unity-mcp-cli 0.84.3 → 0.85.0

package/dist/utils/machine-credentials.js

@@ -1,114 +1,11 @@
 // Copyright (c) 2024 Ivan Murzak. All rights reserved.
 // Licensed under the Apache License, Version 2.0.
-import * as fs from 'fs';
-import * as os from 'os';
-import * as path from 'path';
-import { execFileSync } from 'child_process';
 /**
- * TypeScript client of the shared machine credential store — the same on-disk contract the
- * plugin's C# `MachineCredentialStore` (MCP-Plugin-dotnet, com.IvanMurzak.McpPlugin.AgentConfig)
- * reads and writes. A single ai-game.dev account credential lives once per machine at
- * `~/.ai-game-dev/credentials.json`, so `login` writes it here and every engine plugin/CLI reads
- * it — sign-in happens once per machine, never per project, and the credential is NEVER written
- * into a project file / VCS.
- *
- * At-rest protection matches the C# store byte-for-byte so the plugin can read what the CLI wrote:
- *   - POSIX  — plaintext JSON, file mode 0600, inside a 0700 directory.
- *   - Windows — DPAPI-encrypted (CurrentUser scope, no entropy) via
- *     System.Security.Cryptography.ProtectedData, invoked through PowerShell. This is
- *     interoperable with the C# store's CryptProtectData/CryptUnprotectData (the description
- *     string and CRYPTPROTECT_UI_FORBIDDEN flag do not affect decryptability).
+ * The shared machine credential store now lives in `@baizor/gamedev-cli-core` (auth-fixes T7 / b2):
+ * ONE implementation of `~/.ai-game-dev/credentials.json` across the three engine CLIs and the C#
+ * plugin — atomic, corruption-safe writes (temp + fsync + rename), DPAPI on Windows / `0600`-`0700`
+ * on POSIX, plus the `rotate()` used by the proactive refresh loop. This module is a thin re-export
+ * so the rest of the CLI keeps importing from a stable local path.
  */
-/** Directory name under the user home (or a project root) that holds the store. */
-export const MACHINE_STORE_DIR_NAME = '.ai-game-dev';
-/** File name of the secret credential document. */
-export const CREDENTIALS_FILE_NAME = 'credentials.json';
-const isWindows = process.platform === 'win32';
-/**
- * The shared machine credential store. Defaults to `~/.ai-game-dev/`; pass an explicit
- * `baseDirectory` for tests or for the `--project` per-project store
- * (`<project>/.ai-game-dev/`).
- */
-export class MachineCredentialStore {
-    constructor(baseDirectory) {
-        this._baseDirectory = baseDirectory ?? path.join(os.homedir(), MACHINE_STORE_DIR_NAME);
-    }
-    /** Absolute path of the store directory. */
-    get baseDirectory() {
-        return this._baseDirectory;
-    }
-    /** Absolute path of the secret credential file. */
-    get credentialsPath() {
-        return path.join(this._baseDirectory, CREDENTIALS_FILE_NAME);
-    }
-    /** True when a credential file exists in the store. */
-    get exists() {
-        return fs.existsSync(this.credentialsPath);
-    }
-    /**
-     * Encrypt (Windows) / restrict (POSIX) and write `credentials` to the store, creating the
-     * store directory with owner-only permissions if needed. `version` is always written as 1;
-     * undefined fields are omitted (matching the C# `WhenWritingNull` policy).
-     */
-    write(credentials) {
-        this.ensureBaseDirectory();
-        const document = { ...credentials, version: 1 };
-        const json = JSON.stringify(document, null, 2);
-        const plaintext = Buffer.from(json, 'utf-8');
-        const bytes = isWindows ? dpapiTransform('Protect', plaintext) : plaintext;
-        fs.writeFileSync(this.credentialsPath, bytes);
-        if (!isWindows) {
-            fs.chmodSync(this.credentialsPath, 0o600);
-        }
-    }
-    /** Read and decrypt the stored credentials, or null when none are present. */
-    read() {
-        if (!fs.existsSync(this.credentialsPath)) {
-            return null;
-        }
-        const raw = fs.readFileSync(this.credentialsPath);
-        if (raw.length === 0) {
-            return null;
-        }
-        const plaintext = isWindows ? dpapiTransform('Unprotect', raw) : raw;
-        const json = plaintext.toString('utf-8');
-        if (json.trim().length === 0) {
-            return null;
-        }
-        return JSON.parse(json);
-    }
-    /** Delete the stored credentials (sign-out). No-op when none exist. */
-    delete() {
-        if (fs.existsSync(this.credentialsPath)) {
-            fs.rmSync(this.credentialsPath);
-        }
-    }
-    ensureBaseDirectory() {
-        fs.mkdirSync(this._baseDirectory, { recursive: true });
-        if (!isWindows) {
-            fs.chmodSync(this._baseDirectory, 0o700);
-        }
-    }
-}
-/**
- * Run a Windows DPAPI Protect/Unprotect round trip through PowerShell's
- * System.Security.Cryptography.ProtectedData (CurrentUser scope, no entropy) — interoperable
- * with the C# store's CryptProtectData/CryptUnprotectData. Input and output are passed as
- * base64 through an environment variable so the plaintext never lands in argv or the process
- * table. Only ever invoked on Windows.
- */
-function dpapiTransform(action, input) {
-    const script = "$ErrorActionPreference='Stop';" +
-        'Add-Type -AssemblyName System.Security;' +
-        '$in=[Convert]::FromBase64String($env:AIGD_DPAPI_IN);' +
-        `$out=[System.Security.Cryptography.ProtectedData]::${action}($in,$null,[System.Security.Cryptography.DataProtectionScope]::CurrentUser);` +
-        '[Convert]::ToBase64String($out)';
-    const stdout = execFileSync('powershell.exe', ['-NoProfile', '-NonInteractive', '-Command', script], {
-        encoding: 'utf-8',
-        env: { ...process.env, AIGD_DPAPI_IN: input.toString('base64') },
-        timeout: 20000,
-        windowsHide: true,
-    });
-    return Buffer.from(stdout.trim(), 'base64');
-}
+export { MachineCredentialStore, MACHINE_STORE_DIR_NAME, CREDENTIALS_FILE_NAME, CREDENTIALS_SCHEMA_VERSION, } from '@baizor/gamedev-cli-core';
 //# sourceMappingURL=machine-credentials.js.map

package/dist/utils/machine-credentials.js.map

@@ -1 +1 @@
-{"version":3,"file":"machine-credentials.js","sourceRoot":"","sources":["../../src/utils/machine-credentials.ts"],"names":[],"mappings":"AAAA,uDAAuD;AACvD,kDAAkD;AAElD,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAE7C;;;;;;;;;;;;;;GAcG;AAEH,mFAAmF;AACnF,MAAM,CAAC,MAAM,sBAAsB,GAAG,cAAc,CAAC;AAErD,mDAAmD;AACnD,MAAM,CAAC,MAAM,qBAAqB,GAAG,kBAAkB,CAAC;AAsBxD,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC;AAE/C;;;;GAIG;AACH,MAAM,OAAO,sBAAsB;IAGjC,YAAY,aAAsB;QAChC,IAAI,CAAC,cAAc,GAAG,aAAa,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,sBAAsB,CAAC,CAAC;IACzF,CAAC;IAED,4CAA4C;IAC5C,IAAI,aAAa;QACf,OAAO,IAAI,CAAC,cAAc,CAAC;IAC7B,CAAC;IAED,mDAAmD;IACnD,IAAI,eAAe;QACjB,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,qBAAqB,CAAC,CAAC;IAC/D,CAAC;IAED,uDAAuD;IACvD,IAAI,MAAM;QACR,OAAO,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAC7C,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,WAA+B;QACnC,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAE3B,MAAM,QAAQ,GAAuB,EAAE,GAAG,WAAW,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;QACpE,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAC/C,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC7C,MAAM,KAAK,GAAG,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAE3E,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC;QAC9C,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;IAED,8EAA8E;IAC9E,IAAI;QACF,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC;YACzC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAClD,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACrB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,SAAS,GAAG,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;QACrE,MAAM,IAAI,GAAG,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACzC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7B,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAuB,CAAC;IAChD,CAAC;IAED,uEAAuE;IACvE,MAAM;QACJ,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC;YACxC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;IAEO,mBAAmB;QACzB,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACvD,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC;CACF;AAED;;;;;;GAMG;AACH,SAAS,cAAc,CAAC,MAA+B,EAAE,KAAa;IACpE,MAAM,MAAM,GACV,gCAAgC;QAChC,yCAAyC;QACzC,sDAAsD;QACtD,sDAAsD,MAAM,8EAA8E;QAC1I,iCAAiC,CAAC;IAEpC,MAAM,MAAM,GAAG,YAAY,CACzB,gBAAgB,EAChB,CAAC,YAAY,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,CAAC,EACrD;QACE,QAAQ,EAAE,OAAO;QACjB,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,aAAa,EAAE,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE;QAChE,OAAO,EAAE,KAAK;QACd,WAAW,EAAE,IAAI;KAClB,CACF,CAAC;IAEF,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,QAAQ,CAAC,CAAC;AAC9C,CAAC"}
+{"version":3,"file":"machine-credentials.js","sourceRoot":"","sources":["../../src/utils/machine-credentials.ts"],"names":[],"mappings":"AAAA,uDAAuD;AACvD,kDAAkD;AAElD;;;;;;GAMG;AAEH,OAAO,EACL,sBAAsB,EACtB,sBAAsB,EACtB,qBAAqB,EACrB,0BAA0B,GAC3B,MAAM,0BAA0B,CAAC"}

package/dist/utils/port.d.ts

@@ -1,19 +1,12 @@
 /**
- * The exact string that is UTF-8/SHA-256 hashed: the project root with trailing directory
- * separators trimmed, then lowercased with the ToLowerInvariant-matching rules above.
- * Exposed so the golden-vector parity test can reproduce the pre-hash string.
+ * Project-identity derivation (routing pin + deterministic local port) now lives in
+ * `@baizor/gamedev-cli-core` (auth-fixes T3/T7): ONE port of the C# `ProjectIdentity`, gated by the
+ * SAME golden vectors as the .NET reference. This module re-exports the **v1** algorithm under the
+ * historical names the CLI has always used, so existing call sites (`utils/config.ts`,
+ * `utils/connection.ts`) and the golden-vector parity tests keep matching byte-for-byte.
+ *
+ * The **v2** algorithm (the `\`→`/` normalization that fixes B5) is what the configurators emit —
+ * `setup-mcp` / `enroll` derive their pins with `derivePinV2` inside cli-core; import `derivePinV2` /
+ * `derivePortV2` directly from `@baizor/gamedev-cli-core` when the v2 pin is needed.
  */
-export declare function normalizeProjectRoot(projectRoot: string): string;
-/**
- * The routing pin: the first 4 bytes of the SHA-256 of the normalized project root as 8
- * lowercase hex characters. Byte-for-byte the C# ProjectIdentity.DerivePin.
- */
-export declare function deriveProjectPin(dir: string): string;
-/**
- * Generate a deterministic port from a directory path.
- * Ports the canonical C# ProjectIdentity derivation (DerivePort), which is itself byte-for-byte
- * the shipped Unity UnityMcpPlugin.GeneratePortFromDirectory() logic:
- * SHA256 of the normalized (trailing-separator-trimmed, ToLowerInvariant) directory → first
- * 4 bytes as a little-endian uint32 → modulo 10000 + 20000 (range 20000-29999).
- */
-export declare function generatePortFromDirectory(dir: string): number;
+export { derivePin as deriveProjectPin, derivePort as generatePortFromDirectory, normalize as normalizeProjectRoot, } from '@baizor/gamedev-cli-core';

package/dist/utils/port.js

@@ -1,74 +1,15 @@
-import { createHash } from 'crypto';
-const MIN_PORT = 20000;
-const MAX_PORT = 29999;
-const PORT_RANGE = MAX_PORT - MIN_PORT + 1;
-// Routing pin = first 4 bytes of the hash rendered as 8 lowercase hex chars.
-const PIN_BYTES = 4;
-// Characters where JS String.prototype.toLowerCase() diverges from .NET
-// string.ToLowerInvariant(). ToLowerInvariant is the canonical origin of the
-// ProjectIdentity derivation (see MCP-Plugin-dotnet ProjectIdentity.GoldenVectors.json),
-// so the TS port must reproduce it byte-for-byte. Each entry maps a code point to the
-// value ToLowerInvariant produces:
-//   U+0130 LATIN CAPITAL LETTER I WITH DOT ABOVE - ToLowerInvariant leaves it unchanged
-//   (no case fold), whereas toLowerCase() lowers it to U+0069 U+0307 (i + COMBINING DOT ABOVE).
-const INVARIANT_LOWER_OVERRIDES = {
-    'İ': 'İ',
-};
-/**
- * Lowercase a string the way .NET string.ToLowerInvariant() does: a simple,
- * culture-independent, per-code-point mapping (no context-sensitive rules such as the
- * Greek final-sigma or the Turkish-i special cases). We lower each code point on its own
- * and apply INVARIANT_LOWER_OVERRIDES for the few points where JS disagrees with .NET.
- */
-function toLowerInvariant(value) {
-    let out = '';
-    for (const ch of value) {
-        out += INVARIANT_LOWER_OVERRIDES[ch] ?? ch.toLowerCase();
-    }
-    return out;
-}
-/**
- * Trim trailing directory separators ('/' and '\\') so '/a/b' and '/a/b/' are the same
- * project. Never trims below length 1 (matches ProjectIdentity.TrimTrailingSeparators).
- * Separators are NOT converted — 'C:\\a' and 'C:/a' remain distinct and hash differently.
- */
-function trimTrailingSeparators(pathStr) {
-    let end = pathStr.length;
-    while (end > 1 && (pathStr[end - 1] === '/' || pathStr[end - 1] === '\\')) {
-        end--;
-    }
-    return end === pathStr.length ? pathStr : pathStr.slice(0, end);
-}
-/**
- * The exact string that is UTF-8/SHA-256 hashed: the project root with trailing directory
- * separators trimmed, then lowercased with the ToLowerInvariant-matching rules above.
- * Exposed so the golden-vector parity test can reproduce the pre-hash string.
- */
-export function normalizeProjectRoot(projectRoot) {
-    return toLowerInvariant(trimTrailingSeparators(projectRoot));
-}
-function hashOf(projectRoot) {
-    return createHash('sha256').update(normalizeProjectRoot(projectRoot), 'utf-8').digest();
-}
-/**
- * The routing pin: the first 4 bytes of the SHA-256 of the normalized project root as 8
- * lowercase hex characters. Byte-for-byte the C# ProjectIdentity.DerivePin.
- */
-export function deriveProjectPin(dir) {
-    return hashOf(dir).subarray(0, PIN_BYTES).toString('hex');
-}
-/**
- * Generate a deterministic port from a directory path.
- * Ports the canonical C# ProjectIdentity derivation (DerivePort), which is itself byte-for-byte
- * the shipped Unity UnityMcpPlugin.GeneratePortFromDirectory() logic:
- * SHA256 of the normalized (trailing-separator-trimmed, ToLowerInvariant) directory → first
- * 4 bytes as a little-endian uint32 → modulo 10000 + 20000 (range 20000-29999).
- */
-export function generatePortFromDirectory(dir) {
-    const hash = hashOf(dir);
-    // Read first 4 bytes as little-endian int32, then treat as unsigned.
-    const int32 = hash.readInt32LE(0);
-    const uint32 = int32 >>> 0;
-    return MIN_PORT + (uint32 % PORT_RANGE);
-}
+// Copyright (c) 2024 Ivan Murzak. All rights reserved.
+// Licensed under the Apache License, Version 2.0.
+/**
+ * Project-identity derivation (routing pin + deterministic local port) now lives in
+ * `@baizor/gamedev-cli-core` (auth-fixes T3/T7): ONE port of the C# `ProjectIdentity`, gated by the
+ * SAME golden vectors as the .NET reference. This module re-exports the **v1** algorithm under the
+ * historical names the CLI has always used, so existing call sites (`utils/config.ts`,
+ * `utils/connection.ts`) and the golden-vector parity tests keep matching byte-for-byte.
+ *
+ * The **v2** algorithm (the `\`→`/` normalization that fixes B5) is what the configurators emit —
+ * `setup-mcp` / `enroll` derive their pins with `derivePinV2` inside cli-core; import `derivePinV2` /
+ * `derivePortV2` directly from `@baizor/gamedev-cli-core` when the v2 pin is needed.
+ */
+export { derivePin as deriveProjectPin, derivePort as generatePortFromDirectory, normalize as normalizeProjectRoot, } from '@baizor/gamedev-cli-core';
 //# sourceMappingURL=port.js.map

package/dist/utils/port.js.map

@@ -1 +1 @@
-{"version":3,"file":"port.js","sourceRoot":"","sources":["../../src/utils/port.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAEpC,MAAM,QAAQ,GAAG,KAAK,CAAC;AACvB,MAAM,QAAQ,GAAG,KAAK,CAAC;AACvB,MAAM,UAAU,GAAG,QAAQ,GAAG,QAAQ,GAAG,CAAC,CAAC;AAC3C,6EAA6E;AAC7E,MAAM,SAAS,GAAG,CAAC,CAAC;AAEpB,wEAAwE;AACxE,6EAA6E;AAC7E,yFAAyF;AACzF,sFAAsF;AACtF,mCAAmC;AACnC,wFAAwF;AACxF,gGAAgG;AAChG,MAAM,yBAAyB,GAA2B;IACxD,GAAG,EAAE,GAAG;CACT,CAAC;AAEF;;;;;GAKG;AACH,SAAS,gBAAgB,CAAC,KAAa;IACrC,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,MAAM,EAAE,IAAI,KAAK,EAAE,CAAC;QACvB,GAAG,IAAI,yBAAyB,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3D,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;GAIG;AACH,SAAS,sBAAsB,CAAC,OAAe;IAC7C,IAAI,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC;IACzB,OAAO,GAAG,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,GAAG,IAAI,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,EAAE,CAAC;QAC1E,GAAG,EAAE,CAAC;IACR,CAAC;IACD,OAAO,GAAG,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AAClE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,WAAmB;IACtD,OAAO,gBAAgB,CAAC,sBAAsB,CAAC,WAAW,CAAC,CAAC,CAAC;AAC/D,CAAC;AAED,SAAS,MAAM,CAAC,WAAmB;IACjC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,oBAAoB,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC;AAC1F,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAAW;IAC1C,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAC5D,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,yBAAyB,CAAC,GAAW;IACnD,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAEzB,qEAAqE;IACrE,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IAClC,MAAM,MAAM,GAAG,KAAK,KAAK,CAAC,CAAC;IAE3B,OAAO,QAAQ,GAAG,CAAC,MAAM,GAAG,UAAU,CAAC,CAAC;AAC1C,CAAC"}
+{"version":3,"file":"port.js","sourceRoot":"","sources":["../../src/utils/port.ts"],"names":[],"mappings":"AAAA,uDAAuD;AACvD,kDAAkD;AAElD;;;;;;;;;;GAUG;AAEH,OAAO,EACL,SAAS,IAAI,gBAAgB,EAC7B,UAAU,IAAI,yBAAyB,EACvC,SAAS,IAAI,oBAAoB,GAClC,MAAM,0BAA0B,CAAC"}

package/dist/utils/project-marker.d.ts

@@ -1,26 +1,9 @@
 /**
- * The tool-neutral, NON-SECRET, committable project marker at
- * `<project>/.ai-game-dev/project.json` (design 06/09, D15). It records the enrolled server
- * target (hosted vs local) and the optional user port override so ProjectIdentity resolution and
- * every config writer (engine UI, CLIs, `configure`) agree on one source of truth. Credentials
- * NEVER go here — those live only in the machine credential store (`credentials.json`).
+ * The tool-neutral, NON-SECRET, committable project marker (`<project>/.ai-game-dev/project.json`)
+ * now lives in `@baizor/gamedev-cli-core` (auth-fixes T7): ONE implementation shared by the three
+ * engine CLIs. It records the enrolled server target (hosted vs local) and the optional user port
+ * override; credentials NEVER go here (those live only in the machine credential store). This module
+ * is a thin re-export so the CLI keeps a stable local import path.
  */
-export declare const PROJECT_MARKER_FILE = "project.json";
-export interface ProjectMarker {
-    /** The server the project is enrolled against (hosted `https://ai-game.dev` or a local URL). */
-    serverTarget?: string;
-    /** User's explicit local-port override (wins over the deterministic derived port). */
-    portOverride?: number;
-    /** Unknown fields are preserved on read/merge for forward-compatibility. */
-    [key: string]: unknown;
-}
-export declare function projectMarkerDir(projectPath: string): string;
-export declare function projectMarkerPath(projectPath: string): string;
-/** Read the marker, or null when absent/unparsable. */
-export declare function readProjectMarker(projectPath: string): ProjectMarker | null;
-/**
- * Merge `marker` into any existing marker and write it back (creating the `.ai-game-dev/`
- * directory as needed). Idempotent for the same inputs; preserves pre-existing keys. Returns the
- * absolute marker path.
- */
-export declare function writeProjectMarker(projectPath: string, marker: ProjectMarker): string;
+export { readProjectMarker, writeProjectMarker, projectMarkerPath, projectMarkerDir, PROJECT_MARKER_FILE, } from '@baizor/gamedev-cli-core';
+export type { ProjectMarker } from '@baizor/gamedev-cli-core';

package/dist/utils/project-marker.js

@@ -1,48 +1,11 @@
 // Copyright (c) 2024 Ivan Murzak. All rights reserved.
 // Licensed under the Apache License, Version 2.0.
-import * as fs from 'fs';
-import * as path from 'path';
-import { MACHINE_STORE_DIR_NAME } from './machine-credentials.js';
 /**
- * The tool-neutral, NON-SECRET, committable project marker at
- * `<project>/.ai-game-dev/project.json` (design 06/09, D15). It records the enrolled server
- * target (hosted vs local) and the optional user port override so ProjectIdentity resolution and
- * every config writer (engine UI, CLIs, `configure`) agree on one source of truth. Credentials
- * NEVER go here — those live only in the machine credential store (`credentials.json`).
+ * The tool-neutral, NON-SECRET, committable project marker (`<project>/.ai-game-dev/project.json`)
+ * now lives in `@baizor/gamedev-cli-core` (auth-fixes T7): ONE implementation shared by the three
+ * engine CLIs. It records the enrolled server target (hosted vs local) and the optional user port
+ * override; credentials NEVER go here (those live only in the machine credential store). This module
+ * is a thin re-export so the CLI keeps a stable local import path.
  */
-export const PROJECT_MARKER_FILE = 'project.json';
-export function projectMarkerDir(projectPath) {
-    return path.join(projectPath, MACHINE_STORE_DIR_NAME);
-}
-export function projectMarkerPath(projectPath) {
-    return path.join(projectMarkerDir(projectPath), PROJECT_MARKER_FILE);
-}
-/** Read the marker, or null when absent/unparsable. */
-export function readProjectMarker(projectPath) {
-    const markerPath = projectMarkerPath(projectPath);
-    if (!fs.existsSync(markerPath))
-        return null;
-    try {
-        const parsed = JSON.parse(fs.readFileSync(markerPath, 'utf-8'));
-        if (!parsed || typeof parsed !== 'object' || Array.isArray(parsed))
-            return null;
-        return parsed;
-    }
-    catch {
-        return null;
-    }
-}
-/**
- * Merge `marker` into any existing marker and write it back (creating the `.ai-game-dev/`
- * directory as needed). Idempotent for the same inputs; preserves pre-existing keys. Returns the
- * absolute marker path.
- */
-export function writeProjectMarker(projectPath, marker) {
-    const dir = projectMarkerDir(projectPath);
-    fs.mkdirSync(dir, { recursive: true });
-    const merged = { ...(readProjectMarker(projectPath) ?? {}), ...marker };
-    const markerPath = projectMarkerPath(projectPath);
-    fs.writeFileSync(markerPath, JSON.stringify(merged, null, 2) + '\n');
-    return markerPath;
-}
+export { readProjectMarker, writeProjectMarker, projectMarkerPath, projectMarkerDir, PROJECT_MARKER_FILE, } from '@baizor/gamedev-cli-core';
 //# sourceMappingURL=project-marker.js.map

package/dist/utils/project-marker.js.map

@@ -1 +1 @@
-{"version":3,"file":"project-marker.js","sourceRoot":"","sources":["../../src/utils/project-marker.ts"],"names":[],"mappings":"AAAA,uDAAuD;AACvD,kDAAkD;AAElD,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAElE;;;;;;GAMG;AAEH,MAAM,CAAC,MAAM,mBAAmB,GAAG,cAAc,CAAC;AAWlD,MAAM,UAAU,gBAAgB,CAAC,WAAmB;IAClD,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,sBAAsB,CAAC,CAAC;AACxD,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,WAAmB;IACnD,OAAO,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,WAAW,CAAC,EAAE,mBAAmB,CAAC,CAAC;AACvE,CAAC;AAED,uDAAuD;AACvD,MAAM,UAAU,iBAAiB,CAAC,WAAmB;IACnD,MAAM,UAAU,GAAG,iBAAiB,CAAC,WAAW,CAAC,CAAC;IAClD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAY,CAAC;QAC3E,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC;QAChF,OAAO,MAAuB,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,WAAmB,EAAE,MAAqB;IAC3E,MAAM,GAAG,GAAG,gBAAgB,CAAC,WAAW,CAAC,CAAC;IAC1C,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACvC,MAAM,MAAM,GAAkB,EAAE,GAAG,CAAC,iBAAiB,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,EAAE,GAAG,MAAM,EAAE,CAAC;IACvF,MAAM,UAAU,GAAG,iBAAiB,CAAC,WAAW,CAAC,CAAC;IAClD,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IACrE,OAAO,UAAU,CAAC;AACpB,CAAC"}
+{"version":3,"file":"project-marker.js","sourceRoot":"","sources":["../../src/utils/project-marker.ts"],"names":[],"mappings":"AAAA,uDAAuD;AACvD,kDAAkD;AAElD;;;;;;GAMG;AAEH,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,iBAAiB,EACjB,gBAAgB,EAChB,mBAAmB,GACpB,MAAM,0BAA0B,CAAC"}

package/dist/utils/server-version.d.ts

@@ -12,7 +12,7 @@
  * package ships no plugin sources — the plugin release cadence bumps both in the same PR, and the
  * drift-guard test fails CI if a bump touches only one side.
  */
-export declare const DEFAULT_SERVER_VERSION = "9.1.0";
+export declare const DEFAULT_SERVER_VERSION = "9.1.1";
 /** GitHub `owner/repo` that hosts the shared server's tagged releases + per-RID zips. */
 export declare const SERVER_RELEASE_REPO = "IvanMurzak/GameDev-MCP-Server";
 /** Base executable name (no extension) of the shared server binary. */

package/dist/utils/server-version.js

@@ -14,7 +14,7 @@
  * package ships no plugin sources — the plugin release cadence bumps both in the same PR, and the
  * drift-guard test fails CI if a bump touches only one side.
  */
-export const DEFAULT_SERVER_VERSION = '9.1.0';
+export const DEFAULT_SERVER_VERSION = '9.1.1';
 /** GitHub `owner/repo` that hosts the shared server's tagged releases + per-RID zips. */
 export const SERVER_RELEASE_REPO = 'IvanMurzak/GameDev-MCP-Server';
 /** Base executable name (no extension) of the shared server binary. */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "unity-mcp-cli",
-  "version": "0.84.3",
+  "version": "0.85.0",
   "description": "Cross-platform CLI tool for AI Game Developer (Skills & MCP). Full AI develop and test loop. Efficient token usage, advanced tools. Creates Unity project, installs plugins, configures tools, and manages HTTP connection with Unity Editor and a game made with Unity. Works with Claude Code, Gemini, Copilot, Cursor and any other absolutely for free.",
   "type": "module",
   "main": "dist/lib.js",
@@ -62,6 +62,7 @@
     "node": "^20.19.0 || >=22.12.0"
   },
   "dependencies": {
+    "@baizor/gamedev-cli-core": "^0.1.0",
     "chalk": "^5.6.2",
     "commander": "^13.1.0",
     "yocto-spinner": "^1.1.0"

package/dist/utils/auth.d.ts

@@ -1,28 +0,0 @@
-export interface DeviceAuthorizeResponse {
-    device_code: string;
-    user_code: string;
-    verification_uri: string;
-    verification_uri_complete: string;
-    expires_in: number;
-    interval: number;
-}
-export type DeviceAuthResult = {
-    success: true;
-    accessToken: string;
-} | {
-    success: false;
-    reason: 'expired' | 'denied' | 'error';
-    message: string;
-};
-export interface DeviceAuthCallbacks {
-    onUserCode: (userCode: string, verificationUrl: string) => void;
-    onPolling?: () => void;
-}
-/**
- * Run the RFC 8628 Device Authorization Grant flow against the given server.
- *
- * 1. POST /api/auth/device/authorize  → get device_code + user_code
- * 2. Invoke onUserCode so the caller can display instructions / open browser
- * 3. Poll /api/auth/device/token until success, denial, or expiry
- */
-export declare function deviceAuthFlow(baseUrl: string, clientLabel: string, callbacks: DeviceAuthCallbacks, minIntervalMs?: number): Promise<DeviceAuthResult>;

package/dist/utils/auth.js

@@ -1,111 +0,0 @@
-// Copyright (c) 2024 Ivan Murzak. All rights reserved.
-// Licensed under the Apache License, Version 2.0.
-import { verbose } from './ui.js';
-// ─── Flow ────────────────────────────────────────────────────────────────────
-/**
- * Run the RFC 8628 Device Authorization Grant flow against the given server.
- *
- * 1. POST /api/auth/device/authorize  → get device_code + user_code
- * 2. Invoke onUserCode so the caller can display instructions / open browser
- * 3. Poll /api/auth/device/token until success, denial, or expiry
- */
-export async function deviceAuthFlow(baseUrl, clientLabel, callbacks, minIntervalMs) {
-    const authorizeUrl = `${baseUrl}/api/auth/device/authorize`;
-    verbose(`POST ${authorizeUrl}`);
-    const initResponse = await fetchWithTimeout(authorizeUrl, {
-        method: 'POST',
-        headers: { 'Content-Type': 'application/json' },
-        body: JSON.stringify({ client_label: clientLabel }),
-    }, 30000);
-    if (!initResponse.ok) {
-        const text = await initResponse.text();
-        return {
-            success: false,
-            reason: 'error',
-            message: `Failed to initiate device auth (HTTP ${initResponse.status}): ${text}`,
-        };
-    }
-    const auth = (await initResponse.json());
-    verbose(`Device code received, user code: ${auth.user_code}, expires in ${auth.expires_in}s`);
-    callbacks.onUserCode(auth.user_code, auth.verification_uri_complete);
-    callbacks.onPolling?.();
-    const tokenUrl = `${baseUrl}/api/auth/device/token`;
-    const deadline = Date.now() + auth.expires_in * 1000;
-    const effectiveMinInterval = minIntervalMs ?? 5000;
-    let interval = Math.max(auth.interval * 1000, effectiveMinInterval);
-    while (Date.now() < deadline) {
-        await sleep(interval);
-        if (Date.now() >= deadline)
-            break;
-        verbose(`Polling ${tokenUrl} (interval=${interval / 1000}s)`);
-        const pollResponse = await fetchWithTimeout(tokenUrl, {
-            method: 'POST',
-            headers: { 'Content-Type': 'application/json' },
-            body: JSON.stringify({
-                device_code: auth.device_code,
-                grant_type: 'urn:ietf:params:oauth:grant-type:device_code',
-            }),
-        }, 15000);
-        if (pollResponse.ok) {
-            const data = (await pollResponse.json());
-            return { success: true, accessToken: data.access_token };
-        }
-        let errorData;
-        try {
-            errorData = (await pollResponse.json());
-        }
-        catch {
-            return {
-                success: false,
-                reason: 'error',
-                message: `Unexpected response from token endpoint (HTTP ${pollResponse.status})`,
-            };
-        }
-        verbose(`Poll response: ${errorData.error} — ${errorData.error_description ?? ''}`);
-        switch (errorData.error) {
-            case 'authorization_pending':
-                break;
-            case 'slow_down':
-                interval = Math.min(interval + 5000, 30000);
-                verbose(`Slowing down, new interval: ${interval / 1000}s`);
-                break;
-            case 'expired_token':
-                return {
-                    success: false,
-                    reason: 'expired',
-                    message: errorData.error_description ?? 'Device code expired. Please try again.',
-                };
-            case 'access_denied':
-                return {
-                    success: false,
-                    reason: 'denied',
-                    message: errorData.error_description ?? 'Authorization was denied.',
-                };
-            default:
-                return {
-                    success: false,
-                    reason: 'error',
-                    message: errorData.error_description ?? `Unexpected error: ${errorData.error}`,
-                };
-        }
-    }
-    return {
-        success: false,
-        reason: 'expired',
-        message: 'Device code expired. Please try again.',
-    };
-}
-function sleep(ms) {
-    return new Promise((resolve) => setTimeout(resolve, ms));
-}
-async function fetchWithTimeout(url, options, timeoutMs) {
-    const controller = new AbortController();
-    const timer = setTimeout(() => controller.abort(), timeoutMs);
-    try {
-        return await fetch(url, { ...options, signal: controller.signal });
-    }
-    finally {
-        clearTimeout(timer);
-    }
-}
-//# sourceMappingURL=auth.js.map

package/dist/utils/auth.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/utils/auth.ts"],"names":[],"mappings":"AAAA,uDAAuD;AACvD,kDAAkD;AAElD,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAgClC,gFAAgF;AAEhF;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,OAAe,EACf,WAAmB,EACnB,SAA8B,EAC9B,aAAsB;IAEtB,MAAM,YAAY,GAAG,GAAG,OAAO,4BAA4B,CAAC;IAC5D,OAAO,CAAC,QAAQ,YAAY,EAAE,CAAC,CAAC;IAEhC,MAAM,YAAY,GAAG,MAAM,gBAAgB,CACzC,YAAY,EACZ;QACE,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC;KACpD,EACD,KAAM,CACP,CAAC;IAEF,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC;QACrB,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,CAAC;QACvC,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,OAAO;YACf,OAAO,EAAE,wCAAwC,YAAY,CAAC,MAAM,MAAM,IAAI,EAAE;SACjF,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,CAAC,MAAM,YAAY,CAAC,IAAI,EAAE,CAA4B,CAAC;IACpE,OAAO,CAAC,oCAAoC,IAAI,CAAC,SAAS,gBAAgB,IAAI,CAAC,UAAU,GAAG,CAAC,CAAC;IAE9F,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,yBAAyB,CAAC,CAAC;IACrE,SAAS,CAAC,SAAS,EAAE,EAAE,CAAC;IAExB,MAAM,QAAQ,GAAG,GAAG,OAAO,wBAAwB,CAAC;IACpD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;IACrD,MAAM,oBAAoB,GAAG,aAAa,IAAI,IAAI,CAAC;IACnD,IAAI,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,GAAG,IAAI,EAAE,oBAAoB,CAAC,CAAC;IAEpE,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC7B,MAAM,KAAK,CAAC,QAAQ,CAAC,CAAC;QAEtB,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ;YAAE,MAAM;QAElC,OAAO,CAAC,WAAW,QAAQ,cAAc,QAAQ,GAAG,IAAI,IAAI,CAAC,CAAC;QAE9D,MAAM,YAAY,GAAG,MAAM,gBAAgB,CACzC,QAAQ,EACR;YACE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,UAAU,EAAE,8CAA8C;aAC3D,CAAC;SACH,EACD,KAAM,CACP,CAAC;QAEF,IAAI,YAAY,CAAC,EAAE,EAAE,CAAC;YACpB,MAAM,IAAI,GAAG,CAAC,MAAM,YAAY,CAAC,IAAI,EAAE,CAA+B,CAAC;YACvE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC;QAC3D,CAAC;QAED,IAAI,SAAmC,CAAC;QACxC,IAAI,CAAC;YACH,SAAS,GAAG,CAAC,MAAM,YAAY,CAAC,IAAI,EAAE,CAA6B,CAAC;QACtE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,OAAO;gBACf,OAAO,EAAE,iDAAiD,YAAY,CAAC,MAAM,GAAG;aACjF,CAAC;QACJ,CAAC;QACD,OAAO,CAAC,kBAAkB,SAAS,CAAC,KAAK,MAAM,SAAS,CAAC,iBAAiB,IAAI,EAAE,EAAE,CAAC,CAAC;QAEpF,QAAQ,SAAS,CAAC,KAAK,EAAE,CAAC;YACxB,KAAK,uBAAuB;gBAC1B,MAAM;YAER,KAAK,WAAW;gBACd,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,GAAG,IAAI,EAAE,KAAK,CAAC,CAAC;gBAC5C,OAAO,CAAC,+BAA+B,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC;gBAC3D,MAAM;YAER,KAAK,eAAe;gBAClB,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,MAAM,EAAE,SAAS;oBACjB,OAAO,EAAE,SAAS,CAAC,iBAAiB,IAAI,wCAAwC;iBACjF,CAAC;YAEJ,KAAK,eAAe;gBAClB,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,MAAM,EAAE,QAAQ;oBAChB,OAAO,EAAE,SAAS,CAAC,iBAAiB,IAAI,2BAA2B;iBACpE,CAAC;YAEJ;gBACE,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,MAAM,EAAE,OAAO;oBACf,OAAO,EAAE,SAAS,CAAC,iBAAiB,IAAI,qBAAqB,SAAS,CAAC,KAAK,EAAE;iBAC/E,CAAC;QACN,CAAC;IACH,CAAC;IAED,OAAO;QACL,OAAO,EAAE,KAAK;QACd,MAAM,EAAE,SAAS;QACjB,OAAO,EAAE,wCAAwC;KAClD,CAAC;AACJ,CAAC;AAED,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC7B,GAAW,EACX,OAAoB,EACpB,SAAiB;IAEjB,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;IAC9D,IAAI,CAAC;QACH,OAAO,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;IACrE,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;AACH,CAAC"}