unreal-engine-mcp-server 0.6.0-beta-e → 0.6.0

package/dist/utils/commands/command-validator.js

@@ -1,20 +0,0 @@
-import { isConsoleCommandBlocked } from './console-command-policy-matching.js';
-export class CommandValidator {
-    static validate(command) {
-        if (!command || typeof command !== 'string') {
-            throw new Error('Invalid command: must be a non-empty string');
-        }
-        const cmdTrimmed = command.trim();
-        if (cmdTrimmed.length === 0) {
-            return;
-        }
-        if (cmdTrimmed.includes('\n') || cmdTrimmed.includes('\r')) {
-            throw new Error('Multi-line console commands are not allowed. Send one command per call.');
-        }
-        const cmdLower = cmdTrimmed.toLowerCase();
-        if (isConsoleCommandBlocked(cmdLower)) {
-            throw new Error(`Dangerous command blocked: ${command}`);
-        }
-    }
-}
-//# sourceMappingURL=command-validator.js.map

package/dist/utils/commands/console-command-policy-matching.d.ts

@@ -1,6 +0,0 @@
-import { type ConsoleCommandRuleMatcher } from './console-command-policy-rules.js';
-export declare function escapeRegExp(value: string): string;
-export declare function firstToken(command: string): string;
-export declare function matchesRule(command: string, matcher: ConsoleCommandRuleMatcher): boolean;
-export declare function isConsoleCommandBlocked(command: string): boolean;
-//# sourceMappingURL=console-command-policy-matching.d.ts.map

package/dist/utils/commands/console-command-policy-matching.js

@@ -1,38 +0,0 @@
-import { CONSOLE_COMMAND_POLICY_RULES } from './console-command-policy-rules.js';
-export function escapeRegExp(value) {
-    return value.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
-}
-const compiledMatchers = new Map();
-function cachedRegExp(source, flags) {
-    const key = `${flags}\u0000${source}`;
-    let compiled = compiledMatchers.get(key);
-    if (compiled === undefined) {
-        compiled = new RegExp(source, flags);
-        compiledMatchers.set(key, compiled);
-    }
-    return compiled;
-}
-export function firstToken(command) {
-    return command.split(/\s+/u).filter(Boolean)[0] ?? '';
-}
-export function matchesRule(command, matcher) {
-    switch (matcher.kind) {
-        case 'contains-any':
-            return matcher.values.some((value) => command.includes(value));
-        case 'first-token':
-            return matcher.values.includes(firstToken(command));
-        case 'whitespace-bounded-anywhere':
-            return matcher.values.some((value) => cachedRegExp(`(?:^|\\s)${escapeRegExp(value)}(?:\\s|$)`, 'i').test(command));
-        case 'pattern':
-            return cachedRegExp(matcher.source, matcher.flags).test(command);
-        default: {
-            const never = matcher;
-            throw new Error(`Unhandled console-command matcher: ${String(never)}`);
-        }
-    }
-}
-export function isConsoleCommandBlocked(command) {
-    const normalized = command.trim().toLowerCase();
-    return CONSOLE_COMMAND_POLICY_RULES.some((rule) => matchesRule(normalized, rule.matcher));
-}
-//# sourceMappingURL=console-command-policy-matching.js.map

package/dist/utils/commands/console-command-policy-rules.d.ts

@@ -1,179 +0,0 @@
-export declare const CONSOLE_COMMAND_POLICY_SURFACES: readonly ["typescript", "native"];
-export type ConsoleCommandPolicySurface = (typeof CONSOLE_COMMAND_POLICY_SURFACES)[number];
-export declare const CONSOLE_COMMAND_POLICY_BLOCK_REASONS: readonly ["MALFORMED_INPUT", "UNSAFE_SEPARATOR", "PYTHON_EXECUTION", "DANGEROUS_ENGINE_COMMAND", "RESTRICTED_ENGINE_COMMAND", "SHELL_COMMAND", "UNSAFE_TOKEN"];
-export type ConsoleCommandPolicyBlockReason = (typeof CONSOLE_COMMAND_POLICY_BLOCK_REASONS)[number];
-export type ConsoleCommandRuleApplicability = ConsoleCommandPolicySurface | 'both';
-export type ConsoleCommandRuleMatcher = {
-    readonly kind: 'contains-any';
-    readonly values: readonly string[];
-} | {
-    readonly kind: 'first-token';
-    readonly values: readonly string[];
-} | {
-    readonly kind: 'whitespace-bounded-anywhere';
-    readonly values: readonly string[];
-} | {
-    readonly kind: 'pattern';
-    readonly source: string;
-    readonly flags: 'i';
-};
-export type ConsoleCommandPolicyRule = {
-    readonly id: string;
-    readonly appliesTo: ConsoleCommandRuleApplicability;
-    readonly reasonCode: ConsoleCommandPolicyBlockReason;
-    readonly matcher: ConsoleCommandRuleMatcher;
-};
-export declare const CONSOLE_COMMAND_POLICY_RULES: readonly [{
-    readonly id: "shared.unsafe-separator";
-    readonly appliesTo: "both";
-    readonly reasonCode: "UNSAFE_SEPARATOR";
-    readonly matcher: {
-        readonly kind: "contains-any";
-        readonly values: readonly ["\n", "\r", "&&", "||", ";", "|", "`"];
-    };
-}, {
-    readonly id: "shared.python-first-token";
-    readonly appliesTo: "both";
-    readonly reasonCode: "PYTHON_EXECUTION";
-    readonly matcher: {
-        readonly kind: "first-token";
-        readonly values: readonly ["py", "python"];
-    };
-}, {
-    readonly id: "shared.dangerous-first-token";
-    readonly appliesTo: "both";
-    readonly reasonCode: "DANGEROUS_ENGINE_COMMAND";
-    readonly matcher: {
-        readonly kind: "first-token";
-        readonly values: readonly ["debug", "exec", "crash", "gpucrash", "check", "gpf", "ensure", "ensurealways", "fatal", "bufferoverrun", "crtinvalid", "stall", "hitch", "renderhitch", "softlock", "eatmem"];
-    };
-}, {
-    readonly id: "typescript.dangerous-whitespace-bounded";
-    readonly appliesTo: "typescript";
-    readonly reasonCode: "DANGEROUS_ENGINE_COMMAND";
-    readonly matcher: {
-        readonly kind: "whitespace-bounded-anywhere";
-        readonly values: readonly ["quit", "exit", "kill", "crash", "r.gpucrash", "r.crash", "debug crash", "forcecrash", "debug break", "assert false", "check(false)", "viewmode visualizebuffer basecolor", "viewmode visualizebuffer worldnormal", "buildpaths", "rebuildnavigation", "obj garbage", "obj list", "memreport", "delete", "destroy"];
-    };
-}, {
-    readonly id: "typescript.forbidden-substring";
-    readonly appliesTo: "typescript";
-    readonly reasonCode: "UNSAFE_TOKEN";
-    readonly matcher: {
-        readonly kind: "contains-any";
-        readonly values: readonly ["shutdown", "reboot", "rmdir", "mklink", "import os", "import subprocess", "subprocess.", "os.system", "exec(", "eval(", "__import__", "import sys", "import importlib", "with open", "open(", "write(", "read("];
-    };
-}, {
-    readonly id: "typescript.shell-name-anywhere";
-    readonly appliesTo: "typescript";
-    readonly reasonCode: "SHELL_COMMAND";
-    readonly matcher: {
-        readonly kind: "pattern";
-        readonly source: string;
-        readonly flags: "i";
-    };
-}, {
-    readonly id: "typescript.flexible-import";
-    readonly appliesTo: "typescript";
-    readonly reasonCode: "UNSAFE_TOKEN";
-    readonly matcher: {
-        readonly kind: "pattern";
-        readonly source: string;
-        readonly flags: "i";
-    };
-}, {
-    readonly id: "typescript.flexible-from-import";
-    readonly appliesTo: "typescript";
-    readonly reasonCode: "UNSAFE_TOKEN";
-    readonly matcher: {
-        readonly kind: "pattern";
-        readonly source: string;
-        readonly flags: "i";
-    };
-}, {
-    readonly id: "typescript.flexible-call";
-    readonly appliesTo: "typescript";
-    readonly reasonCode: "UNSAFE_TOKEN";
-    readonly matcher: {
-        readonly kind: "pattern";
-        readonly source: string;
-        readonly flags: "i";
-    };
-}, {
-    readonly id: "typescript.dunder-import";
-    readonly appliesTo: "typescript";
-    readonly reasonCode: "UNSAFE_TOKEN";
-    readonly matcher: {
-        readonly kind: "pattern";
-        readonly source: string;
-        readonly flags: "i";
-    };
-}, {
-    readonly id: "typescript.subprocess-member";
-    readonly appliesTo: "typescript";
-    readonly reasonCode: "UNSAFE_TOKEN";
-    readonly matcher: {
-        readonly kind: "pattern";
-        readonly source: string;
-        readonly flags: "i";
-    };
-}, {
-    readonly id: "typescript.os-system";
-    readonly appliesTo: "typescript";
-    readonly reasonCode: "UNSAFE_TOKEN";
-    readonly matcher: {
-        readonly kind: "pattern";
-        readonly source: string;
-        readonly flags: "i";
-    };
-}, {
-    readonly id: "typescript.start-quoted";
-    readonly appliesTo: "typescript";
-    readonly reasonCode: "SHELL_COMMAND";
-    readonly matcher: {
-        readonly kind: "pattern";
-        readonly source: string;
-        readonly flags: "i";
-    };
-}, {
-    readonly id: "native.blocked-first-token";
-    readonly appliesTo: "native";
-    readonly reasonCode: "DANGEROUS_ENGINE_COMMAND";
-    readonly matcher: {
-        readonly kind: "first-token";
-        readonly values: readonly ["shutdown", "quit", "exit", "kill", "crash", "r.gpucrash", "r.crash", "forcecrash", "debugbreak", "buildpaths", "rebuildnavigation", "recompileglobalshaders", "deriveddatacache"];
-    };
-}, {
-    readonly id: "native.restricted-first-token";
-    readonly appliesTo: "native";
-    readonly reasonCode: "RESTRICTED_ENGINE_COMMAND";
-    readonly matcher: {
-        readonly kind: "first-token";
-        readonly values: readonly ["delete", "destroy", "unrealbuildtool", "ubt"];
-    };
-}, {
-    readonly id: "both.fab-bridge-console";
-    readonly appliesTo: "both";
-    readonly reasonCode: "RESTRICTED_ENGINE_COMMAND";
-    readonly matcher: {
-        readonly kind: "first-token";
-        readonly values: readonly ["mcp.fab.addtoproject", "mcp.fab.describecatalogshape"];
-    };
-}, {
-    readonly id: "native.forbidden-name-first-token";
-    readonly appliesTo: "native";
-    readonly reasonCode: "SHELL_COMMAND";
-    readonly matcher: {
-        readonly kind: "first-token";
-        readonly values: readonly ["rm", "del", "format", "copy", "move", "start"];
-    };
-}, {
-    readonly id: "native.forbidden-substring";
-    readonly appliesTo: "native";
-    readonly reasonCode: "UNSAFE_TOKEN";
-    readonly matcher: {
-        readonly kind: "contains-any";
-        readonly values: readonly ["import os", "import sys", "import subprocess", "subprocess.", "os.system", "exec(", "eval(", "__import__", "with open", "open(", "write(", "read(", "debug crash", "debug break", "assert false", "check(false)", "viewmode visualizebuffer basecolor", "viewmode visualizebuffer worldnormal", "obj garbage", "obj list", "memreport"];
-    };
-}];
-//# sourceMappingURL=console-command-policy-rules.d.ts.map

package/dist/utils/commands/console-command-policy-rules.js

@@ -1,173 +0,0 @@
-export const CONSOLE_COMMAND_POLICY_SURFACES = [
-    'typescript',
-    'native',
-];
-export const CONSOLE_COMMAND_POLICY_BLOCK_REASONS = [
-    'MALFORMED_INPUT',
-    'UNSAFE_SEPARATOR',
-    'PYTHON_EXECUTION',
-    'DANGEROUS_ENGINE_COMMAND',
-    'RESTRICTED_ENGINE_COMMAND',
-    'SHELL_COMMAND',
-    'UNSAFE_TOKEN',
-];
-export const CONSOLE_COMMAND_POLICY_RULES = [
-    {
-        id: 'shared.unsafe-separator',
-        appliesTo: 'both',
-        reasonCode: 'UNSAFE_SEPARATOR',
-        matcher: {
-            kind: 'contains-any',
-            values: ['\n', '\r', '&&', '||', ';', '|', '`'],
-        },
-    },
-    {
-        id: 'shared.python-first-token',
-        appliesTo: 'both',
-        reasonCode: 'PYTHON_EXECUTION',
-        matcher: { kind: 'first-token', values: ['py', 'python'] },
-    },
-    {
-        id: 'shared.dangerous-first-token',
-        appliesTo: 'both',
-        reasonCode: 'DANGEROUS_ENGINE_COMMAND',
-        matcher: {
-            kind: 'first-token',
-            values: [
-                'debug', 'exec',
-                'crash', 'gpucrash', 'check', 'gpf', 'ensure', 'ensurealways',
-                'fatal', 'bufferoverrun', 'crtinvalid', 'stall', 'hitch',
-                'renderhitch', 'softlock', 'eatmem',
-            ],
-        },
-    },
-    {
-        id: 'typescript.dangerous-whitespace-bounded',
-        appliesTo: 'typescript',
-        reasonCode: 'DANGEROUS_ENGINE_COMMAND',
-        matcher: {
-            kind: 'whitespace-bounded-anywhere',
-            values: [
-                'quit', 'exit', 'kill', 'crash', 'r.gpucrash', 'r.crash',
-                'debug crash', 'forcecrash', 'debug break', 'assert false',
-                'check(false)', 'viewmode visualizebuffer basecolor',
-                'viewmode visualizebuffer worldnormal', 'buildpaths',
-                'rebuildnavigation', 'obj garbage', 'obj list', 'memreport',
-                'delete', 'destroy',
-            ],
-        },
-    },
-    {
-        id: 'typescript.forbidden-substring',
-        appliesTo: 'typescript',
-        reasonCode: 'UNSAFE_TOKEN',
-        matcher: {
-            kind: 'contains-any',
-            values: [
-                'shutdown', 'reboot', 'rmdir', 'mklink', 'import os',
-                'import subprocess', 'subprocess.', 'os.system', 'exec(', 'eval(',
-                '__import__', 'import sys', 'import importlib', 'with open', 'open(',
-                'write(', 'read(',
-            ],
-        },
-    },
-    {
-        id: 'typescript.shell-name-anywhere',
-        appliesTo: 'typescript',
-        reasonCode: 'SHELL_COMMAND',
-        matcher: { kind: 'pattern', source: String.raw `\b(?:rm|del|format|copy|move|start)\b`, flags: 'i' },
-    },
-    {
-        id: 'typescript.flexible-import',
-        appliesTo: 'typescript',
-        reasonCode: 'UNSAFE_TOKEN',
-        matcher: { kind: 'pattern', source: String.raw `import\s+(?:os|sys|subprocess|importlib|shutil)`, flags: 'i' },
-    },
-    {
-        id: 'typescript.flexible-from-import',
-        appliesTo: 'typescript',
-        reasonCode: 'UNSAFE_TOKEN',
-        matcher: { kind: 'pattern', source: String.raw `from\s+(?:os|sys|subprocess|importlib|shutil)\s+import`, flags: 'i' },
-    },
-    {
-        id: 'typescript.flexible-call',
-        appliesTo: 'typescript',
-        reasonCode: 'UNSAFE_TOKEN',
-        matcher: { kind: 'pattern', source: String.raw `(?:exec|eval|open|write|read|system)\s*\(`, flags: 'i' },
-    },
-    {
-        id: 'typescript.dunder-import',
-        appliesTo: 'typescript',
-        reasonCode: 'UNSAFE_TOKEN',
-        matcher: { kind: 'pattern', source: String.raw `__import__\s*\(`, flags: 'i' },
-    },
-    {
-        id: 'typescript.subprocess-member',
-        appliesTo: 'typescript',
-        reasonCode: 'UNSAFE_TOKEN',
-        matcher: { kind: 'pattern', source: String.raw `subprocess\.`, flags: 'i' },
-    },
-    {
-        id: 'typescript.os-system',
-        appliesTo: 'typescript',
-        reasonCode: 'UNSAFE_TOKEN',
-        matcher: { kind: 'pattern', source: String.raw `os\.system`, flags: 'i' },
-    },
-    {
-        id: 'typescript.start-quoted',
-        appliesTo: 'typescript',
-        reasonCode: 'SHELL_COMMAND',
-        matcher: { kind: 'pattern', source: String.raw `start\s+"`, flags: 'i' },
-    },
-    {
-        id: 'native.blocked-first-token',
-        appliesTo: 'native',
-        reasonCode: 'DANGEROUS_ENGINE_COMMAND',
-        matcher: {
-            kind: 'first-token',
-            values: [
-                'shutdown', 'quit', 'exit', 'kill', 'crash', 'r.gpucrash',
-                'r.crash', 'forcecrash', 'debugbreak', 'buildpaths',
-                'rebuildnavigation', 'recompileglobalshaders', 'deriveddatacache',
-            ],
-        },
-    },
-    {
-        id: 'native.restricted-first-token',
-        appliesTo: 'native',
-        reasonCode: 'RESTRICTED_ENGINE_COMMAND',
-        matcher: { kind: 'first-token', values: ['delete', 'destroy', 'unrealbuildtool', 'ubt'] },
-    },
-    {
-        id: 'both.fab-bridge-console',
-        appliesTo: 'both',
-        reasonCode: 'RESTRICTED_ENGINE_COMMAND',
-        matcher: {
-            kind: 'first-token',
-            values: ['mcp.fab.addtoproject', 'mcp.fab.describecatalogshape'],
-        },
-    },
-    {
-        id: 'native.forbidden-name-first-token',
-        appliesTo: 'native',
-        reasonCode: 'SHELL_COMMAND',
-        matcher: { kind: 'first-token', values: ['rm', 'del', 'format', 'copy', 'move', 'start'] },
-    },
-    {
-        id: 'native.forbidden-substring',
-        appliesTo: 'native',
-        reasonCode: 'UNSAFE_TOKEN',
-        matcher: {
-            kind: 'contains-any',
-            values: [
-                'import os', 'import sys', 'import subprocess', 'subprocess.',
-                'os.system', 'exec(', 'eval(', '__import__', 'with open', 'open(',
-                'write(', 'read(', 'debug crash', 'debug break', 'assert false',
-                'check(false)', 'viewmode visualizebuffer basecolor',
-                'viewmode visualizebuffer worldnormal', 'obj garbage', 'obj list',
-                'memreport',
-            ],
-        },
-    },
-];
-//# sourceMappingURL=console-command-policy-rules.js.map

package/dist/utils/config/ini-reader.d.ts

@@ -1,3 +0,0 @@
-export declare function projectRootFromEnv(): string | undefined;
-export declare function readProjectIniValue(projectPath: string, category: string, sectionName: string, key: string): string | undefined;
-//# sourceMappingURL=ini-reader.d.ts.map

package/dist/utils/logging/log-redaction.d.ts

@@ -1,4 +0,0 @@
-export declare const REDACTED_IMAGE_PAYLOAD = "<omitted; see image content>";
-export declare function redactImagePayloadForLog(value: unknown): unknown;
-export declare function redactImagePayloadTextForLog(text: string): string;
-//# sourceMappingURL=log-redaction.d.ts.map

package/dist/utils/logging/log-redaction.js

@@ -1,27 +0,0 @@
-import { isRecord } from '../validation/type-guards.js';
-export const REDACTED_IMAGE_PAYLOAD = '<omitted; see image content>';
-export function redactImagePayloadForLog(value) {
-    if (Array.isArray(value)) {
-        return value.map(item => redactImagePayloadForLog(item));
-    }
-    if (!isRecord(value)) {
-        return value;
-    }
-    const redacted = {};
-    const isImageContent = value.type === 'image';
-    for (const [key, child] of Object.entries(value)) {
-        if (key === 'imageBase64' || (isImageContent && key === 'data' && typeof child === 'string')) {
-            redacted[key] = REDACTED_IMAGE_PAYLOAD;
-        }
-        else {
-            redacted[key] = redactImagePayloadForLog(child);
-        }
-    }
-    return redacted;
-}
-export function redactImagePayloadTextForLog(text) {
-    return text
-        .replace(/("imageBase64"\s*:\s*")([^"]*)(")/g, `$1${REDACTED_IMAGE_PAYLOAD}$3`)
-        .replace(/("data"\s*:\s*")([^"]*)(")/g, `$1${REDACTED_IMAGE_PAYLOAD}$3`);
-}
-//# sourceMappingURL=log-redaction.js.map

package/dist/utils/logging/logger.d.ts

@@ -1,13 +0,0 @@
-export type LogLevel = 'debug' | 'info' | 'warn' | 'error';
-export declare class Logger {
-    private scope;
-    private level;
-    constructor(scope: string, level?: LogLevel);
-    isEnabled(level: LogLevel): boolean;
-    private write;
-    debug(...args: unknown[]): void;
-    info(...args: unknown[]): void;
-    warn(...args: unknown[]): void;
-    error(...args: unknown[]): void;
-}
-//# sourceMappingURL=logger.d.ts.map

package/dist/utils/paths/content-path-policy.d.ts

@@ -1,6 +0,0 @@
-export declare const UE_CONTENT_ROOTS: readonly ["/Game", "/Engine", "/Script", "/Temp", "/Niagara"];
-export declare const HOST_PATH_PATTERN: RegExp;
-export declare const MAX_BOUNDED_BYTES = 65536;
-export declare function isTraversalPath(value: string): boolean;
-export declare function isUnderContentRoot(value: string): boolean;
-//# sourceMappingURL=content-path-policy.d.ts.map

package/dist/utils/paths/content-path-policy.js

@@ -1,29 +0,0 @@
-export const UE_CONTENT_ROOTS = ['/Game', '/Engine', '/Script', '/Temp', '/Niagara'];
-export const HOST_PATH_PATTERN = /^[a-zA-Z]:[\\/]|\\|^~|^\/(?:home|users|etc|proc|sys|var|root|tmp|bin|opt|usr)\b/iu;
-const MAX_TRAVERSAL_DECODE_ROUNDS = 4;
-export const MAX_BOUNDED_BYTES = 65536;
-export function isTraversalPath(value) {
-    let current = value;
-    for (let round = 0; round <= MAX_TRAVERSAL_DECODE_ROUNDS; round += 1) {
-        if (current.split(/[\\/]/u).includes('..'))
-            return true;
-        if (round === MAX_TRAVERSAL_DECODE_ROUNDS) {
-            return current !== value;
-        }
-        let decoded;
-        try {
-            decoded = decodeURIComponent(current);
-        }
-        catch {
-            return true;
-        }
-        if (decoded === current)
-            return false;
-        current = decoded;
-    }
-    return false;
-}
-export function isUnderContentRoot(value) {
-    return UE_CONTENT_ROOTS.some((root) => value === root || value.startsWith(`${root}/`));
-}
-//# sourceMappingURL=content-path-policy.js.map

package/dist/utils/paths/path-security.d.ts

@@ -1,10 +0,0 @@
-export declare function normalizeEditorContentRoots(raw: unknown): string[];
-export declare function setEditorContentRoots(raw: unknown): void;
-export declare function clearEditorContentRoots(): void;
-export declare function getEditorContentRoots(): readonly string[];
-export declare function getContentRootsRevision(): number;
-export declare function getConfiguredContentRoots(): string[];
-export declare function getContentRoots(): readonly string[];
-export declare function isUnderAllowedContentRoot(value: string): boolean;
-export declare function sanitizePath(path: string, allowedRoots?: string[]): string;
-//# sourceMappingURL=path-security.d.ts.map

package/dist/utils/paths/path-security.js

@@ -1,115 +0,0 @@
-import { getAdditionalPathPrefixes } from '../../config.js';
-import { HOST_PATH_PATTERN, UE_CONTENT_ROOTS } from './content-path-policy.js';
-const EDITOR_ROOT_SHAPE = /^\/[A-Za-z0-9_][A-Za-z0-9_-]*$/u;
-const MAX_EDITOR_ROOTS = 1024;
-let editorContentRoots = [];
-let contentRootsRevision = 0;
-let cachedDefaultRoots;
-function normalizeRoots(sourceRoots) {
-    return [...new Set(sourceRoots
-            .map(r => r.trim().replace(/\/+$/, ''))
-            .filter(r => r.length > 0 &&
-            r.startsWith('/') &&
-            r !== '/' &&
-            !r.includes('..') &&
-            !r.includes('//')))];
-}
-export function normalizeEditorContentRoots(raw) {
-    if (!Array.isArray(raw))
-        return [];
-    const seen = new Set();
-    const roots = [];
-    for (const entry of raw) {
-        if (roots.length >= MAX_EDITOR_ROOTS)
-            break;
-        if (typeof entry !== 'string')
-            continue;
-        const root = entry.trim().replace(/\/+$/u, '');
-        if (!EDITOR_ROOT_SHAPE.test(root) || HOST_PATH_PATTERN.test(root))
-            continue;
-        const key = root.toLowerCase();
-        if (seen.has(key))
-            continue;
-        seen.add(key);
-        roots.push(root);
-    }
-    return roots;
-}
-export function setEditorContentRoots(raw) {
-    const next = normalizeEditorContentRoots(raw);
-    const same = next.length === editorContentRoots.length
-        && next.every((root, index) => root === editorContentRoots[index]);
-    if (same)
-        return;
-    editorContentRoots = next;
-    contentRootsRevision += 1;
-    cachedDefaultRoots = undefined;
-}
-export function clearEditorContentRoots() {
-    setEditorContentRoots([]);
-}
-export function getEditorContentRoots() {
-    return editorContentRoots;
-}
-export function getContentRootsRevision() {
-    return contentRootsRevision;
-}
-export function getConfiguredContentRoots() {
-    return normalizeRoots([
-        ...UE_CONTENT_ROOTS,
-        ...getAdditionalPathPrefixes().map(p => p.replace(/\/$/, '')),
-    ]);
-}
-export function getContentRoots() {
-    return getDefaultRoots();
-}
-export function isUnderAllowedContentRoot(value) {
-    const lower = value.toLowerCase();
-    return getDefaultRoots().some(root => {
-        const rootLower = root.toLowerCase();
-        return lower === rootLower || lower.startsWith(`${rootLower}/`);
-    });
-}
-function getDefaultRoots() {
-    if (!cachedDefaultRoots || cachedDefaultRoots.revision !== contentRootsRevision) {
-        cachedDefaultRoots = {
-            revision: contentRootsRevision,
-            roots: normalizeRoots([...getConfiguredContentRoots(), ...editorContentRoots]),
-        };
-    }
-    return cachedDefaultRoots.roots;
-}
-export function sanitizePath(path, allowedRoots) {
-    const normalizedRoots = allowedRoots ? normalizeRoots(allowedRoots) : getDefaultRoots();
-    if (normalizedRoots.length === 0) {
-        throw new Error('Invalid allowedRoots: no valid roots configured');
-    }
-    if (!path || typeof path !== 'string') {
-        throw new Error('Invalid path: must be a non-empty string');
-    }
-    const trimmed = path.trim();
-    if (trimmed.length === 0) {
-        throw new Error('Invalid path: cannot be empty');
-    }
-    let normalized = trimmed.replace(/\\/g, '/');
-    while (normalized.includes('//')) {
-        normalized = normalized.replace(/\/\//g, '/');
-    }
-    if (normalized.includes('..')) {
-        throw new Error('Invalid path: directory traversal (..) is not allowed');
-    }
-    const normalizedLower = normalized.toLowerCase();
-    const isAllowed = normalizedRoots.some(root => normalizedLower === root.toLowerCase() ||
-        normalizedLower.startsWith(`${root.toLowerCase()}/`));
-    if (!isAllowed) {
-        const listed = allowedRoots ? normalizedRoots : getConfiguredContentRoots();
-        const mounts = allowedRoots ? '' : ' or a content mount the connected editor reports';
-        throw new Error(`Invalid path: must start with one of [${listed.join(', ')}]${mounts}`);
-    }
-    const invalidChars = /[<>:"|?*\x00-\x1f]/;
-    if (invalidChars.test(normalized)) {
-        throw new Error('Invalid path: contains illegal characters');
-    }
-    return normalized;
-}
-//# sourceMappingURL=path-security.js.map

package/dist/utils/responses/automation-frame-normalization.d.ts

@@ -1,2 +0,0 @@
-export declare function normalizeAutomationFrame(result: unknown): unknown;
-//# sourceMappingURL=automation-frame-normalization.d.ts.map