = MAX_PORT - MIN_PORT + 1;
+/** Number of hex characters in the routing pin (first 4 bytes of the hash). */
+export const PIN_LENGTH = 8;
+const SEPARATOR_FORWARD = '/';
+const SEPARATOR_BACK = String.fromCharCode(92); // backslash
+/**
+ * Invariant lowercasing that matches C# `string.ToLowerInvariant()`.
+ *
+ * JS `String.prototype.toLowerCase()` and C# `ToLowerInvariant()` disagree on some Unicode
+ * characters. The one that matters for real project paths — and the one the golden-vector file
+ * explicitly pins (`unicodeDivergence`) — is **U+0130 LATIN CAPITAL LETTER I WITH DOT ABOVE**:
+ * C# `ToLowerInvariant` leaves it unchanged, whereas a naive JS `toLowerCase()` folds it to
+ * `i` + U+0307 (COMBINING DOT ABOVE), producing a DIFFERENT hash. Preserve U+0130 so the TS
+ * derivation reproduces the canonical C# value byte-for-byte; every other character lowercases
+ * identically under both implementations.
+ */
+export function toLowerInvariant(value) {
+    let result = '';
+    for (const ch of value) {
+        result += ch === 'İ' ? ch : ch.toLowerCase();
+    }
+    return result;
+}
+/**
+ * The exact string that is UTF-8/SHA-256 hashed: the project root with trailing directory
+ * separators trimmed, then invariant-lowercased. Exposed so callers/tests can reproduce the
+ * pre-hash string.
+ */
+export function normalize(projectRoot) {
+    return toLowerInvariant(trimTrailingSeparators(projectRoot));
+}
+/** The routing pin only (first 8 lowercase hex chars of the hash). Never affected by overrides. */
+export function derivePin(projectRoot) {
+    return hashOf(projectRoot).subarray(0, PIN_LENGTH / 2).toString('hex');
+}
+/**
+ * The pure hash-derived port (ignores any override). Byte-for-byte equivalent of the shipped
+ * Unity `GeneratePortFromDirectory` when given the same directory string.
+ */
+export function derivePort(projectRoot) {
+    return portFromHash(hashOf(projectRoot));
+}
+/**
+ * The FULL project-path hash: the complete 64-char lowercase hex SHA-256 of the normalized
+ * project root — the `projectPathHash` an engine plugin sends in its hub instance-metadata
+ * handshake. The routing pin is a case-insensitive prefix of this value by construction.
+ */
+export function deriveProjectPathHash(projectRoot) {
+    return hashOf(projectRoot).toString('hex');
+}
+/**
+ * Derive the identity for `projectRoot`. When `portOverride` is non-null (the user's explicit
+ * override from the project marker) it always wins for {@link ProjectIdentity.port}; the
+ * {@link ProjectIdentity.pin} is always hash-derived.
+ */
+export function deriveProjectIdentity(projectRoot, portOverride) {
+    const hash = hashOf(projectRoot);
+    const pin = hash.subarray(0, PIN_LENGTH / 2).toString('hex');
+    if (portOverride !== undefined && portOverride !== null) {
+        return { pin, port: portOverride, portIsOverridden: true };
+    }
+    return { pin, port: portFromHash(hash), portIsOverridden: false };
+}
+function hashOf(projectRoot) {
+    if (projectRoot === null || projectRoot === undefined) {
+        throw new TypeError('projectRoot must be a string');
+    }
+    return createHash('sha256').update(Buffer.from(normalize(projectRoot), 'utf8')).digest();
+}
+function portFromHash(hash) {
+    // First 4 bytes as an explicit little-endian uint32 — matches the C# byte-shift
+    // (`hash[0] | hash[1]<<8 | hash[2]<<16 | hash[3]<<24`) and is CPU-endianness independent.
+    const value = hash.readUInt32LE(0);
+    return MIN_PORT + (value % PORT_RANGE);
+}
+function trimTrailingSeparators(path) {
+    let end = path.length;
+    while (end > 1 && (path[end - 1] === SEPARATOR_FORWARD || path[end - 1] === SEPARATOR_BACK)) {
+        end--;
+    }
+    return end === path.length ? path : path.slice(0, end);
+}
+//# sourceMappingURL=project-identity.js.map

package/dist/utils/project-identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-identity.js","sourceRoot":"","sources":["../../src/utils/project-identity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAEpC;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,mEAAmE;AACnE,MAAM,CAAC,MAAM,QAAQ,GAAG,KAAK,CAAC;AAE9B,mEAAmE;AACnE,MAAM,CAAC,MAAM,QAAQ,GAAG,KAAK,CAAC;AAE9B,0DAA0D;AAC1D,MAAM,CAAC,MAAM,UAAU,GAAG,QAAQ,GAAG,QAAQ,GAAG,CAAC,CAAC;AAElD,+EAA+E;AAC/E,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC;AAE5B,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAC9B,MAAM,cAAc,GAAG,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY;AAY5D;;;;;;;;;;GAUG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAa;IAC5C,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,KAAK,MAAM,EAAE,IAAI,KAAK,EAAE,CAAC;QACvB,MAAM,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC;IAC/C,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,SAAS,CAAC,WAAmB;IAC3C,OAAO,gBAAgB,CAAC,sBAAsB,CAAC,WAAW,CAAC,CAAC,CAAC;AAC/D,CAAC;AAED,mGAAmG;AACnG,MAAM,UAAU,SAAS,CAAC,WAAmB;IAC3C,OAAO,MAAM,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,UAAU,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACzE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,UAAU,CAAC,WAAmB;IAC5C,OAAO,YAAY,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC;AAC3C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CAAC,WAAmB;IACvD,OAAO,MAAM,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAC7C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CAAC,WAAmB,EAAE,YAA4B;IACrF,MAAM,IAAI,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC;IACjC,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,UAAU,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC7D,IAAI,YAAY,KAAK,SAAS,IAAI,YAAY,KAAK,IAAI,EAAE,CAAC;QACxD,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,YAAY,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC;IAC7D,CAAC;IACD,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,YAAY,CAAC,IAAI,CAAC,EAAE,gBAAgB,EAAE,KAAK,EAAE,CAAC;AACpE,CAAC;AAED,SAAS,MAAM,CAAC,WAAmB;IACjC,IAAI,WAAW,KAAK,IAAI,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QACtD,MAAM,IAAI,SAAS,CAAC,8BAA8B,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;AAC3F,CAAC;AAED,SAAS,YAAY,CAAC,IAAY;IAChC,gFAAgF;IAChF,0FAA0F;IAC1F,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACnC,OAAO,QAAQ,GAAG,CAAC,KAAK,GAAG,UAAU,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,sBAAsB,CAAC,IAAY;IAC1C,IAAI,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC;IACtB,OAAO,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,iBAAiB,IAAI,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,cAAc,CAAC,EAAE,CAAC;QAC5F,GAAG,EAAE,CAAC;IACR,CAAC;IACD,OAAO,GAAG,KAAK,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AACzD,CAAC"}

package/dist/utils/project-marker.d.ts

@@ -0,0 +1,64 @@
+/**
+ * The tool-neutral, committable **project marker** `<project>/.ai-game-dev/project.json`
+ * (design 06 / D15). It is NON-secret — credentials NEVER go here — and records:
+ *
+ * - `serverTarget` — the hub URL the enrolled plugin should connect to (hosted
+ *   `https://ai-game.dev` or a local `http://localhost:<port>`), returned by the
+ *   enrollment-redeem endpoint.
+ * - `pin` — the D14 routing pin (first 8 hex of the ProjectIdentity SHA256), so
+ *   the plugin, the CLIs, and `configure` all agree which project the session
+ *   routes to.
+ * - `port` — the deterministic local port (SHA256→20000–29999) recorded for a
+ *   localhost target so a terminal-written config and the plugin never diverge.
+ * - `portOverride` — an explicit user port override (D15) that always wins.
+ *
+ * ProjectIdentity resolution and every config writer consult it, so an override
+ * or target can never silently diverge between the plugin and a terminal-written
+ * config.
+ */
+export declare const PROJECT_MARKER_RELATIVE_PATH: string;
+export interface ProjectMarker {
+    /** The enrolled server target URL (hosted or local). */
+    serverTarget?: string;
+    /** The D14 routing pin (first 8 hex of the ProjectIdentity hash). */
+    pin?: string;
+    /** The deterministic local port (recorded for localhost targets). */
+    port?: number;
+    /** An explicit user port override (always wins over the derived port). */
+    portOverride?: number;
+    /** Forward-compatible: unknown keys are preserved on rewrite. */
+    [key: string]: unknown;
+}
+/** Absolute path of the marker file for a project. */
+export declare function getProjectMarkerPath(projectPath: string): string;
+/** Read the marker, or null when absent / empty / malformed. Never throws. */
+export declare function readProjectMarker(projectPath: string): ProjectMarker | null;
+/**
+ * Write the marker, MERGING over any existing document so a re-enroll never drops
+ * a previously-set `portOverride` or forward-compatible key. Creates the
+ * `.ai-game-dev/` directory if needed. The supplied `patch` fields overwrite the
+ * existing values; every other existing field is preserved.
+ */
+export declare function writeProjectMarker(projectPath: string, patch: ProjectMarker): ProjectMarker;
+/** True when `url`'s host is a loopback address (localhost / 127.0.0.1 / ::1). Never throws. */
+export declare function isLocalhostUrl(url: string): boolean;
+/**
+ * Append (or replace) the `/p/<pin>` routing segment on an MCP-server URL —
+ * the D14 project pin the plugin routes on. A URL already ending in `/p/<hex>`
+ * has its pin REPLACED (idempotent re-enroll); otherwise `/p/<pin>` is appended
+ * to the existing path. Query/hash are preserved. Returns the input unchanged on
+ * a malformed URL. Pure.
+ */
+export declare function applyPinToUrl(url: string, pin: string): string;
+/**
+ * Upsert the D14 pin into the URL of the `ai-game-developer` entry of every
+ * EXISTING project-local agent config (design 06 — "upserts the D14 pin into any
+ * existing project-local agent config entry"), so a hosted/local server the user
+ * added manually before enrolling becomes pinned. Best-effort: user-global
+ * configs (Claude Desktop, Cline, …) are skipped; a config with no
+ * `ai-game-developer` entry or no URL is left untouched; a malformed/unreadable
+ * file is skipped without throwing. Returns the absolute paths that were
+ * rewritten. JSON configs rewrite the `url`/`serverUrl` value; the Codex TOML
+ * config rewrites its `url = "…"` line.
+ */
+export declare function upsertPinIntoAgentConfigs(projectPath: string, pin: string): string[];

package/dist/utils/project-marker.js

@@ -0,0 +1,192 @@
+import * as fs from 'fs';
+import * as path from 'path';
+import { PIN_LENGTH } from './project-identity.js';
+import { agentRegistry, MCP_SERVER_NAME } from './agents.js';
+/**
+ * The tool-neutral, committable **project marker** `<project>/.ai-game-dev/project.json`
+ * (design 06 / D15). It is NON-secret — credentials NEVER go here — and records:
+ *
+ * - `serverTarget` — the hub URL the enrolled plugin should connect to (hosted
+ *   `https://ai-game.dev` or a local `http://localhost:<port>`), returned by the
+ *   enrollment-redeem endpoint.
+ * - `pin` — the D14 routing pin (first 8 hex of the ProjectIdentity SHA256), so
+ *   the plugin, the CLIs, and `configure` all agree which project the session
+ *   routes to.
+ * - `port` — the deterministic local port (SHA256→20000–29999) recorded for a
+ *   localhost target so a terminal-written config and the plugin never diverge.
+ * - `portOverride` — an explicit user port override (D15) that always wins.
+ *
+ * ProjectIdentity resolution and every config writer consult it, so an override
+ * or target can never silently diverge between the plugin and a terminal-written
+ * config.
+ */
+export const PROJECT_MARKER_RELATIVE_PATH = path.join('.ai-game-dev', 'project.json');
+/** Absolute path of the marker file for a project. */
+export function getProjectMarkerPath(projectPath) {
+    return path.join(projectPath, PROJECT_MARKER_RELATIVE_PATH);
+}
+/** Read the marker, or null when absent / empty / malformed. Never throws. */
+export function readProjectMarker(projectPath) {
+    const markerPath = getProjectMarkerPath(projectPath);
+    if (!fs.existsSync(markerPath))
+        return null;
+    try {
+        const raw = fs.readFileSync(markerPath, 'utf-8');
+        if (raw.trim().length === 0)
+            return null;
+        const parsed = JSON.parse(raw);
+        if (!parsed || typeof parsed !== 'object' || Array.isArray(parsed))
+            return null;
+        return parsed;
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Write the marker, MERGING over any existing document so a re-enroll never drops
+ * a previously-set `portOverride` or forward-compatible key. Creates the
+ * `.ai-game-dev/` directory if needed. The supplied `patch` fields overwrite the
+ * existing values; every other existing field is preserved.
+ */
+export function writeProjectMarker(projectPath, patch) {
+    const markerPath = getProjectMarkerPath(projectPath);
+    const dir = path.dirname(markerPath);
+    if (!fs.existsSync(dir)) {
+        fs.mkdirSync(dir, { recursive: true });
+    }
+    const existing = readProjectMarker(projectPath) ?? {};
+    const merged = { ...existing, ...patch };
+    fs.writeFileSync(markerPath, JSON.stringify(merged, null, 2) + '\n');
+    return merged;
+}
+/** True when `url`'s host is a loopback address (localhost / 127.0.0.1 / ::1). Never throws. */
+export function isLocalhostUrl(url) {
+    try {
+        const host = new URL(url).hostname.toLowerCase();
+        return host === 'localhost' || host === '127.0.0.1' || host === '::1' || host === '[::1]';
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Append (or replace) the `/p/<pin>` routing segment on an MCP-server URL —
+ * the D14 project pin the plugin routes on. A URL already ending in `/p/<hex>`
+ * has its pin REPLACED (idempotent re-enroll); otherwise `/p/<pin>` is appended
+ * to the existing path. Query/hash are preserved. Returns the input unchanged on
+ * a malformed URL. Pure.
+ */
+export function applyPinToUrl(url, pin) {
+    let parsed;
+    try {
+        parsed = new URL(url);
+    }
+    catch {
+        return url;
+    }
+    const segments = parsed.pathname.split('/').filter((s) => s.length > 0);
+    const hexLen = PIN_LENGTH; // 8
+    const isPinHex = (s) => new RegExp(`^[0-9a-f]{${hexLen}}$`, 'i').test(s);
+    if (segments.length >= 2 && segments[segments.length - 2] === 'p' && isPinHex(segments[segments.length - 1])) {
+        segments[segments.length - 1] = pin;
+    }
+    else {
+        segments.push('p', pin);
+    }
+    parsed.pathname = '/' + segments.join('/');
+    return parsed.toString();
+}
+/** True when `configPath` resolves INSIDE `projectPath` (a project-local, not user-global, config). */
+function isProjectLocalConfig(configPath, projectPath) {
+    const root = path.resolve(projectPath) + path.sep;
+    return path.resolve(configPath).startsWith(root);
+}
+/**
+ * Upsert the D14 pin into the URL of the `ai-game-developer` entry of every
+ * EXISTING project-local agent config (design 06 — "upserts the D14 pin into any
+ * existing project-local agent config entry"), so a hosted/local server the user
+ * added manually before enrolling becomes pinned. Best-effort: user-global
+ * configs (Claude Desktop, Cline, …) are skipped; a config with no
+ * `ai-game-developer` entry or no URL is left untouched; a malformed/unreadable
+ * file is skipped without throwing. Returns the absolute paths that were
+ * rewritten. JSON configs rewrite the `url`/`serverUrl` value; the Codex TOML
+ * config rewrites its `url = "…"` line.
+ */
+export function upsertPinIntoAgentConfigs(projectPath, pin) {
+    const updated = [];
+    for (const agent of agentRegistry) {
+        let configPath;
+        try {
+            configPath = agent.getConfigPath(projectPath);
+        }
+        catch {
+            continue;
+        }
+        if (!isProjectLocalConfig(configPath, projectPath))
+            continue;
+        if (!fs.existsSync(configPath))
+            continue;
+        try {
+            if (agent.configFormat === 'toml') {
+                if (upsertPinInTomlConfig(configPath, pin))
+                    updated.push(configPath);
+            }
+            else {
+                if (upsertPinInJsonConfig(configPath, agent.bodyPath, pin))
+                    updated.push(configPath);
+            }
+        }
+        catch {
+            // Best-effort: a single unreadable/malformed config never fails enrollment.
+        }
+    }
+    return updated;
+}
+/** Rewrite the `url`/`serverUrl` of `bodyPath.ai-game-developer` in a JSON config. Returns true when changed. */
+function upsertPinInJsonConfig(configPath, bodyPath, pin) {
+    const root = JSON.parse(fs.readFileSync(configPath, 'utf-8'));
+    if (!root || typeof root !== 'object' || Array.isArray(root))
+        return false;
+    const body = root[bodyPath];
+    if (!body || typeof body !== 'object' || Array.isArray(body))
+        return false;
+    const entry = body[MCP_SERVER_NAME];
+    if (!entry || typeof entry !== 'object' || Array.isArray(entry))
+        return false;
+    // The registry uses `url` for most agents and `serverUrl` for Antigravity.
+    const urlKey = typeof entry['url'] === 'string' ? 'url' : typeof entry['serverUrl'] === 'string' ? 'serverUrl' : null;
+    if (!urlKey)
+        return false;
+    const current = entry[urlKey];
+    const pinned = applyPinToUrl(current, pin);
+    if (pinned === current)
+        return false;
+    entry[urlKey] = pinned;
+    fs.writeFileSync(configPath, JSON.stringify(root, null, 2) + '\n');
+    return true;
+}
+/** Rewrite the `url = "…"` line under `[mcp_servers.ai-game-developer]` in a Codex TOML config. Returns true when changed. */
+function upsertPinInTomlConfig(configPath, pin) {
+    const lines = fs.readFileSync(configPath, 'utf-8').split('\n');
+    const header = `[mcp_servers.${MCP_SERVER_NAME}]`;
+    const sectionIdx = lines.findIndex((l) => l.trim() === header);
+    if (sectionIdx < 0)
+        return false;
+    for (let i = sectionIdx + 1; i < lines.length; i++) {
+        const trimmed = lines[i].trim();
+        if (trimmed.startsWith('['))
+            break; // next section
+        const m = trimmed.match(/^url\s*=\s*"([^"]*)"\s*$/);
+        if (m) {
+            const pinned = applyPinToUrl(m[1], pin);
+            if (pinned === m[1])
+                return false;
+            lines[i] = `url = "${pinned}"`;
+            fs.writeFileSync(configPath, lines.join('\n'));
+            return true;
+        }
+    }
+    return false;
+}
+//# sourceMappingURL=project-marker.js.map

package/dist/utils/project-marker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-marker.js","sourceRoot":"","sources":["../../src/utils/project-marker.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAE7D;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,cAAc,CAAC,CAAC;AAetF,sDAAsD;AACtD,MAAM,UAAU,oBAAoB,CAAC,WAAmB;IACtD,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,4BAA4B,CAAC,CAAC;AAC9D,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,iBAAiB,CAAC,WAAmB;IACnD,MAAM,UAAU,GAAG,oBAAoB,CAAC,WAAW,CAAC,CAAC;IACrD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QACjD,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACzC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAkB,CAAC;QAChD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC;QAChF,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,WAAmB,EAAE,KAAoB;IAC1E,MAAM,UAAU,GAAG,oBAAoB,CAAC,WAAW,CAAC,CAAC;IACrD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACrC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACxB,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzC,CAAC;IACD,MAAM,QAAQ,GAAG,iBAAiB,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;IACtD,MAAM,MAAM,GAAkB,EAAE,GAAG,QAAQ,EAAE,GAAG,KAAK,EAAE,CAAC;IACxD,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IACrE,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,gGAAgG;AAChG,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;QACjD,OAAO,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,OAAO,CAAC;IAC5F,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAAC,GAAW,EAAE,GAAW;IACpD,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,CAAC;IACb,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACxE,MAAM,MAAM,GAAG,UAAU,CAAC,CAAC,IAAI;IAC/B,MAAM,QAAQ,GAAG,CAAC,CAAS,EAAW,EAAE,CAAC,IAAI,MAAM,CAAC,aAAa,MAAM,IAAI,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC1F,IAAI,QAAQ,CAAC,MAAM,IAAI,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,GAAG,IAAI,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7G,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC;IACtC,CAAC;SAAM,CAAC;QACN,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC1B,CAAC;IACD,MAAM,CAAC,QAAQ,GAAG,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3C,OAAO,MAAM,CAAC,QAAQ,EAAE,CAAC;AAC3B,CAAC;AAED,uGAAuG;AACvG,SAAS,oBAAoB,CAAC,UAAkB,EAAE,WAAmB;IACnE,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC;IAClD,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;AACnD,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,yBAAyB,CAAC,WAAmB,EAAE,GAAW;IACxE,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,KAAK,IAAI,aAAa,EAAE,CAAC;QAClC,IAAI,UAAkB,CAAC;QACvB,IAAI,CAAC;YACH,UAAU,GAAG,KAAK,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC;QAChD,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,IAAI,CAAC,oBAAoB,CAAC,UAAU,EAAE,WAAW,CAAC;YAAE,SAAS;QAC7D,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC;YAAE,SAAS;QAEzC,IAAI,CAAC;YACH,IAAI,KAAK,CAAC,YAAY,KAAK,MAAM,EAAE,CAAC;gBAClC,IAAI,qBAAqB,CAAC,UAAU,EAAE,GAAG,CAAC;oBAAE,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YACvE,CAAC;iBAAM,CAAC;gBACN,IAAI,qBAAqB,CAAC,UAAU,EAAE,KAAK,CAAC,QAAQ,EAAE,GAAG,CAAC;oBAAE,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YACvF,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,4EAA4E;QAC9E,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,iHAAiH;AACjH,SAAS,qBAAqB,CAAC,UAAkB,EAAE,QAAgB,EAAE,GAAW;IAC9E,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAA4B,CAAC;IACzF,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3E,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAwC,CAAC;IACnE,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3E,MAAM,KAAK,GAAG,IAAI,CAAC,eAAe,CAAwC,CAAC;IAC3E,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAE9E,2EAA2E;IAC3E,MAAM,MAAM,GAAG,OAAO,KAAK,CAAC,KAAK,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC,WAAW,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC;IACtH,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAE1B,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAW,CAAC;IACxC,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IAC3C,IAAI,MAAM,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC;IAErC,KAAK,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC;IACvB,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IACnE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,8HAA8H;AAC9H,SAAS,qBAAqB,CAAC,UAAkB,EAAE,GAAW;IAC5D,MAAM,KAAK,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC/D,MAAM,MAAM,GAAG,gBAAgB,eAAe,GAAG,CAAC;IAClD,MAAM,UAAU,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,MAAM,CAAC,CAAC;IAC/D,IAAI,UAAU,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAEjC,KAAK,IAAI,CAAC,GAAG,UAAU,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACnD,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAChC,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,MAAM,CAAC,eAAe;QACnD,MAAM,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;QACpD,IAAI,CAAC,EAAE,CAAC;YACN,MAAM,MAAM,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YACxC,IAAI,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC;gBAAE,OAAO,KAAK,CAAC;YAClC,KAAK,CAAC,CAAC,CAAC,GAAG,UAAU,MAAM,GAAG,CAAC;YAC/B,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;YAC/C,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}