@playdrop/playdrop-cli 0.12.32 → 0.12.34

package/config/client-meta.json

@@ -1,6 +1,6 @@
 {
-  "version": "0.12.8",
-  "build": 36,
+  "version": "0.12.9",
+  "build": 38,
   "runtimeSdkVersion": "0.12.5",
   "runtimeSdkBuild": 2,
   "clients": {

package/dist/apiClient.js

@@ -14,14 +14,29 @@ function readPositiveIntEnv(name) {
     const parsed = Number(raw);
     return Number.isInteger(parsed) && parsed > 0 ? parsed : null;
 }
+function readWorkerTaskTokenEnv() {
+    if (process.env.PLAYDROP_WORKER_CONTEXT !== '1') {
+        return '';
+    }
+    const token = process.env.PLAYDROP_WORKER_TASK_TOKEN?.trim() ?? '';
+    if (!token) {
+        throw new Error('worker_task_token_missing');
+    }
+    return token;
+}
 function createCliClientHeaders(input) {
     const onBehalfCreatorUsername = input.onBehalfCreatorUsername;
     const creatorUsername = typeof onBehalfCreatorUsername === 'string'
         ? onBehalfCreatorUsername.trim()
         : '';
-    const agentTaskToken = typeof input.agentTaskToken === 'string'
+    const explicitAgentTaskToken = typeof input.agentTaskToken === 'string'
         ? input.agentTaskToken.trim()
         : '';
+    const workerTaskToken = readWorkerTaskTokenEnv();
+    if (explicitAgentTaskToken && workerTaskToken && explicitAgentTaskToken !== workerTaskToken) {
+        throw new Error('worker_task_token_mismatch');
+    }
+    const agentTaskToken = explicitAgentTaskToken || workerTaskToken;
     const agentTaskId = Number.isInteger(input.agentTaskId) && Number(input.agentTaskId) > 0
         ? Number(input.agentTaskId)
         : readPositiveIntEnv('PLAYDROP_WORKER_TASK_ID');

package/dist/commandContext.js

@@ -112,6 +112,9 @@ async function loadWorkspaceAwareConfig(command, options) {
         ?? (process.env.PLAYDROP_WORKER_CONTEXT === '1' ? process.cwd() : undefined);
     try {
         workspaceAuth = workspacePath ? (0, workspaceAuth_1.findWorkspaceAuthConfig)(workspacePath) : null;
+        if (!workspaceAuth && workspacePath && process.env.PLAYDROP_WORKER_CONTEXT === '1') {
+            workspaceAuth = (0, workspaceAuth_1.findWorkerTaskWorkspaceAuthConfig)(workspacePath);
+        }
     }
     catch (error) {
         if (error instanceof workspaceAuth_1.WorkspaceAuthConfigError) {

package/dist/commands/upload.js

@@ -1224,6 +1224,8 @@ function resolveWorkerPlaydropAssetRequirement(value) {
 }
 const WORKER_SUPERVISOR_SOURCE_EXCLUDES = [
     'PLAYDROP_TASK.md',
+    'AGENTS.md',
+    'CLAUDE.md',
     '.playdrop/',
     '.playdrop-task-events/',
     'bin/playdrop',

package/dist/commands/worker/runtime.d.ts

@@ -61,6 +61,7 @@ export declare function buildCodexExecArgs(input: {
     reasoningEffort: string;
     networkAccess: boolean;
     sandboxMode?: CodexSandboxMode;
+    imagePaths?: string[];
 }): string[];
 export type CodexSandboxMode = 'danger-full-access' | 'workspace-write' | 'read-only';
 export declare function readCodexSandboxMode(env?: NodeJS.ProcessEnv): CodexSandboxMode;
@@ -89,6 +90,7 @@ export declare function buildClaudeDeniedPermissionRules(denyReadRoots?: string[
 export declare function buildWorkerChildEnv(input: {
     binDir: string;
     taskId: number;
+    taskToken: string;
     attempt: number;
     envName: string;
     eventDir?: string;

package/dist/commands/worker/runtime.js

@@ -456,8 +456,6 @@ function buildCodexExecArgs(input) {
         'exec',
         '--json',
         '--ephemeral',
-        '--ignore-user-config',
-        '--ignore-rules',
         '--sandbox',
         sandboxMode,
         '--cd',
@@ -467,11 +465,14 @@ function buildCodexExecArgs(input) {
         input.model,
         '-c',
         `model_reasoning_effort="${input.reasoningEffort}"`,
-        '-',
     ];
     if (sandboxMode === 'workspace-write') {
-        args.splice(args.length - 3, 0, '-c', `sandbox_workspace_write.network_access=${input.networkAccess ? 'true' : 'false'}`);
+        args.push('-c', `sandbox_workspace_write.network_access=${input.networkAccess ? 'true' : 'false'}`);
     }
+    for (const imagePath of input.imagePaths ?? []) {
+        args.push('--image', imagePath);
+    }
+    args.push('-');
     return args;
 }
 function readCodexSandboxMode(env = process.env) {
@@ -516,15 +517,13 @@ function buildClaudeExecArgs(input) {
         : input.playwrightMcp
             ? [...allowedPermissionRules, PLAYWRIGHT_MCP_ALLOWED_TOOL_RULE]
             : allowedPermissionRules;
-    // --safe-mode disables ALL MCP servers, including ones passed explicitly via --mcp-config
-    // (verified empirically on claude 2.1.207). Playwright judge sessions therefore drop it:
-    // their CLAUDE_CONFIG_DIR is an isolated per-task directory with no user customizations,
-    // so the surface --safe-mode guards is already empty, while --strict-mcp-config and the
-    // permission rules below stay in force.
     const args = [
         '-p',
-        ...(input.playwrightMcp ? [] : ['--safe-mode']),
         '--strict-mcp-config',
+        '--setting-sources',
+        'project',
+        '--input-format',
+        'stream-json',
         '--model',
         model,
         '--output-format',
@@ -745,10 +744,15 @@ function buildWorkerChildEnv(input) {
         }
     }
     child.PLAYDROP_WORKER_CONTEXT = '1';
+    const taskToken = input.taskToken.trim();
+    if (!taskToken) {
+        throw new Error('invalid_worker_task_token');
+    }
     if (!Number.isInteger(input.attempt) || input.attempt <= 0) {
         throw new Error('invalid_worker_task_attempt');
     }
     child.PLAYDROP_WORKER_TASK_ID = String(input.taskId);
+    child.PLAYDROP_WORKER_TASK_TOKEN = taskToken;
     child.PLAYDROP_WORKER_TASK_ATTEMPT = String(input.attempt);
     if (input.devPort !== undefined) {
         if (!Number.isInteger(input.devPort) || input.devPort <= 0 || input.devPort > 65535) {

package/dist/commands/worker.d.ts

@@ -1,5 +1,5 @@
 import type { ApiClient } from '@playdrop/api-client';
-import { type AgentExecutionTarget, type AgentRuntime, type AgentTaskKind, type AgentTaskNextStepSuggestion, type AgentTaskResponse, type AgentWorkerCapabilities, type AgentWorkerResponse, type AgentWorkerUpdatePolicyResponse, type WorkerAgentTaskAssignmentResponse, type WorkerAgentTaskBaseSourceResponse, type WorkerAgentTaskWorkspaceFileResponse, type WorkerClaimAgentTaskResponse } from '@playdrop/types';
+import { type AgentExecutionTarget, type AgentRuntime, type AgentTaskNextStepSuggestion, type AgentTaskResponse, type AgentWorkerCapabilities, type AgentWorkerResponse, type AgentWorkerUpdatePolicyResponse, type WorkerTaskAssignmentV2, type WorkerTaskPluginV2, type WorkerClaimAgentTaskResponse } from '@playdrop/types';
 import { loadConfig } from '../config';
 import { type WorkerPlaydropAssetRequirement } from './upload';
 import { type LoggedProcessResult, type LoggedProcessTranscriptChunk } from './worker/runtime';
@@ -141,7 +141,7 @@ export declare function allocateWorkerDevPort(input: {
 }): number;
 export declare function isWorkerContextCommandAllowed(argv: string[]): boolean;
 export declare function resolveWorkerExecutionTargetFromRole(role: unknown): AgentExecutionTarget;
-export declare function resolveWorkerClaimTaskAssignment(claim: WorkerClaimAgentTaskResponse): WorkerAgentTaskAssignmentResponse | null;
+export declare function normalizeWorkerTaskAssignmentV2(claim: WorkerClaimAgentTaskResponse): WorkerTaskAssignmentV2 | null;
 export declare function nextClaimBackoffMs(currentMs: number): number;
 export declare function claimBackoffDelayMs(currentMs: number, random?: () => number): number;
 export declare function resolveWorkerHomeDir(): string;
@@ -171,20 +171,11 @@ export declare function assertTaskUploadResultMatchesContext(input: {
         creatorUsername: string;
     };
 }): void;
-export declare function stageAssignmentWorkspaceFiles(workspaceDir: string, files: readonly WorkerAgentTaskWorkspaceFileResponse[]): Promise<void>;
-export declare function stagePlaydropPluginReferences(input: {
-    workspaceDir: string;
-    pluginRoot: string;
-    kind: AgentTaskKind;
-}): Promise<string[]>;
-export declare function stageCodexTaskSkills(input: {
-    workspaceDir: string;
-    stagedPluginPaths: readonly string[];
-}): Promise<string[]>;
+export declare function stageAssignmentWorkspaceV2(workspaceDir: string, workspace: WorkerTaskAssignmentV2['workspace']): Promise<void>;
 export declare function assertAssignmentPluginBundleExtractionBounds(buffer: Buffer): void;
 export declare function stageAssignmentPluginBundle(input: {
     workspaceDir: string;
-    pluginBundle: NonNullable<WorkerAgentTaskAssignmentResponse['pluginBundle']>;
+    pluginBundle: WorkerTaskPluginV2;
 }): Promise<string>;
 export declare function resolveDevPluginWorkingTree(input: {
     workingTree?: string;
@@ -224,25 +215,13 @@ export declare function buildWorkerClaimBody(input: {
     capabilities: AgentWorkerCapabilities;
     runningTaskCount?: number;
 }): {
+    protocolVersion: 2;
     workerKey: string;
     capabilities: AgentWorkerCapabilities;
 };
-export type WorkerBaseApp = {
-    appName: string;
-    version: string;
-    appId: number;
-    appVersionId: number;
-};
-export declare function resolveWorkerBaseSource(value: WorkerAgentTaskBaseSourceResponse | null | undefined): WorkerBaseApp;
 export declare function extractZipArchive(zipBuffer: Uint8Array, targetDir: string): string[];
-export declare function readWorkerProjectVersion(projectDir: string, appName: string): string;
 export declare function buildCataloguePreviewPayload(cataloguePath: string, workspaceDir?: string): Record<string, unknown>;
-export declare function assertWorkerProjectVersionBumped(input: {
-    baseVersion: string;
-    projectVersion: string;
-    appName: string;
-}): void;
-export declare function removeStaleWorkerControlFilesFromBaseSource(stagingDir: string): Promise<void>;
+export declare function removeStaleWorkerControlFiles(stagingDir: string): Promise<void>;
 export declare function resolveCodexModel(model: string, reasoningEffortOverride?: string | null): WorkerCodexModel;
 export declare function resolveClaudeModel(model: string, reasoningEffortOverride?: string | null): WorkerClaudeModel;
 export declare function prepareCodexRunHomes(input: {
@@ -351,12 +330,12 @@ export declare function assertLaunchAgentPlistCompatible(input: {
 }): void;
 export declare function showWorkerStatus(options?: WorkerStatusOptions): Promise<WorkerStatusPayload>;
 export declare function setupWorker(options?: WorkerSetupOptions): Promise<void>;
-export declare function instrumentTaskChromeTitleMatchers(assignment: WorkerAgentTaskAssignmentResponse): string[];
+export declare function instrumentTaskChromeTitleMatchers(assignment: WorkerTaskAssignmentV2): string[];
 type InstrumentBrowserHygieneRunner = (command: string, args: string[]) => Promise<{
     stdout: string;
     stderr: string;
 }>;
-export declare function enforceInstrumentBrowserHygiene(assignment: WorkerAgentTaskAssignmentResponse, options?: {
+export declare function enforceInstrumentBrowserHygiene(assignment: WorkerTaskAssignmentV2, options?: {
     platform?: NodeJS.Platform;
     runner?: InstrumentBrowserHygieneRunner;
 }): Promise<{
@@ -365,6 +344,7 @@ export declare function enforceInstrumentBrowserHygiene(assignment: WorkerAgentT
 }>;
 export declare function startWorker(options?: WorkerStartOptions): Promise<void>;
 export declare function reportTask(options: TaskReportOptions): Promise<void>;
+export declare function showTaskContext(): void;
 export declare function reportCatalogueTask(options: TaskCatalogueReportOptions): Promise<void>;
 export declare function uploadTask(options?: TaskUploadOptions): Promise<void>;
 export declare function claimSlugTask(options: TaskClaimSlugOptions): Promise<void>;