@looop-games/cli 0.1.24 → 0.1.25

package/CHANGELOG.md

@@ -14,6 +14,27 @@ Versions: [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
 ## [Unreleased]
 
+## [0.1.25] - 2026-08-01
+
+### Fixed
+
+- `looop dev` now rebuilds and restarts the multiplayer room when you edit a
+  file the room depends on — your primitives and their helpers, entity data
+  (`entities/`), components, and `overrides/`. Before, only the page reloaded:
+  the room kept adjudicating with your pre-edit code and pre-edit spawned
+  entities until you killed and relaunched the stack, so a change could look
+  like it did nothing. Room state resets on such an edit (the world reseeds
+  when the page rejoins); if the rebuild fails, the previous room keeps
+  running and the error is printed. This also means a game that gains its
+  first primitive while `dev` is running now gets its own room server
+  immediately, instead of silently staying on the stock one.
+- `looop dev` could keep running your pre-edit code after you changed a file,
+  with no error anywhere — the game just looked like your change did nothing.
+  Import URLs are now stamped so that editing any file renames the URL of every
+  module that (directly or indirectly) imports it, which forces the browser to
+  refetch the changed part of the game on the next reload instead of silently
+  reusing what it had cached.
+
 ## [0.1.24] - 2026-08-01
 
 ### Changed

package/lib/dev.mjs

@@ -19,6 +19,7 @@ import { getToken, getApiBase } from './config.mjs';
 import { resolvePorts, portInUse, killPort, lanIp } from './ports.mjs';
 import { assertNoInertOverride, scanPrimitives } from './primitives.mjs';
 import { buildDevRoomServer, DEV_OVERRIDES_DIR } from './room-server.mjs';
+import { createFileWatcher, createRoomReloader } from './room-reload.mjs';
 
 // Resolve the partykit CLI entry from OUR dependencies (the game never
 // declares partykit; it rides @looop-games/cli). partykit's `exports` map hides
@@ -90,7 +91,7 @@ export async function dev({ cwd = process.cwd(), port, noMp = process.env.NO_MP
   // creator is told the actual problem: the server cannot take this file.
   assertNoInertOverride({ projectDir: project.dir, engine });
   const serverPrimitives = scanPrimitives(project.dir);
-  const roomServerCwd = await buildDevRoomServer({ projectDir: project.dir, engine });
+  const { cwd: roomServerCwd, inputs: roomInputs } = await buildDevRoomServer({ projectDir: project.dir, engine });
   const ownServer = roomServerCwd !== engine.roomServerDir;
 
   const stop = () => {
@@ -153,20 +154,115 @@ export async function dev({ cwd = process.cwd(), port, noMp = process.env.NO_MP
       log(`→ multiplayer :${ports.mp}  (our stale server — reclaiming)`);
       await killPort(ports.mp);
     }
-    const pk = spawn(
-      process.execPath,
-      [partykitBin(), 'dev', '--port', String(ports.mp), '--persist', join(tmpdir(), `looop-partykit-${ports.mp}`)],
-      { cwd: roomServerCwd, stdio: ['ignore', 'pipe', 'pipe'], detached: true },
-    );
-    pk.stdout.on('data', () => {});
-    pk.stderr.on('data', (d) => {
-      const s = String(d);
-      if (/error/i.test(s)) log(`[partykit] ${s.trim()}`);
-    });
-    children.push(pk);
+    const spawnMp = (cwd) => {
+      const pk = spawn(
+        process.execPath,
+        [partykitBin(), 'dev', '--port', String(ports.mp), '--persist', join(tmpdir(), `looop-partykit-${ports.mp}`)],
+        { cwd, stdio: ['ignore', 'pipe', 'pipe'], detached: true },
+      );
+      pk.stdout.on('data', () => {});
+      pk.stderr.on('data', (d) => {
+        const s = String(d);
+        if (/error/i.test(s)) log(`[partykit] ${s.trim()}`);
+      });
+      // A spawn that fails (ENOENT, EMFILE) emits 'error' and never 'exit';
+      // without a listener the event throws and takes the stack down.
+      pk.on('error', (err) => log(`[partykit] failed to start: ${err.message}`));
+      children.push(pk);
+      return pk;
+    };
+    const killMp = async (pk) => {
+      const idx = children.indexOf(pk);
+      if (idx !== -1) children.splice(idx, 1);
+      if (pk.pid == null) return; // never started — nothing to reap, and 'exit' will never fire
+      const exited = new Promise((resolveExit) => {
+        if (pk.exitCode !== null || pk.signalCode !== null) return resolveExit();
+        pk.once('exit', resolveExit);
+        pk.once('error', resolveExit);
+      });
+      try {
+        process.kill(-pk.pid, 'SIGTERM');
+      } catch {
+        try {
+          pk.kill('SIGTERM');
+        } catch {
+          /* gone */
+        }
+      }
+      // partykit is a node wrapper forking workerd; if the tree ignores TERM,
+      // escalate — the port must be free before the replacement binds it.
+      const hardKill = setTimeout(() => {
+        try {
+          process.kill(-pk.pid, 'SIGKILL');
+        } catch {
+          /* gone */
+        }
+      }, 2000);
+      hardKill.unref();
+      await exited;
+      clearTimeout(hardKill);
+      // The parent's exit is not the port's release: workerd is a separate
+      // process in the group and can hold the listening socket a beat longer.
+      // A replacement that binds too early dies on EADDRINUSE — killing a
+      // working room and leaving nothing. Wait until the port is actually free.
+      const deadline = Date.now() + 5000;
+      while ((await portInUse(ports.mp)) && Date.now() < deadline) {
+        await new Promise((r) => setTimeout(r, 100));
+      }
+    };
+    const pk = spawnMp(roomServerCwd);
     log(
       `→ multiplayer :${ports.mp}  (partykit on ${ownServer ? `this game's OWN server — ${serverPrimitives.map((p) => p.type).join(', ')}` : "the engine's room server"}, pid ${pk.pid})`,
     );
+
+    // The room bundle is frozen at build time, so the static watcher's page
+    // reload is only half the contract: an edit to anything the room runs on
+    // (entity data, a room override, a server sim) must also rebuild the room
+    // and restart its child, or the creator playtests against pre-edit
+    // adjudication with everything looking live — a failure `looop test` is
+    // structurally blind to, because it boots fresh stacks.
+    //
+    // The watch set is the bundle's own input list (covers every file the room
+    // actually imports, wherever it lives) plus the room-shaped game trees for
+    // files that don't exist yet — a first primitive, a new entity, a new room
+    // override. overrides/ is deliberately scoped to its room subtree: editing
+    // a purely client-side override must not restart the room and reset its
+    // state mid-playtest.
+    let roomWatcher = null;
+    let roomCwd = roomServerCwd;
+    const reloader = createRoomReloader({
+      build: () => buildDevRoomServer({ projectDir: project.dir, engine }),
+      spawnChild: spawnMp,
+      killChild: killMp,
+      log,
+      onRebuilt: (built) => {
+        roomWatcher?.setFiles(built.inputs);
+        // A rebuild can flip which server the game runs on (first primitive
+        // added, last one removed) — say so, or the startup line misleads for
+        // the rest of the session.
+        if (built.cwd !== roomCwd) {
+          roomCwd = built.cwd;
+          log(
+            `→ multiplayer :${ports.mp}  (now on ${roomCwd === engine.roomServerDir ? "the engine's room server" : "this game's OWN server"})`,
+          );
+        }
+      },
+    });
+    reloader.attach(roomServerCwd, pk);
+    roomWatcher = createFileWatcher({
+      files: roomInputs,
+      dirs: ['entities', 'components', 'overrides/shared/ui/room'].map((d) => join(project.dir, d)),
+      onChange: reloader.onChange,
+    });
+    // stop() (e.g. `looop test` tearing down its stack) must also stop the
+    // reloader: a rebuild in flight would otherwise spawn a replacement room
+    // child AFTER the children list was killed — a leaked detached process.
+    servers.push({
+      close: () => {
+        reloader.stop();
+        roomWatcher.close();
+      },
+    });
   }
 
   // ─── platform services shim ───

package/lib/inject.mjs

@@ -5,10 +5,10 @@
 //     (classic scripts, so globals exist before any module runs) + the ONE
 //     platform-layer module tag. New platform features are added to
 //     shared/platform/platform.js FEATURES — never here.
-//   * ?v=<mtime> rewriting on <script src> and JS imports busts Chrome's
+//   * ?v=<stamp> rewriting on <script src> and JS imports busts Chrome's
 //     sticky module cache on edit.
-import { statSync } from 'node:fs';
-import { join, dirname, normalize } from 'node:path';
+import { readFileSync, statSync } from 'node:fs';
+import { dirname } from 'node:path';
 
 // MUST match builder/functions/_shared/serve-identity.ts DEV_IDENTITY.
 export const DEV_IDENTITY = { userId: 'dev-local-user', name: 'Dev', color: '#38bdf8' };
@@ -39,36 +39,137 @@ const JS_IMPORT_RE = /(\b(?:from|import)\s*\(?\s*)(['"])([^'"\n]+?)\2/g;
 // Match <script src="X"> in HTML.
 const HTML_SCRIPT_RE = /(<script\b[^>]*?\bsrc\s*=\s*["'])([^"']+?)(["'])/gi;
 
-// Resolve `relPath` and return `<relPath>?v=<mtime-seconds>` or null.
-// `resolveUrl(urlPath)` maps an absolute URL path through the server's mounts.
-function versionedPath(relPath, { baseDir, resolveUrl, allowBareRelative = false }) {
-  if (/^(https?:)?\/\//.test(relPath) || relPath.startsWith('data:') || relPath.startsWith('blob:')) return null;
-  if (relPath.includes('?') || relPath.includes('#')) return null;
-  if (!/\.(js|mjs)$/.test(relPath)) return null;
-  let target;
-  if (relPath.startsWith('/')) target = resolveUrl(relPath);
-  else if (relPath.startsWith('.')) target = normalize(join(baseDir, relPath));
-  else if (allowBareRelative) target = normalize(join(baseDir, relPath));
-  else return null; // bare module specifier
-  if (!target) return null;
+// A spec that can never name a local file the server would stamp: absolute
+// URLs, data:/blob:, and anything already carrying a query or fragment.
+function isExternalSpec(spec) {
+  return (
+    /^(https?:)?\/\//.test(spec) ||
+    spec.startsWith('data:') ||
+    spec.startsWith('blob:') ||
+    spec.includes('?') ||
+    spec.includes('#')
+  );
+}
+
+// Resolve an import specifier the way the BROWSER does — against the importing
+// module's URL — returning an absolute URL path, or null for bare/external
+// specs. Stamping must live in URL space because that is where module identity
+// lives: an engine file's relative sibling import can be shadowed by the
+// game's overrides mount, so the file the URL serves is not the file that sits
+// next to the importer on disk.
+function resolveSpecToUrl(spec, baseUrl, { allowBareRelative = false } = {}) {
+  if (isExternalSpec(spec)) return null;
+  if (spec.startsWith('/')) return spec;
+  if (!spec.startsWith('.') && !allowBareRelative) return null; // bare module specifier
+  try {
+    return new URL(spec, 'http://x' + baseUrl).pathname;
+  } catch {
+    return null;
+  }
+}
+
+// The version stamp is the max mtime over the module's TRANSITIVE static
+// import closure, not the file's own mtime. Module identity is the full URL,
+// and a browser may reuse a cached body for an unchanged URL across reloads
+// (Chrome's memory cache does not honor no-store for same-URL subresources).
+// A per-target stamp renames only the edited file's URL — its importers' URLs
+// stay put, so a reloading page reassembles the whole pre-edit graph from
+// cache with zero requests and no error anywhere. Stamping the closure renames
+// every URL on the path from the entry (which a navigation always re-fetches),
+// so no URL-keyed cache can serve stale bytes.
+//
+// The parse cache stores RAW specifiers keyed by file path + mtime; resolution
+// happens per walk, because the same file's specs resolve differently through
+// different mount tables (two servers in one process must not contaminate each
+// other). Boundary: only string-literal static/dynamic imports are seen —
+// import(expr) and new URL(...) are runtime-computed and stay unstamped.
+const parseCache = new Map(); // abs fs path -> { mtimeMs, specs: string[] }
+
+function fileInfo(path) {
+  let st;
   try {
-    const mtime = Math.floor(statSync(target).mtimeMs / 1000);
-    return `${relPath}?v=${mtime}`;
+    st = statSync(path);
   } catch {
     return null;
   }
+  const hit = parseCache.get(path);
+  if (hit && hit.mtimeMs === st.mtimeMs) return hit;
+  const specs = [];
+  if (/\.(js|mjs)$/.test(path)) {
+    let text = null;
+    try {
+      text = readFileSync(path, 'utf8');
+    } catch {
+      /* unreadable: stamp from its own mtime alone */
+    }
+    if (text !== null) {
+      for (const m of text.matchAll(JS_IMPORT_RE)) {
+        if (!isExternalSpec(m[3])) specs.push(m[3]);
+      }
+    }
+  }
+  const info = { mtimeMs: st.mtimeMs, specs };
+  parseCache.set(path, info);
+  return info;
+}
+
+// Walk in URL space: each node is a URL path, mapped to bytes through the
+// server's mount table. `memo` (shared across one rewrite pass) short-circuits
+// only entry nodes — a spec repeated in one body — not intermediates.
+function closureStampUrl(urlPath, resolveUrl, memo) {
+  if (memo?.has(urlPath)) return memo.get(urlPath);
+  let max = 0;
+  const seen = new Set();
+  const stack = [urlPath];
+  while (stack.length) {
+    const u = stack.pop();
+    if (seen.has(u)) continue;
+    seen.add(u);
+    const fs = resolveUrl(u);
+    if (!fs) continue;
+    const info = fileInfo(fs);
+    if (!info) continue;
+    if (info.mtimeMs > max) max = info.mtimeMs;
+    for (const spec of info.specs) {
+      const child = resolveSpecToUrl(spec, u);
+      if (child) stack.push(child);
+    }
+  }
+  const stamp = max ? Math.floor(max) : null;
+  memo?.set(urlPath, stamp);
+  return stamp;
+}
+
+// Resolve `relPath` and return `<relPath>?v=<closure-stamp>` or null. Stamped
+// extensions include .json: entity/config data is imported by games, and its
+// URL must rename on edit exactly like a module's.
+//
+// `baseUrl` + `resolveUrl` are REQUIRED for stamping: there is deliberately no
+// disk-space fallback. Resolving a relative spec beside the importer on disk
+// stamps the wrong file whenever a mount shadows it (the overrides mechanism),
+// which silently re-opens the staleness hole. No serving context → no stamp.
+function versionedPath(relPath, { baseUrl, resolveUrl, allowBareRelative = false, memo }) {
+  if (!/\.(js|mjs|json)$/.test(relPath)) return null;
+  if (baseUrl == null || !resolveUrl) return null;
+  const urlTarget = resolveSpecToUrl(relPath, baseUrl, { allowBareRelative });
+  if (!urlTarget) return null;
+  if (!resolveUrl(urlTarget)) return null; // nothing serves it — leave the spec alone
+  const stamp = closureStampUrl(urlTarget, resolveUrl, memo);
+  return stamp === null ? null : `${relPath}?v=${stamp}`;
 }
 
-export function rewriteJsImports(text, { baseDir, resolveUrl }) {
+export function rewriteJsImports(text, { baseUrl, resolveUrl }) {
+  const memo = new Map();
   return text.replace(JS_IMPORT_RE, (whole, prefix, quote, path) => {
-    const v = versionedPath(path, { baseDir, resolveUrl });
+    const v = versionedPath(path, { baseUrl, resolveUrl, memo });
     return `${prefix}${quote}${v ?? path}${quote}`;
   });
 }
 
-export function rewriteHtmlScripts(html, { baseDir, resolveUrl }) {
+export function rewriteHtmlScripts(html, { baseUrl, resolveUrl }) {
+  const memo = new Map();
   return html.replace(HTML_SCRIPT_RE, (whole, prefix, path, suffix) => {
-    const v = versionedPath(path, { baseDir, resolveUrl, allowBareRelative: true });
+    const v = versionedPath(path, { baseUrl, resolveUrl, allowBareRelative: true, memo });
     return `${prefix}${v ?? path}${suffix}`;
   });
 }

package/lib/room-reload.mjs

@@ -0,0 +1,168 @@
+// Room hot-reload for `looop dev`.
+//
+// The room bundle (room-server.mjs) is frozen at build time and partykit runs
+// it as-is, so an edit to a room-authoritative file — entity data, an override,
+// a server sim, a manifest — reaches the client (page reload) but not the room
+// unless something rebuilds it. This module is that something: a poll watcher
+// over the bundle's actual inputs plus the room-shaped game trees, and a
+// reloader that rebuilds and restarts the partykit child on change.
+//
+// Restarting the child drops the room's in-memory world on purpose: the state
+// was seeded from pre-edit files, and the page reload the static watcher
+// already fires makes the next join reseed from the fresh ones. A rebuild that
+// FAILS must never take the working room down with it — the creator gets the
+// old room and a loud message, not a dead stack.
+import { readdirSync, statSync } from 'node:fs';
+import { extname, join } from 'node:path';
+
+// Extensions that can be a room input when watching a whole dir. Explicit
+// files (bundle metafile inputs) are watched regardless of extension.
+const ROOM_EXTS = new Set(['.js', '.mjs', '.json', '.wasm']);
+
+function snapshot(files, dirs) {
+  const out = new Map();
+  for (const f of files) {
+    try {
+      out.set(f, statSync(f).mtimeMs);
+    } catch {
+      out.set(f, -1); // a vanished input is a change too
+    }
+  }
+  const walk = (dir) => {
+    let names;
+    try {
+      names = readdirSync(dir);
+    } catch {
+      return; // the tree may not exist yet — its first file appearing is a change
+    }
+    for (const name of names) {
+      if (name.startsWith('.') || name === 'node_modules') continue;
+      const p = join(dir, name);
+      let st;
+      try {
+        st = statSync(p);
+      } catch {
+        continue;
+      }
+      if (st.isDirectory()) walk(p);
+      else if (ROOM_EXTS.has(extname(name).toLowerCase())) out.set(p, st.mtimeMs);
+    }
+  };
+  for (const d of dirs) walk(d);
+  return out;
+}
+
+function differs(a, b) {
+  if (a.size !== b.size) return true;
+  for (const [k, v] of a) if (b.get(k) !== v) return true;
+  return false;
+}
+
+export function createFileWatcher({ files = [], dirs = [], intervalMs = 400, onChange = null }) {
+  // Two independent baselines: the explicit file list (which setFiles swaps
+  // between rebuilds) and the dir walk (which setFiles must never touch). One
+  // merged map couldn't tell a dropped input apart from a dir-walk entry.
+  let watchedFiles = [...files];
+  const watchedDirs = [...dirs];
+  let fileSnap = snapshot(watchedFiles, []);
+  let dirSnap = snapshot([], watchedDirs);
+  const oneShots = [];
+  const timer = setInterval(() => {
+    const nextFiles = snapshot(watchedFiles, []);
+    const nextDirs = snapshot([], watchedDirs);
+    if (differs(fileSnap, nextFiles) || differs(dirSnap, nextDirs)) {
+      fileSnap = nextFiles;
+      dirSnap = nextDirs;
+      while (oneShots.length) oneShots.pop()();
+      // Fire-and-forget on purpose, but a rejection out of the handler must
+      // not become an unhandled rejection that takes the dev stack down.
+      try {
+        Promise.resolve(onChange?.()).catch(() => {});
+      } catch {
+        /* handler threw synchronously — the handler owns its own reporting */
+      }
+    }
+  }, intervalMs);
+  timer.unref();
+  return {
+    setFiles(next) {
+      // Swap the file LIST without rebaselining mtimes: an edit that landed
+      // after the last poll (mid-rebuild, before this call) must still diff
+      // on the next tick. Only genuinely new paths get a fresh stat; entries
+      // already tracked keep their last-observed mtime.
+      const merged = new Map();
+      for (const f of next) {
+        if (fileSnap.has(f)) merged.set(f, fileSnap.get(f));
+        else merged.set(f, snapshot([f], []).get(f));
+      }
+      watchedFiles = [...next];
+      fileSnap = merged;
+    },
+    onNextChange(fn) {
+      oneShots.push(fn);
+    },
+    close() {
+      clearInterval(timer);
+    },
+  };
+}
+
+export function createRoomReloader({ build, spawnChild, killChild, log, onRebuilt = null }) {
+  let current = null; // { cwd, child }
+  let running = false;
+  let dirty = false;
+  let stopped = false;
+
+  async function onChange() {
+    if (stopped) return;
+    if (running) {
+      dirty = true;
+      return;
+    }
+    running = true;
+    try {
+      do {
+        dirty = false;
+        let built;
+        try {
+          built = await build();
+        } catch (err) {
+          log(`✗ room rebuild failed — the running room still serves your PREVIOUS code:\n${err.message}`);
+          continue;
+        }
+        // stop() may race any await in here (`looop test` tearing the stack
+        // down, SIGINT): once stopped, spawning would leak a detached room
+        // child forever. The check must repeat AFTER the kill too — killChild
+        // waits for the child's exit and can take seconds (SIGTERM, then the
+        // SIGKILL escalation), which is the widest window a stop() can land in.
+        if (stopped) return;
+        try {
+          await killChild(current.child);
+          if (stopped) return;
+          const child = spawnChild(built.cwd);
+          current = { cwd: built.cwd, child };
+        } catch (err) {
+          log(`✗ room restart failed — fix the cause, then edit any room file to retry:\n${err.message}`);
+          continue;
+        }
+        onRebuilt?.(built);
+        log('→ room server rebuilt and restarted (room state reseeds on the next join)');
+      } while (dirty && !stopped);
+    } finally {
+      running = false;
+    }
+  }
+
+  return {
+    attach(cwd, child) {
+      current = { cwd, child };
+    },
+    onChange,
+    stop() {
+      stopped = true;
+    },
+    get current() {
+      return current;
+    },
+  };
+}

package/lib/room-server.mjs

@@ -24,7 +24,7 @@
 // `rooms-runtime.js`, because the publish endpoint is a Worker with no bundler.
 // Same seam, two deliveries.)
 import { existsSync, mkdirSync, rmSync, writeFileSync } from 'node:fs';
-import { dirname, join, relative } from 'node:path';
+import { dirname, isAbsolute, join, relative } from 'node:path';
 import { pathToFileURL } from 'node:url';
 import {
   assertNoOverrideCycle,
@@ -141,8 +141,11 @@ function renderEntry(primitives, entityComponents) {
   ].join('\n');
 }
 
-// → the cwd to run partykit in. The engine's stock room server when the game has
-// no primitives of its own; a freshly-built one when it does.
+// → `{ cwd, inputs }`: the cwd to run partykit in — the engine's stock room
+// server when the game has no primitives of its own, a freshly-built one when
+// it does — plus the absolute paths of every file bundled into it. The room
+// bundle is frozen at build time, so `inputs` is what dev watches to know the
+// running room no longer matches the files on disk.
 //
 // Throws if the primitives dir is malformed (e.g. a hand-written index.js) —
 // dev must not quietly serve a room that is missing the creator's code.
@@ -157,7 +160,7 @@ export async function buildDevRoomServer({ projectDir, engine, esbuildImpl }) {
     // loading. The mount is unconditional (dev.mjs), so the cleanup has to be too.
     rmSync(join(projectDir, DEV_ROOM_SERVER_DIR), { recursive: true, force: true });
     rmSync(join(projectDir, DEV_OVERRIDES_DIR), { recursive: true, force: true });
-    return engine.roomServerDir;
+    return { cwd: engine.roomServerDir, inputs: [] };
   }
   assertNoOverrideCycle(primitives, projectDir, engine.sharedDir);
 
@@ -165,7 +168,7 @@ export async function buildDevRoomServer({ projectDir, engine, esbuildImpl }) {
   const outDir = join(projectDir, DEV_ROOM_SERVER_DIR);
   mkdirSync(outDir, { recursive: true });
 
-  await esbuild.build({
+  const result = await esbuild.build({
     // No entry file on disk: the barrel + subclass are fed straight in, resolved
     // against the game root, so `./overrides/...` means what it says and no
     // machine-specific absolute path can leak into the output.
@@ -184,6 +187,7 @@ export async function buildDevRoomServer({ projectDir, engine, esbuildImpl }) {
     legalComments: 'none',
     conditions: ['workerd', 'worker'],
     loader: { '.wasm': 'binary' },
+    metafile: true,
     absWorkingDir: projectDir,
     plugins: [
       // Shadowing, for the bundler: an override's relative imports fall through
@@ -227,7 +231,13 @@ export async function buildDevRoomServer({ projectDir, engine, esbuildImpl }) {
     rmSync(join(projectDir, DEV_OVERRIDES_DIR), { recursive: true, force: true });
   }
 
-  return outDir;
+  // Metafile inputs are relative to absWorkingDir (the game root); the stdin
+  // entry (keyed by its `sourcefile` name, no file on disk) is excluded.
+  const inputs = Object.keys(result.metafile?.inputs ?? {})
+    .filter((p) => p !== 'looop-room-server.js' && !p.startsWith('<'))
+    .map((p) => (isAbsolute(p) ? p : join(projectDir, p)));
+
+  return { cwd: outDir, inputs };
 }
 
 export { isServerBacked };

package/lib/static-server.mjs

@@ -149,8 +149,7 @@ export function createStaticServer({
 
   function serveHtml(res, fsPath, urlPath, query) {
     let html = readFileSync(fsPath, 'utf8');
-    const baseDir = join(fsPath, '..');
-    html = rewriteHtmlScripts(html, { baseDir, resolveUrl });
+    html = rewriteHtmlScripts(html, { baseUrl: urlPath, resolveUrl });
     // Mirror the production /g/<slug> entry injection — only when the resolved
     // engine actually ships the platform layer (transition shim, same as
     // dev_server.py _engine_has_platform).
@@ -173,11 +172,11 @@ export function createStaticServer({
     sendBody(res, 200, html, MIME['.html']);
   }
 
-  function serveJs(res, fsPath) {
+  function serveJs(res, fsPath, urlPath) {
     const raw = readFileSync(fsPath);
     let body;
     try {
-      body = rewriteJsImports(raw.toString('utf8'), { baseDir: join(fsPath, '..'), resolveUrl });
+      body = rewriteJsImports(raw.toString('utf8'), { baseUrl: urlPath, resolveUrl });
     } catch {
       body = raw;
     }
@@ -244,7 +243,7 @@ export function createStaticServer({
     const ext = extname(fsPath).toLowerCase();
     try {
       if (ext === '.html') return serveHtml(res, fsPath, urlPath, reqUrl.searchParams);
-      if (ext === '.js' || ext === '.mjs') return serveJs(res, fsPath);
+      if (ext === '.js' || ext === '.mjs') return serveJs(res, fsPath, urlPath);
       sendBody(res, 200, readFileSync(fsPath), MIME[ext] ?? 'application/octet-stream');
     } catch {
       res.writeHead(500, { 'Content-Type': 'text/plain' });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@looop-games/cli",
-  "version": "0.1.24",
+  "version": "0.1.25",
   "description": "Looop game development CLI — dev server, login, and publishing for standalone Looop games.",
   "type": "module",
   "license": "Apache-2.0",