@joystack/cli 0.1.47 → 0.1.49

package/CHANGELOG.md

@@ -14,6 +14,68 @@ Versions: [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
 ## [Unreleased]
 
+## [0.1.49] - 2026-10-10
+
+### Added
+
+- `joystack land <name>` puts a lane's work into your game and removes the
+  lane, from the game folder or from inside the lane. It saves the lane's
+  unsaved work first. When the lane and the game changed the same lines, it
+  stops with the merge in progress and lists the files; once the merge is
+  settled and committed, run it again to remove the lane.
+
+### Changed
+
+- In the Joystack maker, `joystack lane`, `dev`, `publish` and `land` answer
+  for the maker: the folder is already the conversation's lane, its game is
+  already running on the person's page, and publishing does what the page's
+  Publish button does. On your own computer they work as before.
+
+### Fixed
+
+- On Windows, exporting a replay no longer fails now and then with `EPERM`
+  while another program still has the file it just wrote open.
+
+## [0.1.48] - 2026-10-10
+
+### Added
+
+- `joystack publish --open` makes a copy published with `--slug` open to
+  anyone with a Joystack account. Without it, a `--slug` copy (an A/B copy, a
+  review build) opens only for accounts invited to Joystack.
+
+### Changed
+
+- Your game at its own address (`joystack publish` with no `--slug`, or
+  `--slug` set to the game's own name) is open to anyone with a Joystack
+  account, invited or not. A player who is not signed in is asked to sign in
+  first. A game published before this version opens only for invited accounts
+  until you publish it again.
+
+- `joystack dev` reloads the game only when one of the game's own files
+  changes: the files `joystack publish` would upload, plus `package.json`.
+  Notes, tests, agent instructions and anything your `.gitignore` leaves out
+  no longer reload it. A log you write into the game folder used to reload
+  the game over and over until the page stopped loading; with `*.log` in
+  `.gitignore` (new games have it) that can no longer happen.
+- `joystack dev` writes everything it prints to `.joystack/dev/last.log` as
+  well, and names that file when it starts, so its output can be read later
+  without sending it to a file of your own.
+
+### Fixed
+
+- Sessions recorded under `joystack dev` carry the build of the game they ran
+  on. They were stamped with an empty build, because the copy `joystack dev`
+  serves sits in the ignored `.joystack/` folder and every file in it read as
+  ignored.
+- A game folder inside a larger git repository that ignores that folder is
+  published whole. Every file in it used to read as ignored.
+- `joystack create` gives a new game an exact Playwright version (1.64.0)
+  instead of "1.61.1 or any newer 1.x". Every game made on this CLI gets the
+  same Playwright and Chromium, and creating a game no longer downloads a new
+  Chromium each time Playwright publishes a release. Games you already have
+  keep the Playwright they have.
+
 ## [0.1.47] - 2026-10-09
 
 ### Added

package/bin/joystack.mjs

@@ -6,6 +6,8 @@
 import { dev } from '../lib/dev.mjs';
 import { agentSessionFromEnv } from '../lib/agent-session.mjs';
 import { lane } from '../lib/lane.mjs';
+import { land } from '../lib/land.mjs';
+import { MAKER_DEV, MAKER_LANE, makerDraft, makerPublish } from '../lib/maker.mjs';
 import { login, logout, whoami } from '../lib/login.mjs';
 import { publish } from '../lib/publish.mjs';
 import { create } from '../lib/create.mjs';
@@ -38,6 +40,7 @@ Usage:
   joystack assets <id> --sheet  Draw a view sheet of a 3D asset to .joystack/sheets/ (--help: options)
   joystack assets --json [<id>…]  Print each asset's parameters, measured stats and flags as JSON
   joystack lane <name>          Open an isolated copy of the game to experiment in, safely
+  joystack land <name>          Put a lane's work into the game, then remove the lane
   joystack test [aspect]        Run targeted checks (no aspect: conservative full run)
   joystack test --since <base>  Submission: ordinary + triggered extended checks
   joystack test --all           Explicit full audit; add --list to preview selection
@@ -46,9 +49,11 @@ Usage:
   joystack changelog [<v>]      What changed in the engine (default: everything newer than your pin)
   joystack update [--rc <v>]    Move this game to the latest engine release (--rc <v> takes a specific pre-release)
   joystack model bake <glb>     Re-bake a 3D model's server-side hit data now (normally automatic)
-  joystack publish [--slug <s>] [--dev-tools]
-                              Publish this game to <slug>.joystack.games (--slug for an A/B copy;
-                              --dev-tools makes that copy a review build with Tweaks on)
+  joystack publish [--slug <s>] [--dev-tools] [--open]
+                              Publish this game to <slug>.joystack.games, open to anyone with a
+                              Joystack account (--slug for an A/B copy, open only to invited
+                              accounts unless --open; --dev-tools makes that copy a review build
+                              with Tweaks on)
   joystack build-id             The id of this game's code as it is now, with its git commit
   joystack replay list          Every recorded session: when, how long, on what device, which build
   joystack replay export [<id>]  Turn a recorded session into tables you can query (Parquet)
@@ -70,6 +75,10 @@ its own.
 try {
   switch (cmd) {
     case 'dev': {
+      if (makerDraft()) {
+        console.log(MAKER_DEV);
+        break;
+      }
       const handle = await dev({ port: flag('port') ? Number(flag('port')) : undefined, share: rest.includes('--share'), reload: !rest.includes('--no-reload'), agentSession: agentSessionFromEnv() });
       const shutdown = () => {
         handle.stop();
@@ -186,12 +195,24 @@ try {
       break;
     }
     case 'lane': {
+      if (makerDraft()) {
+        console.log(MAKER_LANE);
+        break;
+      }
       const name = rest.find((a) => !a.startsWith('--'));
       if (!name) throw new Error('Name the lane: joystack lane <name>  (e.g. joystack lane judder)');
       const { dir } = await lane(name);
       console.log(`\nWork in it:\n  cd ${dir} && npx joystack dev\n`);
       break;
     }
+    case 'land': {
+      if (makerDraft()) {
+        await makerPublish(makerDraft());
+        break;
+      }
+      await land(rest.find((a) => !a.startsWith('--')));
+      break;
+    }
     case 'setup':
       process.stdout.write(setupGuide());
       break;
@@ -270,7 +291,11 @@ try {
       break;
     }
     case 'publish':
-      await publish({ slug: flag('slug'), devTools: rest.includes('--dev-tools') });
+      if (makerDraft()) {
+        await makerPublish(makerDraft(), { slug: flag('slug') });
+        break;
+      }
+      await publish({ slug: flag('slug'), devTools: rest.includes('--dev-tools'), open: rest.includes('--open') });
       break;
     case 'feedback':
       // Send first, then sync: a report filed this run is already stamped with

package/lib/create.mjs

@@ -65,7 +65,13 @@ const ALLOW_SCRIPTS = { esbuild: true, workerd: true, fsevents: true };
 // devDependencies and the Chromium binary is fetched at create time — a
 // surprise "npm i -D playwright" + browser download mid-build is exactly
 // what create-time provisioning exists to prevent.
-const PLAYWRIGHT_SPEC = '^1.61.1';
+//
+// An exact version, so a game's Playwright, and the Chromium build it needs,
+// changes only when this line does, never when Playwright publishes a release.
+// The maker's machine image carries the Chromium for this version
+// (maker/container/Dockerfile): changing it means rebuilding and redeploying
+// the maker, or every game the maker creates downloads its own Chromium.
+const PLAYWRIGHT_SPEC = '1.64.0';
 
 // The Joystack rules ship as an ESLint config (the scaffold's eslint.config.js,
 // importing the rules from the installed engine), so they squiggle in the

package/lib/dev-log.mjs

@@ -0,0 +1,48 @@
+// `.joystack/dev/last.log`: everything an interactive `joystack dev` prints,
+// written by `joystack dev` itself.
+//
+// An agent runs `joystack dev` in the background and needs its output later.
+// Sending that output to a file of its own puts the file wherever the agent
+// chose, often inside the game folder, where the file is mistaken for part of
+// the game. This file is inside the game's state folder, which nothing treats
+// as the game: no version, no publish, no commit. The game's AGENTS.md tells
+// agents to read it.
+import { appendFileSync, mkdirSync, writeFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { findProject } from './project.mjs';
+import { stateDir } from './legacy-names.mjs';
+
+/**
+ * Starts a fresh log for the game around `cwd`. Returns null when `cwd` is not
+ * in a game (startDev reports that) or the log cannot be written; a dev
+ * server that cannot keep a log still runs.
+ * @returns {{ path: string, write: (line: string) => void, tee: (log: (line: string) => void) => (line: string) => void } | null}
+ */
+export function openDevLog(cwd) {
+  let path;
+  try {
+    const dir = join(stateDir(findProject(cwd).dir), 'dev');
+    mkdirSync(dir, { recursive: true });
+    path = join(dir, 'last.log');
+    writeFileSync(path, '');
+  } catch {
+    return null;
+  }
+  let broken = false;
+  const write = (line) => {
+    if (broken) return;
+    try {
+      appendFileSync(path, `${line}\n`);
+    } catch {
+      broken = true;
+    }
+  };
+  return {
+    path,
+    write,
+    tee: (log) => (line) => {
+      log(line);
+      write(String(line));
+    },
+  };
+}

package/lib/dev.mjs

@@ -23,7 +23,8 @@ import { buildDevRoomServer, DEV_OVERRIDES_DIR } from './room-server.mjs';
 import { createLiveVersions, snapshotFiles } from './live-versions.mjs';
 import { hasDeclaredAssets, assetsPageUrl } from './assets-page.mjs';
 import { openTunnel, shareBanner, engineCanShare } from './share.mjs';
-import { freezeGame, frozenFiles } from './freeze.mjs';
+import { createVersionFiles, freezeGame } from './freeze.mjs';
+import { openDevLog } from './dev-log.mjs';
 import { STATE_DIR_NAMES, readEnv, stateDir } from './legacy-names.mjs';
 
 // The route a room under `joystack dev` answers with the name of the build it
@@ -84,6 +85,12 @@ export async function waitForRoomServer(port, { timeoutMs = 30_000, intervalMs =
 // `share` opens a public link to the stack for testers (share.mjs); `openShare`
 // replaces the tunnel for tests.
 export async function dev(opts = {}) {
+  // An interactive `joystack dev` (watch on, the default) also writes
+  // everything it prints to .joystack/dev/last.log, so an agent that started
+  // it in the background reads its output there instead of sending it to a
+  // file of its own (dev-log.mjs).
+  const devLog = opts.watch === false ? null : openDevLog(opts.cwd ?? process.cwd());
+  if (devLog) opts = { ...opts, log: devLog.tee(opts.log ?? console.log), devLogPath: devLog.path };
   // Whatever startup has made so far, undone if a later step throws: a room
   // build that fails on the creator's code, a port already taken, a tunnel
   // that never opens. A frozen copy of the game is among it.
@@ -94,6 +101,7 @@ export async function dev(opts = {}) {
     for (const fn of undo.reverse()) {
       try { fn(); } catch { /* the original error is the one to report */ }
     }
+    devLog?.write(`joystack dev: ${err?.message ?? err}`);
     throw err;
   }
 }
@@ -102,7 +110,12 @@ export async function dev(opts = {}) {
 // (agent-session.mjs). Only the interactive `joystack dev` and `joystack assets`
 // commands pass one; a stack started by `joystack test` or any other caller has
 // none, so no test run can wake the agent that started it.
-async function startDev({ cwd = process.cwd(), port, noMp = process.env.NO_MP === '1', watch = true, reload = true, share = false, openShare = openTunnel, log = console.log, agentSession = null } = {}, onFailure) {
+//
+// `shareIsOwner` is for a host that serves the share link to the creator
+// alone and keeps everyone else off the dev tools' routes (the Joystack
+// maker): a report sent through the link then counts as one from this
+// machine, so it can wake the agent and read its reply.
+async function startDev({ cwd = process.cwd(), port, noMp = process.env.NO_MP === '1', watch = true, reload = true, share = false, openShare = openTunnel, log = console.log, agentSession = null, shareIsOwner = false, devLogPath = null } = {}, onFailure) {
   const project = findProject(cwd);
   // Q4 revision: the engine is not an npm dependency — install/refresh it from
   // the platform's login-gated registry (no-op when the pinned version is in).
@@ -204,8 +217,9 @@ async function startDev({ cwd = process.cwd(), port, noMp = process.env.NO_MP ==
   };
   // What a version is made from: the game's files, and the engine's, which the
   // room bundle includes. Engine files are served as they are, not copied.
+  const gameFiles = createVersionFiles(project.dir);
   const sourceFiles = () => {
-    const files = frozenFiles(project.dir);
+    const files = gameFiles();
     for (const [k, v] of snapshotFiles([engine.sharedDir], (name) => name.startsWith('.') || name === 'node_modules')) files.set(k, v);
     return files;
   };
@@ -313,6 +327,7 @@ async function startDev({ cwd = process.cwd(), port, noMp = process.env.NO_MP ==
     log, // agent-inbox report lines ride the dev logger
     engineVersion: engine.version ?? null, // stamped on agent-inbox reports
     agentSession, // woken by agent-inbox reports sent from this machine
+    shareIsOwner, // and by those sent through the share link, when it is the creator's alone
     mounts: mountsFor(codeDir),
     ...(first ? { fixedBuild: first.build } : {}),
     versions: live ? {
@@ -562,6 +577,7 @@ async function startDev({ cwd = process.cwd(), port, noMp = process.env.NO_MP ==
   if (hasDeclaredAssets(project.dir)) {
     log(`   🔍  ${assetsPageUrl(url)}   (your models, sounds and assets, one at a time)`);
   }
+  if (devLogPath) log(`   📄  ${relative(project.dir, devLogPath).split(sep).join('/')}   (everything this server prints, for reading later)`);
   if (share) {
     log('');
     log('→ share       opening a public link (cloudflared)…');

package/lib/freeze.mjs

@@ -9,7 +9,8 @@
 import { constants, copyFileSync, cpSync, existsSync, linkSync, mkdirSync, readdirSync, rmSync, symlinkSync, unlinkSync } from 'node:fs';
 import { randomBytes } from 'node:crypto';
 import { basename, dirname, isAbsolute, join, relative, sep } from 'node:path';
-import { collectGameFiles } from './game-files.mjs';
+import { statSync } from 'node:fs';
+import { collectGameFiles, gitIgnored, isGameFilePath } from './game-files.mjs';
 import { gameBuild } from './build-id.mjs';
 import { snapshotFiles } from './live-versions.mjs';
 import { STATE_DIR_NAMES, stateDir } from './legacy-names.mjs';
@@ -39,6 +40,60 @@ export function frozenFiles(dir) {
   return snapshotFiles([dir], (name, depth) => depth === 0 && LEFT_OUT.has(name), { hashBelow: 256 * 1024 });
 }
 
+// Files a version also needs that are not part of the published game:
+// package.json says which framework the game is built on and which engine.
+const BUILD_FILES = new Set(['package.json']);
+const IGNORE_MAX_AGE_MS = 5000;
+
+/**
+ * The files a version of the game is made from, as path → `mtime:size`: the
+ * game's own files by the definition `joystack publish` uses (game-files.mjs),
+ * which leaves out notes, tests, agent instructions and everything the game's
+ * .gitignore excludes, plus BUILD_FILES. A change to any other file in the
+ * folder (a log, a scratch file, a test) is not a change to the game and does
+ * not make a version.
+ *
+ * Asking git which paths the .gitignore excludes is the costly part, so the
+ * answer is kept until the list of paths or an ignore file in the game
+ * changes, and for at most IGNORE_MAX_AGE_MS, which bounds how long a change
+ * git reads from elsewhere (a .gitignore above the game, the global excludes
+ * file, `git add -f`) takes to apply. If git fails after the first answer, the
+ * last answer stands and git is asked again on the next look, so a passing
+ * git failure never stops the dev server.
+ */
+export function createVersionFiles(dir) {
+  let key = null;
+  let askedAt = 0;
+  let ignored = null;
+  const exclude = join(dir, '.git', 'info', 'exclude');
+  return () => {
+    const all = frozenFiles(dir);
+    const rels = new Map();
+    for (const path of all.keys()) rels.set(path, relative(dir, path).split(sep).join('/'));
+    const candidates = [...rels.values()].filter((rel) => BUILD_FILES.has(rel) || isGameFilePath(rel));
+    let excludeStamp = '';
+    try { excludeStamp = String(statSync(exclude).mtimeMs); } catch { /* none */ }
+    const ignoreFiles = [...all].filter(([path]) => basename(path) === '.gitignore').map(([, entry]) => entry);
+    const nextKey = `${candidates.join('\0')}|${ignoreFiles.join('|')}|${excludeStamp}`;
+    if (nextKey !== key || Date.now() - askedAt > IGNORE_MAX_AGE_MS) {
+      try {
+        ignored = gitIgnored(dir, candidates);
+        key = nextKey;
+        askedAt = Date.now();
+      } catch (err) {
+        if (ignored === null) throw err;
+        key = null;
+      }
+    }
+    const out = new Map();
+    for (const [path, entry] of all) {
+      const rel = rels.get(path);
+      if ((BUILD_FILES.has(rel) || isGameFilePath(rel)) && !ignored.has(rel)) out.set(path, entry);
+    }
+    return out;
+  };
+}
+
 /**
  * Copies the game at `dir` into `.joystack/frozen/<pid>-<random>/<folder name>`.
  * `build()` is the game's build as the copy has it, the one every session

package/lib/game-files.mjs

@@ -40,6 +40,12 @@ const SKIP_FILES = [
 // files the .gitignore was written to keep out.
 export function gitIgnored(dir, rels) {
   if (!rels.length) return new Set();
+  // A folder that is itself ignored by an enclosing repository is not part of
+  // that repository, so no .gitignore is in force inside it: git would report
+  // every file under it as ignored. A copy of the game that `joystack dev`
+  // serves lives in the game's ignored .joystack/ folder, and a game folder can
+  // sit in an ignored folder of a larger repository; both keep all their files.
+  if (folderIgnored(dir)) return new Set();
   try {
     const out = execFileSync('git', ['check-ignore', '--stdin', '-z'], {
       cwd: dir,
@@ -59,6 +65,17 @@ export function gitIgnored(dir, rels) {
   }
 }
 
+function folderIgnored(dir) {
+  try {
+    execFileSync('git', ['check-ignore', '-q', '.'], { cwd: dir, stdio: 'ignore', timeout: 30_000 });
+    return true;
+  } catch {
+    // Exit 1 (not ignored), 128 (no repository) or no git: the .gitignore, if
+    // any, is read as usual below.
+    return false;
+  }
+}
+
 /**
  * Whether a path, relative to the game folder with `/` separators, is one the
  * walk below would take by its name alone — before the .gitignore check. A

package/lib/land.mjs

@@ -0,0 +1,63 @@
+// `joystack land <name>`: put a lane's work into the game, then remove the
+// lane (the /worktree skill, "Land the winner").
+//
+// Run from the game folder or from inside the lane. The lane's unsaved work
+// is saved first, since landing is what the creator asked for. The game
+// folder then merges the lane's branch. On a clean merge the lane's folder
+// and branch go; on a clash the merge is left in progress in the game folder,
+// with the rule for settling it, and running `land` again once it is settled
+// and committed removes the lane.
+import { execFileSync } from 'node:child_process';
+import { existsSync } from 'node:fs';
+import { dirname, resolve } from 'node:path';
+import { isLane } from './lane.mjs';
+import { findProject } from './project.mjs';
+
+const git = (cwd, ...args) => execFileSync('git', args, { cwd, encoding: 'utf8', stdio: ['ignore', 'pipe', 'pipe'] }).trim();
+
+export const CLASH_RULE =
+  'Keep both changes wherever both can be kept. Stop and ask the creator only where the two truly ' +
+  'contradict, in game terms ("both versions change how jumping feels"), never in git terms.';
+
+export async function land(name, { cwd = process.cwd(), log = console.log } = {}) {
+  if (!name) throw new Error('Name the lane: joystack land <name>  (the name it was opened with: joystack lane <name>)');
+  const here = findProject(cwd).dir;
+  const main = isLane(here) ? findProject(dirname(git(here, 'rev-parse', '--path-format=absolute', '--git-common-dir'))).dir : here;
+  const slug = findProject(main).slug;
+  const branch = `lane/${name}`;
+  const dir = resolve(main, '..', `${slug}-${name}`);
+  try {
+    git(main, 'rev-parse', '--verify', '--quiet', `refs/heads/${branch}`);
+  } catch {
+    throw new Error(`There is no lane called "${name}" (no branch ${branch}).`);
+  }
+
+  if (existsSync(dir) && git(dir, 'status', '--porcelain')) {
+    git(dir, 'add', '-A');
+    git(dir, 'commit', '-q', '-m', `save: lane ${name}`);
+    log(`→ saved       the lane's unsaved work (${branch})`);
+  }
+
+  if (git(main, 'diff', '--name-only', '--diff-filter=U')) {
+    throw new Error(`The game folder ${main} is still in the middle of a merge. Settle it and commit, then run joystack land ${name} again.\n${CLASH_RULE}`);
+  }
+  try {
+    git(main, 'merge', '--no-edit', branch);
+  } catch (err) {
+    const clashed = git(main, 'diff', '--name-only', '--diff-filter=U');
+    if (!clashed) throw new Error(`Landing ${branch} failed: ${String(err.stderr || err.message).trim()}`);
+    throw new Error(
+      `Landing ${branch} clashed with the game in:\n${clashed.split('\n').map((f) => `  ${f}`).join('\n')}\n` +
+        `The merge is in progress in ${main}. ${CLASH_RULE}\n` +
+        `Then commit the merge, and run joystack land ${name} again to remove the lane.`,
+    );
+  }
+  log(`→ landed      ${branch} into the game`);
+
+  if (existsSync(dir)) {
+    git(main, 'worktree', 'remove', dir);
+    log(`→ removed     ${dir}`);
+  }
+  git(main, 'branch', '-d', branch);
+  return { dir, branch };
+}

package/lib/maker.mjs

@@ -0,0 +1,63 @@
+// The commands that answer differently inside the Joystack maker.
+//
+// The maker is a web page around the same agent a creator runs in a game
+// folder: it gives each conversation a lane of its own (a "draft"), runs that
+// lane's dev server on the person's page, and has a Publish button that puts
+// the draft in the game and the game online. Its agent reads the same
+// AGENTS.md and skills as anyone, so it runs the same commands. These answer
+// for the maker instead of doing what they do on a laptop, where they would
+// open a lane the person never sees, start a server nobody looks at, or
+// publish behind the page's back.
+//
+// The maker sets JOYSTACK_MAKER on the agent's process: the address of its
+// own control API for this conversation's draft. Only the agent's commands
+// carry it, never the dev servers the maker starts itself.
+
+export function makerDraft(env = process.env) {
+  const at = String(env.JOYSTACK_MAKER ?? '').trim().replace(/\/+$/, '');
+  return at || null;
+}
+
+export const MAKER_LANE =
+  "You are in the Joystack maker: this folder is already this conversation's lane " +
+  '(the person sees it as a draft on their page). Build here. No new lane was made.';
+
+export const MAKER_DEV =
+  "You are in the Joystack maker: this folder's dev server is already running, and the " +
+  'person plays the game on their page, beside the chat. Every file you save shows up ' +
+  'there. Nothing was started.';
+
+// `publish` and `land` both do what the page's Publish button does: the draft
+// goes into the game, and the game goes online under the name it has. The
+// maker does it once the agent's turn ends, since it merges the files the
+// agent is still working in. A game that has never been online has no name
+// yet; the person picks one on the page.
+export async function makerPublish(at, { slug = null, log = console.log, fetchImpl = fetch } = {}) {
+  if (slug) {
+    throw new Error(
+      'You are in the Joystack maker: a game here has one name, which the person picks on their page, ' +
+        'so --slug copies are not available. Run the command without --slug to publish under that name.',
+    );
+  }
+  let res;
+  try {
+    res = await fetchImpl(`${at}/publish`, { method: 'POST', signal: AbortSignal.timeout(15_000) });
+  } catch (err) {
+    throw new Error(`You are in the Joystack maker, and it did not answer (${err?.message ?? err}). Ask the person to press Publish on their page.`);
+  }
+  const body = await res.json().catch(() => ({}));
+  if (body.needsName) {
+    throw new Error(
+      'You are in the Joystack maker, and this game has never been published: its first publish needs ' +
+        'a name, which the person picks. Ask them to press Publish on their page.',
+    );
+  }
+  if (!res.ok || !body.ok) {
+    throw new Error(`You are in the Joystack maker, and it could not publish: ${body.error ?? `HTTP ${res.status}`}. Ask the person to press Publish on their page.`);
+  }
+  log(
+    'You are in the Joystack maker: publishing this draft. When this turn ends, it goes into the game ' +
+      `and the game goes online${body.url ? ` at ${body.url}` : ''}. The person sees it happen on their page.`,
+  );
+  return body;
+}

package/lib/publish.mjs

@@ -41,6 +41,7 @@ export async function publish({
   apiBase = getApiBase(DEFAULT_API_BASE),
   slug,
   devTools = false,
+  open = false,
   log = console.log,
 } = {}) {
   const project = findProject(cwd);
@@ -90,6 +91,14 @@ export async function publish({
   // ensureEngine keeps the local install synced to the game's pin.
   const engine = await ensureEngine(project.dir, { apiBase, log });
   const targetSlug = slug ?? project.slug;
+  // Who may open the published game. The game under its own name is open to
+  // every signed-in Joystack account; a copy under another name (an A/B copy, a
+  // pull request's or a lane's review link) is open only to invited accounts,
+  // unless --open asks otherwise. Inside a lane the game's own name is that of
+  // the game the lane was opened from, since the lane folder is named after the
+  // lane.
+  const ownSlug = laneParentSlug(project.dir) ?? project.slug;
+  const openToAll = open || targetSlug === ownSlug;
 
   const files = collectGameFiles(project.dir);
   // The build id of the creator's own files, before the generated ones below
@@ -156,7 +165,7 @@ export async function publish({
     }
   }
 
-  const meta = { slug: targetSlug, entry: 'index.html', engineVersion: engine.version, build, files: {}, ...frameworkMeta, ...(devTools ? { devTools: true } : {}) };
+  const meta = { slug: targetSlug, entry: 'index.html', engineVersion: engine.version, build, files: {}, ...frameworkMeta, ...(devTools ? { devTools: true } : {}), open: openToAll };
   for (const [path, bytes] of files) meta.files[path] = createHash('sha256').update(bytes).digest('hex');
 
   // The platform only publishes framework-v2 games, and checks their code

package/lib/replay-export.mjs

@@ -1064,7 +1064,7 @@ function rowSink({ file, columns, rowsPerGroup }) {
     finish() {
       flush();
       pq.finish();
-      renameSync(partial, file);
+      renameInto(partial, file);
       return rows;
     },
     // Called when the run did not get that far. Best-effort: a leftover
@@ -1075,6 +1075,21 @@ function rowSink({ file, columns, rowsPerGroup }) {
   };
 }
 
+// On Windows a file that was just written can be refused a rename for a moment
+// (EPERM, EBUSY or EACCES) while another process still has it open. The
+// rename is retried for up to two seconds before it fails.
+function renameInto(from, to) {
+  for (let i = 0; ; i++) {
+    try {
+      renameSync(from, to);
+      return;
+    } catch (err) {
+      if (i >= 40 || !['EPERM', 'EBUSY', 'EACCES'].includes(err.code)) throw err;
+      Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, 50);
+    }
+  }
+}
+
 /** A streaming Parquet writer for a table of `columns`, sized as the export sizes its own. */
 export function rowSinkFor(file, columns, rowsPerGroup) {
   return rowSink({ file, columns, rowsPerGroup: groupFor(columns, rowsPerGroup) });

package/lib/static-server.mjs

@@ -337,6 +337,9 @@ export function createStaticServer({
   // in agent-session.mjs), or null. When set, an agent-inbox report from this
   // machine also wakes that session.
   agentSession = null,
+  // Whether a request through the share link is the creator's own (startDev's
+  // `shareIsOwner`): its agent-inbox reports then count as from this machine.
+  shareIsOwner = false,
 }) {
   // The tunnel hostname `joystack dev --share` opened to this server, once it is
   // up (setShareHost). See trustedHost.
@@ -858,6 +861,9 @@ export function createStaticServer({
     return turn;
   };
   const agentConnected = () => (sessionAlive(agentSession) ? agentSession.agent : null);
+  // The creator's own browser: on this machine, or through a share link that
+  // only the creator can reach the dev tools by.
+  const fromCreator = (req) => fromThisMachine(req) || (shareIsOwner && isShareHost(req.headers.host, shareHost));
 
   // The reply credential: this server's port and a bearer token, readable only
   // by the owner of the game folder, one file per server, so with two servers
@@ -890,7 +896,7 @@ export function createStaticServer({
       res.writeHead(403, { 'Content-Type': 'text/plain' });
       return res.end('cross-origin post rejected');
     }
-    const local = fromThisMachine(req);
+    const local = fromCreator(req);
     const maxBytes = local ? AGENT_INBOX_LOCAL_MAX_BYTES : AGENT_INBOX_MAX_BYTES;
     const chunks = [];
     let size = 0;
@@ -986,7 +992,7 @@ export function createStaticServer({
   // so only this machine may read its replies. The custom header forces a CORS
   // preflight, which this server never grants, so no foreign page can read it.
   function handleInboxStatus(req, res) {
-    if (!fromThisMachine(req) || !sameOrigin(req, { shareHost }) || req.headers['x-joystack-agent-ui'] !== '1') {
+    if (!fromCreator(req) || !sameOrigin(req, { shareHost }) || req.headers['x-joystack-agent-ui'] !== '1') {
       res.writeHead(403, { 'Content-Type': 'text/plain' });
       return res.end('dev tools only');
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@joystack/cli",
-  "version": "0.1.47",
+  "version": "0.1.49",
   "description": "Joystack game development CLI \u2014 dev server, login, and publishing for standalone Joystack games.",
   "type": "module",
   "license": "Apache-2.0",