@playcraft/cli 0.1.19 → 0.1.21

package/dist/workspace-runtime/previews/single-file.js

@@ -1,11 +1,19 @@
 const LOCAL_ATTR = /<(?:script|img|link|source|video|audio|iframe)\b[^>]*?\b(?:src|href)\s*=\s*["']([^"']+)["']/gi;
-const CSS_URL = /url\(\s*["']?([^"')]+)["']?\s*\)/gi;
-/** A reference the sealed document would load from the local build, not from the network or inline data. */
+/** A CSS `url(`, not the tail of a name such as `createObjectURL(` or `getAudioURL(`. */
+const CSS_URL = /(?<![\w$.-])url\(\s*["']?([^"')]+)["']?\s*\)/gi;
+/** An inline script's body, kept apart from its tag so `<script src>` is still checked. */
+const SCRIPT_BODY = /(<script\b[^>]*>)[\s\S]*?(<\/script\s*>)/gi;
+/**
+ * A reference the sealed document would load from the local build, not from the network or inline
+ * data. Inline script code is not read: inlined libraries call functions named `…URL(` and build
+ * `"url(" + src + ")"` strings at run time, and neither is a file the document loads.
+ */
 export function findExternalLocalReferences(html) {
+    const markup = html.replace(SCRIPT_BODY, '$1$2');
     const found = new Set();
     for (const expression of [LOCAL_ATTR, CSS_URL]) {
         expression.lastIndex = 0;
-        for (const match of html.matchAll(expression)) {
+        for (const match of markup.matchAll(expression)) {
             const value = (match[1] ?? '').trim();
             if (isLocalReference(value))
                 found.add(value);

package/dist/workspace-runtime/server/dispatch.js

@@ -246,11 +246,15 @@ async function executeTurn(state, scopeKey, operation, payload, recovery) {
     const reserved = state.journal.getOperation(scopeKey) ?? operation;
     if (result.outcome === 'uncertain' || result.outcome === 'failed' || !result.turnId) {
         const failed = result.outcome === 'failed';
+        // Codex no longer knows the thread although the binding said it could continue. Marking the
+        // binding lost lets the same turn, sent again with the conversation, rebind the session.
+        const threadLost = failed && result.error === 'unknown_thread';
         await state.journal.putSession({
             ...(state.journal.getSession(sessionId) ?? binding),
             turnStatus: failed ? undefined : 'starting',
             turnBlock: failed ? undefined : 'uncertain',
             activeTurnId: undefined,
+            ...(threadLost ? { recoverability: 'history_only' } : {}),
         });
         return persist(state, scopeKey, transitionOperation(reserved, failed ? 'failed' : 'uncertain', {
             error: result.outcome === 'failed' ? result.error : 'native_receipt_lost',

package/dist/workspace-runtime/server/http.js

@@ -1,7 +1,7 @@
 import { readObservedFile, withObservedFile } from '../workspaces/revisions.js';
 import { registerWorkspace, revisionScope, workspaceRoot, WorkspaceContextError } from '../workspaces/registry.js';
 import { randomUUID } from 'node:crypto';
-import { workspaceRegistrationRequestSchema, HTTP_STATUS_BY_ERROR, assertLeaseFence, buildHandshakeDocument, capability, findUntrustedRuntimeFields, gitFileRefSchema, hashOperationPayload, sourceAckSchema, operationAcceptRequestSchema, operationKindSchema, operationScopeKey, resolveIdempotentAccept, nativeHistoryReadSchema, runtimeError, runtimeConnectivityDocumentSchema, unavailableRuntimeCapabilities, } from '@playcraft/common/cloud-workspace/runtime';
+import { workspaceRegistrationRequestSchema, HTTP_STATUS_BY_ERROR, assertLeaseFence, buildHandshakeDocument, capability, findUntrustedRuntimeFields, gitFileRefSchema, hashOperationPayload, isLostThreadError, sourceAckSchema, operationAcceptRequestSchema, operationKindSchema, operationScopeKey, resolveIdempotentAccept, nativeHistoryReadSchema, runtimeError, runtimeConnectivityDocumentSchema, unavailableRuntimeCapabilities, } from '@playcraft/common/cloud-workspace/runtime';
 import { controlTokenMatches, extractControlToken } from './auth.js';
 import { applyRuntimeEndpointPatch } from './endpoints.js';
 import { canExecuteKind, executeOperation } from './dispatch.js';
@@ -383,7 +383,12 @@ async function acceptOperation(state, request, response) {
             }));
             return;
         }
-        if (decision.action === 'reuse') {
+        // A turn refused for a lost thread never reached Codex. Sent again with the conversation, it
+        // runs afresh under the same request, so the message is shown and answered only once.
+        const retryWithRecovery = decision.action === 'reuse' && parsed.data.kind === 'session.turn'
+            && Boolean(parsed.data.sessionRecovery) && decision.operation.status === 'failed'
+            && isLostThreadError(decision.operation.error);
+        if (decision.action === 'reuse' && !retryWithRecovery) {
             if (decision.operation.status === 'uncertain') {
                 writeError(response, runtimeError('uncertain_operation', decision.operation.error ?? 'native_receipt_lost', {
                     operationId: decision.operation.operationId,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@playcraft/cli",
-  "version": "0.1.19",
+  "version": "0.1.21",
   "private": false,
   "type": "module",
   "engines": {
@@ -48,8 +48,8 @@
     "@gltf-transform/core": "^4.3.0",
     "@gltf-transform/extensions": "^4.3.0",
     "@gltf-transform/functions": "^4.3.0",
-    "@playcraft/build": "^0.1.19",
-    "@playcraft/common": "^0.1.19",
+    "@playcraft/build": "^0.1.21",
+    "@playcraft/common": "^0.1.21",
     "better-sqlite3-pinned": "npm:better-sqlite3@13.0.3",
     "chokidar": "^4.0.3",
     "commander": "^13.1.0",