@playdrop/playdrop-cli 0.12.17 → 0.12.20

package/config/client-meta.json

@@ -1,6 +1,6 @@
 {
   "version": "0.12.8",
-  "build": 10,
+  "build": 13,
   "runtimeSdkVersion": "0.12.5",
   "runtimeSdkBuild": 2,
   "clients": {

package/dist/commands/worker/runtime.d.ts

@@ -96,6 +96,7 @@ export declare function buildWorkerChildEnv(input: {
     homeDir?: string;
     codexHomeDir?: string;
     claudeConfigDir?: string;
+    playdropConfigPath?: string;
     playwrightBrowsersPath?: string;
     baseEnv?: NodeJS.ProcessEnv;
 }): NodeJS.ProcessEnv;

package/dist/commands/worker/runtime.js

@@ -712,6 +712,17 @@ function buildWorkerChildEnv(input) {
         }
         child.CLAUDE_CONFIG_DIR = claudeConfigDir;
     }
+    // Claude sessions inherit the host's real HOME and Claude config on purpose: the machine is
+    // logged in with the Claude CLI and we call it exactly as a human does. The worker never
+    // stages, copies, or refreshes Claude credentials. The agent's `playdrop` CLI is still scoped
+    // to a task session through PLAYDROP_CONFIG_PATH rather than by hijacking HOME.
+    if (input.playdropConfigPath !== undefined) {
+        const playdropConfigPath = input.playdropConfigPath.trim();
+        if (!playdropConfigPath || !node_path_1.default.isAbsolute(playdropConfigPath)) {
+            throw new Error('invalid_worker_child_playdrop_config_path');
+        }
+        child.PLAYDROP_CONFIG_PATH = playdropConfigPath;
+    }
     if (input.playwrightBrowsersPath !== undefined) {
         const playwrightBrowsersPath = input.playwrightBrowsersPath.trim();
         if (!playwrightBrowsersPath || !node_path_1.default.isAbsolute(playwrightBrowsersPath)) {

package/dist/commands/worker.d.ts

@@ -137,6 +137,8 @@ export declare function resolveWorkerClaimTaskAssignment(claim: WorkerClaimAgent
 export declare function nextClaimBackoffMs(currentMs: number): number;
 export declare function claimBackoffDelayMs(currentMs: number, random?: () => number): number;
 export declare function resolveWorkerHomeDir(): string;
+export declare const WORKER_TASK_WORKSPACE_RETENTION = 20;
+export declare function pruneWorkerTaskWorkspaces(incomingWorkspaceDir: string, retention?: number): Promise<string[]>;
 export declare function hasAgentTaskUploadedArtifact(task: Pick<AgentTaskResponse, 'appId' | 'appVersionId'>): boolean;
 export declare function appendWorkerTranscriptChunks(input: {
     client: Pick<ApiClient, 'workerAppendAgentTaskTranscriptChunks'>;
@@ -247,11 +249,9 @@ export declare function prepareClaudeRunConfig(input: {
     workspaceDir: string;
     workerUsername: string;
     envName: string;
-    sourceCredentialsPath?: string;
     playdropConfig?: ReturnType<typeof loadConfig>;
 }): Promise<{
-    homeDir: string;
-    claudeConfigDir: string;
+    playdropConfigPath: string;
 }>;
 export declare function removeAgentRunCredentials(workspaceDir: string): Promise<void>;
 export declare function removeStaleAgentRunCredentials(workerHomeDir?: string): Promise<void>;

package/dist/commands/worker.js

@@ -3,7 +3,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.WORKER_CONTEXT_COMMAND_NOT_ALLOWED_MESSAGE = exports.WORKER_SESSION_EXPIRED_MESSAGE = exports.runLoggedProcess = exports.readEnvBoolean = exports.readCodexSandboxMode = exports.readCodexRolloutTokenUsageForThread = exports.extractCodexTokensUsed = exports.extractCodexThreadId = exports.extractCodexRolloutTokenUsage = exports.extractAgentTokenUsage = exports.DEFAULT_WORKER_TOKEN_CAP = exports.DEFAULT_CODEX_TIMEOUT_MS = exports.buildWorkerChildEnv = exports.buildCodexExecArgs = exports.buildClaudePermissionSettings = exports.buildClaudeExecArgs = exports.assertWorkerTokenUsageWithinCap = void 0;
+exports.WORKER_TASK_WORKSPACE_RETENTION = exports.WORKER_CONTEXT_COMMAND_NOT_ALLOWED_MESSAGE = exports.WORKER_SESSION_EXPIRED_MESSAGE = exports.runLoggedProcess = exports.readEnvBoolean = exports.readCodexSandboxMode = exports.readCodexRolloutTokenUsageForThread = exports.extractCodexTokensUsed = exports.extractCodexThreadId = exports.extractCodexRolloutTokenUsage = exports.extractAgentTokenUsage = exports.DEFAULT_WORKER_TOKEN_CAP = exports.DEFAULT_CODEX_TIMEOUT_MS = exports.buildWorkerChildEnv = exports.buildCodexExecArgs = exports.buildClaudePermissionSettings = exports.buildClaudeExecArgs = exports.assertWorkerTokenUsageWithinCap = void 0;
 exports.allocateWorkerDevPort = allocateWorkerDevPort;
 exports.isWorkerContextCommandAllowed = isWorkerContextCommandAllowed;
 exports.resolveWorkerExecutionTargetFromRole = resolveWorkerExecutionTargetFromRole;
@@ -11,6 +11,7 @@ exports.resolveWorkerClaimTaskAssignment = resolveWorkerClaimTaskAssignment;
 exports.nextClaimBackoffMs = nextClaimBackoffMs;
 exports.claimBackoffDelayMs = claimBackoffDelayMs;
 exports.resolveWorkerHomeDir = resolveWorkerHomeDir;
+exports.pruneWorkerTaskWorkspaces = pruneWorkerTaskWorkspaces;
 exports.hasAgentTaskUploadedArtifact = hasAgentTaskUploadedArtifact;
 exports.appendWorkerTranscriptChunks = appendWorkerTranscriptChunks;
 exports.readTaskNextStepsFile = readTaskNextStepsFile;
@@ -412,6 +413,33 @@ function workerStateFilePath() {
 function workerTaskWorkspaceDirFromAssignment(assignment) {
     return node_path_1.default.join(resolveWorkerHomeDir(), 'tasks', assignment.workspace.folderName);
 }
+exports.WORKER_TASK_WORKSPACE_RETENTION = 20;
+// Task workspaces (including retained failed ones) otherwise grow without bound on a long-lived
+// worker host. Keep only the most recently touched ones; the incoming task's own directory is
+// never a prune candidate.
+async function pruneWorkerTaskWorkspaces(incomingWorkspaceDir, retention = exports.WORKER_TASK_WORKSPACE_RETENTION) {
+    const tasksRoot = node_path_1.default.dirname(node_path_1.default.resolve(incomingWorkspaceDir));
+    if (!(0, node_fs_1.existsSync)(tasksRoot)) {
+        return [];
+    }
+    const incoming = node_path_1.default.resolve(incomingWorkspaceDir);
+    const entries = (0, node_fs_1.readdirSync)(tasksRoot, { withFileTypes: true })
+        .filter((entry) => entry.isDirectory())
+        .map((entry) => node_path_1.default.join(tasksRoot, entry.name))
+        .filter((dir) => dir !== incoming)
+        .map((dir) => ({ dir, mtimeMs: (0, node_fs_1.statSync)(dir).mtimeMs }))
+        .sort((a, b) => b.mtimeMs - a.mtimeMs);
+    const stale = entries.slice(Math.max(0, retention - 1));
+    const removed = [];
+    for (const entry of stale) {
+        await (0, promises_1.rm)(entry.dir, { recursive: true, force: true });
+        removed.push(entry.dir);
+    }
+    if (removed.length > 0) {
+        console.error(`pruned ${removed.length} stale task workspace(s), keeping the ${retention} most recent`);
+    }
+    return removed;
+}
 function buildWorkerTaskContext(claim, assignment) {
     const task = claim.task;
     if (!task) {
@@ -1930,78 +1958,32 @@ async function stageWorkerPlaydropSession(input) {
         },
     }, null, 2), { mode: 0o600 });
     await (0, promises_1.chmod)(playdropConfigPath, 0o600);
+    return playdropConfigPath;
 }
 async function prepareClaudeRunConfig(input) {
     const runRoot = node_path_1.default.join(input.workspaceDir, '.playdrop', 'claude-run');
     const homeDir = node_path_1.default.join(runRoot, 'home');
-    const claudeConfigDir = node_path_1.default.join(runRoot, 'config');
     await (0, promises_1.rm)(runRoot, { recursive: true, force: true });
     await (0, promises_1.mkdir)(runRoot, { recursive: true, mode: 0o700 });
     await (0, promises_1.chmod)(runRoot, 0o700);
     await (0, promises_1.mkdir)(homeDir, { mode: 0o700 });
-    await (0, promises_1.mkdir)(claudeConfigDir, { mode: 0o700 });
-    const configuredCredentialsPath = input.sourceCredentialsPath?.trim()
-        || node_process_1.default.env.PLAYDROP_WORKER_CLAUDE_CREDENTIALS_FILE?.trim();
-    const defaultCredentialsPath = node_path_1.default.join(node_os_1.default.homedir(), '.claude', '.credentials.json');
-    let rawCredentials;
-    if (configuredCredentialsPath) {
-        const sourceCredentialsPath = node_path_1.default.resolve(configuredCredentialsPath);
-        if (!isFile(sourceCredentialsPath)) {
-            throw new Error(`worker_claude_credentials_missing:${sourceCredentialsPath}`);
-        }
-        rawCredentials = (0, node_fs_1.readFileSync)(sourceCredentialsPath, 'utf8');
-    }
-    else if (isFile(defaultCredentialsPath)) {
-        rawCredentials = (0, node_fs_1.readFileSync)(defaultCredentialsPath, 'utf8');
-    }
-    else if (node_process_1.default.platform === 'darwin') {
-        try {
-            const result = await execFileAsync('security', [
-                'find-generic-password',
-                '-s',
-                'Claude Code-credentials',
-                '-w',
-            ], { maxBuffer: 1024 * 1024 });
-            rawCredentials = result.stdout;
-        }
-        catch {
-            throw new Error('worker_claude_credentials_missing:macos_keychain');
-        }
-    }
-    else {
-        throw new Error(`worker_claude_credentials_missing:${defaultCredentialsPath}`);
-    }
-    let credentials;
-    try {
-        credentials = JSON.parse(rawCredentials);
-    }
-    catch {
-        throw new Error('worker_claude_credentials_invalid_json');
-    }
-    const credentialObject = typeof credentials === 'object' && credentials !== null && !Array.isArray(credentials)
-        ? credentials
-        : null;
-    const oauthValue = credentialObject?.claudeAiOauth;
-    const claudeAiOauth = typeof oauthValue === 'object' && oauthValue !== null && !Array.isArray(oauthValue)
-        ? oauthValue
-        : null;
-    if (!claudeAiOauth
-        || typeof claudeAiOauth.accessToken !== 'string'
-        || !claudeAiOauth.accessToken.trim()
-        || typeof claudeAiOauth.refreshToken !== 'string'
-        || !claudeAiOauth.refreshToken.trim()) {
-        throw new Error('worker_claude_oauth_credentials_missing');
-    }
-    const stagedCredentialsPath = node_path_1.default.join(claudeConfigDir, '.credentials.json');
-    await (0, promises_1.writeFile)(stagedCredentialsPath, `${JSON.stringify({ claudeAiOauth })}\n`, { mode: 0o600 });
-    await (0, promises_1.chmod)(stagedCredentialsPath, 0o600);
-    await stageWorkerPlaydropSession({
-        homeDir,
-        workerUsername: input.workerUsername,
-        envName: input.envName,
-        playdropConfig: input.playdropConfig,
-    });
-    return { homeDir, claudeConfigDir };
+    // The worker does NOT manage Claude authentication. The host is logged in with the Claude CLI;
+    // we call `claude` and let it use the machine's own login exactly as a human would.
+    //
+    // We used to copy the OAuth credential into this per-task config dir. That is what logged the
+    // machine out: the copy refreshed on first use after the 8h access-token expiry, Anthropic
+    // rotated the refresh token (invalidating the one still in the keychain), and the refreshed
+    // credential was thrown away with the task workspace. The host was then permanently logged out.
+    // Observed twice in production (2026-07-13 19:50, 2026-07-14 13:00:23, the latter three seconds
+    // after task 449's Claude exited). Never stage, copy, or write Claude credentials here.
+    return {
+        playdropConfigPath: await stageWorkerPlaydropSession({
+            homeDir,
+            workerUsername: input.workerUsername,
+            envName: input.envName,
+            playdropConfig: input.playdropConfig,
+        }),
+    };
 }
 async function removeAgentRunCredentials(workspaceDir) {
     await Promise.all([
@@ -2096,7 +2078,7 @@ async function runCodex(input) {
     };
 }
 async function runClaude(input) {
-    const { homeDir, claudeConfigDir } = await prepareClaudeRunConfig({
+    const { playdropConfigPath } = await prepareClaudeRunConfig({
         workspaceDir: input.workspaceDir,
         workerUsername: input.workerUsername,
         envName: input.envName,
@@ -2107,7 +2089,8 @@ async function runClaude(input) {
         : null;
     let playwrightMcpConfigPath = null;
     if (input.enablePlaywrightMcp) {
-        playwrightMcpConfigPath = node_path_1.default.join(claudeConfigDir, 'playwright-mcp.json');
+        playwrightMcpConfigPath = node_path_1.default.join(input.workspaceDir, '.playdrop', 'claude-run', 'playwright-mcp.json');
+        (0, node_fs_1.mkdirSync)(node_path_1.default.dirname(playwrightMcpConfigPath), { recursive: true });
         (0, node_fs_1.writeFileSync)(playwrightMcpConfigPath, `${JSON.stringify((0, runtime_1.buildPlaywrightMcpServerConfig)(), null, 2)}\n`, 'utf8');
     }
     const result = await (0, runtime_1.runLoggedProcess)({
@@ -2129,8 +2112,7 @@ async function runClaude(input) {
             envName: input.envName,
             eventDir: input.eventDir,
             devPort: input.devPort,
-            homeDir,
-            claudeConfigDir,
+            playdropConfigPath,
             playwrightBrowsersPath: resolveWorkerPlaywrightBrowsersPath(),
         }),
         stdin: input.prompt,
@@ -3870,6 +3852,7 @@ async function startWorker(options = {}) {
                     reasoningEffort = codexModel?.reasoningEffort ?? claudeModel?.effort ?? null;
                     const taskContext = buildWorkerTaskContext(claim, assignment);
                     workspaceDir = workerTaskWorkspaceDirFromAssignment(assignment);
+                    await pruneWorkerTaskWorkspaces(workspaceDir);
                     await (0, promises_1.rm)(workspaceDir, { recursive: true, force: true });
                     await (0, promises_1.mkdir)(workspaceDir, { recursive: true });
                     const eventDir = node_path_1.default.join(workspaceDir, '.playdrop-task-events');

package/node_modules/@playdrop/config/client-meta.json

@@ -1,6 +1,6 @@
 {
   "version": "0.12.8",
-  "build": 10,
+  "build": 13,
   "runtimeSdkVersion": "0.12.5",
   "runtimeSdkBuild": 2,
   "clients": {

package/node_modules/@playdrop/types/dist/instrument-evidence.d.ts

@@ -28,7 +28,9 @@ export type InstrumentEvidenceManifest = {
 };
 export declare const PLAYWRIGHT_MCP_SCREENSHOT_TOOL = "mcp__playwright__browser_take_screenshot";
 export declare const PLAYWRIGHT_MCP_CONTROLLED_TAB_ID = 1;
+export declare const PLAYWRIGHT_MCP_SCREENSHOT_BUDGET = 100;
 export declare function isInstrumentScreenshotId(value: string): boolean;
+export declare function normalizePlaywrightScreenshotId(value: unknown): string | null;
 export declare class ClaudeChromeScreenshotStreamParser {
     private readonly onScreenshot;
     private buffer;
@@ -44,9 +46,9 @@ export declare class ClaudeChromeScreenshotStreamParser {
 export declare class PlaywrightMcpScreenshotStreamParser {
     private readonly onScreenshot;
     private buffer;
-    private readonly pendingScreenshotToolUseIds;
+    private readonly pendingScreenshotFilenames;
     private readonly handledToolUseIds;
-    private sequence;
+    private screenshotCallCount;
     constructor(onScreenshot: (screenshot: ClaudeChromeScreenshot) => void);
     push(chunk: string): number;
     finish(): number;

package/node_modules/@playdrop/types/dist/instrument-evidence.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"instrument-evidence.d.ts","sourceRoot":"","sources":["../src/instrument-evidence.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,yBAAyB,iDAK5B,CAAC;AAEX,MAAM,MAAM,sBAAsB,GAAG,CAAC,OAAO,yBAAyB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEhF,MAAM,MAAM,sBAAsB,GAAG;IACnC,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,YAAY,GAAG,WAAW,CAAC;IACtC,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB,CAAC;AAEF,MAAM,MAAM,yBAAyB,GAAG;IACtC,IAAI,EAAE,sBAAsB,CAAC;IAC7B,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,YAAY,GAAG,WAAW,CAAC;IACtC,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,0BAA0B,GAAG;IACvC,OAAO,EAAE,CAAC,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,sBAAsB,EAAE,yBAAyB,CAAC,CAAC,CAAC;CAC9E,CAAC;AAMF,eAAO,MAAM,8BAA8B,6CAA6C,CAAC;AACzF,eAAO,MAAM,gCAAgC,IAAI,CAAC;AAGlD,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAE/D;AA+CD,qBAAa,kCAAkC;IAKjC,OAAO,CAAC,QAAQ,CAAC,YAAY;IAJzC,OAAO,CAAC,MAAM,CAAM;IACpB,OAAO,CAAC,QAAQ,CAAC,yBAAyB,CAA+B;IACzE,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAqB;gBAE7B,YAAY,EAAE,CAAC,UAAU,EAAE,sBAAsB,KAAK,IAAI;IAEvF,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM;IAqB3B,MAAM,IAAI,MAAM;IAMhB,OAAO,CAAC,WAAW;IA0BnB,OAAO,CAAC,aAAa;IAkBrB,OAAO,CAAC,iBAAiB;CAiE1B;AAMD,qBAAa,mCAAmC;IAMlC,OAAO,CAAC,QAAQ,CAAC,YAAY;IALzC,OAAO,CAAC,MAAM,CAAM;IACpB,OAAO,CAAC,QAAQ,CAAC,2BAA2B,CAAqB;IACjE,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAqB;IACvD,OAAO,CAAC,QAAQ,CAAK;gBAEQ,YAAY,EAAE,CAAC,UAAU,EAAE,sBAAsB,KAAK,IAAI;IAEvF,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM;IAqB3B,MAAM,IAAI,MAAM;IAMhB,OAAO,CAAC,WAAW;IA0BnB,OAAO,CAAC,aAAa;IAcrB,OAAO,CAAC,iBAAiB;CA8C1B"}
+{"version":3,"file":"instrument-evidence.d.ts","sourceRoot":"","sources":["../src/instrument-evidence.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,yBAAyB,iDAK5B,CAAC;AAEX,MAAM,MAAM,sBAAsB,GAAG,CAAC,OAAO,yBAAyB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEhF,MAAM,MAAM,sBAAsB,GAAG;IACnC,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,YAAY,GAAG,WAAW,CAAC;IACtC,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB,CAAC;AAEF,MAAM,MAAM,yBAAyB,GAAG;IACtC,IAAI,EAAE,sBAAsB,CAAC;IAC7B,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,YAAY,GAAG,WAAW,CAAC;IACtC,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,0BAA0B,GAAG;IACvC,OAAO,EAAE,CAAC,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,sBAAsB,EAAE,yBAAyB,CAAC,CAAC,CAAC;CAC9E,CAAC;AAMF,eAAO,MAAM,8BAA8B,6CAA6C,CAAC;AACzF,eAAO,MAAM,gCAAgC,IAAI,CAAC;AAGlD,eAAO,MAAM,gCAAgC,MAAM,CAAC;AAKpD,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAE/D;AAED,wBAAgB,+BAA+B,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAG7E;AA+CD,qBAAa,kCAAkC;IAKjC,OAAO,CAAC,QAAQ,CAAC,YAAY;IAJzC,OAAO,CAAC,MAAM,CAAM;IACpB,OAAO,CAAC,QAAQ,CAAC,yBAAyB,CAA+B;IACzE,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAqB;gBAE7B,YAAY,EAAE,CAAC,UAAU,EAAE,sBAAsB,KAAK,IAAI;IAEvF,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM;IAqB3B,MAAM,IAAI,MAAM;IAMhB,OAAO,CAAC,WAAW;IA0BnB,OAAO,CAAC,aAAa;IAkBrB,OAAO,CAAC,iBAAiB;CAiE1B;AAMD,qBAAa,mCAAmC;IAMlC,OAAO,CAAC,QAAQ,CAAC,YAAY;IALzC,OAAO,CAAC,MAAM,CAAM;IACpB,OAAO,CAAC,QAAQ,CAAC,0BAA0B,CAA6B;IACxE,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAqB;IACvD,OAAO,CAAC,mBAAmB,CAAK;gBAEH,YAAY,EAAE,CAAC,UAAU,EAAE,sBAAsB,KAAK,IAAI;IAEvF,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM;IAqB3B,MAAM,IAAI,MAAM;IAMhB,OAAO,CAAC,WAAW;IA0BnB,OAAO,CAAC,aAAa;IAwBrB,OAAO,CAAC,iBAAiB;CA+C1B"}

package/node_modules/@playdrop/types/dist/instrument-evidence.js

@@ -20,9 +20,11 @@ __export(instrument_evidence_exports, {
   ClaudeChromeScreenshotStreamParser: () => ClaudeChromeScreenshotStreamParser,
   INSTRUMENT_EVIDENCE_NAMES: () => INSTRUMENT_EVIDENCE_NAMES,
   PLAYWRIGHT_MCP_CONTROLLED_TAB_ID: () => PLAYWRIGHT_MCP_CONTROLLED_TAB_ID,
+  PLAYWRIGHT_MCP_SCREENSHOT_BUDGET: () => PLAYWRIGHT_MCP_SCREENSHOT_BUDGET,
   PLAYWRIGHT_MCP_SCREENSHOT_TOOL: () => PLAYWRIGHT_MCP_SCREENSHOT_TOOL,
   PlaywrightMcpScreenshotStreamParser: () => PlaywrightMcpScreenshotStreamParser,
-  isInstrumentScreenshotId: () => isInstrumentScreenshotId
+  isInstrumentScreenshotId: () => isInstrumentScreenshotId,
+  normalizePlaywrightScreenshotId: () => normalizePlaywrightScreenshotId
 });
 module.exports = __toCommonJS(instrument_evidence_exports);
 const INSTRUMENT_EVIDENCE_NAMES = [
@@ -36,10 +38,15 @@ const SCREENSHOT_ID_IN_TEXT_PATTERN = /\bID:\s*(ss_[A-Za-z0-9_-]+)\b/g;
 const MAX_STREAM_LINE_LENGTH = 20 * 1024 * 1024;
 const PLAYWRIGHT_MCP_SCREENSHOT_TOOL = "mcp__playwright__browser_take_screenshot";
 const PLAYWRIGHT_MCP_CONTROLLED_TAB_ID = 1;
-const PLAYWRIGHT_SCREENSHOT_ID_PATTERN = /^pw-[1-9][0-9]*$/;
+const PLAYWRIGHT_MCP_SCREENSHOT_BUDGET = 100;
+const PLAYWRIGHT_SCREENSHOT_ID_PATTERN = /^[a-z0-9][a-z0-9._-]{0,63}\.(png|jpe?g)$/;
 function isInstrumentScreenshotId(value) {
   return SCREENSHOT_ID_PATTERN.test(value) || PLAYWRIGHT_SCREENSHOT_ID_PATTERN.test(value);
 }
+function normalizePlaywrightScreenshotId(value) {
+  const id = typeof value === "string" ? value.trim().toLowerCase() : "";
+  return PLAYWRIGHT_SCREENSHOT_ID_PATTERN.test(id) ? id : null;
+}
 function asRecord(value) {
   return value && typeof value === "object" && !Array.isArray(value) ? value : null;
 }
@@ -221,9 +228,9 @@ class ClaudeChromeScreenshotStreamParser {
 class PlaywrightMcpScreenshotStreamParser {
   onScreenshot;
   buffer = "";
-  pendingScreenshotToolUseIds = /* @__PURE__ */ new Set();
+  pendingScreenshotFilenames = /* @__PURE__ */ new Map();
   handledToolUseIds = /* @__PURE__ */ new Set();
-  sequence = 0;
+  screenshotCallCount = 0;
   constructor(onScreenshot) {
     this.onScreenshot = onScreenshot;
   }
@@ -287,7 +294,16 @@ class PlaywrightMcpScreenshotStreamParser {
       if (item?.["type"] !== "tool_use" || !id || name !== PLAYWRIGHT_MCP_SCREENSHOT_TOOL) {
         continue;
       }
-      this.pendingScreenshotToolUseIds.add(id);
+      this.screenshotCallCount += 1;
+      if (this.screenshotCallCount > PLAYWRIGHT_MCP_SCREENSHOT_BUDGET) {
+        throw new Error(`playwright_screenshot_budget_exceeded:${PLAYWRIGHT_MCP_SCREENSHOT_BUDGET}`);
+      }
+      const input = asRecord(item?.["input"]);
+      const filename = normalizePlaywrightScreenshotId(input?.["filename"]);
+      if (!filename) {
+        continue;
+      }
+      this.pendingScreenshotFilenames.set(id, filename);
     }
   }
   recordToolResults(payload) {
@@ -300,11 +316,12 @@ class PlaywrightMcpScreenshotStreamParser {
         continue;
       }
       const toolUseId = typeof toolResult["tool_use_id"] === "string" ? toolResult["tool_use_id"].trim() : "";
-      if (!this.pendingScreenshotToolUseIds.has(toolUseId) || this.handledToolUseIds.has(toolUseId)) {
+      const screenshotId = this.pendingScreenshotFilenames.get(toolUseId);
+      if (!screenshotId || this.handledToolUseIds.has(toolUseId)) {
         continue;
       }
       this.handledToolUseIds.add(toolUseId);
-      this.pendingScreenshotToolUseIds.delete(toolUseId);
+      this.pendingScreenshotFilenames.delete(toolUseId);
       const resultContent = Array.isArray(toolResult["content"]) ? toolResult["content"] : [];
       const images = resultContent.map(asRecord).filter((item) => item?.["type"] === "image");
       if (images.length === 0) {
@@ -319,9 +336,8 @@ class PlaywrightMcpScreenshotStreamParser {
       if (mediaType !== "image/jpeg" && mediaType !== "image/png" || !dataBase64) {
         throw new Error(`invalid_playwright_screenshot_payload:${toolUseId}`);
       }
-      this.sequence += 1;
       this.onScreenshot({
-        screenshotId: `pw-${this.sequence}`,
+        screenshotId,
         tabId: PLAYWRIGHT_MCP_CONTROLLED_TAB_ID,
         toolUseId,
         mediaType,
@@ -339,7 +355,9 @@ class PlaywrightMcpScreenshotStreamParser {
   ClaudeChromeScreenshotStreamParser,
   INSTRUMENT_EVIDENCE_NAMES,
   PLAYWRIGHT_MCP_CONTROLLED_TAB_ID,
+  PLAYWRIGHT_MCP_SCREENSHOT_BUDGET,
   PLAYWRIGHT_MCP_SCREENSHOT_TOOL,
   PlaywrightMcpScreenshotStreamParser,
-  isInstrumentScreenshotId
+  isInstrumentScreenshotId,
+  normalizePlaywrightScreenshotId
 });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@playdrop/playdrop-cli",
-  "version": "0.12.17",
+  "version": "0.12.20",
   "description": "Official Playdrop CLI for publishing browser games, creator apps, and AI-generated game assets on playdrop.ai",
   "homepage": "https://www.playdrop.ai",
   "repository": {