@looop-games/cli 0.1.22 → 0.1.23

package/CHANGELOG.md

@@ -14,6 +14,16 @@ Versions: [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
 ## [Unreleased]
 
+## [0.1.23] - 2026-08-01
+
+### Changed
+
+- When the platform refuses an engine download because the Engine License has
+  been updated, `looop dev` and `looop update` now explain why and open the
+  sign-in flow for you — review and accept in the browser, and the download
+  continues by itself. No more bare HTTP status codes, no manual
+  `looop login`.
+
 ## [0.1.22] - 2026-08-01
 
 ### Added

package/lib/engine.mjs

@@ -112,7 +112,26 @@ export async function ensureEngine(
   const cached = join(cache, `engine-${pin}.tgz`);
   if (!existsSync(cached)) {
     log(`Downloading engine ${pin} from ${apiBase}…`);
-    const res = await fetchImpl(`${apiBase}/api/creator/engine/${pin}`, { headers: auth });
+    const dlUrl = `${apiBase}/api/creator/engine/${pin}`;
+    let res = await fetchImpl(dlUrl, { headers: auth });
+    // 403 = the token is fine but the platform refuses with a reason the
+    // human must act on — today, an updated Engine License that needs
+    // re-accepting. The acceptance IS the browser approval step of the device
+    // flow, so run the flow right here instead of asking the human to type
+    // `looop login` themselves (the click in the browser is still theirs to
+    // make), then retry once with the fresh token. If the platform still says
+    // no, surface its words — never loop.
+    if (res.status === 403) {
+      const reason = (await res.json().catch(() => null))?.error;
+      log(reason || 'The platform refused the engine download — your sign-in needs a refresh.');
+      log('Opening the sign-in flow to sort that out…');
+      await loginFn({ apiBase, log });
+      res = await fetchImpl(dlUrl, { headers: { Authorization: `Bearer ${getToken()}` } });
+      if (res.status === 403) {
+        const still = (await res.json().catch(() => null))?.error;
+        throw new Error(still || reason || 'the platform refused the engine download (HTTP 403).');
+      }
+    }
     if (res.status === 401) throw new Error('the platform rejected this machine’s token — run `looop login` again.');
     if (res.status === 404) throw new Error(`engine ${pin} is not downloadable — check the \`looop.engine\` pin in package.json.`);
     if (!res.ok) throw new Error(`engine download failed (HTTP ${res.status})`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@looop-games/cli",
-  "version": "0.1.22",
+  "version": "0.1.23",
   "description": "Looop game development CLI — dev server, login, and publishing for standalone Looop games.",
   "type": "module",
   "license": "Apache-2.0",