ue-mcp 1.2.0 → 1.2.2

package/dist/flow/task-guards.js

@@ -10,20 +10,29 @@
  *   - `afterWrite`  run after a write-classified call
  *
  * No new plugin-activation concept is needed: the loader already registers every
- * `manifest.tasks` entry by name, so a `guard.*.*` task is picked up here. Each
- * matched task becomes one `BridgeGuard`. The core knows nothing about what a
- * guard does - source control, access policy, audit, and rate limiting are all
- * just guards.
+ * `manifest.tasks` entry by name, so a `guard.*.*` task is picked up here. The
+ * core knows nothing about what a guard does - source control, access policy,
+ * audit, and rate limiting are all just guards.
  *
- * A guard task is invoked with `{ method, params, paths }` (paths = the existing
- * on-disk files the call will touch, empty for non-writes) plus, for `after`
- * guards, `result`. A `before` guard denies the call by returning `success:false`
- * or throwing.
+ * The naming convention and the discovery walk are flowkit's; this module binds
+ * them to the bridge: the `write` scope comes from `write-methods.ts`, the guard
+ * task is invoked with `{ method, params, paths }` (plus `result` for `after`
+ * guards), and a denial surfaces as an `McpError` the tool layer already knows
+ * how to render.
  */
 import * as fs from "node:fs";
+import { discoverTaskGuards as discoverFlowkitGuards } from "@db-lyon/flowkit/guard";
+import { writeScope } from "./guard.js";
 import { McpError, ErrorCode } from "../errors.js";
-import { debug } from "../log.js";
-const GUARD_TASK_RE = /^guard\.(.+)\.(before|beforeWrite|after|afterWrite)$/;
+import { debug, info } from "../log.js";
+/** Adapts flowkit's logger to this server's `guard`-component logging. */
+const GUARD_LOGGER = {
+    debug: (...args) => debug("guard", args.map(String).join(" ")),
+    info: (...args) => info("guard", args.map(String).join(" ")),
+    warn: (...args) => info("guard", args.map(String).join(" ")),
+    error: (...args) => info("guard", args.map(String).join(" ")),
+    child: () => GUARD_LOGGER,
+};
 /** Resolve a UE content path to an absolute file, or null if it does not exist. */
 export function makeResolveExistingFile(project) {
     return (contentPath) => {
@@ -42,63 +51,30 @@ export function makeResolveExistingFile(project) {
  * guard that itself calls the bridge cannot recurse through the pipeline.
  */
 export function discoverTaskGuards(registry, ctx, rawBridge) {
-    const guards = [];
-    for (const taskName of registry.listRegistered()) {
-        const m = GUARD_TASK_RE.exec(taskName);
-        if (!m)
-            continue;
-        const [, name, phase] = m;
-        const writeScoped = phase.endsWith("Write");
-        const isBefore = phase.startsWith("before");
-        const runTask = async (cc, result) => {
-            // Bind the guard to the editor whose call it is guarding, not to
-            // whichever bridge happened to be built first. cc.bridge is the RAW
-            // bridge of the session serving this call, so a guard can neither
-            // recurse through the pipeline nor act on another project's editor.
-            const guardCtx = cc.session
-                ? { ...ctx, bridge: cc.bridge, project: cc.session.project, session: cc.session }
-                : { ...ctx, bridge: rawBridge };
-            const options = {
-                method: cc.method,
-                params: cc.params,
-                paths: cc.writeFiles(),
-            };
-            if (result !== undefined)
-                options.result = result;
-            try {
-                const task = await registry.create(taskName, guardCtx, options);
-                return await task.run();
-            }
-            catch (e) {
-                throw new McpError(ErrorCode.WRITE_BLOCKED, `guard '${name}' errored on ${cc.method}: ${e.message}`);
-            }
-        };
-        const guard = {
-            name: `${name}.${phase}`,
-            appliesTo: writeScoped ? (cc) => cc.writeFiles().length > 0 : undefined,
-        };
-        if (isBefore) {
-            guard.before = async (cc) => {
-                const r = await runTask(cc);
-                if (!r.success) {
-                    const reason = r.error?.message ?? `denied by guard '${name}'`;
-                    const scope = cc.writeFiles().length ? ` on ${cc.writeFiles().join(", ")}` : "";
-                    throw new McpError(ErrorCode.WRITE_BLOCKED, `blocked (${cc.method})${scope}: ${reason}`);
-                }
-                debug("guard", `guard '${name}' allowed ${cc.method}`);
-            };
-        }
-        else {
-            // `after` guards observe the result for side effects (audit); a failing
-            // after-guard is logged but does not fail the already-completed call.
-            guard.after = async (cc, result) => {
-                const r = await runTask(cc, result);
-                if (!r.success)
-                    debug("guard", `after-guard '${name}' reported failure on ${cc.method}: ${r.error?.message}`);
-            };
-        }
-        guards.push(guard);
-    }
-    return guards;
+    return discoverFlowkitGuards(registry, {
+        scopes: { write: writeScope },
+        // Bind the guard to the editor whose call it is guarding, not to whichever
+        // bridge happened to be built first. cc.bridge is the RAW bridge of the
+        // session serving this call, so a guard can neither recurse through the
+        // pipeline nor act on another project's editor.
+        contextFor: (cc) => cc.session
+            ? { ...ctx, bridge: cc.bridge, project: cc.session.project, session: cc.session }
+            : { ...ctx, bridge: rawBridge },
+        optionsFor: (cc, result) => ({
+            method: cc.method,
+            params: cc.params,
+            paths: cc.writeFiles(),
+            ...(result !== undefined ? { result } : {}),
+        }),
+        onDeny: (info) => {
+            const files = info.ctx.writeFiles();
+            const scope = files.length ? ` on ${files.join(", ")}` : "";
+            return new McpError(ErrorCode.WRITE_BLOCKED, `blocked (${info.ctx.method})${scope}: ${info.reason}`);
+        },
+        onError: (info) => new McpError(ErrorCode.WRITE_BLOCKED, `guard '${info.guard}' errored on ${info.ctx.method}: ${info.reason}`),
+        // A failing after-guard is logged but does not fail the already-completed call.
+        onAfterFailure: (info) => debug("guard", `after-guard '${info.guard}' reported failure on ${info.ctx.method}: ${info.reason}`),
+        logger: GUARD_LOGGER,
+    });
 }
 //# sourceMappingURL=task-guards.js.map

package/dist/flow/task-guards.js.map

@@ -1 +1 @@
-{"version":3,"file":"task-guards.js","sourceRoot":"","sources":["../../src/flow/task-guards.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAO9B,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAElC,MAAM,aAAa,GAAG,sDAAsD,CAAC;AAE7E,mFAAmF;AACnF,MAAM,UAAU,uBAAuB,CAAC,OAAuB;IAC7D,OAAO,CAAC,WAAmB,EAAiB,EAAE;QAC5C,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,OAAO,CAAC,kBAAkB,CAAC,WAAW,CAAC,CAAC;YACpD,OAAO,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;QACzC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAChC,QAAsB,EACtB,GAAgB,EAChB,SAAkB;IAElB,MAAM,MAAM,GAAkB,EAAE,CAAC;IAEjC,KAAK,MAAM,QAAQ,IAAI,QAAQ,CAAC,cAAc,EAAE,EAAE,CAAC;QACjD,MAAM,CAAC,GAAG,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACvC,IAAI,CAAC,CAAC;YAAE,SAAS;QACjB,MAAM,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;QAC1B,MAAM,WAAW,GAAG,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC5C,MAAM,QAAQ,GAAG,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QAE5C,MAAM,OAAO,GAAG,KAAK,EAAE,EAAe,EAAE,MAAgB,EAAE,EAAE;YAC1D,iEAAiE;YACjE,oEAAoE;YACpE,kEAAkE;YAClE,oEAAoE;YACpE,MAAM,QAAQ,GAAgB,EAAE,CAAC,OAAO;gBACtC,CAAC,CAAC,EAAE,GAAG,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC,OAAO,EAAE;gBACjF,CAAC,CAAC,EAAE,GAAG,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;YAClC,MAAM,OAAO,GAA4B;gBACvC,MAAM,EAAE,EAAE,CAAC,MAAM;gBACjB,MAAM,EAAE,EAAE,CAAC,MAAM;gBACjB,KAAK,EAAE,EAAE,CAAC,UAAU,EAAE;aACvB,CAAC;YACF,IAAI,MAAM,KAAK,SAAS;gBAAE,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC;YAClD,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;gBAChE,OAAO,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC;YAC1B,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,MAAM,IAAI,QAAQ,CAChB,SAAS,CAAC,aAAa,EACvB,UAAU,IAAI,gBAAgB,EAAE,CAAC,MAAM,KAAM,CAAW,CAAC,OAAO,EAAE,CACnE,CAAC;YACJ,CAAC;QACH,CAAC,CAAC;QAEF,MAAM,KAAK,GAAgB;YACzB,IAAI,EAAE,GAAG,IAAI,IAAI,KAAK,EAAE;YACxB,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,UAAU,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS;SACxE,CAAC;QAEF,IAAI,QAAQ,EAAE,CAAC;YACb,KAAK,CAAC,MAAM,GAAG,KAAK,EAAE,EAAE,EAAE,EAAE;gBAC1B,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,EAAE,CAAC,CAAC;gBAC5B,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;oBACf,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,EAAE,OAAO,IAAI,oBAAoB,IAAI,GAAG,CAAC;oBAC/D,MAAM,KAAK,GAAG,EAAE,CAAC,UAAU,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,UAAU,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAChF,MAAM,IAAI,QAAQ,CAAC,SAAS,CAAC,aAAa,EAAE,YAAY,EAAE,CAAC,MAAM,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC,CAAC;gBAC3F,CAAC;gBACD,KAAK,CAAC,OAAO,EAAE,UAAU,IAAI,aAAa,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC;YACzD,CAAC,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,wEAAwE;YACxE,sEAAsE;YACtE,KAAK,CAAC,KAAK,GAAG,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE;gBACjC,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;gBACpC,IAAI,CAAC,CAAC,CAAC,OAAO;oBAAE,KAAK,CAAC,OAAO,EAAE,gBAAgB,IAAI,yBAAyB,EAAE,CAAC,MAAM,KAAK,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;YAChH,CAAC,CAAC;QACJ,CAAC;QAED,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrB,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}
+{"version":3,"file":"task-guards.js","sourceRoot":"","sources":["../../src/flow/task-guards.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAE,kBAAkB,IAAI,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAMrF,OAAO,EAAE,UAAU,EAAgE,MAAM,YAAY,CAAC;AACtG,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAExC,0EAA0E;AAC1E,MAAM,YAAY,GAAW;IAC3B,KAAK,EAAE,CAAC,GAAG,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC9D,IAAI,EAAE,CAAC,GAAG,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC5D,IAAI,EAAE,CAAC,GAAG,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC5D,KAAK,EAAE,CAAC,GAAG,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC7D,KAAK,EAAE,GAAG,EAAE,CAAC,YAAY;CAC1B,CAAC;AAEF,mFAAmF;AACnF,MAAM,UAAU,uBAAuB,CAAC,OAAuB;IAC7D,OAAO,CAAC,WAAmB,EAAiB,EAAE;QAC5C,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,OAAO,CAAC,kBAAkB,CAAC,WAAW,CAAC,CAAC;YACpD,OAAO,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;QACzC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAChC,QAAsB,EACtB,GAAgB,EAChB,SAAkB;IAElB,OAAO,qBAAqB,CAAuB,QAAQ,EAAE;QAC3D,MAAM,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE;QAE7B,2EAA2E;QAC3E,wEAAwE;QACxE,wEAAwE;QACxE,gDAAgD;QAChD,UAAU,EAAE,CAAC,EAAE,EAAe,EAAE,CAC9B,EAAE,CAAC,OAAO;YACR,CAAC,CAAC,EAAE,GAAG,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC,OAAO,EAAE;YACjF,CAAC,CAAC,EAAE,GAAG,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE;QAEnC,UAAU,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;YAC3B,MAAM,EAAE,EAAE,CAAC,MAAM;YACjB,MAAM,EAAE,EAAE,CAAC,MAAM;YACjB,KAAK,EAAE,EAAE,CAAC,UAAU,EAAE;YACtB,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5C,CAAC;QAEF,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;YACf,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC;YACpC,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5D,OAAO,IAAI,QAAQ,CACjB,SAAS,CAAC,aAAa,EACvB,YAAY,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,KAAK,KAAK,IAAI,CAAC,MAAM,EAAE,CACvD,CAAC;QACJ,CAAC;QAED,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAChB,IAAI,QAAQ,CACV,SAAS,CAAC,aAAa,EACvB,UAAU,IAAI,CAAC,KAAK,gBAAgB,IAAI,CAAC,GAAG,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,EAAE,CACtE;QAEH,gFAAgF;QAChF,cAAc,EAAE,CAAC,IAAI,EAAE,EAAE,CACvB,KAAK,CAAC,OAAO,EAAE,gBAAgB,IAAI,CAAC,KAAK,yBAAyB,IAAI,CAAC,GAAG,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC;QAEtG,MAAM,EAAE,YAAY;KACrB,CAAC,CAAC;AACL,CAAC"}

package/dist/tool-counts.json

@@ -31,6 +31,6 @@
   },
   "nativeToolsets": 52,
   "nativeToolActions": 830,
-  "generatedAt": "2026-08-06T02:39:13.220Z",
-  "version": "1.2.0"
+  "generatedAt": "2026-08-07T17:54:44.285Z",
+  "version": "1.2.2"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ue-mcp",
-  "version": "1.2.0",
+  "version": "1.2.2",
   "description": "Unreal Engine MCP server - 24 tools, 783+ actions for AI-driven editor control",
   "type": "module",
   "main": "dist/index.js",
@@ -61,7 +61,8 @@
     "audit:docs": "node scripts/audit-docs.mjs && node scripts/audit-params.mjs",
     "audit:handlers": "node scripts/audit-handlers.mjs",
     "audit:em-dash": "node scripts/check-em-dashes.mjs",
-    "audit": "npm run audit:docs && npm run audit:handlers && npm run audit:em-dash",
+    "audit:unity": "node scripts/audit-unity-collisions.mjs",
+    "audit": "npm run audit:docs && npm run audit:handlers && npm run audit:em-dash && npm run audit:unity",
     "test:watch": "vitest",
     "test:level": "vitest run tests/smoke/level.test.ts",
     "test:asset": "vitest run tests/smoke/asset.test.ts",
@@ -84,10 +85,11 @@
     "generate": "tsx scripts/generate-default-config.ts",
     "generate:metadata": "tsx scripts/generate-tool-metadata.ts",
     "prepublishOnly": "npx tsc && tsx scripts/generate-default-config.ts && tsx scripts/generate-tool-metadata.ts",
-    "gen:epic-docs": "npx tsc && node scripts/gen-epic-docs.mjs"
+    "gen:epic-docs": "npx tsc && node scripts/gen-epic-docs.mjs",
+    "prepare": "husky"
   },
   "dependencies": {
-    "@db-lyon/flowkit": "~0.5.3",
+    "@db-lyon/flowkit": "^0.14.0",
     "@modelcontextprotocol/sdk": "^1.12.1",
     "js-yaml": "^4.1.0",
     "ws": "^8.18.0",
@@ -97,6 +99,7 @@
     "@types/js-yaml": "^4.0.9",
     "@types/node": "^22.0.0",
     "@types/ws": "^8.5.0",
+    "husky": "^9.1.7",
     "tsx": "^4.19.0",
     "typescript": "^5.7.0",
     "vitest": "^3.2.4"

package/plugin/ue_mcp_bridge/Source/UE_MCP_Bridge/Private/Handlers/AssetHandlers.cpp

@@ -75,32 +75,10 @@
 #include "AI/Navigation/NavCollisionBase.h"
 
 // ─── Protected mount guardrail ──────────────────────────────────────────
-// Engine-shipped content (/Engine/, /Script/, /Memory/, /Temp/) and Verse
-// runtime classes must never be mutated through the bridge. UE's
-// UEditorAssetLibrary::DeleteAsset will happily destroy files under
-// <engineRoot>/Engine/Content/ if not stopped - verified the hard way.
-// Apply this check to every handler that deletes, moves, or renames an
-// asset. Plugin content roots (mounted under /<PluginName>/) are NOT
-// protected here; per-project plugin content is expected to be writable.
+// The rule itself is MCPIsProtectedAssetPath in HandlerUtils.h, shared by
+// every asset translation unit so the write paths cannot drift apart.
 namespace
 {
-	bool IsProtectedAssetPath(const FString& Path)
-	{
-		FString P = Path;
-		P.TrimStartAndEndInline();
-		if (P.IsEmpty()) return false;
-		// Tolerate leading whitespace and the surface form (no leading slash).
-		if (!P.StartsWith(TEXT("/"))) P = TEXT("/") + P;
-		const FString L = P.ToLower();
-		if (L.StartsWith(TEXT("/engine/"))) return true;
-		if (L.StartsWith(TEXT("/script/"))) return true;
-		if (L.StartsWith(TEXT("/memory/"))) return true;
-		if (L.StartsWith(TEXT("/temp/"))) return true;
-		// Verse runtime objects surface as /Script/CoreUObject.* etc.
-		if (L.Contains(TEXT("/script/"))) return true;
-		return false;
-	}
-
 	TSharedPtr<FJsonValue> MakeProtectedPathError(const FString& Path)
 	{
 		return MCPError(FString::Printf(
@@ -1488,8 +1466,8 @@ TSharedPtr<FJsonValue> FAssetHandlers::RenameAsset(const TSharedPtr<FJsonObject>
 		return MCPError(TEXT("Missing 'sourcePath'+'destinationPath' or 'assetPath'+'newName'"));
 	}
 
-	if (IsProtectedAssetPath(SourcePath)) return MakeProtectedPathError(SourcePath);
-	if (IsProtectedAssetPath(DestPath))   return MakeProtectedPathError(DestPath);
+	if (MCPIsProtectedAssetPath(SourcePath)) return MakeProtectedPathError(SourcePath);
+	if (MCPIsProtectedAssetPath(DestPath))   return MakeProtectedPathError(DestPath);
 
 	// Idempotency: if already at destination, no-op.
 	if (SourcePath == DestPath)
@@ -1697,7 +1675,7 @@ TSharedPtr<FJsonValue> FAssetHandlers::DeleteAsset(const TSharedPtr<FJsonObject>
 	FString AssetPath;
 	if (auto Err = RequireStringAlt(Params, TEXT("path"), TEXT("assetPath"), AssetPath)) return Err;
 
-	if (IsProtectedAssetPath(AssetPath)) return MakeProtectedPathError(AssetPath);
+	if (MCPIsProtectedAssetPath(AssetPath)) return MakeProtectedPathError(AssetPath);
 
 	const bool bForce = OptionalBool(Params, TEXT("force"), false);
 
@@ -1763,7 +1741,7 @@ TSharedPtr<FJsonValue> FAssetHandlers::DeleteAssetBatch(const TSharedPtr<FJsonOb
 		TSharedPtr<FJsonObject> Entry = MakeShared<FJsonObject>();
 		Entry->SetStringField(TEXT("path"), Path);
 
-		if (IsProtectedAssetPath(Path))
+		if (MCPIsProtectedAssetPath(Path))
 		{
 			Entry->SetStringField(TEXT("status"), TEXT("protected"));
 			Entry->SetStringField(TEXT("reason"), TEXT("Engine/Script/Memory/Temp mounts are read-only via the bridge"));
@@ -1892,7 +1870,7 @@ TSharedPtr<FJsonValue> FAssetHandlers::BulkRename(const TSharedPtr<FJsonObject>&
 			continue;
 		}
 
-		if (IsProtectedAssetPath(SourcePath) || IsProtectedAssetPath(NewPackagePath))
+		if (MCPIsProtectedAssetPath(SourcePath) || MCPIsProtectedAssetPath(NewPackagePath))
 		{
 			Record->SetStringField(TEXT("status"), TEXT("protected"));
 			Record->SetStringField(TEXT("reason"), TEXT("Engine/Script/Memory/Temp mounts are read-only via the bridge"));
@@ -2555,8 +2533,8 @@ TSharedPtr<FJsonValue> FAssetHandlers::MoveFolder(const TSharedPtr<FJsonObject>&
 	SourcePath.RemoveFromEnd(TEXT("/"));
 	DestinationPath.RemoveFromEnd(TEXT("/"));
 
-	if (IsProtectedAssetPath(SourcePath))      return MakeProtectedPathError(SourcePath);
-	if (IsProtectedAssetPath(DestinationPath)) return MakeProtectedPathError(DestinationPath);
+	if (MCPIsProtectedAssetPath(SourcePath))      return MakeProtectedPathError(SourcePath);
+	if (MCPIsProtectedAssetPath(DestinationPath)) return MakeProtectedPathError(DestinationPath);
 
 	// Scan source path to discover all assets
 	IAssetRegistry& AR = FModuleManager::LoadModuleChecked<FAssetRegistryModule>(TEXT("AssetRegistry")).Get();
@@ -2738,7 +2716,7 @@ TSharedPtr<FJsonValue> FAssetHandlers::DeleteFolder(const TSharedPtr<FJsonObject
 			continue;
 		}
 
-		if (IsProtectedAssetPath(Norm))
+		if (MCPIsProtectedAssetPath(Norm))
 		{
 			Entry->SetStringField(TEXT("status"), TEXT("failed"));
 			Entry->SetStringField(TEXT("reason"), TEXT("protected_path"));

package/plugin/ue_mcp_bridge/Source/UE_MCP_Bridge/Private/Handlers/AssetHandlers_BulkProperties.cpp

@@ -64,26 +64,6 @@ namespace
 		bool PassedPreflight() const { return Error.IsEmpty(); }
 	};
 
-	// Mirrors IsProtectedAssetPath in AssetHandlers.cpp, which is file-local to
-	// that translation unit. Keep the two rule sets identical: a write path that
-	// enforces a weaker rule than its neighbours is how engine content gets
-	// mutated through the bridge.
-	bool IsProtectedBulkAssetPath(const FString& Path)
-	{
-		FString Normalized = Path;
-		Normalized.TrimStartAndEndInline();
-		if (Normalized.IsEmpty()) return false;
-		if (!Normalized.StartsWith(TEXT("/"))) Normalized = TEXT("/") + Normalized;
-		const FString Lower = Normalized.ToLower();
-		if (Lower.StartsWith(TEXT("/engine/"))) return true;
-		if (Lower.StartsWith(TEXT("/script/"))) return true;
-		if (Lower.StartsWith(TEXT("/memory/"))) return true;
-		if (Lower.StartsWith(TEXT("/temp/"))) return true;
-		// Verse runtime objects surface as /Script/CoreUObject.* etc.
-		if (Lower.Contains(TEXT("/script/"))) return true;
-		return false;
-	}
-
 	TSharedPtr<FJsonObject> MakePropertyReadback(
 		const FPreparedPropertyWrite& Prepared,
 		const TSharedPtr<FJsonValue>& ActualValue,
@@ -198,7 +178,7 @@ TSharedPtr<FJsonValue> FAssetHandlers::BulkSetAssetProperties(const TSharedPtr<F
 		}
 		PreparedAsset.AssetPath = AssetPath;
 
-		if (IsProtectedBulkAssetPath(AssetPath))
+		if (MCPIsProtectedAssetPath(AssetPath))
 		{
 			RejectItem(BulkStatusProtected, FString::Printf(
 				TEXT("Refusing to mutate protected mount: %s. Engine, /Script/, /Memory/, /Temp/ are read-only via the bridge."),

package/plugin/ue_mcp_bridge/Source/UE_MCP_Bridge/Private/Handlers/AssetHandlers_BulkUpsert.cpp

@@ -50,21 +50,6 @@ struct FPreparedUpsertItem
 	TArray<FPreparedProperty> Properties;
 };
 
-bool IsProtectedAssetPath(const FString& Path)
-{
-	FString Normalized = Path;
-	Normalized.TrimStartAndEndInline();
-	if (!Normalized.StartsWith(TEXT("/")))
-	{
-		Normalized = TEXT("/") + Normalized;
-	}
-	const FString Lower = Normalized.ToLower();
-	return Lower.StartsWith(TEXT("/engine/"))
-		|| Lower.StartsWith(TEXT("/script/"))
-		|| Lower.StartsWith(TEXT("/memory/"))
-		|| Lower.StartsWith(TEXT("/temp/"));
-}
-
 UClass* ResolveDataAssetClass(const FString& ClassName)
 {
 	UClass* DataClass = nullptr;
@@ -144,7 +129,7 @@ bool ParseAssetIdentity(
 	}
 
 	const FString LongPackageName = OutItem.PackagePath + TEXT("/") + OutItem.Name;
-	if (IsProtectedAssetPath(LongPackageName))
+	if (MCPIsProtectedAssetPath(LongPackageName))
 	{
 		OutError = FString::Printf(TEXT("Refusing to mutate protected package '%s'"), *LongPackageName);
 		return false;
@@ -357,7 +342,7 @@ TSharedPtr<FJsonValue> FAssetHandlers::BulkRestoreDataAssets(const TSharedPtr<FJ
 			FString AssetPath;
 			const TSharedPtr<FJsonObject>* Properties = nullptr;
 			if (!(*Item)->TryGetStringField(TEXT("assetPath"), AssetPath)
-				|| IsProtectedAssetPath(AssetPath)
+				|| MCPIsProtectedAssetPath(AssetPath)
 				|| !(*Item)->TryGetObjectField(TEXT("properties"), Properties)
 				|| !Properties
 				|| !Properties->IsValid())
@@ -414,7 +399,7 @@ TSharedPtr<FJsonValue> FAssetHandlers::BulkRestoreDataAssets(const TSharedPtr<FJ
 			FString AssetPath;
 			if (!(*CreatedAssetPaths)[PathIndex].IsValid()
 				|| !(*CreatedAssetPaths)[PathIndex]->TryGetString(AssetPath)
-				|| IsProtectedAssetPath(AssetPath))
+				|| MCPIsProtectedAssetPath(AssetPath))
 			{
 				Errors.Add(MakeShared<FJsonValueString>(FString::Printf(TEXT("createdAssetPaths[%d] is invalid"), PathIndex)));
 				continue;

package/plugin/ue_mcp_bridge/Source/UE_MCP_Bridge/Private/Handlers/AssetHandlers_Mesh.cpp

@@ -120,24 +120,6 @@ namespace
 	const TCHAR* const MeshMatStatusFailed       = TEXT("failed");
 	const TCHAR* const MeshMatStatusSkipped      = TEXT("skipped");
 
-	// Mirrors IsProtectedAssetPath in AssetHandlers.cpp, which is file-local to
-	// that translation unit. Keep the two rule sets identical: a write path that
-	// enforces a weaker rule than its neighbours is how engine content gets
-	// mutated through the bridge.
-	bool IsProtectedMeshMaterialPath(const FString& Path)
-	{
-		FString Normalized = Path;
-		Normalized.TrimStartAndEndInline();
-		if (Normalized.IsEmpty()) return false;
-		if (!Normalized.StartsWith(TEXT("/"))) Normalized = TEXT("/") + Normalized;
-		const FString Lower = Normalized.ToLower();
-		if (Lower.StartsWith(TEXT("/engine/"))) return true;
-		if (Lower.StartsWith(TEXT("/memory/"))) return true;
-		if (Lower.StartsWith(TEXT("/temp/"))) return true;
-		if (Lower.Contains(TEXT("/script/"))) return true;
-		return false;
-	}
-
 	struct FPreparedMeshMaterialAssignment
 	{
 		int32 ItemIndex = 0;
@@ -297,7 +279,7 @@ TSharedPtr<FJsonValue> FAssetHandlers::SetMeshMaterialsBatch(const TSharedPtr<FJ
 		}
 		Item.AssetPath = AssetPath;
 
-		if (IsProtectedMeshMaterialPath(AssetPath))
+		if (MCPIsProtectedAssetPath(AssetPath))
 		{
 			Reject(MeshMatStatusProtected, FString::Printf(
 				TEXT("Refusing to mutate protected mount: %s. Engine, /Script/, /Memory/, /Temp/ are read-only via the bridge."),

package/plugin/ue_mcp_bridge/Source/UE_MCP_Bridge/Public/HandlerUtils.h

@@ -135,6 +135,36 @@ inline TSharedPtr<FJsonValue> MCPCheckAssetExists(
 	return TSharedPtr<FJsonValue>();
 }
 
+/** Protected mount guardrail. Engine-shipped content (/Engine/, /Script/,
+ *  /Memory/, /Temp/) and Verse runtime classes must never be mutated through
+ *  the bridge: UEditorAssetLibrary::DeleteAsset will happily destroy files
+ *  under <engineRoot>/Engine/Content/ if not stopped. Every handler that
+ *  deletes, moves, renames or writes an asset calls this. Plugin content roots
+ *  (mounted under /<PluginName>/) are NOT protected; per-project plugin content
+ *  is expected to be writable.
+ *
+ *  This lives here rather than as a file-local copy per translation unit
+ *  because the asset handlers are split across several files that share one
+ *  unity blob: duplicate definitions collide at compile time, and independent
+ *  copies drift, which is how a write path ends up enforcing a weaker rule
+ *  than its neighbours. */
+inline bool MCPIsProtectedAssetPath(const FString& Path)
+{
+	FString Normalized = Path;
+	Normalized.TrimStartAndEndInline();
+	if (Normalized.IsEmpty()) return false;
+	// Tolerate the surface form, which may arrive without a leading slash.
+	if (!Normalized.StartsWith(TEXT("/"))) Normalized = TEXT("/") + Normalized;
+	const FString Lower = Normalized.ToLower();
+	if (Lower.StartsWith(TEXT("/engine/"))) return true;
+	if (Lower.StartsWith(TEXT("/memory/"))) return true;
+	if (Lower.StartsWith(TEXT("/temp/"))) return true;
+	// Verse runtime objects surface as /Script/CoreUObject.* etc, so /Script/
+	// is rejected wherever it appears, not just as a prefix.
+	if (Lower.Contains(TEXT("/script/"))) return true;
+	return false;
+}
+
 /** Emit the standard delete_asset rollback record on a create result. */
 inline void MCPSetDeleteAssetRollback(TSharedPtr<FJsonObject> Result, const FString& AssetPath)
 {