DevExplorer

Runtime Explorer and Properties for Roblox experiences, by Triaal. Extracted from the supplied DevExplorer.rbxm, version 1.0.0.

Contents

• src/: the extracted modules, with separate client and server APIs exported by the root.
• default.project.json: builds the root ModuleScript and its children.
• wally.toml: package metadata, using fordtoxic/dev-explorer@1.0.1. The namespace follows the neighboring Wally project; change it if needed.
• SECURITY_REVIEW.md: findings and limitations of the static review.
• audit/: extraction inventory, source hashes, and upstream comparison evidence.
• tools/extract_model.py: static extractor; does not execute model code.

The Roblox PackageLink is excluded. Its AutoUpdate setting was enabled in the model; Wally should distribute the fixed extracted source. Empty attributes, empty tags, script GUIDs, source asset IDs, and Studio-only metadata are not carried into the source package. The original client entry point now lives in Client.luau; init.luau returns a table with server and client modules.

Build and package

From this folder, with the pinned tools available:

New-Item -ItemType Directory -Force build
rojo build default.project.json --output build/DevExplorer.rbxm
wally package --output build/dev-explorer-1.0.1.zip

The package includes source, documentation, and license notices. Audit downloads, build products, and extraction tools are excluded. No external Wally dependencies are needed.

Use

Add this dependency to your game's wally.toml:

[dependencies]
DevExplorer = "fordtoxic/dev-explorer@1.0.1"

The package root returns { server = ServerModule, client = ClientModule }:

RunService checks load and expose only the module for the current side: server on the server, client on the client.

-- LocalScript, with Packages synced under ReplicatedStorage
local Packages = game:GetService("ReplicatedStorage"):WaitForChild("Packages")
local DevExplorer = require(Packages.DevExplorer)
DevExplorer.client:Start({ Permissions = "Server" })

Start the server API from a server Script using the same package require:

local Packages = game:GetService("ReplicatedStorage"):WaitForChild("Packages")
local DevExplorer = require(Packages.DevExplorer)

local TrustedUserIds = {
    -- [YOUR_USER_ID] = true,
}

DevExplorer.server:Start({
    Permissions = function(Player, Capability)
        return TrustedUserIds[Player.UserId] == true and Capability ~= "Execute"
    end,
    CommandLine = false,
})

The standalone built model exposes the same server and client fields. F2 toggles the client UI by default.

Without a permission resolver, access defaults to Studio only. Keep Edit, Admin, and Execute limited to fully trusted developers. CommandLine = true plus an Execute grant enables arbitrary server code even when LoadStringEnabled is disabled, through the bundled compiler and interpreter.

Publish

For future releases, update the version in wally.toml and src/Client.luau, authenticate with Wally, then run:

wally publish

See Wally's documentation for registry setup.