@playcraft/cli 0.1.80 → 0.1.82

package/dist/workspace-runtime/codex/model-broker.js

@@ -94,29 +94,9 @@ export class WorkspaceModelBroker {
             activate: (readOnly = false) => {
                 if (!this.valid(entry) || this.routes.get(routeKey) !== route)
                     throw new Error('model_access_denied');
-                const priorFeedback = route.selected?.feedback;
-                let refsBlocked = Boolean(entry.refsBlocked || priorFeedback?.refsBlocked && priorFeedback.clientRequestId === clientRequestId);
-                if (sessionId && clientRequestId) {
-                    const overlaps = (this.state.journal.listOperations?.() ?? []).some(({ operation }) => ['session.turn', 'session.review', 'session.compact'].includes(operation.kind)
-                        && ['dispatched', 'accepted', 'uncertain'].includes(operation.status)
-                        && operation.generation === this.state.config.generation && operation.runtimeEpoch === this.state.runtimeEpoch
-                        && (operation.sessionId !== sessionId || operation.clientRequestId !== clientRequestId));
-                    if (overlaps) {
-                        refsBlocked = true;
-                        // A completed overlapping turn may leave shells alive. Only a later turn gets a new safe boundary.
-                        for (const prepared of this.entries.values()) {
-                            if (prepared.epoch === this.state.runtimeEpoch)
-                                prepared.refsBlocked = true;
-                        }
-                        for (const existing of this.routes.values()) {
-                            if (existing.epoch === this.state.runtimeEpoch && existing.selected?.feedback)
-                                existing.selected.feedback.refsBlocked = true;
-                        }
-                    }
-                }
                 route.lastAdmissionReason = undefined;
                 route.selected = { entry, model: credential.model,
-                    ...(sessionId && clientRequestId ? { feedback: { sessionId, clientRequestId, cwd, boundaryId, readOnly, refsBlocked,
+                    ...(sessionId && clientRequestId ? { feedback: { sessionId, clientRequestId, cwd, boundaryId, readOnly,
                             ...(originCwd ? { originCwd } : {}) } } : {}) };
             },
             model: credential.model,

package/dist/workspace-runtime/codex/permissions.js

@@ -1,3 +1,4 @@
+import { join } from 'node:path';
 export const NATIVE_APPROVALS_REVIEWER = 'user';
 /** Trusted batch policy wins over the adapter-wide fixed policy. A browser mode may only narrow it. */
 export function resolveSessionExecution(cwd, mode, trusted, fixed) {
@@ -22,16 +23,22 @@ export function executionPolicy(cwd, mode, fixed) {
             networkAccess: false, excludeTmpdirEnvVar: true, excludeSlashTmp: true,
         } };
 }
-export function threadExecutionParams(execution) {
+export function threadExecutionParams(execution, shellEnvironment = {}) {
     const sandbox = execution.sandboxPolicy.type === 'readOnly' ? 'read-only'
         : execution.sandboxPolicy.type === 'workspaceWrite' ? 'workspace-write' : 'danger-full-access';
     const policy = execution.sandboxPolicy;
+    const scratch = execution.scratchDir;
     return { cwd: execution.cwd, approvalPolicy: execution.approvalPolicy, approvalsReviewer: NATIVE_APPROVALS_REVIEWER, sandbox,
         config: policy.type === 'workspaceWrite' ? {
             'sandbox_workspace_write.writable_roots': policy.writableRoots,
             'sandbox_workspace_write.network_access': policy.networkAccess,
             'sandbox_workspace_write.exclude_tmpdir_env_var': policy.excludeTmpdirEnvVar,
             'sandbox_workspace_write.exclude_slash_tmp': policy.excludeSlashTmp,
+            ...(scratch ? { 'shell_environment_policy.set': {
+                    ...shellEnvironment, TMPDIR: scratch, TMP: scratch, TEMP: scratch,
+                    XDG_CONFIG_HOME: join(scratch, 'config'), XDG_CACHE_HOME: join(scratch, 'cache'),
+                    ...(execution.chromiumPath ? { PLAYCRAFT_CHROMIUM_PATH: execution.chromiumPath } : {}),
+                } } : {}),
         } : {} };
 }
 export const APPROVAL_METHODS = new Set([

package/dist/workspace-runtime/codex/remix-references-broker.js

@@ -43,11 +43,12 @@ export class WorkspaceRemixReferencesBroker {
             .map((item) => item.operation)
             .filter((operation) => ['session.turn', 'session.review', 'session.compact'].includes(operation.kind) &&
             ACTIVE.has(operation.status) &&
+            operation.sessionId === context.sessionId &&
+            operation.clientRequestId === context.clientRequestId &&
             operation.generation === state.config.generation &&
             operation.runtimeEpoch === state.runtimeEpoch);
         const operation = operations.length === 1 ? operations[0] : undefined;
         if (!valid() ||
-            context.refsBlocked ||
             state.journal.destroyed() ||
             !operation ||
             operation.kind !== 'session.turn' ||

package/dist/workspace-runtime/codex/skill-discovery-broker.js

@@ -24,7 +24,7 @@ export class WorkspaceSkillDiscoveryBroker {
             && operation.generation === state.config.generation && operation.runtimeEpoch === state.runtimeEpoch
             && ['dispatched', 'accepted'].includes(operation.status));
         const operation = operations.length === 1 ? operations[0] : undefined;
-        if (!valid() || context.refsBlocked || state.journal.destroyed() || !operation?.workspaceId || !operation.directoryName
+        if (!valid() || state.journal.destroyed() || !operation?.workspaceId || !operation.directoryName
             || operation.directoryName === 'root' || !operation.nativeThreadId || !operation.nativeTurnId
             || !session || session.threadId !== operation.nativeThreadId || session.activeTurnId !== operation.nativeTurnId
             || session.cwd !== context.cwd || session.workspaceId !== operation.workspaceId

package/dist/workspace-runtime/workspaces/archive.js

@@ -47,7 +47,7 @@ export async function createWorkspaceArchive(root, options = {}) {
                 continue;
             const target = join(directory, entry.name);
             const path = relative(rootReal, target).split(sep).join('/');
-            if (isCredentialFile(path) || /(?:^|\/)\.playcraft\/(?:workspace-context(?:\.[^/]*)?|video-replication)(?:\/|$)/.test(path))
+            if (isCredentialFile(path) || /(?:^|\/)\.playcraft\/(?:workspace-context(?:\.[^/]*)?|video-replication|apk-replication)(?:\/|$)/.test(path))
                 continue;
             if (excludedRoots.some(excluded => inside(excluded, target)))
                 continue;

package/dist/workspace-runtime/workspaces/cli-context.js

@@ -18,6 +18,7 @@ export async function writeWorkspaceCliContext(root, workspaceId) {
         await rename(temporary, join(management, 'workspace-context.json'));
         await excludeFromGit(root, '/.playcraft/workspace-context.json');
         await excludeFromGit(root, '/.playcraft/video-replication/');
+        await excludeFromGit(root, '/.playcraft/apk-replication/');
     }
     finally {
         await rm(temporary, { force: true });

package/dist/workspace-runtime/workspaces/transfer.js

@@ -33,7 +33,7 @@ function gitEnvironment() {
 function excluded(path) {
     const parts = path.split('/');
     return parts.some(part => EXCLUDED.has(part.toLowerCase()) || /^\.playcraft-(?:credential|transfer)-.*\.tmp$/i.test(part)) ||
-        parts.some((part, index) => part === '.playcraft' && /^(?:workspace-context(?:\..*)?|video-replication)$/.test(parts[index + 1] ?? '')) ||
+        parts.some((part, index) => part === '.playcraft' && /^(?:workspace-context(?:\..*)?|video-replication|apk-replication)$/.test(parts[index + 1] ?? '')) ||
         isCredentialFile(path);
 }
 export function transferGit(root, args) {

package/dist/workspace-runtime/workspaces/workspace-shares.js

@@ -12,6 +12,7 @@ export const WORKSPACE_SHARED_PATHS = [
     '.playcraft/skills',
     '.playcraft/skill-artifacts',
     '.playcraft/video-replication',
+    '.playcraft/apk-replication',
     '.playcraft-temp',
     'dist',
 ];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@playcraft/cli",
-  "version": "0.1.80",
+  "version": "0.1.82",
   "private": false,
   "type": "module",
   "engines": {
@@ -57,8 +57,8 @@
     "@gltf-transform/core": "^4.3.0",
     "@gltf-transform/extensions": "^4.3.0",
     "@gltf-transform/functions": "^4.3.0",
-    "@playcraft/build": "0.1.80",
-    "@playcraft/common": "0.1.80",
+    "@playcraft/build": "0.1.82",
+    "@playcraft/common": "0.1.82",
     "better-sqlite3-pinned": "npm:better-sqlite3@13.0.3",
     "chokidar": "^4.0.3",
     "commander": "^13.1.0",