feat(store-screenshots): add App Store / Google Play screenshot workspace (phase 1)

.gitignore

@@ -108,3 +108,9 @@ deploy/agent-bins/
 # Local agent worktrees (must stay git-ignored so pnpm guard does not scan them)
 .slim/worktrees/
 .slim/worktrees.json
+
+# Local brainstorming companion state and mockups.
+.superpowers/
+
+# Local implementation worktrees.
+.worktrees/

apps/daemon/package.json

@@ -33,6 +33,7 @@
     "typecheck": "pnpm --filter @open-design/contracts build && pnpm --filter @open-design/registry-protocol build && tsc -p tsconfig.json --noEmit && tsc -p tsconfig.tests.json --noEmit"
   },
   "dependencies": {
+    "@launch-studio/store-screenshot": "workspace:*",
     "@modelcontextprotocol/sdk": "1.29.0",
     "@open-design/agui-adapter": "workspace:*",
     "@open-design/contracts": "workspace:*",
@@ -58,8 +59,10 @@
     "posthog-node": "5.34.6",
     "pptxgenjs": "4.0.1",
     "prom-client": "15.1.3",
+    "sharp": "0.34.5",
     "tar": "7.5.15",
-    "undici": "7.25.0"
+    "undici": "7.25.0",
+    "zod-v3": "npm:zod@3.25.76"
   },
   "devDependencies": {
     "@types/better-sqlite3": "7.6.13",

apps/daemon/src/cli.ts

@@ -14,6 +14,7 @@ import { BRAND_USAGE, isBrandHelpArg } from './cli-help/index.js';
 import { parseDesignSystemRenameArgs } from './design-systems/rename-args.js';
 import { runLiveArtifactsToolCli } from './tools-live-artifacts-cli.js';
 import { splitResearchSubcommand } from './research/cli-args.js';
+import { runStoreScreenshotCli } from './store-screenshots/cli.js';
 import { resolveDaemonUrl } from './daemon-url.js';
 import { requestJsonIpc } from '@open-design/sidecar';
 import { SIDECAR_ENV, SIDECAR_MESSAGES } from '@open-design/sidecar-proto';
@@ -408,6 +409,7 @@ const SUBCOMMAND_MAP = {
   config: runConfig,
   library: runLibrary,
   figma: runFigma,
+  'store-screenshot': runStoreScreenshot,
 };
 
 const EXPORT_STRING_FLAGS = new Set([
@@ -711,6 +713,10 @@ function printRootHelp() {
       schedule, trigger, or harvest results from a routine without
       opening the web UI.
 
+  od store-screenshot <create|upload|generate|validate|export|status|versions|restore> [args]
+      Create, generate, validate, export, and version store screenshots
+      through the same daemon API used by the web UI.
+
   od message-center <list|read|read-all> [args]
       Read and acknowledge message-center inbox items through the same
       daemon endpoints the bell UI uses.
@@ -1403,6 +1409,21 @@ async function runArtifacts(args) {
   process.exit(exitCode);
 }
 
+async function runStoreScreenshot(args) {
+  const { exitCode } = await runStoreScreenshotCli(args, {
+    onHttpFailure: structuredHttpFailure,
+    onNetworkFailure: (error, baseUrl) => {
+      exitWithStructuredError({
+        code: 'daemon-not-running',
+        message: `failed to reach daemon at ${baseUrl}: ${
+          error instanceof Error ? error.message : String(error)
+        }`,
+      });
+    },
+  });
+  process.exit(exitCode);
+}
+
 function printResearchHelp() {
   console.log(`Usage:
   od research search --query <text> [--max-sources 5] [--daemon-url <url>]

apps/daemon/src/db.ts

@@ -24,6 +24,7 @@ import { migrateCritique } from './critique/persistence.js';
 import { migrateMediaTasks } from './media/tasks.js';
 import { migrateLibrary } from './library-store.js';
 import { migratePlugins } from './plugins/persistence.js';
+import { migrateStoreScreenshots } from './store-screenshots/persistence.js';
 
 type SqliteDb = Database.Database;
 type DbRow = Record<string, any>;
@@ -542,6 +543,7 @@ function migrate(db: SqliteDb): void {
   migrateMediaTasks(db);
   migrateLibrary(db);
   migratePlugins(db);
+  migrateStoreScreenshots(db);
   migrateCollabSyncSnapshots(db);
   migrateCommentRelayOutbox(db);
 }

apps/daemon/src/memory-llm.ts

@@ -949,17 +949,6 @@ function extractJsonEventText(kind, raw, agentName) {
 }
 
 async function callLocalCli(provider, system, user, options) {
-  if (typeof options?.localCliRunner === 'function') {
-    return options.localCliRunner({
-      agentId: provider.agentId,
-      model: provider.model,
-      system,
-      user,
-      projectRoot: options?.projectRoot ?? null,
-      dataDir: options?.dataDir ?? null,
-    });
-  }
-
   const def = getAgentDef(provider.agentId);
   if (!def) {
     throw new Error(`Local CLI agent "${provider.agentId}" is not installed`);
@@ -972,6 +961,32 @@ async function callLocalCli(provider, system, user, options) {
   } catch {
     configuredAgentEnv = {};
   }
+  const configuredSecrets = Object.entries({
+    ...process.env,
+    ...configuredAgentEnv,
+  })
+    .filter(([key, value]) => (
+      /(API_KEY|AUTH_TOKEN|RUNTIME_KEY|ACCESS_TOKEN|SECRET_ACCESS_KEY|SECRET|TOKEN|PASSWORD|PASSWD|CREDENTIALS?|PRIVATE_KEY)$/i.test(key)
+      && typeof value === 'string'
+      && value.length > 0
+    ))
+    .map(([, value]) => value);
+
+  if (typeof options?.localCliRunner === 'function') {
+    try {
+      const text = await options.localCliRunner({
+        agentId: provider.agentId,
+        model: provider.model,
+        system,
+        user,
+        projectRoot: options?.projectRoot ?? null,
+        dataDir: options?.dataDir ?? null,
+      });
+      return { text, sensitiveValues: configuredSecrets };
+    } catch (error) {
+      throw redactProviderError(error, provider, configuredSecrets);
+    }
+  }
 
   const launch = resolveAgentLaunch(def, configuredAgentEnv);
   if (!launch?.launchPath) {
@@ -990,7 +1005,7 @@ async function callLocalCli(provider, system, user, options) {
   const prompt = [
     system,
     '',
-    'You are running as a background memory extractor. Do not use tools. Return strict JSON only.',
+    'You are running as a background structured-JSON task. Do not use tools. Return strict JSON only.',
     '',
     user,
   ].join('\n');
@@ -1093,15 +1108,19 @@ async function callLocalCli(provider, system, user, options) {
         try {
           text = parseStdout(stdout);
         } catch (err) {
-          finish(err);
+          finish(redactProviderError(err, provider, configuredSecrets));
           return;
         }
         if (text) {
-          finish(null, text);
+          finish(null, { text, sensitiveValues: configuredSecrets });
           return;
         }
       }
-      const detail = (stderr.trim() || stdout.trim() || 'no output').slice(0, 1000);
+      const rawDetail = (stderr.trim() || stdout.trim() || 'no output').slice(0, 1000);
+      const detail = configuredSecrets.reduce(
+        (text, secret) => text.split(secret).join('[REDACTED]'),
+        rawDetail,
+      );
       const status = signal ? `signal ${signal}` : `exit ${code}`;
       finish(new Error(`${def.name} CLI ${status}: ${detail}`));
     });
@@ -1112,6 +1131,72 @@ async function callLocalCli(provider, system, user, options) {
   });
 }
 
+function redactProviderError(error, provider, sensitiveValues = []) {
+  const raw = error?.message || String(error);
+  const apiKey =
+    typeof provider?.apiKey === 'string' ? provider.apiKey.trim() : '';
+  const exactValues = [apiKey, ...sensitiveValues].filter(Boolean);
+  const redacted = exactValues.reduce(
+    (text, value) => text.split(value).join('[REDACTED]'),
+    raw,
+  )
+    .replace(
+      /((?:api[_-]?key|auth[_-]?token|access[_-]?token|authorization)\s*[:=]\s*)[^\s,;]+/gi,
+      '$1[REDACTED]',
+    )
+    .replace(/\bBearer\s+\S+/gi, 'Bearer [REDACTED]')
+    .replace(/\bsk-[A-Za-z0-9_-]{8,}\b/g, '[REDACTED]');
+  return new Error(redacted);
+}
+
+// Shared provider transport used by memory extraction and other daemon-owned
+// strict-JSON tasks. Provider selection deliberately reuses pickProvider so
+// Local CLI, chat BYOK, env, and media-config precedence cannot drift.
+export async function generateConfiguredJsonTextWithMetadata(request, options = {}) {
+  const projectRoot = options?.projectRoot ?? null;
+  const dataDir = options?.dataDir ?? null;
+  const provider = options?.provider ?? await pickProvider(
+    projectRoot,
+    options?.useMemoryConfig === true ? dataDir : null,
+    request?.chatAgentId ?? options?.chatAgentId ?? null,
+    options?.chatProvider ?? null,
+    options?.chatModel ?? null,
+  );
+  if (!provider) return null;
+  try {
+    if (provider.transport === 'chat-cli') {
+      return await callLocalCli(provider, request.system, request.user, {
+        dataDir,
+        projectRoot,
+        localCliRunner: options?.localCliRunner,
+      });
+    }
+    let text;
+    if (provider.kind === 'anthropic') {
+      text = await callAnthropic(provider, request.system, request.user);
+    } else if (provider.kind === 'azure') {
+      text = await callAzure(provider, request.system, request.user);
+    } else if (provider.kind === 'google') {
+      text = await callGoogle(provider, request.system, request.user);
+    } else {
+      text = await callOpenAI(provider, request.system, request.user);
+    }
+    return {
+      text,
+      sensitiveValues: typeof provider.apiKey === 'string' && provider.apiKey
+        ? [provider.apiKey]
+        : [],
+    };
+  } catch (error) {
+    throw redactProviderError(error, provider);
+  }
+}
+
+export async function generateConfiguredJsonText(request, options = {}) {
+  const result = await generateConfiguredJsonTextWithMetadata(request, options);
+  return result?.text ?? null;
+}
+
 // Tolerant JSON parse — the model occasionally wraps output in ```json
 // fences even when told not to. Strip those defensively.
 function parseEntries(rawText) {
@@ -1312,24 +1397,19 @@ async function collectProposedEntries(dataDir, input, options) {
 
   let raw = '';
   try {
-    if (provider.transport === 'chat-cli') {
-      raw = await callLocalCli(provider, systemPrompt, userPayload, {
+    raw = await generateConfiguredJsonText(
+      {
+        system: systemPrompt,
+        user: userPayload,
+        chatAgentId,
+      },
+      {
+        provider,
         dataDir,
         projectRoot,
         localCliRunner: options?.localCliRunner,
-      });
-    } else if (provider.kind === 'anthropic') {
-      raw = await callAnthropic(provider, systemPrompt, userPayload);
-    } else if (provider.kind === 'azure') {
-      raw = await callAzure(provider, systemPrompt, userPayload);
-    } else if (provider.kind === 'google') {
-      raw = await callGoogle(provider, systemPrompt, userPayload);
-    } else {
-      // openai or ollama — both speak the OpenAI chat-completions
-      // wire shape, so callOpenAI handles them with just a different
-      // base URL.
-      raw = await callOpenAI(provider, systemPrompt, userPayload);
-    }
+      },
+    );
   } catch (err) {
     // err.message is already pre-formatted by describeFetchError() when
     // the call layer caught a network error. For HTTP-level failures

apps/daemon/src/route-context-contract.ts

@@ -17,6 +17,7 @@ import type { RegisterRoutineRoutesDeps } from './routes/routine.js';
 import type { RegisterRunRoutesDeps } from './routes/runs.js';
 import type { RegisterSocialShareRoutesDeps } from './routes/social-share.js';
 import type { RegisterStaticResourceRoutesDeps } from './routes/static-resource.js';
+import type { RegisterStoreScreenshotRoutesDeps } from './routes/store-screenshots.js';
 import type { RegisterVelaRoutesDeps } from './routes/vela.js';
 import type { RegisterXaiRoutesDeps } from './routes/xai.js';
 
@@ -45,6 +46,7 @@ type AllRegisteredRouteDeps =
   & RegisterRunRoutesDeps
   & RegisterSocialShareRoutesDeps
   & RegisterStaticResourceRoutesDeps
+  & RegisterStoreScreenshotRoutesDeps
   & RegisterVelaRoutesDeps
   & RegisterXaiRoutesDeps;