@playdrop/playdrop-cli 0.12.3 → 0.12.4

package/config/client-meta.json

@@ -1,5 +1,5 @@
 {
-  "version": "0.12.2",
+  "version": "0.12.4",
   "build": 1,
   "runtimeSdkVersion": "0.10.0",
   "clients": {

package/dist/appUrls.d.ts

@@ -4,6 +4,14 @@ export type AppUrlInput = {
     appName: string;
     appType?: AppType | string | null;
 };
+export type TaskCaptureSession = {
+    appId: number;
+    taskId: number;
+    taskToken: string;
+};
+export declare function appendTaskCaptureSession(url: URL, session: TaskCaptureSession | null | undefined): void;
+export declare function redactTaskCaptureSession(url: string): string;
+export declare function redactTaskCaptureToken(text: string, sourceUrl: string): string;
 export declare function normalizePlaydropWebBase(webBase?: string | null): string;
 export declare function getAppTypeSlug(type: AppType | string | null | undefined): string;
 export declare function buildPlatformPlayUrl(webBase: string | null | undefined, input: AppUrlInput): string;
@@ -15,6 +23,7 @@ export declare function buildPlatformDevUrl(webBase: string | null | undefined,
     player?: string | null;
     launchCheck?: boolean;
     localDevPort?: number | string | null;
+    captureSession?: TaskCaptureSession | null;
 }): string;
 export declare function buildUploadLaunchCheckUrl(webBase: string | null | undefined, input: AppUrlInput & {
     sessionId: string;

package/dist/appUrls.js

@@ -1,5 +1,8 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.appendTaskCaptureSession = appendTaskCaptureSession;
+exports.redactTaskCaptureSession = redactTaskCaptureSession;
+exports.redactTaskCaptureToken = redactTaskCaptureToken;
 exports.normalizePlaydropWebBase = normalizePlaydropWebBase;
 exports.getAppTypeSlug = getAppTypeSlug;
 exports.buildPlatformPlayUrl = buildPlatformPlayUrl;
@@ -7,6 +10,31 @@ exports.buildPlatformPrivateDraftPlayUrl = buildPlatformPrivateDraftPlayUrl;
 exports.buildPlatformDevUrl = buildPlatformDevUrl;
 exports.buildUploadLaunchCheckUrl = buildUploadLaunchCheckUrl;
 const DEFAULT_WEB_BASE = 'https://www.playdrop.ai';
+function appendTaskCaptureSession(url, session) {
+    if (!session) {
+        return;
+    }
+    if (!Number.isInteger(session.appId) || session.appId <= 0) {
+        throw new Error('invalid_capture_app_id');
+    }
+    if (!Number.isInteger(session.taskId) || session.taskId <= 0 || !session.taskToken.trim()) {
+        throw new Error('invalid_capture_task_session');
+    }
+    url.searchParams.set('captureAppId', String(session.appId));
+    url.searchParams.set('captureTaskId', String(session.taskId));
+    url.searchParams.set('captureTaskToken', session.taskToken.trim());
+}
+function redactTaskCaptureSession(url) {
+    const redacted = new URL(url);
+    if (redacted.searchParams.has('captureTaskToken')) {
+        redacted.searchParams.set('captureTaskToken', '<redacted>');
+    }
+    return redacted.toString();
+}
+function redactTaskCaptureToken(text, sourceUrl) {
+    const taskToken = new URL(sourceUrl).searchParams.get('captureTaskToken')?.trim() ?? '';
+    return taskToken ? text.split(taskToken).join('<redacted>') : text;
+}
 function normalizePlaydropWebBase(webBase) {
     const base = typeof webBase === 'string' && webBase.trim().length > 0 ? webBase.trim() : DEFAULT_WEB_BASE;
     return base.replace(/\/$/, '');
@@ -69,6 +97,7 @@ function buildPlatformDevUrl(webBase, input) {
         }
         url.searchParams.set('localDevPort', String(port));
     }
+    appendTaskCaptureSession(url, input.captureSession);
     return url.toString();
 }
 function buildUploadLaunchCheckUrl(webBase, input) {

package/dist/apps/index.d.ts

@@ -1,6 +1,7 @@
 import type { ApiClient } from '@playdrop/api-client';
 import type { UserResponse } from '@playdrop/types';
 import type { AppTask } from '../catalogue';
+import type { TaskCaptureSession } from '../appUrls';
 import { collectAppValidationWarnings, validateAppTask, runFormatScript } from './validate';
 import { buildApp, type AppBuildArtifacts } from './build';
 import { uploadApp, type AppUploadResult } from './upload';
@@ -23,6 +24,7 @@ export type AppPipelineOptions = {
     ensureRegisteredAppShell?: boolean;
     agentTaskId?: number;
     mediaCaptureRequired?: boolean;
+    captureSession?: TaskCaptureSession | null;
 };
 export declare function runAppPipeline(client: ApiClient, task: AppTask, options?: AppPipelineOptions): Promise<AppPipelineResult>;
 export { collectAppValidationWarnings, validateAppTask, buildApp, uploadApp, runFormatScript };

package/dist/apps/index.js

@@ -49,6 +49,7 @@ async function runAppPipeline(client, task, options) {
             timeoutMs: options.loadCheckTimeoutMs,
             token: options.token ?? null,
             currentUser: options.user ?? null,
+            captureSession: options.captureSession,
         });
         if (loadCheck.status !== 'PASSED') {
             throw new Error((0, loadCheck_1.formatHostedLoadCheckFailure)(task.name, loadCheck, 'local'));
@@ -64,6 +65,7 @@ async function runAppPipeline(client, task, options) {
         loadCheckTimeoutMs: options?.loadCheckTimeoutMs,
         agentTaskId: options?.agentTaskId,
         mediaCaptureRequired: options?.mediaCaptureRequired,
+        captureSession: options?.captureSession,
     };
     const upload = await (0, upload_1.uploadApp)(client, task, artifacts, uploadOptions);
     return { artifacts, upload, warnings };

package/dist/apps/loadCheck.d.ts

@@ -2,6 +2,7 @@ import type { ApiClient } from '@playdrop/api-client';
 import type { UserResponse } from '@playdrop/types';
 import type { Frame, Page } from 'playwright-core';
 import type { AppTask } from '../catalogue';
+import { type TaskCaptureSession } from '../appUrls';
 export type HostedLoadCheckResult = {
     status: 'PASSED' | 'FAILED';
     errorCode: string | null;
@@ -50,6 +51,7 @@ export declare function focusProjectCheckGameFrame(page: Pick<Page, 'mouse'>, fr
 }>;
 export declare function dispatchProjectCheckActionsToFrame(page: Page, frame: Frame, actions: readonly ProjectCheckAction[]): Promise<void>;
 export declare function formatHostedLoadCheckFailure(taskName: string, result: HostedLoadCheckResult, scope?: 'local' | 'staged' | 'final'): string;
+export declare function redactHostedLoadCheckSecrets(text: string, sourceUrl: string): string;
 export declare function runLocalHostedLoadCheck(input: {
     client: ApiClient;
     apiBase: string;
@@ -60,6 +62,7 @@ export declare function runLocalHostedLoadCheck(input: {
     timeoutMs?: number;
     token?: string | null;
     currentUser?: UserResponse | null;
+    captureSession?: TaskCaptureSession | null;
     allowUnregisteredViewerLaunch?: boolean;
     screenshotPath?: string | null;
     actions?: ProjectCheckAction[];
@@ -72,5 +75,6 @@ export declare function runUploadedHostedLoadCheck(input: {
     timeoutMs?: number;
     token?: string | null;
     currentUser?: UserResponse | null;
+    captureSession?: TaskCaptureSession | null;
     screenshotPath?: string | null;
 }): Promise<HostedLoadCheckResult>;

package/dist/apps/loadCheck.js

@@ -5,6 +5,7 @@ exports.normalizeProjectCheckActions = normalizeProjectCheckActions;
 exports.focusProjectCheckGameFrame = focusProjectCheckGameFrame;
 exports.dispatchProjectCheckActionsToFrame = dispatchProjectCheckActionsToFrame;
 exports.formatHostedLoadCheckFailure = formatHostedLoadCheckFailure;
+exports.redactHostedLoadCheckSecrets = redactHostedLoadCheckSecrets;
 exports.runLocalHostedLoadCheck = runLocalHostedLoadCheck;
 exports.runUploadedHostedLoadCheck = runUploadedHostedLoadCheck;
 const promises_1 = require("node:fs/promises");
@@ -427,13 +428,18 @@ function formatHostedLoadCheckFailure(taskName, result, scope = 'local') {
     const message = normalizeLoadCheckMessage(result.message);
     return `hosted_load_check_failed: ${taskName} failed the ${scopeLabel} check (${errorCode}). ${message}`;
 }
+function redactHostedLoadCheckSecrets(text, sourceUrl) {
+    return (0, appUrls_1.redactTaskCaptureToken)(text, sourceUrl).replace(/("(?:authToken|appAccessToken|captureTaskToken|reviewToken)"\s*:\s*")[^"]+(")/g, '$1<redacted>$2');
+}
 async function runHostedLoadCheck(options) {
     const expectedHostedLaunchState = options.expectedHostedLaunchState ?? 'ready';
     const artifactFingerprint = options.artifactFingerprint ?? null;
     const timeoutMs = options.timeoutMs ?? DEFAULT_HOSTED_LOAD_TIMEOUT_MS;
     const errors = [];
     const warnings = [];
-    let finalUrl = options.targetUrl;
+    let finalUrl = (0, appUrls_1.redactTaskCaptureSession)(options.targetUrl);
+    const reportTargetUrl = (0, appUrls_1.redactTaskCaptureSession)(options.targetUrl);
+    const redactReportText = (text) => redactHostedLoadCheckSecrets(text, options.targetUrl);
     let screenshotPath = null;
     let webglRenderer = null;
     try {
@@ -494,7 +500,7 @@ async function runHostedLoadCheck(options) {
                     }
                 }
                 const serialized = serializePayload(payload);
-                const line = ['[check][custom]', typeof type === 'string' ? type.toLowerCase() : 'info', serialized].filter(Boolean).join(' ');
+                const line = redactReportText(['[check][custom]', typeof type === 'string' ? type.toLowerCase() : 'info', serialized].filter(Boolean).join(' '));
                 console.log(line);
             });
             await page.addInitScript(() => {
@@ -533,7 +539,7 @@ async function runHostedLoadCheck(options) {
                 const type = message.type();
                 const args = await Promise.all(message.args().map((arg) => arg.jsonValue().catch(() => arg.toString())));
                 const rendered = args.length > 0 ? args.map(formatConsoleValue).join(' ') : message.text();
-                const line = `[check][console:${type}] ${rendered}`;
+                const line = redactReportText(`[check][console:${type}] ${rendered}`);
                 if (type === 'error' || type === 'assert' || type === 'trace') {
                     errors.push(line);
                     console.error(line);
@@ -543,19 +549,19 @@ async function runHostedLoadCheck(options) {
             };
             page.on('console', (message) => {
                 void handleConsoleMessage(message).catch((error) => {
-                    const text = error instanceof Error ? error.message : String(error);
+                    const text = redactReportText(error instanceof Error ? error.message : String(error));
                     errors.push(`[check][console-handler] ${text}`);
                 });
             });
             page.on('pageerror', (error) => {
-                const text = error?.message ?? String(error);
+                const text = redactReportText(error?.message ?? String(error));
                 errors.push(`[check][pageerror] ${text}`);
                 console.error(`[check][pageerror] ${text}`);
             });
             page.on('requestfailed', (request) => {
                 const failure = request.failure();
                 const errorText = failure?.errorText ?? '';
-                const text = `${request.method()} ${request.url()} - ${errorText || 'failed'}`;
+                const text = redactReportText(`${request.method()} ${request.url()} - ${errorText || 'failed'}`);
                 if (isKnownGoogleTelemetryUrl(request.url())) {
                     warnings.push(`[check][requestfailed] ${text}`);
                     return;
@@ -571,7 +577,7 @@ async function runHostedLoadCheck(options) {
                 if (status < 400) {
                     return;
                 }
-                const text = `${status} ${response.statusText()} ${response.url()}`;
+                const text = redactReportText(`${status} ${response.statusText()} ${response.url()}`);
                 if (isKnownGoogleTelemetryUrl(response.url())) {
                     warnings.push(`[check][response] ${text}`);
                     return;
@@ -579,10 +585,10 @@ async function runHostedLoadCheck(options) {
                 errors.push(`[check][response] ${text}`);
                 console.error(`[check][response] ${text}`);
             });
-            console.log(`[check] Opening ${options.targetUrl}`);
+            console.log(`[check] Opening ${reportTargetUrl}`);
             const response = await page.goto(options.targetUrl, { waitUntil: 'domcontentloaded', timeout: 30000 });
             if (response && !response.ok()) {
-                errors.push(`[check][navigation] ${response.status()} ${response.statusText()} ${options.targetUrl}`);
+                errors.push(`[check][navigation] ${response.status()} ${response.statusText()} ${reportTargetUrl}`);
             }
             const readinessTimeoutMs = Math.min(Math.max(timeoutMs, 1000), 30000);
             await page.waitForFunction(({ frameSelector }) => {
@@ -610,7 +616,7 @@ async function runHostedLoadCheck(options) {
             if (launchState.state !== expectedHostedLaunchState) {
                 throw new Error(formatHostedLaunchStateMismatch(launchState.state, expectedHostedLaunchState));
             }
-            finalUrl = page.url();
+            finalUrl = (0, appUrls_1.redactTaskCaptureSession)(page.url());
             if (expectedHostedLaunchState !== 'ready') {
                 screenshotPath = await saveScreenshot(page, options.screenshotPath);
                 return;
@@ -632,11 +638,11 @@ async function runHostedLoadCheck(options) {
         });
     }
     catch (error) {
-        const launchFailureMessage = error instanceof Error ? error.message : String(error);
+        const launchFailureMessage = redactReportText(error instanceof Error ? error.message : String(error));
         if (/Failed to launch installed Google Chrome/i.test(launchFailureMessage)) {
             throw error;
         }
-        const normalized = normalizeLoadCheckFailure(error, artifactFingerprint);
+        const normalized = normalizeLoadCheckFailure(new Error(launchFailureMessage), artifactFingerprint);
         return {
             ...normalized,
             screenshotPath,
@@ -733,6 +739,23 @@ async function runLocalHostedLoadCheck(input) {
             ...localAppMetadata,
             captureSurface,
         });
+        if (input.captureSession) {
+            return await runHostedLoadCheck({
+                targetUrl: (0, appUrls_1.buildPlatformDevUrl)(input.webBase, {
+                    creatorUsername: input.creatorUsername,
+                    appName: input.task.name,
+                    appType: input.task.type ?? 'GAME',
+                    launchCheck: true,
+                    localDevPort,
+                    captureSession: input.captureSession,
+                }),
+                timeoutMs: input.timeoutMs,
+                expectedHostedLaunchState: resolvePostAuthHostedLaunchState(localAppMetadata.controllerMode),
+                contextOptions,
+                screenshotPath: input.screenshotPath,
+                actions: input.actions,
+            });
+        }
         if (anonymousExpectedState === 'login_required') {
             const registeredApp = await (0, registration_1.fetchRegisteredAppShell)(input.client, input.creatorUsername, input.task.name);
             const canLaunchUnregisteredViewer = input.allowUnregisteredViewerLaunch === true
@@ -813,7 +836,19 @@ async function runUploadedHostedLoadCheck(input) {
         captureSurface,
     });
     let result;
-    if (anonymousExpectedState === 'login_required') {
+    if (input.captureSession) {
+        const targetUrl = new URL(preview.launchUrl);
+        (0, appUrls_1.appendTaskCaptureSession)(targetUrl, input.captureSession);
+        result = await runHostedLoadCheck({
+            targetUrl: targetUrl.toString(),
+            artifactFingerprint: preview.session.manifestHash,
+            timeoutMs: input.timeoutMs,
+            expectedHostedLaunchState: resolvePostAuthHostedLaunchState(preview.localAppMetadata.controllerMode),
+            contextOptions,
+            screenshotPath: input.screenshotPath,
+        });
+    }
+    else if (anonymousExpectedState === 'login_required') {
         if (!preview.app?.id) {
             result = buildFailedLoadCheckResult('app_registration_required_for_auth_validation', `Auth-required hosted app "${input.task.name}" must be registered on PlayDrop before viewer load-check can run.`, preview.session.manifestHash);
         }

package/dist/apps/upload.d.ts

@@ -1,6 +1,7 @@
 import type { ApiClient } from '@playdrop/api-client';
 import type { UserResponse } from '@playdrop/types';
 import type { AppTask } from '../catalogue';
+import type { TaskCaptureSession } from '../appUrls';
 import type { AppBuildArtifacts } from './build';
 export type AppUploadResult = {
     fileUnchanged?: boolean;
@@ -21,5 +22,6 @@ export type AppUploadOptions = {
     loadCheckTimeoutMs?: number;
     agentTaskId?: number;
     mediaCaptureRequired?: boolean;
+    captureSession?: TaskCaptureSession | null;
 };
 export declare function uploadApp(client: ApiClient, task: AppTask, artifacts: AppBuildArtifacts | null, options?: AppUploadOptions): Promise<AppUploadResult>;

package/dist/apps/upload.js

@@ -454,6 +454,7 @@ async function uploadAppVersion(client, task, artifacts, options) {
                     timeoutMs: options.loadCheckTimeoutMs,
                     token: options?.token ?? null,
                     currentUser: options?.user ?? null,
+                    captureSession: options?.captureSession,
                 });
                 if (loadCheck.status !== 'PASSED') {
                     throw new Error((0, loadCheck_1.formatHostedLoadCheckFailure)(task.name, loadCheck, 'staged'));

package/dist/commands/captureListing.d.ts

@@ -1,5 +1,6 @@
 import { type AppSurface } from '@playdrop/types';
 import type { BrowserContextOptions } from 'playwright-core';
+import { type TaskCaptureSession } from '../appUrls';
 type CaptureListingOptions = {
     app?: string;
     duration?: string | number;
@@ -53,13 +54,14 @@ type CropRect = {
 export declare function resolveListingCaptureRouteSegment(previewable: boolean): 'dev-preview';
 export declare function resolveCaptureListingDevRouterPort(env?: NodeJS.ProcessEnv): number;
 export declare function resolveListingCaptureLocalDevPort(devRouterPort: number): number | null;
-export declare function buildListingCaptureFrameUrl({ webBase, currentUsername, appTypeSlug, appName, routeSegment, localDevPort, }: {
+export declare function buildListingCaptureFrameUrl({ webBase, currentUsername, appTypeSlug, appName, routeSegment, localDevPort, captureSession, }: {
     webBase: string;
     currentUsername: string;
     appTypeSlug: string;
     appName: string;
     routeSegment: 'dev-preview';
     localDevPort: number | null;
+    captureSession?: TaskCaptureSession | null;
 }): string;
 export declare function resolveListingCaptureSceneId(width: number, height: number): 'listing-landscape' | 'listing-portrait';
 export declare function parseCaptureListingOptions(targetArg: string | undefined, options?: CaptureListingOptions): ParsedCaptureListingOptions;

package/dist/commands/captureListing.js

@@ -62,6 +62,7 @@ const dev_1 = require("./dev");
 const devRuntimeAssets_1 = require("./devRuntimeAssets");
 const devServer_1 = require("./devServer");
 const devShared_1 = require("./devShared");
+const taskCaptureSession_1 = require("./taskCaptureSession");
 const CAPTURE_FRAME_SELECTOR = 'iframe[title="Game"]';
 const DEFAULT_DURATION_SECONDS = 8;
 const DEFAULT_WIDTH = 1280;
@@ -100,15 +101,15 @@ function resolveCaptureListingDevRouterPort(env = process.env) {
 function resolveListingCaptureLocalDevPort(devRouterPort) {
     return devRouterPort === devServer_1.DEV_ROUTER_PORT ? null : devRouterPort;
 }
-function buildListingCaptureFrameUrl({ webBase, currentUsername, appTypeSlug, appName, routeSegment, localDevPort, }) {
+function buildListingCaptureFrameUrl({ webBase, currentUsername, appTypeSlug, appName, routeSegment, localDevPort, captureSession, }) {
     const frameUrlObject = new URL(`${(0, appUrls_1.normalizePlaydropWebBase)(webBase)}/creators/${encodeURIComponent(currentUsername)}/apps/${appTypeSlug}/${encodeURIComponent(appName)}/${routeSegment}`);
-    frameUrlObject.searchParams.set('devAuth', 'anonymous');
     frameUrlObject.searchParams.set('launchCheck', '1');
     frameUrlObject.searchParams.set('captureShell', 'listing');
     frameUrlObject.searchParams.set('mobileFrameHost', 'admin');
     if (localDevPort !== null) {
         frameUrlObject.searchParams.set('localDevPort', String(localDevPort));
     }
+    (0, appUrls_1.appendTaskCaptureSession)(frameUrlObject, captureSession);
     return frameUrlObject.toString();
 }
 function resolveListingCaptureSceneId(width, height) {
@@ -812,11 +813,14 @@ async function captureListing(targetArg, options = {}) {
     const outputPaths = await ensureOutputPaths(appName, parsedOptions.outputDir);
     const projectInfo = (0, devShared_1.findProjectInfo)(resolvedTarget.htmlPath);
     const devScriptAvailable = Boolean(projectInfo.projectDir && projectInfo.packageJson && typeof projectInfo.packageJson.scripts?.dev === 'string');
-    await (0, commandContext_1.withEnvironment)('project capture', 'Capturing game media', async ({ client, env, envConfig }) => {
+    await (0, commandContext_1.withEnvironment)('project capture', 'Capturing game media', async ({ client, env, envConfig, account, workspaceAuth }) => {
         let currentUsername = '';
         try {
-            const currentUser = await (0, devShared_1.fetchDevUser)(client);
-            currentUsername = currentUser.username.trim();
+            currentUsername = await (0, devShared_1.resolveDevCreatorUsername)({
+                client,
+                workspaceOwnerUsername: workspaceAuth?.config.ownerUsername,
+                accountUsername: account?.username,
+            });
         }
         catch (error) {
             if (error instanceof http_1.CLIUnsupportedClientError) {
@@ -842,8 +846,9 @@ async function captureListing(targetArg, options = {}) {
             }
             throw error;
         }
+        let registeredApp;
         try {
-            await (0, devShared_1.assertAppRegistered)(client, currentUsername, appName);
+            registeredApp = await (0, devShared_1.assertAppRegistered)(client, currentUsername, appName);
         }
         catch (error) {
             if (error instanceof http_1.CLIUnsupportedClientError) {
@@ -866,6 +871,15 @@ async function captureListing(targetArg, options = {}) {
             }
             throw error;
         }
+        let captureSession;
+        try {
+            captureSession = (0, taskCaptureSession_1.resolveTaskCaptureSession)(workspaceAuth, registeredApp);
+        }
+        catch (error) {
+            (0, messages_1.printErrorWithHelp)(error?.message || 'Worker capture session is invalid.', ['Run this command from the active worker task workspace.'], { command: 'project capture' });
+            process.exitCode = 1;
+            return;
+        }
         const entryLabel = (0, node_path_1.relative)(process.cwd(), resolvedTarget.htmlPath) || resolvedTarget.htmlPath;
         console.log(`[listing] Preparing ${entryLabel} for ${env} (${appTypeSlug}).`);
         const taskLookup = (0, catalogue_1.findAppTaskByFile)(resolvedTarget.htmlPath);
@@ -960,9 +974,11 @@ async function captureListing(targetArg, options = {}) {
                 appName,
                 routeSegment,
                 localDevPort,
+                captureSession,
             });
             const frameUrlObject = new URL(frameUrl);
-            console.log(`[listing] Opening ${frameUrl}`);
+            const reportFrameUrl = (0, appUrls_1.redactTaskCaptureSession)(frameUrl);
+            console.log(`[listing] Opening ${reportFrameUrl}`);
             const shouldExportPreviewAudio = parsedOptions.audio && routeSegment === 'dev-preview';
             const surfaces = resolvedTarget.surfaceTargets.list;
             const useSurfacePrefix = surfaces.length > 1;
@@ -1026,7 +1042,7 @@ async function captureListing(targetArg, options = {}) {
                     capturedSurfaces.push(surface);
                     captures.push({
                         surface,
-                        targetUrl: frameUrl,
+                        targetUrl: reportFrameUrl,
                         command: {
                             durationSeconds: parsedOptions.durationSeconds,
                             width: dimensions.width,

package/dist/commands/check.js

@@ -11,6 +11,7 @@ const http_1 = require("../http");
 const messages_1 = require("../messages");
 const loadCheck_1 = require("../apps/loadCheck");
 const devShared_1 = require("./devShared");
+const taskCaptureSession_1 = require("./taskCaptureSession");
 function resolveProjectCheckTarget(targetArg, appOption) {
     try {
         return (0, devShared_1.resolveDevTarget)(targetArg, appOption);
@@ -99,36 +100,39 @@ async function check(targetArg, options = {}) {
     }
     const screenshotPath = options.screenshot?.trim() || defaultProjectCheckScreenshotPath(appName);
     const workspacePath = resolvedTarget.cataloguePath ?? (0, node_path_1.dirname)(filePath);
-    await (0, commandContext_1.withEnvironment)('project check', 'Checking the Playdrop hosted game shell', async ({ client, env, envConfig, account, token }) => {
-        let currentUsername = account?.username?.trim() ?? '';
-        if (!currentUsername) {
-            try {
-                currentUsername = await (0, devShared_1.fetchDevUsername)(client);
+    await (0, commandContext_1.withEnvironment)('project check', 'Checking the Playdrop hosted game shell', async ({ client, env, envConfig, account, token, workspaceAuth }) => {
+        let currentUsername = '';
+        try {
+            currentUsername = await (0, devShared_1.resolveDevCreatorUsername)({
+                client,
+                workspaceOwnerUsername: workspaceAuth?.config.ownerUsername,
+                accountUsername: account?.username,
+            });
+        }
+        catch (error) {
+            if (error instanceof http_1.CLIUnsupportedClientError) {
+                return;
+            }
+            if (error instanceof types_1.UnsupportedClientError) {
+                (0, http_1.handleUnsupportedError)(error, 'Authentication');
+                process.exitCode = 1;
+                return;
+            }
+            if (error instanceof types_1.ApiError) {
+                (0, messages_1.printErrorWithHelp)(`Could not fetch your account (status ${error.status}).`, ['Run "playdrop auth login" to refresh your session.'], { command: 'project check' });
+                process.exitCode = 1;
+                return;
             }
-            catch (error) {
-                if (error instanceof http_1.CLIUnsupportedClientError) {
-                    return;
-                }
-                if (error instanceof types_1.UnsupportedClientError) {
-                    (0, http_1.handleUnsupportedError)(error, 'Authentication');
-                    process.exitCode = 1;
-                    return;
-                }
-                if (error instanceof types_1.ApiError) {
-                    (0, messages_1.printErrorWithHelp)(`Could not fetch your account (status ${error.status}).`, ['Run "playdrop auth login" to refresh your session.'], { command: 'project check' });
-                    process.exitCode = 1;
-                    return;
-                }
-                if ((0, devShared_1.isNetworkError)(error)) {
-                    (0, messages_1.printNetworkIssue)('Could not reach the Playdrop API to resolve your account.', 'project check');
-                    process.exitCode = 1;
-                    return;
-                }
-                throw error;
+            if ((0, devShared_1.isNetworkError)(error)) {
+                (0, messages_1.printNetworkIssue)('Could not reach the Playdrop API to resolve your account.', 'project check');
+                process.exitCode = 1;
+                return;
             }
+            throw error;
         }
+        let registeredApp;
         try {
-            await (0, devShared_1.assertAppRegistered)(client, currentUsername, appName);
+            registeredApp = await (0, devShared_1.assertAppRegistered)(client, currentUsername, appName);
         }
         catch (error) {
             if (error instanceof http_1.CLIUnsupportedClientError) {
@@ -151,6 +155,15 @@ async function check(targetArg, options = {}) {
             }
             throw error;
         }
+        let captureSession;
+        try {
+            captureSession = (0, taskCaptureSession_1.resolveTaskCaptureSession)(workspaceAuth, registeredApp);
+        }
+        catch (error) {
+            (0, messages_1.printErrorWithHelp)(error?.message || 'Worker capture session is invalid.', ['Run this command from the active worker task workspace.'], { command: 'project check' });
+            process.exitCode = 1;
+            return;
+        }
         const projectInfo = (0, devShared_1.findProjectInfo)(filePath);
         const devScriptAvailable = Boolean(projectInfo.projectDir
             && projectInfo.packageJson
@@ -172,6 +185,7 @@ async function check(targetArg, options = {}) {
             timeoutMs,
             token,
             currentUser: null,
+            captureSession,
             screenshotPath,
             actions,
         });

package/dist/commands/create.js

@@ -19,7 +19,10 @@ const clientInfo_1 = require("../clientInfo");
 const commandContext_1 = require("../commandContext");
 const http_1 = require("../http");
 const messages_1 = require("../messages");
+const loadCheck_1 = require("../apps/loadCheck");
+const devShared_1 = require("./devShared");
 const init_1 = require("./init");
+const taskCaptureSession_1 = require("./taskCaptureSession");
 const CATALOGUE_FILENAME = 'catalogue.json';
 const LEGACY_CATALOGUE_VERSION_KEY = ['schema', 'Version'].join('');
 const ALLOWED_CATALOGUE_TOP_LEVEL_KEYS = new Set(['apps', 'assetSpecs', 'assets', 'assetPacks']);
@@ -1420,6 +1423,19 @@ async function create(name, options = {}) {
         }
         registrationTask = selectedTask;
     }
+    let dependenciesInstalled = false;
+    if (!reuseExistingApp
+        && projectDir
+        && packageJsonPath
+        && (ctx.workspaceAuth?.config.taskId || ctx.workspaceAuth?.config.taskToken)) {
+        console.log(`Installing dependencies for worker shell preflight in ${(0, node_path_1.relative)(process.cwd(), projectDir) || projectDir}.`);
+        dependenciesInstalled = runNpmInstall(projectDir);
+        if (!dependenciesInstalled) {
+            (0, messages_1.printErrorWithHelp)('Worker project dependency installation failed.', ['Fix the template dependencies before retrying the task.'], { command: 'project create app' });
+            process.exitCode = 1;
+            return;
+        }
+    }
     if (registrationTask) {
         const metadataWarning = (0, catalogue_1.formatMissingMetadataWarnings)(registrationTask);
         if (metadataWarning) {
@@ -1542,12 +1558,41 @@ async function create(name, options = {}) {
                 throw error;
             }
         }
+        if (ctx.workspaceAuth?.config.taskId || ctx.workspaceAuth?.config.taskToken) {
+            try {
+                const registeredApp = await (0, devShared_1.assertAppRegistered)(client, creatorUsername, name);
+                const captureSession = (0, taskCaptureSession_1.resolveTaskCaptureSession)(ctx.workspaceAuth, registeredApp);
+                if (!captureSession) {
+                    throw new Error('worker_capture_session_missing');
+                }
+                console.log(`Running worker shell preflight for ${creatorUsername}/${name}.`);
+                const preflight = await (0, loadCheck_1.runLocalHostedLoadCheck)({
+                    client,
+                    apiBase: ctx.envConfig.apiBase,
+                    webBase: ctx.envConfig.webBase,
+                    creatorUsername,
+                    task: registrationTask,
+                    captureSession,
+                    timeoutMs: 15000,
+                });
+                if (preflight.status !== 'PASSED') {
+                    (0, messages_1.printErrorWithHelp)((0, loadCheck_1.formatHostedLoadCheckFailure)(name, preflight, 'local'), ['Fix the worker shell or capture authorization before implementing the game.'], { command: 'project create app' });
+                    process.exitCode = 1;
+                    return;
+                }
+                console.log(`Worker shell preflight passed for ${creatorUsername}/${name}.`);
+            }
+            catch (error) {
+                (0, messages_1.printErrorWithHelp)(`Worker shell preflight failed: ${error?.message || 'unknown_error'}`, ['Fix the worker shell or capture authorization before implementing the game.'], { command: 'project create app' });
+                process.exitCode = 1;
+                return;
+            }
+        }
     }
     const projectDirLabel = projectDir ? ((0, node_path_1.relative)(process.cwd(), projectDir) || projectDir) : null;
     const entryPointLabel = (0, node_path_1.relative)(process.cwd(), htmlFilePath) || (0, node_path_1.basename)(htmlFilePath);
     const hasPackageJson = Boolean(packageJsonPath);
-    let dependenciesInstalled = false;
-    if (!reuseExistingApp && projectDir && packageJsonPath && node_process_1.stdin.isTTY && node_process_1.stdout.isTTY) {
+    if (!dependenciesInstalled && !reuseExistingApp && projectDir && packageJsonPath && node_process_1.stdin.isTTY && node_process_1.stdout.isTTY) {
         const accepted = await promptInstallDependencies(projectDir);
         if (accepted) {
             const success = runNpmInstall(projectDir);

package/dist/commands/devShared.d.ts

@@ -16,6 +16,11 @@ export declare function createDevError(code: string, message: string): Error;
 export declare function isNetworkError(error: unknown): boolean;
 export declare function fetchDevUser(client: ApiClient): Promise<UserResponse>;
 export declare function fetchDevUsername(client: ApiClient): Promise<string>;
+export declare function resolveDevCreatorUsername(input: {
+    client: ApiClient;
+    workspaceOwnerUsername?: string | null;
+    accountUsername?: string | null;
+}): Promise<string>;
 export declare function assertAppRegistered(client: ApiClient, creatorUsername: string, appName: string): Promise<AppResponse>;
 export declare function resolveDevTarget(targetArg: string | undefined, appOption: string | undefined): ResolvedDevTarget;
 export declare function findProjectInfo(htmlPath: string): ProjectInfo;

package/dist/commands/devShared.js

@@ -4,6 +4,7 @@ exports.createDevError = createDevError;
 exports.isNetworkError = isNetworkError;
 exports.fetchDevUser = fetchDevUser;
 exports.fetchDevUsername = fetchDevUsername;
+exports.resolveDevCreatorUsername = resolveDevCreatorUsername;
 exports.assertAppRegistered = assertAppRegistered;
 exports.resolveDevTarget = resolveDevTarget;
 exports.findProjectInfo = findProjectInfo;
@@ -54,6 +55,14 @@ async function fetchDevUsername(client) {
     const user = await fetchDevUser(client);
     return user.username;
 }
+async function resolveDevCreatorUsername(input) {
+    const workspaceOwnerUsername = input.workspaceOwnerUsername?.trim() ?? '';
+    if (workspaceOwnerUsername) {
+        return workspaceOwnerUsername;
+    }
+    const accountUsername = input.accountUsername?.trim() ?? '';
+    return accountUsername || await fetchDevUsername(input.client);
+}
 async function assertAppRegistered(client, creatorUsername, appName) {
     const response = await client.fetchAppBySlug(creatorUsername, appName);
     if (!response?.app) {