@playdrop/playdrop-cli 0.10.20 → 0.11.0

package/dist/commands/worker/runtime.js

@@ -525,6 +525,12 @@ function normalizeClaudePermissionPath(value) {
     if (!trimmed) {
         return null;
     }
+    if (/^\/[^/]/.test(trimmed)) {
+        return node_path_1.default.posix.resolve(trimmed).replace(/\/+$/, '');
+    }
+    if (/^[A-Za-z]:[\\/]/.test(trimmed) || /^\\\\/.test(trimmed)) {
+        return node_path_1.default.win32.resolve(trimmed).replace(/\\/g, '/').replace(/\/+$/, '');
+    }
     return node_path_1.default.resolve(trimmed).replace(/\\/g, '/').replace(/\/+$/, '');
 }
 function buildClaudePermissionSettings(denyReadRoots = []) {

package/dist/commands/worker.d.ts

@@ -5,7 +5,7 @@ import { type LoggedProcessResult, type LoggedProcessTranscriptChunk } from './w
 export { DEFAULT_CODEX_TIMEOUT_MS, DEFAULT_WORKER_TOKEN_CAP, assertWorkerTokenUsageWithinCap, buildCodexExecArgs, buildClaudeExecArgs, buildClaudePermissionSettings, buildWorkerChildEnv, extractAgentTokenUsage, extractCodexRolloutTokenUsage, extractCodexThreadId, extractCodexTokensUsed, readEnvBoolean, readCodexSandboxMode, readCodexRolloutTokenUsageForThread, runLoggedProcess, } from './worker/runtime';
 export type { AgentTokenUsage, LoggedProcessResult, LoggedProcessTranscriptChunk, } from './worker/runtime';
 export declare const WORKER_SESSION_EXPIRED_MESSAGE = "worker session expired: run \"playdrop auth login\" and start the worker again";
-export declare const WORKER_CONTEXT_COMMAND_NOT_ALLOWED_MESSAGE = "worker_context_command_not_allowed: inside a PlayDrop worker task only task progress, task claim-slug, task upload/done/fail, assigned app scaffolding, project validation/build/dev/capture, read-only catalogue/documentation lookup, and PlayDrop AI generation are permitted.";
+export declare const WORKER_CONTEXT_COMMAND_NOT_ALLOWED_MESSAGE = "worker_context_command_not_allowed: inside a PlayDrop worker task only task progress, task claim-slug, task upload/done/fail, assigned app scaffolding, project validation/build/dev/capture, read-only help/catalogue/documentation lookup, and PlayDrop AI generation are permitted.";
 type WorkerStartOptions = {
     env?: string;
     once?: boolean;
@@ -31,6 +31,7 @@ type WorkerLocalStatus = {
     playwright: {
         version?: string;
         chromiumInstalled?: boolean;
+        executablePath?: string;
     } | null;
     plugin: {
         ready: boolean;
@@ -40,6 +41,13 @@ type WorkerLocalStatus = {
     };
     agents: AgentWorkerCapabilities['agents'];
     capabilities: AgentWorkerCapabilities | null;
+    setupActions: WorkerSetupAction[];
+};
+type WorkerSetupAction = {
+    reason: string;
+    label: string;
+    command?: string;
+    message: string;
 };
 type WorkerStatusPayload = {
     schemaVersion: 1;
@@ -205,6 +213,14 @@ export declare function createLocalPlaydropShim(input: {
     attempt: number;
     devPort: number;
 }): Promise<string>;
+export declare function buildWorkerSetupActions(input: {
+    degradedReasons: string[];
+    playwright?: {
+        version?: string;
+        chromiumInstalled?: boolean;
+        executablePath?: string;
+    } | null;
+}): WorkerSetupAction[];
 type WorkerRuntimeState = {
     schemaVersion: 1;
     pid: number;

package/dist/commands/worker.js

@@ -38,6 +38,7 @@ exports.assertWorkerProjectVersionBumped = assertWorkerProjectVersionBumped;
 exports.buildAgentFailureCode = buildAgentFailureCode;
 exports.describeAgentFailureForEvent = describeAgentFailureForEvent;
 exports.createLocalPlaydropShim = createLocalPlaydropShim;
+exports.buildWorkerSetupActions = buildWorkerSetupActions;
 exports.readActivePersonalWorkerRuntimeState = readActivePersonalWorkerRuntimeState;
 exports.parseLaunchAgentProgramArguments = parseLaunchAgentProgramArguments;
 exports.assertLaunchAgentPlistCompatible = assertLaunchAgentPlistCompatible;
@@ -124,12 +125,13 @@ const WORKER_CONTEXT_ALLOWED_COMMANDS = [
     ['versions', 'browse'],
     ['documentation', 'browse'],
     ['documentation', 'read'],
+    ['help'],
     ['ai', 'create'],
     ['ai', 'jobs', 'browse'],
     ['ai', 'jobs', 'detail'],
     ['ai', 'generations'],
 ];
-exports.WORKER_CONTEXT_COMMAND_NOT_ALLOWED_MESSAGE = 'worker_context_command_not_allowed: inside a PlayDrop worker task only task progress, task claim-slug, task upload/done/fail, assigned app scaffolding, project validation/build/dev/capture, read-only catalogue/documentation lookup, and PlayDrop AI generation are permitted.';
+exports.WORKER_CONTEXT_COMMAND_NOT_ALLOWED_MESSAGE = 'worker_context_command_not_allowed: inside a PlayDrop worker task only task progress, task claim-slug, task upload/done/fail, assigned app scaffolding, project validation/build/dev/capture, read-only help/catalogue/documentation lookup, and PlayDrop AI generation are permitted.';
 function allocateWorkerDevPort(input) {
     const basePort = input.basePort ?? DEFAULT_WORKER_DEV_PORT_BASE;
     const maxParallelTasks = input.maxParallelTasks ?? DEFAULT_WORKER_MAX_PARALLEL_TASKS;
@@ -181,6 +183,28 @@ function normalizeRemixFlagValue(argv) {
     }
     return null;
 }
+function normalizeTemplateKeyRef(value) {
+    const trimmed = value.trim();
+    const match = /^([^/]+)\/(?:template|app)\/([^/]+)$/.exec(trimmed);
+    if (!match) {
+        return trimmed || null;
+    }
+    return `${match[1]}/template/${match[2]}`;
+}
+function normalizeTemplateFlagValue(argv) {
+    for (let index = 0; index < argv.length; index += 1) {
+        const arg = argv[index];
+        if (arg === '--template') {
+            const value = argv[index + 1]?.trim() ?? '';
+            return value ? normalizeTemplateKeyRef(value) : null;
+        }
+        if (arg.startsWith('--template=')) {
+            const value = arg.slice('--template='.length).trim();
+            return value ? normalizeTemplateKeyRef(value) : null;
+        }
+    }
+    return null;
+}
 function isAssignedAppScaffoldCommandAllowed(argv) {
     if (argv[0] !== 'project' || argv[1] !== 'create' || argv[2] !== 'app') {
         return false;
@@ -198,7 +222,11 @@ function isAssignedAppScaffoldCommandAllowed(argv) {
             || requestedAppName !== context.outputAppName) {
             return false;
         }
-        return normalizeRemixFlagValue(argv) === null;
+        const templateKey = normalizeTemplateFlagValue(argv);
+        const allowedTemplateKeys = new Set((context.allowedTemplateKeys ?? []).map((key) => normalizeTemplateKeyRef(key)).filter(Boolean));
+        return normalizeRemixFlagValue(argv) === null
+            && templateKey !== null
+            && allowedTemplateKeys.has(templateKey);
     }
     return normalizeRemixFlagValue(argv) === context.remixSourceRef;
 }
@@ -301,6 +329,9 @@ function resolveWorkerClaimTaskAssignment(claim) {
             baseSource: inputs.baseSource ?? null,
             remixSource: inputs.remixSource ?? null,
             reviewTarget: inputs.reviewTarget ?? null,
+            allowedTemplateKeys: Array.isArray(inputs.allowedTemplateKeys)
+                ? Array.from(new Set(inputs.allowedTemplateKeys.map((value) => (typeof value === 'string' ? value.trim() : '')).filter(Boolean)))
+                : [],
         },
         output: {
             appId: typeof output.appId === 'number' && Number.isInteger(output.appId) && output.appId > 0 ? output.appId : null,
@@ -382,6 +413,9 @@ function buildWorkerTaskContext(claim, assignment) {
         }
         remixSourceRef = parsedRemixSourceRef;
     }
+    const allowedTemplateKeys = Array.isArray(assignment.inputs.allowedTemplateKeys)
+        ? Array.from(new Set(assignment.inputs.allowedTemplateKeys.map((value) => (typeof value === 'string' ? value.trim() : '')).filter(Boolean)))
+        : [];
     const creatorRequest = assignment.inputs.request.prompt.trim();
     if (!creatorRequest) {
         throw new Error('agent_task_context_creator_request_missing');
@@ -397,6 +431,7 @@ function buildWorkerTaskContext(claim, assignment) {
         outputAppName,
         outputVersion,
         remixSourceRef,
+        allowedTemplateKeys,
         reviewAppVersionId,
     };
 }
@@ -454,6 +489,9 @@ function readTaskContextFile(startDir = node_process_1.default.cwd()) {
     const remixSourceRef = typeof parsed.remixSourceRef === 'string' && parsed.remixSourceRef.trim()
         ? parsed.remixSourceRef.trim()
         : null;
+    const allowedTemplateKeys = Array.isArray(parsed.allowedTemplateKeys)
+        ? Array.from(new Set(parsed.allowedTemplateKeys.map((value) => (typeof value === 'string' ? value.trim() : '')).filter(Boolean)))
+        : [];
     let reviewAppVersionId = null;
     if (parsed.reviewAppVersionId !== null && parsed.reviewAppVersionId !== undefined) {
         const parsedReviewAppVersionId = Number(parsed.reviewAppVersionId);
@@ -487,6 +525,7 @@ function readTaskContextFile(startDir = node_process_1.default.cwd()) {
         outputAppName: typeof parsed.outputAppName === 'string' && parsed.outputAppName.trim() ? parsed.outputAppName.trim() : null,
         outputVersion,
         remixSourceRef,
+        allowedTemplateKeys,
         reviewAppVersionId,
         devPort,
         env,
@@ -676,6 +715,15 @@ async function readTaskNextStepsFileForCommand(input) {
         return NEXT_STEPS_READ_FAILED;
     }
 }
+function isFinalOwnerRouteLaunchCheckFailure(error) {
+    const message = error instanceof Error ? error.message : String(error);
+    return message.startsWith('hosted_launch_check_failed:')
+        && message.includes('final owner play route');
+}
+function formatTerminalFinalOwnerRouteFailure(error) {
+    const message = error instanceof Error ? error.message : String(error);
+    return `agent_task_final_owner_route_failed: final owner play route validation failed after the task version was created. Task uploads have a fixed outputVersion and cannot be retried by bumping catalogue.json. ${message}`;
+}
 function assertTaskUploadResultMatchesContext(input) {
     if (input.uploadResult.taskId !== input.taskContext.taskId) {
         throw new Error('task_upload_result_task_mismatch');
@@ -1181,9 +1229,9 @@ function probePlaywrightChromium() {
     const version = typeof packageJson.version === 'string' && packageJson.version.trim() ? packageJson.version.trim() : 'unknown';
     const chromiumInstalled = (0, node_fs_1.existsSync)(executablePath);
     if (!chromiumInstalled) {
-        throw new Error(`worker_preflight_chromium_missing: install Playwright Chromium before starting the worker (${executablePath}).`);
+        return { version, chromiumInstalled: false, executablePath };
     }
-    return { version, chromiumInstalled };
+    return { version, chromiumInstalled: true, executablePath };
 }
 function readWorkerModelList(agent, envName) {
     const raw = node_process_1.default.env[envName];
@@ -1260,7 +1308,10 @@ function buildWorkerCapabilities(input) {
     const cursorVersion = typeof input === 'string' ? null : input.cursorVersion?.trim() || null;
     const cursorAuthenticated = typeof input === 'string' ? false : input.cursorAuthenticated === true;
     const npmVersion = typeof input === 'string' ? null : input.npmVersion?.trim() || null;
-    const playwright = typeof input === 'string' ? null : input.playwright ?? null;
+    const rawPlaywright = typeof input === 'string' ? null : input.playwright ?? null;
+    const playwright = rawPlaywright
+        ? { version: rawPlaywright.version, chromiumInstalled: rawPlaywright.chromiumInstalled }
+        : null;
     const maxParallelTasks = typeof input === 'string'
         ? DEFAULT_WORKER_MAX_PARALLEL_TASKS
         : input.maxParallelTasks ?? DEFAULT_WORKER_MAX_PARALLEL_TASKS;
@@ -1954,6 +2005,9 @@ function probeCodexInstallation() {
     const versionResult = (0, shellProbe_1.runShell)('codex --version');
     const match = /(\d+\.\d+\.\d+\S*)/.exec(versionResult.output);
     if (!match?.[1]) {
+        if (versionResult.exitCode !== 0) {
+            return null;
+        }
         throw new Error(`codex_version_check_failed: "codex --version" exited with code ${versionResult.exitCode} and reported no version. Output: ${versionResult.output.slice(0, 200)}`);
     }
     if (versionResult.exitCode !== 0) {
@@ -1970,7 +2024,13 @@ function probeClaudeInstallation() {
     }
     const versionResult = (0, shellProbe_1.runShell)('claude --version');
     const match = /(\d+\.\d+\.\d+\S*)/.exec(versionResult.output);
-    if (!match?.[1] || versionResult.exitCode !== 0) {
+    if (!match?.[1]) {
+        if (versionResult.exitCode !== 0) {
+            return null;
+        }
+        throw new Error(`claude_version_check_failed: "claude --version" exited with code ${versionResult.exitCode} and reported no version. Output: ${versionResult.output.slice(0, 200)}`);
+    }
+    if (versionResult.exitCode !== 0) {
         throw new Error(`claude_version_check_failed: "claude --version" exited with code ${versionResult.exitCode} and reported no version. Output: ${versionResult.output.slice(0, 200)}`);
     }
     return { claudeVersion: match[1] };
@@ -2076,6 +2136,9 @@ function collectWorkerLocalStatus() {
     }
     try {
         playwright = probePlaywrightChromium();
+        if (!playwright.chromiumInstalled) {
+            degradedReasons.push('worker_preflight_chromium_missing');
+        }
     }
     catch (error) {
         degradedReasons.push(errorCode(error));
@@ -2143,8 +2206,53 @@ function collectWorkerLocalStatus() {
         },
         agents: capabilities?.agents ?? [],
         capabilities,
+        setupActions: buildWorkerSetupActions({
+            degradedReasons: uniqueReasons,
+            playwright,
+        }),
     };
 }
+function buildWorkerSetupActions(input) {
+    const reasons = new Set(input.degradedReasons);
+    const actions = [];
+    if (reasons.has('worker_preflight_chromium_missing')) {
+        const version = input.playwright?.version && input.playwright.version !== 'unknown'
+            ? `@${input.playwright.version}`
+            : '';
+        actions.push({
+            reason: 'worker_preflight_chromium_missing',
+            label: 'Install Playwright Chromium',
+            command: `npx playwright${version} install chromium`,
+            message: input.playwright?.executablePath
+                ? `Chromium is required for PlayDrop launch checks. Expected browser path: ${input.playwright.executablePath}.`
+                : 'Chromium is required for PlayDrop launch checks.',
+        });
+    }
+    if (reasons.has('worker_preflight_playwright_missing')) {
+        actions.push({
+            reason: 'worker_preflight_playwright_missing',
+            label: 'Repair the PlayDrop CLI install',
+            command: 'npm install -g @playdrop/playdrop-cli@latest',
+            message: 'The PlayDrop CLI package could not load playwright-core from its installed dependencies.',
+        });
+    }
+    if (reasons.has('playdrop_plugin_staging_manifest_missing')) {
+        actions.push({
+            reason: 'playdrop_plugin_staging_manifest_missing',
+            label: 'Install or update the PlayDrop agent plugin',
+            command: 'playdrop agents status --json',
+            message: 'Run the CLI-reported nextAction.command for a supported local agent so playdrop-worker-staging.json is available.',
+        });
+    }
+    if (reasons.has('agent_cli_not_found')) {
+        actions.push({
+            reason: 'agent_cli_not_found',
+            label: 'Install a supported agent CLI',
+            message: 'Install and authenticate Codex or Claude Code, then rerun playdrop agents status --json.',
+        });
+    }
+    return actions;
+}
 function getWorkerStateDir() {
     return node_path_1.default.join(node_os_1.default.homedir(), '.playdrop', 'worker');
 }
@@ -2782,6 +2890,13 @@ function printWorkerStatus(payload) {
     if (payload.local.degradedReasons.length > 0) {
         console.log(`  Reasons: ${payload.local.degradedReasons.join(', ')}`);
     }
+    if (payload.local.setupActions.length > 0) {
+        console.log('  Setup actions:');
+        for (const action of payload.local.setupActions) {
+            console.log(`    ${action.label}${action.command ? `: ${action.command}` : ''}`);
+            console.log(`      ${action.message}`);
+        }
+    }
     if (!payload.server.authenticated) {
         console.log('Server worker: not authenticated');
     }
@@ -3771,21 +3886,40 @@ async function uploadTask(options = {}) {
         return;
     }
     const projectDir = discoverWorkerProjectRoot(node_process_1.default.cwd());
-    const published = await (0, upload_1.publishWorkerAppProject)({
-        client: ctx.client,
-        taskId: taskContext.taskId,
-        kind: taskContext.kind,
-        expectedAppName: taskContext.outputAppName ?? undefined,
-        remixSourceRef: taskContext.remixSourceRef ?? null,
-        playdropAssetRequirement: resolvePlaydropAssetRequirementFromTaskRequest(taskContext.creatorRequest),
-        creatorRequest: taskContext.creatorRequest,
-        projectDir,
-        creatorUsername: taskContext.creatorUsername,
-        apiBase: ctx.envConfig.apiBase,
-        webBase: ctx.envConfig.webBase ?? null,
-        token: ctx.token,
-        user: ctx.user,
-    });
+    let published;
+    try {
+        published = await (0, upload_1.publishWorkerAppProject)({
+            client: ctx.client,
+            taskId: taskContext.taskId,
+            kind: taskContext.kind,
+            expectedAppName: taskContext.outputAppName ?? undefined,
+            remixSourceRef: taskContext.remixSourceRef ?? null,
+            playdropAssetRequirement: resolvePlaydropAssetRequirementFromTaskRequest(taskContext.creatorRequest),
+            creatorRequest: taskContext.creatorRequest,
+            projectDir,
+            creatorUsername: taskContext.creatorUsername,
+            apiBase: ctx.envConfig.apiBase,
+            webBase: ctx.envConfig.webBase ?? null,
+            token: ctx.token,
+            user: ctx.user,
+        });
+    }
+    catch (error) {
+        if (isFinalOwnerRouteLaunchCheckFailure(error)) {
+            const terminalError = formatTerminalFinalOwnerRouteFailure(error);
+            await ctx.client.workerFailAgentTask(taskContext.taskId, {
+                taskToken: taskContext.taskToken,
+                error: terminalError,
+                result: {
+                    failedBy: 'worker_upload_final_owner_route',
+                    finalOwnerRouteFailure: true,
+                    originalError: error instanceof Error ? error.message : String(error),
+                },
+            });
+            throw new Error(terminalError);
+        }
+        throw error;
+    }
     const result = {
         taskId: taskContext.taskId,
         appId: published.appId,

package/dist/commands/workspaces.js

@@ -307,7 +307,8 @@ function isMacProtectedWorkspaceRoot(rootPath, homeDir = node_os_1.default.homed
     return protectedRoots.some((protectedRoot) => absoluteRoot === protectedRoot || isPathInside(absoluteRoot, protectedRoot));
 }
 function isPathInside(candidate, parent) {
-    return candidate.startsWith(`${parent}/`);
+    const relativePath = (0, node_path_1.relative)(parent, candidate);
+    return Boolean(relativePath) && !relativePath.startsWith('..') && !(0, node_path_1.isAbsolute)(relativePath);
 }
 function isAllowedProtectedPath(candidate, allowedProtectedRoots) {
     return allowedProtectedRoots.some((allowedRoot) => candidate === allowedRoot || isPathInside(candidate, allowedRoot));

package/node_modules/@playdrop/config/client-meta.json

@@ -1,10 +1,14 @@
 {
-  "version": "0.10.20",
+  "version": "0.11.0",
   "build": 1,
   "runtimeSdkVersion": "0.10.0",
   "clients": {
     "all": {
       "minimumVersion": "0.7.4"
+    },
+    "windows-playdrop": {
+      "minimumVersion": "0.9.6",
+      "minimumBuild": 1
     }
   }
 }

package/node_modules/@playdrop/config/dist/test/validateClientEnvironment.test.js

@@ -80,6 +80,45 @@ function runtime(overrides = {}) {
     const result = (0, index_1.validateClientEnvironment)(info);
     strict_1.default.equal(result.ok, true);
 });
+(0, node_test_1.default)('accepts windows-playdrop as a first-class Windows client identity', () => {
+    const meta = (0, index_1.loadClientMeta)();
+    const windowsRule = meta.clients['windows-playdrop'];
+    strict_1.default.ok(windowsRule, 'windows-playdrop metadata must be explicit');
+    const requiredVersion = windowsRule.minimumVersion ?? meta.version;
+    const requiredBuild = windowsRule.minimumBuild ?? meta.build;
+    const info = runtime({
+        client: 'windows-playdrop',
+        clientVersion: requiredVersion,
+        clientBuild: requiredBuild,
+        platform: 'windows',
+        platformVersion: '10.0.22631',
+    });
+    const result = (0, index_1.validateClientEnvironment)(info);
+    strict_1.default.equal(result.ok, true);
+});
+(0, node_test_1.default)('enforces the windows-playdrop alpha build floor', () => {
+    const meta = (0, index_1.loadClientMeta)();
+    const windowsRule = meta.clients['windows-playdrop'];
+    strict_1.default.ok(windowsRule?.minimumVersion, 'windows-playdrop requires an explicit minimum version');
+    const requiredBuild = windowsRule.minimumBuild;
+    if (typeof requiredBuild !== 'number') {
+        strict_1.default.fail('windows-playdrop requires an explicit minimum build');
+    }
+    const info = runtime({
+        client: 'windows-playdrop',
+        clientVersion: windowsRule.minimumVersion,
+        clientBuild: Math.max(requiredBuild - 1, 0),
+        platform: 'windows',
+        platformVersion: '10.0.22631',
+    });
+    const result = (0, index_1.validateClientEnvironment)(info);
+    strict_1.default.equal(result.ok, false);
+    if (!result.ok) {
+        strict_1.default.equal(result.code, 'unsupported_client_build');
+        strict_1.default.equal(result.requiredVersion, windowsRule.minimumVersion);
+        strict_1.default.equal(result.requiredBuild, requiredBuild);
+    }
+});
 (0, node_test_1.default)('keeps accepting the legacy Apple client id during rollout', () => {
     const meta = (0, index_1.loadClientMeta)();
     const requiredVersion = meta.clients['all']?.minimumVersion ?? meta.version;