unity-mcp-cli 0.83.1 → 0.84.0

package/dist/utils/managed-server.js

@@ -0,0 +1,261 @@
+// Copyright (c) 2024 Ivan Murzak. All rights reserved.
+// Licensed under the Apache License, Version 2.0.
+import * as fs from 'fs';
+import * as os from 'os';
+import * as path from 'path';
+import { createHash, randomUUID } from 'crypto';
+import { execFileSync } from 'child_process';
+import { MACHINE_STORE_DIR_NAME } from './machine-credentials.js';
+import { resolveHostRid } from './rid.js';
+import { DEFAULT_SERVER_VERSION, SERVER_EXECUTABLE_NAME, SERVER_RELEASE_REPO, serverReleaseTag, } from './server-version.js';
+/**
+ * The CLI's MANAGED server directory — the machine-shared home the `install-plugin --with-server`
+ * download lands in, and the directory `configure --agent` proxies to. Lives beside the shared
+ * machine credential store (`~/.ai-game-dev/`) so the server binary is fetched once per machine,
+ * not once per project, and is NEVER on PATH (design 06/09: the binary lives in the CLI's managed
+ * dir). Layout mirrors the plugin's `Library/mcp-server/<rid>/` — one folder per RID + a `version`
+ * marker.
+ */
+export function managedServerRootDir(homeDir = os.homedir()) {
+    return path.join(homeDir, MACHINE_STORE_DIR_NAME, 'server');
+}
+export function managedServerDir(rid, homeDir = os.homedir()) {
+    return path.join(managedServerRootDir(homeDir), rid);
+}
+/** The server executable file name for a RID (`.exe` suffix on Windows RIDs). */
+export function managedServerBinaryName(rid) {
+    return rid.startsWith('win-') ? `${SERVER_EXECUTABLE_NAME}.exe` : SERVER_EXECUTABLE_NAME;
+}
+export function managedServerBinaryPath(rid, homeDir = os.homedir()) {
+    return path.join(managedServerDir(rid, homeDir), managedServerBinaryName(rid));
+}
+/** Absolute path of the `version` marker recording which server version is staged for a RID. */
+export function managedServerVersionPath(rid, homeDir = os.homedir()) {
+    return path.join(managedServerDir(rid, homeDir), 'version');
+}
+/** The release-asset zip NAME for a RID (`gamedev-mcp-server-<rid>.zip`) — the SHA256SUMS key. */
+export function serverZipName(rid) {
+    return `${SERVER_EXECUTABLE_NAME}-${rid}.zip`;
+}
+/** The GitHub release download URL of the per-RID server zip, pinned to `version`. */
+export function serverZipUrl(rid, version) {
+    return `https://github.com/${SERVER_RELEASE_REPO}/releases/download/${serverReleaseTag(version)}/${serverZipName(rid)}`;
+}
+/** The GitHub release download URL of the `SHA256SUMS` integrity manifest, pinned to `version`. */
+export function serverShaSumsUrl(version) {
+    return `https://github.com/${SERVER_RELEASE_REPO}/releases/download/${serverReleaseTag(version)}/SHA256SUMS`;
+}
+/**
+ * Look up the expected SHA-256 (lowercase hex) for `fileName` in a `SHA256SUMS` manifest.
+ * Accepts the canonical `<hex>  <name>` line shape and the `<hex> *<name>` binary-mode variant.
+ * Returns null when no line names `fileName` (exact match — mirrors the C# exact-key Ordinal
+ * lookup), so a missing entry fails closed at the call site.
+ */
+export function parseSha256Sums(manifest, fileName) {
+    for (const rawLine of manifest.split(/\r?\n/)) {
+        const line = rawLine.trim();
+        if (!line)
+            continue;
+        const match = line.match(/^([0-9a-fA-F]{64})\s+\*?(.+)$/);
+        if (!match)
+            continue;
+        const [, hash, name] = match;
+        if (name.trim() === fileName)
+            return hash.toLowerCase();
+    }
+    return null;
+}
+/** SHA-256 of a buffer as lowercase hex. */
+export function sha256Hex(buffer) {
+    return createHash('sha256').update(buffer).digest('hex');
+}
+// ---------------------------------------------------------------------------
+// Archive extraction (runtime side; not exercised by the mocked unit gate)
+// ---------------------------------------------------------------------------
+/**
+ * Extract a `.zip` into `destDir` using the best available platform archive tool. Node ships no
+ * zip reader, so this shells out: bsdtar (`tar -xf`, present on Windows 10+ and macOS) and `unzip`
+ * (POSIX) cover every supported host, with a PowerShell `Expand-Archive` fallback on Windows. The
+ * caller verifies the extracted binary exists afterwards, so a silent no-op tool is still caught.
+ */
+export function extractZip(zipPath, destDir) {
+    fs.mkdirSync(destDir, { recursive: true });
+    const strategies = process.platform === 'win32'
+        ? [
+            { cmd: 'tar', args: ['-xf', zipPath, '-C', destDir] },
+            {
+                cmd: 'powershell.exe',
+                args: [
+                    '-NoProfile',
+                    '-NonInteractive',
+                    '-Command',
+                    `Expand-Archive -LiteralPath ${JSON.stringify(zipPath)} -DestinationPath ${JSON.stringify(destDir)} -Force`,
+                ],
+            },
+        ]
+        : [
+            { cmd: 'unzip', args: ['-o', zipPath, '-d', destDir] },
+            { cmd: 'tar', args: ['-xf', zipPath, '-C', destDir] },
+        ];
+    let lastError;
+    for (const strategy of strategies) {
+        try {
+            execFileSync(strategy.cmd, strategy.args, { stdio: 'ignore' });
+            return;
+        }
+        catch (err) {
+            lastError = err;
+        }
+    }
+    throw new Error(`Failed to extract ${zipPath} into ${destDir}: no working archive tool ` +
+        `(tried ${strategies.map((s) => s.cmd).join(', ')}). ` +
+        (lastError instanceof Error ? lastError.message : String(lastError)));
+}
+/** Shallow-search (root, then one level of subdirs) for `binaryName`; returns its directory. */
+function locateBinaryDir(rootDir, binaryName) {
+    if (fs.existsSync(path.join(rootDir, binaryName)))
+        return rootDir;
+    for (const entry of fs.readdirSync(rootDir, { withFileTypes: true })) {
+        if (!entry.isDirectory())
+            continue;
+        const candidate = path.join(rootDir, entry.name, binaryName);
+        if (fs.existsSync(candidate))
+            return path.join(rootDir, entry.name);
+    }
+    return null;
+}
+function copyDirContents(srcDir, destDir) {
+    fs.mkdirSync(destDir, { recursive: true });
+    for (const entry of fs.readdirSync(srcDir, { withFileTypes: true })) {
+        const src = path.join(srcDir, entry.name);
+        const dest = path.join(destDir, entry.name);
+        if (entry.isDirectory()) {
+            copyDirContents(src, dest);
+        }
+        else {
+            fs.copyFileSync(src, dest);
+        }
+    }
+}
+async function fetchBytes(url, doFetch) {
+    const response = await doFetch(url);
+    if (!response.ok) {
+        throw new Error(`Download failed (HTTP ${response.status}) for ${url}`);
+    }
+    return Buffer.from(await response.arrayBuffer());
+}
+async function fetchText(url, doFetch) {
+    const response = await doFetch(url);
+    if (!response.ok) {
+        throw new Error(`Download failed (HTTP ${response.status}) for ${url}`);
+    }
+    return response.text();
+}
+/**
+ * Download (or copy from `--server-source`), verify against the release SHA256SUMS (fail-closed),
+ * extract, and atomically publish the pinned GameDev-MCP-Server binary for the host RID into the
+ * CLI's managed directory. Never launches the binary. Returns the published path.
+ */
+export async function downloadServerBinary(opts = {}) {
+    const rid = opts.rid ?? resolveHostRid();
+    const version = opts.version ?? DEFAULT_SERVER_VERSION;
+    const homeDir = opts.homeDir ?? os.homedir();
+    const doFetch = opts.fetchImpl ?? fetch;
+    const extract = opts.extractImpl ?? extractZip;
+    const report = opts.onProgress ?? (() => { });
+    const zipName = serverZipName(rid);
+    // 1. Obtain the zip bytes.
+    let zipBytes;
+    let verified;
+    if (opts.source) {
+        if (fs.existsSync(opts.source)) {
+            report(`Using local server source: ${opts.source}`);
+            zipBytes = fs.readFileSync(opts.source);
+        }
+        else {
+            report(`Downloading server from source URL: ${opts.source}`);
+            zipBytes = await fetchBytes(opts.source, doFetch);
+        }
+        verified = false; // explicit-trust override — no release SHA256SUMS to verify against
+    }
+    else {
+        const zipUrl = serverZipUrl(rid, version);
+        report(`Downloading ${zipName} (v${version})...`);
+        zipBytes = await fetchBytes(zipUrl, doFetch);
+        // FAIL-CLOSED INTEGRITY GATE (verify-before-extract). The zip is UNTRUSTED until its SHA-256
+        // matches the release's SHA256SUMS entry for THIS RID. A missing/mismatched/unfetchable
+        // manifest aborts WITHOUT extracting — an unverified binary must never be published.
+        const sumsUrl = serverShaSumsUrl(version);
+        report('Verifying checksum against release SHA256SUMS...');
+        const manifest = await fetchText(sumsUrl, doFetch);
+        const expected = parseSha256Sums(manifest, zipName);
+        if (!expected) {
+            throw new Error(`Integrity check failed: no SHA256SUMS entry for ${zipName} in the v${version} release. ` +
+                `Refusing to install an unverified server binary.`);
+        }
+        const actual = sha256Hex(zipBytes);
+        if (actual !== expected) {
+            throw new Error(`Integrity check FAILED for ${zipName}: expected ${expected}, got ${actual}. ` +
+                `Refusing to install a tampered or corrupt server binary.`);
+        }
+        verified = true;
+    }
+    // 2. Stage into a same-root temp dir, extract, locate the binary.
+    const rootDir = managedServerRootDir(homeDir);
+    fs.mkdirSync(rootDir, { recursive: true });
+    const stagingDir = path.join(rootDir, `.staging-${rid}-${randomUUID()}`);
+    const tempZip = path.join(rootDir, `.${SERVER_EXECUTABLE_NAME}-${rid}-${randomUUID()}.zip`);
+    try {
+        fs.writeFileSync(tempZip, zipBytes);
+        fs.mkdirSync(stagingDir, { recursive: true });
+        report('Extracting server archive...');
+        extract(tempZip, stagingDir);
+        const binaryName = managedServerBinaryName(rid);
+        const binaryDir = locateBinaryDir(stagingDir, binaryName);
+        if (!binaryDir) {
+            throw new Error(`Extracted archive did not contain '${binaryName}'. The '${zipName}' asset layout may have changed.`);
+        }
+        // 3. Publish: replace the per-RID cache folder with the staged payload, write the version
+        //    marker, and set the exec bit on POSIX so the payload is launch-ready.
+        const destDir = managedServerDir(rid, homeDir);
+        fs.rmSync(destDir, { recursive: true, force: true });
+        copyDirContents(binaryDir, destDir);
+        const binaryPath = managedServerBinaryPath(rid, homeDir);
+        if (process.platform !== 'win32') {
+            try {
+                fs.chmodSync(binaryPath, 0o755);
+            }
+            catch {
+                /* best effort */
+            }
+        }
+        fs.writeFileSync(managedServerVersionPath(rid, homeDir), version);
+        report(`Server binary ready: ${binaryPath}`);
+        return { rid, version, binaryPath, verified };
+    }
+    finally {
+        fs.rmSync(tempZip, { force: true });
+        fs.rmSync(stagingDir, { recursive: true, force: true });
+    }
+}
+/**
+ * Proxy `configure --agent <id>` to the managed GameDev-MCP-Server binary's `configure`
+ * subcommand (design 06/09 Phase 3) so the shared C# configurator registry — with the derived
+ * `port=` + `project=` pin — is reachable from the terminal. The binary derives the pin/port from
+ * its working directory, so we run it with `cwd` = the resolved project path. When no managed
+ * binary is installed, throws a clear, actionable error pointing at `install-plugin --with-server`.
+ */
+export function proxyConfigure(opts) {
+    const rid = opts.rid ?? resolveHostRid();
+    const binaryPath = managedServerBinaryPath(rid, opts.homeDir);
+    if (!fs.existsSync(binaryPath)) {
+        throw new Error(`No managed GameDev-MCP-Server binary found at ${binaryPath}. ` +
+            `Run 'unity-mcp-cli install-plugin --with-server' first to download it.`);
+    }
+    const args = ['configure', '--agent', opts.agentId, ...(opts.url ? ['--url', opts.url] : [])];
+    const cwd = path.resolve(opts.projectPath);
+    const run = opts.runImpl ?? ((bin, a, workDir) => execFileSync(bin, a, { cwd: workDir, stdio: 'inherit' }));
+    run(binaryPath, args, cwd);
+    return { binaryPath, args, cwd };
+}
+//# sourceMappingURL=managed-server.js.map

package/dist/utils/managed-server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"managed-server.js","sourceRoot":"","sources":["../../src/utils/managed-server.ts"],"names":[],"mappings":"AAAA,uDAAuD;AACvD,kDAAkD;AAElD,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAChD,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAClE,OAAO,EAAE,cAAc,EAAY,MAAM,UAAU,CAAC;AACpD,OAAO,EACL,sBAAsB,EACtB,sBAAsB,EACtB,mBAAmB,EACnB,gBAAgB,GACjB,MAAM,qBAAqB,CAAC;AAE7B;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB,CAAC,UAAkB,EAAE,CAAC,OAAO,EAAE;IACjE,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,sBAAsB,EAAE,QAAQ,CAAC,CAAC;AAC9D,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,GAAW,EAAE,UAAkB,EAAE,CAAC,OAAO,EAAE;IAC1E,OAAO,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,CAAC;AACvD,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,uBAAuB,CAAC,GAAW;IACjD,OAAO,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,sBAAsB,MAAM,CAAC,CAAC,CAAC,sBAAsB,CAAC;AAC3F,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,GAAW,EAAE,UAAkB,EAAE,CAAC,OAAO,EAAE;IACjF,OAAO,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE,uBAAuB,CAAC,GAAG,CAAC,CAAC,CAAC;AACjF,CAAC;AAED,gGAAgG;AAChG,MAAM,UAAU,wBAAwB,CAAC,GAAW,EAAE,UAAkB,EAAE,CAAC,OAAO,EAAE;IAClF,OAAO,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE,SAAS,CAAC,CAAC;AAC9D,CAAC;AAED,kGAAkG;AAClG,MAAM,UAAU,aAAa,CAAC,GAAW;IACvC,OAAO,GAAG,sBAAsB,IAAI,GAAG,MAAM,CAAC;AAChD,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,YAAY,CAAC,GAAW,EAAE,OAAe;IACvD,OAAO,sBAAsB,mBAAmB,sBAAsB,gBAAgB,CAAC,OAAO,CAAC,IAAI,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC;AAC1H,CAAC;AAED,mGAAmG;AACnG,MAAM,UAAU,gBAAgB,CAAC,OAAe;IAC9C,OAAO,sBAAsB,mBAAmB,sBAAsB,gBAAgB,CAAC,OAAO,CAAC,aAAa,CAAC;AAC/G,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,QAAgB,EAAE,QAAgB;IAChE,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC;QAC1D,IAAI,CAAC,KAAK;YAAE,SAAS;QACrB,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,KAAK,CAAC;QAC7B,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC;IAC1D,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,4CAA4C;AAC5C,MAAM,UAAU,SAAS,CAAC,MAAc;IACtC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC3D,CAAC;AAED,8EAA8E;AAC9E,2EAA2E;AAC3E,8EAA8E;AAE9E;;;;;GAKG;AACH,MAAM,UAAU,UAAU,CAAC,OAAe,EAAE,OAAe;IACzD,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE3C,MAAM,UAAU,GACd,OAAO,CAAC,QAAQ,KAAK,OAAO;QAC1B,CAAC,CAAC;YACE,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,EAAE;YACrD;gBACE,GAAG,EAAE,gBAAgB;gBACrB,IAAI,EAAE;oBACJ,YAAY;oBACZ,iBAAiB;oBACjB,UAAU;oBACV,+BAA+B,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,qBAAqB,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,SAAS;iBAC5G;aACF;SACF;QACH,CAAC,CAAC;YACE,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,EAAE;YACtD,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,EAAE;SACtD,CAAC;IAER,IAAI,SAAkB,CAAC;IACvB,KAAK,MAAM,QAAQ,IAAI,UAAU,EAAE,CAAC;QAClC,IAAI,CAAC;YACH,YAAY,CAAC,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC/D,OAAO;QACT,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,SAAS,GAAG,GAAG,CAAC;QAClB,CAAC;IACH,CAAC;IACD,MAAM,IAAI,KAAK,CACb,qBAAqB,OAAO,SAAS,OAAO,4BAA4B;QACtE,UAAU,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK;QACtD,CAAC,SAAS,YAAY,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CACvE,CAAC;AACJ,CAAC;AAED,gGAAgG;AAChG,SAAS,eAAe,CAAC,OAAe,EAAE,UAAkB;IAC1D,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QAAE,OAAO,OAAO,CAAC;IAClE,KAAK,MAAM,KAAK,IAAI,EAAE,CAAC,WAAW,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QACrE,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE;YAAE,SAAS;QACnC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC7D,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IACtE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,eAAe,CAAC,MAAc,EAAE,OAAe;IACtD,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3C,KAAK,MAAM,KAAK,IAAI,EAAE,CAAC,WAAW,CAAC,MAAM,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QACpE,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAC1C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAC5C,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YACxB,eAAe,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC7B,CAAC;aAAM,CAAC;YACN,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC;AACH,CAAC;AAqCD,KAAK,UAAU,UAAU,CAAC,GAAW,EAAE,OAAqB;IAC1D,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC;IACpC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,yBAAyB,QAAQ,CAAC,MAAM,SAAS,GAAG,EAAE,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;AACnD,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,GAAW,EAAE,OAAqB;IACzD,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC;IACpC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,yBAAyB,QAAQ,CAAC,MAAM,SAAS,GAAG,EAAE,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAC;AACzB,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,OAA8B,EAAE;IAEhC,MAAM,GAAG,GAAiB,IAAI,CAAC,GAAG,IAAI,cAAc,EAAE,CAAC;IACvD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,sBAAsB,CAAC;IACvD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC;IAC7C,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC;IACxC,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,IAAI,UAAU,CAAC;IAC/C,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAC7C,MAAM,OAAO,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;IAEnC,2BAA2B;IAC3B,IAAI,QAAgB,CAAC;IACrB,IAAI,QAAiB,CAAC;IACtB,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAC/B,MAAM,CAAC,8BAA8B,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;YACpD,QAAQ,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC1C,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,uCAAuC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;YAC7D,QAAQ,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACpD,CAAC;QACD,QAAQ,GAAG,KAAK,CAAC,CAAC,oEAAoE;IACxF,CAAC;SAAM,CAAC;QACN,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAC1C,MAAM,CAAC,eAAe,OAAO,MAAM,OAAO,MAAM,CAAC,CAAC;QAClD,QAAQ,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAE7C,6FAA6F;QAC7F,wFAAwF;QACxF,qFAAqF;QACrF,MAAM,OAAO,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;QAC1C,MAAM,CAAC,kDAAkD,CAAC,CAAC;QAC3D,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACnD,MAAM,QAAQ,GAAG,eAAe,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACpD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CACb,mDAAmD,OAAO,YAAY,OAAO,YAAY;gBACvF,kDAAkD,CACrD,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;QACnC,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CACb,8BAA8B,OAAO,cAAc,QAAQ,SAAS,MAAM,IAAI;gBAC5E,0DAA0D,CAC7D,CAAC;QACJ,CAAC;QACD,QAAQ,GAAG,IAAI,CAAC;IAClB,CAAC;IAED,kEAAkE;IAClE,MAAM,OAAO,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAC9C,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3C,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,GAAG,IAAI,UAAU,EAAE,EAAE,CAAC,CAAC;IACzE,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,sBAAsB,IAAI,GAAG,IAAI,UAAU,EAAE,MAAM,CAAC,CAAC;IAC5F,IAAI,CAAC;QACH,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACpC,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9C,MAAM,CAAC,8BAA8B,CAAC,CAAC;QACvC,OAAO,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QAE7B,MAAM,UAAU,GAAG,uBAAuB,CAAC,GAAG,CAAC,CAAC;QAChD,MAAM,SAAS,GAAG,eAAe,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;QAC1D,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CACb,sCAAsC,UAAU,WAAW,OAAO,kCAAkC,CACrG,CAAC;QACJ,CAAC;QAED,0FAA0F;QAC1F,2EAA2E;QAC3E,MAAM,OAAO,GAAG,gBAAgB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAC/C,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACrD,eAAe,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAEpC,MAAM,UAAU,GAAG,uBAAuB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QACzD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YACjC,IAAI,CAAC;gBACH,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;YAClC,CAAC;YAAC,MAAM,CAAC;gBACP,iBAAiB;YACnB,CAAC;QACH,CAAC;QACD,EAAE,CAAC,aAAa,CAAC,wBAAwB,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC;QAElE,MAAM,CAAC,wBAAwB,UAAU,EAAE,CAAC,CAAC;QAC7C,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC;IAChD,CAAC;YAAS,CAAC;QACT,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACpC,EAAE,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1D,CAAC;AACH,CAAC;AAuBD;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,IAA2B;IACxD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,cAAc,EAAE,CAAC;IACzC,MAAM,UAAU,GAAG,uBAAuB,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IAC9D,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CACb,iDAAiD,UAAU,IAAI;YAC7D,wEAAwE,CAC3E,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,WAAW,EAAE,SAAS,EAAE,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC9F,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC3C,MAAM,GAAG,GACP,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;IAClG,GAAG,CAAC,UAAU,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;IAC3B,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;AACnC,CAAC"}

package/dist/utils/port.d.ts

@@ -1,6 +1,19 @@
+/**
+ * The exact string that is UTF-8/SHA-256 hashed: the project root with trailing directory
+ * separators trimmed, then lowercased with the ToLowerInvariant-matching rules above.
+ * Exposed so the golden-vector parity test can reproduce the pre-hash string.
+ */
+export declare function normalizeProjectRoot(projectRoot: string): string;
+/**
+ * The routing pin: the first 4 bytes of the SHA-256 of the normalized project root as 8
+ * lowercase hex characters. Byte-for-byte the C# ProjectIdentity.DerivePin.
+ */
+export declare function deriveProjectPin(dir: string): string;
 /**
  * Generate a deterministic port from a directory path.
- * Ports the C# UnityMcpPlugin.GeneratePortFromDirectory() logic.
- * SHA256 hash of lowercased directory → first 4 bytes as uint32 → modulo 10000 + 20000.
+ * Ports the canonical C# ProjectIdentity derivation (DerivePort), which is itself byte-for-byte
+ * the shipped Unity UnityMcpPlugin.GeneratePortFromDirectory() logic:
+ * SHA256 of the normalized (trailing-separator-trimmed, ToLowerInvariant) directory → first
+ * 4 bytes as a little-endian uint32 → modulo 10000 + 20000 (range 20000-29999).
  */
 export declare function generatePortFromDirectory(dir: string): number;

package/dist/utils/port.js

@@ -2,16 +2,71 @@ import { createHash } from 'crypto';
 const MIN_PORT = 20000;
 const MAX_PORT = 29999;
 const PORT_RANGE = MAX_PORT - MIN_PORT + 1;
+// Routing pin = first 4 bytes of the hash rendered as 8 lowercase hex chars.
+const PIN_BYTES = 4;
+// Characters where JS String.prototype.toLowerCase() diverges from .NET
+// string.ToLowerInvariant(). ToLowerInvariant is the canonical origin of the
+// ProjectIdentity derivation (see MCP-Plugin-dotnet ProjectIdentity.GoldenVectors.json),
+// so the TS port must reproduce it byte-for-byte. Each entry maps a code point to the
+// value ToLowerInvariant produces:
+//   U+0130 LATIN CAPITAL LETTER I WITH DOT ABOVE - ToLowerInvariant leaves it unchanged
+//   (no case fold), whereas toLowerCase() lowers it to U+0069 U+0307 (i + COMBINING DOT ABOVE).
+const INVARIANT_LOWER_OVERRIDES = {
+    'İ': 'İ',
+};
+/**
+ * Lowercase a string the way .NET string.ToLowerInvariant() does: a simple,
+ * culture-independent, per-code-point mapping (no context-sensitive rules such as the
+ * Greek final-sigma or the Turkish-i special cases). We lower each code point on its own
+ * and apply INVARIANT_LOWER_OVERRIDES for the few points where JS disagrees with .NET.
+ */
+function toLowerInvariant(value) {
+    let out = '';
+    for (const ch of value) {
+        out += INVARIANT_LOWER_OVERRIDES[ch] ?? ch.toLowerCase();
+    }
+    return out;
+}
+/**
+ * Trim trailing directory separators ('/' and '\\') so '/a/b' and '/a/b/' are the same
+ * project. Never trims below length 1 (matches ProjectIdentity.TrimTrailingSeparators).
+ * Separators are NOT converted — 'C:\\a' and 'C:/a' remain distinct and hash differently.
+ */
+function trimTrailingSeparators(pathStr) {
+    let end = pathStr.length;
+    while (end > 1 && (pathStr[end - 1] === '/' || pathStr[end - 1] === '\\')) {
+        end--;
+    }
+    return end === pathStr.length ? pathStr : pathStr.slice(0, end);
+}
+/**
+ * The exact string that is UTF-8/SHA-256 hashed: the project root with trailing directory
+ * separators trimmed, then lowercased with the ToLowerInvariant-matching rules above.
+ * Exposed so the golden-vector parity test can reproduce the pre-hash string.
+ */
+export function normalizeProjectRoot(projectRoot) {
+    return toLowerInvariant(trimTrailingSeparators(projectRoot));
+}
+function hashOf(projectRoot) {
+    return createHash('sha256').update(normalizeProjectRoot(projectRoot), 'utf-8').digest();
+}
+/**
+ * The routing pin: the first 4 bytes of the SHA-256 of the normalized project root as 8
+ * lowercase hex characters. Byte-for-byte the C# ProjectIdentity.DerivePin.
+ */
+export function deriveProjectPin(dir) {
+    return hashOf(dir).subarray(0, PIN_BYTES).toString('hex');
+}
 /**
  * Generate a deterministic port from a directory path.
- * Ports the C# UnityMcpPlugin.GeneratePortFromDirectory() logic.
- * SHA256 hash of lowercased directory → first 4 bytes as uint32 → modulo 10000 + 20000.
+ * Ports the canonical C# ProjectIdentity derivation (DerivePort), which is itself byte-for-byte
+ * the shipped Unity UnityMcpPlugin.GeneratePortFromDirectory() logic:
+ * SHA256 of the normalized (trailing-separator-trimmed, ToLowerInvariant) directory → first
+ * 4 bytes as a little-endian uint32 → modulo 10000 + 20000 (range 20000-29999).
  */
 export function generatePortFromDirectory(dir) {
-    const hash = createHash('sha256')
-        .update(dir.toLowerCase())
-        .digest();
-    // Read first 4 bytes as little-endian int32, then treat as unsigned
+    const hash = hashOf(dir);
+    // Read first 4 bytes as little-endian int32, then treat as unsigned.
     const int32 = hash.readInt32LE(0);
     const uint32 = int32 >>> 0;
     return MIN_PORT + (uint32 % PORT_RANGE);

package/dist/utils/port.js.map

@@ -1 +1 @@
-{"version":3,"file":"port.js","sourceRoot":"","sources":["../../src/utils/port.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAEpC,MAAM,QAAQ,GAAG,KAAK,CAAC;AACvB,MAAM,QAAQ,GAAG,KAAK,CAAC;AACvB,MAAM,UAAU,GAAG,QAAQ,GAAG,QAAQ,GAAG,CAAC,CAAC;AAE3C;;;;GAIG;AACH,MAAM,UAAU,yBAAyB,CAAC,GAAW;IACnD,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC;SAC9B,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;SACzB,MAAM,EAAE,CAAC;IAEZ,oEAAoE;IACpE,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IAClC,MAAM,MAAM,GAAG,KAAK,KAAK,CAAC,CAAC;IAE3B,OAAO,QAAQ,GAAG,CAAC,MAAM,GAAG,UAAU,CAAC,CAAC;AAC1C,CAAC"}
+{"version":3,"file":"port.js","sourceRoot":"","sources":["../../src/utils/port.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAEpC,MAAM,QAAQ,GAAG,KAAK,CAAC;AACvB,MAAM,QAAQ,GAAG,KAAK,CAAC;AACvB,MAAM,UAAU,GAAG,QAAQ,GAAG,QAAQ,GAAG,CAAC,CAAC;AAC3C,6EAA6E;AAC7E,MAAM,SAAS,GAAG,CAAC,CAAC;AAEpB,wEAAwE;AACxE,6EAA6E;AAC7E,yFAAyF;AACzF,sFAAsF;AACtF,mCAAmC;AACnC,wFAAwF;AACxF,gGAAgG;AAChG,MAAM,yBAAyB,GAA2B;IACxD,GAAG,EAAE,GAAG;CACT,CAAC;AAEF;;;;;GAKG;AACH,SAAS,gBAAgB,CAAC,KAAa;IACrC,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,MAAM,EAAE,IAAI,KAAK,EAAE,CAAC;QACvB,GAAG,IAAI,yBAAyB,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3D,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;GAIG;AACH,SAAS,sBAAsB,CAAC,OAAe;IAC7C,IAAI,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC;IACzB,OAAO,GAAG,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,GAAG,IAAI,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,EAAE,CAAC;QAC1E,GAAG,EAAE,CAAC;IACR,CAAC;IACD,OAAO,GAAG,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AAClE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,WAAmB;IACtD,OAAO,gBAAgB,CAAC,sBAAsB,CAAC,WAAW,CAAC,CAAC,CAAC;AAC/D,CAAC;AAED,SAAS,MAAM,CAAC,WAAmB;IACjC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,oBAAoB,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC;AAC1F,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAAW;IAC1C,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAC5D,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,yBAAyB,CAAC,GAAW;IACnD,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAEzB,qEAAqE;IACrE,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IAClC,MAAM,MAAM,GAAG,KAAK,KAAK,CAAC,CAAC;IAE3B,OAAO,QAAQ,GAAG,CAAC,MAAM,GAAG,UAAU,CAAC,CAAC;AAC1C,CAAC"}

package/dist/utils/project-marker.d.ts

@@ -0,0 +1,26 @@
+/**
+ * The tool-neutral, NON-SECRET, committable project marker at
+ * `<project>/.ai-game-dev/project.json` (design 06/09, D15). It records the enrolled server
+ * target (hosted vs local) and the optional user port override so ProjectIdentity resolution and
+ * every config writer (engine UI, CLIs, `configure`) agree on one source of truth. Credentials
+ * NEVER go here — those live only in the machine credential store (`credentials.json`).
+ */
+export declare const PROJECT_MARKER_FILE = "project.json";
+export interface ProjectMarker {
+    /** The server the project is enrolled against (hosted `https://ai-game.dev` or a local URL). */
+    serverTarget?: string;
+    /** User's explicit local-port override (wins over the deterministic derived port). */
+    portOverride?: number;
+    /** Unknown fields are preserved on read/merge for forward-compatibility. */
+    [key: string]: unknown;
+}
+export declare function projectMarkerDir(projectPath: string): string;
+export declare function projectMarkerPath(projectPath: string): string;
+/** Read the marker, or null when absent/unparsable. */
+export declare function readProjectMarker(projectPath: string): ProjectMarker | null;
+/**
+ * Merge `marker` into any existing marker and write it back (creating the `.ai-game-dev/`
+ * directory as needed). Idempotent for the same inputs; preserves pre-existing keys. Returns the
+ * absolute marker path.
+ */
+export declare function writeProjectMarker(projectPath: string, marker: ProjectMarker): string;

package/dist/utils/project-marker.js

@@ -0,0 +1,48 @@
+// Copyright (c) 2024 Ivan Murzak. All rights reserved.
+// Licensed under the Apache License, Version 2.0.
+import * as fs from 'fs';
+import * as path from 'path';
+import { MACHINE_STORE_DIR_NAME } from './machine-credentials.js';
+/**
+ * The tool-neutral, NON-SECRET, committable project marker at
+ * `<project>/.ai-game-dev/project.json` (design 06/09, D15). It records the enrolled server
+ * target (hosted vs local) and the optional user port override so ProjectIdentity resolution and
+ * every config writer (engine UI, CLIs, `configure`) agree on one source of truth. Credentials
+ * NEVER go here — those live only in the machine credential store (`credentials.json`).
+ */
+export const PROJECT_MARKER_FILE = 'project.json';
+export function projectMarkerDir(projectPath) {
+    return path.join(projectPath, MACHINE_STORE_DIR_NAME);
+}
+export function projectMarkerPath(projectPath) {
+    return path.join(projectMarkerDir(projectPath), PROJECT_MARKER_FILE);
+}
+/** Read the marker, or null when absent/unparsable. */
+export function readProjectMarker(projectPath) {
+    const markerPath = projectMarkerPath(projectPath);
+    if (!fs.existsSync(markerPath))
+        return null;
+    try {
+        const parsed = JSON.parse(fs.readFileSync(markerPath, 'utf-8'));
+        if (!parsed || typeof parsed !== 'object' || Array.isArray(parsed))
+            return null;
+        return parsed;
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Merge `marker` into any existing marker and write it back (creating the `.ai-game-dev/`
+ * directory as needed). Idempotent for the same inputs; preserves pre-existing keys. Returns the
+ * absolute marker path.
+ */
+export function writeProjectMarker(projectPath, marker) {
+    const dir = projectMarkerDir(projectPath);
+    fs.mkdirSync(dir, { recursive: true });
+    const merged = { ...(readProjectMarker(projectPath) ?? {}), ...marker };
+    const markerPath = projectMarkerPath(projectPath);
+    fs.writeFileSync(markerPath, JSON.stringify(merged, null, 2) + '\n');
+    return markerPath;
+}
+//# sourceMappingURL=project-marker.js.map

package/dist/utils/project-marker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-marker.js","sourceRoot":"","sources":["../../src/utils/project-marker.ts"],"names":[],"mappings":"AAAA,uDAAuD;AACvD,kDAAkD;AAElD,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAElE;;;;;;GAMG;AAEH,MAAM,CAAC,MAAM,mBAAmB,GAAG,cAAc,CAAC;AAWlD,MAAM,UAAU,gBAAgB,CAAC,WAAmB;IAClD,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,sBAAsB,CAAC,CAAC;AACxD,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,WAAmB;IACnD,OAAO,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,WAAW,CAAC,EAAE,mBAAmB,CAAC,CAAC;AACvE,CAAC;AAED,uDAAuD;AACvD,MAAM,UAAU,iBAAiB,CAAC,WAAmB;IACnD,MAAM,UAAU,GAAG,iBAAiB,CAAC,WAAW,CAAC,CAAC;IAClD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAY,CAAC;QAC3E,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC;QAChF,OAAO,MAAuB,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,WAAmB,EAAE,MAAqB;IAC3E,MAAM,GAAG,GAAG,gBAAgB,CAAC,WAAW,CAAC,CAAC;IAC1C,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACvC,MAAM,MAAM,GAAkB,EAAE,GAAG,CAAC,iBAAiB,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,EAAE,GAAG,MAAM,EAAE,CAAC;IACvF,MAAM,UAAU,GAAG,iBAAiB,CAAC,WAAW,CAAC,CAAC;IAClD,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IACrE,OAAO,UAAU,CAAC;AACpB,CAAC"}

package/dist/utils/rid.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Runtime Identifier (RID) detection for the shared GameDev-MCP-Server binary.
+ *
+ * The RID string `<os>-<arch>` (e.g. `win-x64`, `osx-arm64`) selects which
+ * `gamedev-mcp-server-<rid>.zip` release asset to download. Ported from the plugin's C#
+ * `McpServerManager.PlatformName` (`OperationSystem` + `-` + `CpuArch`) so the CLI and plugin
+ * resolve the same asset for the same host.
+ */
+/** The exact set of RIDs published as `gamedev-mcp-server-<rid>.zip` on every server release. */
+export declare const KNOWN_RIDS: readonly ["linux-arm64", "linux-x64", "osx-arm64", "osx-x64", "win-arm64", "win-x64", "win-x86"];
+export type Rid = (typeof KNOWN_RIDS)[number];
+/**
+ * Resolve the host RID (defaulting to the current process's platform/arch). Throws a clear,
+ * actionable error when the host has no published server build — a fail-closed guard so
+ * `install-plugin --with-server` never silently downloads the wrong asset (or a 404 page).
+ */
+export declare function resolveHostRid(platform?: NodeJS.Platform, arch?: string): Rid;

package/dist/utils/rid.js

@@ -0,0 +1,60 @@
+// Copyright (c) 2024 Ivan Murzak. All rights reserved.
+// Licensed under the Apache License, Version 2.0.
+/**
+ * Runtime Identifier (RID) detection for the shared GameDev-MCP-Server binary.
+ *
+ * The RID string `<os>-<arch>` (e.g. `win-x64`, `osx-arm64`) selects which
+ * `gamedev-mcp-server-<rid>.zip` release asset to download. Ported from the plugin's C#
+ * `McpServerManager.PlatformName` (`OperationSystem` + `-` + `CpuArch`) so the CLI and plugin
+ * resolve the same asset for the same host.
+ */
+/** The exact set of RIDs published as `gamedev-mcp-server-<rid>.zip` on every server release. */
+export const KNOWN_RIDS = [
+    'linux-arm64',
+    'linux-x64',
+    'osx-arm64',
+    'osx-x64',
+    'win-arm64',
+    'win-x64',
+    'win-x86',
+];
+/** Map a Node `process.platform` value to the server's `OperationSystem` token, or null. */
+function osToken(platform) {
+    if (platform === 'win32')
+        return 'win';
+    if (platform === 'darwin')
+        return 'osx';
+    if (platform === 'linux')
+        return 'linux';
+    return null;
+}
+/** Map a Node `process.arch` value to the server's `CpuArch` token, or null. */
+function archToken(arch) {
+    if (arch === 'x64')
+        return 'x64';
+    if (arch === 'arm64')
+        return 'arm64';
+    if (arch === 'ia32')
+        return 'x86';
+    return null;
+}
+/**
+ * Resolve the host RID (defaulting to the current process's platform/arch). Throws a clear,
+ * actionable error when the host has no published server build — a fail-closed guard so
+ * `install-plugin --with-server` never silently downloads the wrong asset (or a 404 page).
+ */
+export function resolveHostRid(platform = process.platform, arch = process.arch) {
+    const os = osToken(platform);
+    const cpu = archToken(arch);
+    if (!os || !cpu) {
+        throw new Error(`Unsupported host platform/architecture (${platform}/${arch}). ` +
+            `Supported GameDev-MCP-Server RIDs: ${KNOWN_RIDS.join(', ')}.`);
+    }
+    const rid = `${os}-${cpu}`;
+    if (!KNOWN_RIDS.includes(rid)) {
+        throw new Error(`No GameDev-MCP-Server build exists for host RID '${rid}' (${platform}/${arch}). ` +
+            `Supported RIDs: ${KNOWN_RIDS.join(', ')}.`);
+    }
+    return rid;
+}
+//# sourceMappingURL=rid.js.map

package/dist/utils/rid.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rid.js","sourceRoot":"","sources":["../../src/utils/rid.ts"],"names":[],"mappings":"AAAA,uDAAuD;AACvD,kDAAkD;AAElD;;;;;;;GAOG;AAEH,iGAAiG;AACjG,MAAM,CAAC,MAAM,UAAU,GAAG;IACxB,aAAa;IACb,WAAW;IACX,WAAW;IACX,SAAS;IACT,WAAW;IACX,SAAS;IACT,SAAS;CACD,CAAC;AAIX,4FAA4F;AAC5F,SAAS,OAAO,CAAC,QAAyB;IACxC,IAAI,QAAQ,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC;IACvC,IAAI,QAAQ,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACxC,IAAI,QAAQ,KAAK,OAAO;QAAE,OAAO,OAAO,CAAC;IACzC,OAAO,IAAI,CAAC;AACd,CAAC;AAED,gFAAgF;AAChF,SAAS,SAAS,CAAC,IAAY;IAC7B,IAAI,IAAI,KAAK,KAAK;QAAE,OAAO,KAAK,CAAC;IACjC,IAAI,IAAI,KAAK,OAAO;QAAE,OAAO,OAAO,CAAC;IACrC,IAAI,IAAI,KAAK,MAAM;QAAE,OAAO,KAAK,CAAC;IAClC,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAC5B,WAA4B,OAAO,CAAC,QAAQ,EAC5C,OAAe,OAAO,CAAC,IAAI;IAE3B,MAAM,EAAE,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC7B,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC5B,IAAI,CAAC,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CACb,2CAA2C,QAAQ,IAAI,IAAI,KAAK;YAC9D,sCAAsC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACjE,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,GAAG,EAAE,IAAI,GAAG,EAAE,CAAC;IAC3B,IAAI,CAAE,UAAgC,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,KAAK,CACb,oDAAoD,GAAG,MAAM,QAAQ,IAAI,IAAI,KAAK;YAChF,mBAAmB,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAC9C,CAAC;IACJ,CAAC;IACD,OAAO,GAAU,CAAC;AACpB,CAAC"}

package/dist/utils/server-version.d.ts

@@ -0,0 +1,27 @@
+/**
+ * The pinned GameDev-MCP-Server version the CLI fetches by default with
+ * `install-plugin --with-server`.
+ *
+ * Kept in LOCKSTEP with the Unity plugin's `ServerVersion` constant in
+ *   Unity-MCP-Plugin/Packages/com.ivanmurzak.unity.mcp/Editor/Scripts/McpServerManager.cs
+ * so the CLI-downloaded binary and the plugin-downloaded binary can never drift. A drift guard
+ * in `tests/server-version.test.ts` reads that C# constant and asserts the two are byte-equal.
+ * Override at runtime with `--server-version <v>`.
+ *
+ * The CLI mirrors the constant rather than reading the `.cs` at runtime because the published npm
+ * package ships no plugin sources — the plugin release cadence bumps both in the same PR, and the
+ * drift-guard test fails CI if a bump touches only one side.
+ */
+export declare const DEFAULT_SERVER_VERSION = "9.0.0";
+/** GitHub `owner/repo` that hosts the shared server's tagged releases + per-RID zips. */
+export declare const SERVER_RELEASE_REPO = "IvanMurzak/GameDev-MCP-Server";
+/** Base executable name (no extension) of the shared server binary. */
+export declare const SERVER_EXECUTABLE_NAME = "gamedev-mcp-server";
+/**
+ * The Git release TAG for a server version: the version with a leading `v` (e.g. `9.0.0` →
+ * `v9.0.0`). GameDev-MCP-Server tags every release `v<version>` and the per-RID zips + the
+ * `SHA256SUMS` manifest are attached to THAT tag — so the download path MUST use the v-prefixed
+ * tag (a bare-version path 404s). Already-v-prefixed input is passed through unchanged so a caller
+ * cannot accidentally double-prefix. Mirrors the C# `McpServerManager.ServerReleaseTag`.
+ */
+export declare function serverReleaseTag(version: string): string;

package/dist/utils/server-version.js

@@ -0,0 +1,33 @@
+// Copyright (c) 2024 Ivan Murzak. All rights reserved.
+// Licensed under the Apache License, Version 2.0.
+/**
+ * The pinned GameDev-MCP-Server version the CLI fetches by default with
+ * `install-plugin --with-server`.
+ *
+ * Kept in LOCKSTEP with the Unity plugin's `ServerVersion` constant in
+ *   Unity-MCP-Plugin/Packages/com.ivanmurzak.unity.mcp/Editor/Scripts/McpServerManager.cs
+ * so the CLI-downloaded binary and the plugin-downloaded binary can never drift. A drift guard
+ * in `tests/server-version.test.ts` reads that C# constant and asserts the two are byte-equal.
+ * Override at runtime with `--server-version <v>`.
+ *
+ * The CLI mirrors the constant rather than reading the `.cs` at runtime because the published npm
+ * package ships no plugin sources — the plugin release cadence bumps both in the same PR, and the
+ * drift-guard test fails CI if a bump touches only one side.
+ */
+export const DEFAULT_SERVER_VERSION = '9.0.0';
+/** GitHub `owner/repo` that hosts the shared server's tagged releases + per-RID zips. */
+export const SERVER_RELEASE_REPO = 'IvanMurzak/GameDev-MCP-Server';
+/** Base executable name (no extension) of the shared server binary. */
+export const SERVER_EXECUTABLE_NAME = 'gamedev-mcp-server';
+/**
+ * The Git release TAG for a server version: the version with a leading `v` (e.g. `9.0.0` →
+ * `v9.0.0`). GameDev-MCP-Server tags every release `v<version>` and the per-RID zips + the
+ * `SHA256SUMS` manifest are attached to THAT tag — so the download path MUST use the v-prefixed
+ * tag (a bare-version path 404s). Already-v-prefixed input is passed through unchanged so a caller
+ * cannot accidentally double-prefix. Mirrors the C# `McpServerManager.ServerReleaseTag`.
+ */
+export function serverReleaseTag(version) {
+    const v = (version ?? '').trim();
+    return v.startsWith('v') ? v : `v${v}`;
+}
+//# sourceMappingURL=server-version.js.map

package/dist/utils/server-version.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-version.js","sourceRoot":"","sources":["../../src/utils/server-version.ts"],"names":[],"mappings":"AAAA,uDAAuD;AACvD,kDAAkD;AAElD;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,OAAO,CAAC;AAE9C,yFAAyF;AACzF,MAAM,CAAC,MAAM,mBAAmB,GAAG,+BAA+B,CAAC;AAEnE,uEAAuE;AACvE,MAAM,CAAC,MAAM,sBAAsB,GAAG,oBAAoB,CAAC;AAE3D;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAe;IAC9C,MAAM,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACjC,OAAO,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;AACzC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "unity-mcp-cli",
-  "version": "0.83.1",
+  "version": "0.84.0",
   "description": "Cross-platform CLI tool for AI Game Developer (Skills & MCP). Full AI develop and test loop. Efficient token usage, advanced tools. Creates Unity project, installs plugins, configures tools, and manages HTTP connection with Unity Editor and a game made with Unity. Works with Claude Code, Gemini, Copilot, Cursor and any other absolutely for free.",
   "type": "module",
   "main": "dist/lib.js",